rsa pkcs8 cosmetics
Karel Miko
7 years ago
| 30 | 30 | * - PrivateKeyAlgorithmIdentifier ::= AlgorithmIdentifier |
| 31 | 31 | * - PrivateKey ::= OCTET STRING |
| 32 | 32 | * - Attributes ::= SET OF Attribute |
| 33 | * | |
| 33 | * | |
| 34 | 34 | * EncryptedPrivateKeyInfo ::= SEQUENCE { |
| 35 | 35 | * encryptionAlgorithm EncryptionAlgorithmIdentifier, |
| 36 | 36 | * encryptedData EncryptedData } |
| 62 | 62 | unsigned char *buf1=NULL, *buf2=NULL; |
| 63 | 63 | unsigned long buf1len, buf2len; |
| 64 | 64 | unsigned long oid[16]; |
| 65 | oid_st rsaoid; | |
| 65 | oid_st rsaoid; | |
| 66 | 66 | ltc_asn1_list alg_seq[2], top_seq[3]; |
| 67 | 67 | ltc_asn1_list alg_seq_e[2], key_seq_e[2], top_seq_e[2]; |
| 68 | 68 | unsigned char *decrypted=NULL; |
| 69 | 69 | unsigned long decryptedlen; |
| 70 | ||
| 70 | ||
| 71 | 71 | LTC_ARGCHK(in != NULL); |
| 72 | 72 | LTC_ARGCHK(key != NULL); |
| 73 | 73 | LTC_ARGCHK(ltc_mp.name != NULL); |
| 75 | 75 | /* get RSA alg oid */ |
| 76 | 76 | err = pk_get_oid(PKA_RSA, &rsaoid); |
| 77 | 77 | if (err != CRYPT_OK) { return err; } |
| 78 | ||
| 78 | ||
| 79 | 79 | /* alloc buffers */ |
| 80 | buf1len = 10000; /* XXX-TODO LTC_DER_MAX_PUBKEY_SIZE*8 nebo inlen*/ | |
| 80 | buf1len = inlen; /* approx. */ | |
| 81 | 81 | buf1 = XCALLOC(1, buf1len); |
| 82 | 82 | if (buf1 == NULL) { err = CRYPT_MEM; goto LBL_FREE; } |
| 83 | buf2len = 10000; /* XXX-TODO LTC_DER_MAX_PUBKEY_SIZE*8 nebo inlen */ | |
| 83 | buf2len = inlen; /* approx. */ | |
| 84 | 84 | buf2 = XCALLOC(1, buf2len); |
| 85 | 85 | if (buf2 == NULL) { err = CRYPT_MEM; goto LBL_FREE; } |
| 86 | 86 | |
| 94 | 94 | LTC_SET_ASN1(alg_seq_e, 0, LTC_ASN1_OBJECT_IDENTIFIER, oid, 16UL); |
| 95 | 95 | LTC_SET_ASN1(alg_seq_e, 1, LTC_ASN1_SEQUENCE, key_seq_e, 2UL); |
| 96 | 96 | LTC_SET_ASN1(top_seq_e, 0, LTC_ASN1_SEQUENCE, alg_seq_e, 2UL); |
| 97 | LTC_SET_ASN1(top_seq_e, 1, LTC_ASN1_OCTET_STRING, buf2, buf2len); | |
| 97 | LTC_SET_ASN1(top_seq_e, 1, LTC_ASN1_OCTET_STRING, buf2, buf2len); | |
| 98 | 98 | err=der_decode_sequence(in, inlen, top_seq_e, 2UL); |
| 99 | 99 | if (err == CRYPT_OK) { |
| 100 | /* unsigned long icount = mp_get_int(iter); */ | |
| 101 | /* XXX: TODO */ | |
| 102 | /* fprintf(stderr, "XXX-DEBUG: gonna decrypt: iter=%ld salt.len=%ld encdata.len=%ld\n", icount, key_seq_e[0].size, top_seq_e[1].size); */ | |
| 100 | /* XXX: TODO encrypted pkcs8 not supported */ | |
| 101 | /* fprintf(stderr, "decrypt: iter=%ld salt.len=%ld encdata.len=%ld\n", mp_get_int(iter), key_seq_e[0].size, top_seq_e[1].size); */ | |
| 103 | 102 | err = CRYPT_PK_INVALID_TYPE; |
| 104 | 103 | goto LBL_ERR; |
| 105 | 104 | } |
| 113 | 112 | LTC_SET_ASN1(alg_seq, 1, LTC_ASN1_NULL, NULL, 0UL); |
| 114 | 113 | LTC_SET_ASN1(top_seq, 0, LTC_ASN1_INTEGER, zero, 1UL); |
| 115 | 114 | LTC_SET_ASN1(top_seq, 1, LTC_ASN1_SEQUENCE, alg_seq, 2UL); |
| 116 | LTC_SET_ASN1(top_seq, 2, LTC_ASN1_OCTET_STRING, buf1, buf1len); | |
| 115 | LTC_SET_ASN1(top_seq, 2, LTC_ASN1_OCTET_STRING, buf1, buf1len); | |
| 117 | 116 | err=der_decode_sequence(decrypted, decryptedlen, top_seq, 3UL); |
| 118 | 117 | if (err != CRYPT_OK) { goto LBL_ERR; } |
| 119 | ||
| 118 | ||
| 120 | 119 | /* check alg oid */ |
| 121 | 120 | if ((alg_seq[0].size != rsaoid.OIDlen) || |
| 122 | 121 | XMEMCMP(rsaoid.OID, alg_seq[0].data, rsaoid.OIDlen * sizeof(rsaoid.OID[0]))) { |
| 123 | 122 | err = CRYPT_PK_INVALID_TYPE; |
| 124 | 123 | goto LBL_ERR; |
| 125 | } | |
| 124 | } | |
| 126 | 125 | |
| 127 | 126 | err = der_decode_sequence_multi(buf1, top_seq[2].size, |
| 128 | 127 | LTC_ASN1_INTEGER, 1UL, zero, |