Re: provider implementation of verify: cannot find private key of public key from example-pub.pem

Hey everyone,

I am still struggling on this. My lead was to check if the public key 
was somehow incorrect. But both the ed25519 and my own X509_PUBKEY look 
quite similar:

# openssl asn1parse -in example-pub.ed25519.pem
     0:d=0  hl=2 l=  42 cons: SEQUENCE
     2:d=1  hl=2 l=   5 cons: SEQUENCE
     4:d=2  hl=2 l=   3 prim: OBJECT            :ED25519
     9:d=1  hl=2 l=  33 prim: BIT STRING

# openssl asn1parse -in example-pub.pem
     0:d=0  hl=2 l=  42 cons: SEQUENCE
     2:d=1  hl=2 l=   5 cons: SEQUENCE
     4:d=2  hl=2 l=   3 prim: OBJECT            :1.2.3.4
     9:d=1  hl=2 l=  33 prim: BIT STRING

Besides that, given the logs below the provider does not seem to load my 
own decoder to read the public key file. But I have no idea which that 
might be.

Hoping for some ideas.

All the best,
Bernd

Am 19.08.24 um 11:51 schrieb 'Bernd Ritter' via openssl-users:
> Hello everyone,
> 
> I want to verify a signature from a message with my custom provider. 
> Generating the private and public key works, I get to create the custom 
> oid'd keys example.pem and example-pub.pem as files.
> 
> Creating the signature from a text file also works.
> 
> Then I naturally want to verify the message against the signature. Here 
> I get this:
> 
> openssl pkeyutl -provider-path build -provider default -provider 
> ed25519ph -propquery ?provider=myprovider -verify -inkey example-pub.pem 
> -pubin -in message.txt -rawin -sigfile message.txt.sigp
> 
> ed25519ph provider init...
> ed25519ph provider init complete
> operating switch: 22 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> operating switch: 21 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> operating switch: 10 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> operating switch: 21 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> provider/src/ed25519ph_decoder.c - Decoder context new 0x595220e02d90
> provider/src/ed25519ph_decoder.c - Decoder context new 0x595220e02de0
> operating switch: 21 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> provider/src/ed25519ph_decoder.c - Decoder context new 0x595220e04630
> provider/src/ed25519ph_decoder.c - Decoder context new 0x595220e04680
> provider/src/ed25519ph_decoder.c - Decoder context free 0x595220e04630
> provider/src/ed25519ph_decoder.c - Decoder context free 0x595220e04680
> operating switch: 10 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> operating switch: 21 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> operating switch: 10 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> operating switch: 21 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> operating switch: 21 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> operating switch: 10 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> operating switch: 21 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> provider/src/ed25519ph_decoder.c - Decoder context new 0x595220dfc6f0
> provider/src/ed25519ph_decoder.c - Decoder context new 0x595220e07310
> operating switch: 21 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> provider/src/ed25519ph_decoder.c - Decoder context new 0x595220e092d0
> provider/src/ed25519ph_decoder.c - Decoder context new 0x595220e09320
> provider/src/ed25519ph_decoder.c - Decoder context free 0x595220e092d0
> provider/src/ed25519ph_decoder.c - Decoder context free 0x595220e09320
> operating switch: 10 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> operating switch: 21 (1=DIGEST, 2=CIPHER, 5=RAND, 10=KEYMGMT, 12=SIG, 
> 20=ENC, 21=DEC, 22=STOR), 0x595220dedc90
> Could not find private key of public key from example-pub.pem
> 800BFD680F7A0000:error:1608010C:STORE 
> routines:ossl_store_handle_load_result:unsupported:crypto/store/store_result.c:151:
> 800BFD680F7A0000:error:1608010C:STORE 
> routines:ossl_store_handle_load_result:unsupported:crypto/store/store_result.c:151:
> pkeyutl: Error initializing context
> 
> Why does OpenSSL look for the private key in the public key file? The 
> same command using ed25519 and ed25519ph (as pkeyopt) work just fine.
> 
> All the best,
> Bernd
> 

-- 
Bernd Ritter
Senior Linux Developer
Tel.: +49 175 534 4534
Mail: ritter-shG/GajIFYqbacvFa/[email protected]

B1 Systems GmbH
Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de
GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt, HRB 3537

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion on the web visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/697d1d48-6d42-4613-ac49-0b656fd41359%40b1-systems.de.