TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / 86a47f85fa9d33bc7e7fbf12828f66603992800c / . / library / x509_oid.c
blob: 6ba04cf80df57eb770d13987dc2d2575bcb55371 [file] [log] [blame]
Gilles Peskine47c85792025-05-07 14:35:04 +0200[diff] [blame]1/**
Gilles Peskineb825dcf2025-05-07 19:41:09 +0200[diff] [blame]2 * \file x509_oid.c
Gilles Peskine47c85792025-05-07 14:35:04 +0200[diff] [blame]3 *
4 * \brief Object Identifier (OID) database
5 *
6 * Copyright The Mbed TLS Contributors
7 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
8 */
9
10#include "common.h"
11
12#if defined(MBEDTLS_OID_C)
13
Gilles Peskine86a47f82025-05-07 20:20:12 +0200[diff] [blame^]14#include "x509_oid.h"
Gilles Peskine47c85792025-05-07 14:35:04 +0200[diff] [blame]15#include "mbedtls/rsa.h"
16#include "mbedtls/error_common.h"
17#include "mbedtls/pk.h"
18
19#include <stdio.h>
20#include <string.h>
21
22#include "mbedtls/platform.h"
23
24/*
25 * Macro to automatically add the size of #define'd OIDs
26 */
27#define ADD_LEN(s) s, MBEDTLS_OID_SIZE(s)
28
29/*
30 * Macro to generate mbedtls_oid_descriptor_t
31 */
32#if !defined(MBEDTLS_X509_REMOVE_INFO)
33#define OID_DESCRIPTOR(s, name, description) { ADD_LEN(s), name, description }
34#define NULL_OID_DESCRIPTOR { NULL, 0, NULL, NULL }
35#else
36#define OID_DESCRIPTOR(s, name, description) { ADD_LEN(s) }
37#define NULL_OID_DESCRIPTOR { NULL, 0 }
38#endif
39
40/*
41 * Macro to generate an internal function for oid_XXX_from_asn1() (used by
42 * the other functions)
43 */
44#define FN_OID_TYPED_FROM_ASN1(TYPE_T, NAME, LIST) \
45 static const TYPE_T *oid_ ## NAME ## _from_asn1( \
46 const mbedtls_asn1_buf *oid) \
47 { \
48 const TYPE_T *p = (LIST); \
49 const mbedtls_oid_descriptor_t *cur = \
50 (const mbedtls_oid_descriptor_t *) p; \
51 if (p == NULL || oid == NULL) return NULL; \
52 while (cur->asn1 != NULL) { \
53 if (cur->asn1_len == oid->len && \
54 memcmp(cur->asn1, oid->p, oid->len) == 0) { \
55 return p; \
56 } \
57 p++; \
58 cur = (const mbedtls_oid_descriptor_t *) p; \
59 } \
60 return NULL; \
61 }
62
63#if !defined(MBEDTLS_X509_REMOVE_INFO)
64/*
65 * Macro to generate a function for retrieving a single attribute from the
66 * descriptor of an mbedtls_oid_descriptor_t wrapper.
67 */
68#define FN_OID_GET_DESCRIPTOR_ATTR1(FN_NAME, TYPE_T, TYPE_NAME, ATTR1_TYPE, ATTR1) \
69 int FN_NAME(const mbedtls_asn1_buf *oid, ATTR1_TYPE * ATTR1) \
70 { \
71 const TYPE_T *data = oid_ ## TYPE_NAME ## _from_asn1(oid); \
72 if (data == NULL) return MBEDTLS_ERR_OID_NOT_FOUND; \
73 *ATTR1 = data->descriptor.ATTR1; \
74 return 0; \
75 }
76#endif /* MBEDTLS_X509_REMOVE_INFO */
77
78/*
79 * Macro to generate a function for retrieving a single attribute from an
80 * mbedtls_oid_descriptor_t wrapper.
81 */
82#define FN_OID_GET_ATTR1(FN_NAME, TYPE_T, TYPE_NAME, ATTR1_TYPE, ATTR1) \
83 int FN_NAME(const mbedtls_asn1_buf *oid, ATTR1_TYPE * ATTR1) \
84 { \
85 const TYPE_T *data = oid_ ## TYPE_NAME ## _from_asn1(oid); \
86 if (data == NULL) return MBEDTLS_ERR_OID_NOT_FOUND; \
87 *ATTR1 = data->ATTR1; \
88 return 0; \
89 }
90
91/*
92 * Macro to generate a function for retrieving two attributes from an
93 * mbedtls_oid_descriptor_t wrapper.
94 */
95#define FN_OID_GET_ATTR2(FN_NAME, TYPE_T, TYPE_NAME, ATTR1_TYPE, ATTR1, \
96 ATTR2_TYPE, ATTR2) \
97 int FN_NAME(const mbedtls_asn1_buf *oid, ATTR1_TYPE * ATTR1, \
98 ATTR2_TYPE * ATTR2) \
99 { \
100 const TYPE_T *data = oid_ ## TYPE_NAME ## _from_asn1(oid); \
101 if (data == NULL) return MBEDTLS_ERR_OID_NOT_FOUND; \
102 *(ATTR1) = data->ATTR1; \
103 *(ATTR2) = data->ATTR2; \
104 return 0; \
105 }
106
107/*
108 * Macro to generate a function for retrieving the OID based on a single
109 * attribute from a mbedtls_oid_descriptor_t wrapper.
110 */
111#define FN_OID_GET_OID_BY_ATTR1(FN_NAME, TYPE_T, LIST, ATTR1_TYPE, ATTR1) \
112 int FN_NAME(ATTR1_TYPE ATTR1, const char **oid, size_t *olen) \
113 { \
114 const TYPE_T *cur = (LIST); \
115 while (cur->descriptor.asn1 != NULL) { \
116 if (cur->ATTR1 == (ATTR1)) { \
117 *oid = cur->descriptor.asn1; \
118 *olen = cur->descriptor.asn1_len; \
119 return 0; \
120 } \
121 cur++; \
122 } \
123 return MBEDTLS_ERR_OID_NOT_FOUND; \
124 }
125
126/*
127 * Macro to generate a function for retrieving the OID based on two
128 * attributes from a mbedtls_oid_descriptor_t wrapper.
129 */
130#define FN_OID_GET_OID_BY_ATTR2(FN_NAME, TYPE_T, LIST, ATTR1_TYPE, ATTR1, \
131 ATTR2_TYPE, ATTR2) \
132 int FN_NAME(ATTR1_TYPE ATTR1, ATTR2_TYPE ATTR2, const char **oid, \
133 size_t *olen) \
134 { \
135 const TYPE_T *cur = (LIST); \
136 while (cur->descriptor.asn1 != NULL) { \
137 if (cur->ATTR1 == (ATTR1) && cur->ATTR2 == (ATTR2)) { \
138 *oid = cur->descriptor.asn1; \
139 *olen = cur->descriptor.asn1_len; \
140 return 0; \
141 } \
142 cur++; \
143 } \
144 return MBEDTLS_ERR_OID_NOT_FOUND; \
145 }
146
147/*
148 * For X520 attribute types
149 */
150typedef struct {
151 mbedtls_oid_descriptor_t descriptor;
152 const char *short_name;
153} oid_x520_attr_t;
154
155static const oid_x520_attr_t oid_x520_attr_type[] =
156{
157 {
158 OID_DESCRIPTOR(MBEDTLS_OID_AT_CN, "id-at-commonName", "Common Name"),
159 "CN",
160 },
161 {
162 OID_DESCRIPTOR(MBEDTLS_OID_AT_COUNTRY, "id-at-countryName", "Country"),
163 "C",
164 },
165 {
166 OID_DESCRIPTOR(MBEDTLS_OID_AT_LOCALITY, "id-at-locality", "Locality"),
167 "L",
168 },
169 {
170 OID_DESCRIPTOR(MBEDTLS_OID_AT_STATE, "id-at-state", "State"),
171 "ST",
172 },
173 {
174 OID_DESCRIPTOR(MBEDTLS_OID_AT_ORGANIZATION, "id-at-organizationName",
175 "Organization"),
176 "O",
177 },
178 {
179 OID_DESCRIPTOR(MBEDTLS_OID_AT_ORG_UNIT, "id-at-organizationalUnitName", "Org Unit"),
180 "OU",
181 },
182 {
183 OID_DESCRIPTOR(MBEDTLS_OID_PKCS9_EMAIL,
184 "emailAddress",
185 "E-mail address"),
186 "emailAddress",
187 },
188 {
189 OID_DESCRIPTOR(MBEDTLS_OID_AT_SERIAL_NUMBER,
190 "id-at-serialNumber",
191 "Serial number"),
192 "serialNumber",
193 },
194 {
195 OID_DESCRIPTOR(MBEDTLS_OID_AT_POSTAL_ADDRESS,
196 "id-at-postalAddress",
197 "Postal address"),
198 "postalAddress",
199 },
200 {
201 OID_DESCRIPTOR(MBEDTLS_OID_AT_POSTAL_CODE, "id-at-postalCode", "Postal code"),
202 "postalCode",
203 },
204 {
205 OID_DESCRIPTOR(MBEDTLS_OID_AT_SUR_NAME, "id-at-surName", "Surname"),
206 "SN",
207 },
208 {
209 OID_DESCRIPTOR(MBEDTLS_OID_AT_GIVEN_NAME, "id-at-givenName", "Given name"),
210 "GN",
211 },
212 {
213 OID_DESCRIPTOR(MBEDTLS_OID_AT_INITIALS, "id-at-initials", "Initials"),
214 "initials",
215 },
216 {
217 OID_DESCRIPTOR(MBEDTLS_OID_AT_GENERATION_QUALIFIER,
218 "id-at-generationQualifier",
219 "Generation qualifier"),
220 "generationQualifier",
221 },
222 {
223 OID_DESCRIPTOR(MBEDTLS_OID_AT_TITLE, "id-at-title", "Title"),
224 "title",
225 },
226 {
227 OID_DESCRIPTOR(MBEDTLS_OID_AT_DN_QUALIFIER,
228 "id-at-dnQualifier",
229 "Distinguished Name qualifier"),
230 "dnQualifier",
231 },
232 {
233 OID_DESCRIPTOR(MBEDTLS_OID_AT_PSEUDONYM, "id-at-pseudonym", "Pseudonym"),
234 "pseudonym",
235 },
236 {
237 OID_DESCRIPTOR(MBEDTLS_OID_UID, "id-uid", "User Id"),
238 "uid",
239 },
240 {
241 OID_DESCRIPTOR(MBEDTLS_OID_DOMAIN_COMPONENT,
242 "id-domainComponent",
243 "Domain component"),
244 "DC",
245 },
246 {
247 OID_DESCRIPTOR(MBEDTLS_OID_AT_UNIQUE_IDENTIFIER,
248 "id-at-uniqueIdentifier",
249 "Unique Identifier"),
250 "uniqueIdentifier",
251 },
252 {
253 NULL_OID_DESCRIPTOR,
254 NULL,
255 }
256};
257
258FN_OID_TYPED_FROM_ASN1(oid_x520_attr_t, x520_attr, oid_x520_attr_type)
259FN_OID_GET_ATTR1(mbedtls_oid_get_attr_short_name,
260 oid_x520_attr_t,
261 x520_attr,
262 const char *,
263 short_name)
264
265/*
266 * For X509 extensions
267 */
268typedef struct {
269 mbedtls_oid_descriptor_t descriptor;
270 int ext_type;
271} oid_x509_ext_t;
272
273static const oid_x509_ext_t oid_x509_ext[] =
274{
275 {
276 OID_DESCRIPTOR(MBEDTLS_OID_BASIC_CONSTRAINTS,
277 "id-ce-basicConstraints",
278 "Basic Constraints"),
279 MBEDTLS_OID_X509_EXT_BASIC_CONSTRAINTS,
280 },
281 {
282 OID_DESCRIPTOR(MBEDTLS_OID_KEY_USAGE, "id-ce-keyUsage", "Key Usage"),
283 MBEDTLS_OID_X509_EXT_KEY_USAGE,
284 },
285 {
286 OID_DESCRIPTOR(MBEDTLS_OID_EXTENDED_KEY_USAGE,
287 "id-ce-extKeyUsage",
288 "Extended Key Usage"),
289 MBEDTLS_OID_X509_EXT_EXTENDED_KEY_USAGE,
290 },
291 {
292 OID_DESCRIPTOR(MBEDTLS_OID_SUBJECT_ALT_NAME,
293 "id-ce-subjectAltName",
294 "Subject Alt Name"),
295 MBEDTLS_OID_X509_EXT_SUBJECT_ALT_NAME,
296 },
297 {
298 OID_DESCRIPTOR(MBEDTLS_OID_NS_CERT_TYPE,
299 "id-netscape-certtype",
300 "Netscape Certificate Type"),
301 MBEDTLS_OID_X509_EXT_NS_CERT_TYPE,
302 },
303 {
304 OID_DESCRIPTOR(MBEDTLS_OID_CERTIFICATE_POLICIES,
305 "id-ce-certificatePolicies",
306 "Certificate Policies"),
307 MBEDTLS_OID_X509_EXT_CERTIFICATE_POLICIES,
308 },
309 {
310 OID_DESCRIPTOR(MBEDTLS_OID_SUBJECT_KEY_IDENTIFIER,
311 "id-ce-subjectKeyIdentifier",
312 "Subject Key Identifier"),
313 MBEDTLS_OID_X509_EXT_SUBJECT_KEY_IDENTIFIER,
314 },
315 {
316 OID_DESCRIPTOR(MBEDTLS_OID_AUTHORITY_KEY_IDENTIFIER,
317 "id-ce-authorityKeyIdentifier",
318 "Authority Key Identifier"),
319 MBEDTLS_OID_X509_EXT_AUTHORITY_KEY_IDENTIFIER,
320 },
321 {
322 NULL_OID_DESCRIPTOR,
323 0,
324 },
325};
326
327FN_OID_TYPED_FROM_ASN1(oid_x509_ext_t, x509_ext, oid_x509_ext)
328FN_OID_GET_ATTR1(mbedtls_oid_get_x509_ext_type, oid_x509_ext_t, x509_ext, int, ext_type)
329
330#if !defined(MBEDTLS_X509_REMOVE_INFO)
331static const mbedtls_oid_descriptor_t oid_ext_key_usage[] =
332{
333 OID_DESCRIPTOR(MBEDTLS_OID_SERVER_AUTH,
334 "id-kp-serverAuth",
335 "TLS Web Server Authentication"),
336 OID_DESCRIPTOR(MBEDTLS_OID_CLIENT_AUTH,
337 "id-kp-clientAuth",
338 "TLS Web Client Authentication"),
339 OID_DESCRIPTOR(MBEDTLS_OID_CODE_SIGNING, "id-kp-codeSigning", "Code Signing"),
340 OID_DESCRIPTOR(MBEDTLS_OID_EMAIL_PROTECTION, "id-kp-emailProtection", "E-mail Protection"),
341 OID_DESCRIPTOR(MBEDTLS_OID_TIME_STAMPING, "id-kp-timeStamping", "Time Stamping"),
342 OID_DESCRIPTOR(MBEDTLS_OID_OCSP_SIGNING, "id-kp-OCSPSigning", "OCSP Signing"),
343 OID_DESCRIPTOR(MBEDTLS_OID_WISUN_FAN,
344 "id-kp-wisun-fan-device",
345 "Wi-SUN Alliance Field Area Network (FAN)"),
346 NULL_OID_DESCRIPTOR,
347};
348
349FN_OID_TYPED_FROM_ASN1(mbedtls_oid_descriptor_t, ext_key_usage, oid_ext_key_usage)
350FN_OID_GET_ATTR1(mbedtls_oid_get_extended_key_usage,
351 mbedtls_oid_descriptor_t,
352 ext_key_usage,
353 const char *,
354 description)
355
356static const mbedtls_oid_descriptor_t oid_certificate_policies[] =
357{
358 OID_DESCRIPTOR(MBEDTLS_OID_ANY_POLICY, "anyPolicy", "Any Policy"),
359 NULL_OID_DESCRIPTOR,
360};
361
362FN_OID_TYPED_FROM_ASN1(mbedtls_oid_descriptor_t, certificate_policies, oid_certificate_policies)
363FN_OID_GET_ATTR1(mbedtls_oid_get_certificate_policies,
364 mbedtls_oid_descriptor_t,
365 certificate_policies,
366 const char *,
367 description)
368#endif /* MBEDTLS_X509_REMOVE_INFO */
369
370/*
371 * For SignatureAlgorithmIdentifier
372 */
373typedef struct {
374 mbedtls_oid_descriptor_t descriptor;
375 mbedtls_md_type_t md_alg;
376 mbedtls_pk_type_t pk_alg;
377} oid_sig_alg_t;
378
379static const oid_sig_alg_t oid_sig_alg[] =
380{
381#if defined(MBEDTLS_RSA_C)
382#if defined(PSA_WANT_ALG_MD5)
383 {
384 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_MD5, "md5WithRSAEncryption", "RSA with MD5"),
385 MBEDTLS_MD_MD5, MBEDTLS_PK_RSA,
386 },
387#endif /* PSA_WANT_ALG_MD5 */
388#if defined(PSA_WANT_ALG_SHA_1)
389 {
390 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_SHA1, "sha-1WithRSAEncryption", "RSA with SHA1"),
391 MBEDTLS_MD_SHA1, MBEDTLS_PK_RSA,
392 },
393#endif /* PSA_WANT_ALG_SHA_1 */
394#if defined(PSA_WANT_ALG_SHA_224)
395 {
396 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_SHA224, "sha224WithRSAEncryption",
397 "RSA with SHA-224"),
398 MBEDTLS_MD_SHA224, MBEDTLS_PK_RSA,
399 },
400#endif /* PSA_WANT_ALG_SHA_224 */
401#if defined(PSA_WANT_ALG_SHA_256)
402 {
403 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_SHA256, "sha256WithRSAEncryption",
404 "RSA with SHA-256"),
405 MBEDTLS_MD_SHA256, MBEDTLS_PK_RSA,
406 },
407#endif /* PSA_WANT_ALG_SHA_256 */
408#if defined(PSA_WANT_ALG_SHA_384)
409 {
410 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_SHA384, "sha384WithRSAEncryption",
411 "RSA with SHA-384"),
412 MBEDTLS_MD_SHA384, MBEDTLS_PK_RSA,
413 },
414#endif /* PSA_WANT_ALG_SHA_384 */
415#if defined(PSA_WANT_ALG_SHA_512)
416 {
417 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_SHA512, "sha512WithRSAEncryption",
418 "RSA with SHA-512"),
419 MBEDTLS_MD_SHA512, MBEDTLS_PK_RSA,
420 },
421#endif /* PSA_WANT_ALG_SHA_512 */
422#if defined(PSA_WANT_ALG_SHA_1)
423 {
424 OID_DESCRIPTOR(MBEDTLS_OID_RSA_SHA_OBS, "sha-1WithRSAEncryption", "RSA with SHA1"),
425 MBEDTLS_MD_SHA1, MBEDTLS_PK_RSA,
426 },
427#endif /* PSA_WANT_ALG_SHA_1 */
428#endif /* MBEDTLS_RSA_C */
429#if defined(PSA_HAVE_ALG_SOME_ECDSA)
430#if defined(PSA_WANT_ALG_SHA_1)
431 {
432 OID_DESCRIPTOR(MBEDTLS_OID_ECDSA_SHA1, "ecdsa-with-SHA1", "ECDSA with SHA1"),
433 MBEDTLS_MD_SHA1, MBEDTLS_PK_ECDSA,
434 },
435#endif /* PSA_WANT_ALG_SHA_1 */
436#if defined(PSA_WANT_ALG_SHA_224)
437 {
438 OID_DESCRIPTOR(MBEDTLS_OID_ECDSA_SHA224, "ecdsa-with-SHA224", "ECDSA with SHA224"),
439 MBEDTLS_MD_SHA224, MBEDTLS_PK_ECDSA,
440 },
441#endif
442#if defined(PSA_WANT_ALG_SHA_256)
443 {
444 OID_DESCRIPTOR(MBEDTLS_OID_ECDSA_SHA256, "ecdsa-with-SHA256", "ECDSA with SHA256"),
445 MBEDTLS_MD_SHA256, MBEDTLS_PK_ECDSA,
446 },
447#endif /* PSA_WANT_ALG_SHA_256 */
448#if defined(PSA_WANT_ALG_SHA_384)
449 {
450 OID_DESCRIPTOR(MBEDTLS_OID_ECDSA_SHA384, "ecdsa-with-SHA384", "ECDSA with SHA384"),
451 MBEDTLS_MD_SHA384, MBEDTLS_PK_ECDSA,
452 },
453#endif /* PSA_WANT_ALG_SHA_384 */
454#if defined(PSA_WANT_ALG_SHA_512)
455 {
456 OID_DESCRIPTOR(MBEDTLS_OID_ECDSA_SHA512, "ecdsa-with-SHA512", "ECDSA with SHA512"),
457 MBEDTLS_MD_SHA512, MBEDTLS_PK_ECDSA,
458 },
459#endif /* PSA_WANT_ALG_SHA_512 */
460#endif /* PSA_HAVE_ALG_SOME_ECDSA */
461#if defined(MBEDTLS_RSA_C)
462 {
463 OID_DESCRIPTOR(MBEDTLS_OID_RSASSA_PSS, "RSASSA-PSS", "RSASSA-PSS"),
464 MBEDTLS_MD_NONE, MBEDTLS_PK_RSASSA_PSS,
465 },
466#endif /* MBEDTLS_RSA_C */
467 {
468 NULL_OID_DESCRIPTOR,
469 MBEDTLS_MD_NONE, MBEDTLS_PK_NONE,
470 },
471};
472
473FN_OID_TYPED_FROM_ASN1(oid_sig_alg_t, sig_alg, oid_sig_alg)
474
475#if !defined(MBEDTLS_X509_REMOVE_INFO)
476FN_OID_GET_DESCRIPTOR_ATTR1(mbedtls_oid_get_sig_alg_desc,
477 oid_sig_alg_t,
478 sig_alg,
479 const char *,
480 description)
481#endif
482
483FN_OID_GET_ATTR2(mbedtls_oid_get_sig_alg,
484 oid_sig_alg_t,
485 sig_alg,
486 mbedtls_md_type_t,
487 md_alg,
488 mbedtls_pk_type_t,
489 pk_alg)
490FN_OID_GET_OID_BY_ATTR2(mbedtls_oid_get_oid_by_sig_alg,
491 oid_sig_alg_t,
492 oid_sig_alg,
493 mbedtls_pk_type_t,
494 pk_alg,
495 mbedtls_md_type_t,
496 md_alg)
497
498/*
499 * For PublicKeyInfo (PKCS1, RFC 5480)
500 */
501typedef struct {
502 mbedtls_oid_descriptor_t descriptor;
503 mbedtls_pk_type_t pk_alg;
504} oid_pk_alg_t;
505
506static const oid_pk_alg_t oid_pk_alg[] =
507{
508 {
509 OID_DESCRIPTOR(MBEDTLS_OID_PKCS1_RSA, "rsaEncryption", "RSA"),
510 MBEDTLS_PK_RSA,
511 },
512 {
513 OID_DESCRIPTOR(MBEDTLS_OID_EC_ALG_UNRESTRICTED, "id-ecPublicKey", "Generic EC key"),
514 MBEDTLS_PK_ECKEY,
515 },
516 {
517 OID_DESCRIPTOR(MBEDTLS_OID_EC_ALG_ECDH, "id-ecDH", "EC key for ECDH"),
518 MBEDTLS_PK_ECKEY_DH,
519 },
520 {
521 NULL_OID_DESCRIPTOR,
522 MBEDTLS_PK_NONE,
523 },
524};
525
526FN_OID_TYPED_FROM_ASN1(oid_pk_alg_t, pk_alg, oid_pk_alg)
527FN_OID_GET_ATTR1(mbedtls_oid_get_pk_alg, oid_pk_alg_t, pk_alg, mbedtls_pk_type_t, pk_alg)
528FN_OID_GET_OID_BY_ATTR1(mbedtls_oid_get_oid_by_pk_alg,
529 oid_pk_alg_t,
530 oid_pk_alg,
531 mbedtls_pk_type_t,
532 pk_alg)
533
534#if defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
535/*
536 * For elliptic curves that use namedCurve inside ECParams (RFC 5480)
537 */
538typedef struct {
539 mbedtls_oid_descriptor_t descriptor;
540 mbedtls_ecp_group_id grp_id;
541} oid_ecp_grp_t;
542
543static const oid_ecp_grp_t oid_ecp_grp[] =
544{
545#if defined(PSA_WANT_ECC_SECP_R1_192)
546 {
547 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP192R1, "secp192r1", "secp192r1"),
548 MBEDTLS_ECP_DP_SECP192R1,
549 },
550#endif /* PSA_WANT_ECC_SECP_R1_192 */
551#if defined(PSA_WANT_ECC_SECP_R1_224)
552 {
553 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP224R1, "secp224r1", "secp224r1"),
554 MBEDTLS_ECP_DP_SECP224R1,
555 },
556#endif /* PSA_WANT_ECC_SECP_R1_224 */
557#if defined(PSA_WANT_ECC_SECP_R1_256)
558 {
559 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP256R1, "secp256r1", "secp256r1"),
560 MBEDTLS_ECP_DP_SECP256R1,
561 },
562#endif /* PSA_WANT_ECC_SECP_R1_256 */
563#if defined(PSA_WANT_ECC_SECP_R1_384)
564 {
565 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP384R1, "secp384r1", "secp384r1"),
566 MBEDTLS_ECP_DP_SECP384R1,
567 },
568#endif /* PSA_WANT_ECC_SECP_R1_384 */
569#if defined(PSA_WANT_ECC_SECP_R1_521)
570 {
571 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP521R1, "secp521r1", "secp521r1"),
572 MBEDTLS_ECP_DP_SECP521R1,
573 },
574#endif /* PSA_WANT_ECC_SECP_R1_521 */
575#if defined(PSA_WANT_ECC_SECP_K1_192)
576 {
577 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP192K1, "secp192k1", "secp192k1"),
578 MBEDTLS_ECP_DP_SECP192K1,
579 },
580#endif /* PSA_WANT_ECC_SECP_K1_192 */
Gilles Peskine47c85792025-05-07 14:35:04 +0200[diff] [blame]581#if defined(PSA_WANT_ECC_SECP_K1_256)
582 {
583 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_SECP256K1, "secp256k1", "secp256k1"),
584 MBEDTLS_ECP_DP_SECP256K1,
585 },
586#endif /* PSA_WANT_ECC_SECP_K1_256 */
587#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_256)
588 {
589 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_BP256R1, "brainpoolP256r1", "brainpool256r1"),
590 MBEDTLS_ECP_DP_BP256R1,
591 },
592#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_256 */
593#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_384)
594 {
595 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_BP384R1, "brainpoolP384r1", "brainpool384r1"),
596 MBEDTLS_ECP_DP_BP384R1,
597 },
598#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_384 */
599#if defined(PSA_WANT_ECC_BRAINPOOL_P_R1_512)
600 {
601 OID_DESCRIPTOR(MBEDTLS_OID_EC_GRP_BP512R1, "brainpoolP512r1", "brainpool512r1"),
602 MBEDTLS_ECP_DP_BP512R1,
603 },
604#endif /* PSA_WANT_ECC_BRAINPOOL_P_R1_512 */
605 {
606 NULL_OID_DESCRIPTOR,
607 MBEDTLS_ECP_DP_NONE,
608 },
609};
610
611FN_OID_TYPED_FROM_ASN1(oid_ecp_grp_t, grp_id, oid_ecp_grp)
612FN_OID_GET_ATTR1(mbedtls_oid_get_ec_grp, oid_ecp_grp_t, grp_id, mbedtls_ecp_group_id, grp_id)
613FN_OID_GET_OID_BY_ATTR1(mbedtls_oid_get_oid_by_ec_grp,
614 oid_ecp_grp_t,
615 oid_ecp_grp,
616 mbedtls_ecp_group_id,
617 grp_id)
618
619/*
620 * For Elliptic Curve algorithms that are directly
621 * encoded in the AlgorithmIdentifier (RFC 8410)
622 */
623typedef struct {
624 mbedtls_oid_descriptor_t descriptor;
625 mbedtls_ecp_group_id grp_id;
626} oid_ecp_grp_algid_t;
627
628static const oid_ecp_grp_algid_t oid_ecp_grp_algid[] =
629{
630#if defined(PSA_WANT_ECC_MONTGOMERY_255)
631 {
632 OID_DESCRIPTOR(MBEDTLS_OID_X25519, "X25519", "X25519"),
633 MBEDTLS_ECP_DP_CURVE25519,
634 },
635#endif /* PSA_WANT_ECC_MONTGOMERY_255 */
636#if defined(PSA_WANT_ECC_MONTGOMERY_448)
637 {
638 OID_DESCRIPTOR(MBEDTLS_OID_X448, "X448", "X448"),
639 MBEDTLS_ECP_DP_CURVE448,
640 },
641#endif /* PSA_WANT_ECC_MONTGOMERY_448 */
642 {
643 NULL_OID_DESCRIPTOR,
644 MBEDTLS_ECP_DP_NONE,
645 },
646};
647
648FN_OID_TYPED_FROM_ASN1(oid_ecp_grp_algid_t, grp_id_algid, oid_ecp_grp_algid)
649FN_OID_GET_ATTR1(mbedtls_oid_get_ec_grp_algid,
650 oid_ecp_grp_algid_t,
651 grp_id_algid,
652 mbedtls_ecp_group_id,
653 grp_id)
654FN_OID_GET_OID_BY_ATTR1(mbedtls_oid_get_oid_by_ec_grp_algid,
655 oid_ecp_grp_algid_t,
656 oid_ecp_grp_algid,
657 mbedtls_ecp_group_id,
658 grp_id)
659#endif /* PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY */
660
661#if defined(MBEDTLS_CIPHER_C)
662/*
663 * For PKCS#5 PBES2 encryption algorithm
664 */
665typedef struct {
666 mbedtls_oid_descriptor_t descriptor;
667 mbedtls_cipher_type_t cipher_alg;
668} oid_cipher_alg_t;
669
670static const oid_cipher_alg_t oid_cipher_alg[] =
671{
672 {
673 OID_DESCRIPTOR(MBEDTLS_OID_DES_CBC, "desCBC", "DES-CBC"),
674 MBEDTLS_CIPHER_DES_CBC,
675 },
676 {
677 OID_DESCRIPTOR(MBEDTLS_OID_DES_EDE3_CBC, "des-ede3-cbc", "DES-EDE3-CBC"),
678 MBEDTLS_CIPHER_DES_EDE3_CBC,
679 },
680 {
681 OID_DESCRIPTOR(MBEDTLS_OID_AES_128_CBC, "aes128-cbc", "AES128-CBC"),
682 MBEDTLS_CIPHER_AES_128_CBC,
683 },
684 {
685 OID_DESCRIPTOR(MBEDTLS_OID_AES_192_CBC, "aes192-cbc", "AES192-CBC"),
686 MBEDTLS_CIPHER_AES_192_CBC,
687 },
688 {
689 OID_DESCRIPTOR(MBEDTLS_OID_AES_256_CBC, "aes256-cbc", "AES256-CBC"),
690 MBEDTLS_CIPHER_AES_256_CBC,
691 },
692 {
693 NULL_OID_DESCRIPTOR,
694 MBEDTLS_CIPHER_NONE,
695 },
696};
697
698FN_OID_TYPED_FROM_ASN1(oid_cipher_alg_t, cipher_alg, oid_cipher_alg)
699FN_OID_GET_ATTR1(mbedtls_oid_get_cipher_alg,
700 oid_cipher_alg_t,
701 cipher_alg,
702 mbedtls_cipher_type_t,
703 cipher_alg)
704#endif /* MBEDTLS_CIPHER_C */
705
706/*
707 * For digestAlgorithm
708 */
709typedef struct {
710 mbedtls_oid_descriptor_t descriptor;
711 mbedtls_md_type_t md_alg;
712} oid_md_alg_t;
713
714static const oid_md_alg_t oid_md_alg[] =
715{
716#if defined(PSA_WANT_ALG_MD5)
717 {
718 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_MD5, "id-md5", "MD5"),
719 MBEDTLS_MD_MD5,
720 },
721#endif
722#if defined(PSA_WANT_ALG_SHA_1)
723 {
724 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA1, "id-sha1", "SHA-1"),
725 MBEDTLS_MD_SHA1,
726 },
727#endif
728#if defined(PSA_WANT_ALG_SHA_224)
729 {
730 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA224, "id-sha224", "SHA-224"),
731 MBEDTLS_MD_SHA224,
732 },
733#endif
734#if defined(PSA_WANT_ALG_SHA_256)
735 {
736 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA256, "id-sha256", "SHA-256"),
737 MBEDTLS_MD_SHA256,
738 },
739#endif
740#if defined(PSA_WANT_ALG_SHA_384)
741 {
742 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA384, "id-sha384", "SHA-384"),
743 MBEDTLS_MD_SHA384,
744 },
745#endif
746#if defined(PSA_WANT_ALG_SHA_512)
747 {
748 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA512, "id-sha512", "SHA-512"),
749 MBEDTLS_MD_SHA512,
750 },
751#endif
752#if defined(PSA_WANT_ALG_RIPEMD160)
753 {
754 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_RIPEMD160, "id-ripemd160", "RIPEMD-160"),
755 MBEDTLS_MD_RIPEMD160,
756 },
757#endif
758#if defined(PSA_WANT_ALG_SHA3_224)
759 {
760 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA3_224, "id-sha3-224", "SHA-3-224"),
761 MBEDTLS_MD_SHA3_224,
762 },
763#endif
764#if defined(PSA_WANT_ALG_SHA3_256)
765 {
766 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA3_256, "id-sha3-256", "SHA-3-256"),
767 MBEDTLS_MD_SHA3_256,
768 },
769#endif
770#if defined(PSA_WANT_ALG_SHA3_384)
771 {
772 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA3_384, "id-sha3-384", "SHA-3-384"),
773 MBEDTLS_MD_SHA3_384,
774 },
775#endif
776#if defined(PSA_WANT_ALG_SHA3_512)
777 {
778 OID_DESCRIPTOR(MBEDTLS_OID_DIGEST_ALG_SHA3_512, "id-sha3-512", "SHA-3-512"),
779 MBEDTLS_MD_SHA3_512,
780 },
781#endif
782 {
783 NULL_OID_DESCRIPTOR,
784 MBEDTLS_MD_NONE,
785 },
786};
787
788FN_OID_TYPED_FROM_ASN1(oid_md_alg_t, md_alg, oid_md_alg)
789FN_OID_GET_ATTR1(mbedtls_oid_get_md_alg, oid_md_alg_t, md_alg, mbedtls_md_type_t, md_alg)
790FN_OID_GET_OID_BY_ATTR1(mbedtls_oid_get_oid_by_md,
791 oid_md_alg_t,
792 oid_md_alg,
793 mbedtls_md_type_t,
794 md_alg)
795
796/*
797 * For HMAC digestAlgorithm
798 */
799typedef struct {
800 mbedtls_oid_descriptor_t descriptor;
801 mbedtls_md_type_t md_hmac;
802} oid_md_hmac_t;
803
804static const oid_md_hmac_t oid_md_hmac[] =
805{
806#if defined(PSA_WANT_ALG_SHA_1)
807 {
808 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA1, "hmacSHA1", "HMAC-SHA-1"),
809 MBEDTLS_MD_SHA1,
810 },
811#endif /* PSA_WANT_ALG_SHA_1 */
812#if defined(PSA_WANT_ALG_SHA_224)
813 {
814 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA224, "hmacSHA224", "HMAC-SHA-224"),
815 MBEDTLS_MD_SHA224,
816 },
817#endif /* PSA_WANT_ALG_SHA_224 */
818#if defined(PSA_WANT_ALG_SHA_256)
819 {
820 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA256, "hmacSHA256", "HMAC-SHA-256"),
821 MBEDTLS_MD_SHA256,
822 },
823#endif /* PSA_WANT_ALG_SHA_256 */
824#if defined(PSA_WANT_ALG_SHA_384)
825 {
826 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA384, "hmacSHA384", "HMAC-SHA-384"),
827 MBEDTLS_MD_SHA384,
828 },
829#endif /* PSA_WANT_ALG_SHA_384 */
830#if defined(PSA_WANT_ALG_SHA_512)
831 {
832 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA512, "hmacSHA512", "HMAC-SHA-512"),
833 MBEDTLS_MD_SHA512,
834 },
835#endif /* PSA_WANT_ALG_SHA_512 */
836#if defined(PSA_WANT_ALG_SHA3_224)
837 {
838 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA3_224, "hmacSHA3-224", "HMAC-SHA3-224"),
839 MBEDTLS_MD_SHA3_224,
840 },
841#endif /* PSA_WANT_ALG_SHA3_224 */
842#if defined(PSA_WANT_ALG_SHA3_256)
843 {
844 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA3_256, "hmacSHA3-256", "HMAC-SHA3-256"),
845 MBEDTLS_MD_SHA3_256,
846 },
847#endif /* PSA_WANT_ALG_SHA3_256 */
848#if defined(PSA_WANT_ALG_SHA3_384)
849 {
850 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA3_384, "hmacSHA3-384", "HMAC-SHA3-384"),
851 MBEDTLS_MD_SHA3_384,
852 },
853#endif /* PSA_WANT_ALG_SHA3_384 */
854#if defined(PSA_WANT_ALG_SHA3_512)
855 {
856 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_SHA3_512, "hmacSHA3-512", "HMAC-SHA3-512"),
857 MBEDTLS_MD_SHA3_512,
858 },
859#endif /* PSA_WANT_ALG_SHA3_512 */
860#if defined(PSA_WANT_ALG_RIPEMD160)
861 {
862 OID_DESCRIPTOR(MBEDTLS_OID_HMAC_RIPEMD160, "hmacRIPEMD160", "HMAC-RIPEMD160"),
863 MBEDTLS_MD_RIPEMD160,
864 },
865#endif /* PSA_WANT_ALG_RIPEMD160 */
866 {
867 NULL_OID_DESCRIPTOR,
868 MBEDTLS_MD_NONE,
869 },
870};
871
872FN_OID_TYPED_FROM_ASN1(oid_md_hmac_t, md_hmac, oid_md_hmac)
873FN_OID_GET_ATTR1(mbedtls_oid_get_md_hmac, oid_md_hmac_t, md_hmac, mbedtls_md_type_t, md_hmac)
874
875#if defined(MBEDTLS_PKCS12_C) && defined(MBEDTLS_CIPHER_C)
876/*
877 * For PKCS#12 PBEs
878 */
879typedef struct {
880 mbedtls_oid_descriptor_t descriptor;
881 mbedtls_md_type_t md_alg;
882 mbedtls_cipher_type_t cipher_alg;
883} oid_pkcs12_pbe_alg_t;
884
885static const oid_pkcs12_pbe_alg_t oid_pkcs12_pbe_alg[] =
886{
887 {
888 OID_DESCRIPTOR(MBEDTLS_OID_PKCS12_PBE_SHA1_DES3_EDE_CBC,
889 "pbeWithSHAAnd3-KeyTripleDES-CBC",
890 "PBE with SHA1 and 3-Key 3DES"),
891 MBEDTLS_MD_SHA1, MBEDTLS_CIPHER_DES_EDE3_CBC,
892 },
893 {
894 OID_DESCRIPTOR(MBEDTLS_OID_PKCS12_PBE_SHA1_DES2_EDE_CBC,
895 "pbeWithSHAAnd2-KeyTripleDES-CBC",
896 "PBE with SHA1 and 2-Key 3DES"),
897 MBEDTLS_MD_SHA1, MBEDTLS_CIPHER_DES_EDE_CBC,
898 },
899 {
900 NULL_OID_DESCRIPTOR,
901 MBEDTLS_MD_NONE, MBEDTLS_CIPHER_NONE,
902 },
903};
904
905FN_OID_TYPED_FROM_ASN1(oid_pkcs12_pbe_alg_t, pkcs12_pbe_alg, oid_pkcs12_pbe_alg)
906FN_OID_GET_ATTR2(mbedtls_oid_get_pkcs12_pbe_alg,
907 oid_pkcs12_pbe_alg_t,
908 pkcs12_pbe_alg,
909 mbedtls_md_type_t,
910 md_alg,
911 mbedtls_cipher_type_t,
912 cipher_alg)
913#endif /* MBEDTLS_PKCS12_C && MBEDTLS_CIPHER_C */
914
915#endif /* MBEDTLS_OID_C */