libmongocrypt-helper 1.11.0.0.1001 → 1.13.2.0.1001

data/ext/libmongocrypt/libmongocrypt/bindings/cs/MongoDB.Libmongocrypt/CryptClient.cs

@@ -1,257 +0,0 @@
-/*
- * Copyright 2019–present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-using System;
-using System.Runtime.InteropServices;
-
-namespace MongoDB.Libmongocrypt
-{
-    /// <summary>
-    /// CryptClient represents a session with libmongocrypt.
-    /// 
-    /// It can be used to encrypt and decrypt documents.
-    /// </summary>
-    /// <seealso cref="System.IDisposable" />
-    public class CryptClient : IDisposable, IStatus
-    {
-        private MongoCryptSafeHandle _handle;
-        private Status _status;
-
-        internal CryptClient(MongoCryptSafeHandle handle, Status status)
-        {
-            _handle = handle ?? throw new ArgumentNullException(paramName: nameof(handle)); 
-            _status = status ?? throw new ArgumentNullException(paramName: nameof(status));
-        }
-
-        /// <summary>
-        /// Gets the crypt shared library version.
-        /// </summary>
-        /// <returns>A crypt shared library version.</returns>
-        public string CryptSharedLibraryVersion
-        {
-            get
-            {
-                var versionPtr = Library.mongocrypt_crypt_shared_lib_version_string(_handle, out _);
-                var result = Marshal.PtrToStringAnsi(versionPtr);
-
-                return result;
-            }
-        }
-
-        /// <summary>
-        /// Starts the create data key context.
-        /// </summary>
-        /// <param name="keyId">The key identifier.</param>
-        /// <returns>A crypt context for creating a data key</returns>
-        public CryptContext StartCreateDataKeyContext(KmsKeyId keyId)
-        {
-            ContextSafeHandle handle = Library.mongocrypt_ctx_new(_handle);
-
-            keyId.SetCredentials(handle, _status);
-
-            handle.Check(_status, Library.mongocrypt_ctx_datakey_init(handle));
-
-            return new CryptContext(handle);
-        }
-
-        /// <summary>
-        /// Starts the encryption context.
-        /// </summary>
-        /// <param name="db">The database of the collection.</param>
-        /// <param name="command">The command.</param>
-        /// <returns>A encryption context.</returns>
-        public CryptContext StartEncryptionContext(string db, byte[] command)
-        {
-            ContextSafeHandle handle = Library.mongocrypt_ctx_new(_handle);
-
-            IntPtr stringPointer = (IntPtr)Marshal.StringToHGlobalAnsi(db);
-
-            try
-            {
-                unsafe
-                {
-                    fixed (byte* c = command)
-                    {
-                        var commandPtr = (IntPtr)c;
-                        using (var pinnedCommand = new PinnedBinary(commandPtr, (uint)command.Length))
-                        {
-                            // Let mongocrypt run strlen
-                            handle.Check(_status, Library.mongocrypt_ctx_encrypt_init(handle, stringPointer, -1, pinnedCommand.Handle));
-                        }
-                    }
-                }
-            }
-            finally
-            {
-                Marshal.FreeHGlobal(stringPointer);
-            }
-
-            return new CryptContext(handle);
-        }
-
-        /// <summary>
-        /// Starts an explicit encryption context.
-        /// </summary>
-        public CryptContext StartExplicitEncryptionContext(byte[] keyId, byte[] keyAltName, string queryType, long? contentionFactor, string encryptionAlgorithm, byte[] message, byte[] rangeOptions, bool isExpressionMode = false)
-        {
-            var handle = Library.mongocrypt_ctx_new(_handle);
-
-            if (keyId != null)
-            {
-                PinnedBinary.RunAsPinnedBinary(handle, keyId, _status, (h, pb) => Library.mongocrypt_ctx_setopt_key_id(h, pb));
-            }
-            else if (keyAltName != null)
-            {
-                PinnedBinary.RunAsPinnedBinary(handle, keyAltName, _status, (h, pb) => Library.mongocrypt_ctx_setopt_key_alt_name(h, pb));
-            }
-
-            if (rangeOptions != null)
-            {
-                PinnedBinary.RunAsPinnedBinary(handle, rangeOptions, _status, (h, pb) => Library.mongocrypt_ctx_setopt_algorithm_range(h, pb));
-            }
-
-            handle.Check(_status, Library.mongocrypt_ctx_setopt_algorithm(handle, encryptionAlgorithm, -1));
-
-            if (queryType != null)
-            {
-                handle.Check(_status, Library.mongocrypt_ctx_setopt_query_type(handle, queryType, -1));
-            }
-
-            if (contentionFactor.HasValue)
-            {
-                var contentionFactorInt = contentionFactor.Value;
-                handle.Check(_status, Library.mongocrypt_ctx_setopt_contention_factor(handle, contentionFactorInt));
-            }
-
-            PinnedBinary.RunAsPinnedBinary(
-                handle, 
-                message, 
-                _status, 
-                (h, pb) =>
-                {
-                    if (isExpressionMode)
-                    {
-                        // mongocrypt_ctx_explicit_encrypt_expression_init shares the same code as mongocrypt_ctx_explicit_encrypt_init.
-                        // The only difference is the validation of the queryType argument:
-                        // * mongocrypt_ctx_explicit_encrypt_expression_init requires queryType of "rangePreview".
-                        // * mongocrypt_ctx_explicit_encrypt_init rejects queryType of "rangePreview".
-                        return Library.mongocrypt_ctx_explicit_encrypt_expression_init(h, pb);
-                    }
-                    else
-                    {
-                        return Library.mongocrypt_ctx_explicit_encrypt_init(h, pb);
-                    }
-                });
-
-            return new CryptContext(handle);
-        }
-
-        /// <summary>
-        /// Starts the decryption context.
-        /// </summary>
-        /// <param name="buffer">The bson document to decrypt.</param>
-        /// <returns>A decryption context</returns>
-        public CryptContext StartDecryptionContext(byte[] buffer)
-        {
-            ContextSafeHandle handle = Library.mongocrypt_ctx_new(_handle);
-
-            unsafe
-            {
-                fixed (byte* p = buffer)
-                {
-                    IntPtr ptr = (IntPtr)p;
-                    using (PinnedBinary pinned = new PinnedBinary(ptr, (uint)buffer.Length))
-                    {
-                        handle.Check(_status, Library.mongocrypt_ctx_decrypt_init(handle, pinned.Handle));
-                    }
-                }
-            }
-
-            return new CryptContext(handle);
-        }
-
-        /// <summary>
-        /// Starts an explicit decryption context.
-        /// </summary>
-        /// <param name="buffer">The buffer.</param>
-        /// <returns>A encryption context</returns>
-        public CryptContext StartExplicitDecryptionContext(byte[] buffer)
-        {
-            ContextSafeHandle handle = Library.mongocrypt_ctx_new(_handle);
-
-            unsafe
-            {
-                fixed (byte* p = buffer)
-                {
-                    IntPtr ptr = (IntPtr)p;
-                    using (PinnedBinary pinned = new PinnedBinary(ptr, (uint)buffer.Length))
-                    {
-                        // Let mongocrypt run strlen
-                        handle.Check(_status, Library.mongocrypt_ctx_explicit_decrypt_init(handle, pinned.Handle));
-                    }
-                }
-            }
-
-            return new CryptContext(handle);
-        }
-
-        public CryptContext StartRewrapMultipleDataKeysContext(KmsKeyId kmsKey, byte[] filter)
-        {
-            var handle = Library.mongocrypt_ctx_new(_handle);
-
-            kmsKey.SetCredentials(handle, _status);
-
-            PinnedBinary.RunAsPinnedBinary(handle, filter, _status, (h, pb) => Library.mongocrypt_ctx_rewrap_many_datakey_init(h, pb));
-
-            return new CryptContext(handle);
-        }
-
-        void IStatus.Check(Status status)
-        {
-            Library.mongocrypt_status(_handle, status.Handle);
-        }
-
-        #region IDisposable
-        public void Dispose()
-        {
-            Dispose(true);
-            GC.SuppressFinalize(this);
-        }
-
-        protected virtual void Dispose(bool disposing)
-        {
-            // Adapted from: https://docs.microsoft.com/en-us/dotnet/api/system.runtime.interopservices.safehandle?view=netcore-3.0
-            if (_handle != null && !_handle.IsInvalid)
-            {
-                // Free the handle
-                _handle.Dispose();
-            }
-
-            // Free the status
-            _status.Dispose();
-        }
-        #endregion
-
-        // private methods
-        private void Check(bool success)
-        {
-            if (!success)
-            {
-                _status.Check(this);
-            }
-        }
-    }
-}

data/ext/libmongocrypt/libmongocrypt/bindings/cs/MongoDB.Libmongocrypt/CryptClientFactory.cs

@@ -1,138 +0,0 @@
-/*
- * Copyright 2019–present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-using System;
-using System.Linq;
-
-namespace MongoDB.Libmongocrypt
-{
-    /// <summary>
-    /// A factory for CryptClients.
-    /// </summary>
-    public class CryptClientFactory
-    {
-        // MUST be static fields since otherwise these callbacks can be collected via the garbage collector
-        // regardless they're used by mongocrypt level or no
-        private static Library.Delegates.CryptoCallback __cryptoAes256EcbEncryptCallback = new Library.Delegates.CryptoCallback(CipherCallbacks.EncryptEcb);
-        private static Library.Delegates.CryptoCallback __cryptoAes256CbcDecryptCallback = new Library.Delegates.CryptoCallback(CipherCallbacks.DecryptCbc);
-        private static Library.Delegates.CryptoCallback __cryptoAes256CbcEncryptCallback = new Library.Delegates.CryptoCallback(CipherCallbacks.EncryptCbc);
-        private static Library.Delegates.HashCallback __cryptoHashCallback = new Library.Delegates.HashCallback(HashCallback.Hash);
-        private static Library.Delegates.CryptoHmacCallback __cryptoHmacSha256Callback = new Library.Delegates.CryptoHmacCallback(HmacShaCallbacks.HmacSha256);
-        private static Library.Delegates.CryptoHmacCallback __cryptoHmacSha512Callback = new Library.Delegates.CryptoHmacCallback(HmacShaCallbacks.HmacSha512);
-        private static Library.Delegates.RandomCallback __randomCallback = new Library.Delegates.RandomCallback(SecureRandomCallback.GenerateRandom);
-        private static Library.Delegates.CryptoHmacCallback __signRsaesPkcs1HmacCallback = new Library.Delegates.CryptoHmacCallback(SigningRSAESPKCSCallback.RsaSign);
-
-        // mongocrypt_is_crypto_available is only available in libmongocrypt version >= 1.9
-        private static readonly Version __mongocryptIsCryptoAvailableMinVersion = Version.Parse("1.9");
-
-        /// <summary>Creates a CryptClient with the specified options.</summary>
-        /// <param name="options">The options.</param>
-        /// <returns>A CryptClient</returns>
-        public static CryptClient Create(CryptOptions options)
-        {
-            MongoCryptSafeHandle handle = null;
-            Status status = null;
-
-            var cryptoAvailable = Version.Parse(Library.Version.Split('-', '+').First()) >= __mongocryptIsCryptoAvailableMinVersion && Library.mongocrypt_is_crypto_available();
-
-            try
-            {
-                handle = Library.mongocrypt_new();
-                status = new Status();
-                
-                if (!cryptoAvailable)
-                {
-                    handle.Check(
-                        status,
-                        Library.mongocrypt_setopt_crypto_hooks(
-                            handle,
-                            __cryptoAes256CbcEncryptCallback,
-                            __cryptoAes256CbcDecryptCallback,
-                            __randomCallback,
-                            __cryptoHmacSha512Callback,
-                            __cryptoHmacSha256Callback,
-                            __cryptoHashCallback,
-                            IntPtr.Zero));
-
-                    handle.Check(
-                        status,
-                        Library.mongocrypt_setopt_crypto_hook_sign_rsaes_pkcs1_v1_5(
-                            handle,
-                            __signRsaesPkcs1HmacCallback,
-                            IntPtr.Zero));
-
-                    handle.Check(
-                        status,
-                        Library.mongocrypt_setopt_aes_256_ecb(
-                            handle,
-                            __cryptoAes256EcbEncryptCallback,
-                            IntPtr.Zero));
-                }
-
-                foreach (var kmsCredentials in options.KmsCredentials)
-                {
-                    kmsCredentials.SetCredentials(handle, status);
-                }
-
-                if (options.Schema != null)
-                {
-                    PinnedBinary.RunAsPinnedBinary(handle, options.Schema, status, (h, pb) => Library.mongocrypt_setopt_schema_map(h, pb));
-                }
-
-                if (options.EncryptedFieldsMap != null)
-                {
-                    PinnedBinary.RunAsPinnedBinary(handle, options.EncryptedFieldsMap, status, (h, pb) => Library.mongocrypt_setopt_encrypted_field_config_map(h, pb));
-                }
-
-                if (options.BypassQueryAnalysis)
-                {
-                    Library.mongocrypt_setopt_bypass_query_analysis(handle);
-                }
-
-                if (options.CryptSharedLibPath != null)
-                {
-                    Library.mongocrypt_setopt_set_crypt_shared_lib_path_override(handle, options.CryptSharedLibPath);
-                }
-
-                if (options.CryptSharedLibSearchPath != null)
-                {
-                    Library.mongocrypt_setopt_append_crypt_shared_lib_search_path(handle, options.CryptSharedLibSearchPath);
-                }
-
-                Library.mongocrypt_setopt_use_need_kms_credentials_state(handle);
-
-                Library.mongocrypt_init(handle);
-
-                if (options.IsCryptSharedLibRequired)
-                {
-                    var versionPtr = Library.mongocrypt_crypt_shared_lib_version_string(handle, out _);
-                    if (versionPtr == IntPtr.Zero)
-                    {
-                        throw new CryptException(Library.StatusType.MONGOCRYPT_STATUS_ERROR_CLIENT, uint.MaxValue, "CryptSharedLib is required, but was not found or not loaded.");
-                    }
-                }
-            }
-            catch
-            {
-                handle?.Dispose();
-                status?.Dispose();
-                throw;
-            }
-
-            return new CryptClient(handle, status);
-        }
-    }
-}

data/ext/libmongocrypt/libmongocrypt/bindings/cs/MongoDB.Libmongocrypt/CryptContext.cs

@@ -1,214 +0,0 @@
-/*
- * Copyright 2019–present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-using System;
-using System.Collections.Generic;
-
-namespace MongoDB.Libmongocrypt
-{
-    /// <summary>
-    /// A encryption or decryption session. It may not be reused.
-    /// </summary>
-    /// <seealso cref="System.IDisposable" />
-    /// <seealso cref="IStatus" />
-    public class CryptContext : IDisposable, IStatus
-    {
-        /// <summary>
-        /// States of the CryptContext state machine
-        /// </summary>
-        public enum StateCode
-        {
-            /// <summary>
-            /// LibMongoCrypt hit an error
-            /// </summary>
-            MONGOCRYPT_CTX_ERROR = 0,
-
-            /// <summary>
-            /// LibMongoCrypt wants the collection information by running a OP_MSG command against the users' mongod.
-            /// </summary>
-            MONGOCRYPT_CTX_NEED_MONGO_COLLINFO = 1,
-
-            /// <summary>
-            /// LibMongoCrypt wants a command to be run against mongocryptd.
-            /// </summary>
-            MONGOCRYPT_CTX_NEED_MONGO_MARKINGS = 2,
-
-            /// <summary>
-            /// LibMongoCrypt wants a command to be run against mongod key vault.
-            /// </summary>
-            MONGOCRYPT_CTX_NEED_MONGO_KEYS = 3,
-
-            /// <summary>
-            /// LibMongoCrypt wants a request sent to KMS.
-            /// </summary>
-            MONGOCRYPT_CTX_NEED_KMS = 4,
-
-            /// <summary>
-            /// LibMongoCrypt is ready to do encryption, call Finish().
-            /// </summary>
-            MONGOCRYPT_CTX_READY = 5,
-
-            /// <summary>
-            /// LibMongoCrypt is complete.
-            /// </summary>
-            MONGOCRYPT_CTX_DONE = 6,
-
-            /// <summary>
-            /// LibMongoCrypt requires new credentials.
-            /// </summary>
-            MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS = 7
-        }
-
-        private ContextSafeHandle _handle;
-        private Status _status;
-
-        internal CryptContext(ContextSafeHandle handle)
-        {
-            _handle = handle;
-            _status = new Status();
-        }
-
-        /// <summary>
-        /// Gets the state.
-        /// </summary>
-        /// <value>
-        /// The state.
-        /// </value>
-        public StateCode State
-        {
-            get
-            {
-                return Library.mongocrypt_ctx_state(_handle);
-            }
-        }
-
-        /// <summary>
-        /// Gets a value indicating whether this instance is done.
-        /// </summary>
-        /// <value>
-        ///   <c>true</c> if this instance is done; otherwise, <c>false</c>.
-        /// </value>
-        public bool IsDone
-        {
-            get { return State == StateCode.MONGOCRYPT_CTX_DONE; }
-        }
-
-        /// <summary>
-        /// Gets the operation.
-        /// </summary>
-        /// <returns>Binary payload to send to either KMS, mongod, or mongocryptd</returns>
-        public Binary GetOperation()
-        {
-            Binary binary = new Binary();
-            Check(Library.mongocrypt_ctx_mongo_op(_handle, binary.Handle));
-            return binary;
-        }
-
-        /// <summary>
-        /// Feeds the result from running a remote operation back to the libmongocrypt.
-        /// </summary>
-        /// <param name="buffer">The buffer.</param>
-        public void Feed(byte[] buffer)
-        {
-            unsafe
-            {
-                fixed (byte* p = buffer)
-                {
-                    IntPtr ptr = (IntPtr)p;
-                    using (PinnedBinary pinned = new PinnedBinary(ptr, (uint)buffer.Length))
-                    {
-                        Check(Library.mongocrypt_ctx_mongo_feed(_handle, pinned.Handle));
-                    }
-                }
-            }
-        }
-
-        /// <summary>
-        /// Signal the feeding is done.
-        /// </summary>
-        public void MarkDone()
-        {
-            Check(Library.mongocrypt_ctx_mongo_done(_handle));
-        }
-
-        /// <summary>
-        /// Finalizes for encryption.
-        /// </summary>
-        /// <returns>The encrypted or decrypted result.</returns>
-        public Binary FinalizeForEncryption()
-        {
-            Binary binary = new Binary();
-            Check(Library.mongocrypt_ctx_finalize(_handle, binary.Handle));
-            return binary;
-        }
-
-        /// <summary>
-        /// Gets a collection of KMS message requests to make
-        /// </summary>
-        /// <returns>Collection of KMS Messages</returns>
-        public KmsRequestCollection GetKmsMessageRequests()
-        {
-            var requests = new List<KmsRequest>();
-            for (IntPtr request = Library.mongocrypt_ctx_next_kms_ctx(_handle); request != IntPtr.Zero; request = Library.mongocrypt_ctx_next_kms_ctx(_handle))
-            {
-                requests.Add(new KmsRequest(request));
-            }
-
-            return new KmsRequestCollection(requests, this);
-        }
-
-        public void SetCredentials(byte[] credentials)
-        {
-            PinnedBinary.RunAsPinnedBinary(_handle, credentials, _status, (h, b) => Library.mongocrypt_ctx_provide_kms_providers(h, b));
-        }
-
-        void IStatus.Check(Status status)
-        {
-            Library.mongocrypt_ctx_status(_handle, status.Handle);
-        }
-
-        #region IDisposable
-        public void Dispose()
-        {
-            Dispose(true);
-            GC.SuppressFinalize(this);
-        }
-
-        protected virtual void Dispose(bool disposing)
-        {
-            // Adapted from: https://docs.microsoft.com/en-us/dotnet/api/system.runtime.interopservices.safehandle?view=netcore-3.0
-            if (_handle != null && !_handle.IsInvalid)
-            {
-                // Free the handle
-                _handle.Dispose();
-            }
-        }
-        #endregion
-
-        internal void MarkKmsDone()
-        {
-            Check(Library.mongocrypt_ctx_kms_done(_handle));
-        }
-
-        private void Check(bool success)
-        {
-            if (!success)
-            {
-                _status.Check(this);
-            }
-        }
-    }
-}

data/ext/libmongocrypt/libmongocrypt/bindings/cs/MongoDB.Libmongocrypt/CryptException.cs

@@ -1,37 +0,0 @@
-/*
- * Copyright 2019–present MongoDB, Inc.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-using System;
-
-namespace MongoDB.Libmongocrypt
-{
-    /// <summary>
-    /// An exception from libmongocrypt.
-    /// </summary>
-    /// <seealso cref="System.Exception" />
-    public class CryptException : Exception
-    {
-        private readonly uint _code;
-        private readonly Library.StatusType _statusType;
-
-        internal CryptException(Library.StatusType statusType, uint code, string message)
-            : base(message)
-        {
-            _code = code;
-            _statusType = statusType;
-        }
-    }
-}