rpm
5.4.10
|
OpenPGP constants and structures from RFC-2440. More...
Go to the source code of this file.
Data Structures | |
struct | pgpValTbl_s |
struct | pgpPktPubkey_s |
5.1. More... | |
struct | pgpPktSigV3_s |
5.2.2. More... | |
struct | pgpPktSigV4_s |
5.2.3. More... | |
union | pgpPktSig_u |
5.2. More... | |
struct | pgpPktSymkey_s |
5.3. More... | |
struct | pgpPktOnepass_s |
5.4. More... | |
struct | pgpPktKeyV3_s |
5.5.1. More... | |
struct | pgpPktKeyV4_s |
The version 4 format is similar to the version 3 format except for the absence of a validity period. More... | |
union | pgpPktKey_u |
5.5.3. More... | |
struct | pgpPktCdata_s |
5.6. More... | |
struct | pgpPktEdata_s |
5.7. More... | |
struct | pgpPktLdata_s |
5.8. More... | |
struct | pgpPktTrust_s |
5.10. More... | |
struct | pgpPktUid_s |
5.11. More... | |
struct | pgpImplVecs_s |
Macros | |
#define | PGPARMOR_ERROR PGPARMOR_ERR_NO_BEGIN_PGP |
#define | pgpDigUnlink(_dig) ((pgpDig)rpmioUnlinkPoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__)) |
#define | pgpDigLink(_dig) ((pgpDig)rpmioLinkPoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__)) |
#define | pgpDigFree(_dig) ((pgpDig)rpmioFreePoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__)) |
#define | CRC24_INIT 0xb704ce |
#define | CRC24_POLY 0x1864cfb |
Typedefs | |
typedef const struct pgpValTbl_s * | pgpValTbl |
typedef enum pgpTag_e | pgpTag |
4.3. More... | |
typedef struct pgpPktPubkey_s | pgpPktPubkey |
5.1. More... | |
typedef enum pgpSigType_e | pgpSigType |
5.2.1. More... | |
typedef enum pgpPubkeyAlgo_e | pgpPubkeyAlgo |
9.1. More... | |
typedef enum pgpSymkeyAlgo_e | pgpSymkeyAlgo |
9.2. More... | |
typedef enum pgpCompressAlgo_e | pgpCompressAlgo |
9.3. More... | |
typedef struct pgpPktSigV3_s * | pgpPktSigV3 |
5.2.2. More... | |
typedef struct pgpPktSigV4_s * | pgpPktSigV4 |
5.2.3. More... | |
typedef enum pgpSubType_e | pgpSubType |
5.2.3.1. More... | |
typedef union pgpPktSig_u * | pgpPktSig |
5.2. More... | |
typedef struct pgpPktSymkey_s | pgpPktSymkey |
5.3. More... | |
typedef struct pgpPktOnepass_s * | pgpPktOnepass |
5.4. More... | |
typedef struct pgpPktKeyV3_s * | pgpPktKeyV3 |
5.5.1. More... | |
typedef struct pgpPktKeyV4_s * | pgpPktKeyV4 |
The version 4 format is similar to the version 3 format except for the absence of a validity period. More... | |
typedef union pgpPktKey_u | pgpPktKey |
5.5.3. More... | |
typedef struct pgpPktCdata_s | pgpPktCdata |
5.6. More... | |
typedef struct pgpPktEdata_s | pgpPktEdata |
5.7. More... | |
typedef struct pgpPktLdata_s | pgpPktLdata |
5.8. More... | |
typedef struct pgpPktTrust_s | pgpPktTrust |
5.10. More... | |
typedef struct pgpPktUid_s | pgpPktUid |
5.11. More... | |
typedef enum pgpArmor_e | pgpArmor |
typedef enum pgpArmorKey_e | pgpArmorKey |
typedef int(* | pgpImplSet_t) (DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp) |
typedef int(* | pgpImplErrChk_t) (pgpDig dig, const char *msg, int rc, unsigned expected) |
typedef int(* | pgpImplAvailable_t) (pgpDig dig, int algo) |
typedef int(* | pgpImplGenerate_t) (pgpDig dig) |
typedef int(* | pgpImplSign_t) (pgpDig dig) |
typedef int(* | pgpImplVerify_t) (pgpDig dig) |
typedef int(* | pgpImplMpiItem_t) (const char *pre, pgpDig dig, int itemno, const rpmuint8_t *p, const rpmuint8_t *pend) |
typedef void(* | pgpImplClean_t) (void *impl) |
typedef void *(* | pgpImplFree_t) (void *impl) |
typedef void *(* | pgpImplInit_t) (void) |
typedef struct pgpImplVecs_s | pgpImplVecs_t |
Functions | |
static unsigned int | pgpGrab (const rpmuint8_t *s, size_t nbytes) |
Return (native-endian) integer from big-endian representation. More... | |
static unsigned int | pgpLen (const rpmuint8_t *s, unsigned int *lenp) |
Return length of an OpenPGP packet. More... | |
static unsigned int | pgpMpiBits (const rpmuint8_t *p) |
Return no. More... | |
static unsigned int | pgpMpiLen (const rpmuint8_t *p) |
Return no. More... | |
static char * | pgpHexCvt (char *t, const rpmuint8_t *s, size_t nbytes) |
Convert to hex. More... | |
static char * | pgpHexStr (const rpmuint8_t *p, size_t plen) |
Return hex formatted representation of bytes. More... | |
static const char * | pgpMpiStr (const rpmuint8_t *p) |
Return hex formatted representation of a multiprecision integer. More... | |
static const char * | pgpValStr (pgpValTbl vs, rpmuint8_t val) |
Return string representation of am OpenPGP value. More... | |
static int | pgpValTok (pgpValTbl vs, const char *s, const char *se) |
Return value of an OpenPGP string. More... | |
void | pgpPrtVal (const char *pre, pgpValTbl vs, rpmuint8_t val) |
Print an OpenPGP value. More... | |
int | pgpPubkeyFingerprint (const rpmuint8_t *pkt, size_t pktlen, rpmuint8_t *keyid) |
Print/parse an OpenPGP subtype packet. More... | |
int | pgpExtractPubkeyFingerprint (const char *b64pkt, rpmuint8_t *keyid) |
Extract OpenPGP public key fingerprint from base64 encoded packet. More... | |
int | pgpPrtPkt (const rpmuint8_t *pkt, size_t pleft) |
Return lenth of a OpenPGP packet. More... | |
int | pgpGrabPkts (const rpmuint8_t *pkts, size_t pktlen, rpmuint8_t ***pppkts, int *pnpkts) |
Return array of packet pointers. More... | |
int | pgpPrtPkts (const rpmuint8_t *pkts, size_t pktlen, pgpDig dig, int printing) |
Print/parse a OpenPGP packet(s). More... | |
pgpArmor | pgpArmorUnwrap (rpmiob iob, rpmuint8_t **pkt, size_t *pktlen) |
Parse armored OpenPGP packets from an iob. More... | |
pgpArmor | pgpReadPkts (const char *fn, rpmuint8_t **pkt, size_t *pktlen) |
Parse armored OpenPGP packets from a file. More... | |
char * | pgpArmorWrap (rpmuint8_t atype, const unsigned char *s, size_t ns) |
Wrap a OpenPGP packets in ascii armor for transport. More... | |
pgpHashAlgo | pgpHashAlgoStringToNumber (const char *name, size_t name_len) |
Convert a hash algorithm "foo" to the internal PGPHASHALGO_FOO number. More... | |
pgpDig | pgpDigUnlink (pgpDig dig) |
Unreference a signature parameters instance. More... | |
pgpDig | pgpDigLink (pgpDig dig) |
Reference a signature parameters instance. More... | |
pgpDig | pgpDigFree (pgpDig dig) |
Destroy a container for parsed OpenPGP packates. More... | |
pgpDig | pgpDigNew (pgpVSFlags vsflags, pgpPubkeyAlgo pubkey_algo) |
Create a container for parsed OpenPGP packates. More... | |
int | rpmbcExportPubkey (pgpDig dig) |
int | rpmbcExportSignature (pgpDig dig, DIGEST_CTX ctx) |
void | pgpDigClean (pgpDig dig) |
Release (malloc'd) data from container. More... | |
pgpDigParams | pgpGetPubkey (const pgpDig dig) |
Return OpenPGP pubkey parameters. More... | |
pgpDigParams | pgpGetSignature (const pgpDig dig) |
Return OpenPGP signature parameters. More... | |
rpmuint32_t | pgpGetSigtag (const pgpDig dig) |
Get signature tag. More... | |
rpmuint32_t | pgpGetSigtype (const pgpDig dig) |
Get signature tag type. More... | |
const void * | pgpGetSig (const pgpDig dig) |
Get signature tag data, i.e. More... | |
rpmuint32_t | pgpGetSiglen (const pgpDig dig) |
Get signature tag data length, i.e. More... | |
int | pgpSetSig (pgpDig dig, rpmuint32_t sigtag, rpmuint32_t sigtype, const void *sig, rpmuint32_t siglen) |
Set signature tag info, i.e. More... | |
void * | pgpStatsAccumulator (pgpDig dig, int opx) |
Return pgpDig container accumulator structure. More... | |
int | pgpSetFindPubkey (pgpDig dig, int(*findPubkey)(void *ts, void *dig), void *_ts) |
Set find pubkey vector. More... | |
int | pgpFindPubkey (pgpDig dig) |
Call find pubkey vector. More... | |
static int | pgpIsPkt (const rpmuint8_t *p, pgpTag *tagp) |
Is buffer at beginning of an OpenPGP packet? More... | |
static unsigned int | pgpCRC (const rpmuint8_t *octets, size_t len) |
Return CRC of a buffer. More... | |
static int | pgpImplSetRSA (DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp) |
static int | pgpImplSetDSA (DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp) |
static int | pgpImplSetELG (DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp) |
static int | pgpImplSetECDSA (DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp) |
static int | pgpImplErrChk (pgpDig dig, const char *msg, int rc, unsigned expected) |
static int | pgpImplAvailableCipher (pgpDig dig, int algo) |
static int | pgpImplAvailableDigest (pgpDig dig, int algo) |
static int | pgpImplAvailablePubkey (pgpDig dig, int algo) |
static int | pgpImplVerify (pgpDig dig) |
static int | pgpImplSign (pgpDig dig) |
static int | pgpImplGenerate (pgpDig dig) |
static int | pgpImplMpiItem (const char *pre, pgpDig dig, int itemno, const rpmuint8_t *p, const rpmuint8_t *pend) |
static void | pgpImplClean (void *impl) |
static void * | pgpImplFree (void *impl) |
static void * | pgpImplInit (void) |
Variables | |
struct pgpValTbl_s | pgpTagTbl [] |
struct pgpValTbl_s | pgpSigTypeTbl [] |
struct pgpValTbl_s | pgpPubkeyTbl [] |
struct pgpValTbl_s | pgpSymkeyTbl [] |
Symmetric key (string, value) pairs. More... | |
struct pgpValTbl_s | pgpCompressionTbl [] |
Compression (string, value) pairs. More... | |
struct pgpValTbl_s | pgpHashTbl [] |
Hash (string, value) pairs. More... | |
struct pgpValTbl_s | pgpSubTypeTbl [] |
Subtype (string, value) pairs. More... | |
struct pgpValTbl_s | pgpArmorTbl [] |
Armor (string, value) pairs. More... | |
struct pgpValTbl_s | pgpArmorKeyTbl [] |
Armor key (string, value) pairs. More... | |
pgpVSFlags | pgpDigVSFlags |
Disabler bits(s) for signature/digest checking. More... | |
pgpImplVecs_t * | pgpImplVecs |
OpenPGP constants and structures from RFC-2440.
Text from RFC-2440 in comments is Copyright (C) The Internet Society (1998). All Rights Reserved.
Definition in file rpmpgp.h.
#define PGPARMOR_ERROR PGPARMOR_ERR_NO_BEGIN_PGP |
#define pgpDigFree | ( | _dig | ) | ((pgpDig)rpmioFreePoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__)) |
#define pgpDigLink | ( | _dig | ) | ((pgpDig)rpmioLinkPoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__)) |
#define pgpDigUnlink | ( | _dig | ) | ((pgpDig)rpmioUnlinkPoolItem((rpmioItem)(_dig), __FUNCTION__, __FILE__, __LINE__)) |
Definition at line 1447 of file rpmpgp.h.
Referenced by pgpValTok().
typedef enum pgpArmor_e pgpArmor |
typedef enum pgpArmorKey_e pgpArmorKey |
typedef enum pgpCompressAlgo_e pgpCompressAlgo |
9.3.
Compression Algorithms
ID Algorithm -- --------- 0 - Uncompressed 1 - ZIP (RFC 1951) 2 - ZLIB (RFC 1950) 100 to 110 - Private/Experimental algorithm.
Implementations MUST implement uncompressed data. Implementations SHOULD implement ZIP. Implementations MAY implement ZLIB.
typedef int(* pgpImplErrChk_t) (pgpDig dig, const char *msg, int rc, unsigned expected) |
typedef int(* pgpImplMpiItem_t) (const char *pre, pgpDig dig, int itemno, const rpmuint8_t *p, const rpmuint8_t *pend) |
typedef int(* pgpImplSet_t) (DIGEST_CTX ctx, pgpDig dig, pgpDigParams sigp) |
typedef struct pgpImplVecs_s pgpImplVecs_t |
typedef struct pgpPktCdata_s pgpPktCdata |
5.6.
Compressed Data Packet (Tag 8)
The Compressed Data packet contains compressed data. Typically, this packet is found as the contents of an encrypted packet, or following a Signature or One-Pass Signature packet, and contains literal data packets.
The body of this packet consists of:
A Compressed Data Packet's body contains an block that compresses some set of packets. See section "Packet Composition" for details on how messages are formed.
ZIP-compressed packets are compressed with raw RFC 1951 DEFLATE blocks. Note that PGP V2.6 uses 13 bits of compression. If an implementation uses more bits of compression, PGP V2.6 cannot decompress it.
ZLIB-compressed packets are compressed with RFC 1950 ZLIB-style blocks.
typedef struct pgpPktEdata_s pgpPktEdata |
5.7.
Symmetrically Encrypted Data Packet (Tag 9)
The Symmetrically Encrypted Data packet contains data encrypted with a symmetric-key algorithm. When it has been decrypted, it will typically contain other packets (often literal data packets or compressed data packets).
The body of this packet consists of:
The symmetric cipher used may be specified in an Public-Key or Symmetric-Key Encrypted Session Key packet that precedes the Symmetrically Encrypted Data Packet. In that case, the cipher algorithm octet is prefixed to the session key before it is encrypted. If no packets of these types precede the encrypted data, the IDEA algorithm is used with the session key calculated as the MD5 hash of the passphrase.
The data is encrypted in CFB mode, with a CFB shift size equal to the cipher's block size. The Initial Vector (IV) is specified as all zeros. Instead of using an IV, OpenPGP prefixes a 10-octet string to the data before it is encrypted. The first eight octets are random, and the 9th and 10th octets are copies of the 7th and 8th octets, respectively. After encrypting the first 10 octets, the CFB state is resynchronized if the cipher block size is 8 octets or less. The last 8 octets of ciphertext are passed through the cipher and the block boundary is reset.
The repetition of 16 bits in the 80 bits of random data prefixed to the message allows the receiver to immediately check whether the session key is incorrect.
typedef union pgpPktKey_u pgpPktKey |
5.5.3.
Secret Key Packet Formats
The Secret Key and Secret Subkey packets contain all the data of the Public Key and Public Subkey packets, with additional algorithm- specific secret key data appended, in encrypted form.
The packet contains:
Two-octet checksum of the plaintext of the algorithm-specific portion (sum of all octets, mod 65536).
Algorithm Specific Fields for RSA secret keys:
Algorithm Specific Fields for DSA secret keys:
Algorithm Specific Fields for Elgamal secret keys:
Secret MPI values can be encrypted using a passphrase. If a string- to-key specifier is given, that describes the algorithm for converting the passphrase to a key, else a simple MD5 hash of the passphrase is used. Implementations SHOULD use a string-to-key specifier; the simple hash is for backward compatibility. The cipher for encrypting the MPIs is specified in the secret key packet.
Encryption/decryption of the secret data is done in CFB mode using the key created from the passphrase and the Initial Vector from the packet. A different mode is used with V3 keys (which are only RSA) than with other key formats. With V3 keys, the MPI bit count prefix (i.e., the first two octets) is not encrypted. Only the MPI non- prefix data is encrypted. Furthermore, the CFB state is resynchronized at the beginning of each new MPI value, so that the CFB block boundary is aligned with the start of the MPI data.
With V4 keys, a simpler method is used. All secret MPI values are encrypted in CFB mode, including the MPI bitcount prefix.
The 16-bit checksum that follows the algorithm-specific portion is the algebraic sum, mod 65536, of the plaintext of all the algorithm- specific octets (including MPI prefix and data). With V3 keys, the checksum is stored in the clear. With V4 keys, the checksum is encrypted like the algorithm-specific data. This value is used to check that the passphrase was correct.
typedef struct pgpPktKeyV3_s * pgpPktKeyV3 |
5.5.1.
Key Packet Variants
5.5.1.1. Public Key Packet (Tag 6)
A Public Key packet starts a series of packets that forms an OpenPGP key (sometimes called an OpenPGP certificate).
5.5.1.2. Public Subkey Packet (Tag 14)
A Public Subkey packet (tag 14) has exactly the same format as a Public Key packet, but denotes a subkey. One or more subkeys may be associated with a top-level key. By convention, the top-level key provides signature services, and the subkeys provide encryption services.
Note: in PGP 2.6.x, tag 14 was intended to indicate a comment packet. This tag was selected for reuse because no previous version of PGP ever emitted comment packets but they did properly ignore them. Public Subkey packets are ignored by PGP 2.6.x and do not cause it to fail, providing a limited degree of backward compatibility.
5.5.1.3. Secret Key Packet (Tag 5)
A Secret Key packet contains all the information that is found in a Public Key packet, including the public key material, but also includes the secret key material after all the public key fields.
5.5.1.4. Secret Subkey Packet (Tag 7)
A Secret Subkey packet (tag 7) is the subkey analog of the Secret Key packet, and has exactly the same format.
5.5.2. Public Key Packet Formats
There are two versions of key-material packets. Version 3 packets were first generated by PGP 2.6. Version 2 packets are identical in format to Version 3 packets, but are generated by PGP 2.5 or before. V2 packets are deprecated and they MUST NOT be generated. PGP 5.0 introduced version 4 packets, with new fields and semantics. PGP 2.6.x will not accept key-material packets with versions greater than 3.
OpenPGP implementations SHOULD create keys with version 4 format. An implementation MAY generate a V3 key to ensure interoperability with old software; note, however, that V4 keys correct some security deficiencies in V3 keys. These deficiencies are described below. An implementation MUST NOT create a V3 key with a public key algorithm other than RSA.
A version 3 public key or public subkey packet contains:
V3 keys SHOULD only be used for backward compatibility because of three weaknesses in them. First, it is relatively easy to construct a V3 key that has the same key ID as any other key because the key ID is simply the low 64 bits of the public modulus. Secondly, because the fingerprint of a V3 key hashes the key material, but not its length, which increases the opportunity for fingerprint collisions. Third, there are minor weaknesses in the MD5 hash algorithm that make developers prefer other algorithms. See below for a fuller discussion of key IDs and fingerprints.
typedef struct pgpPktKeyV4_s * pgpPktKeyV4 |
The version 4 format is similar to the version 3 format except for the absence of a validity period.
This has been moved to the signature packet. In addition, fingerprints of version 4 keys are calculated differently from version 3 keys, as described in section "Enhanced Key Formats."
A version 4 packet contains:
A series of multi-precision integers comprising the key material. This algorithm-specific portion is:
Algorithm Specific Fields for RSA public keys:
Algorithm Specific Fields for DSA public keys:
Algorithm Specific Fields for Elgamal public keys:
typedef struct pgpPktLdata_s pgpPktLdata |
5.8.
Marker Packet (Obsolete Literal Packet) (Tag 10)
An experimental version of PGP used this packet as the Literal packet, but no released version of PGP generated Literal packets with this tag. With PGP 5.x, this packet has been re-assigned and is reserved for use as the Marker packet.
The body of this packet consists of:
Such a packet MUST be ignored when received. It may be placed at the beginning of a message that uses features not available in PGP 2.6.x in order to cause that version to report that newer software is necessary to process the message.
typedef struct pgpPktOnepass_s * pgpPktOnepass |
5.4.
One-Pass Signature Packets (Tag 4)
The One-Pass Signature packet precedes the signed data and contains enough information to allow the receiver to begin calculating any hashes needed to verify the signature. It allows the Signature Packet to be placed at the end of the message, so that the signer can compute the entire signed message in one pass.
A One-Pass Signature does not interoperate with PGP 2.6.x or earlier.
The body of this packet consists of:
Note that if a message contains more than one one-pass signature, then the signature packets bracket the message; that is, the first signature packet after the message corresponds to the last one-pass packet and the final signature packet corresponds to the first one- pass packet.
typedef struct pgpPktPubkey_s pgpPktPubkey |
5.1.
Public-Key Encrypted Session Key Packets (Tag 1)
A Public-Key Encrypted Session Key packet holds the session key used to encrypt a message. Zero or more Encrypted Session Key packets (either Public-Key or Symmetric-Key) may precede a Symmetrically Encrypted Data Packet, which holds an encrypted message. The message is encrypted with the session key, and the session key is itself encrypted and stored in the Encrypted Session Key packet(s). The Symmetrically Encrypted Data Packet is preceded by one Public-Key Encrypted Session Key packet for each OpenPGP key to which the message is encrypted. The recipient of the message finds a session key that is encrypted to their public key, decrypts the session key, and then uses the session key to decrypt the message.
The body of this packet consists of:
Algorithm Specific Fields for RSA encryption
Algorithm Specific Fields for Elgamal encryption:
typedef union pgpPktSig_u * pgpPktSig |
5.2.
Signature Packet (Tag 2)
A signature packet describes a binding between some public key and some data. The most common signatures are a signature of a file or a block of text, and a signature that is a certification of a user ID.
Two versions of signature packets are defined. Version 3 provides basic signature information, while version 4 provides an expandable format with subpackets that can specify more information about the signature. PGP 2.6.x only accepts version 3 signatures.
Implementations MUST accept V3 signatures. Implementations SHOULD generate V4 signatures. Implementations MAY generate a V3 signature that can be verified by PGP 2.6.x.
Note that if an implementation is creating an encrypted and signed message that is encrypted to a V3 key, it is reasonable to create a V3 signature.
typedef struct pgpPktSigV3_s * pgpPktSigV3 |
5.2.2.
Version 3 Signature Packet Format
The body of a version 3 Signature Packet contains:
Algorithm Specific Fields for RSA signatures:
Algorithm Specific Fields for DSA signatures:
typedef struct pgpPktSigV4_s * pgpPktSigV4 |
5.2.3.
Version 4 Signature Packet Format
The body of a version 4 Signature Packet contains:
typedef struct pgpPktSymkey_s pgpPktSymkey |
5.3.
Symmetric-Key Encrypted Session-Key Packets (Tag 3)
The Symmetric-Key Encrypted Session Key packet holds the symmetric- key encryption of a session key used to encrypt a message. Zero or more Encrypted Session Key packets and/or Symmetric-Key Encrypted Session Key packets may precede a Symmetrically Encrypted Data Packet that holds an encrypted message. The message is encrypted with a session key, and the session key is itself encrypted and stored in the Encrypted Session Key packet or the Symmetric-Key Encrypted Session Key packet.
If the Symmetrically Encrypted Data Packet is preceded by one or more Symmetric-Key Encrypted Session Key packets, each specifies a passphrase that may be used to decrypt the message. This allows a message to be encrypted to a number of public keys, and also to one or more pass phrases. This packet type is new, and is not generated by PGP 2.x or PGP 5.0.
The body of this packet consists of:
typedef struct pgpPktTrust_s pgpPktTrust |
5.10.
Trust Packet (Tag 12)
The Trust packet is used only within keyrings and is not normally exported. Trust packets contain data that record the user's specifications of which key holders are trustworthy introducers, along with other information that implementing software uses for trust information.
Trust packets SHOULD NOT be emitted to output streams that are transferred to other users, and they SHOULD be ignored on any input other than local keyring files.
typedef struct pgpPktUid_s pgpPktUid |
5.11.
User ID Packet (Tag 13)
A User ID packet consists of data that is intended to represent the name and email address of the key holder. By convention, it includes an RFC 822 mail name, but there are no restrictions on its content. The packet length in the header specifies the length of the user id. If it is text, it is encoded in UTF-8.
typedef enum pgpPubkeyAlgo_e pgpPubkeyAlgo |
9.1.
Public Key Algorithms
ID Algorithm -- --------- 1 - RSA (Encrypt or Sign) 2 - RSA Encrypt-Only 3 - RSA Sign-Only 16 - Elgamal (Encrypt-Only), see [ELGAMAL] 17 - DSA (Digital Signature Standard) 18 - Reserved for Elliptic Curve 19 - Reserved for ECDSA 20 - Elgamal (Encrypt or Sign) 21 - Reserved for Diffie-Hellman (X9.42, as defined for IETF-S/MIME) 100 to 110 - Private/Experimental algorithm.
Implementations MUST implement DSA for signatures, and Elgamal for encryption. Implementations SHOULD implement RSA keys. Implementations MAY implement any other algorithm.
typedef enum pgpSigType_e pgpSigType |
5.2.1.
Signature Types
There are a number of possible meanings for a signature, which are specified in a signature type octet in any given signature.
typedef enum pgpSubType_e pgpSubType |
5.2.3.1.
Signature Subpacket Specification
The subpacket fields consist of zero or more signature subpackets. Each set of subpackets is preceded by a two-octet scalar count of the length of the set of subpackets.
Each subpacket consists of a subpacket header and a body. The header consists of:
The length includes the type octet but not this length. Its format is similar to the "new" format packet header lengths, but cannot have partial body lengths. That is:
if the 1st octet < 192, then lengthOfLength = 1 subpacketLen = 1st_octet if the 1st octet >= 192 and < 255, then lengthOfLength = 2 subpacketLen = ((1st_octet - 192) << 8) + (2nd_octet) + 192 if the 1st octet = 255, then lengthOfLength = 5 subpacket length = [four-octet scalar starting at 2nd_octet]
The value of the subpacket type octet may be:
0 = reserved 1 = reserved 2 = signature creation time 3 = signature expiration time 4 = exportable certification 5 = trust signature 6 = regular expression 7 = revocable 8 = reserved 9 = key expiration time 10 = placeholder for backward compatibility 11 = preferred symmetric algorithms 12 = revocation key 13 = reserved 14 = reserved 15 = reserved 16 = issuer key ID 17 = reserved 18 = reserved 19 = reserved 20 = notation data 21 = preferred hash algorithms 22 = preferred compression algorithms 23 = key server preferences 24 = preferred key server 25 = primary user id 26 = policy URL 27 = key flags 28 = signer's user id 29 = reason for revocation 30 = features 31 = signature target 32 = embedded signature 100 to 110 = internal or user-defined
An implementation SHOULD ignore any subpacket of a type that it does not recognize.
Bit 7 of the subpacket type is the "critical" bit. If set, it denotes that the subpacket is one that is critical for the evaluator of the signature to recognize. If a subpacket is encountered that is marked critical but is unknown to the evaluating software, the evaluator SHOULD consider the signature to be in error.
typedef enum pgpSymkeyAlgo_e pgpSymkeyAlgo |
9.2.
Symmetric Key Algorithms
ID Algorithm -- --------- 0 - Plaintext or unencrypted data 1 - IDEA [IDEA] 2 - Triple-DES (DES-EDE, as per spec - 168 bit key derived from 192) 3 - CAST5 (128 bit key, as per RFC 2144) 4 - Blowfish (128 bit key, 16 rounds) [BLOWFISH] 5 - SAFER-SK128 (13 rounds) [SAFER] 6 - Reserved for DES/SK 7 - AES with 128-bit key 8 - AES with 192-bit key 9 - AES with 256-bit key 10 - Twofish with 256-bit key 100 to 110 - Private/Experimental algorithm.
Implementations MUST implement Triple-DES. Implementations SHOULD implement IDEA and CAST5. Implementations MAY implement any other algorithm.
4.3.
Packet Tags
The packet tag denotes what type of packet the body holds. Note that old format headers can only have tags less than 16, whereas new format headers can have tags as great as 63.
typedef const struct pgpValTbl_s * pgpValTbl |
enum pgpArmor_e |
enum pgpArmorKey_e |
enum pgpCompressAlgo_e |
9.3.
Compression Algorithms
ID Algorithm -- --------- 0 - Uncompressed 1 - ZIP (RFC 1951) 2 - ZLIB (RFC 1950) 100 to 110 - Private/Experimental algorithm.
Implementations MUST implement uncompressed data. Implementations SHOULD implement ZIP. Implementations MAY implement ZLIB.
Enumerator | |
---|---|
PGPCOMPRESSALGO_NONE | Uncompressed |
PGPCOMPRESSALGO_ZIP | ZIP |
PGPCOMPRESSALGO_ZLIB | ZLIB |
PGPCOMPRESSALGO_BZIP2 | BZIP2 |
enum pgpPubkeyAlgo_e |
9.1.
Public Key Algorithms
ID Algorithm -- --------- 1 - RSA (Encrypt or Sign) 2 - RSA Encrypt-Only 3 - RSA Sign-Only 16 - Elgamal (Encrypt-Only), see [ELGAMAL] 17 - DSA (Digital Signature Standard) 18 - Reserved for Elliptic Curve 19 - Reserved for ECDSA 20 - Elgamal (Encrypt or Sign) 21 - Reserved for Diffie-Hellman (X9.42, as defined for IETF-S/MIME) 100 to 110 - Private/Experimental algorithm.
Implementations MUST implement DSA for signatures, and Elgamal for encryption. Implementations SHOULD implement RSA keys. Implementations MAY implement any other algorithm.
enum pgpSigType_e |
5.2.1.
Signature Types
There are a number of possible meanings for a signature, which are specified in a signature type octet in any given signature.
enum pgpSubType_e |
5.2.3.1.
Signature Subpacket Specification
The subpacket fields consist of zero or more signature subpackets. Each set of subpackets is preceded by a two-octet scalar count of the length of the set of subpackets.
Each subpacket consists of a subpacket header and a body. The header consists of:
The length includes the type octet but not this length. Its format is similar to the "new" format packet header lengths, but cannot have partial body lengths. That is:
if the 1st octet < 192, then lengthOfLength = 1 subpacketLen = 1st_octet if the 1st octet >= 192 and < 255, then lengthOfLength = 2 subpacketLen = ((1st_octet - 192) << 8) + (2nd_octet) + 192 if the 1st octet = 255, then lengthOfLength = 5 subpacket length = [four-octet scalar starting at 2nd_octet]
The value of the subpacket type octet may be:
0 = reserved 1 = reserved 2 = signature creation time 3 = signature expiration time 4 = exportable certification 5 = trust signature 6 = regular expression 7 = revocable 8 = reserved 9 = key expiration time 10 = placeholder for backward compatibility 11 = preferred symmetric algorithms 12 = revocation key 13 = reserved 14 = reserved 15 = reserved 16 = issuer key ID 17 = reserved 18 = reserved 19 = reserved 20 = notation data 21 = preferred hash algorithms 22 = preferred compression algorithms 23 = key server preferences 24 = preferred key server 25 = primary user id 26 = policy URL 27 = key flags 28 = signer's user id 29 = reason for revocation 30 = features 31 = signature target 32 = embedded signature 100 to 110 = internal or user-defined
An implementation SHOULD ignore any subpacket of a type that it does not recognize.
Bit 7 of the subpacket type is the "critical" bit. If set, it denotes that the subpacket is one that is critical for the evaluator of the signature to recognize. If a subpacket is encountered that is marked critical but is unknown to the evaluating software, the evaluator SHOULD consider the signature to be in error.
enum pgpSymkeyAlgo_e |
9.2.
Symmetric Key Algorithms
ID Algorithm -- --------- 0 - Plaintext or unencrypted data 1 - IDEA [IDEA] 2 - Triple-DES (DES-EDE, as per spec - 168 bit key derived from 192) 3 - CAST5 (128 bit key, as per RFC 2144) 4 - Blowfish (128 bit key, 16 rounds) [BLOWFISH] 5 - SAFER-SK128 (13 rounds) [SAFER] 6 - Reserved for DES/SK 7 - AES with 128-bit key 8 - AES with 192-bit key 9 - AES with 256-bit key 10 - Twofish with 256-bit key 100 to 110 - Private/Experimental algorithm.
Implementations MUST implement Triple-DES. Implementations SHOULD implement IDEA and CAST5. Implementations MAY implement any other algorithm.
enum pgpTag_e |
4.3.
Packet Tags
The packet tag denotes what type of packet the body holds. Note that old format headers can only have tags less than 16, whereas new format headers can have tags as great as 63.
pgpArmor pgpArmorUnwrap | ( | rpmiob | iob, |
rpmuint8_t ** | pkt, | ||
size_t * | pktlen | ||
) |
Parse armored OpenPGP packets from an iob.
iob | I/O buffer |
pkt | dearmored OpenPGP packet(s) |
pktlen | dearmored OpenPGP packet(s) length in bytes |
Definition at line 1397 of file rpmpgp.c.
References _free(), alloca(), crc(), PGPARMOR_ERR_BODY_DECODE, PGPARMOR_ERR_CRC_CHECK, PGPARMOR_ERR_CRC_DECODE, PGPARMOR_ERR_NO_BEGIN_PGP, PGPARMOR_ERR_NO_END_PGP, PGPARMOR_ERR_UNKNOWN_ARMOR_TYPE, PGPARMOR_FILE, PGPARMOR_MESSAGE, PGPARMOR_NONE, PGPARMOR_PRIVKEY, PGPARMOR_PUBKEY, PGPARMOR_SECKEY, PGPARMOR_SIGNATURE, PGPARMOR_SIGNED_MESSAGE, pgpCRC(), pgpGrab(), pgpIsPkt(), pgpPktLen(), PGPTAG_PUBLIC_KEY, PGPTAG_SECRET_KEY, PGPTAG_SIGNATURE, pgpValTok(), and TOKEQ.
Referenced by pgpReadPkts(), pgpValTok(), readFile(), and rpmReadPackageFile().
char* pgpArmorWrap | ( | rpmuint8_t | atype, |
const unsigned char * | s, | ||
size_t | ns | ||
) |
Wrap a OpenPGP packets in ascii armor for transport.
atype | type of armor |
s | binary pkt data |
ns | binary pkt data length |
Definition at line 1574 of file rpmpgp.c.
References _free(), pgpValStr(), stpcpy(), pgpValTbl_s::val, VERSION, and xmalloc.
Referenced by armorFormat(), pgpValTok(), processMetadataFile(), and writeRPM().
|
inlinestatic |
Return CRC of a buffer.
octets | bytes |
len | no. of bytes |
Definition at line 1658 of file rpmpgp.h.
References crc(), CRC24_INIT, and CRC24_POLY.
Referenced by pgpArmorUnwrap().
void pgpDigClean | ( | pgpDig | dig | ) |
Release (malloc'd) data from container.
dig | signature parameters container |
Definition at line 1107 of file rpmpgp.c.
References _free(), and pgpImplClean().
Referenced by pgpDigFini(), and rpmVerifySignatures().
Destroy a container for parsed OpenPGP packates.
dig | signature parameters container |
Referenced by fdFini(), fdSetDig(), getSignid(), makeGPGSignature(), pgpPrtPkts(), pgpsigFormat(), rpmcliImportPubkey(), rpmReadHeader(), rpmts_HdrCheck(), rpmtsCleanDig(), and specFini().
Reference a signature parameters instance.
dig | signature parameters |
Referenced by fdSetDig(), pgpDigNew(), pgpPrtPkts(), and rpmReadHeader().
pgpDig pgpDigNew | ( | pgpVSFlags | vsflags, |
pgpPubkeyAlgo | pubkey_algo | ||
) |
Create a container for parsed OpenPGP packates.
Generate a keypair (if requested).
vsflags | verify signature flags (usually 0) |
pubkey_algo | pubkey algorithm (0 disables) |
Definition at line 1206 of file rpmpgp.c.
References digGetPool(), pgpDigLink(), pgpDigVSFlags, pgpGetPubkey(), pgpImplGenerate(), pgpImplInit(), rpmbcExportPubkey(), rpmbcImplVecs, and RPMVSF_DEFAULT.
Referenced by buildSpec(), getSignid(), makeGPGSignature(), pgpsigFormat(), rpmcliImportPubkey(), rpmReadHeader(), rpmts_HdrCheck(), and rpmtsDig().
Unreference a signature parameters instance.
dig | signature parameters |
int pgpExtractPubkeyFingerprint | ( | const char * | b64pkt, |
rpmuint8_t * | keyid | ||
) |
Extract OpenPGP public key fingerprint from base64 encoded packet.
b64pkt | base64 encoded openpgp packet |
keyid[8] | public key fingerprint |
Definition at line 1029 of file rpmpgp.c.
References _free(), and pgpPubkeyFingerprint().
Referenced by loadDBT(), and pgpValTok().
int pgpFindPubkey | ( | pgpDig | dig | ) |
Call find pubkey vector.
dig | signature parameters container |
Definition at line 1299 of file rpmpgp.c.
Referenced by rpmnsProbeSignature(), verifyDSA(), and verifyRSA().
pgpDigParams pgpGetPubkey | ( | const pgpDig | dig | ) |
Return OpenPGP pubkey parameters.
dig | signature parameters container |
Definition at line 1232 of file rpmpgp.c.
Referenced by pgpDigNew(), rpmbcExportPubkey(), rpmbcExportSignature(), rpmbcGenerate(), rpmbcSetDSA(), rpmbcSetECDSA(), rpmbcSetELG(), rpmbcSetRSA(), rpmbcSign(), rpmbcVerify(), rpmcliImportPubkey(), rpmnsProbeSignature(), rpmtsFindPubkey(), and rpmtsPubkey().
const void* pgpGetSig | ( | const pgpDig | dig | ) |
Get signature tag data, i.e.
from header.
dig | signature parameters container |
Definition at line 1247 of file rpmpgp.c.
Referenced by headerCheck(), pgpStashKeyid(), rpmVerifySignature(), verifyDSA(), verifyMD5(), verifyRSA(), verifySHA1(), and verifySize().
rpmuint32_t pgpGetSiglen | ( | const pgpDig | dig | ) |
Get signature tag data length, i.e.
no. of bytes of data.
dig | signature parameters container |
Definition at line 1252 of file rpmpgp.c.
Referenced by rpmVerifySignature(), verifyDSA(), verifyMD5(), verifyRSA(), and verifySHA1().
pgpDigParams pgpGetSignature | ( | const pgpDig | dig | ) |
Return OpenPGP signature parameters.
dig | signature parameters container |
Definition at line 1227 of file rpmpgp.c.
Referenced by makeGPGSignature(), pgpsigFormat(), pgpStashKeyid(), rpmbcExportSignature(), rpmbcGenerate(), rpmbcSign(), rpmbcVerify(), rpmnsProbeSignature(), rpmtsFindPubkey(), rpmVerifySignatures(), verifyDSA(), verifyRSA(), and writeRPM().
rpmuint32_t pgpGetSigtag | ( | const pgpDig | dig | ) |
Get signature tag.
dig | signature parameters container |
Definition at line 1237 of file rpmpgp.c.
Referenced by rpmReadPackageFile(), rpmVerifySignature(), verifyDSA(), and verifyRSA().
rpmuint32_t pgpGetSigtype | ( | const pgpDig | dig | ) |
|
inlinestatic |
Return (native-endian) integer from big-endian representation.
s | pointer to big-endian integer |
nbytes | no. of bytes |
Definition at line 1077 of file rpmpgp.h.
Referenced by pgpArmorUnwrap(), pgpLen(), pgpMpiStr(), pgpPktLen(), pgpPrtKey(), pgpPrtSig(), pgpPrtSubType(), pgpsigFormat(), pgpStashKeyid(), rpmkuFindPubkey(), rpmkuStorePubkey(), rpmnsProbeSignature(), and rpmtsFindPubkey().
int pgpGrabPkts | ( | const rpmuint8_t * | pkts, |
size_t | pktlen, | ||
rpmuint8_t *** | pppkts, | ||
int * | pnpkts | ||
) |
Return array of packet pointers.
pkts | OpenPGP packet(s) |
pktlen | OpenPGP packet(s) length (no. of bytes) |
*pppkts | array of packet pointers |
*pnpkts | no. of packets |
Definition at line 1307 of file rpmpgp.c.
References _free(), alloca(), pgpPktLen(), and xcalloc().
Referenced by pgpPrtPkts(), pgpValTok(), rpmcliImportPubkey(), rpmnsProbeSignature(), and rpmtsFindPubkey().
pgpHashAlgo pgpHashAlgoStringToNumber | ( | const char * | name, |
size_t | name_len | ||
) |
Convert a hash algorithm "foo" to the internal PGPHASHALGO_FOO number.
name | name of hash algorithm |
name_len | length of name or 0 for strlen(name) |
Definition at line 1623 of file rpmpgp.c.
References PGPHASHALGO_ERROR, pgpHashTbl, pgpValTbl_s::str, pgpValTbl_s::val, and xstrncasecmp().
Referenced by pgpValTok(), and unsatisfiedDepend().
|
inlinestatic |
Convert to hex.
t | target buffer (returned) |
s | source bytes |
nbytes | no. of bytes |
Definition at line 1143 of file rpmpgp.h.
Referenced by pgpHexStr(), pgpMpiHex(), pgpMpiStr(), verifyDSA(), verifyMD5(), and verifyRSA().
|
inlinestatic |
Return hex formatted representation of bytes.
p | bytes |
plen | no. of bytes |
Definition at line 1165 of file rpmpgp.h.
References pgpHexCvt().
Referenced by pgpPrtHex(), pgpPrtSig(), pgpsigFormat(), rpmcliImportPubkey(), rpmReSign(), and rpmtsFindPubkey().
|
inlinestatic |
Definition at line 1807 of file rpmpgp.h.
References pgpImplVecs_s::_pgpAvailableCipher.
|
inlinestatic |
Definition at line 1818 of file rpmpgp.h.
References pgpImplVecs_s::_pgpAvailableDigest.
|
inlinestatic |
Definition at line 1829 of file rpmpgp.h.
References pgpImplVecs_s::_pgpAvailablePubkey.
|
inlinestatic |
Definition at line 1883 of file rpmpgp.h.
References pgpImplVecs_s::_pgpClean.
Referenced by pgpDigClean().
|
inlinestatic |
Definition at line 1796 of file rpmpgp.h.
References pgpImplVecs_s::_pgpErrChk.
|
inlinestatic |
Definition at line 1895 of file rpmpgp.h.
References pgpImplVecs_s::_pgpFree.
Referenced by pgpDigFini().
|
inlinestatic |
Definition at line 1862 of file rpmpgp.h.
References pgpImplVecs_s::_pgpGenerate.
Referenced by pgpDigNew().
|
inlinestatic |
Definition at line 1904 of file rpmpgp.h.
References pgpImplVecs_s::_pgpInit.
Referenced by pgpDigNew().
|
inlinestatic |
Definition at line 1873 of file rpmpgp.h.
References pgpImplVecs_s::_pgpMpiItem.
Referenced by pgpPrtPubkeyParams(), and pgpPrtSigParams().
|
inlinestatic |
Definition at line 1769 of file rpmpgp.h.
References pgpImplVecs_s::_pgpSetDSA.
Referenced by rpmbcExportSignature(), rpmnsProbeSignature(), and verifyDSA().
|
inlinestatic |
Definition at line 1787 of file rpmpgp.h.
References pgpImplVecs_s::_pgpSetECDSA.
|
inlinestatic |
Definition at line 1778 of file rpmpgp.h.
References pgpImplVecs_s::_pgpSetELG.
|
inlinestatic |
Definition at line 1760 of file rpmpgp.h.
References pgpImplVecs_s::_pgpSetRSA.
Referenced by rpmnsProbeSignature(), and verifyRSA().
|
inlinestatic |
Definition at line 1851 of file rpmpgp.h.
References pgpImplVecs_s::_pgpSign.
Referenced by rpmbcExportSignature().
|
inlinestatic |
Definition at line 1840 of file rpmpgp.h.
References pgpImplVecs_s::_pgpVerify.
Referenced by rpmnsProbeSignature(), verifyDSA(), and verifyRSA().
|
inlinestatic |
Is buffer at beginning of an OpenPGP packet?
p | buffer |
*tagp | OpenPGP tag |
Definition at line 1597 of file rpmpgp.h.
References PGPTAG_COMMENT, PGPTAG_COMMENT_OLD, PGPTAG_COMPRESSED_DATA, PGPTAG_CONTROL, PGPTAG_ENCRYPTED_MDC, PGPTAG_LITERAL_DATA, PGPTAG_MARKER, PGPTAG_MDC, PGPTAG_ONEPASS_SIGNATURE, PGPTAG_PHOTOID, PGPTAG_PRIVATE_60, PGPTAG_PRIVATE_62, PGPTAG_PUBLIC_KEY, PGPTAG_PUBLIC_SESSION_KEY, PGPTAG_PUBLIC_SUBKEY, PGPTAG_RESERVED, PGPTAG_SECRET_KEY, PGPTAG_SECRET_SUBKEY, PGPTAG_SIGNATURE, PGPTAG_SYMMETRIC_DATA, PGPTAG_SYMMETRIC_SESSION_KEY, PGPTAG_TRUST, and PGPTAG_USER_ID.
Referenced by pgpArmorUnwrap().
|
inlinestatic |
Return length of an OpenPGP packet.
s | pointer to packet |
*lenp | no. of bytes in packet |
Definition at line 1094 of file rpmpgp.h.
References pgpGrab().
Referenced by pgpPktLen(), pgpPrtSubType(), and pgpsigFormat().
|
inlinestatic |
Return no.
of bits in a multiprecision integer.
p | pointer to multiprecision integer |
Definition at line 1115 of file rpmpgp.h.
Referenced by pgpMpiLen(), and pgpMpiSet().
|
inlinestatic |
Return no.
of bytes in a multiprecision integer.
p | pointer to multiprecision integer |
Definition at line 1128 of file rpmpgp.h.
References pgpMpiBits().
Referenced by pgpMpiHex(), pgpMpiStr(), pgpPrtPubkeyParams(), pgpPrtSeckeyParams(), pgpPrtSigParams(), and pgpPubkeyFingerprint().
|
inlinestatic |
Return hex formatted representation of a multiprecision integer.
p | bytes |
Definition at line 1181 of file rpmpgp.h.
References pgpGrab(), pgpHexCvt(), and pgpMpiLen().
Referenced by pgpPrtPubkeyParams(), pgpPrtSeckeyParams(), and pgpPrtSigParams().
int pgpPrtPkt | ( | const rpmuint8_t * | pkt, |
size_t | pleft | ||
) |
Return lenth of a OpenPGP packet.
pkt | OpenPGP packet (i.e. PGPTAG_PUBLIC_KEY) |
pleft | OpenPGP packet length (no. of bytes) |
pp | packet tag/ptr/len |
pkt | OpenPGP packet |
pleft | no. bytes remaining |
Definition at line 1041 of file rpmpgp.c.
References alloca(), pgpPktLen(), pgpPrtComment(), pgpPrtHex(), pgpPrtKey(), pgpPrtNL(), pgpPrtSig(), pgpPrtUserID(), pgpPrtVal(), pgpPubkeyFingerprint(), PGPTAG_COMMENT, PGPTAG_COMMENT_OLD, PGPTAG_COMPRESSED_DATA, PGPTAG_CONTROL, PGPTAG_ENCRYPTED_MDC, PGPTAG_LITERAL_DATA, PGPTAG_MARKER, PGPTAG_MDC, PGPTAG_PHOTOID, PGPTAG_PRIVATE_60, PGPTAG_PRIVATE_62, PGPTAG_PUBLIC_KEY, PGPTAG_PUBLIC_SESSION_KEY, PGPTAG_PUBLIC_SUBKEY, PGPTAG_RESERVED, PGPTAG_SECRET_KEY, PGPTAG_SECRET_SUBKEY, PGPTAG_SIGNATURE, PGPTAG_SYMMETRIC_DATA, PGPTAG_SYMMETRIC_SESSION_KEY, PGPTAG_TRUST, and PGPTAG_USER_ID.
Referenced by pgpPrtPkts(), and pgpValTok().
int pgpPrtPkts | ( | const rpmuint8_t * | pkts, |
size_t | pktlen, | ||
pgpDig | dig, | ||
int | printing | ||
) |
Print/parse a OpenPGP packet(s).
pkts | OpenPGP packet(s) |
pktlen | OpenPGP packet(s) length (no. of bytes) |
dig | parsed output of signature/pubkey packet parameters |
printing | should packets be printed? |
Definition at line 1351 of file rpmpgp.c.
References _free(), alloca(), pgpDigFree(), pgpDigLink(), pgpGrabPkts(), pgpPktLen(), pgpPrtPkt(), PGPTAG_SIGNATURE, and pgpValTbl_s::val.
Referenced by makeGPGSignature(), pgpsigFormat(), pgpValTok(), and rpmts_PgpPrtPkts().
void pgpPrtVal | ( | const char * | pre, |
pgpValTbl | vs, | ||
rpmuint8_t | val | ||
) |
Print an OpenPGP value.
pre | output prefix |
vs | table of (string,value) pairs |
val | byte value to print |
Definition at line 290 of file rpmpgp.c.
References pgpValStr().
Referenced by pgpPrtComment(), pgpPrtKey(), pgpPrtPkt(), pgpPrtSeckeyParams(), pgpPrtSig(), pgpPrtSubType(), pgpPrtUserID(), and pgpValTok().
int pgpPubkeyFingerprint | ( | const rpmuint8_t * | pkt, |
size_t | pktlen, | ||
rpmuint8_t * | keyid | ||
) |
Print/parse an OpenPGP subtype packet.
h | packet |
hlen | packet length (no. of bytes) |
sigtype | signature type |
pp | packet tag/ptr/len |
pp | packet tag/ptr/len |
pp | packet tag/ptr/len |
pp | packet tag/ptr/len |
pkt | OpenPGP packet (i.e. PGPTAG_PUBLIC_KEY) |
pktlen | OpenPGP packet length (no. of bytes) |
keyid | publick key fingerprint |
Definition at line 970 of file rpmpgp.c.
References _free(), alloca(), PGPHASHALGO_SHA1, pgpMpiLen(), pgpPktLen(), PGPPUBKEYALGO_DSA, PGPPUBKEYALGO_ECDSA, PGPPUBKEYALGO_RSA, PGPTAG_PUBLIC_KEY, PGPTAG_PUBLIC_SUBKEY, pgpPktKeyV3_s::pubkey_algo, pgpPktKeyV4_s::pubkey_algo, RPMDIGEST_NONE, rpmDigestFinal(), rpmDigestInit(), and rpmDigestUpdate().
Referenced by pgpExtractPubkeyFingerprint(), pgpPrtPkt(), pgpValTok(), rpmbcExportPubkey(), rpmcliImportPubkey(), rpmnsProbeSignature(), and rpmtsFindPubkey().
pgpArmor pgpReadPkts | ( | const char * | fn, |
rpmuint8_t ** | pkt, | ||
size_t * | pktlen | ||
) |
Parse armored OpenPGP packets from a file.
fn | file name |
pkt | dearmored OpenPGP packet(s) |
pktlen | dearmored OpenPGP packet(s) length in bytes |
Definition at line 1564 of file rpmpgp.c.
References PGPARMOR_ERR_NO_BEGIN_PGP, pgpArmorUnwrap(), rpmiobFree(), and rpmiobSlurp().
Referenced by pgpValTok(), processMetadataFile(), rpmcliImportPubkeys(), rpmnsProbeSignature(), and rpmtsFindPubkey().
int pgpSetFindPubkey | ( | pgpDig | dig, |
int(*)(void *ts, void *dig) | findPubkey, | ||
void * | _ts | ||
) |
Set find pubkey vector.
dig | signature parameters container |
findPubkey | routine to find a pubkey. |
_ts | argument to (*findPubkey) (ts, ...) |
Definition at line 1285 of file rpmpgp.c.
Referenced by rpmtsDig().
int pgpSetSig | ( | pgpDig | dig, |
rpmuint32_t | sigtag, | ||
rpmuint32_t | sigtype, | ||
const void * | sig, | ||
rpmuint32_t | siglen | ||
) |
Set signature tag info, i.e.
from header.
dig | signature parameters container |
sigtag | signature tag |
sigtype | signature tag type |
sig | signature tag data |
siglen | signature tag data length |
Definition at line 1257 of file rpmpgp.c.
Referenced by headerCheck(), rpmReadPackageFile(), and rpmVerifySignatures().
void* pgpStatsAccumulator | ( | pgpDig | dig, |
int | opx | ||
) |
Return pgpDig container accumulator structure.
dig | signature parameters container |
opx | per-container accumulator index (aka rpmtsOpX) |
Definition at line 1271 of file rpmpgp.c.
Referenced by headerCheck(), rpmReadPackageFile(), rpmtsCleanDig(), verifyDSA(), verifyMD5(), verifyRSA(), and verifySHA1().
|
inlinestatic |
Return string representation of am OpenPGP value.
vs | table of (string,value) pairs |
val | byte value to lookup |
Definition at line 1200 of file rpmpgp.h.
References pgpValTbl_s::str, and pgpValTbl_s::val.
Referenced by _pgpHashAlgo2Name(), _pgpPubkeyAlgo2Name(), pgpArmorWrap(), and pgpPrtVal().
|
inlinestatic |
Return value of an OpenPGP string.
vs | table of (string,value) pairs |
s | string token to lookup |
se | end-of-string address |
Definition at line 1218 of file rpmpgp.h.
References name, pgpArmorUnwrap(), pgpArmorWrap(), pgpDigUnlink, pgpDigVSFlags, pgpExtractPubkeyFingerprint(), pgpGrabPkts(), pgpHashAlgoStringToNumber(), pgpPktLen(), pgpPrtComment(), pgpPrtKey(), pgpPrtPkt(), pgpPrtPkts(), pgpPrtPubkeyParams(), pgpPrtSig(), pgpPrtSigParams(), pgpPrtSubType(), pgpPrtUserID(), pgpPrtVal(), pgpPubkeyFingerprint(), pgpReadPkts(), pgpValTbl_s::str, and pgpValTbl_s::val.
Referenced by pgpArmorUnwrap().
int rpmbcExportPubkey | ( | pgpDig | dig | ) |
Definition at line 864 of file rpmbc.c.
References pgpGetPubkey(), pgpPubkeyFingerprint(), PGPTAG_PUBLIC_KEY, and xmalloc.
Referenced by pgpDigNew().
int rpmbcExportSignature | ( | pgpDig | dig, |
DIGEST_CTX | ctx | ||
) |
Definition at line 923 of file rpmbc.c.
References pgpGetPubkey(), pgpGetSignature(), pgpImplSetDSA(), pgpImplSign(), PGPSIGTYPE_BINARY, PGPSUBTYPE_EXPORTABLE_CERT, PGPSUBTYPE_ISSUER_KEYID, PGPSUBTYPE_REVOCABLE, PGPSUBTYPE_SIG_CREATE_TIME, PGPSUBTYPE_SIG_EXPIRE_TIME, PGPTAG_SIGNATURE, rpmDigestUpdate(), and xmalloc.
Referenced by writeRPM().
struct pgpValTbl_s pgpArmorKeyTbl[] |
struct pgpValTbl_s pgpArmorTbl[] |
struct pgpValTbl_s pgpCompressionTbl[] |
pgpVSFlags pgpDigVSFlags |
Disabler bits(s) for signature/digest checking.
Definition at line 1105 of file rpmpgp.c.
Referenced by headerCheck(), pgpDigNew(), pgpValTok(), rpmcliAllArgCallback(), rpmReadPackageFile(), rpmtsSetVSFlags(), and rpmtsVSFlags().
struct pgpValTbl_s pgpHashTbl[] |
Hash (string, value) pairs.
Definition at line 144 of file rpmpgp.c.
Referenced by _pgpHashAlgo2Name(), and pgpHashAlgoStringToNumber().
pgpImplVecs_t* pgpImplVecs |
Definition at line 38 of file rpmpgp.c.
Referenced by rpmioAllArgCallback().
struct pgpValTbl_s pgpPubkeyTbl[] |
Definition at line 103 of file rpmpgp.c.
Referenced by _pgpPubkeyAlgo2Name().
struct pgpValTbl_s pgpSigTypeTbl[] |
struct pgpValTbl_s pgpSubTypeTbl[] |
struct pgpValTbl_s pgpSymkeyTbl[] |
struct pgpValTbl_s pgpTagTbl[] |