GmSSL/tools/sdfutil/sdfutil.c

/*
 * Copyright (c) 2014 - 2021 The GmSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the GmSSL Project.
 *    (http://gmssl.org/)"
 *
 * 4. The name "GmSSL Project" must not be used to endorse or promote
 *    products derived from this software without prior written
 *    permission. For written permission, please contact
 *    guanzhi1980@gmail.com.
 *
 * 5. Products derived from this software may not be called "GmSSL"
 *    nor may "GmSSL" appear in their names without prior written
 *    permission of the GmSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the GmSSL Project
 *    (http://gmssl.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE GmSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 */


# include <stdio.h>
# include <stdlib.h>
# include <string.h>
#include "sdf.h"
#include "sdf_ext.h"


# define OP_NONE		0
# define OP_PRINTDEVINFO	1
# define OP_PRINTSM2SIGN	2
# define OP_PRINTSM2ENC		3
# define OP_PRINTRSASIGN	4
# define OP_PRINTRSAENC		5
# define OP_ACCESSKEY		6
# define OP_IMPORTOBJ		7
# define OP_EXPORTOBJ 		8
# define OP_DELOBJ 		9


void print_usage(FILE *out, const char *prog)
{
	fprintf(out, "Usage: %s commands\n", prog);
	fprintf(out, "\n");
	fprintf(out, "Commands:\n");
	fprintf(out, "  -help           print the usage message\n");
	fprintf(out, "  -lib            Vendor's SDF dynamic library\n");
	fprintf(out, "  -vendor         Vendor name\n");
	fprintf(out, "  -printdevinfo   Print device information\n");
	fprintf(out, "  -printsm2sign   Print SM2 signing key with key index\n");
	fprintf(out, "  -printsm2enc    Print SM2 encryption key with key index\n");
	fprintf(out, "  -printrsasign   Print RSA signing key with key index\n");
	fprintf(out, "  -printrsaenc    Print RSA encryption key with key index\n");
	fprintf(out, "  -accesskey      Access private key with the key index number\n");
	fprintf(out, "  -pass           Passphrase source for accessing private key\n");
	fprintf(out, "  -importobj      Import data object into device\n");
	fprintf(out, "  -exportobj      Export data object from device\n");
	fprintf(out, "  -delobj         Delete data object from device\n");
	fprintf(out, "  -in             File to be imported from\n");
	fprintf(out, "  -out            File to be exported to\n");

}

int main(int argc, char **argv)
{
	int ret = 1;
	char *infile = NULL, *outfile = NULL, *prog;
	char *objname = NULL, *passarg = NULL, *pass = NULL;
	FILE *in = NULL, *out = NULL;
	char *lib = NULL, *vendor = NULL;
	unsigned char buf[SDF_MAX_FILE_SIZE];
	unsigned int ulen;
	int len, key_idx = -1;

	int o;
	int op = OP_NONE;
	void *hDev = NULL;
	void *hSession = NULL;

	argc--;
	argv++;
	while (argc >= 1) {
		if (!strcmp(*argv, "-help")) {
opthelp:
			print_usage(stdout, prog);
			goto end;

		} else if (!strcmp(*argv, "-lib")) {
			if (--argc < 1) goto bad;
			lib = *(++argv);

		} else if (!strcmp(*argv, "-vendor")) {
			if (--argc < 1) goto bad;
			vendor = *(++argv);

		} else if (!strcmp(*argv, "-printdevinfo")) {
			if (op)
				goto opthelp;
			op = OP_PRINTDEVINFO;
			if (--argc < 1) goto bad;
			key_idx = atoi(*(++argv));

		} else if (!strcmp(*argv, "-printsm2sign")) {
			if (op)
				goto opthelp;
			op = OP_PRINTSM2SIGN;
			if (--argc < 1) goto bad;
			key_idx = atoi(*(++argv));

		} else if (!strcmp(*argv, "-printsm2enc")) {
			if (op)
				goto opthelp;
			op = OP_PRINTSM2ENC;
			if (--argc < 1) goto bad;
			key_idx = atoi(*(++argv));

		} else if (!strcmp(*argv, "-printrsasign")) {
			if (op)
				goto opthelp;
			op = OP_PRINTRSASIGN;
			if (--argc < 1) goto bad;
			key_idx = atoi(*(++argv));

		} else if (!strcmp(*argv, "-printrsaenc")) {
			if (op)
				goto opthelp;
			op = OP_PRINTRSAENC;
			if (--argc < 1) goto bad;
			key_idx = atoi(*(++argv));

		} else if (!strcmp(*argv, "-accesskey")) {
			if (--argc < 1) goto bad;
			key_idx = atoi(*(++argv));

		} else if (!strcmp(*argv, "-pass")) {
			if (--argc < 1) goto bad;
			pass = *(++argv);

		} else if (!strcmp(*argv, "-importobj")) {
			if (op)
				goto opthelp;
			op = OP_IMPORTOBJ;
			if (--argc < 1) goto bad;
			objname = *(++argv);

		} else if (!strcmp(*argv, "-exportobj")) {
			if (op)
				goto opthelp;
			op = OP_EXPORTOBJ;
			if (--argc < 1) goto bad;
			objname = *(++argv);

		} else if (!strcmp(*argv, "-delobj")) {
			if (op)
				goto opthelp;
			op = OP_DELOBJ;
			if (--argc < 1) goto bad;
			objname = *(++argv);

		} else if (!strcmp(*argv, "-in")) {
			if (--argc < 1) goto bad;
			infile = *(++argv);

		} else if (!strcmp(*argv, "-out")) {
			if (--argc < 1) goto bad;
			outfile = *(++argv);

		} else {
			break;
		}

		argc--;
		argv++;
	}


	if (argc != 0)
		goto opthelp;

	if (!lib) {
		fprintf(stderr, "Option '-lib' required\n");
		goto opthelp;
	}
	if (SDF_LoadLibrary(lib, vendor) != SDR_OK) {
		//ERR_print_errors(stderr);
		goto end;
	}

	if (op == OP_NONE) {
		ret = 0;
		goto end;
	}

	if (SDF_OpenDevice(&hDev) != SDR_OK
		|| SDF_OpenSession(hDev, &hSession) != SDR_OK) {
		//ERR_print_errors(stderr);
		goto end;
	}

	switch (op) {
	case OP_PRINTDEVINFO:
	case OP_PRINTSM2SIGN:
	case OP_PRINTSM2ENC:
	case OP_PRINTRSASIGN:
	case OP_PRINTRSAENC:
		if (!(out = fopen(outfile, "w"))) {
			goto opthelp;
		}
		break;
	}

	switch (op) {
	case OP_PRINTSM2SIGN:
	case OP_PRINTSM2ENC:
	case OP_PRINTRSASIGN:
	case OP_PRINTRSAENC:
	case OP_ACCESSKEY:
		if (key_idx < SDF_MIN_KEY_INDEX || key_idx > SDF_MAX_KEY_INDEX) {
			fprintf(stderr, "Invalid key index\n");
			goto end;
		}
		break;
	}

	if (op == OP_PRINTDEVINFO) {
		DEVICEINFO devInfo;
		if (SDF_GetDeviceInfo(hSession, &devInfo) != SDR_OK
			|| SDF_PrintDeviceInfo(out, &devInfo) != SDR_OK) {
			//ERR_print_errors(stderr);
			goto end;
		}

	} else if (op == OP_PRINTSM2SIGN || op == OP_PRINTSM2ENC) {
		ECCrefPublicKey publicKey;
		if (op == OP_PRINTSM2SIGN) {
			if (SDF_ExportSignPublicKey_ECC(hSession,
				key_idx, &publicKey) != SDR_OK) {
				//ERR_print_errors(stderr);
				goto end;
			}
			fprintf(out, "SM2 Signing Public Key:\n");
		} else {
			if (SDF_ExportEncPublicKey_ECC(hSession,
				key_idx, &publicKey) != SDR_OK) {
				//ERR_print_errors(stderr);
				goto end;
			}
			fprintf(out, "SM2 Encryption Public Key:\n");
		}
		if (SDF_PrintECCPublicKey(out, &publicKey) != SDR_OK) {
			//ERR_print_errors(stderr);
			goto end;
		}

	} else if (op == OP_PRINTRSASIGN || op == OP_PRINTRSAENC) {
		RSArefPublicKey publicKey;
		if (op == OP_PRINTRSASIGN) {
			if (SDF_ExportSignPublicKey_RSA(hSession,
				key_idx, &publicKey) != SDR_OK) {
				//ERR_print_errors(stderr);
				goto end;
			}
			fprintf(out, "RSA Signing Public Key:\n");
		} else {
			if (SDF_ExportEncPublicKey_RSA(hSession,
				key_idx, &publicKey) != SDR_OK) {
				//ERR_print_errors(stderr);
				goto end;
			}
			fprintf(out, "RSA Encryption Public Key:\n");
		}
		if (SDF_PrintRSAPublicKey(out, &publicKey) != SDR_OK) {
			//ERR_print_errors(stderr);
			goto end;
		}

	} else if (op == OP_ACCESSKEY) {
		if (SDF_GetPrivateKeyAccessRight(hSession, (unsigned int)key_idx,
			(unsigned char *)pass, strlen(pass)) != SDR_OK) {
			return 0;
		}
		(void)SDF_ReleasePrivateKeyAccessRight(hSession, (unsigned int)key_idx);
		fprintf(stderr, "Access private key %d success\n", key_idx);

	} else if (op == OP_IMPORTOBJ) {
		if (!(in = fopen(infile, "r"))) {
			goto opthelp;
		}
		if ((len = fread(buf, 1, SDF_MAX_FILE_SIZE, in)) < 0) {
			fprintf(stderr, "Error reading data object content\n");
			goto end;
		}
		if (SDF_CreateFile(hSession, (unsigned char *)objname, strlen(objname), len) != SDR_OK
			|| SDF_WriteFile(hSession, (unsigned char *)objname, strlen(objname), 0, len, buf) != SDR_OK) {
			//ERR_print_errors(stderr);
			goto end;
		}
		fprintf(stderr, "Object '%s' (%d bytes) created\n", objname, len);

	} else if (op == OP_EXPORTOBJ) {
		if (!(out = fopen(outfile, "w"))) {
			goto opthelp;
		}
		if (SDF_ReadFile(hSession, (unsigned char *)objname, strlen(objname), 0, &ulen, buf) != SDR_OK
			|| fwrite(buf, 1, ulen, out) != ulen) {
			//ERR_print_errors(stderr);
			goto end;
		}
		fprintf(stderr, "Object '%s' (%u bytes) exported\n", objname, ulen);

	} else if (op == OP_DELOBJ) {
		if (SDF_DeleteFile(hSession, (unsigned char *)objname, strlen(objname)) != SDR_OK) {
			//ERR_print_errors(stderr);
			goto end;
		}
		fprintf(stderr, "Object '%s' deleted\n", objname);

	} else {
		goto end;
	}

	ret = 0;

bad:
	fprintf(stderr, "%s: commands should not be used together\n", prog);


end:
	fclose(in);
	fclose(out);

	if (hSession) (void)SDF_CloseSession(hSession);
	if (hDev) (void)SDF_CloseDevice(hDev);
	if (lib) SDF_UnloadLibrary();
	return ret;
}