sig_test.c

斯坦福大学密码学家Boneh的基于身份的公钥密码系统

/* identity-based signature test program
 * Ben Lynn
 */
/*
Copyright (C) 2001 Benjamin Lynn ([e-mail])

See LICENSE for license
*/
#include "ibe.h"

int main()
{
    params_t params;
    byte_string_t priv, pub;
    byte_string_t priv2, pub2;
    byte_string_t sig;
    byte_string_t message;
    byte_string_t master;
    byte_string_t cert, cshare[2];
    byte_string_t mshare[2];
    char *id = "test";

    IBE_init();

    IBE_setup(params, master, 512, 160, "test");

    IBE_keygen(priv, pub, params);

    IBE_keygen(priv2, pub2, params);

    byte_string_set(message, "Hello, World");

    //Rather than work out the certifcate directly from the master key,
    //I'll demonstrate how secret sharing works.
    //This is done so that an attacker must compromise all the servers in
    //order to break the system.

    //During setup the master key is split into two pieces
    //One server guards mshare[0], and the other guards mshare[1]
    IBE_split_master(mshare, master, 2, 2, params);

    //The user then requests a certificate share from each server
    IBE_certify_share(cshare[0], mshare[0], pub, id, params);
    IBE_certify_share(cshare[1], mshare[1], pub, id, params);

    //...and combines them to get a full certificate on their public key
    IBE_combine(cert, cshare, params);

    IBE_sign(sig, message, priv, cert, params);

    printf("Sig: ");
    byte_string_fprintf(stdout, sig, " %02X");
    printf("\n");

    if (IBE_verify(sig, message, pub, id, params)) {
	printf("signature verifies\n");
    } else {
	printf("bug: signature does not verify\n");
    }

    if (IBE_verify(sig, message, pub2, id, params)) {
	printf("bug: signature verifies with wrong public key\n");
    }

    params_clear(params);

    byte_string_clear(pub2); byte_string_clear(priv2);
    byte_string_clear(pub); byte_string_clear(priv);
    byte_string_clear(cert);
    byte_string_clear(cshare[0]);
    byte_string_clear(cshare[1]);
    byte_string_clear(master);
    byte_string_clear(mshare[0]);
    byte_string_clear(mshare[1]);
    byte_string_clear(message);
    byte_string_clear(sig);

    IBE_clear();

    return 0;
}