#include <mcuxClCore_Examples.h>
#include <mcuxClExample_Session_Helper.h>
#include <mcuxClExample_RNG_Helper.h>
#include <mcuxClToolchain.h>
#define RSA_KEY_BIT_LENGTH (MCUXCLKEY_SIZE_2048)
#define RSA_KEY_BYTE_LENGTH (RSA_KEY_BIT_LENGTH / 8u)
#define RSA_PUBLIC_EXP_BYTE_LENGTH (3u)
#define RSA_PSS_SALT_LENGTH (0u)
#define INPUT_MESSAGE_LENGTH (64u)
static const uint8_t modulus[RSA_KEY_BYTE_LENGTH]
__attribute__ ((aligned (4))) = {
0xd3u, 0x24u, 0x96u, 0xe6u, 0x2du, 0x16u, 0x34u, 0x6eu, 0x06u, 0xe7u, 0xa3u, 0x1cu, 0x12u, 0x0au, 0x21u, 0xb5u,
0x45u, 0x32u, 0x32u, 0x35u, 0xeeu, 0x1du, 0x90u, 0x72u, 0x1du, 0xceu, 0xaau, 0xd4u, 0x6du, 0xc4u, 0xceu, 0xbdu,
0x80u, 0xc1u, 0x34u, 0x5au, 0xffu, 0x95u, 0xb1u, 0xddu, 0xf8u, 0x71u, 0xebu, 0xb7u, 0xf2u, 0x0fu, 0xedu, 0xb6u,
0xe4u, 0x2eu, 0x67u, 0xa0u, 0xccu, 0x59u, 0xb3u, 0x9fu, 0xfdu, 0x31u, 0xe9u, 0x83u, 0x42u, 0xf4u, 0x0au, 0xd9u,
0xafu, 0xf9u, 0x3cu, 0x3cu, 0x51u, 0xcfu, 0x5fu, 0x3cu, 0x8au, 0xd0u, 0x64u, 0xb8u, 0x33u, 0xf9u, 0xacu, 0x34u,
0x22u, 0x9au, 0x3eu, 0xd3u, 0xddu, 0x29u, 0x41u, 0xbeu, 0x12u, 0x5bu, 0xc5u, 0xa2u, 0x0cu, 0xb6u, 0xd2u, 0x31u,
0xb6u, 0xd1u, 0x84u, 0x7eu, 0xc4u, 0xfeu, 0xaeu, 0x2bu, 0x88u, 0x46u, 0xcfu, 0x00u, 0xc4u, 0xc6u, 0xe7u, 0x5au,
0x51u, 0x32u, 0x65u, 0x7au, 0x68u, 0xecu, 0x04u, 0x38u, 0x36u, 0x46u, 0x34u, 0xeau, 0xf8u, 0x27u, 0xf9u, 0xbbu,
0x51u, 0x6cu, 0x93u, 0x27u, 0x48u, 0x1du, 0x58u, 0xb8u, 0xffu, 0x1eu, 0xa4u, 0xc0u, 0x1fu, 0xa1u, 0xa2u, 0x57u,
0xa9u, 0x4eu, 0xa6u, 0xd4u, 0x72u, 0x60u, 0x3bu, 0x3fu, 0xb3u, 0x24u, 0x53u, 0x22u, 0x88u, 0xeau, 0x3au, 0x97u,
0x43u, 0x53u, 0x59u, 0x15u, 0x33u, 0xa0u, 0xebu, 0xbeu, 0xf2u, 0x9du, 0xf4u, 0xf8u, 0xbcu, 0x4du, 0xdbu, 0xf8u,
0x8eu, 0x47u, 0x1fu, 0x1du, 0xa5u, 0x00u, 0xb8u, 0xf5u, 0x7bu, 0xb8u, 0xc3u, 0x7cu, 0xa5u, 0xeau, 0x17u, 0x7cu,
0x4eu, 0x8au, 0x39u, 0x06u, 0xb7u, 0xc1u, 0x42u, 0xf7u, 0x78u, 0x8cu, 0x45u, 0xeau, 0xd0u, 0xc9u, 0xbcu, 0x36u,
0x92u, 0x48u, 0x3au, 0xd8u, 0x13u, 0x61u, 0x11u, 0x45u, 0xb4u, 0x1fu, 0x9cu, 0x01u, 0x2eu, 0xf2u, 0x87u, 0xbeu,
0x8bu, 0xbfu, 0x93u, 0x19u, 0xcfu, 0x4bu, 0x91u, 0x84u, 0xdcu, 0x8eu, 0xffu, 0x83u, 0x58u, 0x9bu, 0xe9u, 0x0cu,
0x54u, 0x81u, 0x14u, 0xacu, 0xfau, 0x5au, 0xbfu, 0x79u, 0x54u, 0xbfu, 0x9fu, 0x7au, 0xe5u, 0xb4u, 0x38u, 0xb5u
};
static const uint8_t privExp[RSA_KEY_BYTE_LENGTH]
__attribute__ ((aligned (4))) = {
0x15u, 0x5fu, 0xe6u, 0x60u, 0xcdu, 0xdeu, 0xaau, 0x17u, 0x1bu, 0x5eu, 0xd6u, 0xbdu, 0xd0u, 0x3bu, 0xb3u, 0x56u,
0xe0u, 0xf6u, 0xe8u, 0x6bu, 0x5au, 0x3cu, 0x26u, 0xf3u, 0xceu, 0x7du, 0xaeu, 0x00u, 0x8cu, 0x4eu, 0x38u, 0xa9u,
0xa9u, 0x7fu, 0xa5u, 0x97u, 0xb2u, 0xb9u, 0x0au, 0x45u, 0x10u, 0xd2u, 0x23u, 0x8du, 0x3fu, 0x15u, 0x8au, 0xb8u,
0x91u, 0x97u, 0xfbu, 0x08u, 0xa5u, 0xb7u, 0x4cu, 0xfeu, 0x5cu, 0xc8u, 0xf1u, 0x3du, 0x47u, 0x09u, 0x62u, 0x91u,
0xd0u, 0x05u, 0x38u, 0xaau, 0x58u, 0x93u, 0xd8u, 0x2du, 0xceu, 0x55u, 0xb3u, 0x64u, 0x8cu, 0x6au, 0x71u, 0x9au,
0xe3u, 0x87u, 0xdeu, 0xe5u, 0x5eu, 0xc5u, 0xbeu, 0xf0u, 0x89u, 0x76u, 0x3du, 0xe7u, 0x1eu, 0x47u, 0x61u, 0xb7u,
0x03u, 0xadu, 0x69u, 0x2eu, 0xd6u, 0x2du, 0x7cu, 0x1fu, 0x4fu, 0x0fu, 0xf0u, 0x03u, 0xc1u, 0x67u, 0xebu, 0x62u,
0xd2u, 0xc6u, 0x79u, 0xccu, 0x6fu, 0x13u, 0xb9u, 0x87u, 0xa1u, 0x42u, 0xf1u, 0x37u, 0x7au, 0x40u, 0xbdu, 0xc0u,
0xa0u, 0x36u, 0x60u, 0x72u, 0x94u, 0x40u, 0x14u, 0x63u, 0xa3u, 0x0eu, 0x82u, 0x91u, 0x2bu, 0x42u, 0x8au, 0x1du,
0x3fu, 0x80u, 0xb5u, 0xd0u, 0xd3u, 0x3eu, 0xa8u, 0x4eu, 0x8bu, 0xb6u, 0x4cu, 0x36u, 0x22u, 0xb9u, 0xbeu, 0xe3u,
0x56u, 0xf1u, 0x2cu, 0x6au, 0x19u, 0x0eu, 0x55u, 0x7bu, 0xbfu, 0x25u, 0xe1u, 0x10u, 0x80u, 0x7bu, 0x85u, 0xcau,
0xd5u, 0x1bu, 0x39u, 0x87u, 0x57u, 0x08u, 0x06u, 0xbeu, 0x81u, 0xf3u, 0x71u, 0x3fu, 0x5du, 0x17u, 0x40u, 0x74u,
0x99u, 0xa5u, 0xdeu, 0xdau, 0xc0u, 0xf3u, 0xe3u, 0xbcu, 0x79u, 0x96u, 0x35u, 0x95u, 0xf8u, 0xe0u, 0xcfu, 0x01u,
0x29u, 0x1du, 0xc1u, 0x02u, 0x09u, 0xc0u, 0x6eu, 0xb6u, 0x0eu, 0x2eu, 0x9cu, 0x47u, 0xecu, 0x91u, 0x42u, 0xedu,
0xa5u, 0xf3u, 0xb7u, 0x0au, 0xc6u, 0x7fu, 0x72u, 0xbfu, 0x52u, 0xb3u, 0x31u, 0x37u, 0xd1u, 0x49u, 0xb6u, 0xf6u,
0x06u, 0xe4u, 0x59u, 0x61u, 0x7du, 0xaau, 0x8eu, 0x10u, 0x18u, 0xa8u, 0x14u, 0x1du, 0x89u, 0x4eu, 0xcau, 0xffu
};
static const uint8_t pubExp[RSA_PUBLIC_EXP_BYTE_LENGTH]
__attribute__ ((aligned (4))) = {
0x01u, 0x00u, 0x01u
};
static const uint8_t data[INPUT_MESSAGE_LENGTH] = {
0x61u, 0x62u, 0x63u, 0x64u, 0x65u, 0x66u, 0x67u, 0x68u, 0x69u, 0x6Au, 0x6Bu, 0x6Cu, 0x6Du, 0x6Eu, 0x6Fu, 0x70u,
0x62u, 0x63u, 0x64u, 0x65u, 0x66u, 0x67u, 0x68u, 0x69u, 0x6Au, 0x6Bu, 0x6Cu, 0x6Du, 0x6Eu, 0x6Fu, 0x70u, 0x71u,
0x63u, 0x64u, 0x65u, 0x66u, 0x67u, 0x68u, 0x69u, 0x6Au, 0x6Bu, 0x6Cu, 0x6Du, 0x6Eu, 0x6Fu, 0x70u, 0x71u, 0x72u,
0x64u, 0x65u, 0x66u, 0x67u, 0x68u, 0x69u, 0x6Au, 0x6Bu, 0x6Cu, 0x6Du, 0x6Eu, 0x6Fu, 0x70u, 0x71u, 0x72u, 0x73u
};
MCUXCLEXAMPLE_FUNCTION(mcuxClRsa_Signature_RSASSA_PSS_example)
{
#define CPU_WA_BUFFER_SIZE MCUXCLCORE_MAX(MCUXCLCORE_MAX(MCUXCLCORE_MAX(MCUXCLCORE_MAX(\
MCUXCLRANDOM_NCINIT_WACPU_SIZE,\
MCUXCLRANDOMMODES_INIT_WACPU_SIZE),\
MCUXCLRSA_SIGN_PLAIN_PSSENCODE_WACPU_SIZE(RSA_KEY_BIT_LENGTH)),\
MCUXCLRSA_VERIFY_PSSVERIFY_WACPU_SIZE),\
MCUXCLHASH_COMPUTE_CPU_WA_BUFFER_SIZE_MAX)
#define PKC_WA_BUFFER_SIZE MCUXCLCORE_MAX(MCUXCLRSA_SIGN_PLAIN_WAPKC_SIZE(RSA_KEY_BIT_LENGTH),\
MCUXCLRSA_VERIFY_WAPKC_SIZE(RSA_KEY_BIT_LENGTH))
mcuxClSession_Descriptor_t sessionDesc;
MCUXCLEXAMPLE_ALLOCATE_AND_INITIALIZE_SESSION(session,
CPU_WA_BUFFER_SIZE,
PKC_WA_BUFFER_SIZE);
MCUXCLEXAMPLE_ALLOCATE_AND_INITIALIZE_RNG(session, MCUXCLRANDOMMODES_CTR_DRBG_AES256_CONTEXT_SIZE, mcuxClRandomModes_Mode_CtrDrbg_AES256_DRG3);
MCUX_CSSL_ANALYSIS_START_SUPPRESS_DISCARD_CONST_QUALIFIER()
.
modulus.pKeyEntryData = (uint8_t*)modulus,
.modulus.keyEntryLength = RSA_KEY_BYTE_LENGTH,
.exponent.pKeyEntryData = (uint8_t*)privExp,
.exponent.keyEntryLength = sizeof(privExp)
};
MCUX_CSSL_ANALYSIS_STOP_SUPPRESS_DISCARD_CONST_QUALIFIER()
MCUX_CSSL_ANALYSIS_START_SUPPRESS_DISCARD_CONST_QUALIFIER()
.
modulus.pKeyEntryData = (uint8_t*)modulus,
.modulus.keyEntryLength = RSA_KEY_BYTE_LENGTH,
.exponent.pKeyEntryData = (uint8_t*)pubExp,
.exponent.keyEntryLength = sizeof(pubExp)
};
MCUX_CSSL_ANALYSIS_STOP_SUPPRESS_DISCARD_CONST_QUALIFIER()
uint32_t privKeyDesc[MCUXCLKEY_DESCRIPTOR_SIZE_IN_WORDS];
MCUX_CSSL_ANALYSIS_START_PATTERN_REINTERPRET_MEMORY_OF_OPAQUE_TYPES()
MCUX_CSSL_ANALYSIS_STOP_PATTERN_REINTERPRET_MEMORY_OF_OPAQUE_TYPES()
session,
privKey,
(uint8_t *) &privKeyStruct,
sizeof(privKeyStruct)
));
{
return MCUXCLEXAMPLE_STATUS_ERROR;
}
uint32_t pubKeyDesc[MCUXCLKEY_DESCRIPTOR_SIZE_IN_WORDS];
MCUX_CSSL_ANALYSIS_START_PATTERN_REINTERPRET_MEMORY_OF_OPAQUE_TYPES()
MCUX_CSSL_ANALYSIS_STOP_PATTERN_REINTERPRET_MEMORY_OF_OPAQUE_TYPES()
session,
pubKey,
(uint8_t *) &pubKeyStruct,
sizeof(pubKeyStruct)
));
{
return MCUXCLEXAMPLE_STATUS_ERROR;
}
ALIGNED uint8_t signatureModeBytes[MCUXCLSIGNATURE_MODE_SIZE];
MCUX_CSSL_ANALYSIS_START_PATTERN_REINTERPRET_MEMORY_OF_OPAQUE_TYPES()
MCUX_CSSL_ANALYSIS_STOP_PATTERN_REINTERPRET_MEMORY_OF_OPAQUE_TYPES()
ALIGNED uint8_t rsaProtocolDescriptorBytes[MCUXCLRSA_SIGNATURE_PROTOCOLDESCRIPTOR_SIZE];
MCUX_CSSL_ANALYSIS_START_PATTERN_REINTERPRET_MEMORY_OF_OPAQUE_TYPES()
mcuxClRsa_SignatureProtocolDescriptor_t *pRsaProtocolDescriptor = (mcuxClRsa_SignatureProtocolDescriptor_t *) rsaProtocolDescriptorBytes;
MCUX_CSSL_ANALYSIS_STOP_PATTERN_REINTERPRET_MEMORY_OF_OPAQUE_TYPES()
MCUX_CSSL_ANALYSIS_START_PATTERN_REINTERPRET_MEMORY_OF_OPAQUE_TYPES()
pSignatureMode,
pRsaProtocolDescriptor,
RSA_PSS_SALT_LENGTH,
0u
)
);
MCUX_CSSL_ANALYSIS_STOP_PATTERN_REINTERPRET_MEMORY_OF_OPAQUE_TYPES()
{
return MCUXCLEXAMPLE_STATUS_ERROR;
}
uint32_t hashSize = 0;
session,
dataBuf,
sizeof(data),
hashBuf,
&hashSize
));
{
return MCUXCLEXAMPLE_STATUS_ERROR;
}
uint8_t signature[RSA_KEY_BYTE_LENGTH];
uint32_t signatureSize = 0;
session,
privKey,
pSignatureMode,
MCUX_CSSL_ANALYSIS_START_SUPPRESS_ALREADY_INITIALIZED("hashBuf initialized by mcuxClHash_compute")
MCUX_CSSL_ANALYSIS_STOP_SUPPRESS_ALREADY_INITIALIZED()
sizeof(hash),
signatureBuf,
&signatureSize
));
{
return MCUXCLEXAMPLE_STATUS_ERROR;
}
if(signatureSize != sizeof(signature))
{
return MCUXCLEXAMPLE_STATUS_ERROR;
}
session,
pubKey,
pSignatureMode,
sizeof(hash),
signatureSize
));
{
return MCUXCLEXAMPLE_STATUS_ERROR;
}
if(!mcuxClExample_Session_Clean(session))
{
return MCUXCLEXAMPLE_STATUS_ERROR;
}
return MCUXCLEXAMPLE_STATUS_OK;
}
Top-level include file for the mcuxClBuffer component.
Top-level include file for the mcuxClHash component.
Top-level include file for the mcuxClHashModes component.
Top-level include file for the mcuxClKey component.
Top level header of mcuxClRandom component.
Top level header of mcuxClRandomModes component.
Top-level include file for the mcuxClRsa component.
Top-level include file for the mcuxClSession component.
Top-level include file for the mcuxClSignature component.
#define MCUXCLBUFFER_INIT(name, info, ptr, size)
Initialize an input/output buffer (mcuxCl_Buffer_t).
Definition mcuxClBuffer.h:67
#define MCUXCLBUFFER_INIT_RO(name, info, ptr, size)
Initialize an input buffer (mcuxCl_InputBuffer_t) with plain CPU handling.
Definition mcuxClBuffer.h:84
const uint8_t * mcuxCl_InputBuffer_t
Input buffer type.
Definition mcuxClBuffer_Pointer.h:38
#define MCUXCLHASH_STATUS_OK
Hash operation successful.
Definition mcuxClHash_Constants.h:35
mcuxClHash_Status_t mcuxClHash_compute(mcuxClSession_Handle_t session, mcuxClHash_Algo_t algorithm, mcuxCl_InputBuffer_t pIn, uint32_t inSize, mcuxCl_Buffer_t pOut, uint32_t *const pOutSize)
One-shot Hash computation function.
static mcuxClHash_Algo_t mcuxClHash_Algorithm_Sha256
Sha-256 algorithm descriptor Sha-256 hash calculation using the Hash functionality SGI.
Definition mcuxClHashModes_Algorithms.h:96
#define MCUXCLHASH_OUTPUT_SIZE_SHA_256
SHA-256 output size: 256 bit (32 bytes).
Definition mcuxClHashModes_Constants.h:38
#define MCUXCLKEY_STATUS_OK
Key operation successful.
Definition mcuxClKey_Constants.h:40
mcuxClKey_Status_t mcuxClKey_init(mcuxClSession_Handle_t session, mcuxClKey_Handle_t key, mcuxClKey_Type_t type, const uint8_t *pKeyData, uint32_t keyDataLength)
Initializes a key handle.
mcuxClKey_Descriptor_t *const mcuxClKey_Handle_t
Key handle type.
Definition mcuxClKey_Types.h:91
static const mcuxClKey_Type_t mcuxClKey_Type_Rsa_Public_2048
Key type pointer for RSA public key and key size 2048 bits.
Definition mcuxClRsa_KeyTypes.h:73
static const mcuxClKey_Type_t mcuxClKey_Type_Rsa_PrivatePlain_2048
Key type pointer for RSA private plain key and key size 2048 bits.
Definition mcuxClRsa_KeyTypes.h:106
void mcuxClRsa_SignatureModeConstructor_RSASSA_PSS(mcuxClSignature_ModeDescriptor_t *pSignatureMode, mcuxClRsa_SignatureProtocolDescriptor_t *pProtocolDescriptor, mcuxClHash_Algo_t hashAlgorithm, uint32_t saltLength, uint32_t options)
Mode constructor for RSASSA-PSS signature generation and verification.
mcuxClSession_Descriptor_t *const mcuxClSession_Handle_t
Type for mcuxClSession Handle.
Definition mcuxClSession_Types.h:98
mcuxClSignature_Status_t mcuxClSignature_verify(mcuxClSession_Handle_t session, mcuxClKey_Handle_t key, mcuxClSignature_Mode_t mode, mcuxCl_InputBuffer_t pIn, uint32_t inSize, mcuxCl_InputBuffer_t pSignature, uint32_t signatureSize)
One-shot verification function.
mcuxClSignature_Status_t mcuxClSignature_sign(mcuxClSession_Handle_t session, mcuxClKey_Handle_t key, mcuxClSignature_Mode_t mode, mcuxCl_InputBuffer_t pIn, uint32_t inSize, mcuxCl_Buffer_t pSignature, uint32_t *const pSignatureSize)
One-shot signing function.
struct mcuxClSignature_ModeDescriptor mcuxClSignature_ModeDescriptor_t
Signature mode/algorithm descriptor type.
Definition mcuxClSignature_Types.h:45
#define MCUX_CSSL_FP_FUNCTION_CALL_VOID_BEGIN(...)
Call a flow protected void function and check the protection token.
Definition mcuxCsslFlowProtection.h:694
#define MCUX_CSSL_FP_FUNCTION_CALL_VOID_END(...)
End a void function call section started by MCUX_CSSL_FP_FUNCTION_CALL_VOID_BEGIN.
Definition mcuxCsslFlowProtection.h:725
#define MCUX_CSSL_FP_FUNCTION_CALL_BEGIN(...)
Call a flow protected function and check the protection token.
Definition mcuxCsslFlowProtection.h:623
#define MCUX_CSSL_FP_FUNCTION_CALLED(...)
Expectation of a called function.
Definition mcuxCsslFlowProtection.h:777
#define MCUX_CSSL_FP_FUNCTION_CALL_END(...)
End a function call section started by MCUX_CSSL_FP_FUNCTION_CALL_BEGIN.
Definition mcuxCsslFlowProtection.h:658
Structure type for Rsa plain key data.
Definition mcuxClRsa_KeyTypes.h:223
mcuxClRsa_KeyEntry_t modulus
Key entry for the modulus.
Definition mcuxClRsa_KeyTypes.h:224
Structure type for Rsa key entries, specifying key entry length and data.
Definition mcuxClRsa_Types.h:104