api-console-assets

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"> <style> .KEYW {color: #933;} .COMM {color: #bbb; font-style: italic;} .NUMB {color: #393;} .STRN {color: #393;} .REGX {color: #339;} .line {border-right: 1px dotted #666; color: #666; font-style: normal;} </style></head><body><pre> 1 /* rsasign-1.3.0.js (c) 2010-2017 Kenji Urushima | kjur.github.com/jsrsasign/license 2 */ 3 /* 4 * rsa-sign.js - adding signing functions to RSAKey class. 5 * 6 * Copyright (c) 2010-2017 Kenji Urushima (kenji.urushima@gmail.com) 7 * 8 * This software is licensed under the terms of the MIT License. 9 * https://kjur.github.io/jsrsasign/license/ 10 * 11 * The above copyright and license notice shall be 12 * included in all copies or substantial portions of the Software. 13 */ 14 15 /** 16 * @fileOverview 17 * @name rsasign-1.2.js 18 * @author Kenji Urushima kenji.urushima@gmail.com 19 * @version jsrsasign 8.0.0 rsasign 1.3.0 (2017-Jun-28) 20 * @license <a href="https://kjur.github.io/jsrsasign/license/">MIT License</a> 21 */ 22 23 var _RE_HEXDECONLY = new RegExp(""); 24 _RE_HEXDECONLY.compile("[^0-9a-f]", "gi"); 25 26 // ======================================================================== 27 // Signature Generation 28 // ======================================================================== 29 30 function _rsasign_getHexPaddedDigestInfoForString(s, keySize, hashAlg) { 31 var hashFunc = function(s) { return KJUR.crypto.Util.hashString(s, hashAlg); }; 32 var sHashHex = hashFunc(s); 33 34 return KJUR.crypto.Util.getPaddedDigestInfoHex(sHashHex, hashAlg, keySize); 35 } 36 37 function _zeroPaddingOfSignature(hex, bitLength) { 38 var s = ""; 39 var nZero = bitLength / 4 - hex.length; 40 for (var i = 0; i < nZero; i++) { 41 s = s + "0"; 42 } 43 return s + hex; 44 } 45 46 /** 47 * sign for a message string with RSA private key. 48 * @name sign 49 * @memberOf RSAKey 50 * @function 51 * @param {String} s message string to be signed. 52 * @param {String} hashAlg hash algorithm name for signing. 53 * @return returns hexadecimal string of signature value. 54 */ 55 RSAKey.prototype.sign = function(s, hashAlg) { 56 var hashFunc = function(s) { return KJUR.crypto.Util.hashString(s, hashAlg); }; 57 var sHashHex = hashFunc(s); 58 59 return this.signWithMessageHash(sHashHex, hashAlg); 60 }; 61 62 /** 63 * sign hash value of message to be signed with RSA private key. 64 * @name signWithMessageHash 65 * @memberOf RSAKey 66 * @function 67 * @param {String} sHashHex hexadecimal string of hash value of message to be signed. 68 * @param {String} hashAlg hash algorithm name for signing. 69 * @return returns hexadecimal string of signature value. 70 * @since rsasign 1.2.6 71 */ 72 RSAKey.prototype.signWithMessageHash = function(sHashHex, hashAlg) { 73 var hPM = KJUR.crypto.Util.getPaddedDigestInfoHex(sHashHex, hashAlg, this.n.bitLength()); 74 var biPaddedMessage = parseBigInt(hPM, 16); 75 var biSign = this.doPrivate(biPaddedMessage); 76 var hexSign = biSign.toString(16); 77 return _zeroPaddingOfSignature(hexSign, this.n.bitLength()); 78 } 79 80 // PKCS#1 (PSS) mask generation function 81 function pss_mgf1_str(seed, len, hash) { 82 var mask = '', i = 0; 83 84 while (mask.length < len) { 85 mask += hextorstr(hash(rstrtohex(seed + String.fromCharCode.apply(String, [ 86 (i & 0xff000000) >> 24, 87 (i & 0x00ff0000) >> 16, 88 (i & 0x0000ff00) >> 8, 89 i & 0x000000ff])))); 90 i += 1; 91 } 92 93 return mask; 94 } 95 96 /** 97 * sign for a message string with RSA private key by PKCS#1 PSS signing. 98 * @name signPSS 99 * @memberOf RSAKey 100 * @function 101 * @param {String} s message string to be signed. 102 * @param {String} hashAlg hash algorithm name for signing. 103 * @param {Integer} sLen salt byte length from 0 to (keybytelen - hashbytelen - 2). 104 * There are two special values: 105 * <ul> 106 * <li>-1: sets the salt length to the digest length</li> 107 * <li>-2: sets the salt length to maximum permissible value 108 * (i.e. keybytelen - hashbytelen - 2)</li> 109 * </ul> 110 * DEFAULT is -1. (NOTE: OpenSSL's default is -2.) 111 * @return returns hexadecimal string of signature value. 112 */ 113 RSAKey.prototype.signPSS = function(s, hashAlg, sLen) { 114 var hashFunc = function(sHex) { return KJUR.crypto.Util.hashHex(sHex, hashAlg); } 115 var hHash = hashFunc(rstrtohex(s)); 116 117 if (sLen === undefined) sLen = -1; 118 return this.signWithMessageHashPSS(hHash, hashAlg, sLen); 119 }; 120 121 /** 122 * sign hash value of message with RSA private key by PKCS#1 PSS signing. 123 * @name signWithMessageHashPSS 124 * @memberOf RSAKey 125 * @function 126 * @param {String} hHash hexadecimal hash value of message to be signed. 127 * @param {String} hashAlg hash algorithm name for signing. 128 * @param {Integer} sLen salt byte length from 0 to (keybytelen - hashbytelen - 2). 129 * There are two special values: 130 * <ul> 131 * <li>-1: sets the salt length to the digest length</li> 132 * <li>-2: sets the salt length to maximum permissible value 133 * (i.e. keybytelen - hashbytelen - 2)</li> 134 * </ul> 135 * DEFAULT is -1. (NOTE: OpenSSL's default is -2.) 136 * @return returns hexadecimal string of signature value. 137 * @since rsasign 1.2.6 138 */ 139 RSAKey.prototype.signWithMessageHashPSS = function(hHash, hashAlg, sLen) { 140 var mHash = hextorstr(hHash); 141 var hLen = mHash.length; 142 var emBits = this.n.bitLength() - 1; 143 var emLen = Math.ceil(emBits / 8); 144 var i; 145 var hashFunc = function(sHex) { return KJUR.crypto.Util.hashHex(sHex, hashAlg); } 146 147 if (sLen === -1 || sLen === undefined) { 148 sLen = hLen; // same as hash length 149 } else if (sLen === -2) { 150 sLen = emLen - hLen - 2; // maximum 151 } else if (sLen < -2) { 152 throw "invalid salt length"; 153 } 154 155 if (emLen < (hLen + sLen + 2)) { 156 throw "data too long"; 157 } 158 159 var salt = ''; 160 161 if (sLen > 0) { 162 salt = new Array(sLen); 163 new SecureRandom().nextBytes(salt); 164 salt = String.fromCharCode.apply(String, salt); 165 } 166 167 var H = hextorstr(hashFunc(rstrtohex('\x00\x00\x00\x00\x00\x00\x00\x00' + mHash + salt))); 168 var PS = []; 169 170 for (i = 0; i < emLen - sLen - hLen - 2; i += 1) { 171 PS[i] = 0x00; 172 } 173 174 var DB = String.fromCharCode.apply(String, PS) + '\x01' + salt; 175 var dbMask = pss_mgf1_str(H, DB.length, hashFunc); 176 var maskedDB = []; 177 178 for (i = 0; i < DB.length; i += 1) { 179 maskedDB[i] = DB.charCodeAt(i) ^ dbMask.charCodeAt(i); 180 } 181 182 var mask = (0xff00 >> (8 * emLen - emBits)) & 0xff; 183 maskedDB[0] &= ~mask; 184 185 for (i = 0; i < hLen; i++) { 186 maskedDB.push(H.charCodeAt(i)); 187 } 188 189 maskedDB.push(0xbc); 190 191 return _zeroPaddingOfSignature(this.doPrivate(new BigInteger(maskedDB)).toString(16), 192 this.n.bitLength()); 193 } 194 195 // ======================================================================== 196 // Signature Verification 197 // ======================================================================== 198 199 function _rsasign_getDecryptSignatureBI(biSig, hN, hE) { 200 var rsa = new RSAKey(); 201 rsa.setPublic(hN, hE); 202 var biDecryptedSig = rsa.doPublic(biSig); 203 return biDecryptedSig; 204 } 205 206 function _rsasign_getHexDigestInfoFromSig(biSig, hN, hE) { 207 var biDecryptedSig = _rsasign_getDecryptSignatureBI(biSig, hN, hE); 208 var hDigestInfo = biDecryptedSig.toString(16).replace(/^1f+00/, ''); 209 return hDigestInfo; 210 } 211 212 function _rsasign_getAlgNameAndHashFromHexDisgestInfo(hDigestInfo) { 213 for (var algName in KJUR.crypto.Util.DIGESTINFOHEAD) { 214 var head =<span c