feat(签名验签): 支持签名验签

This commit is contained in:
2026-07-08 09:42:16 +08:00
parent 28f3efea58
commit 98b37d865a
7 changed files with 1936 additions and 14 deletions
+211
View File
@@ -0,0 +1,211 @@
// Copyright 2025-2026 肖其顿 (XIAO QI DUN)
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package ofdgo
import (
"encoding/binary"
"hash"
"math/bits"
)
const (
sm3Size = 32
sm3BlockSize = 64
)
var sm3Init = [8]uint32{
0x7380166f,
0x4914b2b9,
0x172442d7,
0xda8a0600,
0xa96f30bc,
0x163138aa,
0xe38dee4d,
0xb0fb0e4e,
}
// sm3Digest SM3杂凑值计算器
type sm3Digest struct {
h [8]uint32
x [sm3BlockSize]byte
nx int
len uint64
}
// newSM3 创建SM3杂凑值计算器
// 返回: hash.Hash SM3杂凑值计算器
func newSM3() hash.Hash {
d := new(sm3Digest)
d.Reset()
return d
}
// Reset 重置SM3状态
func (d *sm3Digest) Reset() {
d.h = sm3Init
d.nx = 0
d.len = 0
}
// Size 获取SM3杂凑值长度
// 返回: int 杂凑值长度
func (d *sm3Digest) Size() int {
return sm3Size
}
// BlockSize 获取SM3分组长度
// 返回: int 分组长度
func (d *sm3Digest) BlockSize() int {
return sm3BlockSize
}
// Write 写入待计算数据
// 入参: p 待计算数据
// 返回: int 写入长度, error 错误信息
func (d *sm3Digest) Write(p []byte) (int, error) {
nn := len(p)
d.len += uint64(nn)
if d.nx > 0 {
n := copy(d.x[d.nx:], p)
d.nx += n
if d.nx == sm3BlockSize {
sm3Block(d, d.x[:])
d.nx = 0
}
p = p[n:]
}
if len(p) >= sm3BlockSize {
n := len(p) &^ (sm3BlockSize - 1)
sm3Block(d, p[:n])
p = p[n:]
}
if len(p) > 0 {
d.nx = copy(d.x[:], p)
}
return nn, nil
}
// Sum 返回SM3杂凑值
// 入参: in 前缀数据
// 返回: []byte 杂凑值
func (d *sm3Digest) Sum(in []byte) []byte {
dd := *d
hash := dd.checkSum()
return append(in, hash[:]...)
}
// checkSum 计算SM3最终杂凑值
// 返回: [sm3Size]byte 杂凑值
func (d *sm3Digest) checkSum() [sm3Size]byte {
lenBits := d.len << 3
var tmp [64]byte
tmp[0] = 0x80
if d.nx < 56 {
d.Write(tmp[:56-d.nx])
} else {
d.Write(tmp[:64+56-d.nx])
}
binary.BigEndian.PutUint64(tmp[:8], lenBits)
d.Write(tmp[:8])
var digest [sm3Size]byte
for i, v := range d.h {
binary.BigEndian.PutUint32(digest[i*4:], v)
}
return digest
}
// sm3Block 处理SM3消息分组
// 入参: d SM3杂凑值计算器, p 消息分组数据
func sm3Block(d *sm3Digest, p []byte) {
var w [68]uint32
var w1 [64]uint32
for len(p) >= sm3BlockSize {
for i := 0; i < 16; i++ {
w[i] = binary.BigEndian.Uint32(p[i*4:])
}
for i := 16; i < 68; i++ {
x := w[i-16] ^ w[i-9] ^ bits.RotateLeft32(w[i-3], 15)
w[i] = sm3P1(x) ^ bits.RotateLeft32(w[i-13], 7) ^ w[i-6]
}
for i := 0; i < 64; i++ {
w1[i] = w[i] ^ w[i+4]
}
a, b, c, e := d.h[0], d.h[1], d.h[2], d.h[4]
dd, f, g, hh := d.h[3], d.h[5], d.h[6], d.h[7]
for i := 0; i < 64; i++ {
t := uint32(0x7a879d8a)
if i < 16 {
t = 0x79cc4519
}
ss1 := bits.RotateLeft32(bits.RotateLeft32(a, 12)+e+bits.RotateLeft32(t, i), 7)
ss2 := ss1 ^ bits.RotateLeft32(a, 12)
tt1 := sm3FF(i, a, b, c) + dd + ss2 + w1[i]
tt2 := sm3GG(i, e, f, g) + hh + ss1 + w[i]
dd = c
c = bits.RotateLeft32(b, 9)
b = a
a = tt1
hh = g
g = bits.RotateLeft32(f, 19)
f = e
e = sm3P0(tt2)
}
d.h[0] ^= a
d.h[1] ^= b
d.h[2] ^= c
d.h[3] ^= dd
d.h[4] ^= e
d.h[5] ^= f
d.h[6] ^= g
d.h[7] ^= hh
p = p[sm3BlockSize:]
}
}
// sm3P0 计算SM3置换函数P0
// 入参: x 输入值
// 返回: uint32 置换结果
func sm3P0(x uint32) uint32 {
return x ^ bits.RotateLeft32(x, 9) ^ bits.RotateLeft32(x, 17)
}
// sm3P1 计算SM3置换函数P1
// 入参: x 输入值
// 返回: uint32 置换结果
func sm3P1(x uint32) uint32 {
return x ^ bits.RotateLeft32(x, 15) ^ bits.RotateLeft32(x, 23)
}
// sm3FF 计算SM3布尔函数FF
// 入参: i 轮数, x 输入值, y 输入值, z 输入值
// 返回: uint32 计算结果
func sm3FF(i int, x, y, z uint32) uint32 {
if i < 16 {
return x ^ y ^ z
}
return (x & y) | (x & z) | (y & z)
}
// sm3GG 计算SM3布尔函数GG
// 入参: i 轮数, x 输入值, y 输入值, z 输入值
// 返回: uint32 计算结果
func sm3GG(i int, x, y, z uint32) uint32 {
if i < 16 {
return x ^ y ^ z
}
return (x & y) | (^x & z)
}
var _ hash.Hash = (*sm3Digest)(nil)