I found post
http://www.mail-archive.com/openssl-users@openssl.org/msg48477.html
So I try to do:
ERR_load_EC_strings();
X509 *x = NULL; int type = 0; EVP_PKEY *key = NULL; int len = 0; EC_KEY *ec
= NULL; int ret = 0; char *er;
d2i_X509(&x, (const unsigned char**)&pCert->pbCertEncoded,
pCert->cbCertEncoded);
key = X509_PUBKEY_get(x->cert_info->key);
ec = EVP_PKEY_get1_EC_KEY(key);
if(ec){
ECDSA_SIG *sig = ECDSA_SIG_new();
sig->r = BN_bin2bn(pbSignature,dwSigLen/2,NULL);
sig->s = BN_bin2bn(pbSignature + dwSigLen/2,dwSigLen/2,NULL);
er = ERR_error_string(ERR_get_error(),NULL);
ret = ECDSA_do_verify(pbyHash,dwHashLen,sig,ec);
}
Now it is return 0. But signature must be valid.
--
View this message in context:
http://www.nabble.com/ECC-signature-validation-failure-tp14437540p14439032.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
