MbedTLS rsa encryption/decryption errors

[matas_s]

On the ESP32-C3-Mini I'd like to use mbed tls library to encrypt and decrypt data with RSA-2048 algorithm. However I encounter many bugs.

Describe the bug
When using MbedTLS library

Code: Select all

mbedtls_pk_encrypt

and

Code: Select all

mbedtls_pk_decrypt

functions I get errors (0x44A0 or 0x3E80), even though its an example code from https://mbed-tls.readthedocs.io/en/late ... -with-rsa/ website. I can't figure it out how to perform RSA operations on ESP32 with this library. Any chance anyone had success?

To Reproduce:

Code: Select all

int ret = 0;
    mbedtls_pk_context pk;
    mbedtls_ctr_drbg_context ctr_drbg;
    mbedtls_pk_init(&pk);
    mbedtls_ctr_drbg_init(&ctr_drbg);
    /*
     * Read the RSA public key
     */
    if ((ret = mbedtls_pk_parse_public_key(&pk, ConstParams::RSA_PUB_KEY, 452)) != 0)
    {
        printf(" failed\n  ! mbedtls_pk_parse_public_keyfile returned -0x%04x\n", -ret);
    }

    unsigned char buf[MBEDTLS_MPI_MAX_SIZE];
    size_t olen = 0;

    /*
     * Calculate the RSA encryption of the data.
     */
    printf("\n  . Generating the encrypted value");
    const unsigned char to_encrypt[] = "Hello World!";
    const size_t to_encrypt_len = sizeof(to_encrypt);
    if ((ret = mbedtls_pk_encrypt(&pk, to_encrypt, to_encrypt_len + 1,
                                  buf, &olen, sizeof(buf),
                                  mbedtls_ctr_drbg_random, &ctr_drbg)) != 0)
    {

        printf(" failed\n  ! mbedtls_pk_encrypt returned %d\n", -ret);
    }
    ESP_LOG_BUFFER_HEX("encrypted", buf, olen);
   

Code: Select all

ConstParams::RSA_PUB_KEY

holds public key in string format.

Expected behavior
Correct encryption and decryption of any given input.

[ESP_harshal]

Hello @matas_s,

You could refer to their (mbedtls's) test as an example of the usage of those APIs. https://github.com/Mbed-TLS/mbedtls/blo ... _encrypt.c

We also have a test (ref: https://github.com/espressif/esp-idf/bl ... #L463-L468) in ESP-IDF that performs RSA encryption and decryption operations and thus can also be helpful to you.

[MicroController]

mbedtls_strerror(...) may also be helpful.