def _constructEcFromRawKey(self, rawPublicKey):
ec_key, ec_group, ec_point = None, None, None
try:
ec_key = o.EC_KEY_new_by_curve_name(o.OBJ_txt2nid(b"prime256v1"))
ec_group = o.EC_GROUP_new_by_curve_name(o.OBJ_txt2nid(b"prime256v1"))
ec_point = o.EC_POINT_new(ec_group)
# Add 0x04 byte to signal "uncompressed" public key
pubBuf = bytesToC(bytearray([0x04]) + rawPublicKey)
o.EC_POINT_oct2point(ec_group, ec_point, pubBuf, 65, None)
o.EC_KEY_set_public_key(ec_key, ec_point)
return o.EC_KEY_dup(ec_key)
finally:
if ec_key:
o.EC_KEY_free(ec_key)
if ec_group:
o.EC_KEY_free(ec_group)
if ec_point:
o.EC_POINT_free(ec_point)
def _constructEcFromRawKey(self, rawPrivateKey):
privBignum, ec_key = None, None
try:
ec_key = o.EC_KEY_new_by_curve_name(o.OBJ_txt2nid(b"prime256v1"))
privBuf = bytesToC(rawPrivateKey)
privBignum = o.BN_new()
o.BN_bin2bn(privBuf, 32, privBignum)
o.EC_KEY_set_private_key(ec_key, privBignum)
return o.EC_KEY_dup(ec_key)
finally:
if privBignum:
o.BN_free(privBignum)
if ec_key:
o.EC_KEY_free(ec_key)
def generateECKeyPair():
ec_key, ec_group = None, None
try:
# Generate the new key
ec_key = o.EC_KEY_new_by_curve_name(o.OBJ_txt2nid(b"prime256v1"))
o.EC_KEY_generate_key(ec_key)
# Extract the key's public and private values as strings
# into pubBuf and privBuf
pubBuf = bytesToC(bytearray(1+64)) # [0x04] ...
privBuf = bytesToC(bytearray(32))
ec_point = o.EC_KEY_get0_public_key(ec_key)
ec_group = o.EC_GROUP_new_by_curve_name(o.OBJ_txt2nid(b"prime256v1"))
o.EC_POINT_point2oct(ec_group, ec_point, o.POINT_CONVERSION_UNCOMPRESSED, pubBuf, 65, None)
bignum = o.EC_KEY_get0_private_key(ec_key)
privLen = o.BN_bn2bin(bignum, privBuf)
# Convert the public and private keys into fixed-length 64 and 32 byte arrays
# Leading zeros are added to priv key, leading byte (0x04) stripped from pub key
rawPublicKey = cToBytes(pubBuf)[1:65]
rawPrivateKey = bytearray(32-privLen) + (cToBytes(privBuf)[:privLen])
# Test signing and verification with the new key
# sign() does a verify() internally
pub = OpenSSL_ECPublicKey(rawPublicKey)
priv = OpenSSL_ECPrivateKey(rawPrivateKey, rawPublicKey)
priv.sign(b"test")
return (pub, priv)
finally:
if ec_key:
o.EC_KEY_free(ec_key)
if ec_group:
o.EC_GROUP_free(ec_group)
def __del__(self):
o.EC_KEY_free(self.ec_key)