use RSA-raw for SU3 verification

This commit is contained in:
orignal 2014-12-14 22:45:09 -05:00
parent 52a0b9ca03
commit ef73353a0a

View File

@ -11,7 +11,7 @@
#include "Reseed.h" #include "Reseed.h"
#include "Log.h" #include "Log.h"
#include "Identity.h" #include "Identity.h"
#include "Signature.h" #include "CryptoConst.h"
#include "NetDb.h" #include "NetDb.h"
#include "util.h" #include "util.h"
@ -231,7 +231,14 @@ namespace data
s.read ((char *)tbs, tbsLen); s.read ((char *)tbs, tbsLen);
uint8_t * signature = new uint8_t[signatureLength]; uint8_t * signature = new uint8_t[signatureLength];
s.read ((char *)signature, signatureLength); s.read ((char *)signature, signatureLength);
if (!verifier.Verify (tbs, tbsLen, signature)) // RSA-raw
CryptoPP::Integer enSig (a_exp_b_mod_c (CryptoPP::Integer (signature, 512),
CryptoPP::Integer (i2p::crypto::rsae), CryptoPP::Integer (it->second, 512)));
uint8_t enSigBuf[512];
enSig.Encode (enSigBuf, 512);
uint8_t hash[64];
CryptoPP::SHA512().CalculateDigest (hash, tbs, tbsLen); // TODO: implement in one pass
if (memcmp (enSigBuf + (512-64), hash, 64)) // TODO: use PKCS#1 v1.5 padding
LogPrint (eLogWarning, "SU3 signature verification failed"); LogPrint (eLogWarning, "SU3 signature verification failed");
delete[] signature; delete[] signature;
delete[] tbs; delete[] tbs;