Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: implement Authenticode parsing and verification without relying on OpenSSL #100

Merged
merged 43 commits into from
Apr 29, 2024
Merged

feat: implement Authenticode parsing and verification without relying on OpenSSL #100

merged 43 commits into from
Apr 29, 2024

Commits on Apr 10, 2024

  1. feat: draft implementation of authenticode parser

    @plusvic
    plusvic committed Apr 10, 2024
    Configuration menu
    Copy the full SHA
    501450a View commit details
    Browse the repository at this point in the history

  2. feat: get certificate chain for Authenticode signatures.

    @plusvic
    plusvic committed Apr 10, 2024
    Configuration menu
    Copy the full SHA
    2b31e59 View commit details
    Browse the repository at this point in the history

Commits on Apr 11, 2024

  1. feat: advance in the implementation of Authenticode parser

    @plusvic
    plusvic committed Apr 11, 2024
    Configuration menu
    Copy the full SHA
    6c736ac View commit details
    Browse the repository at this point in the history

Commits on Apr 12, 2024

  1. feat: advance with the implementation of authenticode parser

    @plusvic
    plusvic committed Apr 12, 2024
    Configuration menu
    Copy the full SHA
    b918435 View commit details
    Browse the repository at this point in the history

Commits on Apr 15, 2024

  1. feat: advance in the implementation of Authenticode parser.

    @plusvic
    plusvic committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    74b23ac View commit details
    Browse the repository at this point in the history

Commits on Apr 16, 2024

  1. feat: advance in the implementation of Authenticode parser.

    @plusvic
    plusvic committed Apr 16, 2024
    Configuration menu
    Copy the full SHA
    42b4f32 View commit details
    Browse the repository at this point in the history

Commits on Apr 17, 2024

  1. feat: implement verification of Authenticode signatures.

    @plusvic
    plusvic committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    1c6cbf5 View commit details
    Browse the repository at this point in the history

  2. chore: remove unused dependency

    @plusvic
    plusvic committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    428140d View commit details
    Browse the repository at this point in the history

  3. chore: remove unused feature

    @plusvic
    plusvic committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    226d269 View commit details
    Browse the repository at this point in the history

  4. refactor: prepare for implementing countersignatures verification

    @plusvic
    plusvic committed Apr 17, 2024
    Configuration menu
    Copy the full SHA
    1b2c2b8 View commit details
    Browse the repository at this point in the history

Commits on Apr 18, 2024

  1. feat: advance in the implementation of Authenticode verification

    @plusvic
    plusvic committed Apr 18, 2024
    Configuration menu
    Copy the full SHA
    1829de2 View commit details
    Browse the repository at this point in the history

  2. feat: more advances in the Authenticode implementation.

    @plusvic
    plusvic committed Apr 18, 2024
    Configuration menu
    Copy the full SHA
    f12fa6e View commit details
    Browse the repository at this point in the history

  3. fix: issue in hash module.

    @plusvic
    plusvic committed Apr 18, 2024
    Configuration menu
    Copy the full SHA
    2170056 View commit details
    Browse the repository at this point in the history

Commits on Apr 19, 2024

  1. fix: some verification issues.

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    ad46cfa View commit details
    Browse the repository at this point in the history

  2. fix: issues while generating subject and issuer names

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    be6fad1 View commit details
    Browse the repository at this point in the history

  3. feat: add support for DSA signatures

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    390f61a View commit details
    Browse the repository at this point in the history

  4. chore: don't include default features for x509-verify crate

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    2d2229e View commit details
    Browse the repository at this point in the history

  5. feat: add support for SHA-512.

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    551c459 View commit details
    Browse the repository at this point in the history

  6. fix: add support for legacy object identifier 1.3.14.3.2.29

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    94cfd39 View commit details
    Browse the repository at this point in the history

  7. fix: prevent panic in oid_to_str when the OID is not known.

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    42c73fa View commit details
    Browse the repository at this point in the history

  8. Merge branch 'main' into authenticode2

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    12289f7 View commit details
    Browse the repository at this point in the history

  9. fix: add missing import

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    8772e20 View commit details
    Browse the repository at this point in the history

  10. Merge branch 'main' into authenticode2

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    7a424d3 View commit details
    Browse the repository at this point in the history

  11. Merge branch 'main' into authenticode2

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    1672d1c View commit details
    Browse the repository at this point in the history

  12. refactor: simplify parse_content_info

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    32b3453 View commit details
    Browse the repository at this point in the history

  13. fix: broken code

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    998ed3d View commit details
    Browse the repository at this point in the history

  14. Merge branch 'main' into authenticode2

    @plusvic
    plusvic committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    847ef09 View commit details
    Browse the repository at this point in the history

Commits on Apr 22, 2024

  1. feat: Added support for non-canonically DER encoded (counter)signatur… 

    …es (#99)

This adds deferred parsing of SignedAttributes field of SignedInfo
structure within CMS, allowing us to directly access the raw data of
this field so that it can be properly verified without canonical DER
decoder in the way.

To make things easier and avoid rewrite of as many code as possible,
there's option to turn `DeferSignerInfo` structure directly into
`SignerInfo` structure. On top of that, all other fields are decoded
as usual, making deferred structure still useful in cases where
non-deferred attributes are needed.

Affected binary added to tests.
    @metthal
    metthal authored Apr 22, 2024
    Configuration menu
    Copy the full SHA
    dd7e7e7 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'main' into authenticode2

    @plusvic
    plusvic committed Apr 22, 2024
    Configuration menu
    Copy the full SHA
    c5ff4a5 View commit details
    Browse the repository at this point in the history

  3. style: apply rustfmt and minor refactor

    @plusvic
    plusvic committed Apr 22, 2024
    Configuration menu
    Copy the full SHA
    f6a42d5 View commit details
    Browse the repository at this point in the history

Commits on Apr 25, 2024

  1. feat: draft implementation of authenticode parser using der-parser

    @plusvic
    plusvic committed Apr 25, 2024
    Configuration menu
    Copy the full SHA
    455fd3e View commit details
    Browse the repository at this point in the history

  2. feat: advance in the implementation of Authenticode parser

    @plusvic
    plusvic committed Apr 25, 2024
    Configuration menu
    Copy the full SHA
    eac72f5 View commit details
    Browse the repository at this point in the history

Commits on Apr 26, 2024

  1. feat: advance with the implementation of Authenticode parser

    @plusvic
    plusvic committed Apr 26, 2024
    Configuration menu
    Copy the full SHA
    0f6bfa0 View commit details
    Browse the repository at this point in the history

  2. refactor: more refactoring and code cleaning

    @plusvic
    plusvic committed Apr 26, 2024
    Configuration menu
    Copy the full SHA
    6374496 View commit details
    Browse the repository at this point in the history

Commits on Apr 27, 2024

  1. feat: add support DSA algorithm

    @plusvic
    plusvic committed Apr 27, 2024
    Configuration menu
    Copy the full SHA
    57bdb3a View commit details
    Browse the repository at this point in the history

  2. fix: recognize obsolete OID.

    @plusvic
    plusvic committed Apr 27, 2024
    Configuration menu
    Copy the full SHA
    a9b461a View commit details
    Browse the repository at this point in the history

  3. fix: implement the Authenticode hash algorithm according to the speci… 

    …fication
    @plusvic
    plusvic committed Apr 27, 2024
    Configuration menu
    Copy the full SHA
    a69140d View commit details
    Browse the repository at this point in the history

  4. fix: issue while parsing nested signatures. 

    The attribute containing the nested signatures can have more than one value, each with one signature.
    @plusvic
    plusvic committed Apr 27, 2024
    Configuration menu
    Copy the full SHA
    432659f View commit details
    Browse the repository at this point in the history

Commits on Apr 28, 2024

  1. refactor: some refactor and documentation improvements.

    @plusvic
    plusvic committed Apr 28, 2024
    Configuration menu
    Copy the full SHA
    619939a View commit details
    Browse the repository at this point in the history

  2. perf: prevent unnecessary memory allocation. 

    Instead of using `to_der_vec_raw`, which allocates a vector, use `write_der` which writes directly to the hasher.
    @plusvic
    plusvic committed Apr 28, 2024
    Configuration menu
    Copy the full SHA
    9ed2358 View commit details
    Browse the repository at this point in the history

Commits on Apr 29, 2024

  1. style: code cleanup

    @plusvic
    plusvic committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    4af2b72 View commit details
    Browse the repository at this point in the history

  2. style: fix Clippy warning

    @plusvic
    plusvic committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    d28b416 View commit details
    Browse the repository at this point in the history

  3. chore: PublicKey::verify is not used when the x509-parser-verify … 

    …feature is enabled
    @plusvic
    plusvic committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    eb7b4da View commit details
    Browse the repository at this point in the history