blob: 0913552a47d3e01858f1e9c4f935738244fb6662 [file] [log] [blame]
Paul Bakkerc70b9822013-04-07 22:00:46 +02001/**
2 * \file oid.c
3 *
4 * \brief Object Identifier (OID) database
5 *
Manuel Pégourié-Gonnarda658a402015-01-23 09:45:19 +00006 * Copyright (C) 2006-2014, ARM Limited, All Rights Reserved
Paul Bakkerc70b9822013-04-07 22:00:46 +02007 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +00008 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakkerc70b9822013-04-07 22:00:46 +02009 *
Paul Bakkerc70b9822013-04-07 22:00:46 +020010 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License as published by
12 * the Free Software Foundation; either version 2 of the License, or
13 * (at your option) any later version.
14 *
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
19 *
20 * You should have received a copy of the GNU General Public License along
21 * with this program; if not, write to the Free Software Foundation, Inc.,
22 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
23 */
24
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020025#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000026#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020027#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020028#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020029#endif
Paul Bakkerc70b9822013-04-07 22:00:46 +020030
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020031#if defined(MBEDTLS_OID_C)
Paul Bakkerc70b9822013-04-07 22:00:46 +020032
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000033#include "mbedtls/oid.h"
34#include "mbedtls/rsa.h"
Paul Bakkerc70b9822013-04-07 22:00:46 +020035
Rich Evans00ab4702015-02-06 13:43:58 +000036#include <stdio.h>
37#include <string.h>
38
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020039#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000040#include "mbedtls/platform.h"
Rich Evans8f3a9432015-01-30 10:54:04 +000041#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020042#define mbedtls_snprintf snprintf
Rich Evans8f3a9432015-01-30 10:54:04 +000043#endif
44
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020045#if defined(MBEDTLS_X509_USE_C) || defined(MBEDTLS_X509_CREATE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000046#include "mbedtls/x509.h"
Paul Bakker2292d1f2013-09-15 17:06:49 +020047#endif
48
Paul Bakkerdd1150e2013-06-28 17:20:22 +020049/*
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +020050 * Macro to automatically add the size of #define'd OIDs
51 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020052#define ADD_LEN(s) s, MBEDTLS_OID_SIZE(s)
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +020053
54/*
Paul Bakkerdd1150e2013-06-28 17:20:22 +020055 * Macro to generate an internal function for oid_XXX_from_asn1() (used by
56 * the other functions)
57 */
Paul Bakker45a2c8d2013-10-28 12:57:08 +010058#define FN_OID_TYPED_FROM_ASN1( TYPE_T, NAME, LIST ) \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020059static const TYPE_T * oid_ ## NAME ## _from_asn1( const mbedtls_asn1_buf *oid ) \
Paul Bakker45a2c8d2013-10-28 12:57:08 +010060{ \
61 const TYPE_T *p = LIST; \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020062 const mbedtls_oid_descriptor_t *cur = (const mbedtls_oid_descriptor_t *) p; \
Paul Bakker45a2c8d2013-10-28 12:57:08 +010063 if( p == NULL || oid == NULL ) return( NULL ); \
64 while( cur->asn1 != NULL ) { \
65 if( cur->asn1_len == oid->len && \
66 memcmp( cur->asn1, oid->p, oid->len ) == 0 ) { \
67 return( p ); \
68 } \
69 p++; \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020070 cur = (const mbedtls_oid_descriptor_t *) p; \
Paul Bakker45a2c8d2013-10-28 12:57:08 +010071 } \
72 return( NULL ); \
73}
Paul Bakkerbd51ad52013-06-28 16:51:52 +020074
75/*
Paul Bakkerdd1150e2013-06-28 17:20:22 +020076 * Macro to generate a function for retrieving a single attribute from the
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020077 * descriptor of an mbedtls_oid_descriptor_t wrapper.
Paul Bakkerdd1150e2013-06-28 17:20:22 +020078 */
79#define FN_OID_GET_DESCRIPTOR_ATTR1(FN_NAME, TYPE_T, TYPE_NAME, ATTR1_TYPE, ATTR1) \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020080int FN_NAME( const mbedtls_asn1_buf *oid, ATTR1_TYPE * ATTR1 ) \
Paul Bakkerdd1150e2013-06-28 17:20:22 +020081{ \
82 const TYPE_T *data = oid_ ## TYPE_NAME ## _from_asn1( oid ); \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020083 if( data == NULL ) return( MBEDTLS_ERR_OID_NOT_FOUND ); \
Paul Bakkerdd1150e2013-06-28 17:20:22 +020084 *ATTR1 = data->descriptor.ATTR1; \
85 return( 0 ); \
86}
87
88/*
89 * Macro to generate a function for retrieving a single attribute from an
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020090 * mbedtls_oid_descriptor_t wrapper.
Paul Bakkerdd1150e2013-06-28 17:20:22 +020091 */
92#define FN_OID_GET_ATTR1(FN_NAME, TYPE_T, TYPE_NAME, ATTR1_TYPE, ATTR1) \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020093int FN_NAME( const mbedtls_asn1_buf *oid, ATTR1_TYPE * ATTR1 ) \
Paul Bakkerdd1150e2013-06-28 17:20:22 +020094{ \
95 const TYPE_T *data = oid_ ## TYPE_NAME ## _from_asn1( oid ); \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020096 if( data == NULL ) return( MBEDTLS_ERR_OID_NOT_FOUND ); \
Paul Bakkerdd1150e2013-06-28 17:20:22 +020097 *ATTR1 = data->ATTR1; \
98 return( 0 ); \
99}
100
101/*
102 * Macro to generate a function for retrieving two attributes from an
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200103 * mbedtls_oid_descriptor_t wrapper.
Paul Bakkerdd1150e2013-06-28 17:20:22 +0200104 */
105#define FN_OID_GET_ATTR2(FN_NAME, TYPE_T, TYPE_NAME, ATTR1_TYPE, ATTR1, \
106 ATTR2_TYPE, ATTR2) \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200107int FN_NAME( const mbedtls_asn1_buf *oid, ATTR1_TYPE * ATTR1, ATTR2_TYPE * ATTR2 ) \
Paul Bakkerdd1150e2013-06-28 17:20:22 +0200108{ \
109 const TYPE_T *data = oid_ ## TYPE_NAME ## _from_asn1( oid ); \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200110 if( data == NULL ) return( MBEDTLS_ERR_OID_NOT_FOUND ); \
Paul Bakkerdd1150e2013-06-28 17:20:22 +0200111 *ATTR1 = data->ATTR1; \
112 *ATTR2 = data->ATTR2; \
113 return( 0 ); \
114}
115
116/*
Paul Bakkerce6ae232013-06-28 18:05:35 +0200117 * Macro to generate a function for retrieving the OID based on a single
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200118 * attribute from a mbedtls_oid_descriptor_t wrapper.
Paul Bakkerce6ae232013-06-28 18:05:35 +0200119 */
120#define FN_OID_GET_OID_BY_ATTR1(FN_NAME, TYPE_T, LIST, ATTR1_TYPE, ATTR1) \
Paul Bakker1c3853b2013-09-10 11:43:44 +0200121int FN_NAME( ATTR1_TYPE ATTR1, const char **oid, size_t *olen ) \
Paul Bakkerce6ae232013-06-28 18:05:35 +0200122{ \
123 const TYPE_T *cur = LIST; \
124 while( cur->descriptor.asn1 != NULL ) { \
125 if( cur->ATTR1 == ATTR1 ) { \
Paul Bakker1c3853b2013-09-10 11:43:44 +0200126 *oid = cur->descriptor.asn1; \
127 *olen = cur->descriptor.asn1_len; \
Paul Bakkerce6ae232013-06-28 18:05:35 +0200128 return( 0 ); \
129 } \
130 cur++; \
131 } \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200132 return( MBEDTLS_ERR_OID_NOT_FOUND ); \
Paul Bakkerce6ae232013-06-28 18:05:35 +0200133}
134
135/*
136 * Macro to generate a function for retrieving the OID based on two
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200137 * attributes from a mbedtls_oid_descriptor_t wrapper.
Paul Bakkerce6ae232013-06-28 18:05:35 +0200138 */
139#define FN_OID_GET_OID_BY_ATTR2(FN_NAME, TYPE_T, LIST, ATTR1_TYPE, ATTR1, \
140 ATTR2_TYPE, ATTR2) \
Paul Bakker1c3853b2013-09-10 11:43:44 +0200141int FN_NAME( ATTR1_TYPE ATTR1, ATTR2_TYPE ATTR2, const char **oid , \
142 size_t *olen ) \
Paul Bakkerce6ae232013-06-28 18:05:35 +0200143{ \
144 const TYPE_T *cur = LIST; \
145 while( cur->descriptor.asn1 != NULL ) { \
146 if( cur->ATTR1 == ATTR1 && cur->ATTR2 == ATTR2 ) { \
Paul Bakker1c3853b2013-09-10 11:43:44 +0200147 *oid = cur->descriptor.asn1; \
148 *olen = cur->descriptor.asn1_len; \
Paul Bakkerce6ae232013-06-28 18:05:35 +0200149 return( 0 ); \
150 } \
151 cur++; \
152 } \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200153 return( MBEDTLS_ERR_OID_NOT_FOUND ); \
Paul Bakkerce6ae232013-06-28 18:05:35 +0200154}
155
156/*
Paul Bakkerc70b9822013-04-07 22:00:46 +0200157 * For X520 attribute types
158 */
159typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200160 mbedtls_oid_descriptor_t descriptor;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200161 const char *short_name;
162} oid_x520_attr_t;
163
164static const oid_x520_attr_t oid_x520_attr_type[] =
165{
166 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200167 { ADD_LEN( MBEDTLS_OID_AT_CN ), "id-at-commonName", "Common Name" },
Paul Bakkerc70b9822013-04-07 22:00:46 +0200168 "CN",
169 },
170 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200171 { ADD_LEN( MBEDTLS_OID_AT_COUNTRY ), "id-at-countryName", "Country" },
Paul Bakkerc70b9822013-04-07 22:00:46 +0200172 "C",
173 },
174 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200175 { ADD_LEN( MBEDTLS_OID_AT_LOCALITY ), "id-at-locality", "Locality" },
Paul Bakkerc70b9822013-04-07 22:00:46 +0200176 "L",
177 },
178 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200179 { ADD_LEN( MBEDTLS_OID_AT_STATE ), "id-at-state", "State" },
Paul Bakkerc70b9822013-04-07 22:00:46 +0200180 "ST",
181 },
182 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200183 { ADD_LEN( MBEDTLS_OID_AT_ORGANIZATION ),"id-at-organizationName", "Organization" },
Paul Bakkerc70b9822013-04-07 22:00:46 +0200184 "O",
185 },
186 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200187 { ADD_LEN( MBEDTLS_OID_AT_ORG_UNIT ), "id-at-organizationalUnitName", "Org Unit" },
Paul Bakkerc70b9822013-04-07 22:00:46 +0200188 "OU",
189 },
190 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200191 { ADD_LEN( MBEDTLS_OID_PKCS9_EMAIL ), "emailAddress", "E-mail address" },
Paul Bakkerc70b9822013-04-07 22:00:46 +0200192 "emailAddress",
193 },
194 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200195 { ADD_LEN( MBEDTLS_OID_AT_SERIAL_NUMBER ),"id-at-serialNumber", "Serial number" },
Paul Bakker7b0be682013-10-29 14:24:37 +0100196 "serialNumber",
197 },
198 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200199 { ADD_LEN( MBEDTLS_OID_AT_POSTAL_ADDRESS ),"id-at-postalAddress", "Postal address" },
Paul Bakker7b0be682013-10-29 14:24:37 +0100200 "postalAddress",
201 },
202 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200203 { ADD_LEN( MBEDTLS_OID_AT_POSTAL_CODE ), "id-at-postalCode", "Postal code" },
Paul Bakker7b0be682013-10-29 14:24:37 +0100204 "postalCode",
205 },
206 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200207 { ADD_LEN( MBEDTLS_OID_AT_SUR_NAME ), "id-at-surName", "Surname" },
Paul Bakker63844402014-04-30 15:34:12 +0200208 "SN",
209 },
210 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200211 { ADD_LEN( MBEDTLS_OID_AT_GIVEN_NAME ), "id-at-givenName", "Given name" },
Paul Bakker63844402014-04-30 15:34:12 +0200212 "GN",
213 },
214 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200215 { ADD_LEN( MBEDTLS_OID_AT_INITIALS ), "id-at-initials", "Initials" },
Paul Bakker63844402014-04-30 15:34:12 +0200216 "initials",
217 },
218 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200219 { ADD_LEN( MBEDTLS_OID_AT_GENERATION_QUALIFIER ), "id-at-generationQualifier", "Generation qualifier" },
Paul Bakker63844402014-04-30 15:34:12 +0200220 "generationQualifier",
221 },
222 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200223 { ADD_LEN( MBEDTLS_OID_AT_TITLE ), "id-at-title", "Title" },
Paul Bakker63844402014-04-30 15:34:12 +0200224 "title",
225 },
226 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200227 { ADD_LEN( MBEDTLS_OID_AT_DN_QUALIFIER ),"id-at-dnQualifier", "Distinguished Name qualifier" },
Paul Bakker63844402014-04-30 15:34:12 +0200228 "dnQualifier",
229 },
230 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200231 { ADD_LEN( MBEDTLS_OID_AT_PSEUDONYM ), "id-at-pseudonym", "Pseudonym" },
Paul Bakker63844402014-04-30 15:34:12 +0200232 "pseudonym",
233 },
234 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200235 { ADD_LEN( MBEDTLS_OID_DOMAIN_COMPONENT ), "id-domainComponent", "Domain component" },
Paul Bakker63844402014-04-30 15:34:12 +0200236 "DC",
237 },
238 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200239 { ADD_LEN( MBEDTLS_OID_AT_UNIQUE_IDENTIFIER ), "id-at-uniqueIdentifier", "Unique Identifier" },
Manuel Pégourié-Gonnard9409e0c2015-03-27 13:03:54 +0100240 "uniqueIdentifier",
241 },
242 {
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +0200243 { NULL, 0, NULL, NULL },
Paul Bakkerc70b9822013-04-07 22:00:46 +0200244 NULL,
245 }
246};
247
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200248FN_OID_TYPED_FROM_ASN1(oid_x520_attr_t, x520_attr, oid_x520_attr_type)
249FN_OID_GET_ATTR1(mbedtls_oid_get_attr_short_name, oid_x520_attr_t, x520_attr, const char *, short_name)
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200250
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200251#if defined(MBEDTLS_X509_USE_C) || defined(MBEDTLS_X509_CREATE_C)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200252/*
253 * For X509 extensions
254 */
255typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200256 mbedtls_oid_descriptor_t descriptor;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200257 int ext_type;
258} oid_x509_ext_t;
259
260static const oid_x509_ext_t oid_x509_ext[] =
261{
262 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200263 { ADD_LEN( MBEDTLS_OID_BASIC_CONSTRAINTS ), "id-ce-basicConstraints", "Basic Constraints" },
Manuel Pégourié-Gonnarde6028c92015-04-20 12:19:02 +0100264 MBEDTLS_X509_EXT_BASIC_CONSTRAINTS,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200265 },
266 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200267 { ADD_LEN( MBEDTLS_OID_KEY_USAGE ), "id-ce-keyUsage", "Key Usage" },
268 MBEDTLS_X509_EXT_KEY_USAGE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200269 },
270 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200271 { ADD_LEN( MBEDTLS_OID_EXTENDED_KEY_USAGE ), "id-ce-keyUsage", "Extended Key Usage" },
272 MBEDTLS_X509_EXT_EXTENDED_KEY_USAGE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200273 },
274 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200275 { ADD_LEN( MBEDTLS_OID_SUBJECT_ALT_NAME ), "id-ce-subjectAltName", "Subject Alt Name" },
Manuel Pégourié-Gonnarde6028c92015-04-20 12:19:02 +0100276 MBEDTLS_X509_EXT_SUBJECT_ALT_NAME,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200277 },
278 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200279 { ADD_LEN( MBEDTLS_OID_NS_CERT_TYPE ), "id-netscape-certtype", "Netscape Certificate Type" },
280 MBEDTLS_X509_EXT_NS_CERT_TYPE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200281 },
282 {
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +0200283 { NULL, 0, NULL, NULL },
Paul Bakkerc70b9822013-04-07 22:00:46 +0200284 0,
285 },
286};
287
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200288FN_OID_TYPED_FROM_ASN1(oid_x509_ext_t, x509_ext, oid_x509_ext)
289FN_OID_GET_ATTR1(mbedtls_oid_get_x509_ext_type, oid_x509_ext_t, x509_ext, int, ext_type)
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200290
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200291static const mbedtls_oid_descriptor_t oid_ext_key_usage[] =
Paul Bakkerc70b9822013-04-07 22:00:46 +0200292{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200293 { ADD_LEN( MBEDTLS_OID_SERVER_AUTH ), "id-kp-serverAuth", "TLS Web Server Authentication" },
294 { ADD_LEN( MBEDTLS_OID_CLIENT_AUTH ), "id-kp-clientAuth", "TLS Web Client Authentication" },
295 { ADD_LEN( MBEDTLS_OID_CODE_SIGNING ), "id-kp-codeSigning", "Code Signing" },
296 { ADD_LEN( MBEDTLS_OID_EMAIL_PROTECTION ), "id-kp-emailProtection", "E-mail Protection" },
297 { ADD_LEN( MBEDTLS_OID_TIME_STAMPING ), "id-kp-timeStamping", "Time Stamping" },
298 { ADD_LEN( MBEDTLS_OID_OCSP_SIGNING ), "id-kp-OCSPSigning", "OCSP Signing" },
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +0200299 { NULL, 0, NULL, NULL },
Paul Bakkerc70b9822013-04-07 22:00:46 +0200300};
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200301
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200302FN_OID_TYPED_FROM_ASN1(mbedtls_oid_descriptor_t, ext_key_usage, oid_ext_key_usage)
303FN_OID_GET_ATTR1(mbedtls_oid_get_extended_key_usage, mbedtls_oid_descriptor_t, ext_key_usage, const char *, description)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200304#endif /* MBEDTLS_X509_USE_C || MBEDTLS_X509_CREATE_C */
Paul Bakkerc70b9822013-04-07 22:00:46 +0200305
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200306#if defined(MBEDTLS_MD_C)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200307/*
308 * For SignatureAlgorithmIdentifier
309 */
310typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200311 mbedtls_oid_descriptor_t descriptor;
312 mbedtls_md_type_t md_alg;
313 mbedtls_pk_type_t pk_alg;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200314} oid_sig_alg_t;
315
316static const oid_sig_alg_t oid_sig_alg[] =
317{
318 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200319 { ADD_LEN( MBEDTLS_OID_PKCS1_MD2 ), "md2WithRSAEncryption", "RSA with MD2" },
320 MBEDTLS_MD_MD2, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200321 },
322 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200323 { ADD_LEN( MBEDTLS_OID_PKCS1_MD4 ), "md4WithRSAEncryption", "RSA with MD4" },
324 MBEDTLS_MD_MD4, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200325 },
326 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200327 { ADD_LEN( MBEDTLS_OID_PKCS1_MD5 ), "md5WithRSAEncryption", "RSA with MD5" },
328 MBEDTLS_MD_MD5, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200329 },
330 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200331 { ADD_LEN( MBEDTLS_OID_PKCS1_SHA1 ), "sha-1WithRSAEncryption", "RSA with SHA1" },
332 MBEDTLS_MD_SHA1, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200333 },
334 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200335 { ADD_LEN( MBEDTLS_OID_PKCS1_SHA224 ), "sha224WithRSAEncryption", "RSA with SHA-224" },
336 MBEDTLS_MD_SHA224, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200337 },
338 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200339 { ADD_LEN( MBEDTLS_OID_PKCS1_SHA256 ), "sha256WithRSAEncryption", "RSA with SHA-256" },
340 MBEDTLS_MD_SHA256, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200341 },
342 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200343 { ADD_LEN( MBEDTLS_OID_PKCS1_SHA384 ), "sha384WithRSAEncryption", "RSA with SHA-384" },
344 MBEDTLS_MD_SHA384, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200345 },
346 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200347 { ADD_LEN( MBEDTLS_OID_PKCS1_SHA512 ), "sha512WithRSAEncryption", "RSA with SHA-512" },
348 MBEDTLS_MD_SHA512, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200349 },
350 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200351 { ADD_LEN( MBEDTLS_OID_RSA_SHA_OBS ), "sha-1WithRSAEncryption", "RSA with SHA1" },
352 MBEDTLS_MD_SHA1, MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200353 },
354 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200355 { ADD_LEN( MBEDTLS_OID_ECDSA_SHA1 ), "ecdsa-with-SHA1", "ECDSA with SHA1" },
356 MBEDTLS_MD_SHA1, MBEDTLS_PK_ECDSA,
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200357 },
358 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200359 { ADD_LEN( MBEDTLS_OID_ECDSA_SHA224 ), "ecdsa-with-SHA224", "ECDSA with SHA224" },
360 MBEDTLS_MD_SHA224, MBEDTLS_PK_ECDSA,
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200361 },
362 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200363 { ADD_LEN( MBEDTLS_OID_ECDSA_SHA256 ), "ecdsa-with-SHA256", "ECDSA with SHA256" },
364 MBEDTLS_MD_SHA256, MBEDTLS_PK_ECDSA,
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200365 },
366 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200367 { ADD_LEN( MBEDTLS_OID_ECDSA_SHA384 ), "ecdsa-with-SHA384", "ECDSA with SHA384" },
368 MBEDTLS_MD_SHA384, MBEDTLS_PK_ECDSA,
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200369 },
370 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200371 { ADD_LEN( MBEDTLS_OID_ECDSA_SHA512 ), "ecdsa-with-SHA512", "ECDSA with SHA512" },
372 MBEDTLS_MD_SHA512, MBEDTLS_PK_ECDSA,
Manuel Pégourié-Gonnard1e60cd02013-07-10 10:28:53 +0200373 },
374 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200375 { ADD_LEN( MBEDTLS_OID_RSASSA_PSS ), "RSASSA-PSS", "RSASSA-PSS" },
376 MBEDTLS_MD_NONE, MBEDTLS_PK_RSASSA_PSS,
Manuel Pégourié-Gonnard59a75d52014-01-22 10:12:57 +0100377 },
378 {
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +0200379 { NULL, 0, NULL, NULL },
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200380 MBEDTLS_MD_NONE, MBEDTLS_PK_NONE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200381 },
382};
383
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200384FN_OID_TYPED_FROM_ASN1(oid_sig_alg_t, sig_alg, oid_sig_alg)
385FN_OID_GET_DESCRIPTOR_ATTR1(mbedtls_oid_get_sig_alg_desc, oid_sig_alg_t, sig_alg, const char *, description)
386FN_OID_GET_ATTR2(mbedtls_oid_get_sig_alg, oid_sig_alg_t, sig_alg, mbedtls_md_type_t, md_alg, mbedtls_pk_type_t, pk_alg)
387FN_OID_GET_OID_BY_ATTR2(mbedtls_oid_get_oid_by_sig_alg, oid_sig_alg_t, oid_sig_alg, mbedtls_pk_type_t, pk_alg, mbedtls_md_type_t, md_alg)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200388#endif /* MBEDTLS_MD_C */
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200389
Paul Bakkerc70b9822013-04-07 22:00:46 +0200390/*
Manuel Pégourié-Gonnard5a9b82e2013-07-01 16:57:44 +0200391 * For PublicKeyInfo (PKCS1, RFC 5480)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200392 */
393typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200394 mbedtls_oid_descriptor_t descriptor;
395 mbedtls_pk_type_t pk_alg;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200396} oid_pk_alg_t;
397
398static const oid_pk_alg_t oid_pk_alg[] =
399{
400 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200401 { ADD_LEN( MBEDTLS_OID_PKCS1_RSA ), "rsaEncryption", "RSA" },
402 MBEDTLS_PK_RSA,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200403 },
404 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200405 { ADD_LEN( MBEDTLS_OID_EC_ALG_UNRESTRICTED ), "id-ecPublicKey", "Generic EC key" },
406 MBEDTLS_PK_ECKEY,
Manuel Pégourié-Gonnard5a9b82e2013-07-01 16:57:44 +0200407 },
408 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200409 { ADD_LEN( MBEDTLS_OID_EC_ALG_ECDH ), "id-ecDH", "EC key for ECDH" },
410 MBEDTLS_PK_ECKEY_DH,
Manuel Pégourié-Gonnard5a9b82e2013-07-01 16:57:44 +0200411 },
412 {
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +0200413 { NULL, 0, NULL, NULL },
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200414 MBEDTLS_PK_NONE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200415 },
416};
417
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200418FN_OID_TYPED_FROM_ASN1(oid_pk_alg_t, pk_alg, oid_pk_alg)
419FN_OID_GET_ATTR1(mbedtls_oid_get_pk_alg, oid_pk_alg_t, pk_alg, mbedtls_pk_type_t, pk_alg)
420FN_OID_GET_OID_BY_ATTR1(mbedtls_oid_get_oid_by_pk_alg, oid_pk_alg_t, oid_pk_alg, mbedtls_pk_type_t, pk_alg)
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200421
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200422#if defined(MBEDTLS_ECP_C)
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200423/*
424 * For namedCurve (RFC 5480)
425 */
426typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200427 mbedtls_oid_descriptor_t descriptor;
428 mbedtls_ecp_group_id grp_id;
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200429} oid_ecp_grp_t;
430
431static const oid_ecp_grp_t oid_ecp_grp[] =
432{
433 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200434 { ADD_LEN( MBEDTLS_OID_EC_GRP_SECP192R1 ), "secp192r1", "secp192r1" },
435 MBEDTLS_ECP_DP_SECP192R1,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200436 },
437 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200438 { ADD_LEN( MBEDTLS_OID_EC_GRP_SECP224R1 ), "secp224r1", "secp224r1" },
439 MBEDTLS_ECP_DP_SECP224R1,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200440 },
441 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200442 { ADD_LEN( MBEDTLS_OID_EC_GRP_SECP256R1 ), "secp256r1", "secp256r1" },
443 MBEDTLS_ECP_DP_SECP256R1,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200444 },
445 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200446 { ADD_LEN( MBEDTLS_OID_EC_GRP_SECP384R1 ), "secp384r1", "secp384r1" },
447 MBEDTLS_ECP_DP_SECP384R1,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200448 },
449 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200450 { ADD_LEN( MBEDTLS_OID_EC_GRP_SECP521R1 ), "secp521r1", "secp521r1" },
451 MBEDTLS_ECP_DP_SECP521R1,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200452 },
453 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200454 { ADD_LEN( MBEDTLS_OID_EC_GRP_SECP192K1 ), "secp192k1", "secp192k1" },
455 MBEDTLS_ECP_DP_SECP192K1,
Manuel Pégourié-Gonnard9bcff392014-01-10 18:26:48 +0100456 },
457 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200458 { ADD_LEN( MBEDTLS_OID_EC_GRP_SECP224K1 ), "secp224k1", "secp224k1" },
459 MBEDTLS_ECP_DP_SECP224K1,
Manuel Pégourié-Gonnard9bcff392014-01-10 18:26:48 +0100460 },
461 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200462 { ADD_LEN( MBEDTLS_OID_EC_GRP_SECP256K1 ), "secp256k1", "secp256k1" },
463 MBEDTLS_ECP_DP_SECP256K1,
Manuel Pégourié-Gonnard9bcff392014-01-10 18:26:48 +0100464 },
465 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200466 { ADD_LEN( MBEDTLS_OID_EC_GRP_BP256R1 ), "brainpoolP256r1","brainpool256r1" },
467 MBEDTLS_ECP_DP_BP256R1,
Manuel Pégourié-Gonnard48ac3db2013-10-10 15:11:33 +0200468 },
469 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200470 { ADD_LEN( MBEDTLS_OID_EC_GRP_BP384R1 ), "brainpoolP384r1","brainpool384r1" },
471 MBEDTLS_ECP_DP_BP384R1,
Manuel Pégourié-Gonnard48ac3db2013-10-10 15:11:33 +0200472 },
473 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200474 { ADD_LEN( MBEDTLS_OID_EC_GRP_BP512R1 ), "brainpoolP512r1","brainpool512r1" },
475 MBEDTLS_ECP_DP_BP512R1,
Manuel Pégourié-Gonnard48ac3db2013-10-10 15:11:33 +0200476 },
477 {
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +0200478 { NULL, 0, NULL, NULL },
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200479 MBEDTLS_ECP_DP_NONE,
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200480 },
481};
482
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200483FN_OID_TYPED_FROM_ASN1(oid_ecp_grp_t, grp_id, oid_ecp_grp)
484FN_OID_GET_ATTR1(mbedtls_oid_get_ec_grp, oid_ecp_grp_t, grp_id, mbedtls_ecp_group_id, grp_id)
485FN_OID_GET_OID_BY_ATTR1(mbedtls_oid_get_oid_by_ec_grp, oid_ecp_grp_t, oid_ecp_grp, mbedtls_ecp_group_id, grp_id)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200486#endif /* MBEDTLS_ECP_C */
Manuel Pégourié-Gonnardf0b30d02013-07-01 17:34:57 +0200487
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200488#if defined(MBEDTLS_CIPHER_C)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200489/*
Paul Bakker9b5e8852013-06-28 16:12:50 +0200490 * For PKCS#5 PBES2 encryption algorithm
491 */
492typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200493 mbedtls_oid_descriptor_t descriptor;
494 mbedtls_cipher_type_t cipher_alg;
Paul Bakker9b5e8852013-06-28 16:12:50 +0200495} oid_cipher_alg_t;
496
497static const oid_cipher_alg_t oid_cipher_alg[] =
498{
499 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200500 { ADD_LEN( MBEDTLS_OID_DES_CBC ), "desCBC", "DES-CBC" },
501 MBEDTLS_CIPHER_DES_CBC,
Paul Bakker9b5e8852013-06-28 16:12:50 +0200502 },
503 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200504 { ADD_LEN( MBEDTLS_OID_DES_EDE3_CBC ), "des-ede3-cbc", "DES-EDE3-CBC" },
505 MBEDTLS_CIPHER_DES_EDE3_CBC,
Paul Bakker9b5e8852013-06-28 16:12:50 +0200506 },
507 {
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +0200508 { NULL, 0, NULL, NULL },
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200509 MBEDTLS_CIPHER_NONE,
Paul Bakker9b5e8852013-06-28 16:12:50 +0200510 },
511};
512
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200513FN_OID_TYPED_FROM_ASN1(oid_cipher_alg_t, cipher_alg, oid_cipher_alg)
514FN_OID_GET_ATTR1(mbedtls_oid_get_cipher_alg, oid_cipher_alg_t, cipher_alg, mbedtls_cipher_type_t, cipher_alg)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200515#endif /* MBEDTLS_CIPHER_C */
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200516
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200517#if defined(MBEDTLS_MD_C)
Paul Bakker9b5e8852013-06-28 16:12:50 +0200518/*
Paul Bakkerc70b9822013-04-07 22:00:46 +0200519 * For digestAlgorithm
520 */
521typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200522 mbedtls_oid_descriptor_t descriptor;
523 mbedtls_md_type_t md_alg;
Paul Bakkerc70b9822013-04-07 22:00:46 +0200524} oid_md_alg_t;
525
526static const oid_md_alg_t oid_md_alg[] =
527{
528 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200529 { ADD_LEN( MBEDTLS_OID_DIGEST_ALG_MD2 ), "id-md2", "MD2" },
530 MBEDTLS_MD_MD2,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200531 },
532 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200533 { ADD_LEN( MBEDTLS_OID_DIGEST_ALG_MD4 ), "id-md4", "MD4" },
534 MBEDTLS_MD_MD4,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200535 },
536 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200537 { ADD_LEN( MBEDTLS_OID_DIGEST_ALG_MD5 ), "id-md5", "MD5" },
538 MBEDTLS_MD_MD5,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200539 },
540 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200541 { ADD_LEN( MBEDTLS_OID_DIGEST_ALG_SHA1 ), "id-sha1", "SHA-1" },
542 MBEDTLS_MD_SHA1,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200543 },
544 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200545 { ADD_LEN( MBEDTLS_OID_DIGEST_ALG_SHA224 ), "id-sha224", "SHA-224" },
546 MBEDTLS_MD_SHA224,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200547 },
548 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200549 { ADD_LEN( MBEDTLS_OID_DIGEST_ALG_SHA256 ), "id-sha256", "SHA-256" },
550 MBEDTLS_MD_SHA256,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200551 },
552 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200553 { ADD_LEN( MBEDTLS_OID_DIGEST_ALG_SHA384 ), "id-sha384", "SHA-384" },
554 MBEDTLS_MD_SHA384,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200555 },
556 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200557 { ADD_LEN( MBEDTLS_OID_DIGEST_ALG_SHA512 ), "id-sha512", "SHA-512" },
558 MBEDTLS_MD_SHA512,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200559 },
560 {
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +0200561 { NULL, 0, NULL, NULL },
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200562 MBEDTLS_MD_NONE,
Paul Bakkerc70b9822013-04-07 22:00:46 +0200563 },
564};
565
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200566FN_OID_TYPED_FROM_ASN1(oid_md_alg_t, md_alg, oid_md_alg)
567FN_OID_GET_ATTR1(mbedtls_oid_get_md_alg, oid_md_alg_t, md_alg, mbedtls_md_type_t, md_alg)
568FN_OID_GET_OID_BY_ATTR1(mbedtls_oid_get_oid_by_md, oid_md_alg_t, oid_md_alg, mbedtls_md_type_t, md_alg)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200569#endif /* MBEDTLS_MD_C */
Paul Bakkerbd51ad52013-06-28 16:51:52 +0200570
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200571#if defined(MBEDTLS_PKCS12_C)
Paul Bakker7749a222013-06-28 17:28:20 +0200572/*
573 * For PKCS#12 PBEs
574 */
575typedef struct {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200576 mbedtls_oid_descriptor_t descriptor;
577 mbedtls_md_type_t md_alg;
578 mbedtls_cipher_type_t cipher_alg;
Paul Bakker7749a222013-06-28 17:28:20 +0200579} oid_pkcs12_pbe_alg_t;
580
581static const oid_pkcs12_pbe_alg_t oid_pkcs12_pbe_alg[] =
582{
583 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200584 { ADD_LEN( MBEDTLS_OID_PKCS12_PBE_SHA1_DES3_EDE_CBC ), "pbeWithSHAAnd3-KeyTripleDES-CBC", "PBE with SHA1 and 3-Key 3DES" },
585 MBEDTLS_MD_SHA1, MBEDTLS_CIPHER_DES_EDE3_CBC,
Paul Bakker7749a222013-06-28 17:28:20 +0200586 },
587 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200588 { ADD_LEN( MBEDTLS_OID_PKCS12_PBE_SHA1_DES2_EDE_CBC ), "pbeWithSHAAnd2-KeyTripleDES-CBC", "PBE with SHA1 and 2-Key 3DES" },
589 MBEDTLS_MD_SHA1, MBEDTLS_CIPHER_DES_EDE_CBC,
Paul Bakker7749a222013-06-28 17:28:20 +0200590 },
591 {
Manuel Pégourié-Gonnard298aae42013-08-15 14:22:17 +0200592 { NULL, 0, NULL, NULL },
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200593 MBEDTLS_MD_NONE, MBEDTLS_CIPHER_NONE,
Paul Bakker7749a222013-06-28 17:28:20 +0200594 },
595};
596
Manuel Pégourié-Gonnardf78e4de2015-05-29 10:52:14 +0200597FN_OID_TYPED_FROM_ASN1(oid_pkcs12_pbe_alg_t, pkcs12_pbe_alg, oid_pkcs12_pbe_alg)
598FN_OID_GET_ATTR2(mbedtls_oid_get_pkcs12_pbe_alg, oid_pkcs12_pbe_alg_t, pkcs12_pbe_alg, mbedtls_md_type_t, md_alg, mbedtls_cipher_type_t, cipher_alg)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200599#endif /* MBEDTLS_PKCS12_C */
Paul Bakker7749a222013-06-28 17:28:20 +0200600
Paul Bakker6edcd412013-10-29 15:22:54 +0100601#if defined(_MSC_VER) && !defined snprintf && !defined(EFIX64) && \
602 !defined(EFI32)
Paul Bakkerc70b9822013-04-07 22:00:46 +0200603#include <stdarg.h>
604
605#if !defined vsnprintf
606#define vsnprintf _vsnprintf
607#endif // vsnprintf
608
609/*
610 * Windows _snprintf and _vsnprintf are not compatible to linux versions.
611 * Result value is not size of buffer needed, but -1 if no fit is possible.
612 *
613 * This fuction tries to 'fix' this by at least suggesting enlarging the
614 * size by 20.
615 */
Paul Bakker66d5d072014-06-17 16:39:18 +0200616static int compat_snprintf( char *str, size_t size, const char *format, ... )
Paul Bakkerc70b9822013-04-07 22:00:46 +0200617{
618 va_list ap;
619 int res = -1;
620
621 va_start( ap, format );
622
623 res = vsnprintf( str, size, format, ap );
624
625 va_end( ap );
626
627 // No quick fix possible
Paul Bakker66d5d072014-06-17 16:39:18 +0200628 if( res < 0 )
Paul Bakkerc70b9822013-04-07 22:00:46 +0200629 return( (int) size + 20 );
630
Paul Bakkerd8bb8262014-06-17 14:06:49 +0200631 return( res );
Paul Bakkerc70b9822013-04-07 22:00:46 +0200632}
633
634#define snprintf compat_snprintf
Paul Bakker9af723c2014-05-01 13:03:14 +0200635#endif /* _MSC_VER && !snprintf && !EFIX64 && !EFI32 */
Paul Bakkerc70b9822013-04-07 22:00:46 +0200636
Paul Bakkerd8bb8262014-06-17 14:06:49 +0200637#define SAFE_SNPRINTF() \
638{ \
639 if( ret == -1 ) \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200640 return( MBEDTLS_ERR_OID_BUF_TOO_SMALL ); \
Paul Bakkerd8bb8262014-06-17 14:06:49 +0200641 \
Paul Bakker66d5d072014-06-17 16:39:18 +0200642 if( (unsigned int) ret >= n ) { \
Paul Bakkerd8bb8262014-06-17 14:06:49 +0200643 p[n - 1] = '\0'; \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200644 return( MBEDTLS_ERR_OID_BUF_TOO_SMALL ); \
Paul Bakkerd8bb8262014-06-17 14:06:49 +0200645 } \
646 \
647 n -= (unsigned int) ret; \
648 p += (unsigned int) ret; \
Paul Bakkerc70b9822013-04-07 22:00:46 +0200649}
650
651/* Return the x.y.z.... style numeric string for the given OID */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200652int mbedtls_oid_get_numeric_string( char *buf, size_t size,
653 const mbedtls_asn1_buf *oid )
Paul Bakkerc70b9822013-04-07 22:00:46 +0200654{
655 int ret;
656 size_t i, n;
657 unsigned int value;
658 char *p;
659
660 p = buf;
661 n = size;
662
663 /* First byte contains first two dots */
664 if( oid->len > 0 )
665 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200666 ret = mbedtls_snprintf( p, n, "%d.%d", oid->p[0] / 40, oid->p[0] % 40 );
Paul Bakkerc70b9822013-04-07 22:00:46 +0200667 SAFE_SNPRINTF();
668 }
669
Paul Bakkerc70b9822013-04-07 22:00:46 +0200670 value = 0;
671 for( i = 1; i < oid->len; i++ )
672 {
Manuel Pégourié-Gonnarddffba8f2013-07-01 17:33:31 +0200673 /* Prevent overflow in value. */
Paul Bakker66d5d072014-06-17 16:39:18 +0200674 if( ( ( value << 7 ) >> 7 ) != value )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200675 return( MBEDTLS_ERR_OID_BUF_TOO_SMALL );
Manuel Pégourié-Gonnarddffba8f2013-07-01 17:33:31 +0200676
Paul Bakkerc70b9822013-04-07 22:00:46 +0200677 value <<= 7;
678 value += oid->p[i] & 0x7F;
679
680 if( !( oid->p[i] & 0x80 ) )
681 {
682 /* Last byte */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200683 ret = mbedtls_snprintf( p, n, ".%d", value );
Paul Bakkerc70b9822013-04-07 22:00:46 +0200684 SAFE_SNPRINTF();
685 value = 0;
686 }
687 }
688
689 return( (int) ( size - n ) );
690}
691
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200692#endif /* MBEDTLS_OID_C */