123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295 |
- #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
- #pragma warning disable
- using System;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.CryptoPro;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.EdEC;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Oiw;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Pkcs;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Rosstandart;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Sec;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X509;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X9;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Generators;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Parameters;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Math;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Security;
- using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
- namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Pkcs
- {
- public sealed class PrivateKeyInfoFactory
- {
- private PrivateKeyInfoFactory()
- {
- }
- public static PrivateKeyInfo CreatePrivateKeyInfo(
- AsymmetricKeyParameter privateKey)
- {
- return CreatePrivateKeyInfo(privateKey, null);
- }
- /**
- * Create a PrivateKeyInfo representation of a private key with attributes.
- *
- * @param privateKey the key to be encoded into the info object.
- * @param attributes the set of attributes to be included.
- * @return the appropriate PrivateKeyInfo
- * @throws java.io.IOException on an error encoding the key
- */
- public static PrivateKeyInfo CreatePrivateKeyInfo(AsymmetricKeyParameter privateKey, Asn1Set attributes)
- {
- if (privateKey == null)
- throw new ArgumentNullException("privateKey");
- if (!privateKey.IsPrivate)
- throw new ArgumentException("Public key passed - private key expected", "privateKey");
- if (privateKey is ElGamalPrivateKeyParameters)
- {
- ElGamalPrivateKeyParameters _key = (ElGamalPrivateKeyParameters)privateKey;
- ElGamalParameters egp = _key.Parameters;
- return new PrivateKeyInfo(
- new AlgorithmIdentifier(OiwObjectIdentifiers.ElGamalAlgorithm, new ElGamalParameter(egp.P, egp.G).ToAsn1Object()),
- new DerInteger(_key.X),
- attributes);
- }
- if (privateKey is DsaPrivateKeyParameters)
- {
- DsaPrivateKeyParameters _key = (DsaPrivateKeyParameters)privateKey;
- DsaParameters dp = _key.Parameters;
- return new PrivateKeyInfo(
- new AlgorithmIdentifier(X9ObjectIdentifiers.IdDsa, new DsaParameter(dp.P, dp.Q, dp.G).ToAsn1Object()),
- new DerInteger(_key.X),
- attributes);
- }
- if (privateKey is DHPrivateKeyParameters)
- {
- DHPrivateKeyParameters _key = (DHPrivateKeyParameters)privateKey;
- DHParameter p = new DHParameter(
- _key.Parameters.P, _key.Parameters.G, _key.Parameters.L);
- return new PrivateKeyInfo(
- new AlgorithmIdentifier(_key.AlgorithmOid, p.ToAsn1Object()),
- new DerInteger(_key.X),
- attributes);
- }
- if (privateKey is RsaKeyParameters)
- {
- AlgorithmIdentifier algID = new AlgorithmIdentifier(
- PkcsObjectIdentifiers.RsaEncryption, DerNull.Instance);
- RsaPrivateKeyStructure keyStruct;
- if (privateKey is RsaPrivateCrtKeyParameters)
- {
- RsaPrivateCrtKeyParameters _key = (RsaPrivateCrtKeyParameters)privateKey;
- keyStruct = new RsaPrivateKeyStructure(
- _key.Modulus,
- _key.PublicExponent,
- _key.Exponent,
- _key.P,
- _key.Q,
- _key.DP,
- _key.DQ,
- _key.QInv);
- }
- else
- {
- RsaKeyParameters _key = (RsaKeyParameters) privateKey;
- keyStruct = new RsaPrivateKeyStructure(
- _key.Modulus,
- BigInteger.Zero,
- _key.Exponent,
- BigInteger.Zero,
- BigInteger.Zero,
- BigInteger.Zero,
- BigInteger.Zero,
- BigInteger.Zero);
- }
- return new PrivateKeyInfo(algID, keyStruct.ToAsn1Object(), attributes);
- }
- if (privateKey is ECPrivateKeyParameters)
- {
- ECPrivateKeyParameters priv = (ECPrivateKeyParameters) privateKey;
- DerBitString publicKey = new DerBitString(ECKeyPairGenerator.GetCorrespondingPublicKey(priv).Q.GetEncoded(false));
- ECDomainParameters dp = priv.Parameters;
- // ECGOST3410
- if (dp is ECGost3410Parameters)
- {
- ECGost3410Parameters domainParameters = (ECGost3410Parameters) dp;
- Gost3410PublicKeyAlgParameters gostParams = new Gost3410PublicKeyAlgParameters(
- (domainParameters).PublicKeyParamSet,
- (domainParameters).DigestParamSet,
- (domainParameters).EncryptionParamSet);
- bool is512 = priv.D.BitLength > 256;
- DerObjectIdentifier identifier = (is512) ?
- RosstandartObjectIdentifiers.id_tc26_gost_3410_12_512 :
- RosstandartObjectIdentifiers.id_tc26_gost_3410_12_256;
- int size = (is512) ? 64 : 32;
- byte[] encKey = new byte[size];
- ExtractBytes(encKey, size, 0, priv.D);
- return new PrivateKeyInfo(new AlgorithmIdentifier(identifier, gostParams), new DerOctetString(encKey));
- }
- int orderBitLength = dp.N.BitLength;
- AlgorithmIdentifier algID;
- ECPrivateKeyStructure ec;
- if (priv.AlgorithmName == "ECGOST3410")
- {
- if (priv.PublicKeyParamSet == null)
- throw BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateNotImplementedException("Not a CryptoPro parameter set");
- Gost3410PublicKeyAlgParameters gostParams = new Gost3410PublicKeyAlgParameters(
- priv.PublicKeyParamSet, CryptoProObjectIdentifiers.GostR3411x94CryptoProParamSet);
- algID = new AlgorithmIdentifier(CryptoProObjectIdentifiers.GostR3410x2001, gostParams);
- // TODO Do we need to pass any parameters here?
- ec = new ECPrivateKeyStructure(orderBitLength, priv.D, publicKey, null);
- }
- else
- {
- X962Parameters x962;
- if (priv.PublicKeyParamSet == null)
- {
- X9ECParameters ecP = new X9ECParameters(dp.Curve, dp.G, dp.N, dp.H, dp.GetSeed());
- x962 = new X962Parameters(ecP);
- }
- else
- {
- x962 = new X962Parameters(priv.PublicKeyParamSet);
- }
- ec = new ECPrivateKeyStructure(orderBitLength, priv.D, publicKey, x962);
- algID = new AlgorithmIdentifier(X9ObjectIdentifiers.IdECPublicKey, x962);
- }
- return new PrivateKeyInfo(algID, ec, attributes);
- }
- if (privateKey is Gost3410PrivateKeyParameters)
- {
- Gost3410PrivateKeyParameters _key = (Gost3410PrivateKeyParameters)privateKey;
- if (_key.PublicKeyParamSet == null)
- throw BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateNotImplementedException("Not a CryptoPro parameter set");
- byte[] keyEnc = _key.X.ToByteArrayUnsigned();
- byte[] keyBytes = new byte[keyEnc.Length];
- for (int i = 0; i != keyBytes.Length; i++)
- {
- keyBytes[i] = keyEnc[keyEnc.Length - 1 - i]; // must be little endian
- }
- Gost3410PublicKeyAlgParameters algParams = new Gost3410PublicKeyAlgParameters(
- _key.PublicKeyParamSet, CryptoProObjectIdentifiers.GostR3411x94CryptoProParamSet, null);
- AlgorithmIdentifier algID = new AlgorithmIdentifier(
- CryptoProObjectIdentifiers.GostR3410x94,
- algParams.ToAsn1Object());
- return new PrivateKeyInfo(algID, new DerOctetString(keyBytes), attributes);
- }
- if (privateKey is X448PrivateKeyParameters)
- {
- X448PrivateKeyParameters key = (X448PrivateKeyParameters)privateKey;
- return new PrivateKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_X448),
- new DerOctetString(key.GetEncoded()), attributes, key.GeneratePublicKey().GetEncoded());
- }
- if (privateKey is X25519PrivateKeyParameters)
- {
- X25519PrivateKeyParameters key = (X25519PrivateKeyParameters)privateKey;
- return new PrivateKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_X25519),
- new DerOctetString(key.GetEncoded()), attributes, key.GeneratePublicKey().GetEncoded());
- }
- if (privateKey is Ed448PrivateKeyParameters)
- {
- Ed448PrivateKeyParameters key = (Ed448PrivateKeyParameters)privateKey;
- return new PrivateKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_Ed448),
- new DerOctetString(key.GetEncoded()), attributes, key.GeneratePublicKey().GetEncoded());
- }
- if (privateKey is Ed25519PrivateKeyParameters)
- {
- Ed25519PrivateKeyParameters key = (Ed25519PrivateKeyParameters)privateKey;
- return new PrivateKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_Ed25519),
- new DerOctetString(key.GetEncoded()), attributes, key.GeneratePublicKey().GetEncoded());
- }
- throw new ArgumentException("Class provided is not convertible: " + BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.GetTypeName(privateKey));
- }
- public static PrivateKeyInfo CreatePrivateKeyInfo(
- char[] passPhrase,
- EncryptedPrivateKeyInfo encInfo)
- {
- return CreatePrivateKeyInfo(passPhrase, false, encInfo);
- }
- public static PrivateKeyInfo CreatePrivateKeyInfo(
- char[] passPhrase,
- bool wrongPkcs12Zero,
- EncryptedPrivateKeyInfo encInfo)
- {
- AlgorithmIdentifier algID = encInfo.EncryptionAlgorithm;
- IBufferedCipher cipher = PbeUtilities.CreateEngine(algID) as IBufferedCipher;
- if (cipher == null)
- throw new Exception("Unknown encryption algorithm: " + algID.Algorithm);
- ICipherParameters cipherParameters = PbeUtilities.GenerateCipherParameters(
- algID, passPhrase, wrongPkcs12Zero);
- cipher.Init(false, cipherParameters);
- byte[] keyBytes = cipher.DoFinal(encInfo.GetEncryptedData());
- return PrivateKeyInfo.GetInstance(keyBytes);
- }
- private static void ExtractBytes(byte[] encKey, int size, int offSet, BigInteger bI)
- {
- byte[] val = bI.ToByteArray();
- if (val.Length < size)
- {
- byte[] tmp = new byte[size];
- Array.Copy(val, 0, tmp, tmp.Length - val.Length, val.Length);
- val = tmp;
- }
- for (int i = 0; i != size; i++)
- {
- encKey[offSet + i] = val[val.Length - 1 - i];
- }
- }
- }
- }
- #pragma warning restore
- #endif
|