lib/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2025-08-08 19:02:06 +03:00
Code Activity

pki: Add ecdsa support for signature verification.

Browse Source
This commit is contained in:
Andreas Schneider
2012-02-04 23:45:01 +01:00
parent 216cb8b1aa
commit 4019dbed85
1 changed files with 24 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
src/pki.c
View File

@@ -1191,7 +1191,6 @@ int ssh_pki_signature_verify_blob(ssh_session session,
unsigned char *digest, unsigned char *digest,
size_t dlen) size_t dlen)
{ {
unsigned char hash[SHA_DIGEST_LEN] = {0};
ssh_signature sig; ssh_signature sig;
int rc; int rc;
@@ -1206,8 +1205,23 @@ int ssh_pki_signature_verify_blob(ssh_session session,
key->type_c); key->type_c);
sha1(digest, dlen, hash); if (key->type == SSH_KEYTYPE_ECDSA) {
#if HAVE_ECC
unsigned char ehash[EVP_DIGEST_LEN] = {0};
uint32_t elen;
evp(key->ecdsa_nid, digest, dlen, ehash, &elen);
rc = pki_signature_verify(session,
sig,
key,
ehash,
elen);
#endif
} else {
unsigned char hash[SHA_DIGEST_LEN] = {0};
sha1(digest, dlen, hash);
#ifdef DEBUG_CRYPTO #ifdef DEBUG_CRYPTO
ssh_print_hexa("Hash to be verified with dsa", hash, SHA_DIGEST_LEN); ssh_print_hexa("Hash to be verified with dsa", hash, SHA_DIGEST_LEN);
#endif #endif
@@ -1217,6 +1231,8 @@ int ssh_pki_signature_verify_blob(ssh_session session,
key, key,
hash, hash,
SHA_DIGEST_LEN); SHA_DIGEST_LEN);
}
ssh_signature_free(sig); ssh_signature_free(sig);
return rc; return rc;