2 This file is part of GNUnet.
3 Copyright (C) 2009-2013, 2016 GNUnet e.V.
5 GNUnet is free software: you can redistribute it and/or modify it
6 under the terms of the GNU Affero General Public License as published
7 by the Free Software Foundation, either version 3 of the License,
8 or (at your option) any later version.
10 GNUnet is distributed in the hope that it will be useful, but
11 WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 Affero General Public License for more details.
15 You should have received a copy of the GNU Affero General Public License
16 along with this program. If not, see <http://www.gnu.org/licenses/>.
18 SPDX-License-Identifier: AGPL3.0-or-later
23 * @file credential/credential_misc.c
24 * @brief Misc API for credentials
26 * @author Martin Schanzenbach
29 #include "gnunet_util_lib.h"
30 #include "gnunet_constants.h"
31 #include "gnunet_credential_service.h"
32 #include "gnunet_signatures.h"
33 #include "credential.h"
37 GNUNET_CREDENTIAL_credential_to_string(const struct GNUNET_CREDENTIAL_Credential *cred)
45 subject_pkey = GNUNET_CRYPTO_ecdsa_public_key_to_string(&cred->subject_key);
46 issuer_pkey = GNUNET_CRYPTO_ecdsa_public_key_to_string(&cred->issuer_key);
47 GNUNET_STRINGS_base64_encode((char*)&cred->signature,
48 sizeof(struct GNUNET_CRYPTO_EcdsaSignature),
50 GNUNET_asprintf(&cred_str,
51 "%s.%s -> %s | %s | %" SCNu64,
53 cred->issuer_attribute,
56 cred->expiration.abs_value_us);
57 GNUNET_free(subject_pkey);
58 GNUNET_free(issuer_pkey);
59 GNUNET_free(signature);
63 struct GNUNET_CREDENTIAL_Credential*
64 GNUNET_CREDENTIAL_credential_from_string(const char* s)
66 struct GNUNET_CREDENTIAL_Credential *cred;
67 size_t enclen = (sizeof(struct GNUNET_CRYPTO_EcdsaPublicKey)) * 8;
70 enclen += 5 - enclen % 5;
71 enclen /= 5; /* 260/5 = 52 */
72 char subject_pkey[enclen + 1];
73 char issuer_pkey[enclen + 1];
75 char signature[256]; //TODO max payload size
77 struct GNUNET_CRYPTO_EcdsaSignature *sig;
78 struct GNUNET_TIME_Absolute etime_abs;
81 "%52s.%253s -> %52s | %s | %" SCNu64,
86 &etime_abs.abs_value_us))
88 GNUNET_log(GNUNET_ERROR_TYPE_ERROR,
89 _("Unable to parse CRED record string `%s'\n"),
93 cred = GNUNET_malloc(sizeof(struct GNUNET_CREDENTIAL_Credential) + strlen(name) + 1);
94 GNUNET_CRYPTO_ecdsa_public_key_from_string(subject_pkey,
97 GNUNET_CRYPTO_ecdsa_public_key_from_string(issuer_pkey,
100 GNUNET_assert(sizeof(struct GNUNET_CRYPTO_EcdsaSignature) == GNUNET_STRINGS_base64_decode(signature,
103 cred->signature = *sig;
104 cred->expiration = etime_abs;
106 GNUNET_memcpy(&cred[1],
109 cred->issuer_attribute_len = strlen((char*)&cred[1]);
110 cred->issuer_attribute = (char*)&cred[1];
115 * Issue an attribute to a subject
117 * @param issuer the ego that should be used to issue the attribute
118 * @param subject the subject of the attribute
119 * @param attribute the name of the attribute
120 * @return handle to the queued request
122 struct GNUNET_CREDENTIAL_Credential *
123 GNUNET_CREDENTIAL_credential_issue(const struct GNUNET_CRYPTO_EcdsaPrivateKey *issuer,
124 struct GNUNET_CRYPTO_EcdsaPublicKey *subject,
125 const char *attribute,
126 struct GNUNET_TIME_Absolute *expiration)
128 struct CredentialEntry *crd;
129 struct GNUNET_CREDENTIAL_Credential *cred;
132 size = sizeof(struct CredentialEntry) + strlen(attribute) + 1;
133 crd = GNUNET_malloc(size);
134 cred = GNUNET_malloc(sizeof(struct GNUNET_CREDENTIAL_Credential) + strlen(attribute) + 1);
135 crd->purpose.size = htonl(size - sizeof(struct GNUNET_CRYPTO_EcdsaSignature));
137 crd->purpose.purpose = htonl(GNUNET_SIGNATURE_PURPOSE_CREDENTIAL);
138 GNUNET_CRYPTO_ecdsa_key_get_public(issuer,
140 crd->subject_key = *subject;
141 crd->expiration = GNUNET_htonll(expiration->abs_value_us);
142 crd->issuer_attribute_len = htonl(strlen(attribute) + 1);
143 GNUNET_memcpy((char*)&crd[1],
145 strlen(attribute) + 1);
147 GNUNET_CRYPTO_ecdsa_sign(issuer,
156 cred->signature = crd->signature;
157 cred->expiration = *expiration;
158 GNUNET_CRYPTO_ecdsa_key_get_public(issuer,
161 cred->subject_key = *subject;
162 GNUNET_memcpy(&cred[1],
164 strlen(attribute) + 1);
165 cred->issuer_attribute = (char*)&cred[1];