236 lines
12 KiB
Java
236 lines
12 KiB
Java
|
package org.jmrtd.lds;
|
||
|
|
|
||
|
|
import java.math.BigInteger;
|
||
|
|
import java.security.spec.AlgorithmParameterSpec;
|
||
|
|
import java.security.spec.ECFieldFp;
|
||
|
|
import java.security.spec.ECParameterSpec;
|
||
|
|
import java.security.spec.ECPoint;
|
||
|
|
import java.security.spec.EllipticCurve;
|
||
|
|
import java.util.ArrayList;
|
||
|
|
import java.util.logging.Level;
|
||
|
|
import java.util.logging.Logger;
|
||
|
|
import org.bouncycastle.asn1.ASN1Encodable;
|
||
|
|
import org.bouncycastle.asn1.ASN1EncodableVector;
|
||
|
|
import org.bouncycastle.asn1.ASN1Integer;
|
||
|
|
import org.bouncycastle.asn1.ASN1ObjectIdentifier;
|
||
|
|
import org.bouncycastle.asn1.ASN1OctetString;
|
||
|
|
import org.bouncycastle.asn1.ASN1Primitive;
|
||
|
|
import org.bouncycastle.asn1.ASN1Sequence;
|
||
|
|
import org.bouncycastle.asn1.DEROctetString;
|
||
|
|
import org.bouncycastle.asn1.DLSequence;
|
||
|
|
import org.bouncycastle.asn1.x509.AlgorithmIdentifier;
|
||
|
|
import org.bouncycastle.asn1.x9.X962NamedCurves;
|
||
|
|
import org.bouncycastle.asn1.x9.X962Parameters;
|
||
|
|
import org.bouncycastle.asn1.x9.X9ECParameters;
|
||
|
|
import org.bouncycastle.jce.spec.ECNamedCurveParameterSpec;
|
||
|
|
import org.jmrtd.Util;
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public class PACEDomainParameterInfo extends SecurityInfo {
|
||
|
|
public static final String ID_DH_PUBLIC_NUMBER = "1.2.840.10046.2.1";
|
||
|
|
public static final String ID_EC_PUBLIC_KEY = "1.2.840.10045.2.1";
|
||
|
|
private static final String ID_PRIME_FIELD = "1.2.840.10045.1.1";
|
||
|
|
private static final Logger LOGGER = Logger.getLogger("org.jmrtd");
|
||
|
|
private static final long serialVersionUID = -5851251908152594728L;
|
||
|
|
private AlgorithmIdentifier domainParameter;
|
||
|
|
private String oid;
|
||
|
|
private BigInteger parameterId;
|
||
|
|
|
||
|
|
public PACEDomainParameterInfo(String str, AlgorithmIdentifier algorithmIdentifier) {
|
||
|
|
this(str, algorithmIdentifier, null);
|
||
|
|
}
|
||
|
|
|
||
|
|
public PACEDomainParameterInfo(String str, AlgorithmIdentifier algorithmIdentifier, BigInteger bigInteger) {
|
||
|
|
if (!checkRequiredIdentifier(str)) {
|
||
|
|
throw new IllegalArgumentException("Invalid protocol id: ".concat(String.valueOf(str)));
|
||
|
|
}
|
||
|
|
this.oid = str;
|
||
|
|
this.domainParameter = algorithmIdentifier;
|
||
|
|
this.parameterId = bigInteger;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.jmrtd.lds.SecurityInfo
|
||
|
|
public String getProtocolOIDString() {
|
||
|
|
return toProtocolOIDString(this.oid);
|
||
|
|
}
|
||
|
|
|
||
|
|
public AlgorithmParameterSpec getParameters() {
|
||
|
|
if (ID_DH_PUBLIC_NUMBER.equals(this.oid)) {
|
||
|
|
throw new IllegalStateException("DH PACEDomainParameterInfo not yet implemented");
|
||
|
|
}
|
||
|
|
if (ID_EC_PUBLIC_KEY.equals(this.oid)) {
|
||
|
|
return toECParameterSpec(this.domainParameter);
|
||
|
|
}
|
||
|
|
StringBuilder sb = new StringBuilder("Unsupported PACEDomainParameterInfo type ");
|
||
|
|
sb.append(this.oid);
|
||
|
|
throw new IllegalStateException(sb.toString());
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.jmrtd.lds.SecurityInfo
|
||
|
|
@Deprecated
|
||
|
|
public ASN1Primitive getDERObject() {
|
||
|
|
ASN1EncodableVector aSN1EncodableVector = new ASN1EncodableVector();
|
||
|
|
aSN1EncodableVector.add(new ASN1ObjectIdentifier(this.oid));
|
||
|
|
aSN1EncodableVector.add(this.domainParameter);
|
||
|
|
BigInteger bigInteger = this.parameterId;
|
||
|
|
if (bigInteger != null) {
|
||
|
|
aSN1EncodableVector.add(new ASN1Integer(bigInteger));
|
||
|
|
}
|
||
|
|
return new DLSequence(aSN1EncodableVector);
|
||
|
|
}
|
||
|
|
|
||
|
|
public String toString() {
|
||
|
|
StringBuilder sb = new StringBuilder("PACEDomainParameterInfo[protocol: ");
|
||
|
|
sb.append(toProtocolOIDString(this.oid));
|
||
|
|
sb.append(", domainParameter: [algorithm: ");
|
||
|
|
sb.append(this.domainParameter.getAlgorithm().getId());
|
||
|
|
sb.append(", parameters: ");
|
||
|
|
sb.append(this.domainParameter.getParameters());
|
||
|
|
sb.append("]");
|
||
|
|
if (this.parameterId != null) {
|
||
|
|
StringBuilder sb2 = new StringBuilder(", parameterId: ");
|
||
|
|
sb2.append(this.parameterId);
|
||
|
|
sb.append(sb2.toString());
|
||
|
|
}
|
||
|
|
sb.append("]");
|
||
|
|
return sb.toString();
|
||
|
|
}
|
||
|
|
|
||
|
|
public int hashCode() {
|
||
|
|
int hashCode = this.oid.hashCode();
|
||
|
|
int hashCode2 = this.domainParameter.hashCode();
|
||
|
|
BigInteger bigInteger = this.parameterId;
|
||
|
|
return (hashCode * 7) + 111111111 + (hashCode2 * 5) + ((bigInteger == null ? 333 : bigInteger.hashCode()) * 3);
|
||
|
|
}
|
||
|
|
|
||
|
|
public boolean equals(Object obj) {
|
||
|
|
if (obj == null) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
if (obj == this) {
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
if (PACEDomainParameterInfo.class.equals(obj.getClass())) {
|
||
|
|
return getDERObject().equals(((PACEDomainParameterInfo) obj).getDERObject());
|
||
|
|
}
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
public static boolean checkRequiredIdentifier(String str) {
|
||
|
|
return SecurityInfo.ID_PACE_DH_GM.equals(str) || SecurityInfo.ID_PACE_ECDH_GM.equals(str) || SecurityInfo.ID_PACE_DH_IM.equals(str) || SecurityInfo.ID_PACE_ECDH_IM.equals(str) || SecurityInfo.ID_PACE_ECDH_CAM.equals(str);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Deprecated
|
||
|
|
public static AlgorithmIdentifier toAlgorithmIdentifier(ECParameterSpec eCParameterSpec) {
|
||
|
|
ArrayList arrayList = new ArrayList();
|
||
|
|
arrayList.add(new ASN1Integer(BigInteger.ONE));
|
||
|
|
ASN1ObjectIdentifier aSN1ObjectIdentifier = new ASN1ObjectIdentifier(ID_PRIME_FIELD);
|
||
|
|
EllipticCurve curve = eCParameterSpec.getCurve();
|
||
|
|
arrayList.add(new DLSequence(new ASN1Encodable[]{aSN1ObjectIdentifier, new ASN1Integer(((ECFieldFp) curve.getField()).getP())}));
|
||
|
|
arrayList.add(new DLSequence(new ASN1Encodable[]{new DEROctetString(Util.i2os(curve.getA())), new DEROctetString(Util.i2os(curve.getB()))}));
|
||
|
|
arrayList.add(new DEROctetString(Util.ecPoint2OS(eCParameterSpec.getGenerator())));
|
||
|
|
arrayList.add(new ASN1Integer(eCParameterSpec.getOrder()));
|
||
|
|
arrayList.add(new ASN1Integer(eCParameterSpec.getCofactor()));
|
||
|
|
ASN1Encodable[] aSN1EncodableArr = new ASN1Encodable[arrayList.size()];
|
||
|
|
arrayList.toArray(aSN1EncodableArr);
|
||
|
|
return new AlgorithmIdentifier(new ASN1ObjectIdentifier(ID_EC_PUBLIC_KEY), new DLSequence(aSN1EncodableArr));
|
||
|
|
}
|
||
|
|
|
||
|
|
@Deprecated
|
||
|
|
public static ECParameterSpec toECParameterSpec(AlgorithmIdentifier algorithmIdentifier) {
|
||
|
|
LOGGER.info("DEBUG: algorithmOID = ".concat(String.valueOf(algorithmIdentifier.getAlgorithm().getId())));
|
||
|
|
ASN1Encodable parameters = algorithmIdentifier.getParameters();
|
||
|
|
if (!(parameters instanceof ASN1Sequence)) {
|
||
|
|
throw new IllegalArgumentException("Was expecting an ASN.1 sequence");
|
||
|
|
}
|
||
|
|
try {
|
||
|
|
X962Parameters x962Parameters = X962Parameters.getInstance(parameters);
|
||
|
|
if (x962Parameters.isNamedCurve()) {
|
||
|
|
ASN1ObjectIdentifier aSN1ObjectIdentifier = (ASN1ObjectIdentifier) x962Parameters.getParameters();
|
||
|
|
X9ECParameters byOID = X962NamedCurves.getByOID(aSN1ObjectIdentifier);
|
||
|
|
return Util.toECNamedCurveSpec(new ECNamedCurveParameterSpec(X962NamedCurves.getName(aSN1ObjectIdentifier), byOID.getCurve(), byOID.getG(), byOID.getN(), byOID.getH(), byOID.getSeed()));
|
||
|
|
}
|
||
|
|
} catch (Exception e) {
|
||
|
|
LOGGER.log(Level.WARNING, "Exception", (Throwable) e);
|
||
|
|
}
|
||
|
|
ASN1Sequence aSN1Sequence = (ASN1Sequence) parameters;
|
||
|
|
if (aSN1Sequence.size() < 5) {
|
||
|
|
throw new IllegalArgumentException("Was expecting an ASN.1 sequence of length 5 or longer");
|
||
|
|
}
|
||
|
|
try {
|
||
|
|
((ASN1Integer) aSN1Sequence.getObjectAt(0)).getValue();
|
||
|
|
ASN1Sequence aSN1Sequence2 = (ASN1Sequence) aSN1Sequence.getObjectAt(1);
|
||
|
|
((ASN1ObjectIdentifier) aSN1Sequence2.getObjectAt(0)).getId();
|
||
|
|
BigInteger positiveValue = ((ASN1Integer) aSN1Sequence2.getObjectAt(1)).getPositiveValue();
|
||
|
|
Logger logger = LOGGER;
|
||
|
|
StringBuilder sb = new StringBuilder("DEBUG: p = ");
|
||
|
|
sb.append(positiveValue);
|
||
|
|
logger.info(sb.toString());
|
||
|
|
ASN1Sequence aSN1Sequence3 = (ASN1Sequence) aSN1Sequence.getObjectAt(2);
|
||
|
|
ASN1OctetString aSN1OctetString = (ASN1OctetString) aSN1Sequence3.getObjectAt(0);
|
||
|
|
ASN1OctetString aSN1OctetString2 = (ASN1OctetString) aSN1Sequence3.getObjectAt(1);
|
||
|
|
BigInteger os2i = Util.os2i(aSN1OctetString.getOctets());
|
||
|
|
BigInteger os2i2 = Util.os2i(aSN1OctetString2.getOctets());
|
||
|
|
StringBuilder sb2 = new StringBuilder("DEBUG: a = ");
|
||
|
|
sb2.append(os2i);
|
||
|
|
logger.info(sb2.toString());
|
||
|
|
StringBuilder sb3 = new StringBuilder("DEBUG: b = ");
|
||
|
|
sb3.append(os2i2);
|
||
|
|
logger.info(sb3.toString());
|
||
|
|
ECPoint os2ECPoint = Util.os2ECPoint(((ASN1OctetString) aSN1Sequence.getObjectAt(3)).getOctets());
|
||
|
|
BigInteger affineX = os2ECPoint.getAffineX();
|
||
|
|
BigInteger affineY = os2ECPoint.getAffineY();
|
||
|
|
StringBuilder sb4 = new StringBuilder("DEBUG: G = (");
|
||
|
|
sb4.append(affineX);
|
||
|
|
sb4.append(", ");
|
||
|
|
sb4.append(affineY);
|
||
|
|
sb4.append(")");
|
||
|
|
logger.info(sb4.toString());
|
||
|
|
BigInteger mod = affineY.pow(2).mod(positiveValue);
|
||
|
|
BigInteger mod2 = affineX.pow(3).add(os2i.multiply(affineX)).add(os2i2).mod(positiveValue);
|
||
|
|
StringBuilder sb5 = new StringBuilder("DEBUG: G on curve = ");
|
||
|
|
sb5.append(mod.equals(mod2));
|
||
|
|
logger.info(sb5.toString());
|
||
|
|
EllipticCurve ellipticCurve = new EllipticCurve(new ECFieldFp(positiveValue), os2i, os2i2);
|
||
|
|
BigInteger positiveValue2 = ((ASN1Integer) aSN1Sequence.getObjectAt(4)).getPositiveValue();
|
||
|
|
StringBuilder sb6 = new StringBuilder("DEBUG: n = ");
|
||
|
|
sb6.append(positiveValue2);
|
||
|
|
logger.info(sb6.toString());
|
||
|
|
if (aSN1Sequence.size() <= 5) {
|
||
|
|
return new ECParameterSpec(ellipticCurve, os2ECPoint, positiveValue2, 1);
|
||
|
|
}
|
||
|
|
BigInteger value = ((ASN1Integer) aSN1Sequence.getObjectAt(5)).getValue();
|
||
|
|
StringBuilder sb7 = new StringBuilder("DEBUG: coFactor = ");
|
||
|
|
sb7.append(value);
|
||
|
|
logger.info(sb7.toString());
|
||
|
|
return new ECParameterSpec(ellipticCurve, os2ECPoint, positiveValue2, value.intValue());
|
||
|
|
} catch (Exception e2) {
|
||
|
|
LOGGER.log(Level.WARNING, "Exception", (Throwable) e2);
|
||
|
|
throw new IllegalArgumentException("Could not get EC parameters from explicit parameters");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
private static AlgorithmIdentifier toAlgorithmIdentifier(String str, ASN1Encodable aSN1Encodable) {
|
||
|
|
if (SecurityInfo.ID_PACE_DH_GM.equals(str) || SecurityInfo.ID_PACE_DH_IM.equals(str)) {
|
||
|
|
return new AlgorithmIdentifier(new ASN1ObjectIdentifier(ID_DH_PUBLIC_NUMBER), aSN1Encodable);
|
||
|
|
}
|
||
|
|
if (SecurityInfo.ID_PACE_ECDH_GM.equals(str) || SecurityInfo.ID_PACE_ECDH_IM.equals(str) || SecurityInfo.ID_PACE_ECDH_CAM.equals(str)) {
|
||
|
|
return new AlgorithmIdentifier(new ASN1ObjectIdentifier(ID_EC_PUBLIC_KEY), aSN1Encodable);
|
||
|
|
}
|
||
|
|
throw new IllegalArgumentException("Cannot infer algorithm OID from protocol OID: ".concat(String.valueOf(str)));
|
||
|
|
}
|
||
|
|
|
||
|
|
private static String toProtocolOIDString(String str) {
|
||
|
|
return SecurityInfo.ID_PACE_DH_GM.equals(str) ? "id-PACE-DH-GM" : SecurityInfo.ID_PACE_ECDH_GM.equals(str) ? "id-PACE-ECDH-GM" : SecurityInfo.ID_PACE_DH_IM.equals(str) ? "id-PACE-DH-IM" : SecurityInfo.ID_PACE_ECDH_IM.equals(str) ? "id-PACE-ECDH-IM" : SecurityInfo.ID_PACE_ECDH_CAM.equals(str) ? "id-PACE-ECDH-CAM" : str;
|
||
|
|
}
|
||
|
|
|
||
|
|
public BigInteger getParameterId() {
|
||
|
|
return this.parameterId;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.jmrtd.lds.SecurityInfo
|
||
|
|
public String getObjectIdentifier() {
|
||
|
|
return this.oid;
|
||
|
|
}
|
||
|
|
}
|