#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include< openssl/rsa.h>
#include <openssl/evp.h>int rsa_sign_test()
{unsigned char plaintext[] = "\x54\x85\x9b\x34\x2c\x49\xea\x2a";unsigned int p_text_len = sizeof(plaintext) - 1;unsigned char sig[256];unsigned int  signLen = 0;int rv = 0;BIGNUM *e = NULL;RSA *r = NULL;EVP_MD_CTX *mdctx = NULL;EVP_PKEY *evpkey;/** 生成RSA公私钥对 **/e = BN_new();BN_set_word(e, 65537);r = RSA_new();int bits = 1024;if (RSA_generate_key_ex(r, bits, e, NULL) != 1){printf("RSA_generate_key_ex is failed.\n");rv = -2;goto end;}evpkey = EVP_PKEY_new();if(evpkey == NULL){printf("EVP_PKEY_new is failed.\n");rv = -2;goto end;}if (EVP_PKEY_set1_RSA(evpkey, r) != 1)  //保存RSA结构体到EVP_PKEY结构体{printf("EVP_PKEY_set1_RSA is failed.\n");rv = -3;goto end;}/**  消息完整签名计算 **/mdctx = EVP_MD_CTX_create();if (mdctx == NULL){printf("EVP_MD_CTX_create is failed.\n");rv = -4;goto end;}EVP_PKEY_CTX *ectx;if (!EVP_DigestSignInit(mdctx, &ectx, EVP_sha256(), NULL, evpkey)){printf("EVP_DigestSignInit is failed.\n");rv = -4;goto end;}/**  设置签名填充方式为pss填充 **/if (!EVP_PKEY_CTX_set_rsa_padding(ectx, RSA_PKCS1_PSS_PADDING)){printf("EVP_PKEY_CTX_set_rsa_padding is failed.\n");rv = -4;goto end;}if (!EVP_PKEY_CTX_set_rsa_mgf1_md(ectx, EVP_sha224())){printf("EVP_PKEY_CTX_set_rsa_padding is failed.\n");rv = -4;goto end;}if (!EVP_DigestSignUpdate(mdctx, plaintext, p_text_len)){printf("EVP_DigestSignUpdate is failed.\n");rv = -4;goto end;}if (!EVP_DigestSignFinal(mdctx, NULL, &signLen)){printf("EVP_DigestSignFinal is failed.\n");rv = -4;goto end;}if (!EVP_DigestSignFinal(mdctx, sig, &signLen)){printf("EVP_DigestSignFinal is failed.\n");rv = -4;goto end;}EVP_MD_CTX_destroy(mdctx);/**  消息完整验签计算 **/mdctx = EVP_MD_CTX_create();if (mdctx == NULL){printf("EVP_MD_CTX_create is failed.\n");rv = -4;goto end;}if (!EVP_DigestVerifyInit(mdctx, &ectx, EVP_sha256(), NULL, evpkey)){printf("EVP_DigestVerifyInit is failed.\n");rv = -4;goto end;}/**  设置签名填充方式为pss填充 **/if (!EVP_PKEY_CTX_set_rsa_padding(ectx, RSA_PKCS1_PSS_PADDING)){printf("EVP_PKEY_CTX_set_rsa_padding is failed.\n");rv = -4;goto end;}if (!EVP_PKEY_CTX_set_rsa_mgf1_md(ectx, EVP_sha224())){printf("EVP_PKEY_CTX_set_rsa_padding is failed.\n");rv = -4;goto end;}if (!EVP_DigestVerifyUpdate(mdctx, plaintext, p_text_len)){printf("EVP_DigestVerifyUpdate is failed.\n");rv = -4;goto end;}if (!EVP_DigestVerifyFinal(mdctx, sig, signLen)){printf("EVP_DigestVerifyFinal is failed.\n");rv = -4;goto end;}end:if(e != NULL)BN_free(e);if (r != NULL)RSA_free(r);if (evpkey != NULL)EVP_PKEY_free(evpkey);EVP_MD_CTX_destroy(mdctx);return rv;
}int main(int argc, const char * argv[])
{int ret = 0;ret = rsa_sign_test();if (ret < 0){printf("rsa_sign_test is failed.\n");}else{printf("rsa_sign_test successed.\n");}return 0;
}