Ashin Walpola
d107534eb2
obu-firmware builds against the vanetza-idf C-ITS library, which until now came from the colleague's microbu-esp32c5 tree beside the repository and was not tracked here, so a clone of this repository could not build the firmware it ships. The library alone is now part of obu-firmware, as obu-firmware/external/vanetza-idf: their external/vanetza-idf at commit cf4b99f, unchanged (9775 files; see its PROVENANCE.md). CMake takes it from there by default; -DVANETZA_IDF_DIR still points the build elsewhere. The rest of the colleague's tree (their own VAM firmware, PKI tooling, station-link Python tools, the V2X2MAP bridge) stays out of this repository and gitignored; nothing is pushed to their repository. NOTES.md, docs/06, TODO.md and the pcap verifier's usage line point at the new location.
127 lines
4.4 KiB
C++
127 lines
4.4 KiB
C++
#ifndef SECURED_MESSAGE_HPP_DCBC74AC
|
|
#define SECURED_MESSAGE_HPP_DCBC74AC
|
|
|
|
#include <vanetza/asn1/asn1c_wrapper.hpp>
|
|
#include <vanetza/asn1/security_profile.hpp>
|
|
#include VANETZA_ASN1_SECURITY_HEADER(EtsiTs103097Data.h)
|
|
#include <vanetza/common/archives.hpp>
|
|
#include <vanetza/common/its_aid.hpp>
|
|
#include <vanetza/net/packet_variant.hpp>
|
|
#include <vanetza/security/hash_algorithm.hpp>
|
|
#include <vanetza/security/hashed_id.hpp>
|
|
#include <vanetza/security/public_key.hpp>
|
|
#include <vanetza/security/signature.hpp>
|
|
#include <vanetza/security/v3/asn1_types.hpp>
|
|
#include <vanetza/security/v3/certificate.hpp>
|
|
|
|
#include <boost/optional/optional_fwd.hpp>
|
|
#include <boost/variant/variant_fwd.hpp>
|
|
#include <array>
|
|
#include <cstdint>
|
|
#include <list>
|
|
|
|
namespace vanetza
|
|
{
|
|
namespace security
|
|
{
|
|
namespace v3
|
|
{
|
|
|
|
struct SecuredMessage : public asn1::asn1c_oer_wrapper<asn1::EtsiTs103097Data>
|
|
{
|
|
using Time64 = std::uint64_t;
|
|
using SignerIdentifier = boost::variant<const asn1::HashedId8*, const asn1::Certificate*>;
|
|
|
|
SecuredMessage();
|
|
static SecuredMessage with_signed_data();
|
|
static SecuredMessage with_signed_data_hash();
|
|
static SecuredMessage with_encrypted_data();
|
|
|
|
uint8_t protocol_version() const;
|
|
ItsAid its_aid() const;
|
|
PacketVariant payload() const;
|
|
boost::optional<HashedId8> certificate_id() const;
|
|
bool is_signed() const;
|
|
bool is_encrypted() const;
|
|
boost::optional<Time64> generation_time() const;
|
|
boost::optional<Signature> signature() const;
|
|
SignerIdentifier signer_identifier() const;
|
|
ByteBuffer signing_payload() const;
|
|
HashAlgorithm hash_id() const;
|
|
|
|
void set_its_aid(ItsAid its_aid);
|
|
void set_generation_time(Time64 time);
|
|
void set_generation_location(const asn1::ThreeDLocation& location);
|
|
void set_payload(const ByteBuffer& payload);
|
|
void set_external_payload_hash(const Sha256Digest& hash);
|
|
void set_hash_id(HashAlgorithm);
|
|
void set_signature(const Signature& signature);
|
|
std::list<HashedId3> get_inline_p2pcd_request() const;
|
|
void set_inline_p2pcd_request(std::list<HashedId3> requests);
|
|
void add_inline_p2pcd_request(HashedId3 unkown_certificate_digest);
|
|
void set_signature(const SomeEcdsaSignature& signature);
|
|
void set_dummy_signature();
|
|
void set_signer_identifier_self();
|
|
void set_signer_identifier(const HashedId8&);
|
|
void set_signer_identifier(const Certificate&);
|
|
void set_requested_certificate(const Certificate&);
|
|
|
|
void get_aes_ccm_ciphertext(ByteBuffer& ccm_ciphertext, std::array<uint8_t, 12>& nonce) const;
|
|
void set_aes_ccm_ciphertext(const ByteBuffer& ccm_ciphertext, const std::array<uint8_t, 12>& nonce);
|
|
void set_cert_recip_info(const HashedId8& recipient_id,
|
|
const std::array<uint8_t, 16>& ecies_ciphertext,
|
|
const std::array<uint8_t, 16>& ecies_tag,
|
|
const PublicKey& ecies_pub_key);
|
|
bool check_psk_match(const std::array<uint8_t, 16>& psk) const;
|
|
};
|
|
|
|
/**
|
|
* \brief Calculate size of encoded secured message
|
|
* \param msg secured message
|
|
* \return number of octets needed to serialize this message
|
|
*/
|
|
size_t get_size(const SecuredMessage& msg);
|
|
|
|
/**
|
|
* \brief Serialize a secured message
|
|
*
|
|
* @param ar output archive
|
|
* @param msg message to be serialized
|
|
*/
|
|
void serialize(OutputArchive& ar, const SecuredMessage& msg);
|
|
|
|
/**
|
|
* \brief Deserialize a secured message
|
|
*
|
|
* \param ar input archive
|
|
* \param msg destination message object
|
|
* \return size of deserialized message
|
|
*/
|
|
size_t deserialize(InputArchive& ar, SecuredMessage& msg);
|
|
|
|
ByteBuffer get_payload(const asn1::Opaque*);
|
|
ByteBuffer get_payload(const asn1::SignedData*);
|
|
void set_payload(asn1::Opaque* unsecured, const ByteBuffer& buffer);
|
|
ByteBuffer convert_to_payload(vanetza::ChunkPacket packet);
|
|
|
|
boost::optional<HashedId8> get_certificate_id(const SecuredMessage::SignerIdentifier&);
|
|
|
|
/**
|
|
* Check if signer identifier contains a full certificate
|
|
* \param signer_identifier to check
|
|
* \param true if signer identifier contains a full certificate
|
|
*/
|
|
bool contains_certificate(const SecuredMessage::SignerIdentifier& signer_identifier);
|
|
|
|
/**
|
|
* Fetch certificate from identifier if full certificate is included.
|
|
* \return certificate or nullptr
|
|
*/
|
|
const asn1::Certificate* get_certificate(const SecuredMessage::SignerIdentifier&);
|
|
|
|
} // namespace v3
|
|
} // namespace security
|
|
} // namespace vanetza
|
|
|
|
#endif /* SECURED_MESSAGE_HPP_DCBC74AC */
|