(Delphi DLL) Create ECSDA Signature using Raw r and s Format (not ASN.1)

See more ECC Examples

Demonstrates how to create an ECDSA signature using the raw r/s format.

ECDSA signatures have two equal sized parts, r and s. There are two common formats for encoding the signature:

(a) Concatenating the raw byte array of r and s
(b) Encoding both into a structured ASN.1 / DER sequence.

This example demonstrates how to create a signature that is a byte array of r and s concatenated.

Note: This example requires Chilkat v9.5.0.97 or greater.

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, StringBuilder, PrivateKey, Prng, Ecc, PublicKey;

...

procedure TForm1.Button1Click(Sender: TObject);
var
sb: HCkStringBuilder;
hash: PWideChar;
privKey: HCkPrivateKey;
success: Boolean;
prng: HCkPrng;
ecdsa: HCkEcc;
ecdsaSigBase64: PWideChar;
pubKey: HCkPublicKey;
result: Integer;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// To create an ECDSA signature, the data first needs to be hashed.  Then the hash
// is signed.

sb := CkStringBuilder_Create();
CkStringBuilder_Append(sb,'The quick brown fox jumps over the lazy dog');
hash := CkStringBuilder__getHash(sb,'sha256','base64','utf-8');

// Load the ECDSA key to be used for signing.
privKey := CkPrivateKey_Create();
success := CkPrivateKey_LoadPemFile(privKey,'qa_data/ecc/secp256r1-key-pkcs8.pem');
if (success <> True) then
  begin
    Memo1.Lines.Add(CkPrivateKey__lastErrorText(privKey));
    Exit;
  end;

prng := CkPrng_Create();
ecdsa := CkEcc_Create();

// Produce a signature that is not ASN.1, but is instead the concatenation
// of the raw r and s signature parts.
// This feature was added in Chilkat v9.5.0.97
CkEcc_putAsnFormat(ecdsa,False);

ecdsaSigBase64 := CkEcc__signHashENC(ecdsa,hash,'base64',privKey,prng);
if (CkEcc_getLastMethodSuccess(ecdsa) <> True) then
  begin
    Memo1.Lines.Add(CkEcc__lastErrorText(ecdsa));
    Exit;
  end;

Memo1.Lines.Add('ECDSA signature = ' + ecdsaSigBase64);

// -----------------------------------------------------------
// Now let's verify the signature using the public key.

pubKey := CkPublicKey_Create();
success := CkPublicKey_LoadFromFile(pubKey,'qa_data/ecc/secp256r1-pubkey.pem');
if (success <> True) then
  begin
    Memo1.Lines.Add(CkPublicKey__lastErrorText(pubKey));
    Exit;
  end;

// Note: When verifying, Chilkat will auto-detect the format for both kinds of ECDSA signatures (ASN.1 or binary r+s)
result := CkEcc_VerifyHashENC(ecdsa,hash,ecdsaSigBase64,'base64',pubKey);
if (result = 1) then
  begin
    Memo1.Lines.Add('Signature is valid.');
    Exit;
  end;
if (result = 0) then
  begin
    Memo1.Lines.Add('Signature is invalid.');
    Exit;
  end;
if (result < 0) then
  begin
    Memo1.Lines.Add(CkEcc__lastErrorText(ecdsa));
    Memo1.Lines.Add('The VerifyHashENC method call failed.');
    Exit;
  end;

CkStringBuilder_Dispose(sb);
CkPrivateKey_Dispose(privKey);
CkPrng_Dispose(prng);
CkEcc_Dispose(ecdsa);
CkPublicKey_Dispose(pubKey);

end;