pkcs7.c File Reference

#include <stdlib.h>
#include <string.h>
#include <rz_util.h>
#include "./x509.h"

Go to the source code of this file.

Functions
void	rz_x509_name_json (PJ *pj, RX509Name *name)
void	rz_x509_free_crl (RX509CertificateRevocationList *crl)
void	rz_x509_crlentry_dump (RX509CRLEntry *crle, const char *pad, RzStrBuf *sb)
static bool	rz_pkcs7_parse_attributes (RPKCS7Attributes *attribute, RASN1Object *object)
static bool	rz_pkcs7_parse_contentinfo (RPKCS7ContentInfo *ci, RASN1Object *object)
static bool	rz_pkcs7_parse_certificaterevocationlists (RPKCS7CertificateRevocationLists *crls, RASN1Object *object)
static void	rz_pkcs7_free_certificaterevocationlists (RPKCS7CertificateRevocationLists *crls)
static bool	rz_pkcs7_parse_extendedcertificatesandcertificates (RPKCS7ExtendedCertificatesAndCertificates *ecac, RASN1Object *object)
static void	rz_pkcs7_free_extendedcertificatesandcertificates (RPKCS7ExtendedCertificatesAndCertificates *ecac)
static bool	rz_pkcs7_parse_digestalgorithmidentifier (RPKCS7DigestAlgorithmIdentifiers *dai, RASN1Object *object)
static void	rz_pkcs7_free_digestalgorithmidentifier (RPKCS7DigestAlgorithmIdentifiers *dai)
static void	rz_pkcs7_free_contentinfo (RPKCS7ContentInfo *ci)
static bool	rz_pkcs7_parse_issuerandserialnumber (RPKCS7IssuerAndSerialNumber *iasu, RASN1Object *object)
static void	rz_pkcs7_free_issuerandserialnumber (RPKCS7IssuerAndSerialNumber *iasu)
static bool	rz_pkcs7_parse_signerinfo (RPKCS7SignerInfo *si, RASN1Object *object)
static void	rz_pkcs7_free_attribute (RPKCS7Attribute *attribute)
static void	rz_pkcs7_free_attributes (RPKCS7Attributes *attributes)
static void	rz_pkcs7_free_signerinfo (RPKCS7SignerInfo *si)
static bool	rz_pkcs7_parse_signerinfos (RPKCS7SignerInfos *ss, RASN1Object *object)
static void	rz_pkcs7_free_signerinfos (RPKCS7SignerInfos *ss)
static bool	rz_pkcs7_parse_signeddata (RPKCS7SignedData *sd, RASN1Object *object)
static void	rz_pkcs7_free_signeddata (RPKCS7SignedData *sd)
RZ_API RCMS *	rz_pkcs7_parse_cms (const ut8 *buffer, ut32 length)
RZ_API void	rz_pkcs7_free_cms (RCMS *container)
static RPKCS7Attribute *	rz_pkcs7_parse_attribute (RASN1Object *object)
static void	rz_x509_signedinfo_dump (RPKCS7SignerInfo *si, const char *pad, RzStrBuf *sb)
RZ_API char *	rz_pkcs7_cms_to_string (RCMS *container)
RZ_API void	rz_x509_signedinfo_json (PJ *pj, RPKCS7SignerInfo *si)
RZ_API PJ *	rz_pkcs7_cms_json (RCMS *container)
static bool	rz_pkcs7_parse_spcdata (SpcAttributeTypeAndOptionalValue *data, RASN1Object *object)
static bool	rz_pkcs7_parse_spcmessagedigest (SpcDigestInfo *messageDigest, RASN1Object *object)
RZ_API SpcIndirectDataContent *	rz_pkcs7_parse_spcinfo (RCMS *cms)
static void	rz_pkcs7_free_spcdata (SpcAttributeTypeAndOptionalValue *data)
static void	rz_pkcs7_free_spcmessagedigest (SpcDigestInfo *messageDigest)
RZ_API void	rz_pkcs7_free_spcinfo (SpcIndirectDataContent *spcinfo)

Function Documentation

rz_pkcs7_cms_json()

RZ_API PJ* rz_pkcs7_cms_json

(

RCMS *

container

)

Definition at line 592 of file pkcs7.c.

                                              {
    PJ *pj = NULL;
    if (container) {
        ut32 i;
 
        pj = pj_new();
 
        pj_o(pj);
        pj_kn(pj, "Version", container->signedData.version);
 
        if (container->signedData.digestAlgorithms.elements) {
            pj_k(pj, "DigestAlgorithms");
            pj_a(pj);
            for (i = 0; i < container->signedData.digestAlgorithms.length; i++) {
                if (container->signedData.digestAlgorithms.elements[i]) {
                    RASN1String *s = container->signedData.digestAlgorithms.elements[i]->algorithm;
                    if (s) {
                        pj_s(pj, s->string);
                    }
                }
            }
            pj_end(pj);
        }
 
        pj_k(pj, "Certificates");
        pj_a(pj);
        for (i = 0; i < container->signedData.certificates.length; i++) {
            rz_x509_certificate_json(pj, container->signedData.certificates.elements[i]);
        }
        pj_end(pj);
 
        pj_k(pj, "CRL");
        pj_a(pj);
        for (i = 0; i < container->signedData.crls.length; i++) {
            rz_x509_crl_json(pj, container->signedData.crls.elements[i]);
        }
        pj_end(pj);
 
        pj_k(pj, "SignerInfos");
        pj_a(pj);
        if (container->signedData.signerinfos.elements) {
            for (i = 0; i < container->signedData.signerinfos.length; i++) {
                rz_x509_signedinfo_json(pj, container->signedData.signerinfos.elements[i]);
            }
        }
        pj_end(pj);
        pj_end(pj);
    }
    return pj;
}

References rz_x509_algorithmidentifier_t::algorithm, rz_pkcs7_signeddata_t::certificates, rz_pkcs7_signeddata_t::crls, rz_pkcs7_signeddata_t::digestAlgorithms, rz_pkcs7_certificaterevocationlists_t::elements, rz_pkcs7_extendedcertificatesandcertificates_t::elements, rz_pkcs7_digestalgorithmidentifiers_t::elements, rz_pkcs7_signerinfos_t::elements, i, rz_pkcs7_certificaterevocationlists_t::length, rz_pkcs7_extendedcertificatesandcertificates_t::length, rz_pkcs7_digestalgorithmidentifiers_t::length, rz_pkcs7_signerinfos_t::length, NULL, pj_a(), pj_end(), pj_k(), pj_kn(), pj_new(), pj_o(), pj_s(), rz_x509_certificate_json(), rz_x509_crl_json(), rz_x509_signedinfo_json(), s, rz_pkcs7_container_t::signedData, rz_pkcs7_signeddata_t::signerinfos, and rz_pkcs7_signeddata_t::version.

Referenced by signature().

rz_pkcs7_cms_to_string()

RZ_API char* rz_pkcs7_cms_to_string

(

RCMS *

container

)

Definition at line 479 of file pkcs7.c.

                                                     {
    ut32 i;
    if (!container) {
        return NULL;
    }
    RPKCS7SignedData *sd = &container->signedData;
    RzStrBuf *sb = rz_strbuf_new("");
    rz_strbuf_appendf(sb, "signedData\n  Version: v%u\n  Digest Algorithms:\n", sd->version);
 
    if (container->signedData.digestAlgorithms.elements) {
        for (i = 0; i < container->signedData.digestAlgorithms.length; i++) {
            if (container->signedData.digestAlgorithms.elements[i]) {
                RASN1String *s = container->signedData.digestAlgorithms.elements[i]->algorithm;
                rz_strbuf_appendf(sb, "    %s\n", s ? s->string : "Missing");
            }
        }
    }
 
    rz_strbuf_appendf(sb, "  Certificates: %u\n", container->signedData.certificates.length);
 
    for (i = 0; i < container->signedData.certificates.length; i++) {
        rz_x509_certificate_dump(container->signedData.certificates.elements[i], "    ", sb);
    }
 
    for (i = 0; i < container->signedData.crls.length; i++) {
        char *res = rz_x509_crl_to_string(container->signedData.crls.elements[i], "    ");
        if (res) {
            rz_strbuf_append(sb, res);
            free(res);
        }
    }
 
    rz_strbuf_appendf(sb, "  SignerInfos:\n");
    if (container->signedData.signerinfos.elements) {
        for (i = 0; i < container->signedData.signerinfos.length; i++) {
            rz_x509_signedinfo_dump(container->signedData.signerinfos.elements[i], "    ", sb);
        }
    }
    return rz_strbuf_drain(sb);
}

References rz_x509_algorithmidentifier_t::algorithm, rz_pkcs7_signeddata_t::certificates, rz_pkcs7_signeddata_t::crls, rz_pkcs7_signeddata_t::digestAlgorithms, rz_pkcs7_certificaterevocationlists_t::elements, rz_pkcs7_extendedcertificatesandcertificates_t::elements, rz_pkcs7_digestalgorithmidentifiers_t::elements, rz_pkcs7_signerinfos_t::elements, free(), i, rz_pkcs7_certificaterevocationlists_t::length, rz_pkcs7_extendedcertificatesandcertificates_t::length, rz_pkcs7_digestalgorithmidentifiers_t::length, rz_pkcs7_signerinfos_t::length, NULL, rz_strbuf_append(), rz_strbuf_appendf(), rz_strbuf_drain(), rz_strbuf_new(), rz_x509_certificate_dump(), rz_x509_crl_to_string(), rz_x509_signedinfo_dump(), s, sb, rz_pkcs7_container_t::signedData, rz_pkcs7_signeddata_t::signerinfos, and rz_pkcs7_signeddata_t::version.

Referenced by cmd_print_fromage(), and signature().

rz_pkcs7_free_attribute()

static void rz_pkcs7_free_attribute ( RPKCS7Attribute *  attribute )

static

Definition at line 202 of file pkcs7.c.

                                                                {
    if (attribute) {
        rz_asn1_free_binary(attribute->data);
        rz_asn1_free_string(attribute->oid);
        free(attribute);
    }
}

References rz_pkcs7_attribute_t::data, free(), rz_pkcs7_attribute_t::oid, rz_asn1_free_binary(), and rz_asn1_free_string().

Referenced by rz_pkcs7_free_attributes().

rz_pkcs7_free_attributes()

static void rz_pkcs7_free_attributes ( RPKCS7Attributes *  attributes )

static

Definition at line 210 of file pkcs7.c.

                                                                   {
    ut32 i;
    if (attributes) {
        for (i = 0; i < attributes->length; i++) {
            rz_pkcs7_free_attribute(attributes->elements[i]);
        }
        RZ_FREE(attributes->elements);
        // Used internally pkcs #7, so it shouldn't free attributes.
    }
}

References rz_pkcs7_attributes_t::elements, i, rz_pkcs7_attributes_t::length, RZ_FREE, and rz_pkcs7_free_attribute().

Referenced by rz_pkcs7_free_signerinfo().

rz_pkcs7_free_certificaterevocationlists()

static void rz_pkcs7_free_certificaterevocationlists ( RPKCS7CertificateRevocationLists *  crls )

static

Definition at line 46 of file pkcs7.c.

                                                                                             {
    ut32 i;
    if (crls) {
        for (i = 0; i < crls->length; i++) {
            rz_x509_free_crl(crls->elements[i]);
            crls->elements[i] = NULL;
        }
        RZ_FREE(crls->elements);
        // Used internally pkcs #7, so it shouldn't free crls.
    }
}

References rz_pkcs7_certificaterevocationlists_t::elements, i, rz_pkcs7_certificaterevocationlists_t::length, NULL, RZ_FREE, and rz_x509_free_crl().

Referenced by rz_pkcs7_free_signeddata().

rz_pkcs7_free_cms()

RZ_API void rz_pkcs7_free_cms

(

RCMS *

container

)

Definition at line 341 of file pkcs7.c.

                                               {
    if (container) {
        rz_asn1_free_string(container->contentType);
        rz_pkcs7_free_signeddata(&container->signedData);
        free(container);
    }
}

References rz_pkcs7_container_t::contentType, free(), rz_asn1_free_string(), rz_pkcs7_free_signeddata(), and rz_pkcs7_container_t::signedData.

Referenced by cmd_print_fromage(), and rz_bin_pe_free().

rz_pkcs7_free_contentinfo()

static void rz_pkcs7_free_contentinfo ( RPKCS7ContentInfo *  ci )

static

Definition at line 132 of file pkcs7.c.

                                                             {
    if (ci) {
        rz_asn1_free_binary(ci->content);
        rz_asn1_free_string(ci->contentType);
        // Used internally pkcs #7, so it shouldn't free ci.
    }
}

References rz_pkcs7_contentinfo_t::content, rz_pkcs7_contentinfo_t::contentType, rz_asn1_free_binary(), and rz_asn1_free_string().

Referenced by rz_pkcs7_free_signeddata().

rz_pkcs7_free_digestalgorithmidentifier()

static void rz_pkcs7_free_digestalgorithmidentifier ( RPKCS7DigestAlgorithmIdentifiers *  dai )

static

Definition at line 116 of file pkcs7.c.

                                                                                           {
    ut32 i;
    if (dai) {
        for (i = 0; i < dai->length; i++) {
            if (dai->elements[i]) {
                rz_x509_free_algorithmidentifier(dai->elements[i]);
                // rz_x509_free_algorithmidentifier doesn't free the pointer
                // because on x509 the original use was internal.
                RZ_FREE(dai->elements[i]);
            }
        }
        RZ_FREE(dai->elements);
        // Used internally pkcs #7, so it shouldn't free dai.
    }
}

References rz_pkcs7_digestalgorithmidentifiers_t::elements, i, rz_pkcs7_digestalgorithmidentifiers_t::length, RZ_FREE, and rz_x509_free_algorithmidentifier().

Referenced by rz_pkcs7_free_signeddata().

rz_pkcs7_free_extendedcertificatesandcertificates()

static void rz_pkcs7_free_extendedcertificatesandcertificates ( RPKCS7ExtendedCertificatesAndCertificates *  ecac )

static

Definition at line 77 of file pkcs7.c.

                                                                                                               {
    ut32 i;
    if (ecac) {
        for (i = 0; i < ecac->length; i++) {
            rz_x509_free_certificate(ecac->elements[i]);
            ecac->elements[i] = NULL;
        }
        RZ_FREE(ecac->elements);
        // Used internally pkcs #7, so it shouldn't free ecac.
    }
}

References rz_pkcs7_extendedcertificatesandcertificates_t::elements, i, rz_pkcs7_extendedcertificatesandcertificates_t::length, NULL, RZ_FREE, and rz_x509_free_certificate().

Referenced by rz_pkcs7_free_signeddata().

rz_pkcs7_free_issuerandserialnumber()

static void rz_pkcs7_free_issuerandserialnumber ( RPKCS7IssuerAndSerialNumber *  iasu )

static

Definition at line 152 of file pkcs7.c.

                                                                                   {
    if (iasu) {
        rz_x509_free_name(&iasu->issuer);
        rz_asn1_free_binary(iasu->serialNumber);
        // Used internally pkcs #7, so it shouldn't free iasu.
    }
}

References rz_pkcs7_issuerandserialnumber_t::issuer, rz_asn1_free_binary(), rz_x509_free_name(), and rz_pkcs7_issuerandserialnumber_t::serialNumber.

Referenced by rz_pkcs7_free_signerinfo().

rz_pkcs7_free_signeddata()

static void rz_pkcs7_free_signeddata ( RPKCS7SignedData *  sd )

static

Definition at line 297 of file pkcs7.c.

                                                           {
    if (sd) {
        rz_pkcs7_free_digestalgorithmidentifier(&sd->digestAlgorithms);
        rz_pkcs7_free_contentinfo(&sd->contentInfo);
        rz_pkcs7_free_extendedcertificatesandcertificates(&sd->certificates);
        rz_pkcs7_free_certificaterevocationlists(&sd->crls);
        rz_pkcs7_free_signerinfos(&sd->signerinfos);
        // Used internally pkcs #7, so it shouldn't free sd.
    }
}

References rz_pkcs7_signeddata_t::certificates, rz_pkcs7_signeddata_t::contentInfo, rz_pkcs7_signeddata_t::crls, rz_pkcs7_signeddata_t::digestAlgorithms, rz_pkcs7_free_certificaterevocationlists(), rz_pkcs7_free_contentinfo(), rz_pkcs7_free_digestalgorithmidentifier(), rz_pkcs7_free_extendedcertificatesandcertificates(), rz_pkcs7_free_signerinfos(), and rz_pkcs7_signeddata_t::signerinfos.

Referenced by rz_pkcs7_free_cms().

rz_pkcs7_free_signerinfo()

static void rz_pkcs7_free_signerinfo ( RPKCS7SignerInfo *  si )

static

Definition at line 221 of file pkcs7.c.

                                                           {
    if (si) {
        rz_pkcs7_free_issuerandserialnumber(&si->issuerAndSerialNumber);
        rz_x509_free_algorithmidentifier(&si->digestAlgorithm);
        rz_pkcs7_free_attributes(&si->authenticatedAttributes);
        rz_x509_free_algorithmidentifier(&si->digestEncryptionAlgorithm);
        rz_asn1_free_binary(si->encryptedDigest);
        rz_pkcs7_free_attributes(&si->unauthenticatedAttributes);
        free(si);
    }
}

References free(), rz_asn1_free_binary(), rz_pkcs7_free_attributes(), rz_pkcs7_free_issuerandserialnumber(), rz_x509_free_algorithmidentifier(), and si.

Referenced by rz_pkcs7_free_signerinfos().

rz_pkcs7_free_signerinfos()

static void rz_pkcs7_free_signerinfos ( RPKCS7SignerInfos *  ss )

static

Definition at line 256 of file pkcs7.c.

                                                             {
    ut32 i;
    if (ss) {
        for (i = 0; i < ss->length; i++) {
            rz_pkcs7_free_signerinfo(ss->elements[i]);
            ss->elements[i] = NULL;
        }
        RZ_FREE(ss->elements);
        // Used internally pkcs #7, so it shouldn't free ss.
    }
}

References rz_pkcs7_signerinfos_t::elements, i, rz_pkcs7_signerinfos_t::length, NULL, RZ_FREE, and rz_pkcs7_free_signerinfo().

Referenced by rz_pkcs7_free_signeddata().

rz_pkcs7_free_spcdata()

static void rz_pkcs7_free_spcdata ( SpcAttributeTypeAndOptionalValue *  data )

static

Definition at line 715 of file pkcs7.c.

                                                                          {
    if (data) {
        rz_asn1_free_string(data->type);
        rz_asn1_free_binary(data->data);
    }
}

References SpcAttributeTypeAndOptionalValue::data, rz_asn1_free_binary(), rz_asn1_free_string(), and SpcAttributeTypeAndOptionalValue::type.

Referenced by rz_pkcs7_free_spcinfo().

rz_pkcs7_free_spcinfo()

RZ_API void rz_pkcs7_free_spcinfo

(

SpcIndirectDataContent *

spcinfo

)

Definition at line 729 of file pkcs7.c.

                                                                   {
    if (spcinfo) {
        rz_pkcs7_free_spcdata(&spcinfo->data);
        rz_pkcs7_free_spcmessagedigest(&spcinfo->messageDigest);
    }
}

References SpcIndirectDataContent::data, SpcIndirectDataContent::messageDigest, rz_pkcs7_free_spcdata(), and rz_pkcs7_free_spcmessagedigest().

Referenced by rz_bin_pe_free().

rz_pkcs7_free_spcmessagedigest()

static void rz_pkcs7_free_spcmessagedigest ( SpcDigestInfo *  messageDigest )

static

Definition at line 722 of file pkcs7.c.

                                                                         {
    if (messageDigest) {
        rz_asn1_free_binary(messageDigest->digest);
        rz_x509_free_algorithmidentifier(&messageDigest->digestAlgorithm);
    }
}

References SpcDigestInfo::digest, SpcDigestInfo::digestAlgorithm, rz_asn1_free_binary(), and rz_x509_free_algorithmidentifier().

Referenced by rz_pkcs7_free_spcinfo().

rz_pkcs7_parse_attribute()

static RPKCS7Attribute* rz_pkcs7_parse_attribute ( RASN1Object *  object )

static

Definition at line 349 of file pkcs7.c.

                                                                      {
    RPKCS7Attribute *attribute;
    if (!object || object->list.length < 1) {
        return NULL;
    }
    attribute = RZ_NEW0(RPKCS7Attribute);
    if (!attribute) {
        return NULL;
    }
    if (object->list.objects[0]) {
        attribute->oid = rz_asn1_stringify_oid(object->list.objects[0]->sector, object->list.objects[0]->length);
    }
    if (object->list.length == 2) {
        RASN1Object *obj1 = object->list.objects[1];
        if (obj1) {
            attribute->data = rz_asn1_create_binary(obj1->sector, obj1->length);
        }
    }
    return attribute;
}

References rz_pkcs7_attribute_t::data, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, NULL, rz_asn1_list_t::objects, rz_pkcs7_attribute_t::oid, rz_asn1_create_binary(), rz_asn1_stringify_oid(), RZ_NEW0, and rz_asn1_object_t::sector.

Referenced by rz_pkcs7_parse_attributes().

rz_pkcs7_parse_attributes()

static bool rz_pkcs7_parse_attributes ( RPKCS7Attributes *  attribute, RASN1Object *  object  )

static

Definition at line 370 of file pkcs7.c.

                                                                                         {
    ut32 i;
    if (!attributes || !object || !object->list.length) {
        return false;
    }
 
    attributes->length = object->list.length;
    if (attributes->length > 0) {
        attributes->elements = RZ_NEWS0(RPKCS7Attribute *, attributes->length);
        if (!attributes->elements) {
            attributes->length = 0;
            return false;
        }
        for (i = 0; i < object->list.length; i++) {
            attributes->elements[i] = rz_pkcs7_parse_attribute(object->list.objects[i]);
        }
    }
    return true;
}

References rz_pkcs7_attributes_t::elements, i, rz_asn1_list_t::length, rz_pkcs7_attributes_t::length, rz_asn1_object_t::list, rz_asn1_list_t::objects, RZ_NEWS0, and rz_pkcs7_parse_attribute().

Referenced by rz_pkcs7_parse_signerinfo().

rz_pkcs7_parse_certificaterevocationlists()

static bool rz_pkcs7_parse_certificaterevocationlists ( RPKCS7CertificateRevocationLists *  crls, RASN1Object *  object  )

static

Definition at line 28 of file pkcs7.c.

                                                                                                                   {
    ut32 i;
    if (!crls || !object) {
        return false;
    }
    if (object->list.length > 0) {
        crls->elements = (RX509CertificateRevocationList **)calloc(object->list.length, sizeof(RX509CertificateRevocationList *));
        if (!crls->elements) {
            return false;
        }
        crls->length = object->list.length;
        for (i = 0; i < crls->length; i++) {
            crls->elements[i] = rz_x509_parse_crl(object->list.objects[i]);
        }
    }
    return true;
}

References calloc(), rz_pkcs7_certificaterevocationlists_t::elements, i, rz_asn1_list_t::length, rz_pkcs7_certificaterevocationlists_t::length, rz_asn1_object_t::list, rz_asn1_list_t::objects, and rz_x509_parse_crl().

Referenced by rz_pkcs7_parse_signeddata().

rz_pkcs7_parse_cms()

RZ_API RCMS* rz_pkcs7_parse_cms	(	const ut8 *	buffer,
		ut32	length
	)

Definition at line 308 of file pkcs7.c.

                                                                {
    RASN1Object *object;
    RCMS *container;
    if (!buffer || !length) {
        return NULL;
    }
    container = RZ_NEW0(RCMS);
    if (!container) {
        return NULL;
    }
    object = rz_asn1_create_object(buffer, length, buffer);
    if (!object || object->list.length < 2 || !object->list.objects ||
        !object->list.objects[0] || !object->list.objects[1] ||
        object->list.objects[1]->list.length < 1) {
        rz_asn1_free_object(object);
        free(container);
        return NULL;
    }
    if (object->list.objects[0]) {
        container->contentType = rz_asn1_stringify_oid(object->list.objects[0]->sector, object->list.objects[0]->length);
        if (!container->contentType) {
            rz_asn1_free_object(object);
            free(container);
            return NULL;
        }
    }
    if (object->list.objects[1]) {
        rz_pkcs7_parse_signeddata(&container->signedData, object->list.objects[1]->list.objects[0]);
    }
    rz_asn1_free_object(object);
    return container;
}

References rz_pkcs7_container_t::contentType, free(), rz_asn1_list_t::length, rz_asn1_object_t::length, length, rz_asn1_object_t::list, NULL, rz_asn1_list_t::objects, rz_asn1_create_object(), rz_asn1_free_object(), rz_asn1_stringify_oid(), RZ_NEW0, rz_pkcs7_parse_signeddata(), rz_asn1_object_t::sector, and rz_pkcs7_container_t::signedData.

Referenced by bin_pe_init_security(), and cmd_print_fromage().

rz_pkcs7_parse_contentinfo()

static bool rz_pkcs7_parse_contentinfo ( RPKCS7ContentInfo *  ci, RASN1Object *  object  )

static

Definition at line 14 of file pkcs7.c.

                                                                                   {
    if (!ci || !object || object->list.length < 1 || !object->list.objects[0]) {
        return false;
    }
    ci->contentType = rz_asn1_stringify_oid(object->list.objects[0]->sector, object->list.objects[0]->length);
    if (object->list.length > 1) {
        RASN1Object *obj1 = object->list.objects[1];
        if (obj1) {
            ci->content = rz_asn1_create_binary(obj1->sector, obj1->length);
        }
    }
    return true;
}

References rz_pkcs7_contentinfo_t::content, rz_pkcs7_contentinfo_t::contentType, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, rz_asn1_list_t::objects, rz_asn1_create_binary(), rz_asn1_stringify_oid(), and rz_asn1_object_t::sector.

Referenced by rz_pkcs7_parse_signeddata().

rz_pkcs7_parse_digestalgorithmidentifier()

static bool rz_pkcs7_parse_digestalgorithmidentifier ( RPKCS7DigestAlgorithmIdentifiers *  dai, RASN1Object *  object  )

static

Definition at line 89 of file pkcs7.c.

                                                                                                                 {
    ut32 i;
    if (!dai || !object) {
        return false;
    }
    if (object->list.length > 0) {
        dai->elements = (RX509AlgorithmIdentifier **)calloc(object->list.length, sizeof(RX509AlgorithmIdentifier *));
        if (!dai->elements) {
            return false;
        }
        dai->length = object->list.length;
        for (i = 0; i < dai->length; i++) {
            // rz_x509_parse_algorithmidentifier returns bool,
            // so i have to allocate before calling the function
            dai->elements[i] = (RX509AlgorithmIdentifier *)malloc(sizeof(RX509AlgorithmIdentifier));
            // should i handle invalid memory? the function checks the pointer
            // or it should return if dai->elements[i] == NULL ?
            if (dai->elements[i]) {
                // Memset is needed to initialize to 0 the structure and avoid garbage.
                memset(dai->elements[i], 0, sizeof(RX509AlgorithmIdentifier));
                rz_x509_parse_algorithmidentifier(dai->elements[i], object->list.objects[i]);
            }
        }
    }
    return true;
}

References calloc(), rz_pkcs7_digestalgorithmidentifiers_t::elements, i, rz_asn1_list_t::length, rz_pkcs7_digestalgorithmidentifiers_t::length, rz_asn1_object_t::list, malloc(), memset(), rz_asn1_list_t::objects, and rz_x509_parse_algorithmidentifier().

Referenced by rz_pkcs7_parse_signeddata().

rz_pkcs7_parse_extendedcertificatesandcertificates()

static bool rz_pkcs7_parse_extendedcertificatesandcertificates ( RPKCS7ExtendedCertificatesAndCertificates *  ecac, RASN1Object *  object  )

static

Definition at line 58 of file pkcs7.c.

                                                                                                                                     {
    ut32 i;
    if (!ecac || !object) {
        return false;
    }
    if (object->list.length > 0) {
        ecac->elements = (RX509Certificate **)calloc(object->list.length, sizeof(RX509Certificate *));
        if (!ecac->elements) {
            return false;
        }
        ecac->length = object->list.length;
        for (i = 0; i < ecac->length; i++) {
            ecac->elements[i] = rz_x509_parse_certificate(object->list.objects[i]);
            object->list.objects[i] = NULL;
        }
    }
    return true;
}

References calloc(), rz_pkcs7_extendedcertificatesandcertificates_t::elements, i, rz_asn1_list_t::length, rz_pkcs7_extendedcertificatesandcertificates_t::length, rz_asn1_object_t::list, NULL, rz_asn1_list_t::objects, and rz_x509_parse_certificate().

Referenced by rz_pkcs7_parse_signeddata().

rz_pkcs7_parse_issuerandserialnumber()

static bool rz_pkcs7_parse_issuerandserialnumber ( RPKCS7IssuerAndSerialNumber *  iasu, RASN1Object *  object  )

static

Definition at line 140 of file pkcs7.c.

                                                                                                         {
    if (!iasu || !object || object->list.length != 2) {
        return false;
    }
    rz_x509_parse_name(&iasu->issuer, object->list.objects[0]);
    RASN1Object *obj1 = object->list.objects[1];
    if (obj1) {
        iasu->serialNumber = rz_asn1_create_binary(obj1->sector, obj1->length);
    }
    return true;
}

References rz_pkcs7_issuerandserialnumber_t::issuer, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, rz_asn1_list_t::objects, rz_asn1_create_binary(), rz_x509_parse_name(), rz_asn1_object_t::sector, and rz_pkcs7_issuerandserialnumber_t::serialNumber.

Referenced by rz_pkcs7_parse_signerinfo().

rz_pkcs7_parse_signeddata()

static bool rz_pkcs7_parse_signeddata ( RPKCS7SignedData *  sd, RASN1Object *  object  )

static

Definition at line 268 of file pkcs7.c.

                                                                                 {
    ut32 shift = 3;
    if (!sd || !object || object->list.length < 4) {
        return false;
    }
    memset(sd, 0, sizeof(RPKCS7SignedData));
    RASN1Object **elems = object->list.objects;
    // Following RFC
    sd->version = (ut32)elems[0]->sector[0];
    rz_pkcs7_parse_digestalgorithmidentifier(&sd->digestAlgorithms, elems[1]);
    rz_pkcs7_parse_contentinfo(&sd->contentInfo, elems[2]);
    // Optional
    if (object->list.length > 3 && shift < object->list.length && elems[shift] &&
        elems[shift]->klass == CLASS_CONTEXT && elems[shift]->tag == 0) {
        rz_pkcs7_parse_extendedcertificatesandcertificates(&sd->certificates, elems[shift]);
        shift++;
    }
    // Optional
    if (object->list.length > 3 && shift < object->list.length && elems[shift] &&
        elems[shift]->klass == CLASS_CONTEXT && elems[shift]->tag == 1) {
        rz_pkcs7_parse_certificaterevocationlists(&sd->crls, elems[shift]);
        shift++;
    }
    if (shift < object->list.length) {
        rz_pkcs7_parse_signerinfos(&sd->signerinfos, elems[shift]);
    }
    return true;
}

References rz_pkcs7_signeddata_t::certificates, CLASS_CONTEXT, rz_pkcs7_signeddata_t::contentInfo, rz_pkcs7_signeddata_t::crls, rz_pkcs7_signeddata_t::digestAlgorithms, rz_asn1_object_t::klass, rz_asn1_list_t::length, rz_asn1_object_t::list, list(), memset(), rz_asn1_list_t::objects, rz_pkcs7_parse_certificaterevocationlists(), rz_pkcs7_parse_contentinfo(), rz_pkcs7_parse_digestalgorithmidentifier(), rz_pkcs7_parse_extendedcertificatesandcertificates(), rz_pkcs7_parse_signerinfos(), shift(), rz_pkcs7_signeddata_t::signerinfos, rz_asn1_object_t::tag, and rz_pkcs7_signeddata_t::version.

Referenced by rz_pkcs7_parse_cms().

rz_pkcs7_parse_signerinfo()

static bool rz_pkcs7_parse_signerinfo ( RPKCS7SignerInfo *  si, RASN1Object *  object  )

static

Definition at line 167 of file pkcs7.c.

                                                                                 {
    RASN1Object **elems;
    ut32 shift = 3;
    if (!si || !object || object->list.length < 5) {
        return false;
    }
    elems = object->list.objects;
    // Following RFC
    si->version = (ut32)elems[0]->sector[0];
    rz_pkcs7_parse_issuerandserialnumber(&si->issuerAndSerialNumber, elems[1]);
    rz_x509_parse_algorithmidentifier(&si->digestAlgorithm, elems[2]);
    if (shift < object->list.length && elems[shift]->klass == CLASS_CONTEXT && elems[shift]->tag == 0) {
        rz_pkcs7_parse_attributes(&si->authenticatedAttributes, elems[shift]);
        shift++;
    }
    if (shift < object->list.length) {
        rz_x509_parse_algorithmidentifier(&si->digestEncryptionAlgorithm, elems[shift]);
        shift++;
    }
    if (shift < object->list.length) {
        RASN1Object *obj1 = object->list.objects[shift];
        if (obj1) {
            si->encryptedDigest = rz_asn1_create_binary(obj1->sector, obj1->length);
            shift++;
        }
    }
    if (shift < object->list.length) {
        RASN1Object *elem = elems[shift];
        if (elem && elem->klass == CLASS_CONTEXT && elem->tag == 1) {
            rz_pkcs7_parse_attributes(&si->unauthenticatedAttributes, elems[shift]);
        }
    }
    return true;
}

References CLASS_CONTEXT, rz_asn1_object_t::klass, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, list(), rz_asn1_list_t::objects, rz_asn1_create_binary(), rz_pkcs7_parse_attributes(), rz_pkcs7_parse_issuerandserialnumber(), rz_x509_parse_algorithmidentifier(), rz_asn1_object_t::sector, shift(), si, and rz_asn1_object_t::tag.

Referenced by rz_pkcs7_parse_signerinfos().

rz_pkcs7_parse_signerinfos()

static bool rz_pkcs7_parse_signerinfos ( RPKCS7SignerInfos *  ss, RASN1Object *  object  )

static

Definition at line 233 of file pkcs7.c.

                                                                                   {
    ut32 i;
    if (!ss || !object) {
        return false;
    }
    if (object->list.length > 0) {
        ss->elements = (RPKCS7SignerInfo **)calloc(object->list.length, sizeof(RPKCS7SignerInfo *));
        if (!ss->elements) {
            return false;
        }
        ss->length = object->list.length;
        for (i = 0; i < ss->length; i++) {
            // rz_pkcs7_parse_signerinfo returns bool,
            // so i have to allocate before calling the function
            ss->elements[i] = RZ_NEW0(RPKCS7SignerInfo);
            // should i handle invalid memory? the function checks the pointer
            // or it should return if si->elements[i] == NULL ?
            rz_pkcs7_parse_signerinfo(ss->elements[i], object->list.objects[i]);
        }
    }
    return true;
}

References calloc(), rz_pkcs7_signerinfos_t::elements, i, rz_asn1_list_t::length, rz_pkcs7_signerinfos_t::length, rz_asn1_object_t::list, rz_asn1_list_t::objects, RZ_NEW0, and rz_pkcs7_parse_signerinfo().

Referenced by rz_pkcs7_parse_signeddata().

rz_pkcs7_parse_spcdata()

static bool rz_pkcs7_parse_spcdata ( SpcAttributeTypeAndOptionalValue *  data, RASN1Object *  object  )

static

Definition at line 643 of file pkcs7.c.

                                                                                                {
    if (!data || !object || object->list.length < 1 ||
        !object->list.objects[0]) {
        return false;
    }
    data->type = rz_asn1_stringify_oid(object->list.objects[0]->sector, object->list.objects[0]->length);
    if (!data->type) {
        return false;
    }
    RASN1Object *obj1 = object->list.objects[1];
    if (object->list.length > 1) {
        if (obj1) {
            data->data = rz_asn1_create_binary(obj1->sector, obj1->length);
        }
    }
    return true;
}

References SpcAttributeTypeAndOptionalValue::data, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, rz_asn1_list_t::objects, rz_asn1_create_binary(), rz_asn1_stringify_oid(), rz_asn1_object_t::sector, and SpcAttributeTypeAndOptionalValue::type.

Referenced by rz_pkcs7_parse_spcinfo().

rz_pkcs7_parse_spcinfo()

RZ_API SpcIndirectDataContent* rz_pkcs7_parse_spcinfo

(

RCMS *

cms

)

Definition at line 674 of file pkcs7.c.

                                                                 {
    rz_return_val_if_fail(cms, NULL);
 
    RASN1String *type = cms->signedData.contentInfo.contentType;
    if (type && strcmp(type->string, "spcIndirectDataContext")) {
        return NULL;
    }
 
    SpcIndirectDataContent *spcinfo = RZ_NEW0(SpcIndirectDataContent);
    if (!spcinfo) {
        return NULL;
    }
 
    RASN1Binary *content = cms->signedData.contentInfo.content;
    if (!content) {
        free(spcinfo);
        return NULL;
    }
    RASN1Object *object = rz_asn1_create_object(content->binary, content->length, content->binary);
    if (!object || object->list.length < 2 || !object->list.objects ||
        !object->list.objects[0] || !object->list.objects[1]) {
        RZ_FREE(spcinfo);
        goto beach;
    }
    if (object->list.objects[0]) {
        if (!rz_pkcs7_parse_spcdata(&spcinfo->data, object->list.objects[0])) {
            RZ_FREE(spcinfo);
            goto beach;
        }
    }
    if (object->list.objects[1]) {
        if (!rz_pkcs7_parse_spcmessagedigest(&spcinfo->messageDigest, object->list.objects[1])) {
            RZ_FREE(spcinfo);
            goto beach;
        }
    }
beach:
    rz_asn1_free_object(object);
    return spcinfo;
}

References rz_asn1_bin_t::binary, rz_pkcs7_contentinfo_t::content, rz_pkcs7_signeddata_t::contentInfo, rz_pkcs7_contentinfo_t::contentType, SpcIndirectDataContent::data, free(), rz_asn1_list_t::length, rz_asn1_bin_t::length, rz_asn1_object_t::list, SpcIndirectDataContent::messageDigest, NULL, rz_asn1_list_t::objects, rz_asn1_create_object(), rz_asn1_free_object(), RZ_FREE, RZ_NEW0, rz_pkcs7_parse_spcdata(), rz_pkcs7_parse_spcmessagedigest(), rz_return_val_if_fail, rz_pkcs7_container_t::signedData, and type.

Referenced by bin_pe_init_security().

rz_pkcs7_parse_spcmessagedigest()

static bool rz_pkcs7_parse_spcmessagedigest ( SpcDigestInfo *  messageDigest, RASN1Object *  object  )

static

Definition at line 661 of file pkcs7.c.

                                                                                               {
    if (!messageDigest || !object || object->list.length < 2 ||
        !object->list.objects[0] || !object->list.objects[1]) {
        return false;
    }
    if (!rz_x509_parse_algorithmidentifier(&messageDigest->digestAlgorithm, object->list.objects[0])) {
        return false;
    }
    RASN1Object *obj1 = object->list.objects[1];
    messageDigest->digest = rz_asn1_create_binary(obj1->sector, obj1->length);
    return true;
}

References SpcDigestInfo::digest, SpcDigestInfo::digestAlgorithm, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, rz_asn1_list_t::objects, rz_asn1_create_binary(), rz_x509_parse_algorithmidentifier(), and rz_asn1_object_t::sector.

Referenced by rz_pkcs7_parse_spcinfo().

rz_x509_crlentry_dump()

void rz_x509_crlentry_dump	(	RX509CRLEntry *	crle,
		const char *	pad,
		RzStrBuf *	sb
	)

Definition at line 573 of file x509.c.

                                                                               {
    RASN1String *id = NULL, *utc = NULL;
    if (!crle) {
        return;
    }
    if (!pad) {
        pad = "";
    }
    utc = crle->revocationDate;
    if (crle->userCertificate) {
        id = rz_asn1_stringify_integer(crle->userCertificate->binary, crle->userCertificate->length);
    }
    rz_strbuf_appendf(sb, "%sUser Certificate:\n%s  %s\n"
                  "%sRevocation Date:\n%s  %s\n",
        pad, pad, id ? id->string : "Missing",
        pad, pad, utc ? utc->string : "Missing");
    rz_asn1_free_string(id);
}

References rz_asn1_bin_t::binary, id, rz_asn1_bin_t::length, NULL, pad(), rz_x509_crlentry::revocationDate, rz_asn1_free_string(), rz_asn1_stringify_integer(), rz_strbuf_appendf(), sb, and rz_x509_crlentry::userCertificate.

Referenced by rz_x509_crl_to_string().

rz_x509_free_crl()

void rz_x509_free_crl

(

RX509CertificateRevocationList *

crl

)

Definition at line 404 of file x509.c.

                                                           {
    ut32 i;
    if (crl) {
        rz_x509_free_algorithmidentifier(&crl->signature);
        rz_x509_free_name(&crl->issuer);
        rz_asn1_free_string(crl->nextUpdate);
        rz_asn1_free_string(crl->lastUpdate);
        if (crl->revokedCertificates) {
            for (i = 0; i < crl->length; i++) {
                rz_x509_free_crlentry(crl->revokedCertificates[i]);
                crl->revokedCertificates[i] = NULL;
            }
            RZ_FREE(crl->revokedCertificates);
        }
        free(crl);
    }
}

References free(), i, rz_x509_certificaterevocationlist::issuer, rz_x509_certificaterevocationlist::lastUpdate, rz_x509_certificaterevocationlist::length, rz_x509_certificaterevocationlist::nextUpdate, NULL, rz_x509_certificaterevocationlist::revokedCertificates, rz_asn1_free_string(), RZ_FREE, rz_x509_free_algorithmidentifier(), rz_x509_free_crlentry(), rz_x509_free_name(), and rz_x509_certificaterevocationlist::signature.

Referenced by rz_pkcs7_free_certificaterevocationlists().

rz_x509_name_json()

void rz_x509_name_json	(	PJ *	pj,
		RX509Name *	name
	)

Definition at line 638 of file x509.c.

                                                       {
    ut32 i;
    for (i = 0; i < name->length; i++) {
        if (!name->oids[i] || !name->names[i]) {
            continue;
        }
        pj_ks(pj, name->oids[i]->string, name->names[i]->string);
    }
}

References i, and pj_ks().

Referenced by rz_x509_crl_json(), rz_x509_signedinfo_json(), and rz_x509_tbscertificate_json().

rz_x509_signedinfo_dump()

static void rz_x509_signedinfo_dump ( RPKCS7SignerInfo *  si, const char *  pad, RzStrBuf *  sb  )

static

Definition at line 421 of file pkcs7.c.

                                                                                         {
    RASN1String *s = NULL;
    RASN1Binary *o = NULL;
    ut32 i;
    char *pad2, *pad3;
    if (!si) {
        return;
    }
    if (!pad) {
        pad = "";
    }
    pad3 = rz_str_newf("%s    ", pad);
    if (!pad3) {
        return;
    }
    pad2 = pad3 + 2;
 
    rz_strbuf_appendf(sb, "%sSignerInfo:\n%sVersion: v%u\n%sIssuer\n", pad, pad2, si->version + 1, pad2);
    rz_x509_name_dump(&si->issuerAndSerialNumber.issuer, pad3, sb);
    if ((o = si->issuerAndSerialNumber.serialNumber)) {
        s = rz_asn1_stringify_integer(o->binary, o->length);
    }
    rz_strbuf_appendf(sb, "%sSerial Number:\n%s%s\n", pad2, pad3, s ? s->string : "Missing");
    rz_asn1_free_string(s);
 
    s = si->digestAlgorithm.algorithm;
    rz_strbuf_appendf(sb, "%sDigest Algorithm:\n%s%s\n%sAuthenticated Attributes:\n",
        pad2, pad3, s ? s->string : "Missing", pad2);
 
    for (i = 0; i < si->authenticatedAttributes.length; i++) {
        RPKCS7Attribute *attr = si->authenticatedAttributes.elements[i];
        if (!attr) {
            continue;
        }
        rz_strbuf_appendf(sb, "%s%s: %u bytes\n", pad3, attr->oid ? attr->oid->string : "Missing",
            attr->data ? attr->data->length : 0);
    }
    s = si->digestEncryptionAlgorithm.algorithm;
    rz_strbuf_appendf(sb, "%sDigest Encryption Algorithm\n%s%s\n", pad2, pad3, s ? s->string : "Missing");
 
    //  if ((o = si->encryptedDigest)) s = rz_asn1_stringify_bytes (o->binary, o->length);
    //  else s = NULL;
    //  eprintf ("%sEncrypted Digest: %u bytes\n%s\n", pad2, o ? o->length : 0, s ? s->string : "Missing");
    //  rz_asn1_free_string (s);
    rz_strbuf_appendf(sb, "%sEncrypted Digest: %u bytes\n", pad2, o ? o->length : 0);
    rz_strbuf_appendf(sb, "%sUnauthenticated Attributes:\n", pad2);
    for (i = 0; i < si->unauthenticatedAttributes.length; i++) {
        RPKCS7Attribute *attr = si->unauthenticatedAttributes.elements[i];
        if (!attr) {
            continue;
        }
        o = attr->data;
        eprintf("%s%s: %u bytes\n", pad3, attr->oid ? attr->oid->string : "Missing",
            o ? o->length : 0);
    }
    free(pad3);
}

References rz_asn1_bin_t::binary, rz_pkcs7_attribute_t::data, eprintf, free(), i, rz_asn1_bin_t::length, NULL, rz_pkcs7_attribute_t::oid, pad(), rz_asn1_free_string(), rz_asn1_stringify_integer(), rz_str_newf(), rz_strbuf_appendf(), rz_x509_name_dump(), s, sb, si, and rz_asn1_string_t::string.

Referenced by rz_pkcs7_cms_to_string().

rz_x509_signedinfo_json()

RZ_API void rz_x509_signedinfo_json	(	PJ *	pj,
		RPKCS7SignerInfo *	si
	)

Definition at line 520 of file pkcs7.c.

                                                                  {
    ut32 i;
    if (si) {
        pj_o(pj);
        pj_ki(pj, "Version", si->version + 1);
        pj_k(pj, "Issuer");
        pj_o(pj);
        rz_x509_name_json(pj, &si->issuerAndSerialNumber.issuer);
        pj_end(pj);
        if (si->issuerAndSerialNumber.serialNumber) {
            RASN1Binary *o = si->issuerAndSerialNumber.serialNumber;
            RASN1String *s = rz_asn1_stringify_integer(o->binary, o->length);
            if (s) {
                pj_ks(pj, "SerialNumber", s->string);
            }
            rz_asn1_free_string(s);
        }
 
        if (si->digestAlgorithm.algorithm) {
            pj_ks(pj, "DigestAlgorithm", si->digestAlgorithm.algorithm->string);
        }
        pj_k(pj, "AuthenticatedAttributes");
        pj_a(pj);
        for (i = 0; i < si->authenticatedAttributes.length; i++) {
            RPKCS7Attribute *attr = si->authenticatedAttributes.elements[i];
            if (!attr) {
                continue;
            }
            pj_o(pj);
            if (attr->oid) {
                pj_ks(pj, "oid", attr->oid->string);
            }
            if (attr->data) {
                pj_ki(pj, "length", attr->data->length);
            }
            pj_end(pj);
        }
        pj_end(pj);
        if (si->digestEncryptionAlgorithm.algorithm) {
            pj_ks(pj, "DigestEncryptionAlgorithm", si->digestEncryptionAlgorithm.algorithm->string);
        }
 
        if (si->encryptedDigest) {
            RASN1Binary *o = si->encryptedDigest;
            RASN1String *s = rz_asn1_stringify_integer(o->binary, o->length);
            if (s) {
                pj_ks(pj, "EncryptedDigest", s->string);
            }
            rz_asn1_free_string(s);
        }
 
        pj_k(pj, "UnauthenticatedAttributes");
        pj_a(pj);
        for (i = 0; i < si->unauthenticatedAttributes.length; i++) {
            RPKCS7Attribute *attr = si->unauthenticatedAttributes.elements[i];
            if (!attr) {
                continue;
            }
            pj_o(pj);
            if (attr->oid) {
                pj_ks(pj, "oid", attr->oid->string);
            }
            if (attr->data) {
                pj_ki(pj, "length", attr->data->length);
            }
            pj_end(pj);
        }
        pj_end(pj);
        pj_end(pj);
    }
}

References rz_asn1_bin_t::binary, rz_pkcs7_attribute_t::data, i, rz_asn1_bin_t::length, rz_pkcs7_attribute_t::oid, pj_a(), pj_end(), pj_k(), pj_ki(), pj_ks(), pj_o(), rz_asn1_free_string(), rz_asn1_stringify_integer(), rz_x509_name_json(), s, si, and rz_asn1_string_t::string.

Referenced by rz_pkcs7_cms_json().