+//
+// SOSCircleDer.c
+// sec
+//
+// Created by Richard Murphy on 1/22/15.
+//
+//
+
+#include <stdio.h>
+#include <AssertMacros.h>
+#include <CoreFoundation/CoreFoundation.h>
+#include <CoreFoundation/CoreFoundation.h>
+#include <CoreFoundation/CFArray.h>
+#include <Security/SecureObjectSync/SOSCloudCircle.h>
+#include <Security/SecureObjectSync/SOSCloudCircleInternal.h>
+#include "keychain/SecureObjectSync/SOSCircle.h"
+#include "keychain/SecureObjectSync/SOSCirclePriv.h"
+#include <utilities/SecCFRelease.h>
+#include <utilities/SecCFWrappers.h>
+#include <utilities/debugging.h>
+#include "keychain/SecureObjectSync/SOSInternal.h"
+#include "keychain/SecureObjectSync/SOSPeer.h"
+#include "keychain/SecureObjectSync/SOSPeerInfoInternal.h"
+#include "keychain/SecureObjectSync/SOSPeerInfoCollections.h"
+#include <Security/SecFramework.h>
+
+#include <utilities/der_plist.h>
+#include <utilities/der_plist_internal.h>
+#include <corecrypto/ccder.h>
+#include <stdlib.h>
+#include <assert.h>
+
+#include "SOSCircleDer.h"
+
+static const uint8_t* der_decode_mutable_dictionary(CFAllocatorRef allocator, CFOptionFlags mutability,
+ CFMutableDictionaryRef* dictionary, CFErrorRef *error,
+ const uint8_t* der, const uint8_t *der_end)
+{
+ CFDictionaryRef theDict;
+ const uint8_t* result = der_decode_dictionary(allocator, mutability, &theDict, error, der, der_end);
+
+ if (result != NULL)
+ *dictionary = (CFMutableDictionaryRef)theDict;
+
+ return result;
+}
+
+
+SOSCircleRef SOSCircleCreateFromDER(CFAllocatorRef allocator, CFErrorRef* error,
+ const uint8_t** der_p, const uint8_t *der_end) {
+ SOSCircleRef cir = CFTypeAllocate(SOSCircle, struct __OpaqueSOSCircle, allocator);
+
+ const uint8_t *sequence_end;
+
+ cir->name = NULL;
+ cir->generation = NULL;
+ cir->peers = NULL;
+ cir->applicants = NULL;
+ cir->rejected_applicants = NULL;
+ cir->signatures = NULL;
+
+ *der_p = ccder_decode_constructed_tl(CCDER_CONSTRUCTED_SEQUENCE, &sequence_end, *der_p, der_end);
+ require_action_quiet(sequence_end != NULL, fail,
+ SOSCreateError(kSOSErrorBadFormat, CFSTR("Bad Circle DER"), (error != NULL) ? *error : NULL, error));
+
+ // Version first.
+ uint64_t version = 0;
+ *der_p = ccder_decode_uint64(&version, *der_p, der_end);
+
+ require_action_quiet(version == kOnlyCompatibleVersion, fail,
+ SOSCreateError(kSOSErrorIncompatibleCircle, CFSTR("Bad Circle Version"), NULL, error));
+
+ *der_p = der_decode_string(allocator, 0, &cir->name, error, *der_p, sequence_end);
+ cir->generation = SOSGenCountCreateFromDER(kCFAllocatorDefault, error, der_p, sequence_end);
+
+ cir->peers = SOSPeerInfoSetCreateFromArrayDER(allocator, &kSOSPeerSetCallbacks, error, der_p, sequence_end);
+ cir->applicants = SOSPeerInfoSetCreateFromArrayDER(allocator, &kSOSPeerSetCallbacks, error, der_p, sequence_end);
+ cir->rejected_applicants = SOSPeerInfoSetCreateFromArrayDER(allocator, &kSOSPeerSetCallbacks, error, der_p, sequence_end);
+
+ *der_p = der_decode_mutable_dictionary(allocator, kCFPropertyListMutableContainersAndLeaves,
+ &cir->signatures, error, *der_p, sequence_end);
+
+ require_action_quiet(*der_p == sequence_end, fail,
+ SOSCreateError(kSOSErrorBadFormat, CFSTR("Bad Circle DER"), (error != NULL) ? *error : NULL, error));
+
+ return cir;
+
+fail:
+ CFReleaseNull(cir);
+ return NULL;
+}
+
+SOSCircleRef SOSCircleCreateFromData(CFAllocatorRef allocator, CFDataRef circleData, CFErrorRef *error)
+{
+ size_t size = CFDataGetLength(circleData);
+ const uint8_t *der = CFDataGetBytePtr(circleData);
+ SOSCircleRef inflated = SOSCircleCreateFromDER(allocator, error, &der, der + size);
+ return inflated;
+}
+
+size_t SOSCircleGetDEREncodedSize(SOSCircleRef cir, CFErrorRef *error) {
+ SOSCircleAssertStable(cir);
+ size_t total_payload = 0;
+
+ require_quiet(accumulate_size(&total_payload, ccder_sizeof_uint64(kOnlyCompatibleVersion)), fail);
+ require_quiet(accumulate_size(&total_payload, der_sizeof_string(cir->name, error)), fail);
+ require_quiet(accumulate_size(&total_payload, SOSGenCountGetDEREncodedSize(cir->generation, error)), fail);
+ require_quiet(accumulate_size(&total_payload, SOSPeerInfoSetGetDEREncodedArraySize(cir->peers, error)), fail);
+ require_quiet(accumulate_size(&total_payload, SOSPeerInfoSetGetDEREncodedArraySize(cir->applicants, error)), fail);
+ require_quiet(accumulate_size(&total_payload, SOSPeerInfoSetGetDEREncodedArraySize(cir->rejected_applicants, error)), fail);
+ require_quiet(accumulate_size(&total_payload, der_sizeof_dictionary((CFDictionaryRef) cir->signatures, error)), fail);
+
+ return ccder_sizeof(CCDER_CONSTRUCTED_SEQUENCE, total_payload);
+
+fail:
+ SecCFDERCreateError(kSecDERErrorUnknownEncoding, CFSTR("don't know how to encode"), NULL, error);
+ return 0;
+}
+
+uint8_t* SOSCircleEncodeToDER(SOSCircleRef cir, CFErrorRef* error, const uint8_t* der, uint8_t* der_end) {
+ SOSCircleAssertStable(cir);
+
+ return ccder_encode_constructed_tl(CCDER_CONSTRUCTED_SEQUENCE, der_end, der,
+ ccder_encode_uint64(kOnlyCompatibleVersion, der,
+ der_encode_string(cir->name, error, der,
+ SOSGenCountEncodeToDER(cir->generation, error, der,
+ SOSPeerInfoSetEncodeToArrayDER(cir->peers, error, der,
+ SOSPeerInfoSetEncodeToArrayDER(cir->applicants, error, der,
+ SOSPeerInfoSetEncodeToArrayDER(cir->rejected_applicants, error, der,
+ der_encode_dictionary((CFDictionaryRef) cir->signatures, error, der, der_end))))))));
+}
+
+CFDataRef SOSCircleCreateIncompatibleCircleDER(CFErrorRef* error)
+{
+ size_t total_payload = 0;
+ size_t encoded_size = 0;
+ uint8_t* der = 0;
+ uint8_t* der_end = 0;
+ CFMutableDataRef result = NULL;
+
+ require_quiet(accumulate_size(&total_payload, ccder_sizeof_uint64(kAlwaysIncompatibleVersion)), fail);
+
+ encoded_size = ccder_sizeof(CCDER_CONSTRUCTED_SEQUENCE, total_payload);
+
+ result = CFDataCreateMutableWithScratch(kCFAllocatorDefault, encoded_size);
+
+ der = CFDataGetMutableBytePtr(result);
+ der_end = der + CFDataGetLength(result);
+
+ der_end = ccder_encode_constructed_tl(CCDER_CONSTRUCTED_SEQUENCE, der_end, der,
+ ccder_encode_uint64(kAlwaysIncompatibleVersion, der, der_end));
+
+fail:
+ if (der == NULL || der != der_end)
+ CFReleaseNull(result);
+
+ return result;
+}
+
+
+CFDataRef SOSCircleCopyEncodedData(SOSCircleRef circle, CFAllocatorRef allocator, CFErrorRef *error)
+{
+ return CFDataCreateWithDER(kCFAllocatorDefault, SOSCircleGetDEREncodedSize(circle, error), ^uint8_t*(size_t size, uint8_t *buffer) {
+ return SOSCircleEncodeToDER(circle, error, buffer, (uint8_t *) buffer + size);
+ });
+}
+
+//
+// Encodes data or a zero length data
+//
+size_t der_sizeof_data_or_null(CFDataRef data, CFErrorRef* error)
+{
+ if (data) {
+ return der_sizeof_data(data, error);
+ } else {
+ return der_sizeof_null(kCFNull, error);
+ }
+}
+
+uint8_t* der_encode_data_or_null(CFDataRef data, CFErrorRef* error, const uint8_t* der, uint8_t* der_end)
+{
+ if (data) {
+ return der_encode_data(data, error, der, der_end);
+ } else {
+ return der_encode_null(kCFNull, error, der, der_end);
+ }
+}
+
+
+const uint8_t* der_decode_data_or_null(CFAllocatorRef allocator, CFDataRef* data,
+ CFErrorRef* error,
+ const uint8_t* der, const uint8_t* der_end)
+{
+ CFTypeRef value = NULL;
+ der = der_decode_plist(allocator, 0, &value, error, der, der_end);
+ if (value && CFGetTypeID(value) != CFDataGetTypeID()) {
+ CFReleaseNull(value);
+ }
+ if (data) {
+ *data = value;
+ }
+ return der;
+}
+
projects / apple / security.git / blobdiff