Solved

Java Security Signature Exception problem

Posted on 2007-12-02
8
3,273 Views
Last Modified: 2013-11-23
Hi,
I'm having some problems with a piece of code that i'm trying to write where it throws a SignatureException - invalid encoding for signature.

- I declare the Signature as a 'global' variable.

- Before signing the message, I do the following:
 sig = Signature.getInstance("DSA");
 sig.initSign(PrivateKey);      

- When I want to verify the signature, first I do this:
sig.initVerify(PublicKey);

The error is thrown right at the end when I come to the verification:
if (!sig.verify(sig))
              System.out.print("Signature NOT");
              System.out.print("Verified");

Anyone understand why I get an invalid coding message and what I should do to fix this?

Cheers,

Phil.

0
Comment
Question by:phil8258
  • 4
  • 4
8 Comments
 
LVL 92

Expert Comment

by:objects
ID: 20393296
where r you're key vars coming from?
0
 

Author Comment

by:phil8258
ID: 20393342
Some code below:
// Declared in the main class:
public static PrivateKey PrivateKey = null;
public static PublicKey PublicKey = null;	
public static Signature sig = null;
 
//A bit of code from a method that creates the keys:
KeyPair keys = keypair.generateKeyPair();
PrivateKey = keys.getPrivate();
PublicKey = keys.getPublic();
 
//A bit of code from the method that signs the message:
sig = Signature.getInstance("DSA");
sig.initSign(PrivateKey);
 
//All of the above seems to work ok. Then...
 
//A bit of code from the method that verifies the signature:
sig.initVerify(PublicKey);
 
File f = new File("Input.txt");   //Open signed file
DataInputStream f = new DataInputStream(new FileInputStream(f));
 
byte[] sigTemp = new byte[SignedFile.read()];	//Read signed file into byte array
f.read(sigTemp, 0, f.read());
 
int length = (int) f.length();
byte[] Input = new byte[length];
f.read(Input, 0, length);
f.close();
 
sig.update(Input);
       
if (!sig.verify(sig))
              System.out.print("Signature NOT");
              System.out.print("Verified");
	}

Open in new window

0
 

Author Comment

by:phil8258
ID: 20393347
Error occurs at line 33 in the above code
0
3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

 
LVL 92

Expert Comment

by:objects
ID: 20393357
byte[] sigTemp = new byte[SignedFile.read()];   //Read signed file into byte array
f.read(sigTemp, 0, f.read());

whats that meant to be doing.
does not look like it would even compile
0
 

Author Comment

by:phil8258
ID: 20393390
Good question!
I removed it, and the first thing that went wrong (or right) was that line 33 could no longer refer to sig
I changed line 33 to if (!sig.verify(Input))
and exception gone :O)

Only problem now is that its always reporting Signature Not Verified...
Changing to:

        if (!signature.verify(Input)){
              System.out.println("Signature not verified");
        }
        else {
              System.out.println("Signature verified sucessfully");
        }

and it still says "Signature not Verified"
0
 
LVL 92

Expert Comment

by:objects
ID: 20393410
>         if (!signature.verify(Input)){

the verify method expects the bytes of a signature, is that what Input contains?
0
 

Author Comment

by:phil8258
ID: 20393438
Input contains:
0,ljaØÄaÉ"¼]~ÆSNxMQk[ªhzDÞ/mRyÒ¬!î=ïhÜHello World!
0
 
LVL 92

Accepted Solution

by:
objects earned 500 total points
ID: 20393482
u sure thats a signature? seems to also include data.
how was it created?

there an example here to sign and verify

http://www.java2s.com/Code/Java/Security/Testthesignature.htm
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How to parse custom JSON to POJO java 4 73
mockito example issue 8 72
javap not working 8 45
Glassfish admin console not working 1 12
This was posted to the Netbeans forum a Feb, 2010 and I also sent it to Verisign. Who didn't help much in my struggles to get my application signed. ------------------------- Start The idea here is to target your cell phones with the correct…
Introduction This article is the second of three articles that explain why and how the Experts Exchange QA Team does test automation for our web site. This article covers the basic installation and configuration of the test automation tools used by…
Viewers learn about the “for” loop and how it works in Java. By comparing it to the while loop learned before, viewers can make the transition easily. You will learn about the formatting of the for loop as we write a program that prints even numbers…
This video teaches viewers about errors in exception handling.

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question