wolf SSL / CyaSSL-2.9.4

SSL/TLS Library

Dependents:  

CyaSSL is SSL/TLS library for embedded systems.

wolfssl.com

cyassl/ctaocrypt/pkcs7.h@0:9d17e4342598, 2014-04-20 (annotated)

Committer:
wolfSSL
Date:
Sun Apr 20 12:40:57 2014 +0000
Revision:
0:9d17e4342598
CyaSSL SSL/TLS Library 2.9.4;

Who changed what in which revision?

UserRevisionLine numberNew contents of line
wolfSSL 0:9d17e4342598 1 /* pkcs7.h
wolfSSL 0:9d17e4342598 2 *
wolfSSL 0:9d17e4342598 3 * Copyright (C) 2006-2013 wolfSSL Inc.
wolfSSL 0:9d17e4342598 4 *
wolfSSL 0:9d17e4342598 5 * This file is part of CyaSSL.
wolfSSL 0:9d17e4342598 6 *
wolfSSL 0:9d17e4342598 7 * CyaSSL is free software; you can redistribute it and/or modify
wolfSSL 0:9d17e4342598 8 * it under the terms of the GNU General Public License as published by
wolfSSL 0:9d17e4342598 9 * the Free Software Foundation; either version 2 of the License, or
wolfSSL 0:9d17e4342598 10 * (at your option) any later version.
wolfSSL 0:9d17e4342598 11 *
wolfSSL 0:9d17e4342598 12 * CyaSSL is distributed in the hope that it will be useful,
wolfSSL 0:9d17e4342598 13 * * but WITHOUT ANY WARRANTY; without even the implied warranty of
wolfSSL 0:9d17e4342598 14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
wolfSSL 0:9d17e4342598 15 * GNU General Public License for more details.
wolfSSL 0:9d17e4342598 16 *
wolfSSL 0:9d17e4342598 17 * You should have received a copy of the GNU General Public License
wolfSSL 0:9d17e4342598 18 * along with this program; if not, write to the Free Software
wolfSSL 0:9d17e4342598 19 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
wolfSSL 0:9d17e4342598 20 */
wolfSSL 0:9d17e4342598 21
wolfSSL 0:9d17e4342598 22
wolfSSL 0:9d17e4342598 23 #ifdef HAVE_PKCS7
wolfSSL 0:9d17e4342598 24
wolfSSL 0:9d17e4342598 25 #ifndef CTAO_CRYPT_PKCS7_H
wolfSSL 0:9d17e4342598 26 #define CTAO_CRYPT_PKCS7_H
wolfSSL 0:9d17e4342598 27
wolfSSL 0:9d17e4342598 28 #include <cyassl/ctaocrypt/types.h>
wolfSSL 0:9d17e4342598 29 #include <cyassl/ctaocrypt/asn.h>
wolfSSL 0:9d17e4342598 30 #include <cyassl/ctaocrypt/asn_public.h>
wolfSSL 0:9d17e4342598 31 #include <cyassl/ctaocrypt/random.h>
wolfSSL 0:9d17e4342598 32 #include <cyassl/ctaocrypt/des3.h>
wolfSSL 0:9d17e4342598 33
wolfSSL 0:9d17e4342598 34 #ifdef __cplusplus
wolfSSL 0:9d17e4342598 35 extern "C" {
wolfSSL 0:9d17e4342598 36 #endif
wolfSSL 0:9d17e4342598 37
wolfSSL 0:9d17e4342598 38 /* PKCS#7 content types, ref RFC 2315 (Section 14) */
wolfSSL 0:9d17e4342598 39 enum PKCS7_TYPES {
wolfSSL 0:9d17e4342598 40 PKCS7_MSG = 650, /* 1.2.840.113549.1.7 */
wolfSSL 0:9d17e4342598 41 DATA = 651, /* 1.2.840.113549.1.7.1 */
wolfSSL 0:9d17e4342598 42 SIGNED_DATA = 652, /* 1.2.840.113549.1.7.2 */
wolfSSL 0:9d17e4342598 43 ENVELOPED_DATA = 653, /* 1.2.840.113549.1.7.3 */
wolfSSL 0:9d17e4342598 44 SIGNED_AND_ENVELOPED_DATA = 654, /* 1.2.840.113549.1.7.4 */
wolfSSL 0:9d17e4342598 45 DIGESTED_DATA = 655, /* 1.2.840.113549.1.7.5 */
wolfSSL 0:9d17e4342598 46 ENCRYPTED_DATA = 656 /* 1.2.840.113549.1.7.6 */
wolfSSL 0:9d17e4342598 47 };
wolfSSL 0:9d17e4342598 48
wolfSSL 0:9d17e4342598 49 enum Pkcs7_Misc {
wolfSSL 0:9d17e4342598 50 PKCS7_NONCE_SZ = 16,
wolfSSL 0:9d17e4342598 51 MAX_ENCRYPTED_KEY_SZ = 512, /* max enc. key size, RSA <= 4096 */
wolfSSL 0:9d17e4342598 52 MAX_CONTENT_KEY_LEN = DES3_KEYLEN, /* highest current cipher is 3DES */
wolfSSL 0:9d17e4342598 53 MAX_RECIP_SZ = MAX_VERSION_SZ +
wolfSSL 0:9d17e4342598 54 MAX_SEQ_SZ + ASN_NAME_MAX + MAX_SN_SZ +
wolfSSL 0:9d17e4342598 55 MAX_SEQ_SZ + MAX_ALGO_SZ + 1 + MAX_ENCRYPTED_KEY_SZ
wolfSSL 0:9d17e4342598 56 };
wolfSSL 0:9d17e4342598 57
wolfSSL 0:9d17e4342598 58
wolfSSL 0:9d17e4342598 59 typedef struct PKCS7Attrib {
wolfSSL 0:9d17e4342598 60 byte* oid;
wolfSSL 0:9d17e4342598 61 word32 oidSz;
wolfSSL 0:9d17e4342598 62 byte* value;
wolfSSL 0:9d17e4342598 63 word32 valueSz;
wolfSSL 0:9d17e4342598 64 } PKCS7Attrib;
wolfSSL 0:9d17e4342598 65
wolfSSL 0:9d17e4342598 66
wolfSSL 0:9d17e4342598 67 typedef struct PKCS7 {
wolfSSL 0:9d17e4342598 68 byte* content; /* inner content, not owner */
wolfSSL 0:9d17e4342598 69 word32 contentSz; /* content size */
wolfSSL 0:9d17e4342598 70 int contentOID; /* PKCS#7 content type OID sum */
wolfSSL 0:9d17e4342598 71
wolfSSL 0:9d17e4342598 72 RNG* rng;
wolfSSL 0:9d17e4342598 73
wolfSSL 0:9d17e4342598 74 int hashOID;
wolfSSL 0:9d17e4342598 75 int encryptOID; /* key encryption algorithm OID */
wolfSSL 0:9d17e4342598 76
wolfSSL 0:9d17e4342598 77 byte* singleCert; /* recipient cert, DER, not owner */
wolfSSL 0:9d17e4342598 78 word32 singleCertSz; /* size of recipient cert buffer, bytes */
wolfSSL 0:9d17e4342598 79 byte issuerHash[SHA_SIZE]; /* hash of all alt Names */
wolfSSL 0:9d17e4342598 80 byte* issuer; /* issuer name of singleCert */
wolfSSL 0:9d17e4342598 81 word32 issuerSz; /* length of issuer name */
wolfSSL 0:9d17e4342598 82 byte issuerSn[MAX_SN_SZ]; /* singleCert's serial number */
wolfSSL 0:9d17e4342598 83 word32 issuerSnSz; /* length of serial number */
wolfSSL 0:9d17e4342598 84 byte publicKey[512];
wolfSSL 0:9d17e4342598 85 word32 publicKeySz;
wolfSSL 0:9d17e4342598 86 byte* privateKey; /* private key, DER, not owner */
wolfSSL 0:9d17e4342598 87 word32 privateKeySz; /* size of private key buffer, bytes */
wolfSSL 0:9d17e4342598 88
wolfSSL 0:9d17e4342598 89 PKCS7Attrib* signedAttribs;
wolfSSL 0:9d17e4342598 90 word32 signedAttribsSz;
wolfSSL 0:9d17e4342598 91 } PKCS7;
wolfSSL 0:9d17e4342598 92
wolfSSL 0:9d17e4342598 93
wolfSSL 0:9d17e4342598 94 CYASSL_LOCAL int SetContentType(int pkcs7TypeOID, byte* output);
wolfSSL 0:9d17e4342598 95 CYASSL_LOCAL int GetContentType(const byte* input, word32* inOutIdx,
wolfSSL 0:9d17e4342598 96 word32* oid, word32 maxIdx);
wolfSSL 0:9d17e4342598 97 CYASSL_LOCAL int CreateRecipientInfo(const byte* cert, word32 certSz,
wolfSSL 0:9d17e4342598 98 int keyEncAlgo, int blockKeySz,
wolfSSL 0:9d17e4342598 99 RNG* rng, byte* contentKeyPlain,
wolfSSL 0:9d17e4342598 100 byte* contentKeyEnc,
wolfSSL 0:9d17e4342598 101 int* keyEncSz, byte* out, word32 outSz);
wolfSSL 0:9d17e4342598 102
wolfSSL 0:9d17e4342598 103 CYASSL_API int PKCS7_InitWithCert(PKCS7* pkcs7, byte* cert, word32 certSz);
wolfSSL 0:9d17e4342598 104 CYASSL_API void PKCS7_Free(PKCS7* pkcs7);
wolfSSL 0:9d17e4342598 105 CYASSL_API int PKCS7_EncodeData(PKCS7* pkcs7, byte* output, word32 outputSz);
wolfSSL 0:9d17e4342598 106 CYASSL_API int PKCS7_EncodeSignedData(PKCS7* pkcs7,
wolfSSL 0:9d17e4342598 107 byte* output, word32 outputSz);
wolfSSL 0:9d17e4342598 108 CYASSL_API int PKCS7_VerifySignedData(PKCS7* pkcs7,
wolfSSL 0:9d17e4342598 109 byte* pkiMsg, word32 pkiMsgSz);
wolfSSL 0:9d17e4342598 110 CYASSL_API int PKCS7_EncodeEnvelopedData(PKCS7* pkcs7,
wolfSSL 0:9d17e4342598 111 byte* output, word32 outputSz);
wolfSSL 0:9d17e4342598 112 CYASSL_API int PKCS7_DecodeEnvelopedData(PKCS7* pkcs7, byte* pkiMsg,
wolfSSL 0:9d17e4342598 113 word32 pkiMsgSz, byte* output,
wolfSSL 0:9d17e4342598 114 word32 outputSz);
wolfSSL 0:9d17e4342598 115
wolfSSL 0:9d17e4342598 116 #ifdef __cplusplus
wolfSSL 0:9d17e4342598 117 } /* extern "C" */
wolfSSL 0:9d17e4342598 118 #endif
wolfSSL 0:9d17e4342598 119
wolfSSL 0:9d17e4342598 120 #endif /* CTAO_CRYPT_PKCS7_H */
wolfSSL 0:9d17e4342598 121
wolfSSL 0:9d17e4342598 122 #endif /* HAVE_PKCS7 */
wolfSSL 0:9d17e4342598 123