| ... | ... | @@ -95,6 +95,14 @@ pub const NamedCurve = enum { |
| 95 | 95 | .{ &[_]u8{ 0x2B, 0x81, 0x04, 0x00, 0x23 }, .secp521r1 }, |
| 96 | 96 | .{ &[_]u8{ 0x2A, 0x86, 0x48, 0xCE, 0x3D, 0x03, 0x01, 0x07 }, .X9_62_prime256v1 }, |
| 97 | 97 | }); |
| 98 | |
| 99 | pub fn Curve(comptime curve: NamedCurve) type { |
| 100 | return switch (curve) { |
| 101 | .X9_62_prime256v1 => crypto.ecc.P256, |
| 102 | .secp384r1 => crypto.ecc.P384, |
| 103 | .secp521r1 => @compileError("unimplemented"), |
| 104 | }; |
| 105 | } |
| 98 | 106 | }; |
| 99 | 107 | |
| 100 | 108 | pub const ExtensionId = enum { |
| ... | ... | @@ -783,9 +791,10 @@ fn verify_ecdsa( |
| 783 | 791 | .secp521r1 => { |
| 784 | 792 | return error.CertificateSignatureNamedCurveUnsupported; |
| 785 | 793 | }, |
| 786 | | .secp384r1 => { |
| 787 | | const P = crypto.ecc.P384; |
| 788 | | const Ecdsa = crypto.sign.ecdsa.Ecdsa(P, Hash); |
| 794 | inline .X9_62_prime256v1, |
| 795 | .secp384r1, |
| 796 | => |curve| { |
| 797 | const Ecdsa = crypto.sign.ecdsa.Ecdsa(curve.Curve(), Hash); |
| 789 | 798 | const sig = Ecdsa.Signature.fromDer(encoded_sig) catch |err| switch (err) { |
| 790 | 799 | error.InvalidEncoding => return error.CertificateSignatureInvalid, |
| 791 | 800 | }; |
| ... | ... | @@ -800,9 +809,6 @@ fn verify_ecdsa( |
| 800 | 809 | error.SignatureVerificationFailed => return error.CertificateSignatureInvalid, |
| 801 | 810 | }; |
| 802 | 811 | }, |
| 803 | | .X9_62_prime256v1 => { |
| 804 | | return error.CertificateSignatureNamedCurveUnsupported; |
| 805 | | }, |
| 806 | 812 | } |
| 807 | 813 | } |
| 808 | 814 | |
Mateusz Poliwczak <mpoliwczak34@gmail.com> 2023-01-22 17:45:44+01:00
Andrew Kelley <andrew@ziglang.org> 2023-01-22 17:24:45-05:00
lib