Ashin Walpola
0e9525162d
obu-firmware builds against vanetza-idf from microbu-esp32c5/external, but that tree was gitignored, so a clone of this repository could not build the firmware it ships. It is now committed here as ordinary files in its own folder, microbu-esp32c5/: the colleague's commit cf4b99f plus the V2X2MAP bridge's signature verification (--trust) used on the bench. Nothing is fetched from or pushed to the colleague's repository; this repository and its remotes carry everything. The folder's own .gitignore keeps build output, downloaded components and private key material out, as it did there; the committed file set is identical to that repository's tracked files. The ESP32-C5 is still flashed from obu-firmware/, which only takes vanetza-idf from microbu-esp32c5/, so the two stay separate folders. FLASHING.md says how to take a newer version of the colleague's tree (copy it over the folder, rebuild, test, commit).
127 lines
4.4 KiB
C++
127 lines
4.4 KiB
C++
#ifndef SECURED_MESSAGE_HPP_DCBC74AC
|
|
#define SECURED_MESSAGE_HPP_DCBC74AC
|
|
|
|
#include <vanetza/asn1/asn1c_wrapper.hpp>
|
|
#include <vanetza/asn1/security_profile.hpp>
|
|
#include VANETZA_ASN1_SECURITY_HEADER(EtsiTs103097Data.h)
|
|
#include <vanetza/common/archives.hpp>
|
|
#include <vanetza/common/its_aid.hpp>
|
|
#include <vanetza/net/packet_variant.hpp>
|
|
#include <vanetza/security/hash_algorithm.hpp>
|
|
#include <vanetza/security/hashed_id.hpp>
|
|
#include <vanetza/security/public_key.hpp>
|
|
#include <vanetza/security/signature.hpp>
|
|
#include <vanetza/security/v3/asn1_types.hpp>
|
|
#include <vanetza/security/v3/certificate.hpp>
|
|
|
|
#include <boost/optional/optional_fwd.hpp>
|
|
#include <boost/variant/variant_fwd.hpp>
|
|
#include <array>
|
|
#include <cstdint>
|
|
#include <list>
|
|
|
|
namespace vanetza
|
|
{
|
|
namespace security
|
|
{
|
|
namespace v3
|
|
{
|
|
|
|
struct SecuredMessage : public asn1::asn1c_oer_wrapper<asn1::EtsiTs103097Data>
|
|
{
|
|
using Time64 = std::uint64_t;
|
|
using SignerIdentifier = boost::variant<const asn1::HashedId8*, const asn1::Certificate*>;
|
|
|
|
SecuredMessage();
|
|
static SecuredMessage with_signed_data();
|
|
static SecuredMessage with_signed_data_hash();
|
|
static SecuredMessage with_encrypted_data();
|
|
|
|
uint8_t protocol_version() const;
|
|
ItsAid its_aid() const;
|
|
PacketVariant payload() const;
|
|
boost::optional<HashedId8> certificate_id() const;
|
|
bool is_signed() const;
|
|
bool is_encrypted() const;
|
|
boost::optional<Time64> generation_time() const;
|
|
boost::optional<Signature> signature() const;
|
|
SignerIdentifier signer_identifier() const;
|
|
ByteBuffer signing_payload() const;
|
|
HashAlgorithm hash_id() const;
|
|
|
|
void set_its_aid(ItsAid its_aid);
|
|
void set_generation_time(Time64 time);
|
|
void set_generation_location(const asn1::ThreeDLocation& location);
|
|
void set_payload(const ByteBuffer& payload);
|
|
void set_external_payload_hash(const Sha256Digest& hash);
|
|
void set_hash_id(HashAlgorithm);
|
|
void set_signature(const Signature& signature);
|
|
std::list<HashedId3> get_inline_p2pcd_request() const;
|
|
void set_inline_p2pcd_request(std::list<HashedId3> requests);
|
|
void add_inline_p2pcd_request(HashedId3 unkown_certificate_digest);
|
|
void set_signature(const SomeEcdsaSignature& signature);
|
|
void set_dummy_signature();
|
|
void set_signer_identifier_self();
|
|
void set_signer_identifier(const HashedId8&);
|
|
void set_signer_identifier(const Certificate&);
|
|
void set_requested_certificate(const Certificate&);
|
|
|
|
void get_aes_ccm_ciphertext(ByteBuffer& ccm_ciphertext, std::array<uint8_t, 12>& nonce) const;
|
|
void set_aes_ccm_ciphertext(const ByteBuffer& ccm_ciphertext, const std::array<uint8_t, 12>& nonce);
|
|
void set_cert_recip_info(const HashedId8& recipient_id,
|
|
const std::array<uint8_t, 16>& ecies_ciphertext,
|
|
const std::array<uint8_t, 16>& ecies_tag,
|
|
const PublicKey& ecies_pub_key);
|
|
bool check_psk_match(const std::array<uint8_t, 16>& psk) const;
|
|
};
|
|
|
|
/**
|
|
* \brief Calculate size of encoded secured message
|
|
* \param msg secured message
|
|
* \return number of octets needed to serialize this message
|
|
*/
|
|
size_t get_size(const SecuredMessage& msg);
|
|
|
|
/**
|
|
* \brief Serialize a secured message
|
|
*
|
|
* @param ar output archive
|
|
* @param msg message to be serialized
|
|
*/
|
|
void serialize(OutputArchive& ar, const SecuredMessage& msg);
|
|
|
|
/**
|
|
* \brief Deserialize a secured message
|
|
*
|
|
* \param ar input archive
|
|
* \param msg destination message object
|
|
* \return size of deserialized message
|
|
*/
|
|
size_t deserialize(InputArchive& ar, SecuredMessage& msg);
|
|
|
|
ByteBuffer get_payload(const asn1::Opaque*);
|
|
ByteBuffer get_payload(const asn1::SignedData*);
|
|
void set_payload(asn1::Opaque* unsecured, const ByteBuffer& buffer);
|
|
ByteBuffer convert_to_payload(vanetza::ChunkPacket packet);
|
|
|
|
boost::optional<HashedId8> get_certificate_id(const SecuredMessage::SignerIdentifier&);
|
|
|
|
/**
|
|
* Check if signer identifier contains a full certificate
|
|
* \param signer_identifier to check
|
|
* \param true if signer identifier contains a full certificate
|
|
*/
|
|
bool contains_certificate(const SecuredMessage::SignerIdentifier& signer_identifier);
|
|
|
|
/**
|
|
* Fetch certificate from identifier if full certificate is included.
|
|
* \return certificate or nullptr
|
|
*/
|
|
const asn1::Certificate* get_certificate(const SecuredMessage::SignerIdentifier&);
|
|
|
|
} // namespace v3
|
|
} // namespace security
|
|
} // namespace vanetza
|
|
|
|
#endif /* SECURED_MESSAGE_HPP_DCBC74AC */
|