de.rub.nds.x509attacker.x509.parser.CertificateSignatureAlgorithmIdentifierParser Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of x509-attacker Show documentation

X.509-Attacker is a tool based on ASN.1 Tool for creating arbitrary certificates; including especially invalid and malformed certificates. Since X.509 certificates encode their contents in ASN.1, this tool extends the features of ASN.1 Tool in terms of certificate signing. Also, X.509-Attacker introduces a feature of referencing XML elements in order to avoid redundancies when defining certificates in XML.

The newest version!

/*
 * X.509-Attacker - A Library for Arbitrary X.509 Certificates
 *
 * Copyright 2014-2023 Ruhr University Bochum, Paderborn University, Technology Innovation Institute, and Hackmanit GmbH
 *
 * Licensed under Apache License, Version 2.0
 * http://www.apache.org/licenses/LICENSE-2.0.txt
 */
package de.rub.nds.x509attacker.x509.parser;

import de.rub.nds.asn1.constants.TagClass;
import de.rub.nds.asn1.constants.UniversalTagNumber;
import de.rub.nds.asn1.parser.ParserHelper;
import de.rub.nds.x509attacker.chooser.X509Chooser;
import de.rub.nds.x509attacker.constants.X509SignatureAlgorithm;
import de.rub.nds.x509attacker.x509.model.CertificateSignatureAlgorithmIdentifier;
import de.rub.nds.x509attacker.x509.model.publickey.parameters.X509NullParameters;
import java.io.BufferedInputStream;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;

public class CertificateSignatureAlgorithmIdentifierParser
        extends X509ComponentContainerParser {

    private static final Logger LOGGER = LogManager.getLogger();

    public CertificateSignatureAlgorithmIdentifierParser(
            X509Chooser chooser, CertificateSignatureAlgorithmIdentifier algorithmIdentifier) {
        super(chooser, algorithmIdentifier);
    }

    @Override
    protected void parseSubcomponents(BufferedInputStream inputStream) {
        LOGGER.debug("Parsing CertificateSignatureAlgorithmIdentifier");
        ParserHelper.parseAsn1ObjectIdentifier(encodable.getAlgorithm(), inputStream);
        X509SignatureAlgorithm signatureAlgorithm =
                X509SignatureAlgorithm.decodeFromOidBytes(
                        encodable.getAlgorithm().getValueAsOid().getEncoded());
        LOGGER.debug(
                "Parsed Oid: {} ({})",
                encodable.getAlgorithm().getValue().getValue(),
                signatureAlgorithm != null ? signatureAlgorithm.name() : "unknown");
        if (signatureAlgorithm == null) {
            LOGGER.debug("Unkown signature algorithm. Not parsing anything");
            return;
        }

        switch (signatureAlgorithm) {
            case DSA_WITH_SHA1:
            case DSA_WITH_SHA224:
            case DSA_WITH_SHA256:
            case DSA_WITH_SHA384:
            case DSA_WITH_SHA512:
                // No parameters, not even null
                LOGGER.debug("{} has no parameters. Not parsing any.", signatureAlgorithm.name());
                break;
            case ECDSA_WITH_SHA1:
            case ECDSA_WITH_SHA224:
            case ECDSA_WITH_SHA256:
            case ECDSA_WITH_SHA384:
            case ECDSA_WITH_SHA512:
                if (ParserHelper.canParse(
                        inputStream, TagClass.UNIVERSAL, UniversalTagNumber.NULL.getIntValue())) {
                    LOGGER.debug(
                            "{} seems to have X509NullParameters. Parsing X509NullParameters",
                            signatureAlgorithm.name());
                    X509NullParameters nullParameters = new X509NullParameters("nullParameters");
                    encodable.setParameters(nullParameters);
                    nullParameters.getParser(chooser).parse(inputStream);
                    nullParameters.getHandler(chooser).adjustContextAfterParse();
                }
                break;
            case MD2_WITH_RSA_ENCRYPTION:
            case MD4_WITH_RSA_ENCRYPTION:
            case MD5_WITH_RSA_ENCRYPTION:
            case SHA1_WITH_RSA_ENCRYPTION:
            case SHA224_WITH_RSA_ENCRYPTION:
            case SHA256_WITH_RSA_ENCRYPTION:
            case SHA384_WITH_RSA_ENCRYPTION:
            case SHA512_WITH_RSA_ENCRYPTION:
                X509NullParameters nullParameters = new X509NullParameters("nullParameters");
                encodable.setParameters(nullParameters);
                nullParameters.getParser(chooser).parse(inputStream);
                nullParameters.getHandler(chooser).adjustContextAfterParse();
                LOGGER.debug(
                        "{} must have X509NullParameters. Parsed X509NullParameters",
                        signatureAlgorithm.name());
                break;
            default:
                throw new UnsupportedOperationException(
                        "Encountered unknown signature algorithm: " + signatureAlgorithm.name());
        }
    }
}