git.oblomov.eu Git - wine/blob - dlls/crypt32/msg.c

   1 /*
   2  * Copyright 2007 Juan Lang
   3  *
   4  * This library is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU Lesser General Public
   6  * License as published by the Free Software Foundation; either
   7  * version 2.1 of the License, or (at your option) any later version.
   8  *
   9  * This library is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12  * Lesser General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU Lesser General Public
  15  * License along with this library; if not, write to the Free Software
  16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  17  */
  18
  19 #include "config.h"
  20 #include "wine/port.h"
  21
  22 #include <stdarg.h>
  23 #define NONAMELESSUNION
  24 #include "windef.h"
  25 #include "winbase.h"
  26 #include "wincrypt.h"
  27 #include "snmp.h"
  28
  29 #include "wine/debug.h"
  30 #include "wine/exception.h"
  31 #include "crypt32_private.h"
  32
  33 WINE_DEFAULT_DEBUG_CHANNEL(crypt);
  34
  35 /* Called when a message's ref count reaches zero.  Free any message-specific
  36  * data here.
  37  */
  38 typedef void (*CryptMsgCloseFunc)(HCRYPTMSG msg);
  39
  40 typedef BOOL (*CryptMsgGetParamFunc)(HCRYPTMSG hCryptMsg, DWORD dwParamType,
  41  DWORD dwIndex, void *pvData, DWORD *pcbData);
  42
  43 typedef BOOL (*CryptMsgUpdateFunc)(HCRYPTMSG hCryptMsg, const BYTE *pbData,
  44  DWORD cbData, BOOL fFinal);
  45
  46 typedef BOOL (*CryptMsgControlFunc)(HCRYPTMSG hCryptMsg, DWORD dwFlags,
  47  DWORD dwCtrlType, const void *pvCtrlPara);
  48
  49 static BOOL CRYPT_DefaultMsgControl(HCRYPTMSG hCryptMsg, DWORD dwFlags,
  50  DWORD dwCtrlType, const void *pvCtrlPara)
  51 {
  52     TRACE("(%p, %08x, %d, %p)\n", hCryptMsg, dwFlags, dwCtrlType, pvCtrlPara);
  53     SetLastError(E_INVALIDARG);
  54     return FALSE;
  55 }
  56
  57 typedef enum _CryptMsgState {
  58     MsgStateInit,
  59     MsgStateUpdated,
  60     MsgStateDataFinalized,
  61     MsgStateFinalized
  62 } CryptMsgState;
  63
  64 typedef struct _CryptMsgBase
  65 {
  66     LONG                 ref;
  67     DWORD                open_flags;
  68     BOOL                 streamed;
  69     CMSG_STREAM_INFO     stream_info;
  70     CryptMsgState        state;
  71     CryptMsgCloseFunc    close;
  72     CryptMsgUpdateFunc   update;
  73     CryptMsgGetParamFunc get_param;
  74     CryptMsgControlFunc  control;
  75 } CryptMsgBase;
  76
  77 static inline void CryptMsgBase_Init(CryptMsgBase *msg, DWORD dwFlags,
  78  PCMSG_STREAM_INFO pStreamInfo, CryptMsgCloseFunc close,
  79  CryptMsgGetParamFunc get_param, CryptMsgUpdateFunc update,
  80  CryptMsgControlFunc control)
  81 {
  82     msg->ref = 1;
  83     msg->open_flags = dwFlags;
  84     if (pStreamInfo)
  85     {
  86         msg->streamed = TRUE;
  87         msg->stream_info = *pStreamInfo;
  88     }
  89     else
  90     {
  91         msg->streamed = FALSE;
  92         memset(&msg->stream_info, 0, sizeof(msg->stream_info));
  93     }
  94     msg->close = close;
  95     msg->get_param = get_param;
  96     msg->update = update;
  97     msg->control = control;
  98     msg->state = MsgStateInit;
  99 }
 100
 101 typedef struct _CDataEncodeMsg
 102 {
 103     CryptMsgBase base;
 104     DWORD        bare_content_len;
 105     LPBYTE       bare_content;
 106 } CDataEncodeMsg;
 107
 108 static const BYTE empty_data_content[] = { 0x04,0x00 };
 109
 110 static void CDataEncodeMsg_Close(HCRYPTMSG hCryptMsg)
 111 {
 112     CDataEncodeMsg *msg = hCryptMsg;
 113
 114     if (msg->bare_content != empty_data_content)
 115         LocalFree(msg->bare_content);
 116 }
 117
 118 static BOOL WINAPI CRYPT_EncodeContentLength(DWORD dwCertEncodingType,
 119  LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags,
 120  PCRYPT_ENCODE_PARA pEncodePara, BYTE *pbEncoded, DWORD *pcbEncoded)
 121 {
 122     DWORD dataLen = *(DWORD *)pvStructInfo;
 123     DWORD lenBytes;
 124     BOOL ret = TRUE;
 125
 126     /* Trick:  report bytes needed based on total message length, even though
 127      * the message isn't available yet.  The caller will use the length
 128      * reported here to encode its length.
 129      */
 130     CRYPT_EncodeLen(dataLen, NULL, &lenBytes);
 131     if (!pbEncoded)
 132         *pcbEncoded = 1 + lenBytes + dataLen;
 133     else
 134     {
 135         if ((ret = CRYPT_EncodeEnsureSpace(dwFlags, pEncodePara, pbEncoded,
 136          pcbEncoded, 1 + lenBytes)))
 137         {
 138             if (dwFlags & CRYPT_ENCODE_ALLOC_FLAG)
 139                 pbEncoded = *(BYTE **)pbEncoded;
 140             *pbEncoded++ = ASN_OCTETSTRING;
 141             CRYPT_EncodeLen(dataLen, pbEncoded,
 142              &lenBytes);
 143         }
 144     }
 145     return ret;
 146 }
 147
 148 static BOOL CRYPT_EncodeDataContentInfoHeader(const CDataEncodeMsg *msg,
 149  CRYPT_DATA_BLOB *header)
 150 {
 151     BOOL ret;
 152
 153     if (msg->base.streamed && msg->base.stream_info.cbContent == 0xffffffff)
 154     {
 155         static const BYTE headerValue[] = { 0x30,0x80,0x06,0x09,0x2a,0x86,0x48,
 156          0x86,0xf7,0x0d,0x01,0x07,0x01,0xa0,0x80,0x24,0x80 };
 157
 158         header->pbData = LocalAlloc(0, sizeof(headerValue));
 159         if (header->pbData)
 160         {
 161             header->cbData = sizeof(headerValue);
 162             memcpy(header->pbData, headerValue, sizeof(headerValue));
 163             ret = TRUE;
 164         }
 165         else
 166             ret = FALSE;
 167     }
 168     else
 169     {
 170         struct AsnConstructedItem constructed = { 0,
 171          &msg->base.stream_info.cbContent, CRYPT_EncodeContentLength };
 172         struct AsnEncodeSequenceItem items[2] = {
 173          { szOID_RSA_data, CRYPT_AsnEncodeOid, 0 },
 174          { &constructed,   CRYPT_AsnEncodeConstructed, 0 },
 175         };
 176
 177         ret = CRYPT_AsnEncodeSequence(X509_ASN_ENCODING, items,
 178          sizeof(items) / sizeof(items[0]), CRYPT_ENCODE_ALLOC_FLAG, NULL,
 179          (LPBYTE)&header->pbData, &header->cbData);
 180         if (ret)
 181         {
 182             /* Trick:  subtract the content length from the reported length,
 183              * as the actual content hasn't come yet.
 184              */
 185             header->cbData -= msg->base.stream_info.cbContent;
 186         }
 187     }
 188     return ret;
 189 }
 190
 191 static BOOL CDataEncodeMsg_Update(HCRYPTMSG hCryptMsg, const BYTE *pbData,
 192  DWORD cbData, BOOL fFinal)
 193 {
 194     CDataEncodeMsg *msg = hCryptMsg;
 195     BOOL ret = FALSE;
 196
 197     if (msg->base.state == MsgStateFinalized)
 198         SetLastError(CRYPT_E_MSG_ERROR);
 199     else if (msg->base.streamed)
 200     {
 201         __TRY
 202         {
 203             if (msg->base.state != MsgStateUpdated)
 204             {
 205                 CRYPT_DATA_BLOB header;
 206
 207                 ret = CRYPT_EncodeDataContentInfoHeader(msg, &header);
 208                 if (ret)
 209                 {
 210                     ret = msg->base.stream_info.pfnStreamOutput(
 211                      msg->base.stream_info.pvArg, header.pbData, header.cbData,
 212                      FALSE);
 213                     LocalFree(header.pbData);
 214                 }
 215             }
 216             /* Curiously, every indefinite-length streamed update appears to
 217              * get its own tag and length, regardless of fFinal.
 218              */
 219             if (msg->base.stream_info.cbContent == 0xffffffff)
 220             {
 221                 BYTE *header;
 222                 DWORD headerLen;
 223
 224                 ret = CRYPT_EncodeContentLength(X509_ASN_ENCODING, NULL,
 225                  &cbData, CRYPT_ENCODE_ALLOC_FLAG, NULL, (BYTE *)&header,
 226                  &headerLen);
 227                 if (ret)
 228                 {
 229                     ret = msg->base.stream_info.pfnStreamOutput(
 230                      msg->base.stream_info.pvArg, header, headerLen,
 231                      FALSE);
 232                     LocalFree(header);
 233                 }
 234             }
 235             if (!fFinal)
 236             {
 237                 ret = msg->base.stream_info.pfnStreamOutput(
 238                  msg->base.stream_info.pvArg, (BYTE *)pbData, cbData,
 239                  FALSE);
 240                 msg->base.state = MsgStateUpdated;
 241             }
 242             else
 243             {
 244                 msg->base.state = MsgStateFinalized;
 245                 if (msg->base.stream_info.cbContent == 0xffffffff)
 246                 {
 247                     BYTE indefinite_trailer[6] = { 0 };
 248
 249                     ret = msg->base.stream_info.pfnStreamOutput(
 250                      msg->base.stream_info.pvArg, (BYTE *)pbData, cbData,
 251                      FALSE);
 252                     if (ret)
 253                         ret = msg->base.stream_info.pfnStreamOutput(
 254                          msg->base.stream_info.pvArg, indefinite_trailer,
 255                          sizeof(indefinite_trailer), TRUE);
 256                 }
 257                 else
 258                     ret = msg->base.stream_info.pfnStreamOutput(
 259                      msg->base.stream_info.pvArg, (BYTE *)pbData, cbData, TRUE);
 260             }
 261         }
 262         __EXCEPT_PAGE_FAULT
 263         {
 264             SetLastError(STATUS_ACCESS_VIOLATION);
 265             ret = FALSE;
 266         }
 267         __ENDTRY;
 268     }
 269     else
 270     {
 271         if (!fFinal)
 272         {
 273             if (msg->base.open_flags & CMSG_DETACHED_FLAG)
 274                 SetLastError(E_INVALIDARG);
 275             else
 276                 SetLastError(CRYPT_E_MSG_ERROR);
 277         }
 278         else
 279         {
 280             CRYPT_DATA_BLOB blob = { cbData, (LPBYTE)pbData };
 281
 282             msg->base.state = MsgStateFinalized;
 283             /* non-streamed data messages don't allow non-final updates,
 284              * don't bother checking whether data already exist, they can't.
 285              */
 286             ret = CryptEncodeObjectEx(X509_ASN_ENCODING, X509_OCTET_STRING,
 287              &blob, CRYPT_ENCODE_ALLOC_FLAG, NULL, &msg->bare_content,
 288              &msg->bare_content_len);
 289         }
 290     }
 291     return ret;
 292 }
 293
 294 static BOOL CRYPT_CopyParam(void *pvData, DWORD *pcbData, const void *src,
 295  DWORD len)
 296 {
 297     BOOL ret = TRUE;
 298
 299     if (!pvData)
 300         *pcbData = len;
 301     else if (*pcbData < len)
 302     {
 303         *pcbData = len;
 304         SetLastError(ERROR_MORE_DATA);
 305         ret = FALSE;
 306     }
 307     else
 308     {
 309         *pcbData = len;
 310         memcpy(pvData, src, len);
 311     }
 312     return ret;
 313 }
 314
 315 static BOOL CDataEncodeMsg_GetParam(HCRYPTMSG hCryptMsg, DWORD dwParamType,
 316  DWORD dwIndex, void *pvData, DWORD *pcbData)
 317 {
 318     CDataEncodeMsg *msg = hCryptMsg;
 319     BOOL ret = FALSE;
 320
 321     switch (dwParamType)
 322     {
 323     case CMSG_CONTENT_PARAM:
 324         if (msg->base.streamed)
 325             SetLastError(E_INVALIDARG);
 326         else
 327         {
 328             CRYPT_CONTENT_INFO info;
 329             char rsa_data[] = "1.2.840.113549.1.7.1";
 330
 331             info.pszObjId = rsa_data;
 332             info.Content.cbData = msg->bare_content_len;
 333             info.Content.pbData = msg->bare_content;
 334             ret = CryptEncodeObject(X509_ASN_ENCODING, PKCS_CONTENT_INFO, &info,
 335              pvData, pcbData);
 336         }
 337         break;
 338     case CMSG_BARE_CONTENT_PARAM:
 339         if (msg->base.streamed)
 340             SetLastError(E_INVALIDARG);
 341         else
 342             ret = CRYPT_CopyParam(pvData, pcbData, msg->bare_content,
 343              msg->bare_content_len);
 344         break;
 345     default:
 346         SetLastError(CRYPT_E_INVALID_MSG_TYPE);
 347     }
 348     return ret;
 349 }
 350
 351 static HCRYPTMSG CDataEncodeMsg_Open(DWORD dwFlags, const void *pvMsgEncodeInfo,
 352  LPSTR pszInnerContentObjID, PCMSG_STREAM_INFO pStreamInfo)
 353 {
 354     CDataEncodeMsg *msg;
 355
 356     if (pvMsgEncodeInfo)
 357     {
 358         SetLastError(E_INVALIDARG);
 359         return NULL;
 360     }
 361     msg = CryptMemAlloc(sizeof(CDataEncodeMsg));
 362     if (msg)
 363     {
 364         CryptMsgBase_Init((CryptMsgBase *)msg, dwFlags, pStreamInfo,
 365          CDataEncodeMsg_Close, CDataEncodeMsg_GetParam, CDataEncodeMsg_Update,
 366          CRYPT_DefaultMsgControl);
 367         msg->bare_content_len = sizeof(empty_data_content);
 368         msg->bare_content = (LPBYTE)empty_data_content;
 369     }
 370     return msg;
 371 }
 372
 373 typedef struct _CHashEncodeMsg
 374 {
 375     CryptMsgBase    base;
 376     HCRYPTPROV      prov;
 377     HCRYPTHASH      hash;
 378     CRYPT_DATA_BLOB data;
 379 } CHashEncodeMsg;
 380
 381 static void CHashEncodeMsg_Close(HCRYPTMSG hCryptMsg)
 382 {
 383     CHashEncodeMsg *msg = hCryptMsg;
 384
 385     CryptMemFree(msg->data.pbData);
 386     CryptDestroyHash(msg->hash);
 387     if (msg->base.open_flags & CMSG_CRYPT_RELEASE_CONTEXT_FLAG)
 388         CryptReleaseContext(msg->prov, 0);
 389 }
 390
 391 static BOOL CRYPT_EncodePKCSDigestedData(CHashEncodeMsg *msg, void *pvData,
 392  DWORD *pcbData)
 393 {
 394     BOOL ret;
 395     ALG_ID algID;
 396     DWORD size = sizeof(algID);
 397
 398     ret = CryptGetHashParam(msg->hash, HP_ALGID, (BYTE *)&algID, &size, 0);
 399     if (ret)
 400     {
 401         CRYPT_DIGESTED_DATA digestedData = { 0 };
 402         char oid_rsa_data[] = szOID_RSA_data;
 403
 404         digestedData.version = CMSG_HASHED_DATA_PKCS_1_5_VERSION;
 405         digestedData.DigestAlgorithm.pszObjId = (LPSTR)CertAlgIdToOID(algID);
 406         /* FIXME: what about digestedData.DigestAlgorithm.Parameters? */
 407         /* Quirk:  OID is only encoded messages if an update has happened */
 408         if (msg->base.state != MsgStateInit)
 409             digestedData.ContentInfo.pszObjId = oid_rsa_data;
 410         if (!(msg->base.open_flags & CMSG_DETACHED_FLAG) && msg->data.cbData)
 411         {
 412             ret = CRYPT_AsnEncodeOctets(0, NULL, &msg->data,
 413              CRYPT_ENCODE_ALLOC_FLAG, NULL,
 414              (LPBYTE)&digestedData.ContentInfo.Content.pbData,
 415              &digestedData.ContentInfo.Content.cbData);
 416         }
 417         if (msg->base.state == MsgStateFinalized)
 418         {
 419             size = sizeof(DWORD);
 420             ret = CryptGetHashParam(msg->hash, HP_HASHSIZE,
 421              (LPBYTE)&digestedData.hash.cbData, &size, 0);
 422             if (ret)
 423             {
 424                 digestedData.hash.pbData = CryptMemAlloc(
 425                  digestedData.hash.cbData);
 426                 ret = CryptGetHashParam(msg->hash, HP_HASHVAL,
 427                  digestedData.hash.pbData, &digestedData.hash.cbData, 0);
 428             }
 429         }
 430         if (ret)
 431             ret = CRYPT_AsnEncodePKCSDigestedData(&digestedData, pvData,
 432              pcbData);
 433         CryptMemFree(digestedData.hash.pbData);
 434         LocalFree(digestedData.ContentInfo.Content.pbData);
 435     }
 436     return ret;
 437 }
 438
 439 static BOOL CHashEncodeMsg_GetParam(HCRYPTMSG hCryptMsg, DWORD dwParamType,
 440  DWORD dwIndex, void *pvData, DWORD *pcbData)
 441 {
 442     CHashEncodeMsg *msg = hCryptMsg;
 443     BOOL ret = FALSE;
 444
 445     TRACE("(%p, %d, %d, %p, %p)\n", hCryptMsg, dwParamType, dwIndex,
 446      pvData, pcbData);
 447
 448     switch (dwParamType)
 449     {
 450     case CMSG_BARE_CONTENT_PARAM:
 451         if (msg->base.streamed)
 452             SetLastError(E_INVALIDARG);
 453         else
 454             ret = CRYPT_EncodePKCSDigestedData(msg, pvData, pcbData);
 455         break;
 456     case CMSG_CONTENT_PARAM:
 457     {
 458         CRYPT_CONTENT_INFO info;
 459
 460         ret = CryptMsgGetParam(hCryptMsg, CMSG_BARE_CONTENT_PARAM, 0, NULL,
 461          &info.Content.cbData);
 462         if (ret)
 463         {
 464             info.Content.pbData = CryptMemAlloc(info.Content.cbData);
 465             if (info.Content.pbData)
 466             {
 467                 ret = CryptMsgGetParam(hCryptMsg, CMSG_BARE_CONTENT_PARAM, 0,
 468                  info.Content.pbData, &info.Content.cbData);
 469                 if (ret)
 470                 {
 471                     char oid_rsa_hashed[] = szOID_RSA_hashedData;
 472
 473                     info.pszObjId = oid_rsa_hashed;
 474                     ret = CryptEncodeObjectEx(X509_ASN_ENCODING,
 475                      PKCS_CONTENT_INFO, &info, 0, NULL, pvData, pcbData);
 476                 }
 477                 CryptMemFree(info.Content.pbData);
 478             }
 479             else
 480                 ret = FALSE;
 481         }
 482         break;
 483     }
 484     case CMSG_COMPUTED_HASH_PARAM:
 485         ret = CryptGetHashParam(msg->hash, HP_HASHVAL, pvData, pcbData, 0);
 486         break;
 487     case CMSG_VERSION_PARAM:
 488         if (msg->base.state != MsgStateFinalized)
 489             SetLastError(CRYPT_E_MSG_ERROR);
 490         else
 491         {
 492             DWORD version = CMSG_HASHED_DATA_PKCS_1_5_VERSION;
 493
 494             /* Since the data are always encoded as octets, the version is
 495              * always 0 (see rfc3852, section 7)
 496              */
 497             ret = CRYPT_CopyParam(pvData, pcbData, &version, sizeof(version));
 498         }
 499         break;
 500     default:
 501         SetLastError(CRYPT_E_INVALID_MSG_TYPE);
 502     }
 503     return ret;
 504 }
 505
 506 static BOOL CHashEncodeMsg_Update(HCRYPTMSG hCryptMsg, const BYTE *pbData,
 507  DWORD cbData, BOOL fFinal)
 508 {
 509     CHashEncodeMsg *msg = hCryptMsg;
 510     BOOL ret = FALSE;
 511
 512     TRACE("(%p, %p, %d, %d)\n", hCryptMsg, pbData, cbData, fFinal);
 513
 514     if (msg->base.state == MsgStateFinalized)
 515         SetLastError(CRYPT_E_MSG_ERROR);
 516     else if (msg->base.streamed || (msg->base.open_flags & CMSG_DETACHED_FLAG))
 517     {
 518         /* Doesn't do much, as stream output is never called, and you
 519          * can't get the content.
 520          */
 521         ret = CryptHashData(msg->hash, pbData, cbData, 0);
 522         msg->base.state = fFinal ? MsgStateFinalized : MsgStateUpdated;
 523     }
 524     else
 525     {
 526         if (!fFinal)
 527             SetLastError(CRYPT_E_MSG_ERROR);
 528         else
 529         {
 530             ret = CryptHashData(msg->hash, pbData, cbData, 0);
 531             if (ret)
 532             {
 533                 msg->data.pbData = CryptMemAlloc(cbData);
 534                 if (msg->data.pbData)
 535                 {
 536                     memcpy(msg->data.pbData + msg->data.cbData, pbData, cbData);
 537                     msg->data.cbData += cbData;
 538                 }
 539                 else
 540                     ret = FALSE;
 541             }
 542             msg->base.state = MsgStateFinalized;
 543         }
 544     }
 545     return ret;
 546 }
 547
 548 static HCRYPTMSG CHashEncodeMsg_Open(DWORD dwFlags, const void *pvMsgEncodeInfo,
 549  LPSTR pszInnerContentObjID, PCMSG_STREAM_INFO pStreamInfo)
 550 {
 551     CHashEncodeMsg *msg;
 552     const CMSG_HASHED_ENCODE_INFO *info = pvMsgEncodeInfo;
 553     HCRYPTPROV prov;
 554     ALG_ID algID;
 555
 556     if (info->cbSize != sizeof(CMSG_HASHED_ENCODE_INFO))
 557     {
 558         SetLastError(E_INVALIDARG);
 559         return NULL;
 560     }
 561     if (!(algID = CertOIDToAlgId(info->HashAlgorithm.pszObjId)))
 562     {
 563         SetLastError(CRYPT_E_UNKNOWN_ALGO);
 564         return NULL;
 565     }
 566     if (info->hCryptProv)
 567         prov = info->hCryptProv;
 568     else
 569     {
 570         prov = CRYPT_GetDefaultProvider();
 571         dwFlags &= ~CMSG_CRYPT_RELEASE_CONTEXT_FLAG;
 572     }
 573     msg = CryptMemAlloc(sizeof(CHashEncodeMsg));
 574     if (msg)
 575     {
 576         CryptMsgBase_Init((CryptMsgBase *)msg, dwFlags, pStreamInfo,
 577          CHashEncodeMsg_Close, CHashEncodeMsg_GetParam, CHashEncodeMsg_Update,
 578          CRYPT_DefaultMsgControl);
 579         msg->prov = prov;
 580         msg->data.cbData = 0;
 581         msg->data.pbData = NULL;
 582         if (!CryptCreateHash(prov, algID, 0, 0, &msg->hash))
 583         {
 584             CryptMsgClose(msg);
 585             msg = NULL;
 586         }
 587     }
 588     return msg;
 589 }
 590
 591 typedef struct _CMSG_SIGNER_ENCODE_INFO_WITH_CMS
 592 {
 593     DWORD                      cbSize;
 594     PCERT_INFO                 pCertInfo;
 595     HCRYPTPROV                 hCryptProv;
 596     DWORD                      dwKeySpec;
 597     CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm;
 598     void                      *pvHashAuxInfo;
 599     DWORD                      cAuthAttr;
 600     PCRYPT_ATTRIBUTE           rgAuthAttr;
 601     DWORD                      cUnauthAttr;
 602     PCRYPT_ATTRIBUTE           rgUnauthAttr;
 603     CERT_ID                    SignerId;
 604     CRYPT_ALGORITHM_IDENTIFIER HashEncryptionAlgorithm;
 605     void                      *pvHashEncryptionAuxInfo;
 606 } CMSG_SIGNER_ENCODE_INFO_WITH_CMS, *PCMSG_SIGNER_ENCODE_INFO_WITH_CMS;
 607
 608 typedef struct _CMSG_SIGNED_ENCODE_INFO_WITH_CMS
 609 {
 610     DWORD                             cbSize;
 611     DWORD                             cSigners;
 612     PCMSG_SIGNER_ENCODE_INFO_WITH_CMS rgSigners;
 613     DWORD                             cCertEncoded;
 614     PCERT_BLOB                        rgCertEncoded;
 615     DWORD                             cCrlEncoded;
 616     PCRL_BLOB                         rgCrlEncoded;
 617     DWORD                             cAttrCertEncoded;
 618     PCERT_BLOB                        rgAttrCertEncoded;
 619 } CMSG_SIGNED_ENCODE_INFO_WITH_CMS, *PCMSG_SIGNED_ENCODE_INFO_WITH_CMS;
 620
 621 static BOOL CRYPT_IsValidSigner(const CMSG_SIGNER_ENCODE_INFO_WITH_CMS *signer)
 622 {
 623     if (signer->cbSize != sizeof(CMSG_SIGNER_ENCODE_INFO) &&
 624      signer->cbSize != sizeof(CMSG_SIGNER_ENCODE_INFO_WITH_CMS))
 625     {
 626         SetLastError(E_INVALIDARG);
 627         return FALSE;
 628     }
 629     if (signer->cbSize == sizeof(CMSG_SIGNER_ENCODE_INFO))
 630     {
 631         if (!signer->pCertInfo->SerialNumber.cbData)
 632         {
 633             SetLastError(E_INVALIDARG);
 634             return FALSE;
 635         }
 636         if (!signer->pCertInfo->Issuer.cbData)
 637         {
 638             SetLastError(E_INVALIDARG);
 639             return FALSE;
 640         }
 641     }
 642     else if (signer->cbSize == sizeof(CMSG_SIGNER_ENCODE_INFO_WITH_CMS))
 643     {
 644         switch (signer->SignerId.dwIdChoice)
 645         {
 646         case 0:
 647             if (!signer->pCertInfo->SerialNumber.cbData)
 648             {
 649                 SetLastError(E_INVALIDARG);
 650                 return FALSE;
 651             }
 652             if (!signer->pCertInfo->Issuer.cbData)
 653             {
 654                 SetLastError(E_INVALIDARG);
 655                 return FALSE;
 656             }
 657             break;
 658         case CERT_ID_ISSUER_SERIAL_NUMBER:
 659             if (!signer->SignerId.u.IssuerSerialNumber.SerialNumber.cbData)
 660             {
 661                 SetLastError(E_INVALIDARG);
 662                 return FALSE;
 663             }
 664             if (!signer->SignerId.u.IssuerSerialNumber.Issuer.cbData)
 665             {
 666                 SetLastError(E_INVALIDARG);
 667                 return FALSE;
 668             }
 669             break;
 670         case CERT_ID_KEY_IDENTIFIER:
 671             if (!signer->SignerId.u.KeyId.cbData)
 672             {
 673                 SetLastError(E_INVALIDARG);
 674                 return FALSE;
 675             }
 676             break;
 677         default:
 678             SetLastError(E_INVALIDARG);
 679         }
 680         if (signer->HashEncryptionAlgorithm.pszObjId)
 681         {
 682             FIXME("CMSG_SIGNER_ENCODE_INFO with CMS fields unsupported\n");
 683             return FALSE;
 684         }
 685     }
 686     if (!signer->hCryptProv)
 687     {
 688         SetLastError(E_INVALIDARG);
 689         return FALSE;
 690     }
 691     if (!CertOIDToAlgId(signer->HashAlgorithm.pszObjId))
 692     {
 693         SetLastError(CRYPT_E_UNKNOWN_ALGO);
 694         return FALSE;
 695     }
 696     return TRUE;
 697 }
 698
 699 static BOOL CRYPT_ConstructBlob(CRYPT_DATA_BLOB *out, const CRYPT_DATA_BLOB *in)
 700 {
 701     BOOL ret = TRUE;
 702
 703     out->cbData = in->cbData;
 704     if (out->cbData)
 705     {
 706         out->pbData = CryptMemAlloc(out->cbData);
 707         if (out->pbData)
 708             memcpy(out->pbData, in->pbData, out->cbData);
 709         else
 710             ret = FALSE;
 711     }
 712     else
 713         out->pbData = NULL;
 714     return ret;
 715 }
 716
 717 static BOOL CRYPT_ConstructBlobArray(DWORD *outCBlobs,
 718  PCRYPT_DATA_BLOB *outPBlobs, DWORD cBlobs, const CRYPT_DATA_BLOB *pBlobs)
 719 {
 720     BOOL ret = TRUE;
 721
 722     *outCBlobs = cBlobs;
 723     if (cBlobs)
 724     {
 725         *outPBlobs = CryptMemAlloc(cBlobs * sizeof(CRYPT_DATA_BLOB));
 726         if (*outPBlobs)
 727         {
 728             DWORD i;
 729
 730             memset(*outPBlobs, 0, cBlobs * sizeof(CRYPT_DATA_BLOB));
 731             for (i = 0; ret && i < cBlobs; i++)
 732                 ret = CRYPT_ConstructBlob(&(*outPBlobs)[i], &pBlobs[i]);
 733         }
 734         else
 735             ret = FALSE;
 736     }
 737     return ret;
 738 }
 739
 740 static void CRYPT_FreeBlobArray(DWORD cBlobs, PCRYPT_DATA_BLOB blobs)
 741 {
 742     DWORD i;
 743
 744     for (i = 0; i < cBlobs; i++)
 745         CryptMemFree(blobs[i].pbData);
 746     CryptMemFree(blobs);
 747 }
 748
 749 static BOOL CRYPT_ConstructAttribute(CRYPT_ATTRIBUTE *out,
 750  const CRYPT_ATTRIBUTE *in)
 751 {
 752     BOOL ret;
 753
 754     out->pszObjId = CryptMemAlloc(strlen(in->pszObjId) + 1);
 755     if (out->pszObjId)
 756     {
 757         strcpy(out->pszObjId, in->pszObjId);
 758         ret = CRYPT_ConstructBlobArray(&out->cValue, &out->rgValue,
 759          in->cValue, in->rgValue);
 760     }
 761     else
 762         ret = FALSE;
 763     return ret;
 764 }
 765
 766 static BOOL CRYPT_ConstructAttributes(CRYPT_ATTRIBUTES *out,
 767  const CRYPT_ATTRIBUTES *in)
 768 {
 769     BOOL ret = TRUE;
 770
 771     out->cAttr = in->cAttr;
 772     if (out->cAttr)
 773     {
 774         out->rgAttr = CryptMemAlloc(out->cAttr * sizeof(CRYPT_ATTRIBUTE));
 775         if (out->rgAttr)
 776         {
 777             DWORD i;
 778
 779             memset(out->rgAttr, 0, out->cAttr * sizeof(CRYPT_ATTRIBUTE));
 780             for (i = 0; ret && i < out->cAttr; i++)
 781                 ret = CRYPT_ConstructAttribute(&out->rgAttr[i], &in->rgAttr[i]);
 782         }
 783         else
 784             ret = FALSE;
 785     }
 786     else
 787         out->rgAttr = NULL;
 788     return ret;
 789 }
 790
 791 /* Constructs a CMSG_CMS_SIGNER_INFO from a CMSG_SIGNER_ENCODE_INFO_WITH_CMS. */
 792 static BOOL CSignerInfo_Construct(CMSG_CMS_SIGNER_INFO *info,
 793  const CMSG_SIGNER_ENCODE_INFO_WITH_CMS *in)
 794 {
 795     BOOL ret;
 796
 797     if (in->cbSize == sizeof(CMSG_SIGNER_ENCODE_INFO))
 798     {
 799         info->dwVersion = CMSG_SIGNER_INFO_V1;
 800         ret = CRYPT_ConstructBlob(&info->SignerId.u.IssuerSerialNumber.Issuer,
 801          &in->pCertInfo->Issuer);
 802         if (ret)
 803             ret = CRYPT_ConstructBlob(
 804              &info->SignerId.u.IssuerSerialNumber.SerialNumber,
 805              &in->pCertInfo->SerialNumber);
 806         info->SignerId.dwIdChoice = CERT_ID_ISSUER_SERIAL_NUMBER;
 807         info->HashEncryptionAlgorithm.pszObjId =
 808          in->pCertInfo->SubjectPublicKeyInfo.Algorithm.pszObjId;
 809         if (ret)
 810             ret = CRYPT_ConstructBlob(&info->HashEncryptionAlgorithm.Parameters,
 811              &in->pCertInfo->SubjectPublicKeyInfo.Algorithm.Parameters);
 812     }
 813     else
 814     {
 815         const CRYPT_ALGORITHM_IDENTIFIER *pEncrAlg;
 816
 817         /* Implicitly in->cbSize == sizeof(CMSG_SIGNER_ENCODE_INFO_WITH_CMS).
 818          * See CRYPT_IsValidSigner.
 819          */
 820         if (!in->SignerId.dwIdChoice)
 821         {
 822             info->dwVersion = CMSG_SIGNER_INFO_V1;
 823             ret = CRYPT_ConstructBlob(&info->SignerId.u.IssuerSerialNumber.Issuer,
 824              &in->pCertInfo->Issuer);
 825             if (ret)
 826                 ret = CRYPT_ConstructBlob(
 827                  &info->SignerId.u.IssuerSerialNumber.SerialNumber,
 828                  &in->pCertInfo->SerialNumber);
 829             info->SignerId.dwIdChoice = CERT_ID_ISSUER_SERIAL_NUMBER;
 830         }
 831         else if (in->SignerId.dwIdChoice == CERT_ID_ISSUER_SERIAL_NUMBER)
 832         {
 833             info->dwVersion = CMSG_SIGNER_INFO_V1;
 834             info->SignerId.dwIdChoice = CERT_ID_ISSUER_SERIAL_NUMBER;
 835             ret = CRYPT_ConstructBlob(&info->SignerId.u.IssuerSerialNumber.Issuer,
 836              &in->SignerId.u.IssuerSerialNumber.Issuer);
 837             if (ret)
 838                 ret = CRYPT_ConstructBlob(
 839                  &info->SignerId.u.IssuerSerialNumber.SerialNumber,
 840                  &in->SignerId.u.IssuerSerialNumber.SerialNumber);
 841         }
 842         else
 843         {
 844             /* Implicitly dwIdChoice == CERT_ID_KEY_IDENTIFIER */
 845             info->dwVersion = CMSG_SIGNER_INFO_V3;
 846             info->SignerId.dwIdChoice = CERT_ID_KEY_IDENTIFIER;
 847             ret = CRYPT_ConstructBlob(&info->SignerId.u.KeyId,
 848              &in->SignerId.u.KeyId);
 849         }
 850         pEncrAlg = in->HashEncryptionAlgorithm.pszObjId ?
 851          &in->HashEncryptionAlgorithm :
 852          &in->pCertInfo->SubjectPublicKeyInfo.Algorithm;
 853         info->HashEncryptionAlgorithm.pszObjId = pEncrAlg->pszObjId;
 854         if (ret)
 855             ret = CRYPT_ConstructBlob(&info->HashEncryptionAlgorithm.Parameters,
 856              &pEncrAlg->Parameters);
 857     }
 858     /* Assumption:  algorithm IDs will point to static strings, not
 859      * stack-based ones, so copying the pointer values is safe.
 860      */
 861     info->HashAlgorithm.pszObjId = in->HashAlgorithm.pszObjId;
 862     if (ret)
 863         ret = CRYPT_ConstructBlob(&info->HashAlgorithm.Parameters,
 864          &in->HashAlgorithm.Parameters);
 865     if (ret)
 866         ret = CRYPT_ConstructAttributes(&info->AuthAttrs,
 867          (CRYPT_ATTRIBUTES *)&in->cAuthAttr);
 868     if (ret)
 869         ret = CRYPT_ConstructAttributes(&info->UnauthAttrs,
 870          (CRYPT_ATTRIBUTES *)&in->cUnauthAttr);
 871     return ret;
 872 }
 873
 874 static void CSignerInfo_Free(CMSG_CMS_SIGNER_INFO *info)
 875 {
 876     DWORD i, j;
 877
 878     if (info->SignerId.dwIdChoice == CERT_ID_ISSUER_SERIAL_NUMBER)
 879     {
 880         CryptMemFree(info->SignerId.u.IssuerSerialNumber.Issuer.pbData);
 881         CryptMemFree(info->SignerId.u.IssuerSerialNumber.SerialNumber.pbData);
 882     }
 883     else
 884         CryptMemFree(info->SignerId.u.KeyId.pbData);
 885     CryptMemFree(info->HashAlgorithm.Parameters.pbData);
 886     CryptMemFree(info->HashEncryptionAlgorithm.Parameters.pbData);
 887     CryptMemFree(info->EncryptedHash.pbData);
 888     for (i = 0; i < info->AuthAttrs.cAttr; i++)
 889     {
 890         for (j = 0; j < info->AuthAttrs.rgAttr[i].cValue; j++)
 891             CryptMemFree(info->AuthAttrs.rgAttr[i].rgValue[j].pbData);
 892         CryptMemFree(info->AuthAttrs.rgAttr[i].rgValue);
 893         CryptMemFree(info->AuthAttrs.rgAttr[i].pszObjId);
 894     }
 895     CryptMemFree(info->AuthAttrs.rgAttr);
 896     for (i = 0; i < info->UnauthAttrs.cAttr; i++)
 897     {
 898         for (j = 0; j < info->UnauthAttrs.rgAttr[i].cValue; j++)
 899             CryptMemFree(info->UnauthAttrs.rgAttr[i].rgValue[j].pbData);
 900         CryptMemFree(info->UnauthAttrs.rgAttr[i].rgValue);
 901         CryptMemFree(info->UnauthAttrs.rgAttr[i].pszObjId);
 902     }
 903     CryptMemFree(info->UnauthAttrs.rgAttr);
 904 }
 905
 906 typedef struct _CSignerHandles
 907 {
 908     HCRYPTHASH contentHash;
 909     HCRYPTHASH authAttrHash;
 910 } CSignerHandles;
 911
 912 typedef struct _CSignedMsgData
 913 {
 914     CRYPT_SIGNED_INFO *info;
 915     DWORD              cSignerHandle;
 916     CSignerHandles    *signerHandles;
 917 } CSignedMsgData;
 918
 919 /* Constructs the signer handles for the signerIndex'th signer of msg_data.
 920  * Assumes signerIndex is a valid idnex, and that msg_data's info has already
 921  * been constructed.
 922  */
 923 static BOOL CSignedMsgData_ConstructSignerHandles(CSignedMsgData *msg_data,
 924  DWORD signerIndex, HCRYPTPROV crypt_prov)
 925 {
 926     ALG_ID algID;
 927     BOOL ret;
 928
 929     algID = CertOIDToAlgId(
 930      msg_data->info->rgSignerInfo[signerIndex].HashAlgorithm.pszObjId);
 931     ret = CryptCreateHash(crypt_prov, algID, 0, 0,
 932      &msg_data->signerHandles->contentHash);
 933     if (ret && msg_data->info->rgSignerInfo[signerIndex].AuthAttrs.cAttr > 0)
 934         ret = CryptCreateHash(crypt_prov, algID, 0, 0,
 935          &msg_data->signerHandles->authAttrHash);
 936     return ret;
 937 }
 938
 939 /* Allocates a CSignedMsgData's handles.  Assumes its info has already been
 940  * constructed.
 941  */
 942 static BOOL CSignedMsgData_AllocateHandles(CSignedMsgData *msg_data)
 943 {
 944     BOOL ret = TRUE;
 945
 946     if (msg_data->info->cSignerInfo)
 947     {
 948         msg_data->signerHandles =
 949          CryptMemAlloc(msg_data->info->cSignerInfo * sizeof(CSignerHandles));
 950         if (msg_data->signerHandles)
 951         {
 952             msg_data->cSignerHandle = msg_data->info->cSignerInfo;
 953             memset(msg_data->signerHandles, 0,
 954              msg_data->info->cSignerInfo * sizeof(CSignerHandles));
 955         }
 956         else
 957         {
 958             msg_data->cSignerHandle = 0;
 959             ret = FALSE;
 960         }
 961     }
 962     else
 963     {
 964         msg_data->cSignerHandle = 0;
 965         msg_data->signerHandles = NULL;
 966     }
 967     return ret;
 968 }
 969
 970 static void CSignedMsgData_CloseHandles(CSignedMsgData *msg_data)
 971 {
 972     DWORD i;
 973
 974     for (i = 0; i < msg_data->cSignerHandle; i++)
 975     {
 976         if (msg_data->signerHandles[i].contentHash)
 977             CryptDestroyHash(msg_data->signerHandles[i].contentHash);
 978         if (msg_data->signerHandles[i].authAttrHash)
 979             CryptDestroyHash(msg_data->signerHandles[i].authAttrHash);
 980     }
 981     CryptMemFree(msg_data->signerHandles);
 982     msg_data->signerHandles = NULL;
 983     msg_data->cSignerHandle = 0;
 984 }
 985
 986 static BOOL CSignedMsgData_UpdateHash(CSignedMsgData *msg_data,
 987  const BYTE *pbData, DWORD cbData)
 988 {
 989     DWORD i;
 990     BOOL ret = TRUE;
 991
 992     for (i = 0; ret && i < msg_data->cSignerHandle; i++)
 993         ret = CryptHashData(msg_data->signerHandles[i].contentHash, pbData,
 994          cbData, 0);
 995     return ret;
 996 }
 997
 998 static BOOL CRYPT_AppendAttribute(CRYPT_ATTRIBUTES *out,
 999  const CRYPT_ATTRIBUTE *in)
1000 {
1001     BOOL ret = FALSE;
1002
1003     out->rgAttr = CryptMemRealloc(out->rgAttr,
1004      (out->cAttr + 1) * sizeof(CRYPT_ATTRIBUTE));
1005     if (out->rgAttr)
1006     {
1007         ret = CRYPT_ConstructAttribute(&out->rgAttr[out->cAttr], in);
1008         if (ret)
1009             out->cAttr++;
1010     }
1011     return ret;
1012 }
1013
1014 static BOOL CSignedMsgData_AppendMessageDigestAttribute(
1015  CSignedMsgData *msg_data, DWORD signerIndex)
1016 {
1017     BOOL ret;
1018     DWORD size;
1019     CRYPT_HASH_BLOB hash = { 0, NULL }, encodedHash = { 0, NULL };
1020     char messageDigest[] = szOID_RSA_messageDigest;
1021     CRYPT_ATTRIBUTE messageDigestAttr = { messageDigest, 1, &encodedHash };
1022
1023     size = sizeof(DWORD);
1024     ret = CryptGetHashParam(
1025      msg_data->signerHandles[signerIndex].contentHash, HP_HASHSIZE,
1026      (LPBYTE)&hash.cbData, &size, 0);
1027     if (ret)
1028     {
1029         hash.pbData = CryptMemAlloc(hash.cbData);
1030         ret = CryptGetHashParam(
1031          msg_data->signerHandles[signerIndex].contentHash, HP_HASHVAL,
1032          hash.pbData, &hash.cbData, 0);
1033         if (ret)
1034         {
1035             ret = CRYPT_AsnEncodeOctets(0, NULL, &hash, CRYPT_ENCODE_ALLOC_FLAG,
1036              NULL, (LPBYTE)&encodedHash.pbData, &encodedHash.cbData);
1037             if (ret)
1038             {
1039                 ret = CRYPT_AppendAttribute(
1040                  &msg_data->info->rgSignerInfo[signerIndex].AuthAttrs,
1041                  &messageDigestAttr);
1042                 LocalFree(encodedHash.pbData);
1043             }
1044         }
1045         CryptMemFree(hash.pbData);
1046     }
1047     return ret;
1048 }
1049
1050 typedef enum {
1051     Sign,
1052     Verify
1053 } SignOrVerify;
1054
1055 static BOOL CSignedMsgData_UpdateAuthenticatedAttributes(
1056  CSignedMsgData *msg_data, SignOrVerify flag)
1057 {
1058     DWORD i;
1059     BOOL ret = TRUE;
1060
1061     TRACE("(%p)\n", msg_data);
1062
1063     for (i = 0; ret && i < msg_data->info->cSignerInfo; i++)
1064     {
1065         if (msg_data->info->rgSignerInfo[i].AuthAttrs.cAttr)
1066         {
1067             if (flag == Sign)
1068             {
1069                 BYTE oid_rsa_data_encoded[] = { 0x06,0x09,0x2a,0x86,0x48,0x86,
1070                  0xf7,0x0d,0x01,0x07,0x01 };
1071                 CRYPT_DATA_BLOB content = { sizeof(oid_rsa_data_encoded),
1072                  oid_rsa_data_encoded };
1073                 char contentType[] = szOID_RSA_contentType;
1074                 CRYPT_ATTRIBUTE contentTypeAttr = { contentType, 1, &content };
1075
1076                 /* FIXME: does this depend on inner OID? */
1077                 ret = CRYPT_AppendAttribute(
1078                  &msg_data->info->rgSignerInfo[i].AuthAttrs, &contentTypeAttr);
1079                 if (ret)
1080                     ret = CSignedMsgData_AppendMessageDigestAttribute(msg_data,
1081                      i);
1082             }
1083             if (ret)
1084             {
1085                 LPBYTE encodedAttrs;
1086                 DWORD size;
1087
1088                 ret = CryptEncodeObjectEx(X509_ASN_ENCODING, PKCS_ATTRIBUTES,
1089                  &msg_data->info->rgSignerInfo[i].AuthAttrs,
1090                  CRYPT_ENCODE_ALLOC_FLAG, NULL, &encodedAttrs, &size);
1091                 if (ret)
1092                 {
1093                     ret = CryptHashData(
1094                      msg_data->signerHandles[i].authAttrHash, encodedAttrs,
1095                      size, 0);
1096                     LocalFree(encodedAttrs);
1097                 }
1098             }
1099         }
1100     }
1101     TRACE("returning %d\n", ret);
1102     return ret;
1103 }
1104
1105 static void CRYPT_ReverseBytes(CRYPT_HASH_BLOB *hash)
1106 {
1107     DWORD i;
1108     BYTE tmp;
1109
1110     for (i = 0; i < hash->cbData / 2; i++)
1111     {
1112         tmp = hash->pbData[hash->cbData - i - 1];
1113         hash->pbData[hash->cbData - i - 1] = hash->pbData[i];
1114         hash->pbData[i] = tmp;
1115     }
1116 }
1117
1118 static BOOL CSignedMsgData_Sign(CSignedMsgData *msg_data)
1119 {
1120     DWORD i;
1121     BOOL ret = TRUE;
1122
1123     TRACE("(%p)\n", msg_data);
1124
1125     for (i = 0; ret && i < msg_data->info->cSignerInfo; i++)
1126     {
1127         HCRYPTHASH hash;
1128
1129         if (msg_data->info->rgSignerInfo[i].AuthAttrs.cAttr)
1130             hash = msg_data->signerHandles[i].authAttrHash;
1131         else
1132             hash = msg_data->signerHandles[i].contentHash;
1133         ret = CryptSignHashW(hash, AT_SIGNATURE, NULL, 0, NULL,
1134          &msg_data->info->rgSignerInfo[i].EncryptedHash.cbData);
1135         if (ret)
1136         {
1137             msg_data->info->rgSignerInfo[i].EncryptedHash.pbData =
1138              CryptMemAlloc(
1139              msg_data->info->rgSignerInfo[i].EncryptedHash.cbData);
1140             if (msg_data->info->rgSignerInfo[i].EncryptedHash.pbData)
1141             {
1142                 ret = CryptSignHashW(hash, AT_SIGNATURE, NULL, 0,
1143                  msg_data->info->rgSignerInfo[i].EncryptedHash.pbData,
1144                  &msg_data->info->rgSignerInfo[i].EncryptedHash.cbData);
1145                 if (ret)
1146                     CRYPT_ReverseBytes(
1147                      &msg_data->info->rgSignerInfo[i].EncryptedHash);
1148             }
1149             else
1150                 ret = FALSE;
1151         }
1152     }
1153     return ret;
1154 }
1155
1156 static BOOL CSignedMsgData_Update(CSignedMsgData *msg_data,
1157  const BYTE *pbData, DWORD cbData, BOOL fFinal, SignOrVerify flag)
1158 {
1159     BOOL ret = CSignedMsgData_UpdateHash(msg_data, pbData, cbData);
1160
1161     if (ret && fFinal)
1162     {
1163         ret = CSignedMsgData_UpdateAuthenticatedAttributes(msg_data, flag);
1164         if (ret && flag == Sign)
1165             ret = CSignedMsgData_Sign(msg_data);
1166     }
1167     return ret;
1168 }
1169
1170 typedef struct _CSignedEncodeMsg
1171 {
1172     CryptMsgBase    base;
1173     LPSTR           innerOID;
1174     CRYPT_DATA_BLOB data;
1175     CSignedMsgData  msg_data;
1176 } CSignedEncodeMsg;
1177
1178 static void CSignedEncodeMsg_Close(HCRYPTMSG hCryptMsg)
1179 {
1180     CSignedEncodeMsg *msg = hCryptMsg;
1181     DWORD i;
1182
1183     CryptMemFree(msg->innerOID);
1184     CryptMemFree(msg->data.pbData);
1185     CRYPT_FreeBlobArray(msg->msg_data.info->cCertEncoded,
1186      msg->msg_data.info->rgCertEncoded);
1187     CRYPT_FreeBlobArray(msg->msg_data.info->cCrlEncoded,
1188      msg->msg_data.info->rgCrlEncoded);
1189     for (i = 0; i < msg->msg_data.info->cSignerInfo; i++)
1190         CSignerInfo_Free(&msg->msg_data.info->rgSignerInfo[i]);
1191     CSignedMsgData_CloseHandles(&msg->msg_data);
1192     CryptMemFree(msg->msg_data.info->rgSignerInfo);
1193     CryptMemFree(msg->msg_data.info);
1194 }
1195
1196 static BOOL CSignedEncodeMsg_GetParam(HCRYPTMSG hCryptMsg, DWORD dwParamType,
1197  DWORD dwIndex, void *pvData, DWORD *pcbData)
1198 {
1199     CSignedEncodeMsg *msg = hCryptMsg;
1200     BOOL ret = FALSE;
1201
1202     switch (dwParamType)
1203     {
1204     case CMSG_CONTENT_PARAM:
1205     {
1206         CRYPT_CONTENT_INFO info;
1207
1208         ret = CryptMsgGetParam(hCryptMsg, CMSG_BARE_CONTENT_PARAM, 0, NULL,
1209          &info.Content.cbData);
1210         if (ret)
1211         {
1212             info.Content.pbData = CryptMemAlloc(info.Content.cbData);
1213             if (info.Content.pbData)
1214             {
1215                 ret = CryptMsgGetParam(hCryptMsg, CMSG_BARE_CONTENT_PARAM, 0,
1216                  info.Content.pbData, &info.Content.cbData);
1217                 if (ret)
1218                 {
1219                     char oid_rsa_signed[] = szOID_RSA_signedData;
1220
1221                     info.pszObjId = oid_rsa_signed;
1222                     ret = CryptEncodeObjectEx(X509_ASN_ENCODING,
1223                      PKCS_CONTENT_INFO, &info, 0, NULL, pvData, pcbData);
1224                 }
1225                 CryptMemFree(info.Content.pbData);
1226             }
1227             else
1228                 ret = FALSE;
1229         }
1230         break;
1231     }
1232     case CMSG_BARE_CONTENT_PARAM:
1233     {
1234         CRYPT_SIGNED_INFO info;
1235         BOOL freeContent = FALSE;
1236
1237         info = *msg->msg_data.info;
1238         if (!msg->innerOID || !strcmp(msg->innerOID, szOID_RSA_data))
1239         {
1240             char oid_rsa_data[] = szOID_RSA_data;
1241
1242             /* Quirk:  OID is only encoded messages if an update has happened */
1243             if (msg->base.state != MsgStateInit)
1244                 info.content.pszObjId = oid_rsa_data;
1245             else
1246                 info.content.pszObjId = NULL;
1247             if (msg->data.cbData)
1248             {
1249                 CRYPT_DATA_BLOB blob = { msg->data.cbData, msg->data.pbData };
1250
1251                 ret = CryptEncodeObjectEx(X509_ASN_ENCODING, X509_OCTET_STRING,
1252                  &blob, CRYPT_ENCODE_ALLOC_FLAG, NULL,
1253                  &info.content.Content.pbData, &info.content.Content.cbData);
1254                 freeContent = TRUE;
1255             }
1256             else
1257             {
1258                 info.content.Content.cbData = 0;
1259                 info.content.Content.pbData = NULL;
1260                 ret = TRUE;
1261             }
1262         }
1263         else
1264         {
1265             info.content.pszObjId = msg->innerOID;
1266             info.content.Content.cbData = msg->data.cbData;
1267             info.content.Content.pbData = msg->data.pbData;
1268             ret = TRUE;
1269         }
1270         if (ret)
1271         {
1272             ret = CRYPT_AsnEncodeCMSSignedInfo(&info, pvData, pcbData);
1273             if (freeContent)
1274                 LocalFree(info.content.Content.pbData);
1275         }
1276         break;
1277     }
1278     case CMSG_COMPUTED_HASH_PARAM:
1279         if (dwIndex >= msg->msg_data.cSignerHandle)
1280             SetLastError(CRYPT_E_INVALID_INDEX);
1281         else
1282             ret = CryptGetHashParam(
1283              msg->msg_data.signerHandles[dwIndex].contentHash, HP_HASHVAL,
1284              pvData, pcbData, 0);
1285         break;
1286     case CMSG_ENCODED_SIGNER:
1287         if (dwIndex >= msg->msg_data.info->cSignerInfo)
1288             SetLastError(CRYPT_E_INVALID_INDEX);
1289         else
1290             ret = CryptEncodeObjectEx(X509_ASN_ENCODING | PKCS_7_ASN_ENCODING,
1291              CMS_SIGNER_INFO, &msg->msg_data.info->rgSignerInfo[dwIndex], 0,
1292              NULL, pvData, pcbData);
1293         break;
1294     case CMSG_VERSION_PARAM:
1295         ret = CRYPT_CopyParam(pvData, pcbData, &msg->msg_data.info->version,
1296          sizeof(msg->msg_data.info->version));
1297         break;
1298     default:
1299         SetLastError(CRYPT_E_INVALID_MSG_TYPE);
1300     }
1301     return ret;
1302 }
1303
1304 static BOOL CSignedEncodeMsg_Update(HCRYPTMSG hCryptMsg, const BYTE *pbData,
1305  DWORD cbData, BOOL fFinal)
1306 {
1307     CSignedEncodeMsg *msg = hCryptMsg;
1308     BOOL ret = FALSE;
1309
1310     if (msg->base.state == MsgStateFinalized)
1311         SetLastError(CRYPT_E_MSG_ERROR);
1312     else if (msg->base.streamed || (msg->base.open_flags & CMSG_DETACHED_FLAG))
1313     {
1314         ret = CSignedMsgData_Update(&msg->msg_data, pbData, cbData, fFinal,
1315          Sign);
1316         if (msg->base.streamed)
1317             FIXME("streamed partial stub\n");
1318         msg->base.state = fFinal ? MsgStateFinalized : MsgStateUpdated;
1319     }
1320     else
1321     {
1322         if (!fFinal)
1323             SetLastError(CRYPT_E_MSG_ERROR);
1324         else
1325         {
1326             if (cbData)
1327             {
1328                 msg->data.pbData = CryptMemAlloc(cbData);
1329                 if (msg->data.pbData)
1330                 {
1331                     memcpy(msg->data.pbData, pbData, cbData);
1332                     msg->data.cbData = cbData;
1333                     ret = TRUE;
1334                 }
1335             }
1336             else
1337                 ret = TRUE;
1338             if (ret)
1339                 ret = CSignedMsgData_Update(&msg->msg_data, pbData, cbData,
1340                  fFinal, Sign);
1341             msg->base.state = MsgStateFinalized;
1342         }
1343     }
1344     return ret;
1345 }
1346
1347 static HCRYPTMSG CSignedEncodeMsg_Open(DWORD dwFlags,
1348  const void *pvMsgEncodeInfo, LPCSTR pszInnerContentObjID,
1349  PCMSG_STREAM_INFO pStreamInfo)
1350 {
1351     const CMSG_SIGNED_ENCODE_INFO_WITH_CMS *info = pvMsgEncodeInfo;
1352     DWORD i;
1353     CSignedEncodeMsg *msg;
1354
1355     if (info->cbSize != sizeof(CMSG_SIGNED_ENCODE_INFO) &&
1356      info->cbSize != sizeof(CMSG_SIGNED_ENCODE_INFO_WITH_CMS))
1357     {
1358         SetLastError(E_INVALIDARG);
1359         return NULL;
1360     }
1361     if (info->cbSize == sizeof(CMSG_SIGNED_ENCODE_INFO_WITH_CMS) &&
1362      info->cAttrCertEncoded)
1363     {
1364         FIXME("CMSG_SIGNED_ENCODE_INFO with CMS fields unsupported\n");
1365         return NULL;
1366     }
1367     for (i = 0; i < info->cSigners; i++)
1368         if (!CRYPT_IsValidSigner(&info->rgSigners[i]))
1369             return NULL;
1370     msg = CryptMemAlloc(sizeof(CSignedEncodeMsg));
1371     if (msg)
1372     {
1373         BOOL ret = TRUE;
1374
1375         CryptMsgBase_Init((CryptMsgBase *)msg, dwFlags, pStreamInfo,
1376          CSignedEncodeMsg_Close, CSignedEncodeMsg_GetParam,
1377          CSignedEncodeMsg_Update, CRYPT_DefaultMsgControl);
1378         if (pszInnerContentObjID)
1379         {
1380             msg->innerOID = CryptMemAlloc(strlen(pszInnerContentObjID) + 1);
1381             if (msg->innerOID)
1382                 strcpy(msg->innerOID, pszInnerContentObjID);
1383             else
1384                 ret = FALSE;
1385         }
1386         else
1387             msg->innerOID = NULL;
1388         msg->data.cbData = 0;
1389         msg->data.pbData = NULL;
1390         if (ret)
1391             msg->msg_data.info = CryptMemAlloc(sizeof(CRYPT_SIGNED_INFO));
1392         else
1393             msg->msg_data.info = NULL;
1394         if (msg->msg_data.info)
1395         {
1396             memset(msg->msg_data.info, 0, sizeof(CRYPT_SIGNED_INFO));
1397             msg->msg_data.info->version = CMSG_SIGNED_DATA_V1;
1398         }
1399         else
1400             ret = FALSE;
1401         if (ret)
1402         {
1403             if (info->cSigners)
1404             {
1405                 msg->msg_data.info->rgSignerInfo =
1406                  CryptMemAlloc(info->cSigners * sizeof(CMSG_CMS_SIGNER_INFO));
1407                 if (msg->msg_data.info->rgSignerInfo)
1408                 {
1409                     msg->msg_data.info->cSignerInfo = info->cSigners;
1410                     memset(msg->msg_data.info->rgSignerInfo, 0,
1411                      msg->msg_data.info->cSignerInfo *
1412                      sizeof(CMSG_CMS_SIGNER_INFO));
1413                     ret = CSignedMsgData_AllocateHandles(&msg->msg_data);
1414                     for (i = 0; ret && i < msg->msg_data.info->cSignerInfo; i++)
1415                     {
1416                         if (info->rgSigners[i].SignerId.dwIdChoice ==
1417                          CERT_ID_KEY_IDENTIFIER)
1418                             msg->msg_data.info->version = CMSG_SIGNED_DATA_V3;
1419                         ret = CSignerInfo_Construct(
1420                          &msg->msg_data.info->rgSignerInfo[i],
1421                          &info->rgSigners[i]);
1422                         if (ret)
1423                         {
1424                             ret = CSignedMsgData_ConstructSignerHandles(
1425                              &msg->msg_data, i, info->rgSigners[i].hCryptProv);
1426                             if (dwFlags & CMSG_CRYPT_RELEASE_CONTEXT_FLAG)
1427                                 CryptReleaseContext(info->rgSigners[i].hCryptProv,
1428                                  0);
1429                         }
1430                     }
1431                 }
1432                 else
1433                     ret = FALSE;
1434             }
1435             else
1436             {
1437                 msg->msg_data.info->cSignerInfo = 0;
1438                 msg->msg_data.signerHandles = NULL;
1439                 msg->msg_data.cSignerHandle = 0;
1440             }
1441         }
1442         if (ret)
1443             ret = CRYPT_ConstructBlobArray(&msg->msg_data.info->cCertEncoded,
1444              &msg->msg_data.info->rgCertEncoded, info->cCertEncoded,
1445              info->rgCertEncoded);
1446         if (ret)
1447             ret = CRYPT_ConstructBlobArray(&msg->msg_data.info->cCrlEncoded,
1448              &msg->msg_data.info->rgCrlEncoded, info->cCrlEncoded,
1449              info->rgCrlEncoded);
1450         if (!ret)
1451         {
1452             CSignedEncodeMsg_Close(msg);
1453             msg = NULL;
1454         }
1455     }
1456     return msg;
1457 }
1458
1459 typedef struct _CMSG_ENVELOPED_ENCODE_INFO_WITH_CMS
1460 {
1461     DWORD                       cbSize;
1462     HCRYPTPROV_LEGACY           hCryptProv;
1463     CRYPT_ALGORITHM_IDENTIFIER  ContentEncryptionAlgorithm;
1464     void                       *pvEncryptionAuxInfo;
1465     DWORD                       cRecipients;
1466     PCERT_INFO                 *rgpRecipientCert;
1467     PCMSG_RECIPIENT_ENCODE_INFO rgCmsRecipients;
1468     DWORD                       cCertEncoded;
1469     PCERT_BLOB                  rgCertEncoded;
1470     DWORD                       cCrlEncoded;
1471     PCRL_BLOB                   rgCrlEncoded;
1472     DWORD                       cAttrCertEncoded;
1473     PCERT_BLOB                  rgAttrCertEncoded;
1474     DWORD                       cUnprotectedAttr;
1475     PCRYPT_ATTRIBUTE            rgUnprotectedAttr;
1476 } CMSG_ENVELOPED_ENCODE_INFO_WITH_CMS, *PCMSG_ENVELOPED_ENCODE_INFO_WITH_CMS;
1477
1478 typedef struct _CEnvelopedEncodeMsg
1479 {
1480     CryptMsgBase                   base;
1481     CRYPT_ALGORITHM_IDENTIFIER     algo;
1482     HCRYPTPROV                     prov;
1483     HCRYPTKEY                      key;
1484     DWORD                          cRecipientInfo;
1485     CMSG_KEY_TRANS_RECIPIENT_INFO *recipientInfo;
1486     CRYPT_DATA_BLOB                data;
1487 } CEnvelopedEncodeMsg;
1488
1489 static BOOL CRYPT_ConstructAlgorithmId(CRYPT_ALGORITHM_IDENTIFIER *out,
1490  const CRYPT_ALGORITHM_IDENTIFIER *in)
1491 {
1492     out->pszObjId = CryptMemAlloc(strlen(in->pszObjId) + 1);
1493     if (out->pszObjId)
1494     {
1495         strcpy(out->pszObjId, in->pszObjId);
1496         return CRYPT_ConstructBlob(&out->Parameters, &in->Parameters);
1497     }
1498     else
1499         return FALSE;
1500 }
1501
1502 static BOOL CRYPT_ConstructBitBlob(CRYPT_BIT_BLOB *out, const CRYPT_BIT_BLOB *in)
1503 {
1504     out->cbData = in->cbData;
1505     out->cUnusedBits = in->cUnusedBits;
1506     if (out->cbData)
1507     {
1508         out->pbData = CryptMemAlloc(out->cbData);
1509         if (out->pbData)
1510             memcpy(out->pbData, in->pbData, out->cbData);
1511         else
1512             return FALSE;
1513     }
1514     else
1515         out->pbData = NULL;
1516     return TRUE;
1517 }
1518
1519 static BOOL CRYPT_GenKey(CMSG_CONTENT_ENCRYPT_INFO *info, ALG_ID algID)
1520 {
1521     static HCRYPTOIDFUNCSET set = NULL;
1522     PFN_CMSG_GEN_CONTENT_ENCRYPT_KEY genKeyFunc = NULL;
1523     HCRYPTOIDFUNCADDR hFunc;
1524     BOOL ret;
1525
1526     if (!set)
1527         set = CryptInitOIDFunctionSet(CMSG_OID_GEN_CONTENT_ENCRYPT_KEY_FUNC, 0);
1528     CryptGetOIDFunctionAddress(set, X509_ASN_ENCODING,
1529      info->ContentEncryptionAlgorithm.pszObjId, 0, (void **)&genKeyFunc, &hFunc);
1530     if (genKeyFunc)
1531     {
1532         ret = genKeyFunc(info, 0, NULL);
1533         CryptFreeOIDFunctionAddress(hFunc, 0);
1534     }
1535     else
1536         ret = CryptGenKey(info->hCryptProv, algID, CRYPT_EXPORTABLE,
1537          &info->hContentEncryptKey);
1538     return ret;
1539 }
1540
1541 static BOOL WINAPI CRYPT_ExportKeyTrans(
1542  PCMSG_CONTENT_ENCRYPT_INFO pContentEncryptInfo,
1543  PCMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO pKeyTransEncodeInfo,
1544  PCMSG_KEY_TRANS_ENCRYPT_INFO pKeyTransEncryptInfo,
1545  DWORD dwFlags, void *pvReserved)
1546 {
1547     CERT_PUBLIC_KEY_INFO keyInfo;
1548     HCRYPTKEY expKey;
1549     BOOL ret;
1550
1551     ret = CRYPT_ConstructAlgorithmId(&keyInfo.Algorithm,
1552         &pKeyTransEncodeInfo->KeyEncryptionAlgorithm);
1553     if (ret)
1554         CRYPT_ConstructBitBlob(&keyInfo.PublicKey,
1555          &pKeyTransEncodeInfo->RecipientPublicKey);
1556
1557     if (ret)
1558         ret = CryptImportPublicKeyInfo(pKeyTransEncodeInfo->hCryptProv,
1559          X509_ASN_ENCODING, &keyInfo, &expKey);
1560     if (ret)
1561     {
1562         BYTE *keyBlob;
1563         DWORD size;
1564
1565         ret = CryptExportKey(pContentEncryptInfo->hContentEncryptKey, expKey,
1566          SIMPLEBLOB, 0, NULL, &size);
1567         keyBlob = CryptMemAlloc(size);
1568         if (keyBlob)
1569         {
1570             ret = CryptExportKey(pContentEncryptInfo->hContentEncryptKey,
1571              expKey, SIMPLEBLOB, 0, keyBlob, &size);
1572             if (ret)
1573             {
1574                 DWORD head = sizeof(BLOBHEADER) + sizeof(ALG_ID);
1575
1576                 pKeyTransEncryptInfo->EncryptedKey.pbData =
1577                  CryptMemAlloc(size - head);
1578                 if (pKeyTransEncryptInfo->EncryptedKey.pbData)
1579                 {
1580                     DWORD i, k = 0;
1581
1582                     pKeyTransEncryptInfo->EncryptedKey.cbData = size - head;
1583                     for (i = size - 1; i >= head; --i, ++k)
1584                         pKeyTransEncryptInfo->EncryptedKey.pbData[k] =
1585                          keyBlob[i];
1586                 }
1587                 else
1588                     ret = FALSE;
1589             }
1590             CryptMemFree(keyBlob);
1591         }
1592         else
1593             ret = FALSE;
1594         CryptDestroyKey(expKey);
1595     }
1596
1597     CryptMemFree(keyInfo.PublicKey.pbData);
1598     CryptMemFree(keyInfo.Algorithm.pszObjId);
1599     CryptMemFree(keyInfo.Algorithm.Parameters.pbData);
1600     return ret;
1601 }
1602
1603 static BOOL CRYPT_ExportEncryptedKey(CMSG_CONTENT_ENCRYPT_INFO *info, DWORD i,
1604  CRYPT_DATA_BLOB *key)
1605 {
1606     static HCRYPTOIDFUNCSET set = NULL;
1607     PFN_CMSG_EXPORT_KEY_TRANS exportKeyFunc = NULL;
1608     HCRYPTOIDFUNCADDR hFunc = NULL;
1609     CMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO *encodeInfo =
1610      info->rgCmsRecipients[i].u.pKeyTrans;
1611     CMSG_KEY_TRANS_ENCRYPT_INFO encryptInfo;
1612     BOOL ret;
1613
1614     memset(&encryptInfo, 0, sizeof(encryptInfo));
1615     encryptInfo.cbSize = sizeof(encryptInfo);
1616     encryptInfo.dwRecipientIndex = i;
1617     ret = CRYPT_ConstructAlgorithmId(&encryptInfo.KeyEncryptionAlgorithm,
1618      &encodeInfo->KeyEncryptionAlgorithm);
1619
1620     if (!set)
1621         set = CryptInitOIDFunctionSet(CMSG_OID_EXPORT_KEY_TRANS_FUNC, 0);
1622     CryptGetOIDFunctionAddress(set, X509_ASN_ENCODING,
1623      encryptInfo.KeyEncryptionAlgorithm.pszObjId, 0, (void **)&exportKeyFunc,
1624      &hFunc);
1625     if (!exportKeyFunc)
1626         exportKeyFunc = CRYPT_ExportKeyTrans;
1627     if (ret)
1628     {
1629         ret = exportKeyFunc(info, encodeInfo, &encryptInfo, 0, NULL);
1630         if (ret)
1631         {
1632             key->cbData = encryptInfo.EncryptedKey.cbData;
1633             key->pbData = encryptInfo.EncryptedKey.pbData;
1634         }
1635     }
1636     if (hFunc)
1637         CryptFreeOIDFunctionAddress(hFunc, 0);
1638
1639     CryptMemFree(encryptInfo.KeyEncryptionAlgorithm.pszObjId);
1640     CryptMemFree(encryptInfo.KeyEncryptionAlgorithm.Parameters.pbData);
1641     return ret;
1642 }
1643
1644 static LPVOID WINAPI mem_alloc(size_t size)
1645 {
1646     return HeapAlloc(GetProcessHeap(), 0, size);
1647 }
1648
1649 static VOID WINAPI mem_free(LPVOID pv)
1650 {
1651     HeapFree(GetProcessHeap(), 0, pv);
1652 }
1653
1654
1655 static BOOL CContentEncryptInfo_Construct(CMSG_CONTENT_ENCRYPT_INFO *info,
1656  const CMSG_ENVELOPED_ENCODE_INFO_WITH_CMS *in, HCRYPTPROV prov)
1657 {
1658     BOOL ret;
1659
1660     info->cbSize = sizeof(CMSG_CONTENT_ENCRYPT_INFO);
1661     info->hCryptProv = prov;
1662     ret = CRYPT_ConstructAlgorithmId(&info->ContentEncryptionAlgorithm,
1663      &in->ContentEncryptionAlgorithm);
1664     info->pvEncryptionAuxInfo = in->pvEncryptionAuxInfo;
1665     info->cRecipients = in->cRecipients;
1666     if (ret)
1667     {
1668         info->rgCmsRecipients = CryptMemAlloc(in->cRecipients *
1669          sizeof(CMSG_RECIPIENT_ENCODE_INFO));
1670         if (info->rgCmsRecipients)
1671         {
1672             DWORD i;
1673
1674             for (i = 0; ret && i < in->cRecipients; ++i)
1675             {
1676                 CMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO *encodeInfo;
1677                 CERT_INFO *cert = in->rgpRecipientCert[i];
1678
1679                 info->rgCmsRecipients[i].dwRecipientChoice =
1680                  CMSG_KEY_TRANS_RECIPIENT;
1681                 encodeInfo = CryptMemAlloc(sizeof(*encodeInfo));
1682                 info->rgCmsRecipients[i].u.pKeyTrans = encodeInfo;
1683                 if (encodeInfo)
1684                 {
1685                     encodeInfo->cbSize = sizeof(*encodeInfo);
1686                     ret = CRYPT_ConstructAlgorithmId(
1687                      &encodeInfo->KeyEncryptionAlgorithm,
1688                      &cert->SubjectPublicKeyInfo.Algorithm);
1689                     encodeInfo->pvKeyEncryptionAuxInfo = NULL;
1690                     encodeInfo->hCryptProv = prov;
1691                     if (ret)
1692                         ret = CRYPT_ConstructBitBlob(
1693                          &encodeInfo->RecipientPublicKey,
1694                          &cert->SubjectPublicKeyInfo.PublicKey);
1695                     if (ret)
1696                         ret = CRYPT_ConstructBlob(
1697                          &encodeInfo->RecipientId.u.IssuerSerialNumber.Issuer,
1698                          &cert->Issuer);
1699                     if (ret)
1700                         ret = CRYPT_ConstructBlob(
1701                          &encodeInfo->RecipientId.u.IssuerSerialNumber.SerialNumber,
1702                          &cert->SerialNumber);
1703                 }
1704                 else
1705                     ret = FALSE;
1706             }
1707         }
1708         else
1709             ret = FALSE;
1710     }
1711     info->pfnAlloc = mem_alloc;
1712     info->pfnFree = mem_free;
1713     return ret;
1714 }
1715
1716 static void CContentEncryptInfo_Free(CMSG_CONTENT_ENCRYPT_INFO *info)
1717 {
1718     CryptMemFree(info->ContentEncryptionAlgorithm.pszObjId);
1719     CryptMemFree(info->ContentEncryptionAlgorithm.Parameters.pbData);
1720     if (info->rgCmsRecipients)
1721     {
1722         DWORD i;
1723
1724         for (i = 0; i < info->cRecipients; ++i)
1725         {
1726             CMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO *encodeInfo =
1727              info->rgCmsRecipients[i].u.pKeyTrans;
1728
1729             CryptMemFree(encodeInfo->KeyEncryptionAlgorithm.pszObjId);
1730             CryptMemFree(encodeInfo->KeyEncryptionAlgorithm.Parameters.pbData);
1731             CryptMemFree(encodeInfo->RecipientPublicKey.pbData);
1732             CryptMemFree(
1733              encodeInfo->RecipientId.u.IssuerSerialNumber.Issuer.pbData);
1734             CryptMemFree(
1735              encodeInfo->RecipientId.u.IssuerSerialNumber.SerialNumber.pbData);
1736             CryptMemFree(encodeInfo);
1737         }
1738         CryptMemFree(info->rgCmsRecipients);
1739     }
1740 }
1741
1742 static BOOL CRecipientInfo_Construct(CMSG_KEY_TRANS_RECIPIENT_INFO *info,
1743  const CERT_INFO *cert, CRYPT_DATA_BLOB *key)
1744 {
1745     BOOL ret;
1746
1747     info->dwVersion = CMSG_KEY_TRANS_PKCS_1_5_VERSION;
1748     info->RecipientId.dwIdChoice = CERT_ID_ISSUER_SERIAL_NUMBER;
1749     ret = CRYPT_ConstructBlob(&info->RecipientId.u.IssuerSerialNumber.Issuer,
1750      &cert->Issuer);
1751     if (ret)
1752         ret = CRYPT_ConstructBlob(
1753          &info->RecipientId.u.IssuerSerialNumber.SerialNumber,
1754          &cert->SerialNumber);
1755     if (ret)
1756         ret = CRYPT_ConstructAlgorithmId(&info->KeyEncryptionAlgorithm,
1757          &cert->SubjectPublicKeyInfo.Algorithm);
1758     info->EncryptedKey.cbData = key->cbData;
1759     info->EncryptedKey.pbData = key->pbData;
1760     return ret;
1761 }
1762
1763 static void CRecipientInfo_Free(CMSG_KEY_TRANS_RECIPIENT_INFO *info)
1764 {
1765     CryptMemFree(info->RecipientId.u.IssuerSerialNumber.Issuer.pbData);
1766     CryptMemFree(info->RecipientId.u.IssuerSerialNumber.SerialNumber.pbData);
1767     CryptMemFree(info->KeyEncryptionAlgorithm.pszObjId);
1768     CryptMemFree(info->KeyEncryptionAlgorithm.Parameters.pbData);
1769     CryptMemFree(info->EncryptedKey.pbData);
1770 }
1771
1772 static void CEnvelopedEncodeMsg_Close(HCRYPTMSG hCryptMsg)
1773 {
1774     CEnvelopedEncodeMsg *msg = hCryptMsg;
1775
1776     CryptMemFree(msg->algo.pszObjId);
1777     CryptMemFree(msg->algo.Parameters.pbData);
1778     if (msg->base.open_flags & CMSG_CRYPT_RELEASE_CONTEXT_FLAG)
1779         CryptReleaseContext(msg->prov, 0);
1780     CryptDestroyKey(msg->key);
1781     if (msg->recipientInfo)
1782     {
1783         DWORD i;
1784
1785         for (i = 0; i < msg->cRecipientInfo; ++i)
1786             CRecipientInfo_Free(&msg->recipientInfo[i]);
1787         CryptMemFree(msg->recipientInfo);
1788     }
1789     CryptMemFree(msg->data.pbData);
1790 }
1791
1792 static BOOL CEnvelopedEncodeMsg_GetParam(HCRYPTMSG hCryptMsg, DWORD dwParamType,
1793  DWORD dwIndex, void *pvData, DWORD *pcbData)
1794 {
1795     CEnvelopedEncodeMsg *msg = hCryptMsg;
1796     BOOL ret = FALSE;
1797
1798     switch (dwParamType)
1799     {
1800     case CMSG_BARE_CONTENT_PARAM:
1801         if (msg->base.streamed)
1802             SetLastError(E_INVALIDARG);
1803         else
1804         {
1805             char oid_rsa_data[] = szOID_RSA_data;
1806             CRYPT_ENVELOPED_DATA envelopedData = {
1807              CMSG_ENVELOPED_DATA_PKCS_1_5_VERSION, msg->cRecipientInfo,
1808              msg->recipientInfo, { oid_rsa_data, msg->algo, msg->data }
1809             };
1810
1811             ret = CRYPT_AsnEncodePKCSEnvelopedData(&envelopedData, pvData,
1812              pcbData);
1813         }
1814         break;
1815     case CMSG_CONTENT_PARAM:
1816     {
1817         CRYPT_CONTENT_INFO info;
1818
1819         ret = CryptMsgGetParam(hCryptMsg, CMSG_BARE_CONTENT_PARAM, 0, NULL,
1820          &info.Content.cbData);
1821         if (ret)
1822         {
1823             info.Content.pbData = CryptMemAlloc(info.Content.cbData);
1824             if (info.Content.pbData)
1825             {
1826                 ret = CryptMsgGetParam(hCryptMsg, CMSG_BARE_CONTENT_PARAM, 0,
1827                  info.Content.pbData, &info.Content.cbData);
1828                 if (ret)
1829                 {
1830                     char oid_rsa_enveloped[] = szOID_RSA_envelopedData;
1831
1832                     info.pszObjId = oid_rsa_enveloped;
1833                     ret = CryptEncodeObjectEx(X509_ASN_ENCODING,
1834                      PKCS_CONTENT_INFO, &info, 0, NULL, pvData, pcbData);
1835                 }
1836                 CryptMemFree(info.Content.pbData);
1837             }
1838             else
1839                 ret = FALSE;
1840         }
1841         break;
1842     }
1843     default:
1844         SetLastError(CRYPT_E_INVALID_MSG_TYPE);
1845     }
1846     return ret;
1847 }
1848
1849 static BOOL CEnvelopedEncodeMsg_Update(HCRYPTMSG hCryptMsg, const BYTE *pbData,
1850  DWORD cbData, BOOL fFinal)
1851 {
1852     CEnvelopedEncodeMsg *msg = hCryptMsg;
1853     BOOL ret = FALSE;
1854
1855     if (msg->base.state == MsgStateFinalized)
1856         SetLastError(CRYPT_E_MSG_ERROR);
1857     else if (msg->base.streamed)
1858     {
1859         FIXME("streamed stub\n");
1860         msg->base.state = fFinal ? MsgStateFinalized : MsgStateUpdated;
1861         ret = TRUE;
1862     }
1863     else
1864     {
1865         if (!fFinal)
1866         {
1867             if (msg->base.open_flags & CMSG_DETACHED_FLAG)
1868                 SetLastError(E_INVALIDARG);
1869             else
1870                 SetLastError(CRYPT_E_MSG_ERROR);
1871         }
1872         else
1873         {
1874             if (cbData)
1875             {
1876                 DWORD dataLen = cbData;
1877
1878                 msg->data.cbData = cbData;
1879                 msg->data.pbData = CryptMemAlloc(cbData);
1880                 if (msg->data.pbData)
1881                 {
1882                     memcpy(msg->data.pbData, pbData, cbData);
1883                     ret = CryptEncrypt(msg->key, 0, TRUE, 0, msg->data.pbData,
1884                      &dataLen, msg->data.cbData);
1885                     msg->data.cbData = dataLen;
1886                     if (dataLen > cbData)
1887                     {
1888                         msg->data.pbData = CryptMemRealloc(msg->data.pbData,
1889                          dataLen);
1890                         if (msg->data.pbData)
1891                         {
1892                             dataLen = cbData;
1893                             ret = CryptEncrypt(msg->key, 0, TRUE, 0,
1894                              msg->data.pbData, &dataLen, msg->data.cbData);
1895                         }
1896                         else
1897                             ret = FALSE;
1898                     }
1899                     if (!ret)
1900                         CryptMemFree(msg->data.pbData);
1901                 }
1902                 else
1903                     ret = FALSE;
1904                 if (!ret)
1905                 {
1906                     msg->data.cbData = 0;
1907                     msg->data.pbData = NULL;
1908                 }
1909             }
1910             else
1911                 ret = TRUE;
1912             msg->base.state = MsgStateFinalized;
1913         }
1914     }
1915     return ret;
1916 }
1917
1918 static HCRYPTMSG CEnvelopedEncodeMsg_Open(DWORD dwFlags,
1919  const void *pvMsgEncodeInfo, LPCSTR pszInnerContentObjID,
1920  PCMSG_STREAM_INFO pStreamInfo)
1921 {
1922     CEnvelopedEncodeMsg *msg;
1923     const CMSG_ENVELOPED_ENCODE_INFO_WITH_CMS *info = pvMsgEncodeInfo;
1924     HCRYPTPROV prov;
1925     ALG_ID algID;
1926
1927     if (info->cbSize != sizeof(CMSG_ENVELOPED_ENCODE_INFO) &&
1928      info->cbSize != sizeof(CMSG_ENVELOPED_ENCODE_INFO_WITH_CMS))
1929     {
1930         SetLastError(E_INVALIDARG);
1931         return NULL;
1932     }
1933     if (info->cbSize == sizeof(CMSG_ENVELOPED_ENCODE_INFO_WITH_CMS))
1934         FIXME("CMS fields unsupported\n");
1935     if (!(algID = CertOIDToAlgId(info->ContentEncryptionAlgorithm.pszObjId)))
1936     {
1937         SetLastError(CRYPT_E_UNKNOWN_ALGO);
1938         return NULL;
1939     }
1940     if (info->cRecipients && !info->rgpRecipientCert)
1941     {
1942         SetLastError(E_INVALIDARG);
1943         return NULL;
1944     }
1945     if (info->hCryptProv)
1946         prov = info->hCryptProv;
1947     else
1948     {
1949         prov = CRYPT_GetDefaultProvider();
1950         dwFlags &= ~CMSG_CRYPT_RELEASE_CONTEXT_FLAG;
1951     }
1952     msg = CryptMemAlloc(sizeof(CEnvelopedEncodeMsg));
1953     if (msg)
1954     {
1955         CRYPT_DATA_BLOB encryptedKey = { 0, NULL };
1956         CMSG_CONTENT_ENCRYPT_INFO encryptInfo;
1957         BOOL ret;
1958         DWORD i;
1959
1960         CryptMsgBase_Init((CryptMsgBase *)msg, dwFlags, pStreamInfo,
1961          CEnvelopedEncodeMsg_Close, CEnvelopedEncodeMsg_GetParam,
1962          CEnvelopedEncodeMsg_Update, CRYPT_DefaultMsgControl);
1963         ret = CRYPT_ConstructAlgorithmId(&msg->algo,
1964          &info->ContentEncryptionAlgorithm);
1965         msg->prov = prov;
1966         msg->data.cbData = 0;
1967         msg->data.pbData = NULL;
1968         msg->cRecipientInfo = info->cRecipients;
1969         msg->recipientInfo = CryptMemAlloc(info->cRecipients *
1970          sizeof(CMSG_KEY_TRANS_RECIPIENT_INFO));
1971         if (!msg->recipientInfo)
1972             ret = FALSE;
1973         memset(&encryptInfo, 0, sizeof(encryptInfo));
1974         if (ret)
1975         {
1976             ret = CContentEncryptInfo_Construct(&encryptInfo, info, prov);
1977             if (ret)
1978             {
1979                 ret = CRYPT_GenKey(&encryptInfo, algID);
1980                 if (ret)
1981                     msg->key = encryptInfo.hContentEncryptKey;
1982             }
1983         }
1984         for (i = 0; ret && i < msg->cRecipientInfo; ++i)
1985         {
1986             ret = CRYPT_ExportEncryptedKey(&encryptInfo, i, &encryptedKey);
1987             if (ret)
1988                 ret = CRecipientInfo_Construct(&msg->recipientInfo[i],
1989                  info->rgpRecipientCert[i], &encryptedKey);
1990         }
1991         CContentEncryptInfo_Free(&encryptInfo);
1992         if (!ret)
1993         {
1994             CryptMsgClose(msg);
1995             msg = NULL;
1996         }
1997     }
1998     if (!msg && (dwFlags & CMSG_CRYPT_RELEASE_CONTEXT_FLAG))
1999         CryptReleaseContext(prov, 0);
2000     return msg;
2001 }
2002
2003 HCRYPTMSG WINAPI CryptMsgOpenToEncode(DWORD dwMsgEncodingType, DWORD dwFlags,
2004  DWORD dwMsgType, const void *pvMsgEncodeInfo, LPSTR pszInnerContentObjID,
2005  PCMSG_STREAM_INFO pStreamInfo)
2006 {
2007     HCRYPTMSG msg = NULL;
2008
2009     TRACE("(%08x, %08x, %08x, %p, %s, %p)\n", dwMsgEncodingType, dwFlags,
2010      dwMsgType, pvMsgEncodeInfo, debugstr_a(pszInnerContentObjID), pStreamInfo);
2011
2012     if (GET_CMSG_ENCODING_TYPE(dwMsgEncodingType) != PKCS_7_ASN_ENCODING)
2013     {
2014         SetLastError(E_INVALIDARG);
2015         return NULL;
2016     }
2017     switch (dwMsgType)
2018     {
2019     case CMSG_DATA:
2020         msg = CDataEncodeMsg_Open(dwFlags, pvMsgEncodeInfo,
2021          pszInnerContentObjID, pStreamInfo);
2022         break;
2023     case CMSG_HASHED:
2024         msg = CHashEncodeMsg_Open(dwFlags, pvMsgEncodeInfo,
2025          pszInnerContentObjID, pStreamInfo);
2026         break;
2027     case CMSG_SIGNED:
2028         msg = CSignedEncodeMsg_Open(dwFlags, pvMsgEncodeInfo,
2029          pszInnerContentObjID, pStreamInfo);
2030         break;
2031     case CMSG_ENVELOPED:
2032         msg = CEnvelopedEncodeMsg_Open(dwFlags, pvMsgEncodeInfo,
2033          pszInnerContentObjID, pStreamInfo);
2034         break;
2035     case CMSG_SIGNED_AND_ENVELOPED:
2036     case CMSG_ENCRYPTED:
2037         /* defined but invalid, fall through */
2038     default:
2039         SetLastError(CRYPT_E_INVALID_MSG_TYPE);
2040     }
2041     return msg;
2042 }
2043
2044 typedef struct _CEnvelopedDecodeMsg
2045 {
2046     CRYPT_ENVELOPED_DATA *data;
2047     HCRYPTPROV            crypt_prov;
2048     CRYPT_DATA_BLOB       content;
2049     BOOL                  decrypted;
2050 } CEnvelopedDecodeMsg;
2051
2052 typedef struct _CDecodeMsg
2053 {
2054     CryptMsgBase           base;
2055     DWORD                  type;
2056     HCRYPTPROV             crypt_prov;
2057     union {
2058         HCRYPTHASH          hash;
2059         CSignedMsgData      signed_data;
2060         CEnvelopedDecodeMsg enveloped_data;
2061     } u;
2062     CRYPT_DATA_BLOB        msg_data;
2063     CRYPT_DATA_BLOB        detached_data;
2064     PCONTEXT_PROPERTY_LIST properties;
2065 } CDecodeMsg;
2066
2067 static void CDecodeMsg_Close(HCRYPTMSG hCryptMsg)
2068 {
2069     CDecodeMsg *msg = hCryptMsg;
2070
2071     if (msg->base.open_flags & CMSG_CRYPT_RELEASE_CONTEXT_FLAG)
2072         CryptReleaseContext(msg->crypt_prov, 0);
2073     switch (msg->type)
2074     {
2075     case CMSG_HASHED:
2076         if (msg->u.hash)
2077             CryptDestroyHash(msg->u.hash);
2078         break;
2079     case CMSG_ENVELOPED:
2080         if (msg->u.enveloped_data.crypt_prov)
2081             CryptReleaseContext(msg->u.enveloped_data.crypt_prov, 0);
2082         LocalFree(msg->u.enveloped_data.data);
2083         CryptMemFree(msg->u.enveloped_data.content.pbData);
2084         break;
2085     case CMSG_SIGNED:
2086         if (msg->u.signed_data.info)
2087         {
2088             LocalFree(msg->u.signed_data.info);
2089             CSignedMsgData_CloseHandles(&msg->u.signed_data);
2090         }
2091         break;
2092     }
2093     CryptMemFree(msg->msg_data.pbData);
2094     CryptMemFree(msg->detached_data.pbData);
2095     ContextPropertyList_Free(msg->properties);
2096 }
2097
2098 static BOOL CDecodeMsg_CopyData(CRYPT_DATA_BLOB *blob, const BYTE *pbData,
2099  DWORD cbData)
2100 {
2101     BOOL ret = TRUE;
2102
2103     if (cbData)
2104     {
2105         if (blob->cbData)
2106             blob->pbData = CryptMemRealloc(blob->pbData,
2107              blob->cbData + cbData);
2108         else
2109             blob->pbData = CryptMemAlloc(cbData);
2110         if (blob->pbData)
2111         {
2112             memcpy(blob->pbData + blob->cbData, pbData, cbData);
2113             blob->cbData += cbData;
2114         }
2115         else
2116             ret = FALSE;
2117     }
2118     return ret;
2119 }
2120
2121 static BOOL CDecodeMsg_DecodeDataContent(CDecodeMsg *msg, const CRYPT_DER_BLOB *blob)
2122 {
2123     BOOL ret;
2124     CRYPT_DATA_BLOB *data;
2125     DWORD size;
2126
2127     ret = CryptDecodeObjectEx(X509_ASN_ENCODING, X509_OCTET_STRING,
2128      blob->pbData, blob->cbData, CRYPT_DECODE_ALLOC_FLAG, NULL, &data, &size);
2129     if (ret)
2130     {
2131         ret = ContextPropertyList_SetProperty(msg->properties,
2132          CMSG_CONTENT_PARAM, data->pbData, data->cbData);
2133         LocalFree(data);
2134     }
2135     return ret;
2136 }
2137
2138 static void CDecodeMsg_SaveAlgorithmID(CDecodeMsg *msg, DWORD param,
2139  const CRYPT_ALGORITHM_IDENTIFIER *id)
2140 {
2141     static const BYTE nullParams[] = { ASN_NULL, 0 };
2142     CRYPT_ALGORITHM_IDENTIFIER *copy;
2143     DWORD len = sizeof(CRYPT_ALGORITHM_IDENTIFIER);
2144
2145     /* Linearize algorithm id */
2146     len += strlen(id->pszObjId) + 1;
2147     len += id->Parameters.cbData;
2148     copy = CryptMemAlloc(len);
2149     if (copy)
2150     {
2151         copy->pszObjId =
2152          (LPSTR)((BYTE *)copy + sizeof(CRYPT_ALGORITHM_IDENTIFIER));
2153         strcpy(copy->pszObjId, id->pszObjId);
2154         copy->Parameters.pbData = (BYTE *)copy->pszObjId + strlen(id->pszObjId)
2155          + 1;
2156         /* Trick:  omit NULL parameters */
2157         if (id->Parameters.cbData == sizeof(nullParams) &&
2158          !memcmp(id->Parameters.pbData, nullParams, sizeof(nullParams)))
2159         {
2160             copy->Parameters.cbData = 0;
2161             len -= sizeof(nullParams);
2162         }
2163         else
2164             copy->Parameters.cbData = id->Parameters.cbData;
2165         if (copy->Parameters.cbData)
2166             memcpy(copy->Parameters.pbData, id->Parameters.pbData,
2167              id->Parameters.cbData);
2168         ContextPropertyList_SetProperty(msg->properties, param, (BYTE *)copy,
2169          len);
2170         CryptMemFree(copy);
2171     }
2172 }
2173
2174 static inline void CRYPT_FixUpAlgorithmID(CRYPT_ALGORITHM_IDENTIFIER *id)
2175 {
2176     id->pszObjId = (LPSTR)((BYTE *)id + sizeof(CRYPT_ALGORITHM_IDENTIFIER));
2177     id->Parameters.pbData = (BYTE *)id->pszObjId + strlen(id->pszObjId) + 1;
2178 }
2179
2180 static BOOL CDecodeMsg_DecodeHashedContent(CDecodeMsg *msg,
2181  const CRYPT_DER_BLOB *blob)
2182 {
2183     BOOL ret;
2184     CRYPT_DIGESTED_DATA *digestedData;
2185     DWORD size;
2186
2187     ret = CRYPT_AsnDecodePKCSDigestedData(blob->pbData, blob->cbData,
2188      CRYPT_DECODE_ALLOC_FLAG, NULL, (CRYPT_DIGESTED_DATA *)&digestedData,
2189      &size);
2190     if (ret)
2191     {
2192         ContextPropertyList_SetProperty(msg->properties, CMSG_VERSION_PARAM,
2193          (const BYTE *)&digestedData->version, sizeof(digestedData->version));
2194         CDecodeMsg_SaveAlgorithmID(msg, CMSG_HASH_ALGORITHM_PARAM,
2195          &digestedData->DigestAlgorithm);
2196         ContextPropertyList_SetProperty(msg->properties,
2197          CMSG_INNER_CONTENT_TYPE_PARAM,
2198          (const BYTE *)digestedData->ContentInfo.pszObjId,
2199          digestedData->ContentInfo.pszObjId ?
2200          strlen(digestedData->ContentInfo.pszObjId) + 1 : 0);
2201         if (!(msg->base.open_flags & CMSG_DETACHED_FLAG))
2202         {
2203             if (digestedData->ContentInfo.Content.cbData)
2204                 CDecodeMsg_DecodeDataContent(msg,
2205                  &digestedData->ContentInfo.Content);
2206             else
2207                 ContextPropertyList_SetProperty(msg->properties,
2208                  CMSG_CONTENT_PARAM, NULL, 0);
2209         }
2210         ContextPropertyList_SetProperty(msg->properties, CMSG_HASH_DATA_PARAM,
2211          digestedData->hash.pbData, digestedData->hash.cbData);
2212         LocalFree(digestedData);
2213     }
2214     return ret;
2215 }
2216
2217 static BOOL CDecodeMsg_DecodeEnvelopedContent(CDecodeMsg *msg,
2218  const CRYPT_DER_BLOB *blob)
2219 {
2220     BOOL ret;
2221     CRYPT_ENVELOPED_DATA *envelopedData;
2222     DWORD size;
2223
2224     ret = CRYPT_AsnDecodePKCSEnvelopedData(blob->pbData, blob->cbData,
2225      CRYPT_DECODE_ALLOC_FLAG, NULL, (CRYPT_ENVELOPED_DATA *)&envelopedData,
2226      &size);
2227     if (ret)
2228         msg->u.enveloped_data.data = envelopedData;
2229     return ret;
2230 }
2231
2232 static BOOL CDecodeMsg_DecodeSignedContent(CDecodeMsg *msg,
2233  const CRYPT_DER_BLOB *blob)
2234 {
2235     BOOL ret;
2236     CRYPT_SIGNED_INFO *signedInfo;
2237     DWORD size;
2238
2239     ret = CRYPT_AsnDecodeCMSSignedInfo(blob->pbData, blob->cbData,
2240      CRYPT_DECODE_ALLOC_FLAG, NULL, (CRYPT_SIGNED_INFO *)&signedInfo,
2241      &size);
2242     if (ret)
2243         msg->u.signed_data.info = signedInfo;
2244     return ret;
2245 }
2246
2247 /* Decodes the content in blob as the type given, and updates the value
2248  * (type, parameters, etc.) of msg based on what blob contains.
2249  * It doesn't just use msg's type, to allow a recursive call from an implicitly
2250  * typed message once the outer content info has been decoded.
2251  */
2252 static BOOL CDecodeMsg_DecodeContent(CDecodeMsg *msg, const CRYPT_DER_BLOB *blob,
2253  DWORD type)
2254 {
2255     BOOL ret;
2256
2257     switch (type)
2258     {
2259     case CMSG_DATA:
2260         if ((ret = CDecodeMsg_DecodeDataContent(msg, blob)))
2261             msg->type = CMSG_DATA;
2262         break;
2263     case CMSG_HASHED:
2264         if ((ret = CDecodeMsg_DecodeHashedContent(msg, blob)))
2265             msg->type = CMSG_HASHED;
2266         break;
2267     case CMSG_ENVELOPED:
2268         if ((ret = CDecodeMsg_DecodeEnvelopedContent(msg, blob)))
2269             msg->type = CMSG_ENVELOPED;
2270         break;
2271     case CMSG_SIGNED:
2272         if ((ret = CDecodeMsg_DecodeSignedContent(msg, blob)))
2273             msg->type = CMSG_SIGNED;
2274         break;
2275     default:
2276     {
2277         CRYPT_CONTENT_INFO *info;
2278         DWORD size;
2279
2280         ret = CryptDecodeObjectEx(X509_ASN_ENCODING, PKCS_CONTENT_INFO,
2281          msg->msg_data.pbData, msg->msg_data.cbData, CRYPT_DECODE_ALLOC_FLAG,
2282          NULL, &info, &size);
2283         if (ret)
2284         {
2285             if (!strcmp(info->pszObjId, szOID_RSA_data))
2286                 ret = CDecodeMsg_DecodeContent(msg, &info->Content, CMSG_DATA);
2287             else if (!strcmp(info->pszObjId, szOID_RSA_digestedData))
2288                 ret = CDecodeMsg_DecodeContent(msg, &info->Content,
2289                  CMSG_HASHED);
2290             else if (!strcmp(info->pszObjId, szOID_RSA_envelopedData))
2291                 ret = CDecodeMsg_DecodeContent(msg, &info->Content,
2292                  CMSG_ENVELOPED);
2293             else if (!strcmp(info->pszObjId, szOID_RSA_signedData))
2294                 ret = CDecodeMsg_DecodeContent(msg, &info->Content,
2295                  CMSG_SIGNED);
2296             else
2297             {
2298                 SetLastError(CRYPT_E_INVALID_MSG_TYPE);
2299                 ret = FALSE;
2300             }
2301             LocalFree(info);
2302         }
2303     }
2304     }
2305     return ret;
2306 }
2307
2308 static BOOL CDecodeMsg_FinalizeHashedContent(CDecodeMsg *msg,
2309  CRYPT_DER_BLOB *blob)
2310 {
2311     CRYPT_ALGORITHM_IDENTIFIER *hashAlgoID = NULL;
2312     DWORD size = 0;
2313     ALG_ID algID = 0;
2314     BOOL ret;
2315
2316     CryptMsgGetParam(msg, CMSG_HASH_ALGORITHM_PARAM, 0, NULL, &size);
2317     hashAlgoID = CryptMemAlloc(size);
2318     ret = CryptMsgGetParam(msg, CMSG_HASH_ALGORITHM_PARAM, 0, hashAlgoID,
2319      &size);
2320     if (ret)
2321         algID = CertOIDToAlgId(hashAlgoID->pszObjId);
2322     ret = CryptCreateHash(msg->crypt_prov, algID, 0, 0, &msg->u.hash);
2323     if (ret)
2324     {
2325         CRYPT_DATA_BLOB content;
2326
2327         if (msg->base.open_flags & CMSG_DETACHED_FLAG)
2328         {
2329             /* Unlike for non-detached messages, the data were never stored as
2330              * the content param, but were saved in msg->detached_data instead.
2331              */
2332             content.pbData = msg->detached_data.pbData;
2333             content.cbData = msg->detached_data.cbData;
2334         }
2335         else
2336             ret = ContextPropertyList_FindProperty(msg->properties,
2337              CMSG_CONTENT_PARAM, &content);
2338         if (ret)
2339             ret = CryptHashData(msg->u.hash, content.pbData, content.cbData, 0);
2340     }
2341     CryptMemFree(hashAlgoID);
2342     return ret;
2343 }
2344
2345 static BOOL CDecodeMsg_FinalizeEnvelopedContent(CDecodeMsg *msg,
2346  CRYPT_DER_BLOB *blob)
2347 {
2348     CRYPT_DATA_BLOB *content;
2349
2350     if (msg->base.open_flags & CMSG_DETACHED_FLAG)
2351         content = &msg->detached_data;
2352     else
2353         content =
2354          &msg->u.enveloped_data.data->encryptedContentInfo.encryptedContent;
2355
2356     return CRYPT_ConstructBlob(&msg->u.enveloped_data.content, content);
2357 }
2358
2359 static BOOL CDecodeMsg_FinalizeSignedContent(CDecodeMsg *msg,
2360  CRYPT_DER_BLOB *blob)
2361 {
2362     BOOL ret;
2363     DWORD i, size;
2364
2365     ret = CSignedMsgData_AllocateHandles(&msg->u.signed_data);
2366     for (i = 0; ret && i < msg->u.signed_data.info->cSignerInfo; i++)
2367         ret = CSignedMsgData_ConstructSignerHandles(&msg->u.signed_data, i,
2368          msg->crypt_prov);
2369     if (ret)
2370     {
2371         CRYPT_DATA_BLOB *content;
2372
2373         /* Now that we have all the content, update the hash handles with
2374          * it.  If the message is a detached message, the content is stored
2375          * in msg->detached_data rather than in the signed message's
2376          * content.
2377          */
2378         if (msg->base.open_flags & CMSG_DETACHED_FLAG)
2379             content = &msg->detached_data;
2380         else
2381             content = &msg->u.signed_data.info->content.Content;
2382         if (content->cbData)
2383         {
2384             /* If the message is not detached, have to decode the message's
2385              * content if the type is szOID_RSA_data.
2386              */
2387             if (!(msg->base.open_flags & CMSG_DETACHED_FLAG) &&
2388              !strcmp(msg->u.signed_data.info->content.pszObjId,
2389              szOID_RSA_data))
2390             {
2391                 CRYPT_DATA_BLOB *blob;
2392
2393                 ret = CryptDecodeObjectEx(X509_ASN_ENCODING,
2394                  X509_OCTET_STRING, content->pbData, content->cbData,
2395                  CRYPT_DECODE_ALLOC_FLAG, NULL, &blob, &size);
2396                 if (ret)
2397                 {
2398                     ret = CSignedMsgData_Update(&msg->u.signed_data,
2399                      blob->pbData, blob->cbData, TRUE, Verify);
2400                     LocalFree(blob);
2401                 }
2402             }
2403             else
2404                 ret = CSignedMsgData_Update(&msg->u.signed_data,
2405                  content->pbData, content->cbData, TRUE, Verify);
2406         }
2407     }
2408     return ret;
2409 }
2410
2411 static BOOL CDecodeMsg_FinalizeContent(CDecodeMsg *msg, CRYPT_DER_BLOB *blob)
2412 {
2413     BOOL ret = FALSE;
2414
2415     switch (msg->type)
2416     {
2417     case CMSG_HASHED:
2418         ret = CDecodeMsg_FinalizeHashedContent(msg, blob);
2419         break;
2420     case CMSG_ENVELOPED:
2421         ret = CDecodeMsg_FinalizeEnvelopedContent(msg, blob);
2422         break;
2423     case CMSG_SIGNED:
2424         ret = CDecodeMsg_FinalizeSignedContent(msg, blob);
2425         break;
2426     default:
2427         ret = TRUE;
2428     }
2429     return ret;
2430 }
2431
2432 static BOOL CDecodeMsg_Update(HCRYPTMSG hCryptMsg, const BYTE *pbData,
2433  DWORD cbData, BOOL fFinal)
2434 {
2435     CDecodeMsg *msg = hCryptMsg;
2436     BOOL ret = FALSE;
2437
2438     TRACE("(%p, %p, %d, %d)\n", hCryptMsg, pbData, cbData, fFinal);
2439
2440     if (msg->base.state == MsgStateFinalized)
2441         SetLastError(CRYPT_E_MSG_ERROR);
2442     else if (msg->base.streamed)
2443     {
2444         FIXME("(%p, %p, %d, %d): streamed update stub\n", hCryptMsg, pbData,
2445          cbData, fFinal);
2446         switch (msg->base.state)
2447         {
2448         case MsgStateInit:
2449             ret = CDecodeMsg_CopyData(&msg->msg_data, pbData, cbData);
2450             if (fFinal)
2451             {
2452                 if (msg->base.open_flags & CMSG_DETACHED_FLAG)
2453                     msg->base.state = MsgStateDataFinalized;
2454                 else
2455                     msg->base.state = MsgStateFinalized;
2456             }
2457             else
2458                 msg->base.state = MsgStateUpdated;
2459             break;
2460         case MsgStateUpdated:
2461             ret = CDecodeMsg_CopyData(&msg->msg_data, pbData, cbData);
2462             if (fFinal)
2463             {
2464                 if (msg->base.open_flags & CMSG_DETACHED_FLAG)
2465                     msg->base.state = MsgStateDataFinalized;
2466                 else
2467                     msg->base.state = MsgStateFinalized;
2468             }
2469             break;
2470         case MsgStateDataFinalized:
2471             ret = CDecodeMsg_CopyData(&msg->detached_data, pbData, cbData);
2472             if (fFinal)
2473                 msg->base.state = MsgStateFinalized;
2474             break;
2475         default:
2476             SetLastError(CRYPT_E_MSG_ERROR);
2477             break;
2478         }
2479     }
2480     else
2481     {
2482         if (!fFinal)
2483             SetLastError(CRYPT_E_MSG_ERROR);
2484         else
2485         {
2486             switch (msg->base.state)
2487             {
2488             case MsgStateInit:
2489                 ret = CDecodeMsg_CopyData(&msg->msg_data, pbData, cbData);
2490                 if (msg->base.open_flags & CMSG_DETACHED_FLAG)
2491                     msg->base.state = MsgStateDataFinalized;
2492                 else
2493                     msg->base.state = MsgStateFinalized;
2494                 break;
2495             case MsgStateDataFinalized:
2496                 ret = CDecodeMsg_CopyData(&msg->detached_data, pbData, cbData);
2497                 msg->base.state = MsgStateFinalized;
2498                 break;
2499             default:
2500                 SetLastError(CRYPT_E_MSG_ERROR);
2501             }
2502         }
2503     }
2504     if (ret && fFinal &&
2505      ((msg->base.open_flags & CMSG_DETACHED_FLAG && msg->base.state ==
2506      MsgStateDataFinalized) ||
2507      (!(msg->base.open_flags & CMSG_DETACHED_FLAG) && msg->base.state ==
2508      MsgStateFinalized)))
2509         ret = CDecodeMsg_DecodeContent(msg, &msg->msg_data, msg->type);
2510     if (ret && msg->base.state == MsgStateFinalized)
2511         ret = CDecodeMsg_FinalizeContent(msg, &msg->msg_data);
2512     return ret;
2513 }
2514
2515 static BOOL CDecodeHashMsg_GetParam(CDecodeMsg *msg, DWORD dwParamType,
2516  DWORD dwIndex, void *pvData, DWORD *pcbData)
2517 {
2518     BOOL ret = FALSE;
2519
2520     switch (dwParamType)
2521     {
2522     case CMSG_TYPE_PARAM:
2523         ret = CRYPT_CopyParam(pvData, pcbData, &msg->type, sizeof(msg->type));
2524         break;
2525     case CMSG_HASH_ALGORITHM_PARAM:
2526     {
2527         CRYPT_DATA_BLOB blob;
2528
2529         ret = ContextPropertyList_FindProperty(msg->properties, dwParamType,
2530          &blob);
2531         if (ret)
2532         {
2533             ret = CRYPT_CopyParam(pvData, pcbData, blob.pbData, blob.cbData);
2534             if (ret && pvData)
2535                 CRYPT_FixUpAlgorithmID(pvData);
2536         }
2537         else
2538             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
2539         break;
2540     }
2541     case CMSG_COMPUTED_HASH_PARAM:
2542         ret = CryptGetHashParam(msg->u.hash, HP_HASHVAL, pvData, pcbData, 0);
2543         break;
2544     default:
2545     {
2546         CRYPT_DATA_BLOB blob;
2547
2548         ret = ContextPropertyList_FindProperty(msg->properties, dwParamType,
2549          &blob);
2550         if (ret)
2551             ret = CRYPT_CopyParam(pvData, pcbData, blob.pbData, blob.cbData);
2552         else
2553             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
2554     }
2555     }
2556     return ret;
2557 }
2558
2559 /* nextData is an in/out parameter - on input it's the memory location in
2560  * which a copy of in's data should be made, and on output it's the memory
2561  * location immediately after out's copy of in's data.
2562  */
2563 static inline void CRYPT_CopyBlob(CRYPT_DATA_BLOB *out,
2564  const CRYPT_DATA_BLOB *in, LPBYTE *nextData)
2565 {
2566     out->cbData = in->cbData;
2567     if (in->cbData)
2568     {
2569         out->pbData = *nextData;
2570         memcpy(out->pbData, in->pbData, in->cbData);
2571         *nextData += in->cbData;
2572     }
2573 }
2574
2575 static inline void CRYPT_CopyAlgorithmId(CRYPT_ALGORITHM_IDENTIFIER *out,
2576  const CRYPT_ALGORITHM_IDENTIFIER *in, LPBYTE *nextData)
2577 {
2578     if (in->pszObjId)
2579     {
2580         out->pszObjId = (LPSTR)*nextData;
2581         strcpy(out->pszObjId, in->pszObjId);
2582         *nextData += strlen(out->pszObjId) + 1;
2583     }
2584     CRYPT_CopyBlob(&out->Parameters, &in->Parameters, nextData);
2585 }
2586
2587 static inline void CRYPT_CopyAttributes(CRYPT_ATTRIBUTES *out,
2588  const CRYPT_ATTRIBUTES *in, LPBYTE *nextData)
2589 {
2590     out->cAttr = in->cAttr;
2591     if (in->cAttr)
2592     {
2593         DWORD i;
2594
2595         *nextData = POINTER_ALIGN_DWORD_PTR(*nextData);
2596         out->rgAttr = (CRYPT_ATTRIBUTE *)*nextData;
2597         *nextData += in->cAttr * sizeof(CRYPT_ATTRIBUTE);
2598         for (i = 0; i < in->cAttr; i++)
2599         {
2600             if (in->rgAttr[i].pszObjId)
2601             {
2602                 out->rgAttr[i].pszObjId = (LPSTR)*nextData;
2603                 strcpy(out->rgAttr[i].pszObjId, in->rgAttr[i].pszObjId);
2604                 *nextData += strlen(in->rgAttr[i].pszObjId) + 1;
2605             }
2606             if (in->rgAttr[i].cValue)
2607             {
2608                 DWORD j;
2609
2610                 out->rgAttr[i].cValue = in->rgAttr[i].cValue;
2611                 *nextData = POINTER_ALIGN_DWORD_PTR(*nextData);
2612                 out->rgAttr[i].rgValue = (PCRYPT_DATA_BLOB)*nextData;
2613                 *nextData += in->rgAttr[i].cValue * sizeof(CRYPT_DATA_BLOB);
2614                 for (j = 0; j < in->rgAttr[i].cValue; j++)
2615                     CRYPT_CopyBlob(&out->rgAttr[i].rgValue[j],
2616                      &in->rgAttr[i].rgValue[j], nextData);
2617             }
2618         }
2619     }
2620 }
2621
2622 static DWORD CRYPT_SizeOfAttributes(const CRYPT_ATTRIBUTES *attr)
2623 {
2624     DWORD size = attr->cAttr * sizeof(CRYPT_ATTRIBUTE), i, j;
2625
2626     for (i = 0; i < attr->cAttr; i++)
2627     {
2628         if (attr->rgAttr[i].pszObjId)
2629             size += strlen(attr->rgAttr[i].pszObjId) + 1;
2630         /* align pointer */
2631         size = ALIGN_DWORD_PTR(size);
2632         size += attr->rgAttr[i].cValue * sizeof(CRYPT_DATA_BLOB);
2633         for (j = 0; j < attr->rgAttr[i].cValue; j++)
2634             size += attr->rgAttr[i].rgValue[j].cbData;
2635     }
2636     /* align pointer again to be conservative */
2637     size = ALIGN_DWORD_PTR(size);
2638     return size;
2639 }
2640
2641 static DWORD CRYPT_SizeOfKeyIdAsIssuerAndSerial(const CRYPT_DATA_BLOB *keyId)
2642 {
2643     static char oid_key_rdn[] = szOID_KEYID_RDN;
2644     DWORD size = 0;
2645     CERT_RDN_ATTR attr;
2646     CERT_RDN rdn = { 1, &attr };
2647     CERT_NAME_INFO name = { 1, &rdn };
2648
2649     attr.pszObjId = oid_key_rdn;
2650     attr.dwValueType = CERT_RDN_OCTET_STRING;
2651     attr.Value.cbData = keyId->cbData;
2652     attr.Value.pbData = keyId->pbData;
2653     if (CryptEncodeObject(X509_ASN_ENCODING, X509_NAME, &name, NULL, &size))
2654         size++; /* Only include size of special zero serial number on success */
2655     return size;
2656 }
2657
2658 static BOOL CRYPT_CopyKeyIdAsIssuerAndSerial(CERT_NAME_BLOB *issuer,
2659  CRYPT_INTEGER_BLOB *serialNumber, const CRYPT_DATA_BLOB *keyId, DWORD encodedLen,
2660  LPBYTE *nextData)
2661 {
2662     static char oid_key_rdn[] = szOID_KEYID_RDN;
2663     CERT_RDN_ATTR attr;
2664     CERT_RDN rdn = { 1, &attr };
2665     CERT_NAME_INFO name = { 1, &rdn };
2666     BOOL ret;
2667
2668     /* Encode special zero serial number */
2669     serialNumber->cbData = 1;
2670     serialNumber->pbData = *nextData;
2671     **nextData = 0;
2672     (*nextData)++;
2673     /* Encode issuer */
2674     issuer->pbData = *nextData;
2675     attr.pszObjId = oid_key_rdn;
2676     attr.dwValueType = CERT_RDN_OCTET_STRING;
2677     attr.Value.cbData = keyId->cbData;
2678     attr.Value.pbData = keyId->pbData;
2679     ret = CryptEncodeObject(X509_ASN_ENCODING, X509_NAME, &name, *nextData,
2680      &encodedLen);
2681     if (ret)
2682     {
2683         *nextData += encodedLen;
2684         issuer->cbData = encodedLen;
2685     }
2686     return ret;
2687 }
2688
2689 static BOOL CRYPT_CopySignerInfo(void *pvData, DWORD *pcbData,
2690  const CMSG_CMS_SIGNER_INFO *in)
2691 {
2692     DWORD size = sizeof(CMSG_SIGNER_INFO), rdnSize = 0;
2693     BOOL ret;
2694
2695     TRACE("(%p, %d, %p)\n", pvData, pvData ? *pcbData : 0, in);
2696
2697     if (in->SignerId.dwIdChoice == CERT_ID_ISSUER_SERIAL_NUMBER)
2698     {
2699         size += in->SignerId.u.IssuerSerialNumber.Issuer.cbData;
2700         size += in->SignerId.u.IssuerSerialNumber.SerialNumber.cbData;
2701     }
2702     else
2703     {
2704         rdnSize = CRYPT_SizeOfKeyIdAsIssuerAndSerial(&in->SignerId.u.KeyId);
2705         size += rdnSize;
2706     }
2707     if (in->HashAlgorithm.pszObjId)
2708         size += strlen(in->HashAlgorithm.pszObjId) + 1;
2709     size += in->HashAlgorithm.Parameters.cbData;
2710     if (in->HashEncryptionAlgorithm.pszObjId)
2711         size += strlen(in->HashEncryptionAlgorithm.pszObjId) + 1;
2712     size += in->HashEncryptionAlgorithm.Parameters.cbData;
2713     size += in->EncryptedHash.cbData;
2714     /* align pointer */
2715     size = ALIGN_DWORD_PTR(size);
2716     size += CRYPT_SizeOfAttributes(&in->AuthAttrs);
2717     size += CRYPT_SizeOfAttributes(&in->UnauthAttrs);
2718     if (!pvData)
2719     {
2720         *pcbData = size;
2721         ret = TRUE;
2722     }
2723     else if (*pcbData < size)
2724     {
2725         *pcbData = size;
2726         SetLastError(ERROR_MORE_DATA);
2727         ret = FALSE;
2728     }
2729     else
2730     {
2731         LPBYTE nextData = (BYTE *)pvData + sizeof(CMSG_SIGNER_INFO);
2732         CMSG_SIGNER_INFO *out = pvData;
2733
2734         ret = TRUE;
2735         out->dwVersion = in->dwVersion;
2736         if (in->SignerId.dwIdChoice == CERT_ID_ISSUER_SERIAL_NUMBER)
2737         {
2738             CRYPT_CopyBlob(&out->Issuer,
2739              &in->SignerId.u.IssuerSerialNumber.Issuer, &nextData);
2740             CRYPT_CopyBlob(&out->SerialNumber,
2741              &in->SignerId.u.IssuerSerialNumber.SerialNumber, &nextData);
2742         }
2743         else
2744             ret = CRYPT_CopyKeyIdAsIssuerAndSerial(&out->Issuer, &out->SerialNumber,
2745              &in->SignerId.u.KeyId, rdnSize, &nextData);
2746         if (ret)
2747         {
2748             CRYPT_CopyAlgorithmId(&out->HashAlgorithm, &in->HashAlgorithm,
2749              &nextData);
2750             CRYPT_CopyAlgorithmId(&out->HashEncryptionAlgorithm,
2751              &in->HashEncryptionAlgorithm, &nextData);
2752             CRYPT_CopyBlob(&out->EncryptedHash, &in->EncryptedHash, &nextData);
2753             nextData = POINTER_ALIGN_DWORD_PTR(nextData);
2754             CRYPT_CopyAttributes(&out->AuthAttrs, &in->AuthAttrs, &nextData);
2755             CRYPT_CopyAttributes(&out->UnauthAttrs, &in->UnauthAttrs, &nextData);
2756         }
2757     }
2758     TRACE("returning %d\n", ret);
2759     return ret;
2760 }
2761
2762 static BOOL CRYPT_CopyCMSSignerInfo(void *pvData, DWORD *pcbData,
2763  const CMSG_CMS_SIGNER_INFO *in)
2764 {
2765     DWORD size = sizeof(CMSG_CMS_SIGNER_INFO);
2766     BOOL ret;
2767
2768     TRACE("(%p, %d, %p)\n", pvData, pvData ? *pcbData : 0, in);
2769
2770     if (in->SignerId.dwIdChoice == CERT_ID_ISSUER_SERIAL_NUMBER)
2771     {
2772         size += in->SignerId.u.IssuerSerialNumber.Issuer.cbData;
2773         size += in->SignerId.u.IssuerSerialNumber.SerialNumber.cbData;
2774     }
2775     else
2776         size += in->SignerId.u.KeyId.cbData;
2777     if (in->HashAlgorithm.pszObjId)
2778         size += strlen(in->HashAlgorithm.pszObjId) + 1;
2779     size += in->HashAlgorithm.Parameters.cbData;
2780     if (in->HashEncryptionAlgorithm.pszObjId)
2781         size += strlen(in->HashEncryptionAlgorithm.pszObjId) + 1;
2782     size += in->HashEncryptionAlgorithm.Parameters.cbData;
2783     size += in->EncryptedHash.cbData;
2784     /* align pointer */
2785     size = ALIGN_DWORD_PTR(size);
2786     size += CRYPT_SizeOfAttributes(&in->AuthAttrs);
2787     size += CRYPT_SizeOfAttributes(&in->UnauthAttrs);
2788     if (!pvData)
2789     {
2790         *pcbData = size;
2791         ret = TRUE;
2792     }
2793     else if (*pcbData < size)
2794     {
2795         *pcbData = size;
2796         SetLastError(ERROR_MORE_DATA);
2797         ret = FALSE;
2798     }
2799     else
2800     {
2801         LPBYTE nextData = (BYTE *)pvData + sizeof(CMSG_CMS_SIGNER_INFO);
2802         CMSG_CMS_SIGNER_INFO *out = pvData;
2803
2804         out->dwVersion = in->dwVersion;
2805         out->SignerId.dwIdChoice = in->SignerId.dwIdChoice;
2806         if (in->SignerId.dwIdChoice == CERT_ID_ISSUER_SERIAL_NUMBER)
2807         {
2808             CRYPT_CopyBlob(&out->SignerId.u.IssuerSerialNumber.Issuer,
2809              &in->SignerId.u.IssuerSerialNumber.Issuer, &nextData);
2810             CRYPT_CopyBlob(&out->SignerId.u.IssuerSerialNumber.SerialNumber,
2811              &in->SignerId.u.IssuerSerialNumber.SerialNumber, &nextData);
2812         }
2813         else
2814             CRYPT_CopyBlob(&out->SignerId.u.KeyId, &in->SignerId.u.KeyId, &nextData);
2815         CRYPT_CopyAlgorithmId(&out->HashAlgorithm, &in->HashAlgorithm,
2816          &nextData);
2817         CRYPT_CopyAlgorithmId(&out->HashEncryptionAlgorithm,
2818          &in->HashEncryptionAlgorithm, &nextData);
2819         CRYPT_CopyBlob(&out->EncryptedHash, &in->EncryptedHash, &nextData);
2820         nextData = POINTER_ALIGN_DWORD_PTR(nextData);
2821         CRYPT_CopyAttributes(&out->AuthAttrs, &in->AuthAttrs, &nextData);
2822         CRYPT_CopyAttributes(&out->UnauthAttrs, &in->UnauthAttrs, &nextData);
2823         ret = TRUE;
2824     }
2825     TRACE("returning %d\n", ret);
2826     return ret;
2827 }
2828
2829 static BOOL CRYPT_CopySignerCertInfo(void *pvData, DWORD *pcbData,
2830  const CMSG_CMS_SIGNER_INFO *in)
2831 {
2832     DWORD size = sizeof(CERT_INFO), rdnSize = 0;
2833     BOOL ret;
2834
2835     TRACE("(%p, %d, %p)\n", pvData, pvData ? *pcbData : 0, in);
2836
2837     if (in->SignerId.dwIdChoice == CERT_ID_ISSUER_SERIAL_NUMBER)
2838     {
2839         size += in->SignerId.u.IssuerSerialNumber.Issuer.cbData;
2840         size += in->SignerId.u.IssuerSerialNumber.SerialNumber.cbData;
2841     }
2842     else
2843     {
2844         rdnSize = CRYPT_SizeOfKeyIdAsIssuerAndSerial(&in->SignerId.u.KeyId);
2845         size += rdnSize;
2846     }
2847     if (!pvData)
2848     {
2849         *pcbData = size;
2850         ret = TRUE;
2851     }
2852     else if (*pcbData < size)
2853     {
2854         *pcbData = size;
2855         SetLastError(ERROR_MORE_DATA);
2856         ret = FALSE;
2857     }
2858     else
2859     {
2860         LPBYTE nextData = (BYTE *)pvData + sizeof(CERT_INFO);
2861         CERT_INFO *out = pvData;
2862
2863         memset(out, 0, sizeof(CERT_INFO));
2864         if (in->SignerId.dwIdChoice == CERT_ID_ISSUER_SERIAL_NUMBER)
2865         {
2866             CRYPT_CopyBlob(&out->Issuer,
2867              &in->SignerId.u.IssuerSerialNumber.Issuer, &nextData);
2868             CRYPT_CopyBlob(&out->SerialNumber,
2869              &in->SignerId.u.IssuerSerialNumber.SerialNumber, &nextData);
2870             ret = TRUE;
2871         }
2872         else
2873             ret = CRYPT_CopyKeyIdAsIssuerAndSerial(&out->Issuer, &out->SerialNumber,
2874              &in->SignerId.u.KeyId, rdnSize, &nextData);
2875     }
2876     TRACE("returning %d\n", ret);
2877     return ret;
2878 }
2879
2880 static BOOL CRYPT_CopyRecipientInfo(void *pvData, DWORD *pcbData,
2881  const CERT_ISSUER_SERIAL_NUMBER *in)
2882 {
2883     DWORD size = sizeof(CERT_INFO);
2884     BOOL ret;
2885
2886     TRACE("(%p, %d, %p)\n", pvData, pvData ? *pcbData : 0, in);
2887
2888     size += in->SerialNumber.cbData;
2889     size += in->Issuer.cbData;
2890     if (!pvData)
2891     {
2892         *pcbData = size;
2893         ret = TRUE;
2894     }
2895     else if (*pcbData < size)
2896     {
2897         *pcbData = size;
2898         SetLastError(ERROR_MORE_DATA);
2899         ret = FALSE;
2900     }
2901     else
2902     {
2903         LPBYTE nextData = (BYTE *)pvData + sizeof(CERT_INFO);
2904         CERT_INFO *out = pvData;
2905
2906         CRYPT_CopyBlob(&out->SerialNumber, &in->SerialNumber, &nextData);
2907         CRYPT_CopyBlob(&out->Issuer, &in->Issuer, &nextData);
2908         ret = TRUE;
2909     }
2910     TRACE("returning %d\n", ret);
2911     return ret;
2912 }
2913
2914 static BOOL CDecodeEnvelopedMsg_GetParam(CDecodeMsg *msg, DWORD dwParamType,
2915  DWORD dwIndex, void *pvData, DWORD *pcbData)
2916 {
2917     BOOL ret = FALSE;
2918
2919     switch (dwParamType)
2920     {
2921     case CMSG_TYPE_PARAM:
2922         ret = CRYPT_CopyParam(pvData, pcbData, &msg->type, sizeof(msg->type));
2923         break;
2924     case CMSG_CONTENT_PARAM:
2925         if (msg->u.enveloped_data.data)
2926             ret = CRYPT_CopyParam(pvData, pcbData,
2927              msg->u.enveloped_data.content.pbData,
2928              msg->u.enveloped_data.content.cbData);
2929         else
2930             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
2931         break;
2932     case CMSG_RECIPIENT_COUNT_PARAM:
2933         if (msg->u.enveloped_data.data)
2934             ret = CRYPT_CopyParam(pvData, pcbData,
2935              &msg->u.enveloped_data.data->cRecipientInfo, sizeof(DWORD));
2936         else
2937             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
2938         break;
2939     case CMSG_RECIPIENT_INFO_PARAM:
2940         if (msg->u.enveloped_data.data)
2941         {
2942             if (dwIndex < msg->u.enveloped_data.data->cRecipientInfo)
2943             {
2944                 PCMSG_KEY_TRANS_RECIPIENT_INFO recipientInfo =
2945                  &msg->u.enveloped_data.data->rgRecipientInfo[dwIndex];
2946
2947                 ret = CRYPT_CopyRecipientInfo(pvData, pcbData,
2948                  &recipientInfo->RecipientId.u.IssuerSerialNumber);
2949             }
2950             else
2951                 SetLastError(CRYPT_E_INVALID_INDEX);
2952         }
2953         else
2954             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
2955         break;
2956     default:
2957         FIXME("unimplemented for %d\n", dwParamType);
2958         SetLastError(CRYPT_E_INVALID_MSG_TYPE);
2959     }
2960     return ret;
2961 }
2962
2963 static BOOL CDecodeSignedMsg_GetParam(CDecodeMsg *msg, DWORD dwParamType,
2964  DWORD dwIndex, void *pvData, DWORD *pcbData)
2965 {
2966     BOOL ret = FALSE;
2967
2968     switch (dwParamType)
2969     {
2970     case CMSG_TYPE_PARAM:
2971         ret = CRYPT_CopyParam(pvData, pcbData, &msg->type, sizeof(msg->type));
2972         break;
2973     case CMSG_CONTENT_PARAM:
2974         if (msg->u.signed_data.info)
2975         {
2976             if (!strcmp(msg->u.signed_data.info->content.pszObjId,
2977              szOID_RSA_data))
2978             {
2979                 CRYPT_DATA_BLOB *blob;
2980                 DWORD size;
2981
2982                 ret = CryptDecodeObjectEx(X509_ASN_ENCODING, X509_OCTET_STRING,
2983                  msg->u.signed_data.info->content.Content.pbData,
2984                  msg->u.signed_data.info->content.Content.cbData,
2985                  CRYPT_DECODE_ALLOC_FLAG, NULL, &blob, &size);
2986                 if (ret)
2987                 {
2988                     ret = CRYPT_CopyParam(pvData, pcbData, blob->pbData,
2989                      blob->cbData);
2990                     LocalFree(blob);
2991                 }
2992             }
2993             else
2994                 ret = CRYPT_CopyParam(pvData, pcbData,
2995                  msg->u.signed_data.info->content.Content.pbData,
2996                  msg->u.signed_data.info->content.Content.cbData);
2997         }
2998         else
2999             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3000         break;
3001     case CMSG_INNER_CONTENT_TYPE_PARAM:
3002         if (msg->u.signed_data.info)
3003             ret = CRYPT_CopyParam(pvData, pcbData,
3004              msg->u.signed_data.info->content.pszObjId,
3005              strlen(msg->u.signed_data.info->content.pszObjId) + 1);
3006         else
3007             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3008         break;
3009     case CMSG_SIGNER_COUNT_PARAM:
3010         if (msg->u.signed_data.info)
3011             ret = CRYPT_CopyParam(pvData, pcbData,
3012              &msg->u.signed_data.info->cSignerInfo, sizeof(DWORD));
3013         else
3014             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3015         break;
3016     case CMSG_SIGNER_INFO_PARAM:
3017         if (msg->u.signed_data.info)
3018         {
3019             if (dwIndex >= msg->u.signed_data.info->cSignerInfo)
3020                 SetLastError(CRYPT_E_INVALID_INDEX);
3021             else
3022                 ret = CRYPT_CopySignerInfo(pvData, pcbData,
3023                  &msg->u.signed_data.info->rgSignerInfo[dwIndex]);
3024         }
3025         else
3026             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3027         break;
3028     case CMSG_SIGNER_CERT_INFO_PARAM:
3029         if (msg->u.signed_data.info)
3030         {
3031             if (dwIndex >= msg->u.signed_data.info->cSignerInfo)
3032                 SetLastError(CRYPT_E_INVALID_INDEX);
3033             else
3034                 ret = CRYPT_CopySignerCertInfo(pvData, pcbData,
3035                  &msg->u.signed_data.info->rgSignerInfo[dwIndex]);
3036         }
3037         else
3038             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3039         break;
3040     case CMSG_CERT_COUNT_PARAM:
3041         if (msg->u.signed_data.info)
3042             ret = CRYPT_CopyParam(pvData, pcbData,
3043              &msg->u.signed_data.info->cCertEncoded, sizeof(DWORD));
3044         else
3045             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3046         break;
3047     case CMSG_CERT_PARAM:
3048         if (msg->u.signed_data.info)
3049         {
3050             if (dwIndex >= msg->u.signed_data.info->cCertEncoded)
3051                 SetLastError(CRYPT_E_INVALID_INDEX);
3052             else
3053                 ret = CRYPT_CopyParam(pvData, pcbData,
3054                  msg->u.signed_data.info->rgCertEncoded[dwIndex].pbData,
3055                  msg->u.signed_data.info->rgCertEncoded[dwIndex].cbData);
3056         }
3057         else
3058             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3059         break;
3060     case CMSG_CRL_COUNT_PARAM:
3061         if (msg->u.signed_data.info)
3062             ret = CRYPT_CopyParam(pvData, pcbData,
3063              &msg->u.signed_data.info->cCrlEncoded, sizeof(DWORD));
3064         else
3065             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3066         break;
3067     case CMSG_CRL_PARAM:
3068         if (msg->u.signed_data.info)
3069         {
3070             if (dwIndex >= msg->u.signed_data.info->cCrlEncoded)
3071                 SetLastError(CRYPT_E_INVALID_INDEX);
3072             else
3073                 ret = CRYPT_CopyParam(pvData, pcbData,
3074                  msg->u.signed_data.info->rgCrlEncoded[dwIndex].pbData,
3075                  msg->u.signed_data.info->rgCrlEncoded[dwIndex].cbData);
3076         }
3077         else
3078             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3079         break;
3080     case CMSG_COMPUTED_HASH_PARAM:
3081         if (msg->u.signed_data.info)
3082         {
3083             if (dwIndex >= msg->u.signed_data.cSignerHandle)
3084                 SetLastError(CRYPT_E_INVALID_INDEX);
3085             else
3086                 ret = CryptGetHashParam(
3087                  msg->u.signed_data.signerHandles[dwIndex].contentHash,
3088                  HP_HASHVAL, pvData, pcbData, 0);
3089         }
3090         else
3091             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3092         break;
3093     case CMSG_ENCODED_SIGNER:
3094         if (msg->u.signed_data.info)
3095         {
3096             if (dwIndex >= msg->u.signed_data.info->cSignerInfo)
3097                 SetLastError(CRYPT_E_INVALID_INDEX);
3098             else
3099                 ret = CryptEncodeObjectEx(
3100                  X509_ASN_ENCODING | PKCS_7_ASN_ENCODING, CMS_SIGNER_INFO,
3101                  &msg->u.signed_data.info->rgSignerInfo[dwIndex], 0, NULL,
3102                  pvData, pcbData);
3103         }
3104         else
3105             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3106         break;
3107     case CMSG_ATTR_CERT_COUNT_PARAM:
3108         if (msg->u.signed_data.info)
3109         {
3110             DWORD attrCertCount = 0;
3111
3112             ret = CRYPT_CopyParam(pvData, pcbData,
3113              &attrCertCount, sizeof(DWORD));
3114         }
3115         else
3116             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3117         break;
3118     case CMSG_ATTR_CERT_PARAM:
3119         if (msg->u.signed_data.info)
3120             SetLastError(CRYPT_E_INVALID_INDEX);
3121         else
3122             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3123         break;
3124     case CMSG_CMS_SIGNER_INFO_PARAM:
3125         if (msg->u.signed_data.info)
3126         {
3127             if (dwIndex >= msg->u.signed_data.info->cSignerInfo)
3128                 SetLastError(CRYPT_E_INVALID_INDEX);
3129             else
3130                 ret = CRYPT_CopyCMSSignerInfo(pvData, pcbData,
3131                  &msg->u.signed_data.info->rgSignerInfo[dwIndex]);
3132         }
3133         else
3134             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3135         break;
3136     default:
3137         FIXME("unimplemented for %d\n", dwParamType);
3138         SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3139     }
3140     return ret;
3141 }
3142
3143 static BOOL CDecodeMsg_GetParam(HCRYPTMSG hCryptMsg, DWORD dwParamType,
3144  DWORD dwIndex, void *pvData, DWORD *pcbData)
3145 {
3146     CDecodeMsg *msg = hCryptMsg;
3147     BOOL ret = FALSE;
3148
3149     switch (msg->type)
3150     {
3151     case CMSG_HASHED:
3152         ret = CDecodeHashMsg_GetParam(msg, dwParamType, dwIndex, pvData,
3153          pcbData);
3154         break;
3155     case CMSG_ENVELOPED:
3156         ret = CDecodeEnvelopedMsg_GetParam(msg, dwParamType, dwIndex, pvData,
3157          pcbData);
3158         break;
3159     case CMSG_SIGNED:
3160         ret = CDecodeSignedMsg_GetParam(msg, dwParamType, dwIndex, pvData,
3161          pcbData);
3162         break;
3163     default:
3164         switch (dwParamType)
3165         {
3166         case CMSG_TYPE_PARAM:
3167             ret = CRYPT_CopyParam(pvData, pcbData, &msg->type,
3168              sizeof(msg->type));
3169             break;
3170         default:
3171         {
3172             CRYPT_DATA_BLOB blob;
3173
3174             ret = ContextPropertyList_FindProperty(msg->properties, dwParamType,
3175              &blob);
3176             if (ret)
3177                 ret = CRYPT_CopyParam(pvData, pcbData, blob.pbData,
3178                  blob.cbData);
3179             else
3180                 SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3181         }
3182         }
3183     }
3184     return ret;
3185 }
3186
3187 static BOOL CDecodeHashMsg_VerifyHash(CDecodeMsg *msg)
3188 {
3189     BOOL ret;
3190     CRYPT_DATA_BLOB hashBlob;
3191
3192     ret = ContextPropertyList_FindProperty(msg->properties,
3193      CMSG_HASH_DATA_PARAM, &hashBlob);
3194     if (ret)
3195     {
3196         DWORD computedHashSize = 0;
3197
3198         ret = CDecodeHashMsg_GetParam(msg, CMSG_COMPUTED_HASH_PARAM, 0, NULL,
3199          &computedHashSize);
3200         if (hashBlob.cbData == computedHashSize)
3201         {
3202             LPBYTE computedHash = CryptMemAlloc(computedHashSize);
3203
3204             if (computedHash)
3205             {
3206                 ret = CDecodeHashMsg_GetParam(msg, CMSG_COMPUTED_HASH_PARAM, 0,
3207                  computedHash, &computedHashSize);
3208                 if (ret)
3209                 {
3210                     if (memcmp(hashBlob.pbData, computedHash, hashBlob.cbData))
3211                     {
3212                         SetLastError(CRYPT_E_HASH_VALUE);
3213                         ret = FALSE;
3214                     }
3215                 }
3216                 CryptMemFree(computedHash);
3217             }
3218             else
3219             {
3220                 SetLastError(ERROR_OUTOFMEMORY);
3221                 ret = FALSE;
3222             }
3223         }
3224         else
3225         {
3226             SetLastError(CRYPT_E_HASH_VALUE);
3227             ret = FALSE;
3228         }
3229     }
3230     return ret;
3231 }
3232
3233 static BOOL CDecodeSignedMsg_VerifySignatureWithKey(CDecodeMsg *msg,
3234  HCRYPTPROV prov, DWORD signerIndex, PCERT_PUBLIC_KEY_INFO keyInfo)
3235 {
3236     HCRYPTKEY key;
3237     BOOL ret;
3238
3239     if (!prov)
3240         prov = msg->crypt_prov;
3241     ret = CryptImportPublicKeyInfo(prov, X509_ASN_ENCODING, keyInfo, &key);
3242     if (ret)
3243     {
3244         HCRYPTHASH hash;
3245         CRYPT_HASH_BLOB reversedHash;
3246
3247         if (msg->u.signed_data.info->rgSignerInfo[signerIndex].AuthAttrs.cAttr)
3248             hash = msg->u.signed_data.signerHandles[signerIndex].authAttrHash;
3249         else
3250             hash = msg->u.signed_data.signerHandles[signerIndex].contentHash;
3251         ret = CRYPT_ConstructBlob(&reversedHash,
3252          &msg->u.signed_data.info->rgSignerInfo[signerIndex].EncryptedHash);
3253         if (ret)
3254         {
3255             CRYPT_ReverseBytes(&reversedHash);
3256             ret = CryptVerifySignatureW(hash, reversedHash.pbData,
3257              reversedHash.cbData, key, NULL, 0);
3258             CryptMemFree(reversedHash.pbData);
3259         }
3260         CryptDestroyKey(key);
3261     }
3262     return ret;
3263 }
3264
3265 static BOOL CDecodeSignedMsg_VerifySignature(CDecodeMsg *msg, PCERT_INFO info)
3266 {
3267     BOOL ret = FALSE;
3268     DWORD i;
3269
3270     if (!msg->u.signed_data.signerHandles)
3271     {
3272         SetLastError(NTE_BAD_SIGNATURE);
3273         return FALSE;
3274     }
3275     for (i = 0; !ret && i < msg->u.signed_data.info->cSignerInfo; i++)
3276     {
3277         PCMSG_CMS_SIGNER_INFO signerInfo =
3278          &msg->u.signed_data.info->rgSignerInfo[i];
3279
3280         if (signerInfo->SignerId.dwIdChoice == CERT_ID_ISSUER_SERIAL_NUMBER)
3281         {
3282             ret = CertCompareCertificateName(X509_ASN_ENCODING,
3283              &signerInfo->SignerId.u.IssuerSerialNumber.Issuer,
3284              &info->Issuer);
3285             if (ret)
3286             {
3287                 ret = CertCompareIntegerBlob(
3288                  &signerInfo->SignerId.u.IssuerSerialNumber.SerialNumber,
3289                  &info->SerialNumber);
3290                 if (ret)
3291                     break;
3292             }
3293         }
3294         else
3295         {
3296             FIXME("signer %d: unimplemented for key id\n", i);
3297         }
3298     }
3299     if (ret)
3300         ret = CDecodeSignedMsg_VerifySignatureWithKey(msg, 0, i,
3301          &info->SubjectPublicKeyInfo);
3302     else
3303         SetLastError(CRYPT_E_SIGNER_NOT_FOUND);
3304
3305     return ret;
3306 }
3307
3308 static BOOL CDecodeSignedMsg_VerifySignatureEx(CDecodeMsg *msg,
3309  PCMSG_CTRL_VERIFY_SIGNATURE_EX_PARA para)
3310 {
3311     BOOL ret = FALSE;
3312
3313     if (para->cbSize != sizeof(CMSG_CTRL_VERIFY_SIGNATURE_EX_PARA))
3314         SetLastError(ERROR_INVALID_PARAMETER);
3315     else if (para->dwSignerIndex >= msg->u.signed_data.info->cSignerInfo)
3316         SetLastError(CRYPT_E_SIGNER_NOT_FOUND);
3317     else if (!msg->u.signed_data.signerHandles)
3318         SetLastError(NTE_BAD_SIGNATURE);
3319     else
3320     {
3321         switch (para->dwSignerType)
3322         {
3323         case CMSG_VERIFY_SIGNER_PUBKEY:
3324             ret = CDecodeSignedMsg_VerifySignatureWithKey(msg,
3325              para->hCryptProv, para->dwSignerIndex, para->pvSigner);
3326             break;
3327         case CMSG_VERIFY_SIGNER_CERT:
3328         {
3329             PCCERT_CONTEXT cert = para->pvSigner;
3330
3331             ret = CDecodeSignedMsg_VerifySignatureWithKey(msg, para->hCryptProv,
3332              para->dwSignerIndex, &cert->pCertInfo->SubjectPublicKeyInfo);
3333             break;
3334         }
3335         default:
3336             FIXME("unimplemented for signer type %d\n", para->dwSignerType);
3337             SetLastError(CRYPT_E_SIGNER_NOT_FOUND);
3338         }
3339     }
3340     return ret;
3341 }
3342
3343 static BOOL WINAPI CRYPT_ImportKeyTrans(
3344  PCRYPT_ALGORITHM_IDENTIFIER pContentEncryptionAlgorithm,
3345  PCMSG_CTRL_KEY_TRANS_DECRYPT_PARA pKeyTransDecryptPara, DWORD dwFlags,
3346  void *pvReserved, HCRYPTKEY *phContentEncryptKey)
3347 {
3348     BOOL ret;
3349     HCRYPTKEY key;
3350
3351     ret = CryptGetUserKey(pKeyTransDecryptPara->hCryptProv,
3352      pKeyTransDecryptPara->dwKeySpec ? pKeyTransDecryptPara->dwKeySpec :
3353      AT_KEYEXCHANGE, &key);
3354     if (ret)
3355     {
3356         CMSG_KEY_TRANS_RECIPIENT_INFO *info =
3357          &pKeyTransDecryptPara->pKeyTrans[pKeyTransDecryptPara->dwRecipientIndex];
3358         CRYPT_DATA_BLOB *encryptedKey = &info->EncryptedKey;
3359         DWORD size = encryptedKey->cbData + sizeof(BLOBHEADER) + sizeof(ALG_ID);
3360         BYTE *keyBlob = CryptMemAlloc(size);
3361
3362         if (keyBlob)
3363         {
3364             DWORD i, k = size - 1;
3365             BLOBHEADER *blobHeader = (BLOBHEADER *)keyBlob;
3366             ALG_ID *algID = (ALG_ID *)(keyBlob + sizeof(BLOBHEADER));
3367
3368             blobHeader->bType = SIMPLEBLOB;
3369             blobHeader->bVersion = CUR_BLOB_VERSION;
3370             blobHeader->reserved = 0;
3371             blobHeader->aiKeyAlg = CertOIDToAlgId(
3372              pContentEncryptionAlgorithm->pszObjId);
3373             *algID = CertOIDToAlgId(info->KeyEncryptionAlgorithm.pszObjId);
3374             for (i = 0; i < encryptedKey->cbData; ++i, --k)
3375                 keyBlob[k] = encryptedKey->pbData[i];
3376
3377             ret = CryptImportKey(pKeyTransDecryptPara->hCryptProv, keyBlob,
3378              size, key, 0, phContentEncryptKey);
3379             CryptMemFree(keyBlob);
3380         }
3381         else
3382             ret = FALSE;
3383         CryptDestroyKey(key);
3384     }
3385     return ret;
3386 }
3387
3388 static BOOL CRYPT_ImportEncryptedKey(PCRYPT_ALGORITHM_IDENTIFIER contEncrAlg,
3389  PCMSG_CTRL_DECRYPT_PARA para, PCMSG_KEY_TRANS_RECIPIENT_INFO info,
3390  HCRYPTKEY *key)
3391 {
3392     static HCRYPTOIDFUNCSET set = NULL;
3393     PFN_CMSG_IMPORT_KEY_TRANS importKeyFunc = NULL;
3394     HCRYPTOIDFUNCADDR hFunc = NULL;
3395     CMSG_CTRL_KEY_TRANS_DECRYPT_PARA decryptPara;
3396     BOOL ret;
3397
3398     memset(&decryptPara, 0, sizeof(decryptPara));
3399     decryptPara.cbSize = sizeof(decryptPara);
3400     decryptPara.hCryptProv = para->hCryptProv;
3401     decryptPara.dwKeySpec = para->dwKeySpec;
3402     decryptPara.pKeyTrans = info;
3403     decryptPara.dwRecipientIndex = para->dwRecipientIndex;
3404
3405     if (!set)
3406         set = CryptInitOIDFunctionSet(CMSG_OID_IMPORT_KEY_TRANS_FUNC, 0);
3407     CryptGetOIDFunctionAddress(set, X509_ASN_ENCODING, contEncrAlg->pszObjId, 0,
3408      (void **)&importKeyFunc, &hFunc);
3409     if (!importKeyFunc)
3410         importKeyFunc = CRYPT_ImportKeyTrans;
3411     ret = importKeyFunc(contEncrAlg, &decryptPara, 0, NULL, key);
3412     if (hFunc)
3413         CryptFreeOIDFunctionAddress(hFunc, 0);
3414     return ret;
3415 }
3416
3417 static BOOL CDecodeEnvelopedMsg_CrtlDecrypt(CDecodeMsg *msg,
3418  PCMSG_CTRL_DECRYPT_PARA para)
3419 {
3420     BOOL ret = FALSE;
3421     CEnvelopedDecodeMsg *enveloped_data = &msg->u.enveloped_data;
3422     CRYPT_ENVELOPED_DATA *data = enveloped_data->data;
3423
3424     if (para->cbSize != sizeof(CMSG_CTRL_DECRYPT_PARA))
3425         SetLastError(E_INVALIDARG);
3426     else if (!data)
3427         SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3428     else if (para->dwRecipientIndex >= data->cRecipientInfo)
3429         SetLastError(CRYPT_E_INVALID_INDEX);
3430     else if (enveloped_data->decrypted)
3431         SetLastError(CRYPT_E_ALREADY_DECRYPTED);
3432     else if (!para->hCryptProv)
3433         SetLastError(ERROR_INVALID_PARAMETER);
3434     else if (enveloped_data->content.cbData)
3435     {
3436         HCRYPTKEY key;
3437
3438         ret = CRYPT_ImportEncryptedKey(
3439          &data->encryptedContentInfo.contentEncryptionAlgorithm, para,
3440          data->rgRecipientInfo, &key);
3441         if (ret)
3442         {
3443             ret = CryptDecrypt(key, 0, TRUE, 0, enveloped_data->content.pbData,
3444              &enveloped_data->content.cbData);
3445             CryptDestroyKey(key);
3446         }
3447     }
3448     else
3449         ret = TRUE;
3450     if (ret)
3451         enveloped_data->decrypted = TRUE;
3452     return ret;
3453 }
3454
3455 static BOOL CDecodeMsg_Control(HCRYPTMSG hCryptMsg, DWORD dwFlags,
3456  DWORD dwCtrlType, const void *pvCtrlPara)
3457 {
3458     CDecodeMsg *msg = hCryptMsg;
3459     BOOL ret = FALSE;
3460
3461     switch (dwCtrlType)
3462     {
3463     case CMSG_CTRL_VERIFY_SIGNATURE:
3464         switch (msg->type)
3465         {
3466         case CMSG_SIGNED:
3467             ret = CDecodeSignedMsg_VerifySignature(msg, (PCERT_INFO)pvCtrlPara);
3468             break;
3469         default:
3470             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3471         }
3472         break;
3473     case CMSG_CTRL_DECRYPT:
3474         switch (msg->type)
3475         {
3476         case CMSG_ENVELOPED:
3477             ret = CDecodeEnvelopedMsg_CrtlDecrypt(msg,
3478              (PCMSG_CTRL_DECRYPT_PARA)pvCtrlPara);
3479             if (ret && (dwFlags & CMSG_CRYPT_RELEASE_CONTEXT_FLAG))
3480                 msg->u.enveloped_data.crypt_prov =
3481                  ((PCMSG_CTRL_DECRYPT_PARA)pvCtrlPara)->hCryptProv;
3482             break;
3483         default:
3484             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3485         }
3486         break;
3487     case CMSG_CTRL_VERIFY_HASH:
3488         switch (msg->type)
3489         {
3490         case CMSG_HASHED:
3491             ret = CDecodeHashMsg_VerifyHash(msg);
3492             break;
3493         default:
3494             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3495         }
3496         break;
3497     case CMSG_CTRL_VERIFY_SIGNATURE_EX:
3498         switch (msg->type)
3499         {
3500         case CMSG_SIGNED:
3501             ret = CDecodeSignedMsg_VerifySignatureEx(msg,
3502              (PCMSG_CTRL_VERIFY_SIGNATURE_EX_PARA)pvCtrlPara);
3503             break;
3504         default:
3505             SetLastError(CRYPT_E_INVALID_MSG_TYPE);
3506         }
3507         break;
3508     default:
3509         SetLastError(CRYPT_E_CONTROL_TYPE);
3510     }
3511     return ret;
3512 }
3513
3514 HCRYPTMSG WINAPI CryptMsgOpenToDecode(DWORD dwMsgEncodingType, DWORD dwFlags,
3515  DWORD dwMsgType, HCRYPTPROV_LEGACY hCryptProv, PCERT_INFO pRecipientInfo,
3516  PCMSG_STREAM_INFO pStreamInfo)
3517 {
3518     CDecodeMsg *msg;
3519
3520     TRACE("(%08x, %08x, %08x, %08lx, %p, %p)\n", dwMsgEncodingType,
3521      dwFlags, dwMsgType, hCryptProv, pRecipientInfo, pStreamInfo);
3522
3523     if (GET_CMSG_ENCODING_TYPE(dwMsgEncodingType) != PKCS_7_ASN_ENCODING)
3524     {
3525         SetLastError(E_INVALIDARG);
3526         return NULL;
3527     }
3528     msg = CryptMemAlloc(sizeof(CDecodeMsg));
3529     if (msg)
3530     {
3531         CryptMsgBase_Init((CryptMsgBase *)msg, dwFlags, pStreamInfo,
3532          CDecodeMsg_Close, CDecodeMsg_GetParam, CDecodeMsg_Update,
3533          CDecodeMsg_Control);
3534         msg->type = dwMsgType;
3535         if (hCryptProv)
3536             msg->crypt_prov = hCryptProv;
3537         else
3538         {
3539             msg->crypt_prov = CRYPT_GetDefaultProvider();
3540             msg->base.open_flags &= ~CMSG_CRYPT_RELEASE_CONTEXT_FLAG;
3541         }
3542         memset(&msg->u, 0, sizeof(msg->u));
3543         msg->msg_data.cbData = 0;
3544         msg->msg_data.pbData = NULL;
3545         msg->detached_data.cbData = 0;
3546         msg->detached_data.pbData = NULL;
3547         msg->properties = ContextPropertyList_Create();
3548     }
3549     return msg;
3550 }
3551
3552 HCRYPTMSG WINAPI CryptMsgDuplicate(HCRYPTMSG hCryptMsg)
3553 {
3554     TRACE("(%p)\n", hCryptMsg);
3555
3556     if (hCryptMsg)
3557     {
3558         CryptMsgBase *msg = hCryptMsg;
3559
3560         InterlockedIncrement(&msg->ref);
3561     }
3562     return hCryptMsg;
3563 }
3564
3565 BOOL WINAPI CryptMsgClose(HCRYPTMSG hCryptMsg)
3566 {
3567     TRACE("(%p)\n", hCryptMsg);
3568
3569     if (hCryptMsg)
3570     {
3571         CryptMsgBase *msg = hCryptMsg;
3572
3573         if (InterlockedDecrement(&msg->ref) == 0)
3574         {
3575             TRACE("freeing %p\n", msg);
3576             if (msg->close)
3577                 msg->close(msg);
3578             CryptMemFree(msg);
3579         }
3580     }
3581     return TRUE;
3582 }
3583
3584 BOOL WINAPI CryptMsgUpdate(HCRYPTMSG hCryptMsg, const BYTE *pbData,
3585  DWORD cbData, BOOL fFinal)
3586 {
3587     CryptMsgBase *msg = hCryptMsg;
3588
3589     TRACE("(%p, %p, %d, %d)\n", hCryptMsg, pbData, cbData, fFinal);
3590
3591     return msg->update(hCryptMsg, pbData, cbData, fFinal);
3592 }
3593
3594 BOOL WINAPI CryptMsgGetParam(HCRYPTMSG hCryptMsg, DWORD dwParamType,
3595  DWORD dwIndex, void *pvData, DWORD *pcbData)
3596 {
3597     CryptMsgBase *msg = hCryptMsg;
3598
3599     TRACE("(%p, %d, %d, %p, %p)\n", hCryptMsg, dwParamType, dwIndex,
3600      pvData, pcbData);
3601     return msg->get_param(hCryptMsg, dwParamType, dwIndex, pvData, pcbData);
3602 }
3603
3604 BOOL WINAPI CryptMsgControl(HCRYPTMSG hCryptMsg, DWORD dwFlags,
3605  DWORD dwCtrlType, const void *pvCtrlPara)
3606 {
3607     CryptMsgBase *msg = hCryptMsg;
3608
3609     TRACE("(%p, %08x, %d, %p)\n", hCryptMsg, dwFlags, dwCtrlType,
3610      pvCtrlPara);
3611     return msg->control(hCryptMsg, dwFlags, dwCtrlType, pvCtrlPara);
3612 }
3613
3614 static CERT_INFO *CRYPT_GetSignerCertInfoFromMsg(HCRYPTMSG msg,
3615  DWORD dwSignerIndex)
3616 {
3617     CERT_INFO *certInfo = NULL;
3618     DWORD size;
3619
3620     if (CryptMsgGetParam(msg, CMSG_SIGNER_CERT_INFO_PARAM, dwSignerIndex, NULL,
3621      &size))
3622     {
3623         certInfo = CryptMemAlloc(size);
3624         if (certInfo)
3625         {
3626             if (!CryptMsgGetParam(msg, CMSG_SIGNER_CERT_INFO_PARAM,
3627              dwSignerIndex, certInfo, &size))
3628             {
3629                 CryptMemFree(certInfo);
3630                 certInfo = NULL;
3631             }
3632         }
3633     }
3634     return certInfo;
3635 }
3636
3637 BOOL WINAPI CryptMsgGetAndVerifySigner(HCRYPTMSG hCryptMsg, DWORD cSignerStore,
3638  HCERTSTORE *rghSignerStore, DWORD dwFlags, PCCERT_CONTEXT *ppSigner,
3639  DWORD *pdwSignerIndex)
3640 {
3641     HCERTSTORE store;
3642     DWORD i, signerIndex = 0;
3643     PCCERT_CONTEXT signerCert = NULL;
3644     BOOL ret = FALSE;
3645
3646     TRACE("(%p, %d, %p, %08x, %p, %p)\n", hCryptMsg, cSignerStore,
3647      rghSignerStore, dwFlags, ppSigner, pdwSignerIndex);
3648
3649     /* Clear output parameters */
3650     if (ppSigner)
3651         *ppSigner = NULL;
3652     if (pdwSignerIndex && !(dwFlags & CMSG_USE_SIGNER_INDEX_FLAG))
3653         *pdwSignerIndex = 0;
3654
3655     /* Create store to search for signer certificates */
3656     store = CertOpenStore(CERT_STORE_PROV_COLLECTION, 0, 0,
3657      CERT_STORE_CREATE_NEW_FLAG, NULL);
3658     if (!(dwFlags & CMSG_TRUSTED_SIGNER_FLAG))
3659     {
3660         HCERTSTORE msgStore = CertOpenStore(CERT_STORE_PROV_MSG, 0, 0, 0,
3661          hCryptMsg);
3662
3663         CertAddStoreToCollection(store, msgStore, 0, 0);
3664         CertCloseStore(msgStore, 0);
3665     }
3666     for (i = 0; i < cSignerStore; i++)
3667         CertAddStoreToCollection(store, rghSignerStore[i], 0, 0);
3668
3669     /* Find signer cert */
3670     if (dwFlags & CMSG_USE_SIGNER_INDEX_FLAG)
3671     {
3672         CERT_INFO *signer = CRYPT_GetSignerCertInfoFromMsg(hCryptMsg,
3673          *pdwSignerIndex);
3674
3675         if (signer)
3676         {
3677             signerIndex = *pdwSignerIndex;
3678             signerCert = CertFindCertificateInStore(store, X509_ASN_ENCODING,
3679              0, CERT_FIND_SUBJECT_CERT, signer, NULL);
3680             CryptMemFree(signer);
3681         }
3682     }
3683     else
3684     {
3685         DWORD count, size = sizeof(count);
3686
3687         if (CryptMsgGetParam(hCryptMsg, CMSG_SIGNER_COUNT_PARAM, 0, &count,
3688          &size))
3689         {
3690             for (i = 0; !signerCert && i < count; i++)
3691             {
3692                 CERT_INFO *signer = CRYPT_GetSignerCertInfoFromMsg(hCryptMsg,
3693                  i);
3694
3695                 if (signer)
3696                 {
3697                     signerCert = CertFindCertificateInStore(store,
3698                      X509_ASN_ENCODING, 0, CERT_FIND_SUBJECT_CERT, signer,
3699                      NULL);
3700                     if (signerCert)
3701                         signerIndex = i;
3702                     CryptMemFree(signer);
3703                 }
3704             }
3705         }
3706         if (!signerCert)
3707             SetLastError(CRYPT_E_NO_TRUSTED_SIGNER);
3708     }
3709     if (signerCert)
3710     {
3711         if (!(dwFlags & CMSG_SIGNER_ONLY_FLAG))
3712             ret = CryptMsgControl(hCryptMsg, 0, CMSG_CTRL_VERIFY_SIGNATURE,
3713              signerCert->pCertInfo);
3714         else
3715             ret = TRUE;
3716         if (ret)
3717         {
3718             if (ppSigner)
3719                 *ppSigner = CertDuplicateCertificateContext(signerCert);
3720             if (pdwSignerIndex)
3721                 *pdwSignerIndex = signerIndex;
3722         }
3723         CertFreeCertificateContext(signerCert);
3724     }
3725
3726     CertCloseStore(store, 0);
3727     return ret;
3728 }
3729
3730 BOOL WINAPI CryptMsgVerifyCountersignatureEncodedEx(HCRYPTPROV_LEGACY hCryptProv,
3731  DWORD dwEncodingType, PBYTE pbSignerInfo, DWORD cbSignerInfo,
3732  PBYTE pbSignerInfoCountersignature, DWORD cbSignerInfoCountersignature,
3733  DWORD dwSignerType, void *pvSigner, DWORD dwFlags, void *pvReserved)
3734 {
3735     FIXME("(%08lx, %08x, %p, %d, %p, %d, %d, %p, %08x, %p): stub\n", hCryptProv,
3736      dwEncodingType, pbSignerInfo, cbSignerInfo, pbSignerInfoCountersignature,
3737      cbSignerInfoCountersignature, dwSignerType, pvSigner, dwFlags, pvReserved);
3738     return FALSE;
3739 }
3740
3741 BOOL WINAPI CryptMsgEncodeAndSignCTL(DWORD dwMsgEncodingType,
3742  PCTL_INFO pCtlInfo, PCMSG_SIGNED_ENCODE_INFO pSignInfo, DWORD dwFlags,
3743  BYTE *pbEncoded, DWORD *pcbEncoded)
3744 {
3745     BOOL ret;
3746     BYTE *pbCtlContent;
3747     DWORD cbCtlContent;
3748
3749     TRACE("(%08x, %p, %p, %08x, %p, %p)\n", dwMsgEncodingType, pCtlInfo,
3750      pSignInfo, dwFlags, pbEncoded, pcbEncoded);
3751
3752     if (dwFlags)
3753     {
3754         FIXME("unimplemented for flags %08x\n", dwFlags);
3755         return FALSE;
3756     }
3757     if ((ret = CryptEncodeObjectEx(dwMsgEncodingType, PKCS_CTL, pCtlInfo,
3758      CRYPT_ENCODE_ALLOC_FLAG, NULL, &pbCtlContent, &cbCtlContent)))
3759     {
3760         ret = CryptMsgSignCTL(dwMsgEncodingType, pbCtlContent, cbCtlContent,
3761          pSignInfo, dwFlags, pbEncoded, pcbEncoded);
3762         LocalFree(pbCtlContent);
3763     }
3764     return ret;
3765 }
3766
3767 BOOL WINAPI CryptMsgSignCTL(DWORD dwMsgEncodingType, BYTE *pbCtlContent,
3768  DWORD cbCtlContent, PCMSG_SIGNED_ENCODE_INFO pSignInfo, DWORD dwFlags,
3769  BYTE *pbEncoded, DWORD *pcbEncoded)
3770 {
3771     static char oid_ctl[] = szOID_CTL;
3772     BOOL ret;
3773     HCRYPTMSG msg;
3774
3775     TRACE("(%08x, %p, %d, %p, %08x, %p, %p)\n", dwMsgEncodingType,
3776      pbCtlContent, cbCtlContent, pSignInfo, dwFlags, pbEncoded, pcbEncoded);
3777
3778     if (dwFlags)
3779     {
3780         FIXME("unimplemented for flags %08x\n", dwFlags);
3781         return FALSE;
3782     }
3783     msg = CryptMsgOpenToEncode(dwMsgEncodingType, 0, CMSG_SIGNED, pSignInfo,
3784      oid_ctl, NULL);
3785     if (msg)
3786     {
3787         ret = CryptMsgUpdate(msg, pbCtlContent, cbCtlContent, TRUE);
3788         if (ret)
3789             ret = CryptMsgGetParam(msg, CMSG_CONTENT_PARAM, 0, pbEncoded,
3790              pcbEncoded);
3791         CryptMsgClose(msg);
3792     }
3793     else
3794         ret = FALSE;
3795     return ret;
3796 }