/*

* ============================================================================

*  Name        : ./accesssec/eapol/eapol_framework/wapi_common/src/ec_algorithms.cpp

*  Part of     : WAPI / WAPI       *** Info from the SWAD

*  Description : WAPI authentication

*  Version     : %version: 28.1.2 % << Don't touch! Updated by Synergy at check-out.

*

*  Copyright © 2001-2009 Nokia.  All rights reserved.

*  This material, including documentation and any related computer

*  programs, is protected by copyright controlled by Nokia.  All

*  rights are reserved.  Copying, including reproducing, storing,

*  adapting or translating, any or all of this material requires the

*  prior written consent of Nokia.  This material also contains

*  confidential information which may not be disclosed to others

*  without the prior written consent of Nokia.

* ============================================================================

* Template version: 4.1.1

*/

// This is enumeration of WAPI source code.

#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

	#undef EAP_FILE_NUMBER_ENUM

	#define EAP_FILE_NUMBER_ENUM 701 

	#undef EAP_FILE_NUMBER_DATE 

	#define EAP_FILE_NUMBER_DATE 1127594498 

#endif //#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

#if defined(USE_WAPI_CORE)

#include "eap_automatic_variable.h"

#include "ec_am_algorithms_direct_nrc.h"

#include "ec_cs_types.h"

#include "ec_cs_strings.h"

#include "abs_ec_am_algorithms.h"

#include "abs_eap_am_file_input.h"

#include "asn1_der_type.h"

#include "abs_ec_am_algorithms.h"

#include "eap_crypto_api.h"

#if defined(USE_NRC_ECC_ALGORITHMS)

#include "nc_drmeccp256.h"

#include "nc_pkcs1_5.h"

#include "nc_hash.h"

#include "nc_rand.h"

#endif //#if defined(USE_NRC_ECC_ALGORITHMS)

//----------------------------------------------------------------------------

EAP_FUNC_EXPORT ec_am_algorithms_direct_nrc_c::~ec_am_algorithms_direct_nrc_c()

{

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("WAPI_Core: this = 0x%08x, %s: ec_am_algorithms_direct_nrc_c::~ec_am_algorithms_direct_nrc_c():\n"),

		 this,

		 (m_is_client == true ? "client": "server")));

	EAP_TRACE_RETURN_STRING(m_am_tools, "returns: ec_am_algorithms_direct_nrc_c::~ec_am_algorithms_direct_nrc_c()");

}

//----------------------------------------------------------------------------

EAP_FUNC_EXPORT ec_am_algorithms_direct_nrc_c::ec_am_algorithms_direct_nrc_c(

	abs_eap_am_tools_c * const tools,

	abs_ec_am_algorithms_c * const partner,

	const bool is_client_when_true)

	: m_am_tools(tools)

	, m_partner(partner)

	, m_e_curve(tools)

	, m_nc_rand_state(tools)

	, m_is_client(is_client_when_true)

	, m_is_valid(false)

{

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("WAPI_Core: this = 0x%08x, %s: ec_am_algorithms_direct_nrc_c::ec_am_algorithms_direct_nrc_c():\n"),

		 this,

		 (m_is_client == true ? "client": "server")));

	EAP_TRACE_RETURN_STRING(m_am_tools, "returns: ec_am_algorithms_direct_nrc_c::ec_am_algorithms_direct_nrc_c()");

	m_is_valid = true;

}

//----------------------------------------------------------------------------

EAP_FUNC_EXPORT bool ec_am_algorithms_direct_nrc_c::get_is_valid() const

{

	return m_is_valid;

}

//----------------------------------------------------------------------------

EAP_FUNC_EXPORT eap_status_e ec_am_algorithms_direct_nrc_c::configure()

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("WAPI_Core: this = 0x%08x, %s: ec_am_algorithms_direct_nrc_c::configure():\n"),

		 this,

		 (m_is_client == true ? "client": "server")));

	EAP_TRACE_RETURN_STRING(m_am_tools, "returns: ec_am_algorithms_direct_nrc_c::configure()");

	eap_status_e status(eap_status_ok);

	status = initialize_curve();

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return EAP_STATUS_RETURN(m_am_tools, status);

}

//----------------------------------------------------------------------------

EAP_FUNC_EXPORT eap_status_e ec_am_algorithms_direct_nrc_c::create_signature_with_private_key(

	const eap_variable_data_c * const hash_of_message,

	const eap_variable_data_c * const private_key)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("WAPI_Core: this = 0x%08x, %s: ec_am_algorithms_direct_nrc_c::create_signature_with_private_key():\n"),

		 this,

		 (m_is_client == true ? "client": "server")));

	EAP_TRACE_RETURN_STRING(m_am_tools, "returns: ec_am_algorithms_direct_nrc_c::create_signature_with_private_key()");

	eap_status_e status(eap_status_not_supported);

	asn1_der_type_c asn1(m_am_tools);

	if (asn1.get_is_valid() == false)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

	}

	status = asn1.decode(private_key);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	static const asn1_type_const_c private_key_query[] =

	{

		ASN1_TYPE_OBJECT(

			asn1_der_type_c::asn1_class_universal,

			asn1_der_type_c::asn1_tag_sequence,

			0),                                       // ECPrivateKey{CURVES:IOSet} ::= SEQUENCE

		ASN1_TYPE_OBJECT(

			asn1_der_type_c::asn1_class_universal,

			asn1_der_type_c::asn1_tag_octet_string,

			1),                                       // privateKey OCTET STRING

		ASN1_TYPE_OBJECT_TERMINATOR

	};

	const asn1_der_type_c * const der_private_key = asn1.get_sub_type(private_key_query);

	if (der_private_key != 0)

	{

#if defined(USE_NRC_ECC_ALGORITHMS)

		gfp_coord private_key;

		OS2IP(

			private_key.a.d,

			der_private_key->get_content(),

			der_private_key->get_content_length());

		EAP_TRACE_DATA_DEBUG(

			m_am_tools,

			TRACE_FLAGS_DEFAULT,

			(EAPL("ECC Private key"),

			der_private_key->get_content(),

			der_private_key->get_content_length()));

		gfp_point sign_point1;

		gfp_point sign_point2;

		gfp_curve * const e_curve = reinterpret_cast<gfp_curve *>(m_e_curve.get_data());

		if (e_curve == 0)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

		}

		struct nc_rand_state * const nc_rand_state = reinterpret_cast<struct nc_rand_state *>(m_nc_rand_state.get_data(sizeof(struct nc_rand_state)));

		if (e_curve == 0)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

		}

		EAP_TRACE_DATA_DEBUG(

			m_am_tools,

			TRACE_FLAGS_DEFAULT,

			(EAPL("hash_of_message"),

			hash_of_message->get_data(),

			hash_of_message->get_data_length()));

		DRM_ECDSA_Sign_P256(

			nc_rand_state,

			sign_point1.x.a.d,

			sign_point2.x.a.d,

			hash_of_message->get_data(),

			hash_of_message->get_data_length(),

			private_key.a.d,

			e_curve,

			0);

		u32_t sign_len(0ul);

		u32_t sign_point_len((2ul * sign_point1.x.a.d[0]) + (2ul * sign_point2.x.a.d[0]));

		eap_variable_data_c signature(m_am_tools);

		if (signature.get_is_valid() == false)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

		}

		status = signature.set_buffer_length(sign_point_len);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		status = signature.set_data_length(sign_point_len);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		/* Check the length of sign_point1.x.a.d and convert it to octet string. */

		if (sign_point1.x.a.d[0] != 0)

		{

			sign_point_len = 2ul * sign_point1.x.a.d[0];

			I2OSP(

				signature.get_data_offset(sign_len, sign_point_len),

				sign_point1.x.a.d,

				sign_point_len);

			EAP_TRACE_DATA_DEBUG(

				m_am_tools,

				TRACE_FLAGS_DEFAULT,

				(EAPL("sign_point1"),

				signature.get_data_offset(sign_len, sign_point_len),

				sign_point_len));

			sign_len += sign_point_len;

		}

		else

		{

			EAP_TRACE_DEBUG(

				m_am_tools,

				TRACE_FLAGS_DEFAULT,

				(EAPL("ERROR: WAPI_Core: this = 0x%08x, %s: ec_am_algorithms_direct_nrc_c::create_signature_with_private_key(): ECDSA sign point 1 generation failed\n"),

				 this,

				 (m_is_client == true ? "client": "server")));

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_process_general_error);

		}

		 /* Check the length of sign_point2.x.a.d and convert it to octet string. */

		if (sign_point2.x.a.d[0] != 0)

		{

			sign_point_len = 2ul * sign_point2.x.a.d[0];

			I2OSP(

				signature.get_data_offset(sign_len, sign_point_len),

				sign_point2.x.a.d,

				sign_point_len);

			EAP_TRACE_DATA_DEBUG(

				m_am_tools,

				TRACE_FLAGS_DEFAULT,

				(EAPL("sign_point2"),

				signature.get_data_offset(sign_len, sign_point_len),

				sign_point_len));

			sign_len += sign_point_len;

		}

		else

		{

			EAP_TRACE_DEBUG(

				m_am_tools,

				TRACE_FLAGS_DEFAULT,

				(EAPL("ERROR: WAPI_Core: this = 0x%08x, %s: ec_am_algorithms_direct_nrc_c::create_signature_with_private_key(): ECDSA sign point 2 generation failed\n"),

				 this,

				 (m_is_client == true ? "client": "server")));

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_process_general_error);

		}

		status = signature.set_data_length(sign_len);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		EAP_TRACE_DATA_DEBUG(

			m_am_tools,

			TRACE_FLAGS_DEFAULT,

			(EAPL("signature"),

			 signature.get_data(),

			 signature.get_data_length()));

		status = m_partner->complete_create_signature_with_private_key(&signature, eap_status_ok);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

#endif //#if defined(USE_NRC_ECC_ALGORITHMS)

	}

	else

	{

		EAP_TRACE_DEBUG(

			m_am_tools,

			TRACE_FLAGS_DEFAULT,

			(EAPL("# Private key not found.\n")));

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_illegal_parameter);

	}

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return EAP_STATUS_RETURN(m_am_tools, status);

}

//----------------------------------------------------------------------------

EAP_FUNC_EXPORT eap_status_e ec_am_algorithms_direct_nrc_c::verify_signature_with_public_key(

	const eap_variable_data_c * const public_key,

	const eap_variable_data_c * const hash_of_message,

	const eap_variable_data_c * const signature)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("WAPI_Core: this = 0x%08x, %s: ec_am_algorithms_direct_nrc_c::verify_signature_with_public_key():\n"),

		 this,

		 (m_is_client == true ? "client": "server")));

	EAP_TRACE_RETURN_STRING(m_am_tools, "returns: ec_am_algorithms_direct_nrc_c::verify_signature_with_public_key()");

	eap_status_e status(eap_status_not_supported);

	asn1_der_type_c asn1(m_am_tools);

	if (asn1.get_is_valid() == false)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

	}

	status = asn1.decode(public_key);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	static const asn1_type_const_c public_key_query[] =

	{

		ASN1_TYPE_OBJECT(

			asn1_der_type_c::asn1_class_universal,

			asn1_der_type_c::asn1_tag_sequence,

			0),                                       // Certificate  ::=  SEQUENCE

		ASN1_TYPE_OBJECT(

			asn1_der_type_c::asn1_class_universal,

			asn1_der_type_c::asn1_tag_sequence,

			0),                                       // TBSCertificate  ::=  SEQUENCE

		ASN1_TYPE_OBJECT(

			asn1_der_type_c::asn1_class_universal,

			asn1_der_type_c::asn1_tag_sequence,

			6),                                       // subjectPublicKeyInfo SubjectPublicKeyInfo, SubjectPublicKeyInfo  ::=  SEQUENCE

		ASN1_TYPE_OBJECT(

			asn1_der_type_c::asn1_class_universal,

			asn1_der_type_c::asn1_tag_bit_string,

			1),                                       // subjectPublicKey     BIT STRING

		ASN1_TYPE_OBJECT_TERMINATOR

	};

	const asn1_der_type_c * const der_public_key = asn1.get_sub_type(public_key_query);

	if (der_public_key != 0)

	{

#if defined(USE_NRC_ECC_ALGORITHMS)

		gfp_point public_key;

		{

			const u8_t * const bit_string_public_key = der_public_key->get_content();

			const u32_t bit_string_public_key_length(der_public_key->get_content_length());

			if (bit_string_public_key != 0

				&& bit_string_public_key_length > 0ul)

			{

				// bit_string_public_key[0]: number of unused bits

				// bit_string_public_key[1]: format of bit string

				// bit_string_public_key[2]: the public key starts

				const u8_t * key = &(bit_string_public_key[2]);

				const u32_t key_length(bit_string_public_key_length - 2ul);

				const u32_t length = key_length / 2ul;

				EAP_TRACE_DATA_DEBUG(

					m_am_tools,

					TRACE_FLAGS_DEFAULT,

					(EAPL("ECC Public key"),

					key,

					key_length));

				OS2IP(

					public_key.x.a.d,

					key,

					length);

				key += length;

				OS2IP(

					public_key.y.a.d,

					key,

					key_length - length);

			}

		}

		gfp_point sign_point1;

		gfp_point sign_point2;

		const u32_t length(signature->get_data_length() / 2ul);

		OS2IP(

			sign_point1.x.a.d,

			signature->get_data(length),

			length);

		const u32_t remaining_length(signature->get_data_length() - length);

		OS2IP(

			sign_point2.x.a.d,

			signature->get_data_offset(length, remaining_length),

			remaining_length);

		gfp_curve * const e_curve = reinterpret_cast<gfp_curve *>(m_e_curve.get_data());

		if (e_curve == 0)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

		}

		EAP_TRACE_DATA_DEBUG(

			m_am_tools,

			TRACE_FLAGS_DEFAULT,

			(EAPL("hash_of_message"),

			hash_of_message->get_data(),

			hash_of_message->get_data_length()));

		u32_t verification_status = DRM_ECDSA_Verify_P256(

			hash_of_message->get_data(),

			hash_of_message->get_data_length(),

			sign_point1.x.a.d,

			sign_point2.x.a.d,

			&public_key,

			e_curve);

		if (verification_status)

		{

			// OK signature.

			EAP_TRACE_DEBUG(

				m_am_tools,

				TRACE_FLAGS_DEFAULT,

				(EAPL("WAPI_Core: this = 0x%08x, %s: ec_am_algorithms_direct_nrc_c::verify_signature_with_public_key(): Signature OK, verification_status = %d .\n"),

				 this,

				 (m_is_client == true ? "client": "server"),

				 verification_status));

			status = m_partner->complete_verify_signature_with_public_key(eap_status_ok);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

		}

		else

		{

			EAP_TRACE_DEBUG(

				m_am_tools,

				TRACE_FLAGS_DEFAULT,

				(EAPL("ERROR: WAPI_Core: this = 0x%08x, %s: ec_am_algorithms_direct_nrc_c::verify_signature_with_public_key(): Wrong signature.\n"),

				 this,

				 (m_is_client == true ? "client": "server")));

			status = m_partner->complete_verify_signature_with_public_key(eap_status_authentication_failure);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

		}

#else

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_not_supported);

#endif //#if defined(USE_NRC_ECC_ALGORITHMS)