#include <cvc_cert.h>

Inheritance diagram for Botan::EAC1_1_CVC:

Public Member Functions
SecureVector< byte >	BER_encode () const
bool	check_signature (class Public_Key &key) const
bool	check_signature (class Public_Key &key, const MemoryRegion< byte > &sig) const
	EAC1_1_CVC (const std::string &str)
	EAC1_1_CVC (DataSource &source)
void	encode (Pipe &out, X509_Encoding encoding) const
ASN1_Car	get_car () const
ASN1_Ced	get_ced () const
ASN1_Cex	get_cex () const
u32bit	get_chat_value () const
ASN1_Chr	get_chr () const
SecureVector< byte >	get_concat_sig () const
bool	is_self_signed () const
bool	operator== (const EAC1_1_CVC &) const
std::string	PEM_encode () const
AlgorithmIdentifier	signature_algorithm () const
Public_Key *	subject_public_key () const
SecureVector< byte >	tbs_data () const
virtual	~EAC1_1_CVC ()

Static Public Member Functions
static SecureVector< byte >	build_cert_body (MemoryRegion< byte > const &tbs)
static MemoryVector< byte >	make_signed (PK_Signer &signer, const MemoryRegion< byte > &tbs_bits, RandomNumberGenerator &rng)

Protected Member Functions
void	do_decode ()
void	init (DataSource &in)

Static Protected Member Functions
static void	decode_info (DataSource &source, SecureVector< byte > &res_tbs_bits, ECDSA_Signature &res_sig)

Protected Attributes
ASN1_Chr	m_chr
ECDSA_PublicKey *	m_pk
ECDSA_Signature	m_sig
std::string	PEM_label_pref
std::vector< std::string >	PEM_labels_allowed
bool	self_signed
AlgorithmIdentifier	sig_algo
SecureVector< byte >	tbs_bits

Friends
class	EAC1_1_obj< EAC1_1_CVC >

Detailed Description

This class represents TR03110 (EAC) v1.1 CV Certificates

Definition at line 21 of file cvc_cert.h.

Constructor & Destructor Documentation

◆ EAC1_1_CVC() [1/2]

Botan::EAC1_1_CVC::EAC1_1_CVC ( DataSource & source )

Construct a CVC from a data source

Parameters

source the data source

Definition at line 70 of file cvc_cert.cpp.

   {
   init(in);
   self_signed = false;
   do_decode();
   }

References Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::do_decode(), Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::init(), and Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::self_signed.

Referenced by Botan::make_cvc_cert(), and operator==().

◆ EAC1_1_CVC() [2/2]

Botan::EAC1_1_CVC::EAC1_1_CVC ( const std::string & str )

Construct a CVC from a file

Parameters

str	the path to the certificate file

Definition at line 77 of file cvc_cert.cpp.

   {
   DataSource_Stream stream(in, true);
   init(stream);
   self_signed = false;
   do_decode();
   }

References Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::do_decode(), Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::init(), and Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::self_signed.

◆ ~EAC1_1_CVC()

virtual Botan::EAC1_1_CVC::~EAC1_1_CVC ( )

inlinevirtual

Definition at line 64 of file cvc_cert.h.

64{}

Member Function Documentation

◆ BER_encode()

SecureVector< byte > Botan::EAC_Signed_Object::BER_encode ( ) const

inherited

BER encode this object.

Returns: result containing the BER representation of this object.

Definition at line 19 of file signed_obj.cpp.

   {
   Pipe ber;
   ber.start_msg();
   encode(ber, RAW_BER);
   ber.end_msg();
   return ber.read_all();
   }

References encode(), Botan::Pipe::end_msg(), Botan::RAW_BER, Botan::Pipe::read_all(), and Botan::Pipe::start_msg().

Referenced by Botan::CVC_EAC::create_ado_req(), and encode().

◆ build_cert_body()

SecureVector< byte > Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::build_cert_body ( MemoryRegion< byte > const & tbs )

staticinherited

Build the DER encoded certifcate body of an object

Parameters

tbs	the data to be signed

Returns: the correctly encoded body of the object

Definition at line 66 of file cvc_gen_cert.h.

   {
   return DER_Encoder()
      .start_cons(ASN1_Tag(78), APPLICATION)
      .raw_bytes(tbs)
      .end_cons().get_contents();
   }

Referenced by Botan::make_cvc_cert().

◆ check_signature() [1/2]

bool Botan::EAC1_1_obj< EAC1_1_CVC >::check_signature ( class Public_Key & key ) const

inlineinherited

Definition at line 30 of file eac_obj.h.

         {
         return EAC_Signed_Object::check_signature(key, m_sig.DER_encode());
         }

◆ check_signature() [2/2]

bool Botan::EAC_Signed_Object::check_signature	(	class Public_Key &	key,
		const MemoryRegion< byte > &	sig ) const

inherited

Check the signature of this object.

Parameters

key	the public key associated with this signed object
sig	the signature we are checking

Returns: true if the signature was created by the private key associated with this public key

Definition at line 48 of file signed_obj.cpp.

   {
   try
      {
      std::vector<std::string> sig_info =
         split_on(OIDS::lookup(sig_algo.oid), '/');
 
      if(sig_info.size() != 2 || sig_info[0] != pub_key.algo_name())
         {
         return false;
         }
 
      std::string padding = sig_info[1];
      Signature_Format format =
         (pub_key.message_parts() >= 2) ? DER_SEQUENCE : IEEE_1363;
 
      SecureVector<byte> to_sign = tbs_data();
 
      PK_Verifier verifier(pub_key, padding, format);
      return verifier.verify_message(to_sign, sig);
      }
   catch(...)
      {
      return false;
      }
   }

References Botan::Public_Key::algo_name(), Botan::OIDS::lookup(), Botan::AlgorithmIdentifier::oid, sig_algo, and Botan::split_on().

Referenced by Botan::EAC1_1_obj< Derived >::check_signature(), and get_concat_sig().

◆ decode_info()

void Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::decode_info	(	DataSource &	source,
		SecureVector< byte > &	res_tbs_bits,
		ECDSA_Signature &	res_sig )

staticprotectedinherited

Definition at line 90 of file cvc_gen_cert.h.

   {
   SecureVector<byte> concat_sig;
   BER_Decoder(source)
      .start_cons(ASN1_Tag(33))
      .start_cons(ASN1_Tag(78))
      .raw_bytes(res_tbs_bits)
      .end_cons()
      .decode(concat_sig, OCTET_STRING, ASN1_Tag(55), APPLICATION)
      .end_cons();
   res_sig = decode_concatenation(concat_sig);
   }

◆ do_decode()

void Botan::EAC_Signed_Object::do_decode ( )

protectedinherited

Definition at line 79 of file signed_obj.cpp.

   {
   try {
      force_decode();
   }
   catch(Decoding_Error& e)
      {
      const std::string what = e.what();
      throw Decoding_Error(PEM_label_pref + " decoding failed (" + what + ")");
      }
   catch(Invalid_Argument& e)
      {
      const std::string what = e.what();
      throw Decoding_Error(PEM_label_pref + " decoding failed (" + what + ")");
      }
   }

◆ encode()

void Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::encode	(	Pipe &	out,
		X509_Encoding	encoding ) const

virtualinherited

Put the DER encoded version of this object into a pipe. PEM is not supported.

Parameters

out	the pipe to push the DER encoded version into
encoding	the encoding to use. Must be DER.

Implements Botan::EAC_Signed_Object.

Definition at line 53 of file cvc_gen_cert.h.

   {
   SecureVector<byte> concat_sig(EAC1_1_obj<Derived>::m_sig.get_concatenation());
   SecureVector<byte> der = DER_Encoder()
      .start_cons(ASN1_Tag(33), APPLICATION)
      .start_cons(ASN1_Tag(78), APPLICATION)
      .raw_bytes(EAC1_1_obj<Derived>::tbs_bits)
      .end_cons()
      .encode(concat_sig, OCTET_STRING, ASN1_Tag(55), APPLICATION)
      .end_cons()
      .get_contents();
 
   if (encoding == PEM)
      throw Invalid_Argument("EAC1_1_gen_CVC::encode() cannot PEM encode an EAC object");
   else
      out.write(der);
   }

◆ get_car()

ASN1_Car Botan::EAC1_1_CVC::get_car ( ) const

Get the CAR of the certificate.

Returns: the CAR of the certificate

Definition at line 13 of file cvc_cert.cpp.

   {
   return m_car;
   }

Referenced by Botan::DE_EAC::link_cvca().

◆ get_ced()

ASN1_Ced Botan::EAC1_1_CVC::get_ced ( ) const

Get the CED of this certificate.

Returns: the CED this certificate

Definition at line 18 of file cvc_cert.cpp.

   {
   return m_ced;
   }

◆ get_cex()

ASN1_Cex Botan::EAC1_1_CVC::get_cex ( ) const

Get the CEX of this certificate.

Returns: the CEX this certificate

Definition at line 22 of file cvc_cert.cpp.

   {
   return m_cex;
   }

Referenced by Botan::DE_EAC::link_cvca().

◆ get_chat_value()

u32bit Botan::EAC1_1_CVC::get_chat_value ( ) const

Get the CHAT value.

Returns: the CHAT value

Definition at line 26 of file cvc_cert.cpp.

   {
   return m_chat_val;
   }

Referenced by Botan::DE_EAC::link_cvca(), and Botan::DE_EAC::sign_request().

◆ get_chr()

ASN1_Chr Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::get_chr ( ) const

inherited

Get the CHR of the certificate.

Returns: the CHR of the certificate

Definition at line 45 of file cvc_gen_cert.h.

   {
   return m_chr;
   }

◆ get_concat_sig()

SecureVector< byte > Botan::EAC1_1_obj< EAC1_1_CVC >::get_concat_sig ( ) const

inlinevirtualinherited

Return the signature as a concatenation of the encoded parts.

Returns: the concatenated signature

Implements Botan::EAC_Signed_Object.

Definition at line 27 of file eac_obj.h.

28 { return m_sig.get_concatenation(); }

◆ init()

void Botan::EAC1_1_obj< EAC1_1_CVC >::init ( DataSource & in )

inlineprotectedinherited

Definition at line 38 of file eac_obj.h.

         {
         try
            {
            Derived::decode_info(in, tbs_bits, m_sig);
            }
         catch(Decoding_Error)
            {
            throw Decoding_Error(PEM_label_pref + " decoding failed");
            }
         }

◆ is_self_signed()

bool Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::is_self_signed ( ) const

inherited

Find out whether this object is self signed.

Returns: true if this object is self signed

Definition at line 39 of file cvc_gen_cert.h.

   {
   return self_signed;
   }

◆ make_signed()

MemoryVector< byte > Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::make_signed	(	PK_Signer &	signer,
		const MemoryRegion< byte > &	tbs_bits,
		RandomNumberGenerator &	rng )

staticinherited

Create a signed generalized CVC object.

Parameters

signer	the signer used to sign this object
tbs_bits	the body the generalized CVC object to be signed
rng	a random number generator

Returns: the DER encoded signed generalized CVC object

Definition at line 75 of file cvc_gen_cert.h.

   {
   SecureVector<byte> concat_sig = signer.sign_message(tbs_bits, rng);
 
   return DER_Encoder()
      .start_cons(ASN1_Tag(33), APPLICATION)
      .raw_bytes(tbs_bits)
      .encode(concat_sig, OCTET_STRING, ASN1_Tag(55), APPLICATION)
      .end_cons()
      .get_contents();
   }

References tbs_bits.

Referenced by Botan::make_cvc_cert().

◆ operator==()

bool Botan::EAC1_1_CVC::operator== ( const EAC1_1_CVC & rhs ) const

Definition at line 85 of file cvc_cert.cpp.

   {
   return (tbs_data() == rhs.tbs_data()
           && get_concat_sig() == rhs.get_concat_sig());
   }

References EAC1_1_CVC(), Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::get_concat_sig(), Botan::EAC1_1_obj< Derived >::get_concat_sig(), Botan::EAC1_1_gen_CVC< Derived >::tbs_data(), and Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::tbs_data().

◆ PEM_encode()

std::string Botan::EAC_Signed_Object::PEM_encode ( ) const

inherited

PEM encode this object.

Returns: result containing the PEM representation of this object.

Definition at line 31 of file signed_obj.cpp.

   {
   Pipe pem;
   pem.start_msg();
   encode(pem, PEM);
   pem.end_msg();
   return pem.read_all_as_string();
   }

References encode(), Botan::Pipe::end_msg(), Botan::PEM, Botan::Pipe::read_all_as_string(), and Botan::Pipe::start_msg().

Referenced by encode().

◆ signature_algorithm()

AlgorithmIdentifier Botan::EAC_Signed_Object::signature_algorithm ( ) const

inherited

Get the signature algorithm identifier used to sign this object.

Returns: the signature algorithm identifier

Definition at line 43 of file signed_obj.cpp.

   {
   return sig_algo;
   }

References sig_algo.

Referenced by Botan::CVC_EAC::create_ado_req(), get_concat_sig(), Botan::DE_EAC::link_cvca(), and Botan::DE_EAC::sign_request().

◆ subject_public_key()

Public_Key * Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::subject_public_key ( ) const

inherited

Get this certificates public key.

Returns: this certificates public key

Definition at line 33 of file cvc_gen_cert.h.

   {
   return new ECDSA_PublicKey(*m_pk);
   }

◆ tbs_data()

SecureVector< byte > Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::tbs_data ( ) const

virtualinherited

Get the to-be-signed (TBS) data of this object.

Returns: the TBS data of this object

Implements Botan::EAC_Signed_Object.

Definition at line 59 of file cvc_gen_cert.h.

   {
   return build_cert_body(EAC1_1_obj<Derived>::tbs_bits);
   }

Referenced by Botan::EAC1_1_CVC::operator==().

◆ EAC1_1_obj< EAC1_1_CVC >

friend class EAC1_1_obj< EAC1_1_CVC >

friend

Definition at line 110 of file cvc_cert.h.

References Botan::decode_eac1_1_key(), and Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::sig_algo.

Member Data Documentation

◆ m_chr

ASN1_Chr Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::m_chr

protectedinherited

Definition at line 87 of file cvc_gen_cert.h.

◆ m_pk

ECDSA_PublicKey* Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::m_pk

protectedinherited

Definition at line 86 of file cvc_gen_cert.h.

◆ m_sig

ECDSA_Signature Botan::EAC1_1_obj< EAC1_1_CVC >::m_sig

protectedinherited

Definition at line 36 of file eac_obj.h.

◆ PEM_label_pref

std::string Botan::EAC_Signed_Object::PEM_label_pref

protectedinherited

Definition at line 87 of file signed_obj.h.

Referenced by Botan::EAC1_1_obj< Derived >::init().

◆ PEM_labels_allowed

std::vector<std::string> Botan::EAC_Signed_Object::PEM_labels_allowed

protectedinherited

Definition at line 88 of file signed_obj.h.

◆ self_signed

bool Botan::EAC1_1_gen_CVC< EAC1_1_CVC >::self_signed

protectedinherited

Definition at line 88 of file cvc_gen_cert.h.

Referenced by Botan::EAC1_1_CVC::EAC1_1_CVC(), and Botan::EAC1_1_CVC::EAC1_1_CVC().

◆ sig_algo

AlgorithmIdentifier Botan::EAC_Signed_Object::sig_algo

protectedinherited

Definition at line 85 of file signed_obj.h.

Referenced by check_signature(), and signature_algorithm().

◆ tbs_bits

SecureVector<byte> Botan::EAC_Signed_Object::tbs_bits

protectedinherited

Definition at line 86 of file signed_obj.h.

Referenced by Botan::EAC1_1_gen_CVC< Derived >::encode(), Botan::EAC1_1_obj< Derived >::init(), Botan::EAC1_1_gen_CVC< Derived >::make_signed(), and Botan::EAC1_1_gen_CVC< Derived >::tbs_data().

The documentation for this class was generated from the following files:

src/cert/cvc/cvc_cert.h
src/cert/cvc/cvc_cert.cpp

Public Member Functions

Static Public Member Functions

Protected Member Functions

Static Protected Member Functions

Protected Attributes

Friends

Detailed Description

Constructor & Destructor Documentation

◆ EAC1_1_CVC() [1/2]

◆ EAC1_1_CVC() [2/2]

◆ ~EAC1_1_CVC()

Member Function Documentation

◆ BER_encode()

◆ build_cert_body()

◆ check_signature() [1/2]

◆ check_signature() [2/2]

◆ decode_info()

◆ do_decode()

◆ encode()

◆ get_car()

◆ get_ced()

◆ get_cex()

◆ get_chat_value()

◆ get_chr()

◆ get_concat_sig()

◆ init()

◆ is_self_signed()

◆ make_signed()

◆ operator==()

◆ PEM_encode()

◆ signature_algorithm()

◆ subject_public_key()

◆ tbs_data()

Friends And Related Symbol Documentation

◆ EAC1_1_obj< EAC1_1_CVC >

Member Data Documentation

◆ m_chr

◆ m_pk

◆ m_sig

◆ PEM_label_pref

◆ PEM_labels_allowed

◆ self_signed

◆ sig_algo

◆ tbs_bits