<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/> <meta http-equiv="X-UA-Compatible" content="IE=9"/> <meta name="generator" content="Doxygen 1.8.14"/> <meta name="viewport" content="width=device-width, initial-scale=1"/> <title>Crypto++: pkcspad.cpp Source File</title> <link href="tabs.css" rel="stylesheet" type="text/css"/> <script type="text/javascript" src="jquery.js"></script> <script type="text/javascript" src="dynsections.js"></script> <link href="doxygen.css" rel="stylesheet" type="text/css" /> </head> <body> <div id="top"><!-- do not remove this div, it is closed by doxygen! --> <div id="titlearea"> <table cellspacing="0" cellpadding="0"> <tbody> <tr style="height: 56px;"> <td id="projectalign" style="padding-left: 0.5em;"> <div id="projectname">Crypto++  <span id="projectnumber">7.0</span> </div> <div id="projectbrief">Free C++ class library of cryptographic schemes</div> </td> </tr> </tbody> </table> </div> <!-- end header part --> <!-- Generated by Doxygen 1.8.14 --> <script type="text/javascript" src="menudata.js"></script> <script type="text/javascript" src="menu.js"></script> <script type="text/javascript"> /* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */ $(function() { initMenu('',false,false,'search.php','Search'); }); /* @license-end */</script> <div id="main-nav"></div> </div><!-- top --> <div class="header"> <div class="headertitle"> <div class="title">pkcspad.cpp</div> </div> </div><!--header--> <div class="contents"> <div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span> <span class="comment">// pkcspad.cpp - originally written and placed in the public domain by Wei Dai</span></div><div class="line"><a name="l00002"></a><span class="lineno"> 2</span> </div><div class="line"><a name="l00003"></a><span class="lineno"> 3</span> <span class="preprocessor">#include "<a class="code" href="pch_8h.html">pch.h</a>"</span></div><div class="line"><a name="l00004"></a><span class="lineno"> 4</span> </div><div class="line"><a name="l00005"></a><span class="lineno"> 5</span> <span class="preprocessor">#ifndef CRYPTOPP_PKCSPAD_CPP // SunCC workaround: compiler could cause this file to be included twice</span></div><div class="line"><a name="l00006"></a><span class="lineno"> 6</span> <span class="preprocessor">#define CRYPTOPP_PKCSPAD_CPP</span></div><div class="line"><a name="l00007"></a><span class="lineno"> 7</span> </div><div class="line"><a name="l00008"></a><span class="lineno"> 8</span> <span class="preprocessor">#include "<a class="code" href="pkcspad_8h.html">pkcspad.h</a>"</span></div><div class="line"><a name="l00009"></a><span class="lineno"> 9</span> <span class="preprocessor">#include "<a class="code" href="emsa2_8h.html">emsa2.h</a>"</span></div><div class="line"><a name="l00010"></a><span class="lineno"> 10</span> <span class="preprocessor">#include "<a class="code" href="hashfwd_8h.html">hashfwd.h</a>"</span></div><div class="line"><a name="l00011"></a><span class="lineno"> 11</span> <span class="preprocessor">#include "<a class="code" href="misc_8h.html">misc.h</a>"</span></div><div class="line"><a name="l00012"></a><span class="lineno"> 12</span> <span class="preprocessor">#include "<a class="code" href="trap_8h.html">trap.h</a>"</span></div><div class="line"><a name="l00013"></a><span class="lineno"> 13</span> </div><div class="line"><a name="l00014"></a><span class="lineno"> 14</span> NAMESPACE_BEGIN(<a class="code" href="namespace_crypto_p_p.html">CryptoPP</a>)</div><div class="line"><a name="l00015"></a><span class="lineno"> 15</span> </div><div class="line"><a name="l00016"></a><span class="lineno"> 16</span> <span class="comment">// Typedef/cast change due to Clang, http://github.com/weidai11/cryptopp/issues/300</span></div><div class="line"><a name="l00017"></a><span class="lineno"> 17</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<Weak1::MD2>::decoration</a>[] = {0x30,0x20,0x30,0x0c,0x06,0x08,0x2a,0x86,0x48,0x86,0xf7,0x0d,0x02,0x02,0x05,0x00,0x04,0x10};</div><div class="line"><a name="l00018"></a><span class="lineno"> 18</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<Weak1::MD2>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<Weak1::MD2>::decoration</a>);</div><div class="line"><a name="l00019"></a><span class="lineno"> 19</span> </div><div class="line"><a name="l00020"></a><span class="lineno"> 20</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<Weak1::MD5>::decoration</a>[] = {0x30,0x20,0x30,0x0c,0x06,0x08,0x2a,0x86,0x48,0x86,0xf7,0x0d,0x02,0x05,0x05,0x00,0x04,0x10};</div><div class="line"><a name="l00021"></a><span class="lineno"> 21</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<Weak1::MD5>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<Weak1::MD5>::decoration</a>);</div><div class="line"><a name="l00022"></a><span class="lineno"> 22</span> </div><div class="line"><a name="l00023"></a><span class="lineno"> 23</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<RIPEMD160>::decoration</a>[] = {0x30,0x21,0x30,0x09,0x06,0x05,0x2b,0x24,0x03,0x02,0x01,0x05,0x00,0x04,0x14};</div><div class="line"><a name="l00024"></a><span class="lineno"> 24</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<RIPEMD160>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<RIPEMD160>::decoration</a>);</div><div class="line"><a name="l00025"></a><span class="lineno"> 25</span> </div><div class="line"><a name="l00026"></a><span class="lineno"> 26</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<Tiger>::decoration</a>[] = {0x30,0x29,0x30,0x0D,0x06,0x09,0x2B,0x06,0x01,0x04,0x01,0xDA,0x47,0x0C,0x02,0x05,0x00,0x04,0x18};</div><div class="line"><a name="l00027"></a><span class="lineno"> 27</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<Tiger>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<Tiger>::decoration</a>);</div><div class="line"><a name="l00028"></a><span class="lineno"> 28</span> </div><div class="line"><a name="l00029"></a><span class="lineno"> 29</span> <span class="comment">// Inclusion based on DLL due to Clang, http://github.com/weidai11/cryptopp/issues/300</span></div><div class="line"><a name="l00030"></a><span class="lineno"> 30</span> <span class="preprocessor">#ifndef CRYPTOPP_IS_DLL</span></div><div class="line"><a name="l00031"></a><span class="lineno"> 31</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA1>::decoration</a>[] = {0x30,0x21,0x30,0x09,0x06,0x05,0x2B,0x0E,0x03,0x02,0x1A,0x05,0x00,0x04,0x14};</div><div class="line"><a name="l00032"></a><span class="lineno"> 32</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA1>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA1>::decoration</a>);</div><div class="line"><a name="l00033"></a><span class="lineno"> 33</span> </div><div class="line"><a name="l00034"></a><span class="lineno"> 34</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA224>::decoration</a>[] = {0x30,0x2d,0x30,0x0d,0x06,0x09,0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x04,0x05,0x00,0x04,0x1c};</div><div class="line"><a name="l00035"></a><span class="lineno"> 35</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA224>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA224>::decoration</a>);</div><div class="line"><a name="l00036"></a><span class="lineno"> 36</span> </div><div class="line"><a name="l00037"></a><span class="lineno"> 37</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA256>::decoration</a>[] = {0x30,0x31,0x30,0x0d,0x06,0x09,0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x01,0x05,0x00,0x04,0x20};</div><div class="line"><a name="l00038"></a><span class="lineno"> 38</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA256>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA256>::decoration</a>);</div><div class="line"><a name="l00039"></a><span class="lineno"> 39</span> </div><div class="line"><a name="l00040"></a><span class="lineno"> 40</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA384>::decoration</a>[] = {0x30,0x41,0x30,0x0d,0x06,0x09,0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x02,0x05,0x00,0x04,0x30};</div><div class="line"><a name="l00041"></a><span class="lineno"> 41</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA384>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA384>::decoration</a>);</div><div class="line"><a name="l00042"></a><span class="lineno"> 42</span> </div><div class="line"><a name="l00043"></a><span class="lineno"> 43</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA512>::decoration</a>[] = {0x30,0x51,0x30,0x0d, 0x06,0x09,0x60,0x86, 0x48,0x01,0x65,0x03, 0x04,0x02,0x03,0x05, 0x00,0x04,0x40};</div><div class="line"><a name="l00044"></a><span class="lineno"> 44</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA512>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA512>::decoration</a>);</div><div class="line"><a name="l00045"></a><span class="lineno"> 45</span> </div><div class="line"><a name="l00046"></a><span class="lineno"> 46</span> <span class="comment">// http://github.com/weidai11/cryptopp/issues/517. OIDs and encoded prefixes found at</span></div><div class="line"><a name="l00047"></a><span class="lineno"> 47</span> <span class="comment">// http://www.ietf.org/archive/id/draft-jivsov-openpgp-sha3-01.txt</span></div><div class="line"><a name="l00048"></a><span class="lineno"> 48</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA3_256>::decoration</a>[] = {0x30,0x31,0x30,0x0d, 0x06,0x09,0x60,0x86, 0x48,0x01,0x65,0x03, 0x04,0x02,0x08,0x05, 0x00,0x04,0x20};</div><div class="line"><a name="l00049"></a><span class="lineno"> 49</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA3_256>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA3_256>::decoration</a>);</div><div class="line"><a name="l00050"></a><span class="lineno"> 50</span> </div><div class="line"><a name="l00051"></a><span class="lineno"> 51</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA3_384>::decoration</a>[] = {0x30,0x41,0x30,0x0d, 0x06,0x09,0x60,0x86, 0x48,0x01,0x65,0x03, 0x04,0x02,0x09,0x05, 0x00,0x04,0x30};</div><div class="line"><a name="l00052"></a><span class="lineno"> 52</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA3_384>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA3_384>::decoration</a>);</div><div class="line"><a name="l00053"></a><span class="lineno"> 53</span> </div><div class="line"><a name="l00054"></a><span class="lineno"> 54</span> <span class="keyword">template</span><> <span class="keyword">const</span> byte <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA3_512>::decoration</a>[] = {0x30,0x51,0x30,0x0d, 0x06,0x09,0x60,0x86, 0x48,0x01,0x65,0x03, 0x04,0x02,0x0a,0x05, 0x00,0x04,0x40};</div><div class="line"><a name="l00055"></a><span class="lineno"> 55</span> <span class="keyword">template</span><> <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA3_512>::length</a> = (<span class="keywordtype">unsigned</span> int)<span class="keyword">sizeof</span>(<a class="code" href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration<SHA3_512>::decoration</a>);</div><div class="line"><a name="l00056"></a><span class="lineno"> 56</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00057"></a><span class="lineno"> 57</span> </div><div class="line"><a name="l00058"></a><span class="lineno"><a class="line" href="class_p_k_c_s___encryption_padding_scheme.html#a6309e8f07d8e0771c3b12e7873e8a837"> 58</a></span> <span class="keywordtype">size_t</span> <a class="code" href="class_p_k_c_s___encryption_padding_scheme.html#a6309e8f07d8e0771c3b12e7873e8a837">PKCS_EncryptionPaddingScheme::MaxUnpaddedLength</a>(<span class="keywordtype">size_t</span> paddedLength)<span class="keyword"> const</span></div><div class="line"><a name="l00059"></a><span class="lineno"> 59</span> <span class="keyword"></span>{</div><div class="line"><a name="l00060"></a><span class="lineno"> 60</span>  <span class="keywordflow">return</span> <a class="code" href="misc_8h.html#a30712a90999ad9d9152975f2e92d46b8">SaturatingSubtract</a>(paddedLength/8, 10U);</div><div class="line"><a name="l00061"></a><span class="lineno"> 61</span> }</div><div class="line"><a name="l00062"></a><span class="lineno"> 62</span> </div><div class="line"><a name="l00063"></a><span class="lineno"> 63</span> <span class="keywordtype">void</span> PKCS_EncryptionPaddingScheme::Pad(<a class="code" href="class_random_number_generator.html">RandomNumberGenerator</a>& rng, <span class="keyword">const</span> byte *input, <span class="keywordtype">size_t</span> inputLen, byte *pkcsBlock, <span class="keywordtype">size_t</span> pkcsBlockLen, <span class="keyword">const</span> <a class="code" href="class_name_value_pairs.html">NameValuePairs</a>& parameters)<span class="keyword"> const</span></div><div class="line"><a name="l00064"></a><span class="lineno"> 64</span> <span class="keyword"></span>{</div><div class="line"><a name="l00065"></a><span class="lineno"> 65</span>  CRYPTOPP_UNUSED(parameters);</div><div class="line"><a name="l00066"></a><span class="lineno"> 66</span>  <a class="code" href="trap_8h.html#adf3b392588bc94cbeae9f415a78c7b95">CRYPTOPP_ASSERT</a> (inputLen <= <a class="code" href="class_p_k_c_s___encryption_padding_scheme.html#a6309e8f07d8e0771c3b12e7873e8a837">MaxUnpaddedLength</a>(pkcsBlockLen)); <span class="comment">// this should be checked by caller</span></div><div class="line"><a name="l00067"></a><span class="lineno"> 67</span> </div><div class="line"><a name="l00068"></a><span class="lineno"> 68</span>  <span class="comment">// convert from bit length to byte length</span></div><div class="line"><a name="l00069"></a><span class="lineno"> 69</span>  <span class="keywordflow">if</span> (pkcsBlockLen % 8 != 0)</div><div class="line"><a name="l00070"></a><span class="lineno"> 70</span>  {</div><div class="line"><a name="l00071"></a><span class="lineno"> 71</span>  pkcsBlock[0] = 0;</div><div class="line"><a name="l00072"></a><span class="lineno"> 72</span>  pkcsBlock++;</div><div class="line"><a name="l00073"></a><span class="lineno"> 73</span>  }</div><div class="line"><a name="l00074"></a><span class="lineno"> 74</span>  pkcsBlockLen /= 8;</div><div class="line"><a name="l00075"></a><span class="lineno"> 75</span> </div><div class="line"><a name="l00076"></a><span class="lineno"> 76</span>  pkcsBlock[0] = 2; <span class="comment">// block type 2</span></div><div class="line"><a name="l00077"></a><span class="lineno"> 77</span> </div><div class="line"><a name="l00078"></a><span class="lineno"> 78</span>  <span class="comment">// pad with non-zero random bytes</span></div><div class="line"><a name="l00079"></a><span class="lineno"> 79</span>  <span class="keywordflow">for</span> (<span class="keywordtype">unsigned</span> i = 1; i < pkcsBlockLen-inputLen-1; i++)</div><div class="line"><a name="l00080"></a><span class="lineno"> 80</span>  pkcsBlock[i] = (byte)rng.<a class="code" href="class_random_number_generator.html#a96a3eec202b6251f5c94136ab7edbde1">GenerateWord32</a>(1, 0xff);</div><div class="line"><a name="l00081"></a><span class="lineno"> 81</span> </div><div class="line"><a name="l00082"></a><span class="lineno"> 82</span>  pkcsBlock[pkcsBlockLen-inputLen-1] = 0; <span class="comment">// separator</span></div><div class="line"><a name="l00083"></a><span class="lineno"> 83</span>  memcpy(pkcsBlock+pkcsBlockLen-inputLen, input, inputLen);</div><div class="line"><a name="l00084"></a><span class="lineno"> 84</span> }</div><div class="line"><a name="l00085"></a><span class="lineno"> 85</span> </div><div class="line"><a name="l00086"></a><span class="lineno"> 86</span> <a class="code" href="struct_decoding_result.html">DecodingResult</a> PKCS_EncryptionPaddingScheme::Unpad(<span class="keyword">const</span> byte *pkcsBlock, <span class="keywordtype">size_t</span> pkcsBlockLen, byte *output, <span class="keyword">const</span> <a class="code" href="class_name_value_pairs.html">NameValuePairs</a>& parameters)<span class="keyword"> const</span></div><div class="line"><a name="l00087"></a><span class="lineno"> 87</span> <span class="keyword"></span>{</div><div class="line"><a name="l00088"></a><span class="lineno"> 88</span>  CRYPTOPP_UNUSED(parameters);</div><div class="line"><a name="l00089"></a><span class="lineno"> 89</span>  <span class="keywordtype">bool</span> invalid = <span class="keyword">false</span>;</div><div class="line"><a name="l00090"></a><span class="lineno"> 90</span>  <span class="keywordtype">size_t</span> maxOutputLen = <a class="code" href="class_p_k_c_s___encryption_padding_scheme.html#a6309e8f07d8e0771c3b12e7873e8a837">MaxUnpaddedLength</a>(pkcsBlockLen);</div><div class="line"><a name="l00091"></a><span class="lineno"> 91</span> </div><div class="line"><a name="l00092"></a><span class="lineno"> 92</span>  <span class="comment">// convert from bit length to byte length</span></div><div class="line"><a name="l00093"></a><span class="lineno"> 93</span>  <span class="keywordflow">if</span> (pkcsBlockLen % 8 != 0)</div><div class="line"><a name="l00094"></a><span class="lineno"> 94</span>  {</div><div class="line"><a name="l00095"></a><span class="lineno"> 95</span>  invalid = (pkcsBlock[0] != 0) || invalid;</div><div class="line"><a name="l00096"></a><span class="lineno"> 96</span>  pkcsBlock++;</div><div class="line"><a name="l00097"></a><span class="lineno"> 97</span>  }</div><div class="line"><a name="l00098"></a><span class="lineno"> 98</span>  pkcsBlockLen /= 8;</div><div class="line"><a name="l00099"></a><span class="lineno"> 99</span> </div><div class="line"><a name="l00100"></a><span class="lineno"> 100</span>  <span class="comment">// Require block type 2.</span></div><div class="line"><a name="l00101"></a><span class="lineno"> 101</span>  invalid = (pkcsBlock[0] != 2) || invalid;</div><div class="line"><a name="l00102"></a><span class="lineno"> 102</span> </div><div class="line"><a name="l00103"></a><span class="lineno"> 103</span>  <span class="comment">// skip past the padding until we find the separator</span></div><div class="line"><a name="l00104"></a><span class="lineno"> 104</span>  <span class="keywordtype">size_t</span> i=1;</div><div class="line"><a name="l00105"></a><span class="lineno"> 105</span>  <span class="keywordflow">while</span> (i<pkcsBlockLen && pkcsBlock[i++]) { <span class="comment">// null body</span></div><div class="line"><a name="l00106"></a><span class="lineno"> 106</span>  }</div><div class="line"><a name="l00107"></a><span class="lineno"> 107</span>  <a class="code" href="trap_8h.html#adf3b392588bc94cbeae9f415a78c7b95">CRYPTOPP_ASSERT</a>(i==pkcsBlockLen || pkcsBlock[i-1]==0);</div><div class="line"><a name="l00108"></a><span class="lineno"> 108</span> </div><div class="line"><a name="l00109"></a><span class="lineno"> 109</span>  <span class="keywordtype">size_t</span> outputLen = pkcsBlockLen - i;</div><div class="line"><a name="l00110"></a><span class="lineno"> 110</span>  invalid = (outputLen > maxOutputLen) || invalid;</div><div class="line"><a name="l00111"></a><span class="lineno"> 111</span> </div><div class="line"><a name="l00112"></a><span class="lineno"> 112</span>  <span class="keywordflow">if</span> (invalid)</div><div class="line"><a name="l00113"></a><span class="lineno"> 113</span>  <span class="keywordflow">return</span> <a class="code" href="struct_decoding_result.html">DecodingResult</a>();</div><div class="line"><a name="l00114"></a><span class="lineno"> 114</span> </div><div class="line"><a name="l00115"></a><span class="lineno"> 115</span>  memcpy (output, pkcsBlock+i, outputLen);</div><div class="line"><a name="l00116"></a><span class="lineno"> 116</span>  <span class="keywordflow">return</span> <a class="code" href="struct_decoding_result.html">DecodingResult</a>(outputLen);</div><div class="line"><a name="l00117"></a><span class="lineno"> 117</span> }</div><div class="line"><a name="l00118"></a><span class="lineno"> 118</span> </div><div class="line"><a name="l00119"></a><span class="lineno"> 119</span> <span class="comment">// ********************************************************</span></div><div class="line"><a name="l00120"></a><span class="lineno"> 120</span> </div><div class="line"><a name="l00121"></a><span class="lineno"> 121</span> <span class="preprocessor">#ifndef CRYPTOPP_IMPORTS</span></div><div class="line"><a name="l00122"></a><span class="lineno"> 122</span> </div><div class="line"><a name="l00123"></a><span class="lineno"> 123</span> <span class="keywordtype">void</span> PKCS1v15_SignatureMessageEncodingMethod::ComputeMessageRepresentative(<a class="code" href="class_random_number_generator.html">RandomNumberGenerator</a> &rng,</div><div class="line"><a name="l00124"></a><span class="lineno"> 124</span>  <span class="keyword">const</span> byte *recoverableMessage, <span class="keywordtype">size_t</span> recoverableMessageLength,</div><div class="line"><a name="l00125"></a><span class="lineno"> 125</span>  <a class="code" href="class_hash_transformation.html">HashTransformation</a> &hash, HashIdentifier hashIdentifier, <span class="keywordtype">bool</span> messageEmpty,</div><div class="line"><a name="l00126"></a><span class="lineno"> 126</span>  byte *representative, <span class="keywordtype">size_t</span> representativeBitLength)<span class="keyword"> const</span></div><div class="line"><a name="l00127"></a><span class="lineno"> 127</span> <span class="keyword"></span>{</div><div class="line"><a name="l00128"></a><span class="lineno"> 128</span>  CRYPTOPP_UNUSED(rng), CRYPTOPP_UNUSED(recoverableMessage), CRYPTOPP_UNUSED(recoverableMessageLength);</div><div class="line"><a name="l00129"></a><span class="lineno"> 129</span>  CRYPTOPP_UNUSED(messageEmpty), CRYPTOPP_UNUSED(hashIdentifier);</div><div class="line"><a name="l00130"></a><span class="lineno"> 130</span>  <a class="code" href="trap_8h.html#adf3b392588bc94cbeae9f415a78c7b95">CRYPTOPP_ASSERT</a>(representativeBitLength >= MinRepresentativeBitLength(hashIdentifier.second, hash.<a class="code" href="class_hash_transformation.html#a9f42cc280bac76b884ad12615c0dabb5">DigestSize</a>()));</div><div class="line"><a name="l00131"></a><span class="lineno"> 131</span> </div><div class="line"><a name="l00132"></a><span class="lineno"> 132</span>  <span class="keywordtype">size_t</span> pkcsBlockLen = representativeBitLength;</div><div class="line"><a name="l00133"></a><span class="lineno"> 133</span>  <span class="comment">// convert from bit length to byte length</span></div><div class="line"><a name="l00134"></a><span class="lineno"> 134</span>  <span class="keywordflow">if</span> (pkcsBlockLen % 8 != 0)</div><div class="line"><a name="l00135"></a><span class="lineno"> 135</span>  {</div><div class="line"><a name="l00136"></a><span class="lineno"> 136</span>  representative[0] = 0;</div><div class="line"><a name="l00137"></a><span class="lineno"> 137</span>  representative++;</div><div class="line"><a name="l00138"></a><span class="lineno"> 138</span>  }</div><div class="line"><a name="l00139"></a><span class="lineno"> 139</span>  pkcsBlockLen /= 8;</div><div class="line"><a name="l00140"></a><span class="lineno"> 140</span> </div><div class="line"><a name="l00141"></a><span class="lineno"> 141</span>  representative[0] = 1; <span class="comment">// block type 1</span></div><div class="line"><a name="l00142"></a><span class="lineno"> 142</span> </div><div class="line"><a name="l00143"></a><span class="lineno"> 143</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> digestSize = hash.<a class="code" href="class_hash_transformation.html#a9f42cc280bac76b884ad12615c0dabb5">DigestSize</a>();</div><div class="line"><a name="l00144"></a><span class="lineno"> 144</span>  byte *pPadding = representative + 1;</div><div class="line"><a name="l00145"></a><span class="lineno"> 145</span>  byte *pDigest = representative + pkcsBlockLen - digestSize;</div><div class="line"><a name="l00146"></a><span class="lineno"> 146</span>  byte *pHashId = pDigest - hashIdentifier.second;</div><div class="line"><a name="l00147"></a><span class="lineno"> 147</span>  byte *pSeparator = pHashId - 1;</div><div class="line"><a name="l00148"></a><span class="lineno"> 148</span> </div><div class="line"><a name="l00149"></a><span class="lineno"> 149</span>  <span class="comment">// pad with 0xff</span></div><div class="line"><a name="l00150"></a><span class="lineno"> 150</span>  memset(pPadding, 0xff, pSeparator-pPadding);</div><div class="line"><a name="l00151"></a><span class="lineno"> 151</span>  *pSeparator = 0;</div><div class="line"><a name="l00152"></a><span class="lineno"> 152</span>  memcpy(pHashId, hashIdentifier.first, hashIdentifier.second);</div><div class="line"><a name="l00153"></a><span class="lineno"> 153</span>  hash.<a class="code" href="class_hash_transformation.html#aa0b8c7a110d8968268fd02ec32b9a8e8">Final</a>(pDigest);</div><div class="line"><a name="l00154"></a><span class="lineno"> 154</span> }</div><div class="line"><a name="l00155"></a><span class="lineno"> 155</span> </div><div class="line"><a name="l00156"></a><span class="lineno"> 156</span> <span class="preprocessor">#endif</span></div><div class="line"><a name="l00157"></a><span class="lineno"> 157</span> </div><div class="line"><a name="l00158"></a><span class="lineno"> 158</span> NAMESPACE_END</div><div class="line"><a name="l00159"></a><span class="lineno"> 159</span> </div><div class="line"><a name="l00160"></a><span class="lineno"> 160</span> <span class="preprocessor">#endif</span></div><div class="ttc" id="misc_8h_html"><div class="ttname"><a href="misc_8h.html">misc.h</a></div><div class="ttdoc">Utility functions for the Crypto++ library. </div></div> <div class="ttc" id="hashfwd_8h_html"><div class="ttname"><a href="hashfwd_8h.html">hashfwd.h</a></div><div class="ttdoc">Forward declarations for hash functions used in signature encoding methods. </div></div> <div class="ttc" id="emsa2_8h_html"><div class="ttname"><a href="emsa2_8h.html">emsa2.h</a></div><div class="ttdoc">Classes and functions for various padding schemes used in public key algorithms. </div></div> <div class="ttc" id="class_random_number_generator_html_a96a3eec202b6251f5c94136ab7edbde1"><div class="ttname"><a href="class_random_number_generator.html#a96a3eec202b6251f5c94136ab7edbde1">RandomNumberGenerator::GenerateWord32</a></div><div class="ttdeci">virtual word32 GenerateWord32(word32 min=0, word32 max=0xffffffffUL)</div><div class="ttdoc">Generate a random 32 bit word in the range min to max, inclusive. </div><div class="ttdef"><b>Definition:</b> <a href="cryptlib_8cpp_source.html#l00289">cryptlib.cpp:289</a></div></div> <div class="ttc" id="class_random_number_generator_html"><div class="ttname"><a href="class_random_number_generator.html">RandomNumberGenerator</a></div><div class="ttdoc">Interface for random number generators. </div><div class="ttdef"><b>Definition:</b> <a href="cryptlib_8h_source.html#l01330">cryptlib.h:1330</a></div></div> <div class="ttc" id="struct_decoding_result_html"><div class="ttname"><a href="struct_decoding_result.html">DecodingResult</a></div><div class="ttdoc">Returns a decoding results. </div><div class="ttdef"><b>Definition:</b> <a href="cryptlib_8h_source.html#l00252">cryptlib.h:252</a></div></div> <div class="ttc" id="pkcspad_8h_html"><div class="ttname"><a href="pkcspad_8h.html">pkcspad.h</a></div><div class="ttdoc">Classes for PKCS padding schemes. </div></div> <div class="ttc" id="pch_8h_html"><div class="ttname"><a href="pch_8h.html">pch.h</a></div><div class="ttdoc">Precompiled header file. </div></div> <div class="ttc" id="misc_8h_html_a30712a90999ad9d9152975f2e92d46b8"><div class="ttname"><a href="misc_8h.html#a30712a90999ad9d9152975f2e92d46b8">SaturatingSubtract</a></div><div class="ttdeci">T1 SaturatingSubtract(const T1 &a, const T2 &b)</div><div class="ttdoc">Performs a saturating subtract clamped at 0. </div><div class="ttdef"><b>Definition:</b> <a href="misc_8h_source.html#l00890">misc.h:890</a></div></div> <div class="ttc" id="trap_8h_html_adf3b392588bc94cbeae9f415a78c7b95"><div class="ttname"><a href="trap_8h.html#adf3b392588bc94cbeae9f415a78c7b95">CRYPTOPP_ASSERT</a></div><div class="ttdeci">#define CRYPTOPP_ASSERT(exp)</div><div class="ttdoc">Debugging and diagnostic assertion. </div><div class="ttdef"><b>Definition:</b> <a href="trap_8h_source.html#l00060">trap.h:60</a></div></div> <div class="ttc" id="class_hash_transformation_html_a9f42cc280bac76b884ad12615c0dabb5"><div class="ttname"><a href="class_hash_transformation.html#a9f42cc280bac76b884ad12615c0dabb5">HashTransformation::DigestSize</a></div><div class="ttdeci">virtual unsigned int DigestSize() const =0</div><div class="ttdoc">Provides the digest size of the hash. </div></div> <div class="ttc" id="trap_8h_html"><div class="ttname"><a href="trap_8h.html">trap.h</a></div><div class="ttdoc">Debugging and diagnostic assertions. </div></div> <div class="ttc" id="class_hash_transformation_html"><div class="ttname"><a href="class_hash_transformation.html">HashTransformation</a></div><div class="ttdoc">Interface for hash functions and data processing part of MACs. </div><div class="ttdef"><b>Definition:</b> <a href="cryptlib_8h_source.html#l01065">cryptlib.h:1065</a></div></div> <div class="ttc" id="class_p_k_c_s___digest_decoration_html"><div class="ttname"><a href="class_p_k_c_s___digest_decoration.html">PKCS_DigestDecoration</a></div><div class="ttdoc">PKCS #1 decoration data structure. </div><div class="ttdef"><b>Definition:</b> <a href="pkcspad_8h_source.html#l00034">pkcspad.h:34</a></div></div> <div class="ttc" id="class_p_k_c_s___encryption_padding_scheme_html_a6309e8f07d8e0771c3b12e7873e8a837"><div class="ttname"><a href="class_p_k_c_s___encryption_padding_scheme.html#a6309e8f07d8e0771c3b12e7873e8a837">PKCS_EncryptionPaddingScheme::MaxUnpaddedLength</a></div><div class="ttdeci">size_t MaxUnpaddedLength(size_t paddedLength) const</div><div class="ttdoc">max size of unpadded message in bytes, given max size of padded message in bits (1 less than size of ...</div><div class="ttdef"><b>Definition:</b> <a href="pkcspad_8cpp_source.html#l00058">pkcspad.cpp:58</a></div></div> <div class="ttc" id="namespace_crypto_p_p_html"><div class="ttname"><a href="namespace_crypto_p_p.html">CryptoPP</a></div><div class="ttdoc">Crypto++ library namespace. </div></div> <div class="ttc" id="class_hash_transformation_html_aa0b8c7a110d8968268fd02ec32b9a8e8"><div class="ttname"><a href="class_hash_transformation.html#aa0b8c7a110d8968268fd02ec32b9a8e8">HashTransformation::Final</a></div><div class="ttdeci">virtual void Final(byte *digest)</div><div class="ttdoc">Computes the hash of the current message. </div><div class="ttdef"><b>Definition:</b> <a href="cryptlib_8h_source.html#l01095">cryptlib.h:1095</a></div></div> <div class="ttc" id="class_name_value_pairs_html"><div class="ttname"><a href="class_name_value_pairs.html">NameValuePairs</a></div><div class="ttdoc">Interface for retrieving values given their names. </div><div class="ttdef"><b>Definition:</b> <a href="cryptlib_8h_source.html#l00290">cryptlib.h:290</a></div></div> </div><!-- fragment --></div><!-- contents --> <!-- start footer part --> <hr class="footer"/><address class="footer"><small> Generated on Sun Sep 16 2018 07:57:59 for Crypto++ by  <a href="http://www.doxygen.org/index.html"> <img class="footer" src="doxygen.png" alt="doxygen"/> </a> 1.8.14 </small></address> </body> </html>