Jose\Algorithm\Signature\RSA

Complexity

Total Complexity

6

Size/Duplication

Total Lines	88
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes	3
Bugs	1	Features	1

6 Methods

Rating	Name	Duplication	Size	Complexity
	getAlgorithm()	0	1	?
	getSignatureMethod()	0	1	?
A	verify()	0	15	2
A	sign()	0	21	2
A	checkKey()	0	4	1
A	getRsaObject()	0	10	1

<?php

/*
 * The MIT License (MIT)
 *
 * Copyright (c) 2014-2016 Spomky-Labs
 *
 * This software may be modified and distributed under the terms
 * of the MIT license.  See the LICENSE file for details.
 */

namespace Jose\Algorithm\Signature;

use Assert\Assertion;
use Jose\Algorithm\SignatureAlgorithmInterface;
use Jose\KeyConverter\RSAKey;
use Jose\Object\JWKInterface;
use phpseclib\Crypt\RSA as PHPSecLibRSA;

/**
 * Class RSA.
 */
abstract class RSA implements SignatureAlgorithmInterface
{
    /**
     * Probabilistic Signature Scheme
     */
    const SIGNATURE_PSS = 1;

    /**
     * Use the PKCS#1
     */
    const SIGNATURE_PKCS1 = 2;

    /**
     * @return mixed
     */
    abstract protected function getAlgorithm();

    /**
     * @return mixed
     */
    abstract protected function getSignatureMethod();

    /**
     * {@inheritdoc}
     */
    public function verify(JWKInterface $key, $input, $signature)
    {
        $this->checkKey($key);

        $pem = RSAKey::toPublic(new RSAKey($key))->toPEM();

        if ($this->getSignatureMethod() === self::SIGNATURE_PSS) {
            $rsa = $this->getRsaObject();
            $rsa->loadKey($pem, PHPSecLibRSA::PRIVATE_FORMAT_PKCS1);

            return $rsa->verify($input, $signature);
        } else {
            return 1 === openssl_verify($input, $signature, $pem, $this->getAlgorithm());
        }
    }

    /**
     * {@inheritdoc}
     */
    public function sign(JWKInterface $key, $input)
    {
        $this->checkKey($key);
        Assertion::true($key->has('d'), 'The key is not a private key');

        $pem = (new RSAKey($key))->toPEM();

        if ($this->getSignatureMethod() === self::SIGNATURE_PSS) {
            $rsa = $this->getRsaObject();
            $rsa->loadKey($pem, PHPSecLibRSA::PRIVATE_FORMAT_PKCS1);
            $result = $rsa->sign($input);
            Assertion::string($result, 'An error occurred during the creation of the signature');

            return $result;
        } else {
            $result = openssl_sign($input, $signature, $pem, $this->getAlgorithm());
            Assertion::true($result, 'Unable to sign');

            return $signature;
        }
    }

    /**
     * @param JWKInterface $key
     */
    private function checkKey(JWKInterface $key)
    {
        Assertion::eq($key->get('kty'), 'RSA', 'Wrong key type.');
    }

    /**
     * @return \phpseclib\Crypt\RSA
     */
    private function getRsaObject()
    {
        $rsa = new PHPSecLibRSA();
        $rsa->setHash($this->getAlgorithm());
        $rsa->setMGFHash($this->getAlgorithm());
        $rsa->setSaltLength(0);
        $rsa->setSignatureMode(PHPSecLibRSA::SIGNATURE_PSS);

        return $rsa;
    }
}