/*+
−
* Copyright (c) 2002-2009 Nokia Corporation and/or its subsidiary(-ies).+
−
* All rights reserved.+
−
* This component and the accompanying materials are made available+
−
* under the terms of the License "Eclipse Public License v1.0"+
−
* which accompanies this distribution, and is available+
−
* at the URL "http://www.eclipse.org/legal/epl-v10.html".+
−
*+
−
* Initial Contributors:+
−
* Nokia Corporation - initial contribution.+
−
*+
−
* Contributors:+
−
*+
−
* Description: +
−
*+
−
*/+
−
+
−
+
−
#include <e32std.h>+
−
#include <random.h>+
−
#include <cryptostrength.h>+
−
#include <securityerr.h>+
−
#include <pbedata.h>+
−
#include "pkcs5kdf.h"+
−
#include "pbe.h"+
−
#include <pbencryptor.h>+
−
#include "pbesymmetricfactory.h"+
−
+
−
EXPORT_C CPBEncryptElement* CPBEncryptElement::NewL(const TPBPassword& aPassword)+
−
	{+
−
	CPBEncryptElement* self = NewLC(aPassword);+
−
	CleanupStack::Pop();+
−
	return self;+
−
	}+
−
+
−
EXPORT_C CPBEncryptElement* CPBEncryptElement::NewLC(const TPBPassword& aPassword)+
−
	{+
−
	CPBEncryptElement* self = new(ELeave) CPBEncryptElement;+
−
	CleanupStack::PushL(self);+
−
	self->ConstructL(aPassword.Password());+
−
	return self;+
−
	}+
−
+
−
EXPORT_C CPBEncryptElement* CPBEncryptElement::NewL(const TPBPassword& aPassword, +
−
	const TPBECipher aCipher)+
−
	{+
−
	CPBEncryptElement* self = NewLC(aPassword, aCipher);+
−
	CleanupStack::Pop();+
−
	return self;+
−
	}+
−
+
−
EXPORT_C CPBEncryptElement* CPBEncryptElement::NewLC(const TPBPassword& aPassword, +
−
	const TPBECipher aCipher)+
−
	{+
−
	CPBEncryptElement* self = new(ELeave) CPBEncryptElement;+
−
	CleanupStack::PushL(self);+
−
	self->ConstructL(aPassword.Password(), aCipher);+
−
	return self;+
−
	}+
−
+
−
EXPORT_C CPBEncryptElement* CPBEncryptElement::NewL(const TPBPassword& aPassword, +
−
	const CPBEncryptParms& aParms)+
−
	{+
−
	CPBEncryptElement* self = NewLC(aPassword, aParms);+
−
	CleanupStack::Pop();+
−
	return self;+
−
	}+
−
+
−
EXPORT_C CPBEncryptElement* CPBEncryptElement::NewLC(const TPBPassword& aPassword, +
−
	const CPBEncryptParms& aParms)+
−
	{+
−
	CPBEncryptElement* self = new(ELeave) CPBEncryptElement;+
−
	CleanupStack::PushL(self);+
−
	self->ConstructL(aPassword.Password(), aParms);+
−
	return self;+
−
	}+
−
+
−
EXPORT_C CPBEncryptElement* CPBEncryptElement::NewL(+
−
	const CPBEncryptionData& aData, const TPBPassword& aPassword)+
−
	{+
−
	CPBEncryptElement* self = CPBEncryptElement::NewLC(aData, aPassword);+
−
	CleanupStack::Pop();+
−
	return self;+
−
	}+
−
+
−
EXPORT_C CPBEncryptElement* CPBEncryptElement::NewLC(+
−
	const CPBEncryptionData& aData, const TPBPassword& aPassword)+
−
	{+
−
	CPBEncryptElement* self = new(ELeave) CPBEncryptElement;+
−
	CleanupStack::PushL(self);+
−
	self->ConstructL(aData, aPassword);+
−
	return self;+
−
	}+
−
+
−
CPBEncryptElement::CPBEncryptElement(void) +
−
	{+
−
	}+
−
+
−
CPBEncryptElement::~CPBEncryptElement(void)+
−
	{+
−
	delete iData;+
−
	delete iEncryptKey;+
−
	}+
−
+
−
void CPBEncryptElement::ConstructL(const TDesC8& aPassword)+
−
	{+
−
	// Construct based on cryptography strength+
−
	if (TCrypto::Strength() == TCrypto::EStrong)+
−
		{+
−
		ConstructL(aPassword, KPBEDefaultStrongCipher);+
−
		}+
−
	else+
−
		{+
−
		ConstructL(aPassword, KPBEDefaultWeakCipher);+
−
		}+
−
	}+
−
+
−
void CPBEncryptElement::ConstructL(const TDesC8& aPassword, TPBECipher aCipher)+
−
	{+
−
	TBuf8<KPBEMaxCipherIVBytes> iv(KPBEMaxCipherIVBytes);+
−
	iv.SetLength(PBE::GetBlockBytes(aCipher));+
−
	TRandom::RandomL(iv);+
−
+
−
	TBuf8<KPBEDefaultSaltBytes> encryptSalt(KPBEDefaultSaltBytes);+
−
	TRandom::RandomL(encryptSalt);+
−
+
−
	TBuf8<KPBEDefaultSaltBytes> authSalt(KPBEDefaultSaltBytes);+
−
	TRandom::RandomL(authSalt);+
−
+
−
	iData = CPBEncryptionData::NewL(aPassword, aCipher, authSalt, encryptSalt,+
−
		iv, KDefaultIterations);+
−
+
−
	MakeEncryptKeyL(PBE::GetKeyBytes(aCipher), aPassword);+
−
	}+
−
+
−
void CPBEncryptElement::ConstructL(const CPBEncryptionData& aData, +
−
	const TPBPassword& aPassword)+
−
	{+
−
	iData = CPBEncryptionData::NewL(aData);+
−
	if(!AuthenticateL(aPassword))+
−
		{+
−
		User::Leave(KErrBadPassphrase);+
−
		}+
−
	}+
−
+
−
void CPBEncryptElement::ConstructL(const TDesC8& aPassword,+
−
	const CPBEncryptParms& aParms)+
−
	{+
−
	TUint keySize = PBE::GetKeyBytes(aParms.Cipher());+
−
+
−
	TBuf8<KPBEDefaultSaltBytes> authSalt(KPBEDefaultSaltBytes);+
−
	TRandom::RandomL(authSalt);+
−
+
−
	//Recreate parms with given data and create a totally new auth+
−
	iData = CPBEncryptionData::NewL(aPassword, authSalt, aParms);+
−
	MakeEncryptKeyL(keySize, aPassword);+
−
	}+
−
+
−
const CPBEncryptionData& CPBEncryptElement::EncryptionData(void) const+
−
	{+
−
	return *iData;+
−
	}+
−
+
−
CPBEncryptor* CPBEncryptElement::NewEncryptL() const +
−
	{+
−
	CPBEncryptor* encryptor = NewEncryptLC();+
−
	CleanupStack::Pop();+
−
	return encryptor;+
−
	}+
−
+
−
CPBEncryptor* CPBEncryptElement::NewEncryptLC() const+
−
	{+
−
	CPBEncryptor* encryptor = CPBEncryptorElement::NewLC( +
−
		iData->EncryptParms().Cipher(), *iEncryptKey, +
−
		iData->EncryptParms().IV());+
−
	return encryptor;+
−
	}+
−
+
−
TBool CPBEncryptElement::AuthenticateL(const TPBPassword& aPassword)+
−
	{+
−
	TBool retval = EFalse;+
−
+
−
	//create a new auth to test against the existing one+
−
	//therefore we use the same key size, and salt as the current one+
−
	CPBAuthData* auth = CPBAuthData::NewLC(aPassword.Password(),+
−
		iData->AuthData().Salt(), iData->AuthData().Key().Size(),+
−
		iData->AuthData().Iterations());+
−
	if(*auth==iData->AuthData())+
−
		{+
−
		//We've got a valid password, regenerate the key so they can decrypt+
−
		//stuff.  We don't the change the length of iEncryptKey as we assume the+
−
		//previous key size is appropriate for the new one+
−
		MakeEncryptKeyL(PBE::GetKeyBytes(iData->EncryptParms().Cipher()),+
−
			aPassword.Password());+
−
		retval = ETrue;+
−
		}+
−
	CleanupStack::PopAndDestroy(auth);+
−
	return retval;+
−
	}+
−
+
−
CPBDecryptor* CPBEncryptElement::NewDecryptL() const+
−
	{+
−
	CPBDecryptor* decryptor = NewDecryptLC();+
−
	CleanupStack::Pop();+
−
	return decryptor;+
−
	}+
−
+
−
CPBDecryptor* CPBEncryptElement::NewDecryptLC() const+
−
	{+
−
	CPBDecryptor* decryptor = CPBDecryptorElement::NewLC(+
−
		iData->EncryptParms().Cipher(), *iEncryptKey,+
−
		iData->EncryptParms().IV());+
−
	return decryptor;+
−
	}+
−
+
−
// Warning: This function is only valid BEFORE you call NewEncryptL+
−
// After creating the cipher, ask it about itself, not me!+
−
// This is _very_ dodgy as I assume all sorts of things about the encryptor.+
−
// 1) That it uses SSLv3 or similar style padding+
−
// 2) That it stores the IV for that stream at the front.+
−
// This is here for specific application that requires this and aren't able to+
−
// actually construct the cipher and ask it.  In almost all other cases you+
−
// should construct the cipher and ask it.+
−
TInt CPBEncryptElement::MaxCiphertextLength(TInt aPlaintextLength) const+
−
	{+
−
	TUint blocksize = PBE::GetBlockBytes(iData->EncryptParms().Cipher());+
−
	TUint padding = blocksize - aPlaintextLength % blocksize;+
−
	//len = inputLength + padding+
−
	return aPlaintextLength + padding;+
−
	}+
−
+
−
// Warning: This function is only valid BEFORE you call NewDecryptL+
−
// After creating the cipher, ask it about itself, not me!+
−
TInt CPBEncryptElement::MaxPlaintextLength(TInt aCiphertextLength) const+
−
	{+
−
	/*It's impossible to determine anything about how much padding will be+
−
	 * removed.  So we'll return a max length that is longer than will+
−
	 * ever happen by at most a blocksize - 1.+
−
	 */+
−
	//totallength = inputlength - 1 byte of padding min+
−
	return aCiphertextLength - 1;+
−
	}+
−
+
−
void CPBEncryptElement::MakeEncryptKeyL(TUint aKeySize, const TDesC8& aPassword)+
−
	{+
−
	iEncryptKey = HBufC8::NewMaxL(aKeySize);+
−
	TPtr8 encryptKeyBuf = iEncryptKey->Des();+
−
	iData->EncryptParms().DeriveKeyL(aPassword, encryptKeyBuf);+
−
	}+
−
+
−
EXPORT_C TPBPassword::TPBPassword(const TDesC8& aPassword)+
−
	{+
−
	iPassword.Set(aPassword);+
−
	}+
−
+
−
EXPORT_C TPBPassword::TPBPassword(const TDesC16& aPassword)+
−
	{+
−
	iPassword.Set(reinterpret_cast<const TUint8*>(aPassword.Ptr()), aPassword.Size());+
−
	}+
−
+
−
EXPORT_C const TDesC8& TPBPassword::Password(void) const+
−
	{+
−
	return iPassword;+
−
	}+
−
+
−
+
−