(MFC) ECDSA Sign and Verify Data using Different Hash Algorithms

Demonstrates how to create ECDSA signatures on data using different hash algorithms.

Note: This example requires Chilkat v9.5.0.85 or greater because the SignBd and VerifyBd methods were added in v9.5.0.85.

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkPrivateKey.h>
#include <CkBinData.h>
#include <CkEcc.h>
#include <CkPrng.h>
#include <CkPublicKey.h>

void ChilkatSample(void)
    {
    CkString strOut;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // First load an ECDSA private key to be used for signing.
    CkPrivateKey privKey;
    bool success = privKey.LoadEncryptedPemFile("qa_data/ecc/secp256r1-key-pkcs8-secret.pem","secret");
    if (success == false) {
        strOut.append(privKey.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Load some data to be signed.
    CkBinData bd;
    success = bd.LoadFile("qa_data/hamlet.xml");
    if (success == false) {
        strOut.append("Failed to load file to be hashed.");
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    CkEcc ecdsa;
    CkPrng prng;

    // Sign the sha256 hash of the data.  Return the ECDSA signature in the base64 encoding.
    strOut.append("ECDSA signing the sha256 hash of the data...");
    strOut.append("\r\n");
    const char *sig = ecdsa.signBd(bd,"sha256","base64",privKey,prng);
    strOut.append("sig = ");
    strOut.append(sig);
    strOut.append("\r\n");

    // Verify the signature against the original data.
    // (We must use the same hash algorithm that was used when signing.)

    // Load the public key that corresponds to the private key used for signing.
    CkPublicKey pubKey;
    success = pubKey.LoadFromFile("qa_data/ecc/secp256r1-pub.pem");
    if (success == false) {
        strOut.append(pubKey.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    CkEcc ecc2;
    int result = ecc2.VerifyBd(bd,"sha256",sig,"base64",pubKey);
    if (result != 1) {
        strOut.append(ecc2.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    strOut.append("Verified!");
    strOut.append("\r\n");

    // ----------------------------------------------------------------------------------------
    // Let's do the same thing, but with sha384 hashing...

    strOut.append("--------------------------------------------");
    strOut.append("\r\n");
    strOut.append("ECDSA signing the sha384 hash of the data...");
    strOut.append("\r\n");

    sig = ecdsa.signBd(bd,"sha384","base64",privKey,prng);
    strOut.append("sig = ");
    strOut.append(sig);
    strOut.append("\r\n");

    result = ecc2.VerifyBd(bd,"sha384",sig,"base64",pubKey);
    if (result != 1) {
        strOut.append(ecc2.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    strOut.append("Verified!");
    strOut.append("\r\n");


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }