Port of new TLS API from bc-java
1 files changed, 171 insertions, 0 deletions
diff --git a/crypto/src/tls/SignatureAndHashAlgorithm.cs b/crypto/src/tls/SignatureAndHashAlgorithm.cs
new file mode 100644
index 000000000..9de2a42e4
--- /dev/null
+++ b/crypto/src/tls/SignatureAndHashAlgorithm.cs
@@ -0,0 +1,171 @@
+using System;
+using System.IO;
+
+namespace Org.BouncyCastle.Tls
+{
+ /// <summary>RFC 5246 7.4.1.4.1</summary>
+ public sealed class SignatureAndHashAlgorithm
+ {
+ public static readonly SignatureAndHashAlgorithm ecdsa_brainpoolP256r1tls13_sha256 =
+ Create(SignatureScheme.ecdsa_brainpoolP256r1tls13_sha256);
+ public static readonly SignatureAndHashAlgorithm ecdsa_brainpoolP384r1tls13_sha384 =
+ Create(SignatureScheme.ecdsa_brainpoolP384r1tls13_sha384);
+ public static readonly SignatureAndHashAlgorithm ecdsa_brainpoolP512r1tls13_sha512 =
+ Create(SignatureScheme.ecdsa_brainpoolP512r1tls13_sha512);
+ public static readonly SignatureAndHashAlgorithm ed25519 =
+ Create(SignatureScheme.ed25519);
+ public static readonly SignatureAndHashAlgorithm ed448 =
+ Create(SignatureScheme.ed448);
+ public static readonly SignatureAndHashAlgorithm gostr34102012_256 =
+ Create(HashAlgorithm.Intrinsic, SignatureAlgorithm.gostr34102012_256);
+ public static readonly SignatureAndHashAlgorithm gostr34102012_512 =
+ Create(HashAlgorithm.Intrinsic, SignatureAlgorithm.gostr34102012_512);
+ public static readonly SignatureAndHashAlgorithm rsa_pss_rsae_sha256 =
+ Create(SignatureScheme.rsa_pss_rsae_sha256);
+ public static readonly SignatureAndHashAlgorithm rsa_pss_rsae_sha384 =
+ Create(SignatureScheme.rsa_pss_rsae_sha384);
+ public static readonly SignatureAndHashAlgorithm rsa_pss_rsae_sha512 =
+ Create(SignatureScheme.rsa_pss_rsae_sha512);
+ public static readonly SignatureAndHashAlgorithm rsa_pss_pss_sha256 =
+ Create(SignatureScheme.rsa_pss_pss_sha256);
+ public static readonly SignatureAndHashAlgorithm rsa_pss_pss_sha384 =
+ Create(SignatureScheme.rsa_pss_pss_sha384);
+ public static readonly SignatureAndHashAlgorithm rsa_pss_pss_sha512 =
+ Create(SignatureScheme.rsa_pss_pss_sha512);
+
+ public static SignatureAndHashAlgorithm GetInstance(short hashAlgorithm, short signatureAlgorithm)
+ {
+ switch (hashAlgorithm)
+ {
+ case HashAlgorithm.Intrinsic:
+ return GetInstanceIntrinsic(signatureAlgorithm);
+ default:
+ return Create(hashAlgorithm, signatureAlgorithm);
+ }
+ }
+
+ private static SignatureAndHashAlgorithm GetInstanceIntrinsic(short signatureAlgorithm)
+ {
+ switch (signatureAlgorithm)
+ {
+ case SignatureAlgorithm.ed25519:
+ return ed25519;
+ case SignatureAlgorithm.ed448:
+ return ed448;
+ case SignatureAlgorithm.gostr34102012_256:
+ return gostr34102012_256;
+ case SignatureAlgorithm.gostr34102012_512:
+ return gostr34102012_512;
+ case SignatureAlgorithm.rsa_pss_rsae_sha256:
+ return rsa_pss_rsae_sha256;
+ case SignatureAlgorithm.rsa_pss_rsae_sha384:
+ return rsa_pss_rsae_sha384;
+ case SignatureAlgorithm.rsa_pss_rsae_sha512:
+ return rsa_pss_rsae_sha512;
+ case SignatureAlgorithm.rsa_pss_pss_sha256:
+ return rsa_pss_pss_sha256;
+ case SignatureAlgorithm.rsa_pss_pss_sha384:
+ return rsa_pss_pss_sha384;
+ case SignatureAlgorithm.rsa_pss_pss_sha512:
+ return rsa_pss_pss_sha512;
+ case SignatureAlgorithm.ecdsa_brainpoolP256r1tls13_sha256:
+ return ecdsa_brainpoolP256r1tls13_sha256;
+ case SignatureAlgorithm.ecdsa_brainpoolP384r1tls13_sha384:
+ return ecdsa_brainpoolP384r1tls13_sha384;
+ case SignatureAlgorithm.ecdsa_brainpoolP512r1tls13_sha512:
+ return ecdsa_brainpoolP512r1tls13_sha512;
+ default:
+ return Create(HashAlgorithm.Intrinsic, signatureAlgorithm);
+ }
+ }
+
+ private static SignatureAndHashAlgorithm Create(int signatureScheme)
+ {
+ short hashAlgorithm = SignatureScheme.GetHashAlgorithm(signatureScheme);
+ short signatureAlgorithm = SignatureScheme.GetSignatureAlgorithm(signatureScheme);
+ return Create(hashAlgorithm, signatureAlgorithm);
+ }
+
+ private static SignatureAndHashAlgorithm Create(short hashAlgorithm, short signatureAlgorithm)
+ {
+ return new SignatureAndHashAlgorithm(hashAlgorithm, signatureAlgorithm);
+ }
+
+ private readonly short m_hash;
+ private readonly short m_signature;
+
+ /// <param name="hash"><see cref="HashAlgorithm"/></param>
+ /// <param name="signature"><see cref="SignatureAlgorithm"/></param>
+ public SignatureAndHashAlgorithm(short hash, short signature)
+ {
+ /*
+ * TODO]tls] The TlsUtils methods are inlined here to avoid circular static initialization
+ * b/w these classes. We should refactor parts of TlsUtils into separate classes. e.g. the
+ * TLS low-level encoding methods, and/or the SigAndHash registry and methods.
+ */
+
+ //if (!TlsUtilities.IsValidUint8(hash))
+ if ((hash & 0xFF) != hash)
+ throw new ArgumentException("should be a uint8", "hash");
+
+ //if (!TlsUtilities.IsValidUint8(signature))
+ if ((signature & 0xFF) != signature)
+ throw new ArgumentException("should be a uint8", "signature");
+
+ this.m_hash = hash;
+ this.m_signature = signature;
+ }
+
+ /// <returns><see cref="HashAlgorithm"/></returns>
+ public short Hash
+ {
+ get { return m_hash; }
+ }
+
+ /// <returns><see cref="SignatureAlgorithm"/></returns>
+ public short Signature
+ {
+ get { return m_signature; }
+ }
+
+ /// <summary>Encode this <see cref="SignatureAndHashAlgorithm"/> to a <see cref="Stream"/>.</summary>
+ /// <param name="output">the <see cref="Stream"/> to encode to.</param>
+ /// <exception cref="IOException"/>
+ public void Encode(Stream output)
+ {
+ TlsUtilities.WriteUint8(Hash, output);
+ TlsUtilities.WriteUint8(Signature, output);
+ }
+
+ /// <summary>Parse a <see cref="SignatureAndHashAlgorithm"/> from a <see cref="Stream"/>.</summary>
+ /// <param name="input">the <see cref="Stream"/> to parse from.</param>
+ /// <returns>a <see cref="SignatureAndHashAlgorithm"/> object.</returns>
+ /// <exception cref="IOException"/>
+ public static SignatureAndHashAlgorithm Parse(Stream input)
+ {
+ short hash = TlsUtilities.ReadUint8(input);
+ short signature = TlsUtilities.ReadUint8(input);
+
+ return GetInstance(hash, signature);
+ }
+
+ public override bool Equals(object obj)
+ {
+ if (!(obj is SignatureAndHashAlgorithm))
+ return false;
+
+ SignatureAndHashAlgorithm other = (SignatureAndHashAlgorithm)obj;
+ return other.Hash == Hash && other.Signature == Signature;
+ }
+
+ public override int GetHashCode()
+ {
+ return ((int)Hash << 16) | (int)Signature;
+ }
+
+ public override string ToString()
+ {
+ return "{" + HashAlgorithm.GetText(Hash) + "," + SignatureAlgorithm.GetText(Signature) + "}";
+ }
+ }
+}
|
