X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/80e2389990082500d76eb566d4946be3e786c3ef..d8f41ccd20de16f8ebe2ccc84d47bf1cb2b26bbb:/Security/libsecurity_apple_csp/lib/bsafePKCS1.cpp

diff --git a/Security/libsecurity_apple_csp/lib/bsafePKCS1.cpp b/Security/libsecurity_apple_csp/lib/bsafePKCS1.cpp
new file mode 100644
index 00000000..6eebba27
--- /dev/null
+++ b/Security/libsecurity_apple_csp/lib/bsafePKCS1.cpp
@@ -0,0 +1,137 @@
+/*
+ * Copyright (c) 2000-2001,2011,2014 Apple Inc. All Rights Reserved.
+ * 
+ * The contents of this file constitute Original Code as defined in and are
+ * subject to the Apple Public Source License Version 1.2 (the 'License').
+ * You may not use this file except in compliance with the License. Please obtain
+ * a copy of the License at http://www.apple.com/publicsource and read it before
+ * using this file.
+ * 
+ * This Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
+ * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
+ * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+ * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
+ * specific language governing rights and limitations under the License.
+ */
+
+#ifdef	BSAFE_CSP_ENABLE
+
+
+/*
+ * bsafePKCS1.cpp - support for PKCS1 format RSA public key blobs, which for some
+ * 					reason, BSAFE doesn't know about.
+ */
+
+#include "bsafePKCS1.h"
+#include "bsafecspi.h"
+#include "cspdebugging.h"
+#include "bsobjects.h"
+#include <Security/pkcs1oids.h>		/* for RSAPublicKey */
+#include <Security/cdsaUtils.h>
+#include <Security/cssmerrno.h>
+
+/*
+ * Simple conversion between BSAFE ITEM and snacc BigIntegerStr
+ */
+static void BS_ItemToSnaccBigInt(
+	const ITEM		&item,
+	BigIntegerStr	&snaccInt)
+{
+	snaccInt.Set(reinterpret_cast<const char *>(item.data), item.len);
+}
+
+/*  
+ * This one doesn't do a malloc - the ITEM is only valid as long as
+ * snaccInt is!
+ */
+static void BS_snaccBigIntToItem(
+	BigIntegerStr 		&snaccInt,	// not const - we're passing a ptr
+	ITEM				&item)
+{
+	char *cp = snaccInt;
+	item.data = reinterpret_cast<unsigned char *>(cp);
+	item.len = snaccInt.Len();
+}
+
+/*
+ * Given a PKCS1-formatted key blob, decode the blob into components and do 
+ * a B_SetKeyInfo on the specified BSAFE key.
+ */
+void BS_setKeyPkcs1(
+	const CssmData &pkcs1Blob, 
+	B_KEY_OBJ bsKey)
+{
+	/* DER-decode the blob */
+	RSAPublicKey snaccPubKey;
+	
+	try {
+		SC_decodeAsnObj(pkcs1Blob, snaccPubKey);
+	}
+	catch(const CssmError &cerror) {
+		CSSM_RETURN crtn = cerror.cssmError();
+		
+		errorLog1("BS_setKeyPkcs1: SC_decodeAsnObj returned %s\n",
+			cssmErrorString(crtn).c_str());
+		switch(crtn) {
+			case CSSMERR_CSSM_MEMORY_ERROR:
+				crtn = CSSMERR_CSP_MEMORY_ERROR;
+				break;
+			case CSSMERR_CSSM_INVALID_INPUT_POINTER:
+				crtn = CSSMERR_CSP_INVALID_KEY;
+			default:
+				break;
+		}
+		CssmError::throwMe(crtn);
+	}
+	
+	/* 
+	 * Convert BigIntegerStr modulus, publicExponent into
+	 * ITEMS in an A_RSA_KEY.
+	 */
+	A_RSA_KEY	rsaKey;
+	BS_snaccBigIntToItem(snaccPubKey.modulus, rsaKey.modulus);
+	BS_snaccBigIntToItem(snaccPubKey.publicExponent, rsaKey.exponent);
+	
+	BSafe::check(
+		B_SetKeyInfo(bsKey, KI_RSAPublic, POINTER(&rsaKey)), true);
+}
+
+/*
+ * Obtain public key blob info, PKCS1 format. 
+ */
+void BS_GetKeyPkcs1(
+	const B_KEY_OBJ bsKey, 
+	CssmOwnedData &pkcs1Blob)
+{
+	/* get modulus/exponent info from BSAFE */
+	A_RSA_KEY *rsaKey;
+	BSafe::check(
+		B_GetKeyInfo((POINTER *)&rsaKey, bsKey, KI_RSAPublic), true);
+		
+	/* Cook up a snacc-style RSAPublic key */
+	RSAPublicKey snaccPubKey;
+	BS_ItemToSnaccBigInt(rsaKey->modulus, snaccPubKey.modulus);
+	BS_ItemToSnaccBigInt(rsaKey->exponent, snaccPubKey.publicExponent);
+		
+	/* estimate max size, BER-encode */
+	size_t maxSize = 2 * (rsaKey->modulus.len + rsaKey->exponent.len);
+	try {
+		SC_encodeAsnObj(snaccPubKey, pkcs1Blob, maxSize);
+	}
+	catch(const CssmError &cerror) {
+		CSSM_RETURN crtn = cerror.cssmError();
+
+		errorLog1("BS_GetKeyPkcs1: SC_encodeAsnObj returned %s\n",
+			cssmErrorString(crtn).c_str());
+		switch(crtn) {
+			case CSSMERR_CSSM_MEMORY_ERROR:
+				crtn = CSSMERR_CSP_MEMORY_ERROR;
+				break;
+			default:
+				break;
+		}
+		CssmError::throwMe(crtn);
+	}
+}
+#endif	/* BSAFE_CSP_ENABLE */