blob: 47a311b9406c2935b97aac953330e0ed55aff186 [file] [log] [blame]
Paul Bakkerc70b9822013-04-07 22:00:46 +02001/**
2 * \file oid.c
3 *
4 * \brief Object Identifier (OID) database
5 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02006 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02007 * SPDX-License-Identifier: Apache-2.0
8 *
9 * Licensed under the Apache License, Version 2.0 (the "License"); you may
10 * not use this file except in compliance with the License.
11 * You may obtain a copy of the License at
12 *
13 * http://www.apache.org/licenses/LICENSE-2.0
14 *
15 * Unless required by applicable law or agreed to in writing, software
16 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
17 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
18 * See the License for the specific language governing permissions and
19 * limitations under the License.
Paul Bakkerc70b9822013-04-07 22:00:46 +020020 */
21
Gilles Peskinedb09ef62020-06-03 01:43:33 +020022#include "common.h"
Paul Bakkerc70b9822013-04-07 22:00:46 +020023
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020024#if defined(MBEDTLS_OID_C)
Paul Bakkerc70b9822013-04-07 22:00:46 +020025
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000026#include "mbedtls/oid.h"
27#include "mbedtls/rsa.h"
Janos Follath24eed8d2019-11-22 13:21:35 +000028#include "mbedtls/error.h"
Valerio Setti178b5bd2023-02-13 10:04:28 +010029#include "mbedtls/pk.h"
Paul Bakkerc70b9822013-04-07 22:00:46 +020030
Rich Evans00ab4702015-02-06 13:43:58 +000031#include <stdio.h>
32#include <string.h>
33
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000034#include "mbedtls/platform.h"
Rich Evans8f3a9432015-01-30 10:54:04 +000035
Paul Bakkerdd1150e2013-06-28 17:20:22 +020036/*
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +020037 * Macro to automatically add the size of #define'd OIDs
38 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020039#define ADD_LEN(s) s, MBEDTLS_OID_SIZE(s)
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +020040
41/*
Peter Kolbus9a969b62018-12-11 13:55:56 -060042 * Macro to generate mbedtls_oid_descriptor_t
43 */
Hanno Becker612a2f12020-10-09 09:19:39 +010044#if !defined(MBEDTLS_X509_REMOVE_INFO)
Peter Kolbus9a969b62018-12-11 13:55:56 -060045#define OID_DESCRIPTOR(s, name, description) { ADD_LEN(s), name, description }
46#define NULL_OID_DESCRIPTOR { NULL, 0, NULL, NULL }
47#else
48#define OID_DESCRIPTOR(s, name, description) { ADD_LEN(s) }
49#define NULL_OID_DESCRIPTOR { NULL, 0 }
50#endif
51
52/*
Paul Bakkerdd1150e2013-06-28 17:20:22 +020053 * Macro to generate an internal function for oid_XXX_from_asn1() (used by
54 * the other functions)
55 */
Gilles Peskine449bd832023-01-11 14:50:10 +010056#define FN_OID_TYPED_FROM_ASN1(TYPE_T, NAME, LIST) \
57 static const TYPE_T *oid_ ## NAME ## _from_asn1( \
58 const mbedtls_asn1_buf *oid) \
Hanno Becker1eeca412018-10-15 12:01:35 +010059 { \
60 const TYPE_T *p = (LIST); \
61 const mbedtls_oid_descriptor_t *cur = \
62 (const mbedtls_oid_descriptor_t *) p; \
Gilles Peskine449bd832023-01-11 14:50:10 +010063 if (p == NULL || oid == NULL) return NULL; \
64 while (cur->asn1 != NULL) { \
65 if (cur->asn1_len == oid->len && \
66 memcmp(cur->asn1, oid->p, oid->len) == 0) { \
67 return p; \
Hanno Becker1eeca412018-10-15 12:01:35 +010068 } \
69 p++; \
70 cur = (const mbedtls_oid_descriptor_t *) p; \
71 } \
Gilles Peskine449bd832023-01-11 14:50:10 +010072 return NULL; \
Hanno Becker1eeca412018-10-15 12:01:35 +010073 }
Paul Bakkerbd51ad52013-06-28 16:51:52 +020074
Hanno Becker612a2f12020-10-09 09:19:39 +010075#if !defined(MBEDTLS_X509_REMOVE_INFO)
Paul Bakkerbd51ad52013-06-28 16:51:52 +020076/*
Paul Bakkerdd1150e2013-06-28 17:20:22 +020077 * Macro to generate a function for retrieving a single attribute from the
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020078 * descriptor of an mbedtls_oid_descriptor_t wrapper.
Paul Bakkerdd1150e2013-06-28 17:20:22 +020079 */
80#define FN_OID_GET_DESCRIPTOR_ATTR1(FN_NAME, TYPE_T, TYPE_NAME, ATTR1_TYPE, ATTR1) \
Gilles Peskine449bd832023-01-11 14:50:10 +010081 int FN_NAME(const mbedtls_asn1_buf *oid, ATTR1_TYPE * ATTR1) \
82 { \
83 const TYPE_T *data = oid_ ## TYPE_NAME ## _from_asn1(oid); \
84 if (data == NULL) return MBEDTLS_ERR_OID_NOT_FOUND; \
85 *ATTR1 = data->descriptor.ATTR1; \
86 return 0; \
87 }
Hanno Becker612a2f12020-10-09 09:19:39 +010088#endif /* MBEDTLS_X509_REMOVE_INFO */
Paul Bakkerdd1150e2013-06-28 17:20:22 +020089
90/*
91 * Macro to generate a function for retrieving a single attribute from an
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020092 * mbedtls_oid_descriptor_t wrapper.
Paul Bakkerdd1150e2013-06-28 17:20:22 +020093 */
94#define FN_OID_GET_ATTR1(FN_NAME, TYPE_T, TYPE_NAME, ATTR1_TYPE, ATTR1) \
Gilles Peskine449bd832023-01-11 14:50:10 +010095 int FN_NAME(const mbedtls_asn1_buf *oid, ATTR1_TYPE * ATTR1) \
96 { \
97 const TYPE_T *data = oid_ ## TYPE_NAME ## _from_asn1(oid); \
98 if (data == NULL) return MBEDTLS_ERR_OID_NOT_FOUND; \
99 *ATTR1 = data->ATTR1; \
100 return 0; \
101 }
Paul Bakkerdd1150e2013-06-28 17:20:22 +0200102
103/*
104 * Macro to generate a function for retrieving two attributes from an
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200105 * mbedtls_oid_descriptor_t wrapper.
Paul Bakkerdd1150e2013-06-28 17:20:22 +0200106 */
107#define FN_OID_GET_ATTR2(FN_NAME, TYPE_T, TYPE_NAME, ATTR1_TYPE, ATTR1, \
108 ATTR2_TYPE, ATTR2) \
Gilles Peskine449bd832023-01-11 14:50:10 +0100109 int FN_NAME(const mbedtls_asn1_buf *oid, ATTR1_TYPE * ATTR1, \
110 ATTR2_TYPE * ATTR2) \
111 { \
112 const TYPE_T *data = oid_ ## TYPE_NAME ## _from_asn1(oid); \
113 if (data == NULL) return MBEDTLS_ERR_OID_NOT_FOUND; \
114 *(ATTR1) = data->ATTR1; \
115 *(ATTR2) = data->ATTR2; \
116 return 0; \
117 }
Paul Bakkerdd1150e2013-06-28 17:20:22 +0200118
119/*
Paul Bakkerce6ae232013-06-28 18:05:35 +0200120 * Macro to generate a function for retrieving the OID based on a single
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200121 * attribute from a mbedtls_oid_descriptor_t wrapper.
Paul Bakkerce6ae232013-06-28 18:05:35 +0200122 */
123#define FN_OID_GET_OID_BY_ATTR1(FN_NAME, TYPE_T, LIST, ATTR1_TYPE, ATTR1) \
Gilles Peskine449bd832023-01-11 14:50:10 +0100124 int FN_NAME(ATTR1_TYPE ATTR1, const char **oid, size_t *olen) \
125 { \
126 const TYPE_T *cur = (LIST); \
127 while (cur->descriptor.asn1 != NULL) { \
128 if (cur->ATTR1 == (ATTR1)) { \
129 *oid = cur->descriptor.asn1; \
130 *olen = cur->descriptor.asn1_len; \
131 return 0; \
132 } \
133 cur++; \
134 } \
135 return MBEDTLS_ERR_OID_NOT_FOUND; \
136 }
Paul Bakkerce6ae232013-06-28 18:05:35 +0200137
138/*
139 * Macro to generate a function for retrieving the OID based on two
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200140 * attributes from a mbedtls_oid_descriptor_t wrapper.
Paul Bakkerce6ae232013-06-28 18:05:35 +0200141 */
142#define FN_OID_GET_OID_BY_ATTR2(FN_NAME, TYPE_T, LIST, ATTR1_TYPE, ATTR1, \
143 ATTR2_TYPE, ATTR2) \
Gilles Peskine449bd832023-01-11 14:50:10 +0100144 int FN_NAME(ATTR1_TYPE ATTR1, ATTR2_TYPE ATTR2, const char **oid, \
145 size_t *olen) \
146 { \
147 const TYPE_T *cur = (LIST); \
148 while (cur->descriptor.asn1 != NULL) { \
149 if (cur->ATTR1 == (ATTR1) && cur->ATTR2 == (ATTR2)) { \
150 *oid = cur->descriptor.asn1; \
151 *olen = cur->descriptor.asn1_len; \
152 return 0; \
153 } \
154 cur++; \
155 } \
156 return MBEDTLS_ERR_OID_NOT_FOUND; \
157 }
Paul Bakkerce6ae232013-06-28 18:05:35 +0200158
159/*
Paul Bakkerc70b9822013-04-07 22:00:46 +0200160 * For X520 attribute types
161 */
162typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200163 mbedtls_oid_descriptor_t descriptor;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200164 const char *short_name;
165} oid_x520_attr_t;
166
167static const oid_x520_attr_t oid_x520_attr_type[] =
168{
169 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100170 OID_DESCRIPTOR(MBEDTLS_OID_AT_CN, "id-at-commonName", "Common Name"),
Paul Bakkerc70b9822013-04-07 22:00:46 +0200171 "CN",
172 },
173 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100174 OID_DESCRIPTOR(MBEDTLS_OID_AT_COUNTRY, "id-at-countryName", "Country"),
Paul Bakkerc70b9822013-04-07 22:00:46 +0200175 "C",
176 },
177 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100178 OID_DESCRIPTOR(MBEDTLS_OID_AT_LOCALITY, "id-at-locality", "Locality"),
Paul Bakkerc70b9822013-04-07 22:00:46 +0200179 "L",
180 },
181 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100182 OID_DESCRIPTOR(MBEDTLS_OID_AT_STATE, "id-at-state", "State"),
Paul Bakkerc70b9822013-04-07 22:00:46 +0200183 "ST",
184 },
185 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100186 OID_DESCRIPTOR(MBEDTLS_OID_AT_ORGANIZATION, "id-at-organizationName",
187 "Organization"),
Paul Bakkerc70b9822013-04-07 22:00:46 +0200188 "O",
189 },
190 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100191 OID_DESCRIPTOR(MBEDTLS_OID_AT_ORG_UNIT, "id-at-organizationalUnitName", "Org Unit"),
Paul Bakkerc70b9822013-04-07 22:00:46 +0200192 "OU",
193 },
194 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100195 OID_DESCRIPTOR(MBEDTLS_OID_PKCS9_EMAIL,
196 "emailAddress",
197 "E-mail address"),
Paul Bakkerc70b9822013-04-07 22:00:46 +0200198 "emailAddress",
199 },
200 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100201 OID_DESCRIPTOR(MBEDTLS_OID_AT_SERIAL_NUMBER,
202 "id-at-serialNumber",
203 "Serial number"),
Paul Bakker7b0be682013-10-29 14:24:37 +0100204 "serialNumber",
205 },
206 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100207 OID_DESCRIPTOR(MBEDTLS_OID_AT_POSTAL_ADDRESS,
208 "id-at-postalAddress",
209 "Postal address"),
Paul Bakker7b0be682013-10-29 14:24:37 +0100210 "postalAddress",
211 },
212 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100213 OID_DESCRIPTOR(MBEDTLS_OID_AT_POSTAL_CODE, "id-at-postalCode", "Postal code"),
Paul Bakker7b0be682013-10-29 14:24:37 +0100214 "postalCode",
215 },
216 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100217 OID_DESCRIPTOR(MBEDTLS_OID_AT_SUR_NAME, "id-at-surName", "Surname"),
Paul Bakker63844402014-04-30 15:34:12 +0200218 "SN",
219 },
220 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100221 OID_DESCRIPTOR(MBEDTLS_OID_AT_GIVEN_NAME, "id-at-givenName", "Given name"),
Paul Bakker63844402014-04-30 15:34:12 +0200222 "GN",
223 },
224 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100225 OID_DESCRIPTOR(MBEDTLS_OID_AT_INITIALS, "id-at-initials", "Initials"),
Paul Bakker63844402014-04-30 15:34:12 +0200226 "initials",
227 },
228 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100229 OID_DESCRIPTOR(MBEDTLS_OID_AT_GENERATION_QUALIFIER,
230 "id-at-generationQualifier",
231 "Generation qualifier"),
Paul Bakker63844402014-04-30 15:34:12 +0200232 "generationQualifier",
233 },
234 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100235 OID_DESCRIPTOR(MBEDTLS_OID_AT_TITLE, "id-at-title", "Title"),
Paul Bakker63844402014-04-30 15:34:12 +0200236 "title",
237 },
238 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100239 OID_DESCRIPTOR(MBEDTLS_OID_AT_DN_QUALIFIER,
240 "id-at-dnQualifier",
241 "Distinguished Name qualifier"),
Paul Bakker63844402014-04-30 15:34:12 +0200242 "dnQualifier",
243 },
244 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100245 OID_DESCRIPTOR(MBEDTLS_OID_AT_PSEUDONYM, "id-at-pseudonym", "Pseudonym"),
Paul Bakker63844402014-04-30 15:34:12 +0200246 "pseudonym",
247 },
248 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100249 OID_DESCRIPTOR(MBEDTLS_OID_UID, "id-uid", "User Id"),
Micah N Gorrell21d4bdb2021-05-12 17:41:24 -0600250 "uid",
251 },
252 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100253 OID_DESCRIPTOR(MBEDTLS_OID_DOMAIN_COMPONENT,
254 "id-domainComponent",
255 "Domain component"),
Paul Bakker63844402014-04-30 15:34:12 +0200256 "DC",
257 },
258 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100259 OID_DESCRIPTOR(MBEDTLS_OID_AT_UNIQUE_IDENTIFIER,
260 "id-at-uniqueIdentifier",
261 "Unique Identifier"),
Manuel Pégourié-Gonnard9409e0c2015-03-27 13:03:54 +0100262 "uniqueIdentifier",
263 },
264 {
Peter Kolbus9a969b62018-12-11 13:55:56 -0600265 NULL_OID_DESCRIPTOR,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200266 NULL,
267 }
268};
269
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200270FN_OID_TYPED_FROM_ASN1(oid_x520_attr_t, x520_attr, oid_x520_attr_type)
Gilles Peskine449bd832023-01-11 14:50:10 +0100271FN_OID_GET_ATTR1(mbedtls_oid_get_attr_short_name,
272 oid_x520_attr_t,
273 x520_attr,
274 const char *,
275 short_name)
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200276
Paul Bakkerc70b9822013-04-07 22:00:46 +0200277/*
278 * For X509 extensions
279 */
280typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200281 mbedtls_oid_descriptor_t descriptor;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200282 int ext_type;
283} oid_x509_ext_t;
284
285static const oid_x509_ext_t oid_x509_ext[] =
286{
287 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100288 OID_DESCRIPTOR(MBEDTLS_OID_BASIC_CONSTRAINTS,
289 "id-ce-basicConstraints",
290 "Basic Constraints"),
Manuel Pégourié-Gonnardc49ada42019-01-28 09:20:59 +0100291 MBEDTLS_OID_X509_EXT_BASIC_CONSTRAINTS,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200292 },
293 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100294 OID_DESCRIPTOR(MBEDTLS_OID_KEY_USAGE, "id-ce-keyUsage", "Key Usage"),
Manuel Pégourié-Gonnardc49ada42019-01-28 09:20:59 +0100295 MBEDTLS_OID_X509_EXT_KEY_USAGE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200296 },
297 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100298 OID_DESCRIPTOR(MBEDTLS_OID_EXTENDED_KEY_USAGE,
299 "id-ce-extKeyUsage",
300 "Extended Key Usage"),
Manuel Pégourié-Gonnardc49ada42019-01-28 09:20:59 +0100301 MBEDTLS_OID_X509_EXT_EXTENDED_KEY_USAGE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200302 },
303 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100304 OID_DESCRIPTOR(MBEDTLS_OID_SUBJECT_ALT_NAME,
305 "id-ce-subjectAltName",
306 "Subject Alt Name"),
Manuel Pégourié-Gonnardc49ada42019-01-28 09:20:59 +0100307 MBEDTLS_OID_X509_EXT_SUBJECT_ALT_NAME,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200308 },
309 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100310 OID_DESCRIPTOR(MBEDTLS_OID_NS_CERT_TYPE,
311 "id-netscape-certtype",
312 "Netscape Certificate Type"),
Manuel Pégourié-Gonnardc49ada42019-01-28 09:20:59 +0100313 MBEDTLS_OID_X509_EXT_NS_CERT_TYPE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200314 },
315 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100316 OID_DESCRIPTOR(MBEDTLS_OID_CERTIFICATE_POLICIES,
317 "id-ce-certificatePolicies",
318 "Certificate Policies"),
Ron Eldore8234162019-04-03 09:45:07 +0300319 MBEDTLS_OID_X509_EXT_CERTIFICATE_POLICIES,
320 },
321 {
Przemek Stekieldb323aa2023-01-03 09:45:13 +0100322 OID_DESCRIPTOR(MBEDTLS_OID_SUBJECT_KEY_IDENTIFIER,
323 "id-ce-subjectKeyIdentifier",
324 "Subject Key Identifier"),
toth92ga41954d2021-02-12 16:11:17 +0100325 MBEDTLS_OID_X509_EXT_SUBJECT_KEY_IDENTIFIER,
326 },
327 {
Przemek Stekieldb323aa2023-01-03 09:45:13 +0100328 OID_DESCRIPTOR(MBEDTLS_OID_AUTHORITY_KEY_IDENTIFIER,
329 "id-ce-authorityKeyIdentifier",
330 "Authority Key Identifier"),
toth92ga41954d2021-02-12 16:11:17 +0100331 MBEDTLS_OID_X509_EXT_AUTHORITY_KEY_IDENTIFIER,
332 },
333 {
Peter Kolbus9a969b62018-12-11 13:55:56 -0600334 NULL_OID_DESCRIPTOR,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200335 0,
336 },
337};
338
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200339FN_OID_TYPED_FROM_ASN1(oid_x509_ext_t, x509_ext, oid_x509_ext)
340FN_OID_GET_ATTR1(mbedtls_oid_get_x509_ext_type, oid_x509_ext_t, x509_ext, int, ext_type)
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200341
Hanno Becker612a2f12020-10-09 09:19:39 +0100342#if !defined(MBEDTLS_X509_REMOVE_INFO)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200343static const mbedtls_oid_descriptor_t oid_ext_key_usage[] =
Paul Bakkerc70b9822013-04-07 22:00:46 +0200344{
Gilles Peskine449bd832023-01-11 14:50:10 +0100345 OID_DESCRIPTOR(MBEDTLS_OID_SERVER_AUTH,
346 "id-kp-serverAuth",
347 "TLS Web Server Authentication"),
348 OID_DESCRIPTOR(MBEDTLS_OID_CLIENT_AUTH,
349 "id-kp-clientAuth",
350 "TLS Web Client Authentication"),
351 OID_DESCRIPTOR(MBEDTLS_OID_CODE_SIGNING, "id-kp-codeSigning", "Code Signing"),
352 OID_DESCRIPTOR(MBEDTLS_OID_EMAIL_PROTECTION, "id-kp-emailProtection", "E-mail Protection"),
353 OID_DESCRIPTOR(MBEDTLS_OID_TIME_STAMPING, "id-kp-timeStamping", "Time Stamping"),
354 OID_DESCRIPTOR(MBEDTLS_OID_OCSP_SIGNING, "id-kp-OCSPSigning", "OCSP Signing"),
355 OID_DESCRIPTOR(MBEDTLS_OID_WISUN_FAN,
356 "id-kp-wisun-fan-device",
357 "Wi-SUN Alliance Field Area Network (FAN)"),
Peter Kolbus9a969b62018-12-11 13:55:56 -0600358 NULL_OID_DESCRIPTOR,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200359};
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200360
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200361FN_OID_TYPED_FROM_ASN1(mbedtls_oid_descriptor_t, ext_key_usage, oid_ext_key_usage)
Gilles Peskine449bd832023-01-11 14:50:10 +0100362FN_OID_GET_ATTR1(mbedtls_oid_get_extended_key_usage,
363 mbedtls_oid_descriptor_t,
364 ext_key_usage,
365 const char *,
366 description)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200367
Ron Eldor11ee0712019-03-25 18:22:52 +0200368static const mbedtls_oid_descriptor_t oid_certificate_policies[] =
369{
Gilles Peskine449bd832023-01-11 14:50:10 +0100370 OID_DESCRIPTOR(MBEDTLS_OID_ANY_POLICY, "anyPolicy", "Any Policy"),
Peter Kolbus9a969b62018-12-11 13:55:56 -0600371 NULL_OID_DESCRIPTOR,
Ron Eldor11ee0712019-03-25 18:22:52 +0200372};
373
374FN_OID_TYPED_FROM_ASN1(mbedtls_oid_descriptor_t, certificate_policies, oid_certificate_policies)
Gilles Peskine449bd832023-01-11 14:50:10 +0100375FN_OID_GET_ATTR1(mbedtls_oid_get_certificate_policies,
376 mbedtls_oid_descriptor_t,
377 certificate_policies,
378 const char *,
379 description)
Hanno Becker612a2f12020-10-09 09:19:39 +0100380#endif /* MBEDTLS_X509_REMOVE_INFO */
Ron Eldor11ee0712019-03-25 18:22:52 +0200381
Paul Bakkerc70b9822013-04-07 22:00:46 +0200382/*
383 * For SignatureAlgorithmIdentifier
384 */
385typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200386 mbedtls_oid_descriptor_t descriptor;
387 mbedtls_md_type_t md_alg;
388 mbedtls_pk_type_t pk_alg;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200389} oid_sig_alg_t;
390
391static const oid_sig_alg_t oid_sig_alg[] =
392{
palaviv06f18282016-08-06 23:00:38 +0300393#if defined(MBEDTLS_RSA_C)
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100394#if defined(MBEDTLS_MD_CAN_MD5)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200395 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100396 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_MD5, "md5WithRSAEncryption", "RSA with MD5"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200397 MBEDTLS_MD_MD5, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200398 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100399#endif /* MBEDTLS_MD_CAN_MD5 */
400#if defined(MBEDTLS_MD_CAN_SHA1)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200401 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100402 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_SHA1, "sha-1WithRSAEncryption", "RSA with SHA1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200403 MBEDTLS_MD_SHA1, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200404 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100405#endif /* MBEDTLS_MD_CAN_SHA1 */
406#if defined(MBEDTLS_MD_CAN_SHA224)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200407 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100408 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_SHA224, "sha224WithRSAEncryption",
409 "RSA with SHA-224"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200410 MBEDTLS_MD_SHA224, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200411 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100412#endif /* MBEDTLS_MD_CAN_SHA224 */
413#if defined(MBEDTLS_MD_CAN_SHA256)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200414 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100415 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_SHA256, "sha256WithRSAEncryption",
416 "RSA with SHA-256"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200417 MBEDTLS_MD_SHA256, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200418 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100419#endif /* MBEDTLS_MD_CAN_SHA256 */
420#if defined(MBEDTLS_MD_CAN_SHA384)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200421 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100422 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_SHA384, "sha384WithRSAEncryption",
423 "RSA with SHA-384"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200424 MBEDTLS_MD_SHA384, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200425 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100426#endif /* MBEDTLS_MD_CAN_SHA384 */
427#if defined(MBEDTLS_MD_CAN_SHA512)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200428 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100429 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_SHA512, "sha512WithRSAEncryption",
430 "RSA with SHA-512"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200431 MBEDTLS_MD_SHA512, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200432 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100433#endif /* MBEDTLS_MD_CAN_SHA512 */
434#if defined(MBEDTLS_MD_CAN_SHA1)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200435 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100436 OID_DESCRIPTOR(MBEDTLS_OID_RSA_SHA_OBS, "sha-1WithRSAEncryption", "RSA with SHA1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200437 MBEDTLS_MD_SHA1, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200438 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100439#endif /* MBEDTLS_MD_CAN_SHA1 */
palaviv06f18282016-08-06 23:00:38 +0300440#endif /* MBEDTLS_RSA_C */
Valerio Settif972ce82023-01-31 14:29:55 +0100441#if defined(MBEDTLS_PK_CAN_ECDSA_SOME)
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100442#if defined(MBEDTLS_MD_CAN_SHA1)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200443 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100444 OID_DESCRIPTOR(MBEDTLS_OID_ECDSA_SHA1, "ecdsa-with-SHA1", "ECDSA with SHA1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200445 MBEDTLS_MD_SHA1, MBEDTLS_PK_ECDSA,
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200446 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100447#endif /* MBEDTLS_MD_CAN_SHA1 */
448#if defined(MBEDTLS_MD_CAN_SHA224)
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200449 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100450 OID_DESCRIPTOR(MBEDTLS_OID_ECDSA_SHA224, "ecdsa-with-SHA224", "ECDSA with SHA224"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200451 MBEDTLS_MD_SHA224, MBEDTLS_PK_ECDSA,
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200452 },
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200453#endif
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100454#if defined(MBEDTLS_MD_CAN_SHA256)
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200455 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100456 OID_DESCRIPTOR(MBEDTLS_OID_ECDSA_SHA256, "ecdsa-with-SHA256", "ECDSA with SHA256"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200457 MBEDTLS_MD_SHA256, MBEDTLS_PK_ECDSA,
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200458 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100459#endif /* MBEDTLS_MD_CAN_SHA256 */
460#if defined(MBEDTLS_MD_CAN_SHA384)
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200461 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100462 OID_DESCRIPTOR(MBEDTLS_OID_ECDSA_SHA384, "ecdsa-with-SHA384", "ECDSA with SHA384"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200463 MBEDTLS_MD_SHA384, MBEDTLS_PK_ECDSA,
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200464 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100465#endif /* MBEDTLS_MD_CAN_SHA384 */
466#if defined(MBEDTLS_MD_CAN_SHA512)
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200467 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100468 OID_DESCRIPTOR(MBEDTLS_OID_ECDSA_SHA512, "ecdsa-with-SHA512", "ECDSA with SHA512"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200469 MBEDTLS_MD_SHA512, MBEDTLS_PK_ECDSA,
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200470 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100471#endif /* MBEDTLS_MD_CAN_SHA512 */
Valerio Settice0caa32023-02-02 14:18:52 +0100472#endif /* MBEDTLS_PK_CAN_ECDSA_SOME */
palaviv06f18282016-08-06 23:00:38 +0300473#if defined(MBEDTLS_RSA_C)
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200474 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100475 OID_DESCRIPTOR(MBEDTLS_OID_RSASSA_PSS, "RSASSA-PSS", "RSASSA-PSS"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200476 MBEDTLS_MD_NONE, MBEDTLS_PK_RSASSA_PSS,
Manuel Pégourié-Gonnard59a75d52014-01-22 10:12:57 +0100477 },
palaviv06f18282016-08-06 23:00:38 +0300478#endif /* MBEDTLS_RSA_C */
Manuel Pégourié-Gonnard59a75d52014-01-22 10:12:57 +0100479 {
Peter Kolbus9a969b62018-12-11 13:55:56 -0600480 NULL_OID_DESCRIPTOR,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200481 MBEDTLS_MD_NONE, MBEDTLS_PK_NONE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200482 },
483};
484
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200485FN_OID_TYPED_FROM_ASN1(oid_sig_alg_t, sig_alg, oid_sig_alg)
Peter Kolbus9a969b62018-12-11 13:55:56 -0600486
Hanno Becker612a2f12020-10-09 09:19:39 +0100487#if !defined(MBEDTLS_X509_REMOVE_INFO)
Gilles Peskine449bd832023-01-11 14:50:10 +0100488FN_OID_GET_DESCRIPTOR_ATTR1(mbedtls_oid_get_sig_alg_desc,
489 oid_sig_alg_t,
490 sig_alg,
491 const char *,
492 description)
Peter Kolbus9a969b62018-12-11 13:55:56 -0600493#endif
494
Gilles Peskine449bd832023-01-11 14:50:10 +0100495FN_OID_GET_ATTR2(mbedtls_oid_get_sig_alg,
496 oid_sig_alg_t,
497 sig_alg,
498 mbedtls_md_type_t,
499 md_alg,
500 mbedtls_pk_type_t,
501 pk_alg)
502FN_OID_GET_OID_BY_ATTR2(mbedtls_oid_get_oid_by_sig_alg,
503 oid_sig_alg_t,
504 oid_sig_alg,
505 mbedtls_pk_type_t,
506 pk_alg,
507 mbedtls_md_type_t,
508 md_alg)
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200509
Paul Bakkerc70b9822013-04-07 22:00:46 +0200510/*
Manuel Pégourié-Gonnard5a9b82e2013-07-01 16:57:44 +0200511 * For PublicKeyInfo (PKCS1, RFC 5480)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200512 */
513typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200514 mbedtls_oid_descriptor_t descriptor;
515 mbedtls_pk_type_t pk_alg;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200516} oid_pk_alg_t;
517
518static const oid_pk_alg_t oid_pk_alg[] =
519{
520 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100521 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_RSA, "rsaEncryption", "RSA"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200522 MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200523 },
524 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100525 OID_DESCRIPTOR(MBEDTLS_OID_EC_ALG_UNRESTRICTED, "id-ecPublicKey", "Generic EC key"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200526 MBEDTLS_PK_ECKEY,
Manuel Pégourié-Gonnard5a9b82e2013-07-01 16:57:44 +0200527 },
528 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100529 OID_DESCRIPTOR(MBEDTLS_OID_EC_ALG_ECDH, "id-ecDH", "EC key for ECDH"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200530 MBEDTLS_PK_ECKEY_DH,
Manuel Pégourié-Gonnard5a9b82e2013-07-01 16:57:44 +0200531 },
532 {
Peter Kolbus9a969b62018-12-11 13:55:56 -0600533 NULL_OID_DESCRIPTOR,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200534 MBEDTLS_PK_NONE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200535 },
536};
537
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200538FN_OID_TYPED_FROM_ASN1(oid_pk_alg_t, pk_alg, oid_pk_alg)
539FN_OID_GET_ATTR1(mbedtls_oid_get_pk_alg, oid_pk_alg_t, pk_alg, mbedtls_pk_type_t, pk_alg)
Gilles Peskine449bd832023-01-11 14:50:10 +0100540FN_OID_GET_OID_BY_ATTR1(mbedtls_oid_get_oid_by_pk_alg,
541 oid_pk_alg_t,
542 oid_pk_alg,
543 mbedtls_pk_type_t,
544 pk_alg)
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200545
Valerio Setti81d75122023-06-14 14:49:33 +0200546#if defined(MBEDTLS_PK_HAVE_ECC_KEYS)
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200547/*
Jethro Beekman01672442023-04-19 14:08:14 +0200548 * For elliptic curves that use namedCurve inside ECParams (RFC 5480)
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200549 */
550typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200551 mbedtls_oid_descriptor_t descriptor;
552 mbedtls_ecp_group_id grp_id;
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200553} oid_ecp_grp_t;
554
555static const oid_ecp_grp_t oid_ecp_grp[] =
556{
palaviva9f90f02016-08-06 23:10:49 +0300557#if defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED)
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200558 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100559 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP192R1, "secp192r1", "secp192r1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200560 MBEDTLS_ECP_DP_SECP192R1,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200561 },
palaviva9f90f02016-08-06 23:10:49 +0300562#endif /* MBEDTLS_ECP_DP_SECP192R1_ENABLED */
563#if defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED)
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200564 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100565 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP224R1, "secp224r1", "secp224r1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200566 MBEDTLS_ECP_DP_SECP224R1,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200567 },
palaviva9f90f02016-08-06 23:10:49 +0300568#endif /* MBEDTLS_ECP_DP_SECP224R1_ENABLED */
569#if defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED)
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200570 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100571 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP256R1, "secp256r1", "secp256r1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200572 MBEDTLS_ECP_DP_SECP256R1,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200573 },
palaviva9f90f02016-08-06 23:10:49 +0300574#endif /* MBEDTLS_ECP_DP_SECP256R1_ENABLED */
575#if defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED)
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200576 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100577 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP384R1, "secp384r1", "secp384r1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200578 MBEDTLS_ECP_DP_SECP384R1,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200579 },
palaviva9f90f02016-08-06 23:10:49 +0300580#endif /* MBEDTLS_ECP_DP_SECP384R1_ENABLED */
581#if defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED)
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200582 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100583 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP521R1, "secp521r1", "secp521r1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200584 MBEDTLS_ECP_DP_SECP521R1,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200585 },
palaviva9f90f02016-08-06 23:10:49 +0300586#endif /* MBEDTLS_ECP_DP_SECP521R1_ENABLED */
587#if defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED)
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200588 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100589 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP192K1, "secp192k1", "secp192k1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200590 MBEDTLS_ECP_DP_SECP192K1,
Manuel Pégourié-Gonnard9bcff392014-01-10 18:26:48 +0100591 },
palaviva9f90f02016-08-06 23:10:49 +0300592#endif /* MBEDTLS_ECP_DP_SECP192K1_ENABLED */
593#if defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED)
Manuel Pégourié-Gonnard9bcff392014-01-10 18:26:48 +0100594 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100595 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP224K1, "secp224k1", "secp224k1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200596 MBEDTLS_ECP_DP_SECP224K1,
Manuel Pégourié-Gonnard9bcff392014-01-10 18:26:48 +0100597 },
palaviva9f90f02016-08-06 23:10:49 +0300598#endif /* MBEDTLS_ECP_DP_SECP224K1_ENABLED */
599#if defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED)
Manuel Pégourié-Gonnard9bcff392014-01-10 18:26:48 +0100600 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100601 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP256K1, "secp256k1", "secp256k1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200602 MBEDTLS_ECP_DP_SECP256K1,
Manuel Pégourié-Gonnard9bcff392014-01-10 18:26:48 +0100603 },
palaviva9f90f02016-08-06 23:10:49 +0300604#endif /* MBEDTLS_ECP_DP_SECP256K1_ENABLED */
605#if defined(MBEDTLS_ECP_DP_BP256R1_ENABLED)
Manuel Pégourié-Gonnard9bcff392014-01-10 18:26:48 +0100606 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100607 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_BP256R1, "brainpoolP256r1", "brainpool256r1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200608 MBEDTLS_ECP_DP_BP256R1,
Manuel Pégourié-Gonnard48ac3db2013-10-10 15:11:33 +0200609 },
palaviva9f90f02016-08-06 23:10:49 +0300610#endif /* MBEDTLS_ECP_DP_BP256R1_ENABLED */
611#if defined(MBEDTLS_ECP_DP_BP384R1_ENABLED)
Manuel Pégourié-Gonnard48ac3db2013-10-10 15:11:33 +0200612 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100613 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_BP384R1, "brainpoolP384r1", "brainpool384r1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200614 MBEDTLS_ECP_DP_BP384R1,
Manuel Pégourié-Gonnard48ac3db2013-10-10 15:11:33 +0200615 },
palaviva9f90f02016-08-06 23:10:49 +0300616#endif /* MBEDTLS_ECP_DP_BP384R1_ENABLED */
617#if defined(MBEDTLS_ECP_DP_BP512R1_ENABLED)
Manuel Pégourié-Gonnard48ac3db2013-10-10 15:11:33 +0200618 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100619 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_BP512R1, "brainpoolP512r1", "brainpool512r1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200620 MBEDTLS_ECP_DP_BP512R1,
Manuel Pégourié-Gonnard48ac3db2013-10-10 15:11:33 +0200621 },
palaviva9f90f02016-08-06 23:10:49 +0300622#endif /* MBEDTLS_ECP_DP_BP512R1_ENABLED */
Manuel Pégourié-Gonnard48ac3db2013-10-10 15:11:33 +0200623 {
Peter Kolbus9a969b62018-12-11 13:55:56 -0600624 NULL_OID_DESCRIPTOR,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200625 MBEDTLS_ECP_DP_NONE,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200626 },
627};
628
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200629FN_OID_TYPED_FROM_ASN1(oid_ecp_grp_t, grp_id, oid_ecp_grp)
630FN_OID_GET_ATTR1(mbedtls_oid_get_ec_grp, oid_ecp_grp_t, grp_id, mbedtls_ecp_group_id, grp_id)
Gilles Peskine449bd832023-01-11 14:50:10 +0100631FN_OID_GET_OID_BY_ATTR1(mbedtls_oid_get_oid_by_ec_grp,
632 oid_ecp_grp_t,
633 oid_ecp_grp,
634 mbedtls_ecp_group_id,
635 grp_id)
Jethro Beekman01672442023-04-19 14:08:14 +0200636
637/*
638 * For Elliptic Curve algorithms that are directly
639 * encoded in the AlgorithmIdentifier (RFC 8410)
640 */
641typedef struct {
642 mbedtls_oid_descriptor_t descriptor;
643 mbedtls_ecp_group_id grp_id;
644} oid_ecp_grp_algid_t;
645
646static const oid_ecp_grp_algid_t oid_ecp_grp_algid[] =
647{
648#if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED)
649 {
650 OID_DESCRIPTOR(MBEDTLS_OID_X25519, "X25519", "X25519"),
651 MBEDTLS_ECP_DP_CURVE25519,
652 },
653#endif /* MBEDTLS_ECP_DP_CURVE25519_ENABLED */
654#if defined(MBEDTLS_ECP_DP_CURVE448_ENABLED)
655 {
656 OID_DESCRIPTOR(MBEDTLS_OID_X448, "X448", "X448"),
657 MBEDTLS_ECP_DP_CURVE448,
658 },
659#endif /* MBEDTLS_ECP_DP_CURVE448_ENABLED */
660 {
661 NULL_OID_DESCRIPTOR,
662 MBEDTLS_ECP_DP_NONE,
663 },
664};
665
666FN_OID_TYPED_FROM_ASN1(oid_ecp_grp_algid_t, grp_id_algid, oid_ecp_grp_algid)
667FN_OID_GET_ATTR1(mbedtls_oid_get_ec_grp_algid,
668 oid_ecp_grp_algid_t,
669 grp_id_algid,
670 mbedtls_ecp_group_id,
671 grp_id)
672FN_OID_GET_OID_BY_ATTR1(mbedtls_oid_get_oid_by_ec_grp_algid,
673 oid_ecp_grp_algid_t,
674 oid_ecp_grp_algid,
675 mbedtls_ecp_group_id,
676 grp_id)
Valerio Setti81d75122023-06-14 14:49:33 +0200677#endif /* MBEDTLS_PK_HAVE_ECC_KEYS */
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200678
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200679#if defined(MBEDTLS_CIPHER_C)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200680/*
Paul Bakker9b5e8852013-06-28 16:12:50 +0200681 * For PKCS#5 PBES2 encryption algorithm
682 */
683typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200684 mbedtls_oid_descriptor_t descriptor;
685 mbedtls_cipher_type_t cipher_alg;
Paul Bakker9b5e8852013-06-28 16:12:50 +0200686} oid_cipher_alg_t;
687
688static const oid_cipher_alg_t oid_cipher_alg[] =
689{
690 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100691 OID_DESCRIPTOR(MBEDTLS_OID_DES_CBC, "desCBC", "DES-CBC"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200692 MBEDTLS_CIPHER_DES_CBC,
Paul Bakker9b5e8852013-06-28 16:12:50 +0200693 },
694 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100695 OID_DESCRIPTOR(MBEDTLS_OID_DES_EDE3_CBC, "des-ede3-cbc", "DES-EDE3-CBC"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200696 MBEDTLS_CIPHER_DES_EDE3_CBC,
Paul Bakker9b5e8852013-06-28 16:12:50 +0200697 },
698 {
Peter Kolbus9a969b62018-12-11 13:55:56 -0600699 NULL_OID_DESCRIPTOR,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200700 MBEDTLS_CIPHER_NONE,
Paul Bakker9b5e8852013-06-28 16:12:50 +0200701 },
702};
703
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200704FN_OID_TYPED_FROM_ASN1(oid_cipher_alg_t, cipher_alg, oid_cipher_alg)
Gilles Peskine449bd832023-01-11 14:50:10 +0100705FN_OID_GET_ATTR1(mbedtls_oid_get_cipher_alg,
706 oid_cipher_alg_t,
707 cipher_alg,
708 mbedtls_cipher_type_t,
709 cipher_alg)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200710#endif /* MBEDTLS_CIPHER_C */
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200711
Paul Bakker9b5e8852013-06-28 16:12:50 +0200712/*
Paul Bakkerc70b9822013-04-07 22:00:46 +0200713 * For digestAlgorithm
714 */
715typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200716 mbedtls_oid_descriptor_t descriptor;
717 mbedtls_md_type_t md_alg;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200718} oid_md_alg_t;
719
720static const oid_md_alg_t oid_md_alg[] =
721{
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100722#if defined(MBEDTLS_MD_CAN_MD5)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200723 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100724 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_MD5, "id-md5", "MD5"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200725 MBEDTLS_MD_MD5,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200726 },
Manuel Pégourié-Gonnardfe2b9b52022-07-05 11:35:52 +0200727#endif
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100728#if defined(MBEDTLS_MD_CAN_SHA1)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200729 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100730 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA1, "id-sha1", "SHA-1"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200731 MBEDTLS_MD_SHA1,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200732 },
Manuel Pégourié-Gonnardfe2b9b52022-07-05 11:35:52 +0200733#endif
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100734#if defined(MBEDTLS_MD_CAN_SHA224)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200735 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100736 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA224, "id-sha224", "SHA-224"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200737 MBEDTLS_MD_SHA224,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200738 },
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200739#endif
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100740#if defined(MBEDTLS_MD_CAN_SHA256)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200741 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100742 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA256, "id-sha256", "SHA-256"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200743 MBEDTLS_MD_SHA256,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200744 },
Manuel Pégourié-Gonnardfe2b9b52022-07-05 11:35:52 +0200745#endif
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100746#if defined(MBEDTLS_MD_CAN_SHA384)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200747 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100748 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA384, "id-sha384", "SHA-384"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200749 MBEDTLS_MD_SHA384,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200750 },
Manuel Pégourié-Gonnardfe2b9b52022-07-05 11:35:52 +0200751#endif
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100752#if defined(MBEDTLS_MD_CAN_SHA512)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200753 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100754 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA512, "id-sha512", "SHA-512"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200755 MBEDTLS_MD_SHA512,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200756 },
Manuel Pégourié-Gonnardfe2b9b52022-07-05 11:35:52 +0200757#endif
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100758#if defined(MBEDTLS_MD_CAN_RIPEMD160)
Jack Lloyd5d9c9632019-05-01 13:43:53 -0400759 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100760 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_RIPEMD160, "id-ripemd160", "RIPEMD-160"),
Jack Lloyd5d9c9632019-05-01 13:43:53 -0400761 MBEDTLS_MD_RIPEMD160,
762 },
Manuel Pégourié-Gonnardfe2b9b52022-07-05 11:35:52 +0200763#endif
Paul Bakkerc70b9822013-04-07 22:00:46 +0200764 {
Peter Kolbus9a969b62018-12-11 13:55:56 -0600765 NULL_OID_DESCRIPTOR,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200766 MBEDTLS_MD_NONE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200767 },
768};
769
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200770FN_OID_TYPED_FROM_ASN1(oid_md_alg_t, md_alg, oid_md_alg)
771FN_OID_GET_ATTR1(mbedtls_oid_get_md_alg, oid_md_alg_t, md_alg, mbedtls_md_type_t, md_alg)
Gilles Peskine449bd832023-01-11 14:50:10 +0100772FN_OID_GET_OID_BY_ATTR1(mbedtls_oid_get_oid_by_md,
773 oid_md_alg_t,
774 oid_md_alg,
775 mbedtls_md_type_t,
776 md_alg)
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800777
778/*
779 * For HMAC digestAlgorithm
780 */
781typedef struct {
782 mbedtls_oid_descriptor_t descriptor;
783 mbedtls_md_type_t md_hmac;
784} oid_md_hmac_t;
785
786static const oid_md_hmac_t oid_md_hmac[] =
787{
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100788#if defined(MBEDTLS_MD_CAN_SHA1)
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800789 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100790 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA1, "hmacSHA1", "HMAC-SHA-1"),
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800791 MBEDTLS_MD_SHA1,
792 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100793#endif /* MBEDTLS_MD_CAN_SHA1 */
794#if defined(MBEDTLS_MD_CAN_SHA224)
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800795 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100796 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA224, "hmacSHA224", "HMAC-SHA-224"),
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800797 MBEDTLS_MD_SHA224,
798 },
Mateusz Starzyke3c48b42021-04-19 16:46:28 +0200799#endif
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100800#if defined(MBEDTLS_MD_CAN_SHA256)
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800801 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100802 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA256, "hmacSHA256", "HMAC-SHA-256"),
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800803 MBEDTLS_MD_SHA256,
804 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100805#endif /* MBEDTLS_MD_CAN_SHA256 */
806#if defined(MBEDTLS_MD_CAN_SHA384)
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800807 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100808 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA384, "hmacSHA384", "HMAC-SHA-384"),
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800809 MBEDTLS_MD_SHA384,
810 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100811#endif /* MBEDTLS_MD_CAN_SHA384 */
812#if defined(MBEDTLS_MD_CAN_SHA512)
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800813 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100814 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA512, "hmacSHA512", "HMAC-SHA-512"),
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800815 MBEDTLS_MD_SHA512,
816 },
Manuel Pégourié-Gonnardebef58d2023-03-16 12:48:24 +0100817#endif /* MBEDTLS_MD_CAN_SHA512 */
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800818 {
Peter Kolbus9a969b62018-12-11 13:55:56 -0600819 NULL_OID_DESCRIPTOR,
Antonio Quartulli12ccef22017-12-20 07:03:55 +0800820 MBEDTLS_MD_NONE,
821 },
822};
823
824FN_OID_TYPED_FROM_ASN1(oid_md_hmac_t, md_hmac, oid_md_hmac)
825FN_OID_GET_ATTR1(mbedtls_oid_get_md_hmac, oid_md_hmac_t, md_hmac, mbedtls_md_type_t, md_hmac)
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200826
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200827#if defined(MBEDTLS_PKCS12_C)
Paul Bakker7749a222013-06-28 17:28:20 +0200828/*
829 * For PKCS#12 PBEs
830 */
831typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200832 mbedtls_oid_descriptor_t descriptor;
833 mbedtls_md_type_t md_alg;
834 mbedtls_cipher_type_t cipher_alg;
Paul Bakker7749a222013-06-28 17:28:20 +0200835} oid_pkcs12_pbe_alg_t;
836
837static const oid_pkcs12_pbe_alg_t oid_pkcs12_pbe_alg[] =
838{
839 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100840 OID_DESCRIPTOR(MBEDTLS_OID_PKCS12_PBE_SHA1_DES3_EDE_CBC,
841 "pbeWithSHAAnd3-KeyTripleDES-CBC",
842 "PBE with SHA1 and 3-Key 3DES"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200843 MBEDTLS_MD_SHA1, MBEDTLS_CIPHER_DES_EDE3_CBC,
Paul Bakker7749a222013-06-28 17:28:20 +0200844 },
845 {
Gilles Peskine449bd832023-01-11 14:50:10 +0100846 OID_DESCRIPTOR(MBEDTLS_OID_PKCS12_PBE_SHA1_DES2_EDE_CBC,
847 "pbeWithSHAAnd2-KeyTripleDES-CBC",
848 "PBE with SHA1 and 2-Key 3DES"),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200849 MBEDTLS_MD_SHA1, MBEDTLS_CIPHER_DES_EDE_CBC,
Paul Bakker7749a222013-06-28 17:28:20 +0200850 },
851 {
Peter Kolbus9a969b62018-12-11 13:55:56 -0600852 NULL_OID_DESCRIPTOR,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200853 MBEDTLS_MD_NONE, MBEDTLS_CIPHER_NONE,
Paul Bakker7749a222013-06-28 17:28:20 +0200854 },
855};
856
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200857FN_OID_TYPED_FROM_ASN1(oid_pkcs12_pbe_alg_t, pkcs12_pbe_alg, oid_pkcs12_pbe_alg)
Gilles Peskine449bd832023-01-11 14:50:10 +0100858FN_OID_GET_ATTR2(mbedtls_oid_get_pkcs12_pbe_alg,
859 oid_pkcs12_pbe_alg_t,
860 pkcs12_pbe_alg,
861 mbedtls_md_type_t,
862 md_alg,
863 mbedtls_cipher_type_t,
864 cipher_alg)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200865#endif /* MBEDTLS_PKCS12_C */
Paul Bakker7749a222013-06-28 17:28:20 +0200866
Paul Bakkerc70b9822013-04-07 22:00:46 +0200867/* Return the x.y.z.... style numeric string for the given OID */
Gilles Peskine449bd832023-01-11 14:50:10 +0100868int mbedtls_oid_get_numeric_string(char *buf, size_t size,
869 const mbedtls_asn1_buf *oid)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200870{
Janos Follath24eed8d2019-11-22 13:21:35 +0000871 int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
Demi Marie Obenour889534a2023-03-11 17:45:28 -0500872 char *p = buf;
873 size_t n = size;
874 unsigned int value = 0;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200875
Demi Marie Obenour889534a2023-03-11 17:45:28 -0500876 if (size > INT_MAX) {
877 /* Avoid overflow computing return value */
878 return MBEDTLS_ERR_ASN1_INVALID_LENGTH;
David Horstmann9c1887c2023-02-15 11:48:13 +0000879 }
880
Demi Marie Obenour889534a2023-03-11 17:45:28 -0500881 if (oid->len <= 0) {
882 /* OID must not be empty */
David Horstmann5b5a0b62023-02-20 14:21:23 +0000883 return MBEDTLS_ERR_ASN1_OUT_OF_DATA;
David Horstmannc7f700c2023-02-14 14:34:15 +0000884 }
David Horstmannc7f700c2023-02-14 14:34:15 +0000885
Demi Marie Obenour889534a2023-03-11 17:45:28 -0500886 for (size_t i = 0; i < oid->len; i++) {
Manuel Pégourié-Gonnarddffba8f2013-07-01 17:33:31 +0200887 /* Prevent overflow in value. */
David Horstmann34b3f1b2023-02-15 13:46:53 +0000888 if (value > (UINT_MAX >> 7)) {
David Horstmann5b5a0b62023-02-20 14:21:23 +0000889 return MBEDTLS_ERR_ASN1_INVALID_DATA;
Gilles Peskine449bd832023-01-11 14:50:10 +0100890 }
David Horstmann9c1887c2023-02-15 11:48:13 +0000891 if ((value == 0) && ((oid->p[i]) == 0x80)) {
892 /* Overlong encoding is not allowed */
David Horstmann5b5a0b62023-02-20 14:21:23 +0000893 return MBEDTLS_ERR_ASN1_INVALID_DATA;
David Horstmann9c1887c2023-02-15 11:48:13 +0000894 }
Manuel Pégourié-Gonnarddffba8f2013-07-01 17:33:31 +0200895
Paul Bakkerc70b9822013-04-07 22:00:46 +0200896 value <<= 7;
David Horstmannf51851d2023-02-15 15:44:24 +0000897 value |= oid->p[i] & 0x7F;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200898
Gilles Peskine449bd832023-01-11 14:50:10 +0100899 if (!(oid->p[i] & 0x80)) {
Paul Bakkerc70b9822013-04-07 22:00:46 +0200900 /* Last byte */
Demi Marie Obenour889534a2023-03-11 17:45:28 -0500901 if (n == size) {
902 int component1;
903 unsigned int component2;
904 /* First subidentifier contains first two OID components */
905 if (value >= 80) {
906 component1 = '2';
907 component2 = value - 80;
908 } else if (value >= 40) {
909 component1 = '1';
910 component2 = value - 40;
911 } else {
912 component1 = '0';
913 component2 = value;
914 }
915 ret = mbedtls_snprintf(p, n, "%c.%u", component1, component2);
916 } else {
917 ret = mbedtls_snprintf(p, n, ".%u", value);
918 }
919 if (ret < 2 || (size_t) ret >= n) {
920 return MBEDTLS_ERR_OID_BUF_TOO_SMALL;
921 }
922 n -= (size_t) ret;
923 p += ret;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200924 value = 0;
925 }
926 }
927
Demi Marie Obenour889534a2023-03-11 17:45:28 -0500928 if (value != 0) {
929 /* Unterminated subidentifier */
930 return MBEDTLS_ERR_ASN1_OUT_OF_DATA;
931 }
932
Gilles Peskine449bd832023-01-11 14:50:10 +0100933 return (int) (size - n);
Paul Bakkerc70b9822013-04-07 22:00:46 +0200934}
935
David Horstmann0f4ee412023-02-21 16:17:41 +0000936static int oid_parse_number(unsigned int *num, const char **p, const char *bound)
David Horstmann92337c02023-01-18 18:40:49 +0000937{
938 int ret = MBEDTLS_ERR_ASN1_INVALID_DATA;
David Horstmannada7d722023-05-31 14:49:56 +0100939
David Horstmann0f4ee412023-02-21 16:17:41 +0000940 *num = 0;
David Horstmannada7d722023-05-31 14:49:56 +0100941
David Horstmann92337c02023-01-18 18:40:49 +0000942 while (*p < bound && **p >= '0' && **p <= '9') {
943 ret = 0;
David Horstmannce164742023-02-23 13:50:48 +0000944 if (*num > (UINT_MAX / 10)) {
David Horstmann18ec9d72023-02-20 17:18:45 +0000945 return MBEDTLS_ERR_ASN1_INVALID_DATA;
David Horstmann92337c02023-01-18 18:40:49 +0000946 }
David Horstmann0f4ee412023-02-21 16:17:41 +0000947 *num *= 10;
948 *num += **p - '0';
David Horstmann92337c02023-01-18 18:40:49 +0000949 (*p)++;
950 }
David Horstmann0f4ee412023-02-21 16:17:41 +0000951 return ret;
David Horstmann92337c02023-01-18 18:40:49 +0000952}
953
954static size_t oid_subidentifier_num_bytes(unsigned int value)
955{
David Horstmann25d65e82023-05-31 14:53:07 +0100956 size_t num_bytes = 0;
David Horstmannada7d722023-05-31 14:49:56 +0100957
David Horstmann25d65e82023-05-31 14:53:07 +0100958 do {
David Horstmann92337c02023-01-18 18:40:49 +0000959 value >>= 7;
David Horstmann25d65e82023-05-31 14:53:07 +0100960 num_bytes++;
961 } while (value != 0);
962
David Horstmann92337c02023-01-18 18:40:49 +0000963 return num_bytes;
964}
965
966static int oid_subidentifier_encode_into(unsigned char **p,
967 unsigned char *bound,
968 unsigned int value)
969{
970 size_t num_bytes = oid_subidentifier_num_bytes(value);
David Horstmannada7d722023-05-31 14:49:56 +0100971
David Horstmann92337c02023-01-18 18:40:49 +0000972 if ((size_t) (bound - *p) < num_bytes) {
973 return MBEDTLS_ERR_OID_BUF_TOO_SMALL;
974 }
975 (*p)[num_bytes - 1] = (unsigned char) (value & 0x7f);
976 value >>= 7;
977
978 for (size_t i = 2; i <= num_bytes; i++) {
979 (*p)[num_bytes - i] = 0x80 | (unsigned char) (value & 0x7f);
980 value >>= 7;
981 }
982 *p += num_bytes;
983
984 return 0;
985}
986
987/* Return the OID for the given x.y.z.... style numeric string */
988int mbedtls_oid_from_numeric_string(mbedtls_asn1_buf *oid,
David Horstmann59400ff2023-02-21 15:27:16 +0000989 const char *oid_str, size_t size)
David Horstmann92337c02023-01-18 18:40:49 +0000990{
991 int ret = MBEDTLS_ERR_ASN1_INVALID_DATA;
David Horstmann59400ff2023-02-21 15:27:16 +0000992 const char *str_ptr = oid_str;
993 const char *str_bound = oid_str + size;
David Horstmann7cdfda12023-02-21 16:20:52 +0000994 unsigned int val = 0;
David Horstmann0f4ee412023-02-21 16:17:41 +0000995 unsigned int component1, component2;
David Horstmann68833582023-05-31 17:27:28 +0100996 size_t encoded_len;
David Horstmann45d5e2d2023-06-01 15:10:33 +0100997 unsigned char *resized_mem;
David Horstmannada7d722023-05-31 14:49:56 +0100998
David Horstmann5d074162023-06-01 15:09:27 +0100999 /* Count the number of dots to get a worst-case allocation size. */
1000 size_t num_dots = 0;
David Horstmann01713972023-06-01 15:04:20 +01001001 for (size_t i = 0; i < size; i++) {
David Horstmann861e5d22023-04-19 18:15:51 +01001002 if (oid_str[i] == '.') {
1003 num_dots++;
1004 }
1005 }
1006 /* Allocate maximum possible required memory:
1007 * There are (num_dots + 1) integer components, but the first 2 share the
1008 * same subidentifier, so we only need num_dots subidentifiers maximum. */
David Horstmann96435752023-04-26 11:50:14 +01001009 if (num_dots == 0 || (num_dots > MBEDTLS_OID_MAX_COMPONENTS - 1)) {
David Horstmann861e5d22023-04-19 18:15:51 +01001010 return MBEDTLS_ERR_ASN1_INVALID_DATA;
1011 }
David Horstmann62e7fae2023-06-02 15:32:20 +01001012 /* Each byte can store 7 bits, calculate number of bytes for a
1013 * subidentifier:
1014 *
1015 * bytes = ceil(subidentifer_size * 8 / 7)
1016 */
1017 size_t bytes_per_subidentifier = (((sizeof(unsigned int) * 8) - 1) / 7)
1018 + 1;
1019 size_t max_possible_bytes = num_dots * bytes_per_subidentifier;
David Horstmann861e5d22023-04-19 18:15:51 +01001020 oid->p = mbedtls_calloc(max_possible_bytes, 1);
1021 if (oid->p == NULL) {
1022 return MBEDTLS_ERR_ASN1_ALLOC_FAILED;
1023 }
1024 unsigned char *out_ptr = oid->p;
1025 unsigned char *out_bound = oid->p + max_possible_bytes;
David Horstmann376e8df2023-02-21 16:33:40 +00001026
David Horstmann0f4ee412023-02-21 16:17:41 +00001027 ret = oid_parse_number(&component1, &str_ptr, str_bound);
1028 if (ret != 0) {
David Horstmann861e5d22023-04-19 18:15:51 +01001029 goto error;
David Horstmann92337c02023-01-18 18:40:49 +00001030 }
1031 if (component1 > 2) {
1032 /* First component can't be > 2 */
David Horstmann861e5d22023-04-19 18:15:51 +01001033 ret = MBEDTLS_ERR_ASN1_INVALID_DATA;
1034 goto error;
David Horstmann92337c02023-01-18 18:40:49 +00001035 }
1036 if (str_ptr >= str_bound || *str_ptr != '.') {
David Horstmann861e5d22023-04-19 18:15:51 +01001037 ret = MBEDTLS_ERR_ASN1_INVALID_DATA;
1038 goto error;
David Horstmann92337c02023-01-18 18:40:49 +00001039 }
1040 str_ptr++;
1041
David Horstmann0f4ee412023-02-21 16:17:41 +00001042 ret = oid_parse_number(&component2, &str_ptr, str_bound);
1043 if (ret != 0) {
David Horstmann861e5d22023-04-19 18:15:51 +01001044 goto error;
David Horstmann92337c02023-01-18 18:40:49 +00001045 }
David Horstmann03329972023-02-20 17:28:36 +00001046 if ((component1 < 2) && (component2 > 39)) {
1047 /* Root nodes 0 and 1 may have up to 40 children, numbered 0-39 */
David Horstmann861e5d22023-04-19 18:15:51 +01001048 ret = MBEDTLS_ERR_ASN1_INVALID_DATA;
1049 goto error;
David Horstmann92337c02023-01-18 18:40:49 +00001050 }
David Horstmann01713972023-06-01 15:04:20 +01001051 if (str_ptr < str_bound) {
David Horstmann92337c02023-01-18 18:40:49 +00001052 if (*str_ptr == '.') {
1053 str_ptr++;
1054 } else {
David Horstmann861e5d22023-04-19 18:15:51 +01001055 ret = MBEDTLS_ERR_ASN1_INVALID_DATA;
1056 goto error;
David Horstmann92337c02023-01-18 18:40:49 +00001057 }
1058 }
1059
David Horstmann02127ab2023-06-02 14:50:35 +01001060 if (component2 > (UINT_MAX - (component1 * 40))) {
David Horstmann861e5d22023-04-19 18:15:51 +01001061 ret = MBEDTLS_ERR_ASN1_INVALID_DATA;
1062 goto error;
David Horstmann92337c02023-01-18 18:40:49 +00001063 }
David Horstmann861e5d22023-04-19 18:15:51 +01001064 ret = oid_subidentifier_encode_into(&out_ptr, out_bound,
1065 (component1 * 40) + component2);
1066 if (ret != 0) {
1067 goto error;
1068 }
David Horstmann92337c02023-01-18 18:40:49 +00001069
David Horstmann01713972023-06-01 15:04:20 +01001070 while (str_ptr < str_bound) {
David Horstmann861e5d22023-04-19 18:15:51 +01001071 ret = oid_parse_number(&val, &str_ptr, str_bound);
David Horstmann0f4ee412023-02-21 16:17:41 +00001072 if (ret != 0) {
David Horstmann861e5d22023-04-19 18:15:51 +01001073 goto error;
David Horstmann92337c02023-01-18 18:40:49 +00001074 }
David Horstmann01713972023-06-01 15:04:20 +01001075 if (str_ptr < str_bound) {
David Horstmann92337c02023-01-18 18:40:49 +00001076 if (*str_ptr == '.') {
1077 str_ptr++;
1078 } else {
David Horstmann861e5d22023-04-19 18:15:51 +01001079 ret = MBEDTLS_ERR_ASN1_INVALID_DATA;
1080 goto error;
David Horstmann92337c02023-01-18 18:40:49 +00001081 }
1082 }
1083
David Horstmann92337c02023-01-18 18:40:49 +00001084 ret = oid_subidentifier_encode_into(&out_ptr, out_bound, val);
1085 if (ret != 0) {
David Horstmann861e5d22023-04-19 18:15:51 +01001086 goto error;
David Horstmann92337c02023-01-18 18:40:49 +00001087 }
1088 }
David Horstmann861e5d22023-04-19 18:15:51 +01001089
David Horstmann68833582023-05-31 17:27:28 +01001090 encoded_len = out_ptr - oid->p;
David Horstmann45d5e2d2023-06-01 15:10:33 +01001091 resized_mem = mbedtls_calloc(encoded_len, 1);
1092 if (resized_mem == NULL) {
David Horstmann861e5d22023-04-19 18:15:51 +01001093 ret = MBEDTLS_ERR_ASN1_ALLOC_FAILED;
1094 goto error;
1095 }
David Horstmann45d5e2d2023-06-01 15:10:33 +01001096 memcpy(resized_mem, oid->p, encoded_len);
David Horstmann861e5d22023-04-19 18:15:51 +01001097 mbedtls_free(oid->p);
David Horstmann45d5e2d2023-06-01 15:10:33 +01001098 oid->p = resized_mem;
David Horstmann861e5d22023-04-19 18:15:51 +01001099 oid->len = encoded_len;
1100
David Horstmann92337c02023-01-18 18:40:49 +00001101 oid->tag = MBEDTLS_ASN1_OID;
1102
1103 return 0;
David Horstmann861e5d22023-04-19 18:15:51 +01001104
1105error:
1106 mbedtls_free(oid->p);
1107 oid->p = NULL;
1108 oid->len = 0;
1109 return ret;
David Horstmann92337c02023-01-18 18:40:49 +00001110}
1111
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001112#endif /* MBEDTLS_OID_C */