MYCrypto: MYPublicKey-iPhone.m@0a6527af039b

     1 //

     2 //  MYPublicKey-iPhone.m

     3 //  MYCrypto-iPhone

     4 //

     5 //  Created by Jens Alfke on 3/30/09.

     6 //  Copyright 2009 Jens Alfke. All rights reserved.

     7 //

     9 #import "MYPublicKey.h"

    10 #import "MYCrypto_Private.h"

    12 #if USE_IPHONE_API

    14 #import "MYDigest.h"

    15 #import "MYErrorUtils.h"

    18 @implementation MYPublicKey

    21 - (void) dealloc

    22 {

    23     [_digest release];

    24     [super dealloc];

    25 }

    28 - (SecExternalItemType) keyType {

    29     return kSecAttrKeyClassPublic;

    30 }

    33 - (MYPublicKey*) asPublicKey {

    34     return self;

    35 }

    39 - (MYSHA1Digest*) publicKeyDigest {

    40     NSData *digestData = [self _attribute: kSecAttrApplicationLabel];

    41     if (digestData)

    42         return (MYSHA1Digest*) [MYSHA1Digest digestFromDigestData: digestData];

    43     else {

    44         Warn(@"MYKeyPair: public key didn't have digest attribute");

    45         return nil;

    46     }

    47 }

    50 - (NSData*) encryptData: (NSData*)data {

    51     return _crypt(self.keyRef,data,kCCEncrypt);

    52 }

    55 - (BOOL) verifySignature: (NSData*)signature ofData: (NSData*)data {

    56     Assert(data);

    57     Assert(signature);

    58     uint8_t digest[CC_SHA1_DIGEST_LENGTH];

    59     CC_SHA1(data.bytes,data.length, digest);

    60     OSStatus err = SecKeyRawVerify(self.keyRef, kSecPaddingPKCS1SHA1,

    61                                    digest,sizeof(digest), //data.bytes, data.length,

    62                                    signature.bytes, signature.length);

    63     return err==noErr;

    64 }

    67 @end

    72 NSData* _crypt(SecKeyRef key, NSData *data, CCOperation op) {

    73     CAssert(data);

    74     size_t dataLength = data.length;

    75     size_t outputLength = MAX(dataLength, SecKeyGetBlockSize(key));

    76     void *outputBuf = malloc(outputLength);

    77     if (!outputBuf) return nil;

    78     OSStatus err;

    79     if (op==kCCEncrypt)

    80         err = SecKeyEncrypt(key, kSecPaddingNone,//PKCS1,

    81                             data.bytes, dataLength,

    82                             outputBuf, &outputLength);

    83     else

    84         err = SecKeyDecrypt(key, kSecPaddingNone,//PKCS1,

    85                             data.bytes, dataLength,

    86                             outputBuf, &outputLength);

    87     if (err) {

    88         free(outputBuf);

    89         Warn(@"%scrypting failed (%i)", (op==kCCEncrypt ?"En" :"De"), err);

    90         // Note: One of the errors I've seen is -9809, which is errSSLCrypto (SecureTransport.h)

    91         return nil;

    92     } else

    93         return [NSData dataWithBytesNoCopy: outputBuf length: outputLength freeWhenDone: YES];

    94 }

    96 #endif USE_IPHONE_API

author	snej@snej.local
	Sat Apr 04 20:42:03 2009 -0700 (2009-04-04)
changeset 0	0a6527af039b
child 1	60e4cbbb5128
permissions	-rw-r--r--