org.bouncycastle.oer.its.ieee1609dot2.SignerIdentifier Maven / Gradle / Ivy
Show all versions of bcutil-lts8on Show documentation
package org.bouncycastle.oer.its.ieee1609dot2;
import org.bouncycastle.asn1.ASN1Choice;
import org.bouncycastle.asn1.ASN1Encodable;
import org.bouncycastle.asn1.ASN1Object;
import org.bouncycastle.asn1.ASN1Primitive;
import org.bouncycastle.asn1.ASN1TaggedObject;
import org.bouncycastle.asn1.BERTags;
import org.bouncycastle.asn1.DERNull;
import org.bouncycastle.asn1.DERTaggedObject;
import org.bouncycastle.oer.its.ieee1609dot2.basetypes.HashedId8;
/**
* SignerIdentifier
* This structure allows the recipient of data to determine which
* keying material to use to authenticate the data. It also indicates the
* verification type to be used to generate the hash for verification, as
* specified in 5.3.1.
*
* - If the choice indicated is digest:
*
* - The structure contains the HashedId8 of the relevant certificate. The
* HashedId8 is calculated with the whole-certificate hash algorithm,
* determined as described in 6.4.3.
*
* - The verification type is certificate and the certificate data
* passed to the hash function as specified in 5.3.1 is the authorization
* certificate.
*
*
* - If the choice indicated is certificate:
*
* - The structure contains one or more Certificate structures, in order
* such that the first certificate is the authorization certificate and each
* subsequent certificate is the issuer of the one before it.
*
* - The verification type is certificate and the certificate data
* passed to the hash function as specified in 5.3.1 is the authorization
* certificate.
*
*
* - If the choice indicated is self:
*
* - The structure does not contain any data beyond the indication that
* the choice value is self.
*
* - The verification type is self-signed.
*
*
*
* Critical information fields:
*
* - If present, this is a critical information field as defined in 5.2.6.
* An implementation that does not recognize the CHOICE value for this type
* when verifying a signed SPDU shall indicate that the signed SPDU is invalid.
*
*
* - If present, certificate is a critical information field as defined in
* 5.2.6. An implementation that does not support the number of certificates
* in certificate when verifying a signed SPDU shall indicate that the signed
* SPDU is invalid. A compliant implementation shall support certificate
* fields containing at least one certificate.
*
*
* SignerIdentifier ::= CHOICE {
* digest HashedId8,
* certificate SequenceOfCertificate,
* self NULL,
* ...
* }
*/
public class SignerIdentifier
extends ASN1Object
implements ASN1Choice
{
public static final int digest = 0;
public static final int certificate = 1;
public static final int self = 2;
private final int choice;
private final ASN1Encodable signerIdentifier;
public SignerIdentifier(int choice, ASN1Encodable value)
{
this.choice = choice;
this.signerIdentifier = value;
}
private SignerIdentifier(ASN1TaggedObject ato)
{
choice = ato.getTagNo();
switch (choice)
{
case digest:
signerIdentifier = HashedId8.getInstance(ato.getExplicitBaseObject());
break;
case certificate:
signerIdentifier = SequenceOfCertificate.getInstance(ato.getExplicitBaseObject());
break;
case self:
signerIdentifier = DERNull.getInstance(ato.getExplicitBaseObject());
break;
default:
throw new IllegalArgumentException("invalid choice value " + choice);
}
}
public static SignerIdentifier getInstance(Object src)
{
if (src instanceof SignerIdentifier)
{
return (SignerIdentifier)src;
}
if (src != null)
{
return new SignerIdentifier(ASN1TaggedObject.getInstance(src, BERTags.CONTEXT_SPECIFIC));
}
return null;
}
public int getChoice()
{
return choice;
}
public static SignerIdentifier digest(HashedId8 id)
{
return new SignerIdentifier(digest, id);
}
public static SignerIdentifier certificate(SequenceOfCertificate sequenceOfCertificate)
{
return new SignerIdentifier(certificate, sequenceOfCertificate);
}
public static SignerIdentifier self()
{
return new SignerIdentifier(self, DERNull.INSTANCE);
}
@Override
public ASN1Primitive toASN1Primitive()
{
return new DERTaggedObject(choice, signerIdentifier);
}
public ASN1Encodable getSignerIdentifier()
{
return signerIdentifier;
}
}