2 This file is part of GNUnet.
3 Copyright (C) 2009-2013, 2016 GNUnet e.V.
5 GNUnet is free software: you can redistribute it and/or modify it
6 under the terms of the GNU Affero General Public License as published
7 by the Free Software Foundation, either version 3 of the License,
8 or (at your option) any later version.
10 GNUnet is distributed in the hope that it will be useful, but
11 WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 Affero General Public License for more details.
15 You should have received a copy of the GNU Affero General Public License
16 along with this program. If not, see <http://www.gnu.org/licenses/>.
18 SPDX-License-Identifier: AGPL3.0-or-later
23 * @file credential/credential_misc.c
24 * @brief Misc API for credentials
26 * @author Martin Schanzenbach
29 #include "gnunet_util_lib.h"
30 #include "gnunet_constants.h"
31 #include "gnunet_credential_service.h"
32 #include "gnunet_signatures.h"
33 #include "credential.h"
37 GNUNET_CREDENTIAL_credential_to_string (const struct
38 GNUNET_CREDENTIAL_Credential *cred)
46 subject_pkey = GNUNET_CRYPTO_ecdsa_public_key_to_string (&cred->subject_key);
47 issuer_pkey = GNUNET_CRYPTO_ecdsa_public_key_to_string (&cred->issuer_key);
48 GNUNET_STRINGS_base64_encode ((char*) &cred->signature,
49 sizeof(struct GNUNET_CRYPTO_EcdsaSignature),
51 GNUNET_asprintf (&cred_str,
52 "%s.%s -> %s | %s | %" SCNu64,
54 cred->issuer_attribute,
57 cred->expiration.abs_value_us);
58 GNUNET_free (subject_pkey);
59 GNUNET_free (issuer_pkey);
60 GNUNET_free (signature);
64 struct GNUNET_CREDENTIAL_Credential*
65 GNUNET_CREDENTIAL_credential_from_string (const char*s)
67 struct GNUNET_CREDENTIAL_Credential *cred;
68 size_t enclen = (sizeof(struct GNUNET_CRYPTO_EcdsaPublicKey)) * 8;
71 enclen += 5 - enclen % 5;
72 enclen /= 5; /* 260/5 = 52 */
73 char subject_pkey[enclen + 1];
74 char issuer_pkey[enclen + 1];
76 char signature[256]; // TODO max payload size
78 struct GNUNET_CRYPTO_EcdsaSignature *sig;
79 struct GNUNET_TIME_Absolute etime_abs;
82 "%52s.%253s -> %52s | %s | %" SCNu64,
87 &etime_abs.abs_value_us))
89 GNUNET_log (GNUNET_ERROR_TYPE_ERROR,
90 _ ("Unable to parse CRED record string `%s'\n"),
94 cred = GNUNET_malloc (sizeof(struct GNUNET_CREDENTIAL_Credential) + strlen (
96 GNUNET_CRYPTO_ecdsa_public_key_from_string (subject_pkey,
97 strlen (subject_pkey),
99 GNUNET_CRYPTO_ecdsa_public_key_from_string (issuer_pkey,
100 strlen (issuer_pkey),
102 GNUNET_assert (sizeof(struct GNUNET_CRYPTO_EcdsaSignature) ==
103 GNUNET_STRINGS_base64_decode (signature,
108 cred->signature = *sig;
109 cred->expiration = etime_abs;
111 GNUNET_memcpy (&cred[1],
114 cred->issuer_attribute_len = strlen ((char*) &cred[1]);
115 cred->issuer_attribute = (char*) &cred[1];
120 * Issue an attribute to a subject
122 * @param issuer the ego that should be used to issue the attribute
123 * @param subject the subject of the attribute
124 * @param attribute the name of the attribute
125 * @return handle to the queued request
127 struct GNUNET_CREDENTIAL_Credential *
128 GNUNET_CREDENTIAL_credential_issue (const struct
129 GNUNET_CRYPTO_EcdsaPrivateKey *issuer,
130 struct GNUNET_CRYPTO_EcdsaPublicKey *subject,
131 const char *attribute,
132 struct GNUNET_TIME_Absolute *expiration)
134 struct CredentialEntry *crd;
135 struct GNUNET_CREDENTIAL_Credential *cred;
138 size = sizeof(struct CredentialEntry) + strlen (attribute) + 1;
139 crd = GNUNET_malloc (size);
140 cred = GNUNET_malloc (sizeof(struct GNUNET_CREDENTIAL_Credential) + strlen (
142 crd->purpose.size = htonl (size - sizeof(struct
143 GNUNET_CRYPTO_EcdsaSignature));
145 crd->purpose.purpose = htonl (GNUNET_SIGNATURE_PURPOSE_CREDENTIAL);
146 GNUNET_CRYPTO_ecdsa_key_get_public (issuer,
148 crd->subject_key = *subject;
149 crd->expiration = GNUNET_htonll (expiration->abs_value_us);
150 crd->issuer_attribute_len = htonl (strlen (attribute) + 1);
151 GNUNET_memcpy ((char*) &crd[1],
153 strlen (attribute) + 1);
155 GNUNET_CRYPTO_ecdsa_sign (issuer,
164 cred->signature = crd->signature;
165 cred->expiration = *expiration;
166 GNUNET_CRYPTO_ecdsa_key_get_public (issuer,
169 cred->subject_key = *subject;
170 GNUNET_memcpy (&cred[1],
172 strlen (attribute) + 1);
173 cred->issuer_attribute = (char*) &cred[1];