-/* Transport Security Layer (TLS)\r
- * Copyright (c) 2003 Carlos Guzmán Álvarez\r
- * \r
- * Permission is hereby granted, free of charge, to any person \r
- * obtaining a copy of this software and associated documentation \r
- * files (the "Software"), to deal in the Software without restriction, \r
- * including without limitation the rights to use, copy, modify, merge, \r
- * publish, distribute, sublicense, and/or sell copies of the Software, \r
- * and to permit persons to whom the Software is furnished to do so, \r
- * subject to the following conditions:\r
- * \r
- * The above copyright notice and this permission notice shall be included \r
- * in all copies or substantial portions of the Software.\r
- * \r
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, \r
- * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES \r
- * OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND \r
- * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT \r
- * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, \r
- * WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, \r
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER \r
- * DEALINGS IN THE SOFTWARE.\r
- */\r
-\r
-using System;\r
-using System.IO;\r
-using System.Text;\r
-using System.Security.Cryptography;\r
-using System.Security.Cryptography.X509Certificates;\r
-\r
-using Mono.Security;\r
-using Mono.Security.Cryptography;\r
-\r
-namespace Mono.Security.Protocol.Tls\r
-{\r
- internal class TlsCipherSuite : CipherSuite\r
- {\r
- #region CONSTRUCTORS\r
- \r
- public TlsCipherSuite(\r
- short code, string name, CipherAlgorithmType cipherAlgorithmType, \r
- HashAlgorithmType hashAlgorithmType, ExchangeAlgorithmType exchangeAlgorithmType,\r
- bool exportable, bool blockMode, byte keyMaterialSize, \r
- byte expandedKeyMaterialSize, short effectiveKeyBytes, \r
- byte ivSize, byte blockSize) :\r
- base(code, name, cipherAlgorithmType, hashAlgorithmType, \r
- exchangeAlgorithmType, exportable, blockMode, keyMaterialSize, \r
- expandedKeyMaterialSize, effectiveKeyBytes, ivSize, blockSize)\r
- {\r
- }\r
-\r
- #endregion\r
-\r
- #region MAC_GENERATION_METHOD\r
-\r
- public override byte[] ComputeServerRecordMAC(TlsContentType contentType, byte[] fragment)\r
- {\r
- TlsStream data = new TlsStream();\r
- byte[] result = null;\r
-\r
- data.Write(this.Context.ReadSequenceNumber);\r
- data.Write((byte)contentType);\r
- data.Write((short)this.Context.Protocol);\r
- data.Write((short)fragment.Length);\r
- data.Write(fragment);\r
-\r
- result = this.ServerHMAC.ComputeHash(data.ToArray());\r
-\r
- data.Reset();\r
-\r
- return result;\r
- }\r
-\r
- public override byte[] ComputeClientRecordMAC(TlsContentType contentType, byte[] fragment)\r
- {\r
- TlsStream data = new TlsStream();\r
- byte[] result = null;\r
-\r
- data.Write(this.Context.WriteSequenceNumber);\r
- data.Write((byte)contentType);\r
- data.Write((short)this.Context.Protocol);\r
- data.Write((short)fragment.Length);\r
- data.Write(fragment);\r
-\r
- result = this.ClientHMAC.ComputeHash(data.ToArray());\r
-\r
- data.Reset();\r
-\r
- return result;\r
- }\r
-\r
- #endregion\r
-\r
- #region KEY_GENERATION_METODS\r
-\r
- public override void ComputeMasterSecret(byte[] preMasterSecret)\r
- {\r
- // Create master secret\r
- this.Context.MasterSecret = new byte[preMasterSecret.Length];\r
- this.Context.MasterSecret = this.PRF(\r
- preMasterSecret, "master secret", this.Context.RandomCS, 48);\r
- }\r
-\r
- public override void ComputeKeys()\r
- {\r
- // Create keyblock\r
- TlsStream keyBlock = new TlsStream(\r
- this.PRF(\r
- this.Context.MasterSecret, \r
- "key expansion",\r
- this.Context.RandomSC,\r
- this.KeyBlockSize));\r
-\r
- this.Context.ClientWriteMAC = keyBlock.ReadBytes(this.HashSize);\r
- this.Context.ServerWriteMAC = keyBlock.ReadBytes(this.HashSize);\r
- this.Context.ClientWriteKey = keyBlock.ReadBytes(this.KeyMaterialSize);\r
- this.Context.ServerWriteKey = keyBlock.ReadBytes(this.KeyMaterialSize);\r
-\r
- if (!this.IsExportable)\r
- {\r
- if (this.IvSize != 0)\r
- {\r
- this.Context.ClientWriteIV = keyBlock.ReadBytes(this.IvSize);\r
- this.Context.ServerWriteIV = keyBlock.ReadBytes(this.IvSize);\r
- }\r
- else\r
- {\r
- this.Context.ClientWriteIV = new byte[0];\r
- this.Context.ServerWriteIV = new byte[0];\r
- }\r
- }\r
- else\r
- {\r
- // Generate final write keys\r
- byte[] finalClientWriteKey = PRF(this.Context.ClientWriteKey, "client write key", this.Context.RandomCS, this.KeyMaterialSize);\r
- byte[] finalServerWriteKey = PRF(this.Context.ServerWriteKey, "server write key", this.Context.RandomCS, this.KeyMaterialSize);\r
- \r
- this.Context.ClientWriteKey = finalClientWriteKey;\r
- this.Context.ServerWriteKey = finalServerWriteKey;\r
-\r
- // Generate IV block\r
- byte[] ivBlock = PRF(new byte[]{}, "IV block", this.Context.RandomCS, this.IvSize*2);\r
-\r
- // Generate IV keys\r
- this.Context.ClientWriteIV = new byte[this.IvSize]; \r
- System.Array.Copy(ivBlock, 0, this.Context.ClientWriteIV, 0, this.Context.ClientWriteIV.Length);\r
-\r
- this.Context.ServerWriteIV = new byte[this.IvSize];\r
- System.Array.Copy(ivBlock, this.IvSize, this.Context.ServerWriteIV, 0, this.Context.ServerWriteIV.Length);\r
- }\r
-\r
- // Clear no more needed data\r
- keyBlock.Reset();\r
- }\r
-\r
- #endregion\r
- }\r
+/* Transport Security Layer (TLS)
+ * Copyright (c) 2003-2004 Carlos Guzman Alvarez
+ *
+ * Permission is hereby granted, free of charge, to any person
+ * obtaining a copy of this software and associated documentation
+ * files (the "Software"), to deal in the Software without restriction,
+ * including without limitation the rights to use, copy, modify, merge,
+ * publish, distribute, sublicense, and/or sell copies of the Software,
+ * and to permit persons to whom the Software is furnished to do so,
+ * subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included
+ * in all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+ * OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+ * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+ * WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+ * DEALINGS IN THE SOFTWARE.
+ */
+
+using System;
+using System.IO;
+using System.Text;
+using System.Security.Cryptography;
+using System.Security.Cryptography.X509Certificates;
+
+using Mono.Security;
+using Mono.Security.Cryptography;
+
+namespace Mono.Security.Protocol.Tls
+{
+ internal class TlsCipherSuite : CipherSuite
+ {
+ #region Constructors
+
+ public TlsCipherSuite(
+ short code, string name, CipherAlgorithmType cipherAlgorithmType,
+ HashAlgorithmType hashAlgorithmType, ExchangeAlgorithmType exchangeAlgorithmType,
+ bool exportable, bool blockMode, byte keyMaterialSize,
+ byte expandedKeyMaterialSize, short effectiveKeyBytes,
+ byte ivSize, byte blockSize) :
+ base(code, name, cipherAlgorithmType, hashAlgorithmType,
+ exchangeAlgorithmType, exportable, blockMode, keyMaterialSize,
+ expandedKeyMaterialSize, effectiveKeyBytes, ivSize, blockSize)
+ {
+ }
+
+ #endregion
+
+ #region MAC Generation Methods
+
+ public override byte[] ComputeServerRecordMAC(TlsContentType contentType, byte[] fragment)
+ {
+ TlsStream data = new TlsStream();
+ byte[] result = null;
+
+ data.Write(this.Context.ReadSequenceNumber);
+ data.Write((byte)contentType);
+ data.Write((short)this.Context.Protocol);
+ data.Write((short)fragment.Length);
+ data.Write(fragment);
+
+ result = this.ServerHMAC.ComputeHash(data.ToArray());
+
+ data.Reset();
+
+ return result;
+ }
+
+ public override byte[] ComputeClientRecordMAC(TlsContentType contentType, byte[] fragment)
+ {
+ TlsStream data = new TlsStream();
+ byte[] result = null;
+
+ data.Write(this.Context.WriteSequenceNumber);
+ data.Write((byte)contentType);
+ data.Write((short)this.Context.Protocol);
+ data.Write((short)fragment.Length);
+ data.Write(fragment);
+
+ result = this.ClientHMAC.ComputeHash(data.ToArray());
+
+ data.Reset();
+
+ return result;
+ }
+
+ #endregion
+
+ #region Key Generation Methods
+
+ public override void ComputeMasterSecret(byte[] preMasterSecret)
+ {
+ // Create master secret
+ this.Context.MasterSecret = new byte[preMasterSecret.Length];
+ this.Context.MasterSecret = this.PRF(
+ preMasterSecret, "master secret", this.Context.RandomCS, 48);
+ }
+
+ public override void ComputeKeys()
+ {
+ // Create keyblock
+ TlsStream keyBlock = new TlsStream(
+ this.PRF(
+ this.Context.MasterSecret,
+ "key expansion",
+ this.Context.RandomSC,
+ this.KeyBlockSize));
+
+ this.Context.ClientWriteMAC = keyBlock.ReadBytes(this.HashSize);
+ this.Context.ServerWriteMAC = keyBlock.ReadBytes(this.HashSize);
+ this.Context.ClientWriteKey = keyBlock.ReadBytes(this.KeyMaterialSize);
+ this.Context.ServerWriteKey = keyBlock.ReadBytes(this.KeyMaterialSize);
+
+ if (!this.IsExportable)
+ {
+ if (this.IvSize != 0)
+ {
+ this.Context.ClientWriteIV = keyBlock.ReadBytes(this.IvSize);
+ this.Context.ServerWriteIV = keyBlock.ReadBytes(this.IvSize);
+ }
+ else
+ {
+ this.Context.ClientWriteIV = new byte[0];
+ this.Context.ServerWriteIV = new byte[0];
+ }
+ }
+ else
+ {
+ // Generate final write keys
+ byte[] finalClientWriteKey = PRF(this.Context.ClientWriteKey, "client write key", this.Context.RandomCS, this.KeyMaterialSize);
+ byte[] finalServerWriteKey = PRF(this.Context.ServerWriteKey, "server write key", this.Context.RandomCS, this.KeyMaterialSize);
+
+ this.Context.ClientWriteKey = finalClientWriteKey;
+ this.Context.ServerWriteKey = finalServerWriteKey;
+
+ // Generate IV block
+ byte[] ivBlock = PRF(new byte[]{}, "IV block", this.Context.RandomCS, this.IvSize*2);
+
+ // Generate IV keys
+ this.Context.ClientWriteIV = new byte[this.IvSize];
+ System.Array.Copy(ivBlock, 0, this.Context.ClientWriteIV, 0, this.Context.ClientWriteIV.Length);
+
+ this.Context.ServerWriteIV = new byte[this.IvSize];
+ System.Array.Copy(ivBlock, this.IvSize, this.Context.ServerWriteIV, 0, this.Context.ServerWriteIV.Length);
+ }
+
+ // Clear no more needed data
+ keyBlock.Reset();
+ }
+
+ #endregion
+ }
}
\ No newline at end of file
projects / mono.git / blobdiff