国密sm2签名验签

生成私钥：

#include <stdio.h>
#include <openssl/ssl.h>
#include <openssl/err.h>
#include <openssl/pem.h>
#include <openssl/conf.h>
#include <openssl/x509v3.h>

#include <openssl/bn.h>
#include <openssl/evp.h>
#include <openssl/asn1.h>
#include <openssl/x509.h>
#include <openssl/objects.h>
#include <openssl/buffer.h>

#ifndef OPENSSL_NO_ENGINE
#include <openssl/engine.h>
#endif
int make_server_private_key()
{
    OpenSSL_add_all_ciphers();
    OpenSSL_add_all_digests();
    ERR_load_crypto_strings();

    SSL_CTX *ctx = SSL_CTX_new (SSLv23_server_method ());
    SSL_CTX_set_options (ctx,
                         SSL_OP_SINGLE_DH_USE |
                         SSL_OP_SINGLE_ECDH_USE |
                         SSL_OP_NO_SSLv2);

    EVP_PKEY *evk = EVP_PKEY_new();

    EC_KEY *ec_server = EC_KEY_new_by_curve_name (NID_sm2p256v1);
    if (! ec_server)
        printf("ecdh error!EC_KEY_new_by_curve_name\n");

    EC_KEY_generate_key(ec_server);
    BIO *bio_out = BIO_new_file("server_private.key", "w");

    PEM_write_bio_ECPrivateKey(bio_out, ec_server, NULL, NULL, 0, NULL, NULL);
    BIO_free(bio_out);

    EC_KEY_free(ec_server);
    EVP_PKEY_free(evk);

    return 0;
}

生成证书

int make_cert(char* name_C, char* name_S, char* name_L, char* name_O, char * name_OU, char* name_CN, 
           char* PrivateKeyFileName, char* CertFileName )
{
    X509 *x;
    EVP_PKEY *pk;
    X509_NAME *name = NULL;
    BIO  * key  =  NULL;

    key  =  BIO_new(BIO_s_file()); 
    BIO_read_filename(key,PrivateKeyFileName);
    EC_KEY *ecdh = PEM_read_bio_ECPrivateKey(key, NULL, NULL, NULL);
    EVP_PKEY *evk = EVP_PKEY_new();
    EVP_PKEY_set1_EC_KEY(evk, ecdh);

    X509 *x509 = NULL;

    if (evk == NULL)
    {
        abort();
        return(0);
    }
    else
        pk = evk;

    if ((x = X509_new()) == NULL)
        return(0);

    X509_set_version(x, 2);
    int serial = 12345;
    ASN1_INTEGER_set(X509_get_serialNumber(x), serial);
    X509_gmtime_adj(X509_get_notBefore(x), 0);
    int days = 36500;
    X509_gmtime_adj(X509_get_notAfter(x), (long)60 * 60 * 24 * days);
    X509_set_pubkey(x, pk);

    name = X509_get_subject_name(x);

    X509_NAME_add_entry_by_txt(name, "C",
                               MBSTRING_ASC, name_C, -1, -1, 0);

    X509_NAME_add_entry_by_txt(name, "S",
                               MBSTRING_ASC, name_S, -1, -1, 0);

    X509_NAME_add_entry_by_txt(name, "L",
                               MBSTRING_ASC, name_L, -1, -1, 0);

    X509_NAME_add_entry_by_txt(name, "O",
                               MBSTRING_ASC, name_O, -1, -1, 0);

    X509_NAME_add_entry_by_txt(name, "OU",
                               MBSTRING_ASC, name_OU, -1, -1, 0);

    X509_NAME_add_entry_by_txt(name, "CN",
                               MBSTRING_ASC, name_CN, -1, -1, 0);


    X509_NAME *issuer_name=NULL;

    if (!issuer_name)
        X509_set_issuer_name(x, name);
    else
        X509_set_issuer_name(x, issuer_name);

    int n=X509_sign(x, evk, EVP_sm3());

    x509 = x;
    evk = pk;

    BIO *bio_x = BIO_new_file(CertFileName, "w");
    PEM_write_bio_X509(bio_x, x509);

    printf("n=%d\n",n);

    BIO_free(bio_x);
    EVP_PKEY_free(evk);
    EC_KEY_free(ecdh);
    X509_free(x509);

    return(1);
}

以下代码有可能不符合国标：

签名

int signature(char *msg)
{
    int ret = 0;
    unsigned int slen=256;
    unsigned char sig[256];
    

    BIO  * key  =  NULL;

    key  =  BIO_new(BIO_s_file()); 
    BIO_read_filename(key,"server_private.key");
    EC_KEY *ecdh = PEM_read_bio_ECPrivateKey(key, NULL, NULL, NULL);
    printf("sig len:%d\n", ECDSA_size(ecdh));
    if (!SM2_sign(0,msg, strlen(msg), sig,&slen,ecdh))
    {
       return 0;
    }
    
    FILE *fp = fopen("server_16.sig", "wb");
    for(int i=0; i < slen; i++)
    {
        fwrite(((unsigned char*)(sig+i)), 1, 1, fp);
    }    
    fclose(fp);

    printf("slen:%d\n", slen);
    for(int i=0; i < slen; i++)
    {
    	printf("%02x ", *((unsigned char*)(sig+i)));
    }
    printf("\n");

    /* 成功 */
    ret = 1;

    /* 清理 */


    return ret;
}

验签

int verify_sig(void *sig, char *msg, size_t slen)
{
    int nRet;
    ECDSA_SIG *s;
    const unsigned char *p = sig;
    unsigned char *der = NULL;
    int derlen = -1;
    int ret = -1;
    
    FILE *fp = fopen("server_cert.pem", "r");
    X509 *cert = PEM_read_X509(fp, NULL, NULL, NULL);
    //FILE *fp = fopen("server_cert.der", "r");
    //X509 *cert = d2i_X509_fp(fp, NULL);
     
    EVP_PKEY *evk = X509_get_pubkey(cert);
    EC_KEY *ec_key=EVP_PKEY_get0_EC_KEY(evk);

    printf("\nslen:%ld\n", slen);
    for(int i=0; i < slen; i++)
    {
    	printf("%02x ", *((unsigned char*)(sig+i)));
    }
    printf("\n");

    nRet = SM2_verify(0,msg, strlen(msg), sig, slen,ec_key);
    return nRet == 1 ? 1 : 0;
}

ChatGPT

国密GM/T 0003.5-2012 标准中的 SM2 是一种公钥加密算法，类似于其他加密标准，如 RSA 或 ECC。SM2 同样包含了签名、验签、加密和解密等功能。下面将提供一个 SM2 签名和验签的示例代码，这是基于 OpenSSL 的 GmSSL 分支实现的，但请注意务必检查 OpenSSL/GmSSL 的许可证和出于安全考虑，始终使用最新版本的库和补丁。
以下是使用 GmSSL 实现 SM2 签名和验签的基本示例：

#include <string.h>
#include <openssl/sm2.h>
#include <openssl/evp.h>
#include <openssl/ec.h>
#include <openssl/bn.h>
#include <openssl/objects.h>

int main() {
    int ret = 0;
    // 初始化
    OpenSSL_add_all_algorithms();

    // 创建 SM2 密钥对
    EC_KEY *sm2_key = EC_KEY_new_by_curve_name(NID_sm2);
    if (!sm2_key || !EC_KEY_generate_key(sm2_key)) {
        // 处理密钥生成失败
    }

    // 要签名的消息和其长度
    unsigned char message[] = "The quick brown fox jumps over the lazy dog";
    size_t message_len = strlen(message);

    // 签名操作
    ECDSA_SIG *signature = NULL;
    if (!SM2_do_sign(sm2_key, EVP_sm3(), message, message_len, &signature)) {
        // 处理签名失败
    }

    // 验签操作
    int verify = SM2_do_verify(sm2_key, EVP_sm3(), signature, message, message_len);
    if (verify != 1) {
        // 验证失败处理
    }

    // 释放资源
    ECDSA_SIG_free(signature);
    EC_KEY_free(sm2_key);

    // 结束，清理 OpenSSL
    EVP_cleanup();
    return ret;
}

在使用上面的代码之前，请确认你有安装 GmSSL 或 OpenSSL 并且已包含 SM2 支持。如果需要编译前述代码，可以用类似下面的 gcc 命令：

gcc sm2_example.c -o sm2_example -lssl -lcrypto

请根据你的系统和安装路径调整库的链接选项。这个代码仅作为一个示例，不包含错误处理。在生产代码中，需要对所有返回值做出充分的检查。此外，密钥的管理和保护也是关键考虑点。在实际应用中，你需要确保采取安全的密钥管理措施，避免密钥泄露风险。