GmSSL介绍

GmSSL是一个开源的密码工具箱，支持SM2/SM3/SM4/SM9/ZUC等国密(国家商用密码)算法。

从 GmSSL 官网处得到的下载链接为GitHub – guanzhi/GmSSL: 支持国密SM2/SM3/SM4/SM9/SSL的密码工具箱

GmSSL的下载编译如下：

# git clone https://github.com/guanzhi/GmSSL.git# cd GmSSL# mkdir build# cd build/# cmake ..# make# ls bin/aeadtestdemo_sm2_encryptdemo_sm2_sign_ctxdemo_sm4_cbc_encrypt_updatedemo_sm9_signhash_drbgtestlibsdf_dummy.sopemtest sm3test x509_exttestaestest demo_sm2_keygen demo_sm3 demo_sm4_cbc_padding demo_zuc hextestlibsdf_dummy.so.3pkcs8test sm4test x509_oidtestasn1testdemo_sm2_keyparse demo_sm3_hmacdemo_sm4_ctr digesttest hkdftest libsdf_dummy.so.3.1sha224testsm9test x509_reqtestbase64testdemo_sm2_private_keydemo_sm3_kdf demo_sm4_ctr_encrypt_updateectest hmactest libskf_dummy.sosha256testtls13test x509_strtestblock_ciphertestdemo_sm2_private_key_parsedemo_sm4 demo_sm4_gcm gcmtestlibgmssl.solibskf_dummy.so.3sha384testtlstest x509testchacha20testdemo_sm2_public_key demo_sm4_cbc demo_sm9_encrypt gf128testlibgmssl.so.3libskf_dummy.so.3.1sha512testx509_algtestzuctestcmstest demo_sm2_sign demo_sm4_cbc_decrypt_updatedemo_sm9_keygengmssllibgmssl.so.3.1pbkdf2test sm2test x509_crltest

在编译过程中会遇到报错，为小错误，请自行修改

/home/GMSSL/GmSSL/src/sm9_alg.c: In function ‘sm9_fn_from_hash’:/home/GMSSL/GmSSL/src/sm9_alg.c:2318:11: error: redeclaration of ‘i’ with no linkagefor (int i = 0; i < 10; i++) { ^/home/GMSSL/GmSSL/src/sm9_alg.c:2315:6: note: previous declaration of ‘i’ was hereint i, j;^/home/GMSSL/GmSSL/src/sm9_alg.c:2318:2: error: ‘for’ loop initial declarations are only allowed in C99 modefor (int i = 0; i < 10; i++) {^/home/GMSSL/GmSSL/src/sm9_alg.c:2318:2: note: use option -std=c99 or -std=gnu99 to compile your code/home/GMSSL/GmSSL/src/sm9_alg.c:2319:3: error: ‘for’ loop initial declarations are only allowed in C99 mode for (int j = 0; j < 4; j++) { ^

ZUC算法介绍

ZUC算法是一个面向字的流加密算法。算法介绍可见ZUC-256 流密码算法

根据include/gmssl/zuc.h头文件里提供的算法接口，主要的算法接口有算法初始化，产生密钥流，加密。计算校验值等。其中ZUC根据塞入的key和iv，产生密钥流，算法加密即是将密钥流与明文进行异或操作得到密文，解密即是将密钥流与密文进行异或操作得到明文。接口分为zuc 128位算法与zuc 256位算法，即塞入的key与iv长度差异。

ZUC256算法实例

工程目录：

# lslibgmssl.solibgmssl.so.3Makefiletest.czuc.h

其中库和头文件是从上述编译好的GmSSL里拿出来的。

test.c

#include #include #include "zuc.h"void dump_buf(char *info, uint8_t *buf, uint32_t len){int i;printf("%s[%d]", info, len);for (i = 0; i < len; i++) {printf("%s%02X%s", i % 16 == 0 ? "\n ":" ", buf[i], i == len - 1 ? "\n":"");}}int main(){int ret;uint8_t key[32], iv[32];uint32_t out[32];uint8_t mac_out[4];uint8_t msg[32];ZUC256_STATE state;ZUC256_MAC_CTX ctx;/* stream */memset(&state, 0x0, sizeof(ZUC256_STATE));memset(key, 0x0, 32);memset(iv, 0x0, 32);memset(msg, 0xFF, 32);zuc256_init(&state, key, iv);zuc256_generate_keystream(&state, 32, out);dump_buf("keystream out:", out, 32*4);/* MAC */memset(&ctx, 0x0, sizeof(ZUC256_MAC_CTX));memset(key, 0x0, 32);memset(iv, 0x0, 32);memset(msg, 0xFF, 32);zuc256_mac_init(&ctx, key, iv, ZUC256_MAC32_SIZE*8);zuc256_mac_update(&ctx, msg, 32);zuc256_mac_finish(&ctx, NULL, 0, mac_out);dump_buf("mac32 out:", mac_out, 4);return 0;}

Makefile

test:gcc -g test.c -I. -L. -lgmssl -o testclean:rm -rf test

编译并测试

# makegcc -g test.c -I. -L. -lgmssl -o testtest.c: In function ‘main’:test.c:37:5: warning: passing argument 2 of ‘dump_buf’ from incompatible pointer type [enabled by default] dump_buf("keystream out:", out, 32*4); ^test.c:6:6: note: expected ‘uint8_t *’ but argument is of type ‘uint32_t *’ void dump_buf(char *info, uint8_t *buf, uint32_t len)^# ./testkeystream out:[128] D6 3A D0 58 E2 2C 03 2E 3A 68 FC DA 03 CB BD 39 67 BC A2 52 74 DE B7 F1 A1 E3 3C 16 58 55 EF 01 5B D7 39 96 1B 68 FA 95 F7 0D 09 7F CC 1C 39 56 12 76 3B 90 4C 54 4D 74 AD 3F BC 17 08 3B 16 8B 0B 7C 78 21 B8 5B 77 97 BB C6 43 49 FD 8A AD E8 B1 B2 FC 7D AB C9 CB 2B 2E FD 1B F4 FF 10 C8 16 DE 11 AB 8F 67 6C A6 76 DE 7C 50 45 E0 4B F0 21 62 75 FD 63 4E 84 80 62 5C 9E 8D D8 D9 8C 04 10mac32 out:[4] 88 0D 51 7C