From 1e5195722a71f14c3d5d69c9de44bec8571ef2f0 Mon Sep 17 00:00:00 2001 From: Mathias Tausig <mathias.tausig@fh-campuswien.ac.at> Date: Tue, 21 Jun 2016 16:01:10 +0200 Subject: [PATCH] tiny-asn1: Created new package `tiny-asn1` --- pkg/tiny-asn1/Makefile | 12 + pkg/tiny-asn1/Makefile.include | 1 + pkg/tiny-asn1/doc.txt | 6 + .../patches/0001-Added-RIOT-Makefile.patch | Bin 0 -> 503 bytes tests/pkg_tiny-asn1/Makefile | 8 + tests/pkg_tiny-asn1/README.md | 6 + tests/pkg_tiny-asn1/main.c | 208 ++++++++++++++++++ tests/pkg_tiny-asn1/tests/01-run.py | 20 ++ 8 files changed, 261 insertions(+) create mode 100644 pkg/tiny-asn1/Makefile create mode 100644 pkg/tiny-asn1/Makefile.include create mode 100644 pkg/tiny-asn1/doc.txt create mode 100644 pkg/tiny-asn1/patches/0001-Added-RIOT-Makefile.patch create mode 100644 tests/pkg_tiny-asn1/Makefile create mode 100644 tests/pkg_tiny-asn1/README.md create mode 100644 tests/pkg_tiny-asn1/main.c create mode 100755 tests/pkg_tiny-asn1/tests/01-run.py diff --git a/pkg/tiny-asn1/Makefile b/pkg/tiny-asn1/Makefile new file mode 100644 index 0000000000..ac6dfc1654 --- /dev/null +++ b/pkg/tiny-asn1/Makefile @@ -0,0 +1,12 @@ +PKG_NAME = tiny-asn1 +PKG_URL = https://gitlab.com/matthegap/tiny-asn1.git +PKG_VERSION = b09f058966c6296904487c3f8fc04c68fe83b2cc + +export TINYASN1_ROOT=$(CURDIR) +INCLUDES+=-I$(TINYASN1_ROOT)/src + +.PHONY: all + +all: git-download + $(MAKE) -C $(PKG_BUILDDIR)/src +include $(RIOTBASE)/pkg/pkg.mk diff --git a/pkg/tiny-asn1/Makefile.include b/pkg/tiny-asn1/Makefile.include new file mode 100644 index 0000000000..9965a43a7a --- /dev/null +++ b/pkg/tiny-asn1/Makefile.include @@ -0,0 +1 @@ +INCLUDES += -I$(BINDIRBASE)/pkg/$(BOARD)/tiny-asn1/src diff --git a/pkg/tiny-asn1/doc.txt b/pkg/tiny-asn1/doc.txt new file mode 100644 index 0000000000..a47531cd90 --- /dev/null +++ b/pkg/tiny-asn1/doc.txt @@ -0,0 +1,6 @@ +/** + * @defgroup tiny-asn1 tiny-asn1 + * @ingroup pkg + * @brief Lightweight ASN.1 decoding/encoding library + * @see https://gitlab.com/matthegap/tiny-asn1 + */ diff --git a/pkg/tiny-asn1/patches/0001-Added-RIOT-Makefile.patch b/pkg/tiny-asn1/patches/0001-Added-RIOT-Makefile.patch new file mode 100644 index 0000000000000000000000000000000000000000..74b36b3b846e32addcd61d5ec6697a3c0fb1b07a GIT binary patch literal 503 zcmZ=O%Fk6WNHj>aOfpQhFf%nxF*Y$YHcU)SHBC%QGD%D}F-<ixvM@9^Oif8r@XgOt z2u>|fFf>;%Ft7q61tS9kLoSdpRtmm}B^jBC#R?&brNx=)3O2bAzFrBK?~s<Eo1B<i zP+DA`nVP4Un5>srV#no@Sdwa`5Ry@<qhMsL;8mKZU}RuureJ7dWn^w;XrQ2NU}Rvx z6<nH>m6}{)r4Sw97~<@qV5n~xtKgWDlA59r<mn%x;G3A8nwFW9%EhIttIMTOT$HR2 z6H=&AFjmmk*5*<$Q~)VaNX|&iOHWPFQ7~4>%qvbUD#^^xE7s7~<Wfj3N=+<DRmjax zNmVd3FfcPQK{1JoD<v~6O+i;TJ+nk1Q6I&UBor=JUTQhSG9<IOGV@YWD-;YMKu^!i zJjFaY%@X8d1^txNGX1>LoE$D~ZEXcK!yFtGbPaS26toR>j1?RlxU_x!T|#|at!zs& z^D1={i}MV*w7Il1^OAE)Q&JUFG(aKZ<QVL#2@eCkq{QM>E?r#(E+aj2Jrgc20O4Jd ANdN!< literal 0 HcmV?d00001 diff --git a/tests/pkg_tiny-asn1/Makefile b/tests/pkg_tiny-asn1/Makefile new file mode 100644 index 0000000000..0a9e4bf611 --- /dev/null +++ b/tests/pkg_tiny-asn1/Makefile @@ -0,0 +1,8 @@ +APPLICATION = tiny-asn1 +include ../Makefile.tests_common +USEPKG += tiny-asn1 + +include $(RIOTBASE)/Makefile.include + +test: + ./tests/01-run.py diff --git a/tests/pkg_tiny-asn1/README.md b/tests/pkg_tiny-asn1/README.md new file mode 100644 index 0000000000..d70b685d2a --- /dev/null +++ b/tests/pkg_tiny-asn1/README.md @@ -0,0 +1,6 @@ +# `pkg_tiny-asn1` test + +This test tries to execute all basic dunctions of the tiny-asn1 library by decoding and encoding some data. + +If everything works, the programs exits with a return code of 1 and prints "Decoding finished succesfully" at the end. +In case of an error, the program returns with an exit code of 1. diff --git a/tests/pkg_tiny-asn1/main.c b/tests/pkg_tiny-asn1/main.c new file mode 100644 index 0000000000..c6d390054e --- /dev/null +++ b/tests/pkg_tiny-asn1/main.c @@ -0,0 +1,208 @@ +/* + * Copyright (C) 2016 Mathias Tausig, FH Campus Wien + * + * This file is subject to the terms and conditions of the GNU Lesser + * General Public License v2.1. See the file LICENSE in the top level + * directory for more details. + */ + +#include <stdint.h> +#include <stdio.h> +#include <stdlib.h> +#include <string.h> +#include <inttypes.h> + +#include "tiny-asn1.h" + +void print_hex(uint8_t *data, unsigned int len) +{ + unsigned int count = 0; + unsigned int blockCount = 0; + + while (count < len) { + printf("%02x ", data[count]); + ++count; + ++blockCount; + if (blockCount == 4) { + printf(" "); + } + if (blockCount == 8) { + printf("\n"); + blockCount = 0; + } + } + printf("\n"); +} + + +void print_asn1(asn1_tree *list, int depth) +{ + printf("d=%d, Tag: %02x, len=%" PRIu32 "\n", depth, list->type, list->length); + if (list->child == NULL) { + printf("Value:\n"); + print_hex(list->data, list->length); + } + else { + print_asn1(list->child, depth + 1); + } + + if (list->next != NULL) { + print_asn1(list->next, depth); + } +} + + + +int main(void) +{ + /* Created with echo "12345678901234567890"|openssl cms -EncryptedData_encrypt -aes128 -secretkey 39904F36D98779D00F9A2B8139D2957F -outform der|xxd --i */ + uint8_t cms_data[] = { + 0x30, 0x60, 0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x07, + 0x06, 0xa0, 0x53, 0x30, 0x51, 0x02, 0x01, 0x00, 0x30, 0x4c, 0x06, 0x09, + 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x07, 0x01, 0x30, 0x1d, 0x06, + 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x01, 0x02, 0x04, 0x10, + 0x4d, 0xaa, 0x7b, 0x74, 0xfb, 0xf7, 0x7a, 0xfa, 0xb0, 0x23, 0xa2, 0x9c, + 0x1a, 0xb6, 0x51, 0xe4, 0x80, 0x20, 0x6b, 0x8f, 0x64, 0xd7, 0x3a, 0x81, + 0x01, 0x0c, 0x7b, 0xab, 0xfd, 0x26, 0x6d, 0x46, 0x2e, 0x3e, 0xc4, 0xf6, + 0x01, 0x78, 0x8a, 0xc0, 0xc0, 0x52, 0x0a, 0x66, 0x17, 0x71, 0x4f, 0xf6, + 0xd9, 0x95 + }; + + int32_t asn1_object_count = der_object_count(cms_data, sizeof(cms_data)); + + if (asn1_object_count < 0) { + printf("ERROR: Could not calculate the number of Elements within the data.\n"); + return 1; + } + + asn1_tree *asn1_objects = (asn1_tree *)(malloc(sizeof(asn1_tree) * asn1_object_count)); + if (asn1_objects == NULL) { + printf("ERROR: Could not allocate the memory for the ASN.1 objects.\n"); + return 1; + } + + asn1_tree cms; + + if (der_decode(cms_data, sizeof(cms_data), &cms, asn1_objects, asn1_object_count) < 0) { + printf("ERROR: Could not parse the data.\n"); + return 1; + } + + /* Dump the data */ + print_asn1(&cms, 0); + + /* Since we know this is CMS data, we can try to interpret it. */ + if (cms.type != 0x30) { + printf("ERROR: The outer type is not a SEQUENCE.\n"); + return 1; + } + + asn1_tree *content_type = cms.child; + if ((content_type == NULL) || (content_type->type != 0x06)) { + printf("ERROR: No ContentType information available.\n"); + return 1; + } + printf("ContentType: "); + if (memcmp(content_type->data, (uint8_t[]){ 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x07, 0x06, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x07, 0x06 }, content_type->length) != 0) { + printf("ERROR: ContentType is not of type encryptedData.\n"); + return 1; + } + printf("encryptedData\n"); + + asn1_tree *encrypted_data = content_type->next->child; + if ((encrypted_data == NULL) || (encrypted_data->type != 0x30)) { + printf("ERROR: EncryptedData not availavble.\n"); + return 1; + } + + asn1_tree *cms_version = encrypted_data->child; + if ((cms_version == NULL) || (cms_version->type != 0x02) || (cms_version->length != 1)) { + printf("ERROR: CMSVersion not availavble.\n"); + return 1; + } + uint8_t version = cms_version->data[0]; + printf("CMSVersion: %d\n", version); + + asn1_tree *encrypted_content_info = cms_version->next; + if ((encrypted_content_info == NULL) || (encrypted_content_info->type != 0x30)) { + printf("ERROR: EncryptedContentInfo not availavble.\n"); + return 1; + } + + asn1_tree *encrypted_content_info_content_type = encrypted_content_info->child; + if ((encrypted_content_info_content_type == NULL) || (encrypted_content_info_content_type->type != 0x06)) { + printf("ERROR: ContentType of EncryptedContentInfo not availavble.\n"); + return 1; + } + if (memcmp(encrypted_content_info_content_type->data, + (uint8_t[]){ 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x07, 0x01 }, encrypted_content_info_content_type->length) != 0) { + printf("ERROR: ContentType of EncrytptedContentInfo is not of type pkcs#7.\n"); + return 1; + } + printf("ContentType of EncryptedContentInfo: pkcs#7\n"); + + asn1_tree *content_encryption_algorithm = encrypted_content_info_content_type->next; + if (content_encryption_algorithm == NULL) { + printf("ERROR: ContentEncryptionAlgorithm not available.\n"); + return 1; + } + + if (content_encryption_algorithm->type == 0x30) { + /* extended definition of ContentEncryptionAlgorithmIdentifier by RFC5911 */ + asn1_tree *encryption_algorithm_identifier = content_encryption_algorithm->child; + if ((encryption_algorithm_identifier == NULL) || (encryption_algorithm_identifier->type != 0x06)) { + printf("ERROR: No encryption algorithm identifier available.\n"); + return 1; + } + if (memcmp(encryption_algorithm_identifier->data, + (uint8_t[]){ 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x01, 0x02 }, encryption_algorithm_identifier->length) == 0) { + printf("Content encryption algorithm: AES-128-CBC.\n"); + asn1_tree *aes_iv = encryption_algorithm_identifier->next; + if ((aes_iv == NULL) || (aes_iv->type != 0x04)) { + printf("ERROR: IV not available.\n"); + return 1; + } + printf("IV:\n"); + print_hex(aes_iv->data, aes_iv->length); + } + else { + printf("Unknown encryption algorithm.\n"); + } + asn1_tree *encrypted_content = content_encryption_algorithm->next; + if ((encrypted_content == NULL) || (encrypted_content->type != 0x80)) { + printf("ERROR: encrypted content not available.\n"); + return 1; + } + printf("Encrypted content:\n"); + print_hex(encrypted_content->data, encrypted_content->length); + + + } + + asn1_tree *unprotected_attrs = encrypted_content_info->next; + if (unprotected_attrs != NULL) { + printf("Unprotected attributes are available.\n"); + } + else { + printf("Unprotected attributes are not available.\n"); + } + + /* try to encode the asn1_tree and check if it has not been altered */ + uint8_t encoded[98]; + if (der_encode(&cms, encoded, sizeof(encoded)) < 0) { + printf("ERROR: Could not reencode the decoded data.\n"); + return 1; + } + if (memcmp(cms_data, encoded, sizeof(cms_data)) != 0) { + printf("ERROR: Data has changes while reencoding it.\n"); + return 1; + } + printf("DER encoded data:\n"); + print_hex(encoded, sizeof(encoded)); + + free(asn1_objects); + + /* Everything worked fine */ + printf("Decoding finished succesfully\n"); + return 0; +} diff --git a/tests/pkg_tiny-asn1/tests/01-run.py b/tests/pkg_tiny-asn1/tests/01-run.py new file mode 100755 index 0000000000..259eaf6264 --- /dev/null +++ b/tests/pkg_tiny-asn1/tests/01-run.py @@ -0,0 +1,20 @@ +#!/usr/bin/env python3 + +# Copyright (C) 2016 Kaspar Schleiser <kaspar@schleiser.de> +# Copyright (C) 2016 Mathias Tausig <mathias.tausig@fh-campuswien.ac.at> +# +# This file is subject to the terms and conditions of the GNU Lesser +# General Public License v2.1. See the file LICENSE in the top level +# directory for more details. + +import os +import sys + +sys.path.append(os.path.join(os.environ['RIOTBASE'], 'dist/tools/testrunner')) +import testrunner + +def testfunc(child): + child.expect('Decoding finished succesfully') + +if __name__ == "__main__": + sys.exit(testrunner.run(testfunc)) -- GitLab