Na}{

File Content: `RSA.php`

<?php

declare (strict_types=1);
namespace Platform360\Jose\Component\Signature\Algorithm\Util;

use InvalidArgumentException;
use Platform360\Jose\Component\Core\Util\BigInteger;
use Platform360\Jose\Component\Core\Util\Hash;
use Platform360\Jose\Component\Core\Util\RSAKey;
use RuntimeException;
use function chr;
use function extension_loaded;
use function ord;
use function strlen;
use const STR_PAD_LEFT;
/**
 * @internal
 */
final readonly class RSA
{
    /**
     * Probabilistic Signature Scheme.
     */
    public const SIGNATURE_PSS = 1;
    /**
     * Use the PKCS#1.
     */
    public const SIGNATURE_PKCS1 = 2;
    /**
     * @return non-empty-string
     */
    public static function sign(RSAKey $key, string $message, string $hash, int $mode) : string
    {
        switch ($mode) {
            case self::SIGNATURE_PSS:
                return self::signWithPSS($key, $message, $hash);
            case self::SIGNATURE_PKCS1:
                if (!extension_loaded('openssl')) {
                    throw new RuntimeException('Please install the OpenSSL extension');
                }
                $result = \openssl_sign($message, $signature, $key->toPEM(), $hash);
                if ($result !== \true) {
                    throw new RuntimeException('Unable to sign the data');
                }
                return $signature;
            default:
                throw new InvalidArgumentException('Unsupported mode.');
        }
    }
    /**
     * Create a signature.
     *
     * @return non-empty-string
     */
    public static function signWithPSS(RSAKey $key, string $message, string $hash) : string
    {
        $em = self::encodeEMSAPSS($message, 8 * $key->getModulusLength() - 1, Hash::get($hash));
        $message = BigInteger::createFromBinaryString($em);
        $signature = RSAKey::exponentiate($key, $message);
        $result = self::convertIntegerToOctetString($signature, $key->getModulusLength());
        if ($result === '') {
            throw new InvalidArgumentException('Invalid signature.');
        }
        return $result;
    }
    public static function verify(RSAKey $key, string $message, string $signature, string $hash, int $mode) : bool
    {
        switch ($mode) {
            case self::SIGNATURE_PSS:
                return self::verifyWithPSS($key, $message, $signature, $hash);
            case self::SIGNATURE_PKCS1:
                if (!extension_loaded('openssl')) {
                    throw new RuntimeException('Please install the OpenSSL extension');
                }
                return \openssl_verify($message, $signature, $key->toPEM(), $hash) === 1;
            default:
                throw new InvalidArgumentException('Unsupported mode.');
        }
    }
    /**
     * Verifies a signature.
     */
    public static function verifyWithPSS(RSAKey $key, string $message, string $signature, string $hash) : bool
    {
        if (strlen($signature) !== $key->getModulusLength()) {
            throw new RuntimeException();
        }
        $s2 = BigInteger::createFromBinaryString($signature);
        $m2 = RSAKey::exponentiate($key, $s2);
        $em = self::convertIntegerToOctetString($m2, $key->getModulusLength());
        $modBits = 8 * $key->getModulusLength();
        return self::verifyEMSAPSS($message, $em, $modBits - 1, Hash::get($hash));
    }
    private static function convertIntegerToOctetString(BigInteger $x, int $xLen) : string
    {
        $x = $x->toBytes();
        if (strlen($x) > $xLen) {
            throw new RuntimeException();
        }
        return \str_pad($x, $xLen, chr(0), STR_PAD_LEFT);
    }
    /**
     * MGF1.
     */
    private static function getMGF1(string $mgfSeed, int $maskLen, Hash $mgfHash) : string
    {
        $t = '';
        $count = \ceil($maskLen / $mgfHash->getLength());
        for ($i = 0; $i < $count; ++$i) {
            $c = \pack('N', $i);
            $t .= $mgfHash->hash($mgfSeed . $c);
        }
        return \substr($t, 0, $maskLen);
    }
    /**
     * EMSA-PSS-ENCODE.
     */
    private static function encodeEMSAPSS(string $message, int $modulusLength, Hash $hash) : string
    {
        $emLen = $modulusLength + 1 >> 3;
        $sLen = $hash->getLength();
        $mHash = $hash->hash($message);
        if ($emLen <= $hash->getLength() + $sLen + 2) {
            throw new RuntimeException();
        }
        $salt = \random_bytes($sLen);
        $m2 = "\x00\x00\x00\x00\x00\x00\x00\x00" . $mHash . $salt;
        $h = $hash->hash($m2);
        $ps = \str_repeat(chr(0), $emLen - $sLen - $hash->getLength() - 2);
        $db = $ps . chr(1) . $salt;
        $dbMask = self::getMGF1($h, $emLen - $hash->getLength() - 1, $hash);
        $maskedDB = $db ^ $dbMask;
        $maskedDB[0] = ~chr(0xff << ($modulusLength & 7)) & $maskedDB[0];
        return $maskedDB . $h . chr(0xbc);
    }
    /**
     * EMSA-PSS-VERIFY.
     */
    private static function verifyEMSAPSS(string $m, string $em, int $emBits, Hash $hash) : bool
    {
        $emLen = $emBits + 1 >> 3;
        $sLen = $hash->getLength();
        $mHash = $hash->hash($m);
        if ($emLen < $hash->getLength() + $sLen + 2) {
            throw new InvalidArgumentException();
        }
        if ($em[strlen($em) - 1] !== chr(0xbc)) {
            throw new InvalidArgumentException();
        }
        $maskedDB = \substr($em, 0, -$hash->getLength() - 1);
        $h = \substr($em, -$hash->getLength() - 1, $hash->getLength());
        $temp = chr(0xff << ($emBits & 7));
        if ((~$maskedDB[0] & $temp) !== $temp) {
            throw new InvalidArgumentException();
        }
        $dbMask = self::getMGF1($h, $emLen - $hash->getLength() - 1, $hash);
        $db = $maskedDB ^ $dbMask;
        $db[0] = ~chr(0xff << ($emBits & 7)) & $db[0];
        $temp = $emLen - $hash->getLength() - $sLen - 2;
        if (\substr($db, 0, $temp) !== \str_repeat(chr(0), $temp)) {
            throw new InvalidArgumentException();
        }
        if (ord($db[$temp]) !== 1) {
            throw new InvalidArgumentException();
        }
        $salt = \substr($db, $temp + 1, null);
        // should be $sLen long
        $m2 = "\x00\x00\x00\x00\x00\x00\x00\x00" . $mHash . $salt;
        $h2 = $hash->hash($m2);
        return \hash_equals($h, $h2);
    }
}
File Content: RSA.php

File Content: `RSA.php`
