GmSSL介绍
GmSSL是一个开源的密码工具箱，支持SM2/SM3/SM4/SM9/ZUC等国密(国家商用密码)算法。
从 GmSSL 官网处得到的下载链接为 GitHub - guanzhi/GmSSL: 支持国密SM2/SM3/SM4/SM9/SSL的密码工具箱
GmSSL的下载编译如下：
# git clone https://github.com/guanzhi/GmSSL.git
# cd GmSSL
# mkdir build
# cd build/
# cmake ..
# make
# ls bin/
aeadtest demo_sm2_encrypt demo_sm2_sign_ctx demo_sm4_cbc_encrypt_update demo_sm9_sign hash_drbgtest libsdf_dummy.so pemtest sm3test x509_exttest
aestest demo_sm2_keygen demo_sm3 demo_sm4_cbc_padding demo_zuc hextest libsdf_dummy.so.3 pkcs8test sm4test x509_oidtest
asn1test demo_sm2_keyparse demo_sm3_hmac demo_sm4_ctr digesttest hkdftest libsdf_dummy.so.3.1 sha224test sm9test x509_reqtest
base64test demo_sm2_private_key demo_sm3_kdf demo_sm4_ctr_encrypt_update ectest hmactest libskf_dummy.so sha256test tls13test x509_strtest
block_ciphertest demo_sm2_private_key_parse demo_sm4 demo_sm4_gcm gcmtest libgmssl.so libskf_dummy.so.3 sha384test tlstest x509test
chacha20test demo_sm2_public_key demo_sm4_cbc demo_sm9_encrypt gf128test libgmssl.so.3 libskf_dummy.so.3.1 sha512test x509_algtest zuctest
cmstest demo_sm2_sign demo_sm4_cbc_decrypt_update demo_sm9_keygen gmssl libgmssl.so.3.1 pbkdf2test sm2test x509_crltest
在编译过程中会遇到报错，为小错误，请自行修改
/home/GMSSL/GmSSL/src/sm9_alg.c: In function ‘sm9_fn_from_hash’:
/home/GMSSL/GmSSL/src/sm9_alg.c:2318:11: error: redeclaration of ‘i’ with no linkagefor (int i = 0; i < 10; i++) {^
/home/GMSSL/GmSSL/src/sm9_alg.c:2315:6: note: previous declaration of ‘i’ was hereint i, j;^
/home/GMSSL/GmSSL/src/sm9_alg.c:2318:2: error: ‘for’ loop initial declarations are only allowed in C99 modefor (int i = 0; i < 10; i++) {^
/home/GMSSL/GmSSL/src/sm9_alg.c:2318:2: note: use option -std=c99 or -std=gnu99 to compile your code
/home/GMSSL/GmSSL/src/sm9_alg.c:2319:3: error: ‘for’ loop initial declarations are only allowed in C99 modefor (int j = 0; j < 4; j++) {^
ZUC算法介绍
ZUC算法是一个面向字的流加密算法。算法介绍可见 ZUC-256 流密码算法
根据include/gmssl/zuc.h头文件里提供的算法接口，主要的算法接口有算法初始化，产生密钥流，加密。计算校验值等。其中ZUC根据塞入的key和iv，产生密钥流，算法加密即是将密钥流与明文进行异或操作得到密文，解密即是将密钥流与密文进行异或操作得到明文。接口分为zuc 128位算法与zuc 256位算法，即塞入的key与iv长度差异。
ZUC256算法实例
工程目录：
# ls
libgmssl.so libgmssl.so.3 Makefile test.c zuc.h其中库和头文件是从上述编译好的GmSSL里拿出来的。
test.c
#include <stdio.h>
#include <string.h>#include "zuc.h"void dump_buf(char *info, uint8_t *buf, uint32_t len)
{int i;printf("%s[%d]", info, len);for (i = 0; i < len; i++) {printf("%s%02X%s", i % 16 == 0 ? "\n ":" ",buf[i], i == len - 1 ? "\n":"");}
}int main()
{int ret;uint8_t key[32], iv[32];uint32_t out[32];uint8_t mac_out[4];uint8_t msg[32];ZUC256_STATE state;ZUC256_MAC_CTX ctx;/* stream */memset(&state, 0x0, sizeof(ZUC256_STATE));memset(key, 0x0, 32);memset(iv, 0x0, 32);memset(msg, 0xFF, 32);zuc256_init(&state, key, iv);zuc256_generate_keystream(&state, 32, out);dump_buf("keystream out:", out, 32*4);/* MAC */memset(&ctx, 0x0, sizeof(ZUC256_MAC_CTX));memset(key, 0x0, 32);memset(iv, 0x0, 32);memset(msg, 0xFF, 32);zuc256_mac_init(&ctx, key, iv, ZUC256_MAC32_SIZE*8);zuc256_mac_update(&ctx, msg, 32);zuc256_mac_finish(&ctx, NULL, 0, mac_out);dump_buf("mac32 out:", mac_out, 4);return 0;
}Makefile
test:gcc -g test.c -I. -L. -lgmssl -o test
clean:rm -rf test编译并测试
# make
gcc -g test.c -I. -L. -lgmssl -o test
test.c: In function ‘main’:
test.c:37:5: warning: passing argument 2 of ‘dump_buf’ from incompatible pointer type [enabled by default]dump_buf("keystream out:", out, 32*4);^
test.c:6:6: note: expected ‘uint8_t *’ but argument is of type ‘uint32_t *’void dump_buf(char *info, uint8_t *buf, uint32_t len)^
# ./test
keystream out:[128]D6 3A D0 58 E2 2C 03 2E 3A 68 FC DA 03 CB BD 3967 BC A2 52 74 DE B7 F1 A1 E3 3C 16 58 55 EF 015B D7 39 96 1B 68 FA 95 F7 0D 09 7F CC 1C 39 5612 76 3B 90 4C 54 4D 74 AD 3F BC 17 08 3B 16 8B0B 7C 78 21 B8 5B 77 97 BB C6 43 49 FD 8A AD E8B1 B2 FC 7D AB C9 CB 2B 2E FD 1B F4 FF 10 C8 16DE 11 AB 8F 67 6C A6 76 DE 7C 50 45 E0 4B F0 2162 75 FD 63 4E 84 80 62 5C 9E 8D D8 D9 8C 04 10
mac32 out:[4]88 0D 51 7C
)
)