virgil-crypto 2.0.2b0

data/ext/native/src/lib/include/virgil/crypto/foundation/cms/VirgilCMSKeyTransRecipient.h

@@ -0,0 +1,103 @@
+/**
+ * Copyright (C) 2015-2016 Virgil Security Inc.
+ *
+ * Lead Maintainer: Virgil Security Inc. <support@virgilsecurity.com>
+ *
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are
+ * met:
+ *
+ *     (1) Redistributions of source code must retain the above copyright
+ *     notice, this list of conditions and the following disclaimer.
+ *
+ *     (2) Redistributions in binary form must reproduce the above copyright
+ *     notice, this list of conditions and the following disclaimer in
+ *     the documentation and/or other materials provided with the
+ *     distribution.
+ *
+ *     (3) Neither the name of the copyright holder nor the names of its
+ *     contributors may be used to endorse or promote products derived from
+ *     this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ''AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
+ * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#ifndef VIRGIL_CRYPTO_VIRGIL_CMS_KEY_TRANS_RECIPIENT_H
+#define VIRGIL_CRYPTO_VIRGIL_CMS_KEY_TRANS_RECIPIENT_H
+
+#include <virgil/crypto/VirgilByteArray.h>
+#include <virgil/crypto/foundation/asn1/VirgilAsn1Compatible.h>
+
+namespace virgil { namespace crypto { namespace foundation { namespace cms {
+
+/**
+ * @brief Data object that represent CMS structure: KeyTransRecipientInfo.
+ * @see RFC 5652 section 6.2.1.
+ */
+class VirgilCMSKeyTransRecipient : public virgil::crypto::foundation::asn1::VirgilAsn1Compatible {
+public:
+    /**
+     * @property recipientIdentifier
+     * @brief Recipient's identifier.
+     */
+    virgil::crypto::VirgilByteArray recipientIdentifier;
+    /**
+     * @property keyEncryptionAlgorithm
+     * @brief Identifies the encryption algorithm, and any associated parameters.
+     */
+    virgil::crypto::VirgilByteArray keyEncryptionAlgorithm;
+    /**
+     * @property encryptedKey
+     * @brief The result of encrypting the content-encryption key with the key-encryption key.
+     */
+    virgil::crypto::VirgilByteArray encryptedKey;
+public:
+    /**
+     * @name VirgilAsn1Compatible implementation
+     * @code
+     * Marshalling format:
+     *     KeyTransRecipientInfo ::= SEQUENCE {
+     *         version CMSVersion,  -- always set to 0 or 2 (currently only version 2 is supported)
+     *         rid RecipientIdentifier,
+     *         keyEncryptionAlgorithm KeyEncryptionAlgorithmIdentifier,
+     *         encryptedKey EncryptedKey
+     *     }
+     *
+     *     CMSVersion ::= INTEGER { v0(0), v1(1), v2(2), v3(3), v4(4), v5(5) }
+     *
+     *     RecipientIdentifier ::= CHOICE {
+     *         issuerAndSerialNumber IssuerAndSerialNumber, -- not supported
+     *         subjectKeyIdentifier [0] SubjectKeyIdentifier
+     *     }
+     *
+     *     KeyEncryptionAlgorithmIdentifier ::= AlgorithmIdentifier
+     *
+     *     EncryptedKey ::= OCTET STRING
+     *
+     *     SubjectKeyIdentifier ::= OCTET STRING
+     * @endcode
+     */
+    ///@{
+    virtual size_t asn1Write(
+            virgil::crypto::foundation::asn1::VirgilAsn1Writer& asn1Writer,
+            size_t childWrittenBytes = 0) const;
+
+    virtual void asn1Read(virgil::crypto::foundation::asn1::VirgilAsn1Reader& asn1Reader);
+    ///@}
+};
+
+}}}}
+
+#endif /* VIRGIL_CRYPTO_VIRGIL_CMS_KEY_TRANS_RECIPIENT_H */

data/ext/native/src/lib/include/virgil/crypto/foundation/cms/VirgilCMSPasswordRecipient.h

@@ -0,0 +1,98 @@
+/**
+ * Copyright (C) 2015-2016 Virgil Security Inc.
+ *
+ * Lead Maintainer: Virgil Security Inc. <support@virgilsecurity.com>
+ *
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are
+ * met:
+ *
+ *     (1) Redistributions of source code must retain the above copyright
+ *     notice, this list of conditions and the following disclaimer.
+ *
+ *     (2) Redistributions in binary form must reproduce the above copyright
+ *     notice, this list of conditions and the following disclaimer in
+ *     the documentation and/or other materials provided with the
+ *     distribution.
+ *
+ *     (3) Neither the name of the copyright holder nor the names of its
+ *     contributors may be used to endorse or promote products derived from
+ *     this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ''AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
+ * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#ifndef VIRGIL_CRYPTO_VIRGIL_CMS_PASSWORD_RECIPIENT_H
+#define VIRGIL_CRYPTO_VIRGIL_CMS_PASSWORD_RECIPIENT_H
+
+#include <virgil/crypto/VirgilByteArray.h>
+#include <virgil/crypto/foundation/asn1/VirgilAsn1Compatible.h>
+
+namespace virgil { namespace crypto { namespace foundation { namespace cms {
+
+/**
+ * @brief Data object that represent CMS structure: PasswordRecipientInfo.
+ * @see RFC 5652 section 6.2.4.
+ */
+class VirgilCMSPasswordRecipient : public virgil::crypto::foundation::asn1::VirgilAsn1Compatible {
+public:
+    /**
+     * @property keyDerivationAlgorithm
+     * @brief Identifies the key-derivation algorithm, and any associated parameters.
+     */
+    virgil::crypto::VirgilByteArray keyDerivationAlgorithm;
+    /**
+     * @property keyEncryptionAlgorithm
+     * @brief Identifies the encryption algorithm, and any associated parameters.
+     */
+    virgil::crypto::VirgilByteArray keyEncryptionAlgorithm;
+    /**
+     * @property encryptedKey
+     * @brief The result of encrypting the content-encryption key with the key-encryption key.
+     */
+    virgil::crypto::VirgilByteArray encryptedKey;
+public:
+    /**
+     * @name VirgilAsn1Compatible implementation
+     * @code
+     * Marshalling format:
+     *     PasswordRecipientInfo ::= SEQUENCE {
+     *         version CMSVersion,   -- Always set to 0
+     *         keyDerivationAlgorithm [0] KeyDerivationAlgorithmIdentifier OPTIONAL,
+     *         keyEncryptionAlgorithm KeyEncryptionAlgorithmIdentifier,
+     *         encryptedKey EncryptedKey
+     *     }
+     *
+     *     CMSVersion ::= INTEGER { v0(0), v1(1), v2(2), v3(3), v4(4), v5(5) }
+     *
+     *     KeyDerivationAlgorithmIdentifier ::= AlgorithmIdentifier
+     *
+     *     KeyEncryptionAlgorithmIdentifier ::= AlgorithmIdentifier
+     *
+     *     EncryptedKey ::= OCTET STRING
+     * @endcode
+     */
+    ///@{
+    virtual size_t asn1Write(
+            virgil::crypto::foundation::asn1::VirgilAsn1Writer& asn1Writer,
+            size_t childWrittenBytes = 0) const;
+
+    virtual void asn1Read(virgil::crypto::foundation::asn1::VirgilAsn1Reader& asn1Reader);
+    ///@}
+};
+
+}}}}
+
+#endif /* VIRGIL_CRYPTO_VIRGIL_CMS_PASSWORD_RECIPIENT_H */

data/ext/native/src/lib/include/virgil/crypto/foundation/internal/VirgilOID.h

@@ -0,0 +1,81 @@
+/**
+ * Copyright (C) 2015-2016 Virgil Security Inc.
+ *
+ * Lead Maintainer: Virgil Security Inc. <support@virgilsecurity.com>
+ *
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are
+ * met:
+ *
+ *     (1) Redistributions of source code must retain the above copyright
+ *     notice, this list of conditions and the following disclaimer.
+ *
+ *     (2) Redistributions in binary form must reproduce the above copyright
+ *     notice, this list of conditions and the following disclaimer in
+ *     the documentation and/or other materials provided with the
+ *     distribution.
+ *
+ *     (3) Neither the name of the copyright holder nor the names of its
+ *     contributors may be used to endorse or promote products derived from
+ *     this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ''AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
+ * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/**
+ * @file VirgilOID.h
+ *
+ * Additional OID's definition
+ */
+
+#ifndef VIRGIL_CRYPTO_VIRGIL_OID_H
+#define VIRGIL_CRYPTO_VIRGIL_OID_H
+
+#include <mbedtls/oid.h>
+#include <mbedtls/asn1.h>
+
+#include <string>
+
+/**
+ * PKCS#7 OIDs
+ */
+#define OID_PKCS7 MBEDTLS_OID_PKCS "\x07" ///< pkcs-7 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 7 }
+#define OID_PKCS7_DATA OID_PKCS7 "\x01" ///< data ::= { pkcs-7 1 }
+#define OID_PKCS7_SIGNED_DATA OID_PKCS7 "\x02" ///< signedData ::= { pkcs-7 2 }
+#define OID_PKCS7_ENVELOPED_DATA OID_PKCS7 "\x03" ///< envelopedData ::= { pkcs-7 3 }
+#define OID_PKCS7_SIGNED_AND_ENVELOPED_DATA OID_PKCS7 "\x04" ///< signedAndEnvelopedData ::= { pkcs-7 4 }
+#define OID_PKCS7_DIGESTED_DATA OID_PKCS7 "\x05" ///< digestedData ::= { pkcs-7 5 }
+#define OID_PKCS7_ENCRYPTED_DATA OID_PKCS7 "\x06" ///< encryptedData ::= { pkcs-7 6 }
+#define OID_PKCS7_DATA_WITH_ATTRIBUTES OID_PKCS7 "\x07" ///< dataWithAttributes ::= { pkcs-7 7 }
+#define OID_PKCS7_ENCRYPTED_PRIVATE_KEY_INFO OID_PKCS7 "\x08" ///< encryptedPrivateKeyInfo ::= { pkcs-7 8 }
+
+/**
+ * PKCS#9 OIDs
+ */
+#define OID_PKCS9_AUTHENTICATED_DATA MBEDTLS_OID_PKCS9 "\x0F\x01\x02" ///< ct-authData ::= { pkcs-9 smime(16) ct(1) ct-authData(2) }
+
+/**
+ * @brief Translate low-level oid to std::string
+ */
+#define OID_TO_STD_STRING(oid) std::string(oid, MBEDTLS_OID_SIZE(oid))
+
+/**
+ * @brief Compares OIDs
+ */
+bool inline compareOID(const std::string& first, const std::string& second) {
+    return (first.size() == second.size()) && memcmp(first.c_str(), second.c_str(), first.size()) == 0;
+}
+
+#endif /* VIRGIL_CRYPTO_VIRGIL_OID_H */

data/ext/native/src/lib/include/virgil/crypto/foundation/internal/VirgilTagFilter.h

@@ -0,0 +1,95 @@
+/**
+ * Copyright (C) 2015-2016 Virgil Security Inc.
+ *
+ * Lead Maintainer: Virgil Security Inc. <support@virgilsecurity.com>
+ *
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are
+ * met:
+ *
+ *     (1) Redistributions of source code must retain the above copyright
+ *     notice, this list of conditions and the following disclaimer.
+ *
+ *     (2) Redistributions in binary form must reproduce the above copyright
+ *     notice, this list of conditions and the following disclaimer in
+ *     the documentation and/or other materials provided with the
+ *     distribution.
+ *
+ *     (3) Neither the name of the copyright holder nor the names of its
+ *     contributors may be used to endorse or promote products derived from
+ *     this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ''AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
+ * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#ifndef VIRGIL_CRYPTO_TAG_FILTER_H
+#define VIRGIL_CRYPTO_TAG_FILTER_H
+
+#include <cstdlib>
+
+#include <virgil/crypto/VirgilByteArray.h>
+
+namespace virgil { namespace crypto { namespace foundation { namespace internal {
+
+/**
+ * @brief This class analize incoming data stream to filter Virgil TAG.
+ * @note Virgil TAG MUST be at the end of the data stream.
+ */
+class VirgilTagFilter {
+public:
+    /**
+     * @brief Base initialization.
+     * @note Method reset() MUST be called anyway.
+     */
+    VirgilTagFilter();
+
+    /**
+     * @brief Get ready for data filtration.
+     * @param tagLen - length of the expected Virgil TAG.
+     * @note This method MUST be called before any data will be processed.
+     */
+    void reset(size_t tagLen);
+
+    /**
+     * @brief Filter given data.
+     */
+    void process(const virgil::crypto::VirgilByteArray& data);
+
+    /**
+     * @brief Return if data exist after filtration.
+     */
+    bool hasData() const;
+
+    /**
+     * @brief Return filtrated data.
+     */
+    virgil::crypto::VirgilByteArray popData();
+
+    /**
+     * @brief Return tag that was extracted from processed data.
+     * @note MUST be called after method finish().
+     * @return Tag or empty byte array.
+     */
+    virgil::crypto::VirgilByteArray tag() const;
+
+private:
+    size_t tagLen_;
+    virgil::crypto::VirgilByteArray data_;
+    virgil::crypto::VirgilByteArray tag_;
+};
+
+}}}}
+
+#endif /* VIRGIL_CRYPTO_TAG_FILTER_H */

data/ext/native/src/lib/include/virgil/crypto/foundation/internal/mbedtls_context.h

@@ -0,0 +1,93 @@
+/**
+ * Copyright (C) 2015-2016 Virgil Security Inc.
+ *
+ * Lead Maintainer: Virgil Security Inc. <support@virgilsecurity.com>
+ *
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are
+ * met:
+ *
+ *     (1) Redistributions of source code must retain the above copyright
+ *     notice, this list of conditions and the following disclaimer.
+ *
+ *     (2) Redistributions in binary form must reproduce the above copyright
+ *     notice, this list of conditions and the following disclaimer in
+ *     the documentation and/or other materials provided with the
+ *     distribution.
+ *
+ *     (3) Neither the name of the copyright holder nor the names of its
+ *     contributors may be used to endorse or promote products derived from
+ *     this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ''AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
+ * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#ifndef VIRGIL_CRYPTO_MBEDTLS_CONTEXT_H
+#define VIRGIL_CRYPTO_MBEDTLS_CONTEXT_H
+
+#include <memory>
+#include <virgil/crypto/internal/utils.h>
+
+namespace virgil { namespace crypto { namespace foundation { namespace internal {
+
+template<typename T>
+class mbedtls_context_policy;
+
+template<typename T, typename Policy = mbedtls_context_policy<T>>
+class mbedtls_context {
+public:
+    mbedtls_context() noexcept : ctx_(std::make_unique<T>()) {
+        Policy::init_ctx(ctx_.get());
+    }
+
+    template<typename... Args>
+    mbedtls_context(Args&& ...args) : ctx_(std::make_unique<T>()) {
+        Policy::init_ctx(ctx_.get(), std::forward(args)...);
+    }
+
+    ~mbedtls_context() noexcept {
+        Policy::free_ctx(ctx_.get());
+    }
+
+    mbedtls_context<T, Policy>& clear() {
+        Policy::free_ctx(ctx_.get());
+        ctx_ = std::make_unique<T>();
+        Policy::init_ctx(ctx_.get());
+        return *this;
+    };
+
+    template<typename... Args>
+    void setup(Args ...args) {
+        Policy::setup_ctx(ctx_.get(), args...);
+    }
+
+    T* get() noexcept { return ctx_.get(); }
+
+    const T* get() const noexcept { return ctx_.get(); }
+
+public:
+    mbedtls_context(mbedtls_context&& rhs) = default;
+
+    mbedtls_context& operator=(mbedtls_context&& rhs) = default;
+
+private:
+    std::unique_ptr<T> ctx_;
+};
+
+}}}}
+
+#include "mbedtls_context_policy_spec.h"
+
+#endif //VIRGIL_CRYPTO_MBEDTLS_CONTEXT_H