realloc/frostfs-crypto
1
0
Fork 0
forked from TrueCloudLab/frostfs-crypto
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request #7 from nspcc-dev/NEOFS_CRYPTO-4_Use_sha512_instead_of_sha256

Browse source 
Use SHA512 instead of SHA256
This commit is contained in:
Evgeniy Kulikov 2019-11-12 16:42:33 +03:00 committed by GitHub
commit 5bcaeeca4e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 12 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
ecdsa.go
View file

@ -4,7 +4,7 @@ import (
"crypto/ecdsa"
"crypto/elliptic"
"crypto/rand"
"crypto/sha256"
"crypto/sha512"
"crypto/x509"
"math/big"
@ -183,9 +183,9 @@ func MarshalPrivateKey(key *ecdsa.PrivateKey) []byte {
return key.D.Bytes()
}
// hashBytes returns the sha256 sum.
// hashBytes returns the sha512 sum.
func hashBytes(data []byte) []byte {
buf := sha256.Sum256(data)
buf := sha512.Sum512(data)
return buf[:]
}
@ -203,7 +203,7 @@ func Verify(pub *ecdsa.PublicKey, msg, sig []byte) error {
return nil
}
// Sign signs a message using the private key. If the sha256 hash of msg
// Sign signs a message using the private key. If the sha512 hash of msg
// is longer than the bit-length of the private key's curve order, the hash
// will be truncated to that length. It returns the signature as slice bytes.
// The security of the private key depends on the entropy of rand.

10
rfc6979.go
View file

@ -21,6 +21,12 @@ const (
ErrWrongSignature = internal.Error("wrong signature")
)
// hashBytesRFC6979 returns the sha256 sum.
func hashBytesRFC6979(data []byte) []byte {
sign := sha256.Sum256(data)
return sign[:]
}
// SignRFC6979 signs an arbitrary length hash (which should be the result of
// hashing a larger message) using the private key. It returns the
// signature as a pair of integers.
@ -28,7 +34,7 @@ const (
// Note that FIPS 186-3 section 4.6 specifies that the hash should be truncated
// to the byte-length of the subgroup. This function does not perform that.
func SignRFC6979(key *ecdsa.PrivateKey, msg []byte) ([]byte, error) {
r, s, err := rfc6979.SignECDSA(key, hashBytes(msg), sha256.New)
r, s, err := rfc6979.SignECDSA(key, hashBytesRFC6979(msg), sha256.New)
if err != nil {
return nil, err
}
@ -49,7 +55,7 @@ func decodeSignature(sig []byte) (*big.Int, *big.Int, error) {
func VerifyRFC6979(key *ecdsa.PublicKey, msg, sig []byte) error {
if r, s, err := decodeSignature(sig); err != nil {
return err
} else if !ecdsa.Verify(key, hashBytes(msg), r, s) {
} else if !ecdsa.Verify(key, hashBytesRFC6979(msg), r, s) {
return ErrWrongSignature
}