asn.h

#ifndef CRYPTOPP_ASN_H
#define CRYPTOPP_ASN_H

#include "filters.h"
#include "queue.h"
#include <vector>

NAMESPACE_BEGIN(CryptoPP)

// these tags and flags are not complete
enum ASNTag
{
        BOOLEAN                         = 0x01,
        INTEGER                         = 0x02,
        BIT_STRING                      = 0x03,
        OCTET_STRING            = 0x04,
        TAG_NULL                        = 0x05,
        OBJECT_IDENTIFIER       = 0x06,
        OBJECT_DESCRIPTOR       = 0x07,
        EXTERNAL                        = 0x08,
        REAL                            = 0x09,
        ENUMERATED                      = 0x0a,
        UTF8_STRING                     = 0x0c,
        SEQUENCE                        = 0x10,
        SET                             = 0x11,
        NUMERIC_STRING          = 0x12,
        PRINTABLE_STRING        = 0x13,
        T61_STRING                      = 0x14,
        VIDEOTEXT_STRING        = 0x15,
        IA5_STRING                      = 0x16,
        UTC_TIME                        = 0x17,
        GENERALIZED_TIME        = 0x18,
        GRAPHIC_STRING          = 0x19,
        VISIBLE_STRING          = 0x1a,
        GENERAL_STRING          = 0x1b
};

enum ASNIdFlag
{
        UNIVERSAL                       = 0x00,
//      DATA                            = 0x01,
//      HEADER                          = 0x02,
        CONSTRUCTED             = 0x20,
        APPLICATION             = 0x40,
        CONTEXT_SPECIFIC        = 0x80,
        PRIVATE                         = 0xc0
};

inline void BERDecodeError() {throw BERDecodeErr();}

class CRYPTOPP_DLL UnknownOID : public BERDecodeErr
{
public:
        UnknownOID() : BERDecodeErr("BER decode error: unknown object identifier") {}
        UnknownOID(const char *err) : BERDecodeErr(err) {}
};

// unsigned int DERLengthEncode(unsigned int length, byte *output=0);
CRYPTOPP_DLL size_t CRYPTOPP_API DERLengthEncode(BufferedTransformation &out, lword length);
// returns false if indefinite length
CRYPTOPP_DLL bool CRYPTOPP_API BERLengthDecode(BufferedTransformation &in, size_t &length);

CRYPTOPP_DLL void CRYPTOPP_API DEREncodeNull(BufferedTransformation &out);
CRYPTOPP_DLL void CRYPTOPP_API BERDecodeNull(BufferedTransformation &in);

CRYPTOPP_DLL size_t CRYPTOPP_API DEREncodeOctetString(BufferedTransformation &out, const byte *str, size_t strLen);
CRYPTOPP_DLL size_t CRYPTOPP_API DEREncodeOctetString(BufferedTransformation &out, const SecByteBlock &str);
CRYPTOPP_DLL size_t CRYPTOPP_API BERDecodeOctetString(BufferedTransformation &in, SecByteBlock &str);
CRYPTOPP_DLL size_t CRYPTOPP_API BERDecodeOctetString(BufferedTransformation &in, BufferedTransformation &str);

// for UTF8_STRING, PRINTABLE_STRING, and IA5_STRING
CRYPTOPP_DLL size_t CRYPTOPP_API DEREncodeTextString(BufferedTransformation &out, const std::string &str, byte asnTag);
CRYPTOPP_DLL size_t CRYPTOPP_API BERDecodeTextString(BufferedTransformation &in, std::string &str, byte asnTag);

CRYPTOPP_DLL size_t CRYPTOPP_API DEREncodeBitString(BufferedTransformation &out, const byte *str, size_t strLen, unsigned int unusedBits=0);
CRYPTOPP_DLL size_t CRYPTOPP_API BERDecodeBitString(BufferedTransformation &in, SecByteBlock &str, unsigned int &unusedBits);

// BER decode from source and DER reencode into dest
CRYPTOPP_DLL void CRYPTOPP_API DERReencode(BufferedTransformation &source, BufferedTransformation &dest);

//! Object Identifier
class CRYPTOPP_DLL OID
{
public:
        OID() {}
        OID(word32 v) : m_values(1, v) {}
        OID(BufferedTransformation &bt) {BERDecode(bt);}

        inline OID & operator+=(word32 rhs) {m_values.push_back(rhs); return *this;}

        void DEREncode(BufferedTransformation &bt) const;
        void BERDecode(BufferedTransformation &bt);

        // throw BERDecodeErr() if decoded value doesn't equal this OID
        void BERDecodeAndCheck(BufferedTransformation &bt) const;

        std::vector<word32> m_values;

private:
        static void EncodeValue(BufferedTransformation &bt, word32 v);
        static size_t DecodeValue(BufferedTransformation &bt, word32 &v);
};

class EncodedObjectFilter : public Filter
{
public:
        enum Flag {PUT_OBJECTS=1, PUT_MESSANGE_END_AFTER_EACH_OBJECT=2, PUT_MESSANGE_END_AFTER_ALL_OBJECTS=4, PUT_MESSANGE_SERIES_END_AFTER_ALL_OBJECTS=8};
        EncodedObjectFilter(BufferedTransformation *attachment = NULL, unsigned int nObjects = 1, word32 flags = 0);

        void Put(const byte *inString, size_t length);

        unsigned int GetNumberOfCompletedObjects() const {return m_nCurrentObject;}
        unsigned long GetPositionOfObject(unsigned int i) const {return m_positions[i];}

private:
        BufferedTransformation & CurrentTarget();

        word32 m_flags;
        unsigned int m_nObjects, m_nCurrentObject, m_level;
        std::vector<unsigned int> m_positions;
        ByteQueue m_queue;
        enum State {IDENTIFIER, LENGTH, BODY, TAIL, ALL_DONE} m_state;
        byte m_id;
        lword m_lengthRemaining;
};

//! BER General Decoder
class CRYPTOPP_DLL BERGeneralDecoder : public Store
{
public:
        explicit BERGeneralDecoder(BufferedTransformation &inQueue, byte asnTag);
        explicit BERGeneralDecoder(BERGeneralDecoder &inQueue, byte asnTag);
        ~BERGeneralDecoder();

        bool IsDefiniteLength() const {return m_definiteLength;}
        lword RemainingLength() const {assert(m_definiteLength); return m_length;}
        bool EndReached() const;
        byte PeekByte() const;
        void CheckByte(byte b);

        size_t TransferTo2(BufferedTransformation &target, lword &transferBytes, const std::string &channel=NULL_CHANNEL, bool blocking=true);
        size_t CopyRangeTo2(BufferedTransformation &target, lword &begin, lword end=LWORD_MAX, const std::string &channel=NULL_CHANNEL, bool blocking=true) const;

        // call this to denote end of sequence
        void MessageEnd();

protected:
        BufferedTransformation &m_inQueue;
        bool m_finished, m_definiteLength;
        lword m_length;

private:
        void Init(byte asnTag);
        void StoreInitialize(const NameValuePairs &parameters) {assert(false);}
        lword ReduceLength(lword delta);
};

//! DER General Encoder
class CRYPTOPP_DLL DERGeneralEncoder : public ByteQueue
{
public:
        explicit DERGeneralEncoder(BufferedTransformation &outQueue, byte asnTag = SEQUENCE | CONSTRUCTED);
        explicit DERGeneralEncoder(DERGeneralEncoder &outQueue, byte asnTag = SEQUENCE | CONSTRUCTED);
        ~DERGeneralEncoder();

        // call this to denote end of sequence
        void MessageEnd();

private:
        BufferedTransformation &m_outQueue;
        bool m_finished;

        byte m_asnTag;
};

//! BER Sequence Decoder
class CRYPTOPP_DLL BERSequenceDecoder : public BERGeneralDecoder
{
public:
        explicit BERSequenceDecoder(BufferedTransformation &inQueue, byte asnTag = SEQUENCE | CONSTRUCTED)
                : BERGeneralDecoder(inQueue, asnTag) {}
        explicit BERSequenceDecoder(BERSequenceDecoder &inQueue, byte asnTag = SEQUENCE | CONSTRUCTED)
                : BERGeneralDecoder(inQueue, asnTag) {}
};

//! DER Sequence Encoder
class CRYPTOPP_DLL DERSequenceEncoder : public DERGeneralEncoder
{
public:
        explicit DERSequenceEncoder(BufferedTransformation &outQueue, byte asnTag = SEQUENCE | CONSTRUCTED)
                : DERGeneralEncoder(outQueue, asnTag) {}
        explicit DERSequenceEncoder(DERSequenceEncoder &outQueue, byte asnTag = SEQUENCE | CONSTRUCTED)
                : DERGeneralEncoder(outQueue, asnTag) {}
};

//! BER Set Decoder
class CRYPTOPP_DLL BERSetDecoder : public BERGeneralDecoder
{
public:
        explicit BERSetDecoder(BufferedTransformation &inQueue, byte asnTag = SET | CONSTRUCTED)
                : BERGeneralDecoder(inQueue, asnTag) {}
        explicit BERSetDecoder(BERSetDecoder &inQueue, byte asnTag = SET | CONSTRUCTED)
                : BERGeneralDecoder(inQueue, asnTag) {}
};

//! DER Set Encoder
class CRYPTOPP_DLL DERSetEncoder : public DERGeneralEncoder
{
public:
        explicit DERSetEncoder(BufferedTransformation &outQueue, byte asnTag = SET | CONSTRUCTED)
                : DERGeneralEncoder(outQueue, asnTag) {}
        explicit DERSetEncoder(DERSetEncoder &outQueue, byte asnTag = SET | CONSTRUCTED)
                : DERGeneralEncoder(outQueue, asnTag) {}
};

template <class T>
class ASNOptional : public member_ptr<T>
{
public:
        void BERDecode(BERSequenceDecoder &seqDecoder, byte tag, byte mask = ~CONSTRUCTED)
        {
                byte b;
                if (seqDecoder.Peek(b) && (b & mask) == tag)
                        reset(new T(seqDecoder));
        }
        void DEREncode(BufferedTransformation &out)
        {
                if (this->get() != NULL)
                        this->get()->DEREncode(out);
        }
};

//! _
template <class BASE>
class CRYPTOPP_DLL CRYPTOPP_NO_VTABLE ASN1CryptoMaterial : public ASN1Object, public BASE
{
public:
        void Save(BufferedTransformation &bt) const
                {BEREncode(bt);}
        void Load(BufferedTransformation &bt)
                {BERDecode(bt);}
};

//! encodes/decodes subjectPublicKeyInfo
class CRYPTOPP_DLL X509PublicKey : public ASN1CryptoMaterial<PublicKey>
{
public:
        void BERDecode(BufferedTransformation &bt);
        void DEREncode(BufferedTransformation &bt) const;

        virtual OID GetAlgorithmID() const =0;
        virtual bool BERDecodeAlgorithmParameters(BufferedTransformation &bt)
                {BERDecodeNull(bt); return false;}
        virtual bool DEREncodeAlgorithmParameters(BufferedTransformation &bt) const
                {DEREncodeNull(bt); return false;}      // see RFC 2459, section 7.3.1

        //! decode subjectPublicKey part of subjectPublicKeyInfo, without the BIT STRING header
        virtual void BERDecodePublicKey(BufferedTransformation &bt, bool parametersPresent, size_t size) =0;
        //! encode subjectPublicKey part of subjectPublicKeyInfo, without the BIT STRING header
        virtual void DEREncodePublicKey(BufferedTransformation &bt) const =0;
};

//! encodes/decodes privateKeyInfo
class CRYPTOPP_DLL PKCS8PrivateKey : public ASN1CryptoMaterial<PrivateKey>
{
public:
        void BERDecode(BufferedTransformation &bt);
        void DEREncode(BufferedTransformation &bt) const;

        virtual OID GetAlgorithmID() const =0;
        virtual bool BERDecodeAlgorithmParameters(BufferedTransformation &bt)
                {BERDecodeNull(bt); return false;}
        virtual bool DEREncodeAlgorithmParameters(BufferedTransformation &bt) const
                {DEREncodeNull(bt); return false;}      // see RFC 2459, section 7.3.1

        //! decode privateKey part of privateKeyInfo, without the OCTET STRING header
        virtual void BERDecodePrivateKey(BufferedTransformation &bt, bool parametersPresent, size_t size) =0;
        //! encode privateKey part of privateKeyInfo, without the OCTET STRING header
        virtual void DEREncodePrivateKey(BufferedTransformation &bt) const =0;

        //! decode optional attributes including context-specific tag
        /*! /note default implementation stores attributes to be output in DEREncodeOptionalAttributes */
        virtual void BERDecodeOptionalAttributes(BufferedTransformation &bt);
        //! encode optional attributes including context-specific tag
        virtual void DEREncodeOptionalAttributes(BufferedTransformation &bt) const;

protected:
        ByteQueue m_optionalAttributes;
};

// ********************************************************

//! DER Encode Unsigned
/*! for INTEGER, BOOLEAN, and ENUM */
template <class T>
size_t DEREncodeUnsigned(BufferedTransformation &out, T w, byte asnTag = INTEGER)
{
        byte buf[sizeof(w)+1];
        unsigned int bc;
        if (asnTag == BOOLEAN)
        {
                buf[sizeof(w)] = w ? 0xff : 0;
                bc = 1;
        }
        else
        {
                buf[0] = 0;
                for (unsigned int i=0; i<sizeof(w); i++)
                        buf[i+1] = byte(w >> (sizeof(w)-1-i)*8);
                bc = sizeof(w);
                while (bc > 1 && buf[sizeof(w)+1-bc] == 0)
                        --bc;
                if (buf[sizeof(w)+1-bc] & 0x80)
                        ++bc;
        }
        out.Put(asnTag);
        size_t lengthBytes = DERLengthEncode(out, bc);
        out.Put(buf+sizeof(w)+1-bc, bc);
        return 1+lengthBytes+bc;
}

//! BER Decode Unsigned
// VC60 workaround: std::numeric_limits<T>::max conflicts with MFC max macro
// CW41 workaround: std::numeric_limits<T>::max causes a template error
template <class T>
void BERDecodeUnsigned(BufferedTransformation &in, T &w, byte asnTag = INTEGER,
                                           T minValue = 0, T maxValue = 0xffffffff)
{
        byte b;
        if (!in.Get(b) || b != asnTag)
                BERDecodeError();

        size_t bc;
        BERLengthDecode(in, bc);

        SecByteBlock buf(bc);

        if (bc != in.Get(buf, bc))
                BERDecodeError();

        const byte *ptr = buf;
        while (bc > sizeof(w) && *ptr == 0)
        {
                bc--;
                ptr++;
        }
        if (bc > sizeof(w))
                BERDecodeError();

        w = 0;
        for (unsigned int i=0; i<bc; i++)
                w = (w << 8) | ptr[i];

        if (w < minValue || w > maxValue)
                BERDecodeError();
}

inline bool operator==(const ::CryptoPP::OID &lhs, const ::CryptoPP::OID &rhs)
        {return lhs.m_values == rhs.m_values;}
inline bool operator!=(const ::CryptoPP::OID &lhs, const ::CryptoPP::OID &rhs)
        {return lhs.m_values != rhs.m_values;}
inline bool operator<(const ::CryptoPP::OID &lhs, const ::CryptoPP::OID &rhs)
        {return std::lexicographical_compare(lhs.m_values.begin(), lhs.m_values.end(), rhs.m_values.begin(), rhs.m_values.end());}
inline ::CryptoPP::OID operator+(const ::CryptoPP::OID &lhs, unsigned long rhs)
        {return ::CryptoPP::OID(lhs)+=rhs;}

NAMESPACE_END

#endif

---