?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
hidclass.sys: Pass sizeof(packet) as input for IOCTL_HID_SET_OUTPUT_REPORT.
[wine.git] / dlls / crypt32 / encode.c
blobaf0dd2cf7439b3d2f0a762e022ce71bf27642a9e
1 /*
2 * Copyright 2005-2008 Juan Lang
3 *
4 * This library is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU Lesser General Public
6 * License as published by the Free Software Foundation; either
7 * version 2.1 of the License, or (at your option) any later version.
8 *
9 * This library is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * Lesser General Public License for more details.
13 *
14 * You should have received a copy of the GNU Lesser General Public
15 * License along with this library; if not, write to the Free Software
16 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
17 *
18 * This file implements ASN.1 DER encoding of a limited set of types.
19 * It isn't a full ASN.1 implementation. Microsoft implements BER
20 * encoding of many of the basic types in msasn1.dll, but that interface isn't
21 * implemented, so I implement them here.
22 *
23 * References:
24 * "A Layman's Guide to a Subset of ASN.1, BER, and DER", by Burton Kaliski
25 * (available online, look for a PDF copy as the HTML versions tend to have
26 * translation errors.)
27 *
28 * RFC3280, http://www.faqs.org/rfcs/rfc3280.html
29 *
30 * MSDN, especially "Constants for CryptEncodeObject and CryptDecodeObject"
31 */
32
33 #include <assert.h>
34 #include <stdarg.h>
35 #include <stdio.h>
36 #include <stdlib.h>
37
38 #define NONAMELESSUNION
39
40 #include "windef.h"
41 #include "winbase.h"
42 #include "wincrypt.h"
43 #include "snmp.h"
44 #include "wine/debug.h"
45 #include "wine/exception.h"
46 #include "crypt32_private.h"
47
48 WINE_DEFAULT_DEBUG_CHANNEL(cryptasn);
49 WINE_DECLARE_DEBUG_CHANNEL(crypt);
50
51 typedef BOOL (WINAPI *CryptEncodeObjectFunc)(DWORD, LPCSTR, const void *,
52 BYTE *, DWORD *);
53
54 /* Prototypes for built-in encoders. They follow the Ex style prototypes.
55 * The dwCertEncodingType and lpszStructType are ignored by the built-in
56 * functions, but the parameters are retained to simplify CryptEncodeObjectEx,
57 * since it must call functions in external DLLs that follow these signatures.
58 */
59 BOOL WINAPI CRYPT_AsnEncodeOid(DWORD dwCertEncodingType,
60 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
61 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
62 static BOOL WINAPI CRYPT_AsnEncodeExtensions(DWORD dwCertEncodingType,
63 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
64 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
65 static BOOL WINAPI CRYPT_AsnEncodeSequenceOfAny(DWORD dwCertEncodingType,
66 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
67 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
68 static BOOL WINAPI CRYPT_AsnEncodeBool(DWORD dwCertEncodingType,
69 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
70 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
71 static BOOL WINAPI CRYPT_AsnEncodePubKeyInfo(DWORD dwCertEncodingType,
72 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
73 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
74 static BOOL WINAPI CRYPT_AsnEncodeBits(DWORD dwCertEncodingType,
75 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
76 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
77 static BOOL WINAPI CRYPT_AsnEncodeBitsSwapBytes(DWORD dwCertEncodingType,
78 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
79 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
80 static BOOL WINAPI CRYPT_AsnEncodeInt(DWORD dwCertEncodingType,
81 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
82 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
83 static BOOL WINAPI CRYPT_AsnEncodeInteger(DWORD dwCertEncodingType,
84 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
85 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
86 static BOOL WINAPI CRYPT_AsnEncodeUnsignedInteger(DWORD dwCertEncodingType,
87 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
88 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
89 static BOOL WINAPI CRYPT_AsnEncodeChoiceOfTime(DWORD dwCertEncodingType,
90 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
91 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
92 static BOOL WINAPI CRYPT_AsnEncodeEnhancedKeyUsage(DWORD dwCertEncodingType,
93 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
94 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
95 static BOOL WINAPI CRYPT_AsnEncodePKCSAttributes(DWORD dwCertEncodingType,
96 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
97 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
98
99 BOOL CRYPT_EncodeEnsureSpace(DWORD dwFlags, const CRYPT_ENCODE_PARA *pEncodePara,
100 BYTE *pbEncoded, DWORD *pcbEncoded, DWORD bytesNeeded)
101 {
102 BOOL ret = TRUE;
103
104 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
105 {
106 if (pEncodePara && pEncodePara->pfnAlloc)
107 *(BYTE **)pbEncoded = pEncodePara->pfnAlloc(bytesNeeded);
108 else
109 *(BYTE **)pbEncoded = LocalAlloc(0, bytesNeeded);
110 if (!*(BYTE **)pbEncoded)
111 ret = FALSE;
112 else
113 *pcbEncoded = bytesNeeded;
114 }
115 else if (bytesNeeded > *pcbEncoded)
116 {
117 *pcbEncoded = bytesNeeded;
118 SetLastError(ERROR_MORE_DATA);
119 ret = FALSE;
120 }
121 else
122 *pcbEncoded = bytesNeeded;
123 return ret;
124 }
125
126 static void CRYPT_FreeSpace(const CRYPT_ENCODE_PARA *pEncodePara, LPVOID pv)
127 {
128 if (pEncodePara && pEncodePara->pfnFree)
129 pEncodePara->pfnFree(pv);
130 else
131 LocalFree(pv);
132 }
133
134 BOOL CRYPT_EncodeLen(DWORD len, BYTE *pbEncoded, DWORD *pcbEncoded)
135 {
136 DWORD bytesNeeded, significantBytes = 0;
137
138 if (len <= 0x7f)
139 bytesNeeded = 1;
140 else
141 {
142 DWORD temp;
143
144 for (temp = len, significantBytes = sizeof(temp); !(temp & 0xff000000);
145 temp <<= 8, significantBytes--)
146 ;
147 bytesNeeded = significantBytes + 1;
148 }
149 if (!pbEncoded)
150 {
151 *pcbEncoded = bytesNeeded;
152 return TRUE;
153 }
154 if (*pcbEncoded < bytesNeeded)
155 {
156 SetLastError(ERROR_MORE_DATA);
157 return FALSE;
158 }
159 if (len <= 0x7f)
160 *pbEncoded = (BYTE)len;
161 else
162 {
163 DWORD i;
164
165 *pbEncoded++ = significantBytes | 0x80;
166 for (i = 0; i < significantBytes; i++)
167 {
168 *(pbEncoded + significantBytes - i - 1) = (BYTE)(len & 0xff);
169 len >>= 8;
170 }
171 }
172 *pcbEncoded = bytesNeeded;
173 return TRUE;
174 }
175
176 BOOL WINAPI CRYPT_AsnEncodeSequence(DWORD dwCertEncodingType,
177 struct AsnEncodeSequenceItem items[], DWORD cItem, DWORD dwFlags,
178 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
179 {
180 BOOL ret;
181 DWORD i, dataLen = 0;
182
183 TRACE("%p, %d, %08x, %p, %p, %d\n", items, cItem, dwFlags, pEncodePara,
184 pbEncoded, pbEncoded ? *pcbEncoded : 0);
185 for (i = 0, ret = TRUE; ret && i < cItem; i++)
186 {
187 ret = items[i].encodeFunc(dwCertEncodingType, NULL,
188 items[i].pvStructInfo, dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG, NULL,
189 NULL, &items[i].size);
190 /* Some functions propagate their errors through the size */
191 if (!ret)
192 *pcbEncoded = items[i].size;
193 dataLen += items[i].size;
194 }
195 if (ret)
196 {
197 DWORD lenBytes, bytesNeeded;
198
199 CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
200 bytesNeeded = 1 + lenBytes + dataLen;
201 if (!pbEncoded)
202 *pcbEncoded = bytesNeeded;
203 else
204 {
205 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara, pbEncoded,
206 pcbEncoded, bytesNeeded)))
207 {
208 BYTE *out;
209
210 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
211 pbEncoded = *(BYTE **)pbEncoded;
212 out = pbEncoded;
213 *out++ = ASN_SEQUENCE;
214 CRYPT_EncodeLen(dataLen, out, &lenBytes);
215 out += lenBytes;
216 for (i = 0; ret && i < cItem; i++)
217 {
218 ret = items[i].encodeFunc(dwCertEncodingType, NULL,
219 items[i].pvStructInfo, dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG,
220 NULL, out, &items[i].size);
221 /* Some functions propagate their errors through the size */
222 if (!ret)
223 *pcbEncoded = items[i].size;
224 out += items[i].size;
225 }
226 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
227 CRYPT_FreeSpace(pEncodePara, pbEncoded);
228 }
229 }
230 }
231 TRACE("returning %d (%08x)\n", ret, GetLastError());
232 return ret;
233 }
234
235 BOOL WINAPI CRYPT_AsnEncodeConstructed(DWORD dwCertEncodingType,
236 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
237 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
238 {
239 BOOL ret;
240 const struct AsnConstructedItem *item = pvStructInfo;
241 DWORD len;
242
243 if ((ret = item->encodeFunc(dwCertEncodingType, lpszStructType,
244 item->pvStructInfo, dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG, NULL, NULL, &len)))
245 {
246 DWORD dataLen, bytesNeeded;
247
248 CRYPT_EncodeLen(len, NULL, &dataLen);
249 bytesNeeded = 1 + dataLen + len;
250 if (!pbEncoded)
251 *pcbEncoded = bytesNeeded;
252 else if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
253 pbEncoded, pcbEncoded, bytesNeeded)))
254 {
255 BYTE *out;
256
257 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
258 pbEncoded = *(BYTE **)pbEncoded;
259 out = pbEncoded;
260 *out++ = ASN_CONTEXT | ASN_CONSTRUCTOR | item->tag;
261 CRYPT_EncodeLen(len, out, &dataLen);
262 out += dataLen;
263 ret = item->encodeFunc(dwCertEncodingType, lpszStructType,
264 item->pvStructInfo, dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG, NULL,
265 out, &len);
266 if (!ret)
267 {
268 /* Some functions propagate their errors through the size */
269 *pcbEncoded = len;
270 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
271 CRYPT_FreeSpace(pEncodePara, pbEncoded);
272 }
273 }
274 }
275 else
276 {
277 /* Some functions propagate their errors through the size */
278 *pcbEncoded = len;
279 }
280 return ret;
281 }
282
283 struct AsnEncodeTagSwappedItem
284 {
285 BYTE tag;
286 const void *pvStructInfo;
287 CryptEncodeObjectExFunc encodeFunc;
288 };
289
290 /* Sort of a wacky hack, it encodes something using the struct
291 * AsnEncodeTagSwappedItem's encodeFunc, then replaces the tag byte with the tag
292 * given in the struct AsnEncodeTagSwappedItem.
293 */
294 static BOOL WINAPI CRYPT_AsnEncodeSwapTag(DWORD dwCertEncodingType,
295 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
296 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
297 {
298 BOOL ret;
299 const struct AsnEncodeTagSwappedItem *item = pvStructInfo;
300
301 ret = item->encodeFunc(dwCertEncodingType, lpszStructType,
302 item->pvStructInfo, dwFlags, pEncodePara, pbEncoded, pcbEncoded);
303 if (ret && pbEncoded)
304 *pbEncoded = item->tag;
305 return ret;
306 }
307
308 static BOOL WINAPI CRYPT_AsnEncodeCertVersion(DWORD dwCertEncodingType,
309 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
310 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
311 {
312 const DWORD *ver = pvStructInfo;
313 BOOL ret;
314
315 /* CERT_V1 is not encoded */
316 if (*ver == CERT_V1)
317 {
318 *pcbEncoded = 0;
319 ret = TRUE;
320 }
321 else
322 {
323 struct AsnConstructedItem item = { 0, ver, CRYPT_AsnEncodeInt };
324
325 ret = CRYPT_AsnEncodeConstructed(dwCertEncodingType, X509_INTEGER,
326 &item, dwFlags, pEncodePara, pbEncoded, pcbEncoded);
327 }
328 return ret;
329 }
330
331 static BOOL WINAPI CRYPT_CopyEncodedBlob(DWORD dwCertEncodingType,
332 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
333 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
334 {
335 const CRYPT_DER_BLOB *blob = pvStructInfo;
336 BOOL ret;
337
338 if (!pbEncoded)
339 {
340 *pcbEncoded = blob->cbData;
341 ret = TRUE;
342 }
343 else
344 {
345 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara, pbEncoded,
346 pcbEncoded, blob->cbData)))
347 {
348 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
349 pbEncoded = *(BYTE **)pbEncoded;
350 if (blob->cbData)
351 memcpy(pbEncoded, blob->pbData, blob->cbData);
352 *pcbEncoded = blob->cbData;
353 }
354 }
355 return ret;
356 }
357
358 static BOOL WINAPI CRYPT_AsnEncodeValidity(DWORD dwCertEncodingType,
359 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
360 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
361 {
362 BOOL ret;
363 /* This has two filetimes in a row, a NotBefore and a NotAfter */
364 const FILETIME *timePtr = pvStructInfo;
365 struct AsnEncodeSequenceItem items[] = {
366 { timePtr, CRYPT_AsnEncodeChoiceOfTime, 0 },
367 { timePtr + 1, CRYPT_AsnEncodeChoiceOfTime, 0 },
368 };
369
370 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
371 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded,
372 pcbEncoded);
373 return ret;
374 }
375
376 /* Like CRYPT_AsnEncodeAlgorithmId, but encodes parameters as an asn.1 NULL
377 * if they are empty.
378 */
379 static BOOL WINAPI CRYPT_AsnEncodeAlgorithmIdWithNullParams(
380 DWORD dwCertEncodingType, LPCSTR lpszStructType, const void *pvStructInfo,
381 DWORD dwFlags, PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded,
382 DWORD *pcbEncoded)
383 {
384 const CRYPT_ALGORITHM_IDENTIFIER *algo = pvStructInfo;
385 static const BYTE asn1Null[] = { ASN_NULL, 0 };
386 static const CRYPT_DATA_BLOB nullBlob = { sizeof(asn1Null),
387 (LPBYTE)asn1Null };
388 BOOL ret;
389 struct AsnEncodeSequenceItem items[2] = {
390 { algo->pszObjId, CRYPT_AsnEncodeOid, 0 },
391 { NULL, CRYPT_CopyEncodedBlob, 0 },
392 };
393
394 if (algo->Parameters.cbData)
395 items[1].pvStructInfo = &algo->Parameters;
396 else
397 items[1].pvStructInfo = &nullBlob;
398 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
399 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded,
400 pcbEncoded);
401 return ret;
402 }
403
404 static BOOL WINAPI CRYPT_AsnEncodeAlgorithmId(DWORD dwCertEncodingType,
405 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
406 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
407 {
408 const CRYPT_ALGORITHM_IDENTIFIER *algo = pvStructInfo;
409 BOOL ret;
410 struct AsnEncodeSequenceItem items[] = {
411 { algo->pszObjId, CRYPT_AsnEncodeOid, 0 },
412 { &algo->Parameters, CRYPT_CopyEncodedBlob, 0 },
413 };
414
415 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
416 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded,
417 pcbEncoded);
418 return ret;
419 }
420
421 static BOOL WINAPI CRYPT_AsnEncodePubKeyInfo(DWORD dwCertEncodingType,
422 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
423 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
424 {
425 BOOL ret;
426
427 __TRY
428 {
429 const CERT_PUBLIC_KEY_INFO *info = pvStructInfo;
430 struct AsnEncodeSequenceItem items[] = {
431 { &info->Algorithm, CRYPT_AsnEncodeAlgorithmIdWithNullParams, 0 },
432 { &info->PublicKey, CRYPT_AsnEncodeBits, 0 },
433 };
434
435 TRACE("Encoding public key with OID %s\n",
436 debugstr_a(info->Algorithm.pszObjId));
437 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
438 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded,
439 pcbEncoded);
440 }
441 __EXCEPT_PAGE_FAULT
442 {
443 SetLastError(STATUS_ACCESS_VIOLATION);
444 ret = FALSE;
445 }
446 __ENDTRY
447 return ret;
448 }
449
450 static BOOL WINAPI CRYPT_AsnEncodeCert(DWORD dwCertEncodingType,
451 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
452 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
453 {
454 BOOL ret;
455
456 __TRY
457 {
458 const CERT_SIGNED_CONTENT_INFO *info = pvStructInfo;
459 struct AsnEncodeSequenceItem items[] = {
460 { &info->ToBeSigned, CRYPT_CopyEncodedBlob, 0 },
461 { &info->SignatureAlgorithm, CRYPT_AsnEncodeAlgorithmId, 0 },
462 { &info->Signature, CRYPT_AsnEncodeBitsSwapBytes, 0 },
463 };
464
465 if (dwFlags & CRYPT_ENCODE_NO_SIGNATURE_BYTE_REVERSAL_FLAG)
466 items[2].encodeFunc = CRYPT_AsnEncodeBits;
467 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
468 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded,
469 pcbEncoded);
470 }
471 __EXCEPT_PAGE_FAULT
472 {
473 SetLastError(STATUS_ACCESS_VIOLATION);
474 ret = FALSE;
475 }
476 __ENDTRY
477 return ret;
478 }
479
480 BOOL WINAPI CRYPT_AsnEncodePubKeyInfoNoNull(DWORD dwCertEncodingType,
481 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
482 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
483 {
484 BOOL ret;
485 const CERT_PUBLIC_KEY_INFO *info = pvStructInfo;
486 struct AsnEncodeSequenceItem items[] = {
487 { &info->Algorithm, CRYPT_AsnEncodeAlgorithmId, 0 },
488 { &info->PublicKey, CRYPT_AsnEncodeBits, 0 },
489 };
490
491 TRACE("Encoding public key with OID %s\n",
492 debugstr_a(info->Algorithm.pszObjId));
493 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
494 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded,
495 pcbEncoded);
496 return ret;
497 }
498
499 /* Like in Windows, this blithely ignores the validity of the passed-in
500 * CERT_INFO, and just encodes it as-is. The resulting encoded data may not
501 * decode properly, see CRYPT_AsnDecodeCertInfo.
502 */
503 static BOOL WINAPI CRYPT_AsnEncodeCertInfo(DWORD dwCertEncodingType,
504 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
505 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
506 {
507 BOOL ret;
508
509 __TRY
510 {
511 const CERT_INFO *info = pvStructInfo;
512 struct AsnEncodeSequenceItem items[10] = {
513 { &info->dwVersion, CRYPT_AsnEncodeCertVersion, 0 },
514 { &info->SerialNumber, CRYPT_AsnEncodeInteger, 0 },
515 { &info->SignatureAlgorithm, CRYPT_AsnEncodeAlgorithmId, 0 },
516 { &info->Issuer, CRYPT_CopyEncodedBlob, 0 },
517 { &info->NotBefore, CRYPT_AsnEncodeValidity, 0 },
518 { &info->Subject, CRYPT_CopyEncodedBlob, 0 },
519 { &info->SubjectPublicKeyInfo, CRYPT_AsnEncodePubKeyInfoNoNull, 0 },
520 { 0 }
521 };
522 struct AsnConstructedItem constructed = { 0 };
523 struct AsnEncodeTagSwappedItem swapped[2] = { { 0 } };
524 DWORD cItem = 7, cSwapped = 0;
525
526 if (info->IssuerUniqueId.cbData)
527 {
528 swapped[cSwapped].tag = ASN_CONTEXT | 1;
529 swapped[cSwapped].pvStructInfo = &info->IssuerUniqueId;
530 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeBits;
531 items[cItem].pvStructInfo = &swapped[cSwapped];
532 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
533 cSwapped++;
534 cItem++;
535 }
536 if (info->SubjectUniqueId.cbData)
537 {
538 swapped[cSwapped].tag = ASN_CONTEXT | 2;
539 swapped[cSwapped].pvStructInfo = &info->SubjectUniqueId;
540 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeBits;
541 items[cItem].pvStructInfo = &swapped[cSwapped];
542 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
543 cSwapped++;
544 cItem++;
545 }
546 if (info->cExtension)
547 {
548 constructed.tag = 3;
549 constructed.pvStructInfo = &info->cExtension;
550 constructed.encodeFunc = CRYPT_AsnEncodeExtensions;
551 items[cItem].pvStructInfo = &constructed;
552 items[cItem].encodeFunc = CRYPT_AsnEncodeConstructed;
553 cItem++;
554 }
555
556 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
557 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
558 }
559 __EXCEPT_PAGE_FAULT
560 {
561 SetLastError(STATUS_ACCESS_VIOLATION);
562 ret = FALSE;
563 }
564 __ENDTRY
565 return ret;
566 }
567
568 static BOOL CRYPT_AsnEncodeCRLEntry(const CRL_ENTRY *entry,
569 BYTE *pbEncoded, DWORD *pcbEncoded)
570 {
571 struct AsnEncodeSequenceItem items[3] = {
572 { &entry->SerialNumber, CRYPT_AsnEncodeInteger, 0 },
573 { &entry->RevocationDate, CRYPT_AsnEncodeChoiceOfTime, 0 },
574 { 0 }
575 };
576 DWORD cItem = 2;
577 BOOL ret;
578
579 TRACE("%p, %p, %d\n", entry, pbEncoded, pbEncoded ? *pcbEncoded : 0);
580
581 if (entry->cExtension)
582 {
583 items[cItem].pvStructInfo = &entry->cExtension;
584 items[cItem].encodeFunc = CRYPT_AsnEncodeExtensions;
585 cItem++;
586 }
587
588 ret = CRYPT_AsnEncodeSequence(X509_ASN_ENCODING, items, cItem, 0, NULL,
589 pbEncoded, pcbEncoded);
590
591 TRACE("returning %d (%08x)\n", ret, GetLastError());
592 return ret;
593 }
594
595 static BOOL WINAPI CRYPT_AsnEncodeCRLEntries(DWORD dwCertEncodingType,
596 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
597 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
598 {
599 DWORD bytesNeeded, dataLen, lenBytes, i;
600 const CRL_INFO *info = pvStructInfo;
601 const CRL_ENTRY *rgCRLEntry = info->rgCRLEntry;
602 BOOL ret = TRUE;
603
604 for (i = 0, dataLen = 0; ret && i < info->cCRLEntry; i++)
605 {
606 DWORD size;
607
608 ret = CRYPT_AsnEncodeCRLEntry(&rgCRLEntry[i], NULL, &size);
609 if (ret)
610 dataLen += size;
611 }
612 if (ret)
613 {
614 CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
615 bytesNeeded = 1 + lenBytes + dataLen;
616 if (!pbEncoded)
617 *pcbEncoded = bytesNeeded;
618 else
619 {
620 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara, pbEncoded,
621 pcbEncoded, bytesNeeded)))
622 {
623 BYTE *out;
624
625 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
626 pbEncoded = *(BYTE **)pbEncoded;
627 out = pbEncoded;
628 *out++ = ASN_SEQUENCEOF;
629 CRYPT_EncodeLen(dataLen, out, &lenBytes);
630 out += lenBytes;
631 for (i = 0; i < info->cCRLEntry; i++)
632 {
633 DWORD size = dataLen;
634
635 ret = CRYPT_AsnEncodeCRLEntry(&rgCRLEntry[i], out, &size);
636 out += size;
637 dataLen -= size;
638 }
639 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
640 CRYPT_FreeSpace(pEncodePara, pbEncoded);
641 }
642 }
643 }
644 return ret;
645 }
646
647 static BOOL WINAPI CRYPT_AsnEncodeCRLVersion(DWORD dwCertEncodingType,
648 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
649 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
650 {
651 const DWORD *ver = pvStructInfo;
652 BOOL ret;
653
654 /* CRL_V1 is not encoded */
655 if (*ver == CRL_V1)
656 {
657 *pcbEncoded = 0;
658 ret = TRUE;
659 }
660 else
661 ret = CRYPT_AsnEncodeInt(dwCertEncodingType, X509_INTEGER, ver,
662 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
663 return ret;
664 }
665
666 /* Like in Windows, this blithely ignores the validity of the passed-in
667 * CRL_INFO, and just encodes it as-is. The resulting encoded data may not
668 * decode properly, see CRYPT_AsnDecodeCRLInfo.
669 */
670 static BOOL WINAPI CRYPT_AsnEncodeCRLInfo(DWORD dwCertEncodingType,
671 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
672 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
673 {
674 BOOL ret;
675
676 __TRY
677 {
678 const CRL_INFO *info = pvStructInfo;
679 struct AsnEncodeSequenceItem items[7] = {
680 { &info->dwVersion, CRYPT_AsnEncodeCRLVersion, 0 },
681 { &info->SignatureAlgorithm, CRYPT_AsnEncodeAlgorithmId, 0 },
682 { &info->Issuer, CRYPT_CopyEncodedBlob, 0 },
683 { &info->ThisUpdate, CRYPT_AsnEncodeChoiceOfTime, 0 },
684 { 0 }
685 };
686 struct AsnConstructedItem constructed[1] = { { 0 } };
687 DWORD cItem = 4, cConstructed = 0;
688
689 if (info->NextUpdate.dwLowDateTime || info->NextUpdate.dwHighDateTime)
690 {
691 items[cItem].pvStructInfo = &info->NextUpdate;
692 items[cItem].encodeFunc = CRYPT_AsnEncodeChoiceOfTime;
693 cItem++;
694 }
695 if (info->cCRLEntry)
696 {
697 items[cItem].pvStructInfo = info;
698 items[cItem].encodeFunc = CRYPT_AsnEncodeCRLEntries;
699 cItem++;
700 }
701 if (info->cExtension)
702 {
703 constructed[cConstructed].tag = 0;
704 constructed[cConstructed].pvStructInfo = &info->cExtension;
705 constructed[cConstructed].encodeFunc = CRYPT_AsnEncodeExtensions;
706 items[cItem].pvStructInfo = &constructed[cConstructed];
707 items[cItem].encodeFunc = CRYPT_AsnEncodeConstructed;
708 cConstructed++;
709 cItem++;
710 }
711
712 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
713 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
714 }
715 __EXCEPT_PAGE_FAULT
716 {
717 SetLastError(STATUS_ACCESS_VIOLATION);
718 ret = FALSE;
719 }
720 __ENDTRY
721 return ret;
722 }
723
724 static BOOL CRYPT_AsnEncodeExtension(CERT_EXTENSION *ext, BYTE *pbEncoded,
725 DWORD *pcbEncoded)
726 {
727 BOOL ret;
728 struct AsnEncodeSequenceItem items[3] = {
729 { ext->pszObjId, CRYPT_AsnEncodeOid, 0 },
730 { NULL, NULL, 0 },
731 { NULL, NULL, 0 },
732 };
733 DWORD cItem = 1;
734
735 TRACE("%p, %p, %d\n", ext, pbEncoded, pbEncoded ? *pcbEncoded : 0);
736
737 if (ext->fCritical)
738 {
739 items[cItem].pvStructInfo = &ext->fCritical;
740 items[cItem].encodeFunc = CRYPT_AsnEncodeBool;
741 cItem++;
742 }
743 items[cItem].pvStructInfo = &ext->Value;
744 items[cItem].encodeFunc = CRYPT_AsnEncodeOctets;
745 cItem++;
746
747 ret = CRYPT_AsnEncodeSequence(X509_ASN_ENCODING, items, cItem, 0, NULL,
748 pbEncoded, pcbEncoded);
749 TRACE("returning %d (%08x)\n", ret, GetLastError());
750 return ret;
751 }
752
753 static BOOL WINAPI CRYPT_AsnEncodeExtensions(DWORD dwCertEncodingType,
754 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
755 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
756 {
757 BOOL ret;
758
759 __TRY
760 {
761 DWORD bytesNeeded, dataLen, lenBytes, i;
762 const CERT_EXTENSIONS *exts = pvStructInfo;
763
764 ret = TRUE;
765 for (i = 0, dataLen = 0; ret && i < exts->cExtension; i++)
766 {
767 DWORD size;
768
769 ret = CRYPT_AsnEncodeExtension(&exts->rgExtension[i], NULL, &size);
770 if (ret)
771 dataLen += size;
772 }
773 if (ret)
774 {
775 CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
776 bytesNeeded = 1 + lenBytes + dataLen;
777 if (!pbEncoded)
778 *pcbEncoded = bytesNeeded;
779 else
780 {
781 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
782 pbEncoded, pcbEncoded, bytesNeeded)))
783 {
784 BYTE *out;
785
786 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
787 pbEncoded = *(BYTE **)pbEncoded;
788 out = pbEncoded;
789 *out++ = ASN_SEQUENCEOF;
790 CRYPT_EncodeLen(dataLen, out, &lenBytes);
791 out += lenBytes;
792 for (i = 0; i < exts->cExtension; i++)
793 {
794 DWORD size = dataLen;
795
796 ret = CRYPT_AsnEncodeExtension(&exts->rgExtension[i],
797 out, &size);
798 out += size;
799 dataLen -= size;
800 }
801 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
802 CRYPT_FreeSpace(pEncodePara, pbEncoded);
803 }
804 }
805 }
806 }
807 __EXCEPT_PAGE_FAULT
808 {
809 SetLastError(STATUS_ACCESS_VIOLATION);
810 ret = FALSE;
811 }
812 __ENDTRY
813 return ret;
814 }
815
816 BOOL WINAPI CRYPT_AsnEncodeOid(DWORD dwCertEncodingType,
817 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
818 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
819 {
820 LPCSTR pszObjId = pvStructInfo;
821 DWORD bytesNeeded = 0, lenBytes;
822 BOOL ret = TRUE;
823 int firstPos = 0;
824 BYTE firstByte = 0;
825
826 TRACE("%s\n", debugstr_a(pszObjId));
827
828 if (pszObjId)
829 {
830 const char *ptr;
831 int val1, val2;
832
833 if (sscanf(pszObjId, "%d.%d%n", &val1, &val2, &firstPos) != 2)
834 {
835 SetLastError(CRYPT_E_ASN1_ERROR);
836 return FALSE;
837 }
838 bytesNeeded++;
839 firstByte = val1 * 40 + val2;
840 ptr = pszObjId + firstPos;
841 if (*ptr == '.')
842 {
843 ptr++;
844 firstPos++;
845 }
846 while (ret && *ptr)
847 {
848 int pos;
849
850 /* note I assume each component is at most 32-bits long in base 2 */
851 if (sscanf(ptr, "%d%n", &val1, &pos) == 1)
852 {
853 if (val1 >= 0x10000000)
854 bytesNeeded += 5;
855 else if (val1 >= 0x200000)
856 bytesNeeded += 4;
857 else if (val1 >= 0x4000)
858 bytesNeeded += 3;
859 else if (val1 >= 0x80)
860 bytesNeeded += 2;
861 else
862 bytesNeeded += 1;
863 ptr += pos;
864 if (*ptr == '.')
865 ptr++;
866 }
867 else
868 {
869 SetLastError(CRYPT_E_ASN1_ERROR);
870 return FALSE;
871 }
872 }
873 CRYPT_EncodeLen(bytesNeeded, NULL, &lenBytes);
874 }
875 else
876 lenBytes = 1;
877 bytesNeeded += 1 + lenBytes;
878 if (pbEncoded)
879 {
880 if (*pcbEncoded < bytesNeeded)
881 {
882 SetLastError(ERROR_MORE_DATA);
883 ret = FALSE;
884 }
885 else
886 {
887 *pbEncoded++ = ASN_OBJECTIDENTIFIER;
888 CRYPT_EncodeLen(bytesNeeded - 1 - lenBytes, pbEncoded, &lenBytes);
889 pbEncoded += lenBytes;
890 if (pszObjId)
891 {
892 const char *ptr;
893 int val, pos;
894
895 *pbEncoded++ = firstByte;
896 ptr = pszObjId + firstPos;
897 while (ret && *ptr)
898 {
899 sscanf(ptr, "%d%n", &val, &pos);
900 {
901 unsigned char outBytes[5];
902 int numBytes, i;
903
904 if (val >= 0x10000000)
905 numBytes = 5;
906 else if (val >= 0x200000)
907 numBytes = 4;
908 else if (val >= 0x4000)
909 numBytes = 3;
910 else if (val >= 0x80)
911 numBytes = 2;
912 else
913 numBytes = 1;
914 for (i = numBytes; i > 0; i--)
915 {
916 outBytes[i - 1] = val & 0x7f;
917 val >>= 7;
918 }
919 for (i = 0; i < numBytes - 1; i++)
920 *pbEncoded++ = outBytes[i] | 0x80;
921 *pbEncoded++ = outBytes[i];
922 ptr += pos;
923 if (*ptr == '.')
924 ptr++;
925 }
926 }
927 }
928 }
929 }
930 *pcbEncoded = bytesNeeded;
931 return ret;
932 }
933
934 static BOOL CRYPT_AsnEncodeStringCoerce(const CERT_NAME_VALUE *value,
935 BYTE tag, DWORD dwFlags, const CRYPT_ENCODE_PARA *pEncodePara, BYTE *pbEncoded,
936 DWORD *pcbEncoded)
937 {
938 BOOL ret = TRUE;
939 LPCSTR str = (LPCSTR)value->Value.pbData;
940 DWORD bytesNeeded, lenBytes, encodedLen;
941
942 encodedLen = value->Value.cbData ? value->Value.cbData : strlen(str);
943 CRYPT_EncodeLen(encodedLen, NULL, &lenBytes);
944 bytesNeeded = 1 + lenBytes + encodedLen;
945 if (!pbEncoded)
946 *pcbEncoded = bytesNeeded;
947 else
948 {
949 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
950 pbEncoded, pcbEncoded, bytesNeeded)))
951 {
952 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
953 pbEncoded = *(BYTE **)pbEncoded;
954 *pbEncoded++ = tag;
955 CRYPT_EncodeLen(encodedLen, pbEncoded, &lenBytes);
956 pbEncoded += lenBytes;
957 memcpy(pbEncoded, str, encodedLen);
958 }
959 }
960 return ret;
961 }
962
963 static BOOL CRYPT_AsnEncodeBMPString(const CERT_NAME_VALUE *value,
964 DWORD dwFlags, const CRYPT_ENCODE_PARA *pEncodePara, BYTE *pbEncoded,
965 DWORD *pcbEncoded)
966 {
967 BOOL ret = TRUE;
968 LPCWSTR str = (LPCWSTR)value->Value.pbData;
969 DWORD bytesNeeded, lenBytes, strLen;
970
971 if (value->Value.cbData)
972 strLen = value->Value.cbData / sizeof(WCHAR);
973 else if (value->Value.pbData)
974 strLen = lstrlenW(str);
975 else
976 strLen = 0;
977 CRYPT_EncodeLen(strLen * 2, NULL, &lenBytes);
978 bytesNeeded = 1 + lenBytes + strLen * 2;
979 if (!pbEncoded)
980 *pcbEncoded = bytesNeeded;
981 else
982 {
983 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
984 pbEncoded, pcbEncoded, bytesNeeded)))
985 {
986 DWORD i;
987
988 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
989 pbEncoded = *(BYTE **)pbEncoded;
990 *pbEncoded++ = ASN_BMPSTRING;
991 CRYPT_EncodeLen(strLen * 2, pbEncoded, &lenBytes);
992 pbEncoded += lenBytes;
993 for (i = 0; i < strLen; i++)
994 {
995 *pbEncoded++ = (str[i] & 0xff00) >> 8;
996 *pbEncoded++ = str[i] & 0x00ff;
997 }
998 }
999 }
1000 return ret;
1001 }
1002
1003 static BOOL CRYPT_AsnEncodeUTF8String(const CERT_NAME_VALUE *value,
1004 DWORD dwFlags, const CRYPT_ENCODE_PARA *pEncodePara, BYTE *pbEncoded,
1005 DWORD *pcbEncoded)
1006 {
1007 BOOL ret = TRUE;
1008 LPCWSTR str = (LPCWSTR)value->Value.pbData;
1009 DWORD bytesNeeded, lenBytes, encodedLen, strLen;
1010
1011 if (value->Value.cbData)
1012 strLen = value->Value.cbData / sizeof(WCHAR);
1013 else if (str)
1014 strLen = lstrlenW(str);
1015 else
1016 strLen = 0;
1017 encodedLen = WideCharToMultiByte(CP_UTF8, 0, str, strLen, NULL, 0, NULL,
1018 NULL);
1019 CRYPT_EncodeLen(encodedLen, NULL, &lenBytes);
1020 bytesNeeded = 1 + lenBytes + encodedLen;
1021 if (!pbEncoded)
1022 *pcbEncoded = bytesNeeded;
1023 else
1024 {
1025 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
1026 pbEncoded, pcbEncoded, bytesNeeded)))
1027 {
1028 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
1029 pbEncoded = *(BYTE **)pbEncoded;
1030 *pbEncoded++ = ASN_UTF8STRING;
1031 CRYPT_EncodeLen(encodedLen, pbEncoded, &lenBytes);
1032 pbEncoded += lenBytes;
1033 WideCharToMultiByte(CP_UTF8, 0, str, strLen, (LPSTR)pbEncoded,
1034 bytesNeeded - lenBytes - 1, NULL, NULL);
1035 }
1036 }
1037 return ret;
1038 }
1039
1040 static BOOL WINAPI CRYPT_AsnEncodeNameValue(DWORD dwCertEncodingType,
1041 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1042 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1043 {
1044 BOOL ret = TRUE;
1045
1046 __TRY
1047 {
1048 const CERT_NAME_VALUE *value = pvStructInfo;
1049
1050 switch (value->dwValueType)
1051 {
1052 case CERT_RDN_ANY_TYPE:
1053 /* explicitly disallowed */
1054 SetLastError(E_INVALIDARG);
1055 ret = FALSE;
1056 break;
1057 case CERT_RDN_ENCODED_BLOB:
1058 ret = CRYPT_CopyEncodedBlob(dwCertEncodingType, NULL,
1059 &value->Value, dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1060 break;
1061 case CERT_RDN_OCTET_STRING:
1062 ret = CRYPT_AsnEncodeStringCoerce(value, ASN_OCTETSTRING,
1063 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1064 break;
1065 case CERT_RDN_NUMERIC_STRING:
1066 ret = CRYPT_AsnEncodeStringCoerce(value, ASN_NUMERICSTRING,
1067 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1068 break;
1069 case CERT_RDN_PRINTABLE_STRING:
1070 ret = CRYPT_AsnEncodeStringCoerce(value, ASN_PRINTABLESTRING,
1071 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1072 break;
1073 case CERT_RDN_TELETEX_STRING:
1074 ret = CRYPT_AsnEncodeStringCoerce(value, ASN_T61STRING,
1075 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1076 break;
1077 case CERT_RDN_VIDEOTEX_STRING:
1078 ret = CRYPT_AsnEncodeStringCoerce(value,
1079 ASN_VIDEOTEXSTRING, dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1080 break;
1081 case CERT_RDN_IA5_STRING:
1082 ret = CRYPT_AsnEncodeStringCoerce(value, ASN_IA5STRING,
1083 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1084 break;
1085 case CERT_RDN_GRAPHIC_STRING:
1086 ret = CRYPT_AsnEncodeStringCoerce(value, ASN_GRAPHICSTRING,
1087 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1088 break;
1089 case CERT_RDN_VISIBLE_STRING:
1090 ret = CRYPT_AsnEncodeStringCoerce(value, ASN_VISIBLESTRING,
1091 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1092 break;
1093 case CERT_RDN_GENERAL_STRING:
1094 ret = CRYPT_AsnEncodeStringCoerce(value, ASN_GENERALSTRING,
1095 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1096 break;
1097 case CERT_RDN_UNIVERSAL_STRING:
1098 FIXME("CERT_RDN_UNIVERSAL_STRING: unimplemented\n");
1099 SetLastError(CRYPT_E_ASN1_CHOICE);
1100 ret = FALSE;
1101 break;
1102 case CERT_RDN_BMP_STRING:
1103 ret = CRYPT_AsnEncodeBMPString(value, dwFlags, pEncodePara,
1104 pbEncoded, pcbEncoded);
1105 break;
1106 case CERT_RDN_UTF8_STRING:
1107 ret = CRYPT_AsnEncodeUTF8String(value, dwFlags, pEncodePara,
1108 pbEncoded, pcbEncoded);
1109 break;
1110 default:
1111 SetLastError(CRYPT_E_ASN1_CHOICE);
1112 ret = FALSE;
1113 }
1114 }
1115 __EXCEPT_PAGE_FAULT
1116 {
1117 SetLastError(STATUS_ACCESS_VIOLATION);
1118 ret = FALSE;
1119 }
1120 __ENDTRY
1121 return ret;
1122 }
1123
1124 static BOOL CRYPT_AsnEncodeRdnAttr(DWORD dwCertEncodingType,
1125 const CERT_RDN_ATTR *attr, CryptEncodeObjectExFunc nameValueEncodeFunc,
1126 BYTE *pbEncoded, DWORD *pcbEncoded)
1127 {
1128 DWORD bytesNeeded = 0, lenBytes, size;
1129 BOOL ret;
1130
1131 ret = CRYPT_AsnEncodeOid(dwCertEncodingType, NULL, attr->pszObjId,
1132 0, NULL, NULL, &size);
1133 if (ret)
1134 {
1135 bytesNeeded += size;
1136 /* hack: a CERT_RDN_ATTR is identical to a CERT_NAME_VALUE beginning
1137 * with dwValueType, so "cast" it to get its encoded size
1138 */
1139 ret = nameValueEncodeFunc(dwCertEncodingType, NULL, &attr->dwValueType,
1140 0, NULL, NULL, &size);
1141 if (ret)
1142 {
1143 bytesNeeded += size;
1144 CRYPT_EncodeLen(bytesNeeded, NULL, &lenBytes);
1145 bytesNeeded += 1 + lenBytes;
1146 if (pbEncoded)
1147 {
1148 if (*pcbEncoded < bytesNeeded)
1149 {
1150 SetLastError(ERROR_MORE_DATA);
1151 ret = FALSE;
1152 }
1153 else
1154 {
1155 *pbEncoded++ = ASN_SEQUENCE;
1156 CRYPT_EncodeLen(bytesNeeded - lenBytes - 1, pbEncoded,
1157 &lenBytes);
1158 pbEncoded += lenBytes;
1159 size = bytesNeeded - 1 - lenBytes;
1160 ret = CRYPT_AsnEncodeOid(dwCertEncodingType, NULL,
1161 attr->pszObjId, 0, NULL, pbEncoded, &size);
1162 if (ret)
1163 {
1164 pbEncoded += size;
1165 size = bytesNeeded - 1 - lenBytes - size;
1166 ret = nameValueEncodeFunc(dwCertEncodingType, NULL,
1167 &attr->dwValueType, 0, NULL, pbEncoded, &size);
1168 if (!ret)
1169 *pcbEncoded = size;
1170 }
1171 }
1172 }
1173 if (ret)
1174 *pcbEncoded = bytesNeeded;
1175 }
1176 else
1177 {
1178 /* Have to propagate index of failing character */
1179 *pcbEncoded = size;
1180 }
1181 }
1182 return ret;
1183 }
1184
1185 static int __cdecl BLOBComp(const void *l, const void *r)
1186 {
1187 const CRYPT_DER_BLOB *a = l, *b = r;
1188 int ret;
1189
1190 if (!(ret = memcmp(a->pbData, b->pbData, min(a->cbData, b->cbData))))
1191 ret = a->cbData - b->cbData;
1192 return ret;
1193 }
1194
1195 /* This encodes a SET OF, which in DER must be lexicographically sorted.
1196 */
1197 static BOOL WINAPI CRYPT_DEREncodeSet(DWORD dwCertEncodingType,
1198 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1199 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1200 {
1201 const CRYPT_BLOB_ARRAY *set = pvStructInfo;
1202 DWORD bytesNeeded = 0, lenBytes, i;
1203 BOOL ret;
1204
1205 for (i = 0; i < set->cBlob; i++)
1206 bytesNeeded += set->rgBlob[i].cbData;
1207 CRYPT_EncodeLen(bytesNeeded, NULL, &lenBytes);
1208 bytesNeeded += 1 + lenBytes;
1209 if (!pbEncoded)
1210 {
1211 *pcbEncoded = bytesNeeded;
1212 ret = TRUE;
1213 }
1214 else if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
1215 pbEncoded, pcbEncoded, bytesNeeded)))
1216 {
1217 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
1218 pbEncoded = *(BYTE **)pbEncoded;
1219 qsort(set->rgBlob, set->cBlob, sizeof(CRYPT_DER_BLOB), BLOBComp);
1220 *pbEncoded++ = ASN_CONSTRUCTOR | ASN_SETOF;
1221 CRYPT_EncodeLen(bytesNeeded - lenBytes - 1, pbEncoded, &lenBytes);
1222 pbEncoded += lenBytes;
1223 for (i = 0; i < set->cBlob; i++)
1224 {
1225 memcpy(pbEncoded, set->rgBlob[i].pbData, set->rgBlob[i].cbData);
1226 pbEncoded += set->rgBlob[i].cbData;
1227 }
1228 }
1229 return ret;
1230 }
1231
1232 struct DERSetDescriptor
1233 {
1234 DWORD cItems;
1235 const void *items;
1236 size_t itemSize;
1237 size_t itemOffset;
1238 CryptEncodeObjectExFunc encode;
1239 };
1240
1241 static BOOL WINAPI CRYPT_DEREncodeItemsAsSet(DWORD dwCertEncodingType,
1242 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1243 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1244 {
1245 const struct DERSetDescriptor *desc = pvStructInfo;
1246 CRYPT_BLOB_ARRAY setOf = { 0, NULL };
1247 BOOL ret = TRUE;
1248 DWORD i;
1249
1250 if (desc->cItems)
1251 {
1252 setOf.rgBlob = CryptMemAlloc(desc->cItems * sizeof(CRYPT_DER_BLOB));
1253 if (!setOf.rgBlob)
1254 ret = FALSE;
1255 else
1256 {
1257 setOf.cBlob = desc->cItems;
1258 memset(setOf.rgBlob, 0, setOf.cBlob * sizeof(CRYPT_DER_BLOB));
1259 }
1260 }
1261 for (i = 0; ret && i < setOf.cBlob; i++)
1262 {
1263 ret = desc->encode(dwCertEncodingType, lpszStructType,
1264 (const BYTE *)desc->items + i * desc->itemSize + desc->itemOffset,
1265 0, NULL, NULL, &setOf.rgBlob[i].cbData);
1266 if (ret)
1267 {
1268 setOf.rgBlob[i].pbData = CryptMemAlloc(setOf.rgBlob[i].cbData);
1269 if (!setOf.rgBlob[i].pbData)
1270 ret = FALSE;
1271 else
1272 ret = desc->encode(dwCertEncodingType, lpszStructType,
1273 (const BYTE *)desc->items + i * desc->itemSize +
1274 desc->itemOffset, 0, NULL, setOf.rgBlob[i].pbData,
1275 &setOf.rgBlob[i].cbData);
1276 }
1277 /* Some functions propagate their errors through the size */
1278 if (!ret)
1279 *pcbEncoded = setOf.rgBlob[i].cbData;
1280 }
1281 if (ret)
1282 {
1283 DWORD bytesNeeded = 0, lenBytes;
1284
1285 for (i = 0; i < setOf.cBlob; i++)
1286 bytesNeeded += setOf.rgBlob[i].cbData;
1287 CRYPT_EncodeLen(bytesNeeded, NULL, &lenBytes);
1288 bytesNeeded += 1 + lenBytes;
1289 if (!pbEncoded)
1290 *pcbEncoded = bytesNeeded;
1291 else if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
1292 pbEncoded, pcbEncoded, bytesNeeded)))
1293 {
1294 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
1295 pbEncoded = *(BYTE **)pbEncoded;
1296 qsort(setOf.rgBlob, setOf.cBlob, sizeof(CRYPT_DER_BLOB),
1297 BLOBComp);
1298 *pbEncoded++ = ASN_CONSTRUCTOR | ASN_SETOF;
1299 CRYPT_EncodeLen(bytesNeeded - lenBytes - 1, pbEncoded, &lenBytes);
1300 pbEncoded += lenBytes;
1301 for (i = 0; i < setOf.cBlob; i++)
1302 {
1303 memcpy(pbEncoded, setOf.rgBlob[i].pbData,
1304 setOf.rgBlob[i].cbData);
1305 pbEncoded += setOf.rgBlob[i].cbData;
1306 }
1307 }
1308 }
1309 for (i = 0; i < setOf.cBlob; i++)
1310 CryptMemFree(setOf.rgBlob[i].pbData);
1311 CryptMemFree(setOf.rgBlob);
1312 return ret;
1313 }
1314
1315 static BOOL CRYPT_AsnEncodeRdn(DWORD dwCertEncodingType, const CERT_RDN *rdn,
1316 CryptEncodeObjectExFunc nameValueEncodeFunc, BYTE *pbEncoded,
1317 DWORD *pcbEncoded)
1318 {
1319 BOOL ret;
1320 CRYPT_BLOB_ARRAY setOf = { 0, NULL };
1321
1322 __TRY
1323 {
1324 DWORD i;
1325
1326 ret = TRUE;
1327 if (rdn->cRDNAttr)
1328 {
1329 setOf.rgBlob = CryptMemAlloc(rdn->cRDNAttr *
1330 sizeof(CRYPT_DER_BLOB));
1331 if (!setOf.rgBlob)
1332 ret = FALSE;
1333 else
1334 {
1335 setOf.cBlob = rdn->cRDNAttr;
1336 memset(setOf.rgBlob, 0, setOf.cBlob * sizeof(CRYPT_DER_BLOB));
1337 }
1338 }
1339 for (i = 0; ret && i < rdn->cRDNAttr; i++)
1340 {
1341 setOf.rgBlob[i].cbData = 0;
1342 ret = CRYPT_AsnEncodeRdnAttr(dwCertEncodingType, &rdn->rgRDNAttr[i],
1343 nameValueEncodeFunc, NULL, &setOf.rgBlob[i].cbData);
1344 if (ret)
1345 {
1346 setOf.rgBlob[i].pbData = CryptMemAlloc(setOf.rgBlob[i].cbData);
1347 if (!setOf.rgBlob[i].pbData)
1348 ret = FALSE;
1349 else
1350 ret = CRYPT_AsnEncodeRdnAttr(dwCertEncodingType,
1351 &rdn->rgRDNAttr[i], nameValueEncodeFunc,
1352 setOf.rgBlob[i].pbData, &setOf.rgBlob[i].cbData);
1353 }
1354 if (!ret)
1355 {
1356 /* Have to propagate index of failing character */
1357 *pcbEncoded = setOf.rgBlob[i].cbData;
1358 }
1359 }
1360 if (ret)
1361 ret = CRYPT_DEREncodeSet(X509_ASN_ENCODING, NULL, &setOf, 0, NULL,
1362 pbEncoded, pcbEncoded);
1363 for (i = 0; i < setOf.cBlob; i++)
1364 CryptMemFree(setOf.rgBlob[i].pbData);
1365 }
1366 __EXCEPT_PAGE_FAULT
1367 {
1368 SetLastError(STATUS_ACCESS_VIOLATION);
1369 ret = FALSE;
1370 }
1371 __ENDTRY
1372 CryptMemFree(setOf.rgBlob);
1373 return ret;
1374 }
1375
1376 static BOOL WINAPI CRYPT_AsnEncodeUnicodeNameValue(DWORD dwCertEncodingType,
1377 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1378 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded);
1379
1380 static BOOL WINAPI CRYPT_AsnEncodeOrCopyUnicodeNameValue(
1381 DWORD dwCertEncodingType, LPCSTR lpszStructType, const void *pvStructInfo,
1382 DWORD dwFlags, PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded,
1383 DWORD *pcbEncoded)
1384 {
1385 const CERT_NAME_VALUE *value = pvStructInfo;
1386 BOOL ret;
1387
1388 if (value->dwValueType == CERT_RDN_ENCODED_BLOB)
1389 ret = CRYPT_CopyEncodedBlob(dwCertEncodingType, NULL, &value->Value,
1390 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1391 else
1392 ret = CRYPT_AsnEncodeUnicodeNameValue(dwCertEncodingType, NULL, value,
1393 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1394 return ret;
1395 }
1396
1397 static BOOL WINAPI CRYPT_AsnEncodeUnicodeName(DWORD dwCertEncodingType,
1398 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1399 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1400 {
1401 BOOL ret = TRUE;
1402
1403 __TRY
1404 {
1405 const CERT_NAME_INFO *info = pvStructInfo;
1406 DWORD bytesNeeded = 0, lenBytes, size, i;
1407
1408 TRACE("encoding name with %d RDNs\n", info->cRDN);
1409 ret = TRUE;
1410 for (i = 0; ret && i < info->cRDN; i++)
1411 {
1412 ret = CRYPT_AsnEncodeRdn(dwCertEncodingType, &info->rgRDN[i],
1413 CRYPT_AsnEncodeOrCopyUnicodeNameValue, NULL, &size);
1414 if (ret)
1415 bytesNeeded += size;
1416 else
1417 *pcbEncoded = size;
1418 }
1419 CRYPT_EncodeLen(bytesNeeded, NULL, &lenBytes);
1420 bytesNeeded += 1 + lenBytes;
1421 if (ret)
1422 {
1423 if (!pbEncoded)
1424 *pcbEncoded = bytesNeeded;
1425 else
1426 {
1427 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
1428 pbEncoded, pcbEncoded, bytesNeeded)))
1429 {
1430 BYTE *out;
1431
1432 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
1433 pbEncoded = *(BYTE **)pbEncoded;
1434 out = pbEncoded;
1435 *out++ = ASN_SEQUENCEOF;
1436 CRYPT_EncodeLen(bytesNeeded - lenBytes - 1, out, &lenBytes);
1437 out += lenBytes;
1438 for (i = 0; ret && i < info->cRDN; i++)
1439 {
1440 size = bytesNeeded;
1441 ret = CRYPT_AsnEncodeRdn(dwCertEncodingType,
1442 &info->rgRDN[i], CRYPT_AsnEncodeOrCopyUnicodeNameValue,
1443 out, &size);
1444 if (ret)
1445 {
1446 out += size;
1447 bytesNeeded -= size;
1448 }
1449 else
1450 *pcbEncoded = size;
1451 }
1452 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
1453 CRYPT_FreeSpace(pEncodePara, pbEncoded);
1454 }
1455 }
1456 }
1457 }
1458 __EXCEPT_PAGE_FAULT
1459 {
1460 SetLastError(STATUS_ACCESS_VIOLATION);
1461 ret = FALSE;
1462 }
1463 __ENDTRY
1464 return ret;
1465 }
1466
1467 static BOOL WINAPI CRYPT_AsnEncodeCTLVersion(DWORD dwCertEncodingType,
1468 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1469 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1470 {
1471 const DWORD *ver = pvStructInfo;
1472 BOOL ret;
1473
1474 /* CTL_V1 is not encoded */
1475 if (*ver == CTL_V1)
1476 {
1477 *pcbEncoded = 0;
1478 ret = TRUE;
1479 }
1480 else
1481 ret = CRYPT_AsnEncodeInt(dwCertEncodingType, X509_INTEGER, ver,
1482 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1483 return ret;
1484 }
1485
1486 /* Like CRYPT_AsnEncodeAlgorithmId, but encodes parameters as an asn.1 NULL
1487 * if they are empty and the OID is not empty (otherwise omits them.)
1488 */
1489 static BOOL WINAPI CRYPT_AsnEncodeCTLSubjectAlgorithm(
1490 DWORD dwCertEncodingType, LPCSTR lpszStructType, const void *pvStructInfo,
1491 DWORD dwFlags, PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded,
1492 DWORD *pcbEncoded)
1493 {
1494 const CRYPT_ALGORITHM_IDENTIFIER *algo = pvStructInfo;
1495 BOOL ret;
1496 struct AsnEncodeSequenceItem items[2] = {
1497 { algo->pszObjId, CRYPT_AsnEncodeOid, 0 },
1498 };
1499 DWORD cItem = 1;
1500
1501 if (algo->pszObjId)
1502 {
1503 static const BYTE asn1Null[] = { ASN_NULL, 0 };
1504 static const CRYPT_DATA_BLOB nullBlob = { sizeof(asn1Null),
1505 (LPBYTE)asn1Null };
1506
1507 if (algo->Parameters.cbData)
1508 items[cItem].pvStructInfo = &algo->Parameters;
1509 else
1510 items[cItem].pvStructInfo = &nullBlob;
1511 items[cItem].encodeFunc = CRYPT_CopyEncodedBlob;
1512 cItem++;
1513 }
1514 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
1515 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1516 return ret;
1517 }
1518
1519 static BOOL CRYPT_AsnEncodeCTLEntry(const CTL_ENTRY *entry,
1520 BYTE *pbEncoded, DWORD *pcbEncoded)
1521 {
1522 struct AsnEncodeSequenceItem items[2] = {
1523 { &entry->SubjectIdentifier, CRYPT_AsnEncodeOctets, 0 },
1524 { &entry->cAttribute, CRYPT_AsnEncodePKCSAttributes, 0 },
1525 };
1526 BOOL ret;
1527
1528 ret = CRYPT_AsnEncodeSequence(X509_ASN_ENCODING, items,
1529 ARRAY_SIZE(items), 0, NULL, pbEncoded, pcbEncoded);
1530 return ret;
1531 }
1532
1533 struct CTLEntries
1534 {
1535 DWORD cEntry;
1536 CTL_ENTRY *rgEntry;
1537 };
1538
1539 static BOOL WINAPI CRYPT_AsnEncodeCTLEntries(DWORD dwCertEncodingType,
1540 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1541 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1542 {
1543 BOOL ret;
1544 DWORD bytesNeeded, dataLen, lenBytes, i;
1545 const struct CTLEntries *entries = pvStructInfo;
1546
1547 ret = TRUE;
1548 for (i = 0, dataLen = 0; ret && i < entries->cEntry; i++)
1549 {
1550 DWORD size;
1551
1552 ret = CRYPT_AsnEncodeCTLEntry(&entries->rgEntry[i], NULL, &size);
1553 if (ret)
1554 dataLen += size;
1555 }
1556 if (ret)
1557 {
1558 CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
1559 bytesNeeded = 1 + lenBytes + dataLen;
1560 if (!pbEncoded)
1561 *pcbEncoded = bytesNeeded;
1562 else
1563 {
1564 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
1565 pbEncoded, pcbEncoded, bytesNeeded)))
1566 {
1567 BYTE *out;
1568
1569 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
1570 pbEncoded = *(BYTE **)pbEncoded;
1571 out = pbEncoded;
1572 *out++ = ASN_SEQUENCEOF;
1573 CRYPT_EncodeLen(dataLen, out, &lenBytes);
1574 out += lenBytes;
1575 for (i = 0; ret && i < entries->cEntry; i++)
1576 {
1577 DWORD size = dataLen;
1578
1579 ret = CRYPT_AsnEncodeCTLEntry(&entries->rgEntry[i],
1580 out, &size);
1581 out += size;
1582 dataLen -= size;
1583 }
1584 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
1585 CRYPT_FreeSpace(pEncodePara, pbEncoded);
1586 }
1587 }
1588 }
1589 return ret;
1590 }
1591
1592 static BOOL WINAPI CRYPT_AsnEncodeCTL(DWORD dwCertEncodingType,
1593 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1594 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1595 {
1596 BOOL ret = FALSE;
1597
1598 __TRY
1599 {
1600 const CTL_INFO *info = pvStructInfo;
1601 struct AsnEncodeSequenceItem items[9] = {
1602 { &info->dwVersion, CRYPT_AsnEncodeCTLVersion, 0 },
1603 { &info->SubjectUsage, CRYPT_AsnEncodeEnhancedKeyUsage, 0 },
1604 };
1605 struct AsnConstructedItem constructed = { 0 };
1606 DWORD cItem = 2;
1607
1608 if (info->ListIdentifier.cbData)
1609 {
1610 items[cItem].pvStructInfo = &info->ListIdentifier;
1611 items[cItem].encodeFunc = CRYPT_AsnEncodeOctets;
1612 cItem++;
1613 }
1614 if (info->SequenceNumber.cbData)
1615 {
1616 items[cItem].pvStructInfo = &info->SequenceNumber;
1617 items[cItem].encodeFunc = CRYPT_AsnEncodeInteger;
1618 cItem++;
1619 }
1620 items[cItem].pvStructInfo = &info->ThisUpdate;
1621 items[cItem].encodeFunc = CRYPT_AsnEncodeChoiceOfTime;
1622 cItem++;
1623 if (info->NextUpdate.dwLowDateTime || info->NextUpdate.dwHighDateTime)
1624 {
1625 items[cItem].pvStructInfo = &info->NextUpdate;
1626 items[cItem].encodeFunc = CRYPT_AsnEncodeChoiceOfTime;
1627 cItem++;
1628 }
1629 items[cItem].pvStructInfo = &info->SubjectAlgorithm;
1630 items[cItem].encodeFunc = CRYPT_AsnEncodeCTLSubjectAlgorithm;
1631 cItem++;
1632 if (info->cCTLEntry)
1633 {
1634 items[cItem].pvStructInfo = &info->cCTLEntry;
1635 items[cItem].encodeFunc = CRYPT_AsnEncodeCTLEntries;
1636 cItem++;
1637 }
1638 if (info->cExtension)
1639 {
1640 constructed.tag = 0;
1641 constructed.pvStructInfo = &info->cExtension;
1642 constructed.encodeFunc = CRYPT_AsnEncodeExtensions;
1643 items[cItem].pvStructInfo = &constructed;
1644 items[cItem].encodeFunc = CRYPT_AsnEncodeConstructed;
1645 cItem++;
1646 }
1647 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
1648 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1649 }
1650 __EXCEPT_PAGE_FAULT
1651 {
1652 SetLastError(STATUS_ACCESS_VIOLATION);
1653 }
1654 __ENDTRY
1655 return ret;
1656 }
1657
1658 static BOOL CRYPT_AsnEncodeSMIMECapability(DWORD dwCertEncodingType,
1659 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1660 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1661 {
1662 BOOL ret = FALSE;
1663
1664 __TRY
1665 {
1666 const CRYPT_SMIME_CAPABILITY *capability = pvStructInfo;
1667
1668 if (!capability->pszObjId)
1669 SetLastError(E_INVALIDARG);
1670 else
1671 {
1672 struct AsnEncodeSequenceItem items[] = {
1673 { capability->pszObjId, CRYPT_AsnEncodeOid, 0 },
1674 { &capability->Parameters, CRYPT_CopyEncodedBlob, 0 },
1675 };
1676
1677 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
1678 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded,
1679 pcbEncoded);
1680 }
1681 }
1682 __EXCEPT_PAGE_FAULT
1683 {
1684 SetLastError(STATUS_ACCESS_VIOLATION);
1685 }
1686 __ENDTRY
1687 return ret;
1688 }
1689
1690 static BOOL WINAPI CRYPT_AsnEncodeSMIMECapabilities(DWORD dwCertEncodingType,
1691 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1692 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1693 {
1694 BOOL ret = FALSE;
1695
1696 __TRY
1697 {
1698 DWORD bytesNeeded, dataLen, lenBytes, i;
1699 const CRYPT_SMIME_CAPABILITIES *capabilities = pvStructInfo;
1700
1701 ret = TRUE;
1702 for (i = 0, dataLen = 0; ret && i < capabilities->cCapability; i++)
1703 {
1704 DWORD size;
1705
1706 ret = CRYPT_AsnEncodeSMIMECapability(dwCertEncodingType, NULL,
1707 &capabilities->rgCapability[i], 0, NULL, NULL, &size);
1708 if (ret)
1709 dataLen += size;
1710 }
1711 if (ret)
1712 {
1713 CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
1714 bytesNeeded = 1 + lenBytes + dataLen;
1715 if (!pbEncoded)
1716 *pcbEncoded = bytesNeeded;
1717 else
1718 {
1719 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
1720 pbEncoded, pcbEncoded, bytesNeeded)))
1721 {
1722 BYTE *out;
1723
1724 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
1725 pbEncoded = *(BYTE **)pbEncoded;
1726 out = pbEncoded;
1727 *out++ = ASN_SEQUENCEOF;
1728 CRYPT_EncodeLen(dataLen, out, &lenBytes);
1729 out += lenBytes;
1730 for (i = 0; i < capabilities->cCapability; i++)
1731 {
1732 DWORD size = dataLen;
1733
1734 ret = CRYPT_AsnEncodeSMIMECapability(dwCertEncodingType,
1735 NULL, &capabilities->rgCapability[i], 0, NULL,
1736 out, &size);
1737 out += size;
1738 dataLen -= size;
1739 }
1740 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
1741 CRYPT_FreeSpace(pEncodePara, pbEncoded);
1742 }
1743 }
1744 }
1745 }
1746 __EXCEPT_PAGE_FAULT
1747 {
1748 SetLastError(STATUS_ACCESS_VIOLATION);
1749 }
1750 __ENDTRY
1751 return ret;
1752 }
1753
1754 static BOOL WINAPI CRYPT_AsnEncodeNoticeNumbers(DWORD dwCertEncodingType,
1755 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1756 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1757 {
1758 const CERT_POLICY_QUALIFIER_NOTICE_REFERENCE *noticeRef = pvStructInfo;
1759 DWORD bytesNeeded, dataLen, lenBytes, i;
1760 BOOL ret = TRUE;
1761
1762 for (i = 0, dataLen = 0; ret && i < noticeRef->cNoticeNumbers; i++)
1763 {
1764 DWORD size;
1765
1766 ret = CRYPT_AsnEncodeInt(dwCertEncodingType, X509_INTEGER,
1767 &noticeRef->rgNoticeNumbers[i], 0, NULL, NULL, &size);
1768 if (ret)
1769 dataLen += size;
1770 }
1771 if (ret)
1772 {
1773 CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
1774 bytesNeeded = 1 + lenBytes + dataLen;
1775 if (!pbEncoded)
1776 *pcbEncoded = bytesNeeded;
1777 else
1778 {
1779 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara, pbEncoded,
1780 pcbEncoded, bytesNeeded)))
1781 {
1782 BYTE *out;
1783
1784 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
1785 pbEncoded = *(BYTE **)pbEncoded;
1786 out = pbEncoded;
1787 *out++ = ASN_SEQUENCE;
1788 CRYPT_EncodeLen(dataLen, out, &lenBytes);
1789 out += lenBytes;
1790 for (i = 0; i < noticeRef->cNoticeNumbers; i++)
1791 {
1792 DWORD size = dataLen;
1793
1794 ret = CRYPT_AsnEncodeInt(dwCertEncodingType, X509_INTEGER,
1795 &noticeRef->rgNoticeNumbers[i], 0, NULL, out, &size);
1796 out += size;
1797 dataLen -= size;
1798 }
1799 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
1800 CRYPT_FreeSpace(pEncodePara, pbEncoded);
1801 }
1802 }
1803 }
1804 return ret;
1805 }
1806
1807 static BOOL WINAPI CRYPT_AsnEncodeNoticeReference(DWORD dwCertEncodingType,
1808 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1809 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1810 {
1811 const CERT_POLICY_QUALIFIER_NOTICE_REFERENCE *noticeRef = pvStructInfo;
1812 BOOL ret;
1813 CERT_NAME_VALUE orgValue = { CERT_RDN_IA5_STRING,
1814 { 0, (LPBYTE)noticeRef->pszOrganization } };
1815 struct AsnEncodeSequenceItem items[] = {
1816 { &orgValue, CRYPT_AsnEncodeNameValue, 0 },
1817 { noticeRef, CRYPT_AsnEncodeNoticeNumbers, 0 },
1818 };
1819
1820 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
1821 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded,
1822 pcbEncoded);
1823 return ret;
1824 }
1825
1826 static BOOL WINAPI CRYPT_AsnEncodePolicyQualifierUserNotice(
1827 DWORD dwCertEncodingType, LPCSTR lpszStructType, const void *pvStructInfo,
1828 DWORD dwFlags, PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded,
1829 DWORD *pcbEncoded)
1830 {
1831 BOOL ret = FALSE;
1832
1833 __TRY
1834 {
1835 const CERT_POLICY_QUALIFIER_USER_NOTICE *notice = pvStructInfo;
1836 struct AsnEncodeSequenceItem items[2];
1837 CERT_NAME_VALUE displayTextValue;
1838 DWORD cItem = 0;
1839
1840 if (notice->pNoticeReference)
1841 {
1842 items[cItem].encodeFunc = CRYPT_AsnEncodeNoticeReference;
1843 items[cItem].pvStructInfo = notice->pNoticeReference;
1844 cItem++;
1845 }
1846 if (notice->pszDisplayText)
1847 {
1848 displayTextValue.dwValueType = CERT_RDN_BMP_STRING;
1849 displayTextValue.Value.cbData = 0;
1850 displayTextValue.Value.pbData = (LPBYTE)notice->pszDisplayText;
1851 items[cItem].encodeFunc = CRYPT_AsnEncodeNameValue;
1852 items[cItem].pvStructInfo = &displayTextValue;
1853 cItem++;
1854 }
1855 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
1856 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1857 }
1858 __EXCEPT_PAGE_FAULT
1859 {
1860 SetLastError(STATUS_ACCESS_VIOLATION);
1861 }
1862 __ENDTRY
1863 return ret;
1864 }
1865
1866 static BOOL WINAPI CRYPT_AsnEncodePKCSAttribute(DWORD dwCertEncodingType,
1867 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1868 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1869 {
1870 BOOL ret = FALSE;
1871
1872 __TRY
1873 {
1874 const CRYPT_ATTRIBUTE *attr = pvStructInfo;
1875
1876 if (!attr->pszObjId)
1877 SetLastError(E_INVALIDARG);
1878 else
1879 {
1880 struct AsnEncodeSequenceItem items[2] = {
1881 { attr->pszObjId, CRYPT_AsnEncodeOid, 0 },
1882 { &attr->cValue, CRYPT_DEREncodeSet, 0 },
1883 };
1884
1885 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
1886 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded,
1887 pcbEncoded);
1888 }
1889 }
1890 __EXCEPT_PAGE_FAULT
1891 {
1892 SetLastError(STATUS_ACCESS_VIOLATION);
1893 }
1894 __ENDTRY
1895 return ret;
1896 }
1897
1898 static BOOL WINAPI CRYPT_AsnEncodePKCSAttributes(DWORD dwCertEncodingType,
1899 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1900 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1901 {
1902 BOOL ret = FALSE;
1903
1904 __TRY
1905 {
1906 const CRYPT_ATTRIBUTES *attributes = pvStructInfo;
1907 struct DERSetDescriptor desc = { attributes->cAttr, attributes->rgAttr,
1908 sizeof(CRYPT_ATTRIBUTE), 0, CRYPT_AsnEncodePKCSAttribute };
1909
1910 ret = CRYPT_DEREncodeItemsAsSet(X509_ASN_ENCODING, lpszStructType,
1911 &desc, dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1912 }
1913 __EXCEPT_PAGE_FAULT
1914 {
1915 SetLastError(STATUS_ACCESS_VIOLATION);
1916 }
1917 __ENDTRY
1918 return ret;
1919 }
1920
1921 /* Like CRYPT_AsnEncodePKCSContentInfo, but allows the OID to be NULL */
1922 static BOOL WINAPI CRYPT_AsnEncodePKCSContentInfoInternal(
1923 DWORD dwCertEncodingType, LPCSTR lpszStructType, const void *pvStructInfo,
1924 DWORD dwFlags, PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded,
1925 DWORD *pcbEncoded)
1926 {
1927 const CRYPT_CONTENT_INFO *info = pvStructInfo;
1928 struct AsnEncodeSequenceItem items[2] = {
1929 { info->pszObjId, CRYPT_AsnEncodeOid, 0 },
1930 { NULL, NULL, 0 },
1931 };
1932 struct AsnConstructedItem constructed = { 0 };
1933 DWORD cItem = 1;
1934
1935 if (info->Content.cbData)
1936 {
1937 constructed.tag = 0;
1938 constructed.pvStructInfo = &info->Content;
1939 constructed.encodeFunc = CRYPT_CopyEncodedBlob;
1940 items[cItem].pvStructInfo = &constructed;
1941 items[cItem].encodeFunc = CRYPT_AsnEncodeConstructed;
1942 cItem++;
1943 }
1944 return CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
1945 cItem, dwFlags, pEncodePara, pbEncoded, pcbEncoded);
1946 }
1947
1948 BOOL CRYPT_AsnEncodePKCSDigestedData(const CRYPT_DIGESTED_DATA *digestedData,
1949 void *pvData, DWORD *pcbData)
1950 {
1951 struct AsnEncodeSequenceItem items[] = {
1952 { &digestedData->version, CRYPT_AsnEncodeInt, 0 },
1953 { &digestedData->DigestAlgorithm, CRYPT_AsnEncodeAlgorithmIdWithNullParams,
1954 0 },
1955 { &digestedData->ContentInfo, CRYPT_AsnEncodePKCSContentInfoInternal, 0 },
1956 { &digestedData->hash, CRYPT_AsnEncodeOctets, 0 },
1957 };
1958
1959 return CRYPT_AsnEncodeSequence(X509_ASN_ENCODING, items, ARRAY_SIZE(items), 0, NULL, pvData, pcbData);
1960 }
1961
1962 static BOOL WINAPI CRYPT_AsnEncodePKCSContentInfo(DWORD dwCertEncodingType,
1963 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
1964 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
1965 {
1966 BOOL ret = FALSE;
1967
1968 __TRY
1969 {
1970 const CRYPT_CONTENT_INFO *info = pvStructInfo;
1971
1972 if (!info->pszObjId)
1973 SetLastError(E_INVALIDARG);
1974 else
1975 ret = CRYPT_AsnEncodePKCSContentInfoInternal(dwCertEncodingType,
1976 lpszStructType, pvStructInfo, dwFlags, pEncodePara, pbEncoded,
1977 pcbEncoded);
1978 }
1979 __EXCEPT_PAGE_FAULT
1980 {
1981 SetLastError(STATUS_ACCESS_VIOLATION);
1982 }
1983 __ENDTRY
1984 return ret;
1985 }
1986
1987 static BOOL CRYPT_AsnEncodeUnicodeStringCoerce(const CERT_NAME_VALUE *value,
1988 BYTE tag, DWORD dwFlags, const CRYPT_ENCODE_PARA *pEncodePara, BYTE *pbEncoded,
1989 DWORD *pcbEncoded)
1990 {
1991 BOOL ret = TRUE;
1992 LPCWSTR str = (LPCWSTR)value->Value.pbData;
1993 DWORD bytesNeeded, lenBytes, encodedLen;
1994
1995 if (value->Value.cbData)
1996 encodedLen = value->Value.cbData / sizeof(WCHAR);
1997 else if (str)
1998 encodedLen = lstrlenW(str);
1999 else
2000 encodedLen = 0;
2001 CRYPT_EncodeLen(encodedLen, NULL, &lenBytes);
2002 bytesNeeded = 1 + lenBytes + encodedLen;
2003 if (!pbEncoded)
2004 *pcbEncoded = bytesNeeded;
2005 else
2006 {
2007 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
2008 pbEncoded, pcbEncoded, bytesNeeded)))
2009 {
2010 DWORD i;
2011
2012 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
2013 pbEncoded = *(BYTE **)pbEncoded;
2014 *pbEncoded++ = tag;
2015 CRYPT_EncodeLen(encodedLen, pbEncoded, &lenBytes);
2016 pbEncoded += lenBytes;
2017 for (i = 0; i < encodedLen; i++)
2018 *pbEncoded++ = (BYTE)str[i];
2019 }
2020 }
2021 return ret;
2022 }
2023
2024 static BOOL CRYPT_AsnEncodeNumericString(const CERT_NAME_VALUE *value,
2025 DWORD dwFlags, const CRYPT_ENCODE_PARA *pEncodePara, BYTE *pbEncoded,
2026 DWORD *pcbEncoded)
2027 {
2028 BOOL ret = TRUE;
2029 LPCWSTR str = (LPCWSTR)value->Value.pbData;
2030 DWORD bytesNeeded, lenBytes, encodedLen;
2031
2032 if (value->Value.cbData)
2033 encodedLen = value->Value.cbData / sizeof(WCHAR);
2034 else if (str)
2035 encodedLen = lstrlenW(str);
2036 else
2037 encodedLen = 0;
2038 CRYPT_EncodeLen(encodedLen, NULL, &lenBytes);
2039 bytesNeeded = 1 + lenBytes + encodedLen;
2040 if (!pbEncoded)
2041 *pcbEncoded = bytesNeeded;
2042 else
2043 {
2044 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
2045 pbEncoded, pcbEncoded, bytesNeeded)))
2046 {
2047 DWORD i;
2048 BYTE *ptr;
2049
2050 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
2051 ptr = *(BYTE **)pbEncoded;
2052 else
2053 ptr = pbEncoded;
2054 *ptr++ = ASN_NUMERICSTRING;
2055 CRYPT_EncodeLen(encodedLen, ptr, &lenBytes);
2056 ptr += lenBytes;
2057 for (i = 0; ret && i < encodedLen; i++)
2058 {
2059 if ('0' <= str[i] && str[i] <= '9')
2060 *ptr++ = (BYTE)str[i];
2061 else
2062 {
2063 *pcbEncoded = i;
2064 SetLastError(CRYPT_E_INVALID_NUMERIC_STRING);
2065 ret = FALSE;
2066 }
2067 }
2068 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
2069 CRYPT_FreeSpace(pEncodePara, *(BYTE **)pbEncoded);
2070 }
2071 }
2072 return ret;
2073 }
2074
2075 static inline BOOL isprintableW(WCHAR wc)
2076 {
2077 return wc && wcschr( L"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 '()+,-./:=?", wc );
2078 }
2079
2080 static BOOL CRYPT_AsnEncodePrintableString(const CERT_NAME_VALUE *value,
2081 DWORD dwFlags, const CRYPT_ENCODE_PARA *pEncodePara, BYTE *pbEncoded,
2082 DWORD *pcbEncoded)
2083 {
2084 BOOL ret = TRUE;
2085 LPCWSTR str = (LPCWSTR)value->Value.pbData;
2086 DWORD bytesNeeded, lenBytes, encodedLen;
2087
2088 if (value->Value.cbData)
2089 encodedLen = value->Value.cbData / sizeof(WCHAR);
2090 else if (str)
2091 encodedLen = lstrlenW(str);
2092 else
2093 encodedLen = 0;
2094 CRYPT_EncodeLen(encodedLen, NULL, &lenBytes);
2095 bytesNeeded = 1 + lenBytes + encodedLen;
2096 if (!pbEncoded)
2097 *pcbEncoded = bytesNeeded;
2098 else
2099 {
2100 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
2101 pbEncoded, pcbEncoded, bytesNeeded)))
2102 {
2103 DWORD i;
2104 BYTE *ptr;
2105
2106 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
2107 ptr = *(BYTE **)pbEncoded;
2108 else
2109 ptr = pbEncoded;
2110 *ptr++ = ASN_PRINTABLESTRING;
2111 CRYPT_EncodeLen(encodedLen, ptr, &lenBytes);
2112 ptr += lenBytes;
2113 for (i = 0; ret && i < encodedLen; i++)
2114 {
2115 if (isprintableW(str[i]))
2116 *ptr++ = (BYTE)str[i];
2117 else
2118 {
2119 *pcbEncoded = i;
2120 SetLastError(CRYPT_E_INVALID_PRINTABLE_STRING);
2121 ret = FALSE;
2122 }
2123 }
2124 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
2125 CRYPT_FreeSpace(pEncodePara, *(BYTE **)pbEncoded);
2126 }
2127 }
2128 return ret;
2129 }
2130
2131 static BOOL CRYPT_AsnEncodeIA5String(const CERT_NAME_VALUE *value,
2132 DWORD dwFlags, const CRYPT_ENCODE_PARA *pEncodePara, BYTE *pbEncoded,
2133 DWORD *pcbEncoded)
2134 {
2135 BOOL ret = TRUE;
2136 LPCWSTR str = (LPCWSTR)value->Value.pbData;
2137 DWORD bytesNeeded, lenBytes, encodedLen;
2138
2139 if (value->Value.cbData)
2140 encodedLen = value->Value.cbData / sizeof(WCHAR);
2141 else if (str)
2142 encodedLen = lstrlenW(str);
2143 else
2144 encodedLen = 0;
2145 CRYPT_EncodeLen(encodedLen, NULL, &lenBytes);
2146 bytesNeeded = 1 + lenBytes + encodedLen;
2147 if (!pbEncoded)
2148 *pcbEncoded = bytesNeeded;
2149 else
2150 {
2151 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
2152 pbEncoded, pcbEncoded, bytesNeeded)))
2153 {
2154 DWORD i;
2155 BYTE *ptr;
2156
2157 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
2158 ptr = *(BYTE **)pbEncoded;
2159 else
2160 ptr = pbEncoded;
2161 *ptr++ = ASN_IA5STRING;
2162 CRYPT_EncodeLen(encodedLen, ptr, &lenBytes);
2163 ptr += lenBytes;
2164 for (i = 0; ret && i < encodedLen; i++)
2165 {
2166 if (str[i] <= 0x7f)
2167 *ptr++ = (BYTE)str[i];
2168 else
2169 {
2170 *pcbEncoded = i;
2171 SetLastError(CRYPT_E_INVALID_IA5_STRING);
2172 ret = FALSE;
2173 }
2174 }
2175 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
2176 CRYPT_FreeSpace(pEncodePara, *(BYTE **)pbEncoded);
2177 }
2178 }
2179 return ret;
2180 }
2181
2182 static BOOL CRYPT_AsnEncodeUniversalString(const CERT_NAME_VALUE *value,
2183 DWORD dwFlags, const CRYPT_ENCODE_PARA *pEncodePara, BYTE *pbEncoded,
2184 DWORD *pcbEncoded)
2185 {
2186 BOOL ret = TRUE;
2187 LPCWSTR str = (LPCWSTR)value->Value.pbData;
2188 DWORD bytesNeeded, lenBytes, strLen;
2189
2190 /* FIXME: doesn't handle composite characters */
2191 if (value->Value.cbData)
2192 strLen = value->Value.cbData / sizeof(WCHAR);
2193 else if (str)
2194 strLen = lstrlenW(str);
2195 else
2196 strLen = 0;
2197 CRYPT_EncodeLen(strLen * 4, NULL, &lenBytes);
2198 bytesNeeded = 1 + lenBytes + strLen * 4;
2199 if (!pbEncoded)
2200 *pcbEncoded = bytesNeeded;
2201 else
2202 {
2203 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
2204 pbEncoded, pcbEncoded, bytesNeeded)))
2205 {
2206 DWORD i;
2207
2208 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
2209 pbEncoded = *(BYTE **)pbEncoded;
2210 *pbEncoded++ = ASN_UNIVERSALSTRING;
2211 CRYPT_EncodeLen(strLen * 4, pbEncoded, &lenBytes);
2212 pbEncoded += lenBytes;
2213 for (i = 0; i < strLen; i++)
2214 {
2215 *pbEncoded++ = 0;
2216 *pbEncoded++ = 0;
2217 *pbEncoded++ = (BYTE)((str[i] & 0xff00) >> 8);
2218 *pbEncoded++ = (BYTE)(str[i] & 0x00ff);
2219 }
2220 }
2221 }
2222 return ret;
2223 }
2224
2225 static BOOL WINAPI CRYPT_AsnEncodeUnicodeNameValue(DWORD dwCertEncodingType,
2226 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2227 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2228 {
2229 BOOL ret = FALSE;
2230
2231 __TRY
2232 {
2233 const CERT_NAME_VALUE *value = pvStructInfo;
2234
2235 switch (value->dwValueType)
2236 {
2237 case CERT_RDN_ANY_TYPE:
2238 case CERT_RDN_ENCODED_BLOB:
2239 case CERT_RDN_OCTET_STRING:
2240 SetLastError(CRYPT_E_NOT_CHAR_STRING);
2241 break;
2242 case CERT_RDN_NUMERIC_STRING:
2243 ret = CRYPT_AsnEncodeNumericString(value, dwFlags, pEncodePara,
2244 pbEncoded, pcbEncoded);
2245 break;
2246 case CERT_RDN_PRINTABLE_STRING:
2247 ret = CRYPT_AsnEncodePrintableString(value, dwFlags, pEncodePara,
2248 pbEncoded, pcbEncoded);
2249 break;
2250 case CERT_RDN_TELETEX_STRING:
2251 ret = CRYPT_AsnEncodeUnicodeStringCoerce(value, ASN_T61STRING,
2252 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
2253 break;
2254 case CERT_RDN_VIDEOTEX_STRING:
2255 ret = CRYPT_AsnEncodeUnicodeStringCoerce(value,
2256 ASN_VIDEOTEXSTRING, dwFlags, pEncodePara, pbEncoded, pcbEncoded);
2257 break;
2258 case CERT_RDN_IA5_STRING:
2259 ret = CRYPT_AsnEncodeIA5String(value, dwFlags, pEncodePara,
2260 pbEncoded, pcbEncoded);
2261 break;
2262 case CERT_RDN_GRAPHIC_STRING:
2263 ret = CRYPT_AsnEncodeUnicodeStringCoerce(value, ASN_GRAPHICSTRING,
2264 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
2265 break;
2266 case CERT_RDN_VISIBLE_STRING:
2267 ret = CRYPT_AsnEncodeUnicodeStringCoerce(value, ASN_VISIBLESTRING,
2268 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
2269 break;
2270 case CERT_RDN_GENERAL_STRING:
2271 ret = CRYPT_AsnEncodeUnicodeStringCoerce(value, ASN_GENERALSTRING,
2272 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
2273 break;
2274 case CERT_RDN_UNIVERSAL_STRING:
2275 ret = CRYPT_AsnEncodeUniversalString(value, dwFlags, pEncodePara,
2276 pbEncoded, pcbEncoded);
2277 break;
2278 case CERT_RDN_BMP_STRING:
2279 ret = CRYPT_AsnEncodeBMPString(value, dwFlags, pEncodePara,
2280 pbEncoded, pcbEncoded);
2281 break;
2282 case CERT_RDN_UTF8_STRING:
2283 ret = CRYPT_AsnEncodeUTF8String(value, dwFlags, pEncodePara,
2284 pbEncoded, pcbEncoded);
2285 break;
2286 default:
2287 SetLastError(CRYPT_E_ASN1_CHOICE);
2288 }
2289 }
2290 __EXCEPT_PAGE_FAULT
2291 {
2292 SetLastError(STATUS_ACCESS_VIOLATION);
2293 }
2294 __ENDTRY
2295 return ret;
2296 }
2297
2298 static BOOL WINAPI CRYPT_AsnEncodeName(DWORD dwCertEncodingType,
2299 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2300 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2301 {
2302 BOOL ret;
2303
2304 __TRY
2305 {
2306 const CERT_NAME_INFO *info = pvStructInfo;
2307 DWORD bytesNeeded = 0, lenBytes, size, i;
2308
2309 TRACE("encoding name with %d RDNs\n", info->cRDN);
2310 ret = TRUE;
2311 for (i = 0; ret && i < info->cRDN; i++)
2312 {
2313 ret = CRYPT_AsnEncodeRdn(dwCertEncodingType, &info->rgRDN[i],
2314 CRYPT_AsnEncodeNameValue, NULL, &size);
2315 if (ret)
2316 bytesNeeded += size;
2317 }
2318 CRYPT_EncodeLen(bytesNeeded, NULL, &lenBytes);
2319 bytesNeeded += 1 + lenBytes;
2320 if (ret)
2321 {
2322 if (!pbEncoded)
2323 *pcbEncoded = bytesNeeded;
2324 else
2325 {
2326 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
2327 pbEncoded, pcbEncoded, bytesNeeded)))
2328 {
2329 BYTE *out;
2330
2331 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
2332 pbEncoded = *(BYTE **)pbEncoded;
2333 out = pbEncoded;
2334 *out++ = ASN_SEQUENCEOF;
2335 CRYPT_EncodeLen(bytesNeeded - lenBytes - 1, out, &lenBytes);
2336 out += lenBytes;
2337 for (i = 0; ret && i < info->cRDN; i++)
2338 {
2339 size = bytesNeeded;
2340 ret = CRYPT_AsnEncodeRdn(dwCertEncodingType,
2341 &info->rgRDN[i], CRYPT_AsnEncodeNameValue, out, &size);
2342 if (ret)
2343 {
2344 out += size;
2345 bytesNeeded -= size;
2346 }
2347 }
2348 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
2349 CRYPT_FreeSpace(pEncodePara, pbEncoded);
2350 }
2351 }
2352 }
2353 }
2354 __EXCEPT_PAGE_FAULT
2355 {
2356 SetLastError(STATUS_ACCESS_VIOLATION);
2357 ret = FALSE;
2358 }
2359 __ENDTRY
2360 return ret;
2361 }
2362
2363 static BOOL WINAPI CRYPT_AsnEncodeBool(DWORD dwCertEncodingType,
2364 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2365 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2366 {
2367 BOOL val = *(const BOOL *)pvStructInfo, ret;
2368
2369 TRACE("%d\n", val);
2370
2371 if (!pbEncoded)
2372 {
2373 *pcbEncoded = 3;
2374 ret = TRUE;
2375 }
2376 else if (*pcbEncoded < 3)
2377 {
2378 *pcbEncoded = 3;
2379 SetLastError(ERROR_MORE_DATA);
2380 ret = FALSE;
2381 }
2382 else
2383 {
2384 *pcbEncoded = 3;
2385 *pbEncoded++ = ASN_BOOL;
2386 *pbEncoded++ = 1;
2387 *pbEncoded++ = val ? 0xff : 0;
2388 ret = TRUE;
2389 }
2390 TRACE("returning %d (%08x)\n", ret, GetLastError());
2391 return ret;
2392 }
2393
2394 static BOOL WINAPI CRYPT_AsnEncodeAltNameEntry(DWORD dwCertEncodingType,
2395 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2396 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2397 {
2398 const CERT_ALT_NAME_ENTRY *entry = pvStructInfo;
2399 BOOL ret;
2400 DWORD dataLen;
2401 BYTE tag;
2402
2403 ret = TRUE;
2404 switch (entry->dwAltNameChoice)
2405 {
2406 case CERT_ALT_NAME_RFC822_NAME:
2407 case CERT_ALT_NAME_DNS_NAME:
2408 case CERT_ALT_NAME_URL:
2409 tag = ASN_CONTEXT | (entry->dwAltNameChoice - 1);
2410 if (entry->u.pwszURL)
2411 {
2412 DWORD i;
2413
2414 /* Not + 1: don't encode the NULL-terminator */
2415 dataLen = lstrlenW(entry->u.pwszURL);
2416 for (i = 0; ret && i < dataLen; i++)
2417 {
2418 if (entry->u.pwszURL[i] > 0x7f)
2419 {
2420 SetLastError(CRYPT_E_INVALID_IA5_STRING);
2421 ret = FALSE;
2422 *pcbEncoded = i;
2423 }
2424 }
2425 }
2426 else
2427 dataLen = 0;
2428 break;
2429 case CERT_ALT_NAME_DIRECTORY_NAME:
2430 tag = ASN_CONTEXT | ASN_CONSTRUCTOR | (entry->dwAltNameChoice - 1);
2431 dataLen = entry->u.DirectoryName.cbData;
2432 break;
2433 case CERT_ALT_NAME_IP_ADDRESS:
2434 tag = ASN_CONTEXT | (entry->dwAltNameChoice - 1);
2435 dataLen = entry->u.IPAddress.cbData;
2436 break;
2437 case CERT_ALT_NAME_REGISTERED_ID:
2438 {
2439 struct AsnEncodeTagSwappedItem swapped =
2440 { ASN_CONTEXT | (entry->dwAltNameChoice - 1), entry->u.pszRegisteredID,
2441 CRYPT_AsnEncodeOid };
2442
2443 return CRYPT_AsnEncodeSwapTag(0, NULL, &swapped, 0, NULL, pbEncoded,
2444 pcbEncoded);
2445 }
2446 case CERT_ALT_NAME_OTHER_NAME:
2447 FIXME("name type %d unimplemented\n", entry->dwAltNameChoice);
2448 return FALSE;
2449 default:
2450 SetLastError(E_INVALIDARG);
2451 return FALSE;
2452 }
2453 if (ret)
2454 {
2455 DWORD bytesNeeded, lenBytes;
2456
2457 CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
2458 bytesNeeded = 1 + dataLen + lenBytes;
2459 if (!pbEncoded)
2460 *pcbEncoded = bytesNeeded;
2461 else if (*pcbEncoded < bytesNeeded)
2462 {
2463 SetLastError(ERROR_MORE_DATA);
2464 *pcbEncoded = bytesNeeded;
2465 ret = FALSE;
2466 }
2467 else
2468 {
2469 *pbEncoded++ = tag;
2470 CRYPT_EncodeLen(dataLen, pbEncoded, &lenBytes);
2471 pbEncoded += lenBytes;
2472 switch (entry->dwAltNameChoice)
2473 {
2474 case CERT_ALT_NAME_RFC822_NAME:
2475 case CERT_ALT_NAME_DNS_NAME:
2476 case CERT_ALT_NAME_URL:
2477 {
2478 DWORD i;
2479
2480 for (i = 0; i < dataLen; i++)
2481 *pbEncoded++ = (BYTE)entry->u.pwszURL[i];
2482 break;
2483 }
2484 case CERT_ALT_NAME_DIRECTORY_NAME:
2485 memcpy(pbEncoded, entry->u.DirectoryName.pbData, dataLen);
2486 break;
2487 case CERT_ALT_NAME_IP_ADDRESS:
2488 memcpy(pbEncoded, entry->u.IPAddress.pbData, dataLen);
2489 break;
2490 }
2491 if (ret)
2492 *pcbEncoded = bytesNeeded;
2493 }
2494 }
2495 TRACE("returning %d (%08x)\n", ret, GetLastError());
2496 return ret;
2497 }
2498
2499 static BOOL WINAPI CRYPT_AsnEncodeAuthorityKeyId(DWORD dwCertEncodingType,
2500 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2501 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2502 {
2503 BOOL ret;
2504
2505 __TRY
2506 {
2507 const CERT_AUTHORITY_KEY_ID_INFO *info = pvStructInfo;
2508 struct AsnEncodeSequenceItem items[3] = { { 0 } };
2509 struct AsnEncodeTagSwappedItem swapped[3] = { { 0 } };
2510 struct AsnConstructedItem constructed = { 0 };
2511 DWORD cItem = 0, cSwapped = 0;
2512
2513 if (info->KeyId.cbData)
2514 {
2515 swapped[cSwapped].tag = ASN_CONTEXT | 0;
2516 swapped[cSwapped].pvStructInfo = &info->KeyId;
2517 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeOctets;
2518 items[cItem].pvStructInfo = &swapped[cSwapped];
2519 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
2520 cSwapped++;
2521 cItem++;
2522 }
2523 if (info->CertIssuer.cbData)
2524 {
2525 constructed.tag = 1;
2526 constructed.pvStructInfo = &info->CertIssuer;
2527 constructed.encodeFunc = CRYPT_CopyEncodedBlob;
2528 items[cItem].pvStructInfo = &constructed;
2529 items[cItem].encodeFunc = CRYPT_AsnEncodeConstructed;
2530 cItem++;
2531 }
2532 if (info->CertSerialNumber.cbData)
2533 {
2534 swapped[cSwapped].tag = ASN_CONTEXT | 2;
2535 swapped[cSwapped].pvStructInfo = &info->CertSerialNumber;
2536 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeInteger;
2537 items[cItem].pvStructInfo = &swapped[cSwapped];
2538 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
2539 cSwapped++;
2540 cItem++;
2541 }
2542 ret = CRYPT_AsnEncodeSequence(X509_ASN_ENCODING, items, cItem, dwFlags,
2543 pEncodePara, pbEncoded, pcbEncoded);
2544 }
2545 __EXCEPT_PAGE_FAULT
2546 {
2547 SetLastError(STATUS_ACCESS_VIOLATION);
2548 ret = FALSE;
2549 }
2550 __ENDTRY
2551 return ret;
2552 }
2553
2554 static BOOL WINAPI CRYPT_AsnEncodeAltName(DWORD dwCertEncodingType,
2555 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2556 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2557 {
2558 BOOL ret;
2559
2560 __TRY
2561 {
2562 const CERT_ALT_NAME_INFO *info = pvStructInfo;
2563 DWORD bytesNeeded, dataLen, lenBytes, i;
2564
2565 ret = TRUE;
2566 /* FIXME: should check that cAltEntry is not bigger than 0xff, since we
2567 * can't encode an erroneous entry index if it's bigger than this.
2568 */
2569 for (i = 0, dataLen = 0; ret && i < info->cAltEntry; i++)
2570 {
2571 DWORD len;
2572
2573 ret = CRYPT_AsnEncodeAltNameEntry(dwCertEncodingType, NULL,
2574 &info->rgAltEntry[i], 0, NULL, NULL, &len);
2575 if (ret)
2576 dataLen += len;
2577 else if (GetLastError() == CRYPT_E_INVALID_IA5_STRING)
2578 {
2579 /* CRYPT_AsnEncodeAltNameEntry encoded the index of
2580 * the bad character, now set the index of the bad
2581 * entry
2582 */
2583 *pcbEncoded = (BYTE)i <<
2584 CERT_ALT_NAME_ENTRY_ERR_INDEX_SHIFT | len;
2585 }
2586 }
2587 if (ret)
2588 {
2589 CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
2590 bytesNeeded = 1 + lenBytes + dataLen;
2591 if (!pbEncoded)
2592 {
2593 *pcbEncoded = bytesNeeded;
2594 ret = TRUE;
2595 }
2596 else
2597 {
2598 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
2599 pbEncoded, pcbEncoded, bytesNeeded)))
2600 {
2601 BYTE *out;
2602
2603 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
2604 pbEncoded = *(BYTE **)pbEncoded;
2605 out = pbEncoded;
2606 *out++ = ASN_SEQUENCEOF;
2607 CRYPT_EncodeLen(dataLen, out, &lenBytes);
2608 out += lenBytes;
2609 for (i = 0; ret && i < info->cAltEntry; i++)
2610 {
2611 DWORD len = dataLen;
2612
2613 ret = CRYPT_AsnEncodeAltNameEntry(dwCertEncodingType,
2614 NULL, &info->rgAltEntry[i], 0, NULL, out, &len);
2615 if (ret)
2616 {
2617 out += len;
2618 dataLen -= len;
2619 }
2620 }
2621 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
2622 CRYPT_FreeSpace(pEncodePara, pbEncoded);
2623 }
2624 }
2625 }
2626 }
2627 __EXCEPT_PAGE_FAULT
2628 {
2629 SetLastError(STATUS_ACCESS_VIOLATION);
2630 ret = FALSE;
2631 }
2632 __ENDTRY
2633 return ret;
2634 }
2635
2636 static BOOL WINAPI CRYPT_AsnEncodeAuthorityKeyId2(DWORD dwCertEncodingType,
2637 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2638 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2639 {
2640 BOOL ret;
2641
2642 __TRY
2643 {
2644 const CERT_AUTHORITY_KEY_ID2_INFO *info = pvStructInfo;
2645 struct AsnEncodeSequenceItem items[3] = { { 0 } };
2646 struct AsnEncodeTagSwappedItem swapped[3] = { { 0 } };
2647 DWORD cItem = 0, cSwapped = 0;
2648
2649 if (info->KeyId.cbData)
2650 {
2651 swapped[cSwapped].tag = ASN_CONTEXT | 0;
2652 swapped[cSwapped].pvStructInfo = &info->KeyId;
2653 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeOctets;
2654 items[cItem].pvStructInfo = &swapped[cSwapped];
2655 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
2656 cSwapped++;
2657 cItem++;
2658 }
2659 if (info->AuthorityCertIssuer.cAltEntry)
2660 {
2661 swapped[cSwapped].tag = ASN_CONTEXT | ASN_CONSTRUCTOR | 1;
2662 swapped[cSwapped].pvStructInfo = &info->AuthorityCertIssuer;
2663 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeAltName;
2664 items[cItem].pvStructInfo = &swapped[cSwapped];
2665 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
2666 cSwapped++;
2667 cItem++;
2668 }
2669 if (info->AuthorityCertSerialNumber.cbData)
2670 {
2671 swapped[cSwapped].tag = ASN_CONTEXT | 2;
2672 swapped[cSwapped].pvStructInfo = &info->AuthorityCertSerialNumber;
2673 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeInteger;
2674 items[cItem].pvStructInfo = &swapped[cSwapped];
2675 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
2676 cSwapped++;
2677 cItem++;
2678 }
2679 ret = CRYPT_AsnEncodeSequence(X509_ASN_ENCODING, items, cItem, dwFlags,
2680 pEncodePara, pbEncoded, pcbEncoded);
2681 }
2682 __EXCEPT_PAGE_FAULT
2683 {
2684 SetLastError(STATUS_ACCESS_VIOLATION);
2685 ret = FALSE;
2686 }
2687 __ENDTRY
2688 return ret;
2689 }
2690
2691 static BOOL CRYPT_AsnEncodeAccessDescription(
2692 const CERT_ACCESS_DESCRIPTION *descr, BYTE *pbEncoded, DWORD *pcbEncoded)
2693 {
2694 struct AsnEncodeSequenceItem items[] = {
2695 { descr->pszAccessMethod, CRYPT_AsnEncodeOid, 0 },
2696 { &descr->AccessLocation, CRYPT_AsnEncodeAltNameEntry, 0 },
2697 };
2698
2699 if (!descr->pszAccessMethod)
2700 {
2701 SetLastError(E_INVALIDARG);
2702 return FALSE;
2703 }
2704 return CRYPT_AsnEncodeSequence(X509_ASN_ENCODING, items, ARRAY_SIZE(items), 0, NULL, pbEncoded, pcbEncoded);
2705 }
2706
2707 static BOOL WINAPI CRYPT_AsnEncodeAuthorityInfoAccess(DWORD dwCertEncodingType,
2708 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2709 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2710 {
2711 BOOL ret;
2712
2713 __TRY
2714 {
2715 DWORD bytesNeeded, dataLen, lenBytes, i;
2716 const CERT_AUTHORITY_INFO_ACCESS *info = pvStructInfo;
2717
2718 ret = TRUE;
2719 for (i = 0, dataLen = 0; ret && i < info->cAccDescr; i++)
2720 {
2721 DWORD size;
2722
2723 ret = CRYPT_AsnEncodeAccessDescription(&info->rgAccDescr[i], NULL,
2724 &size);
2725 if (ret)
2726 dataLen += size;
2727 }
2728 if (ret)
2729 {
2730 CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
2731 bytesNeeded = 1 + lenBytes + dataLen;
2732 if (!pbEncoded)
2733 *pcbEncoded = bytesNeeded;
2734 else
2735 {
2736 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
2737 pbEncoded, pcbEncoded, bytesNeeded)))
2738 {
2739 BYTE *out;
2740
2741 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
2742 pbEncoded = *(BYTE **)pbEncoded;
2743 out = pbEncoded;
2744 *out++ = ASN_SEQUENCEOF;
2745 CRYPT_EncodeLen(dataLen, out, &lenBytes);
2746 out += lenBytes;
2747 for (i = 0; i < info->cAccDescr; i++)
2748 {
2749 DWORD size = dataLen;
2750
2751 ret = CRYPT_AsnEncodeAccessDescription(
2752 &info->rgAccDescr[i], out, &size);
2753 out += size;
2754 dataLen -= size;
2755 }
2756 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
2757 CRYPT_FreeSpace(pEncodePara, pbEncoded);
2758 }
2759 }
2760 }
2761 }
2762 __EXCEPT_PAGE_FAULT
2763 {
2764 SetLastError(STATUS_ACCESS_VIOLATION);
2765 ret = FALSE;
2766 }
2767 __ENDTRY
2768 return ret;
2769 }
2770
2771 static BOOL WINAPI CRYPT_AsnEncodeBasicConstraints(DWORD dwCertEncodingType,
2772 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2773 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2774 {
2775 BOOL ret;
2776
2777 __TRY
2778 {
2779 const CERT_BASIC_CONSTRAINTS_INFO *info = pvStructInfo;
2780 struct AsnEncodeSequenceItem items[3] = {
2781 { &info->SubjectType, CRYPT_AsnEncodeBits, 0 },
2782 { 0 }
2783 };
2784 DWORD cItem = 1;
2785
2786 if (info->fPathLenConstraint)
2787 {
2788 items[cItem].pvStructInfo = &info->dwPathLenConstraint;
2789 items[cItem].encodeFunc = CRYPT_AsnEncodeInt;
2790 cItem++;
2791 }
2792 if (info->cSubtreesConstraint)
2793 {
2794 items[cItem].pvStructInfo = &info->cSubtreesConstraint;
2795 items[cItem].encodeFunc = CRYPT_AsnEncodeSequenceOfAny;
2796 cItem++;
2797 }
2798 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
2799 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
2800 }
2801 __EXCEPT_PAGE_FAULT
2802 {
2803 SetLastError(STATUS_ACCESS_VIOLATION);
2804 ret = FALSE;
2805 }
2806 __ENDTRY
2807 return ret;
2808 }
2809
2810 static BOOL WINAPI CRYPT_AsnEncodeBasicConstraints2(DWORD dwCertEncodingType,
2811 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2812 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2813 {
2814 BOOL ret;
2815
2816 __TRY
2817 {
2818 const CERT_BASIC_CONSTRAINTS2_INFO *info = pvStructInfo;
2819 struct AsnEncodeSequenceItem items[2] = { { 0 } };
2820 DWORD cItem = 0;
2821
2822 if (info->fCA)
2823 {
2824 items[cItem].pvStructInfo = &info->fCA;
2825 items[cItem].encodeFunc = CRYPT_AsnEncodeBool;
2826 cItem++;
2827 }
2828 if (info->fPathLenConstraint)
2829 {
2830 items[cItem].pvStructInfo = &info->dwPathLenConstraint;
2831 items[cItem].encodeFunc = CRYPT_AsnEncodeInt;
2832 cItem++;
2833 }
2834 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
2835 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
2836 }
2837 __EXCEPT_PAGE_FAULT
2838 {
2839 SetLastError(STATUS_ACCESS_VIOLATION);
2840 ret = FALSE;
2841 }
2842 __ENDTRY
2843 return ret;
2844 }
2845
2846 static BOOL WINAPI CRYPT_AsnEncodeCertPolicyQualifiers(DWORD dwCertEncodingType,
2847 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2848 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2849 {
2850 const CERT_POLICY_INFO *info = pvStructInfo;
2851 BOOL ret;
2852
2853 if (!info->cPolicyQualifier)
2854 {
2855 *pcbEncoded = 0;
2856 ret = TRUE;
2857 }
2858 else
2859 {
2860 struct AsnEncodeSequenceItem items[2] = {
2861 { NULL, CRYPT_AsnEncodeOid, 0 },
2862 { NULL, CRYPT_CopyEncodedBlob, 0 },
2863 };
2864 DWORD bytesNeeded = 0, lenBytes, size, i;
2865
2866 ret = TRUE;
2867 for (i = 0; ret && i < info->cPolicyQualifier; i++)
2868 {
2869 items[0].pvStructInfo =
2870 info->rgPolicyQualifier[i].pszPolicyQualifierId;
2871 items[1].pvStructInfo = &info->rgPolicyQualifier[i].Qualifier;
2872 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, ARRAY_SIZE(items),
2873 dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG, NULL, NULL, &size);
2874 if (ret)
2875 bytesNeeded += size;
2876 }
2877 CRYPT_EncodeLen(bytesNeeded, NULL, &lenBytes);
2878 bytesNeeded += 1 + lenBytes;
2879 if (ret)
2880 {
2881 if (!pbEncoded)
2882 *pcbEncoded = bytesNeeded;
2883 else
2884 {
2885 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
2886 pbEncoded, pcbEncoded, bytesNeeded)))
2887 {
2888 BYTE *out;
2889
2890 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
2891 pbEncoded = *(BYTE **)pbEncoded;
2892 out = pbEncoded;
2893 *out++ = ASN_SEQUENCEOF;
2894 CRYPT_EncodeLen(bytesNeeded - lenBytes - 1, out, &lenBytes);
2895 out += lenBytes;
2896 for (i = 0; ret && i < info->cPolicyQualifier; i++)
2897 {
2898 items[0].pvStructInfo =
2899 info->rgPolicyQualifier[i].pszPolicyQualifierId;
2900 items[1].pvStructInfo =
2901 &info->rgPolicyQualifier[i].Qualifier;
2902 size = bytesNeeded;
2903 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, ARRAY_SIZE(items),
2904 dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG, NULL, out, &size);
2905 if (ret)
2906 {
2907 out += size;
2908 bytesNeeded -= size;
2909 }
2910 }
2911 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
2912 CRYPT_FreeSpace(pEncodePara, pbEncoded);
2913 }
2914 }
2915 }
2916 }
2917 return ret;
2918 }
2919
2920 static BOOL CRYPT_AsnEncodeCertPolicy(DWORD dwCertEncodingType,
2921 const CERT_POLICY_INFO *info, DWORD dwFlags, BYTE *pbEncoded,
2922 DWORD *pcbEncoded)
2923 {
2924 struct AsnEncodeSequenceItem items[2] = {
2925 { info->pszPolicyIdentifier, CRYPT_AsnEncodeOid, 0 },
2926 { info, CRYPT_AsnEncodeCertPolicyQualifiers, 0 },
2927 };
2928 BOOL ret;
2929
2930 if (!info->pszPolicyIdentifier)
2931 {
2932 SetLastError(E_INVALIDARG);
2933 return FALSE;
2934 }
2935 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, ARRAY_SIZE(items), dwFlags, NULL, pbEncoded, pcbEncoded);
2936 return ret;
2937 }
2938
2939 static BOOL WINAPI CRYPT_AsnEncodeCertPolicies(DWORD dwCertEncodingType,
2940 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
2941 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
2942 {
2943 BOOL ret = FALSE;
2944
2945 __TRY
2946 {
2947 const CERT_POLICIES_INFO *info = pvStructInfo;
2948 DWORD bytesNeeded = 0, lenBytes, size, i;
2949
2950 ret = TRUE;
2951 for (i = 0; ret && i < info->cPolicyInfo; i++)
2952 {
2953 ret = CRYPT_AsnEncodeCertPolicy(dwCertEncodingType,
2954 &info->rgPolicyInfo[i], dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG, NULL,
2955 &size);
2956 if (ret)
2957 bytesNeeded += size;
2958 }
2959 CRYPT_EncodeLen(bytesNeeded, NULL, &lenBytes);
2960 bytesNeeded += 1 + lenBytes;
2961 if (ret)
2962 {
2963 if (!pbEncoded)
2964 *pcbEncoded = bytesNeeded;
2965 else
2966 {
2967 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
2968 pbEncoded, pcbEncoded, bytesNeeded)))
2969 {
2970 BYTE *out;
2971
2972 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
2973 pbEncoded = *(BYTE **)pbEncoded;
2974 out = pbEncoded;
2975 *out++ = ASN_SEQUENCEOF;
2976 CRYPT_EncodeLen(bytesNeeded - lenBytes - 1, out, &lenBytes);
2977 out += lenBytes;
2978 for (i = 0; ret && i < info->cPolicyInfo; i++)
2979 {
2980 size = bytesNeeded;
2981 ret = CRYPT_AsnEncodeCertPolicy(dwCertEncodingType,
2982 &info->rgPolicyInfo[i],
2983 dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG, out, &size);
2984 if (ret)
2985 {
2986 out += size;
2987 bytesNeeded -= size;
2988 }
2989 }
2990 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
2991 CRYPT_FreeSpace(pEncodePara, pbEncoded);
2992 }
2993 }
2994 }
2995 }
2996 __EXCEPT_PAGE_FAULT
2997 {
2998 SetLastError(STATUS_ACCESS_VIOLATION);
2999 }
3000 __ENDTRY
3001 return ret;
3002 }
3003
3004 static BOOL CRYPT_AsnEncodeCertPolicyMapping(DWORD dwCertEncodingType,
3005 const CERT_POLICY_MAPPING *mapping, DWORD dwFlags, BYTE *pbEncoded,
3006 DWORD *pcbEncoded)
3007 {
3008 struct AsnEncodeSequenceItem items[] = {
3009 { mapping->pszIssuerDomainPolicy, CRYPT_AsnEncodeOid, 0 },
3010 { mapping->pszSubjectDomainPolicy, CRYPT_AsnEncodeOid, 0 },
3011 };
3012
3013 if (!mapping->pszIssuerDomainPolicy || !mapping->pszSubjectDomainPolicy)
3014 {
3015 SetLastError(E_INVALIDARG);
3016 return FALSE;
3017 }
3018 return CRYPT_AsnEncodeSequence(dwCertEncodingType, items, ARRAY_SIZE(items), dwFlags, NULL, pbEncoded, pcbEncoded);
3019 }
3020
3021 static BOOL WINAPI CRYPT_AsnEncodeCertPolicyMappings(DWORD dwCertEncodingType,
3022 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3023 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3024 {
3025 BOOL ret = FALSE;
3026
3027 __TRY
3028 {
3029 const CERT_POLICY_MAPPINGS_INFO *info = pvStructInfo;
3030 DWORD bytesNeeded = 0, lenBytes, size, i;
3031
3032 ret = TRUE;
3033 for (i = 0; ret && i < info->cPolicyMapping; i++)
3034 {
3035 ret = CRYPT_AsnEncodeCertPolicyMapping(dwCertEncodingType,
3036 &info->rgPolicyMapping[i], dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG,
3037 NULL, &size);
3038 if (ret)
3039 bytesNeeded += size;
3040 }
3041 CRYPT_EncodeLen(bytesNeeded, NULL, &lenBytes);
3042 bytesNeeded += 1 + lenBytes;
3043 if (ret)
3044 {
3045 if (!pbEncoded)
3046 *pcbEncoded = bytesNeeded;
3047 else
3048 {
3049 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
3050 pbEncoded, pcbEncoded, bytesNeeded)))
3051 {
3052 BYTE *out;
3053
3054 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
3055 pbEncoded = *(BYTE **)pbEncoded;
3056 out = pbEncoded;
3057 *out++ = ASN_SEQUENCEOF;
3058 CRYPT_EncodeLen(bytesNeeded - lenBytes - 1, out, &lenBytes);
3059 out += lenBytes;
3060 for (i = 0; ret && i < info->cPolicyMapping; i++)
3061 {
3062 size = bytesNeeded;
3063 ret = CRYPT_AsnEncodeCertPolicyMapping(
3064 dwCertEncodingType, &info->rgPolicyMapping[i],
3065 dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG, out, &size);
3066 if (ret)
3067 {
3068 out += size;
3069 bytesNeeded -= size;
3070 }
3071 }
3072 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
3073 CRYPT_FreeSpace(pEncodePara, pbEncoded);
3074 }
3075 }
3076 }
3077 }
3078 __EXCEPT_PAGE_FAULT
3079 {
3080 SetLastError(STATUS_ACCESS_VIOLATION);
3081 }
3082 __ENDTRY
3083 return ret;
3084 }
3085
3086 static BOOL WINAPI CRYPT_AsnEncodeCertPolicyConstraints(
3087 DWORD dwCertEncodingType, LPCSTR lpszStructType, const void *pvStructInfo,
3088 DWORD dwFlags, PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded,
3089 DWORD *pcbEncoded)
3090 {
3091 BOOL ret = FALSE;
3092
3093 __TRY
3094 {
3095 const CERT_POLICY_CONSTRAINTS_INFO *info = pvStructInfo;
3096 struct AsnEncodeSequenceItem items[2];
3097 struct AsnEncodeTagSwappedItem swapped[2];
3098 DWORD cItem = 0, cSwapped = 0;
3099
3100 if (info->fRequireExplicitPolicy)
3101 {
3102 swapped[cSwapped].tag = ASN_CONTEXT | 0;
3103 swapped[cSwapped].pvStructInfo =
3104 &info->dwRequireExplicitPolicySkipCerts;
3105 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeInt;
3106 items[cItem].pvStructInfo = &swapped[cSwapped];
3107 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
3108 cSwapped++;
3109 cItem++;
3110 }
3111 if (info->fInhibitPolicyMapping)
3112 {
3113 swapped[cSwapped].tag = ASN_CONTEXT | 1;
3114 swapped[cSwapped].pvStructInfo =
3115 &info->dwInhibitPolicyMappingSkipCerts;
3116 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeInt;
3117 items[cItem].pvStructInfo = &swapped[cSwapped];
3118 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
3119 cSwapped++;
3120 cItem++;
3121 }
3122 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
3123 dwFlags, NULL, pbEncoded, pcbEncoded);
3124 }
3125 __EXCEPT_PAGE_FAULT
3126 {
3127 SetLastError(STATUS_ACCESS_VIOLATION);
3128 }
3129 __ENDTRY
3130 return ret;
3131 }
3132
3133 static BOOL WINAPI CRYPT_AsnEncodeRsaPubKey_Bcrypt(DWORD dwCertEncodingType,
3134 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3135 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3136 {
3137 BOOL ret;
3138
3139 __TRY
3140 {
3141 const BCRYPT_RSAKEY_BLOB *hdr = pvStructInfo;
3142
3143 BYTE *pubexp = (BYTE*)pvStructInfo + sizeof(BCRYPT_RSAKEY_BLOB);
3144 BYTE *modulus = (BYTE*)pvStructInfo + sizeof(BCRYPT_RSAKEY_BLOB) + hdr->cbPublicExp;
3145 BYTE *pubexp_be = CryptMemAlloc(hdr->cbPublicExp);
3146 BYTE *modulus_be = CryptMemAlloc(hdr->cbModulus);
3147 CRYPT_INTEGER_BLOB pubexp_int = { hdr->cbPublicExp, pubexp_be };
3148 CRYPT_INTEGER_BLOB modulus_int = { hdr->cbModulus, modulus_be};
3149
3150 struct AsnEncodeSequenceItem items[] = {
3151 { &modulus_int, CRYPT_AsnEncodeUnsignedInteger, 0 },
3152 { &pubexp_int, CRYPT_AsnEncodeInteger, 0 },
3153 };
3154
3155 /* CNG_RSA_PUBLIC_KEY_BLOB stores the exponent and modulus
3156 * in big-endian format, so we need to convert them
3157 * to little-endian format before encoding
3158 */
3159 CRYPT_CopyReversed(pubexp_be, pubexp, hdr->cbPublicExp);
3160 CRYPT_CopyReversed(modulus_be, modulus, hdr->cbModulus);
3161
3162 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
3163 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded, pcbEncoded);
3164
3165 CryptMemFree(pubexp_be);
3166 CryptMemFree(modulus_be);
3167 }
3168 __EXCEPT_PAGE_FAULT
3169 {
3170 SetLastError(STATUS_ACCESS_VIOLATION);
3171 ret = FALSE;
3172 }
3173 __ENDTRY
3174 return ret;
3175
3176 }
3177
3178
3179 static BOOL WINAPI CRYPT_AsnEncodeRsaPubKey(DWORD dwCertEncodingType,
3180 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3181 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3182 {
3183 BOOL ret;
3184
3185 __TRY
3186 {
3187 const BLOBHEADER *hdr = pvStructInfo;
3188
3189 if (hdr->bType != PUBLICKEYBLOB)
3190 {
3191 SetLastError(E_INVALIDARG);
3192 ret = FALSE;
3193 }
3194 else
3195 {
3196 const RSAPUBKEY *rsaPubKey = (const RSAPUBKEY *)
3197 ((const BYTE *)pvStructInfo + sizeof(BLOBHEADER));
3198 CRYPT_INTEGER_BLOB blob = { rsaPubKey->bitlen / 8,
3199 (BYTE *)pvStructInfo + sizeof(BLOBHEADER) + sizeof(RSAPUBKEY) };
3200 struct AsnEncodeSequenceItem items[] = {
3201 { &blob, CRYPT_AsnEncodeUnsignedInteger, 0 },
3202 { &rsaPubKey->pubexp, CRYPT_AsnEncodeInt, 0 },
3203 };
3204
3205 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
3206 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded, pcbEncoded);
3207 }
3208 }
3209 __EXCEPT_PAGE_FAULT
3210 {
3211 SetLastError(STATUS_ACCESS_VIOLATION);
3212 ret = FALSE;
3213 }
3214 __ENDTRY
3215 return ret;
3216 }
3217
3218 BOOL WINAPI CRYPT_AsnEncodeOctets(DWORD dwCertEncodingType,
3219 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3220 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3221 {
3222 BOOL ret;
3223
3224 __TRY
3225 {
3226 const CRYPT_DATA_BLOB *blob = pvStructInfo;
3227 DWORD bytesNeeded, lenBytes;
3228
3229 TRACE("(%d, %p), %08x, %p, %p, %d\n", blob->cbData, blob->pbData,
3230 dwFlags, pEncodePara, pbEncoded, pbEncoded ? *pcbEncoded : 0);
3231
3232 CRYPT_EncodeLen(blob->cbData, NULL, &lenBytes);
3233 bytesNeeded = 1 + lenBytes + blob->cbData;
3234 if (!pbEncoded)
3235 {
3236 *pcbEncoded = bytesNeeded;
3237 ret = TRUE;
3238 }
3239 else
3240 {
3241 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara, pbEncoded,
3242 pcbEncoded, bytesNeeded)))
3243 {
3244 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
3245 pbEncoded = *(BYTE **)pbEncoded;
3246 *pbEncoded++ = ASN_OCTETSTRING;
3247 CRYPT_EncodeLen(blob->cbData, pbEncoded, &lenBytes);
3248 pbEncoded += lenBytes;
3249 if (blob->cbData)
3250 memcpy(pbEncoded, blob->pbData, blob->cbData);
3251 }
3252 }
3253 }
3254 __EXCEPT_PAGE_FAULT
3255 {
3256 SetLastError(STATUS_ACCESS_VIOLATION);
3257 ret = FALSE;
3258 }
3259 __ENDTRY
3260 TRACE("returning %d (%08x)\n", ret, GetLastError());
3261 return ret;
3262 }
3263
3264 static BOOL WINAPI CRYPT_AsnEncodeBits(DWORD dwCertEncodingType,
3265 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3266 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3267 {
3268 BOOL ret;
3269
3270 __TRY
3271 {
3272 const CRYPT_BIT_BLOB *blob = pvStructInfo;
3273 DWORD bytesNeeded, lenBytes, dataBytes;
3274 BYTE unusedBits;
3275
3276 /* yep, MS allows cUnusedBits to be >= 8 */
3277 if (!blob->cUnusedBits)
3278 {
3279 dataBytes = blob->cbData;
3280 unusedBits = 0;
3281 }
3282 else if (blob->cbData * 8 > blob->cUnusedBits)
3283 {
3284 dataBytes = (blob->cbData * 8 - blob->cUnusedBits) / 8 + 1;
3285 unusedBits = blob->cUnusedBits >= 8 ? blob->cUnusedBits / 8 :
3286 blob->cUnusedBits;
3287 }
3288 else
3289 {
3290 dataBytes = 0;
3291 unusedBits = 0;
3292 }
3293 CRYPT_EncodeLen(dataBytes + 1, NULL, &lenBytes);
3294 bytesNeeded = 1 + lenBytes + dataBytes + 1;
3295 if (!pbEncoded)
3296 {
3297 *pcbEncoded = bytesNeeded;
3298 ret = TRUE;
3299 }
3300 else
3301 {
3302 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara, pbEncoded,
3303 pcbEncoded, bytesNeeded)))
3304 {
3305 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
3306 pbEncoded = *(BYTE **)pbEncoded;
3307 *pbEncoded++ = ASN_BITSTRING;
3308 CRYPT_EncodeLen(dataBytes + 1, pbEncoded, &lenBytes);
3309 pbEncoded += lenBytes;
3310 *pbEncoded++ = unusedBits;
3311 if (dataBytes)
3312 {
3313 BYTE mask = 0xff << unusedBits;
3314
3315 if (dataBytes > 1)
3316 {
3317 memcpy(pbEncoded, blob->pbData, dataBytes - 1);
3318 pbEncoded += dataBytes - 1;
3319 }
3320 *pbEncoded = *(blob->pbData + dataBytes - 1) & mask;
3321 }
3322 }
3323 }
3324 }
3325 __EXCEPT_PAGE_FAULT
3326 {
3327 SetLastError(STATUS_ACCESS_VIOLATION);
3328 ret = FALSE;
3329 }
3330 __ENDTRY
3331 return ret;
3332 }
3333
3334 static BOOL WINAPI CRYPT_AsnEncodeBitsSwapBytes(DWORD dwCertEncodingType,
3335 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3336 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3337 {
3338 BOOL ret;
3339
3340 __TRY
3341 {
3342 const CRYPT_BIT_BLOB *blob = pvStructInfo;
3343 CRYPT_BIT_BLOB newBlob = { blob->cbData, NULL, blob->cUnusedBits };
3344
3345 ret = TRUE;
3346 if (newBlob.cbData)
3347 {
3348 newBlob.pbData = CryptMemAlloc(newBlob.cbData);
3349 if (newBlob.pbData)
3350 {
3351 DWORD i;
3352
3353 for (i = 0; i < newBlob.cbData; i++)
3354 newBlob.pbData[newBlob.cbData - i - 1] = blob->pbData[i];
3355 }
3356 else
3357 ret = FALSE;
3358 }
3359 if (ret)
3360 ret = CRYPT_AsnEncodeBits(dwCertEncodingType, lpszStructType,
3361 &newBlob, dwFlags, pEncodePara, pbEncoded, pcbEncoded);
3362 CryptMemFree(newBlob.pbData);
3363 }
3364 __EXCEPT_PAGE_FAULT
3365 {
3366 SetLastError(STATUS_ACCESS_VIOLATION);
3367 ret = FALSE;
3368 }
3369 __ENDTRY
3370 return ret;
3371 }
3372
3373 static BOOL WINAPI CRYPT_AsnEncodeInt(DWORD dwCertEncodingType,
3374 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3375 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3376 {
3377 CRYPT_INTEGER_BLOB blob = { sizeof(INT), (BYTE *)pvStructInfo };
3378
3379 return CRYPT_AsnEncodeInteger(dwCertEncodingType, X509_MULTI_BYTE_INTEGER,
3380 &blob, dwFlags, pEncodePara, pbEncoded, pcbEncoded);
3381 }
3382
3383 static BOOL WINAPI CRYPT_AsnEncodeInteger(DWORD dwCertEncodingType,
3384 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3385 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3386 {
3387 BOOL ret;
3388
3389 __TRY
3390 {
3391 DWORD significantBytes, lenBytes, bytesNeeded;
3392 BYTE padByte = 0;
3393 BOOL pad = FALSE;
3394 const CRYPT_INTEGER_BLOB *blob = pvStructInfo;
3395
3396 significantBytes = blob->cbData;
3397 if (significantBytes)
3398 {
3399 if (blob->pbData[significantBytes - 1] & 0x80)
3400 {
3401 /* negative, lop off leading (little-endian) 0xffs */
3402 for (; significantBytes > 0 &&
3403 blob->pbData[significantBytes - 1] == 0xff; significantBytes--)
3404 ;
3405 if (blob->pbData[significantBytes - 1] < 0x80)
3406 {
3407 padByte = 0xff;
3408 pad = TRUE;
3409 }
3410 }
3411 else
3412 {
3413 /* positive, lop off leading (little-endian) zeroes */
3414 for (; significantBytes > 0 &&
3415 !blob->pbData[significantBytes - 1]; significantBytes--)
3416 ;
3417 if (significantBytes == 0)
3418 significantBytes = 1;
3419 if (blob->pbData[significantBytes - 1] > 0x7f)
3420 {
3421 padByte = 0;
3422 pad = TRUE;
3423 }
3424 }
3425 }
3426 if (pad)
3427 CRYPT_EncodeLen(significantBytes + 1, NULL, &lenBytes);
3428 else
3429 CRYPT_EncodeLen(significantBytes, NULL, &lenBytes);
3430 bytesNeeded = 1 + lenBytes + significantBytes;
3431 if (pad)
3432 bytesNeeded++;
3433 if (!pbEncoded)
3434 {
3435 *pcbEncoded = bytesNeeded;
3436 ret = TRUE;
3437 }
3438 else
3439 {
3440 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara, pbEncoded,
3441 pcbEncoded, bytesNeeded)))
3442 {
3443 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
3444 pbEncoded = *(BYTE **)pbEncoded;
3445 *pbEncoded++ = ASN_INTEGER;
3446 if (pad)
3447 {
3448 CRYPT_EncodeLen(significantBytes + 1, pbEncoded, &lenBytes);
3449 pbEncoded += lenBytes;
3450 *pbEncoded++ = padByte;
3451 }
3452 else
3453 {
3454 CRYPT_EncodeLen(significantBytes, pbEncoded, &lenBytes);
3455 pbEncoded += lenBytes;
3456 }
3457 for (; significantBytes > 0; significantBytes--)
3458 *(pbEncoded++) = blob->pbData[significantBytes - 1];
3459 }
3460 }
3461 }
3462 __EXCEPT_PAGE_FAULT
3463 {
3464 SetLastError(STATUS_ACCESS_VIOLATION);
3465 ret = FALSE;
3466 }
3467 __ENDTRY
3468 return ret;
3469 }
3470
3471 static BOOL WINAPI CRYPT_AsnEncodeUnsignedInteger(DWORD dwCertEncodingType,
3472 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3473 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3474 {
3475 BOOL ret;
3476
3477 __TRY
3478 {
3479 DWORD significantBytes, lenBytes, bytesNeeded;
3480 BOOL pad = FALSE;
3481 const CRYPT_INTEGER_BLOB *blob = pvStructInfo;
3482
3483 significantBytes = blob->cbData;
3484 if (significantBytes)
3485 {
3486 /* positive, lop off leading (little-endian) zeroes */
3487 for (; significantBytes > 0 && !blob->pbData[significantBytes - 1];
3488 significantBytes--)
3489 ;
3490 if (significantBytes == 0)
3491 significantBytes = 1;
3492 if (blob->pbData[significantBytes - 1] > 0x7f)
3493 pad = TRUE;
3494 }
3495 if (pad)
3496 CRYPT_EncodeLen(significantBytes + 1, NULL, &lenBytes);
3497 else
3498 CRYPT_EncodeLen(significantBytes, NULL, &lenBytes);
3499 bytesNeeded = 1 + lenBytes + significantBytes;
3500 if (pad)
3501 bytesNeeded++;
3502 if (!pbEncoded)
3503 {
3504 *pcbEncoded = bytesNeeded;
3505 ret = TRUE;
3506 }
3507 else
3508 {
3509 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara, pbEncoded,
3510 pcbEncoded, bytesNeeded)))
3511 {
3512 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
3513 pbEncoded = *(BYTE **)pbEncoded;
3514 *pbEncoded++ = ASN_INTEGER;
3515 if (pad)
3516 {
3517 CRYPT_EncodeLen(significantBytes + 1, pbEncoded, &lenBytes);
3518 pbEncoded += lenBytes;
3519 *pbEncoded++ = 0;
3520 }
3521 else
3522 {
3523 CRYPT_EncodeLen(significantBytes, pbEncoded, &lenBytes);
3524 pbEncoded += lenBytes;
3525 }
3526 for (; significantBytes > 0; significantBytes--)
3527 *(pbEncoded++) = blob->pbData[significantBytes - 1];
3528 }
3529 }
3530 }
3531 __EXCEPT_PAGE_FAULT
3532 {
3533 SetLastError(STATUS_ACCESS_VIOLATION);
3534 ret = FALSE;
3535 }
3536 __ENDTRY
3537 return ret;
3538 }
3539
3540 static BOOL WINAPI CRYPT_AsnEncodeEnumerated(DWORD dwCertEncodingType,
3541 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3542 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3543 {
3544 CRYPT_INTEGER_BLOB blob;
3545 BOOL ret;
3546
3547 /* Encode as an unsigned integer, then change the tag to enumerated */
3548 blob.cbData = sizeof(DWORD);
3549 blob.pbData = (BYTE *)pvStructInfo;
3550 ret = CRYPT_AsnEncodeUnsignedInteger(dwCertEncodingType,
3551 X509_MULTI_BYTE_UINT, &blob, dwFlags, pEncodePara, pbEncoded, pcbEncoded);
3552 if (ret && pbEncoded)
3553 {
3554 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
3555 pbEncoded = *(BYTE **)pbEncoded;
3556 pbEncoded[0] = ASN_ENUMERATED;
3557 }
3558 return ret;
3559 }
3560
3561 static BOOL WINAPI CRYPT_AsnEncodeUtcTime(DWORD dwCertEncodingType,
3562 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3563 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3564 {
3565 BOOL ret;
3566
3567 __TRY
3568 {
3569 SYSTEMTIME sysTime;
3570 /* sorry, magic number: enough for tag, len, YYMMDDHHMMSSZ. I use a
3571 * temporary buffer because the output buffer is not NULL-terminated.
3572 */
3573 static const DWORD bytesNeeded = 15;
3574 char buf[40];
3575
3576 if (!pbEncoded)
3577 {
3578 *pcbEncoded = bytesNeeded;
3579 ret = TRUE;
3580 }
3581 else
3582 {
3583 /* Sanity check the year, this is a two-digit year format */
3584 ret = FileTimeToSystemTime(pvStructInfo, &sysTime);
3585 if (ret && (sysTime.wYear < 1950 || sysTime.wYear > 2050))
3586 {
3587 SetLastError(CRYPT_E_BAD_ENCODE);
3588 ret = FALSE;
3589 }
3590 if (ret)
3591 {
3592 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
3593 pbEncoded, pcbEncoded, bytesNeeded)))
3594 {
3595 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
3596 pbEncoded = *(BYTE **)pbEncoded;
3597 buf[0] = ASN_UTCTIME;
3598 buf[1] = bytesNeeded - 2;
3599 snprintf(buf + 2, sizeof(buf) - 2,
3600 "%02d%02d%02d%02d%02d%02dZ", sysTime.wYear >= 2000 ?
3601 sysTime.wYear - 2000 : sysTime.wYear - 1900,
3602 sysTime.wMonth, sysTime.wDay, sysTime.wHour,
3603 sysTime.wMinute, sysTime.wSecond);
3604 memcpy(pbEncoded, buf, bytesNeeded);
3605 }
3606 }
3607 }
3608 }
3609 __EXCEPT_PAGE_FAULT
3610 {
3611 SetLastError(STATUS_ACCESS_VIOLATION);
3612 ret = FALSE;
3613 }
3614 __ENDTRY
3615 return ret;
3616 }
3617
3618 static BOOL CRYPT_AsnEncodeGeneralizedTime(DWORD dwCertEncodingType,
3619 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3620 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3621 {
3622 BOOL ret;
3623
3624 __TRY
3625 {
3626 SYSTEMTIME sysTime;
3627 /* sorry, magic number: enough for tag, len, YYYYMMDDHHMMSSZ. I use a
3628 * temporary buffer because the output buffer is not NULL-terminated.
3629 */
3630 static const DWORD bytesNeeded = 17;
3631 char buf[40];
3632
3633 if (!pbEncoded)
3634 {
3635 *pcbEncoded = bytesNeeded;
3636 ret = TRUE;
3637 }
3638 else
3639 {
3640 ret = FileTimeToSystemTime(pvStructInfo, &sysTime);
3641 if (ret)
3642 ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara, pbEncoded,
3643 pcbEncoded, bytesNeeded);
3644 if (ret)
3645 {
3646 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
3647 pbEncoded = *(BYTE **)pbEncoded;
3648 buf[0] = ASN_GENERALTIME;
3649 buf[1] = bytesNeeded - 2;
3650 snprintf(buf + 2, sizeof(buf) - 2, "%04d%02d%02d%02d%02d%02dZ",
3651 sysTime.wYear, sysTime.wMonth, sysTime.wDay, sysTime.wHour,
3652 sysTime.wMinute, sysTime.wSecond);
3653 memcpy(pbEncoded, buf, bytesNeeded);
3654 }
3655 }
3656 }
3657 __EXCEPT_PAGE_FAULT
3658 {
3659 SetLastError(STATUS_ACCESS_VIOLATION);
3660 ret = FALSE;
3661 }
3662 __ENDTRY
3663 return ret;
3664 }
3665
3666 static BOOL WINAPI CRYPT_AsnEncodeChoiceOfTime(DWORD dwCertEncodingType,
3667 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3668 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3669 {
3670 BOOL ret;
3671
3672 __TRY
3673 {
3674 SYSTEMTIME sysTime;
3675
3676 /* Check the year, if it's in the UTCTime range call that encode func */
3677 if (!FileTimeToSystemTime(pvStructInfo, &sysTime))
3678 return FALSE;
3679 if (sysTime.wYear >= 1950 && sysTime.wYear <= 2050)
3680 ret = CRYPT_AsnEncodeUtcTime(dwCertEncodingType, lpszStructType,
3681 pvStructInfo, dwFlags, pEncodePara, pbEncoded, pcbEncoded);
3682 else
3683 ret = CRYPT_AsnEncodeGeneralizedTime(dwCertEncodingType,
3684 lpszStructType, pvStructInfo, dwFlags, pEncodePara, pbEncoded,
3685 pcbEncoded);
3686 }
3687 __EXCEPT_PAGE_FAULT
3688 {
3689 SetLastError(STATUS_ACCESS_VIOLATION);
3690 ret = FALSE;
3691 }
3692 __ENDTRY
3693 return ret;
3694 }
3695
3696 static BOOL WINAPI CRYPT_AsnEncodeSequenceOfAny(DWORD dwCertEncodingType,
3697 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3698 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3699 {
3700 BOOL ret;
3701
3702 __TRY
3703 {
3704 DWORD bytesNeeded, dataLen, lenBytes, i;
3705 const CRYPT_SEQUENCE_OF_ANY *seq = pvStructInfo;
3706
3707 for (i = 0, dataLen = 0; i < seq->cValue; i++)
3708 dataLen += seq->rgValue[i].cbData;
3709 CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
3710 bytesNeeded = 1 + lenBytes + dataLen;
3711 if (!pbEncoded)
3712 {
3713 *pcbEncoded = bytesNeeded;
3714 ret = TRUE;
3715 }
3716 else
3717 {
3718 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara, pbEncoded,
3719 pcbEncoded, bytesNeeded)))
3720 {
3721 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
3722 pbEncoded = *(BYTE **)pbEncoded;
3723 *pbEncoded++ = ASN_SEQUENCEOF;
3724 CRYPT_EncodeLen(dataLen, pbEncoded, &lenBytes);
3725 pbEncoded += lenBytes;
3726 for (i = 0; i < seq->cValue; i++)
3727 {
3728 memcpy(pbEncoded, seq->rgValue[i].pbData,
3729 seq->rgValue[i].cbData);
3730 pbEncoded += seq->rgValue[i].cbData;
3731 }
3732 }
3733 }
3734 }
3735 __EXCEPT_PAGE_FAULT
3736 {
3737 SetLastError(STATUS_ACCESS_VIOLATION);
3738 ret = FALSE;
3739 }
3740 __ENDTRY
3741 return ret;
3742 }
3743
3744 static BOOL CRYPT_AsnEncodeDistPoint(const CRL_DIST_POINT *distPoint,
3745 BYTE *pbEncoded, DWORD *pcbEncoded)
3746 {
3747 BOOL ret = TRUE;
3748 struct AsnEncodeSequenceItem items[3] = { { 0 } };
3749 struct AsnConstructedItem constructed = { 0 };
3750 struct AsnEncodeTagSwappedItem swapped[3] = { { 0 } };
3751 DWORD cItem = 0, cSwapped = 0;
3752
3753 switch (distPoint->DistPointName.dwDistPointNameChoice)
3754 {
3755 case CRL_DIST_POINT_NO_NAME:
3756 /* do nothing */
3757 break;
3758 case CRL_DIST_POINT_FULL_NAME:
3759 swapped[cSwapped].tag = ASN_CONTEXT | ASN_CONSTRUCTOR | 0;
3760 swapped[cSwapped].pvStructInfo = &distPoint->DistPointName.u.FullName;
3761 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeAltName;
3762 constructed.tag = 0;
3763 constructed.pvStructInfo = &swapped[cSwapped];
3764 constructed.encodeFunc = CRYPT_AsnEncodeSwapTag;
3765 items[cItem].pvStructInfo = &constructed;
3766 items[cItem].encodeFunc = CRYPT_AsnEncodeConstructed;
3767 cSwapped++;
3768 cItem++;
3769 break;
3770 case CRL_DIST_POINT_ISSUER_RDN_NAME:
3771 FIXME("unimplemented for CRL_DIST_POINT_ISSUER_RDN_NAME\n");
3772 ret = FALSE;
3773 break;
3774 default:
3775 ret = FALSE;
3776 }
3777 if (ret && distPoint->ReasonFlags.cbData)
3778 {
3779 swapped[cSwapped].tag = ASN_CONTEXT | 1;
3780 swapped[cSwapped].pvStructInfo = &distPoint->ReasonFlags;
3781 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeBits;
3782 items[cItem].pvStructInfo = &swapped[cSwapped];
3783 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
3784 cSwapped++;
3785 cItem++;
3786 }
3787 if (ret && distPoint->CRLIssuer.cAltEntry)
3788 {
3789 swapped[cSwapped].tag = ASN_CONTEXT | ASN_CONSTRUCTOR | 2;
3790 swapped[cSwapped].pvStructInfo = &distPoint->CRLIssuer;
3791 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeAltName;
3792 items[cItem].pvStructInfo = &swapped[cSwapped];
3793 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
3794 cSwapped++;
3795 cItem++;
3796 }
3797 if (ret)
3798 ret = CRYPT_AsnEncodeSequence(X509_ASN_ENCODING, items, cItem, 0, NULL,
3799 pbEncoded, pcbEncoded);
3800 return ret;
3801 }
3802
3803 static BOOL WINAPI CRYPT_AsnEncodeCRLDistPoints(DWORD dwCertEncodingType,
3804 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3805 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3806 {
3807 BOOL ret;
3808
3809 __TRY
3810 {
3811 const CRL_DIST_POINTS_INFO *info = pvStructInfo;
3812
3813 if (!info->cDistPoint)
3814 {
3815 SetLastError(E_INVALIDARG);
3816 ret = FALSE;
3817 }
3818 else
3819 {
3820 DWORD bytesNeeded, dataLen, lenBytes, i;
3821
3822 ret = TRUE;
3823 for (i = 0, dataLen = 0; ret && i < info->cDistPoint; i++)
3824 {
3825 DWORD len;
3826
3827 ret = CRYPT_AsnEncodeDistPoint(&info->rgDistPoint[i], NULL,
3828 &len);
3829 if (ret)
3830 dataLen += len;
3831 else if (GetLastError() == CRYPT_E_INVALID_IA5_STRING)
3832 {
3833 /* Have to propagate index of failing character */
3834 *pcbEncoded = len;
3835 }
3836 }
3837 if (ret)
3838 {
3839 CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
3840 bytesNeeded = 1 + lenBytes + dataLen;
3841 if (!pbEncoded)
3842 {
3843 *pcbEncoded = bytesNeeded;
3844 ret = TRUE;
3845 }
3846 else
3847 {
3848 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
3849 pbEncoded, pcbEncoded, bytesNeeded)))
3850 {
3851 BYTE *out;
3852
3853 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
3854 pbEncoded = *(BYTE **)pbEncoded;
3855 out = pbEncoded;
3856 *out++ = ASN_SEQUENCEOF;
3857 CRYPT_EncodeLen(dataLen, out, &lenBytes);
3858 out += lenBytes;
3859 for (i = 0; ret && i < info->cDistPoint; i++)
3860 {
3861 DWORD len = dataLen;
3862
3863 ret = CRYPT_AsnEncodeDistPoint(
3864 &info->rgDistPoint[i], out, &len);
3865 if (ret)
3866 {
3867 out += len;
3868 dataLen -= len;
3869 }
3870 }
3871 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
3872 CRYPT_FreeSpace(pEncodePara, pbEncoded);
3873 }
3874 }
3875 }
3876 }
3877 }
3878 __EXCEPT_PAGE_FAULT
3879 {
3880 SetLastError(STATUS_ACCESS_VIOLATION);
3881 ret = FALSE;
3882 }
3883 __ENDTRY
3884 return ret;
3885 }
3886
3887 static BOOL WINAPI CRYPT_AsnEncodeEnhancedKeyUsage(DWORD dwCertEncodingType,
3888 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3889 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3890 {
3891 BOOL ret;
3892
3893 __TRY
3894 {
3895 const CERT_ENHKEY_USAGE *usage = pvStructInfo;
3896 DWORD bytesNeeded = 0, lenBytes, size, i;
3897
3898 ret = TRUE;
3899 for (i = 0; ret && i < usage->cUsageIdentifier; i++)
3900 {
3901 ret = CRYPT_AsnEncodeOid(dwCertEncodingType, NULL,
3902 usage->rgpszUsageIdentifier[i],
3903 dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG, NULL, NULL, &size);
3904 if (ret)
3905 bytesNeeded += size;
3906 }
3907 CRYPT_EncodeLen(bytesNeeded, NULL, &lenBytes);
3908 bytesNeeded += 1 + lenBytes;
3909 if (ret)
3910 {
3911 if (!pbEncoded)
3912 *pcbEncoded = bytesNeeded;
3913 else
3914 {
3915 if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
3916 pbEncoded, pcbEncoded, bytesNeeded)))
3917 {
3918 BYTE *out;
3919
3920 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
3921 pbEncoded = *(BYTE **)pbEncoded;
3922 out = pbEncoded;
3923 *out++ = ASN_SEQUENCEOF;
3924 CRYPT_EncodeLen(bytesNeeded - lenBytes - 1, out, &lenBytes);
3925 out += lenBytes;
3926 for (i = 0; ret && i < usage->cUsageIdentifier; i++)
3927 {
3928 size = bytesNeeded;
3929 ret = CRYPT_AsnEncodeOid(dwCertEncodingType, NULL,
3930 usage->rgpszUsageIdentifier[i],
3931 dwFlags & ~CRYPT_ENCODE_ALLOC_FLAG, NULL, out, &size);
3932 if (ret)
3933 {
3934 out += size;
3935 bytesNeeded -= size;
3936 }
3937 }
3938 if (!ret && (dwFlags & CRYPT_ENCODE_ALLOC_FLAG))
3939 CRYPT_FreeSpace(pEncodePara, pbEncoded);
3940 }
3941 }
3942 }
3943 }
3944 __EXCEPT_PAGE_FAULT
3945 {
3946 SetLastError(STATUS_ACCESS_VIOLATION);
3947 ret = FALSE;
3948 }
3949 __ENDTRY
3950 return ret;
3951 }
3952
3953 static BOOL WINAPI CRYPT_AsnEncodeIssuingDistPoint(DWORD dwCertEncodingType,
3954 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
3955 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
3956 {
3957 BOOL ret;
3958
3959 __TRY
3960 {
3961 const CRL_ISSUING_DIST_POINT *point = pvStructInfo;
3962 struct AsnEncodeSequenceItem items[6] = { { 0 } };
3963 struct AsnConstructedItem constructed = { 0 };
3964 struct AsnEncodeTagSwappedItem swapped[5] = { { 0 } };
3965 DWORD cItem = 0, cSwapped = 0;
3966
3967 ret = TRUE;
3968 switch (point->DistPointName.dwDistPointNameChoice)
3969 {
3970 case CRL_DIST_POINT_NO_NAME:
3971 /* do nothing */
3972 break;
3973 case CRL_DIST_POINT_FULL_NAME:
3974 swapped[cSwapped].tag = ASN_CONTEXT | ASN_CONSTRUCTOR | 0;
3975 swapped[cSwapped].pvStructInfo = &point->DistPointName.u.FullName;
3976 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeAltName;
3977 constructed.tag = 0;
3978 constructed.pvStructInfo = &swapped[cSwapped];
3979 constructed.encodeFunc = CRYPT_AsnEncodeSwapTag;
3980 items[cItem].pvStructInfo = &constructed;
3981 items[cItem].encodeFunc = CRYPT_AsnEncodeConstructed;
3982 cSwapped++;
3983 cItem++;
3984 break;
3985 default:
3986 SetLastError(E_INVALIDARG);
3987 ret = FALSE;
3988 }
3989 if (ret && point->fOnlyContainsUserCerts)
3990 {
3991 swapped[cSwapped].tag = ASN_CONTEXT | 1;
3992 swapped[cSwapped].pvStructInfo = &point->fOnlyContainsUserCerts;
3993 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeBool;
3994 items[cItem].pvStructInfo = &swapped[cSwapped];
3995 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
3996 cSwapped++;
3997 cItem++;
3998 }
3999 if (ret && point->fOnlyContainsCACerts)
4000 {
4001 swapped[cSwapped].tag = ASN_CONTEXT | 2;
4002 swapped[cSwapped].pvStructInfo = &point->fOnlyContainsCACerts;
4003 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeBool;
4004 items[cItem].pvStructInfo = &swapped[cSwapped];
4005 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4006 cSwapped++;
4007 cItem++;
4008 }
4009 if (ret && point->OnlySomeReasonFlags.cbData)
4010 {
4011 swapped[cSwapped].tag = ASN_CONTEXT | 3;
4012 swapped[cSwapped].pvStructInfo = &point->OnlySomeReasonFlags;
4013 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeBits;
4014 items[cItem].pvStructInfo = &swapped[cSwapped];
4015 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4016 cSwapped++;
4017 cItem++;
4018 }
4019 if (ret && point->fIndirectCRL)
4020 {
4021 swapped[cSwapped].tag = ASN_CONTEXT | 4;
4022 swapped[cSwapped].pvStructInfo = &point->fIndirectCRL;
4023 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeBool;
4024 items[cItem].pvStructInfo = &swapped[cSwapped];
4025 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4026 cSwapped++;
4027 cItem++;
4028 }
4029 if (ret)
4030 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
4031 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
4032 }
4033 __EXCEPT_PAGE_FAULT
4034 {
4035 SetLastError(STATUS_ACCESS_VIOLATION);
4036 ret = FALSE;
4037 }
4038 __ENDTRY
4039 return ret;
4040 }
4041
4042 static BOOL CRYPT_AsnEncodeGeneralSubtree(DWORD dwCertEncodingType,
4043 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
4044 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
4045 {
4046 BOOL ret;
4047 const CERT_GENERAL_SUBTREE *subtree = pvStructInfo;
4048 struct AsnEncodeSequenceItem items[3] = {
4049 { &subtree->Base, CRYPT_AsnEncodeAltNameEntry, 0 },
4050 { 0 }
4051 };
4052 struct AsnEncodeTagSwappedItem swapped[2] = { { 0 } };
4053 DWORD cItem = 1, cSwapped = 0;
4054
4055 if (subtree->dwMinimum)
4056 {
4057 swapped[cSwapped].tag = ASN_CONTEXT | 0;
4058 swapped[cSwapped].pvStructInfo = &subtree->dwMinimum;
4059 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeInt;
4060 items[cItem].pvStructInfo = &swapped[cSwapped];
4061 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4062 cSwapped++;
4063 cItem++;
4064 }
4065 if (subtree->fMaximum)
4066 {
4067 swapped[cSwapped].tag = ASN_CONTEXT | 1;
4068 swapped[cSwapped].pvStructInfo = &subtree->dwMaximum;
4069 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeInt;
4070 items[cItem].pvStructInfo = &swapped[cSwapped];
4071 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4072 cSwapped++;
4073 cItem++;
4074 }
4075 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem, dwFlags,
4076 pEncodePara, pbEncoded, pcbEncoded);
4077 return ret;
4078 }
4079
4080 static BOOL WINAPI CRYPT_AsnEncodeNameConstraints(DWORD dwCertEncodingType,
4081 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
4082 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
4083 {
4084 BOOL ret = FALSE;
4085 CRYPT_BLOB_ARRAY permitted = { 0, NULL }, excluded = { 0, NULL };
4086
4087 TRACE("%p\n", pvStructInfo);
4088
4089 __TRY
4090 {
4091 const CERT_NAME_CONSTRAINTS_INFO *constraints = pvStructInfo;
4092 struct AsnEncodeSequenceItem items[2] = { { 0 } };
4093 struct AsnEncodeTagSwappedItem swapped[2] = { { 0 } };
4094 DWORD i, cItem = 0, cSwapped = 0;
4095
4096 ret = TRUE;
4097 if (constraints->cPermittedSubtree)
4098 {
4099 permitted.rgBlob = CryptMemAlloc(
4100 constraints->cPermittedSubtree * sizeof(CRYPT_DER_BLOB));
4101 if (permitted.rgBlob)
4102 {
4103 permitted.cBlob = constraints->cPermittedSubtree;
4104 memset(permitted.rgBlob, 0,
4105 permitted.cBlob * sizeof(CRYPT_DER_BLOB));
4106 for (i = 0; ret && i < permitted.cBlob; i++)
4107 ret = CRYPT_AsnEncodeGeneralSubtree(dwCertEncodingType,
4108 NULL, &constraints->rgPermittedSubtree[i],
4109 CRYPT_ENCODE_ALLOC_FLAG, NULL,
4110 (BYTE *)&permitted.rgBlob[i].pbData,
4111 &permitted.rgBlob[i].cbData);
4112 if (ret)
4113 {
4114 swapped[cSwapped].tag = ASN_CONTEXT | ASN_CONSTRUCTOR | 0;
4115 swapped[cSwapped].pvStructInfo = &permitted;
4116 swapped[cSwapped].encodeFunc = CRYPT_DEREncodeSet;
4117 items[cItem].pvStructInfo = &swapped[cSwapped];
4118 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4119 cSwapped++;
4120 cItem++;
4121 }
4122 }
4123 else
4124 ret = FALSE;
4125 }
4126 if (constraints->cExcludedSubtree)
4127 {
4128 excluded.rgBlob = CryptMemAlloc(
4129 constraints->cExcludedSubtree * sizeof(CRYPT_DER_BLOB));
4130 if (excluded.rgBlob)
4131 {
4132 excluded.cBlob = constraints->cExcludedSubtree;
4133 memset(excluded.rgBlob, 0,
4134 excluded.cBlob * sizeof(CRYPT_DER_BLOB));
4135 for (i = 0; ret && i < excluded.cBlob; i++)
4136 ret = CRYPT_AsnEncodeGeneralSubtree(dwCertEncodingType,
4137 NULL, &constraints->rgExcludedSubtree[i],
4138 CRYPT_ENCODE_ALLOC_FLAG, NULL,
4139 (BYTE *)&excluded.rgBlob[i].pbData,
4140 &excluded.rgBlob[i].cbData);
4141 if (ret)
4142 {
4143 swapped[cSwapped].tag = ASN_CONTEXT | ASN_CONSTRUCTOR | 1;
4144 swapped[cSwapped].pvStructInfo = &excluded;
4145 swapped[cSwapped].encodeFunc = CRYPT_DEREncodeSet;
4146 items[cItem].pvStructInfo = &swapped[cSwapped];
4147 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4148 cSwapped++;
4149 cItem++;
4150 }
4151 }
4152 else
4153 ret = FALSE;
4154 }
4155 if (ret)
4156 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
4157 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
4158 for (i = 0; i < permitted.cBlob; i++)
4159 LocalFree(permitted.rgBlob[i].pbData);
4160 for (i = 0; i < excluded.cBlob; i++)
4161 LocalFree(excluded.rgBlob[i].pbData);
4162 }
4163 __EXCEPT_PAGE_FAULT
4164 {
4165 SetLastError(STATUS_ACCESS_VIOLATION);
4166 }
4167 __ENDTRY
4168 CryptMemFree(permitted.rgBlob);
4169 CryptMemFree(excluded.rgBlob);
4170 TRACE("returning %d\n", ret);
4171 return ret;
4172 }
4173
4174 static BOOL WINAPI CRYPT_AsnEncodeIssuerSerialNumber(
4175 DWORD dwCertEncodingType, LPCSTR lpszStructType, const void *pvStructInfo,
4176 DWORD dwFlags, PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded,
4177 DWORD *pcbEncoded)
4178 {
4179 BOOL ret;
4180 const CERT_ISSUER_SERIAL_NUMBER *issuerSerial = pvStructInfo;
4181 struct AsnEncodeSequenceItem items[] = {
4182 { &issuerSerial->Issuer, CRYPT_CopyEncodedBlob, 0 },
4183 { &issuerSerial->SerialNumber, CRYPT_AsnEncodeInteger, 0 },
4184 };
4185
4186 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
4187 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded, pcbEncoded);
4188 return ret;
4189 }
4190
4191 static BOOL WINAPI CRYPT_AsnEncodePKCSSignerInfo(DWORD dwCertEncodingType,
4192 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
4193 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
4194 {
4195 BOOL ret = FALSE;
4196
4197 if (!(dwCertEncodingType & PKCS_7_ASN_ENCODING))
4198 {
4199 SetLastError(E_INVALIDARG);
4200 return FALSE;
4201 }
4202
4203 __TRY
4204 {
4205 const CMSG_SIGNER_INFO *info = pvStructInfo;
4206
4207 if (!info->Issuer.cbData)
4208 SetLastError(E_INVALIDARG);
4209 else
4210 {
4211 struct AsnEncodeSequenceItem items[7] = {
4212 { &info->dwVersion, CRYPT_AsnEncodeInt, 0 },
4213 { &info->Issuer, CRYPT_AsnEncodeIssuerSerialNumber, 0 },
4214 { &info->HashAlgorithm, CRYPT_AsnEncodeAlgorithmIdWithNullParams,
4215 0 },
4216 };
4217 struct AsnEncodeTagSwappedItem swapped[2] = { { 0 } };
4218 DWORD cItem = 3, cSwapped = 0;
4219
4220 if (info->AuthAttrs.cAttr)
4221 {
4222 swapped[cSwapped].tag = ASN_CONTEXT | ASN_CONSTRUCTOR | 0;
4223 swapped[cSwapped].pvStructInfo = &info->AuthAttrs;
4224 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodePKCSAttributes;
4225 items[cItem].pvStructInfo = &swapped[cSwapped];
4226 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4227 cSwapped++;
4228 cItem++;
4229 }
4230 items[cItem].pvStructInfo = &info->HashEncryptionAlgorithm;
4231 items[cItem].encodeFunc = CRYPT_AsnEncodeAlgorithmIdWithNullParams;
4232 cItem++;
4233 items[cItem].pvStructInfo = &info->EncryptedHash;
4234 items[cItem].encodeFunc = CRYPT_AsnEncodeOctets;
4235 cItem++;
4236 if (info->UnauthAttrs.cAttr)
4237 {
4238 swapped[cSwapped].tag = ASN_CONTEXT | ASN_CONSTRUCTOR | 1;
4239 swapped[cSwapped].pvStructInfo = &info->UnauthAttrs;
4240 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodePKCSAttributes;
4241 items[cItem].pvStructInfo = &swapped[cSwapped];
4242 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4243 cSwapped++;
4244 cItem++;
4245 }
4246 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
4247 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
4248 }
4249 }
4250 __EXCEPT_PAGE_FAULT
4251 {
4252 SetLastError(STATUS_ACCESS_VIOLATION);
4253 }
4254 __ENDTRY
4255 return ret;
4256 }
4257
4258 static BOOL WINAPI CRYPT_AsnEncodeCMSSignerInfo(DWORD dwCertEncodingType,
4259 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
4260 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
4261 {
4262 BOOL ret = FALSE;
4263
4264 if (!(dwCertEncodingType & PKCS_7_ASN_ENCODING))
4265 {
4266 SetLastError(E_INVALIDARG);
4267 return FALSE;
4268 }
4269
4270 __TRY
4271 {
4272 const CMSG_CMS_SIGNER_INFO *info = pvStructInfo;
4273
4274 if (info->SignerId.dwIdChoice != CERT_ID_ISSUER_SERIAL_NUMBER &&
4275 info->SignerId.dwIdChoice != CERT_ID_KEY_IDENTIFIER)
4276 SetLastError(E_INVALIDARG);
4277 else if (info->SignerId.dwIdChoice == CERT_ID_ISSUER_SERIAL_NUMBER &&
4278 !info->SignerId.u.IssuerSerialNumber.Issuer.cbData)
4279 SetLastError(E_INVALIDARG);
4280 else
4281 {
4282 struct AsnEncodeSequenceItem items[7] = {
4283 { &info->dwVersion, CRYPT_AsnEncodeInt, 0 },
4284 };
4285 struct AsnEncodeTagSwappedItem swapped[3] = { { 0 } };
4286 DWORD cItem = 1, cSwapped = 0;
4287
4288 if (info->SignerId.dwIdChoice == CERT_ID_ISSUER_SERIAL_NUMBER)
4289 {
4290 items[cItem].pvStructInfo =
4291 &info->SignerId.u.IssuerSerialNumber.Issuer;
4292 items[cItem].encodeFunc =
4293 CRYPT_AsnEncodeIssuerSerialNumber;
4294 cItem++;
4295 }
4296 else
4297 {
4298 swapped[cSwapped].tag = ASN_CONTEXT | 0;
4299 swapped[cSwapped].pvStructInfo = &info->SignerId.u.KeyId;
4300 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodeOctets;
4301 items[cItem].pvStructInfo = &swapped[cSwapped];
4302 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4303 cSwapped++;
4304 cItem++;
4305 }
4306 items[cItem].pvStructInfo = &info->HashAlgorithm;
4307 items[cItem].encodeFunc = CRYPT_AsnEncodeAlgorithmIdWithNullParams;
4308 cItem++;
4309 if (info->AuthAttrs.cAttr)
4310 {
4311 swapped[cSwapped].tag = ASN_CONTEXT | ASN_CONSTRUCTOR | 0;
4312 swapped[cSwapped].pvStructInfo = &info->AuthAttrs;
4313 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodePKCSAttributes;
4314 items[cItem].pvStructInfo = &swapped[cSwapped];
4315 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4316 cSwapped++;
4317 cItem++;
4318 }
4319 items[cItem].pvStructInfo = &info->HashEncryptionAlgorithm;
4320 items[cItem].encodeFunc = CRYPT_AsnEncodeAlgorithmIdWithNullParams;
4321 cItem++;
4322 items[cItem].pvStructInfo = &info->EncryptedHash;
4323 items[cItem].encodeFunc = CRYPT_AsnEncodeOctets;
4324 cItem++;
4325 if (info->UnauthAttrs.cAttr)
4326 {
4327 swapped[cSwapped].tag = ASN_CONTEXT | ASN_CONSTRUCTOR | 1;
4328 swapped[cSwapped].pvStructInfo = &info->UnauthAttrs;
4329 swapped[cSwapped].encodeFunc = CRYPT_AsnEncodePKCSAttributes;
4330 items[cItem].pvStructInfo = &swapped[cSwapped];
4331 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4332 cSwapped++;
4333 cItem++;
4334 }
4335 ret = CRYPT_AsnEncodeSequence(dwCertEncodingType, items, cItem,
4336 dwFlags, pEncodePara, pbEncoded, pcbEncoded);
4337 }
4338 }
4339 __EXCEPT_PAGE_FAULT
4340 {
4341 SetLastError(STATUS_ACCESS_VIOLATION);
4342 }
4343 __ENDTRY
4344 return ret;
4345 }
4346
4347 BOOL CRYPT_AsnEncodeCMSSignedInfo(CRYPT_SIGNED_INFO *signedInfo, void *pvData,
4348 DWORD *pcbData)
4349 {
4350 struct AsnEncodeSequenceItem items[7] = {
4351 { &signedInfo->version, CRYPT_AsnEncodeInt, 0 },
4352 };
4353 struct DERSetDescriptor digestAlgorithmsSet = { 0 }, certSet = { 0 };
4354 struct DERSetDescriptor crlSet = { 0 }, signerSet = { 0 };
4355 struct AsnEncodeTagSwappedItem swapped[2] = { { 0 } };
4356 DWORD cItem = 1, cSwapped = 0;
4357 BOOL ret = TRUE;
4358
4359 if (signedInfo->cSignerInfo)
4360 {
4361 digestAlgorithmsSet.cItems = signedInfo->cSignerInfo;
4362 digestAlgorithmsSet.items = signedInfo->rgSignerInfo;
4363 digestAlgorithmsSet.itemSize = sizeof(CMSG_CMS_SIGNER_INFO);
4364 digestAlgorithmsSet.itemOffset =
4365 offsetof(CMSG_CMS_SIGNER_INFO, HashAlgorithm);
4366 digestAlgorithmsSet.encode = CRYPT_AsnEncodeAlgorithmIdWithNullParams;
4367 items[cItem].pvStructInfo = &digestAlgorithmsSet;
4368 items[cItem].encodeFunc = CRYPT_DEREncodeItemsAsSet;
4369 cItem++;
4370 }
4371 items[cItem].pvStructInfo = &signedInfo->content;
4372 items[cItem].encodeFunc = CRYPT_AsnEncodePKCSContentInfoInternal;
4373 cItem++;
4374 if (signedInfo->cCertEncoded)
4375 {
4376 certSet.cItems = signedInfo->cCertEncoded;
4377 certSet.items = signedInfo->rgCertEncoded;
4378 certSet.itemSize = sizeof(CERT_BLOB);
4379 certSet.itemOffset = 0;
4380 certSet.encode = CRYPT_CopyEncodedBlob;
4381 swapped[cSwapped].tag = ASN_CONSTRUCTOR | ASN_CONTEXT | 0;
4382 swapped[cSwapped].pvStructInfo = &certSet;
4383 swapped[cSwapped].encodeFunc = CRYPT_DEREncodeItemsAsSet;
4384 items[cItem].pvStructInfo = &swapped[cSwapped];
4385 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4386 cSwapped++;
4387 cItem++;
4388 }
4389 if (signedInfo->cCrlEncoded)
4390 {
4391 crlSet.cItems = signedInfo->cCrlEncoded;
4392 crlSet.items = signedInfo->rgCrlEncoded;
4393 crlSet.itemSize = sizeof(CRL_BLOB);
4394 crlSet.itemOffset = 0;
4395 crlSet.encode = CRYPT_CopyEncodedBlob;
4396 swapped[cSwapped].tag = ASN_CONSTRUCTOR | ASN_CONTEXT | 1;
4397 swapped[cSwapped].pvStructInfo = &crlSet;
4398 swapped[cSwapped].encodeFunc = CRYPT_DEREncodeItemsAsSet;
4399 items[cItem].pvStructInfo = &swapped[cSwapped];
4400 items[cItem].encodeFunc = CRYPT_AsnEncodeSwapTag;
4401 cSwapped++;
4402 cItem++;
4403 }
4404 if (ret && signedInfo->cSignerInfo)
4405 {
4406 signerSet.cItems = signedInfo->cSignerInfo;
4407 signerSet.items = signedInfo->rgSignerInfo;
4408 signerSet.itemSize = sizeof(CMSG_CMS_SIGNER_INFO);
4409 signerSet.itemOffset = 0;
4410 signerSet.encode = CRYPT_AsnEncodeCMSSignerInfo;
4411 items[cItem].pvStructInfo = &signerSet;
4412 items[cItem].encodeFunc = CRYPT_DEREncodeItemsAsSet;
4413 cItem++;
4414 }
4415 if (ret)
4416 ret = CRYPT_AsnEncodeSequence(X509_ASN_ENCODING | PKCS_7_ASN_ENCODING,
4417 items, cItem, 0, NULL, pvData, pcbData);
4418
4419 return ret;
4420 }
4421
4422 static BOOL WINAPI CRYPT_AsnEncodeRecipientInfo(DWORD dwCertEncodingType,
4423 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
4424 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
4425 {
4426 const CMSG_KEY_TRANS_RECIPIENT_INFO *info = pvStructInfo;
4427 struct AsnEncodeSequenceItem items[] = {
4428 { &info->dwVersion, CRYPT_AsnEncodeInt, 0 },
4429 { &info->RecipientId.u.IssuerSerialNumber,
4430 CRYPT_AsnEncodeIssuerSerialNumber, 0 },
4431 { &info->KeyEncryptionAlgorithm,
4432 CRYPT_AsnEncodeAlgorithmIdWithNullParams, 0 },
4433 { &info->EncryptedKey, CRYPT_AsnEncodeOctets, 0 },
4434 };
4435
4436 return CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
4437 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded, pcbEncoded);
4438 }
4439
4440 static BOOL WINAPI CRYPT_AsnEncodeEncryptedContentInfo(DWORD dwCertEncodingType,
4441 LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
4442 PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
4443 {
4444 const CRYPT_ENCRYPTED_CONTENT_INFO *info = pvStructInfo;
4445 struct AsnEncodeTagSwappedItem swapped = { ASN_CONTEXT | 0,
4446 &info->encryptedContent, CRYPT_AsnEncodeOctets };
4447 struct AsnEncodeSequenceItem items[] = {
4448 { info->contentType, CRYPT_AsnEncodeOid, 0 },
4449 { &info->contentEncryptionAlgorithm,
4450 CRYPT_AsnEncodeAlgorithmIdWithNullParams, 0 },
4451 { &swapped, CRYPT_AsnEncodeSwapTag, 0 },
4452 };
4453
4454 return CRYPT_AsnEncodeSequence(dwCertEncodingType, items,
4455 ARRAY_SIZE(items), dwFlags, pEncodePara, pbEncoded, pcbEncoded);
4456 }
4457
4458 BOOL CRYPT_AsnEncodePKCSEnvelopedData(const CRYPT_ENVELOPED_DATA *envelopedData,
4459 void *pvData, DWORD *pcbData)
4460 {
4461 struct DERSetDescriptor recipientInfosSet = { envelopedData->cRecipientInfo,
4462 envelopedData->rgRecipientInfo, sizeof(CMSG_KEY_TRANS_RECIPIENT_INFO), 0,
4463 CRYPT_AsnEncodeRecipientInfo };
4464 struct AsnEncodeSequenceItem items[] = {
4465 { &envelopedData->version, CRYPT_AsnEncodeInt, 0 },
4466 { &recipientInfosSet, CRYPT_DEREncodeItemsAsSet, 0 },
4467 { &envelopedData->encryptedContentInfo,
4468 CRYPT_AsnEncodeEncryptedContentInfo, 0 },
4469 };
4470
4471 return CRYPT_AsnEncodeSequence(X509_ASN_ENCODING, items,
4472 ARRAY_SIZE(items), 0, NULL, pvData, pcbData);
4473 }
4474
4475 static CryptEncodeObjectExFunc CRYPT_GetBuiltinEncoder(DWORD dwCertEncodingType,
4476 LPCSTR lpszStructType)
4477 {
4478 CryptEncodeObjectExFunc encodeFunc = NULL;
4479
4480 if ((dwCertEncodingType & CERT_ENCODING_TYPE_MASK) != X509_ASN_ENCODING
4481 && (dwCertEncodingType & CMSG_ENCODING_TYPE_MASK) != PKCS_7_ASN_ENCODING)
4482 {
4483 SetLastError(ERROR_FILE_NOT_FOUND);
4484 return NULL;
4485 }
4486
4487 if (IS_INTOID(lpszStructType))
4488 {
4489 switch (LOWORD(lpszStructType))
4490 {
4491 case LOWORD(X509_CERT):
4492 encodeFunc = CRYPT_AsnEncodeCert;
4493 break;
4494 case LOWORD(X509_CERT_TO_BE_SIGNED):
4495 encodeFunc = CRYPT_AsnEncodeCertInfo;
4496 break;
4497 case LOWORD(X509_CERT_CRL_TO_BE_SIGNED):
4498 encodeFunc = CRYPT_AsnEncodeCRLInfo;
4499 break;
4500 case LOWORD(X509_EXTENSIONS):
4501 encodeFunc = CRYPT_AsnEncodeExtensions;
4502 break;
4503 case LOWORD(X509_NAME_VALUE):
4504 encodeFunc = CRYPT_AsnEncodeNameValue;
4505 break;
4506 case LOWORD(X509_NAME):
4507 encodeFunc = CRYPT_AsnEncodeName;
4508 break;
4509 case LOWORD(X509_PUBLIC_KEY_INFO):
4510 encodeFunc = CRYPT_AsnEncodePubKeyInfo;
4511 break;
4512 case LOWORD(X509_AUTHORITY_KEY_ID):
4513 encodeFunc = CRYPT_AsnEncodeAuthorityKeyId;
4514 break;
4515 case LOWORD(X509_ALTERNATE_NAME):
4516 encodeFunc = CRYPT_AsnEncodeAltName;
4517 break;
4518 case LOWORD(X509_BASIC_CONSTRAINTS):
4519 encodeFunc = CRYPT_AsnEncodeBasicConstraints;
4520 break;
4521 case LOWORD(X509_BASIC_CONSTRAINTS2):
4522 encodeFunc = CRYPT_AsnEncodeBasicConstraints2;
4523 break;
4524 case LOWORD(X509_CERT_POLICIES):
4525 encodeFunc = CRYPT_AsnEncodeCertPolicies;
4526 break;
4527 case LOWORD(RSA_CSP_PUBLICKEYBLOB):
4528 encodeFunc = CRYPT_AsnEncodeRsaPubKey;
4529 break;
4530 case LOWORD(X509_UNICODE_NAME):
4531 encodeFunc = CRYPT_AsnEncodeUnicodeName;
4532 break;
4533 case LOWORD(PKCS_CONTENT_INFO):
4534 encodeFunc = CRYPT_AsnEncodePKCSContentInfo;
4535 break;
4536 case LOWORD(PKCS_ATTRIBUTE):
4537 encodeFunc = CRYPT_AsnEncodePKCSAttribute;
4538 break;
4539 case LOWORD(X509_UNICODE_NAME_VALUE):
4540 encodeFunc = CRYPT_AsnEncodeUnicodeNameValue;
4541 break;
4542 case LOWORD(X509_OCTET_STRING):
4543 encodeFunc = CRYPT_AsnEncodeOctets;
4544 break;
4545 case LOWORD(X509_BITS):
4546 case LOWORD(X509_KEY_USAGE):
4547 encodeFunc = CRYPT_AsnEncodeBits;
4548 break;
4549 case LOWORD(X509_INTEGER):
4550 encodeFunc = CRYPT_AsnEncodeInt;
4551 break;
4552 case LOWORD(X509_MULTI_BYTE_INTEGER):
4553 encodeFunc = CRYPT_AsnEncodeInteger;
4554 break;
4555 case LOWORD(X509_MULTI_BYTE_UINT):
4556 encodeFunc = CRYPT_AsnEncodeUnsignedInteger;
4557 break;
4558 case LOWORD(X509_ENUMERATED):
4559 encodeFunc = CRYPT_AsnEncodeEnumerated;
4560 break;
4561 case LOWORD(X509_CHOICE_OF_TIME):
4562 encodeFunc = CRYPT_AsnEncodeChoiceOfTime;
4563 break;
4564 case LOWORD(X509_AUTHORITY_KEY_ID2):
4565 encodeFunc = CRYPT_AsnEncodeAuthorityKeyId2;
4566 break;
4567 case LOWORD(X509_AUTHORITY_INFO_ACCESS):
4568 encodeFunc = CRYPT_AsnEncodeAuthorityInfoAccess;
4569 break;
4570 case LOWORD(X509_SEQUENCE_OF_ANY):
4571 encodeFunc = CRYPT_AsnEncodeSequenceOfAny;
4572 break;
4573 case LOWORD(PKCS_UTC_TIME):
4574 encodeFunc = CRYPT_AsnEncodeUtcTime;
4575 break;
4576 case LOWORD(X509_CRL_DIST_POINTS):
4577 encodeFunc = CRYPT_AsnEncodeCRLDistPoints;
4578 break;
4579 case LOWORD(X509_ENHANCED_KEY_USAGE):
4580 encodeFunc = CRYPT_AsnEncodeEnhancedKeyUsage;
4581 break;
4582 case LOWORD(PKCS_CTL):
4583 encodeFunc = CRYPT_AsnEncodeCTL;
4584 break;
4585 case LOWORD(PKCS_SMIME_CAPABILITIES):
4586 encodeFunc = CRYPT_AsnEncodeSMIMECapabilities;
4587 break;
4588 case LOWORD(X509_PKIX_POLICY_QUALIFIER_USERNOTICE):
4589 encodeFunc = CRYPT_AsnEncodePolicyQualifierUserNotice;
4590 break;
4591 case LOWORD(PKCS_ATTRIBUTES):
4592 encodeFunc = CRYPT_AsnEncodePKCSAttributes;
4593 break;
4594 case LOWORD(X509_ISSUING_DIST_POINT):
4595 encodeFunc = CRYPT_AsnEncodeIssuingDistPoint;
4596 break;
4597 case LOWORD(X509_NAME_CONSTRAINTS):
4598 encodeFunc = CRYPT_AsnEncodeNameConstraints;
4599 break;
4600 case LOWORD(X509_POLICY_MAPPINGS):
4601 encodeFunc = CRYPT_AsnEncodeCertPolicyMappings;
4602 break;
4603 case LOWORD(X509_POLICY_CONSTRAINTS):
4604 encodeFunc = CRYPT_AsnEncodeCertPolicyConstraints;
4605 break;
4606 case LOWORD(PKCS7_SIGNER_INFO):
4607 encodeFunc = CRYPT_AsnEncodePKCSSignerInfo;
4608 break;
4609 case LOWORD(CMS_SIGNER_INFO):
4610 encodeFunc = CRYPT_AsnEncodeCMSSignerInfo;
4611 break;
4612 case LOWORD(CNG_RSA_PUBLIC_KEY_BLOB):
4613 encodeFunc = CRYPT_AsnEncodeRsaPubKey_Bcrypt;
4614 break;
4615 default:
4616 FIXME("Unimplemented encoder for lpszStructType OID %d\n", LOWORD(lpszStructType));
4617 }
4618 }
4619 else if (!strcmp(lpszStructType, szOID_CERT_EXTENSIONS))
4620 encodeFunc = CRYPT_AsnEncodeExtensions;
4621 else if (!strcmp(lpszStructType, szOID_RSA_signingTime))
4622 encodeFunc = CRYPT_AsnEncodeUtcTime;
4623 else if (!strcmp(lpszStructType, szOID_RSA_SMIMECapabilities))
4624 encodeFunc = CRYPT_AsnEncodeUtcTime;
4625 else if (!strcmp(lpszStructType, szOID_AUTHORITY_KEY_IDENTIFIER))
4626 encodeFunc = CRYPT_AsnEncodeAuthorityKeyId;
4627 else if (!strcmp(lpszStructType, szOID_LEGACY_POLICY_MAPPINGS))
4628 encodeFunc = CRYPT_AsnEncodeCertPolicyMappings;
4629 else if (!strcmp(lpszStructType, szOID_AUTHORITY_KEY_IDENTIFIER2))
4630 encodeFunc = CRYPT_AsnEncodeAuthorityKeyId2;
4631 else if (!strcmp(lpszStructType, szOID_CRL_REASON_CODE))
4632 encodeFunc = CRYPT_AsnEncodeEnumerated;
4633 else if (!strcmp(lpszStructType, szOID_KEY_USAGE))
4634 encodeFunc = CRYPT_AsnEncodeBits;
4635 else if (!strcmp(lpszStructType, szOID_SUBJECT_KEY_IDENTIFIER))
4636 encodeFunc = CRYPT_AsnEncodeOctets;
4637 else if (!strcmp(lpszStructType, szOID_BASIC_CONSTRAINTS))
4638 encodeFunc = CRYPT_AsnEncodeBasicConstraints;
4639 else if (!strcmp(lpszStructType, szOID_BASIC_CONSTRAINTS2))
4640 encodeFunc = CRYPT_AsnEncodeBasicConstraints2;
4641 else if (!strcmp(lpszStructType, szOID_ISSUER_ALT_NAME))
4642 encodeFunc = CRYPT_AsnEncodeAltName;
4643 else if (!strcmp(lpszStructType, szOID_ISSUER_ALT_NAME2))
4644 encodeFunc = CRYPT_AsnEncodeAltName;
4645 else if (!strcmp(lpszStructType, szOID_NEXT_UPDATE_LOCATION))
4646 encodeFunc = CRYPT_AsnEncodeAltName;
4647 else if (!strcmp(lpszStructType, szOID_SUBJECT_ALT_NAME))
4648 encodeFunc = CRYPT_AsnEncodeAltName;
4649 else if (!strcmp(lpszStructType, szOID_SUBJECT_ALT_NAME2))
4650 encodeFunc = CRYPT_AsnEncodeAltName;
4651 else if (!strcmp(lpszStructType, szOID_CRL_DIST_POINTS))
4652 encodeFunc = CRYPT_AsnEncodeCRLDistPoints;
4653 else if (!strcmp(lpszStructType, szOID_CERT_POLICIES))
4654 encodeFunc = CRYPT_AsnEncodeCertPolicies;
4655 else if (!strcmp(lpszStructType, szOID_POLICY_MAPPINGS))
4656 encodeFunc = CRYPT_AsnEncodeCertPolicyMappings;
4657 else if (!strcmp(lpszStructType, szOID_POLICY_CONSTRAINTS))
4658 encodeFunc = CRYPT_AsnEncodeCertPolicyConstraints;
4659 else if (!strcmp(lpszStructType, szOID_ENHANCED_KEY_USAGE))
4660 encodeFunc = CRYPT_AsnEncodeEnhancedKeyUsage;
4661 else if (!strcmp(lpszStructType, szOID_ISSUING_DIST_POINT))
4662 encodeFunc = CRYPT_AsnEncodeIssuingDistPoint;
4663 else if (!strcmp(lpszStructType, szOID_NAME_CONSTRAINTS))
4664 encodeFunc = CRYPT_AsnEncodeNameConstraints;
4665 else if (!strcmp(lpszStructType, szOID_AUTHORITY_INFO_ACCESS))
4666 encodeFunc = CRYPT_AsnEncodeAuthorityInfoAccess;
4667 else if (!strcmp(lpszStructType, szOID_PKIX_POLICY_QUALIFIER_USERNOTICE))
4668 encodeFunc = CRYPT_AsnEncodePolicyQualifierUserNotice;
4669 else if (!strcmp(lpszStructType, szOID_CTL))
4670 encodeFunc = CRYPT_AsnEncodeCTL;
4671 else
4672 FIXME("Unsupported encoder for lpszStructType %s\n", lpszStructType);
4673 return encodeFunc;
4674 }
4675
4676 static CryptEncodeObjectFunc CRYPT_LoadEncoderFunc(DWORD dwCertEncodingType,
4677 LPCSTR lpszStructType, HCRYPTOIDFUNCADDR *hFunc)
4678 {
4679 static HCRYPTOIDFUNCSET set = NULL;
4680 CryptEncodeObjectFunc encodeFunc = NULL;
4681
4682 if (!set)
4683 set = CryptInitOIDFunctionSet(CRYPT_OID_ENCODE_OBJECT_FUNC, 0);
4684 CryptGetOIDFunctionAddress(set, dwCertEncodingType, lpszStructType, 0,
4685 (void **)&encodeFunc, hFunc);
4686 return encodeFunc;
4687 }
4688
4689 static CryptEncodeObjectExFunc CRYPT_LoadEncoderExFunc(DWORD dwCertEncodingType,
4690 LPCSTR lpszStructType, HCRYPTOIDFUNCADDR *hFunc)
4691 {
4692 static HCRYPTOIDFUNCSET set = NULL;
4693 CryptEncodeObjectExFunc encodeFunc = NULL;
4694
4695 if (!set)
4696 set = CryptInitOIDFunctionSet(CRYPT_OID_ENCODE_OBJECT_EX_FUNC, 0);
4697 CryptGetOIDFunctionAddress(set, dwCertEncodingType, lpszStructType, 0,
4698 (void **)&encodeFunc, hFunc);
4699 return encodeFunc;
4700 }
4701
4702 BOOL WINAPI CryptEncodeObject(DWORD dwCertEncodingType, LPCSTR lpszStructType,
4703 const void *pvStructInfo, BYTE *pbEncoded, DWORD *pcbEncoded)
4704 {
4705 BOOL ret = FALSE;
4706 HCRYPTOIDFUNCADDR hFunc = NULL;
4707 CryptEncodeObjectFunc pCryptEncodeObject = NULL;
4708 CryptEncodeObjectExFunc pCryptEncodeObjectEx = NULL;
4709
4710 TRACE_(crypt)("(0x%08x, %s, %p, %p, %p)\n", dwCertEncodingType,
4711 debugstr_a(lpszStructType), pvStructInfo, pbEncoded,
4712 pcbEncoded);
4713
4714 if (!pbEncoded && !pcbEncoded)
4715 {
4716 SetLastError(ERROR_INVALID_PARAMETER);
4717 return FALSE;
4718 }
4719
4720 if (!(pCryptEncodeObjectEx = CRYPT_GetBuiltinEncoder(dwCertEncodingType,
4721 lpszStructType)))
4722 {
4723 TRACE_(crypt)("OID %s not found or unimplemented, looking for DLL\n",
4724 debugstr_a(lpszStructType));
4725 pCryptEncodeObject = CRYPT_LoadEncoderFunc(dwCertEncodingType,
4726 lpszStructType, &hFunc);
4727 if (!pCryptEncodeObject)
4728 pCryptEncodeObjectEx = CRYPT_LoadEncoderExFunc(dwCertEncodingType,
4729 lpszStructType, &hFunc);
4730 }
4731 if (pCryptEncodeObject)
4732 ret = pCryptEncodeObject(dwCertEncodingType, lpszStructType,
4733 pvStructInfo, pbEncoded, pcbEncoded);
4734 else if (pCryptEncodeObjectEx)
4735 ret = pCryptEncodeObjectEx(dwCertEncodingType, lpszStructType,
4736 pvStructInfo, 0, NULL, pbEncoded, pcbEncoded);
4737 if (hFunc)
4738 CryptFreeOIDFunctionAddress(hFunc, 0);
4739 TRACE_(crypt)("returning %d\n", ret);
4740 return ret;
4741 }
4742
4743 BOOL WINAPI CryptEncodeObjectEx(DWORD dwCertEncodingType, LPCSTR lpszStructType,
4744 const void *pvStructInfo, DWORD dwFlags, PCRYPT_ENCODE_PARA pEncodePara,
4745 void *pvEncoded, DWORD *pcbEncoded)
4746 {
4747 BOOL ret = FALSE;
4748 HCRYPTOIDFUNCADDR hFunc = NULL;
4749 CryptEncodeObjectExFunc encodeFunc = NULL;
4750
4751 TRACE_(crypt)("(0x%08x, %s, %p, 0x%08x, %p, %p, %p)\n", dwCertEncodingType,
4752 debugstr_a(lpszStructType), pvStructInfo, dwFlags, pEncodePara,
4753 pvEncoded, pcbEncoded);
4754
4755 if (!pvEncoded && !pcbEncoded)
4756 {
4757 SetLastError(ERROR_INVALID_PARAMETER);
4758 return FALSE;
4759 }
4760
4761 SetLastError(NOERROR);
4762 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG) {
4763 if (!pvEncoded) {
4764 SetLastError(ERROR_INVALID_PARAMETER);
4765 return FALSE;
4766 }
4767 *(BYTE **)pvEncoded = NULL;
4768 }
4769 encodeFunc = CRYPT_GetBuiltinEncoder(dwCertEncodingType, lpszStructType);
4770 if (!encodeFunc)
4771 {
4772 TRACE_(crypt)("OID %s not found or unimplemented, looking for DLL\n",
4773 debugstr_a(lpszStructType));
4774 encodeFunc = CRYPT_LoadEncoderExFunc(dwCertEncodingType, lpszStructType,
4775 &hFunc);
4776 }
4777 if (encodeFunc)
4778 ret = encodeFunc(dwCertEncodingType, lpszStructType, pvStructInfo,
4779 dwFlags, pEncodePara, pvEncoded, pcbEncoded);
4780 else
4781 {
4782 CryptEncodeObjectFunc pCryptEncodeObject =
4783 CRYPT_LoadEncoderFunc(dwCertEncodingType, lpszStructType, &hFunc);
4784
4785 if (pCryptEncodeObject)
4786 {
4787 if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
4788 {
4789 ret = pCryptEncodeObject(dwCertEncodingType, lpszStructType,
4790 pvStructInfo, NULL, pcbEncoded);
4791 if (ret && (ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara,
4792 pvEncoded, pcbEncoded, *pcbEncoded)))
4793 ret = pCryptEncodeObject(dwCertEncodingType,
4794 lpszStructType, pvStructInfo, *(BYTE **)pvEncoded,
4795 pcbEncoded);
4796 }
4797 else
4798 ret = pCryptEncodeObject(dwCertEncodingType, lpszStructType,
4799 pvStructInfo, pvEncoded, pcbEncoded);
4800 }
4801 }
4802 if (hFunc)
4803 CryptFreeOIDFunctionAddress(hFunc, 0);
4804 TRACE_(crypt)("returning %d\n", ret);
4805 return ret;
4806 }
4807
4808 BOOL WINAPI CryptExportPublicKeyInfo(HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProv, DWORD dwKeySpec,
4809 DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, DWORD *pcbInfo)
4810 {
4811 return CryptExportPublicKeyInfoEx(hCryptProv, dwKeySpec, dwCertEncodingType,
4812 NULL, 0, NULL, pInfo, pcbInfo);
4813 }
4814
4815 typedef BOOL (WINAPI *EncodePublicKeyAndParametersFunc)(DWORD dwCertEncodingType,
4816 LPSTR pszPublicKeyObjId, BYTE *pbPubKey, DWORD cbPubKey, DWORD dwFlags, void *pvAuxInfo,
4817 BYTE **ppPublicKey, DWORD *pcbPublicKey, BYTE **ppbParams, DWORD *pcbParams);
4818
4819 static BOOL WINAPI CRYPT_ExportPublicKeyInfoEx(HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProv,
4820 DWORD dwKeySpec, DWORD dwCertEncodingType, LPSTR pszPublicKeyObjId,
4821 DWORD dwFlags, void *pvAuxInfo, PCERT_PUBLIC_KEY_INFO pInfo, DWORD *pcbInfo)
4822 {
4823 BOOL ret;
4824 HCRYPTKEY key;
4825 static CHAR rsa_oid[] = szOID_RSA_RSA;
4826
4827 TRACE_(crypt)("(%08lx, %d, %08x, %s, %08x, %p, %p, %d)\n", hCryptProv,
4828 dwKeySpec, dwCertEncodingType, debugstr_a(pszPublicKeyObjId), dwFlags,
4829 pvAuxInfo, pInfo, pInfo ? *pcbInfo : 0);
4830
4831 if ((ret = CryptGetUserKey(hCryptProv, dwKeySpec, &key)))
4832 {
4833 DWORD keySize = 0;
4834
4835 ret = CryptExportKey(key, 0, PUBLICKEYBLOB, 0, NULL, &keySize);
4836 if (ret)
4837 {
4838 PUBLICKEYSTRUC *pubKey = CryptMemAlloc(keySize);
4839
4840 if (pubKey)
4841 {
4842 ret = CryptExportKey(key, 0, PUBLICKEYBLOB, 0, (BYTE *)pubKey, &keySize);
4843 if (ret)
4844 {
4845 DWORD encodedLen;
4846
4847 if (!pszPublicKeyObjId)
4848 {
4849 static HCRYPTOIDFUNCSET set;
4850 EncodePublicKeyAndParametersFunc encodeFunc = NULL;
4851 HCRYPTOIDFUNCADDR hFunc = NULL;
4852
4853 pszPublicKeyObjId = (LPSTR)CertAlgIdToOID(pubKey->aiKeyAlg);
4854 TRACE("public key algid %#x (%s)\n", pubKey->aiKeyAlg, debugstr_a(pszPublicKeyObjId));
4855
4856 if (!set) /* FIXME: there is no a public macro */
4857 set = CryptInitOIDFunctionSet("CryptDllEncodePublicKeyAndParameters", 0);
4858
4859 CryptGetOIDFunctionAddress(set, dwCertEncodingType, pszPublicKeyObjId, 0, (void **)&encodeFunc, &hFunc);
4860 if (encodeFunc)
4861 {
4862 BYTE *key_data = NULL;
4863 DWORD key_size = 0;
4864 BYTE *params = NULL;
4865 DWORD params_size = 0;
4866
4867 ret = encodeFunc(dwCertEncodingType, pszPublicKeyObjId, (BYTE *)pubKey, keySize,
4868 dwFlags, pvAuxInfo, &key_data, &key_size, &params, &params_size);
4869 if (ret)
4870 {
4871 DWORD oid_size = strlen(pszPublicKeyObjId) + 1;
4872 DWORD size_needed = sizeof(*pInfo) + oid_size + key_size + params_size;
4873
4874 if (!pInfo)
4875 *pcbInfo = size_needed;
4876 else if (*pcbInfo < size_needed)
4877 {
4878 *pcbInfo = size_needed;
4879 SetLastError(ERROR_MORE_DATA);
4880 ret = FALSE;
4881 }
4882 else
4883 {
4884 *pcbInfo = size_needed;
4885 pInfo->Algorithm.pszObjId = (char *)(pInfo + 1);
4886 lstrcpyA(pInfo->Algorithm.pszObjId, pszPublicKeyObjId);
4887 if (params)
4888 {
4889 pInfo->Algorithm.Parameters.cbData = params_size;
4890 pInfo->Algorithm.Parameters.pbData = (BYTE *)pInfo->Algorithm.pszObjId + oid_size;
4891 memcpy(pInfo->Algorithm.Parameters.pbData, params, params_size);
4892 }
4893 else
4894 {
4895 pInfo->Algorithm.Parameters.cbData = 0;
4896 pInfo->Algorithm.Parameters.pbData = NULL;
4897 }
4898 pInfo->PublicKey.pbData = (BYTE *)pInfo->Algorithm.pszObjId + oid_size + params_size;
4899 pInfo->PublicKey.cbData = key_size;
4900 memcpy(pInfo->PublicKey.pbData, key_data, key_size);
4901 pInfo->PublicKey.cUnusedBits = 0;
4902 }
4903
4904 CryptMemFree(key_data);
4905 CryptMemFree(params);
4906 }
4907
4908 CryptMemFree(pubKey);
4909 CryptFreeOIDFunctionAddress(hFunc, 0);
4910 return ret;
4911 }
4912
4913 /* fallback to RSA */
4914 pszPublicKeyObjId = rsa_oid;
4915 }
4916
4917 encodedLen = 0;
4918 ret = CryptEncodeObject(dwCertEncodingType,
4919 RSA_CSP_PUBLICKEYBLOB, pubKey, NULL, &encodedLen);
4920 if (ret)
4921 {
4922 DWORD sizeNeeded = sizeof(CERT_PUBLIC_KEY_INFO) +
4923 strlen(pszPublicKeyObjId) + 1 + encodedLen;
4924
4925 if (!pInfo)
4926 *pcbInfo = sizeNeeded;
4927 else if (*pcbInfo < sizeNeeded)
4928 {
4929 SetLastError(ERROR_MORE_DATA);
4930 *pcbInfo = sizeNeeded;
4931 ret = FALSE;
4932 }
4933 else
4934 {
4935 *pcbInfo = sizeNeeded;
4936 pInfo->Algorithm.pszObjId = (char *)pInfo +
4937 sizeof(CERT_PUBLIC_KEY_INFO);
4938 lstrcpyA(pInfo->Algorithm.pszObjId,
4939 pszPublicKeyObjId);
4940 pInfo->Algorithm.Parameters.cbData = 0;
4941 pInfo->Algorithm.Parameters.pbData = NULL;
4942 pInfo->PublicKey.pbData =
4943 (BYTE *)pInfo->Algorithm.pszObjId
4944 + lstrlenA(pInfo->Algorithm.pszObjId) + 1;
4945 pInfo->PublicKey.cbData = encodedLen;
4946 pInfo->PublicKey.cUnusedBits = 0;
4947 ret = CryptEncodeObject(dwCertEncodingType,
4948 RSA_CSP_PUBLICKEYBLOB, pubKey,
4949 pInfo->PublicKey.pbData, &pInfo->PublicKey.cbData);
4950 }
4951 }
4952 }
4953 CryptMemFree(pubKey);
4954 }
4955 else
4956 ret = FALSE;
4957 }
4958 CryptDestroyKey(key);
4959 }
4960 return ret;
4961 }
4962
4963 typedef BOOL (WINAPI *ExportPublicKeyInfoExFunc)(HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProv,
4964 DWORD dwKeySpec, DWORD dwCertEncodingType, LPSTR pszPublicKeyObjId,
4965 DWORD dwFlags, void *pvAuxInfo, PCERT_PUBLIC_KEY_INFO pInfo, DWORD *pcbInfo);
4966
4967 BOOL WINAPI CryptExportPublicKeyInfoEx(HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProv, DWORD dwKeySpec,
4968 DWORD dwCertEncodingType, LPSTR pszPublicKeyObjId, DWORD dwFlags,
4969 void *pvAuxInfo, PCERT_PUBLIC_KEY_INFO pInfo, DWORD *pcbInfo)
4970 {
4971 static HCRYPTOIDFUNCSET set = NULL;
4972 BOOL ret;
4973 ExportPublicKeyInfoExFunc exportFunc = NULL;
4974 HCRYPTOIDFUNCADDR hFunc = NULL;
4975
4976 TRACE_(crypt)("(%08lx, %d, %08x, %s, %08x, %p, %p, %d)\n", hCryptProv,
4977 dwKeySpec, dwCertEncodingType, debugstr_a(pszPublicKeyObjId), dwFlags,
4978 pvAuxInfo, pInfo, pInfo ? *pcbInfo : 0);
4979
4980 if (!hCryptProv)
4981 {
4982 SetLastError(ERROR_INVALID_PARAMETER);
4983 return FALSE;
4984 }
4985
4986 if (pszPublicKeyObjId)
4987 {
4988 if (!set)
4989 set = CryptInitOIDFunctionSet(CRYPT_OID_EXPORT_PUBLIC_KEY_INFO_FUNC,
4990 0);
4991 CryptGetOIDFunctionAddress(set, dwCertEncodingType, pszPublicKeyObjId,
4992 0, (void **)&exportFunc, &hFunc);
4993 }
4994 if (!exportFunc)
4995 exportFunc = CRYPT_ExportPublicKeyInfoEx;
4996 ret = exportFunc(hCryptProv, dwKeySpec, dwCertEncodingType,
4997 pszPublicKeyObjId, dwFlags, pvAuxInfo, pInfo, pcbInfo);
4998 if (hFunc)
4999 CryptFreeOIDFunctionAddress(hFunc, 0);
5000 return ret;
5001 }
5002
5003 BOOL WINAPI CryptImportPublicKeyInfo(HCRYPTPROV hCryptProv,
5004 DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, HCRYPTKEY *phKey)
5005 {
5006 return CryptImportPublicKeyInfoEx(hCryptProv, dwCertEncodingType, pInfo,
5007 0, 0, NULL, phKey);
5008 }
5009
5010 typedef BOOL (WINAPI *ConvertPublicKeyInfoFunc)(DWORD dwCertEncodingType,
5011 PCERT_PUBLIC_KEY_INFO pInfo, ALG_ID aiKeyAlg, DWORD dwFlags,
5012 BYTE **ppbData, DWORD *dwDataLen);
5013
5014 static BOOL WINAPI CRYPT_ImportPublicKeyInfoEx(HCRYPTPROV hCryptProv,
5015 DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, ALG_ID aiKeyAlg,
5016 DWORD dwFlags, void *pvAuxInfo, HCRYPTKEY *phKey)
5017 {
5018 static HCRYPTOIDFUNCSET set = NULL;
5019 ConvertPublicKeyInfoFunc convertFunc = NULL;
5020 HCRYPTOIDFUNCADDR hFunc = NULL;
5021 BOOL ret;
5022 DWORD pubKeySize;
5023 LPBYTE pubKey;
5024
5025 TRACE_(crypt)("(%08lx, %08x, %p, %08x, %08x, %p, %p)\n", hCryptProv,
5026 dwCertEncodingType, pInfo, aiKeyAlg, dwFlags, pvAuxInfo, phKey);
5027
5028 if (!set)
5029 set = CryptInitOIDFunctionSet(CRYPT_OID_CONVERT_PUBLIC_KEY_INFO_FUNC, 0);
5030 CryptGetOIDFunctionAddress(set, dwCertEncodingType, pInfo->Algorithm.pszObjId,
5031 0, (void **)&convertFunc, &hFunc);
5032 if (convertFunc)
5033 {
5034 pubKey = NULL;
5035 pubKeySize = 0;
5036 ret = convertFunc(dwCertEncodingType, pInfo, aiKeyAlg, dwFlags, &pubKey, &pubKeySize);
5037 if (ret)
5038 {
5039 ret = CryptImportKey(hCryptProv, pubKey, pubKeySize, 0, 0, phKey);
5040 CryptMemFree(pubKey);
5041 }
5042
5043 CryptFreeOIDFunctionAddress(hFunc, 0);
5044 return ret;
5045 }
5046
5047 ret = CryptDecodeObject(dwCertEncodingType, RSA_CSP_PUBLICKEYBLOB,
5048 pInfo->PublicKey.pbData, pInfo->PublicKey.cbData, 0, NULL, &pubKeySize);
5049 if (ret)
5050 {
5051 pubKey = CryptMemAlloc(pubKeySize);
5052
5053 if (pubKey)
5054 {
5055 ret = CryptDecodeObject(dwCertEncodingType, RSA_CSP_PUBLICKEYBLOB,
5056 pInfo->PublicKey.pbData, pInfo->PublicKey.cbData, 0, pubKey,
5057 &pubKeySize);
5058 if (ret)
5059 {
5060 if(aiKeyAlg)
5061 ((BLOBHEADER*)pubKey)->aiKeyAlg = aiKeyAlg;
5062 ret = CryptImportKey(hCryptProv, pubKey, pubKeySize, 0, 0,
5063 phKey);
5064 }
5065 CryptMemFree(pubKey);
5066 }
5067 else
5068 ret = FALSE;
5069 }
5070 return ret;
5071 }
5072
5073 typedef BOOL (WINAPI *ImportPublicKeyInfoExFunc)(HCRYPTPROV hCryptProv,
5074 DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, ALG_ID aiKeyAlg,
5075 DWORD dwFlags, void *pvAuxInfo, HCRYPTKEY *phKey);
5076
5077 BOOL WINAPI CryptImportPublicKeyInfoEx(HCRYPTPROV hCryptProv,
5078 DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, ALG_ID aiKeyAlg,
5079 DWORD dwFlags, void *pvAuxInfo, HCRYPTKEY *phKey)
5080 {
5081 static HCRYPTOIDFUNCSET set = NULL;
5082 BOOL ret;
5083 ImportPublicKeyInfoExFunc importFunc = NULL;
5084 HCRYPTOIDFUNCADDR hFunc = NULL;
5085
5086 TRACE_(crypt)("(%08lx, %08x, %p, %08x, %08x, %p, %p)\n", hCryptProv,
5087 dwCertEncodingType, pInfo, aiKeyAlg, dwFlags, pvAuxInfo, phKey);
5088
5089 if (!set)
5090 set = CryptInitOIDFunctionSet(CRYPT_OID_IMPORT_PUBLIC_KEY_INFO_FUNC, 0);
5091 CryptGetOIDFunctionAddress(set, dwCertEncodingType,
5092 pInfo->Algorithm.pszObjId, 0, (void **)&importFunc, &hFunc);
5093 if (!importFunc)
5094 importFunc = CRYPT_ImportPublicKeyInfoEx;
5095 ret = importFunc(hCryptProv, dwCertEncodingType, pInfo, aiKeyAlg, dwFlags,
5096 pvAuxInfo, phKey);
5097 if (hFunc)
5098 CryptFreeOIDFunctionAddress(hFunc, 0);
5099 return ret;
5100 }
5101
5102 BOOL WINAPI CryptImportPublicKeyInfoEx2(DWORD dwCertEncodingType,
5103 PCERT_PUBLIC_KEY_INFO pInfo, DWORD dwFlags, void *pvAuxInfo,
5104 BCRYPT_KEY_HANDLE *phKey)
5105 {
5106 TRACE_(crypt)("(%d, %p, %08x, %p, %p)\n", dwCertEncodingType, pInfo,
5107 dwFlags, pvAuxInfo, phKey);
5108
5109 if (dwFlags)
5110 FIXME("flags %#x ignored\n", dwFlags);
5111
5112 return CNG_ImportPubKey(pInfo, phKey);
5113 }
Windows API implementation