You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
142 lines
4.2 KiB
142 lines
4.2 KiB
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR) |
|
#pragma warning disable |
|
using System; |
|
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Cms; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Kisa; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Nist; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Ntt; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Pkcs; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X509; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Parameters; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Security; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities; |
|
|
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Cms |
|
{ |
|
internal class KekRecipientInfoGenerator : RecipientInfoGenerator |
|
{ |
|
private static readonly CmsEnvelopedHelper Helper = CmsEnvelopedHelper.Instance; |
|
|
|
private KeyParameter keyEncryptionKey; |
|
// TODO Can get this from keyEncryptionKey? |
|
private string keyEncryptionKeyOID; |
|
private KekIdentifier kekIdentifier; |
|
|
|
// Derived |
|
private AlgorithmIdentifier keyEncryptionAlgorithm; |
|
|
|
internal KekRecipientInfoGenerator() |
|
{ |
|
} |
|
|
|
internal KekIdentifier KekIdentifier |
|
{ |
|
set { this.kekIdentifier = value; } |
|
} |
|
|
|
internal KeyParameter KeyEncryptionKey |
|
{ |
|
set |
|
{ |
|
this.keyEncryptionKey = value; |
|
this.keyEncryptionAlgorithm = DetermineKeyEncAlg(keyEncryptionKeyOID, keyEncryptionKey); |
|
} |
|
} |
|
|
|
internal string KeyEncryptionKeyOID |
|
{ |
|
set { this.keyEncryptionKeyOID = value; } |
|
} |
|
|
|
public RecipientInfo Generate(KeyParameter contentEncryptionKey, SecureRandom random) |
|
{ |
|
byte[] keyBytes = contentEncryptionKey.GetKey(); |
|
|
|
IWrapper keyWrapper = Helper.CreateWrapper(keyEncryptionAlgorithm.Algorithm.Id); |
|
keyWrapper.Init(true, new ParametersWithRandom(keyEncryptionKey, random)); |
|
Asn1OctetString encryptedKey = new DerOctetString( |
|
keyWrapper.Wrap(keyBytes, 0, keyBytes.Length)); |
|
|
|
return new RecipientInfo(new KekRecipientInfo(kekIdentifier, keyEncryptionAlgorithm, encryptedKey)); |
|
} |
|
|
|
private static AlgorithmIdentifier DetermineKeyEncAlg( |
|
string algorithm, KeyParameter key) |
|
{ |
|
if (BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.StartsWith(algorithm, "DES")) |
|
{ |
|
return new AlgorithmIdentifier( |
|
PkcsObjectIdentifiers.IdAlgCms3DesWrap, |
|
DerNull.Instance); |
|
} |
|
else if (BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.StartsWith(algorithm, "RC2")) |
|
{ |
|
return new AlgorithmIdentifier( |
|
PkcsObjectIdentifiers.IdAlgCmsRC2Wrap, |
|
new DerInteger(58)); |
|
} |
|
else if (BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.StartsWith(algorithm, "AES")) |
|
{ |
|
int length = key.GetKey().Length * 8; |
|
DerObjectIdentifier wrapOid; |
|
|
|
if (length == 128) |
|
{ |
|
wrapOid = NistObjectIdentifiers.IdAes128Wrap; |
|
} |
|
else if (length == 192) |
|
{ |
|
wrapOid = NistObjectIdentifiers.IdAes192Wrap; |
|
} |
|
else if (length == 256) |
|
{ |
|
wrapOid = NistObjectIdentifiers.IdAes256Wrap; |
|
} |
|
else |
|
{ |
|
throw new ArgumentException("illegal keysize in AES"); |
|
} |
|
|
|
return new AlgorithmIdentifier(wrapOid); // parameters absent |
|
} |
|
else if (BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.StartsWith(algorithm, "SEED")) |
|
{ |
|
// parameters absent |
|
return new AlgorithmIdentifier(KisaObjectIdentifiers.IdNpkiAppCmsSeedWrap); |
|
} |
|
else if (BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.StartsWith(algorithm, "CAMELLIA")) |
|
{ |
|
int length = key.GetKey().Length * 8; |
|
DerObjectIdentifier wrapOid; |
|
|
|
if (length == 128) |
|
{ |
|
wrapOid = NttObjectIdentifiers.IdCamellia128Wrap; |
|
} |
|
else if (length == 192) |
|
{ |
|
wrapOid = NttObjectIdentifiers.IdCamellia192Wrap; |
|
} |
|
else if (length == 256) |
|
{ |
|
wrapOid = NttObjectIdentifiers.IdCamellia256Wrap; |
|
} |
|
else |
|
{ |
|
throw new ArgumentException("illegal keysize in Camellia"); |
|
} |
|
|
|
return new AlgorithmIdentifier(wrapOid); // parameters must be absent |
|
} |
|
else |
|
{ |
|
throw new ArgumentException("unknown algorithm"); |
|
} |
|
} |
|
} |
|
} |
|
#pragma warning restore |
|
#endif
|
|
|