Perl Requires Chilkat v9.5.0.85+

ECDSA Sign and Verify Data using Different Hash Algorithms

See more ECC Examples

Demonstrates how to create ECDSA signatures on data using different hash algorithms. Chilkat2 Perl

use strict;
use warnings;
use Chilkat2;

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# First load an ECDSA private key to be used for signing.
my $privKey = Chilkat2::PrivateKey->new;
my $success = $privKey->LoadEncryptedPemFile('qa_data/ecc/secp256r1-key-pkcs8-secret.pem', 'secret');
if (!$success) {
    print $privKey->LastErrorText, "\n";
    exit;
}

# Load some data to be signed.
my $bd = Chilkat2::BinData->new;
$success = $bd->LoadFile('qa_data/hamlet.xml');
if (!$success) {
    print "Failed to load file to be hashed.\n";
    exit;
}

my $ecdsa = Chilkat2::Ecc->new;
my $prng = Chilkat2::Prng->new;

# Sign the sha256 hash of the data.  Return the ECDSA signature in the base64 encoding.
print "ECDSA signing the sha256 hash of the data...\n";
my $sig = $ecdsa->SignBd($bd, 'sha256', 'base64', $privKey, $prng);
print 'sig = ', $sig, "\n";

# Verify the signature against the original data.
# (We must use the same hash algorithm that was used when signing.)

# Load the public key that corresponds to the private key used for signing.
my $pubKey = Chilkat2::PublicKey->new;
$success = $pubKey->LoadFromFile('qa_data/ecc/secp256r1-pub.pem');
if (!$success) {
    print $pubKey->LastErrorText, "\n";
    exit;
}

my $ecc2 = Chilkat2::Ecc->new;
my $result = $ecc2->VerifyBd($bd, 'sha256', $sig, 'base64', $pubKey);
if ($result != 1) {
    print $ecc2->LastErrorText, "\n";
    exit;
}

print "Verified!\n";

# ----------------------------------------------------------------------------------------
# Let's do the same thing, but with sha384 hashing...

print "--------------------------------------------\n";
print "ECDSA signing the sha384 hash of the data...\n";

$sig = $ecdsa->SignBd($bd, 'sha384', 'base64', $privKey, $prng);
print 'sig = ', $sig, "\n";

$result = $ecc2->VerifyBd($bd, 'sha384', $sig, 'base64', $pubKey);
if ($result != 1) {
    print $ecc2->LastErrorText, "\n";
    exit;
}

print "Verified!\n";