QXmppSaslServer::Response QXmppSaslServerDigestMd5::respond(const QByteArray &request, QByteArray &response)
{
if (m_step == 0) {
QMap<QByteArray, QByteArray> output;
output["nonce"] = m_nonce;
if (!realm().isEmpty())
output["realm"] = realm().toUtf8();
output["qop"] = "auth";
output["charset"] = "utf-8";
output["algorithm"] = "md5-sess";
m_step++;
response = QXmppSaslDigestMd5::serializeMessage(output);
return Challenge;
} else if (m_step == 1) {
const QMap<QByteArray, QByteArray> input = QXmppSaslDigestMd5::parseMessage(request);
const QByteArray realm = input.value("realm");
const QByteArray digestUri = input.value("digest-uri");
if (input.value("qop") != "auth") {
warning("QXmppSaslServerDigestMd5 : Invalid quality of protection");
return Failed;
}
setUsername(QString::fromUtf8(input.value("username")));
if (password().isEmpty() && passwordDigest().isEmpty())
return InputNeeded;
m_nc = input.value("nc");
m_cnonce = input.value("cnonce");
if (!password().isEmpty()) {
m_secret = QCryptographicHash::hash(
username().toUtf8() + ":" + realm + ":" + password().toUtf8(),
QCryptographicHash::Md5);
} else {
m_secret = passwordDigest();
}
if (input.value("response") != calculateDigest("AUTHENTICATE", digestUri, m_secret, m_nonce, m_cnonce, m_nc))
return Failed;
QMap<QByteArray, QByteArray> output;
output["rspauth"] = calculateDigest(QByteArray(), digestUri, m_secret, m_nonce, m_cnonce, m_nc);
m_step++;
response = QXmppSaslDigestMd5::serializeMessage(output);
return Challenge;
} else if (m_step == 2) {
m_step++;
response = QByteArray();
return Succeeded;
} else {
warning("QXmppSaslServerDigestMd5 : Invalid step");
return Failed;
}
}
QByteArray QXmppSaslDigestMd5::calculateDigest(const QByteArray &A2) const
{
QByteArray ha1 = m_secret + ':' + m_nonce + ':' + m_cnonce;
if (!m_authzid.isEmpty())
ha1 += ':' + m_authzid;
return calculateDigest(ha1, A2);
}
int FLDigiDoc::dataDigest(const QByteArray &data, QByteArray &digestResult)
{
int sigLen = SIGNATURE_LEN;
byte buf[sigLen * sizeof(char)];
byte buf1[sigLen * sizeof(char) * 2];
int err = calculateDigest((const byte *)data.data(), data.size() * sizeof(char),
DIGEST_SHA1, buf, &sigLen);
digestResult = encodeBase64(buf, sigLen);
return err;
}
void CellEncrypter::verifyDigestForCell(RelayCell &cell) {
unsigned char zeroDigest[4];
unsigned char receivedDigest[4];
unsigned char calculatedDigest[DIGEST_LEN];
memset(zeroDigest, 0, sizeof(zeroDigest));
cell.getDigest(receivedDigest);
cell.setDigest(zeroDigest);
calculateDigest(&backDigest, cell, calculatedDigest);
if (memcmp(receivedDigest, calculatedDigest, sizeof(receivedDigest)))
throw CryptoMismatchException();
}
bool QXmppSaslClientDigestMd5::respond(const QByteArray &challenge, QByteArray &response)
{
Q_UNUSED(challenge);
const QByteArray digestUri = QString("%1/%2").arg(serviceType(), host()).toUtf8();
if (m_step == 0) {
response = QByteArray();
m_step++;
return true;
} else if (m_step == 1) {
const QMap<QByteArray, QByteArray> input = QXmppSaslDigestMd5::parseMessage(challenge);
if (!input.contains("nonce")) {
warning("QXmppSaslClientDigestMd5 : Invalid input on step 1");
return false;
}
// determine realm
const QByteArray realm = input.value("realm");
// determine quality of protection
const QList<QByteArray> qops = input.value("qop", "auth").split(',');
if (!qops.contains("auth")) {
warning("QXmppSaslClientDigestMd5 : Invalid quality of protection");
return false;
}
m_nonce = input.value("nonce");
m_secret = QCryptographicHash::hash(
username().toUtf8() + ":" + realm + ":" + password().toUtf8(),
QCryptographicHash::Md5);
// Build response
QMap<QByteArray, QByteArray> output;
output["username"] = username().toUtf8();
if (!realm.isEmpty())
output["realm"] = realm;
output["nonce"] = m_nonce;
output["qop"] = "auth";
output["cnonce"] = m_cnonce;
output["nc"] = m_nc;
output["digest-uri"] = digestUri;
output["response"] = calculateDigest("AUTHENTICATE", digestUri, m_secret, m_nonce, m_cnonce, m_nc);
output["charset"] = "utf-8";
response = QXmppSaslDigestMd5::serializeMessage(output);
m_step++;
return true;
} else if (m_step == 2) {
const QMap<QByteArray, QByteArray> input = QXmppSaslDigestMd5::parseMessage(challenge);
// check new challenge
if (input.value("rspauth") != calculateDigest(QByteArray(), digestUri, m_secret, m_nonce, m_cnonce, m_nc)) {
warning("QXmppSaslClientDigestMd5 : Invalid challenge on step 2");
return false;
}
response = QByteArray();
m_step++;
return true;
} else {
warning("QXmppSaslClientDigestMd5 : Invalid step");
return false;
}
}
//============================================================
// Calculates and stores a signature for this SignatureInfo object
// Uses EstEID card to sign the info
// pSigInfo - signature info object
// nSigType - signature type code
// keyfile - RSA key file
// passwd - key password
// certfile - certificate file
//============================================================
EXP_OPTION int calculateSignatureWithEstID(SignedDoc* pSigDoc, SignatureInfo* pSigInfo,
int slot, const char* passwd)
{
int err = ERR_OK, nKey;
LIBHANDLE pLibrary = 0;
CK_ULONG certLen, sigLen, padDigLen;
CK_RV rv;
CK_SLOT_ID slotids[20], slId = 0;
CK_SESSION_HANDLE hSession = 0;
CK_OBJECT_HANDLE hPrivateKey, hKeys[20], hCert;
char keyId[20][20];
CK_ULONG keyIdLen[20];
CK_BYTE certData[2048];
CK_BYTE sigDig[100], padDig[130];
CK_BYTE signature[256];
CK_BYTE padding[] = { 48, 33, 48, 9, 6, 5, 43, 14, 3, 2, 26, 5, 0, 4, 20 };
CK_BYTE padding256[] = { 48, 49, 48, 13, 6, 9, 96, 134, 72, 1 ,101, 3, 4, 2, 1, 5, 0, 4, 32};
//CK_BYTE padding256[] = { 48, 33, 48, 13, 6, 9, 96, 134, 72, 1 ,101, 3, 4, 2, 1, 5, 0, 4, 32};
char* buf1;
int l1, l2;
X509* x509;
DigiDocMemBuf mbuf1;
RETURN_IF_NULL_PARAM(pSigInfo);
RETURN_IF_NULL_PARAM(pSigDoc);
// try active driver driver first
snprintf((char*)signature, sizeof(signature), "DIGIDOC_DRIVER_%d_FILE",
ConfigItem_lookup_int("DIGIDOC_DEFAULT_DRIVER", 1));
for(l1 = 0; l1 < 20; l1++)
slotids[l1] = INVALID_SLOTIID; // initialize
err = loadAndTestDriver(ConfigItem_lookup((const char*)signature),
&pLibrary, (CK_SLOT_ID*)slotids, 20, (CK_ULONG)slot);
ddocDebug(3, "calculateSignatureWithEstID", "Driver handle: %d err = %d slot: %d",
pLibrary, err, slot);
RETURN_IF_NOT(err == ERR_OK, err);
// inittialize
slId = INVALID_SLOTIID; // not found yet
//err = ddocLocateSlotWithSignatureCert(pLibrary, slotids,
// &slId, (char*)signature, sizeof(signature));
// find suitable slotid
for(l1 = 0; l1 < 20; l1++) {
if(slotids[l1] != INVALID_SLOTIID)
ddocDebug(3, "calculateSignatureWithEstID",
"Slot idx: %d = %d", l1, slotids[l1]);
if(slotids[l1] != INVALID_SLOTIID && l1 == slot) {
slId = slotids[l1];
ddocDebug(3, "calculateSignatureWithEstID",
"Select idx: %d slot: %d", l1, slId);
}
}
// open session
if(slId != INVALID_SLOTIID) {
hSession = OpenSession(slId, passwd);
ddocDebug(3, "calculateSignatureWithEstID",
"Open sess for slot: %d sess = %uld\n", slId, hSession);
if (hSession == CK_INVALID_HANDLE) { err = ERR_PKCS_LOGIN; SET_LAST_ERROR(err); return err; }
ddocDebug(3, "calculateSignatureWithEstID", "OpenSession ok, hSession = %d\n", (int)hSession);
// get private key
for(l1 = 0; l1 < 20; l1++) {
memset(keyId[l1], 0, 20);
keyIdLen[l1] = 0;
}
err = LocatePrivateKey(hSession, keyId, keyIdLen, hKeys);
//ddocDebug(3, "calculateSignatureWithEstID", "Priv key: %s", keyId);
//if (hPrivateKey == CK_INVALID_HANDLE) { err = ERR_PKCS_PK; SET_LAST_ERROR(err); return err; }
// get cert
memset(certData, 0, sizeof(certData));
certLen = sizeof(certData);
hCert = LocateCertificate(hSession, certData, &certLen, keyId, keyIdLen, &nKey);
hPrivateKey = hKeys[nKey];
ddocDebug(3, "calculateSignatureWithEstID", "selected priv-key: %ld pos %d id: %s", hPrivateKey, nKey, keyId[nKey]);
ddocDebug(3, "calculateSignatureWithEstID", "Cert-len: %ld", certLen);
//printf("Cert: %s", certData);
if (hCert == (CK_OBJECT_HANDLE)-1) { err = ERR_PKCS_CERT_LOC; SET_LAST_ERROR(err); return err; }
// set cert data
err = ddocDecodeX509Data(&x509, certData, certLen);
if (!x509) { err = ERR_PKCS_CERT_DECODE; }
// save cert in file
if(ConfigItem_lookup_int("DEBUG_LEVEL", 1) > 3)
saveCert(x509, "signer.pem", FILE_FORMAT_PEM);
//AM 07.03.08 setSignatureCert for BDOC
if(!strcmp(pSigDoc->szFormat, BDOC_XML_1_NAME)) {
setSignatureCertBDOC(pSigInfo, x509);
}else{
setSignatureCert(pSigInfo, x509);
}
//AM 12.03.08
//VS 23.02.2010 - not necessary?
/*if(!strcmp(pSigDoc->szFormat, BDOC_XML_1_NAME)) {
findCAForCertificate(&ppCA, x509);
err = bdocSigInfo_addCert(pSigInfo, ppCA, CERTID_TYPE_CA_CERTID);
}*/
// FIXME
createTimestamp(pSigDoc, (char*)sigDig, sizeof(sigDig));
setString((char**)&(pSigInfo->szTimeStamp), (const char*)sigDig, -1);
// Signed properties digest
buf1 = createXMLSignedProperties(pSigDoc, pSigInfo, 0);
//dumpInFile("sigprop-sign1.txt", buf1);
if (!buf1) {
err = ERR_NULL_POINTER;
SET_LAST_ERROR(err);
return err;
}
mbuf1.pMem = canonicalizeXML((char*)buf1, strlen(buf1));
mbuf1.nLen = strlen((const char*)mbuf1.pMem);
ddocDebugWriteFile(4, "sigprop-signed.txt", &mbuf1);
l2 = sizeof(sigDig);
//AM 24.04.08
if(!strcmp(pSigDoc->szFormat, BDOC_XML_1_NAME))
err = calculateDigest((const byte*)mbuf1.pMem, mbuf1.nLen, BDOC_DIGEST, sigDig, &l2);
else
err = calculateDigest((const byte*)mbuf1.pMem, mbuf1.nLen, DIGEST_SHA1, sigDig, &l2);
free(buf1);
ddocMemBuf_free(&mbuf1);
if (err != ERR_OK) {
SET_LAST_ERROR(err);
return err;
}
ddocSigInfo_SetSigPropDigest(pSigInfo, (const char*)sigDig, l2);
ddocSigInfo_SetSigPropRealDigest(pSigInfo, (const char*)sigDig, l2);
// create signed info
//AM 11.03.08 createXMLSignedInfo for BDOC
if(!strcmp(pSigDoc->szFormat, BDOC_XML_1_NAME))
buf1 = createXMLSignedInfoBDoc(pSigDoc, pSigInfo);
else
buf1 = createXMLSignedInfo(pSigDoc, pSigInfo);
if (!buf1) {
err = ERR_NULL_POINTER;
SET_LAST_ERROR(err);
return err ;
}
// get digest
l2 = sizeof(sigDig);
/*if(!strcmp(pSigDoc->szFormat, BDOC_XML_1_NAME))
err = calculateDigest((const byte*)buf1, strlen(buf1), BDOC_DIGEST, sigDig, &l2);
else*/
err = calculateDigest((const byte*)buf1, strlen(buf1), DIGEST_SHA1, sigDig, &l2);
free(buf1);
if (err != ERR_OK) {
err = ERR_NULL_POINTER;
SET_LAST_ERROR(err);
return err;
}
ddocSigInfo_SetSigInfoRealDigest(pSigInfo, (const char*)sigDig, l2);
// sign data
sigLen = sizeof(signature);
memset(signature, 0, sizeof(signature));
// pad PKCS#1 ver 1
/*if(!strcmp(pSigDoc->szFormat, BDOC_XML_1_NAME) && BDOC_DIGEST==DIGEST_SHA256) {
padDigLen = 51;
memset(padDig, 0, sizeof(padDig));
memcpy(padDig, padding256, 19);
memcpy(padDig + 19, sigDig, l2);
} else {*/
padDigLen = 35;
memset(padDig, 0, sizeof(padDig));
memcpy(padDig, padding, 15);
memcpy(padDig + 15, sigDig, l2);
//}
//rv = RSA_padding_add_PKCS1_type_1(padDig, padDigLen, sigDig, l2);
//rv = RSA_padding_check_PKCS1_type_1(sigDig, l2, padDig, padDigLen, padDigLen+1);
// checkErrors();
// sign data
rv = SignData(hSession, hPrivateKey,
signature, &sigLen, padDig, padDigLen);
if (rv != CKR_OK) {
err = ERR_PKCS_SIGN_DATA;
SET_LAST_ERROR(err);
return err;
}
// set signature value
ddocSigInfo_SetSignatureValue(pSigInfo, (const char*)signature, (int)sigLen);
} // if slotid found
if(hSession)
closePKCS11Library(pLibrary, hSession);
return err;
}
//============================================================
// Calculates and stores a signature for this SignatureInfo object
// Uses EstEID card to sign the info
// pSigInfo - signature info object
// nSigType - signature type code
// keyfile - RSA key file
// passwd - key password
// certfile - certificate file
//============================================================
EXP_OPTION int calculateSignatureWithEstID(SignedDoc* pSigDoc, SignatureInfo* pSigInfo,
int slot, const char* passwd)
{
int err = ERR_OK, nKey;
LIBHANDLE pLibrary = 0;
CK_ULONG certLen, sigLen, padDigLen;
CK_RV rv;
CK_SLOT_ID slotids[20], slId = 0;
CK_SESSION_HANDLE hSession = 0;
CK_OBJECT_HANDLE hPrivateKey = 0, hKeys[20], hCert;
char keyId[20][20], kId[20];
CK_ULONG keyIdLen[20];
CK_BYTE certData[2048];
CK_BYTE sigDig[100], padDig[130];
CK_BYTE signature[256];
CK_BYTE padding[] = { 48, 33, 48, 9, 6, 5, 43, 14, 3, 2, 26, 5, 0, 4, 20 };
//CK_BYTE padding256[] = { 48, 49, 48, 13, 6, 9, 96, 134, 72, 1 ,101, 3, 4, 2, 1, 5, 0, 4, 32};
//CK_BYTE padding256[] = { 48, 33, 48, 13, 6, 9, 96, 134, 72, 1 ,101, 3, 4, 2, 1, 5, 0, 4, 32};
char* buf1;
int l1, l2, kILen;
X509* x509 = 0;
DigiDocMemBuf mbuf1;
RETURN_IF_NULL_PARAM(pSigInfo);
RETURN_IF_NULL_PARAM(pSigDoc);
// try active driver driver first
snprintf((char*)signature, sizeof(signature), "DIGIDOC_DRIVER_%d_FILE",
ConfigItem_lookup_int("DIGIDOC_DEFAULT_DRIVER", 1));
for(l1 = 0; l1 < 20; l1++)
slotids[l1] = INVALID_SLOTIID; // initialize
err = loadAndTestDriver(ConfigItem_lookup((const char*)signature),
&pLibrary, (CK_SLOT_ID*)slotids, 20, (CK_ULONG)slot);
ddocDebug(3, "calculateSignatureWithEstID", "Driver handle: %d err = %d slot: %d",
pLibrary, err, slot);
RETURN_IF_NOT(err == ERR_OK, err);
// inittialize
slId = INVALID_SLOTIID; // not found yet
// try key-usage check
if(ConfigItem_lookup_int("KEY_USAGE_CHECK", 1)) {
kILen = sizeof(kId);
ddocDebug(3, "calculateSignatureWithEstID", "Find slot by key-usage, slot: %d", slot);
err = ddocLocateSlotWithSignatureCert(pLibrary, slotids, &slId, &x509, kId, &kILen, slot, &l1);
ddocDebug(3, "calculateSignatureWithEstID",
"Select by key-usage slot idx: %d = %d err: %d key-id: %s, kid-len: %d", l1, slId, err, kId, kILen);
if(err != ERR_OK || l1 < 0 || l1 >= 20) {
SET_LAST_ERROR(ERR_SIGNERS_CERT_NON_REPU);
return ERR_SIGNERS_CERT_NON_REPU;
}
} else {
ddocDebug(3, "calculateSignatureWithEstID", "Find slot by slot idx: %d", slot);
for(l1 = 0; (l1 < 20) && (slId == INVALID_SLOTIID); l1++) {
if(slotids[l1] != INVALID_SLOTIID)
ddocDebug(3, "calculateSignatureWithEstID",
"Slot idx: %d = %d", l1, slotids[l1]);
if(slotids[l1] != INVALID_SLOTIID && l1 == slot) {
slId = slotids[l1];
ddocDebug(3, "calculateSignatureWithEstID",
"Select idx: %d slot: %d", l1, slId);
} // if slotid
} // for
}
// use default if not found by key-id or direct
if(slId == INVALID_SLOTIID) {
l1 = ConfigItem_lookup_int("DIGIDOC_SIGNATURE_SLOT", 0);
if(slotids[l1] != INVALID_SLOTIID) {
ddocDebug(3, "calculateSignatureWithEstID",
"Select default slot idx: %d = %d", l1, slotids[l1]);
slId = slotids[l1];
}
}
// open session
if(slId != INVALID_SLOTIID) {
hSession = OpenSession(slId, passwd);
ddocDebug(3, "calculateSignatureWithEstID",
"Open sess for slot: %d sess = %d", slId, hSession);
if (hSession == CK_INVALID_HANDLE) { err = ERR_PKCS_LOGIN; SET_LAST_ERROR(err); return err; }
ddocDebug(3, "calculateSignatureWithEstID", "OpenSession ok, hSession1 = %d", (int)hSession);
if(!x509) {
ddocDebug(3, "calculateSignatureWithEstID", "Cert ok");
// get private key
for(l1 = 0; l1 < 20; l1++) {
memset(keyId[l1], 0, 20);
keyIdLen[l1] = 0;
}
err = LocatePrivateKey(hSession, keyId, keyIdLen, hKeys);
//ddocDebug(3, "calculateSignatureWithEstID", "Priv key: %s", keyId);
//
// get cert
memset(certData, 0, sizeof(certData));
certLen = sizeof(certData);
hCert = LocateCertificate(hSession, certData, &certLen, keyId, keyIdLen, &nKey);
hPrivateKey = hKeys[nKey];
ddocDebug(3, "calculateSignatureWithEstID", "selected priv-key: %ld pos %d id: %s", hPrivateKey, nKey, keyId[nKey]);
ddocDebug(3, "calculateSignatureWithEstID", "Cert-len: %ld", certLen);
//printf("Cert: %s", certData);
if (hCert == (CK_OBJECT_HANDLE)-1) { err = ERR_PKCS_CERT_LOC; SET_LAST_ERROR(err); return err; }
// set cert data
err = ddocDecodeX509Data(&x509, certData, certLen);
} else { // cert already found
//kILen = sizeof(kId);
ddocDebug(3, "calculateSignatureWithEstID", "Locate priv key2 id: %s, len: %d, hkey: %d", kId, kILen, hPrivateKey);
err = LocatePrivateKeyWithId(hSession, (CK_BYTE_PTR)kId, kILen, &hPrivateKey);
ddocDebug(3, "calculateSignatureWithEstID", "Priv key-id: %s len: %d hkey: %d err: %d", kId, kILen, hPrivateKey, err);
}
ddocDebug(3, "calculateSignatureWithEstID", "Priv key: %d err: %d", hPrivateKey, err);
if (hPrivateKey == CK_INVALID_HANDLE) { err = ERR_PKCS_PK; SET_LAST_ERROR(err); return err; }
if (!x509) { err = ERR_PKCS_CERT_DECODE; }
// save cert in file
if(ConfigItem_lookup_int("DEBUG_LEVEL", 1) > 3)
saveCert(x509, "signer.pem", FILE_FORMAT_PEM);
setSignatureCert(pSigInfo, x509);
// FIXME
createTimestamp(pSigDoc, (char*)sigDig, sizeof(sigDig));
setString((char**)&(pSigInfo->szTimeStamp), (const char*)sigDig, -1);
// Signed properties digest
buf1 = createXMLSignedProperties(pSigDoc, pSigInfo, 0);
//dumpInFile("sigprop-sign1.txt", buf1);
if (!buf1) {
err = ERR_NULL_POINTER;
SET_LAST_ERROR(err);
return err;
}
mbuf1.pMem = canonicalizeXML((char*)buf1, strlen(buf1));
mbuf1.nLen = strlen((const char*)mbuf1.pMem);
ddocDebugWriteFile(4, "sigprop-signed.txt", &mbuf1);
l2 = sizeof(sigDig);
err = calculateDigest((const byte*)mbuf1.pMem, mbuf1.nLen, DIGEST_SHA1, sigDig, &l2);
free(buf1);
ddocMemBuf_free(&mbuf1);
if (err != ERR_OK) {
SET_LAST_ERROR(err);
return err;
}
ddocSigInfo_SetSigPropDigest(pSigInfo, (const char*)sigDig, l2);
ddocSigInfo_SetSigPropRealDigest(pSigInfo, (const char*)sigDig, l2);
// create signed info
buf1 = createXMLSignedInfo(pSigDoc, pSigInfo);
if (!buf1) {
err = ERR_NULL_POINTER;
SET_LAST_ERROR(err);
return err ;
}
// get digest
l2 = sizeof(sigDig);
err = calculateDigest((const byte*)buf1, strlen(buf1), DIGEST_SHA1, sigDig, &l2);
free(buf1);
if (err != ERR_OK) {
err = ERR_NULL_POINTER;
SET_LAST_ERROR(err);
return err;
}
ddocSigInfo_SetSigInfoRealDigest(pSigInfo, (const char*)sigDig, l2);
// sign data
sigLen = sizeof(signature);
memset(signature, 0, sizeof(signature));
// pad PKCS#1 ver 1
padDigLen = 35;
memset(padDig, 0, sizeof(padDig));
memcpy(padDig, padding, 15);
memcpy(padDig + 15, sigDig, l2);
//rv = RSA_padding_add_PKCS1_type_1(padDig, padDigLen, sigDig, l2);
//rv = RSA_padding_check_PKCS1_type_1(sigDig, l2, padDig, padDigLen, padDigLen+1);
// checkErrors();
// sign data
rv = SignData(hSession, hPrivateKey,
signature, &sigLen, padDig, padDigLen);
if (rv != CKR_OK) {
err = ERR_PKCS_SIGN_DATA;
SET_LAST_ERROR(err);
return err;
}
// set signature value
ddocSigInfo_SetSignatureValue(pSigInfo, (const char*)signature, (int)sigLen);
ddocDebug(3, "calculateSignatureWithEstID", "Sig-len: %ld", sigLen);
} // if slotid found
if(hSession)
closePKCS11Library(pLibrary, hSession);
return err;
}
void CellEncrypter::setDigestForCell(RelayCell &cell) {
unsigned char buf[DIGEST_LEN];
calculateDigest(&forwardDigest, cell, buf);
cell.setDigest(buf);
}