问题：
OpenSSL无法验证ECDSA签名C，C#正确验证
易琛
我传入以下内容（摘要/哈希是SHA1）：
hash = HexToBytes("9E712647173B435CF691537A76C2F1423E4A18ED");
signature = Base64ToBytes("ASLQ3wguSDkJCfFWE3kvBfp7BDNjdajl2ezIetR6DsiacFVASvEAw9v6S3IM0LnaqAV2BTe7eBcRmef/qb2/Hw==");
pubKey16 = "04C2D0A868C35F475208B6C33A58D4AC275190F1A9D5804456FF07C42605716EF748FB4FD246163E851DBE9A942569741F54341A7C85F394B20777AB7FE526096A";//Actual key lacks 04 at front but I'm guessing OpenSSL needs this?
到此功能：
int Misc::verify_signature(unsigned char* hash, std::vector<unsigned char> signature, char* cPubKey16) {
printf("Signature length: %d\n", signature.size());
int function_status = -1;
EC_KEY *eckey = NULL;
EC_POINT *pub_key;
const EC_GROUP *ecgroup;
SSL_library_init();
SSL_load_error_strings();
std::string pubKeyS(cPubKey16);
std::vector<unsigned char> pubKeyVC = Misc::hexToBytes(pubKeyS);
const unsigned char* pubKeyVCp = pubKeyVC.data();
const unsigned char** pubKeyVCpp = &pubKeyVCp;
//NID_secp256k1 is not r1 which is what .NET uses
eckey = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
//Load our public key
eckey = o2i_ECPublicKey(&eckey, pubKeyVCpp, pubKeyVC.size());
if (!EC_KEY_check_key(eckey)) {
printf("EC_KEY_check_key failed:\n");
printf("%s\n", ERR_error_string(ERR_get_error(), NULL));
}
else {
printf("Public key verified OK\n");
}
//Create the properly formatted signature
ECDSA_SIG* ec_sig = ECDSA_SIG_new();
//Split signature into R and S value
//Set R
if (NULL == BN_bin2bn(&signature[0], 32, (ec_sig->r))) {
printf("Failed to set R value in EC Signature\n");
function_status = -1;
}
printf("post r :%s\n", BN_bn2hex(ec_sig->r));
//Set S
if (NULL == BN_bin2bn(&signature[0] + 32, 32, (ec_sig->s))) {
printf("Failed to set S value in EC Signature\n");
function_status = -1;
}
printf("post s :%s\n", BN_bn2hex(ec_sig->s));
//Encode the signature
int sig_size = i2d_ECDSA_SIG(ec_sig, NULL);
unsigned char *sig_bytes =(unsigned char *) malloc(sig_size);
unsigned char *p;
printf("Orig Sig Size: %d\n", sig_size);
p = sig_bytes;
int new_sig_size = i2d_ECDSA_SIG(ec_sig, &p);
printf("New Sig Size: %d\n", new_sig_size);
int verify_status = ECDSA_do_verify(hash, 20, ec_sig, eckey);
printf("Verify status: %d\n", verify_status);
const int verify_success = 1;
if (verify_success != verify_status)
{
if(verify_status==-1)handleErrors();
printf("Failed to verify EC Signature\n");
function_status = -1;
}
else
{
printf("Verifed EC Signature\n");
function_status = 1;
}
//EC_GROUP_free(ecgroup);//Might fail as Ecgroup is constant TODO
EC_KEY_free(eckey);
return function_status;
}
但我无法在OpenSSL中验证签名（verify_success为0），即使完全相同的数据在C#中验证成功。
关于我为什么或做错了什么的任何想法？
C#中的公钥是：
4543533120000000C2D0A868C35F475208B6C33A58D4AC275190F1A9D5804456FF07C42605716EF748FB4FD246163E851DBE9A942569741F54341A7C85F394B20777AB7FE526096A
我假设4543533120000000是。NET特定的东西，所以我只是把04前置到它的其余部分。
这是用于验证签名的C#代码，它成功地做到了（dataBytes的SHA1在两个程序中是相同的）...
HashAlgorithm hashMan2 = new SHA1Managed();
byte[] dataBytes = hashMan2.ComputeHash(Encoding.ASCII.GetBytes("H4sIAAAAAAAEADPQMQBCQzBJDsSm0xCMDTFUYYpQAjFNAIsAAOvFhT3RAAAA"));
String sig = "ASLQ3wguSDkJCfFWE3kvBfp7BDNjdajl2ezIetR6DsiacFVASvEAw9v6S3IM0LnaqAV2BTe7eBcRmef/qb2/Hw==";
byte[] readPublicKey2 = Convert.FromBase64String("RUNTMSAAAADC0Khow19HUgi2wzpY1KwnUZDxqdWARFb/B8QmBXFu90j7T9JGFj6FHb6alCVpdB9UNBp8hfOUsgd3q3/lJglq");
Console.WriteLine("Public key file is read as:");
Console.WriteLine(Convert.ToBase64String(readPublicKey2));
using (ECDsaCng ecsdKey = new ECDsaCng(CngKey.Import(readPublicKey2, CngKeyBlobFormat.EccPublicBlob)))
{
if (ecsdKey.VerifyData(dataBytes, Convert.FromBase64String(sig)))
{
Console.WriteLine("Data and Signature have been verified.");
}
else
{
Console.WriteLine("Data and Signature could not be verified!");
}
}
感谢您的帮助。
共有1个答案
哈雅珺
我发现了这个问题，我使用的是。NET函数ECDSA.SignData，但这实际上是在输入之前散列数据（ECDsaCng.HashAlgorithm），我假设它将散列作为输入，但正确的函数是ECDSA.SignHash，我已经切换到SignHash，我的新签名/消息验证正确。（请注意，根据您的版本，这可能对您有所不同。NET，请务必检查您版本的API）
如果它会帮助某人，这是我的草稿工作功能（这里还有一些额外/不需要的东西，可能会帮助您）：
int Misc::verify_signature(std::vector<unsigned char> hash, std::vector<unsigned char> signature, char* cPubKey16) {
printf("Signature length: %d\n", signature.size());
int function_status = -1;
EC_KEY *eckey = NULL;
EC_POINT *pub_key;
const EC_GROUP *ecgroup;
SSL_library_init();
SSL_load_error_strings();
std::string pubKeyS(cPubKey16);
std::vector<unsigned char> pubKeyVC = Misc::hexToBytes(pubKeyS);
printf("Raw PubKey Bytes: \n");
for (unsigned char t : pubKeyVC) {
printf("%d\n", t);
}
printf("Raw PubKey Length:%d \n", pubKeyVC.size());
const unsigned char* pubKeyVCp = pubKeyVC.data();
const unsigned char** pubKeyVCpp = &pubKeyVCp;
//NID_secp256k1 is not r1 which is what .NET uses
eckey = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
EC_KEY_set_asn1_flag(eckey, OPENSSL_EC_NAMED_CURVE);
eckey = o2i_ECPublicKey(&eckey, pubKeyVCpp, pubKeyVC.size());
if (!EC_KEY_check_key(eckey)) {
printf("EC_KEY_check_key failed:\n");
printf("%s\n", ERR_error_string(ERR_get_error(), NULL));
}
else {
printf("Public key verified OK\n");
}
//Create the properly formatted signature
ECDSA_SIG* ec_sig = ECDSA_SIG_new();
//Split signature into R and S value
//Set R
if (NULL == BN_bin2bn(&signature[0], 32, (ec_sig->r))) {
printf("Failed to set R value in EC Signature\n");
function_status = -1;
}
printf("post r :%s\n", BN_bn2hex(ec_sig->r));
////Try to pad S
//std::vector<unsigned char> sPadded = std::vector<unsigned char>(&signature[32], &signature[32] + 32);
//sPadded.insert(sPadded.begin(), '0');
//sPadded.insert(sPadded.begin(), '0');
//Set S
if (NULL == BN_bin2bn(&signature[32], 32, (ec_sig->s))) {
printf("Failed to set S value in EC Signature\n");
function_status = -1;
}
printf("post s :%s\n", BN_bn2hex(ec_sig->s));
//Encode the signature
std::vector<unsigned char> rValue = std::vector<unsigned char>(&signature[0], &signature[0] + 32);
std::vector<unsigned char> sValue = std::vector<unsigned char>(&signature[32], &signature[32] + 32);
std::vector<unsigned char> derEncoded = std::vector<unsigned char>();
derEncoded.push_back(0x30);
//Push payload length into this position later
//Seperator
derEncoded.push_back(0x02);
//Length of rValue
if (rValue.at(0) >= 0x80) {
derEncoded.push_back(rValue.size() + 1);
}
else {
derEncoded.push_back(rValue.size());
}
//Push rValue bytes in
int c = 0;
for (unsigned char b : rValue) {
if (b >= 0x80 && c == 0) {
derEncoded.push_back(0);
}
derEncoded.push_back(b);
c++;
}
//Seperator
derEncoded.push_back(0x02);
//Length of sValue
if (sValue.at(0) >= 0x80) {
derEncoded.push_back(sValue.size() + 1);
}
else {
derEncoded.push_back(sValue.size());
}
//Push sValue bytes in
c = 0;
for (unsigned char b : sValue) {
if (b >= 0x80 && c == 0) {
derEncoded.push_back(0);
}
derEncoded.push_back(b);
c++;
}
//Insert payload length in
int len = derEncoded.size() - 1;
derEncoded.insert(derEncoded.begin() + 1, len);
printf("Encoded Sig Len: %d\n", derEncoded.size());
printf("Encoded Sig64: %s\n", Misc::base64_encode_d(&derEncoded).c_str());
//unsigned char *p = (unsigned char*)malloc(ECDSA_size(eckey));
//int new_sig_size = i2d_ECDSA_SIG(ec_sig, &p);
//printf("New Sig Size: %d\n", new_sig_size);
//for (int x = 0; x < new_sig_size; x++) {
// printf("%d\n", p[x]);
//}
//Dump DER encoded sig
//printf("DER encoded signature\n");
//const unsigned char* pp = (unsigned char*) malloc(new_sig_size);
//d2i_ECDSA_SIG(&ec_sig, &pp, new_sig_size);
//std::vector<unsigned char> ppVC = std::vector<unsigned char>(pp, pp+new_sig_size);
//printf("Base64: %s\n", Misc::base64_encode_d(&ppVC).c_str());
//ECDSA_SIG *signature = ECDSA_do_sign(hash, 20, eckey);
//ECDSA_size(eckey);
int verify_status = ECDSA_verify(0, hash.data(), hash.size(), derEncoded.data(), derEncoded.size(), eckey);//ECDSA_do_verify(hash.data(), hash.size(), ec_sig, eckey);
printf("Verify status: %d\n", verify_status);
const int verify_success = 1;
if (verify_success != verify_status)
{
if (verify_status == -1)
{
handleErrors();
}
printf("Failed to verify EC Signature\n");
function_status = -1;
}
else
{
printf("Verifed EC Signature\n");
function_status = 1;
}
//EC_GROUP_free(ecgroup);//Might fail as Ecgroup is constant TODO
EC_KEY_free(eckey);
return function_status;
}
类似资料：
-
我有一个使用C++中的openSSL生成的keypair，我正在使用它在一个严格使用RSACryptoServiceProvider（没有BouncyCastle等）的C#服务器上对验证消息进行签名。我使用PKCS#1 SHA256生成签名，然后以十六进制的形式与公钥一起传输签名。问题是无法在服务器上验证签名。我已经尝试删除了头，上面写着“----开始RSA公钥-----”等等。但是还没有结果。生
-
我想创建一个签名并使用openssl验证它。我想有我的签名的十六进制输出。 这是我的密码 我得到这个错误： 如果我在创建签名的过程中删除了-hex，它就可以工作了。
-
我正在尝试使用公钥验证散列的ECDSA签名。我写了一个小的围棋程序，成功地做到了这一点，但是我不能把它移植到C语言中。 这是我的输入数据： < li >公钥:< code > mfkwewyhkozizj 0 caqyikozij0 dackcdqgaedd 9 vxm phjv 4 vofo 0 zofplr r5 iczxquxsr 9 eka ouo 9 b 7 wl 1 daggi 0 e
-
我正在尝试在python中使用ECDSA验证比特币签名，但发现它非常困难，许多尝试已经失败了。 参数： 注意：我已经根据ECDSA的要求将签名从base64转换为hexstring。每当我试图验证它时，它会说： 预期64字节签名(128十六进制字符串)，提供了65字节签名(130十六进制字符串) 我查看了许多关于ECDSA的stackoverflow问题，但没有一个答案与我的qs 100%相关。感
-
我试图使用javascript创建ECDSA算法的密钥对，签名消息，然后在服务器端验证它（使用Java）。 示例javascript代码： 例如： 我做错了什么？
-
我想验证C中的签名，这是我在Java中签名的随机签名。 以下是我用于签名的Java代码： 现在我想用C验证签名，我需要C代码等于以下Java代码： 到目前为止，我所尝试的： 此方法返回0，但我确信随机是用正确的键签名的，并且该方法需要返回1...我想我的验证用的C代码有问题。也许你们中的一个知道如何做对。 --解决--