1 // Copyright 2020 Google LLC
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License");
4 // you may not use this file except in compliance with the License.
5 // You may obtain a copy of the License at
6 //
7 // http://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS,
11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 // See the License for the specific language governing permissions and
13 // limitations under the License.
14 //
15 ///////////////////////////////////////////////////////////////////////////////
16
17 // Implementation of a Signature Service
18 #include "signature_impl.h"
19
20 #include <memory>
21 #include <string>
22 #include <utility>
23
24 #include "tink/public_key_sign.h"
25 #include "tink/public_key_verify.h"
26 #include "create.h"
27 #include "proto/testing_api.grpc.pb.h"
28
29 namespace tink_testing_api {
30
31 using ::crypto::tink::util::StatusOr;
32
CreatePublicKeySign(grpc::ServerContext * context,const CreationRequest * request,CreationResponse * response)33 ::grpc::Status SignatureImpl::CreatePublicKeySign(
34 grpc::ServerContext* context, const CreationRequest* request,
35 CreationResponse* response) {
36 return CreatePrimitiveForRpc<crypto::tink::PublicKeySign>(request, response);
37 }
38
CreatePublicKeyVerify(grpc::ServerContext * context,const CreationRequest * request,CreationResponse * response)39 ::grpc::Status SignatureImpl::CreatePublicKeyVerify(
40 grpc::ServerContext* context, const CreationRequest* request,
41 CreationResponse* response) {
42 return CreatePrimitiveForRpc<crypto::tink::PublicKeyVerify>(request,
43 response);
44 }
45
46 // Signs a message
Sign(grpc::ServerContext * context,const SignatureSignRequest * request,SignatureSignResponse * response)47 ::grpc::Status SignatureImpl::Sign(grpc::ServerContext* context,
48 const SignatureSignRequest* request,
49 SignatureSignResponse* response) {
50 StatusOr<std::unique_ptr<crypto::tink::PublicKeySign>> signer_result =
51 PrimitiveFromSerializedBinaryProtoKeyset<crypto::tink::PublicKeySign>(
52 request->private_annotated_keyset());
53 if (!signer_result.ok()) {
54 response->set_err(std::string(signer_result.status().message()));
55 return ::grpc::Status::OK;
56 }
57 auto sign_result = signer_result.value()->Sign(request->data());
58 if (!sign_result.ok()) {
59 response->set_err(std::string(sign_result.status().message()));
60 return ::grpc::Status::OK;
61 }
62 response->set_signature(sign_result.value());
63 return ::grpc::Status::OK;
64 }
65
66 // Verifies a signature
Verify(grpc::ServerContext * context,const SignatureVerifyRequest * request,SignatureVerifyResponse * response)67 ::grpc::Status SignatureImpl::Verify(grpc::ServerContext* context,
68 const SignatureVerifyRequest* request,
69 SignatureVerifyResponse* response) {
70 StatusOr<std::unique_ptr<crypto::tink::PublicKeyVerify>> verifier_result =
71 PrimitiveFromSerializedBinaryProtoKeyset<crypto::tink::PublicKeyVerify>(
72 request->public_annotated_keyset());
73 if (!verifier_result.ok()) {
74 response->set_err(std::string(verifier_result.status().message()));
75 return ::grpc::Status::OK;
76 }
77 auto status =
78 verifier_result.value()->Verify(request->signature(), request->data());
79 if (!status.ok()) {
80 response->set_err(std::string(status.message()));
81 return ::grpc::Status::OK;
82 }
83 return ::grpc::Status::OK;
84 }
85
86 } // namespace tink_testing_api
87