SubjectPublicKeyInfoFactory.cs 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281
  1. #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
  2. #pragma warning disable
  3. using System;
  4. using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Parameters;
  5. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1;
  6. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.CryptoPro;
  7. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.EdEC;
  8. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Oiw;
  9. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Pkcs;
  10. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Rosstandart;
  11. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X509;
  12. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X9;
  13. using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto;
  14. using BestHTTP.SecureProtocol.Org.BouncyCastle.Math;
  15. using BestHTTP.SecureProtocol.Org.BouncyCastle.Math.EC;
  16. using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
  17. using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Encoders;
  18. namespace BestHTTP.SecureProtocol.Org.BouncyCastle.X509
  19. {
  20. /// <summary>
  21. /// A factory to produce Public Key Info Objects.
  22. /// </summary>
  23. public sealed class SubjectPublicKeyInfoFactory
  24. {
  25. private SubjectPublicKeyInfoFactory()
  26. {
  27. }
  28. /// <summary>
  29. /// Create a Subject Public Key Info object for a given public key.
  30. /// </summary>
  31. /// <param name="publicKey">One of ElGammalPublicKeyParameters, DSAPublicKeyParameter, DHPublicKeyParameters, RsaKeyParameters or ECPublicKeyParameters</param>
  32. /// <returns>A subject public key info object.</returns>
  33. /// <exception cref="Exception">Throw exception if object provided is not one of the above.</exception>
  34. public static SubjectPublicKeyInfo CreateSubjectPublicKeyInfo(
  35. AsymmetricKeyParameter publicKey)
  36. {
  37. if (publicKey == null)
  38. throw new ArgumentNullException("publicKey");
  39. if (publicKey.IsPrivate)
  40. throw new ArgumentException("Private key passed - public key expected.", "publicKey");
  41. if (publicKey is ElGamalPublicKeyParameters)
  42. {
  43. ElGamalPublicKeyParameters _key = (ElGamalPublicKeyParameters)publicKey;
  44. ElGamalParameters kp = _key.Parameters;
  45. SubjectPublicKeyInfo info = new SubjectPublicKeyInfo(
  46. new AlgorithmIdentifier(
  47. OiwObjectIdentifiers.ElGamalAlgorithm,
  48. new ElGamalParameter(kp.P, kp.G).ToAsn1Object()),
  49. new DerInteger(_key.Y));
  50. return info;
  51. }
  52. if (publicKey is DsaPublicKeyParameters)
  53. {
  54. DsaPublicKeyParameters _key = (DsaPublicKeyParameters) publicKey;
  55. DsaParameters kp = _key.Parameters;
  56. Asn1Encodable ae = kp == null
  57. ? null
  58. : new DsaParameter(kp.P, kp.Q, kp.G).ToAsn1Object();
  59. return new SubjectPublicKeyInfo(
  60. new AlgorithmIdentifier(X9ObjectIdentifiers.IdDsa, ae),
  61. new DerInteger(_key.Y));
  62. }
  63. if (publicKey is DHPublicKeyParameters)
  64. {
  65. DHPublicKeyParameters _key = (DHPublicKeyParameters) publicKey;
  66. DHParameters kp = _key.Parameters;
  67. SubjectPublicKeyInfo info = new SubjectPublicKeyInfo(
  68. new AlgorithmIdentifier(
  69. _key.AlgorithmOid,
  70. new DHParameter(kp.P, kp.G, kp.L).ToAsn1Object()),
  71. new DerInteger(_key.Y));
  72. return info;
  73. } // End of DH
  74. if (publicKey is RsaKeyParameters)
  75. {
  76. RsaKeyParameters _key = (RsaKeyParameters) publicKey;
  77. SubjectPublicKeyInfo info = new SubjectPublicKeyInfo(
  78. new AlgorithmIdentifier(PkcsObjectIdentifiers.RsaEncryption, DerNull.Instance),
  79. new RsaPublicKeyStructure(_key.Modulus, _key.Exponent).ToAsn1Object());
  80. return info;
  81. } // End of RSA.
  82. if (publicKey is ECPublicKeyParameters)
  83. {
  84. ECPublicKeyParameters _key = (ECPublicKeyParameters) publicKey;
  85. if (_key.Parameters is ECGost3410Parameters)
  86. {
  87. ECGost3410Parameters gostParams = (ECGost3410Parameters)_key.Parameters;
  88. BigInteger bX = _key.Q.AffineXCoord.ToBigInteger();
  89. BigInteger bY = _key.Q.AffineYCoord.ToBigInteger();
  90. bool is512 = (bX.BitLength > 256);
  91. Gost3410PublicKeyAlgParameters parameters = new Gost3410PublicKeyAlgParameters(
  92. gostParams.PublicKeyParamSet,
  93. gostParams.DigestParamSet,
  94. gostParams.EncryptionParamSet);
  95. int encKeySize;
  96. int offset;
  97. DerObjectIdentifier algIdentifier;
  98. if (is512)
  99. {
  100. encKeySize = 128;
  101. offset = 64;
  102. algIdentifier = RosstandartObjectIdentifiers.id_tc26_gost_3410_12_512;
  103. }
  104. else
  105. {
  106. encKeySize = 64;
  107. offset = 32;
  108. algIdentifier = RosstandartObjectIdentifiers.id_tc26_gost_3410_12_256;
  109. }
  110. byte[] encKey = new byte[encKeySize];
  111. ExtractBytes(encKey, encKeySize / 2, 0, bX);
  112. ExtractBytes(encKey, encKeySize / 2, offset, bY);
  113. return new SubjectPublicKeyInfo(new AlgorithmIdentifier(algIdentifier, parameters), new DerOctetString(encKey));
  114. } // End of ECGOST3410_2012
  115. if (_key.AlgorithmName == "ECGOST3410")
  116. {
  117. if (_key.PublicKeyParamSet == null)
  118. throw BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateNotImplementedException("Not a CryptoPro parameter set");
  119. ECPoint q = _key.Q.Normalize();
  120. BigInteger bX = q.AffineXCoord.ToBigInteger();
  121. BigInteger bY = q.AffineYCoord.ToBigInteger();
  122. byte[] encKey = new byte[64];
  123. ExtractBytes(encKey, 0, bX);
  124. ExtractBytes(encKey, 32, bY);
  125. Gost3410PublicKeyAlgParameters gostParams = new Gost3410PublicKeyAlgParameters(
  126. _key.PublicKeyParamSet, CryptoProObjectIdentifiers.GostR3411x94CryptoProParamSet);
  127. AlgorithmIdentifier algID = new AlgorithmIdentifier(
  128. CryptoProObjectIdentifiers.GostR3410x2001,
  129. gostParams.ToAsn1Object());
  130. return new SubjectPublicKeyInfo(algID, new DerOctetString(encKey));
  131. }
  132. else
  133. {
  134. X962Parameters x962;
  135. if (_key.PublicKeyParamSet == null)
  136. {
  137. ECDomainParameters kp = _key.Parameters;
  138. X9ECParameters ecP = new X9ECParameters(kp.Curve, kp.G, kp.N, kp.H, kp.GetSeed());
  139. x962 = new X962Parameters(ecP);
  140. }
  141. else
  142. {
  143. x962 = new X962Parameters(_key.PublicKeyParamSet);
  144. }
  145. byte[] pubKey = _key.Q.GetEncoded(false);
  146. AlgorithmIdentifier algID = new AlgorithmIdentifier(
  147. X9ObjectIdentifiers.IdECPublicKey, x962.ToAsn1Object());
  148. return new SubjectPublicKeyInfo(algID, pubKey);
  149. }
  150. } // End of EC
  151. if (publicKey is Gost3410PublicKeyParameters)
  152. {
  153. Gost3410PublicKeyParameters _key = (Gost3410PublicKeyParameters) publicKey;
  154. if (_key.PublicKeyParamSet == null)
  155. throw BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateNotImplementedException("Not a CryptoPro parameter set");
  156. byte[] keyEnc = _key.Y.ToByteArrayUnsigned();
  157. byte[] keyBytes = new byte[keyEnc.Length];
  158. for (int i = 0; i != keyBytes.Length; i++)
  159. {
  160. keyBytes[i] = keyEnc[keyEnc.Length - 1 - i]; // must be little endian
  161. }
  162. Gost3410PublicKeyAlgParameters algParams = new Gost3410PublicKeyAlgParameters(
  163. _key.PublicKeyParamSet, CryptoProObjectIdentifiers.GostR3411x94CryptoProParamSet);
  164. AlgorithmIdentifier algID = new AlgorithmIdentifier(
  165. CryptoProObjectIdentifiers.GostR3410x94,
  166. algParams.ToAsn1Object());
  167. return new SubjectPublicKeyInfo(algID, new DerOctetString(keyBytes));
  168. }
  169. if (publicKey is X448PublicKeyParameters)
  170. {
  171. X448PublicKeyParameters key = (X448PublicKeyParameters)publicKey;
  172. return new SubjectPublicKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_X448), key.GetEncoded());
  173. }
  174. if (publicKey is X25519PublicKeyParameters)
  175. {
  176. X25519PublicKeyParameters key = (X25519PublicKeyParameters)publicKey;
  177. return new SubjectPublicKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_X25519), key.GetEncoded());
  178. }
  179. if (publicKey is Ed448PublicKeyParameters)
  180. {
  181. Ed448PublicKeyParameters key = (Ed448PublicKeyParameters)publicKey;
  182. return new SubjectPublicKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_Ed448), key.GetEncoded());
  183. }
  184. if (publicKey is Ed25519PublicKeyParameters)
  185. {
  186. Ed25519PublicKeyParameters key = (Ed25519PublicKeyParameters)publicKey;
  187. return new SubjectPublicKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_Ed25519), key.GetEncoded());
  188. }
  189. throw new ArgumentException("Class provided no convertible: " + BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.GetTypeName(publicKey));
  190. }
  191. private static void ExtractBytes(
  192. byte[] encKey,
  193. int offset,
  194. BigInteger bI)
  195. {
  196. byte[] val = bI.ToByteArray();
  197. int n = (bI.BitLength + 7) / 8;
  198. for (int i = 0; i < n; ++i)
  199. {
  200. encKey[offset + i] = val[val.Length - 1 - i];
  201. }
  202. }
  203. private static void ExtractBytes(byte[] encKey, int size, int offSet, BigInteger bI)
  204. {
  205. byte[] val = bI.ToByteArray();
  206. if (val.Length < size)
  207. {
  208. byte[] tmp = new byte[size];
  209. Array.Copy(val, 0, tmp, tmp.Length - val.Length, val.Length);
  210. val = tmp;
  211. }
  212. for (int i = 0; i != size; i++)
  213. {
  214. encKey[offSet + i] = val[val.Length - 1 - i];
  215. }
  216. }
  217. }
  218. }
  219. #pragma warning restore
  220. #endif