pkix-signature-rsa.cpp revision 8cba79d647bd84eb8b7d9eb39ac77cc85ae247c5
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * IPRT - Crypto - Public Key Signature Schema Algorithm, RSA Providers.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * Copyright (C) 2006-2014 Oracle Corporation
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * This file is part of VirtualBox Open Source Edition (OSE), as
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * available from http://www.virtualbox.org. This file is free software;
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * you can redistribute it and/or modify it under the terms of the GNU
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * General Public License (GPL) as published by the Free Software
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * Foundation, in version 2 as it comes in the "COPYING" file of the
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * VirtualBox OSE distribution. VirtualBox OSE is distributed in the
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * The contents of this file may alternatively be used under the terms
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * of the Common Development and Distribution License Version 1.0
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * (CDDL) only, as it comes in the "COPYING.CDDL" file of the
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * VirtualBox OSE distribution, in which case the provisions of the
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * CDDL are applicable instead of those of the GPL.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * You may elect to license modified versions of this file under the
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * terms and conditions of either the GPL or the CDDL or both.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/*******************************************************************************
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync* Header Files *
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync*******************************************************************************/
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/*******************************************************************************
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync* Structures and Typedefs *
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync*******************************************************************************/
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * RSA signature provider instance.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /** Set if we're signing, clear if verifying. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /** The modulus. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /** The exponent. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /** Temporary big number for use when signing or verifiying. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /** Temporary big number for use when signing or verifiying. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /** Scratch space for decoding the key. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /** Public key. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /** Private key. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /** Scratch area where we assemble the signature. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync uint8_t abSignature[RTCRRSA_MAX_MODULUS_BITS / 8 * 2];
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/** Pointer to an RSA signature provider instance. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsynctypedef RTCRPKIXSIGNATURERSA *PRTCRPKIXSIGNATURERSA;
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/*******************************************************************************
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync* Global Variables *
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync*******************************************************************************/
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/** @name Pre-encoded DigestInfo DER sequences.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync{/* { { 1.2.840.113549.2.2 (MD2), NULL }, hash octet-string } */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync 0x30,0x20, 0x30,0x0c, 0x06,0x08,0x2a,0x86,0x48,0x86,0xf7,0x0d,0x02,0x02, 0x05,0x00, 0x04,0x10
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync{/* { { 1.2.840.113549.2.4 (MD4), NULL }, hash octet-string } */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync 0x30,0x20, 0x30,0x0c, 0x06,0x08,0x2a,0x86,0x48,0x86,0xf7,0x0d,0x02,0x04, 0x05,0x00, 0x04,0x10
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync{/* { { 1.2.840.113549.2.5 (MD5), NULL }, hash octet-string } */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync 0x30,0x20, 0x30,0x0c, 0x06,0x08,0x2a,0x86,0x48,0x86,0xf7,0x0d,0x02,0x05, 0x05,0x00, 0x04,0x10
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync{/* { { 1.3.14.3.2.26 (SHA-1), NULL }, hash octet-string } */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync 0x30,0x21, 0x30,0x09, 0x06,0x05,0x2b,0x0e,0x03,0x02,0x1a, 0x05,0x00, 0x04,0x14
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync{/* { { 2.16.840.1.101.3.4.2.1 (SHA-256), NULL }, hash octet-string } */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync 0x30,0x31, 0x30,0x0d, 0x06,0x09,0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x01, 0x05,0x00, 0x04,0x20
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync{/* { { 2.16.840.1.101.3.4.2.2 (SHA-384), NULL }, hash octet-string } */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync 0x30,0x41, 0x30,0x0d, 0x06,0x09,0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x02, 0x05,0x00, 0x04,0x30
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync{/* { { 2.16.840.1.101.3.4.2.3 (SHA-512), NULL }, hash octet-string } */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync 0x30,0x51, 0x30,0x0d, 0x06,0x09,0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x03, 0x05,0x00, 0x04,0x40
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync{/* { { 2.16.840.1.101.3.4.2.4 (SHA-224), NULL }, hash octet-string } */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync 0x30,0x21, 0x30,0x0d, 0x06,0x09,0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x04, 0x05,0x00, 0x04,0x14
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/** Lookup array for the pre-encoded DigestInfo DER sequences. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsyncstatic struct
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync { RTDIGESTTYPE_SHA256, g_abSha256, sizeof(g_abSha256) },
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync { RTDIGESTTYPE_SHA384, g_abSha384, sizeof(g_abSha384) },
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync { RTDIGESTTYPE_SHA512, g_abSha512, sizeof(g_abSha512) },
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync { RTDIGESTTYPE_SHA224, g_abSha224, sizeof(g_abSha224) },
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/** @impl_interface_method{RTCRPKIXSIGNATUREDESC,pfnInit} */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsyncstatic DECLCALLBACK(int) rtCrPkixSignatureRsa_Init(PCRTCRPKIXSIGNATUREDESC pDesc, void *pvState, void *pvOpaque,
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync bool fSigning, PCRTASN1BITSTRING pKey, PCRTASN1DYNTYPE pParams)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync PRTCRPKIXSIGNATURERSA pThis = (PRTCRPKIXSIGNATURERSA)pvState;
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * Decode the key and pick the bits we really need from it.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync RTAsn1CursorInitPrimary(&PrimaryCursor, RTASN1BITSTRING_GET_BIT0_PTR(pKey), RTASN1BITSTRING_GET_BYTE_SIZE(pKey),
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync NULL, &g_RTAsn1DefaultAllocator, RTASN1CURSOR_FLAGS_DER, "rsa");
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync rc = RTCrRsaPublicKey_DecodeAsn1(&PrimaryCursor.Cursor, 0, &pThis->Scratch.PublicKey, "PublicKey");
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync rc = RTAsn1Integer_ToBigNum(&pThis->Scratch.PublicKey.Modulus, &pThis->Modulus, 0);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync rc = RTAsn1Integer_ToBigNum(&pThis->Scratch.PublicKey.PublicExponent, &pThis->Exponent, 0);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync RTAsn1VtDelete(&pThis->Scratch.PublicKey.SeqCore.Asn1Core);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync RTAsn1VtDelete(&pThis->Scratch.PublicKey.SeqCore.Asn1Core);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync rc = RTCrRsaPrivateKey_DecodeAsn1(&PrimaryCursor.Cursor, 0, &pThis->Scratch.PrivateKey, "PrivateKey");
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync rc = RTAsn1Integer_ToBigNum(&pThis->Scratch.PrivateKey.Modulus, &pThis->Modulus, RTBIGNUMINIT_F_SENSITIVE);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync rc = RTAsn1Integer_ToBigNum(&pThis->Scratch.PrivateKey.PublicExponent, &pThis->Exponent, RTBIGNUMINIT_F_SENSITIVE);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync RTAsn1VtDelete(&pThis->Scratch.PrivateKey.SeqCore.Asn1Core);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync RTAsn1VtDelete(&pThis->Scratch.PrivateKey.SeqCore.Asn1Core);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/** @impl_interface_method{RTCRPKIXSIGNATUREDESC,pfnReset} */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsyncstatic DECLCALLBACK(int) rtCrPkixSignatureRsa_Reset(PCRTCRPKIXSIGNATUREDESC pDesc, void *pvState, bool fSigning)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync PRTCRPKIXSIGNATURERSA pThis = (PRTCRPKIXSIGNATURERSA)pvState;
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/** @impl_interface_method{RTCRPKIXSIGNATUREDESC,pfnDelete} */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsyncstatic DECLCALLBACK(void) rtCrPkixSignatureRsa_Delete(PCRTCRPKIXSIGNATUREDESC pDesc, void *pvState, bool fSigning)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync PRTCRPKIXSIGNATURERSA pThis = (PRTCRPKIXSIGNATURERSA)pvState;
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * Common worker for rtCrPkixSignatureRsa_Verify and
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * rtCrPkixSignatureRsa_Sign that encodes an EMSA-PKCS1-V1_5 signature in
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * the scratch area.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * This function is referred to as EMSA-PKCS1-v1_5-ENCODE(M,k) in RFC-3447 and
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * is described in section 9.2
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * @returns IPRT status code.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * @param pThis The RSA signature provider instance.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * @param hDigest The digest which hash to turn into a signature.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * @param cbEncodedMsg The desired encoded message length.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * @param fNoDigestInfo If true, skip the DigestInfo and encode the digest
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * without any prefix like described in v1.5 (RFC-2313)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * and observed with RSA+MD5 signed timestamps. If
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * false, include the prefix like v2.0 (RFC-2437)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * describes in step in section 9.2.1
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * (EMSA-PKCS1-v1_5)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsyncstatic int rtCrPkixSignatureRsa_EmsaPkcs1V15Encode(PRTCRPKIXSIGNATURERSA pThis, RTCRDIGEST hDigest, size_t cbEncodedMsg,
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync AssertReturn(cbEncodedMsg * 2 <= sizeof(pThis->Scratch), VERR_CR_PKIX_INTERNAL_ERROR);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * Figure out which hash and select the associate prebaked DigestInfo.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync RTDIGESTTYPE const enmDigest = RTCrDigestGetType(hDigest);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync AssertReturn(enmDigest != RTDIGESTTYPE_INVALID && enmDigest != RTDIGESTTYPE_UNKNOWN, VERR_CR_PKIX_UNKNOWN_DIGEST_TYPE);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync for (uint32_t i = 0; i < RT_ELEMENTS(g_aDigestInfos); i++)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * Get the hash size and verify that it matches what we've got in the
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * precooked DigestInfo. ASSUMES less that 256 bytes of hash.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync uint32_t const cbHash = RTCrDigestGetHashSize(hDigest);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync AssertReturn(cbHash > 0 && cbHash < _16K, VERR_OUT_OF_RANGE);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync AssertReturn(cbHash == pbDigestInfoStart[cbDigestInfoStart - 1], VERR_CR_PKIX_INTERNAL_ERROR);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync if (cbDigestInfoStart + cbHash + 11 > cbEncodedMsg)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * Encode the message the first part of the scratch area.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync pbDst[1] = 0x01; /* BT - block type, see RFC-2313. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync size_t cbFFs = cbEncodedMsg - cbHash - cbDigestInfoStart - 3;
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync memcpy(pbDst, pbDigestInfoStart, cbDigestInfoStart);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync Assert((size_t)(pbDst - &pThis->Scratch.abSignature[0]) == cbEncodedMsg);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/** @impl_interface_method{RTCRPKIXSIGNATUREDESC,pfnVerify} */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsyncstatic DECLCALLBACK(int) rtCrPkixSignatureRsa_Verify(PCRTCRPKIXSIGNATUREDESC pDesc, void *pvState,
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync RTCRDIGEST hDigest, void const *pvSignature, size_t cbSignature)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync PRTCRPKIXSIGNATURERSA pThis = (PRTCRPKIXSIGNATURERSA)pvState;
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * 8.2.2.1 - Length check.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync if (cbSignature != RTBigNumByteWidth(&pThis->Modulus))
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * 8.2.2.2 - RSA verification / Decrypt the signature.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /* a) s = OS2IP(S) -- Convert signature to integer. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync int rc = RTBigNumInit(&pThis->TmpBigNum1, RTBIGNUMINIT_F_ENDIAN_BIG | RTBIGNUMINIT_F_UNSIGNED,
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /* b) RSAVP1 - 5.2.2.2: Range check (0 <= s < n). */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync if (RTBigNumCompare(&pThis->TmpBigNum1, &pThis->Modulus) < 0)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync if (RTBigNumCompareWithU64(&pThis->TmpBigNum1, 0) >= 0)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /* b) RSAVP1 - 5.2.2.3: s^e mod n */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync rc = RTBigNumModExp(&pThis->TmpBigNum2, &pThis->TmpBigNum1, &pThis->Exponent, &pThis->Modulus);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /* c) EM' = I2OSP(m, k) -- Convert the result to bytes. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync uint32_t cbDecrypted = RTBigNumByteWidth(&pThis->TmpBigNum2) + 1; /* 1 = leading zero byte */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync uint8_t *pbDecrypted = &pThis->Scratch.abSignature[sizeof(pThis->Scratch) / 2];
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync rc = RTBigNumToBytesBigEndian(&pThis->TmpBigNum2, pbDecrypted, cbDecrypted);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * 8.2.2.3 - Build a hopefully identical signature using hDigest.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync rc = rtCrPkixSignatureRsa_EmsaPkcs1V15Encode(pThis, hDigest, cbDecrypted, false /* fNoDigestInfo */);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * 8.2.2.4 - Compare the two.
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync if (memcmp(&pThis->Scratch.abSignature[0], pbDecrypted, cbDecrypted) == 0)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * Try again without digestinfo. This style signing has been
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync * observed in Vista timestamp counter signatures (Thawte).
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync rc = rtCrPkixSignatureRsa_EmsaPkcs1V15Encode(pThis, hDigest, cbDecrypted,
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync true /* fNoDigestInfo */);
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync if (memcmp(&pThis->Scratch.abSignature[0], pbDecrypted, cbDecrypted) == 0)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/** @impl_interface_method{RTCRPKIXSIGNATUREDESC,pfnSign} */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsyncstatic DECLCALLBACK(int) rtCrPkixSignatureRsa_Sign(PCRTCRPKIXSIGNATUREDESC pDesc, void *pvState,
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync RTCRDIGEST hDigest, void *pvSignature, size_t *pcbSignature)
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync PRTCRPKIXSIGNATURERSA pThis = (PRTCRPKIXSIGNATURERSA)pvState;
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/** RSA alias ODIs. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsyncstatic const char * const g_apszHashWithRsaAliases[] =
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync /* Note: Note quite sure about these OIW oddballs. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync/** RSA descriptor. */
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsyncDECL_HIDDEN_CONST(RTCRPKIXSIGNATUREDESC const) g_rtCrPkixSigningHashWithRsaDesc =
7da9e7e719adde3baba3f6fa1d0bcfb170cf9911vboxsync "RSASSA-PKCS1-v1_5",