#include "crypto.h" #include "system.h" #include #include #include #include #include #include #include #include /* * Uncomment to force use of a specific curve */ #define ECPARAMS MBEDTLS_ECP_DP_SECP256R1 bool crypto_gen_priv_key() { // TODO : check if key exists in memory int ret = 1; const char *pers = "ecdsa"; mbedtls_entropy_context entropy; mbedtls_entropy_init(&entropy); mbedtls_pk_context key; mbedtls_pk_init(&key); mbedtls_ctr_drbg_context ctr_drbg; mbedtls_ctr_drbg_init(&ctr_drbg); printf("Seed Mbedtls\n"); if ((ret = mbedtls_ctr_drbg_seed(&ctr_drbg, mbedtls_entropy_func, &entropy, (const unsigned char *)pers, strlen(pers))) != 0) { mbedtls_printf(" failed\n ! mbedtls_ctr_drbg_seed returned %d\n", ret); reboot(); } printf("PK info from type\n"); if ((ret = mbedtls_pk_setup(&key, mbedtls_pk_info_from_type(MBEDTLS_PK_ECKEY))) != 0) { mbedtls_printf(" failed\n ! mbedtls_pk_setup returned -0x%04x", (unsigned int)-ret); reboot(); } // Generate private key printf("Generate private key\n"); ret = mbedtls_ecp_gen_key(ECPARAMS, mbedtls_pk_ec(key), mbedtls_ctr_drbg_random, &ctr_drbg); if (ret != 0) { mbedtls_printf(" failed\n ! mbedtls_ecp_gen_key returned -0x%04x", (unsigned int)-ret); reboot(); } // Show private key printf("Show private key\n"); unsigned char *key_buff = malloc(16000); memset(key_buff, 0, 16000); if ((ret = mbedtls_pk_write_key_pem(&key, key_buff, 16000)) != 0) { mbedtls_printf(" failed\n ! mbedtls_pk_write_key_pem returned -0x%04x", (unsigned int)-ret); reboot(); } printf("%s", key_buff); free(key_buff); printf("done\n"); return true; }