ECDsaSigner.cs :  » PDF » iTextSharp » Org » BouncyCastle » Crypto » Signers » C# / CSharp Open Source

Home
C# / CSharp Open Source
1.2.6.4 mono .net core
2.2.6.4 mono core
3.Aspect Oriented Frameworks
4.Bloggers
5.Build Systems
6.Business Application
7.Charting Reporting Tools
8.Chat Servers
9.Code Coverage Tools
10.Content Management Systems CMS
11.CRM ERP
12.Database
13.Development
14.Email
15.Forum
16.Game
17.GIS
18.GUI
19.IDEs
20.Installers Generators
21.Inversion of Control Dependency Injection
22.Issue Tracking
23.Logging Tools
24.Message
25.Mobile
26.Network Clients
27.Network Servers
28.Office
29.PDF
30.Persistence Frameworks
31.Portals
32.Profilers
33.Project Management
34.RSS RDF
35.Rule Engines
36.Script
37.Search Engines
38.Sound Audio
39.Source Control
40.SQL Clients
41.Template Engines
42.Testing
43.UML
44.Web Frameworks
45.Web Service
46.Web Testing
47.Wiki Engines
48.Windows Presentation Foundation
49.Workflows
50.XML Parsers
C# / C Sharp
C# / C Sharp by API
C# / CSharp Tutorial
C# / CSharp Open Source » PDF » iTextSharp 
iTextSharp » Org » BouncyCastle » Crypto » Signers » ECDsaSigner.cs
using System;
using Org.BouncyCastle.Math;
using Org.BouncyCastle.Math.EC;
using Org.BouncyCastle.Security;
using Org.BouncyCastle.Crypto;
using Org.BouncyCastle.Crypto.Digests;
using Org.BouncyCastle.Crypto.Parameters;

namespace Org.BouncyCastle.Crypto.Signers{
  /**
   * EC-DSA as described in X9.62
   */
  public class ECDsaSigner
    : IDsa
  {
    private ECKeyParameters key;
    private SecureRandom random;

    public string AlgorithmName
    {
      get { return "ECDSA"; }
    }

    public void Init(
      bool        forSigning,
      ICipherParameters  parameters)
    {
      if (forSigning)
      {
        if (parameters is ParametersWithRandom)
        {
          ParametersWithRandom rParam = (ParametersWithRandom) parameters;

          this.random = rParam.Random;
          parameters = rParam.Parameters;
        }
        else
        {
          this.random = new SecureRandom();
        }

        if (!(parameters is ECPrivateKeyParameters))
          throw new InvalidKeyException("EC private key required for signing");

        this.key = (ECPrivateKeyParameters) parameters;
      }
      else
      {
        if (!(parameters is ECPublicKeyParameters))
          throw new InvalidKeyException("EC public key required for verification");

        this.key = (ECPublicKeyParameters) parameters;
      }
    }

    // 5.3 pg 28
    /**
     * Generate a signature for the given message using the key we were
     * initialised with. For conventional DSA the message should be a SHA-1
     * hash of the message of interest.
     *
     * @param message the message that will be verified later.
     */
    public BigInteger[] GenerateSignature(
      byte[] message)
    {
      BigInteger n = key.Parameters.N;
      BigInteger e = calculateE(n, message);

      BigInteger r = null;
      BigInteger s = null;

      // 5.3.2
      do // Generate s
      {
        BigInteger k = null;

        do // Generate r
        {
          do
          {
            k = new BigInteger(n.BitLength, random);
          }
          while (k.SignValue == 0);

          ECPoint p = key.Parameters.G.Multiply(k);

          // 5.3.3
          BigInteger x = p.X.ToBigInteger();

          r = x.Mod(n);
        }
        while (r.SignValue == 0);

        BigInteger d = ((ECPrivateKeyParameters)key).D;

        s = k.ModInverse(n).Multiply(e.Add(d.Multiply(r))).Mod(n);
      }
      while (s.SignValue == 0);

      return new BigInteger[]{ r, s };
    }

    // 5.4 pg 29
    /**
     * return true if the value r and s represent a DSA signature for
     * the passed in message (for standard DSA the message should be
     * a SHA-1 hash of the real message to be verified).
     */
    public bool VerifySignature(
      byte[]    message,
      BigInteger  r,
      BigInteger  s)
    {
      BigInteger n = key.Parameters.N;

      // r and s should both in the range [1,n-1]
      if (r.SignValue < 1 || s.SignValue < 1
        || r.CompareTo(n) >= 0 || s.CompareTo(n) >= 0)
      {
        return false;
      }

      BigInteger e = calculateE(n, message);
      BigInteger c = s.ModInverse(n);

      BigInteger u1 = e.Multiply(c).Mod(n);
      BigInteger u2 = r.Multiply(c).Mod(n);

      ECPoint G = key.Parameters.G;
      ECPoint Q = ((ECPublicKeyParameters) key).Q;

      ECPoint point = ECAlgorithms.SumOfTwoMultiplies(G, u1, Q, u2);

      BigInteger v = point.X.ToBigInteger().Mod(n);

      return v.Equals(r);
    }

    private BigInteger calculateE(
      BigInteger  n,
      byte[]    message)
    {
      int messageBitLength = message.Length * 8;
      BigInteger trunc = new BigInteger(1, message);

      if (n.BitLength < messageBitLength)
      {
        trunc = trunc.ShiftRight(messageBitLength - n.BitLength);
      }

      return trunc;
    }
  }
}
www.java2v.com | Contact Us
Copyright 2009 - 12 Demo Source and Support. All rights reserved.
All other trademarks are property of their respective owners.