sm2-crypto 0.1 → 0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b51258ccfa3e81ed0173f642cd16e1f96a1ba5944a6646dc68aa5850cd4d9039
-  data.tar.gz: d9e2bfb6afbd01095baf46c283e906bca986510d5988e4c67e55510cc8fd1c93
+  metadata.gz: e11ed586baf19d83dea3bde65ca1c67c793229c1618222c3b0eab7dcaf4aa145
+  data.tar.gz: 87b1ef2ecdcb6cf6852a5616e2da6655964f065a62a0418824702936fd5a0a31
 SHA512:
-  metadata.gz: b030ea7c612717190baff608b974cdd74781ca7f15288602f0c8465f73be34d55abc28ce850329e09123e3f9c5d4020e8f6c4ecc903308878680ce929719a661
-  data.tar.gz: f8c0172e0e341570d0e672edebae78e4e552d7aca5441356b266480793b39b91fb428b433dee967a1e64e93dd2af766c56e6de32661330f9f64075b99f43711f
+  metadata.gz: 42430a1b69e52b255684bdfaf35ff4f501f908cb78be9516575c2a2e850288e29cb99c705b512b967eaab1d25f960319fc89f8acb6d79883608e199dc8825b61
+  data.tar.gz: 3c2142bcb64674f49d147791fe66fb726953e6fd7973969392ed0e892ef17424e9018ee31706164f45f85c3eab56f57b49e9ca456ab11c7ffe2b39bacb331207

data/README.md

@@ -30,13 +30,15 @@ $ gem install sm2-crypto
 
 ## Usage
 
+### Encrypt and Decrypt
+
 ```ruby
 require 'sm2_crypto'
 
 # Generate key pair
 keypair = OpenSSL::PKey::EC.generate("SM2")
 private_key = keypair.private_key.to_s(2)
-public_key = keypair.public_key.to_bn.to_s(2)
+public_key = keypair.public_key.to_octet_string(:uncompressed)
 
 # Encrypt data
 message = "Hello, SM2 encryption!"
@@ -48,6 +50,28 @@ decrypted_message = SM2Crypto.decrypt(private_key, encrypted_data)
 puts "Decrypted message: #{decrypted_message}"
 ```
 
+### Sign and Verify
+
+```ruby
+message = "Hello, SM2 signature!"
+# get signatrue
+sign = SM2Crypto.sign(private_key, message)
+# verify signatrue
+SM2Crypto.verify(public_key, message, sign)
+
+user_id = "31323334353637383132333435363738" # user_id should be a hex string
+# sign with hash and user_id
+sign = SM2Crypto.sign(private_key, message, sm3_hash: true, user_id: user_id)
+# verify with hash and user_id
+SM2Crypto.verify(public_key, message, sign, sm3_hash: true, user_id: user_id)
+```
+
+### Get Public Key from Private Key
+
+```ruby
+public_key = SM2Crypto.get_public_key(private_key)
+```
+
 ## Contributing
 
 Contributions to the project are welcome. Please fork the repository, create a feature branch, and submit a pull request. Be sure to add tests and update documentation as needed.

data/lib/sm2_crypto.rb

@@ -32,10 +32,10 @@ module SM2Crypto
     point = OpenSSL::PKey::EC::Point.new(OpenSSL::PKey::EC::Group.new("SM2"), OpenSSL::BN.new(public_key, 2))
     random_key = OpenSSL::PKey::EC.generate("SM2")
     k = random_key.private_key
-    c1 = random_key.public_key.to_bn.to_s(2)
+    c1 = random_key.public_key.to_octet_string(:uncompressed)
 
     p = point.mul(k)
-    p_bin_str = p.to_bn.to_s(2)
+    p_bin_str = p.to_octet_string(:uncompressed)
     x2 = p_bin_str[1, 32]
     y2 = p_bin_str[33, 32]
 
@@ -71,7 +71,7 @@ module SM2Crypto
     point = OpenSSL::PKey::EC::Point.new(OpenSSL::PKey::EC::Group.new("SM2"), OpenSSL::BN.new(c1, 2))
     pkey = OpenSSL::BN.new(private_key, 2)
     p = point.mul(pkey)
-    p_bin_str = p.to_bn.to_s(2)
+    p_bin_str = p.to_octet_string(:uncompressed)
     x2 = p_bin_str[1, 32]
     y2 = p_bin_str[33, 32]
 
@@ -85,4 +85,100 @@ module SM2Crypto
 
     msg
   end
+
+  # get public key from private key
+  #
+  # @param private_key [String] private key, format: binary string
+  # @return [String] public key, format: binary string
+  def get_public_key(private_key)
+    pkey = OpenSSL::BN.new(private_key, 2)
+    group = OpenSSL::PKey::EC::Group.new("SM2")
+    group.generator.mul(pkey).to_octet_string(:uncompressed)
+  end
+
+  # sign with private key
+  #
+  # @param private_key [String] private key, format: binary string
+  # @param data [String]
+  # @param sm3_hash [Boolean], option to sign with sm3 hash, default: false
+  # @param user_id [String], format: hex string, default: "31323334353637383132333435363738"
+  # @return [String] signature, format: hex string
+  def sign(private_key, data, sm3_hash: false, user_id: "31323334353637383132333435363738")
+    data = data.unpack1("a*") unless data.ascii_only?
+    if sm3_hash
+      public_key = get_public_key(private_key)
+      data = OpenSSL::Digest.digest("SM3", za(public_key, user_id) + data)
+    end
+
+    n = OpenSSL::BN.new("FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFF7203DF6B21C6052B53BBF40939D54123", 16)
+    da = OpenSSL::BN.new(private_key, 2)
+    e = OpenSSL::BN.new(data, 2)
+    one = OpenSSL::BN.new(1)
+
+    k = 0
+    s = 0
+    r = 0
+    while s.zero?
+      while r.zero? || r + k == n
+        random_key = OpenSSL::PKey::EC.generate("SM2")
+        k = random_key.private_key
+        x1 = OpenSSL::BN.new(random_key.public_key.to_octet_string(:uncompressed)[1, 32], 2)
+        # r = (e + x1) mod n
+        r = (e + x1) % n
+      end
+      # s = ((1 + dA)^-1 * (k - r * dA)) mod n
+      s = ((one + da).mod_inverse(n) * (k - (r * da))).to_i % n.to_i
+    end
+
+    r.to_s(16).rjust(64, "0") + s.to_s(16).rjust(64, "0")
+  end
+
+  # verify the signature with public_key
+  #
+  # @param public_key [String] public key, format: binary string
+  # @param data [String]
+  # @param signature [String], hex string
+  # @param sm3_hash [Boolean], option to sign with sm3 hash, default: false
+  # @param user_id [String], format: hex string, default: "31323334353637383132333435363738"
+  # @return [Boolean] verify result
+  def verify(public_key, data, signature, sm3_hash: false, user_id: "31323334353637383132333435363738")
+    return false if signature.size != 128
+
+    public_key = "\x04#{public_key}" if public_key.size == 64 && public_key[0] != "\x04"
+    data = data.unpack1("a*") unless data.ascii_only?
+    if sm3_hash
+      data = OpenSSL::Digest.digest("SM3", za(public_key, user_id) + data)
+    end
+    r = OpenSSL::BN.new(signature[0, 64], 16)
+    s = OpenSSL::BN.new(signature[64, 64], 16)
+    n = OpenSSL::BN.new("FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFF7203DF6B21C6052B53BBF40939D54123", 16)
+    e = OpenSSL::BN.new(data, 2)
+
+    # t = (r + s) mod n
+    t = (r + s) % n
+    return false if t.zero?
+
+    point = OpenSSL::PKey::EC::Point.new(OpenSSL::PKey::EC::Group.new("SM2"), OpenSSL::BN.new(public_key, 2))
+
+    # x1y1 = s * G + t * PA
+    x1y1 = point.mul(t, s)
+    x1 = OpenSSL::BN.new(x1y1.to_octet_string(:uncompressed)[1, 32], 2)
+
+    # R = (e + x1) mod n
+    r1 = (e + x1) % n
+
+    r == r1
+  end
+
+  # ZA = H256(ENTLA || IDA || a || b || gx || gy || px || py)
+  def za(public_key, user_id)
+    ida = [user_id].pack("H*")
+    entla = [ida.size * 8].pack("n")
+    a = ["FFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00000000FFFFFFFFFFFFFFFC"].pack("H*")
+    b = ["28E9FA9E9D9F5E344D5A9E4BCF6509A7F39789F515AB8F92DDBCBD414D940E93"].pack("H*")
+    gxgy = OpenSSL::PKey::EC::Group.new("SM2").generator.to_octet_string(:uncompressed)[1, 64]
+    public_key = public_key[1, 64] if public_key.size == 65
+
+    OpenSSL::Digest.digest("SM3", entla + ida + a + b + gxgy + public_key)
+  end
 end

data/sm2-crypto.gemspec

@@ -2,7 +2,7 @@
 
 Gem::Specification.new do |spec|
   spec.name = "sm2-crypto"
-  spec.version = "0.1"
+  spec.version = "0.2"
   spec.authors = ["Seekr"]
   spec.email = ["wzhao23@gmail.com"]
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sm2-crypto
 version: !ruby/object:Gem::Version
-  version: '0.1'
+  version: '0.2'
 platform: ruby
 authors:
 - Seekr
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-04-04 00:00:00.000000000 Z
+date: 2023-04-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: minitest