iPXE
asn1.h
Go to the documentation of this file.
1#ifndef _IPXE_ASN1_H
2#define _IPXE_ASN1_H
3
4/** @file
5 *
6 * ASN.1 encoding
7 *
8 */
9
10FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
11FILE_SECBOOT ( PERMITTED );
12
13#include <stddef.h>
14#include <stdint.h>
15#include <stdarg.h>
16#include <assert.h>
17#include <time.h>
18#include <ipxe/tables.h>
19
20/** An ASN.1 object cursor */
21struct asn1_cursor {
22 /** Start of data */
23 const void *data;
24 /** Length of data */
25 size_t len;
26};
27
28/** An ASN.1 object builder */
29struct asn1_builder {
30 /** Data
31 *
32 * This is always dynamically allocated. If @c data is NULL
33 * while @len is non-zero, this indicates that a memory
34 * allocation error has occurred during the building process.
35 */
36 void *data;
37 /** Length of data */
38 size_t len;
39};
40
41/** Maximum (viable) length of ASN.1 length
42 *
43 * While in theory unlimited, this length is sufficient to contain a
44 * size_t.
45 */
46#define ASN1_MAX_LEN_LEN ( 1 + sizeof ( size_t ) )
47
48/** An ASN.1 header */
49struct asn1_builder_header {
50 /** Type */
51 uint8_t type;
52 /** Length (encoded) */
53 uint8_t length[ASN1_MAX_LEN_LEN];
54} __attribute__ (( packed ));
55
56/** ASN.1 end */
57#define ASN1_END 0x00
58
59/** ASN.1 boolean */
60#define ASN1_BOOLEAN 0x01
61
62/** ASN.1 integer */
63#define ASN1_INTEGER 0x02
64
65/** ASN.1 bit string */
66#define ASN1_BIT_STRING 0x03
67
68/** ASN.1 octet string */
69#define ASN1_OCTET_STRING 0x04
70
71/** ASN.1 null */
72#define ASN1_NULL 0x05
73
74/** ASN.1 object identifier */
75#define ASN1_OID 0x06
76
77/** ASN.1 enumeration */
78#define ASN1_ENUMERATED 0x0a
79
80/** ASN.1 UTF-8 string */
81#define ASN1_UTF8_STRING 0x0c
82
83/** ASN.1 UTC time */
84#define ASN1_UTC_TIME 0x17
85
86/** ASN.1 generalized time */
87#define ASN1_GENERALIZED_TIME 0x18
88
89/** ASN.1 high tag number */
90#define ASN1_HIGH 0x1f
91
92/** ASN.1 sequence */
93#define ASN1_SEQUENCE 0x30
94
95/** ASN.1 set */
96#define ASN1_SET 0x31
97
98/** ASN.1 implicit tag */
99#define ASN1_IMPLICIT_TAG( number) ( 0x80 | (number) )
100
101/** ASN.1 explicit tag */
102#define ASN1_EXPLICIT_TAG( number) ( 0xa0 | (number) )
103
104/** ASN.1 "any tag" magic value */
105#define ASN1_ANY -1U
106
107/** Construct a short ASN.1 value */
108#define ASN1_SHORT( tag, ... ) \
109 (tag), VA_ARG_COUNT ( __VA_ARGS__ ), __VA_ARGS__
110
111/** Initial OID byte */
112#define ASN1_OID_INITIAL( first, second ) ( ( (first) * 40 ) + (second) )
113
114/** Single-byte OID value
115 *
116 * Valid for values up to 127
117 */
118#define ASN1_OID_SINGLE( value ) ( (value) & 0x7f )
119
120/** Double-byte OID value
121 *
122 * Valid for values up to 16383
123 */
124#define ASN1_OID_DOUBLE( value ) \
125 ( 0x80 | ( ( (value) >> 7 ) & 0x7f ) ), ASN1_OID_SINGLE ( (value) )
126
127/** Double-byte OID value
128 *
129 * Valid for values up to 2097151
130 */
131#define ASN1_OID_TRIPLE( value ) \
132 ( 0x80 | ( ( (value) >> 14 ) & 0x7f ) ), ASN1_OID_DOUBLE ( (value) )
133
134/** ASN.1 OID for ecPublicKey (1.2.840.10045.2.1) */
135#define ASN1_OID_ECPUBLICKEY \
136 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
137 ASN1_OID_DOUBLE ( 10045 ), ASN1_OID_SINGLE ( 2 ), \
138 ASN1_OID_SINGLE ( 1 )
139
140/** ASN.1 OID for prime256v1 (1.2.840.10045.3.1.7) */
141#define ASN1_OID_PRIME256V1 \
142 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
143 ASN1_OID_DOUBLE ( 10045 ), ASN1_OID_SINGLE ( 3 ), \
144 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 7 )
145
146/** ASN.1 OID for ecdsa-with-SHA224 (1.2.840.10045.4.3.1) */
147#define ASN1_OID_ECDSA_WITH_SHA224 \
148 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
149 ASN1_OID_DOUBLE ( 10045 ), ASN1_OID_SINGLE ( 4 ), \
150 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 1 )
151
152/** ASN.1 OID for ecdsa-with-SHA256 (1.2.840.10045.4.3.2) */
153#define ASN1_OID_ECDSA_WITH_SHA256 \
154 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
155 ASN1_OID_DOUBLE ( 10045 ), ASN1_OID_SINGLE ( 4 ), \
156 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 2 )
157
158/** ASN.1 OID for ecdsa-with-SHA384 (1.2.840.10045.4.3.3) */
159#define ASN1_OID_ECDSA_WITH_SHA384 \
160 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
161 ASN1_OID_DOUBLE ( 10045 ), ASN1_OID_SINGLE ( 4 ), \
162 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 3 )
163
164/** ASN.1 OID for ecdsa-with-SHA512 (1.2.840.10045.4.3.4) */
165#define ASN1_OID_ECDSA_WITH_SHA512 \
166 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
167 ASN1_OID_DOUBLE ( 10045 ), ASN1_OID_SINGLE ( 4 ), \
168 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 )
169
170/** ASN.1 OID for rsaEncryption (1.2.840.113549.1.1.1) */
171#define ASN1_OID_RSAENCRYPTION \
172 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
173 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
174 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 1 )
175
176/** ASN.1 OID for md5WithRSAEncryption (1.2.840.113549.1.1.4) */
177#define ASN1_OID_MD5WITHRSAENCRYPTION \
178 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
179 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
180 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 4 )
181
182/** ASN.1 OID for sha1WithRSAEncryption (1.2.840.113549.1.1.5) */
183#define ASN1_OID_SHA1WITHRSAENCRYPTION \
184 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
185 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
186 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 5 )
187
188/** ASN.1 OID for rsassa-pss (1.2.840.113549.1.1.10) */
189#define ASN1_OID_RSASSA_PSS \
190 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
191 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
192 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 10 )
193
194/** ASN.1 OID for sha256WithRSAEncryption (1.2.840.113549.1.1.11) */
195#define ASN1_OID_SHA256WITHRSAENCRYPTION \
196 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
197 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
198 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 11 )
199
200/** ASN.1 OID for sha384WithRSAEncryption (1.2.840.113549.1.1.12) */
201#define ASN1_OID_SHA384WITHRSAENCRYPTION \
202 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
203 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
204 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 12 )
205
206/** ASN.1 OID for sha512WithRSAEncryption (1.2.840.113549.1.1.13) */
207#define ASN1_OID_SHA512WITHRSAENCRYPTION \
208 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
209 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
210 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 13 )
211
212/** ASN.1 OID for sha224WithRSAEncryption (1.2.840.113549.1.1.14) */
213#define ASN1_OID_SHA224WITHRSAENCRYPTION \
214 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
215 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
216 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 14 )
217
218/** ASN.1 OID for sha512-224WithRSAEncryption (1.2.840.113549.1.1.15) */
219#define ASN1_OID_SHA512_224WITHRSAENCRYPTION \
220 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
221 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
222 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 15 )
223
224/** ASN.1 OID for sha512-256WithRSAEncryption (1.2.840.113549.1.1.16) */
225#define ASN1_OID_SHA512_256WITHRSAENCRYPTION \
226 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
227 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
228 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 16 )
229
230/** ASN.1 OID for id-md4 (1.2.840.113549.2.4) */
231#define ASN1_OID_MD4 \
232 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
233 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 2 ), \
234 ASN1_OID_SINGLE ( 4 )
235
236/** ASN.1 OID for id-md5 (1.2.840.113549.2.5) */
237#define ASN1_OID_MD5 \
238 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
239 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 2 ), \
240 ASN1_OID_SINGLE ( 5 )
241
242/** ASN.1 OID for id-sha1 (1.3.14.3.2.26) */
243#define ASN1_OID_SHA1 \
244 ASN1_OID_INITIAL ( 1, 3 ), ASN1_OID_SINGLE ( 14 ), \
245 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 2 ), \
246 ASN1_OID_SINGLE ( 26 )
247
248/** ASN.1 OID for id-x25519 (1.3.101.110) */
249#define ASN1_OID_X25519 \
250 ASN1_OID_INITIAL ( 1, 3 ), ASN1_OID_SINGLE ( 101 ), \
251 ASN1_OID_SINGLE ( 110 )
252
253/** ASN.1 OID for secp384r1 (1.3.132.0.34) */
254#define ASN1_OID_SECP384R1 \
255 ASN1_OID_INITIAL ( 1, 3 ), ASN1_OID_DOUBLE ( 132 ), \
256 ASN1_OID_SINGLE ( 0 ), ASN1_OID_SINGLE ( 34 )
257
258/** ASN.1 OID for id-aes128-cbc (2.16.840.1.101.3.4.1.2) */
259#define ASN1_OID_AES128_CBC \
260 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
261 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
262 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
263 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 2 )
264
265/** ASN.1 OID for id-aes128-gcm (2.16.840.1.101.3.4.1.6) */
266#define ASN1_OID_AES128_GCM \
267 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
268 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
269 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
270 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 6 )
271
272/** ASN.1 OID for id-aes192-cbc (2.16.840.1.101.3.4.1.22) */
273#define ASN1_OID_AES192_CBC \
274 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
275 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
276 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
277 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 22 )
278
279/** ASN.1 OID for id-aes192-gcm (2.16.840.1.101.3.4.1.26) */
280#define ASN1_OID_AES192_GCM \
281 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
282 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
283 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
284 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 26 )
285
286/** ASN.1 OID for id-aes256-cbc (2.16.840.1.101.3.4.1.42) */
287#define ASN1_OID_AES256_CBC \
288 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
289 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
290 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
291 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 42 )
292
293/** ASN.1 OID for id-aes256-gcm (2.16.840.1.101.3.4.1.46) */
294#define ASN1_OID_AES256_GCM \
295 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
296 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
297 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
298 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 46 )
299
300/** ASN.1 OID for id-sha256 (2.16.840.1.101.3.4.2.1) */
301#define ASN1_OID_SHA256 \
302 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
303 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
304 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
305 ASN1_OID_SINGLE ( 2 ), ASN1_OID_SINGLE ( 1 )
306
307/** ASN.1 OID for id-sha384 (2.16.840.1.101.3.4.2.2) */
308#define ASN1_OID_SHA384 \
309 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
310 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
311 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
312 ASN1_OID_SINGLE ( 2 ), ASN1_OID_SINGLE ( 2 )
313
314/** ASN.1 OID for id-sha512 (2.16.840.1.101.3.4.2.3) */
315#define ASN1_OID_SHA512 \
316 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
317 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
318 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
319 ASN1_OID_SINGLE ( 2 ), ASN1_OID_SINGLE ( 3 )
320
321/** ASN.1 OID for id-sha224 (2.16.840.1.101.3.4.2.4) */
322#define ASN1_OID_SHA224 \
323 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
324 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
325 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
326 ASN1_OID_SINGLE ( 2 ), ASN1_OID_SINGLE ( 4 )
327
328/** ASN.1 OID for id-sha512-224 (2.16.840.1.101.3.4.2.5) */
329#define ASN1_OID_SHA512_224 \
330 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
331 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
332 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
333 ASN1_OID_SINGLE ( 2 ), ASN1_OID_SINGLE ( 5 )
334
335/** ASN.1 OID for id-sha512-256 (2.16.840.1.101.3.4.2.6) */
336#define ASN1_OID_SHA512_256 \
337 ASN1_OID_INITIAL ( 2, 16 ), ASN1_OID_DOUBLE ( 840 ), \
338 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 101 ), \
339 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 4 ), \
340 ASN1_OID_SINGLE ( 2 ), ASN1_OID_SINGLE ( 6 )
341
342/** ASN.1 OID for commonName (2.5.4.3) */
343#define ASN1_OID_COMMON_NAME \
344 ASN1_OID_INITIAL ( 2, 5 ), ASN1_OID_SINGLE ( 4 ), \
345 ASN1_OID_SINGLE ( 3 )
346
347/** ASN.1 OID for id-ce-keyUsage (2.5.29.15) */
348#define ASN1_OID_KEYUSAGE \
349 ASN1_OID_INITIAL ( 2, 5 ), ASN1_OID_SINGLE ( 29 ), \
350 ASN1_OID_SINGLE ( 15 )
351
352/** ASN.1 OID for id-ce-basicConstraints (2.5.29.19) */
353#define ASN1_OID_BASICCONSTRAINTS \
354 ASN1_OID_INITIAL ( 2, 5 ), ASN1_OID_SINGLE ( 29 ), \
355 ASN1_OID_SINGLE ( 19 )
356
357/** ASN.1 OID for id-ce-extKeyUsage (2.5.29.37) */
358#define ASN1_OID_EXTKEYUSAGE \
359 ASN1_OID_INITIAL ( 2, 5 ), ASN1_OID_SINGLE ( 29 ), \
360 ASN1_OID_SINGLE ( 37 )
361
362/** ASN.1 OID for id-kp-codeSigning (1.3.6.1.5.5.7.3.3) */
363#define ASN1_OID_CODESIGNING \
364 ASN1_OID_INITIAL ( 1, 3 ), ASN1_OID_SINGLE ( 6 ), \
365 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 5 ), \
366 ASN1_OID_SINGLE ( 5 ), ASN1_OID_SINGLE ( 7 ), \
367 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 3 )
368
369/** ASN.1 OID for id-signedData (1.2.840.113549.1.7.2) */
370#define ASN1_OID_SIGNEDDATA \
371 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
372 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
373 ASN1_OID_SINGLE ( 7 ), ASN1_OID_SINGLE ( 2 )
374
375/** ASN.1 OID for id-envelopedData (1.2.840.113549.1.7.3) */
376#define ASN1_OID_ENVELOPEDDATA \
377 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
378 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
379 ASN1_OID_SINGLE ( 7 ), ASN1_OID_SINGLE ( 3 )
380
381/** ASN.1 OID for id-authEnvelopedData (1.2.840.113549.1.9.16.1.23) */
382#define ASN1_OID_AUTHENVELOPEDDATA \
383 ASN1_OID_INITIAL ( 1, 2 ), ASN1_OID_DOUBLE ( 840 ), \
384 ASN1_OID_TRIPLE ( 113549 ), ASN1_OID_SINGLE ( 1 ), \
385 ASN1_OID_SINGLE ( 9 ), ASN1_OID_SINGLE ( 16 ), \
386 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 23 )
387
388/** ASN.1 OID for id-pe-authorityInfoAccess (1.3.6.1.5.5.7.1.1) */
389#define ASN1_OID_AUTHORITYINFOACCESS \
390 ASN1_OID_INITIAL ( 1, 3 ), ASN1_OID_SINGLE ( 6 ), \
391 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 5 ), \
392 ASN1_OID_SINGLE ( 5 ), ASN1_OID_SINGLE ( 7 ), \
393 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 1 )
394
395/** ASN.1 OID for id-ad-ocsp (1.3.6.1.5.5.7.48.1) */
396#define ASN1_OID_OCSP \
397 ASN1_OID_INITIAL ( 1, 3 ), ASN1_OID_SINGLE ( 6 ), \
398 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 5 ), \
399 ASN1_OID_SINGLE ( 5 ), ASN1_OID_SINGLE ( 7 ), \
400 ASN1_OID_SINGLE ( 48 ), ASN1_OID_SINGLE ( 1 )
401
402/** ASN.1 OID for id-pkix-ocsp-basic ( 1.3.6.1.5.5.7.48.1.1) */
403#define ASN1_OID_OCSP_BASIC \
404 ASN1_OID_INITIAL ( 1, 3 ), ASN1_OID_SINGLE ( 6 ), \
405 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 5 ), \
406 ASN1_OID_SINGLE ( 5 ), ASN1_OID_SINGLE ( 7 ), \
407 ASN1_OID_SINGLE ( 48 ), ASN1_OID_SINGLE ( 1 ), \
408 ASN1_OID_SINGLE ( 1 )
409
410/** ASN.1 OID for id-kp-OCSPSigning (1.3.6.1.5.5.7.3.9) */
411#define ASN1_OID_OCSPSIGNING \
412 ASN1_OID_INITIAL ( 1, 3 ), ASN1_OID_SINGLE ( 6 ), \
413 ASN1_OID_SINGLE ( 1 ), ASN1_OID_SINGLE ( 5 ), \
414 ASN1_OID_SINGLE ( 5 ), ASN1_OID_SINGLE ( 7 ), \
415 ASN1_OID_SINGLE ( 3 ), ASN1_OID_SINGLE ( 9 )
416
417/** ASN.1 OID for id-ce-subjectAltName (2.5.29.17) */
418#define ASN1_OID_SUBJECTALTNAME \
419 ASN1_OID_INITIAL ( 2, 5 ), ASN1_OID_SINGLE ( 29 ), \
420 ASN1_OID_SINGLE ( 17 )
421
422/** Define an ASN.1 cursor for a static value */
423#define ASN1_CURSOR( value ) { \
424 .data = value, \
425 .len = sizeof ( value ), \
426 }
427
428/** An ASN.1 OID-identified algorithm */
429struct asn1_algorithm {
430 /** Name */
431 const char *name;
432 /** Object identifier */
433 struct asn1_cursor oid;
434 /** Public-key algorithm (if applicable) */
435 struct pubkey_algorithm *pubkey;
436 /** Digest algorithm (if applicable) */
437 struct digest_algorithm *digest;
438 /** Cipher algorithm (if applicable) */
439 struct cipher_algorithm *cipher;
440 /** Elliptic curve (if applicable) */
441 struct elliptic_curve *curve;
442 /**
443 * Parse algorithm parameters (optional)
444 *
445 * @v algorithm Algorithm
446 * @v param Parameters to parse (and potentially modify)
447 * @ret rc Return status code
448 */
449 int ( * parse ) ( struct asn1_algorithm *algorithm,
450 struct asn1_cursor *params );
451};
452
453/** ASN.1 OID-identified algorithms */
454#define ASN1_ALGORITHMS __table ( struct asn1_algorithm, "asn1_algorithms" )
455
456/** Declare an ASN.1 OID-identified algorithm */
457#define __asn1_algorithm __table_entry ( ASN1_ALGORITHMS, 01 )
458
459/* ASN.1 OID-identified algorithms */
460extern struct asn1_algorithm rsa_encryption_algorithm __asn1_algorithm;
461extern struct asn1_algorithm rsassa_pss_algorithm __asn1_algorithm;
462extern struct asn1_algorithm md5_with_rsa_encryption_algorithm __asn1_algorithm;
463extern struct asn1_algorithm
464sha1_with_rsa_encryption_algorithm __asn1_algorithm;
465extern struct asn1_algorithm
466sha224_with_rsa_encryption_algorithm __asn1_algorithm;
467extern struct asn1_algorithm
468sha256_with_rsa_encryption_algorithm __asn1_algorithm;
469extern struct asn1_algorithm
470sha384_with_rsa_encryption_algorithm __asn1_algorithm;
471extern struct asn1_algorithm
472sha512_with_rsa_encryption_algorithm __asn1_algorithm;
473extern struct asn1_algorithm
474sha512_224_with_rsa_encryption_algorithm __asn1_algorithm;
475extern struct asn1_algorithm
476sha512_256_with_rsa_encryption_algorithm __asn1_algorithm;
477extern struct asn1_algorithm oid_md4_algorithm __asn1_algorithm;
478extern struct asn1_algorithm oid_md5_algorithm __asn1_algorithm;
479extern struct asn1_algorithm oid_sha1_algorithm __asn1_algorithm;
480extern struct asn1_algorithm oid_sha256_algorithm __asn1_algorithm;
481extern struct asn1_algorithm oid_sha384_algorithm __asn1_algorithm;
482extern struct asn1_algorithm oid_sha512_algorithm __asn1_algorithm;
483extern struct asn1_algorithm oid_sha224_algorithm __asn1_algorithm;
484extern struct asn1_algorithm oid_sha512_224_algorithm __asn1_algorithm;
485extern struct asn1_algorithm oid_sha512_256_algorithm __asn1_algorithm;
486extern struct asn1_algorithm ecpubkey_algorithm __asn1_algorithm;
487
488/**
489 * Invalidate ASN.1 object cursor
490 *
491 * @v cursor ASN.1 object cursor
492 */
493static inline __attribute__ (( always_inline )) void
494asn1_invalidate_cursor ( struct asn1_cursor *cursor ) {
495 cursor->len = 0;
496}
497
498/**
499 * Extract ASN.1 type
500 *
501 * @v cursor ASN.1 object cursor
502 * @ret type Type, or ASN1_END if cursor is invalid
503 */
504static inline __attribute__ (( always_inline )) unsigned int
505asn1_type ( const struct asn1_cursor *cursor ) {
506 const uint8_t *type = cursor->data;
507
508 return ( ( cursor->len >= sizeof ( *type ) ) ? *type : ASN1_END );
509}
510
511/**
512 * Get cursor for built object
513 *
514 * @v builder ASN.1 object builder
515 * @ret cursor ASN.1 object cursor
516 */
517static inline __attribute__ (( always_inline )) struct asn1_cursor *
518asn1_built ( struct asn1_builder *builder ) {
519 union {
520 struct asn1_builder builder;
521 struct asn1_cursor cursor;
522 } *u = container_of ( builder, typeof ( *u ), builder );
523
524 /* Sanity check */
525 build_assert ( ( ( const void * ) &u->builder.data ) ==
526 &u->cursor.data );
527 build_assert ( &u->builder.len == &u->cursor.len );
528
529 return &u->cursor;
530}
531
532extern int asn1_enter ( struct asn1_cursor *cursor, unsigned int type );
533extern int asn1_skip_if_exists ( struct asn1_cursor *cursor,
534 unsigned int type );
535extern int asn1_skip ( struct asn1_cursor *cursor, unsigned int type );
536extern int asn1_shrink ( struct asn1_cursor *cursor, unsigned int type );
537extern int asn1_enter_any ( struct asn1_cursor *cursor );
538extern int asn1_skip_any ( struct asn1_cursor *cursor );
539extern int asn1_shrink_any ( struct asn1_cursor *cursor );
540extern int asn1_enter_bits ( struct asn1_cursor *cursor,
541 unsigned int *unused );
542extern int asn1_enter_unsigned ( struct asn1_cursor *cursor );
543extern int asn1_boolean ( const struct asn1_cursor *cursor );
544extern int asn1_integer ( const struct asn1_cursor *cursor, int *value );
545extern int asn1_compare ( const struct asn1_cursor *cursor1,
546 const struct asn1_cursor *cursor2 );
547extern int asn1_algorithm ( const struct asn1_cursor *cursor,
548 struct asn1_algorithm **algorithm,
549 struct asn1_cursor *params );
550extern int asn1_pubkey_algorithm ( const struct asn1_cursor *cursor,
551 struct asn1_algorithm **algorithm );
552extern int asn1_digest_algorithm ( const struct asn1_cursor *cursor,
553 struct asn1_algorithm **algorithm );
554extern int asn1_cipher_algorithm ( const struct asn1_cursor *cursor,
555 struct asn1_algorithm **algorithm,
556 struct asn1_cursor *params );
557extern int asn1_signature_algorithm ( const struct asn1_cursor *cursor,
558 struct asn1_algorithm **algorithm );
559extern int asn1_curve_algorithm ( const struct asn1_cursor *cursor,
560 struct asn1_algorithm *wrapper,
561 struct asn1_algorithm **algorithm );
562extern int asn1_check_algorithm ( const struct asn1_cursor *cursor,
563 struct asn1_algorithm *expected,
564 struct asn1_cursor *params );
565extern int asn1_parse_cbc ( struct asn1_algorithm *algorithm,
566 struct asn1_cursor *params );
567extern int asn1_parse_gcm ( struct asn1_algorithm *algorithm,
568 struct asn1_cursor *params );
569extern int asn1_generalized_time ( const struct asn1_cursor *cursor,
570 time_t *time );
571extern size_t asn1_header_len ( size_t len );
572extern int asn1_grow ( struct asn1_builder *builder, size_t extra );
573extern int asn1_prepend_raw ( struct asn1_builder *builder, const void *data,
574 size_t len );
575extern int asn1_prepend ( struct asn1_builder *builder, unsigned int type,
576 const void *data, size_t len );
577extern int asn1_wrap ( struct asn1_builder *builder, unsigned int type );
578
579#endif /* _IPXE_ASN1_H */
typeof
typeof(acpi_finder=acpi_find)
ACPI table finder.
Definition acpi.c:48
value
pseudo_bit_t value[0x00020]
Definition arbel.h:2
uint8_t
unsigned char uint8_t
Definition stdint.h:10
asn1_cipher_algorithm
int asn1_cipher_algorithm(const struct asn1_cursor *cursor, struct asn1_algorithm **algorithm, struct asn1_cursor *params)
Parse ASN.1 OID-identified cipher algorithm.
Definition asn1.c:705
asn1_prepend
int asn1_prepend(struct asn1_builder *builder, unsigned int type, const void *data, size_t len)
Prepend data to ASN.1 builder.
Definition asn1.c:1092
asn1_prepend_raw
int asn1_prepend_raw(struct asn1_builder *builder, const void *data, size_t len)
Prepend raw data to ASN.1 builder.
Definition asn1.c:1069
asn1_enter_unsigned
int asn1_enter_unsigned(struct asn1_cursor *cursor)
Enter ASN.1 unsigned integer.
Definition asn1.c:459
asn1_built
static struct asn1_cursor * asn1_built(struct asn1_builder *builder)
Get cursor for built object.
Definition asn1.h:518
asn1_skip_any
int asn1_skip_any(struct asn1_cursor *cursor)
Skip ASN.1 object of any type.
Definition asn1.c:382
asn1_check_algorithm
int asn1_check_algorithm(const struct asn1_cursor *cursor, struct asn1_algorithm *expected, struct asn1_cursor *params)
Check ASN.1 OID-identified algorithm.
Definition asn1.c:813
asn1_generalized_time
int asn1_generalized_time(const struct asn1_cursor *cursor, time_t *time)
Parse ASN.1 GeneralizedTime.
Definition asn1.c:885
ASN1_END
#define ASN1_END
ASN.1 end.
Definition asn1.h:57
asn1_invalidate_cursor
static void asn1_invalidate_cursor(struct asn1_cursor *cursor)
Invalidate ASN.1 object cursor.
Definition asn1.h:494
ASN1_MAX_LEN_LEN
#define ASN1_MAX_LEN_LEN
Maximum (viable) length of ASN.1 length.
Definition asn1.h:46
asn1_boolean
int asn1_boolean(const struct asn1_cursor *cursor)
Parse value of ASN.1 boolean.
Definition asn1.c:500
__asn1_algorithm
#define __asn1_algorithm
Declare an ASN.1 OID-identified algorithm.
Definition asn1.h:457
asn1_digest_algorithm
int asn1_digest_algorithm(const struct asn1_cursor *cursor, struct asn1_algorithm **algorithm)
Parse ASN.1 OID-identified digest algorithm.
Definition asn1.c:678
asn1_curve_algorithm
int asn1_curve_algorithm(const struct asn1_cursor *cursor, struct asn1_algorithm *wrapper, struct asn1_algorithm **algorithm)
Parse ASN.1 OID-identified elliptic curve algorithm.
Definition asn1.c:767
asn1_grow
int asn1_grow(struct asn1_builder *builder, size_t extra)
Grow ASN.1 builder.
Definition asn1.c:1036
asn1_enter
int asn1_enter(struct asn1_cursor *cursor, unsigned int type)
Enter ASN.1 object.
Definition asn1.c:261
asn1_enter_any
int asn1_enter_any(struct asn1_cursor *cursor)
Enter ASN.1 object of any type.
Definition asn1.c:372
asn1_parse_gcm
int asn1_parse_gcm(struct asn1_algorithm *algorithm, struct asn1_cursor *params)
asn1_header_len
size_t asn1_header_len(size_t len)
Calculate ASN.1 header length.
Definition asn1.c:1023
asn1_parse_cbc
int asn1_parse_cbc(struct asn1_algorithm *algorithm, struct asn1_cursor *params)
Parse ASN.1 CBC cipher parameters.
Definition asn1.c:840
asn1_skip
int asn1_skip(struct asn1_cursor *cursor, unsigned int type)
Skip ASN.1 object.
Definition asn1.c:323
asn1_pubkey_algorithm
int asn1_pubkey_algorithm(const struct asn1_cursor *cursor, struct asn1_algorithm **algorithm)
Parse ASN.1 OID-identified public-key algorithm.
Definition asn1.c:652
asn1_enter_bits
int asn1_enter_bits(struct asn1_cursor *cursor, unsigned int *unused)
Enter ASN.1 bit string.
Definition asn1.c:403
asn1_shrink_any
int asn1_shrink_any(struct asn1_cursor *cursor)
Shrink ASN.1 object of any type.
Definition asn1.c:392
asn1_algorithm
int asn1_algorithm(const struct asn1_cursor *cursor, struct asn1_algorithm **algorithm, struct asn1_cursor *params)
Parse ASN.1 OID-identified algorithm.
Definition asn1.c:602
asn1_integer
int asn1_integer(const struct asn1_cursor *cursor, int *value)
Parse value of ASN.1 integer.
Definition asn1.c:524
asn1_compare
int asn1_compare(const struct asn1_cursor *cursor1, const struct asn1_cursor *cursor2)
Compare two ASN.1 objects.
Definition asn1.c:566
asn1_signature_algorithm
int asn1_signature_algorithm(const struct asn1_cursor *cursor, struct asn1_algorithm **algorithm)
Parse ASN.1 OID-identified signature algorithm.
Definition asn1.c:732
asn1_wrap
int asn1_wrap(struct asn1_builder *builder, unsigned int type)
Wrap ASN.1 builder.
Definition asn1.c:1119
asn1_shrink
int asn1_shrink(struct asn1_cursor *cursor, unsigned int type)
Shrink ASN.1 cursor to fit object.
Definition asn1.c:346
asn1_type
static unsigned int asn1_type(const struct asn1_cursor *cursor)
Extract ASN.1 type.
Definition asn1.h:505
asn1_skip_if_exists
int asn1_skip_if_exists(struct asn1_cursor *cursor, unsigned int type)
Skip ASN.1 object if present.
Definition asn1.c:294
assert.h
Assertions.
build_assert
#define build_assert(condition)
Assert a condition at build time (after dead code elimination).
Definition assert.h:88
u
union @104331263140136355135267063077374276003064103115 u
len
ring len
Length.
Definition dwmac.h:226
type
uint32_t type
Operating system type.
Definition ena.h:1
data
uint8_t data[48]
Additional event data.
Definition ena.h:11
FILE_LICENCE
#define FILE_LICENCE(_licence)
Declare a particular licence as applying to a file.
Definition compiler.h:921
FILE_SECBOOT
#define FILE_SECBOOT(_status)
Declare a file's UEFI Secure Boot permission status.
Definition compiler.h:951
algorithm
u16 algorithm
Authentication algorithm (Open System or Shared Key).
Definition ieee80211.h:1
__attribute__
#define __attribute__(x)
Definition compiler.h:10
extra
uint8_t extra
Signature extra byte.
Definition smbios.h:6
time.h
Time source.
time_t
int64_t time_t
Seconds since the Epoch.
Definition time.h:19
unused
uint8_t unused
Unused.
Definition librm.h:5
container_of
#define container_of(ptr, type, field)
Get containing structure.
Definition stddef.h:36
asn1_algorithm
An ASN.1 OID-identified algorithm.
Definition asn1.h:429
asn1_algorithm::name
const char * name
Name.
Definition asn1.h:431
asn1_algorithm::parse
int(* parse)(struct asn1_algorithm *algorithm, struct asn1_cursor *params)
Parse algorithm parameters (optional).
Definition asn1.h:449
asn1_algorithm::oid
struct asn1_cursor oid
Object identifier.
Definition asn1.h:433
asn1_algorithm::cipher
struct cipher_algorithm * cipher
Cipher algorithm (if applicable).
Definition asn1.h:439
asn1_algorithm::digest
struct digest_algorithm * digest
Digest algorithm (if applicable).
Definition asn1.h:437
asn1_algorithm::pubkey
struct pubkey_algorithm * pubkey
Public-key algorithm (if applicable).
Definition asn1.h:435
asn1_algorithm::curve
struct elliptic_curve * curve
Elliptic curve (if applicable).
Definition asn1.h:441
asn1_builder_header
An ASN.1 header.
Definition asn1.h:49
asn1_builder_header::length
uint8_t length[ASN1_MAX_LEN_LEN]
Length (encoded).
Definition asn1.h:53
asn1_builder_header::type
uint8_t type
Type.
Definition asn1.h:51
asn1_builder
An ASN.1 object builder.
Definition asn1.h:29
asn1_builder::data
void * data
Data.
Definition asn1.h:36
asn1_builder::len
size_t len
Length of data.
Definition asn1.h:38
asn1_cursor
An ASN.1 object cursor.
Definition asn1.h:21
asn1_cursor::data
const void * data
Start of data.
Definition asn1.h:23
asn1_cursor::len
size_t len
Length of data.
Definition asn1.h:25
cipher_algorithm
A cipher algorithm.
Definition crypto.h:58
digest_algorithm
A message digest algorithm.
Definition crypto.h:19
elliptic_curve
An elliptic curve.
Definition crypto.h:246
pubkey_algorithm
A public key algorithm.
Definition crypto.h:142
tables.h
Linker tables.
Generated by doxygen 1.16.1