1 /* Do not modify this file. Changes will be overwritten. */
2 /* Generated automatically by the ASN.1 to Wireshark dissector compiler */
4 /* ../../tools/asn2wrs.py -b -p pkcs12 -c ./pkcs12.cnf -s ./packet-pkcs12-template -D . -O ../../epan/dissectors pkcs12.asn */
6 /* Input file: packet-pkcs12-template.c */
8 #line 1 "../../asn1/pkcs12/packet-pkcs12-template.c"
10 * Routines for PKCS#12: Personal Information Exchange packet dissection
13 * See "PKCS #12 v1.1: Personal Information Exchange Syntax":
15 * http://www.emc.com/emc-plus/rsa-labs/pkcs/files/h11301-wp-pkcs-12v1-1-personal-information-exchange-syntax.pdf
17 * Wireshark - Network traffic analyzer
18 * By Gerald Combs <gerald@wireshark.org>
19 * Copyright 1998 Gerald Combs
21 * This program is free software; you can redistribute it and/or
22 * modify it under the terms of the GNU General Public License
23 * as published by the Free Software Foundation; either version 2
24 * of the License, or (at your option) any later version.
26 * This program is distributed in the hope that it will be useful,
27 * but WITHOUT ANY WARRANTY; without even the implied warranty of
28 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
29 * GNU General Public License for more details.
31 * You should have received a copy of the GNU General Public License
32 * along with this program; if not, write to the Free Software
33 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
39 #include <epan/packet.h>
40 #include <epan/oids.h>
41 #include <epan/asn1.h>
42 #include <epan/prefs.h>
43 #include <epan/wmem/wmem.h>
45 #include "packet-ber.h"
46 #include "packet-pkcs12.h"
47 #include "packet-x509af.h"
48 #include "packet-x509if.h"
49 #include "packet-cms.h"
51 #ifdef HAVE_SYS_TYPES_H
52 #include <sys/types.h>
55 #ifdef HAVE_SYS_TIME_H
60 #include <wsutil/wsgcrypt.h>
63 #define PNAME "PKCS#12: Personal Information Exchange"
64 #define PSNAME "PKCS12"
65 #define PFNAME "pkcs12"
67 #define PKCS12_PBE_ARCFOUR_SHA1_OID "1.2.840.113549.1.12.1.1"
68 #define PKCS12_PBE_3DES_SHA1_OID "1.2.840.113549.1.12.1.3"
69 #define PKCS12_PBE_RC2_40_SHA1_OID "1.2.840.113549.1.12.1.6"
71 void proto_register_pkcs12(void);
72 void proto_reg_handoff_pkcs12(void);
74 /* Initialize the protocol and registered fields */
75 static int proto_pkcs12 = -1;
77 static int hf_pkcs12_X509Certificate_PDU = -1;
78 static gint ett_decrypted_pbe = -1;
80 static const char *object_identifier_id = NULL;
81 static int iteration_count = 0;
82 static tvbuff_t *salt = NULL;
83 static const char *password = NULL;
84 static gboolean try_null_password = FALSE;
86 static void dissect_AuthenticatedSafe_OCTETSTRING_PDU(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree);
87 static void dissect_SafeContents_OCTETSTRING_PDU(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree);
88 static void dissect_PrivateKeyInfo_PDU(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree);
91 /*--- Included file: packet-pkcs12-hf.c ---*/
92 #line 1 "../../asn1/pkcs12/packet-pkcs12-hf.c"
93 static int hf_pkcs12_PFX_PDU = -1; /* PFX */
94 static int hf_pkcs12_AuthenticatedSafe_PDU = -1; /* AuthenticatedSafe */
95 static int hf_pkcs12_SafeContents_PDU = -1; /* SafeContents */
96 static int hf_pkcs12_KeyBag_PDU = -1; /* KeyBag */
97 static int hf_pkcs12_PKCS8ShroudedKeyBag_PDU = -1; /* PKCS8ShroudedKeyBag */
98 static int hf_pkcs12_CertBag_PDU = -1; /* CertBag */
99 static int hf_pkcs12_CRLBag_PDU = -1; /* CRLBag */
100 static int hf_pkcs12_SecretBag_PDU = -1; /* SecretBag */
101 static int hf_pkcs12_PrivateKeyInfo_PDU = -1; /* PrivateKeyInfo */
102 static int hf_pkcs12_EncryptedPrivateKeyInfo_PDU = -1; /* EncryptedPrivateKeyInfo */
103 static int hf_pkcs12_PBEParameter_PDU = -1; /* PBEParameter */
104 static int hf_pkcs12_PBKDF2Params_PDU = -1; /* PBKDF2Params */
105 static int hf_pkcs12_PBES2Params_PDU = -1; /* PBES2Params */
106 static int hf_pkcs12_PBMAC1Params_PDU = -1; /* PBMAC1Params */
107 static int hf_pkcs12_version = -1; /* T_version */
108 static int hf_pkcs12_authSafe = -1; /* ContentInfo */
109 static int hf_pkcs12_macData = -1; /* MacData */
110 static int hf_pkcs12_mac = -1; /* DigestInfo */
111 static int hf_pkcs12_macSalt = -1; /* OCTET_STRING */
112 static int hf_pkcs12_iterations = -1; /* INTEGER */
113 static int hf_pkcs12_digestAlgorithm = -1; /* DigestAlgorithmIdentifier */
114 static int hf_pkcs12_digest = -1; /* Digest */
115 static int hf_pkcs12_AuthenticatedSafe_item = -1; /* ContentInfo */
116 static int hf_pkcs12_SafeContents_item = -1; /* SafeBag */
117 static int hf_pkcs12_bagId = -1; /* T_bagId */
118 static int hf_pkcs12_bagValue = -1; /* T_bagValue */
119 static int hf_pkcs12_bagAttributes = -1; /* SET_OF_PKCS12Attribute */
120 static int hf_pkcs12_bagAttributes_item = -1; /* PKCS12Attribute */
121 static int hf_pkcs12_certId = -1; /* T_certId */
122 static int hf_pkcs12_certValue = -1; /* T_certValue */
123 static int hf_pkcs12_crlId = -1; /* T_crlId */
124 static int hf_pkcs12_crlValue = -1; /* T_crlValue */
125 static int hf_pkcs12_secretTypeId = -1; /* T_secretTypeId */
126 static int hf_pkcs12_secretValue = -1; /* T_secretValue */
127 static int hf_pkcs12_attrId = -1; /* T_attrId */
128 static int hf_pkcs12_attrValues = -1; /* T_attrValues */
129 static int hf_pkcs12_attrValues_item = -1; /* T_attrValues_item */
130 static int hf_pkcs12_privateKeyVersion = -1; /* Version */
131 static int hf_pkcs12_privateKeyAlgorithm = -1; /* AlgorithmIdentifier */
132 static int hf_pkcs12_privateKey = -1; /* PrivateKey */
133 static int hf_pkcs12_attributes = -1; /* Attributes */
134 static int hf_pkcs12_Attributes_item = -1; /* Attribute */
135 static int hf_pkcs12_encryptionAlgorithm = -1; /* AlgorithmIdentifier */
136 static int hf_pkcs12_encryptedData = -1; /* EncryptedData */
137 static int hf_pkcs12_salt = -1; /* OCTET_STRING */
138 static int hf_pkcs12_iterationCount = -1; /* INTEGER */
139 static int hf_pkcs12_saltChoice = -1; /* T_saltChoice */
140 static int hf_pkcs12_specified = -1; /* OCTET_STRING */
141 static int hf_pkcs12_otherSource = -1; /* AlgorithmIdentifier */
142 static int hf_pkcs12_keyLength = -1; /* INTEGER_1_MAX */
143 static int hf_pkcs12_prf = -1; /* AlgorithmIdentifier */
144 static int hf_pkcs12_keyDerivationFunc = -1; /* AlgorithmIdentifier */
145 static int hf_pkcs12_encryptionScheme = -1; /* AlgorithmIdentifier */
146 static int hf_pkcs12_messageAuthScheme = -1; /* AlgorithmIdentifier */
148 /*--- End of included file: packet-pkcs12-hf.c ---*/
149 #line 83 "../../asn1/pkcs12/packet-pkcs12-template.c"
151 /* Initialize the subtree pointers */
153 /*--- Included file: packet-pkcs12-ett.c ---*/
154 #line 1 "../../asn1/pkcs12/packet-pkcs12-ett.c"
155 static gint ett_pkcs12_PFX = -1;
156 static gint ett_pkcs12_MacData = -1;
157 static gint ett_pkcs12_DigestInfo = -1;
158 static gint ett_pkcs12_AuthenticatedSafe = -1;
159 static gint ett_pkcs12_SafeContents = -1;
160 static gint ett_pkcs12_SafeBag = -1;
161 static gint ett_pkcs12_SET_OF_PKCS12Attribute = -1;
162 static gint ett_pkcs12_CertBag = -1;
163 static gint ett_pkcs12_CRLBag = -1;
164 static gint ett_pkcs12_SecretBag = -1;
165 static gint ett_pkcs12_PKCS12Attribute = -1;
166 static gint ett_pkcs12_T_attrValues = -1;
167 static gint ett_pkcs12_PrivateKeyInfo = -1;
168 static gint ett_pkcs12_Attributes = -1;
169 static gint ett_pkcs12_EncryptedPrivateKeyInfo = -1;
170 static gint ett_pkcs12_PBEParameter = -1;
171 static gint ett_pkcs12_PBKDF2Params = -1;
172 static gint ett_pkcs12_T_saltChoice = -1;
173 static gint ett_pkcs12_PBES2Params = -1;
174 static gint ett_pkcs12_PBMAC1Params = -1;
176 /*--- End of included file: packet-pkcs12-ett.c ---*/
177 #line 86 "../../asn1/pkcs12/packet-pkcs12-template.c"
179 static void append_oid(proto_tree *tree, const char *oid)
181 const char *name = NULL;
183 name = oid_resolved_from_string(oid);
184 proto_item_append_text(tree, " (%s)", name ? name : oid);
187 #ifdef HAVE_LIBGCRYPT
190 generate_key_or_iv(unsigned int id, tvbuff_t *salt_tvb, unsigned int iter,
191 const char *pw, unsigned int req_keylen, char * keybuf)
196 gcry_mpi_t num_b1 = NULL;
198 char hash[20], buf_b[64], buf_i[128], *p;
207 salt_size = tvb_captured_length(salt_tvb);
208 salt_p = (char *)tvb_memdup(wmem_packet_scope(), salt_tvb, 0, salt_size);
220 /* Store salt and password in BUF_I */
222 for (i = 0; i < 64; i++)
223 *p++ = salt_p[i % salt_size];
226 for (i = j = 0; i < 64; i += 2)
230 if (++j > pwlen) /* Note, that we include the trailing zero */
238 err = gcry_md_open(&md, GCRY_MD_SHA1, 0);
239 if (gcry_err_code(err))
243 for (i = 0; i < 64; i++)
245 unsigned char lid = id & 0xFF;
246 gcry_md_write (md, &lid, 1);
249 gcry_md_write(md, buf_i, pw ? 128 : 64);
252 memcpy (hash, gcry_md_read (md, 0), 20);
256 for (i = 1; i < iter; i++)
257 gcry_md_hash_buffer (GCRY_MD_SHA1, hash, hash, 20);
259 for (i = 0; i < 20 && cur_keylen < req_keylen; i++)
260 keybuf[cur_keylen++] = hash[i];
262 if (cur_keylen == req_keylen)
264 gcry_mpi_release (num_b1);
265 return TRUE; /* ready */
268 /* need more bytes. */
269 for (i = 0; i < 64; i++)
270 buf_b[i] = hash[i % 20];
274 rc = gcry_mpi_scan (&num_b1, GCRYMPI_FMT_USG, buf_b, n, &n);
281 gcry_mpi_add_ui (num_b1, num_b1, 1);
283 for (i = 0; i < 128; i += 64)
288 rc = gcry_mpi_scan (&num_ij, GCRYMPI_FMT_USG, buf_i + i, n, &n);
295 gcry_mpi_add (num_ij, num_ij, num_b1);
296 gcry_mpi_clear_highbit (num_ij, 64 * 8);
300 rc = gcry_mpi_print (GCRYMPI_FMT_USG, buf_i + i, n, &n, num_ij);
306 gcry_mpi_release (num_ij);
313 void PBE_reset_parameters(void)
319 int PBE_decrypt_data(const char *object_identifier_id_param, tvbuff_t *encrypted_tvb, asn1_ctx_t *actx, proto_item *item)
321 #ifdef HAVE_LIBGCRYPT
322 const char *encryption_algorithm;
323 gcry_cipher_hd_t cipher;
332 char *clear_data = NULL;
333 tvbuff_t *clear_tvb = NULL;
334 const gchar *oidname;
338 gboolean decrypt_ok = TRUE;
340 if(((password == NULL) || (*password == '\0')) && (try_null_password == FALSE)) {
341 /* we are not configured to decrypt */
345 encryption_algorithm = x509af_get_last_algorithm_id();
347 /* these are the only encryption schemes we understand for now */
348 if(!strcmp(encryption_algorithm, PKCS12_PBE_3DES_SHA1_OID)) {
351 algo = GCRY_CIPHER_3DES;
352 mode = GCRY_CIPHER_MODE_CBC;
353 } else if(!strcmp(encryption_algorithm, PKCS12_PBE_ARCFOUR_SHA1_OID)) {
356 algo = GCRY_CIPHER_ARCFOUR;
357 mode = GCRY_CIPHER_MODE_NONE;
358 } else if(!strcmp(encryption_algorithm, PKCS12_PBE_RC2_40_SHA1_OID)) {
361 algo = GCRY_CIPHER_RFC2268_40;
362 mode = GCRY_CIPHER_MODE_CBC;
364 /* we don't know how to decrypt this */
366 proto_item_append_text(item, " [Unsupported encryption algorithm]");
370 if((iteration_count == 0) || (salt == NULL)) {
371 proto_item_append_text(item, " [Insufficient parameters]");
375 /* allocate buffers */
376 key = (char *)wmem_alloc(wmem_packet_scope(), keylen);
378 if(!generate_key_or_iv(1 /*LEY */, salt, iteration_count, password, keylen, key))
383 iv = (char *)wmem_alloc(wmem_packet_scope(), ivlen);
385 if(!generate_key_or_iv(2 /* IV */, salt, iteration_count, password, ivlen, iv))
389 /* now try an internal function */
390 err = gcry_cipher_open(&cipher, algo, mode, 0);
391 if (gcry_err_code (err))
394 err = gcry_cipher_setkey (cipher, key, keylen);
395 if (gcry_err_code (err)) {
396 gcry_cipher_close (cipher);
401 err = gcry_cipher_setiv (cipher, iv, ivlen);
402 if (gcry_err_code (err)) {
403 gcry_cipher_close (cipher);
408 datalen = tvb_captured_length(encrypted_tvb);
409 clear_data = (char *)g_malloc(datalen);
411 err = gcry_cipher_decrypt (cipher, clear_data, datalen, (char *)tvb_memdup(wmem_packet_scope(), encrypted_tvb, 0, datalen), datalen);
412 if (gcry_err_code (err)) {
414 proto_item_append_text(item, " [Failed to decrypt with password preference]");
416 gcry_cipher_close (cipher);
421 gcry_cipher_close (cipher);
423 /* We don't know if we have successfully decrypted the data or not so we:
424 a) check the trailing bytes
425 b) see if we start with a sequence or a set (is this too constraining?
428 /* first the trailing bytes */
429 byte = clear_data[datalen-1];
433 for(i = (int)byte; i > 0 ; i--) {
434 if(clear_data[datalen - i] != byte) {
440 /* XXX: is this a failure? */
443 /* we assume the result is ASN.1 - check it is a SET or SEQUENCE */
444 byte = clear_data[0];
445 if((byte != 0x30) && (byte != 0x31)) { /* do we need more here? OCTET STRING? */
451 proto_item_append_text(item, " [Failed to decrypt with supplied password]");
456 proto_item_append_text(item, " [Decrypted successfully]");
458 tree = proto_item_add_subtree(item, ett_decrypted_pbe);
460 /* OK - so now clear_data contains the decrypted data */
462 clear_tvb = tvb_new_child_real_data(encrypted_tvb,(const guint8 *)clear_data, datalen, datalen);
463 tvb_set_free_cb(clear_tvb, g_free);
465 name = g_string_new("");
466 oidname = oid_resolved_from_string(object_identifier_id_param);
467 g_string_printf(name, "Decrypted %s", oidname ? oidname : object_identifier_id_param);
469 /* add it as a new source */
470 add_new_data_source(actx->pinfo, clear_tvb, name->str);
472 g_string_free(name, TRUE);
474 /* now try and decode it */
475 call_ber_oid_callback(object_identifier_id_param, clear_tvb, 0, actx->pinfo, tree, NULL);
479 /* we cannot decrypt */
486 /*--- Included file: packet-pkcs12-fn.c ---*/
487 #line 1 "../../asn1/pkcs12/packet-pkcs12-fn.c"
489 static const value_string pkcs12_T_version_vals[] = {
496 dissect_pkcs12_T_version(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
497 offset = dissect_ber_integer(implicit_tag, actx, tree, tvb, offset, hf_index,
504 static const ber_sequence_t DigestInfo_sequence[] = {
505 { &hf_pkcs12_digestAlgorithm, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_cms_DigestAlgorithmIdentifier },
506 { &hf_pkcs12_digest , BER_CLASS_UNI, BER_UNI_TAG_OCTETSTRING, BER_FLAGS_NOOWNTAG, dissect_cms_Digest },
507 { NULL, 0, 0, 0, NULL }
511 dissect_pkcs12_DigestInfo(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
512 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
513 DigestInfo_sequence, hf_index, ett_pkcs12_DigestInfo);
521 dissect_pkcs12_OCTET_STRING(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
522 offset = dissect_ber_octet_string(implicit_tag, actx, tree, tvb, offset, hf_index,
523 (hf_index == hf_pkcs12_salt ? &salt : NULL));
531 dissect_pkcs12_INTEGER(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
532 offset = dissect_ber_integer(implicit_tag, actx, tree, tvb, offset, hf_index,
533 (hf_index == hf_pkcs12_iterationCount ? &iteration_count : NULL));
539 static const ber_sequence_t MacData_sequence[] = {
540 { &hf_pkcs12_mac , BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_pkcs12_DigestInfo },
541 { &hf_pkcs12_macSalt , BER_CLASS_UNI, BER_UNI_TAG_OCTETSTRING, BER_FLAGS_NOOWNTAG, dissect_pkcs12_OCTET_STRING },
542 { &hf_pkcs12_iterations , BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_pkcs12_INTEGER },
543 { NULL, 0, 0, 0, NULL }
547 dissect_pkcs12_MacData(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
548 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
549 MacData_sequence, hf_index, ett_pkcs12_MacData);
555 static const ber_sequence_t PFX_sequence[] = {
556 { &hf_pkcs12_version , BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_NOOWNTAG, dissect_pkcs12_T_version },
557 { &hf_pkcs12_authSafe , BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_cms_ContentInfo },
558 { &hf_pkcs12_macData , BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_pkcs12_MacData },
559 { NULL, 0, 0, 0, NULL }
563 dissect_pkcs12_PFX(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
564 #line 58 "../../asn1/pkcs12/pkcs12.cnf"
565 dissector_handle_t dissector_handle;
567 /* we change the CMS id-data dissector to dissect as AuthenticatedSafe
568 not sure why PKCS#12 couldn't have used its own content type OID for AuthenticatedSafe */
569 dissector_handle=create_dissector_handle(dissect_AuthenticatedSafe_OCTETSTRING_PDU, proto_pkcs12);
570 dissector_change_string("ber.oid", "1.2.840.113549.1.7.1", dissector_handle);
572 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
573 PFX_sequence, hf_index, ett_pkcs12_PFX);
576 /* restore the original dissector */
577 dissector_reset_string("ber.oid", "1.2.840.113549.1.7.1");
585 static const ber_sequence_t AuthenticatedSafe_sequence_of[1] = {
586 { &hf_pkcs12_AuthenticatedSafe_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_cms_ContentInfo },
590 dissect_pkcs12_AuthenticatedSafe(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
591 #line 71 "../../asn1/pkcs12/pkcs12.cnf"
592 dissector_handle_t dissector_handle;
594 /* we change the CMS id-data dissector to dissect as SafeContents */
595 dissector_handle=create_dissector_handle(dissect_SafeContents_OCTETSTRING_PDU, proto_pkcs12);
596 dissector_change_string("ber.oid", "1.2.840.113549.1.7.1", dissector_handle);
598 offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
599 AuthenticatedSafe_sequence_of, hf_index, ett_pkcs12_AuthenticatedSafe);
602 /* restore the original dissector */
603 dissector_reset_string("ber.oid", "1.2.840.113549.1.7.1");
613 dissect_pkcs12_T_bagId(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
614 offset = dissect_ber_object_identifier_str(implicit_tag, actx, tree, tvb, offset, hf_index, &object_identifier_id);
616 #line 84 "../../asn1/pkcs12/pkcs12.cnf"
617 append_oid(tree, object_identifier_id);
625 dissect_pkcs12_T_bagValue(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
626 #line 108 "../../asn1/pkcs12/pkcs12.cnf"
627 if(object_identifier_id)
628 offset = call_ber_oid_callback(object_identifier_id, tvb, offset, actx->pinfo, tree, NULL);
638 dissect_pkcs12_T_attrId(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
639 offset = dissect_ber_object_identifier_str(implicit_tag, actx, tree, tvb, offset, hf_index, &object_identifier_id);
641 #line 104 "../../asn1/pkcs12/pkcs12.cnf"
642 append_oid(tree, object_identifier_id);
650 dissect_pkcs12_T_attrValues_item(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
651 #line 112 "../../asn1/pkcs12/pkcs12.cnf"
652 if(object_identifier_id)
653 offset = call_ber_oid_callback(object_identifier_id, tvb, offset, actx->pinfo, tree, NULL);
661 static const ber_sequence_t T_attrValues_set_of[1] = {
662 { &hf_pkcs12_attrValues_item, BER_CLASS_ANY, 0, BER_FLAGS_NOOWNTAG, dissect_pkcs12_T_attrValues_item },
666 dissect_pkcs12_T_attrValues(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
667 offset = dissect_ber_set_of(implicit_tag, actx, tree, tvb, offset,
668 T_attrValues_set_of, hf_index, ett_pkcs12_T_attrValues);
674 static const ber_sequence_t PKCS12Attribute_sequence[] = {
675 { &hf_pkcs12_attrId , BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_pkcs12_T_attrId },
676 { &hf_pkcs12_attrValues , BER_CLASS_UNI, BER_UNI_TAG_SET, BER_FLAGS_NOOWNTAG, dissect_pkcs12_T_attrValues },
677 { NULL, 0, 0, 0, NULL }
681 dissect_pkcs12_PKCS12Attribute(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
682 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
683 PKCS12Attribute_sequence, hf_index, ett_pkcs12_PKCS12Attribute);
689 static const ber_sequence_t SET_OF_PKCS12Attribute_set_of[1] = {
690 { &hf_pkcs12_bagAttributes_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_pkcs12_PKCS12Attribute },
694 dissect_pkcs12_SET_OF_PKCS12Attribute(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
695 offset = dissect_ber_set_of(implicit_tag, actx, tree, tvb, offset,
696 SET_OF_PKCS12Attribute_set_of, hf_index, ett_pkcs12_SET_OF_PKCS12Attribute);
702 static const ber_sequence_t SafeBag_sequence[] = {
703 { &hf_pkcs12_bagId , BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_pkcs12_T_bagId },
704 { &hf_pkcs12_bagValue , BER_CLASS_CON, 0, 0, dissect_pkcs12_T_bagValue },
705 { &hf_pkcs12_bagAttributes, BER_CLASS_UNI, BER_UNI_TAG_SET, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_pkcs12_SET_OF_PKCS12Attribute },
706 { NULL, 0, 0, 0, NULL }
710 dissect_pkcs12_SafeBag(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
711 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
712 SafeBag_sequence, hf_index, ett_pkcs12_SafeBag);
718 static const ber_sequence_t SafeContents_sequence_of[1] = {
719 { &hf_pkcs12_SafeContents_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_pkcs12_SafeBag },
723 dissect_pkcs12_SafeContents(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
724 offset = dissect_ber_sequence_of(implicit_tag, actx, tree, tvb, offset,
725 SafeContents_sequence_of, hf_index, ett_pkcs12_SafeContents);
731 static const value_string pkcs12_Version_vals[] = {
738 dissect_pkcs12_Version(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
739 offset = dissect_ber_integer(implicit_tag, actx, tree, tvb, offset, hf_index,
748 dissect_pkcs12_PrivateKey(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
749 offset = dissect_ber_octet_string(implicit_tag, actx, tree, tvb, offset, hf_index,
756 static const ber_sequence_t Attributes_set_of[1] = {
757 { &hf_pkcs12_Attributes_item, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509if_Attribute },
761 dissect_pkcs12_Attributes(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
762 offset = dissect_ber_set_of(implicit_tag, actx, tree, tvb, offset,
763 Attributes_set_of, hf_index, ett_pkcs12_Attributes);
769 static const ber_sequence_t PrivateKeyInfo_sequence[] = {
770 { &hf_pkcs12_privateKeyVersion, BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_NOOWNTAG, dissect_pkcs12_Version },
771 { &hf_pkcs12_privateKeyAlgorithm, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509af_AlgorithmIdentifier },
772 { &hf_pkcs12_privateKey , BER_CLASS_UNI, BER_UNI_TAG_OCTETSTRING, BER_FLAGS_NOOWNTAG, dissect_pkcs12_PrivateKey },
773 { &hf_pkcs12_attributes , BER_CLASS_CON, 0, BER_FLAGS_OPTIONAL|BER_FLAGS_IMPLTAG, dissect_pkcs12_Attributes },
774 { NULL, 0, 0, 0, NULL }
778 dissect_pkcs12_PrivateKeyInfo(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
779 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
780 PrivateKeyInfo_sequence, hf_index, ett_pkcs12_PrivateKeyInfo);
788 dissect_pkcs12_KeyBag(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
789 offset = dissect_pkcs12_PrivateKeyInfo(implicit_tag, tvb, offset, actx, tree, hf_index);
797 dissect_pkcs12_EncryptedData(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
798 #line 139 "../../asn1/pkcs12/pkcs12.cnf"
799 tvbuff_t *encrypted_tvb;
800 dissector_handle_t dissector_handle;
803 offset = dissect_ber_octet_string(implicit_tag, actx, tree, tvb, offset, hf_index,
806 #line 145 "../../asn1/pkcs12/pkcs12.cnf"
810 dissector_handle=create_dissector_handle(dissect_PrivateKeyInfo_PDU, proto_pkcs12);
811 dissector_change_string("ber.oid", object_identifier_id, dissector_handle);
813 PBE_decrypt_data(object_identifier_id, encrypted_tvb, actx, actx->created_item);
815 /* restore the original dissector */
816 dissector_reset_string("ber.oid", object_identifier_id);
823 static const ber_sequence_t EncryptedPrivateKeyInfo_sequence[] = {
824 { &hf_pkcs12_encryptionAlgorithm, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509af_AlgorithmIdentifier },
825 { &hf_pkcs12_encryptedData, BER_CLASS_UNI, BER_UNI_TAG_OCTETSTRING, BER_FLAGS_NOOWNTAG, dissect_pkcs12_EncryptedData },
826 { NULL, 0, 0, 0, NULL }
830 dissect_pkcs12_EncryptedPrivateKeyInfo(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
831 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
832 EncryptedPrivateKeyInfo_sequence, hf_index, ett_pkcs12_EncryptedPrivateKeyInfo);
840 dissect_pkcs12_PKCS8ShroudedKeyBag(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
841 offset = dissect_pkcs12_EncryptedPrivateKeyInfo(implicit_tag, tvb, offset, actx, tree, hf_index);
849 dissect_pkcs12_T_certId(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
850 offset = dissect_ber_object_identifier_str(implicit_tag, actx, tree, tvb, offset, hf_index, &object_identifier_id);
852 #line 89 "../../asn1/pkcs12/pkcs12.cnf"
853 append_oid(tree, object_identifier_id);
861 dissect_pkcs12_T_certValue(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
862 #line 116 "../../asn1/pkcs12/pkcs12.cnf"
863 if(object_identifier_id)
864 offset = call_ber_oid_callback(object_identifier_id, tvb, offset, actx->pinfo, tree, NULL);
872 static const ber_sequence_t CertBag_sequence[] = {
873 { &hf_pkcs12_certId , BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_pkcs12_T_certId },
874 { &hf_pkcs12_certValue , BER_CLASS_CON, 0, 0, dissect_pkcs12_T_certValue },
875 { NULL, 0, 0, 0, NULL }
879 dissect_pkcs12_CertBag(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
880 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
881 CertBag_sequence, hf_index, ett_pkcs12_CertBag);
889 dissect_pkcs12_T_crlId(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
890 offset = dissect_ber_object_identifier_str(implicit_tag, actx, tree, tvb, offset, hf_index, &object_identifier_id);
892 #line 94 "../../asn1/pkcs12/pkcs12.cnf"
893 append_oid(tree, object_identifier_id);
901 dissect_pkcs12_T_crlValue(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
902 #line 120 "../../asn1/pkcs12/pkcs12.cnf"
903 if(object_identifier_id)
904 offset = call_ber_oid_callback(object_identifier_id, tvb, offset, actx->pinfo, tree, NULL);
912 static const ber_sequence_t CRLBag_sequence[] = {
913 { &hf_pkcs12_crlId , BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_pkcs12_T_crlId },
914 { &hf_pkcs12_crlValue , BER_CLASS_CON, 0, 0, dissect_pkcs12_T_crlValue },
915 { NULL, 0, 0, 0, NULL }
919 dissect_pkcs12_CRLBag(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
920 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
921 CRLBag_sequence, hf_index, ett_pkcs12_CRLBag);
929 dissect_pkcs12_T_secretTypeId(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
930 offset = dissect_ber_object_identifier_str(implicit_tag, actx, tree, tvb, offset, hf_index, &object_identifier_id);
932 #line 99 "../../asn1/pkcs12/pkcs12.cnf"
933 append_oid(tree, object_identifier_id);
941 dissect_pkcs12_T_secretValue(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
942 #line 124 "../../asn1/pkcs12/pkcs12.cnf"
943 if(object_identifier_id)
944 offset = call_ber_oid_callback(object_identifier_id, tvb, offset, actx->pinfo, tree, NULL);
952 static const ber_sequence_t SecretBag_sequence[] = {
953 { &hf_pkcs12_secretTypeId , BER_CLASS_UNI, BER_UNI_TAG_OID, BER_FLAGS_NOOWNTAG, dissect_pkcs12_T_secretTypeId },
954 { &hf_pkcs12_secretValue , BER_CLASS_CON, 0, 0, dissect_pkcs12_T_secretValue },
955 { NULL, 0, 0, 0, NULL }
959 dissect_pkcs12_SecretBag(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
960 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
961 SecretBag_sequence, hf_index, ett_pkcs12_SecretBag);
967 static const ber_sequence_t PBEParameter_sequence[] = {
968 { &hf_pkcs12_salt , BER_CLASS_UNI, BER_UNI_TAG_OCTETSTRING, BER_FLAGS_NOOWNTAG, dissect_pkcs12_OCTET_STRING },
969 { &hf_pkcs12_iterationCount, BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_NOOWNTAG, dissect_pkcs12_INTEGER },
970 { NULL, 0, 0, 0, NULL }
974 dissect_pkcs12_PBEParameter(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
975 #line 128 "../../asn1/pkcs12/pkcs12.cnf"
976 /* initialise the encryption parameters */
977 PBE_reset_parameters();
980 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
981 PBEParameter_sequence, hf_index, ett_pkcs12_PBEParameter);
987 static const value_string pkcs12_T_saltChoice_vals[] = {
989 { 1, "otherSource" },
993 static const ber_choice_t T_saltChoice_choice[] = {
994 { 0, &hf_pkcs12_specified , BER_CLASS_UNI, BER_UNI_TAG_OCTETSTRING, BER_FLAGS_NOOWNTAG, dissect_pkcs12_OCTET_STRING },
995 { 1, &hf_pkcs12_otherSource , BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509af_AlgorithmIdentifier },
996 { 0, NULL, 0, 0, 0, NULL }
1000 dissect_pkcs12_T_saltChoice(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
1001 offset = dissect_ber_choice(actx, tree, tvb, offset,
1002 T_saltChoice_choice, hf_index, ett_pkcs12_T_saltChoice,
1011 dissect_pkcs12_INTEGER_1_MAX(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
1012 offset = dissect_ber_integer(implicit_tag, actx, tree, tvb, offset, hf_index,
1019 static const ber_sequence_t PBKDF2Params_sequence[] = {
1020 { &hf_pkcs12_saltChoice , BER_CLASS_ANY/*choice*/, -1/*choice*/, BER_FLAGS_NOOWNTAG|BER_FLAGS_NOTCHKTAG, dissect_pkcs12_T_saltChoice },
1021 { &hf_pkcs12_iterationCount, BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_NOOWNTAG, dissect_pkcs12_INTEGER },
1022 { &hf_pkcs12_keyLength , BER_CLASS_UNI, BER_UNI_TAG_INTEGER, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_pkcs12_INTEGER_1_MAX },
1023 { &hf_pkcs12_prf , BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_OPTIONAL|BER_FLAGS_NOOWNTAG, dissect_x509af_AlgorithmIdentifier },
1024 { NULL, 0, 0, 0, NULL }
1028 dissect_pkcs12_PBKDF2Params(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
1029 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
1030 PBKDF2Params_sequence, hf_index, ett_pkcs12_PBKDF2Params);
1036 static const ber_sequence_t PBES2Params_sequence[] = {
1037 { &hf_pkcs12_keyDerivationFunc, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509af_AlgorithmIdentifier },
1038 { &hf_pkcs12_encryptionScheme, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509af_AlgorithmIdentifier },
1039 { NULL, 0, 0, 0, NULL }
1043 dissect_pkcs12_PBES2Params(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
1044 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
1045 PBES2Params_sequence, hf_index, ett_pkcs12_PBES2Params);
1051 static const ber_sequence_t PBMAC1Params_sequence[] = {
1052 { &hf_pkcs12_keyDerivationFunc, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509af_AlgorithmIdentifier },
1053 { &hf_pkcs12_messageAuthScheme, BER_CLASS_UNI, BER_UNI_TAG_SEQUENCE, BER_FLAGS_NOOWNTAG, dissect_x509af_AlgorithmIdentifier },
1054 { NULL, 0, 0, 0, NULL }
1058 dissect_pkcs12_PBMAC1Params(gboolean implicit_tag _U_, tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_) {
1059 offset = dissect_ber_sequence(implicit_tag, actx, tree, tvb, offset,
1060 PBMAC1Params_sequence, hf_index, ett_pkcs12_PBMAC1Params);
1067 static void dissect_PFX_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1068 asn1_ctx_t asn1_ctx;
1069 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1070 dissect_pkcs12_PFX(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_PFX_PDU);
1072 static void dissect_AuthenticatedSafe_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1073 asn1_ctx_t asn1_ctx;
1074 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1075 dissect_pkcs12_AuthenticatedSafe(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_AuthenticatedSafe_PDU);
1077 static void dissect_SafeContents_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1078 asn1_ctx_t asn1_ctx;
1079 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1080 dissect_pkcs12_SafeContents(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_SafeContents_PDU);
1082 static void dissect_KeyBag_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1083 asn1_ctx_t asn1_ctx;
1084 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1085 dissect_pkcs12_KeyBag(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_KeyBag_PDU);
1087 static void dissect_PKCS8ShroudedKeyBag_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1088 asn1_ctx_t asn1_ctx;
1089 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1090 dissect_pkcs12_PKCS8ShroudedKeyBag(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_PKCS8ShroudedKeyBag_PDU);
1092 static void dissect_CertBag_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1093 asn1_ctx_t asn1_ctx;
1094 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1095 dissect_pkcs12_CertBag(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_CertBag_PDU);
1097 static void dissect_CRLBag_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1098 asn1_ctx_t asn1_ctx;
1099 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1100 dissect_pkcs12_CRLBag(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_CRLBag_PDU);
1102 static void dissect_SecretBag_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1103 asn1_ctx_t asn1_ctx;
1104 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1105 dissect_pkcs12_SecretBag(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_SecretBag_PDU);
1107 static void dissect_PrivateKeyInfo_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1108 asn1_ctx_t asn1_ctx;
1109 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1110 dissect_pkcs12_PrivateKeyInfo(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_PrivateKeyInfo_PDU);
1112 static void dissect_EncryptedPrivateKeyInfo_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1113 asn1_ctx_t asn1_ctx;
1114 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1115 dissect_pkcs12_EncryptedPrivateKeyInfo(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_EncryptedPrivateKeyInfo_PDU);
1117 static void dissect_PBEParameter_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1118 asn1_ctx_t asn1_ctx;
1119 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1120 dissect_pkcs12_PBEParameter(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_PBEParameter_PDU);
1122 static void dissect_PBKDF2Params_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1123 asn1_ctx_t asn1_ctx;
1124 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1125 dissect_pkcs12_PBKDF2Params(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_PBKDF2Params_PDU);
1127 static void dissect_PBES2Params_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1128 asn1_ctx_t asn1_ctx;
1129 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1130 dissect_pkcs12_PBES2Params(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_PBES2Params_PDU);
1132 static void dissect_PBMAC1Params_PDU(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree _U_) {
1133 asn1_ctx_t asn1_ctx;
1134 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1135 dissect_pkcs12_PBMAC1Params(FALSE, tvb, 0, &asn1_ctx, tree, hf_pkcs12_PBMAC1Params_PDU);
1139 /*--- End of included file: packet-pkcs12-fn.c ---*/
1140 #line 394 "../../asn1/pkcs12/packet-pkcs12-template.c"
1142 static int strip_octet_string(tvbuff_t *tvb)
1150 /* PKCS#7 encodes the content as OCTET STRING, whereas CMS is just any ANY */
1151 /* if we use CMS (rather than PKCS#7) - which we are - we need to strip the OCTET STRING tag */
1152 /* before proceeding */
1154 offset = get_ber_identifier(tvb, 0, &ber_class, &pc, &tag);
1155 offset = get_ber_length(tvb, offset, &len, &ind);
1157 if((ber_class == BER_CLASS_UNI) && (tag == BER_UNI_TAG_OCTETSTRING))
1164 static void dissect_AuthenticatedSafe_OCTETSTRING_PDU(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree) {
1166 asn1_ctx_t asn1_ctx;
1167 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1169 if((offset = strip_octet_string(tvb)) > 0)
1170 dissect_pkcs12_AuthenticatedSafe(FALSE, tvb, offset, &asn1_ctx, tree, hf_pkcs12_AuthenticatedSafe_PDU);
1172 proto_tree_add_text(tree, tvb, 0, 1, "BER Error: OCTET STRING expected");
1175 static void dissect_SafeContents_OCTETSTRING_PDU(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
1178 asn1_ctx_t asn1_ctx;
1179 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1181 offset = strip_octet_string(tvb);
1183 dissect_pkcs12_SafeContents(FALSE, tvb, offset, &asn1_ctx, tree, hf_pkcs12_SafeContents_PDU);
1186 static void dissect_X509Certificate_OCTETSTRING_PDU(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
1189 asn1_ctx_t asn1_ctx;
1190 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
1192 if((offset = strip_octet_string(tvb)) > 0)
1193 dissect_x509af_Certificate(FALSE, tvb, offset, &asn1_ctx, tree, hf_pkcs12_X509Certificate_PDU);
1195 proto_tree_add_text(tree, tvb, 0, 1, "BER Error: OCTET STRING expected");
1198 /*--- proto_register_pkcs12 ----------------------------------------------*/
1199 void proto_register_pkcs12(void) {
1201 /* List of fields */
1202 static hf_register_info hf[] = {
1203 { &hf_pkcs12_X509Certificate_PDU,
1204 { "X509Certificate", "pkcs12.X509Certificate",
1205 FT_NONE, BASE_NONE, NULL, 0,
1206 "pkcs12.X509Certificate", HFILL }},
1208 /*--- Included file: packet-pkcs12-hfarr.c ---*/
1209 #line 1 "../../asn1/pkcs12/packet-pkcs12-hfarr.c"
1210 { &hf_pkcs12_PFX_PDU,
1211 { "PFX", "pkcs12.PFX_element",
1212 FT_NONE, BASE_NONE, NULL, 0,
1214 { &hf_pkcs12_AuthenticatedSafe_PDU,
1215 { "AuthenticatedSafe", "pkcs12.AuthenticatedSafe",
1216 FT_UINT32, BASE_DEC, NULL, 0,
1218 { &hf_pkcs12_SafeContents_PDU,
1219 { "SafeContents", "pkcs12.SafeContents",
1220 FT_UINT32, BASE_DEC, NULL, 0,
1222 { &hf_pkcs12_KeyBag_PDU,
1223 { "KeyBag", "pkcs12.KeyBag_element",
1224 FT_NONE, BASE_NONE, NULL, 0,
1226 { &hf_pkcs12_PKCS8ShroudedKeyBag_PDU,
1227 { "PKCS8ShroudedKeyBag", "pkcs12.PKCS8ShroudedKeyBag_element",
1228 FT_NONE, BASE_NONE, NULL, 0,
1230 { &hf_pkcs12_CertBag_PDU,
1231 { "CertBag", "pkcs12.CertBag_element",
1232 FT_NONE, BASE_NONE, NULL, 0,
1234 { &hf_pkcs12_CRLBag_PDU,
1235 { "CRLBag", "pkcs12.CRLBag_element",
1236 FT_NONE, BASE_NONE, NULL, 0,
1238 { &hf_pkcs12_SecretBag_PDU,
1239 { "SecretBag", "pkcs12.SecretBag_element",
1240 FT_NONE, BASE_NONE, NULL, 0,
1242 { &hf_pkcs12_PrivateKeyInfo_PDU,
1243 { "PrivateKeyInfo", "pkcs12.PrivateKeyInfo_element",
1244 FT_NONE, BASE_NONE, NULL, 0,
1246 { &hf_pkcs12_EncryptedPrivateKeyInfo_PDU,
1247 { "EncryptedPrivateKeyInfo", "pkcs12.EncryptedPrivateKeyInfo_element",
1248 FT_NONE, BASE_NONE, NULL, 0,
1250 { &hf_pkcs12_PBEParameter_PDU,
1251 { "PBEParameter", "pkcs12.PBEParameter_element",
1252 FT_NONE, BASE_NONE, NULL, 0,
1254 { &hf_pkcs12_PBKDF2Params_PDU,
1255 { "PBKDF2Params", "pkcs12.PBKDF2Params_element",
1256 FT_NONE, BASE_NONE, NULL, 0,
1258 { &hf_pkcs12_PBES2Params_PDU,
1259 { "PBES2Params", "pkcs12.PBES2Params_element",
1260 FT_NONE, BASE_NONE, NULL, 0,
1262 { &hf_pkcs12_PBMAC1Params_PDU,
1263 { "PBMAC1Params", "pkcs12.PBMAC1Params_element",
1264 FT_NONE, BASE_NONE, NULL, 0,
1266 { &hf_pkcs12_version,
1267 { "version", "pkcs12.version",
1268 FT_UINT32, BASE_DEC, VALS(pkcs12_T_version_vals), 0,
1270 { &hf_pkcs12_authSafe,
1271 { "authSafe", "pkcs12.authSafe_element",
1272 FT_NONE, BASE_NONE, NULL, 0,
1273 "ContentInfo", HFILL }},
1274 { &hf_pkcs12_macData,
1275 { "macData", "pkcs12.macData_element",
1276 FT_NONE, BASE_NONE, NULL, 0,
1279 { "mac", "pkcs12.mac_element",
1280 FT_NONE, BASE_NONE, NULL, 0,
1281 "DigestInfo", HFILL }},
1282 { &hf_pkcs12_macSalt,
1283 { "macSalt", "pkcs12.macSalt",
1284 FT_BYTES, BASE_NONE, NULL, 0,
1285 "OCTET_STRING", HFILL }},
1286 { &hf_pkcs12_iterations,
1287 { "iterations", "pkcs12.iterations",
1288 FT_INT32, BASE_DEC, NULL, 0,
1289 "INTEGER", HFILL }},
1290 { &hf_pkcs12_digestAlgorithm,
1291 { "digestAlgorithm", "pkcs12.digestAlgorithm_element",
1292 FT_NONE, BASE_NONE, NULL, 0,
1293 "DigestAlgorithmIdentifier", HFILL }},
1294 { &hf_pkcs12_digest,
1295 { "digest", "pkcs12.digest",
1296 FT_BYTES, BASE_NONE, NULL, 0,
1298 { &hf_pkcs12_AuthenticatedSafe_item,
1299 { "ContentInfo", "pkcs12.ContentInfo_element",
1300 FT_NONE, BASE_NONE, NULL, 0,
1302 { &hf_pkcs12_SafeContents_item,
1303 { "SafeBag", "pkcs12.SafeBag_element",
1304 FT_NONE, BASE_NONE, NULL, 0,
1307 { "bagId", "pkcs12.bagId",
1308 FT_OID, BASE_NONE, NULL, 0,
1310 { &hf_pkcs12_bagValue,
1311 { "bagValue", "pkcs12.bagValue_element",
1312 FT_NONE, BASE_NONE, NULL, 0,
1314 { &hf_pkcs12_bagAttributes,
1315 { "bagAttributes", "pkcs12.bagAttributes",
1316 FT_UINT32, BASE_DEC, NULL, 0,
1317 "SET_OF_PKCS12Attribute", HFILL }},
1318 { &hf_pkcs12_bagAttributes_item,
1319 { "PKCS12Attribute", "pkcs12.PKCS12Attribute_element",
1320 FT_NONE, BASE_NONE, NULL, 0,
1322 { &hf_pkcs12_certId,
1323 { "certId", "pkcs12.certId",
1324 FT_OID, BASE_NONE, NULL, 0,
1326 { &hf_pkcs12_certValue,
1327 { "certValue", "pkcs12.certValue_element",
1328 FT_NONE, BASE_NONE, NULL, 0,
1331 { "crlId", "pkcs12.crlId",
1332 FT_OID, BASE_NONE, NULL, 0,
1334 { &hf_pkcs12_crlValue,
1335 { "crlValue", "pkcs12.crlValue_element",
1336 FT_NONE, BASE_NONE, NULL, 0,
1338 { &hf_pkcs12_secretTypeId,
1339 { "secretTypeId", "pkcs12.secretTypeId",
1340 FT_OID, BASE_NONE, NULL, 0,
1342 { &hf_pkcs12_secretValue,
1343 { "secretValue", "pkcs12.secretValue_element",
1344 FT_NONE, BASE_NONE, NULL, 0,
1346 { &hf_pkcs12_attrId,
1347 { "attrId", "pkcs12.attrId",
1348 FT_OID, BASE_NONE, NULL, 0,
1350 { &hf_pkcs12_attrValues,
1351 { "attrValues", "pkcs12.attrValues",
1352 FT_UINT32, BASE_DEC, NULL, 0,
1354 { &hf_pkcs12_attrValues_item,
1355 { "attrValues item", "pkcs12.attrValues_item_element",
1356 FT_NONE, BASE_NONE, NULL, 0,
1358 { &hf_pkcs12_privateKeyVersion,
1359 { "version", "pkcs12.version",
1360 FT_UINT32, BASE_DEC, VALS(pkcs12_Version_vals), 0,
1362 { &hf_pkcs12_privateKeyAlgorithm,
1363 { "privateKeyAlgorithm", "pkcs12.privateKeyAlgorithm_element",
1364 FT_NONE, BASE_NONE, NULL, 0,
1365 "AlgorithmIdentifier", HFILL }},
1366 { &hf_pkcs12_privateKey,
1367 { "privateKey", "pkcs12.privateKey",
1368 FT_BYTES, BASE_NONE, NULL, 0,
1370 { &hf_pkcs12_attributes,
1371 { "attributes", "pkcs12.attributes",
1372 FT_UINT32, BASE_DEC, NULL, 0,
1374 { &hf_pkcs12_Attributes_item,
1375 { "Attribute", "pkcs12.Attribute_element",
1376 FT_NONE, BASE_NONE, NULL, 0,
1378 { &hf_pkcs12_encryptionAlgorithm,
1379 { "encryptionAlgorithm", "pkcs12.encryptionAlgorithm_element",
1380 FT_NONE, BASE_NONE, NULL, 0,
1381 "AlgorithmIdentifier", HFILL }},
1382 { &hf_pkcs12_encryptedData,
1383 { "encryptedData", "pkcs12.encryptedData",
1384 FT_BYTES, BASE_NONE, NULL, 0,
1387 { "salt", "pkcs12.salt",
1388 FT_BYTES, BASE_NONE, NULL, 0,
1389 "OCTET_STRING", HFILL }},
1390 { &hf_pkcs12_iterationCount,
1391 { "iterationCount", "pkcs12.iterationCount",
1392 FT_INT32, BASE_DEC, NULL, 0,
1393 "INTEGER", HFILL }},
1394 { &hf_pkcs12_saltChoice,
1395 { "salt", "pkcs12.salt",
1396 FT_UINT32, BASE_DEC, VALS(pkcs12_T_saltChoice_vals), 0,
1397 "T_saltChoice", HFILL }},
1398 { &hf_pkcs12_specified,
1399 { "specified", "pkcs12.specified",
1400 FT_BYTES, BASE_NONE, NULL, 0,
1401 "OCTET_STRING", HFILL }},
1402 { &hf_pkcs12_otherSource,
1403 { "otherSource", "pkcs12.otherSource_element",
1404 FT_NONE, BASE_NONE, NULL, 0,
1405 "AlgorithmIdentifier", HFILL }},
1406 { &hf_pkcs12_keyLength,
1407 { "keyLength", "pkcs12.keyLength",
1408 FT_UINT32, BASE_DEC, NULL, 0,
1409 "INTEGER_1_MAX", HFILL }},
1411 { "prf", "pkcs12.prf_element",
1412 FT_NONE, BASE_NONE, NULL, 0,
1413 "AlgorithmIdentifier", HFILL }},
1414 { &hf_pkcs12_keyDerivationFunc,
1415 { "keyDerivationFunc", "pkcs12.keyDerivationFunc_element",
1416 FT_NONE, BASE_NONE, NULL, 0,
1417 "AlgorithmIdentifier", HFILL }},
1418 { &hf_pkcs12_encryptionScheme,
1419 { "encryptionScheme", "pkcs12.encryptionScheme_element",
1420 FT_NONE, BASE_NONE, NULL, 0,
1421 "AlgorithmIdentifier", HFILL }},
1422 { &hf_pkcs12_messageAuthScheme,
1423 { "messageAuthScheme", "pkcs12.messageAuthScheme_element",
1424 FT_NONE, BASE_NONE, NULL, 0,
1425 "AlgorithmIdentifier", HFILL }},
1427 /*--- End of included file: packet-pkcs12-hfarr.c ---*/
1428 #line 461 "../../asn1/pkcs12/packet-pkcs12-template.c"
1431 /* List of subtrees */
1432 static gint *ett[] = {
1435 /*--- Included file: packet-pkcs12-ettarr.c ---*/
1436 #line 1 "../../asn1/pkcs12/packet-pkcs12-ettarr.c"
1438 &ett_pkcs12_MacData,
1439 &ett_pkcs12_DigestInfo,
1440 &ett_pkcs12_AuthenticatedSafe,
1441 &ett_pkcs12_SafeContents,
1442 &ett_pkcs12_SafeBag,
1443 &ett_pkcs12_SET_OF_PKCS12Attribute,
1444 &ett_pkcs12_CertBag,
1446 &ett_pkcs12_SecretBag,
1447 &ett_pkcs12_PKCS12Attribute,
1448 &ett_pkcs12_T_attrValues,
1449 &ett_pkcs12_PrivateKeyInfo,
1450 &ett_pkcs12_Attributes,
1451 &ett_pkcs12_EncryptedPrivateKeyInfo,
1452 &ett_pkcs12_PBEParameter,
1453 &ett_pkcs12_PBKDF2Params,
1454 &ett_pkcs12_T_saltChoice,
1455 &ett_pkcs12_PBES2Params,
1456 &ett_pkcs12_PBMAC1Params,
1458 /*--- End of included file: packet-pkcs12-ettarr.c ---*/
1459 #line 467 "../../asn1/pkcs12/packet-pkcs12-template.c"
1461 module_t *pkcs12_module;
1463 /* Register protocol */
1464 proto_pkcs12 = proto_register_protocol(PNAME, PSNAME, PFNAME);
1466 /* Register fields and subtrees */
1467 proto_register_field_array(proto_pkcs12, hf, array_length(hf));
1468 proto_register_subtree_array(ett, array_length(ett));
1470 /* Register preferences */
1471 pkcs12_module = prefs_register_protocol(proto_pkcs12, NULL);
1473 prefs_register_string_preference(pkcs12_module, "password",
1474 "Password to decrypt the file with",
1475 "The password to used to decrypt the encrypted elements within"
1476 " the PKCS#12 file", &password);
1478 prefs_register_bool_preference(pkcs12_module, "try_null_password",
1479 "Try to decrypt with a empty password",
1480 "Whether to try and decrypt the encrypted data within the"
1481 " PKCS#12 with a NULL password", &try_null_password);
1483 register_ber_syntax_dissector("PKCS#12", proto_pkcs12, dissect_PFX_PDU);
1484 register_ber_oid_syntax(".p12", NULL, "PKCS#12");
1485 register_ber_oid_syntax(".pfx", NULL, "PKCS#12");
1489 /*--- proto_reg_handoff_pkcs12 -------------------------------------------*/
1490 void proto_reg_handoff_pkcs12(void) {
1492 /*--- Included file: packet-pkcs12-dis-tab.c ---*/
1493 #line 1 "../../asn1/pkcs12/packet-pkcs12-dis-tab.c"
1494 register_ber_oid_dissector("1.2.840.113549.1.12.10.1.1", dissect_KeyBag_PDU, proto_pkcs12, "keyBag");
1495 register_ber_oid_dissector("1.2.840.113549.1.12.10.1.2", dissect_PKCS8ShroudedKeyBag_PDU, proto_pkcs12, "pkcs8ShroudedKeyBag");
1496 register_ber_oid_dissector("1.2.840.113549.1.12.10.1.3", dissect_CertBag_PDU, proto_pkcs12, "certBag");
1497 register_ber_oid_dissector("1.2.840.113549.1.12.10.1.4", dissect_SecretBag_PDU, proto_pkcs12, "secretBag");
1498 register_ber_oid_dissector("1.2.840.113549.1.12.10.1.5", dissect_CRLBag_PDU, proto_pkcs12, "crlBag");
1499 register_ber_oid_dissector("1.2.840.113549.1.12.10.1.6", dissect_SafeContents_PDU, proto_pkcs12, "safeContentsBag");
1500 register_ber_oid_dissector("2.16.840.1.113730.3.1.216", dissect_PFX_PDU, proto_pkcs12, "pkcs-9-at-PKCS12");
1501 register_ber_oid_dissector("1.2.840.113549.1.9.25.2", dissect_EncryptedPrivateKeyInfo_PDU, proto_pkcs12, "pkcs-9-at-encryptedPrivateKeyInfo");
1502 register_ber_oid_dissector("1.2.840.113549.1.12.1.1", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithSHAAnd128BitRC4");
1503 register_ber_oid_dissector("1.2.840.113549.1.12.1.2", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithSHAAnd40BitRC4");
1504 register_ber_oid_dissector("1.2.840.113549.1.12.1.3", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithSHAAnd3-KeyTripleDES-CBC");
1505 register_ber_oid_dissector("1.2.840.113549.1.12.1.4", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithSHAAnd2-KeyTripleDES-CBC");
1506 register_ber_oid_dissector("1.2.840.113549.1.12.1.5", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithSHAAnd128BitRC2-CBC");
1507 register_ber_oid_dissector("1.2.840.113549.1.12.1.6", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithSHAAnd128BitRC2-CBC");
1508 register_ber_oid_dissector("1.2.840.113549.1.5.1", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithMD2AndDES-CBC");
1509 register_ber_oid_dissector("1.2.840.113549.1.5.3", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithMD5AndDES-CBC");
1510 register_ber_oid_dissector("1.2.840.113549.1.5.4", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithMD2AndRC2-CBC");
1511 register_ber_oid_dissector("1.2.840.113549.1.5.6", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithMD5AndRC2-CBC");
1512 register_ber_oid_dissector("1.2.840.113549.1.5.10", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithSHA1AndDES-CBC");
1513 register_ber_oid_dissector("1.2.840.113549.1.5.11", dissect_PBEParameter_PDU, proto_pkcs12, "pbeWithSHA1AndRC2-CBC");
1514 register_ber_oid_dissector("1.2.840.113549.1.5.12", dissect_PBKDF2Params_PDU, proto_pkcs12, "id-PBKDF2");
1515 register_ber_oid_dissector("1.2.840.113549.1.5.13", dissect_PBES2Params_PDU, proto_pkcs12, "id-PBES2");
1516 register_ber_oid_dissector("1.2.840.113549.1.5.14", dissect_PBMAC1Params_PDU, proto_pkcs12, "id-PBMAC1");
1519 /*--- End of included file: packet-pkcs12-dis-tab.c ---*/
1520 #line 499 "../../asn1/pkcs12/packet-pkcs12-template.c"
1522 register_ber_oid_dissector("1.2.840.113549.1.9.22.1", dissect_X509Certificate_OCTETSTRING_PDU, proto_pkcs12, "x509Certificate");