1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
|
/*
(C) 2007 FlexSecure GmbH
2008-2010 Jack Lloyd
*
* Distributed under the terms of the Botan license
*/
#include <botan/cvc_cert.h>
#include <botan/oids.h>
namespace Botan {
ASN1_Car EAC1_1_CVC::get_car() const
{
return m_car;
}
ASN1_Ced EAC1_1_CVC::get_ced() const
{
return m_ced;
}
ASN1_Cex EAC1_1_CVC::get_cex() const
{
return m_cex;
}
u32bit EAC1_1_CVC::get_chat_value() const
{
return m_chat_val;
}
/*
* Decode the TBSCertificate data
*/
void EAC1_1_CVC::force_decode()
{
SecureVector<byte> enc_pk;
SecureVector<byte> enc_chat_val;
u32bit cpi;
BER_Decoder tbs_cert(tbs_bits);
tbs_cert.decode(cpi, ASN1_Tag(41), APPLICATION)
.decode(m_car)
.start_cons(ASN1_Tag(73))
.raw_bytes(enc_pk)
.end_cons()
.decode(m_chr)
.start_cons(ASN1_Tag(76))
.decode(m_chat_oid)
.decode(enc_chat_val, OCTET_STRING, ASN1_Tag(19), APPLICATION)
.end_cons()
.decode(m_ced)
.decode(m_cex)
.verify_end();
if(enc_chat_val.size() != 1)
throw Decoding_Error("CertificateHolderAuthorizationValue was not of length 1");
if(cpi != 0)
throw Decoding_Error("EAC1_1 certificate's cpi was not 0");
m_pk = decode_eac1_1_key(enc_pk, sig_algo);
m_chat_val = enc_chat_val[0];
self_signed = (m_car.iso_8859() == m_chr.iso_8859());
}
/*
* CVC Certificate Constructor
*/
EAC1_1_CVC::EAC1_1_CVC(DataSource& in)
{
init(in);
self_signed = false;
do_decode();
}
EAC1_1_CVC::EAC1_1_CVC(const std::string& in)
{
DataSource_Stream stream(in, true);
init(stream);
self_signed = false;
do_decode();
}
bool EAC1_1_CVC::operator==(EAC1_1_CVC const& rhs) const
{
return (tbs_data() == rhs.tbs_data()
&& get_concat_sig() == rhs.get_concat_sig());
}
ECDSA_PublicKey* decode_eac1_1_key(const MemoryRegion<byte>&,
AlgorithmIdentifier&)
{
throw Internal_Error("decode_eac1_1_key: Unimplemented");
return 0;
}
EAC1_1_CVC make_cvc_cert(PK_Signer& signer,
MemoryRegion<byte> const& public_key,
ASN1_Car const& car,
ASN1_Chr const& chr,
byte holder_auth_templ,
ASN1_Ced ced,
ASN1_Cex cex,
RandomNumberGenerator& rng)
{
OID chat_oid(OIDS::lookup("CertificateHolderAuthorizationTemplate"));
MemoryVector<byte> enc_chat_val;
enc_chat_val.append(holder_auth_templ);
MemoryVector<byte> enc_cpi;
enc_cpi.append(0x00);
MemoryVector<byte> tbs = DER_Encoder()
.encode(enc_cpi, OCTET_STRING, ASN1_Tag(41), APPLICATION) // cpi
.encode(car)
.raw_bytes(public_key)
.encode(chr)
.start_cons(ASN1_Tag(76), APPLICATION)
.encode(chat_oid)
.encode(enc_chat_val, OCTET_STRING, ASN1_Tag(19), APPLICATION)
.end_cons()
.encode(ced)
.encode(cex)
.get_contents();
MemoryVector<byte> signed_cert =
EAC1_1_CVC::make_signed(signer,
EAC1_1_CVC::build_cert_body(tbs),
rng);
DataSource_Memory source(signed_cert);
return EAC1_1_CVC(source);
}
}
|
