package org.spongycastle.openpgp;
import java.io.EOFException;
import java.io.InputStream;
import java.security.NoSuchProviderException;
import java.security.Provider;
import org.spongycastle.bcpg.BCPGInputStream;
import org.spongycastle.bcpg.InputStreamPacket;
import org.spongycastle.bcpg.PublicKeyEncSessionPacket;
import org.spongycastle.bcpg.SymmetricEncIntegrityPacket;
import org.spongycastle.bcpg.SymmetricKeyAlgorithmTags;
import org.spongycastle.openpgp.operator.PGPDataDecryptor;
import org.spongycastle.openpgp.operator.PublicKeyDataDecryptorFactory;
import org.spongycastle.openpgp.operator.jcajce.JcePublicKeyDataDecryptorFactoryBuilder;
import org.spongycastle.util.io.TeeInputStream;
/**
* A public key encrypted data object.
*/
public class PGPPublicKeyEncryptedData
extends PGPEncryptedData
{
PublicKeyEncSessionPacket keyData;
PGPPublicKeyEncryptedData(
PublicKeyEncSessionPacket keyData,
InputStreamPacket encData)
{
super(encData);
this.keyData = keyData;
}
private boolean confirmCheckSum(
byte[] sessionInfo)
{
int check = 0;
for (int i = 1; i != sessionInfo.length - 2; i++)
{
check += sessionInfo[i] & 0xff;
}
return (sessionInfo[sessionInfo.length - 2] == (byte)(check >> 8))
&& (sessionInfo[sessionInfo.length - 1] == (byte)(check));
}
/**
* Return the keyID for the key used to encrypt the data.
*
* @return long
*/
public long getKeyID()
{
return keyData.getKeyID();
}
/**
* Return the algorithm code for the symmetric algorithm used to encrypt the data.
*
* @return integer algorithm code
* @deprecated use the method taking a PublicKeyDataDecryptorFactory
*/
public int getSymmetricAlgorithm(
PGPPrivateKey privKey,
String provider)
throws PGPException, NoSuchProviderException
{
return getSymmetricAlgorithm(privKey, PGPUtil.getProvider(provider));
}
/**
*
* @deprecated use the method taking a PublicKeyDataDecryptorFactory
*/
public int getSymmetricAlgorithm(
PGPPrivateKey privKey,
Provider provider)
throws PGPException, NoSuchProviderException
{
return getSymmetricAlgorithm(new JcePublicKeyDataDecryptorFactoryBuilder().setProvider(provider).setContentProvider(provider).build(privKey));
}
/**
* Return the symmetric key algorithm required to decrypt the data protected by this object.
*
* @param dataDecryptorFactory decryptor factory to use to recover the session data.
* @return the integer encryption algorithm code.
* @throws PGPException if the session data cannot be recovered.
*/
public int getSymmetricAlgorithm(
PublicKeyDataDecryptorFactory dataDecryptorFactory)
throws PGPException
{
byte[] plain = dataDecryptorFactory.recoverSessionData(keyData.getAlgorithm(), keyData.getEncSessionKey());
return plain[0];
}
/**
* Return the decrypted data stream for the packet.
*
* @param privKey private key to use
* @param provider provider to use for private key and symmetric key decryption.
* @return InputStream
* @throws PGPException
* @throws NoSuchProviderException
* @deprecated use method that takes a PublicKeyDataDecryptorFactory
*/
public InputStream getDataStream(
PGPPrivateKey privKey,
String provider)
throws PGPException, NoSuchProviderException
{
return getDataStream(privKey, provider, provider);
}
/**
*
* @param privKey
* @param provider
* @return
* @throws PGPException
* @deprecated use method that takes a PublicKeyDataDecryptorFactory
*/
public InputStream getDataStream(
PGPPrivateKey privKey,
Provider provider)
throws PGPException
{
return getDataStream(privKey, provider, provider);
}
/**
* Return the decrypted data stream for the packet.
*
* @param privKey private key to use.
* @param asymProvider asymetric provider to use with private key.
* @param provider provider to use for symmetric algorithm.
* @return InputStream
* @throws PGPException
* @throws NoSuchProviderException
* @deprecated use method that takes a PublicKeyDataDecryptorFactory
*/
public InputStream getDataStream(
PGPPrivateKey privKey,
String asymProvider,
String provider)
throws PGPException, NoSuchProviderException
{
return getDataStream(privKey, PGPUtil.getProvider(asymProvider), PGPUtil.getProvider(provider));
}
/**
* @deprecated use method that takes a PublicKeyDataDecryptorFactory
*/
public InputStream getDataStream(
PGPPrivateKey privKey,
Provider asymProvider,
Provider provider)
throws PGPException
{
return getDataStream(new JcePublicKeyDataDecryptorFactoryBuilder().setProvider(asymProvider).setContentProvider(provider).build(privKey));
}
/**
* Open an input stream which will provide the decrypted data protected by this object.
*
* @param dataDecryptorFactory decryptor factory to use to recover the session data and provide the stream.
* @return the resulting input stream
* @throws PGPException if the session data cannot be recovered or the stream cannot be created.
*/
public InputStream getDataStream(
PublicKeyDataDecryptorFactory dataDecryptorFactory)
throws PGPException
{
byte[] sessionData = dataDecryptorFactory.recoverSessionData(keyData.getAlgorithm(), keyData.getEncSessionKey());
if (!confirmCheckSum(sessionData))
{
throw new PGPKeyValidationException("key checksum failed");
}
if (sessionData[0] != SymmetricKeyAlgorithmTags.NULL)
{
try
{
boolean withIntegrityPacket = encData instanceof SymmetricEncIntegrityPacket;
byte[] sessionKey = new byte[sessionData.length - 3];
System.arraycopy(sessionData, 1, sessionKey, 0, sessionKey.length);
PGPDataDecryptor dataDecryptor = dataDecryptorFactory.createDataDecryptor(withIntegrityPacket, sessionData[0] & 0xff, sessionKey);
encStream = new BCPGInputStream(dataDecryptor.getInputStream(encData.getInputStream()));
if (withIntegrityPacket)
{
truncStream = new TruncatedStream(encStream);
integrityCalculator = dataDecryptor.getIntegrityCalculator();
encStream = new TeeInputStream(truncStream, integrityCalculator.getOutputStream());
}
byte[] iv = new byte[dataDecryptor.getBlockSize()];
for (int i = 0; i != iv.length; i++)
{
int ch = encStream.read();
if (ch < 0)
{
throw new EOFException("unexpected end of stream.");
}
iv[i] = (byte)ch;
}
int v1 = encStream.read();
int v2 = encStream.read();
if (v1 < 0 || v2 < 0)
{
throw new EOFException("unexpected end of stream.");
}
//
// some versions of PGP appear to produce 0 for the extra
// bytes rather than repeating the two previous bytes
//
/*
* Commented out in the light of the oracle attack.
if (iv[iv.length - 2] != (byte)v1 && v1 != 0)
{
throw new PGPDataValidationException("data check failed.");
}
if (iv[iv.length - 1] != (byte)v2 && v2 != 0)
{
throw new PGPDataValidationException("data check failed.");
}
*/
return encStream;
}
catch (PGPException e)
{
throw e;
}
catch (Exception e)
{
throw new PGPException("Exception starting decryption", e);
}
}
else
{
return encData.getInputStream();
}
}
}