//

 //  MYKeyPair-iPhone.m

 //  MYNetwork-iPhone

 //

 //  Created by Jens Alfke on 3/22/09.

 //  Copyright 2009 Jens Alfke. All rights reserved.

 //

 #import "MYKeyPair.h"

 #import "MYCrypto_Private.h"

 #import <CommonCrypto/CommonDigest.h>

 #if MYCRYPTO_USE_IPHONE_API

 @implementation MYKeyPair

 + (MYKeyPair*) _generateRSAKeyPairOfSize: (unsigned)keySize inKeychain: (MYKeychain*)keychain {

     Assert( keySize == 512 || keySize == 1024 || keySize == 2048, @"Unsupported key size %u", keySize );

     SecKeyRef pubKey=NULL, privKey=NULL;

     OSStatus err;

     NSDictionary *pubKeyAttrs = $dict({(id)kSecAttrIsPermanent, $true});

     NSDictionary *privKeyAttrs = $dict({(id)kSecAttrIsPermanent, $true});

     NSDictionary *keyAttrs = $dict( {(id)kSecAttrKeyType, (id)kSecAttrKeyTypeRSA},

                                     {(id)kSecAttrKeySizeInBits, $object(keySize)},

                                     {(id)kSecPublicKeyAttrs, pubKeyAttrs},

                                     {(id)kSecPrivateKeyAttrs, privKeyAttrs} );

     err = SecKeyGeneratePair((CFDictionaryRef)keyAttrs,&pubKey,&privKey);

     if (err) {

         Warn(@"Failed to create key-pair: %i", err);

         return nil;

     } else

         return [[[self alloc] initWithPublicKeyRef: pubKey privateKeyRef: privKey] autorelease];

 }

 - (id) initWithPublicKeyRef: (SecKeyRef)publicKey privateKeyRef: (SecKeyRef)privateKey {

     self = [super initWithKeyRef: publicKey];

     if (self) {

         NSParameterAssert(privateKey);

         _privateKey = (SecKeyRef) CFRetain(privateKey);

     }

     return self;

 }

 - (NSArray*) _itemList {

     return $array((id)_privateKey,(id)self.keyRef);

 }

 - (SecKeyRef) privateKeyRef {

     return _privateKey;

 }

 - (NSData*) decryptData: (NSData*)data {

     return _crypt(_privateKey,data,kCCDecrypt);

 }

 - (NSData*) signData: (NSData*)data {

     Assert(data);

     uint8_t digest[CC_SHA1_DIGEST_LENGTH];

     CC_SHA1(data.bytes,data.length, digest);

     size_t sigLen = 1024;

     uint8_t sigBuf[sigLen];

     OSStatus err = SecKeyRawSign(_privateKey, kSecPaddingPKCS1SHA1,

                                    digest,sizeof(digest), //data.bytes, data.length,

                                    sigBuf, &sigLen);

     if(err) {

         Warn(@"SecKeyRawSign failed: %i",err);

         return nil;

     } else

         return [NSData dataWithBytes: sigBuf length: sigLen];

 }

 @end

 #endif MYCRYPTO_USE_IPHONE_API