2 * Copyright 2008-2020 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
10 #include <openssl/asn1t.h>
11 #include <openssl/pem.h>
12 #include <openssl/x509v3.h>
13 #include <openssl/cms.h>
14 #include "cms_local.h"
17 ASN1_SEQUENCE(CMS_IssuerAndSerialNumber
) = {
18 ASN1_SIMPLE(CMS_IssuerAndSerialNumber
, issuer
, X509_NAME
),
19 ASN1_SIMPLE(CMS_IssuerAndSerialNumber
, serialNumber
, ASN1_INTEGER
)
20 } ASN1_SEQUENCE_END(CMS_IssuerAndSerialNumber
)
22 ASN1_SEQUENCE(CMS_OtherCertificateFormat
) = {
23 ASN1_SIMPLE(CMS_OtherCertificateFormat
, otherCertFormat
, ASN1_OBJECT
),
24 ASN1_OPT(CMS_OtherCertificateFormat
, otherCert
, ASN1_ANY
)
25 } static_ASN1_SEQUENCE_END(CMS_OtherCertificateFormat
)
27 ASN1_CHOICE(CMS_CertificateChoices
) = {
28 ASN1_SIMPLE(CMS_CertificateChoices
, d
.certificate
, X509
),
29 ASN1_IMP(CMS_CertificateChoices
, d
.extendedCertificate
, ASN1_SEQUENCE
, 0),
30 ASN1_IMP(CMS_CertificateChoices
, d
.v1AttrCert
, ASN1_SEQUENCE
, 1),
31 ASN1_IMP(CMS_CertificateChoices
, d
.v2AttrCert
, ASN1_SEQUENCE
, 2),
32 ASN1_IMP(CMS_CertificateChoices
, d
.other
, CMS_OtherCertificateFormat
, 3)
33 } ASN1_CHOICE_END(CMS_CertificateChoices
)
35 ASN1_CHOICE(CMS_SignerIdentifier
) = {
36 ASN1_SIMPLE(CMS_SignerIdentifier
, d
.issuerAndSerialNumber
, CMS_IssuerAndSerialNumber
),
37 ASN1_IMP(CMS_SignerIdentifier
, d
.subjectKeyIdentifier
, ASN1_OCTET_STRING
, 0)
38 } static_ASN1_CHOICE_END(CMS_SignerIdentifier
)
40 ASN1_NDEF_SEQUENCE(CMS_EncapsulatedContentInfo
) = {
41 ASN1_SIMPLE(CMS_EncapsulatedContentInfo
, eContentType
, ASN1_OBJECT
),
42 ASN1_NDEF_EXP_OPT(CMS_EncapsulatedContentInfo
, eContent
, ASN1_OCTET_STRING_NDEF
, 0)
43 } static_ASN1_NDEF_SEQUENCE_END(CMS_EncapsulatedContentInfo
)
45 /* Minor tweak to operation: free up signer key, cert */
46 static int cms_si_cb(int operation
, ASN1_VALUE
**pval
, const ASN1_ITEM
*it
,
49 if (operation
== ASN1_OP_FREE_POST
) {
50 CMS_SignerInfo
*si
= (CMS_SignerInfo
*)*pval
;
51 EVP_PKEY_free(si
->pkey
);
52 X509_free(si
->signer
);
53 EVP_MD_CTX_free(si
->mctx
);
58 ASN1_SEQUENCE_cb(CMS_SignerInfo
, cms_si_cb
) = {
59 ASN1_EMBED(CMS_SignerInfo
, version
, INT32
),
60 ASN1_SIMPLE(CMS_SignerInfo
, sid
, CMS_SignerIdentifier
),
61 ASN1_SIMPLE(CMS_SignerInfo
, digestAlgorithm
, X509_ALGOR
),
62 ASN1_IMP_SET_OF_OPT(CMS_SignerInfo
, signedAttrs
, X509_ATTRIBUTE
, 0),
63 ASN1_SIMPLE(CMS_SignerInfo
, signatureAlgorithm
, X509_ALGOR
),
64 ASN1_SIMPLE(CMS_SignerInfo
, signature
, ASN1_OCTET_STRING
),
65 ASN1_IMP_SET_OF_OPT(CMS_SignerInfo
, unsignedAttrs
, X509_ATTRIBUTE
, 1)
66 } ASN1_SEQUENCE_END_cb(CMS_SignerInfo
, CMS_SignerInfo
)
68 ASN1_SEQUENCE(CMS_OtherRevocationInfoFormat
) = {
69 ASN1_SIMPLE(CMS_OtherRevocationInfoFormat
, otherRevInfoFormat
, ASN1_OBJECT
),
70 ASN1_OPT(CMS_OtherRevocationInfoFormat
, otherRevInfo
, ASN1_ANY
)
71 } static_ASN1_SEQUENCE_END(CMS_OtherRevocationInfoFormat
)
73 ASN1_CHOICE(CMS_RevocationInfoChoice
) = {
74 ASN1_SIMPLE(CMS_RevocationInfoChoice
, d
.crl
, X509_CRL
),
75 ASN1_IMP(CMS_RevocationInfoChoice
, d
.other
, CMS_OtherRevocationInfoFormat
, 1)
76 } ASN1_CHOICE_END(CMS_RevocationInfoChoice
)
78 ASN1_NDEF_SEQUENCE(CMS_SignedData
) = {
79 ASN1_EMBED(CMS_SignedData
, version
, INT32
),
80 ASN1_SET_OF(CMS_SignedData
, digestAlgorithms
, X509_ALGOR
),
81 ASN1_SIMPLE(CMS_SignedData
, encapContentInfo
, CMS_EncapsulatedContentInfo
),
82 ASN1_IMP_SET_OF_OPT(CMS_SignedData
, certificates
, CMS_CertificateChoices
, 0),
83 ASN1_IMP_SET_OF_OPT(CMS_SignedData
, crls
, CMS_RevocationInfoChoice
, 1),
84 ASN1_SET_OF(CMS_SignedData
, signerInfos
, CMS_SignerInfo
)
85 } ASN1_NDEF_SEQUENCE_END(CMS_SignedData
)
86 IMPLEMENT_ASN1_ALLOC_FUNCTIONS(CMS_SignedData
)
88 ASN1_SEQUENCE(CMS_OriginatorInfo
) = {
89 ASN1_IMP_SET_OF_OPT(CMS_OriginatorInfo
, certificates
, CMS_CertificateChoices
, 0),
90 ASN1_IMP_SET_OF_OPT(CMS_OriginatorInfo
, crls
, CMS_RevocationInfoChoice
, 1)
91 } static_ASN1_SEQUENCE_END(CMS_OriginatorInfo
)
93 ASN1_NDEF_SEQUENCE(CMS_EncryptedContentInfo
) = {
94 ASN1_SIMPLE(CMS_EncryptedContentInfo
, contentType
, ASN1_OBJECT
),
95 ASN1_SIMPLE(CMS_EncryptedContentInfo
, contentEncryptionAlgorithm
, X509_ALGOR
),
96 ASN1_IMP_OPT(CMS_EncryptedContentInfo
, encryptedContent
, ASN1_OCTET_STRING_NDEF
, 0)
97 } static_ASN1_NDEF_SEQUENCE_END(CMS_EncryptedContentInfo
)
99 ASN1_SEQUENCE(CMS_KeyTransRecipientInfo
) = {
100 ASN1_EMBED(CMS_KeyTransRecipientInfo
, version
, INT32
),
101 ASN1_SIMPLE(CMS_KeyTransRecipientInfo
, rid
, CMS_SignerIdentifier
),
102 ASN1_SIMPLE(CMS_KeyTransRecipientInfo
, keyEncryptionAlgorithm
, X509_ALGOR
),
103 ASN1_SIMPLE(CMS_KeyTransRecipientInfo
, encryptedKey
, ASN1_OCTET_STRING
)
104 } ASN1_SEQUENCE_END(CMS_KeyTransRecipientInfo
)
106 ASN1_SEQUENCE(CMS_OtherKeyAttribute
) = {
107 ASN1_SIMPLE(CMS_OtherKeyAttribute
, keyAttrId
, ASN1_OBJECT
),
108 ASN1_OPT(CMS_OtherKeyAttribute
, keyAttr
, ASN1_ANY
)
109 } ASN1_SEQUENCE_END(CMS_OtherKeyAttribute
)
111 ASN1_SEQUENCE(CMS_RecipientKeyIdentifier
) = {
112 ASN1_SIMPLE(CMS_RecipientKeyIdentifier
, subjectKeyIdentifier
, ASN1_OCTET_STRING
),
113 ASN1_OPT(CMS_RecipientKeyIdentifier
, date
, ASN1_GENERALIZEDTIME
),
114 ASN1_OPT(CMS_RecipientKeyIdentifier
, other
, CMS_OtherKeyAttribute
)
115 } ASN1_SEQUENCE_END(CMS_RecipientKeyIdentifier
)
117 ASN1_CHOICE(CMS_KeyAgreeRecipientIdentifier
) = {
118 ASN1_SIMPLE(CMS_KeyAgreeRecipientIdentifier
, d
.issuerAndSerialNumber
, CMS_IssuerAndSerialNumber
),
119 ASN1_IMP(CMS_KeyAgreeRecipientIdentifier
, d
.rKeyId
, CMS_RecipientKeyIdentifier
, 0)
120 } static_ASN1_CHOICE_END(CMS_KeyAgreeRecipientIdentifier
)
122 static int cms_rek_cb(int operation
, ASN1_VALUE
**pval
, const ASN1_ITEM
*it
,
125 CMS_RecipientEncryptedKey
*rek
= (CMS_RecipientEncryptedKey
*)*pval
;
126 if (operation
== ASN1_OP_FREE_POST
) {
127 EVP_PKEY_free(rek
->pkey
);
132 ASN1_SEQUENCE_cb(CMS_RecipientEncryptedKey
, cms_rek_cb
) = {
133 ASN1_SIMPLE(CMS_RecipientEncryptedKey
, rid
, CMS_KeyAgreeRecipientIdentifier
),
134 ASN1_SIMPLE(CMS_RecipientEncryptedKey
, encryptedKey
, ASN1_OCTET_STRING
)
135 } ASN1_SEQUENCE_END_cb(CMS_RecipientEncryptedKey
, CMS_RecipientEncryptedKey
)
137 ASN1_SEQUENCE(CMS_OriginatorPublicKey
) = {
138 ASN1_SIMPLE(CMS_OriginatorPublicKey
, algorithm
, X509_ALGOR
),
139 ASN1_SIMPLE(CMS_OriginatorPublicKey
, publicKey
, ASN1_BIT_STRING
)
140 } ASN1_SEQUENCE_END(CMS_OriginatorPublicKey
)
142 ASN1_CHOICE(CMS_OriginatorIdentifierOrKey
) = {
143 ASN1_SIMPLE(CMS_OriginatorIdentifierOrKey
, d
.issuerAndSerialNumber
, CMS_IssuerAndSerialNumber
),
144 ASN1_IMP(CMS_OriginatorIdentifierOrKey
, d
.subjectKeyIdentifier
, ASN1_OCTET_STRING
, 0),
145 ASN1_IMP(CMS_OriginatorIdentifierOrKey
, d
.originatorKey
, CMS_OriginatorPublicKey
, 1)
146 } static_ASN1_CHOICE_END(CMS_OriginatorIdentifierOrKey
)
148 static int cms_kari_cb(int operation
, ASN1_VALUE
**pval
, const ASN1_ITEM
*it
,
151 CMS_KeyAgreeRecipientInfo
*kari
= (CMS_KeyAgreeRecipientInfo
*)*pval
;
152 if (operation
== ASN1_OP_NEW_POST
) {
153 kari
->ctx
= EVP_CIPHER_CTX_new();
154 if (kari
->ctx
== NULL
)
156 EVP_CIPHER_CTX_set_flags(kari
->ctx
, EVP_CIPHER_CTX_FLAG_WRAP_ALLOW
);
158 } else if (operation
== ASN1_OP_FREE_POST
) {
159 EVP_PKEY_CTX_free(kari
->pctx
);
160 EVP_CIPHER_CTX_free(kari
->ctx
);
165 ASN1_SEQUENCE_cb(CMS_KeyAgreeRecipientInfo
, cms_kari_cb
) = {
166 ASN1_EMBED(CMS_KeyAgreeRecipientInfo
, version
, INT32
),
167 ASN1_EXP(CMS_KeyAgreeRecipientInfo
, originator
, CMS_OriginatorIdentifierOrKey
, 0),
168 ASN1_EXP_OPT(CMS_KeyAgreeRecipientInfo
, ukm
, ASN1_OCTET_STRING
, 1),
169 ASN1_SIMPLE(CMS_KeyAgreeRecipientInfo
, keyEncryptionAlgorithm
, X509_ALGOR
),
170 ASN1_SEQUENCE_OF(CMS_KeyAgreeRecipientInfo
, recipientEncryptedKeys
, CMS_RecipientEncryptedKey
)
171 } ASN1_SEQUENCE_END_cb(CMS_KeyAgreeRecipientInfo
, CMS_KeyAgreeRecipientInfo
)
173 ASN1_SEQUENCE(CMS_KEKIdentifier
) = {
174 ASN1_SIMPLE(CMS_KEKIdentifier
, keyIdentifier
, ASN1_OCTET_STRING
),
175 ASN1_OPT(CMS_KEKIdentifier
, date
, ASN1_GENERALIZEDTIME
),
176 ASN1_OPT(CMS_KEKIdentifier
, other
, CMS_OtherKeyAttribute
)
177 } static_ASN1_SEQUENCE_END(CMS_KEKIdentifier
)
179 ASN1_SEQUENCE(CMS_KEKRecipientInfo
) = {
180 ASN1_EMBED(CMS_KEKRecipientInfo
, version
, INT32
),
181 ASN1_SIMPLE(CMS_KEKRecipientInfo
, kekid
, CMS_KEKIdentifier
),
182 ASN1_SIMPLE(CMS_KEKRecipientInfo
, keyEncryptionAlgorithm
, X509_ALGOR
),
183 ASN1_SIMPLE(CMS_KEKRecipientInfo
, encryptedKey
, ASN1_OCTET_STRING
)
184 } ASN1_SEQUENCE_END(CMS_KEKRecipientInfo
)
186 ASN1_SEQUENCE(CMS_PasswordRecipientInfo
) = {
187 ASN1_EMBED(CMS_PasswordRecipientInfo
, version
, INT32
),
188 ASN1_IMP_OPT(CMS_PasswordRecipientInfo
, keyDerivationAlgorithm
, X509_ALGOR
, 0),
189 ASN1_SIMPLE(CMS_PasswordRecipientInfo
, keyEncryptionAlgorithm
, X509_ALGOR
),
190 ASN1_SIMPLE(CMS_PasswordRecipientInfo
, encryptedKey
, ASN1_OCTET_STRING
)
191 } ASN1_SEQUENCE_END(CMS_PasswordRecipientInfo
)
193 ASN1_SEQUENCE(CMS_OtherRecipientInfo
) = {
194 ASN1_SIMPLE(CMS_OtherRecipientInfo
, oriType
, ASN1_OBJECT
),
195 ASN1_OPT(CMS_OtherRecipientInfo
, oriValue
, ASN1_ANY
)
196 } static_ASN1_SEQUENCE_END(CMS_OtherRecipientInfo
)
198 /* Free up RecipientInfo additional data */
199 static int cms_ri_cb(int operation
, ASN1_VALUE
**pval
, const ASN1_ITEM
*it
,
202 if (operation
== ASN1_OP_FREE_PRE
) {
203 CMS_RecipientInfo
*ri
= (CMS_RecipientInfo
*)*pval
;
204 if (ri
->type
== CMS_RECIPINFO_TRANS
) {
205 CMS_KeyTransRecipientInfo
*ktri
= ri
->d
.ktri
;
206 EVP_PKEY_free(ktri
->pkey
);
207 X509_free(ktri
->recip
);
208 EVP_PKEY_CTX_free(ktri
->pctx
);
209 } else if (ri
->type
== CMS_RECIPINFO_KEK
) {
210 CMS_KEKRecipientInfo
*kekri
= ri
->d
.kekri
;
211 OPENSSL_clear_free(kekri
->key
, kekri
->keylen
);
212 } else if (ri
->type
== CMS_RECIPINFO_PASS
) {
213 CMS_PasswordRecipientInfo
*pwri
= ri
->d
.pwri
;
214 OPENSSL_clear_free(pwri
->pass
, pwri
->passlen
);
220 ASN1_CHOICE_cb(CMS_RecipientInfo
, cms_ri_cb
) = {
221 ASN1_SIMPLE(CMS_RecipientInfo
, d
.ktri
, CMS_KeyTransRecipientInfo
),
222 ASN1_IMP(CMS_RecipientInfo
, d
.kari
, CMS_KeyAgreeRecipientInfo
, 1),
223 ASN1_IMP(CMS_RecipientInfo
, d
.kekri
, CMS_KEKRecipientInfo
, 2),
224 ASN1_IMP(CMS_RecipientInfo
, d
.pwri
, CMS_PasswordRecipientInfo
, 3),
225 ASN1_IMP(CMS_RecipientInfo
, d
.ori
, CMS_OtherRecipientInfo
, 4)
226 } ASN1_CHOICE_END_cb(CMS_RecipientInfo
, CMS_RecipientInfo
, type
)
228 ASN1_NDEF_SEQUENCE(CMS_EnvelopedData
) = {
229 ASN1_EMBED(CMS_EnvelopedData
, version
, INT32
),
230 ASN1_IMP_OPT(CMS_EnvelopedData
, originatorInfo
, CMS_OriginatorInfo
, 0),
231 ASN1_SET_OF(CMS_EnvelopedData
, recipientInfos
, CMS_RecipientInfo
),
232 ASN1_SIMPLE(CMS_EnvelopedData
, encryptedContentInfo
, CMS_EncryptedContentInfo
),
233 ASN1_IMP_SET_OF_OPT(CMS_EnvelopedData
, unprotectedAttrs
, X509_ATTRIBUTE
, 1)
234 } ASN1_NDEF_SEQUENCE_END(CMS_EnvelopedData
)
236 ASN1_NDEF_SEQUENCE(CMS_DigestedData
) = {
237 ASN1_EMBED(CMS_DigestedData
, version
, INT32
),
238 ASN1_SIMPLE(CMS_DigestedData
, digestAlgorithm
, X509_ALGOR
),
239 ASN1_SIMPLE(CMS_DigestedData
, encapContentInfo
, CMS_EncapsulatedContentInfo
),
240 ASN1_SIMPLE(CMS_DigestedData
, digest
, ASN1_OCTET_STRING
)
241 } ASN1_NDEF_SEQUENCE_END(CMS_DigestedData
)
243 ASN1_NDEF_SEQUENCE(CMS_EncryptedData
) = {
244 ASN1_EMBED(CMS_EncryptedData
, version
, INT32
),
245 ASN1_SIMPLE(CMS_EncryptedData
, encryptedContentInfo
, CMS_EncryptedContentInfo
),
246 ASN1_IMP_SET_OF_OPT(CMS_EncryptedData
, unprotectedAttrs
, X509_ATTRIBUTE
, 1)
247 } ASN1_NDEF_SEQUENCE_END(CMS_EncryptedData
)
249 /* Defined in RFC 5083 - Section 2.1. AuthEnvelopedData Type */
250 ASN1_NDEF_SEQUENCE(CMS_AuthEnvelopedData
) = {
251 ASN1_EMBED(CMS_AuthEnvelopedData
, version
, INT32
),
252 ASN1_IMP_OPT(CMS_AuthEnvelopedData
, originatorInfo
, CMS_OriginatorInfo
, 0),
253 ASN1_SET_OF(CMS_AuthEnvelopedData
, recipientInfos
, CMS_RecipientInfo
),
254 ASN1_SIMPLE(CMS_AuthEnvelopedData
, authEncryptedContentInfo
, CMS_EncryptedContentInfo
),
255 ASN1_IMP_SET_OF_OPT(CMS_AuthEnvelopedData
, authAttrs
, X509_ALGOR
, 2),
256 ASN1_SIMPLE(CMS_AuthEnvelopedData
, mac
, ASN1_OCTET_STRING
),
257 ASN1_IMP_SET_OF_OPT(CMS_AuthEnvelopedData
, unauthAttrs
, X509_ALGOR
, 3)
258 } ASN1_NDEF_SEQUENCE_END(CMS_AuthEnvelopedData
)
260 ASN1_NDEF_SEQUENCE(CMS_AuthenticatedData
) = {
261 ASN1_EMBED(CMS_AuthenticatedData
, version
, INT32
),
262 ASN1_IMP_OPT(CMS_AuthenticatedData
, originatorInfo
, CMS_OriginatorInfo
, 0),
263 ASN1_SET_OF(CMS_AuthenticatedData
, recipientInfos
, CMS_RecipientInfo
),
264 ASN1_SIMPLE(CMS_AuthenticatedData
, macAlgorithm
, X509_ALGOR
),
265 ASN1_IMP(CMS_AuthenticatedData
, digestAlgorithm
, X509_ALGOR
, 1),
266 ASN1_SIMPLE(CMS_AuthenticatedData
, encapContentInfo
, CMS_EncapsulatedContentInfo
),
267 ASN1_IMP_SET_OF_OPT(CMS_AuthenticatedData
, authAttrs
, X509_ALGOR
, 2),
268 ASN1_SIMPLE(CMS_AuthenticatedData
, mac
, ASN1_OCTET_STRING
),
269 ASN1_IMP_SET_OF_OPT(CMS_AuthenticatedData
, unauthAttrs
, X509_ALGOR
, 3)
270 } static_ASN1_NDEF_SEQUENCE_END(CMS_AuthenticatedData
)
272 ASN1_NDEF_SEQUENCE(CMS_CompressedData
) = {
273 ASN1_EMBED(CMS_CompressedData
, version
, INT32
),
274 ASN1_SIMPLE(CMS_CompressedData
, compressionAlgorithm
, X509_ALGOR
),
275 ASN1_SIMPLE(CMS_CompressedData
, encapContentInfo
, CMS_EncapsulatedContentInfo
),
276 } ASN1_NDEF_SEQUENCE_END(CMS_CompressedData
)
278 /* This is the ANY DEFINED BY table for the top level ContentInfo structure */
280 ASN1_ADB_TEMPLATE(cms_default
) = ASN1_EXP(CMS_ContentInfo
, d
.other
, ASN1_ANY
, 0);
282 ASN1_ADB(CMS_ContentInfo
) = {
283 ADB_ENTRY(NID_pkcs7_data
, ASN1_NDEF_EXP(CMS_ContentInfo
, d
.data
, ASN1_OCTET_STRING_NDEF
, 0)),
284 ADB_ENTRY(NID_pkcs7_signed
, ASN1_NDEF_EXP(CMS_ContentInfo
, d
.signedData
, CMS_SignedData
, 0)),
285 ADB_ENTRY(NID_pkcs7_enveloped
, ASN1_NDEF_EXP(CMS_ContentInfo
, d
.envelopedData
, CMS_EnvelopedData
, 0)),
286 ADB_ENTRY(NID_pkcs7_digest
, ASN1_NDEF_EXP(CMS_ContentInfo
, d
.digestedData
, CMS_DigestedData
, 0)),
287 ADB_ENTRY(NID_pkcs7_encrypted
, ASN1_NDEF_EXP(CMS_ContentInfo
, d
.encryptedData
, CMS_EncryptedData
, 0)),
288 ADB_ENTRY(NID_id_smime_ct_authEnvelopedData
, ASN1_NDEF_EXP(CMS_ContentInfo
, d
.authEnvelopedData
, CMS_AuthEnvelopedData
, 0)),
289 ADB_ENTRY(NID_id_smime_ct_authData
, ASN1_NDEF_EXP(CMS_ContentInfo
, d
.authenticatedData
, CMS_AuthenticatedData
, 0)),
290 ADB_ENTRY(NID_id_smime_ct_compressedData
, ASN1_NDEF_EXP(CMS_ContentInfo
, d
.compressedData
, CMS_CompressedData
, 0)),
291 } ASN1_ADB_END(CMS_ContentInfo
, 0, contentType
, 0, &cms_default_tt
, NULL
);
293 /* CMS streaming support */
294 static int cms_cb(int operation
, ASN1_VALUE
**pval
, const ASN1_ITEM
*it
,
297 ASN1_STREAM_ARG
*sarg
= exarg
;
298 CMS_ContentInfo
*cms
= NULL
;
300 cms
= (CMS_ContentInfo
*)*pval
;
305 case ASN1_OP_STREAM_PRE
:
306 if (CMS_stream(&sarg
->boundary
, cms
) <= 0)
309 case ASN1_OP_DETACHED_PRE
:
310 sarg
->ndef_bio
= CMS_dataInit(cms
, sarg
->out
);
315 case ASN1_OP_STREAM_POST
:
316 case ASN1_OP_DETACHED_POST
:
317 if (CMS_dataFinal(cms
, sarg
->ndef_bio
) <= 0)
325 ASN1_NDEF_SEQUENCE_cb(CMS_ContentInfo
, cms_cb
) = {
326 ASN1_SIMPLE(CMS_ContentInfo
, contentType
, ASN1_OBJECT
),
327 ASN1_ADB_OBJECT(CMS_ContentInfo
)
328 } ASN1_NDEF_SEQUENCE_END_cb(CMS_ContentInfo
, CMS_ContentInfo
)
330 /* Specials for signed attributes */
333 * When signing attributes we want to reorder them to match the sorted
337 ASN1_ITEM_TEMPLATE(CMS_Attributes_Sign
) =
338 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SET_ORDER
, 0, CMS_ATTRIBUTES
, X509_ATTRIBUTE
)
339 ASN1_ITEM_TEMPLATE_END(CMS_Attributes_Sign
)
342 * When verifying attributes we need to use the received order. So we use
343 * SEQUENCE OF and tag it to SET OF
346 ASN1_ITEM_TEMPLATE(CMS_Attributes_Verify
) =
347 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF
| ASN1_TFLG_IMPTAG
| ASN1_TFLG_UNIVERSAL
,
348 V_ASN1_SET
, CMS_ATTRIBUTES
, X509_ATTRIBUTE
)
349 ASN1_ITEM_TEMPLATE_END(CMS_Attributes_Verify
)
353 ASN1_CHOICE(CMS_ReceiptsFrom
) = {
354 ASN1_IMP_EMBED(CMS_ReceiptsFrom
, d
.allOrFirstTier
, INT32
, 0),
355 ASN1_IMP_SEQUENCE_OF(CMS_ReceiptsFrom
, d
.receiptList
, GENERAL_NAMES
, 1)
356 } static_ASN1_CHOICE_END(CMS_ReceiptsFrom
)
358 ASN1_SEQUENCE(CMS_ReceiptRequest
) = {
359 ASN1_SIMPLE(CMS_ReceiptRequest
, signedContentIdentifier
, ASN1_OCTET_STRING
),
360 ASN1_SIMPLE(CMS_ReceiptRequest
, receiptsFrom
, CMS_ReceiptsFrom
),
361 ASN1_SEQUENCE_OF(CMS_ReceiptRequest
, receiptsTo
, GENERAL_NAMES
)
362 } ASN1_SEQUENCE_END(CMS_ReceiptRequest
)
364 ASN1_SEQUENCE(CMS_Receipt
) = {
365 ASN1_EMBED(CMS_Receipt
, version
, INT32
),
366 ASN1_SIMPLE(CMS_Receipt
, contentType
, ASN1_OBJECT
),
367 ASN1_SIMPLE(CMS_Receipt
, signedContentIdentifier
, ASN1_OCTET_STRING
),
368 ASN1_SIMPLE(CMS_Receipt
, originatorSignatureValue
, ASN1_OCTET_STRING
)
369 } ASN1_SEQUENCE_END(CMS_Receipt
)
372 * Utilities to encode the CMS_SharedInfo structure used during key
378 ASN1_OCTET_STRING
*entityUInfo
;
379 ASN1_OCTET_STRING
*suppPubInfo
;
382 ASN1_SEQUENCE(CMS_SharedInfo
) = {
383 ASN1_SIMPLE(CMS_SharedInfo
, keyInfo
, X509_ALGOR
),
384 ASN1_EXP_OPT(CMS_SharedInfo
, entityUInfo
, ASN1_OCTET_STRING
, 0),
385 ASN1_EXP_OPT(CMS_SharedInfo
, suppPubInfo
, ASN1_OCTET_STRING
, 2),
386 } static_ASN1_SEQUENCE_END(CMS_SharedInfo
)
388 int CMS_SharedInfo_encode(unsigned char **pder
, X509_ALGOR
*kekalg
,
389 ASN1_OCTET_STRING
*ukm
, int keylen
)
392 CMS_SharedInfo
*pecsi
;
398 ASN1_OCTET_STRING oklen
;
403 kl
[0] = (keylen
>> 24) & 0xff;
404 kl
[1] = (keylen
>> 16) & 0xff;
405 kl
[2] = (keylen
>> 8) & 0xff;
406 kl
[3] = keylen
& 0xff;
409 oklen
.type
= V_ASN1_OCTET_STRING
;
411 ecsi
.keyInfo
= kekalg
;
412 ecsi
.entityUInfo
= ukm
;
413 ecsi
.suppPubInfo
= &oklen
;
415 return ASN1_item_i2d(intsi
.a
, pder
, ASN1_ITEM_rptr(CMS_SharedInfo
));