Botan::CVC_EAC Namespace Reference

Functions
EAC1_1_ADO	create_ado_req (Private_Key const &key, EAC1_1_Req const &req, ASN1_Car const &car, RandomNumberGenerator &rng)
EAC1_1_Req	create_cvc_req (Private_Key const &key, ASN1_Chr const &chr, std::string const &hash_alg, RandomNumberGenerator &rng)
EAC1_1_CVC	create_self_signed_cert (Private_Key const &key, EAC1_1_CVC_Options const &opt, RandomNumberGenerator &rng)

Detailed Description

This namespace represents general EAC 1.1 convenience functions.

Function Documentation

create_ado_req()

EAC1_1_ADO BOTAN_DLL Botan::CVC_EAC::create_ado_req	(	Private_Key const &	priv_key,
		EAC1_1_Req const &	req,
		ASN1_Car const &	car,
		RandomNumberGenerator &	rng )

Create an ADO from a request object.

Parameters

priv_key	the private key used to sign the ADO
req	the request forming the body of the ADO
car	the CAR forming the body of the ADO, i.e. the CHR of the entity associated with the provided private key
rng	the rng to use

Definition at line 156 of file cvc_self.cpp.

   {
 
   ECDSA_PrivateKey const* priv_key = dynamic_cast<ECDSA_PrivateKey const*>(&key);
   if (priv_key == 0)
      {
      throw Invalid_Argument("CVC_EAC::create_self_signed_cert(): unsupported key type");
      }
   std::string padding_and_hash = padding_and_hash_from_oid(req.signature_algorithm().oid);
   PK_Signer signer(*priv_key, padding_and_hash);
   SecureVector<byte> tbs_bits = req.BER_encode();
   tbs_bits += DER_Encoder().encode(car).get_contents();
 
   MemoryVector<byte> signed_cert =
      EAC1_1_ADO::make_signed(signer, tbs_bits, rng);
 
   DataSource_Memory source(signed_cert);
   return EAC1_1_ADO(source);
   }

References Botan::EAC_Signed_Object::BER_encode(), create_ado_req(), Botan::EAC1_1_ADO::EAC1_1_ADO(), Botan::DER_Encoder::encode(), Botan::DER_Encoder::get_contents(), Botan::EAC1_1_ADO::make_signed(), Botan::AlgorithmIdentifier::oid, and Botan::EAC_Signed_Object::signature_algorithm().

Referenced by create_ado_req().

create_cvc_req()

EAC1_1_Req BOTAN_DLL Botan::CVC_EAC::create_cvc_req	(	Private_Key const &	priv_key,
		ASN1_Chr const &	chr,
		std::string const &	hash_alg,
		RandomNumberGenerator &	rng )

Create a CVC request. The key encoding will be according to the provided private key.

Parameters

priv_key	the private key associated with the requesting entity
chr	the chr to appear in the certificate (to be provided without sequence number)
hash_alg	the string defining the hash algorithm to be used for the creation of the signature
rng	the rng to use

Returns

the new request

Definition at line 119 of file cvc_self.cpp.

   {
 
   ECDSA_PrivateKey const* priv_key = dynamic_cast<ECDSA_PrivateKey const*>(&key);
   if (priv_key == 0)
      {
      throw Invalid_Argument("CVC_EAC::create_self_signed_cert(): unsupported key type");
      }
   AlgorithmIdentifier sig_algo;
   std::string padding_and_hash("EMSA1_BSI(" + hash_alg + ")");
   sig_algo.oid = OIDS::lookup(priv_key->algo_name() + "/" + padding_and_hash);
   sig_algo = AlgorithmIdentifier(sig_algo.oid, AlgorithmIdentifier::USE_NULL_PARAM);
 
   PK_Signer signer(*priv_key, padding_and_hash);
 
   MemoryVector<byte> enc_public_key = eac_1_1_encoding(priv_key, sig_algo.oid);
 
   MemoryVector<byte> enc_cpi;
   enc_cpi.push_back(0x00);
   MemoryVector<byte> tbs = DER_Encoder()
      .encode(enc_cpi, OCTET_STRING, ASN1_Tag(41), APPLICATION)
      .raw_bytes(enc_public_key)
      .encode(chr)
      .get_contents();
 
   MemoryVector<byte> signed_cert =
      EAC1_1_gen_CVC<EAC1_1_Req>::make_signed(signer,
                                              EAC1_1_gen_CVC<EAC1_1_Req>::build_cert_body(tbs),
                                              rng);
 
   DataSource_Memory source(signed_cert);
   return EAC1_1_Req(source);
   }

References Botan::ECDSA_PublicKey::algo_name(), Botan::AlgorithmIdentifier::AlgorithmIdentifier(), Botan::APPLICATION, Botan::EAC1_1_gen_CVC< Derived >::build_cert_body(), create_cvc_req(), Botan::EAC1_1_Req::EAC1_1_Req(), Botan::DER_Encoder::encode(), Botan::DER_Encoder::get_contents(), Botan::OIDS::lookup(), Botan::EAC1_1_gen_CVC< Derived >::make_signed(), Botan::OCTET_STRING, Botan::AlgorithmIdentifier::oid, Botan::MemoryRegion< T >::push_back(), Botan::DER_Encoder::raw_bytes(), and Botan::AlgorithmIdentifier::USE_NULL_PARAM.

Referenced by create_cvc_req(), and Botan::DE_EAC::create_cvc_req().

create_self_signed_cert()

EAC1_1_CVC BOTAN_DLL Botan::CVC_EAC::create_self_signed_cert	(	Private_Key const &	key,
		EAC1_1_CVC_Options const &	opts,
		RandomNumberGenerator &	rng )

Create a selfsigned CVCA

Parameters

rng	the rng to use
key	the ECDSA private key to be used to sign the certificate
opts	used to set several parameters. Necessary are: car, holder_auth_templ, hash_alg, ced, cex and hash_alg

Returns

the self signed certificate

Definition at line 90 of file cvc_self.cpp.

   {
   // NOTE: we ignore the value of opt.chr
 
   const ECDSA_PrivateKey* priv_key = dynamic_cast<const ECDSA_PrivateKey*>(&key);
 
   if(priv_key == 0)
      throw Invalid_Argument("CVC_EAC::create_self_signed_cert(): unsupported key type");
 
   ASN1_Chr chr(opt.car.value());
 
   AlgorithmIdentifier sig_algo;
   std::string padding_and_hash("EMSA1_BSI(" + opt.hash_alg + ")");
   sig_algo.oid = OIDS::lookup(priv_key->algo_name() + "/" + padding_and_hash);
   sig_algo = AlgorithmIdentifier(sig_algo.oid, AlgorithmIdentifier::USE_NULL_PARAM);
 
   PK_Signer signer(*priv_key, padding_and_hash);
 
   MemoryVector<byte> enc_public_key = eac_1_1_encoding(priv_key, sig_algo.oid);
 
   return make_cvc_cert(signer,
                        enc_public_key,
                        opt.car, chr,
                        opt.holder_auth_templ,
                        opt.ced, opt.cex, rng);
   }

References Botan::ECDSA_PublicKey::algo_name(), Botan::AlgorithmIdentifier::AlgorithmIdentifier(), Botan::EAC1_1_CVC_Options::car, Botan::EAC1_1_CVC_Options::ced, Botan::EAC1_1_CVC_Options::cex, create_self_signed_cert(), Botan::EAC1_1_CVC_Options::hash_alg, Botan::EAC1_1_CVC_Options::holder_auth_templ, Botan::OIDS::lookup(), Botan::make_cvc_cert(), Botan::AlgorithmIdentifier::oid, Botan::AlgorithmIdentifier::USE_NULL_PARAM, and Botan::ASN1_EAC_String::value().

Referenced by Botan::DE_EAC::create_cvca(), and create_self_signed_cert().