using System;
using System.Collections.Generic;
using Org.BouncyCastle.Asn1;
using Org.BouncyCastle.Asn1.Kisa;
using Org.BouncyCastle.Asn1.Nist;
using Org.BouncyCastle.Asn1.Nsri;
using Org.BouncyCastle.Asn1.Ntt;
using Org.BouncyCastle.Asn1.Pkcs;
using Org.BouncyCastle.Crypto;
using Org.BouncyCastle.Crypto.Engines;
using Org.BouncyCastle.Utilities;
using Org.BouncyCastle.Utilities.Collections;
namespace Org.BouncyCastle.Security
{
///
/// Utility class for creating IWrapper objects from their names/Oids
///
public static class WrapperUtilities
{
private enum WrapAlgorithm
{
AESRFC3211WRAP,
AESWRAP,
AESWRAPPAD,
ARIARFC3211WRAP,
ARIAWRAP,
ARIAWRAPPAD,
CAMELLIARFC3211WRAP,
CAMELLIAWRAP,
DESRFC3211WRAP,
DESEDERFC3211WRAP,
DESEDEWRAP,
RC2WRAP,
SEEDWRAP,
};
private static readonly IDictionary Algorithms =
new Dictionary(StringComparer.OrdinalIgnoreCase);
static WrapperUtilities()
{
// Signal to obfuscation tools not to change enum constants
Enums.GetArbitraryValue().ToString();
Algorithms["AESKW"] = "AESWRAP";
Algorithms[NistObjectIdentifiers.IdAes128Wrap.Id] = "AESWRAP";
Algorithms[NistObjectIdentifiers.IdAes192Wrap.Id] = "AESWRAP";
Algorithms[NistObjectIdentifiers.IdAes256Wrap.Id] = "AESWRAP";
Algorithms["AESKWP"] = "AESWRAPPAD";
Algorithms[NistObjectIdentifiers.IdAes128WrapPad.Id] = "AESWRAPPAD";
Algorithms[NistObjectIdentifiers.IdAes192WrapPad.Id] = "AESWRAPPAD";
Algorithms[NistObjectIdentifiers.IdAes256WrapPad.Id] = "AESWRAPPAD";
Algorithms["AESRFC5649WRAP"] = "AESWRAPPAD";
Algorithms["ARIAKW"] = "ARIAWRAP";
Algorithms[NsriObjectIdentifiers.id_aria128_kw.Id] = "ARIAWRAP";
Algorithms[NsriObjectIdentifiers.id_aria192_kw.Id] = "ARIAWRAP";
Algorithms[NsriObjectIdentifiers.id_aria256_kw.Id] = "ARIAWRAP";
Algorithms["ARIAKWP"] = "ARIAWRAPPAD";
Algorithms[NsriObjectIdentifiers.id_aria128_kwp.Id] = "ARIAWRAPPAD";
Algorithms[NsriObjectIdentifiers.id_aria192_kwp.Id] = "ARIAWRAPPAD";
Algorithms[NsriObjectIdentifiers.id_aria256_kwp.Id] = "ARIAWRAPPAD";
Algorithms[NttObjectIdentifiers.IdCamellia128Wrap.Id] = "CAMELLIAWRAP";
Algorithms[NttObjectIdentifiers.IdCamellia192Wrap.Id] = "CAMELLIAWRAP";
Algorithms[NttObjectIdentifiers.IdCamellia256Wrap.Id] = "CAMELLIAWRAP";
Algorithms["DESEDERFC3217WRAP"] = "DESEDEWRAP";
Algorithms["TDEAWRAP"] = "DESEDEWRAP";
Algorithms[PkcsObjectIdentifiers.IdAlgCms3DesWrap.Id] = "DESEDEWRAP";
Algorithms[PkcsObjectIdentifiers.IdAlgCmsRC2Wrap.Id] = "RC2WRAP";
Algorithms["SEEDKW"] = "SEEDWRAP";
Algorithms[KisaObjectIdentifiers.IdNpkiAppCmsSeedWrap.Id] = "SEEDWRAP";
}
public static IWrapper GetWrapper(DerObjectIdentifier oid)
{
return GetWrapper(oid.Id);
}
public static IWrapper GetWrapper(string algorithm)
{
string mechanism = CollectionUtilities.GetValueOrKey(Algorithms, algorithm).ToUpperInvariant();
if (Enums.TryGetEnumValue(mechanism, out var wrapAlgorithm))
{
switch (wrapAlgorithm)
{
case WrapAlgorithm.AESRFC3211WRAP:
return new Rfc3211WrapEngine(AesUtilities.CreateEngine());
case WrapAlgorithm.AESWRAP:
return new AesWrapEngine();
case WrapAlgorithm.AESWRAPPAD:
return new AesWrapPadEngine();
case WrapAlgorithm.ARIARFC3211WRAP:
return new Rfc3211WrapEngine(new AriaEngine());
case WrapAlgorithm.ARIAWRAP:
return new AriaWrapEngine();
case WrapAlgorithm.ARIAWRAPPAD:
return new AriaWrapPadEngine();
case WrapAlgorithm.CAMELLIARFC3211WRAP:
return new Rfc3211WrapEngine(new CamelliaEngine());
case WrapAlgorithm.CAMELLIAWRAP:
return new CamelliaWrapEngine();
case WrapAlgorithm.DESRFC3211WRAP:
return new Rfc3211WrapEngine(new DesEngine());
case WrapAlgorithm.DESEDERFC3211WRAP:
return new Rfc3211WrapEngine(new DesEdeEngine());
case WrapAlgorithm.DESEDEWRAP:
return new DesEdeWrapEngine();
case WrapAlgorithm.RC2WRAP:
return new RC2WrapEngine();
case WrapAlgorithm.SEEDWRAP:
return new SeedWrapEngine();
default:
throw new NotImplementedException();
}
}
// Create an IBufferedCipher and use it as IWrapper (via BufferedCipherWrapper)
IBufferedCipher blockCipher = CipherUtilities.GetCipher(algorithm);
if (blockCipher != null)
return new BufferedCipherWrapper(blockCipher);
throw new SecurityUtilityException("Wrapper " + algorithm + " not recognised.");
}
public static string GetAlgorithmName(DerObjectIdentifier oid)
{
return CollectionUtilities.GetValueOrNull(Algorithms, oid.Id);
}
private class BufferedCipherWrapper
: IWrapper
{
private readonly IBufferedCipher cipher;
private bool forWrapping;
public BufferedCipherWrapper(
IBufferedCipher cipher)
{
this.cipher = cipher;
}
public string AlgorithmName
{
get { return cipher.AlgorithmName; }
}
public void Init(
bool forWrapping,
ICipherParameters parameters)
{
this.forWrapping = forWrapping;
cipher.Init(forWrapping, parameters);
}
public byte[] Wrap(
byte[] input,
int inOff,
int length)
{
if (!forWrapping)
throw new InvalidOperationException("Not initialised for wrapping");
return cipher.DoFinal(input, inOff, length);
}
public byte[] Unwrap(
byte[] input,
int inOff,
int length)
{
if (forWrapping)
throw new InvalidOperationException("Not initialised for unwrapping");
return cipher.DoFinal(input, inOff, length);
}
}
}
}