You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
135 lines
4.0 KiB
135 lines
4.0 KiB
8 months ago
|
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
|
||
|
#pragma warning disable
|
||
|
using System;
|
||
|
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Parameters;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Security;
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
|
||
|
|
||
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Signers
|
||
|
{
|
||
|
public class GenericSigner
|
||
|
: ISigner
|
||
|
{
|
||
|
private readonly IAsymmetricBlockCipher engine;
|
||
|
private readonly IDigest digest;
|
||
|
private bool forSigning;
|
||
|
|
||
|
public GenericSigner(
|
||
|
IAsymmetricBlockCipher engine,
|
||
|
IDigest digest)
|
||
|
{
|
||
|
this.engine = engine;
|
||
|
this.digest = digest;
|
||
|
}
|
||
|
|
||
|
public virtual string AlgorithmName
|
||
|
{
|
||
|
get { return "Generic(" + engine.AlgorithmName + "/" + digest.AlgorithmName + ")"; }
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* initialise the signer for signing or verification.
|
||
|
*
|
||
|
* @param forSigning
|
||
|
* true if for signing, false otherwise
|
||
|
* @param parameters
|
||
|
* necessary parameters.
|
||
|
*/
|
||
|
public virtual void Init(bool forSigning, ICipherParameters parameters)
|
||
|
{
|
||
|
this.forSigning = forSigning;
|
||
|
|
||
|
AsymmetricKeyParameter k;
|
||
|
if (parameters is ParametersWithRandom)
|
||
|
{
|
||
|
k = (AsymmetricKeyParameter)((ParametersWithRandom)parameters).Parameters;
|
||
|
}
|
||
|
else
|
||
|
{
|
||
|
k = (AsymmetricKeyParameter)parameters;
|
||
|
}
|
||
|
|
||
|
if (forSigning && !k.IsPrivate)
|
||
|
throw new InvalidKeyException("Signing requires private key.");
|
||
|
|
||
|
if (!forSigning && k.IsPrivate)
|
||
|
throw new InvalidKeyException("Verification requires public key.");
|
||
|
|
||
|
Reset();
|
||
|
|
||
|
engine.Init(forSigning, parameters);
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* update the internal digest with the byte b
|
||
|
*/
|
||
|
public virtual void Update(byte input)
|
||
|
{
|
||
|
digest.Update(input);
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* update the internal digest with the byte array in
|
||
|
*/
|
||
|
public virtual void BlockUpdate(byte[] input, int inOff, int length)
|
||
|
{
|
||
|
digest.BlockUpdate(input, inOff, length);
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* Generate a signature for the message we've been loaded with using the key
|
||
|
* we were initialised with.
|
||
|
*/
|
||
|
public virtual byte[] GenerateSignature()
|
||
|
{
|
||
|
if (!forSigning)
|
||
|
throw new InvalidOperationException("GenericSigner not initialised for signature generation.");
|
||
|
|
||
|
byte[] hash = new byte[digest.GetDigestSize()];
|
||
|
digest.DoFinal(hash, 0);
|
||
|
|
||
|
return engine.ProcessBlock(hash, 0, hash.Length);
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* return true if the internal state represents the signature described in
|
||
|
* the passed in array.
|
||
|
*/
|
||
|
public virtual bool VerifySignature(byte[] signature)
|
||
|
{
|
||
|
if (forSigning)
|
||
|
throw new InvalidOperationException("GenericSigner not initialised for verification");
|
||
|
|
||
|
byte[] hash = new byte[digest.GetDigestSize()];
|
||
|
digest.DoFinal(hash, 0);
|
||
|
|
||
|
try
|
||
|
{
|
||
|
byte[] sig = engine.ProcessBlock(signature, 0, signature.Length);
|
||
|
|
||
|
// Extend with leading zeroes to match the digest size, if necessary.
|
||
|
if (sig.Length < hash.Length)
|
||
|
{
|
||
|
byte[] tmp = new byte[hash.Length];
|
||
|
Array.Copy(sig, 0, tmp, tmp.Length - sig.Length, sig.Length);
|
||
|
sig = tmp;
|
||
|
}
|
||
|
|
||
|
return Arrays.ConstantTimeAreEqual(sig, hash);
|
||
|
}
|
||
|
catch (Exception)
|
||
|
{
|
||
|
return false;
|
||
|
}
|
||
|
}
|
||
|
|
||
|
public virtual void Reset()
|
||
|
{
|
||
|
digest.Reset();
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
#pragma warning restore
|
||
|
#endif
|