SubjectPublicKeyInfoFactory.cs 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277
  1. #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
  2. #pragma warning disable
  3. using System;
  4. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Asn1;
  5. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Asn1.CryptoPro;
  6. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Asn1.EdEC;
  7. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Asn1.Oiw;
  8. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Asn1.Pkcs;
  9. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Asn1.Rosstandart;
  10. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Asn1.X509;
  11. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Asn1.X9;
  12. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Crypto;
  13. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Crypto.Parameters;
  14. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Math;
  15. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Math.EC;
  16. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Utilities;
  17. namespace Best.HTTP.SecureProtocol.Org.BouncyCastle.X509
  18. {
  19. /// <summary>
  20. /// A factory to produce Public Key Info Objects.
  21. /// </summary>
  22. public static class SubjectPublicKeyInfoFactory
  23. {
  24. /// <summary>
  25. /// Create a Subject Public Key Info object for a given public key.
  26. /// </summary>
  27. /// <param name="publicKey">One of ElGammalPublicKeyParameters, DSAPublicKeyParameter, DHPublicKeyParameters, RsaKeyParameters or ECPublicKeyParameters</param>
  28. /// <returns>A subject public key info object.</returns>
  29. /// <exception cref="Exception">Throw exception if object provided is not one of the above.</exception>
  30. public static SubjectPublicKeyInfo CreateSubjectPublicKeyInfo(
  31. AsymmetricKeyParameter publicKey)
  32. {
  33. if (publicKey == null)
  34. throw new ArgumentNullException("publicKey");
  35. if (publicKey.IsPrivate)
  36. throw new ArgumentException("Private key passed - public key expected.", "publicKey");
  37. if (publicKey is ElGamalPublicKeyParameters)
  38. {
  39. ElGamalPublicKeyParameters _key = (ElGamalPublicKeyParameters)publicKey;
  40. ElGamalParameters kp = _key.Parameters;
  41. SubjectPublicKeyInfo info = new SubjectPublicKeyInfo(
  42. new AlgorithmIdentifier(
  43. OiwObjectIdentifiers.ElGamalAlgorithm,
  44. new ElGamalParameter(kp.P, kp.G).ToAsn1Object()),
  45. new DerInteger(_key.Y));
  46. return info;
  47. }
  48. if (publicKey is DsaPublicKeyParameters)
  49. {
  50. DsaPublicKeyParameters _key = (DsaPublicKeyParameters) publicKey;
  51. DsaParameters kp = _key.Parameters;
  52. Asn1Encodable ae = kp == null
  53. ? null
  54. : new DsaParameter(kp.P, kp.Q, kp.G).ToAsn1Object();
  55. return new SubjectPublicKeyInfo(
  56. new AlgorithmIdentifier(X9ObjectIdentifiers.IdDsa, ae),
  57. new DerInteger(_key.Y));
  58. }
  59. if (publicKey is DHPublicKeyParameters)
  60. {
  61. DHPublicKeyParameters _key = (DHPublicKeyParameters) publicKey;
  62. DHParameters kp = _key.Parameters;
  63. SubjectPublicKeyInfo info = new SubjectPublicKeyInfo(
  64. new AlgorithmIdentifier(
  65. _key.AlgorithmOid,
  66. new DHParameter(kp.P, kp.G, kp.L).ToAsn1Object()),
  67. new DerInteger(_key.Y));
  68. return info;
  69. } // End of DH
  70. if (publicKey is RsaKeyParameters)
  71. {
  72. RsaKeyParameters _key = (RsaKeyParameters) publicKey;
  73. SubjectPublicKeyInfo info = new SubjectPublicKeyInfo(
  74. new AlgorithmIdentifier(PkcsObjectIdentifiers.RsaEncryption, DerNull.Instance),
  75. new RsaPublicKeyStructure(_key.Modulus, _key.Exponent).ToAsn1Object());
  76. return info;
  77. } // End of RSA.
  78. if (publicKey is ECPublicKeyParameters)
  79. {
  80. ECPublicKeyParameters _key = (ECPublicKeyParameters) publicKey;
  81. if (_key.Parameters is ECGost3410Parameters)
  82. {
  83. ECGost3410Parameters gostParams = (ECGost3410Parameters)_key.Parameters;
  84. BigInteger bX = _key.Q.AffineXCoord.ToBigInteger();
  85. BigInteger bY = _key.Q.AffineYCoord.ToBigInteger();
  86. bool is512 = (bX.BitLength > 256);
  87. Gost3410PublicKeyAlgParameters parameters = new Gost3410PublicKeyAlgParameters(
  88. gostParams.PublicKeyParamSet,
  89. gostParams.DigestParamSet,
  90. gostParams.EncryptionParamSet);
  91. int encKeySize;
  92. int offset;
  93. DerObjectIdentifier algIdentifier;
  94. if (is512)
  95. {
  96. encKeySize = 128;
  97. offset = 64;
  98. algIdentifier = RosstandartObjectIdentifiers.id_tc26_gost_3410_12_512;
  99. }
  100. else
  101. {
  102. encKeySize = 64;
  103. offset = 32;
  104. algIdentifier = RosstandartObjectIdentifiers.id_tc26_gost_3410_12_256;
  105. }
  106. byte[] encKey = new byte[encKeySize];
  107. ExtractBytes(encKey, encKeySize / 2, 0, bX);
  108. ExtractBytes(encKey, encKeySize / 2, offset, bY);
  109. return new SubjectPublicKeyInfo(new AlgorithmIdentifier(algIdentifier, parameters), new DerOctetString(encKey));
  110. } // End of ECGOST3410_2012
  111. if (_key.AlgorithmName == "ECGOST3410")
  112. {
  113. if (_key.PublicKeyParamSet == null)
  114. throw new NotImplementedException("Not a CryptoPro parameter set");
  115. ECPoint q = _key.Q.Normalize();
  116. BigInteger bX = q.AffineXCoord.ToBigInteger();
  117. BigInteger bY = q.AffineYCoord.ToBigInteger();
  118. byte[] encKey = new byte[64];
  119. ExtractBytes(encKey, 0, bX);
  120. ExtractBytes(encKey, 32, bY);
  121. Gost3410PublicKeyAlgParameters gostParams = new Gost3410PublicKeyAlgParameters(
  122. _key.PublicKeyParamSet, CryptoProObjectIdentifiers.GostR3411x94CryptoProParamSet);
  123. AlgorithmIdentifier algID = new AlgorithmIdentifier(
  124. CryptoProObjectIdentifiers.GostR3410x2001,
  125. gostParams.ToAsn1Object());
  126. return new SubjectPublicKeyInfo(algID, new DerOctetString(encKey));
  127. }
  128. else
  129. {
  130. X962Parameters x962;
  131. if (_key.PublicKeyParamSet == null)
  132. {
  133. ECDomainParameters kp = _key.Parameters;
  134. X9ECParameters ecP = new X9ECParameters(kp.Curve, new X9ECPoint(kp.G, false), kp.N, kp.H,
  135. kp.GetSeed());
  136. x962 = new X962Parameters(ecP);
  137. }
  138. else
  139. {
  140. x962 = new X962Parameters(_key.PublicKeyParamSet);
  141. }
  142. byte[] pubKey = _key.Q.GetEncoded(false);
  143. AlgorithmIdentifier algID = new AlgorithmIdentifier(
  144. X9ObjectIdentifiers.IdECPublicKey, x962.ToAsn1Object());
  145. return new SubjectPublicKeyInfo(algID, pubKey);
  146. }
  147. } // End of EC
  148. if (publicKey is Gost3410PublicKeyParameters)
  149. {
  150. Gost3410PublicKeyParameters _key = (Gost3410PublicKeyParameters) publicKey;
  151. if (_key.PublicKeyParamSet == null)
  152. throw new NotImplementedException("Not a CryptoPro parameter set");
  153. byte[] keyEnc = _key.Y.ToByteArrayUnsigned();
  154. byte[] keyBytes = new byte[keyEnc.Length];
  155. for (int i = 0; i != keyBytes.Length; i++)
  156. {
  157. keyBytes[i] = keyEnc[keyEnc.Length - 1 - i]; // must be little endian
  158. }
  159. Gost3410PublicKeyAlgParameters algParams = new Gost3410PublicKeyAlgParameters(
  160. _key.PublicKeyParamSet, CryptoProObjectIdentifiers.GostR3411x94CryptoProParamSet);
  161. AlgorithmIdentifier algID = new AlgorithmIdentifier(
  162. CryptoProObjectIdentifiers.GostR3410x94,
  163. algParams.ToAsn1Object());
  164. return new SubjectPublicKeyInfo(algID, new DerOctetString(keyBytes));
  165. }
  166. if (publicKey is X448PublicKeyParameters)
  167. {
  168. X448PublicKeyParameters key = (X448PublicKeyParameters)publicKey;
  169. return new SubjectPublicKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_X448), key.GetEncoded());
  170. }
  171. if (publicKey is X25519PublicKeyParameters)
  172. {
  173. X25519PublicKeyParameters key = (X25519PublicKeyParameters)publicKey;
  174. return new SubjectPublicKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_X25519), key.GetEncoded());
  175. }
  176. if (publicKey is Ed448PublicKeyParameters)
  177. {
  178. Ed448PublicKeyParameters key = (Ed448PublicKeyParameters)publicKey;
  179. return new SubjectPublicKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_Ed448), key.GetEncoded());
  180. }
  181. if (publicKey is Ed25519PublicKeyParameters)
  182. {
  183. Ed25519PublicKeyParameters key = (Ed25519PublicKeyParameters)publicKey;
  184. return new SubjectPublicKeyInfo(new AlgorithmIdentifier(EdECObjectIdentifiers.id_Ed25519), key.GetEncoded());
  185. }
  186. throw new ArgumentException("Class provided no convertible: " + Org.BouncyCastle.Utilities.Platform.GetTypeName(publicKey));
  187. }
  188. private static void ExtractBytes(
  189. byte[] encKey,
  190. int offset,
  191. BigInteger bI)
  192. {
  193. byte[] val = bI.ToByteArray();
  194. int n = (bI.BitLength + 7) / 8;
  195. for (int i = 0; i < n; ++i)
  196. {
  197. encKey[offset + i] = val[val.Length - 1 - i];
  198. }
  199. }
  200. private static void ExtractBytes(byte[] encKey, int size, int offSet, BigInteger bI)
  201. {
  202. byte[] val = bI.ToByteArray();
  203. if (val.Length < size)
  204. {
  205. byte[] tmp = new byte[size];
  206. Array.Copy(val, 0, tmp, tmp.Length - val.Length, val.Length);
  207. val = tmp;
  208. }
  209. for (int i = 0; i != size; i++)
  210. {
  211. encKey[offSet + i] = val[val.Length - 1 - i];
  212. }
  213. }
  214. }
  215. }
  216. #pragma warning restore
  217. #endif