| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342 | /** * \file asn1.h * * \brief Generic ASN.1 parsing * *  Copyright (C) 2006-2015, ARM Limited, All Rights Reserved *  SPDX-License-Identifier: Apache-2.0 * *  Licensed under the Apache License, Version 2.0 (the "License"); you may *  not use this file except in compliance with the License. *  You may obtain a copy of the License at * *  http://www.apache.org/licenses/LICENSE-2.0 * *  Unless required by applicable law or agreed to in writing, software *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. *  See the License for the specific language governing permissions and *  limitations under the License. * *  This file is part of mbed TLS (https://tls.mbed.org) */#ifndef MBEDTLS_ASN1_H#define MBEDTLS_ASN1_H#if !defined(MBEDTLS_CONFIG_FILE)#include "config.h"#else#include MBEDTLS_CONFIG_FILE#endif#include <stddef.h>#if defined(MBEDTLS_BIGNUM_C)#include "bignum.h"#endif/** * \addtogroup asn1_module * \{ *//** * \name ASN1 Error codes * These error codes are OR'ed to X509 error codes for * higher error granularity. * ASN1 is a standard to specify data structures. * \{ */#define MBEDTLS_ERR_ASN1_OUT_OF_DATA                      -0x0060  /**< Out of data when parsing an ASN1 data structure. */#define MBEDTLS_ERR_ASN1_UNEXPECTED_TAG                   -0x0062  /**< ASN1 tag was of an unexpected value. */#define MBEDTLS_ERR_ASN1_INVALID_LENGTH                   -0x0064  /**< Error when trying to determine the length or invalid length. */#define MBEDTLS_ERR_ASN1_LENGTH_MISMATCH                  -0x0066  /**< Actual length differs from expected length. */#define MBEDTLS_ERR_ASN1_INVALID_DATA                     -0x0068  /**< Data is invalid. (not used) */#define MBEDTLS_ERR_ASN1_ALLOC_FAILED                     -0x006A  /**< Memory allocation failed */#define MBEDTLS_ERR_ASN1_BUF_TOO_SMALL                    -0x006C  /**< Buffer too small when writing ASN.1 data structure. *//* \} name *//** * \name DER constants * These constants comply with DER encoded the ANS1 type tags. * DER encoding uses hexadecimal representation. * An example DER sequence is:\n * - 0x02 -- tag indicating INTEGER * - 0x01 -- length in octets * - 0x05 -- value * Such sequences are typically read into \c ::mbedtls_x509_buf. * \{ */#define MBEDTLS_ASN1_BOOLEAN                 0x01#define MBEDTLS_ASN1_INTEGER                 0x02#define MBEDTLS_ASN1_BIT_STRING              0x03#define MBEDTLS_ASN1_OCTET_STRING            0x04#define MBEDTLS_ASN1_NULL                    0x05#define MBEDTLS_ASN1_OID                     0x06#define MBEDTLS_ASN1_UTF8_STRING             0x0C#define MBEDTLS_ASN1_SEQUENCE                0x10#define MBEDTLS_ASN1_SET                     0x11#define MBEDTLS_ASN1_PRINTABLE_STRING        0x13#define MBEDTLS_ASN1_T61_STRING              0x14#define MBEDTLS_ASN1_IA5_STRING              0x16#define MBEDTLS_ASN1_UTC_TIME                0x17#define MBEDTLS_ASN1_GENERALIZED_TIME        0x18#define MBEDTLS_ASN1_UNIVERSAL_STRING        0x1C#define MBEDTLS_ASN1_BMP_STRING              0x1E#define MBEDTLS_ASN1_PRIMITIVE               0x00#define MBEDTLS_ASN1_CONSTRUCTED             0x20#define MBEDTLS_ASN1_CONTEXT_SPECIFIC        0x80/* \} name *//* \} addtogroup asn1_module *//** Returns the size of the binary string, without the trailing \\0 */#define MBEDTLS_OID_SIZE(x) (sizeof(x) - 1)/** * Compares an mbedtls_asn1_buf structure to a reference OID. * * Only works for 'defined' oid_str values (MBEDTLS_OID_HMAC_SHA1), you cannot use a * 'unsigned char *oid' here! */#define MBEDTLS_OID_CMP(oid_str, oid_buf)                                   \        ( ( MBEDTLS_OID_SIZE(oid_str) != (oid_buf)->len ) ||                \          memcmp( (oid_str), (oid_buf)->p, (oid_buf)->len) != 0 )#ifdef __cplusplusextern "C" {#endif/** * \name Functions to parse ASN.1 data structures * \{ *//** * Type-length-value structure that allows for ASN1 using DER. */typedef struct mbedtls_asn1_buf{    int tag;                /**< ASN1 type, e.g. MBEDTLS_ASN1_UTF8_STRING. */    size_t len;             /**< ASN1 length, in octets. */    unsigned char *p;       /**< ASN1 data, e.g. in ASCII. */}mbedtls_asn1_buf;/** * Container for ASN1 bit strings. */typedef struct mbedtls_asn1_bitstring{    size_t len;                 /**< ASN1 length, in octets. */    unsigned char unused_bits;  /**< Number of unused bits at the end of the string */    unsigned char *p;           /**< Raw ASN1 data for the bit string */}mbedtls_asn1_bitstring;/** * Container for a sequence of ASN.1 items */typedef struct mbedtls_asn1_sequence{    mbedtls_asn1_buf buf;                   /**< Buffer containing the given ASN.1 item. */    struct mbedtls_asn1_sequence *next;    /**< The next entry in the sequence. */}mbedtls_asn1_sequence;/** * Container for a sequence or list of 'named' ASN.1 data items */typedef struct mbedtls_asn1_named_data{    mbedtls_asn1_buf oid;                   /**< The object identifier. */    mbedtls_asn1_buf val;                   /**< The named value. */    struct mbedtls_asn1_named_data *next;  /**< The next entry in the sequence. */    unsigned char next_merged;      /**< Merge next item into the current one? */}mbedtls_asn1_named_data;/** * \brief       Get the length of an ASN.1 element. *              Updates the pointer to immediately behind the length. * * \param p     The position in the ASN.1 data * \param end   End of data * \param len   The variable that will receive the value * * \return      0 if successful, MBEDTLS_ERR_ASN1_OUT_OF_DATA on reaching *              end of data, MBEDTLS_ERR_ASN1_INVALID_LENGTH if length is *              unparseable. */int mbedtls_asn1_get_len( unsigned char **p,                  const unsigned char *end,                  size_t *len );/** * \brief       Get the tag and length of the tag. Check for the requested tag. *              Updates the pointer to immediately behind the tag and length. * * \param p     The position in the ASN.1 data * \param end   End of data * \param len   The variable that will receive the length * \param tag   The expected tag * * \return      0 if successful, MBEDTLS_ERR_ASN1_UNEXPECTED_TAG if tag did *              not match requested tag, or another specific ASN.1 error code. */int mbedtls_asn1_get_tag( unsigned char **p,                  const unsigned char *end,                  size_t *len, int tag );/** * \brief       Retrieve a boolean ASN.1 tag and its value. *              Updates the pointer to immediately behind the full tag. * * \param p     The position in the ASN.1 data * \param end   End of data * \param val   The variable that will receive the value * * \return      0 if successful or a specific ASN.1 error code. */int mbedtls_asn1_get_bool( unsigned char **p,                   const unsigned char *end,                   int *val );/** * \brief       Retrieve an integer ASN.1 tag and its value. *              Updates the pointer to immediately behind the full tag. * * \param p     The position in the ASN.1 data * \param end   End of data * \param val   The variable that will receive the value * * \return      0 if successful or a specific ASN.1 error code. */int mbedtls_asn1_get_int( unsigned char **p,                  const unsigned char *end,                  int *val );/** * \brief       Retrieve a bitstring ASN.1 tag and its value. *              Updates the pointer to immediately behind the full tag. * * \param p     The position in the ASN.1 data * \param end   End of data * \param bs    The variable that will receive the value * * \return      0 if successful or a specific ASN.1 error code. */int mbedtls_asn1_get_bitstring( unsigned char **p, const unsigned char *end,                        mbedtls_asn1_bitstring *bs);/** * \brief       Retrieve a bitstring ASN.1 tag without unused bits and its *              value. *              Updates the pointer to the beginning of the bit/octet string. * * \param p     The position in the ASN.1 data * \param end   End of data * \param len   Length of the actual bit/octect string in bytes * * \return      0 if successful or a specific ASN.1 error code. */int mbedtls_asn1_get_bitstring_null( unsigned char **p, const unsigned char *end,                             size_t *len );/** * \brief       Parses and splits an ASN.1 "SEQUENCE OF <tag>" *              Updated the pointer to immediately behind the full sequence tag. * * \param p     The position in the ASN.1 data * \param end   End of data * \param cur   First variable in the chain to fill * \param tag   Type of sequence * * \return      0 if successful or a specific ASN.1 error code. */int mbedtls_asn1_get_sequence_of( unsigned char **p,                          const unsigned char *end,                          mbedtls_asn1_sequence *cur,                          int tag);#if defined(MBEDTLS_BIGNUM_C)/** * \brief       Retrieve a MPI value from an integer ASN.1 tag. *              Updates the pointer to immediately behind the full tag. * * \param p     The position in the ASN.1 data * \param end   End of data * \param X     The MPI that will receive the value * * \return      0 if successful or a specific ASN.1 or MPI error code. */int mbedtls_asn1_get_mpi( unsigned char **p,                  const unsigned char *end,                  mbedtls_mpi *X );#endif /* MBEDTLS_BIGNUM_C *//** * \brief       Retrieve an AlgorithmIdentifier ASN.1 sequence. *              Updates the pointer to immediately behind the full *              AlgorithmIdentifier. * * \param p     The position in the ASN.1 data * \param end   End of data * \param alg   The buffer to receive the OID * \param params The buffer to receive the params (if any) * * \return      0 if successful or a specific ASN.1 or MPI error code. */int mbedtls_asn1_get_alg( unsigned char **p,                  const unsigned char *end,                  mbedtls_asn1_buf *alg, mbedtls_asn1_buf *params );/** * \brief       Retrieve an AlgorithmIdentifier ASN.1 sequence with NULL or no *              params. *              Updates the pointer to immediately behind the full *              AlgorithmIdentifier. * * \param p     The position in the ASN.1 data * \param end   End of data * \param alg   The buffer to receive the OID * * \return      0 if successful or a specific ASN.1 or MPI error code. */int mbedtls_asn1_get_alg_null( unsigned char **p,                       const unsigned char *end,                       mbedtls_asn1_buf *alg );/** * \brief       Find a specific named_data entry in a sequence or list based on *              the OID. * * \param list  The list to seek through * \param oid   The OID to look for * \param len   Size of the OID * * \return      NULL if not found, or a pointer to the existing entry. */mbedtls_asn1_named_data *mbedtls_asn1_find_named_data( mbedtls_asn1_named_data *list,                                       const char *oid, size_t len );/** * \brief       Free a mbedtls_asn1_named_data entry * * \param entry The named data entry to free */void mbedtls_asn1_free_named_data( mbedtls_asn1_named_data *entry );/** * \brief       Free all entries in a mbedtls_asn1_named_data list *              Head will be set to NULL * * \param head  Pointer to the head of the list of named data entries to free */void mbedtls_asn1_free_named_data_list( mbedtls_asn1_named_data **head );#ifdef __cplusplus}#endif#endif /* asn1.h */
 |