cryptoservices/certificateandkeymgmt/tder/syntax.txt
author Santosh Patil <santosh.v.patil@nokia.com>
Wed, 08 Jul 2009 11:25:26 +0100
changeset 0 2c201484c85f
child 8 35751d3474b7
permissions -rw-r--r--
Move the Security package to EPL, and add the implementations of the cryptographic algorithms

dergen.pl
*********
This Perl application recursively parses a set of text files translating the
contents into a DER encoding.  This should now support all of the ASN.1
tags required to create a PKCS#12 file.

Syntax:

* key value format
* one key per line
* tabs + whitespace up to command ignored
* comment is //
* $1 .. $N for textual substitution of args
* escape character is \ 
* case insensitive

Simple types are of the form
SIMPLE_COMMAND=arg1,arg2,arg3

simple types
************
BITSTRING
		Output an DER bit string 
		ARG0=A sequence of 0s and 1s. 
BMPSTRING
		Encodes ascii text as BMPSTRING
		ARG0=ascii text to encode
BMPSTRING_FILE
		Includes a BMPSTRING file as a BMPSTRING element
		ARG0=name of file to include
ENUMERATED
		Encodes and enumerated value
		ARG0=integer value of enum
IA5STRING
		Encodes ascii text as BMPSTRING
		ARG0=ascii text to encode
IA5STRING_FILE
		Includes a IA5STRING file as an IA5STRING element
		ARG0=name of file to include
INCLUDE_BINARY_FILE
		Includes raw binary data from a file
		ARG0=filename to include
INTEGER|INT
		Outputs an integer
		ARG0=Integer in decimal or hex format (leading 0x)
NULL
		A null entry (no args)
OID
		An ASN.1 object identifier
		ARG0=Raw form (1.2.840.113549.1) or one of the defined key words (look in the source)
PRINTABLESTRING
		Encodes ascii text as PRINTABLESTRING
		ARG0=ascii text to encode
UTF8STRING_FILE
		Includes a UTF8STRING file as an UTF8STRING element
		ARG0=name of file to include
RAW
		Allows raw hex to be inserted into the file
		ARG0=AA:BB:CC:DD:EE:FF
UTCTIME
		Encodes a utc time. N.B. no attempt is made to validate the format of the time.
		ARG0=time in ascii
UTF8STRING
		Encodes ascii text as UTF8STRING
		ARG0=ascii text to encode
UTF8STRING_FILE
		Includes a UTF8STRING file as an UTF8STRING element
		ARG0=name of file to include
**********

Compound types are of the form and apply an encoding to the result of
recursively concatenating the embedded types.

COMPOUND_TYPE
		SIMPLE_TYPE
		COMPOUND_TYPE
				SIMPLE_TYPE
		END
		SIMPLE_TYPE
END

compound types
**************
BITSTRING_WRAPPER
		Wraps the nested content inside a BITSTRING
INCLUDE
		Allows nesting of dergen script file. Arguments may also be passed for textual substitution. Refer to arguments as $1 .. $N
		ARG0=filename to include
		ARG1 (optional)=argument to subtitute for $1 in include file
		ARGN (optional)=argument

IMPLICIT			
		Changes the tag of the embedded type according to the tag number and class arguments. 
		The default tag number is 0 and the default class is CONTEXT-SPECIFIC.
		ARG1 (optional)=tag nummber (in hex)
		ARG2 (optional)=class (UNIVERSAL,APPLICATION,CONTEXT-SPECIFIC,PRIVATE)

ENCRYPT
		Encrypts the nested data. (Requires OpenSSL)
		ARG0=cipher (as defined by openssl without the leading hyphen)
		ARG1=key (in hex)
		ARG2=iv (in hex)
EXPLICIT
		Wraps the embedded type with a new tag defined by the tag number and class arguments. 
		The default tag number is 0 and the default class is CONTEXT-SPECIFIC.
		ARG0 (optional)=tag nummber (in hex)
		ARG1 (optional)class (UNIVERSAL,APPLICATION,CONTEXT-SPECIFIC,PRIVATE)
HASH
		Embeds the hash of the nested data. (Requries OpenSSL)
		ARG0=algorithm (as defined by OpenSSL without the leading hyphen)
HMAC
		Embeds a HMAC for the nested data.
		ARG0=algorithm (SHA1|MD5)
		ARG1=key (in kex)
OCTETSTRING
		Wraps the nested content in an OCTETSTRING tag
OUTPUT_BINARY_FILE
		Outputs the nested data in binary form to the named file and optionally includes the nested data in the 
		encoding stream as well. 
		ARG0=The filename to write the data to
		ARG1=Set this to 1 to also include the binary content int he output stream (Optional)
SEQ
		Embeds content in a SEQ tag
SIGN	Creates a PKCS#7 signed data object of the nested data using OpenSSL's SMIME command
		ARG0=signing certificate filename (PEM format)
		ARG1=signing key filename (PEM format)
SET
		Embeds content in a SET tag
SHELL	
		Executes an arbitrary shell command
		ARG0=program to run
		ARG1 (optional)=first argument to shell command
		ARGN (optional)=last largument to shell command

command line arguments
**********************
--in  <filename>		: script file
--out <filename>		: output file
--hex					: output hex instead of binary
--debug					: set the debug level. 0=off,1=parsing information,2=parsing & encoding information,3=everything

other
****
If it doesn't work then then try setting the DEBUG global variable to 1 (or 2
or 3 for more increased verbosity)