| package org.bouncycastle.cms; |
| |
| import java.util.ArrayList; |
| import java.util.HashMap; |
| import java.util.HashSet; |
| import java.util.Iterator; |
| import java.util.List; |
| import java.util.Map; |
| import java.util.Set; |
| |
| import org.bouncycastle.asn1.ASN1Encodable; |
| import org.bouncycastle.asn1.ASN1ObjectIdentifier; |
| import org.bouncycastle.asn1.DERTaggedObject; |
| import org.bouncycastle.asn1.cms.CMSObjectIdentifiers; |
| // BEGIN android-removed |
| // import org.bouncycastle.asn1.cms.OtherRevocationInfoFormat; |
| // import org.bouncycastle.asn1.cryptopro.CryptoProObjectIdentifiers; |
| // END android-removed |
| import org.bouncycastle.asn1.nist.NISTObjectIdentifiers; |
| import org.bouncycastle.asn1.oiw.OIWObjectIdentifiers; |
| import org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers; |
| import org.bouncycastle.asn1.teletrust.TeleTrusTObjectIdentifiers; |
| import org.bouncycastle.asn1.x509.AlgorithmIdentifier; |
| import org.bouncycastle.asn1.x9.X9ObjectIdentifiers; |
| import org.bouncycastle.cert.X509AttributeCertificateHolder; |
| import org.bouncycastle.cert.X509CRLHolder; |
| import org.bouncycastle.cert.X509CertificateHolder; |
| import org.bouncycastle.util.Arrays; |
| import org.bouncycastle.util.Store; |
| |
| public class CMSSignedGenerator |
| { |
| /** |
| * Default type for the signed data. |
| */ |
| public static final String DATA = CMSObjectIdentifiers.data.getId(); |
| |
| public static final String DIGEST_SHA1 = OIWObjectIdentifiers.idSHA1.getId(); |
| public static final String DIGEST_SHA224 = NISTObjectIdentifiers.id_sha224.getId(); |
| public static final String DIGEST_SHA256 = NISTObjectIdentifiers.id_sha256.getId(); |
| public static final String DIGEST_SHA384 = NISTObjectIdentifiers.id_sha384.getId(); |
| public static final String DIGEST_SHA512 = NISTObjectIdentifiers.id_sha512.getId(); |
| public static final String DIGEST_MD5 = PKCSObjectIdentifiers.md5.getId(); |
| // BEGIN android-removed |
| // public static final String DIGEST_GOST3411 = CryptoProObjectIdentifiers.gostR3411.getId(); |
| // public static final String DIGEST_RIPEMD128 = TeleTrusTObjectIdentifiers.ripemd128.getId(); |
| // public static final String DIGEST_RIPEMD160 = TeleTrusTObjectIdentifiers.ripemd160.getId(); |
| // public static final String DIGEST_RIPEMD256 = TeleTrusTObjectIdentifiers.ripemd256.getId(); |
| // END android-removed |
| |
| public static final String ENCRYPTION_RSA = PKCSObjectIdentifiers.rsaEncryption.getId(); |
| public static final String ENCRYPTION_DSA = X9ObjectIdentifiers.id_dsa_with_sha1.getId(); |
| public static final String ENCRYPTION_ECDSA = X9ObjectIdentifiers.ecdsa_with_SHA1.getId(); |
| public static final String ENCRYPTION_RSA_PSS = PKCSObjectIdentifiers.id_RSASSA_PSS.getId(); |
| // BEGIN android-removed |
| // public static final String ENCRYPTION_GOST3410 = CryptoProObjectIdentifiers.gostR3410_94.getId(); |
| // public static final String ENCRYPTION_ECGOST3410 = CryptoProObjectIdentifiers.gostR3410_2001.getId(); |
| // END android-removed |
| |
| private static final String ENCRYPTION_ECDSA_WITH_SHA1 = X9ObjectIdentifiers.ecdsa_with_SHA1.getId(); |
| private static final String ENCRYPTION_ECDSA_WITH_SHA224 = X9ObjectIdentifiers.ecdsa_with_SHA224.getId(); |
| private static final String ENCRYPTION_ECDSA_WITH_SHA256 = X9ObjectIdentifiers.ecdsa_with_SHA256.getId(); |
| private static final String ENCRYPTION_ECDSA_WITH_SHA384 = X9ObjectIdentifiers.ecdsa_with_SHA384.getId(); |
| private static final String ENCRYPTION_ECDSA_WITH_SHA512 = X9ObjectIdentifiers.ecdsa_with_SHA512.getId(); |
| |
| private static final Set NO_PARAMS = new HashSet(); |
| private static final Map EC_ALGORITHMS = new HashMap(); |
| |
| static |
| { |
| NO_PARAMS.add(ENCRYPTION_DSA); |
| NO_PARAMS.add(ENCRYPTION_ECDSA); |
| NO_PARAMS.add(ENCRYPTION_ECDSA_WITH_SHA1); |
| NO_PARAMS.add(ENCRYPTION_ECDSA_WITH_SHA224); |
| NO_PARAMS.add(ENCRYPTION_ECDSA_WITH_SHA256); |
| NO_PARAMS.add(ENCRYPTION_ECDSA_WITH_SHA384); |
| NO_PARAMS.add(ENCRYPTION_ECDSA_WITH_SHA512); |
| |
| EC_ALGORITHMS.put(DIGEST_SHA1, ENCRYPTION_ECDSA_WITH_SHA1); |
| EC_ALGORITHMS.put(DIGEST_SHA224, ENCRYPTION_ECDSA_WITH_SHA224); |
| EC_ALGORITHMS.put(DIGEST_SHA256, ENCRYPTION_ECDSA_WITH_SHA256); |
| EC_ALGORITHMS.put(DIGEST_SHA384, ENCRYPTION_ECDSA_WITH_SHA384); |
| EC_ALGORITHMS.put(DIGEST_SHA512, ENCRYPTION_ECDSA_WITH_SHA512); |
| } |
| |
| protected List certs = new ArrayList(); |
| protected List crls = new ArrayList(); |
| protected List _signers = new ArrayList(); |
| protected List signerGens = new ArrayList(); |
| protected Map digests = new HashMap(); |
| |
| /** |
| * base constructor |
| */ |
| protected CMSSignedGenerator() |
| { |
| } |
| |
| protected Map getBaseParameters(ASN1ObjectIdentifier contentType, AlgorithmIdentifier digAlgId, byte[] hash) |
| { |
| Map param = new HashMap(); |
| param.put(CMSAttributeTableGenerator.CONTENT_TYPE, contentType); |
| param.put(CMSAttributeTableGenerator.DIGEST_ALGORITHM_IDENTIFIER, digAlgId); |
| param.put(CMSAttributeTableGenerator.DIGEST, Arrays.clone(hash)); |
| return param; |
| } |
| |
| /** |
| * Add a certificate to the certificate set to be included with the generated SignedData message. |
| * |
| * @param certificate the certificate to be included. |
| * @throws CMSException if the certificate cannot be encoded for adding. |
| */ |
| public void addCertificate( |
| X509CertificateHolder certificate) |
| throws CMSException |
| { |
| certs.add(certificate.toASN1Structure()); |
| } |
| |
| /** |
| * Add the certificates in certStore to the certificate set to be included with the generated SignedData message. |
| * |
| * @param certStore the store containing the certificates to be included. |
| * @throws CMSException if the certificates cannot be encoded for adding. |
| */ |
| public void addCertificates( |
| Store certStore) |
| throws CMSException |
| { |
| certs.addAll(CMSUtils.getCertificatesFromStore(certStore)); |
| } |
| |
| /** |
| * Add a CRL to the CRL set to be included with the generated SignedData message. |
| * |
| * @param crl the CRL to be included. |
| */ |
| public void addCRL(X509CRLHolder crl) |
| { |
| crls.add(crl.toASN1Structure()); |
| } |
| |
| /** |
| * Add the CRLs in crlStore to the CRL set to be included with the generated SignedData message. |
| * |
| * @param crlStore the store containing the CRLs to be included. |
| * @throws CMSException if the CRLs cannot be encoded for adding. |
| */ |
| public void addCRLs( |
| Store crlStore) |
| throws CMSException |
| { |
| crls.addAll(CMSUtils.getCRLsFromStore(crlStore)); |
| } |
| |
| /** |
| * Add the attribute certificates in attrStore to the certificate set to be included with the generated SignedData message. |
| * |
| * @param attrCert the store containing the certificates to be included. |
| * @throws CMSException if the attribute certificate cannot be encoded for adding. |
| */ |
| public void addAttributeCertificate( |
| X509AttributeCertificateHolder attrCert) |
| throws CMSException |
| { |
| certs.add(new DERTaggedObject(false, 2, attrCert.toASN1Structure())); |
| } |
| |
| /** |
| * Add the attribute certificates in attrStore to the certificate set to be included with the generated SignedData message. |
| * |
| * @param attrStore the store containing the certificates to be included. |
| * @throws CMSException if the attribute certificate cannot be encoded for adding. |
| */ |
| public void addAttributeCertificates( |
| Store attrStore) |
| throws CMSException |
| { |
| certs.addAll(CMSUtils.getAttributeCertificatesFromStore(attrStore)); |
| } |
| |
| // BEGIN android-removed |
| // /** |
| // * Add a single instance of otherRevocationData to the CRL set to be included with the generated SignedData message. |
| // * |
| // * @param otherRevocationInfoFormat the OID specifying the format of the otherRevocationInfo data. |
| // * @param otherRevocationInfo the otherRevocationInfo ASN.1 structure. |
| // */ |
| // public void addOtherRevocationInfo( |
| // ASN1ObjectIdentifier otherRevocationInfoFormat, |
| // ASN1Encodable otherRevocationInfo) |
| // { |
| // crls.add(new DERTaggedObject(false, 1, new OtherRevocationInfoFormat(otherRevocationInfoFormat, otherRevocationInfo))); |
| // } |
| // |
| // /** |
| // * Add a Store of otherRevocationData to the CRL set to be included with the generated SignedData message. |
| // * |
| // * @param otherRevocationInfoFormat the OID specifying the format of the otherRevocationInfo data. |
| // * @param otherRevocationInfos a Store of otherRevocationInfo data to add. |
| // */ |
| // public void addOtherRevocationInfo( |
| // ASN1ObjectIdentifier otherRevocationInfoFormat, |
| // Store otherRevocationInfos) |
| // { |
| // crls.addAll(CMSUtils.getOthersFromStore(otherRevocationInfoFormat, otherRevocationInfos)); |
| // } |
| // END android-removed |
| |
| /** |
| * Add a store of pre-calculated signers to the generator. |
| * |
| * @param signerStore store of signers |
| */ |
| public void addSigners( |
| SignerInformationStore signerStore) |
| { |
| Iterator it = signerStore.getSigners().iterator(); |
| |
| while (it.hasNext()) |
| { |
| _signers.add(it.next()); |
| } |
| } |
| |
| /** |
| * Add a generator for a particular signer to this CMS SignedData generator. |
| * |
| * @param infoGen the generator representing the particular signer. |
| */ |
| public void addSignerInfoGenerator(SignerInfoGenerator infoGen) |
| { |
| signerGens.add(infoGen); |
| } |
| |
| /** |
| * Return a map of oids and byte arrays representing the digests calculated on the content during |
| * the last generate. |
| * |
| * @return a map of oids (as String objects) and byte[] representing digests. |
| */ |
| public Map getGeneratedDigests() |
| { |
| return new HashMap(digests); |
| } |
| } |