cmail_rpgp/crypto/
dsa.rs

1use dsa::{Components, Signature, SigningKey, VerifyingKey};
2use num_bigint::BigUint;
3use rand::{CryptoRng, Rng};
4use signature::hazmat::PrehashVerifier;
5use zeroize::{Zeroize, ZeroizeOnDrop};
6
7use crate::crypto::hash::HashAlgorithm;
8use crate::crypto::Signer;
9use crate::errors::Result;
10use crate::types::{PlainSecretParams, PublicParams};
11
12pub use dsa::KeySize;
13
14/// Secret key for DSA.
15#[derive(Clone, PartialEq, Eq, Zeroize, ZeroizeOnDrop, derive_more::Debug)]
16pub struct SecretKey {
17    #[debug("..")]
18    pub x: BigUint,
19}
20
21impl Signer for SecretKey {
22    fn sign(
23        &self,
24        hash_algorithm: HashAlgorithm,
25        digest: &[u8],
26        pub_params: &PublicParams,
27    ) -> Result<Vec<Vec<u8>>> {
28        let PublicParams::DSA { p, q, g, y } = pub_params else {
29            bail!("invalid public params");
30        };
31        let components = Components::from_components(p.into(), q.into(), g.into())?;
32        let verifying_key = VerifyingKey::from_components(components, y.into())?;
33        let signing_key = SigningKey::from_components(verifying_key, self.x.clone())?;
34
35        let signature = match hash_algorithm {
36            HashAlgorithm::MD5 => signing_key.sign_prehashed_rfc6979::<md5::Md5>(digest),
37
38            // FIXME: Use sha1_checked once it implements BlockSizeUser
39            // (See https://github.com/RustCrypto/hashes/pull/582)
40            HashAlgorithm::SHA1 => signing_key.sign_prehashed_rfc6979::<sha1::Sha1>(digest),
41
42            HashAlgorithm::RIPEMD160 => {
43                signing_key.sign_prehashed_rfc6979::<ripemd::Ripemd160>(digest)
44            }
45            HashAlgorithm::SHA2_256 => signing_key.sign_prehashed_rfc6979::<sha2::Sha256>(digest),
46            HashAlgorithm::SHA2_384 => signing_key.sign_prehashed_rfc6979::<sha2::Sha384>(digest),
47            HashAlgorithm::SHA2_512 => signing_key.sign_prehashed_rfc6979::<sha2::Sha512>(digest),
48            HashAlgorithm::SHA2_224 => signing_key.sign_prehashed_rfc6979::<sha2::Sha224>(digest),
49            HashAlgorithm::SHA3_256 => signing_key.sign_prehashed_rfc6979::<sha3::Sha3_256>(digest),
50            HashAlgorithm::SHA3_512 => signing_key.sign_prehashed_rfc6979::<sha3::Sha3_512>(digest),
51            _ => unimplemented_err!("hasher {:?}", hash_algorithm),
52        }?;
53
54        Ok(vec![
55            signature.r().to_bytes_be(),
56            signature.s().to_bytes_be(),
57        ])
58    }
59}
60
61/// Verify a DSA signature.
62pub fn verify(
63    p: BigUint,
64    q: BigUint,
65    g: BigUint,
66    y: BigUint,
67    hashed: &[u8],
68    r: BigUint,
69    s: BigUint,
70) -> Result<()> {
71    let components = Components::from_components(p, q, g)?;
72    let verifying_key = VerifyingKey::from_components(components, y)?;
73    let signature = Signature::from_components(r, s)?;
74
75    verifying_key.verify_prehash(hashed, &signature)?;
76
77    Ok(())
78}
79
80/// Generate a DSA KeyPair.
81pub fn generate_key<R: Rng + CryptoRng>(
82    mut rng: R,
83    key_size: KeySize,
84) -> Result<(PublicParams, PlainSecretParams)> {
85    let components = Components::generate(&mut rng, key_size);
86    let signing_key = SigningKey::generate(&mut rng, components);
87    let verifying_key = signing_key.verifying_key();
88    let p = verifying_key.components().p();
89    let q = verifying_key.components().q();
90    let g = verifying_key.components().g();
91    let y = verifying_key.y();
92
93    let x = signing_key.x();
94    let public_params = PublicParams::DSA {
95        p: p.into(),
96        q: q.into(),
97        g: g.into(),
98        y: y.into(),
99    };
100    let secret_params = PlainSecretParams::DSA(x.into());
101    Ok((public_params, secret_params))
102}
103
104#[cfg(test)]
105mod test {
106    use super::*;
107
108    use num_traits::Num;
109
110    fn hex_num(s: &str) -> BigUint {
111        BigUint::from_str_radix(s, 16).expect("invalid hex")
112    }
113
114    fn hash(hash_algorithm: HashAlgorithm, text: &str) -> Vec<u8> {
115        hash_algorithm
116            .digest(text.as_bytes())
117            .expect("unable to hash")
118    }
119
120    /// Test vectors from https://tools.ietf.org/html/rfc6979#appendix-A.2.1
121    #[test]
122    fn test_dsa_1024() {
123        let _ = pretty_env_logger::try_init();
124
125        let p = hex_num(
126            "86F5CA03DCFEB225063FF830A0C769B9DD9D6153AD91D7CE27F787C43278B447\
127             E6533B86B18BED6E8A48B784A14C252C5BE0DBF60B86D6385BD2F12FB763ED88\
128             73ABFD3F5BA2E0A8C0A59082EAC056935E529DAF7C610467899C77ADEDFC846C\
129             881870B7B19B2B58F9BE0521A17002E3BDD6B86685EE90B3D9A1B02B782B1779",
130        );
131
132        let q = hex_num("996F967F6C8E388D9E28D01E205FBA957A5698B1");
133
134        let g = hex_num(
135            "07B0F92546150B62514BB771E2A0C0CE387F03BDA6C56B505209FF25FD3C133D\
136             89BBCD97E904E09114D9A7DEFDEADFC9078EA544D2E401AEECC40BB9FBBF78FD\
137             87995A10A1C27CB7789B594BA7EFB5C4326A9FE59A070E136DB77175464ADCA4\
138             17BE5DCE2F40D10A46A3A3943F26AB7FD9C0398FF8C76EE0A56826A8A88F1DBD",
139        );
140
141        let x = hex_num("411602CB19A6CCC34494D79D98EF1E7ED5AF25F7");
142
143        let y = hex_num(
144            "5DF5E01DED31D0297E274E1691C192FE5868FEF9E19A84776454B100CF16F653\
145             92195A38B90523E2542EE61871C0440CB87C322FC4B4D2EC5E1E7EC766E1BE8D\
146             4CE935437DC11C3C8FD426338933EBFE739CB3465F4D3668C5E473508253B1E6\
147             82F65CBDC4FAE93C2EA212390E54905A86E2223170B44EAA7DA5DD9FFCFB7F3B",
148        );
149
150        let check =
151            |hash_algorithm: HashAlgorithm, text: &str, _k: BigUint, r: BigUint, s: BigUint| {
152                let hashed = hash(hash_algorithm, text);
153                let key = SecretKey { x: x.clone() };
154                let params = PublicParams::DSA {
155                    p: p.clone().into(),
156                    q: q.clone().into(),
157                    g: g.clone().into(),
158                    y: y.clone().into(),
159                };
160                let res = key
161                    .sign(hash_algorithm, &hashed, &params)
162                    .expect("failed to sign");
163                let new_r = res[0].clone();
164                let new_s = res[1].clone();
165                assert_eq!((new_r, new_s), (r.to_bytes_be(), s.to_bytes_be()));
166                verify(p.clone(), q.clone(), g.clone(), y.clone(), &hashed, r, s)
167                    .expect("failed to verify");
168            };
169
170        check(
171            HashAlgorithm::SHA1,
172            "sample",
173            hex_num("7BDB6B0FF756E1BB5D53583EF979082F9AD5BD5B"),
174            hex_num("2E1A0C2562B2912CAAF89186FB0F42001585DA55"),
175            hex_num("29EFB6B0AFF2D7A68EB70CA313022253B9A88DF5"),
176        );
177        check(
178            HashAlgorithm::SHA2_224,
179            "sample",
180            hex_num("562097C06782D60C3037BA7BE104774344687649"),
181            hex_num("4BC3B686AEA70145856814A6F1BB53346F02101E"),
182            hex_num("410697B92295D994D21EDD2F4ADA85566F6F94C1"),
183        );
184        check(
185            HashAlgorithm::SHA2_256,
186            "sample",
187            hex_num("519BA0546D0C39202A7D34D7DFA5E760B318BCFB"),
188            hex_num("81F2F5850BE5BC123C43F71A3033E9384611C545"),
189            hex_num("4CDD914B65EB6C66A8AAAD27299BEE6B035F5E89"),
190        );
191        check(
192            HashAlgorithm::SHA2_384,
193            "sample",
194            hex_num("95897CD7BBB944AA932DBC579C1C09EB6FCFC595"),
195            hex_num("07F2108557EE0E3921BC1774F1CA9B410B4CE65A"),
196            hex_num("54DF70456C86FAC10FAB47C1949AB83F2C6F7595"),
197        );
198        check(
199            HashAlgorithm::SHA2_512,
200            "sample",
201            hex_num("09ECE7CA27D0F5A4DD4E556C9DF1D21D28104F8B"),
202            hex_num("16C3491F9B8C3FBBDD5E7A7B667057F0D8EE8E1B"),
203            hex_num("02C36A127A7B89EDBB72E4FFBC71DABC7D4FC69C"),
204        );
205        check(
206            HashAlgorithm::SHA1,
207            "test",
208            hex_num("5C842DF4F9E344EE09F056838B42C7A17F4A6433"),
209            hex_num("42AB2052FD43E123F0607F115052A67DCD9C5C77"),
210            hex_num("183916B0230D45B9931491D4C6B0BD2FB4AAF088"),
211        );
212        check(
213            HashAlgorithm::SHA2_224,
214            "test",
215            hex_num("4598B8EFC1A53BC8AECD58D1ABBB0C0C71E67297"),
216            hex_num("6868E9964E36C1689F6037F91F28D5F2C30610F2"),
217            hex_num("49CEC3ACDC83018C5BD2674ECAAD35B8CD22940F"),
218        );
219        check(
220            HashAlgorithm::SHA2_256,
221            "test",
222            hex_num("5A67592E8128E03A417B0484410FB72C0B630E1A"),
223            hex_num("22518C127299B0F6FDC9872B282B9E70D0790812"),
224            hex_num("6837EC18F150D55DE95B5E29BE7AF5D01E4FE160"),
225        );
226        check(
227            HashAlgorithm::SHA2_384,
228            "test",
229            hex_num("220156B761F6CA5E6C9F1B9CF9C24BE25F98CD89"),
230            hex_num("854CF929B58D73C3CBFDC421E8D5430CD6DB5E66"),
231            hex_num("91D0E0F53E22F898D158380676A871A157CDA622"),
232        );
233        check(
234            HashAlgorithm::SHA2_512,
235            "test",
236            hex_num("65D2C2EEB175E370F28C75BFCDC028D22C7DBE9C"),
237            hex_num("8EA47E475BA8AC6F2D821DA3BD212D11A3DEB9A0"),
238            hex_num("7C670C7AD72B6C050C109E1790008097125433E8"),
239        );
240    }
241
242    /// Test vectors from https://tools.ietf.org/html/rfc6979#appendix-A.2.2
243    #[test]
244    fn test_dsa_2048() {
245        let _ = pretty_env_logger::try_init();
246
247        let p = hex_num(
248            "9DB6FB5951B66BB6FE1E140F1D2CE5502374161FD6538DF1648218642F0B5C48\
249             C8F7A41AADFA187324B87674FA1822B00F1ECF8136943D7C55757264E5A1A44F\
250             FE012E9936E00C1D3E9310B01C7D179805D3058B2A9F4BB6F9716BFE6117C6B5\
251             B3CC4D9BE341104AD4A80AD6C94E005F4B993E14F091EB51743BF33050C38DE2\
252             35567E1B34C3D6A5C0CEAA1A0F368213C3D19843D0B4B09DCB9FC72D39C8DE41\
253             F1BF14D4BB4563CA28371621CAD3324B6A2D392145BEBFAC748805236F5CA2FE\
254             92B871CD8F9C36D3292B5509CA8CAA77A2ADFC7BFD77DDA6F71125A7456FEA15\
255             3E433256A2261C6A06ED3693797E7995FAD5AABBCFBE3EDA2741E375404AE25B",
256        );
257
258        let q = hex_num("F2C3119374CE76C9356990B465374A17F23F9ED35089BD969F61C6DDE9998C1F");
259
260        let g = hex_num(
261            "5C7FF6B06F8F143FE8288433493E4769C4D988ACE5BE25A0E24809670716C613\
262             D7B0CEE6932F8FAA7C44D2CB24523DA53FBE4F6EC3595892D1AA58C4328A06C4\
263             6A15662E7EAA703A1DECF8BBB2D05DBE2EB956C142A338661D10461C0D135472\
264             085057F3494309FFA73C611F78B32ADBB5740C361C9F35BE90997DB2014E2EF5\
265             AA61782F52ABEB8BD6432C4DD097BC5423B285DAFB60DC364E8161F4A2A35ACA\
266             3A10B1C4D203CC76A470A33AFDCBDD92959859ABD8B56E1725252D78EAC66E71\
267             BA9AE3F1DD2487199874393CD4D832186800654760E1E34C09E4D155179F9EC0\
268             DC4473F996BDCE6EED1CABED8B6F116F7AD9CF505DF0F998E34AB27514B0FFE7",
269        );
270
271        let x = hex_num("69C7548C21D0DFEA6B9A51C9EAD4E27C33D3B3F180316E5BCAB92C933F0E4DBC");
272
273        let y = hex_num(
274            "667098C654426C78D7F8201EAC6C203EF030D43605032C2F1FA937E5237DBD94\
275             9F34A0A2564FE126DC8B715C5141802CE0979C8246463C40E6B6BDAA2513FA61\
276             1728716C2E4FD53BC95B89E69949D96512E873B9C8F8DFD499CC312882561ADE\
277             CB31F658E934C0C197F2C4D96B05CBAD67381E7B768891E4DA3843D24D94CDFB\
278             5126E9B8BF21E8358EE0E0A30EF13FD6A664C0DCE3731F7FB49A4845A4FD8254\
279             687972A2D382599C9BAC4E0ED7998193078913032558134976410B89D2C171D1\
280             23AC35FD977219597AA7D15C1A9A428E59194F75C721EBCBCFAE44696A499AFA\
281             74E04299F132026601638CB87AB79190D4A0986315DA8EEC6561C938996BEADF",
282        );
283
284        let check =
285            |hash_algorithm: HashAlgorithm, text: &str, _k: BigUint, r: BigUint, s: BigUint| {
286                let hashed = hash(hash_algorithm, text);
287                let key = SecretKey { x: x.clone() };
288                let params = PublicParams::DSA {
289                    p: p.clone().into(),
290                    q: q.clone().into(),
291                    g: g.clone().into(),
292                    y: y.clone().into(),
293                };
294                let res = key
295                    .sign(hash_algorithm, &hashed, &params)
296                    .expect("failed to sign");
297                let new_r = res[0].clone();
298                let new_s = res[1].clone();
299                assert_eq!((new_r, new_s), (r.to_bytes_be(), s.to_bytes_be()));
300                verify(p.clone(), q.clone(), g.clone(), y.clone(), &hashed, r, s)
301                    .expect("failed to verify");
302            };
303
304        check(
305            HashAlgorithm::SHA1,
306            "sample",
307            hex_num("888FA6F7738A41BDC9846466ABDB8174C0338250AE50CE955CA16230F9CBD53E"),
308            hex_num("3A1B2DBD7489D6ED7E608FD036C83AF396E290DBD602408E8677DAABD6E7445A"),
309            hex_num("D26FCBA19FA3E3058FFC02CA1596CDBB6E0D20CB37B06054F7E36DED0CDBBCCF"),
310        );
311        check(
312            HashAlgorithm::SHA2_224,
313            "sample",
314            hex_num("BC372967702082E1AA4FCE892209F71AE4AD25A6DFD869334E6F153BD0C4D806"),
315            hex_num("DC9F4DEADA8D8FF588E98FED0AB690FFCE858DC8C79376450EB6B76C24537E2C"),
316            hex_num("A65A9C3BC7BABE286B195D5DA68616DA8D47FA0097F36DD19F517327DC848CEC"),
317        );
318        check(
319            HashAlgorithm::SHA2_256,
320            "sample",
321            hex_num("8926A27C40484216F052F4427CFD5647338B7B3939BC6573AF4333569D597C52"),
322            hex_num("EACE8BDBBE353C432A795D9EC556C6D021F7A03F42C36E9BC87E4AC7932CC809"),
323            hex_num("7081E175455F9247B812B74583E9E94F9EA79BD640DC962533B0680793A38D53"),
324        );
325        check(
326            HashAlgorithm::SHA2_384,
327            "sample",
328            hex_num("C345D5AB3DA0A5BCB7EC8F8FB7A7E96069E03B206371EF7D83E39068EC564920"),
329            hex_num("B2DA945E91858834FD9BF616EBAC151EDBC4B45D27D0DD4A7F6A22739F45C00B"),
330            hex_num("19048B63D9FD6BCA1D9BAE3664E1BCB97F7276C306130969F63F38FA8319021B"),
331        );
332        check(
333            HashAlgorithm::SHA2_512,
334            "sample",
335            hex_num("5A12994431785485B3F5F067221517791B85A597B7A9436995C89ED0374668FC"),
336            hex_num("2016ED092DC5FB669B8EFB3D1F31A91EECB199879BE0CF78F02BA062CB4C942E"),
337            hex_num("D0C76F84B5F091E141572A639A4FB8C230807EEA7D55C8A154A224400AFF2351"),
338        );
339        check(
340            HashAlgorithm::SHA1,
341            "test",
342            hex_num("6EEA486F9D41A037B2C640BC5645694FF8FF4B98D066A25F76BE641CCB24BA4F"),
343            hex_num("C18270A93CFC6063F57A4DFA86024F700D980E4CF4E2CB65A504397273D98EA0"),
344            hex_num("414F22E5F31A8B6D33295C7539C1C1BA3A6160D7D68D50AC0D3A5BEAC2884FAA"),
345        );
346        check(
347            HashAlgorithm::SHA2_224,
348            "test",
349            hex_num("06BD4C05ED74719106223BE33F2D95DA6B3B541DAD7BFBD7AC508213B6DA6670"),
350            hex_num("272ABA31572F6CC55E30BF616B7A265312018DD325BE031BE0CC82AA17870EA3"),
351            hex_num("E9CC286A52CCE201586722D36D1E917EB96A4EBDB47932F9576AC645B3A60806"),
352        );
353        check(
354            HashAlgorithm::SHA2_256,
355            "test",
356            hex_num("1D6CE6DDA1C5D37307839CD03AB0A5CBB18E60D800937D67DFB4479AAC8DEAD7"),
357            hex_num("8190012A1969F9957D56FCCAAD223186F423398D58EF5B3CEFD5A4146A4476F0"),
358            hex_num("7452A53F7075D417B4B013B278D1BB8BBD21863F5E7B1CEE679CF2188E1AB19E"),
359        );
360        check(
361            HashAlgorithm::SHA2_384,
362            "test",
363            hex_num("206E61F73DBE1B2DC8BE736B22B079E9DACD974DB00EEBBC5B64CAD39CF9F91C"),
364            hex_num("239E66DDBE8F8C230A3D071D601B6FFBDFB5901F94D444C6AF56F732BEB954BE"),
365            hex_num("6BD737513D5E72FE85D1C750E0F73921FE299B945AAD1C802F15C26A43D34961"),
366        );
367        check(
368            HashAlgorithm::SHA2_512,
369            "test",
370            hex_num("AFF1651E4CD6036D57AA8B2A05CCF1A9D5A40166340ECBBDC55BE10B568AA0AA"),
371            hex_num("89EC4BB1400ECCFF8E7D9AA515CD1DE7803F2DAFF09693EE7FD1353E90A68307"),
372            hex_num("C9F0BDABCC0D880BB137A994CC7F3980CE91CC10FAF529FC46565B15CEA854E1"),
373        );
374    }
375}
cmail_rpgp/crypto/dsa.rs

cmail_rpgp/crypto/
dsa.rs
