trussed/trussed-rsa-backend
0
0
Fork 0
mirror of https://github.com/trussed-dev/trussed-rsa-backend.git synced 2026-06-20 04:16:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

WIP add pkcs8der import handling; makes invalid signature at the moment

Browse Source
This commit is contained in:
Szczepan Zalega
2023-06-12 16:56:40 +02:00
parent a72ce195a4
commit e4e9471813
1 changed files with 40 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/lib.rs
+40 -32
View File
@@ -370,41 +370,49 @@ fn unsafe_inject_key(
bits: usize,
kind: key::Kind,
) -> Result<reply::UnsafeInjectKey, Error> {
let data = RsaImportFormat::deserialize(&request.raw_key).map_err(|_err| {
error!("Failed to deserialize RSA key: {_err:?}");
Error::InvalidSerializedKey
})?;
let e = BigUint::from_bytes_be(data.e);
let p = BigUint::from_bytes_be(data.p);
let q = BigUint::from_bytes_be(data.q);
let phi = (&p - 1u64) * (&q - 1u64);
let d = e
.clone()
.mod_inverse(&phi)
.and_then(|int| int.to_biguint())
.ok_or_else(|| {
warn!("Failed inverse");
Error::InvalidSerializedKey
})?;
let private_key_der = match request.format {
KeySerialization::RsaParts => {
let data = RsaImportFormat::deserialize(&request.raw_key).map_err(|_err| {
error!("Failed to deserialize RSA key: {_err:?}");
Error::InvalidSerializedKey
})?;
let e = BigUint::from_bytes_be(data.e);
let p = BigUint::from_bytes_be(data.p);
let q = BigUint::from_bytes_be(data.q);
let phi = (&p - 1u64) * (&q - 1u64);
let private_key =
RsaPrivateKey::from_components(&p * &q, e, d, vec![p, q]).map_err(|_err| {
warn!("Bad private key: {_err:?}");
Error::InvalidSerializedKey
})?;
private_key.validate().map_err(|_err| {
warn!("Bad private key: {_err:?}");
Error::InvalidSerializedKey
})?;
if private_key.size() != bits / 8 {
warn!("Bad key size: {}", private_key.size());
return Err(Error::InvalidSerializedKey);
}
let d = e
.clone()
.mod_inverse(&phi)
.and_then(|int| int.to_biguint())
.ok_or_else(|| {
warn!("Failed inverse");
Error::InvalidSerializedKey
})?;
let private_key_der = private_key
.to_pkcs8_der()
.expect("Failed to serialize an RSA 2K private key to PKCS#8 DER");
let private_key =
RsaPrivateKey::from_components(&p * &q, e, d, vec![p, q]).map_err(|_err| {
warn!("Bad private key: {_err:?}");
Error::InvalidSerializedKey
})?;
private_key.validate().map_err(|_err| {
warn!("Bad private key: {_err:?}");
Error::InvalidSerializedKey
})?;
if private_key.size() != bits / 8 {
warn!("Bad key size: {}", private_key.size());
return Err(Error::InvalidSerializedKey);
}
let private_key_der = private_key
.to_pkcs8_der()
.expect("Failed to serialize an RSA 2K private key to PKCS#8 DER");
private_key_der
}
KeySerialization::Pkcs8Der => {request.raw_key.as_slice().try_into().map_err(|_| Error::InvalidSerializedKey)? }
_ => {todo!()}
};
let private_key_id = keystore.store_key(
request.attributes.persistence,