203 lines
6.2 KiB
C#
203 lines
6.2 KiB
C#
|
//
|
||
|
// Author:
|
||
|
// Jb Evain (jbevain@gmail.com)
|
||
|
//
|
||
|
// Copyright (c) 2008 - 2015 Jb Evain
|
||
|
// Copyright (c) 2008 - 2011 Novell, Inc.
|
||
|
//
|
||
|
// Licensed under the MIT/X11 license.
|
||
|
//
|
||
|
|
||
|
using MonoFN.Cecil.PE;
|
||
|
using MonoFN.Security.Cryptography;
|
||
|
using System;
|
||
|
using System.IO;
|
||
|
using System.Reflection;
|
||
|
using System.Runtime.Serialization;
|
||
|
using System.Security.Cryptography;
|
||
|
|
||
|
namespace MonoFN.Cecil {
|
||
|
|
||
|
// Most of this code has been adapted
|
||
|
// from Jeroen Frijters' fantastic work
|
||
|
// in IKVM.Reflection.Emit. Thanks!
|
||
|
|
||
|
static class CryptoService {
|
||
|
|
||
|
public static byte [] GetPublicKey (WriterParameters parameters)
|
||
|
{
|
||
|
using (var rsa = parameters.CreateRSA ()) {
|
||
|
var cspBlob = CryptoConvert.ToCapiPublicKeyBlob (rsa);
|
||
|
var publicKey = new byte [12 + cspBlob.Length];
|
||
|
Buffer.BlockCopy (cspBlob, 0, publicKey, 12, cspBlob.Length);
|
||
|
// The first 12 bytes are documented at:
|
||
|
// http://msdn.microsoft.com/library/en-us/cprefadd/html/grfungethashfromfile.asp
|
||
|
// ALG_ID - Signature
|
||
|
publicKey [1] = 36;
|
||
|
// ALG_ID - Hash
|
||
|
publicKey [4] = 4;
|
||
|
publicKey [5] = 128;
|
||
|
// Length of Public Key (in bytes)
|
||
|
publicKey [8] = (byte)(cspBlob.Length >> 0);
|
||
|
publicKey [9] = (byte)(cspBlob.Length >> 8);
|
||
|
publicKey [10] = (byte)(cspBlob.Length >> 16);
|
||
|
publicKey [11] = (byte)(cspBlob.Length >> 24);
|
||
|
return publicKey;
|
||
|
}
|
||
|
}
|
||
|
|
||
|
public static void StrongName (Stream stream, ImageWriter writer, WriterParameters parameters)
|
||
|
{
|
||
|
int strong_name_pointer;
|
||
|
|
||
|
var strong_name = CreateStrongName (parameters, HashStream (stream, writer, out strong_name_pointer));
|
||
|
PatchStrongName (stream, strong_name_pointer, strong_name);
|
||
|
}
|
||
|
|
||
|
static void PatchStrongName (Stream stream, int strong_name_pointer, byte [] strong_name)
|
||
|
{
|
||
|
stream.Seek (strong_name_pointer, SeekOrigin.Begin);
|
||
|
stream.Write (strong_name, 0, strong_name.Length);
|
||
|
}
|
||
|
|
||
|
static byte [] CreateStrongName (WriterParameters parameters, byte [] hash)
|
||
|
{
|
||
|
const string hash_algo = "SHA1";
|
||
|
|
||
|
using (var rsa = parameters.CreateRSA ()) {
|
||
|
var formatter = new RSAPKCS1SignatureFormatter (rsa);
|
||
|
formatter.SetHashAlgorithm (hash_algo);
|
||
|
|
||
|
byte [] signature = formatter.CreateSignature (hash);
|
||
|
Array.Reverse (signature);
|
||
|
|
||
|
return signature;
|
||
|
}
|
||
|
}
|
||
|
|
||
|
static byte [] HashStream (Stream stream, ImageWriter writer, out int strong_name_pointer)
|
||
|
{
|
||
|
const int buffer_size = 8192;
|
||
|
|
||
|
var text = writer.text;
|
||
|
var header_size = (int)writer.GetHeaderSize ();
|
||
|
var text_section_pointer = (int)text.PointerToRawData;
|
||
|
var strong_name_directory = writer.GetStrongNameSignatureDirectory ();
|
||
|
|
||
|
if (strong_name_directory.Size == 0)
|
||
|
throw new InvalidOperationException ();
|
||
|
|
||
|
strong_name_pointer = (int)(text_section_pointer
|
||
|
+ (strong_name_directory.VirtualAddress - text.VirtualAddress));
|
||
|
var strong_name_length = (int)strong_name_directory.Size;
|
||
|
|
||
|
var sha1 = new SHA1Managed ();
|
||
|
var buffer = new byte [buffer_size];
|
||
|
using (var crypto_stream = new CryptoStream (Stream.Null, sha1, CryptoStreamMode.Write)) {
|
||
|
stream.Seek (0, SeekOrigin.Begin);
|
||
|
CopyStreamChunk (stream, crypto_stream, buffer, header_size);
|
||
|
|
||
|
stream.Seek (text_section_pointer, SeekOrigin.Begin);
|
||
|
CopyStreamChunk (stream, crypto_stream, buffer, (int)strong_name_pointer - text_section_pointer);
|
||
|
|
||
|
stream.Seek (strong_name_length, SeekOrigin.Current);
|
||
|
CopyStreamChunk (stream, crypto_stream, buffer, (int)(stream.Length - (strong_name_pointer + strong_name_length)));
|
||
|
}
|
||
|
|
||
|
return sha1.Hash;
|
||
|
}
|
||
|
|
||
|
static void CopyStreamChunk (Stream stream, Stream dest_stream, byte [] buffer, int length)
|
||
|
{
|
||
|
while (length > 0) {
|
||
|
int read = stream.Read (buffer, 0, System.Math.Min (buffer.Length, length));
|
||
|
dest_stream.Write (buffer, 0, read);
|
||
|
length -= read;
|
||
|
}
|
||
|
}
|
||
|
|
||
|
public static byte [] ComputeHash (string file)
|
||
|
{
|
||
|
if (!File.Exists (file))
|
||
|
return Empty<byte>.Array;
|
||
|
|
||
|
using (var stream = new FileStream (file, FileMode.Open, FileAccess.Read, FileShare.Read))
|
||
|
return ComputeHash (stream);
|
||
|
}
|
||
|
|
||
|
public static byte [] ComputeHash (Stream stream)
|
||
|
{
|
||
|
const int buffer_size = 8192;
|
||
|
|
||
|
var sha1 = new SHA1Managed ();
|
||
|
var buffer = new byte [buffer_size];
|
||
|
|
||
|
using (var crypto_stream = new CryptoStream (Stream.Null, sha1, CryptoStreamMode.Write))
|
||
|
CopyStreamChunk (stream, crypto_stream, buffer, (int)stream.Length);
|
||
|
|
||
|
return sha1.Hash;
|
||
|
}
|
||
|
|
||
|
public static byte [] ComputeHash (params ByteBuffer [] buffers)
|
||
|
{
|
||
|
var sha1 = new SHA1Managed ();
|
||
|
|
||
|
using (var crypto_stream = new CryptoStream (Stream.Null, sha1, CryptoStreamMode.Write)) {
|
||
|
for (int i = 0; i < buffers.Length; i++) {
|
||
|
crypto_stream.Write (buffers [i].buffer, 0, buffers [i].length);
|
||
|
}
|
||
|
}
|
||
|
|
||
|
return sha1.Hash;
|
||
|
}
|
||
|
|
||
|
public static Guid ComputeGuid (byte [] hash)
|
||
|
{
|
||
|
// From corefx/src/System.Reflection.Metadata/src/System/Reflection/Metadata/BlobContentId.cs
|
||
|
var guid = new byte [16];
|
||
|
Buffer.BlockCopy (hash, 0, guid, 0, 16);
|
||
|
|
||
|
// modify the guid data so it decodes to the form of a "random" guid ala rfc4122
|
||
|
guid [7] = (byte)((guid [7] & 0x0f) | (4 << 4));
|
||
|
guid [8] = (byte)((guid [8] & 0x3f) | (2 << 6));
|
||
|
|
||
|
return new Guid (guid);
|
||
|
}
|
||
|
}
|
||
|
|
||
|
static partial class Mixin {
|
||
|
|
||
|
public static RSA CreateRSA (this WriterParameters writer_parameters)
|
||
|
{
|
||
|
byte [] key;
|
||
|
string key_container;
|
||
|
|
||
|
if (writer_parameters.StrongNameKeyBlob != null)
|
||
|
return CryptoConvert.FromCapiKeyBlob (writer_parameters.StrongNameKeyBlob);
|
||
|
|
||
|
if (writer_parameters.StrongNameKeyContainer != null)
|
||
|
key_container = writer_parameters.StrongNameKeyContainer;
|
||
|
else if (!TryGetKeyContainer (writer_parameters.StrongNameKeyPair, out key, out key_container))
|
||
|
return CryptoConvert.FromCapiKeyBlob (key);
|
||
|
|
||
|
var parameters = new CspParameters {
|
||
|
Flags = CspProviderFlags.UseMachineKeyStore,
|
||
|
KeyContainerName = key_container,
|
||
|
KeyNumber = 2,
|
||
|
};
|
||
|
|
||
|
return new RSACryptoServiceProvider (parameters);
|
||
|
}
|
||
|
|
||
|
static bool TryGetKeyContainer (ISerializable key_pair, out byte [] key, out string key_container)
|
||
|
{
|
||
|
var info = new SerializationInfo (typeof (StrongNameKeyPair), new FormatterConverter ());
|
||
|
key_pair.GetObjectData (info, new StreamingContext ());
|
||
|
|
||
|
key = (byte [])info.GetValue ("_keyPairArray", typeof (byte []));
|
||
|
key_container = info.GetString ("_keyPairContainer");
|
||
|
return key_container != null;
|
||
|
}
|
||
|
}
|
||
|
}
|