90 lines
4.3 KiB
Java
90 lines
4.3 KiB
Java
|
package org.bouncycastle.crypto.signers;
|
||
|
|
|
||
|
|
import java.math.BigInteger;
|
||
|
|
import java.security.SecureRandom;
|
||
|
|
import org.bouncycastle.crypto.AsymmetricCipherKeyPair;
|
||
|
|
import org.bouncycastle.crypto.CipherParameters;
|
||
|
|
import org.bouncycastle.crypto.DSA;
|
||
|
|
import org.bouncycastle.crypto.DataLengthException;
|
||
|
|
import org.bouncycastle.crypto.generators.ECKeyPairGenerator;
|
||
|
|
import org.bouncycastle.crypto.params.ECKeyGenerationParameters;
|
||
|
|
import org.bouncycastle.crypto.params.ECKeyParameters;
|
||
|
|
import org.bouncycastle.crypto.params.ECPrivateKeyParameters;
|
||
|
|
import org.bouncycastle.crypto.params.ECPublicKeyParameters;
|
||
|
|
import org.bouncycastle.crypto.params.ParametersWithRandom;
|
||
|
|
import org.bouncycastle.math.ec.ECAlgorithms;
|
||
|
|
import org.bouncycastle.math.ec.ECConstants;
|
||
|
|
import org.bouncycastle.math.ec.ECPoint;
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public class ECNRSigner implements DSA {
|
||
|
|
private boolean forSigning;
|
||
|
|
private ECKeyParameters key;
|
||
|
|
private SecureRandom random;
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.DSA
|
||
|
|
public boolean verifySignature(byte[] bArr, BigInteger bigInteger, BigInteger bigInteger2) {
|
||
|
|
if (this.forSigning) {
|
||
|
|
throw new IllegalStateException("not initialised for verifying");
|
||
|
|
}
|
||
|
|
ECPublicKeyParameters eCPublicKeyParameters = (ECPublicKeyParameters) this.key;
|
||
|
|
BigInteger n = eCPublicKeyParameters.getParameters().getN();
|
||
|
|
int bitLength = n.bitLength();
|
||
|
|
BigInteger bigInteger3 = new BigInteger(1, bArr);
|
||
|
|
if (bigInteger3.bitLength() > bitLength) {
|
||
|
|
throw new DataLengthException("input too large for ECNR key.");
|
||
|
|
}
|
||
|
|
if (bigInteger.compareTo(ECConstants.ONE) < 0 || bigInteger.compareTo(n) >= 0 || bigInteger2.compareTo(ECConstants.ZERO) < 0 || bigInteger2.compareTo(n) >= 0) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
ECPoint normalize = ECAlgorithms.sumOfTwoMultiplies(eCPublicKeyParameters.getParameters().getG(), bigInteger2, eCPublicKeyParameters.getQ(), bigInteger).normalize();
|
||
|
|
if (normalize.isInfinity()) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
return bigInteger.subtract(normalize.getAffineXCoord().toBigInteger()).mod(n).equals(bigInteger3);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.DSA
|
||
|
|
public void init(boolean z, CipherParameters cipherParameters) {
|
||
|
|
ECKeyParameters eCKeyParameters;
|
||
|
|
this.forSigning = z;
|
||
|
|
if (!z) {
|
||
|
|
eCKeyParameters = (ECPublicKeyParameters) cipherParameters;
|
||
|
|
} else {
|
||
|
|
if (cipherParameters instanceof ParametersWithRandom) {
|
||
|
|
ParametersWithRandom parametersWithRandom = (ParametersWithRandom) cipherParameters;
|
||
|
|
this.random = parametersWithRandom.getRandom();
|
||
|
|
this.key = (ECPrivateKeyParameters) parametersWithRandom.getParameters();
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
this.random = new SecureRandom();
|
||
|
|
eCKeyParameters = (ECPrivateKeyParameters) cipherParameters;
|
||
|
|
}
|
||
|
|
this.key = eCKeyParameters;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.DSA
|
||
|
|
public BigInteger[] generateSignature(byte[] bArr) {
|
||
|
|
AsymmetricCipherKeyPair generateKeyPair;
|
||
|
|
BigInteger mod;
|
||
|
|
if (!this.forSigning) {
|
||
|
|
throw new IllegalStateException("not initialised for signing");
|
||
|
|
}
|
||
|
|
BigInteger n = ((ECPrivateKeyParameters) this.key).getParameters().getN();
|
||
|
|
int bitLength = n.bitLength();
|
||
|
|
BigInteger bigInteger = new BigInteger(1, bArr);
|
||
|
|
int bitLength2 = bigInteger.bitLength();
|
||
|
|
ECPrivateKeyParameters eCPrivateKeyParameters = (ECPrivateKeyParameters) this.key;
|
||
|
|
if (bitLength2 > bitLength) {
|
||
|
|
throw new DataLengthException("input too large for ECNR key.");
|
||
|
|
}
|
||
|
|
do {
|
||
|
|
ECKeyPairGenerator eCKeyPairGenerator = new ECKeyPairGenerator();
|
||
|
|
eCKeyPairGenerator.init(new ECKeyGenerationParameters(eCPrivateKeyParameters.getParameters(), this.random));
|
||
|
|
generateKeyPair = eCKeyPairGenerator.generateKeyPair();
|
||
|
|
mod = ((ECPublicKeyParameters) generateKeyPair.getPublic()).getQ().getAffineXCoord().toBigInteger().add(bigInteger).mod(n);
|
||
|
|
} while (mod.equals(ECConstants.ZERO));
|
||
|
|
return new BigInteger[]{mod, ((ECPrivateKeyParameters) generateKeyPair.getPrivate()).getD().subtract(mod.multiply(eCPrivateKeyParameters.getD())).mod(n)};
|
||
|
|
}
|
||
|
|
}
|