Fwd: Using lua-openssl module for blind signatures !

modi.konark · 2015-10-30T22:45:19+00:00

Hello! On Fri, Oct 30, 2015 at 8:08 PM, Ali Alnakeab wrote: > we have implemented nginx caching of static (large) files using openresty > bundle by le...

Fwd: Using lua-openssl module for blind signatures !

modi.konark

Hi,

I am currently working on creating a RSA based blind signature scheme between JS and Nginx-Lua backend.

The flow is as follows:

1. Client generates a message.

2. Message is hashed with sha-256.

3. Then nonce is added and message is blinded.

4. This blinded message is sent to the server for signing purpose.

5. Now when I sign it with pkey.sign(), the documentation says the output is string but not sure what format is it and how do I send it back to the client, which will send it to a different authority to verify.

Also,

I was looking for ways to parse the private key to get values like private key exponent, but the :parse() function does not seem to give the result.

I have also tried, signing the message in LUA and verifying the message on Python, but even that does not seem to work.

Any help would be greatly appreciated.

Regards

Konark

doujiang24

Hello,

Maybe you want to take a look at https://github.com/doujiang24/lua-resty-rsa

I haven't try Python, but it works fine with PHP :)

2015-10-30 22:45 GMT+08:00 konark modi <modi....@gmail.com>:

Hi,

I am currently working on creating a RSA based blind signature scheme between JS and Nginx-Lua backend.

The flow is as follows:

1. Client generates a message.
2. Message is hashed with sha-256.
3. Then nonce is added and message is blinded.
4. This blinded message is sent to the server for signing purpose.
5. Now when I sign it with pkey.sign(), the documentation says the output is string but not sure what format is it and how do I send it back to the client, which will send it to a different authority to verify.

Also,

I was looking for ways to parse the private key to get values like private key exponent, but the :parse() function does not seem to give the result.

I have also tried, signing the message in LUA and verifying the message on Python, but even that does not seem to work.
Any help would be greatly appreciated.

Regards
Konark

.

aapo.talvensaari

On Friday, 30 October 2015 16:45:21 UTC+2, konark modi wrote:

Hi,

I am currently working on creating a RSA based blind signature scheme between JS and Nginx-Lua backend.

The flow is as follows:

1. Client generates a message.
2. Message is hashed with sha-256.
3. Then nonce is added and message is blinded.
4. This blinded message is sent to the server for signing purpose.
5. Now when I sign it with pkey.sign(), the documentation says the output is string but not sure what format is it and how do I send it back to the client, which will send it to a different authority to verify.

I'm not sure if this helps, and this it not a direct answer to your question, but I have been writing bindings to Nettle. I have also done some RSA bindings, but that is more or less still incomplete (and I may have got some details wrong):

https://github.com/bungle/lua-resty-nettle/blob/master/lib/resty/nettle/rsa.lua

Maybe you can check it out and even contribute something back. The Nettle API is simple.

modi.konark

Hi,

Thank you for your reply, yes I looked into the library you have shared. Will try it once. But since I am using lua-openssl for few other projects hence I am wanting to look for a solution with that. If not then certianly need to implement something different.

Also, did you do you blind RSA signatures or simple digital signing. If you have also implemented Blind signatures, I'd love t learn more from you of your implemenation.

Regards

Konark

On Friday, 30 October 2015 16:16:58 UTC+1, DeJiang Zhu wrote:

Hello,

Maybe you want to take a look at https://github.com/doujiang24/lua-resty-rsa

I haven't try Python, but it works fine with PHP :)

2015-10-30 22:45 GMT+08:00 konark modi <modi....@gmail.com>:
Hi,

I am currently working on creating a RSA based blind signature scheme between JS and Nginx-Lua backend.

The flow is as follows:

1. Client generates a message.
2. Message is hashed with sha-256.
3. Then nonce is added and message is blinded.
4. This blinded message is sent to the server for signing purpose.
5. Now when I sign it with pkey.sign(), the documentation says the output is string but not sure what format is it and how do I send it back to the client, which will send it to a different authority to verify.

Also,

I was looking for ways to parse the private key to get values like private key exponent, but the :parse() function does not seem to give the result.

I have also tried, signing the message in LUA and verifying the message on Python, but even that does not seem to work.
Any help would be greatly appreciated.

Regards
Konark

.

doujiang24

Hello,

2015-10-31 4:55 GMT+08:00 konark modi <modi....@gmail.com>:

Hi,

Thank you for your reply, yes I looked into the library you have shared. Will try it once. But since I am using lua-openssl for few other projects hence I am wanting to look for a solution with that. If not then certianly need to implement something different.

Also, did you do you blind RSA signatures or simple digital signing. If you have also implemented Blind signatures, I'd love t learn more from you of your implemenation.

Do you mean this?

https://github.com/doujiang24/lua-resty-rsa#sign

And all samples are here:

https://github.com/doujiang24/lua-resty-rsa#synopsis

Regards
Konark

On Friday, 30 October 2015 16:16:58 UTC+1, DeJiang Zhu wrote:
Hello,

Maybe you want to take a look at https://github.com/doujiang24/lua-resty-rsa

I haven't try Python, but it works fine with PHP :)

2015-10-30 22:45 GMT+08:00 konark modi <modi....@gmail.com>:
Hi,

I am currently working on creating a RSA based blind signature scheme between JS and Nginx-Lua backend.

The flow is as follows:

1. Client generates a message.
2. Message is hashed with sha-256.
3. Then nonce is added and message is blinded.
4. This blinded message is sent to the server for signing purpose.
5. Now when I sign it with pkey.sign(), the documentation says the output is string but not sure what format is it and how do I send it back to the client, which will send it to a different authority to verify.

Also,

I was looking for ways to parse the private key to get values like private key exponent, but the :parse() function does not seem to give the result.

I have also tried, signing the message in LUA and verifying the message on Python, but even that does not seem to work.
Any help would be greatly appreciated.

Regards
Konark

.