cypher.h

Go to the documentation of this file.

/*
 * cypher.h
 *
 * Encryption support classes.
 *
 * Portable Windows Library
 *
 * Copyright (c) 1993-2002 Equivalence Pty. Ltd.
 *
 * The contents of this file are subject to the Mozilla Public License
 * Version 1.0 (the "License"); you may not use this file except in
 * compliance with the License. You may obtain a copy of the License at
 * http://www.mozilla.org/MPL/
 *
 * Software distributed under the License is distributed on an "AS IS"
 * basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See
 * the License for the specific language governing rights and limitations
 * under the License.
 *
 * The Original Code is Portable Windows Library.
 *
 * The Initial Developer of the Original Code is Equivalence Pty. Ltd.
 *
 * Contributor(s): ______________________________________.
 *
 * $Log: cypher.h,v $
 * Revision 1.24  2007/04/18 23:49:50  csoutheren
 * Add usage of precompiled headers
 *
 * Revision 1.23  2005/11/30 12:47:37  csoutheren
 * Removed tabs, reformatted some code, and changed tags for Doxygen
 *
 * Revision 1.22  2005/01/26 05:37:40  csoutheren
 * Added ability to remove config file support
 *
 * Revision 1.21  2004/11/11 07:34:50  csoutheren
 * Added #include <ptlib.h>
 *
 * Revision 1.20  2004/03/23 05:59:17  csoutheren
 * Moved the Base64 routines into cypher.cxx, which is a more sensible
 * place and reduces the inclusion of unrelated code
 *
 * Revision 1.19  2004/02/04 02:31:34  csoutheren
 * Remove SHA-1 functions when OpenSSL is disabled
 *
 * Revision 1.18  2003/04/17 03:34:07  craigs
 * Fixed problem with delete'ing a void *
 *
 * Revision 1.17  2003/04/10 07:02:38  craigs
 * Fixed link problem in MD5 class
 *
 * Revision 1.16  2003/04/10 06:16:30  craigs
 * Added SHA-1 digest
 *
 * Revision 1.15  2002/11/06 22:47:23  robertj
 * Fixed header comment (copyright etc)
 *
 * Revision 1.14  2002/09/16 01:08:59  robertj
 * Added #define so can select if #pragma interface/implementation is used on
 *   platform basis (eg MacOS) rather than compiler, thanks Robert Monaghan.
 *
 * Revision 1.13  2001/09/10 00:28:21  robertj
 * Fixed extra CR in comments.
 *
 * Revision 1.12  1999/03/09 08:01:46  robertj
 * Changed comments for doc++ support (more to come).
 *
 * Revision 1.11  1999/02/16 08:07:10  robertj
 * MSVC 6.0 compatibility changes.
 *
 * Revision 1.10  1998/09/23 06:19:24  robertj
 * Added open source copyright license.
 *
 * Revision 1.9  1997/10/10 10:44:01  robertj
 * Fixed bug in password encryption, missing string terminator.
 *
 * Revision 1.8  1996/11/16 10:50:24  robertj
 * Fixed bug in registration order form showing incorrect check code when have key.
 *
 * Revision 1.7  1996/07/15 10:29:38  robertj
 * Changed memory block cypher conversion functions to be void *.
 * Changed key types to be structures rather than arrays to avoid pinter/reference confusion by compilers.
 *
 * Revision 1.6  1996/03/17 05:47:00  robertj
 * Changed secured config to allow for expiry dates.
 *
 * Revision 1.5  1996/03/16 04:36:43  robertj
 * Redesign of secure config to accommodate expiry dates and option values passed in security key code.
 *
 * Revision 1.4  1996/02/25 02:52:46  robertj
 * Further secure config development.
 *
 * Revision 1.3  1996/01/28 14:16:11  robertj
 * Further implementation of secure config.
 *
 * Revision 1.2  1996/01/28 02:41:00  robertj
 * Removal of MemoryPointer classes as usage didn't work for GNU.
 * Added the secure configuration mechanism for protecting applications.
 *
 * Revision 1.1  1996/01/23 13:04:20  robertj
 * Initial revision
 *
 */


#ifndef _PCYPHER
#define _PCYPHER

#ifdef P_USE_PRAGMA
#pragma interface
#endif

#ifndef _PTLIB_H
#include <ptlib.h>
#endif

class PBase64 : public PObject
{
  PCLASSINFO(PBase64, PObject);

  public:
    PBase64();

    void StartEncoding(
      BOOL useCRLFs = TRUE  // Use CR, LF pairs in end of line characters.
    );
    // Begin a base 64 encoding operation, initialising the object instance.

    void ProcessEncoding(
      const PString & str      // String to be encoded
    );
    void ProcessEncoding(
      const char * cstr        // C String to be encoded
    );
    void ProcessEncoding(
      const PBYTEArray & data  // Data block to be encoded
    );
    void ProcessEncoding(
      const void * dataBlock,  // Pointer to data to be encoded
      PINDEX length            // Length of the data block.
    );
    // Incorporate the specified data into the base 64 encoding.

    PString GetEncodedString();

    PString CompleteEncoding();


    static PString Encode(
      const PString & str     // String to be encoded to Base64
    );
    static PString Encode(
      const char * cstr       // C String to be encoded to Base64
    );
    static PString Encode(
      const PBYTEArray & data // Data block to be encoded to Base64
    );
    static PString Encode(
      const void * dataBlock, // Pointer to data to be encoded to Base64
      PINDEX length           // Length of the data block.
    );
    // Encode the data in memory to Base 64 data returnin the string.


    void StartDecoding();
    // Begin a base 64 decoding operation, initialising the object instance.

    BOOL ProcessDecoding(
      const PString & str      // String to be encoded
    );
    BOOL ProcessDecoding(
      const char * cstr        // C String to be encoded
    );

    BOOL GetDecodedData(
      void * dataBlock,    // Pointer to data to be decoded from base64
      PINDEX length        // Length of the data block.
    );
    PBYTEArray GetDecodedData();

    BOOL IsDecodeOK() { return perfectDecode; }


    static PString Decode(
      const PString & str // Encoded base64 string to be decoded.
    );
    static BOOL Decode(
      const PString & str, // Encoded base64 string to be decoded.
      PBYTEArray & data    // Converted binary data from base64.
    );
    static BOOL Decode(
      const PString & str, // Encoded base64 string to be decoded.
      void * dataBlock,    // Pointer to data to be decoded from base64
      PINDEX length        // Length of the data block.
    );



  private:
    void OutputBase64(const BYTE * data);

    PString encodedString;
    PINDEX  encodeLength;
    BYTE    saveTriple[3];
    PINDEX  saveCount;
    PINDEX  nextLine;
    BOOL    useCRLFs;

    BOOL       perfectDecode;
    PINDEX     quadPosition;
    PBYTEArray decodedData;
    PINDEX     decodeSize;
};

class PMessageDigest : public PObject
{
  PCLASSINFO(PMessageDigest, PObject)

  public:
    PMessageDigest();

    class Result {
      public:
        PINDEX GetSize() const          { return value.GetSize(); }
        const BYTE * GetPointer() const { return (const BYTE *)value; }

      private:
        PBYTEArray value;
        friend class PMessageDigest5;
        friend class PMessageDigestSHA1;
    };

    virtual void Start() = 0;

    virtual void Process(
      const void * dataBlock,  
      PINDEX length            
    );

    virtual void Process(
      const PString & str      
    );
    virtual void Process(
      const char * cstr        
    );
    virtual void Process(
      const PBYTEArray & data  
    );

    virtual PString CompleteDigest();
    virtual void CompleteDigest(
      Result & result   
    );

  protected:
    virtual void InternalProcess(
       const void * dataBlock,  
      PINDEX length            
    ) = 0;

    virtual void InternalCompleteDigest(
      Result & result   
    ) = 0;
};


class PMessageDigest5 : public PMessageDigest
{
  PCLASSINFO(PMessageDigest5, PMessageDigest)

  public:
    PMessageDigest5();

    void Start();

    static PString Encode(
      const PString & str      
    );
    static void Encode(
      const PString & str,     
      Result & result            
    );
    static PString Encode(
      const char * cstr        
    );
    static void Encode(
      const char * cstr,       
      Result & result            
    );
    static PString Encode(
      const PBYTEArray & data  
    );
    static void Encode(
      const PBYTEArray & data, 
      Result & result            
    );
    static PString Encode(
      const void * dataBlock,  
      PINDEX length            
    );
    static void Encode(
      const void * dataBlock,  
      PINDEX length,           
      Result & result            
    );

    // backwards compatibility functions
    class Code {
      private:
        PUInt32l value[4];
        friend class PMessageDigest5;
    };

    static void Encode(
      const PString & str,     
      Code & result            
    );
    static void Encode(
      const char * cstr,       
      Code & result            
    );
    static void Encode(
      const PBYTEArray & data, 
      Code & result            
    );
    static void Encode(
      const void * dataBlock,  
      PINDEX length,           
      Code & result            
    );
    virtual void Complete(
      Code & result   
    );
    virtual PString Complete();

  protected:
    virtual void InternalProcess(
       const void * dataBlock,  
      PINDEX length            
    );

    virtual void InternalCompleteDigest(
      Result & result   
    );

  private:
    void Transform(const BYTE * block);

    BYTE buffer[64];
    DWORD state[4];
    PUInt64 count;
};

#if P_SSL

class PMessageDigestSHA1 : public PMessageDigest
{
  PCLASSINFO(PMessageDigestSHA1, PMessageDigest)

  public:
    PMessageDigestSHA1();
    ~PMessageDigestSHA1();

    void Start();

    static PString Encode(
      const PString & str      
    );
    static void Encode(
      const PString & str,     
      Result & result            
    );
    static PString Encode(
      const char * cstr        
    );
    static void Encode(
      const char * cstr,       
      Result & result            
    );
    static PString Encode(
      const PBYTEArray & data  
    );
    static void Encode(
      const PBYTEArray & data, 
      Result & result            
    );
    static PString Encode(
      const void * dataBlock,  
      PINDEX length            
    );
    static void Encode(
      const void * dataBlock,  
      PINDEX length,           
      Result & result            
    );

  protected:
    virtual void InternalProcess(
       const void * dataBlock,  
      PINDEX length            
    );

    void InternalCompleteDigest(
      Result & result   
    );

  private:
    void * shaContext;
};

#endif

class PCypher : public PObject
{
  PCLASSINFO(PCypher, PObject)

  public:
    enum BlockChainMode {
      ElectronicCodebook,
        ECB = ElectronicCodebook,
      CypherBlockChaining,
        CBC = CypherBlockChaining,
      OutputFeedback,
        OFB = OutputFeedback,
      CypherFeedback,
        CFB = CypherFeedback,
      NumBlockChainModes
    };

  // New functions for class
    PString Encode(
      const PString & str       
    );
    PString Encode(
      const PBYTEArray & clear  
    );
    PString Encode(
      const void * data,        
      PINDEX length             
    );
    void Encode(
      const PBYTEArray & clear, 
      PBYTEArray & coded        
    );
    void Encode(
      const void * data,        // Clear text binary data to be encoded.
      PINDEX length,            // Number of bytes of data to be encoded.
      PBYTEArray & coded        // Encoded data.
    );

    PString Decode(
      const PString & cypher   
    );
    BOOL Decode(
      const PString & cypher,  
      PString & clear          
    );
    BOOL Decode(
      const PString & cypher,  
      PBYTEArray & clear       
    );
    PINDEX Decode(
      const PString & cypher,  
      void * data,             
      PINDEX length            
    );
    PINDEX Decode(
      const PBYTEArray & coded, 
      void * data,              
      PINDEX length             
    );
    BOOL Decode(
      const PBYTEArray & coded, 
      PBYTEArray & clear       
    );


  protected:
    PCypher(
      PINDEX blockSize,          
      BlockChainMode chainMode   
    );
    PCypher(
      const void * keyData,    
      PINDEX keyLength,        
      PINDEX blockSize,        
      BlockChainMode chainMode 
    );


    virtual void Initialise(
      BOOL encoding   
    ) = 0;

    virtual void EncodeBlock(
      const void * in,    
      void * out          
    ) = 0;


    virtual void DecodeBlock(
      const void * in,  
      void * out        
    ) = 0;


    PBYTEArray key;
    PINDEX blockSize;
    BlockChainMode chainMode;
};


class PTEACypher : public PCypher
{
  PCLASSINFO(PTEACypher, PCypher)

  public:
    struct Key {
      BYTE value[16];
    };

    PTEACypher(
      BlockChainMode chainMode = ElectronicCodebook   
    );
    PTEACypher(
      const Key & keyData,     
      BlockChainMode chainMode = ElectronicCodebook   
    );


    void SetKey(
      const Key & newKey    
    );

    void GetKey(
      Key & newKey    
    ) const;


    static void GenerateKey(
      Key & newKey    
    );


  protected:
    virtual void Initialise(
      BOOL encoding   
    );

    virtual void EncodeBlock(
      const void * in,  
      void * out        
    );

    virtual void DecodeBlock(
      const void * in,  
      void * out        
    );

  private:
    DWORD k0, k1, k2, k3;
};


#ifdef P_CONFIG_FILE

class PSecureConfig : public PConfig
{
  PCLASSINFO(PSecureConfig, PConfig)
/* This class defines a set of configuration keys which may be secured by an
   encrypted hash function. Thus values contained in keys specified by this
   class cannot be changed without invalidating the hash function.
 */

  public:
    PSecureConfig(
      const PTEACypher::Key & productKey,    // Key to decrypt validation code.
      const PStringArray    & securedKeys,   // List of secured keys.
      Source src = Application        // Standard source for the configuration.
    );
    PSecureConfig(
      const PTEACypher::Key & productKey,   // Key to decrypt validation code.
      const char * const * securedKeyArray, // List of secured keys.
      PINDEX count,                         // Number of secured keys in list.
      Source src = Application        // Standard source for the configuration.
    );
    /* Create a secured configuration. The default section for the
       configuration keys is "Secured Options", the default security key is
       "Validation" and the defualt prefix string is "Pending:".

       The user can descend from this class and change any of the member
       variable for the names of keys or the configuration file section.
     */


  // New functions for class
    const PStringArray & GetSecuredKeys() const { return securedKeys; }
    /* Get the list of secured keys in the configuration file section.

       @return
       Array of  strings for the secured keys.
     */

    const PString & GetSecurityKey() const { return securityKey; }
    /* Get the security keys name in the configuration file section.

       @return
       String for the security values key.
     */

    const PString & GetExpiryDateKey() const { return expiryDateKey; }
    /* Get the expiry date keys name in the configuration file section.

       @return
       String for the expiry date values key.
     */

    const PString & GetOptionBitsKey() const { return optionBitsKey; }
    /* Get the Option Bits keys name in the configuration file section.

       @return
       String for the Option Bits values key.
     */

    const PString & GetPendingPrefix() const { return pendingPrefix; }
    /* Get the pending prefix name in the configuration file section.

       @return
       String for the pending prefix.
     */

    void GetProductKey(
      PTEACypher::Key & productKey  // Variable to receive the product key.
    ) const;
    /* Get the pending prefix name in the configuration file section.

       @return
       String for the pending prefix.
     */


    enum ValidationState {
      Defaults,
      Pending,
      IsValid,
      Expired,
      Invalid
    };
    ValidationState GetValidation() const;
    /* Check the current values attached to the keys specified in the
       constructor against an encoded validation key.

       @return
       State of the validation keys.
     */

    BOOL ValidatePending();
    /* Validate a pending secured option list for the product. All secured
       keys with the <CODE>pendingPrefix</CODE> name will be checked against
       the value of the field <CODE>securityKey</CODE>. If they match then
       they are copied to the secured variables.

       @return
       TRUE if secure key values are valid.
     */

    void ResetPending();
    /* "Unvalidate" a security configuration going back to a pending state,
       usually used after an <CODE>Invalid</CODE> response was recieved from
       the <A>GetValidation()</A> function.
     */


  protected:
    PTEACypher::Key productKey;
    PStringArray    securedKeys;
    PString         securityKey;
    PString         expiryDateKey;
    PString         optionBitsKey;
    PString         pendingPrefix;
};

#endif // P_CONFIG_FILE

#endif // _PCYPHER


// End Of File ///////////////////////////////////////////////////////////////

---