LCOV - code coverage report
Current view: top level - scd - app-p15.c (source / functions) Hit Total Coverage
Test: coverage.info Lines: 0 1656 0.0 %
Date: 2016-09-12 13:01:59 Functions: 0 29 0.0 %

          Line data    Source code
       1             : /* app-p15.c - The pkcs#15 card application.
       2             :  *      Copyright (C) 2005 Free Software Foundation, Inc.
       3             :  *
       4             :  * This file is part of GnuPG.
       5             :  *
       6             :  * GnuPG is free software; you can redistribute it and/or modify
       7             :  * it under the terms of the GNU General Public License as published by
       8             :  * the Free Software Foundation; either version 3 of the License, or
       9             :  * (at your option) any later version.
      10             :  *
      11             :  * GnuPG is distributed in the hope that it will be useful,
      12             :  * but WITHOUT ANY WARRANTY; without even the implied warranty of
      13             :  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      14             :  * GNU General Public License for more details.
      15             :  *
      16             :  * You should have received a copy of the GNU General Public License
      17             :  * along with this program; if not, see <http://www.gnu.org/licenses/>.
      18             :  */
      19             : 
      20             : /* Information pertaining to the BELPIC developer card samples:
      21             : 
      22             :        Unblock PUK: "222222111111"
      23             :        Reset PIN:   "333333111111")
      24             : 
      25             :    e.g. the APDUs 00:20:00:02:08:2C:33:33:33:11:11:11:FF
      26             :               and 00:24:01:01:08:24:12:34:FF:FF:FF:FF:FF
      27             :    should change the PIN into 1234.
      28             : */
      29             : 
      30             : #include <config.h>
      31             : #include <errno.h>
      32             : #include <stdio.h>
      33             : #include <stdlib.h>
      34             : #include <string.h>
      35             : #include <assert.h>
      36             : #include <time.h>
      37             : 
      38             : #include "scdaemon.h"
      39             : 
      40             : #include "iso7816.h"
      41             : #include "app-common.h"
      42             : #include "tlv.h"
      43             : #include "apdu.h" /* fixme: we should move the card detection to a
      44             :                      separate file */
      45             : 
      46             : /* Types of cards we know and which needs special treatment. */
      47             : typedef enum
      48             :   {
      49             :     CARD_TYPE_UNKNOWN,
      50             :     CARD_TYPE_TCOS,
      51             :     CARD_TYPE_MICARDO,
      52             :     CARD_TYPE_BELPIC   /* Belgian eID card specs. */
      53             :   }
      54             : card_type_t;
      55             : 
      56             : /* A list card types with ATRs noticed with these cards. */
      57             : #define X(a) ((unsigned char const *)(a))
      58             : static struct
      59             : {
      60             :   size_t atrlen;
      61             :   unsigned char const *atr;
      62             :   card_type_t type;
      63             : } card_atr_list[] = {
      64             :   { 19, X("\x3B\xBA\x13\x00\x81\x31\x86\x5D\x00\x64\x05\x0A\x02\x01\x31\x80"
      65             :           "\x90\x00\x8B"),
      66             :     CARD_TYPE_TCOS },  /* SLE44 */
      67             :   { 19, X("\x3B\xBA\x14\x00\x81\x31\x86\x5D\x00\x64\x05\x14\x02\x02\x31\x80"
      68             :           "\x90\x00\x91"),
      69             :     CARD_TYPE_TCOS }, /* SLE66S */
      70             :   { 19, X("\x3B\xBA\x96\x00\x81\x31\x86\x5D\x00\x64\x05\x60\x02\x03\x31\x80"
      71             :           "\x90\x00\x66"),
      72             :     CARD_TYPE_TCOS }, /* SLE66P */
      73             :   { 27, X("\x3B\xFF\x94\x00\xFF\x80\xB1\xFE\x45\x1F\x03\x00\x68\xD2\x76\x00"
      74             :           "\x00\x28\xFF\x05\x1E\x31\x80\x00\x90\x00\x23"),
      75             :     CARD_TYPE_MICARDO }, /* German BMI card */
      76             :   { 19, X("\x3B\x6F\x00\xFF\x00\x68\xD2\x76\x00\x00\x28\xFF\x05\x1E\x31\x80"
      77             :           "\x00\x90\x00"),
      78             :     CARD_TYPE_MICARDO }, /* German BMI card (ATR due to reader problem) */
      79             :   { 26, X("\x3B\xFE\x94\x00\xFF\x80\xB1\xFA\x45\x1F\x03\x45\x73\x74\x45\x49"
      80             :           "\x44\x20\x76\x65\x72\x20\x31\x2E\x30\x43"),
      81             :     CARD_TYPE_MICARDO }, /* EstEID (Estonian Big Brother card) */
      82             : 
      83             :   { 0 }
      84             : };
      85             : #undef X
      86             : 
      87             : 
      88             : /* The AID of PKCS15. */
      89             : static char const pkcs15_aid[] = { 0xA0, 0, 0, 0, 0x63,
      90             :                                    0x50, 0x4B, 0x43, 0x53, 0x2D, 0x31, 0x35 };
      91             : 
      92             : /* The Belgian eID variant - they didn't understood why a shared AID
      93             :    is useful for a standard.  Oh well. */
      94             : static char const pkcs15be_aid[] = { 0xA0, 0, 0, 0x01, 0x77,
      95             :                                    0x50, 0x4B, 0x43, 0x53, 0x2D, 0x31, 0x35 };
      96             : 
      97             : 
      98             : /* The PIN types as defined in pkcs#15 v1.1 */
      99             : typedef enum
     100             :   {
     101             :     PIN_TYPE_BCD = 0,
     102             :     PIN_TYPE_ASCII_NUMERIC = 1,
     103             :     PIN_TYPE_UTF8 = 2,
     104             :     PIN_TYPE_HALF_NIBBLE_BCD = 3,
     105             :     PIN_TYPE_ISO9564_1 = 4
     106             :   } pin_type_t;
     107             : 
     108             : 
     109             : /* A bit array with for the key usage flags from the
     110             :    commonKeyAttributes. */
     111             : struct keyusage_flags_s
     112             : {
     113             :     unsigned int encrypt: 1;
     114             :     unsigned int decrypt: 1;
     115             :     unsigned int sign: 1;
     116             :     unsigned int sign_recover: 1;
     117             :     unsigned int wrap: 1;
     118             :     unsigned int unwrap: 1;
     119             :     unsigned int verify: 1;
     120             :     unsigned int verify_recover: 1;
     121             :     unsigned int derive: 1;
     122             :     unsigned int non_repudiation: 1;
     123             : };
     124             : typedef struct keyusage_flags_s keyusage_flags_t;
     125             : 
     126             : 
     127             : 
     128             : /* This is an object to store information about a Certificate
     129             :    Directory File (CDF) in a format suitable for further processing by
     130             :    us. To keep memory management, simple we use a linked list of
     131             :    items; i.e. one such object represents one certificate and the list
     132             :    the entire CDF. */
     133             : struct cdf_object_s
     134             : {
     135             :   /* Link to next item when used in a linked list. */
     136             :   struct cdf_object_s *next;
     137             : 
     138             :   /* Length and allocated buffer with the Id of this object. */
     139             :   size_t objidlen;
     140             :   unsigned char *objid;
     141             : 
     142             :   /* To avoid reading a certificate more than once, we cache it in an
     143             :      allocated memory IMAGE of IMAGELEN. */
     144             :   size_t imagelen;
     145             :   unsigned char *image;
     146             : 
     147             :   /* Set to true if a length and offset is available. */
     148             :   int have_off;
     149             :   /* The offset and length of the object.  They are only valid if
     150             :      HAVE_OFF is true and set to 0 if HAVE_OFF is false. */
     151             :   unsigned long off, len;
     152             : 
     153             :   /* The length of the path as given in the CDF and the path itself.
     154             :      path[0] is the top DF (usually 0x3f00). The path will never be
     155             :      empty. */
     156             :   size_t pathlen;
     157             :   unsigned short path[1];
     158             : };
     159             : typedef struct cdf_object_s *cdf_object_t;
     160             : 
     161             : 
     162             : /* This is an object to store information about a Private Key
     163             :    Directory File (PrKDF) in a format suitable for further processing
     164             :    by us. To keep memory management, simple we use a linked list of
     165             :    items; i.e. one such object represents one certificate and the list
     166             :    the entire PrKDF. */
     167             : struct prkdf_object_s
     168             : {
     169             :   /* Link to next item when used in a linked list. */
     170             :   struct prkdf_object_s *next;
     171             : 
     172             :   /* Length and allocated buffer with the Id of this object. */
     173             :   size_t objidlen;
     174             :   unsigned char *objid;
     175             : 
     176             :   /* Length and allocated buffer with the authId of this object or
     177             :      NULL if no authID is known. */
     178             :   size_t authidlen;
     179             :   unsigned char *authid;
     180             : 
     181             :   /* The key's usage flags. */
     182             :   keyusage_flags_t usageflags;
     183             : 
     184             :   /* The keyReference and a flag telling whether it is valid. */
     185             :   unsigned long key_reference;
     186             :   int key_reference_valid;
     187             : 
     188             :   /* Set to true if a length and offset is available. */
     189             :   int have_off;
     190             :   /* The offset and length of the object.  They are only valid if
     191             :      HAVE_OFF is true and set to 0 if HAVE_OFF is false. */
     192             :   unsigned long off, len;
     193             : 
     194             :   /* The length of the path as given in the PrKDF and the path itself.
     195             :      path[0] is the top DF (usually 0x3f00). */
     196             :   size_t pathlen;
     197             :   unsigned short path[1];
     198             : };
     199             : typedef struct prkdf_object_s *prkdf_object_t;
     200             : 
     201             : 
     202             : /* This is an object to store information about a Authentication
     203             :    Object Directory File (AODF) in a format suitable for further
     204             :    processing by us. To keep memory management, simple we use a linked
     205             :    list of items; i.e. one such object represents one authentication
     206             :    object and the list the entire AOKDF. */
     207             : struct aodf_object_s
     208             : {
     209             :   /* Link to next item when used in a linked list. */
     210             :   struct aodf_object_s *next;
     211             : 
     212             :   /* Length and allocated buffer with the Id of this object. */
     213             :   size_t objidlen;
     214             :   unsigned char *objid;
     215             : 
     216             :   /* Length and allocated buffer with the authId of this object or
     217             :      NULL if no authID is known. */
     218             :   size_t authidlen;
     219             :   unsigned char *authid;
     220             : 
     221             :   /* The PIN Flags. */
     222             :   struct
     223             :   {
     224             :     unsigned int case_sensitive: 1;
     225             :     unsigned int local: 1;
     226             :     unsigned int change_disabled: 1;
     227             :     unsigned int unblock_disabled: 1;
     228             :     unsigned int initialized: 1;
     229             :     unsigned int needs_padding: 1;
     230             :     unsigned int unblocking_pin: 1;
     231             :     unsigned int so_pin: 1;
     232             :     unsigned int disable_allowed: 1;
     233             :     unsigned int integrity_protected: 1;
     234             :     unsigned int confidentiality_protected: 1;
     235             :     unsigned int exchange_ref_data: 1;
     236             :   } pinflags;
     237             : 
     238             :   /* The PIN Type. */
     239             :   pin_type_t pintype;
     240             : 
     241             :   /* The minimum length of a PIN. */
     242             :   unsigned long min_length;
     243             : 
     244             :   /* The stored length of a PIN. */
     245             :   unsigned long stored_length;
     246             : 
     247             :   /* The maximum length of a PIN and a flag telling whether it is valid. */
     248             :   unsigned long max_length;
     249             :   int max_length_valid;
     250             : 
     251             :   /* The pinReference and a flag telling whether it is valid. */
     252             :   unsigned long pin_reference;
     253             :   int pin_reference_valid;
     254             : 
     255             :   /* The padChar and a flag telling whether it is valid. */
     256             :   char pad_char;
     257             :   int pad_char_valid;
     258             : 
     259             : 
     260             :   /* Set to true if a length and offset is available. */
     261             :   int have_off;
     262             :   /* The offset and length of the object.  They are only valid if
     263             :      HAVE_OFF is true and set to 0 if HAVE_OFF is false. */
     264             :   unsigned long off, len;
     265             : 
     266             :   /* The length of the path as given in the Aodf and the path itself.
     267             :      path[0] is the top DF (usually 0x3f00). PATH is optional and thus
     268             :      may be NULL.  Malloced.*/
     269             :   size_t pathlen;
     270             :   unsigned short *path;
     271             : };
     272             : typedef struct aodf_object_s *aodf_object_t;
     273             : 
     274             : 
     275             : /* Context local to this application. */
     276             : struct app_local_s
     277             : {
     278             :   /* The home DF. Note, that we don't yet support a multilevel
     279             :      hierarchy.  Thus we assume this is directly below the MF.  */
     280             :   unsigned short home_df;
     281             : 
     282             :   /* The type of the card. */
     283             :   card_type_t card_type;
     284             : 
     285             :   /* Flag indicating whether we may use direct path selection. */
     286             :   int direct_path_selection;
     287             : 
     288             :   /* Structure with the EFIDs of the objects described in the ODF
     289             :      file. */
     290             :   struct
     291             :   {
     292             :     unsigned short private_keys;
     293             :     unsigned short public_keys;
     294             :     unsigned short trusted_public_keys;
     295             :     unsigned short secret_keys;
     296             :     unsigned short certificates;
     297             :     unsigned short trusted_certificates;
     298             :     unsigned short useful_certificates;
     299             :     unsigned short data_objects;
     300             :     unsigned short auth_objects;
     301             :   } odf;
     302             : 
     303             :   /* The PKCS#15 serialnumber from EF(TokeiNFo) or NULL.  Malloced. */
     304             :   unsigned char *serialno;
     305             :   size_t serialnolen;
     306             : 
     307             :   /* Information on all certificates. */
     308             :   cdf_object_t certificate_info;
     309             :   /* Information on all trusted certificates. */
     310             :   cdf_object_t trusted_certificate_info;
     311             :   /* Information on all useful certificates. */
     312             :   cdf_object_t useful_certificate_info;
     313             : 
     314             :   /* Information on all private keys. */
     315             :   prkdf_object_t private_key_info;
     316             : 
     317             :   /* Information on all authentication objects. */
     318             :   aodf_object_t auth_object_info;
     319             : 
     320             : };
     321             : 
     322             : 
     323             : /*** Local prototypes.  ***/
     324             : static gpg_error_t readcert_by_cdf (app_t app, cdf_object_t cdf,
     325             :                                     unsigned char **r_cert, size_t *r_certlen);
     326             : 
     327             : 
     328             : 
     329             : /* Release the CDF object A  */
     330             : static void
     331           0 : release_cdflist (cdf_object_t a)
     332             : {
     333           0 :   while (a)
     334             :     {
     335           0 :       cdf_object_t tmp = a->next;
     336           0 :       xfree (a->image);
     337           0 :       xfree (a->objid);
     338           0 :       xfree (a);
     339           0 :       a = tmp;
     340             :     }
     341           0 : }
     342             : 
     343             : /* Release the PrKDF object A.  */
     344             : static void
     345           0 : release_prkdflist (prkdf_object_t a)
     346             : {
     347           0 :   while (a)
     348             :     {
     349           0 :       prkdf_object_t tmp = a->next;
     350           0 :       xfree (a->objid);
     351           0 :       xfree (a->authid);
     352           0 :       xfree (a);
     353           0 :       a = tmp;
     354             :     }
     355           0 : }
     356             : 
     357             : /* Release just one aodf object. */
     358             : void
     359           0 : release_aodf_object (aodf_object_t a)
     360             : {
     361           0 :   if (a)
     362             :     {
     363           0 :       xfree (a->objid);
     364           0 :       xfree (a->authid);
     365           0 :       xfree (a->path);
     366           0 :       xfree (a);
     367             :     }
     368           0 : }
     369             : 
     370             : /* Release the AODF list A.  */
     371             : static void
     372           0 : release_aodflist (aodf_object_t a)
     373             : {
     374           0 :   while (a)
     375             :     {
     376           0 :       aodf_object_t tmp = a->next;
     377           0 :       release_aodf_object (a);
     378           0 :       a = tmp;
     379             :     }
     380           0 : }
     381             : 
     382             : 
     383             : /* Release all local resources.  */
     384             : static void
     385           0 : do_deinit (app_t app)
     386             : {
     387           0 :   if (app && app->app_local)
     388             :     {
     389           0 :       release_cdflist (app->app_local->certificate_info);
     390           0 :       release_cdflist (app->app_local->trusted_certificate_info);
     391           0 :       release_cdflist (app->app_local->useful_certificate_info);
     392           0 :       release_prkdflist (app->app_local->private_key_info);
     393           0 :       release_aodflist (app->app_local->auth_object_info);
     394           0 :       xfree (app->app_local->serialno);
     395           0 :       xfree (app->app_local);
     396           0 :       app->app_local = NULL;
     397             :     }
     398           0 : }
     399             : 
     400             : 
     401             : 
     402             : /* Do a select and a read for the file with EFID.  EFID_DESC is a
     403             :    desctription of the EF to be used with error messages.  On success
     404             :    BUFFER and BUFLEN contain the entire content of the EF.  The caller
     405             :    must free BUFFER only on success. */
     406             : static gpg_error_t
     407           0 : select_and_read_binary (int slot, unsigned short efid, const char *efid_desc,
     408             :                         unsigned char **buffer, size_t *buflen)
     409             : {
     410             :   gpg_error_t err;
     411             : 
     412           0 :   err = iso7816_select_file (slot, efid, 0, NULL, NULL);
     413           0 :   if (err)
     414             :     {
     415           0 :       log_error ("error selecting %s (0x%04X): %s\n",
     416             :                  efid_desc, efid, gpg_strerror (err));
     417           0 :       return err;
     418             :     }
     419           0 :   err = iso7816_read_binary (slot, 0, 0, buffer, buflen);
     420           0 :   if (err)
     421             :     {
     422           0 :       log_error ("error reading %s (0x%04X): %s\n",
     423             :                  efid_desc, efid, gpg_strerror (err));
     424           0 :       return err;
     425             :     }
     426           0 :   return 0;
     427             : }
     428             : 
     429             : 
     430             : /* This function calls select file to read a file using a complete
     431             :    path which may or may not start at the master file (MF). */
     432             : static gpg_error_t
     433           0 : select_ef_by_path (app_t app, const unsigned short *path, size_t pathlen)
     434             : {
     435             :   gpg_error_t err;
     436             :   int i, j;
     437             : 
     438           0 :   if (!pathlen)
     439           0 :     return gpg_error (GPG_ERR_INV_VALUE);
     440             : 
     441           0 :   if (pathlen && *path != 0x3f00 )
     442           0 :     log_debug ("WARNING: relative path selection not yet implemented\n");
     443             : 
     444           0 :   if (app->app_local->direct_path_selection)
     445             :     {
     446           0 :       err = iso7816_select_path (app->slot, path+1, pathlen-1, NULL, NULL);
     447           0 :       if (err)
     448             :         {
     449           0 :           log_error ("error selecting path ");
     450           0 :           for (j=0; j < pathlen; j++)
     451           0 :             log_printf ("%04hX", path[j]);
     452           0 :           log_printf (": %s\n", gpg_strerror (err));
     453           0 :           return err;
     454             :         }
     455             :     }
     456             :   else
     457             :     {
     458             :       /* FIXME: Need code to remember the last PATH so that we can decide
     459             :          what select commands to send in case the path does not start off
     460             :          with 3F00.  We might also want to use direct path selection if
     461             :          supported by the card. */
     462           0 :       for (i=0; i < pathlen; i++)
     463             :         {
     464           0 :           err = iso7816_select_file (app->slot, path[i],
     465           0 :                                      !(i+1 == pathlen), NULL, NULL);
     466           0 :           if (err)
     467             :             {
     468           0 :               log_error ("error selecting part %d from path ", i);
     469           0 :               for (j=0; j < pathlen; j++)
     470           0 :                 log_printf ("%04hX", path[j]);
     471           0 :               log_printf (": %s\n", gpg_strerror (err));
     472           0 :               return err;
     473             :             }
     474             :         }
     475             :     }
     476           0 :   return 0;
     477             : }
     478             : 
     479             : /* Parse a cert Id string (or a key Id string) and return the binary
     480             :    object Id string in a newly allocated buffer stored at R_OBJID and
     481             :    R_OBJIDLEN.  On Error NULL will be stored there and an error code
     482             :    returned. On success caller needs to free the buffer at R_OBJID. */
     483             : static gpg_error_t
     484           0 : parse_certid (app_t app, const char *certid,
     485             :               unsigned char **r_objid, size_t *r_objidlen)
     486             : {
     487             :   char tmpbuf[10];
     488             :   const char *s;
     489             :   size_t objidlen;
     490             :   unsigned char *objid;
     491             :   int i;
     492             : 
     493           0 :   *r_objid = NULL;
     494           0 :   *r_objidlen = 0;
     495             : 
     496           0 :   if (app->app_local->home_df)
     497           0 :     snprintf (tmpbuf, sizeof tmpbuf,
     498           0 :               "P15-%04X.", (unsigned int)(app->app_local->home_df & 0xffff));
     499             :   else
     500           0 :     strcpy (tmpbuf, "P15.");
     501           0 :   if (strncmp (certid, tmpbuf, strlen (tmpbuf)) )
     502             :     {
     503           0 :       if (!strncmp (certid, "P15.", 4)
     504           0 :           || (!strncmp (certid, "P15-", 4)
     505           0 :               && hexdigitp (certid+4)
     506           0 :               && hexdigitp (certid+5)
     507           0 :               && hexdigitp (certid+6)
     508           0 :               && hexdigitp (certid+7)
     509           0 :               && certid[8] == '.'))
     510           0 :         return gpg_error (GPG_ERR_NOT_FOUND);
     511           0 :       return gpg_error (GPG_ERR_INV_ID);
     512             :     }
     513           0 :   certid += strlen (tmpbuf);
     514             : 
     515           0 :   for (s=certid, objidlen=0; hexdigitp (s); s++, objidlen++)
     516             :     ;
     517           0 :   if (*s || !objidlen || (objidlen%2))
     518           0 :     return gpg_error (GPG_ERR_INV_ID);
     519           0 :   objidlen /= 2;
     520           0 :   objid = xtrymalloc (objidlen);
     521           0 :   if (!objid)
     522           0 :     return gpg_error_from_syserror ();
     523           0 :   for (s=certid, i=0; i < objidlen; i++, s+=2)
     524           0 :     objid[i] = xtoi_2 (s);
     525           0 :   *r_objid = objid;
     526           0 :   *r_objidlen = objidlen;
     527           0 :   return 0;
     528             : }
     529             : 
     530             : 
     531             : /* Find a certificate object by the certificate ID CERTID and store a
     532             :    pointer to it at R_CDF. */
     533             : static gpg_error_t
     534           0 : cdf_object_from_certid (app_t app, const char *certid, cdf_object_t *r_cdf)
     535             : {
     536             :   gpg_error_t err;
     537             :   size_t objidlen;
     538             :   unsigned char *objid;
     539             :   cdf_object_t cdf;
     540             : 
     541           0 :   err = parse_certid (app, certid, &objid, &objidlen);
     542           0 :   if (err)
     543           0 :     return err;
     544             : 
     545           0 :   for (cdf = app->app_local->certificate_info; cdf; cdf = cdf->next)
     546           0 :     if (cdf->objidlen == objidlen && !memcmp (cdf->objid, objid, objidlen))
     547           0 :       break;
     548           0 :   if (!cdf)
     549           0 :     for (cdf = app->app_local->trusted_certificate_info; cdf; cdf = cdf->next)
     550           0 :       if (cdf->objidlen == objidlen && !memcmp (cdf->objid, objid, objidlen))
     551           0 :         break;
     552           0 :   if (!cdf)
     553           0 :     for (cdf = app->app_local->useful_certificate_info; cdf; cdf = cdf->next)
     554           0 :       if (cdf->objidlen == objidlen && !memcmp (cdf->objid, objid, objidlen))
     555           0 :         break;
     556           0 :   xfree (objid);
     557           0 :   if (!cdf)
     558           0 :     return gpg_error (GPG_ERR_NOT_FOUND);
     559           0 :   *r_cdf = cdf;
     560           0 :   return 0;
     561             : }
     562             : 
     563             : 
     564             : /* Find a private key object by the key Id string KEYIDSTR and store a
     565             :    pointer to it at R_PRKDF. */
     566             : static gpg_error_t
     567           0 : prkdf_object_from_keyidstr (app_t app, const char *keyidstr,
     568             :                             prkdf_object_t *r_prkdf)
     569             : {
     570             :   gpg_error_t err;
     571             :   size_t objidlen;
     572             :   unsigned char *objid;
     573             :   prkdf_object_t prkdf;
     574             : 
     575           0 :   err = parse_certid (app, keyidstr, &objid, &objidlen);
     576           0 :   if (err)
     577           0 :     return err;
     578             : 
     579           0 :   for (prkdf = app->app_local->private_key_info; prkdf; prkdf = prkdf->next)
     580           0 :     if (prkdf->objidlen == objidlen && !memcmp (prkdf->objid, objid, objidlen))
     581           0 :       break;
     582           0 :   xfree (objid);
     583           0 :   if (!prkdf)
     584           0 :     return gpg_error (GPG_ERR_NOT_FOUND);
     585           0 :   *r_prkdf = prkdf;
     586           0 :   return 0;
     587             : }
     588             : 
     589             : 
     590             : 
     591             : 
     592             : /* Read and parse the Object Directory File and store away the
     593             :    pointers. ODF_FID shall contain the FID of the ODF.
     594             : 
     595             :    Example of such a file:
     596             : 
     597             :    A0 06 30 04 04 02 60 34  = Private Keys
     598             :    A4 06 30 04 04 02 60 35  = Certificates
     599             :    A5 06 30 04 04 02 60 36  = TrustedCertificates
     600             :    A7 06 30 04 04 02 60 37  = DataObjects
     601             :    A8 06 30 04 04 02 60 38  = AuthObjects
     602             : 
     603             :    These are all PathOrObjects using the path CHOICE element.  The
     604             :    paths are octet strings of length 2.  Using this Path CHOICE
     605             :    element is recommended, so we only implement that for now.
     606             : */
     607             : static gpg_error_t
     608           0 : read_ef_odf (app_t app, unsigned short odf_fid)
     609             : {
     610             :   gpg_error_t err;
     611             :   unsigned char *buffer, *p;
     612             :   size_t buflen;
     613             :   unsigned short value;
     614             :   size_t offset;
     615             : 
     616           0 :   err = select_and_read_binary (app->slot, odf_fid, "ODF", &buffer, &buflen);
     617           0 :   if (err)
     618           0 :     return err;
     619             : 
     620           0 :   if (buflen < 8)
     621             :     {
     622           0 :       log_error ("error: ODF too short\n");
     623           0 :       xfree (buffer);
     624           0 :       return gpg_error (GPG_ERR_INV_OBJ);
     625             :     }
     626           0 :   p = buffer;
     627           0 :   while (buflen && *p && *p != 0xff)
     628             :     {
     629           0 :       if ( buflen >= 8
     630           0 :            && (p[0] & 0xf0) == 0xA0
     631           0 :            && !memcmp (p+1, "\x06\x30\x04\x04\x02", 5) )
     632             :         {
     633           0 :           offset = 6;
     634             :         }
     635           0 :       else if ( buflen >= 12
     636           0 :                 && (p[0] & 0xf0) == 0xA0
     637           0 :                 && !memcmp (p+1, "\x0a\x30\x08\x04\x06\x3F\x00", 7)
     638           0 :                 && app->app_local->home_df == ((p[8]<<8)|p[9]) )
     639             :         {
     640             :           /* We only allow a full path if all files are at the same
     641             :              level and below the home directory.  The extend this we
     642             :              would need to make use of new data type capable of
     643             :              keeping a full path. */
     644           0 :           offset = 10;
     645             :         }
     646             :       else
     647             :         {
     648           0 :           log_error ("ODF format is not supported by us\n");
     649           0 :           xfree (buffer);
     650           0 :           return gpg_error (GPG_ERR_INV_OBJ);
     651             :         }
     652           0 :       switch ((p[0] & 0x0f))
     653             :         {
     654           0 :         case 0: value = app->app_local->odf.private_keys; break;
     655           0 :         case 1: value = app->app_local->odf.public_keys; break;
     656           0 :         case 2: value = app->app_local->odf.trusted_public_keys; break;
     657           0 :         case 3: value = app->app_local->odf.secret_keys; break;
     658           0 :         case 4: value = app->app_local->odf.certificates; break;
     659           0 :         case 5: value = app->app_local->odf.trusted_certificates; break;
     660           0 :         case 6: value = app->app_local->odf.useful_certificates; break;
     661           0 :         case 7: value = app->app_local->odf.data_objects; break;
     662           0 :         case 8: value = app->app_local->odf.auth_objects; break;
     663           0 :         default: value = 0; break;
     664             :         }
     665           0 :       if (value)
     666             :         {
     667           0 :           log_error ("duplicate object type %d in ODF ignored\n",(p[0]&0x0f));
     668           0 :           continue;
     669             :         }
     670           0 :       value = ((p[offset] << 8) | p[offset+1]);
     671           0 :       switch ((p[0] & 0x0f))
     672             :         {
     673           0 :         case 0: app->app_local->odf.private_keys = value; break;
     674           0 :         case 1: app->app_local->odf.public_keys = value; break;
     675           0 :         case 2: app->app_local->odf.trusted_public_keys = value; break;
     676           0 :         case 3: app->app_local->odf.secret_keys = value; break;
     677           0 :         case 4: app->app_local->odf.certificates = value; break;
     678           0 :         case 5: app->app_local->odf.trusted_certificates = value; break;
     679           0 :         case 6: app->app_local->odf.useful_certificates = value; break;
     680           0 :         case 7: app->app_local->odf.data_objects = value; break;
     681           0 :         case 8: app->app_local->odf.auth_objects = value; break;
     682             :         default:
     683           0 :           log_error ("unknown object type %d in ODF ignored\n", (p[0]&0x0f));
     684             :         }
     685           0 :       offset += 2;
     686             : 
     687           0 :       if (buflen < offset)
     688           0 :         break;
     689           0 :       p += offset;
     690           0 :       buflen -= offset;
     691             :     }
     692             : 
     693           0 :   if (buflen)
     694           0 :     log_info ("warning: %u bytes of garbage detected at end of ODF\n",
     695             :               (unsigned int)buflen);
     696             : 
     697           0 :   xfree (buffer);
     698           0 :   return 0;
     699             : }
     700             : 
     701             : 
     702             : /* Parse the BIT STRING with the keyUsageFlags from the
     703             :    CommonKeyAttributes. */
     704             : static gpg_error_t
     705           0 : parse_keyusage_flags (const unsigned char *der, size_t derlen,
     706             :                       keyusage_flags_t *usageflags)
     707             : {
     708             :   unsigned int bits, mask;
     709             :   int i, unused, full;
     710             : 
     711           0 :   memset (usageflags, 0, sizeof *usageflags);
     712           0 :   if (!derlen)
     713           0 :     return gpg_error (GPG_ERR_INV_OBJ);
     714             : 
     715           0 :   unused = *der++; derlen--;
     716           0 :   if ((!derlen && unused) || unused/8 > derlen)
     717           0 :     return gpg_error (GPG_ERR_ENCODING_PROBLEM);
     718           0 :   full = derlen - (unused+7)/8;
     719           0 :   unused %= 8;
     720           0 :   mask = 0;
     721           0 :   for (i=1; unused; i <<= 1, unused--)
     722           0 :     mask |= i;
     723             : 
     724             :   /* First octet */
     725           0 :   if (derlen)
     726             :     {
     727           0 :       bits = *der++; derlen--;
     728           0 :       if (full)
     729           0 :         full--;
     730             :       else
     731             :         {
     732           0 :           bits &= ~mask;
     733           0 :           mask = 0;
     734             :         }
     735             :     }
     736             :   else
     737           0 :     bits = 0;
     738           0 :   if ((bits & 0x80)) usageflags->encrypt = 1;
     739           0 :   if ((bits & 0x40)) usageflags->decrypt = 1;
     740           0 :   if ((bits & 0x20)) usageflags->sign = 1;
     741           0 :   if ((bits & 0x10)) usageflags->sign_recover = 1;
     742           0 :   if ((bits & 0x08)) usageflags->wrap = 1;
     743           0 :   if ((bits & 0x04)) usageflags->unwrap = 1;
     744           0 :   if ((bits & 0x02)) usageflags->verify = 1;
     745           0 :   if ((bits & 0x01)) usageflags->verify_recover = 1;
     746             : 
     747             :   /* Second octet. */
     748           0 :   if (derlen)
     749             :     {
     750           0 :       bits = *der++; derlen--;
     751           0 :       if (full)
     752           0 :         full--;
     753             :       else
     754             :         {
     755           0 :           bits &= ~mask;
     756           0 :           mask = 0;
     757             :         }
     758             :     }
     759             :   else
     760           0 :     bits = 0;
     761           0 :   if ((bits & 0x80)) usageflags->derive = 1;
     762           0 :   if ((bits & 0x40)) usageflags->non_repudiation = 1;
     763             : 
     764           0 :   return 0;
     765             : }
     766             : 
     767             : /* Read and  parse the Private Key Directory Files. */
     768             : /*
     769             :   6034 (privatekeys)
     770             : 
     771             : 30 33 30 11 0C 08 53 4B 2E  43 48 2E 44 53 03 02   030...SK.CH.DS..
     772             : 06 80 04 01 07 30 0C 04 01  01 03 03 06 00 40 02   .....0........@.
     773             : 02 00 50 A1 10 30 0E 30 08  04 06 3F 00 40 16 00   ..P..0.0...?.@..
     774             : 50 02 02 04 00 30 33 30 11  0C 08 53 4B 2E 43 48   P....030...SK.CH
     775             : 2E 4B 45 03 02 06 80 04 01  0A 30 0C 04 01 0C 03   .KE.......0.....
     776             : 03 06 44 00 02 02 00 52 A1  10 30 0E 30 08 04 06   ..D....R..0.0...
     777             : 3F 00 40 16 00 52 02 02 04  00 30 34 30 12 0C 09   ?.@..R....040...
     778             : 53 4B 2E 43 48 2E 41 55 54  03 02 06 80 04 01 0A   SK.CH.AUT.......
     779             : 30 0C 04 01 0D 03 03 06 20  00 02 02 00 51 A1 10   0....... ....Q..
     780             : 30 0E 30 08 04 06 3F 00 40  16 00 51 02 02 04 00   0.0...?.@..Q....
     781             : 30 37 30 15 0C 0C 53 4B 2E  43 48 2E 44 53 2D 53   070...SK.CH.DS-S
     782             : 50 58 03 02 06 80 04 01 0A  30 0C 04 01 02 03 03   PX.......0......
     783             : 06 20 00 02 02 00 53 A1 10  30 0E 30 08 04 06 3F   . ....S..0.0...?
     784             : 00 40 16 00 53 02 02 04 00  00 00 00 00 00 00 00   .@..S...........
     785             : 00 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00   ................
     786             : 00 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00   ................
     787             : 
     788             :    0 30   51: SEQUENCE {
     789             :    2 30   17:   SEQUENCE { -- commonObjectAttributes
     790             :    4 0C    8:     UTF8String 'SK.CH.DS'
     791             :   14 03    2:     BIT STRING 6 unused bits
     792             :             :       '01'B (bit 0)
     793             :   18 04    1:     OCTET STRING --authid
     794             :             :       07
     795             :             :     }
     796             :   21 30   12:   SEQUENCE { -- commonKeyAttributes
     797             :   23 04    1:     OCTET STRING
     798             :             :       01
     799             :   26 03    3:     BIT STRING 6 unused bits
     800             :             :       '1000000000'B (bit 9)
     801             :   31 02    2:     INTEGER 80  -- keyReference (optional)
     802             :             :     }
     803             :   35 A1   16:   [1] {  -- keyAttributes
     804             :   37 30   14:     SEQUENCE { -- privateRSAKeyAttributes
     805             :   39 30    8:       SEQUENCE { -- objectValue
     806             :   41 04    6:         OCTET STRING --path
     807             :             :           3F 00 40 16 00 50
     808             :             :         }
     809             :   49 02    2:       INTEGER 1024 -- modulus
     810             :             :       }
     811             :             :     }
     812             :             :   }
     813             : 
     814             : 
     815             : */
     816             : static gpg_error_t
     817           0 : read_ef_prkdf (app_t app, unsigned short fid, prkdf_object_t *result)
     818             : {
     819             :   gpg_error_t err;
     820           0 :   unsigned char *buffer = NULL;
     821             :   size_t buflen;
     822             :   const unsigned char *p;
     823             :   size_t n, objlen, hdrlen;
     824             :   int class, tag, constructed, ndef;
     825           0 :   prkdf_object_t prkdflist = NULL;
     826             :   int i;
     827             : 
     828           0 :   if (!fid)
     829           0 :     return gpg_error (GPG_ERR_NO_DATA); /* No private keys. */
     830             : 
     831           0 :   err = select_and_read_binary (app->slot, fid, "PrKDF", &buffer, &buflen);
     832           0 :   if (err)
     833           0 :     return err;
     834             : 
     835           0 :   p = buffer;
     836           0 :   n = buflen;
     837             : 
     838             :   /* FIXME: This shares a LOT of code with read_ef_cdf! */
     839             : 
     840             :   /* Loop over the records.  We stop as soon as we detect a new record
     841             :      starting with 0x00 or 0xff as these values are commonly used to
     842             :      pad data blocks and are no valid ASN.1 encoding. */
     843           0 :   while (n && *p && *p != 0xff)
     844             :     {
     845             :       const unsigned char *pp;
     846             :       size_t nn;
     847             :       int where;
     848           0 :       const char *errstr = NULL;
     849           0 :       prkdf_object_t prkdf = NULL;
     850             :       unsigned long ul;
     851             :       const unsigned char *objid;
     852             :       size_t objidlen;
     853           0 :       const unsigned char *authid = NULL;
     854           0 :       size_t authidlen = 0;
     855             :       keyusage_flags_t usageflags;
     856           0 :       unsigned long key_reference = 0;
     857           0 :       int key_reference_valid = 0;
     858             :       const char *s;
     859             : 
     860           0 :       err = parse_ber_header (&p, &n, &class, &tag, &constructed,
     861             :                               &ndef, &objlen, &hdrlen);
     862           0 :       if (!err && (objlen > n || tag != TAG_SEQUENCE))
     863           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
     864           0 :       if (err)
     865             :         {
     866           0 :           log_error ("error parsing PrKDF record: %s\n", gpg_strerror (err));
     867           0 :           goto leave;
     868             :         }
     869           0 :       pp = p;
     870           0 :       nn = objlen;
     871           0 :       p += objlen;
     872           0 :       n -= objlen;
     873             : 
     874             :       /* Parse the commonObjectAttributes.  */
     875           0 :       where = __LINE__;
     876           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
     877             :                               &ndef, &objlen, &hdrlen);
     878           0 :       if (!err && (objlen > nn || tag != TAG_SEQUENCE))
     879           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
     880           0 :       if (err)
     881           0 :         goto parse_error;
     882             :       {
     883           0 :         const unsigned char *ppp = pp;
     884           0 :         size_t nnn = objlen;
     885             : 
     886           0 :         pp += objlen;
     887           0 :         nn -= objlen;
     888             : 
     889             :         /* Search the optional AuthId.  We need to skip the optional
     890             :            Label (UTF8STRING) and the optional CommonObjectFlags
     891             :            (BITSTRING). */
     892           0 :         where = __LINE__;
     893           0 :         err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
     894             :                                 &ndef, &objlen, &hdrlen);
     895           0 :         if (!err && (objlen > nnn || class != CLASS_UNIVERSAL))
     896           0 :           err = gpg_error (GPG_ERR_INV_OBJ);
     897           0 :         if (gpg_err_code (err) == GPG_ERR_EOF)
     898           0 :           goto no_authid;
     899           0 :         if (err)
     900           0 :           goto parse_error;
     901           0 :         if (tag == TAG_UTF8_STRING)
     902             :           {
     903           0 :             ppp += objlen; /* Skip the Label. */
     904           0 :             nnn -= objlen;
     905             : 
     906           0 :             where = __LINE__;
     907           0 :             err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
     908             :                                     &ndef, &objlen, &hdrlen);
     909           0 :             if (!err && (objlen > nnn || class != CLASS_UNIVERSAL))
     910           0 :               err = gpg_error (GPG_ERR_INV_OBJ);
     911           0 :             if (gpg_err_code (err) == GPG_ERR_EOF)
     912           0 :               goto no_authid;
     913           0 :             if (err)
     914           0 :               goto parse_error;
     915             :           }
     916           0 :         if (tag == TAG_BIT_STRING)
     917             :           {
     918           0 :             ppp += objlen; /* Skip the CommonObjectFlags.  */
     919           0 :             nnn -= objlen;
     920             : 
     921           0 :             where = __LINE__;
     922           0 :             err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
     923             :                                     &ndef, &objlen, &hdrlen);
     924           0 :             if (!err && (objlen > nnn || class != CLASS_UNIVERSAL))
     925           0 :               err = gpg_error (GPG_ERR_INV_OBJ);
     926           0 :             if (gpg_err_code (err) == GPG_ERR_EOF)
     927           0 :               goto no_authid;
     928           0 :             if (err)
     929           0 :               goto parse_error;
     930             :           }
     931           0 :         if (tag == TAG_OCTET_STRING && objlen)
     932             :           {
     933           0 :             authid = ppp;
     934           0 :             authidlen = objlen;
     935             :           }
     936             :       no_authid:
     937             :         ;
     938             :       }
     939             : 
     940             :       /* Parse the commonKeyAttributes.  */
     941           0 :       where = __LINE__;
     942           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
     943             :                               &ndef, &objlen, &hdrlen);
     944           0 :       if (!err && (objlen > nn || tag != TAG_SEQUENCE))
     945           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
     946           0 :       if (err)
     947           0 :         goto parse_error;
     948             :       {
     949           0 :         const unsigned char *ppp = pp;
     950           0 :         size_t nnn = objlen;
     951             : 
     952           0 :         pp += objlen;
     953           0 :         nn -= objlen;
     954             : 
     955             :         /* Get the Id. */
     956           0 :         where = __LINE__;
     957           0 :         err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
     958             :                               &ndef, &objlen, &hdrlen);
     959           0 :         if (!err && (objlen > nnn
     960           0 :                      || class != CLASS_UNIVERSAL || tag != TAG_OCTET_STRING))
     961           0 :           err = gpg_error (GPG_ERR_INV_OBJ);
     962           0 :         if (err)
     963           0 :           goto parse_error;
     964           0 :         objid = ppp;
     965           0 :         objidlen = objlen;
     966           0 :         ppp += objlen;
     967           0 :         nnn -= objlen;
     968             : 
     969             :         /* Get the KeyUsageFlags. */
     970           0 :         where = __LINE__;
     971           0 :         err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
     972             :                               &ndef, &objlen, &hdrlen);
     973           0 :         if (!err && (objlen > nnn
     974           0 :                      || class != CLASS_UNIVERSAL || tag != TAG_BIT_STRING))
     975           0 :           err = gpg_error (GPG_ERR_INV_OBJ);
     976           0 :         if (err)
     977           0 :           goto parse_error;
     978           0 :         err = parse_keyusage_flags (ppp, objlen, &usageflags);
     979           0 :         if (err)
     980           0 :           goto parse_error;
     981           0 :         ppp += objlen;
     982           0 :         nnn -= objlen;
     983             : 
     984             :         /* Find the keyReference */
     985           0 :         where = __LINE__;
     986           0 :         err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
     987             :                               &ndef, &objlen, &hdrlen);
     988           0 :         if (gpg_err_code (err) == GPG_ERR_EOF)
     989           0 :           goto leave_cki;
     990           0 :         if (!err && objlen > nnn)
     991           0 :           err = gpg_error (GPG_ERR_INV_OBJ);
     992           0 :         if (err)
     993           0 :           goto parse_error;
     994           0 :         if (class == CLASS_UNIVERSAL && tag == TAG_BOOLEAN)
     995             :           {
     996             :             /* Skip the native element. */
     997           0 :             ppp += objlen;
     998           0 :             nnn -= objlen;
     999             : 
    1000           0 :             err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
    1001             :                                     &ndef, &objlen, &hdrlen);
    1002           0 :             if (gpg_err_code (err) == GPG_ERR_EOF)
    1003           0 :               goto leave_cki;
    1004           0 :             if (!err && objlen > nnn)
    1005           0 :               err = gpg_error (GPG_ERR_INV_OBJ);
    1006           0 :             if (err)
    1007           0 :               goto parse_error;
    1008             :           }
    1009           0 :         if (class == CLASS_UNIVERSAL && tag == TAG_BIT_STRING)
    1010             :           {
    1011             :             /* Skip the accessFlags. */
    1012           0 :             ppp += objlen;
    1013           0 :             nnn -= objlen;
    1014             : 
    1015           0 :             err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
    1016             :                                     &ndef, &objlen, &hdrlen);
    1017           0 :             if (gpg_err_code (err) == GPG_ERR_EOF)
    1018           0 :               goto leave_cki;
    1019           0 :             if (!err && objlen > nnn)
    1020           0 :               err = gpg_error (GPG_ERR_INV_OBJ);
    1021           0 :             if (err)
    1022           0 :               goto parse_error;
    1023             :           }
    1024           0 :         if (class == CLASS_UNIVERSAL && tag == TAG_INTEGER)
    1025             :           {
    1026             :             /* Yep, this is the keyReference.  */
    1027           0 :             for (ul=0; objlen; objlen--)
    1028             :               {
    1029           0 :                 ul <<= 8;
    1030           0 :                 ul |= (*ppp++) & 0xff;
    1031           0 :                 nnn--;
    1032             :             }
    1033           0 :             key_reference = ul;
    1034           0 :             key_reference_valid = 1;
    1035             :           }
    1036             : 
    1037             :       leave_cki:
    1038             :         ;
    1039             :       }
    1040             : 
    1041             : 
    1042             :       /* Skip subClassAttributes.  */
    1043           0 :       where = __LINE__;
    1044           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1045             :                               &ndef, &objlen, &hdrlen);
    1046           0 :       if (!err && objlen > nn)
    1047           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1048           0 :       if (err)
    1049           0 :         goto parse_error;
    1050           0 :       if (class == CLASS_CONTEXT && tag == 0)
    1051             :         {
    1052           0 :           pp += objlen;
    1053           0 :           nn -= objlen;
    1054             : 
    1055           0 :           where = __LINE__;
    1056           0 :           err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1057             :                                   &ndef, &objlen, &hdrlen);
    1058             :         }
    1059             :       /* Parse the keyAttributes.  */
    1060           0 :       if (!err && (objlen > nn || class != CLASS_CONTEXT || tag != 1))
    1061           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1062           0 :       if (err)
    1063           0 :         goto parse_error;
    1064           0 :       nn = objlen;
    1065             : 
    1066           0 :       where = __LINE__;
    1067           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1068             :                               &ndef, &objlen, &hdrlen);
    1069           0 :       if (!err && objlen > nn)
    1070           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1071           0 :       if (err)
    1072           0 :         goto parse_error;
    1073           0 :       if (class == CLASS_UNIVERSAL && tag == TAG_SEQUENCE)
    1074             :         ; /* RSA */
    1075           0 :       else if (class == CLASS_CONTEXT)
    1076             :         {
    1077           0 :           switch (tag)
    1078             :             {
    1079           0 :             case 0: errstr = "EC key objects are not supported"; break;
    1080           0 :             case 1: errstr = "DH key objects are not supported"; break;
    1081           0 :             case 2: errstr = "DSA key objects are not supported"; break;
    1082           0 :             case 3: errstr = "KEA key objects are not supported"; break;
    1083           0 :             default: errstr = "unknown privateKeyObject"; break;
    1084             :             }
    1085           0 :           goto parse_error;
    1086             :         }
    1087             :       else
    1088             :         {
    1089           0 :           err = gpg_error (GPG_ERR_INV_OBJ);
    1090           0 :           goto parse_error;
    1091             :         }
    1092             : 
    1093           0 :       nn = objlen;
    1094             : 
    1095             :       /* Check that the reference is a Path object.  */
    1096           0 :       where = __LINE__;
    1097           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1098             :                               &ndef, &objlen, &hdrlen);
    1099           0 :       if (!err && objlen > nn)
    1100           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1101           0 :       if (err)
    1102           0 :         goto parse_error;
    1103           0 :       if (class != CLASS_UNIVERSAL || tag != TAG_SEQUENCE)
    1104             :         {
    1105           0 :           errstr = "unsupported reference type";
    1106           0 :           goto parse_error;
    1107             :         }
    1108           0 :       nn = objlen;
    1109             : 
    1110             :       /* Parse the Path object. */
    1111           0 :       where = __LINE__;
    1112           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1113             :                               &ndef, &objlen, &hdrlen);
    1114           0 :       if (!err && objlen > nn)
    1115           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1116           0 :       if (err)
    1117           0 :         goto parse_error;
    1118             : 
    1119             :       /* Make sure that the next element is a non zero path and of
    1120             :          even length (FID are two bytes each). */
    1121           0 :       if (class != CLASS_UNIVERSAL || tag != TAG_OCTET_STRING
    1122           0 :           ||  !objlen || (objlen & 1) )
    1123             :         {
    1124           0 :           errstr = "invalid path reference";
    1125           0 :           goto parse_error;
    1126             :         }
    1127             :       /* Create a new PrKDF list item. */
    1128           0 :       prkdf = xtrycalloc (1, (sizeof *prkdf
    1129             :                               - sizeof(unsigned short)
    1130             :                               + objlen/2 * sizeof(unsigned short)));
    1131           0 :       if (!prkdf)
    1132             :         {
    1133           0 :           err = gpg_error_from_syserror ();
    1134           0 :           goto leave;
    1135             :         }
    1136           0 :       prkdf->objidlen = objidlen;
    1137           0 :       prkdf->objid = xtrymalloc (objidlen);
    1138           0 :       if (!prkdf->objid)
    1139             :         {
    1140           0 :           err = gpg_error_from_syserror ();
    1141           0 :           xfree (prkdf);
    1142           0 :           goto leave;
    1143             :         }
    1144           0 :       memcpy (prkdf->objid, objid, objidlen);
    1145           0 :       if (authid)
    1146             :         {
    1147           0 :           prkdf->authidlen = authidlen;
    1148           0 :           prkdf->authid = xtrymalloc (authidlen);
    1149           0 :           if (!prkdf->authid)
    1150             :             {
    1151           0 :               err = gpg_error_from_syserror ();
    1152           0 :               xfree (prkdf->objid);
    1153           0 :               xfree (prkdf);
    1154           0 :               goto leave;
    1155             :             }
    1156           0 :           memcpy (prkdf->authid, authid, authidlen);
    1157             :         }
    1158             : 
    1159           0 :       prkdf->pathlen = objlen/2;
    1160           0 :       for (i=0; i < prkdf->pathlen; i++, pp += 2, nn -= 2)
    1161           0 :         prkdf->path[i] = ((pp[0] << 8) | pp[1]);
    1162             : 
    1163           0 :       prkdf->usageflags = usageflags;
    1164           0 :       prkdf->key_reference = key_reference;
    1165           0 :       prkdf->key_reference_valid = key_reference_valid;
    1166             : 
    1167           0 :       if (nn)
    1168             :         {
    1169             :           /* An index and length follows. */
    1170           0 :           prkdf->have_off = 1;
    1171           0 :           where = __LINE__;
    1172           0 :           err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1173             :                                   &ndef, &objlen, &hdrlen);
    1174           0 :           if (!err && (objlen > nn
    1175           0 :                        || class != CLASS_UNIVERSAL || tag != TAG_INTEGER))
    1176           0 :             err = gpg_error (GPG_ERR_INV_OBJ);
    1177           0 :           if (err)
    1178           0 :             goto parse_error;
    1179             : 
    1180           0 :           for (ul=0; objlen; objlen--)
    1181             :             {
    1182           0 :               ul <<= 8;
    1183           0 :               ul |= (*pp++) & 0xff;
    1184           0 :               nn--;
    1185             :             }
    1186           0 :           prkdf->off = ul;
    1187             : 
    1188           0 :           where = __LINE__;
    1189           0 :           err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1190             :                                   &ndef, &objlen, &hdrlen);
    1191           0 :           if (!err && (objlen > nn
    1192           0 :                        || class != CLASS_CONTEXT || tag != 0))
    1193           0 :             err = gpg_error (GPG_ERR_INV_OBJ);
    1194           0 :           if (err)
    1195           0 :             goto parse_error;
    1196             : 
    1197           0 :           for (ul=0; objlen; objlen--)
    1198             :             {
    1199           0 :               ul <<= 8;
    1200           0 :               ul |= (*pp++) & 0xff;
    1201           0 :               nn--;
    1202             :             }
    1203           0 :           prkdf->len = ul;
    1204             :         }
    1205             : 
    1206             : 
    1207           0 :       log_debug ("PrKDF %04hX: id=", fid);
    1208           0 :       for (i=0; i < prkdf->objidlen; i++)
    1209           0 :         log_printf ("%02X", prkdf->objid[i]);
    1210           0 :       log_printf (" path=");
    1211           0 :       for (i=0; i < prkdf->pathlen; i++)
    1212           0 :         log_printf ("%04hX", prkdf->path[i]);
    1213           0 :       if (prkdf->have_off)
    1214           0 :         log_printf ("[%lu/%lu]", prkdf->off, prkdf->len);
    1215           0 :       if (prkdf->authid)
    1216             :         {
    1217           0 :           log_printf (" authid=");
    1218           0 :           for (i=0; i < prkdf->authidlen; i++)
    1219           0 :             log_printf ("%02X", prkdf->authid[i]);
    1220             :         }
    1221           0 :       if (prkdf->key_reference_valid)
    1222           0 :         log_printf (" keyref=0x%02lX", prkdf->key_reference);
    1223           0 :       log_printf (" usage=");
    1224           0 :       s = "";
    1225           0 :       if (prkdf->usageflags.encrypt) log_printf ("%sencrypt", s), s = ",";
    1226           0 :       if (prkdf->usageflags.decrypt) log_printf ("%sdecrypt", s), s = ",";
    1227           0 :       if (prkdf->usageflags.sign   ) log_printf ("%ssign", s), s = ",";
    1228           0 :       if (prkdf->usageflags.sign_recover)
    1229           0 :         log_printf ("%ssign_recover", s), s = ",";
    1230           0 :       if (prkdf->usageflags.wrap   ) log_printf ("%swrap", s), s = ",";
    1231           0 :       if (prkdf->usageflags.unwrap ) log_printf ("%sunwrap", s), s = ",";
    1232           0 :       if (prkdf->usageflags.verify ) log_printf ("%sverify", s), s = ",";
    1233           0 :       if (prkdf->usageflags.verify_recover)
    1234           0 :         log_printf ("%sverify_recover", s), s = ",";
    1235           0 :       if (prkdf->usageflags.derive ) log_printf ("%sderive", s), s = ",";
    1236           0 :       if (prkdf->usageflags.non_repudiation)
    1237           0 :         log_printf ("%snon_repudiation", s), s = ",";
    1238           0 :       log_printf ("\n");
    1239             : 
    1240             :       /* Put it into the list. */
    1241           0 :       prkdf->next = prkdflist;
    1242           0 :       prkdflist = prkdf;
    1243           0 :       prkdf = NULL;
    1244           0 :       continue; /* Ready. */
    1245             : 
    1246             :     parse_error:
    1247           0 :       log_error ("error parsing PrKDF record (%d): %s - skipped\n",
    1248             :                  where, errstr? errstr : gpg_strerror (err));
    1249           0 :       if (prkdf)
    1250             :         {
    1251           0 :           xfree (prkdf->objid);
    1252           0 :           xfree (prkdf->authid);
    1253           0 :           xfree (prkdf);
    1254             :         }
    1255           0 :       err = 0;
    1256             :     } /* End looping over all records. */
    1257             : 
    1258             :  leave:
    1259           0 :   xfree (buffer);
    1260           0 :   if (err)
    1261           0 :     release_prkdflist (prkdflist);
    1262             :   else
    1263           0 :     *result = prkdflist;
    1264           0 :   return err;
    1265             : }
    1266             : 
    1267             : 
    1268             : /* Read and parse the Certificate Directory Files identified by FID.
    1269             :    On success a newlist of CDF object gets stored at RESULT and the
    1270             :    caller is then responsible of releasing this list.  On error a
    1271             :    error code is returned and RESULT won't get changed.  */
    1272             : static gpg_error_t
    1273           0 : read_ef_cdf (app_t app, unsigned short fid, cdf_object_t *result)
    1274             : {
    1275             :   gpg_error_t err;
    1276           0 :   unsigned char *buffer = NULL;
    1277             :   size_t buflen;
    1278             :   const unsigned char *p;
    1279             :   size_t n, objlen, hdrlen;
    1280             :   int class, tag, constructed, ndef;
    1281           0 :   cdf_object_t cdflist = NULL;
    1282             :   int i;
    1283             : 
    1284           0 :   if (!fid)
    1285           0 :     return gpg_error (GPG_ERR_NO_DATA); /* No certificates. */
    1286             : 
    1287           0 :   err = select_and_read_binary (app->slot, fid, "CDF", &buffer, &buflen);
    1288           0 :   if (err)
    1289           0 :     return err;
    1290             : 
    1291           0 :   p = buffer;
    1292           0 :   n = buflen;
    1293             : 
    1294             :   /* Loop over the records.  We stop as soon as we detect a new record
    1295             :      starting with 0x00 or 0xff as these values are commonly used to
    1296             :      pad data blocks and are no valid ASN.1 encoding. */
    1297           0 :   while (n && *p && *p != 0xff)
    1298             :     {
    1299             :       const unsigned char *pp;
    1300             :       size_t nn;
    1301             :       int where;
    1302           0 :       const char *errstr = NULL;
    1303           0 :       cdf_object_t cdf = NULL;
    1304             :       unsigned long ul;
    1305             :       const unsigned char *objid;
    1306             :       size_t objidlen;
    1307             : 
    1308           0 :       err = parse_ber_header (&p, &n, &class, &tag, &constructed,
    1309             :                               &ndef, &objlen, &hdrlen);
    1310           0 :       if (!err && (objlen > n || tag != TAG_SEQUENCE))
    1311           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1312           0 :       if (err)
    1313             :         {
    1314           0 :           log_error ("error parsing CDF record: %s\n", gpg_strerror (err));
    1315           0 :           goto leave;
    1316             :         }
    1317           0 :       pp = p;
    1318           0 :       nn = objlen;
    1319           0 :       p += objlen;
    1320           0 :       n -= objlen;
    1321             : 
    1322             :       /* Skip the commonObjectAttributes.  */
    1323           0 :       where = __LINE__;
    1324           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1325             :                               &ndef, &objlen, &hdrlen);
    1326           0 :       if (!err && (objlen > nn || tag != TAG_SEQUENCE))
    1327           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1328           0 :       if (err)
    1329           0 :         goto parse_error;
    1330           0 :       pp += objlen;
    1331           0 :       nn -= objlen;
    1332             : 
    1333             :       /* Parse the commonCertificateAttributes.  */
    1334           0 :       where = __LINE__;
    1335           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1336             :                               &ndef, &objlen, &hdrlen);
    1337           0 :       if (!err && (objlen > nn || tag != TAG_SEQUENCE))
    1338           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1339           0 :       if (err)
    1340           0 :         goto parse_error;
    1341             :       {
    1342           0 :         const unsigned char *ppp = pp;
    1343           0 :         size_t nnn = objlen;
    1344             : 
    1345           0 :         pp += objlen;
    1346           0 :         nn -= objlen;
    1347             : 
    1348             :         /* Get the Id. */
    1349           0 :         where = __LINE__;
    1350           0 :         err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
    1351             :                               &ndef, &objlen, &hdrlen);
    1352           0 :         if (!err && (objlen > nnn
    1353           0 :                      || class != CLASS_UNIVERSAL || tag != TAG_OCTET_STRING))
    1354           0 :           err = gpg_error (GPG_ERR_INV_OBJ);
    1355           0 :         if (err)
    1356           0 :           goto parse_error;
    1357           0 :         objid = ppp;
    1358           0 :         objidlen = objlen;
    1359             :       }
    1360             : 
    1361             :       /* Parse the certAttribute.  */
    1362           0 :       where = __LINE__;
    1363           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1364             :                               &ndef, &objlen, &hdrlen);
    1365           0 :       if (!err && (objlen > nn || class != CLASS_CONTEXT || tag != 1))
    1366           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1367           0 :       if (err)
    1368           0 :         goto parse_error;
    1369           0 :       nn = objlen;
    1370             : 
    1371           0 :       where = __LINE__;
    1372           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1373             :                               &ndef, &objlen, &hdrlen);
    1374           0 :       if (!err && (objlen > nn
    1375           0 :                    || class != CLASS_UNIVERSAL || tag != TAG_SEQUENCE))
    1376           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1377           0 :       if (err)
    1378           0 :         goto parse_error;
    1379           0 :       nn = objlen;
    1380             : 
    1381             :       /* Check that the reference is a Path object.  */
    1382           0 :       where = __LINE__;
    1383           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1384             :                               &ndef, &objlen, &hdrlen);
    1385           0 :       if (!err && objlen > nn)
    1386           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1387           0 :       if (err)
    1388           0 :         goto parse_error;
    1389           0 :       if (class != CLASS_UNIVERSAL || tag != TAG_SEQUENCE)
    1390             :         {
    1391           0 :           errstr = "unsupported reference type";
    1392           0 :           continue;
    1393             :         }
    1394           0 :       nn = objlen;
    1395             : 
    1396             :       /* Parse the Path object. */
    1397           0 :       where = __LINE__;
    1398           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1399             :                               &ndef, &objlen, &hdrlen);
    1400           0 :       if (!err && objlen > nn)
    1401           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1402           0 :       if (err)
    1403           0 :         goto parse_error;
    1404             : 
    1405             :       /* Make sure that the next element is a non zero path and of
    1406             :          even length (FID are two bytes each). */
    1407           0 :       if (class != CLASS_UNIVERSAL || tag != TAG_OCTET_STRING
    1408           0 :           ||  !objlen || (objlen & 1) )
    1409             :         {
    1410           0 :           errstr = "invalid path reference";
    1411           0 :           goto parse_error;
    1412             :         }
    1413             :       /* Create a new CDF list item. */
    1414           0 :       cdf = xtrycalloc (1, (sizeof *cdf
    1415             :                             - sizeof(unsigned short)
    1416             :                             + objlen/2 * sizeof(unsigned short)));
    1417           0 :       if (!cdf)
    1418             :         {
    1419           0 :           err = gpg_error_from_syserror ();
    1420           0 :           goto leave;
    1421             :         }
    1422           0 :       cdf->objidlen = objidlen;
    1423           0 :       cdf->objid = xtrymalloc (objidlen);
    1424           0 :       if (!cdf->objid)
    1425             :         {
    1426           0 :           err = gpg_error_from_syserror ();
    1427           0 :           xfree (cdf);
    1428           0 :           goto leave;
    1429             :         }
    1430           0 :       memcpy (cdf->objid, objid, objidlen);
    1431             : 
    1432           0 :       cdf->pathlen = objlen/2;
    1433           0 :       for (i=0; i < cdf->pathlen; i++, pp += 2, nn -= 2)
    1434           0 :         cdf->path[i] = ((pp[0] << 8) | pp[1]);
    1435             : 
    1436           0 :       if (nn)
    1437             :         {
    1438             :           /* An index and length follows. */
    1439           0 :           cdf->have_off = 1;
    1440           0 :           where = __LINE__;
    1441           0 :           err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1442             :                                   &ndef, &objlen, &hdrlen);
    1443           0 :           if (!err && (objlen > nn
    1444           0 :                        || class != CLASS_UNIVERSAL || tag != TAG_INTEGER))
    1445           0 :             err = gpg_error (GPG_ERR_INV_OBJ);
    1446           0 :           if (err)
    1447           0 :             goto parse_error;
    1448             : 
    1449           0 :           for (ul=0; objlen; objlen--)
    1450             :             {
    1451           0 :               ul <<= 8;
    1452           0 :               ul |= (*pp++) & 0xff;
    1453           0 :               nn--;
    1454             :             }
    1455           0 :           cdf->off = ul;
    1456             : 
    1457           0 :           where = __LINE__;
    1458           0 :           err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1459             :                                   &ndef, &objlen, &hdrlen);
    1460           0 :           if (!err && (objlen > nn
    1461           0 :                        || class != CLASS_CONTEXT || tag != 0))
    1462           0 :             err = gpg_error (GPG_ERR_INV_OBJ);
    1463           0 :           if (err)
    1464           0 :             goto parse_error;
    1465             : 
    1466           0 :           for (ul=0; objlen; objlen--)
    1467             :             {
    1468           0 :               ul <<= 8;
    1469           0 :               ul |= (*pp++) & 0xff;
    1470           0 :               nn--;
    1471             :             }
    1472           0 :           cdf->len = ul;
    1473             :         }
    1474             : 
    1475           0 :       log_debug ("CDF %04hX: id=", fid);
    1476           0 :       for (i=0; i < cdf->objidlen; i++)
    1477           0 :         log_printf ("%02X", cdf->objid[i]);
    1478           0 :       log_printf (" path=");
    1479           0 :       for (i=0; i < cdf->pathlen; i++)
    1480           0 :         log_printf ("%04hX", cdf->path[i]);
    1481           0 :       if (cdf->have_off)
    1482           0 :         log_printf ("[%lu/%lu]", cdf->off, cdf->len);
    1483           0 :       log_printf ("\n");
    1484             : 
    1485             :       /* Put it into the list. */
    1486           0 :       cdf->next = cdflist;
    1487           0 :       cdflist = cdf;
    1488           0 :       cdf = NULL;
    1489           0 :       continue; /* Ready. */
    1490             : 
    1491             :     parse_error:
    1492           0 :       log_error ("error parsing CDF record (%d): %s - skipped\n",
    1493             :                  where, errstr? errstr : gpg_strerror (err));
    1494           0 :       xfree (cdf);
    1495           0 :       err = 0;
    1496             :     } /* End looping over all records. */
    1497             : 
    1498             :  leave:
    1499           0 :   xfree (buffer);
    1500           0 :   if (err)
    1501           0 :     release_cdflist (cdflist);
    1502             :   else
    1503           0 :     *result = cdflist;
    1504           0 :   return err;
    1505             : }
    1506             : 
    1507             : 
    1508             : /*
    1509             : SEQUENCE {
    1510             :   SEQUENCE { -- CommonObjectAttributes
    1511             :     UTF8String 'specific PIN for DS'
    1512             :     BIT STRING 0 unused bits
    1513             :       '00000011'B
    1514             :     }
    1515             :   SEQUENCE { -- CommonAuthenticationObjectAttributes
    1516             :     OCTET STRING
    1517             :       07    -- iD
    1518             :     }
    1519             : 
    1520             :   [1] { -- typeAttributes
    1521             :     SEQUENCE { -- PinAttributes
    1522             :       BIT STRING 0 unused bits
    1523             :         '0000100000110010'B  -- local,initialized,needs-padding
    1524             :                              -- exchangeRefData
    1525             :       ENUMERATED 1           -- ascii-numeric
    1526             :       INTEGER 6              -- minLength
    1527             :       INTEGER 6              -- storedLength
    1528             :       INTEGER 8              -- maxLength
    1529             :       [0]
    1530             :         02                   -- pinReference
    1531             :       GeneralizedTime 19/04/2002 12:12 GMT  -- lastPinChange
    1532             :       SEQUENCE {
    1533             :         OCTET STRING
    1534             :           3F 00 40 16        -- path to DF of PIN
    1535             :         }
    1536             :       }
    1537             :     }
    1538             :   }
    1539             : 
    1540             : */
    1541             : /* Read and parse an Authentication Object Directory File identified
    1542             :    by FID.  On success a newlist of AODF objects gets stored at RESULT
    1543             :    and the caller is responsible of releasing this list.  On error a
    1544             :    error code is returned and RESULT won't get changed.  */
    1545             : static gpg_error_t
    1546           0 : read_ef_aodf (app_t app, unsigned short fid, aodf_object_t *result)
    1547             : {
    1548             :   gpg_error_t err;
    1549           0 :   unsigned char *buffer = NULL;
    1550             :   size_t buflen;
    1551             :   const unsigned char *p;
    1552             :   size_t n, objlen, hdrlen;
    1553             :   int class, tag, constructed, ndef;
    1554           0 :   aodf_object_t aodflist = NULL;
    1555             :   int i;
    1556             : 
    1557           0 :   if (!fid)
    1558           0 :     return gpg_error (GPG_ERR_NO_DATA); /* No authentication objects. */
    1559             : 
    1560           0 :   err = select_and_read_binary (app->slot, fid, "AODF", &buffer, &buflen);
    1561           0 :   if (err)
    1562           0 :     return err;
    1563             : 
    1564           0 :   p = buffer;
    1565           0 :   n = buflen;
    1566             : 
    1567             :   /* FIXME: This shares a LOT of code with read_ef_prkdf! */
    1568             : 
    1569             :   /* Loop over the records.  We stop as soon as we detect a new record
    1570             :      starting with 0x00 or 0xff as these values are commonly used to
    1571             :      pad data blocks and are no valid ASN.1 encoding. */
    1572           0 :   while (n && *p && *p != 0xff)
    1573             :     {
    1574             :       const unsigned char *pp;
    1575             :       size_t nn;
    1576             :       int where;
    1577           0 :       const char *errstr = NULL;
    1578           0 :       aodf_object_t aodf = NULL;
    1579             :       unsigned long ul;
    1580             :       const char *s;
    1581             : 
    1582           0 :       err = parse_ber_header (&p, &n, &class, &tag, &constructed,
    1583             :                               &ndef, &objlen, &hdrlen);
    1584           0 :       if (!err && (objlen > n || tag != TAG_SEQUENCE))
    1585           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1586           0 :       if (err)
    1587             :         {
    1588           0 :           log_error ("error parsing AODF record: %s\n", gpg_strerror (err));
    1589           0 :           goto leave;
    1590             :         }
    1591           0 :       pp = p;
    1592           0 :       nn = objlen;
    1593           0 :       p += objlen;
    1594           0 :       n -= objlen;
    1595             : 
    1596             :       /* Allocate memory for a new AODF list item. */
    1597           0 :       aodf = xtrycalloc (1, sizeof *aodf);
    1598           0 :       if (!aodf)
    1599           0 :         goto no_core;
    1600             : 
    1601             :       /* Parse the commonObjectAttributes.  */
    1602           0 :       where = __LINE__;
    1603           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1604             :                               &ndef, &objlen, &hdrlen);
    1605           0 :       if (!err && (objlen > nn || tag != TAG_SEQUENCE))
    1606           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1607           0 :       if (err)
    1608           0 :         goto parse_error;
    1609             :       {
    1610           0 :         const unsigned char *ppp = pp;
    1611           0 :         size_t nnn = objlen;
    1612             : 
    1613           0 :         pp += objlen;
    1614           0 :         nn -= objlen;
    1615             : 
    1616             :         /* Search the optional AuthId.  We need to skip the optional
    1617             :            Label (UTF8STRING) and the optional CommonObjectFlags
    1618             :            (BITSTRING). */
    1619           0 :         where = __LINE__;
    1620           0 :         err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
    1621             :                                 &ndef, &objlen, &hdrlen);
    1622           0 :         if (!err && (objlen > nnn || class != CLASS_UNIVERSAL))
    1623           0 :           err = gpg_error (GPG_ERR_INV_OBJ);
    1624           0 :         if (gpg_err_code (err) == GPG_ERR_EOF)
    1625           0 :           goto no_authid;
    1626           0 :         if (err)
    1627           0 :           goto parse_error;
    1628           0 :         if (tag == TAG_UTF8_STRING)
    1629             :           {
    1630           0 :             ppp += objlen; /* Skip the Label. */
    1631           0 :             nnn -= objlen;
    1632             : 
    1633           0 :             where = __LINE__;
    1634           0 :             err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
    1635             :                                     &ndef, &objlen, &hdrlen);
    1636           0 :             if (!err && (objlen > nnn || class != CLASS_UNIVERSAL))
    1637           0 :               err = gpg_error (GPG_ERR_INV_OBJ);
    1638           0 :             if (gpg_err_code (err) == GPG_ERR_EOF)
    1639           0 :               goto no_authid;
    1640           0 :             if (err)
    1641           0 :               goto parse_error;
    1642             :           }
    1643           0 :         if (tag == TAG_BIT_STRING)
    1644             :           {
    1645           0 :             ppp += objlen; /* Skip the CommonObjectFlags.  */
    1646           0 :             nnn -= objlen;
    1647             : 
    1648           0 :             where = __LINE__;
    1649           0 :             err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
    1650             :                                     &ndef, &objlen, &hdrlen);
    1651           0 :             if (!err && (objlen > nnn || class != CLASS_UNIVERSAL))
    1652           0 :               err = gpg_error (GPG_ERR_INV_OBJ);
    1653           0 :             if (gpg_err_code (err) == GPG_ERR_EOF)
    1654           0 :               goto no_authid;
    1655           0 :             if (err)
    1656           0 :               goto parse_error;
    1657             :           }
    1658           0 :         if (tag == TAG_OCTET_STRING && objlen)
    1659             :           {
    1660           0 :             aodf->authidlen = objlen;
    1661           0 :             aodf->authid = xtrymalloc (objlen);
    1662           0 :             if (!aodf->authid)
    1663           0 :               goto no_core;
    1664           0 :             memcpy (aodf->authid, ppp, objlen);
    1665             :           }
    1666             :       no_authid:
    1667             :         ;
    1668             :       }
    1669             : 
    1670             :       /* Parse the CommonAuthenticationObjectAttributes.  */
    1671           0 :       where = __LINE__;
    1672           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1673             :                               &ndef, &objlen, &hdrlen);
    1674           0 :       if (!err && (objlen > nn || tag != TAG_SEQUENCE))
    1675           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1676           0 :       if (err)
    1677           0 :         goto parse_error;
    1678             :       {
    1679           0 :         const unsigned char *ppp = pp;
    1680           0 :         size_t nnn = objlen;
    1681             : 
    1682           0 :         pp += objlen;
    1683           0 :         nn -= objlen;
    1684             : 
    1685             :         /* Get the Id. */
    1686           0 :         where = __LINE__;
    1687           0 :         err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
    1688             :                               &ndef, &objlen, &hdrlen);
    1689           0 :         if (!err && (objlen > nnn
    1690           0 :                      || class != CLASS_UNIVERSAL || tag != TAG_OCTET_STRING))
    1691           0 :           err = gpg_error (GPG_ERR_INV_OBJ);
    1692           0 :         if (err)
    1693           0 :           goto parse_error;
    1694             : 
    1695           0 :         aodf->objidlen = objlen;
    1696           0 :         aodf->objid = xtrymalloc (objlen);
    1697           0 :         if (!aodf->objid)
    1698           0 :           goto no_core;
    1699           0 :         memcpy (aodf->objid, ppp, objlen);
    1700             :       }
    1701             : 
    1702             :       /* Parse the typeAttributes.  */
    1703           0 :       where = __LINE__;
    1704           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1705             :                               &ndef, &objlen, &hdrlen);
    1706           0 :       if (!err && (objlen > nn || class != CLASS_CONTEXT || tag != 1))
    1707           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1708           0 :       if (err)
    1709           0 :         goto parse_error;
    1710           0 :       nn = objlen;
    1711             : 
    1712           0 :       where = __LINE__;
    1713           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1714             :                               &ndef, &objlen, &hdrlen);
    1715           0 :       if (!err && objlen > nn)
    1716           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1717           0 :       if (err)
    1718           0 :         goto parse_error;
    1719           0 :       if (class == CLASS_UNIVERSAL && tag == TAG_SEQUENCE)
    1720             :         ; /* PinAttributes */
    1721           0 :       else if (class == CLASS_CONTEXT)
    1722             :         {
    1723           0 :           switch (tag)
    1724             :             {
    1725           0 :             case 0: errstr = "biometric auth types are not supported"; break;
    1726           0 :             case 1: errstr = "authKey auth types are not supported"; break;
    1727           0 :             case 2: errstr = "external auth type are not supported"; break;
    1728           0 :             default: errstr = "unknown privateKeyObject"; break;
    1729             :             }
    1730           0 :           goto parse_error;
    1731             :         }
    1732             :       else
    1733             :         {
    1734           0 :           err = gpg_error (GPG_ERR_INV_OBJ);
    1735           0 :           goto parse_error;
    1736             :         }
    1737             : 
    1738           0 :       nn = objlen;
    1739             : 
    1740             :       /* PinFlags */
    1741           0 :       where = __LINE__;
    1742           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1743             :                               &ndef, &objlen, &hdrlen);
    1744           0 :       if (!err && (objlen > nn || !objlen
    1745           0 :                    || class != CLASS_UNIVERSAL || tag != TAG_BIT_STRING))
    1746           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1747           0 :       if (err)
    1748           0 :         goto parse_error;
    1749             : 
    1750             :       {
    1751             :         unsigned int bits, mask;
    1752             :         int unused, full;
    1753             : 
    1754           0 :         unused = *pp++; nn--; objlen--;
    1755           0 :         if ((!objlen && unused) || unused/8 > objlen)
    1756             :           {
    1757           0 :             err = gpg_error (GPG_ERR_ENCODING_PROBLEM);
    1758           0 :             goto parse_error;
    1759             :           }
    1760           0 :         full = objlen - (unused+7)/8;
    1761           0 :         unused %= 8;
    1762           0 :         mask = 0;
    1763           0 :         for (i=1; unused; i <<= 1, unused--)
    1764           0 :           mask |= i;
    1765             : 
    1766             :         /* The first octet */
    1767           0 :         bits = 0;
    1768           0 :         if (objlen)
    1769             :           {
    1770           0 :             bits = *pp++; nn--; objlen--;
    1771           0 :             if (full)
    1772           0 :               full--;
    1773             :             else
    1774             :               {
    1775           0 :                 bits &= ~mask;
    1776           0 :                 mask = 0;
    1777             :               }
    1778             :           }
    1779           0 :         if ((bits & 0x80)) /* ASN.1 bit 0. */
    1780           0 :           aodf->pinflags.case_sensitive = 1;
    1781           0 :         if ((bits & 0x40)) /* ASN.1 bit 1. */
    1782           0 :           aodf->pinflags.local = 1;
    1783           0 :         if ((bits & 0x20))
    1784           0 :           aodf->pinflags.change_disabled = 1;
    1785           0 :         if ((bits & 0x10))
    1786           0 :           aodf->pinflags.unblock_disabled = 1;
    1787           0 :         if ((bits & 0x08))
    1788           0 :           aodf->pinflags.initialized = 1;
    1789           0 :         if ((bits & 0x04))
    1790           0 :           aodf->pinflags.needs_padding = 1;
    1791           0 :         if ((bits & 0x02))
    1792           0 :           aodf->pinflags.unblocking_pin = 1;
    1793           0 :         if ((bits & 0x01))
    1794           0 :           aodf->pinflags.so_pin = 1;
    1795             :         /* The second octet. */
    1796           0 :         bits = 0;
    1797           0 :         if (objlen)
    1798             :           {
    1799           0 :             bits = *pp++; nn--; objlen--;
    1800           0 :             if (full)
    1801           0 :               full--;
    1802             :             else
    1803             :               {
    1804           0 :                 bits &= ~mask;
    1805           0 :                 mask = 0;
    1806             :               }
    1807             :           }
    1808           0 :         if ((bits & 0x80))
    1809           0 :           aodf->pinflags.disable_allowed = 1;
    1810           0 :         if ((bits & 0x40))
    1811           0 :           aodf->pinflags.integrity_protected = 1;
    1812           0 :         if ((bits & 0x20))
    1813           0 :           aodf->pinflags.confidentiality_protected = 1;
    1814           0 :         if ((bits & 0x10))
    1815           0 :           aodf->pinflags.exchange_ref_data = 1;
    1816             :         /* Skip remaining bits. */
    1817           0 :         pp += objlen;
    1818           0 :         nn -= objlen;
    1819             :       }
    1820             : 
    1821             : 
    1822             :       /* PinType */
    1823           0 :       where = __LINE__;
    1824           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1825             :                               &ndef, &objlen, &hdrlen);
    1826           0 :       if (!err && (objlen > nn
    1827           0 :                    || class != CLASS_UNIVERSAL || tag != TAG_ENUMERATED))
    1828           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1829           0 :       if (!err && (objlen > sizeof (pin_type_t) || objlen > sizeof (ul)))
    1830           0 :         err = gpg_error (GPG_ERR_UNSUPPORTED_ENCODING);
    1831           0 :       if (err)
    1832           0 :         goto parse_error;
    1833             : 
    1834           0 :       for (ul=0; objlen; objlen--)
    1835             :         {
    1836           0 :           ul <<= 8;
    1837           0 :           ul |= (*pp++) & 0xff;
    1838           0 :           nn--;
    1839             :         }
    1840           0 :       aodf->pintype = ul;
    1841             : 
    1842             : 
    1843             :       /* minLength */
    1844           0 :       where = __LINE__;
    1845           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1846             :                               &ndef, &objlen, &hdrlen);
    1847           0 :       if (!err && (objlen > nn
    1848           0 :                    || class != CLASS_UNIVERSAL || tag != TAG_INTEGER))
    1849           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1850           0 :       if (!err && objlen > sizeof (ul))
    1851           0 :         err = gpg_error (GPG_ERR_UNSUPPORTED_ENCODING);
    1852           0 :       if (err)
    1853           0 :         goto parse_error;
    1854           0 :       for (ul=0; objlen; objlen--)
    1855             :         {
    1856           0 :           ul <<= 8;
    1857           0 :           ul |= (*pp++) & 0xff;
    1858           0 :           nn--;
    1859             :         }
    1860           0 :       aodf->min_length = ul;
    1861             : 
    1862             : 
    1863             :       /* storedLength */
    1864           0 :       where = __LINE__;
    1865           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1866             :                               &ndef, &objlen, &hdrlen);
    1867           0 :       if (!err && (objlen > nn
    1868           0 :                    || class != CLASS_UNIVERSAL || tag != TAG_INTEGER))
    1869           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1870           0 :       if (!err && objlen > sizeof (ul))
    1871           0 :         err = gpg_error (GPG_ERR_UNSUPPORTED_ENCODING);
    1872           0 :       if (err)
    1873           0 :         goto parse_error;
    1874           0 :       for (ul=0; objlen; objlen--)
    1875             :         {
    1876           0 :           ul <<= 8;
    1877           0 :           ul |= (*pp++) & 0xff;
    1878           0 :           nn--;
    1879             :         }
    1880           0 :       aodf->stored_length = ul;
    1881             : 
    1882             :       /* optional maxLength */
    1883           0 :       where = __LINE__;
    1884           0 :       err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1885             :                               &ndef, &objlen, &hdrlen);
    1886           0 :       if (gpg_err_code (err) == GPG_ERR_EOF)
    1887           0 :         goto ready;
    1888           0 :       if (!err && objlen > nn)
    1889           0 :         err = gpg_error (GPG_ERR_INV_OBJ);
    1890           0 :       if (err)
    1891           0 :         goto parse_error;
    1892           0 :       if (class == CLASS_UNIVERSAL && tag == TAG_INTEGER)
    1893             :         {
    1894           0 :           if (objlen > sizeof (ul))
    1895             :             {
    1896           0 :               err = gpg_error (GPG_ERR_UNSUPPORTED_ENCODING);
    1897           0 :               goto parse_error;
    1898             :             }
    1899           0 :           for (ul=0; objlen; objlen--)
    1900             :             {
    1901           0 :               ul <<= 8;
    1902           0 :               ul |= (*pp++) & 0xff;
    1903           0 :               nn--;
    1904             :             }
    1905           0 :           aodf->max_length = ul;
    1906           0 :           aodf->max_length_valid = 1;
    1907             : 
    1908           0 :           where = __LINE__;
    1909           0 :           err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1910             :                                   &ndef, &objlen, &hdrlen);
    1911           0 :           if (gpg_err_code (err) == GPG_ERR_EOF)
    1912           0 :             goto ready;
    1913           0 :           if (!err && objlen > nn)
    1914           0 :             err = gpg_error (GPG_ERR_INV_OBJ);
    1915           0 :           if (err)
    1916           0 :             goto parse_error;
    1917             :         }
    1918             : 
    1919             :       /* Optional pinReference. */
    1920           0 :       if (class == CLASS_CONTEXT && tag == 0)
    1921             :         {
    1922           0 :           if (objlen > sizeof (ul))
    1923             :             {
    1924           0 :               err = gpg_error (GPG_ERR_UNSUPPORTED_ENCODING);
    1925           0 :               goto parse_error;
    1926             :             }
    1927           0 :           for (ul=0; objlen; objlen--)
    1928             :             {
    1929           0 :               ul <<= 8;
    1930           0 :               ul |= (*pp++) & 0xff;
    1931           0 :               nn--;
    1932             :             }
    1933           0 :           aodf->pin_reference = ul;
    1934           0 :           aodf->pin_reference_valid = 1;
    1935             : 
    1936           0 :           where = __LINE__;
    1937           0 :           err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1938             :                                   &ndef, &objlen, &hdrlen);
    1939           0 :           if (gpg_err_code (err) == GPG_ERR_EOF)
    1940           0 :             goto ready;
    1941           0 :           if (!err && objlen > nn)
    1942           0 :             err = gpg_error (GPG_ERR_INV_OBJ);
    1943           0 :           if (err)
    1944           0 :             goto parse_error;
    1945             :         }
    1946             : 
    1947             :       /* Optional padChar. */
    1948           0 :       if (class == CLASS_UNIVERSAL && tag == TAG_OCTET_STRING)
    1949             :         {
    1950           0 :           if (objlen != 1)
    1951             :             {
    1952           0 :               errstr = "padChar is not of size(1)";
    1953           0 :               goto parse_error;
    1954             :             }
    1955           0 :           aodf->pad_char = *pp++; nn--;
    1956           0 :           aodf->pad_char_valid = 1;
    1957             : 
    1958           0 :           where = __LINE__;
    1959           0 :           err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1960             :                                   &ndef, &objlen, &hdrlen);
    1961           0 :           if (gpg_err_code (err) == GPG_ERR_EOF)
    1962           0 :             goto ready;
    1963           0 :           if (!err && objlen > nn)
    1964           0 :             err = gpg_error (GPG_ERR_INV_OBJ);
    1965           0 :           if (err)
    1966           0 :             goto parse_error;
    1967             :         }
    1968             : 
    1969             :       /* Skip optional lastPinChange. */
    1970           0 :       if (class == CLASS_UNIVERSAL && tag == TAG_GENERALIZED_TIME)
    1971             :         {
    1972           0 :           pp += objlen;
    1973           0 :           nn -= objlen;
    1974             : 
    1975           0 :           where = __LINE__;
    1976           0 :           err = parse_ber_header (&pp, &nn, &class, &tag, &constructed,
    1977             :                                   &ndef, &objlen, &hdrlen);
    1978           0 :           if (gpg_err_code (err) == GPG_ERR_EOF)
    1979           0 :             goto ready;
    1980           0 :           if (!err && objlen > nn)
    1981           0 :             err = gpg_error (GPG_ERR_INV_OBJ);
    1982           0 :           if (err)
    1983           0 :             goto parse_error;
    1984             :         }
    1985             : 
    1986             :       /* Optional Path object.  */
    1987           0 :       if (class == CLASS_UNIVERSAL || tag == TAG_SEQUENCE)
    1988             :         {
    1989           0 :           const unsigned char *ppp = pp;
    1990           0 :           size_t nnn = objlen;
    1991             : 
    1992           0 :           pp += objlen;
    1993           0 :           nn -= objlen;
    1994             : 
    1995           0 :           where = __LINE__;
    1996           0 :           err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
    1997             :                                   &ndef, &objlen, &hdrlen);
    1998           0 :           if (!err && objlen > nnn)
    1999           0 :             err = gpg_error (GPG_ERR_INV_OBJ);
    2000           0 :           if (err)
    2001           0 :             goto parse_error;
    2002             : 
    2003             :           /* Make sure that the next element is a non zero FID and of
    2004             :              even length (FID are two bytes each). */
    2005           0 :           if (class != CLASS_UNIVERSAL || tag != TAG_OCTET_STRING
    2006           0 :               ||  !objlen || (objlen & 1) )
    2007             :             {
    2008           0 :               errstr = "invalid path reference";
    2009           0 :               goto parse_error;
    2010             :             }
    2011             : 
    2012           0 :           aodf->pathlen = objlen/2;
    2013           0 :           aodf->path = xtrymalloc (aodf->pathlen);
    2014           0 :           if (!aodf->path)
    2015           0 :             goto no_core;
    2016           0 :           for (i=0; i < aodf->pathlen; i++, ppp += 2, nnn -= 2)
    2017           0 :             aodf->path[i] = ((ppp[0] << 8) | ppp[1]);
    2018             : 
    2019           0 :           if (nnn)
    2020             :             {
    2021             :               /* An index and length follows. */
    2022           0 :               aodf->have_off = 1;
    2023           0 :               where = __LINE__;
    2024           0 :               err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
    2025             :                                       &ndef, &objlen, &hdrlen);
    2026           0 :               if (!err && (objlen > nnn
    2027           0 :                        || class != CLASS_UNIVERSAL || tag != TAG_INTEGER))
    2028           0 :                 err = gpg_error (GPG_ERR_INV_OBJ);
    2029           0 :               if (err)
    2030           0 :                 goto parse_error;
    2031             : 
    2032           0 :               for (ul=0; objlen; objlen--)
    2033             :                 {
    2034           0 :                   ul <<= 8;
    2035           0 :                   ul |= (*ppp++) & 0xff;
    2036           0 :                   nnn--;
    2037             :                 }
    2038           0 :               aodf->off = ul;
    2039             : 
    2040           0 :               where = __LINE__;
    2041           0 :               err = parse_ber_header (&ppp, &nnn, &class, &tag, &constructed,
    2042             :                                       &ndef, &objlen, &hdrlen);
    2043           0 :               if (!err && (objlen > nnn
    2044           0 :                            || class != CLASS_CONTEXT || tag != 0))
    2045           0 :                 err = gpg_error (GPG_ERR_INV_OBJ);
    2046           0 :               if (err)
    2047           0 :                 goto parse_error;
    2048             : 
    2049           0 :               for (ul=0; objlen; objlen--)
    2050             :                 {
    2051           0 :                   ul <<= 8;
    2052           0 :                   ul |= (*ppp++) & 0xff;
    2053           0 :                   nnn--;
    2054             :                 }
    2055           0 :               aodf->len = ul;
    2056             :             }
    2057             :         }
    2058             : 
    2059             :       /* Igonore further objects which might be there due to future
    2060             :          extensions of pkcs#15. */
    2061             : 
    2062             :     ready:
    2063           0 :       log_debug ("AODF %04hX: id=", fid);
    2064           0 :       for (i=0; i < aodf->objidlen; i++)
    2065           0 :         log_printf ("%02X", aodf->objid[i]);
    2066           0 :       if (aodf->authid)
    2067             :         {
    2068           0 :           log_printf (" authid=");
    2069           0 :           for (i=0; i < aodf->authidlen; i++)
    2070           0 :             log_printf ("%02X", aodf->authid[i]);
    2071             :         }
    2072           0 :       log_printf (" flags=");
    2073           0 :       s = "";
    2074           0 :       if (aodf->pinflags.case_sensitive)
    2075           0 :         log_printf ("%scase_sensitive", s), s = ",";
    2076           0 :       if (aodf->pinflags.local)
    2077           0 :         log_printf ("%slocal", s), s = ",";
    2078           0 :       if (aodf->pinflags.change_disabled)
    2079           0 :         log_printf ("%schange_disabled", s), s = ",";
    2080           0 :       if (aodf->pinflags.unblock_disabled)
    2081           0 :         log_printf ("%sunblock_disabled", s), s = ",";
    2082           0 :       if (aodf->pinflags.initialized)
    2083           0 :         log_printf ("%sinitialized", s), s = ",";
    2084           0 :       if (aodf->pinflags.needs_padding)
    2085           0 :         log_printf ("%sneeds_padding", s), s = ",";
    2086           0 :       if (aodf->pinflags.unblocking_pin)
    2087           0 :         log_printf ("%sunblocking_pin", s), s = ",";
    2088           0 :       if (aodf->pinflags.so_pin)
    2089           0 :         log_printf ("%sso_pin", s), s = ",";
    2090           0 :       if (aodf->pinflags.disable_allowed)
    2091           0 :         log_printf ("%sdisable_allowed", s), s = ",";
    2092           0 :       if (aodf->pinflags.integrity_protected)
    2093           0 :         log_printf ("%sintegrity_protected", s), s = ",";
    2094           0 :       if (aodf->pinflags.confidentiality_protected)
    2095           0 :         log_printf ("%sconfidentiality_protected", s), s = ",";
    2096           0 :       if (aodf->pinflags.exchange_ref_data)
    2097           0 :         log_printf ("%sexchange_ref_data", s), s = ",";
    2098             :       {
    2099             :         char numbuf[50];
    2100           0 :         switch (aodf->pintype)
    2101             :           {
    2102           0 :           case PIN_TYPE_BCD: s = "bcd"; break;
    2103           0 :           case PIN_TYPE_ASCII_NUMERIC: s = "ascii-numeric"; break;
    2104           0 :           case PIN_TYPE_UTF8: s = "utf8"; break;
    2105           0 :           case PIN_TYPE_HALF_NIBBLE_BCD: s = "half-nibble-bcd"; break;
    2106           0 :           case PIN_TYPE_ISO9564_1: s = "iso9564-1"; break;
    2107             :           default:
    2108           0 :             sprintf (numbuf, "%lu", (unsigned long)aodf->pintype);
    2109           0 :             s = numbuf;
    2110             :           }
    2111           0 :         log_printf (" type=%s", s);
    2112             :       }
    2113           0 :       log_printf (" min=%lu", aodf->min_length);
    2114           0 :       log_printf (" stored=%lu", aodf->stored_length);
    2115           0 :       if (aodf->max_length_valid)
    2116           0 :         log_printf (" max=%lu", aodf->max_length);
    2117           0 :       if (aodf->pad_char_valid)
    2118           0 :         log_printf (" pad=0x%02x", aodf->pad_char);
    2119           0 :       if (aodf->pin_reference_valid)
    2120           0 :         log_printf (" pinref=0x%02lX", aodf->pin_reference);
    2121           0 :       if (aodf->pathlen)
    2122             :         {
    2123           0 :           log_printf (" path=");
    2124           0 :           for (i=0; i < aodf->pathlen; i++)
    2125           0 :             log_printf ("%04hX", aodf->path[i]);
    2126           0 :           if (aodf->have_off)
    2127           0 :             log_printf ("[%lu/%lu]", aodf->off, aodf->len);
    2128             :         }
    2129           0 :       log_printf ("\n");
    2130             : 
    2131             :       /* Put it into the list. */
    2132           0 :       aodf->next = aodflist;
    2133           0 :       aodflist = aodf;
    2134           0 :       aodf = NULL;
    2135           0 :       continue; /* Ready. */
    2136             : 
    2137             :     no_core:
    2138           0 :       err = gpg_error_from_syserror ();
    2139           0 :       release_aodf_object (aodf);
    2140           0 :       goto leave;
    2141             : 
    2142             :     parse_error:
    2143           0 :       log_error ("error parsing AODF record (%d): %s - skipped\n",
    2144             :                  where, errstr? errstr : gpg_strerror (err));
    2145           0 :       err = 0;
    2146           0 :       release_aodf_object (aodf);
    2147             :     } /* End looping over all records. */
    2148             : 
    2149             :  leave:
    2150           0 :   xfree (buffer);
    2151           0 :   if (err)
    2152           0 :     release_aodflist (aodflist);
    2153             :   else
    2154           0 :     *result = aodflist;
    2155           0 :   return err;
    2156             : }
    2157             : 
    2158             : 
    2159             : 
    2160             : 
    2161             : 
    2162             : /* Read and parse the EF(TokenInfo).
    2163             : 
    2164             : TokenInfo ::= SEQUENCE {
    2165             :     version             INTEGER {v1(0)} (v1,...),
    2166             :     serialNumber        OCTET STRING,
    2167             :     manufacturerID      Label OPTIONAL,
    2168             :     label               [0] Label OPTIONAL,
    2169             :     tokenflags          TokenFlags,
    2170             :     seInfo              SEQUENCE OF SecurityEnvironmentInfo OPTIONAL,
    2171             :     recordInfo          [1] RecordInfo OPTIONAL,
    2172             :     supportedAlgorithms [2] SEQUENCE OF AlgorithmInfo OPTIONAL,
    2173             :     ...,
    2174             :     issuerId            [3] Label OPTIONAL,
    2175             :     holderId            [4] Label OPTIONAL,
    2176             :     lastUpdate          [5] LastUpdate OPTIONAL,
    2177             :     preferredLanguage   PrintableString OPTIONAL -- In accordance with
    2178             :     -- IETF RFC 1766
    2179             : } (CONSTRAINED BY { -- Each AlgorithmInfo.reference value must be unique --})
    2180             : 
    2181             : TokenFlags ::= BIT STRING {
    2182             :     readOnly            (0),
    2183             :     loginRequired       (1),
    2184             :     prnGeneration       (2),
    2185             :     eidCompliant        (3)
    2186             : }
    2187             : 
    2188             : 
    2189             :  5032:
    2190             : 
    2191             : 30 31 02 01 00 04 04 05 45  36 9F 0C 0C 44 2D 54   01......E6...D-T
    2192             : 72 75 73 74 20 47 6D 62 48  80 14 4F 66 66 69 63   rust GmbH..Offic
    2193             : 65 20 69 64 65 6E 74 69 74  79 20 63 61 72 64 03   e identity card.
    2194             : 02 00 40 20 63 61 72 64 03  02 00 40 00 00 00 00   ..@ card...@....
    2195             : 00 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00   ................
    2196             : 
    2197             :    0   49: SEQUENCE {
    2198             :    2    1:   INTEGER 0
    2199             :    5    4:   OCTET STRING 05 45 36 9F
    2200             :   11   12:   UTF8String 'D-Trust GmbH'
    2201             :   25   20:   [0] 'Office identity card'
    2202             :   47    2:   BIT STRING
    2203             :          :     '00000010'B (bit 1)
    2204             :          :     Error: Spurious zero bits in bitstring.
    2205             :          :   }
    2206             : 
    2207             : 
    2208             : 
    2209             : 
    2210             :  */
    2211             : static gpg_error_t
    2212           0 : read_ef_tokeninfo (app_t app)
    2213             : {
    2214             :   gpg_error_t err;
    2215           0 :   unsigned char *buffer = NULL;
    2216             :   size_t buflen;
    2217             :   const unsigned char *p;
    2218             :   size_t n, objlen, hdrlen;
    2219             :   int class, tag, constructed, ndef;
    2220             :   unsigned long ul;
    2221             : 
    2222           0 :   err = select_and_read_binary (app->slot, 0x5032, "TokenInfo",
    2223             :                                 &buffer, &buflen);
    2224           0 :   if (err)
    2225           0 :     return err;
    2226             : 
    2227           0 :   p = buffer;
    2228           0 :   n = buflen;
    2229             : 
    2230           0 :   err = parse_ber_header (&p, &n, &class, &tag, &constructed,
    2231             :                           &ndef, &objlen, &hdrlen);
    2232           0 :   if (!err && (objlen > n || tag != TAG_SEQUENCE))
    2233           0 :     err = gpg_error (GPG_ERR_INV_OBJ);
    2234           0 :   if (err)
    2235             :     {
    2236           0 :       log_error ("error parsing TokenInfo: %s\n", gpg_strerror (err));
    2237           0 :       goto leave;
    2238             :     }
    2239             : 
    2240           0 :   n = objlen;
    2241             : 
    2242             :   /* Version.  */
    2243           0 :   err = parse_ber_header (&p, &n, &class, &tag, &constructed,
    2244             :                           &ndef, &objlen, &hdrlen);
    2245           0 :   if (!err && (objlen > n || tag != TAG_INTEGER))
    2246           0 :     err = gpg_error (GPG_ERR_INV_OBJ);
    2247           0 :   if (err)
    2248           0 :     goto leave;
    2249             : 
    2250           0 :   for (ul=0; objlen; objlen--)
    2251             :     {
    2252           0 :       ul <<= 8;
    2253           0 :       ul |= (*p++) & 0xff;
    2254           0 :       n--;
    2255             :     }
    2256           0 :   if (ul)
    2257             :     {
    2258           0 :       log_error ("invalid version %lu in TokenInfo\n", ul);
    2259           0 :       err = gpg_error (GPG_ERR_INV_OBJ);
    2260           0 :       goto leave;
    2261             :     }
    2262             : 
    2263             :   /* serialNumber.  */
    2264           0 :   err = parse_ber_header (&p, &n, &class, &tag, &constructed,
    2265             :                           &ndef, &objlen, &hdrlen);
    2266           0 :   if (!err && (objlen > n || tag != TAG_OCTET_STRING || !objlen))
    2267           0 :     err = gpg_error (GPG_ERR_INV_OBJ);
    2268           0 :   if (err)
    2269           0 :     goto leave;
    2270             : 
    2271           0 :   xfree (app->app_local->serialno);
    2272           0 :   app->app_local->serialno = xtrymalloc (objlen);
    2273           0 :   if (!app->app_local->serialno)
    2274             :     {
    2275           0 :       err = gpg_error_from_syserror ();
    2276           0 :       goto leave;
    2277             :     }
    2278           0 :   memcpy (app->app_local->serialno, p, objlen);
    2279           0 :   app->app_local->serialnolen = objlen;
    2280           0 :   log_printhex ("Serialnumber from EF(TokenInfo) is:", p, objlen);
    2281             : 
    2282             :  leave:
    2283           0 :   xfree (buffer);
    2284           0 :   return err;
    2285             : }
    2286             : 
    2287             : 
    2288             : /* Get all the basic information from the pkcs#15 card, check the
    2289             :    structure and initialize our local context.  This is used once at
    2290             :    application initialization. */
    2291             : static gpg_error_t
    2292           0 : read_p15_info (app_t app)
    2293             : {
    2294             :   gpg_error_t err;
    2295             : 
    2296           0 :   if (!read_ef_tokeninfo (app))
    2297             :     {
    2298             :       /* If we don't have a serial number yet but the TokenInfo provides
    2299             :          one, use that. */
    2300           0 :       if (!app->serialno && app->app_local->serialno)
    2301             :         {
    2302           0 :           app->serialno = app->app_local->serialno;
    2303           0 :           app->serialnolen = app->app_local->serialnolen;
    2304           0 :           app->app_local->serialno = NULL;
    2305           0 :           app->app_local->serialnolen = 0;
    2306           0 :           err = app_munge_serialno (app);
    2307           0 :           if (err)
    2308           0 :             return err;
    2309             :         }
    2310             :     }
    2311             : 
    2312             :   /* Read the ODF so that we know the location of all directory
    2313             :      files. */
    2314             :   /* Fixme: We might need to get a non-standard ODF FID from TokenInfo. */
    2315           0 :   err = read_ef_odf (app, 0x5031);
    2316           0 :   if (err)
    2317           0 :     return err;
    2318             : 
    2319             :   /* Read certificate information. */
    2320           0 :   assert (!app->app_local->certificate_info);
    2321           0 :   assert (!app->app_local->trusted_certificate_info);
    2322           0 :   assert (!app->app_local->useful_certificate_info);
    2323           0 :   err = read_ef_cdf (app, app->app_local->odf.certificates,
    2324           0 :                      &app->app_local->certificate_info);
    2325           0 :   if (!err || gpg_err_code (err) == GPG_ERR_NO_DATA)
    2326           0 :     err = read_ef_cdf (app, app->app_local->odf.trusted_certificates,
    2327           0 :                        &app->app_local->trusted_certificate_info);
    2328           0 :   if (!err || gpg_err_code (err) == GPG_ERR_NO_DATA)
    2329           0 :     err = read_ef_cdf (app, app->app_local->odf.useful_certificates,
    2330           0 :                        &app->app_local->useful_certificate_info);
    2331           0 :   if (gpg_err_code (err) == GPG_ERR_NO_DATA)
    2332           0 :     err = 0;
    2333           0 :   if (err)
    2334           0 :     return err;
    2335             : 
    2336             :   /* Read information about private keys. */
    2337           0 :   assert (!app->app_local->private_key_info);
    2338           0 :   err = read_ef_prkdf (app, app->app_local->odf.private_keys,
    2339           0 :                        &app->app_local->private_key_info);
    2340           0 :   if (gpg_err_code (err) == GPG_ERR_NO_DATA)
    2341           0 :     err = 0;
    2342           0 :   if (err)
    2343           0 :     return err;
    2344             : 
    2345             :   /* Read information about authentication objects. */
    2346           0 :   assert (!app->app_local->auth_object_info);
    2347           0 :   err = read_ef_aodf (app, app->app_local->odf.auth_objects,
    2348           0 :                       &app->app_local->auth_object_info);
    2349           0 :   if (gpg_err_code (err) == GPG_ERR_NO_DATA)
    2350           0 :     err = 0;
    2351             : 
    2352             : 
    2353           0 :   return err;
    2354             : }
    2355             : 
    2356             : 
    2357             : /* Helper to do_learn_status: Send information about all certificates
    2358             :    listed in CERTINFO back.  Use CERTTYPE as type of the
    2359             :    certificate. */
    2360             : static gpg_error_t
    2361           0 : send_certinfo (app_t app, ctrl_t ctrl, const char *certtype,
    2362             :                cdf_object_t certinfo)
    2363             : {
    2364           0 :   for (; certinfo; certinfo = certinfo->next)
    2365             :     {
    2366             :       char *buf, *p;
    2367             : 
    2368           0 :       buf = xtrymalloc (9 + certinfo->objidlen*2 + 1);
    2369           0 :       if (!buf)
    2370           0 :         return gpg_error_from_syserror ();
    2371           0 :       p = stpcpy (buf, "P15");
    2372           0 :       if (app->app_local->home_df)
    2373             :         {
    2374           0 :           snprintf (p, 6, "-%04X",
    2375           0 :                     (unsigned int)(app->app_local->home_df & 0xffff));
    2376           0 :           p += 5;
    2377             :         }
    2378           0 :       p = stpcpy (p, ".");
    2379           0 :       bin2hex (certinfo->objid, certinfo->objidlen, p);
    2380             : 
    2381           0 :       send_status_info (ctrl, "CERTINFO",
    2382             :                         certtype, strlen (certtype),
    2383             :                         buf, strlen (buf),
    2384             :                         NULL, (size_t)0);
    2385           0 :       xfree (buf);
    2386             :     }
    2387           0 :   return 0;
    2388             : }
    2389             : 
    2390             : 
    2391             : /* Get the keygrip of the private key object PRKDF.  On success the
    2392             :    keygrip gets returned in the caller provided 41 byte buffer
    2393             :    R_GRIPSTR. */
    2394             : static gpg_error_t
    2395           0 : keygripstr_from_prkdf (app_t app, prkdf_object_t prkdf, char *r_gripstr)
    2396             : {
    2397             :   gpg_error_t err;
    2398             :   cdf_object_t cdf;
    2399             :   unsigned char *der;
    2400             :   size_t derlen;
    2401             :   ksba_cert_t cert;
    2402             : 
    2403             :   /* FIXME: We should check whether a public key directory file and a
    2404             :      matching public key for PRKDF is available.  This should make
    2405             :      extraction of the key much easier.  My current test card doesn't
    2406             :      have one, so we can only use the fallback solution bu looking for
    2407             :      a matching certificate and extract the key from there. */
    2408             : 
    2409             :   /* Look for a matching certificate. A certificate matches if the Id
    2410             :      matches the one of the private key info. */
    2411           0 :   for (cdf = app->app_local->certificate_info; cdf; cdf = cdf->next)
    2412           0 :     if (cdf->objidlen == prkdf->objidlen
    2413           0 :         && !memcmp (cdf->objid, prkdf->objid, prkdf->objidlen))
    2414           0 :       break;
    2415           0 :   if (!cdf)
    2416           0 :     for (cdf = app->app_local->trusted_certificate_info; cdf; cdf = cdf->next)
    2417           0 :       if (cdf->objidlen == prkdf->objidlen
    2418           0 :           && !memcmp (cdf->objid, prkdf->objid, prkdf->objidlen))
    2419           0 :         break;
    2420           0 :   if (!cdf)
    2421           0 :     for (cdf = app->app_local->useful_certificate_info; cdf; cdf = cdf->next)
    2422           0 :       if (cdf->objidlen == prkdf->objidlen
    2423           0 :           && !memcmp (cdf->objid, prkdf->objid, prkdf->objidlen))
    2424           0 :         break;
    2425           0 :   if (!cdf)
    2426           0 :     return gpg_error (GPG_ERR_NOT_FOUND);
    2427             : 
    2428           0 :   err = readcert_by_cdf (app, cdf, &der, &derlen);
    2429           0 :   if (err)
    2430           0 :     return err;
    2431             : 
    2432           0 :   err = ksba_cert_new (&cert);
    2433           0 :   if (!err)
    2434           0 :     err = ksba_cert_init_from_mem (cert, der, derlen);
    2435           0 :   xfree (der);
    2436           0 :   if (!err)
    2437           0 :     err = app_help_get_keygrip_string (cert, r_gripstr);
    2438           0 :   ksba_cert_release (cert);
    2439             : 
    2440           0 :   return err;
    2441             : }
    2442             : 
    2443             : 
    2444             : 
    2445             : 
    2446             : /* Helper to do_learn_status: Send information about all known
    2447             :    keypairs back.  FIXME: much code duplication from
    2448             :    send_certinfo(). */
    2449             : static gpg_error_t
    2450           0 : send_keypairinfo (app_t app, ctrl_t ctrl, prkdf_object_t keyinfo)
    2451             : {
    2452             :   gpg_error_t err;
    2453             : 
    2454           0 :   for (; keyinfo; keyinfo = keyinfo->next)
    2455             :     {
    2456             :       char gripstr[40+1];
    2457             :       char *buf, *p;
    2458             :       int j;
    2459             : 
    2460           0 :       buf = xtrymalloc (9 + keyinfo->objidlen*2 + 1);
    2461           0 :       if (!buf)
    2462           0 :         return gpg_error_from_syserror ();
    2463           0 :       p = stpcpy (buf, "P15");
    2464           0 :       if (app->app_local->home_df)
    2465             :         {
    2466           0 :           snprintf (p, 6, "-%04hX",
    2467           0 :                     (unsigned int)(app->app_local->home_df & 0xffff));
    2468           0 :           p += 5;
    2469             :         }
    2470           0 :       p = stpcpy (p, ".");
    2471           0 :       bin2hex (keyinfo->objid, keyinfo->objidlen, p);
    2472             : 
    2473           0 :       err = keygripstr_from_prkdf (app, keyinfo, gripstr);
    2474           0 :       if (err)
    2475             :         {
    2476           0 :           log_error ("can't get keygrip from ");
    2477           0 :           for (j=0; j < keyinfo->pathlen; j++)
    2478           0 :             log_printf ("%04hX", keyinfo->path[j]);
    2479           0 :           log_printf (": %s\n", gpg_strerror (err));
    2480             :         }
    2481             :       else
    2482             :         {
    2483           0 :           assert (strlen (gripstr) == 40);
    2484           0 :           send_status_info (ctrl, "KEYPAIRINFO",
    2485             :                             gripstr, 40,
    2486             :                             buf, strlen (buf),
    2487             :                             NULL, (size_t)0);
    2488             :         }
    2489           0 :       xfree (buf);
    2490             :     }
    2491           0 :   return 0;
    2492             : }
    2493             : 
    2494             : 
    2495             : 
    2496             : /* This is the handler for the LEARN command.  */
    2497             : static gpg_error_t
    2498           0 : do_learn_status (app_t app, ctrl_t ctrl, unsigned int flags)
    2499             : {
    2500             :   gpg_error_t err;
    2501             : 
    2502           0 :   if ((flags & 1))
    2503           0 :     err = 0;
    2504             :   else
    2505             :     {
    2506           0 :       err = send_certinfo (app, ctrl, "100", app->app_local->certificate_info);
    2507           0 :       if (!err)
    2508           0 :         err = send_certinfo (app, ctrl, "101",
    2509           0 :                              app->app_local->trusted_certificate_info);
    2510           0 :       if (!err)
    2511           0 :         err = send_certinfo (app, ctrl, "102",
    2512           0 :                              app->app_local->useful_certificate_info);
    2513             :     }
    2514             : 
    2515           0 :   if (!err)
    2516           0 :     err = send_keypairinfo (app, ctrl, app->app_local->private_key_info);
    2517             : 
    2518           0 :   return err;
    2519             : }
    2520             : 
    2521             : 
    2522             : /* Read a certifciate using the information in CDF and return the
    2523             :    certificate in a newly llocated buffer R_CERT and its length
    2524             :    R_CERTLEN. */
    2525             : static gpg_error_t
    2526           0 : readcert_by_cdf (app_t app, cdf_object_t cdf,
    2527             :                  unsigned char **r_cert, size_t *r_certlen)
    2528             : {
    2529             :   gpg_error_t err;
    2530           0 :   unsigned char *buffer = NULL;
    2531             :   const unsigned char *p, *save_p;
    2532             :   size_t buflen, n;
    2533             :   int class, tag, constructed, ndef;
    2534             :   size_t totobjlen, objlen, hdrlen;
    2535             :   int rootca;
    2536             :   int i;
    2537             : 
    2538           0 :   *r_cert = NULL;
    2539           0 :   *r_certlen = 0;
    2540             : 
    2541             :   /* First check whether it has been cached. */
    2542           0 :   if (cdf->image)
    2543             :     {
    2544           0 :       *r_cert = xtrymalloc (cdf->imagelen);
    2545           0 :       if (!*r_cert)
    2546           0 :         return gpg_error_from_syserror ();
    2547           0 :       memcpy (*r_cert, cdf->image, cdf->imagelen);
    2548           0 :       *r_certlen = cdf->imagelen;
    2549           0 :       return 0;
    2550             :     }
    2551             : 
    2552             :   /* Read the entire file.  fixme: This could be optimized by first
    2553             :      reading the header to figure out how long the certificate
    2554             :      actually is. */
    2555           0 :   err = select_ef_by_path (app, cdf->path, cdf->pathlen);
    2556           0 :   if (err)
    2557           0 :     goto leave;
    2558             : 
    2559           0 :   err = iso7816_read_binary (app->slot, cdf->off, cdf->len, &buffer, &buflen);
    2560           0 :   if (!err && (!buflen || *buffer == 0xff))
    2561           0 :     err = gpg_error (GPG_ERR_NOT_FOUND);
    2562           0 :   if (err)
    2563             :     {
    2564           0 :       log_error ("error reading certificate with Id ");
    2565           0 :       for (i=0; i < cdf->objidlen; i++)
    2566           0 :         log_printf ("%02X", cdf->objid[i]);
    2567           0 :       log_printf (": %s\n", gpg_strerror (err));
    2568           0 :       goto leave;
    2569             :     }
    2570             : 
    2571             :   /* Check whether this is really a certificate.  */
    2572           0 :   p = buffer;
    2573           0 :   n = buflen;
    2574           0 :   err = parse_ber_header (&p, &n, &class, &tag, &constructed,
    2575             :                           &ndef, &objlen, &hdrlen);
    2576           0 :   if (err)
    2577           0 :     goto leave;
    2578             : 
    2579           0 :   if (class == CLASS_UNIVERSAL && tag == TAG_SEQUENCE && constructed)
    2580           0 :     rootca = 0;
    2581           0 :   else if ( class == CLASS_UNIVERSAL && tag == TAG_SET && constructed )
    2582           0 :     rootca = 1;
    2583             :   else
    2584             :     {
    2585           0 :       err = gpg_error (GPG_ERR_INV_OBJ);
    2586           0 :       goto leave;
    2587             :     }
    2588           0 :   totobjlen = objlen + hdrlen;
    2589           0 :   assert (totobjlen <= buflen);
    2590             : 
    2591           0 :   err = parse_ber_header (&p, &n, &class, &tag, &constructed,
    2592             :                           &ndef, &objlen, &hdrlen);
    2593           0 :   if (err)
    2594           0 :     goto leave;
    2595             : 
    2596           0 :   if (!rootca
    2597           0 :       && class == CLASS_UNIVERSAL && tag == TAG_OBJECT_ID && !constructed)
    2598             :     {
    2599             :       /* The certificate seems to be contained in a userCertificate
    2600             :          container.  Skip this and assume the following sequence is
    2601             :          the certificate. */
    2602           0 :       if (n < objlen)
    2603             :         {
    2604           0 :           err = gpg_error (GPG_ERR_INV_OBJ);
    2605           0 :           goto leave;
    2606             :         }
    2607           0 :       p += objlen;
    2608           0 :       n -= objlen;
    2609           0 :       save_p = p;
    2610           0 :       err = parse_ber_header (&p, &n, &class, &tag, &constructed,
    2611             :                               &ndef, &objlen, &hdrlen);
    2612           0 :       if (err)
    2613           0 :         goto leave;
    2614           0 :       if ( !(class == CLASS_UNIVERSAL && tag == TAG_SEQUENCE && constructed) )
    2615             :         {
    2616           0 :           err = gpg_error (GPG_ERR_INV_OBJ);
    2617           0 :           goto leave;
    2618             :         }
    2619           0 :       totobjlen = objlen + hdrlen;
    2620           0 :       assert (save_p + totobjlen <= buffer + buflen);
    2621           0 :       memmove (buffer, save_p, totobjlen);
    2622             :     }
    2623             : 
    2624           0 :   *r_cert = buffer;
    2625           0 :   buffer = NULL;
    2626           0 :   *r_certlen = totobjlen;
    2627             : 
    2628             :   /* Try to cache it. */
    2629           0 :   if (!cdf->image && (cdf->image = xtrymalloc (*r_certlen)))
    2630             :     {
    2631           0 :       memcpy (cdf->image, *r_cert, *r_certlen);
    2632           0 :       cdf->imagelen = *r_certlen;
    2633             :     }
    2634             : 
    2635             : 
    2636             :  leave:
    2637           0 :   xfree (buffer);
    2638           0 :   return err;
    2639             : }
    2640             : 
    2641             : 
    2642             : /* Handler for the READCERT command.
    2643             : 
    2644             :    Read the certificate with id CERTID (as returned by learn_status in
    2645             :    the CERTINFO status lines) and return it in the freshly allocated
    2646             :    buffer to be stored at R_CERT and its length at R_CERTLEN.  A error
    2647             :    code will be returned on failure and R_CERT and R_CERTLEN will be
    2648             :    set to (NULL,0). */
    2649             : static gpg_error_t
    2650           0 : do_readcert (app_t app, const char *certid,
    2651             :              unsigned char **r_cert, size_t *r_certlen)
    2652             : {
    2653             :   gpg_error_t err;
    2654             :   cdf_object_t cdf;
    2655             : 
    2656           0 :   *r_cert = NULL;
    2657           0 :   *r_certlen = 0;
    2658           0 :   err = cdf_object_from_certid (app, certid, &cdf);
    2659           0 :   if (!err)
    2660           0 :     err = readcert_by_cdf (app, cdf, r_cert, r_certlen);
    2661           0 :   return err;
    2662             : }
    2663             : 
    2664             : 
    2665             : 
    2666             : /* Implement the GETATTR command.  This is similar to the LEARN
    2667             :    command but returns just one value via the status interface. */
    2668             : static gpg_error_t
    2669           0 : do_getattr (app_t app, ctrl_t ctrl, const char *name)
    2670             : {
    2671             :   gpg_error_t err;
    2672             : 
    2673           0 :   if (!strcmp (name, "$AUTHKEYID"))
    2674             :     {
    2675             :       char *buf, *p;
    2676             :       prkdf_object_t prkdf;
    2677             : 
    2678             :       /* We return the ID of the first private keycapable of
    2679             :          signing. */
    2680           0 :       for (prkdf = app->app_local->private_key_info; prkdf;
    2681           0 :            prkdf = prkdf->next)
    2682           0 :         if (prkdf->usageflags.sign)
    2683           0 :           break;
    2684           0 :       if (prkdf)
    2685             :         {
    2686           0 :           buf = xtrymalloc (9 + prkdf->objidlen*2 + 1);
    2687           0 :           if (!buf)
    2688           0 :             return gpg_error_from_syserror ();
    2689           0 :           p = stpcpy (buf, "P15");
    2690           0 :           if (app->app_local->home_df)
    2691             :             {
    2692           0 :               snprintf (p, 6, "-%04hX",
    2693           0 :                         (unsigned int)(app->app_local->home_df & 0xffff));
    2694           0 :               p += 5;
    2695             :             }
    2696           0 :           p = stpcpy (p, ".");
    2697           0 :           bin2hex (prkdf->objid, prkdf->objidlen, p);
    2698             : 
    2699           0 :           send_status_info (ctrl, name, buf, strlen (buf), NULL, 0);
    2700           0 :           xfree (buf);
    2701           0 :           return 0;
    2702             :         }
    2703             :     }
    2704           0 :   else if (!strcmp (name, "$DISPSERIALNO"))
    2705             :     {
    2706             :       /* For certain cards we return special IDs.  There is no
    2707             :          general rule for it so we need to decide case by case. */
    2708           0 :       if (app->app_local->card_type == CARD_TYPE_BELPIC)
    2709             :         {
    2710             :           /* The eID card has a card number printed on the front matter
    2711             :              which seems to be a good indication. */
    2712             :           unsigned char *buffer;
    2713             :           const unsigned char *p;
    2714             :           size_t buflen, n;
    2715           0 :           unsigned short path[] = { 0x3F00, 0xDF01, 0x4031 };
    2716             : 
    2717           0 :           err = select_ef_by_path (app, path, DIM(path) );
    2718           0 :           if (!err)
    2719           0 :             err = iso7816_read_binary (app->slot, 0, 0, &buffer, &buflen);
    2720           0 :           if (err)
    2721             :             {
    2722           0 :               log_error ("error accessing EF(ID): %s\n", gpg_strerror (err));
    2723           0 :               return err;
    2724             :             }
    2725             : 
    2726           0 :           p = find_tlv (buffer, buflen, 1, &n);
    2727           0 :           if (p && n == 12)
    2728             :             {
    2729             :               char tmp[12+2+1];
    2730           0 :               memcpy (tmp, p, 3);
    2731           0 :               tmp[3] = '-';
    2732           0 :               memcpy (tmp+4, p+3, 7);
    2733           0 :               tmp[11] = '-';
    2734           0 :               memcpy (tmp+12, p+10, 2);
    2735           0 :               tmp[14] = 0;
    2736           0 :               send_status_info (ctrl, name, tmp, strlen (tmp), NULL, 0);
    2737           0 :               xfree (buffer);
    2738           0 :               return 0;
    2739             :             }
    2740           0 :           xfree (buffer);
    2741             :         }
    2742             : 
    2743             :     }
    2744           0 :   return gpg_error (GPG_ERR_INV_NAME);
    2745             : }
    2746             : 
    2747             : 
    2748             : 
    2749             : 
    2750             : /* Micardo cards require special treatment. This is a helper for the
    2751             :    crypto functions to manage the security environment.  We expect that
    2752             :    the key file has already been selected. FID is the one of the
    2753             :    selected key. */
    2754             : static gpg_error_t
    2755           0 : micardo_mse (app_t app, unsigned short fid)
    2756             : {
    2757             :   gpg_error_t err;
    2758             :   int recno;
    2759           0 :   unsigned short refdata = 0;
    2760             :   int se_num;
    2761             :   unsigned char msebuf[10];
    2762             : 
    2763             :   /* Read the KeyD file containing extra information on keys. */
    2764           0 :   err = iso7816_select_file (app->slot, 0x0013, 0, NULL, NULL);
    2765           0 :   if (err)
    2766             :     {
    2767           0 :       log_error ("error reading EF_keyD: %s\n", gpg_strerror (err));
    2768           0 :       return err;
    2769             :     }
    2770             : 
    2771           0 :   for (recno = 1, se_num = -1; ; recno++)
    2772             :     {
    2773             :       unsigned char *buffer;
    2774             :       size_t buflen;
    2775             :       size_t n, nn;
    2776             :       const unsigned char *p, *pp;
    2777             : 
    2778           0 :       err = iso7816_read_record (app->slot, recno, 1, 0, &buffer, &buflen);
    2779           0 :       if (gpg_err_code (err) == GPG_ERR_NOT_FOUND)
    2780           0 :         break; /* ready */
    2781           0 :       if (err)
    2782             :         {
    2783           0 :           log_error ("error reading EF_keyD record: %s\n",
    2784             :                      gpg_strerror (err));
    2785           0 :           return err;
    2786             :         }
    2787           0 :       log_printhex ("keyD record:", buffer, buflen);
    2788           0 :       p = find_tlv (buffer, buflen, 0x83, &n);
    2789           0 :       if (p && n == 4 && ((p[2]<<8)|p[3]) == fid)
    2790             :         {
    2791           0 :           refdata = ((p[0]<<8)|p[1]);
    2792             :           /* Locate the SE DO and the there included sec env number. */
    2793           0 :           p = find_tlv (buffer, buflen, 0x7b, &n);
    2794           0 :           if (p && n)
    2795             :             {
    2796           0 :               pp = find_tlv (p, n, 0x80, &nn);
    2797           0 :               if (pp && nn == 1)
    2798             :                 {
    2799           0 :                   se_num = *pp;
    2800           0 :                   xfree (buffer);
    2801           0 :                   break; /* found. */
    2802             :                 }
    2803             :             }
    2804             :         }
    2805           0 :       xfree (buffer);
    2806           0 :     }
    2807           0 :   if (se_num == -1)
    2808             :     {
    2809           0 :       log_error ("CRT for keyfile %04hX not found\n", fid);
    2810           0 :       return gpg_error (GPG_ERR_NOT_FOUND);
    2811             :     }
    2812             : 
    2813             : 
    2814             :   /* Restore the security environment to SE_NUM if needed */
    2815           0 :   if (se_num)
    2816             :     {
    2817           0 :       err = iso7816_manage_security_env (app->slot, 0xf3, se_num, NULL, 0);
    2818           0 :       if (err)
    2819             :         {
    2820           0 :           log_error ("restoring SE to %d failed: %s\n",
    2821             :                      se_num, gpg_strerror (err));
    2822           0 :           return err;
    2823             :         }
    2824             :     }
    2825             : 
    2826             :   /* Set the DST reference data. */
    2827           0 :   msebuf[0] = 0x83;
    2828           0 :   msebuf[1] = 0x03;
    2829           0 :   msebuf[2] = 0x80;
    2830           0 :   msebuf[3] = (refdata >> 8);
    2831           0 :   msebuf[4] = refdata;
    2832           0 :   err = iso7816_manage_security_env (app->slot, 0x41, 0xb6, msebuf, 5);
    2833           0 :   if (err)
    2834             :     {
    2835           0 :       log_error ("setting SE to reference file %04hX failed: %s\n",
    2836             :                  refdata, gpg_strerror (err));
    2837           0 :       return err;
    2838             :     }
    2839           0 :   return 0;
    2840             : }
    2841             : 
    2842             : 
    2843             : 
    2844             : /* Handler for the PKSIGN command.
    2845             : 
    2846             :    Create the signature and return the allocated result in OUTDATA.
    2847             :    If a PIN is required, the PINCB will be used to ask for the PIN;
    2848             :    that callback should return the PIN in an allocated buffer and
    2849             :    store that as the 3rd argument.  */
    2850             : static gpg_error_t
    2851           0 : do_sign (app_t app, const char *keyidstr, int hashalgo,
    2852             :          gpg_error_t (*pincb)(void*, const char *, char **),
    2853             :          void *pincb_arg,
    2854             :          const void *indata, size_t indatalen,
    2855             :          unsigned char **outdata, size_t *outdatalen )
    2856             : {
    2857             :   static unsigned char sha1_prefix[15] = /* Object ID is 1.3.14.3.2.26 */
    2858             :     { 0x30, 0x21, 0x30, 0x09, 0x06, 0x05, 0x2b, 0x0e, 0x03,
    2859             :       0x02, 0x1a, 0x05, 0x00, 0x04, 0x14 };
    2860             :   static unsigned char rmd160_prefix[15] = /* Object ID is 1.3.36.3.2.1 */
    2861             :     { 0x30, 0x21, 0x30, 0x09, 0x06, 0x05, 0x2b, 0x24, 0x03,
    2862             :       0x02, 0x01, 0x05, 0x00, 0x04, 0x14 };
    2863             : 
    2864             :   gpg_error_t err;
    2865             :   int i;
    2866             :   unsigned char data[36];   /* Must be large enough for a SHA-1 digest
    2867             :                                + the largest OID prefix above and also
    2868             :                                fit the 36 bytes of md5sha1.  */
    2869             :   prkdf_object_t prkdf;    /* The private key object. */
    2870             :   aodf_object_t aodf;      /* The associated authentication object. */
    2871           0 :   int no_data_padding = 0; /* True if the card want the data without padding.*/
    2872           0 :   int mse_done = 0;        /* Set to true if the MSE has been done. */
    2873             : 
    2874           0 :   if (!keyidstr || !*keyidstr)
    2875           0 :     return gpg_error (GPG_ERR_INV_VALUE);
    2876           0 :   if (indatalen != 20 && indatalen != 16 && indatalen != 35 && indatalen != 36)
    2877           0 :     return gpg_error (GPG_ERR_INV_VALUE);
    2878             : 
    2879           0 :   err = prkdf_object_from_keyidstr (app, keyidstr, &prkdf);
    2880           0 :   if (err)
    2881           0 :     return err;
    2882           0 :   if (!(prkdf->usageflags.sign || prkdf->usageflags.sign_recover
    2883           0 :         ||prkdf->usageflags.non_repudiation))
    2884             :     {
    2885           0 :       log_error ("key %s may not be used for signing\n", keyidstr);
    2886           0 :       return gpg_error (GPG_ERR_WRONG_KEY_USAGE);
    2887             :     }
    2888             : 
    2889           0 :   if (!prkdf->authid)
    2890             :     {
    2891           0 :       log_error ("no authentication object defined for %s\n", keyidstr);
    2892             :       /* fixme: we might want to go ahead and do without PIN
    2893             :          verification. */
    2894           0 :       return gpg_error (GPG_ERR_UNSUPPORTED_OPERATION);
    2895             :     }
    2896             : 
    2897             :   /* Find the authentication object to this private key object. */
    2898           0 :   for (aodf = app->app_local->auth_object_info; aodf; aodf = aodf->next)
    2899           0 :     if (aodf->objidlen == prkdf->authidlen
    2900           0 :         && !memcmp (aodf->objid, prkdf->authid, prkdf->authidlen))
    2901           0 :       break;
    2902           0 :   if (!aodf)
    2903             :     {
    2904           0 :       log_error ("authentication object for %s missing\n", keyidstr);
    2905           0 :       return gpg_error (GPG_ERR_INV_CARD);
    2906             :     }
    2907           0 :   if (aodf->authid)
    2908             :     {
    2909           0 :       log_error ("PIN verification is protected by an "
    2910             :                  "additional authentication token\n");
    2911           0 :       return gpg_error (GPG_ERR_BAD_PIN_METHOD);
    2912             :     }
    2913           0 :   if (aodf->pinflags.integrity_protected
    2914           0 :       || aodf->pinflags.confidentiality_protected)
    2915             :     {
    2916           0 :       log_error ("PIN verification requires unsupported protection method\n");
    2917           0 :       return gpg_error (GPG_ERR_BAD_PIN_METHOD);
    2918             :     }
    2919           0 :   if (!aodf->stored_length && aodf->pinflags.needs_padding)
    2920             :     {
    2921           0 :       log_error ("PIN verification requires padding but no length known\n");
    2922           0 :       return gpg_error (GPG_ERR_INV_CARD);
    2923             :     }
    2924             : 
    2925             :   /* Select the key file.  Note that this may change the security
    2926             :      environment thus we do it before PIN verification. */
    2927           0 :   err = select_ef_by_path (app, prkdf->path, prkdf->pathlen);
    2928           0 :   if (err)
    2929             :     {
    2930           0 :       log_error ("error selecting file for key %s: %s\n",
    2931           0 :                  keyidstr, gpg_strerror (errno));
    2932           0 :       return err;
    2933             :     }
    2934             : 
    2935             : 
    2936             :   /* Due to the fact that the non-repudiation signature on a BELPIC
    2937             :      card requires a verify immediately before the DSO we set the
    2938             :      MSE before we do the verification.  Other cards might also allow
    2939             :      this but I don't want to break anything, thus we do it only
    2940             :      for the BELPIC card here. */
    2941           0 :   if (app->app_local->card_type == CARD_TYPE_BELPIC)
    2942             :     {
    2943             :       unsigned char mse[5];
    2944             : 
    2945           0 :       mse[0] = 4;    /* Length of the template. */
    2946           0 :       mse[1] = 0x80; /* Algorithm reference tag. */
    2947           0 :       if (hashalgo == MD_USER_TLS_MD5SHA1)
    2948           0 :         mse[2] = 0x01; /* Let card do pkcs#1 0xFF padding. */
    2949             :       else
    2950           0 :         mse[2] = 0x02; /* RSASSA-PKCS1-v1.5 using SHA1. */
    2951           0 :       mse[3] = 0x84; /* Private key reference tag. */
    2952           0 :       mse[4] = prkdf->key_reference_valid? prkdf->key_reference : 0x82;
    2953             : 
    2954           0 :       err = iso7816_manage_security_env (app->slot,
    2955             :                                          0x41, 0xB6,
    2956             :                                          mse, sizeof mse);
    2957           0 :       no_data_padding = 1;
    2958           0 :       mse_done = 1;
    2959             :     }
    2960           0 :   if (err)
    2961             :     {
    2962           0 :       log_error ("MSE failed: %s\n", gpg_strerror (err));
    2963           0 :       return err;
    2964             :     }
    2965             : 
    2966             : 
    2967             :   /* Now that we have all the information available, prepare and run
    2968             :      the PIN verification.*/
    2969             :   if (1)
    2970             :     {
    2971             :       char *pinvalue;
    2972             :       size_t pinvaluelen;
    2973             :       const char *errstr;
    2974             :       const char *s;
    2975             : 
    2976           0 :       if (prkdf->usageflags.non_repudiation
    2977           0 :           && app->app_local->card_type == CARD_TYPE_BELPIC)
    2978           0 :         err = pincb (pincb_arg, "PIN (qualified signature!)", &pinvalue);
    2979             :       else
    2980           0 :         err = pincb (pincb_arg, "PIN", &pinvalue);
    2981           0 :       if (err)
    2982             :         {
    2983           0 :           log_info ("PIN callback returned error: %s\n", gpg_strerror (err));
    2984           0 :           return err;
    2985             :         }
    2986             : 
    2987             :       /* We might need to cope with UTF8 things here.  Not sure how
    2988             :          min_length etc. are exactly defined, for now we take them as
    2989             :          a plain octet count. */
    2990             : 
    2991           0 :       if (strlen (pinvalue) < aodf->min_length)
    2992             :         {
    2993           0 :           log_error ("PIN is too short; minimum length is %lu\n",
    2994             :                      aodf->min_length);
    2995           0 :           err = gpg_error (GPG_ERR_BAD_PIN);
    2996             :         }
    2997           0 :       else if (aodf->stored_length && strlen (pinvalue) > aodf->stored_length)
    2998             :         {
    2999             :           /* This would otherwise truncate the PIN silently. */
    3000           0 :           log_error ("PIN is too large; maximum length is %lu\n",
    3001             :                      aodf->stored_length);
    3002           0 :           err = gpg_error (GPG_ERR_BAD_PIN);
    3003             :         }
    3004           0 :       else if (aodf->max_length_valid && strlen (pinvalue) > aodf->max_length)
    3005             :         {
    3006           0 :           log_error ("PIN is too large; maximum length is %lu\n",
    3007             :                      aodf->max_length);
    3008           0 :           err = gpg_error (GPG_ERR_BAD_PIN);
    3009             :         }
    3010             : 
    3011           0 :       if (err)
    3012             :         {
    3013           0 :           xfree (pinvalue);
    3014           0 :           return err;
    3015             :         }
    3016             : 
    3017           0 :       errstr = NULL;
    3018           0 :       err = 0;
    3019           0 :       switch (aodf->pintype)
    3020             :         {
    3021             :         case PIN_TYPE_BCD:
    3022             :         case PIN_TYPE_ASCII_NUMERIC:
    3023           0 :           for (s=pinvalue; digitp (s); s++)
    3024             :             ;
    3025           0 :           if (*s)
    3026             :             {
    3027           0 :               errstr = "Non-numeric digits found in PIN";
    3028           0 :               err = gpg_error (GPG_ERR_BAD_PIN);
    3029             :             }
    3030           0 :           break;
    3031             :         case PIN_TYPE_UTF8:
    3032           0 :           break;
    3033             :         case PIN_TYPE_HALF_NIBBLE_BCD:
    3034           0 :           errstr = "PIN type Half-Nibble-BCD is not supported";
    3035           0 :           break;
    3036             :         case PIN_TYPE_ISO9564_1:
    3037           0 :           errstr = "PIN type ISO9564-1 is not supported";
    3038           0 :           break;
    3039             :         default:
    3040           0 :           errstr = "Unknown PIN type";
    3041           0 :           break;
    3042             :         }
    3043           0 :       if (errstr)
    3044             :         {
    3045           0 :           log_error ("can't verify PIN: %s\n", errstr);
    3046           0 :           xfree (pinvalue);
    3047           0 :           return err? err : gpg_error (GPG_ERR_BAD_PIN_METHOD);
    3048             :         }
    3049             : 
    3050             : 
    3051           0 :       if (aodf->pintype == PIN_TYPE_BCD )
    3052             :         {
    3053             :           char *paddedpin;
    3054             :           int ndigits;
    3055             : 
    3056           0 :           for (ndigits=0, s=pinvalue; *s; ndigits++, s++)
    3057             :             ;
    3058           0 :           paddedpin = xtrymalloc (aodf->stored_length+1);
    3059           0 :           if (!paddedpin)
    3060             :             {
    3061           0 :               err = gpg_error_from_syserror ();
    3062           0 :               xfree (pinvalue);
    3063           0 :               return err;
    3064             :             }
    3065             : 
    3066           0 :           i = 0;
    3067           0 :           paddedpin[i++] = 0x20 | (ndigits & 0x0f);
    3068           0 :           for (s=pinvalue; i < aodf->stored_length && *s && s[1]; s = s+2 )
    3069           0 :             paddedpin[i++] = (((*s - '0') << 4) | ((s[1] - '0') & 0x0f));
    3070           0 :           if (i < aodf->stored_length && *s)
    3071           0 :             paddedpin[i++] = (((*s - '0') << 4)
    3072           0 :                               |((aodf->pad_char_valid?aodf->pad_char:0)&0x0f));
    3073             : 
    3074           0 :           if (aodf->pinflags.needs_padding)
    3075           0 :             while (i < aodf->stored_length)
    3076           0 :               paddedpin[i++] = aodf->pad_char_valid? aodf->pad_char : 0;
    3077             : 
    3078           0 :           xfree (pinvalue);
    3079           0 :           pinvalue = paddedpin;
    3080           0 :           pinvaluelen = i;
    3081             :         }
    3082           0 :       else if (aodf->pinflags.needs_padding)
    3083             :         {
    3084             :           char *paddedpin;
    3085             : 
    3086           0 :           paddedpin = xtrymalloc (aodf->stored_length+1);
    3087           0 :           if (!paddedpin)
    3088             :             {
    3089           0 :               err = gpg_error_from_syserror ();
    3090           0 :               xfree (pinvalue);
    3091           0 :               return err;
    3092             :             }
    3093           0 :           for (i=0, s=pinvalue; i < aodf->stored_length && *s; i++, s++)
    3094           0 :             paddedpin[i] = *s;
    3095             :           /* Not sure what padding char to use if none has been set.
    3096             :              For now we use 0x00; maybe a space would be better. */
    3097           0 :           for (; i < aodf->stored_length; i++)
    3098           0 :             paddedpin[i] = aodf->pad_char_valid? aodf->pad_char : 0;
    3099           0 :           paddedpin[i] = 0;
    3100           0 :           pinvaluelen = i;
    3101           0 :           xfree (pinvalue);
    3102           0 :           pinvalue = paddedpin;
    3103             :         }
    3104             :       else
    3105           0 :         pinvaluelen = strlen (pinvalue);
    3106             : 
    3107           0 :       err = iso7816_verify (app->slot,
    3108           0 :                             aodf->pin_reference_valid? aodf->pin_reference : 0,
    3109             :                             pinvalue, pinvaluelen);
    3110           0 :       xfree (pinvalue);
    3111           0 :       if (err)
    3112             :         {
    3113           0 :           log_error ("PIN verification failed: %s\n", gpg_strerror (err));
    3114           0 :           return err;
    3115             :         }
    3116           0 :       log_debug ("PIN verification succeeded\n");
    3117             :     }
    3118             : 
    3119             :   /* Prepare the DER object from INDATA. */
    3120           0 :   if (indatalen == 36)
    3121             :     {
    3122             :       /* No ASN.1 container used. */
    3123           0 :       if (hashalgo != MD_USER_TLS_MD5SHA1)
    3124           0 :         return gpg_error (GPG_ERR_UNSUPPORTED_ALGORITHM);
    3125           0 :       memcpy (data, indata, indatalen);
    3126             :     }
    3127           0 :   else if (indatalen == 35)
    3128             :     {
    3129             :       /* Alright, the caller was so kind to send us an already
    3130             :          prepared DER object.  Check that it is what we want and that
    3131             :          it matches the hash algorithm. */
    3132           0 :       if (hashalgo == GCRY_MD_SHA1 && !memcmp (indata, sha1_prefix, 15))
    3133             :         ;
    3134           0 :       else if (hashalgo == GCRY_MD_RMD160
    3135           0 :                && !memcmp (indata, rmd160_prefix, 15))
    3136             :         ;
    3137             :       else
    3138           0 :         return gpg_error (GPG_ERR_UNSUPPORTED_ALGORITHM);
    3139           0 :       memcpy (data, indata, indatalen);
    3140             :     }
    3141             :   else
    3142             :     {
    3143             :       /* Need to prepend the prefix. */
    3144           0 :       if (hashalgo == GCRY_MD_SHA1)
    3145           0 :         memcpy (data, sha1_prefix, 15);
    3146           0 :       else if (hashalgo == GCRY_MD_RMD160)
    3147           0 :         memcpy (data, rmd160_prefix, 15);
    3148             :       else
    3149           0 :         return gpg_error (GPG_ERR_UNSUPPORTED_ALGORITHM);
    3150           0 :       memcpy (data+15, indata, indatalen);
    3151             :     }
    3152             : 
    3153             :   /* Manage security environment needs to be weaked for certain cards. */
    3154           0 :   if (mse_done)
    3155           0 :     err = 0;
    3156           0 :   else if (app->app_local->card_type == CARD_TYPE_TCOS)
    3157             :     {
    3158             :       /* TCOS creates signatures always using the local key 0.  MSE
    3159             :          may not be used. */
    3160             :     }
    3161           0 :   else if (app->app_local->card_type == CARD_TYPE_MICARDO)
    3162             :     {
    3163           0 :       if (!prkdf->pathlen)
    3164           0 :         err = gpg_error (GPG_ERR_BUG);
    3165             :       else
    3166           0 :         err = micardo_mse (app, prkdf->path[prkdf->pathlen-1]);
    3167             :     }
    3168           0 :   else if (prkdf->key_reference_valid)
    3169             :     {
    3170             :       unsigned char mse[3];
    3171             : 
    3172           0 :       mse[0] = 0x84; /* Select asym. key. */
    3173           0 :       mse[1] = 1;
    3174           0 :       mse[2] = prkdf->key_reference;
    3175             : 
    3176           0 :       err = iso7816_manage_security_env (app->slot,
    3177             :                                          0x41, 0xB6,
    3178             :                                          mse, sizeof mse);
    3179             :     }
    3180           0 :   if (err)
    3181             :     {
    3182           0 :       log_error ("MSE failed: %s\n", gpg_strerror (err));
    3183           0 :       return err;
    3184             :     }
    3185             : 
    3186           0 :   if (hashalgo == MD_USER_TLS_MD5SHA1)
    3187           0 :     err = iso7816_compute_ds (app->slot, 0, data, 36, 0, outdata, outdatalen);
    3188           0 :   else if (no_data_padding)
    3189           0 :     err = iso7816_compute_ds (app->slot, 0, data+15, 20, 0,outdata,outdatalen);
    3190             :   else
    3191           0 :     err = iso7816_compute_ds (app->slot, 0, data, 35, 0, outdata, outdatalen);
    3192           0 :   return err;
    3193             : }
    3194             : 
    3195             : 
    3196             : /* Handler for the PKAUTH command.
    3197             : 
    3198             :    This is basically the same as the PKSIGN command but we first check
    3199             :    that the requested key is suitable for authentication; that is, it
    3200             :    must match the criteria used for the attribute $AUTHKEYID.  See
    3201             :    do_sign for calling conventions; there is no HASHALGO, though. */
    3202             : static gpg_error_t
    3203           0 : do_auth (app_t app, const char *keyidstr,
    3204             :          gpg_error_t (*pincb)(void*, const char *, char **),
    3205             :          void *pincb_arg,
    3206             :          const void *indata, size_t indatalen,
    3207             :          unsigned char **outdata, size_t *outdatalen )
    3208             : {
    3209             :   gpg_error_t err;
    3210             :   prkdf_object_t prkdf;
    3211             :   int algo;
    3212             : 
    3213           0 :   if (!keyidstr || !*keyidstr)
    3214           0 :     return gpg_error (GPG_ERR_INV_VALUE);
    3215             : 
    3216           0 :   err = prkdf_object_from_keyidstr (app, keyidstr, &prkdf);
    3217           0 :   if (err)
    3218           0 :     return err;
    3219           0 :   if (!prkdf->usageflags.sign)
    3220             :     {
    3221           0 :       log_error ("key %s may not be used for authentication\n", keyidstr);
    3222           0 :       return gpg_error (GPG_ERR_WRONG_KEY_USAGE);
    3223             :     }
    3224             : 
    3225           0 :   algo = indatalen == 36? MD_USER_TLS_MD5SHA1 : GCRY_MD_SHA1;
    3226           0 :   return do_sign (app, keyidstr, algo, pincb, pincb_arg,
    3227             :                   indata, indatalen, outdata, outdatalen);
    3228             : }
    3229             : 
    3230             : 
    3231             : 
    3232             : /* Assume that EF(DIR) has been selected.  Read its content and figure
    3233             :    out the home EF of pkcs#15.  Return that home DF or 0 if not found
    3234             :    and the value at the address of BELPIC indicates whether it was
    3235             :    found by the belpic aid. */
    3236             : static unsigned short
    3237           0 : read_home_df (int slot, int *r_belpic)
    3238             : {
    3239             :   gpg_error_t err;
    3240             :   unsigned char *buffer;
    3241             :   const unsigned char *p, *pp;
    3242             :   size_t buflen, n, nn;
    3243           0 :   unsigned short result = 0;
    3244             : 
    3245           0 :   *r_belpic = 0;
    3246             : 
    3247           0 :   err = iso7816_read_binary (slot, 0, 0, &buffer, &buflen);
    3248           0 :   if (err)
    3249             :     {
    3250           0 :       log_error ("error reading EF{DIR}: %s\n", gpg_strerror (err));
    3251           0 :       return 0;
    3252             :     }
    3253             : 
    3254             :   /* FIXME: We need to scan all records. */
    3255           0 :   p = find_tlv (buffer, buflen, 0x61, &n);
    3256           0 :   if (p && n)
    3257             :     {
    3258           0 :       pp = find_tlv (p, n, 0x4f, &nn);
    3259           0 :       if (pp && ((nn == sizeof pkcs15_aid && !memcmp (pp, pkcs15_aid, nn))
    3260           0 :                  || (*r_belpic = (nn == sizeof pkcs15be_aid
    3261           0 :                                   && !memcmp (pp, pkcs15be_aid, nn)))))
    3262             :         {
    3263           0 :           pp = find_tlv (p, n, 0x50, &nn);
    3264           0 :           if (pp) /* fixme: Filter log value? */
    3265           0 :             log_info ("pkcs#15 application label from EF(DIR) is '%.*s'\n",
    3266             :                       (int)nn, pp);
    3267           0 :           pp = find_tlv (p, n, 0x51, &nn);
    3268           0 :           if (pp && nn == 4 && *pp == 0x3f && !pp[1])
    3269             :             {
    3270           0 :               result = ((pp[2] << 8) | pp[3]);
    3271           0 :               log_info ("pkcs#15 application directory is 0x%04hX\n", result);
    3272             :             }
    3273             :         }
    3274             :     }
    3275           0 :   xfree (buffer);
    3276           0 :   return result;
    3277             : }
    3278             : 
    3279             : 
    3280             : /*
    3281             :    Select the PKCS#15 application on the card in SLOT.
    3282             :  */
    3283             : gpg_error_t
    3284           0 : app_select_p15 (app_t app)
    3285             : {
    3286           0 :   int slot = app->slot;
    3287             :   int rc;
    3288           0 :   unsigned short def_home_df = 0;
    3289           0 :   card_type_t card_type = CARD_TYPE_UNKNOWN;
    3290           0 :   int direct = 0;
    3291           0 :   int is_belpic = 0;
    3292             : 
    3293           0 :   rc = iso7816_select_application (slot, pkcs15_aid, sizeof pkcs15_aid, 0);
    3294           0 :   if (rc)
    3295             :     { /* Not found: Try to locate it from 2F00.  We use direct path
    3296             :          selection here because it seems that the Belgian eID card
    3297             :          does only allow for that.  Many other cards supports this
    3298             :          selection method too.  Note, that we don't use
    3299             :          select_application above for the Belgian card - the call
    3300             :          works but it seems that it did not switch to the correct DF.
    3301             :          Using the 2f02 just works. */
    3302           0 :       unsigned short path[1] = { 0x2f00 };
    3303             : 
    3304           0 :       rc = iso7816_select_path (app->slot, path, 1, NULL, NULL);
    3305           0 :       if (!rc)
    3306             :         {
    3307           0 :           direct = 1;
    3308           0 :           def_home_df = read_home_df (slot, &is_belpic);
    3309           0 :           if (def_home_df)
    3310             :             {
    3311           0 :               path[0] = def_home_df;
    3312           0 :               rc = iso7816_select_path (app->slot, path, 1, NULL, NULL);
    3313             :             }
    3314             :         }
    3315             :     }
    3316           0 :   if (rc)
    3317             :     { /* Still not found:  Try the default DF. */
    3318           0 :       def_home_df = 0x5015;
    3319           0 :       rc = iso7816_select_file (slot, def_home_df, 1, NULL, NULL);
    3320             :     }
    3321           0 :   if (!rc)
    3322             :     {
    3323             :       /* Determine the type of the card.  The general case is to look
    3324             :          it up from the ATR table.  For the Belgian eID card we know
    3325             :          it instantly from the AID. */
    3326           0 :       if (is_belpic)
    3327             :         {
    3328           0 :           card_type = CARD_TYPE_BELPIC;
    3329             :         }
    3330             :       else
    3331             :         {
    3332             :           unsigned char *atr;
    3333             :           size_t atrlen;
    3334             :           int i;
    3335             : 
    3336           0 :           atr = apdu_get_atr (app->slot, &atrlen);
    3337           0 :           if (!atr)
    3338           0 :             rc = gpg_error (GPG_ERR_INV_CARD);
    3339             :           else
    3340             :             {
    3341           0 :               for (i=0; card_atr_list[i].atrlen; i++)
    3342           0 :                 if (card_atr_list[i].atrlen == atrlen
    3343           0 :                     && !memcmp (card_atr_list[i].atr, atr, atrlen))
    3344             :                   {
    3345           0 :                     card_type = card_atr_list[i].type;
    3346           0 :                     break;
    3347             :                   }
    3348           0 :               xfree (atr);
    3349             :             }
    3350             :         }
    3351             :     }
    3352           0 :   if (!rc)
    3353             :     {
    3354           0 :       app->apptype = "P15";
    3355             : 
    3356           0 :       app->app_local = xtrycalloc (1, sizeof *app->app_local);
    3357           0 :       if (!app->app_local)
    3358             :         {
    3359           0 :           rc = gpg_error_from_syserror ();
    3360           0 :           goto leave;
    3361             :         }
    3362             : 
    3363             :       /* Set the home DF.  Note that we currently can't do that if the
    3364             :          selection via application ID worked.  This will store 0 there
    3365             :          instead.  FIXME: We either need to figure the home_df via the
    3366             :          DIR file or using the return values from the select file
    3367             :          APDU. */
    3368           0 :       app->app_local->home_df = def_home_df;
    3369             : 
    3370             :       /* Store the card type.  FIXME: We might want to put this into
    3371             :          the common APP structure. */
    3372           0 :       app->app_local->card_type = card_type;
    3373             : 
    3374             :       /* Store whether we may and should use direct path selection. */
    3375           0 :       app->app_local->direct_path_selection = direct;
    3376             : 
    3377             :       /* Read basic information and thus check whether this is a real
    3378             :          card.  */
    3379           0 :       rc = read_p15_info (app);
    3380           0 :       if (rc)
    3381           0 :         goto leave;
    3382             : 
    3383             :       /* Special serial number munging.  We need to check for a German
    3384             :          prototype card right here because we need to access to
    3385             :          EF(TokenInfo).  We mark such a serial number by the using a
    3386             :          prefix of FF0100. */
    3387           0 :       if (app->serialnolen == 12
    3388           0 :           && !memcmp (app->serialno, "\xD2\x76\0\0\0\0\0\0\0\0\0\0", 12))
    3389             :         {
    3390             :           /* This is a German card with a silly serial number.  Try to get
    3391             :              the serial number from the EF(TokenInfo). . */
    3392             :           unsigned char *p;
    3393             : 
    3394             :           /* FIXME: actually get it from EF(TokenInfo). */
    3395             : 
    3396           0 :           p = xtrymalloc (3 + app->serialnolen);
    3397           0 :           if (!p)
    3398           0 :             rc = gpg_error (gpg_err_code_from_errno (errno));
    3399             :           else
    3400             :             {
    3401           0 :               memcpy (p, "\xff\x01", 3);
    3402           0 :               memcpy (p+3, app->serialno, app->serialnolen);
    3403           0 :               app->serialnolen += 3;
    3404           0 :               xfree (app->serialno);
    3405           0 :               app->serialno = p;
    3406             :             }
    3407             :         }
    3408             : 
    3409           0 :       app->fnc.deinit = do_deinit;
    3410           0 :       app->fnc.learn_status = do_learn_status;
    3411           0 :       app->fnc.readcert = do_readcert;
    3412           0 :       app->fnc.getattr = do_getattr;
    3413           0 :       app->fnc.setattr = NULL;
    3414           0 :       app->fnc.genkey = NULL;
    3415           0 :       app->fnc.sign = do_sign;
    3416           0 :       app->fnc.auth = do_auth;
    3417           0 :       app->fnc.decipher = NULL;
    3418           0 :       app->fnc.change_pin = NULL;
    3419           0 :       app->fnc.check_pin = NULL;
    3420             : 
    3421             :     leave:
    3422           0 :       if (rc)
    3423           0 :         do_deinit (app);
    3424             :    }
    3425             : 
    3426           0 :   return rc;
    3427             : }

Generated by: LCOV version 1.11