A pure Python ASN.1 library. Supports dict and sets.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 

485 lines
11 KiB

  1. #!/usr/bin/env python
  2. # A Pure Python ASN.1 encoder/decoder w/ a calling interface in the spirit
  3. # of pickle. It will automaticly do the correct thing if possible.
  4. #
  5. # This uses a profile of ASN.1.
  6. #
  7. # All lengths must be specified. That is that End-of-contents octets
  8. # MUST not be used. The shorted form of length encoding MUST be used.
  9. # A longer length encoding MUST be rejected.
  10. import math
  11. import os
  12. import pdb
  13. import sys
  14. import unittest
  15. __all__ = [ 'dumps', 'loads', 'ASN1Coder' ]
  16. def _numtostr(n):
  17. hs = '%x' % n
  18. if len(hs) & 1 == 1:
  19. hs = '0' + hs
  20. bs = hs.decode('hex')
  21. return bs
  22. def _encodelen(l):
  23. '''Takes l as a length value, and returns a byte string that
  24. represents l per ASN.1 rules.'''
  25. if l < 128:
  26. return chr(l)
  27. bs = _numtostr(l)
  28. return chr(len(bs) | 0x80) + bs
  29. def _decodelen(d, pos=0):
  30. '''Returns the length, and number of bytes required.'''
  31. odp = ord(d[pos])
  32. if odp < 128:
  33. return ord(d[pos]), 1
  34. else:
  35. l = odp & 0x7f
  36. return int(d[pos + 1:pos + 1 + l].encode('hex'), 16), l + 1
  37. class Test_codelen(unittest.TestCase):
  38. _testdata = [
  39. (2, '\x02'),
  40. (127, '\x7f'),
  41. (128, '\x81\x80'),
  42. (255, '\x81\xff'),
  43. (256, '\x82\x01\x00'),
  44. (65536-1, '\x82\xff\xff'),
  45. (65536, '\x83\x01\x00\x00'),
  46. ]
  47. def test_el(self):
  48. for i, j in self._testdata:
  49. self.assertEqual(_encodelen(i), j)
  50. self.assertEqual(_decodelen(j), (i, len(j)))
  51. def _splitfloat(f):
  52. m, e = math.frexp(f)
  53. # XXX - less than ideal
  54. while m != math.trunc(m):
  55. m *= 2
  56. e -= 1
  57. return m, e
  58. class TestSplitFloat(unittest.TestCase):
  59. def test_sf(self):
  60. for a, b in [ (0x2421, -32), (0x5382f, 238),
  61. (0x1fa8c3b094adf1, 971) ]:
  62. self.assertEqual(_splitfloat(a * 2**b), (a, b))
  63. class ASN1Object:
  64. def __init__(self, tag):
  65. self._tag = tag
  66. class ASN1Coder(object):
  67. def __init__(self):
  68. pass
  69. _typemap = {
  70. bool: 'bool',
  71. dict: 'dict',
  72. float: 'float',
  73. int: 'int',
  74. list: 'list',
  75. long: 'int',
  76. set: 'set',
  77. str: 'bytes',
  78. type(None): 'null',
  79. unicode: 'unicode',
  80. #decimal.Decimal: 'float',
  81. #datetime.datetime: 'datetime',
  82. #datetime.timedelta: 'timedelta',
  83. }
  84. _tagmap = {
  85. '\x01': 'bool',
  86. '\x02': 'int',
  87. '\x04': 'bytes',
  88. '\x05': 'null',
  89. '\x09': 'float',
  90. '\x0c': 'unicode',
  91. '\x30': 'list',
  92. '\x31': 'set',
  93. '\xc0': 'dict',
  94. #'xxx': 'datetime',
  95. }
  96. _typetag = dict((v, k) for k, v in _tagmap.iteritems())
  97. @staticmethod
  98. def enc_int(obj):
  99. l = obj.bit_length()
  100. l += 1 # space for sign bit
  101. l = (l + 7) // 8
  102. if obj < 0:
  103. obj += 1 << (l * 8) # twos-complement conversion
  104. v = _numtostr(obj)
  105. if len(v) != l:
  106. # XXX - is this a problem for signed values?
  107. v = '\x00' + v # add sign octect
  108. return _encodelen(l) + v
  109. @staticmethod
  110. def dec_int(d, pos, end):
  111. if pos == end:
  112. return 0, end
  113. v = int(d[pos:end].encode('hex'), 16)
  114. av = 1 << ((end - pos) * 8 - 1) # sign bit
  115. if v > av:
  116. v -= av * 2 # twos-complement conversion
  117. return v, end
  118. @staticmethod
  119. def enc_bool(obj):
  120. return '\x01' + ('\xff' if obj else '\x00')
  121. def dec_bool(self, d, pos, end):
  122. v = self.dec_int(d, pos, end)[0]
  123. if v not in (-1, 0):
  124. raise ValueError('invalid bool value: %d' % v)
  125. return bool(v), end
  126. @staticmethod
  127. def enc_null(obj):
  128. return '\x00'
  129. @staticmethod
  130. def dec_null(d, pos, end):
  131. return None, end
  132. def enc_dict(self, obj):
  133. #it = list(obj.iteritems())
  134. #it.sort()
  135. r = ''.join(self.dumps(k) + self.dumps(v) for k, v in obj.iteritems())
  136. return _encodelen(len(r)) + r
  137. def dec_dict(self, d, pos, end):
  138. r = {}
  139. vend = pos
  140. while pos < end:
  141. k, kend = self._loads(d, pos, end)
  142. #if kend > end:
  143. # raise ValueError('key past end')
  144. v, vend = self._loads(d, kend, end)
  145. if vend > end:
  146. raise ValueError('value past end')
  147. r[k] = v
  148. pos = vend
  149. return r, vend
  150. def enc_set(self, obj):
  151. r = ''.join(self.dumps(x) for x in obj)
  152. return _encodelen(len(r)) + r
  153. def dec_set(self, d, pos, end):
  154. r, end = self.dec_list(d, pos, end)
  155. return set(r), end
  156. def enc_list(self, obj):
  157. r = ''.join(self.dumps(x) for x in obj)
  158. return _encodelen(len(r)) + r
  159. def dec_list(self, d, pos, end):
  160. r = []
  161. vend = pos
  162. while pos < end:
  163. v, vend = self._loads(d, pos, end)
  164. if vend > end:
  165. raise ValueError('load past end')
  166. r.append(v)
  167. pos = vend
  168. return r, vend
  169. @staticmethod
  170. def enc_bytes(obj):
  171. return _encodelen(len(obj)) + obj
  172. @staticmethod
  173. def dec_bytes(d, pos, end):
  174. return d[pos:end], end
  175. @staticmethod
  176. def enc_unicode(obj):
  177. encobj = obj.encode('utf-8')
  178. return _encodelen(len(encobj)) + encobj
  179. def dec_unicode(self, d, pos, end):
  180. return d[pos:end].decode('utf-8'), end
  181. @staticmethod
  182. def enc_float(obj):
  183. s = math.copysign(1, obj)
  184. if math.isnan(obj):
  185. return _encodelen(1) + chr(0b01000010)
  186. elif math.isinf(obj):
  187. if s == 1:
  188. return _encodelen(1) + chr(0b01000000)
  189. else:
  190. return _encodelen(1) + chr(0b01000001)
  191. elif obj == 0:
  192. if s == 1:
  193. return _encodelen(0)
  194. else:
  195. return _encodelen(1) + chr(0b01000011)
  196. m, e = _splitfloat(obj)
  197. # Binary encoding
  198. val = 0x80
  199. if m < 0:
  200. val |= 0x40
  201. m = -m
  202. # Base 2
  203. el = (e.bit_length() + 7 + 1) // 8 # + 1 is sign bit
  204. if e < 0:
  205. e += 256**el # convert negative to twos-complement
  206. if el > 3:
  207. v = 0x3
  208. encexp = _encodelen(el) + _numtostr(e)
  209. else:
  210. v = el - 1
  211. encexp = _numtostr(e)
  212. r = chr(val) + encexp + _numtostr(m)
  213. return _encodelen(len(r)) + r
  214. def dec_float(self, d, pos, end):
  215. if pos == end:
  216. return float(0), end
  217. v = ord(d[pos])
  218. if v == 0b01000000:
  219. return float('inf'), end
  220. elif v == 0b01000001:
  221. return float('-inf'), end
  222. elif v == 0b01000010:
  223. return float('nan'), end
  224. elif v == 0b01000011:
  225. return float('-0'), end
  226. elif v & 0b110000:
  227. raise ValueError('base must be 2')
  228. elif v & 0b1100:
  229. raise ValueError('scaling factor must be 0')
  230. elif v & 0b11000000 == 0:
  231. raise ValueError('decimal encoding not supported')
  232. #elif v & 0b11000000 == 0b01000000:
  233. # raise ValueError('invalid encoding')
  234. if v & 3 == 3:
  235. pexp = pos + 2
  236. explen = ord(d[pos + 1])
  237. if explen <= 3:
  238. raise ValueError('must use other length encoding')
  239. eexp = pos + 2 + explen
  240. else:
  241. pexp = pos + 1
  242. eexp = pos + 1 + (v & 3) + 1
  243. exp = self.dec_int(d, pexp, eexp)[0]
  244. n = float(int(d[eexp:end].encode('hex'), 16))
  245. r = n * 2 ** exp
  246. if v & 0b1000000:
  247. r = -r
  248. return r, end
  249. def dumps(self, obj):
  250. tf = self._typemap[type(obj)]
  251. fun = getattr(self, 'enc_%s' % tf)
  252. return self._typetag[tf] + fun(obj)
  253. def _loads(self, data, pos, end):
  254. tag = data[pos]
  255. l, b = _decodelen(data, pos + 1)
  256. if len(data) < pos + 1 + b + l:
  257. raise ValueError('string not long enough')
  258. # XXX - enforce that len(data) == end?
  259. end = pos + 1 + b + l
  260. t = self._tagmap[tag]
  261. fun = getattr(self, 'dec_%s' % t)
  262. return fun(data, pos + 1 + b, end)
  263. def loads(self, data, pos=0, end=None, consume=False):
  264. if end is None:
  265. end = len(data)
  266. r, e = self._loads(data, pos, end)
  267. if consume and e != end:
  268. raise ValueError('entire string not consumed')
  269. return r
  270. def deeptypecmp(obj, o):
  271. #print 'dtc:', `obj`, `o`
  272. if type(obj) != type(o):
  273. return False
  274. if type(obj) in (str, unicode):
  275. return True
  276. if type(obj) in (list, set):
  277. for i, j in zip(obj, o):
  278. if not deeptypecmp(i, j):
  279. return False
  280. if type(obj) in (dict,):
  281. itms = obj.items()
  282. itms.sort()
  283. nitms = o.items()
  284. nitms.sort()
  285. for (k, v), (nk, nv) in zip(itms, nitms):
  286. if not deeptypecmp(k, nk):
  287. return False
  288. if not deeptypecmp(v, nv):
  289. return False
  290. return True
  291. class Test_deeptypecmp(unittest.TestCase):
  292. def test_true(self):
  293. for i in ((1,1), ('sldkfj', 'sldkfj')
  294. ):
  295. self.assertTrue(deeptypecmp(*i))
  296. def test_false(self):
  297. for i in (([[]], [{}]), ([1], ['str']), ([], set()),
  298. ({1: 2, 5: u'sdlkfj'}, {1: 2, 5: 'sdlkfj'}),
  299. ({1: 2, u'sdlkfj': 5}, {1: 2, 'sdlkfj': 5}),
  300. ):
  301. self.assertFalse(deeptypecmp(*i))
  302. def genfailures(obj):
  303. s = dumps(obj)
  304. for i in xrange(len(s)):
  305. for j in (chr(x) for x in xrange(256)):
  306. ts = s[:i] + j + s[i + 1:]
  307. if ts == s:
  308. continue
  309. try:
  310. o = loads(ts, consume=True)
  311. if o != obj or not deeptypecmp(o, obj):
  312. raise ValueError
  313. except (ValueError, KeyError, IndexError):
  314. pass
  315. except Exception:
  316. raise
  317. else:
  318. raise AssertionError('uncaught modification: %s, byte %d, orig: %02x' % (ts.encode('hex'), i, ord(s[i])))
  319. _coder = ASN1Coder()
  320. dumps = _coder.dumps
  321. loads = _coder.loads
  322. class TestCode(unittest.TestCase):
  323. def test_primv(self):
  324. self.assertEqual(dumps(-257), '0202feff'.decode('hex'))
  325. self.assertEqual(dumps(-256), '0202ff00'.decode('hex'))
  326. self.assertEqual(dumps(-255), '0202ff01'.decode('hex'))
  327. self.assertEqual(dumps(-1), '0201ff'.decode('hex'))
  328. self.assertEqual(dumps(5), '020105'.decode('hex'))
  329. self.assertEqual(dumps(128), '02020080'.decode('hex'))
  330. self.assertEqual(dumps(256), '02020100'.decode('hex'))
  331. self.assertEqual(dumps(False), '010100'.decode('hex'))
  332. self.assertEqual(dumps(True), '0101ff'.decode('hex'))
  333. self.assertEqual(dumps(None), '0500'.decode('hex'))
  334. self.assertEqual(dumps(.15625), '090380fb05'.decode('hex'))
  335. def test_fuzzing(self):
  336. genfailures(float(1))
  337. genfailures([ 1, 2, 'sdlkfj' ])
  338. genfailures({ 1: 2, 5: 'sdlkfj' })
  339. genfailures(set([ 1, 2, 'sdlkfj' ]))
  340. def test_consume(self):
  341. b = dumps(5)
  342. self.assertRaises(ValueError, loads, b + '398473', consume=True)
  343. # XXX - still possible that an internal data member
  344. # doesn't consume all
  345. # XXX - test that sets are ordered properly
  346. # XXX - test that dicts are ordered properly..
  347. def test_nan(self):
  348. s = dumps(float('nan'))
  349. v = loads(s)
  350. self.assertTrue(math.isnan(v))
  351. def test_invalids(self):
  352. # Add tests for base 8, 16 floats among others
  353. for v in [ '010101',
  354. '0903040001', # float scaling factor
  355. '0903840001', # float scaling factor
  356. '0903100001', # float base
  357. '0903900001', # float base
  358. '0903000001', # float decimal encoding
  359. '0903830001', # float exponent encoding
  360. '3007020101020102040673646c6b666a', # list short string still valid
  361. 'c007020101020102020105040673646c6b666a', # dict short value still valid
  362. ]:
  363. self.assertRaises(ValueError, loads, v.decode('hex'))
  364. def test_cryptoutilasn1(self):
  365. '''Test DER sequences generated by Crypto.Util.asn1.'''
  366. for s, v in [ ('\x02\x03$\x8a\xf9', 2394873),
  367. ('\x05\x00', None),
  368. ('\x02\x03\x00\x96I', 38473),
  369. ('\x04\x81\xc8' + '\x00' * 200, '\x00' * 200),
  370. ]:
  371. self.assertEqual(loads(s), v)
  372. def test_longstrings(self):
  373. for i in (203, 65484):
  374. s = os.urandom(i)
  375. v = dumps(s)
  376. self.assertEqual(loads(v), s)
  377. def test_dumps(self):
  378. for i in [ None,
  379. True, False,
  380. -1, 0, 1, 255, 256, -255, -256, 23498732498723, -2398729387234, (1<<2383) + 23984734, (-1<<1983) + 23984723984,
  381. float(0), float('-0'), float('inf'), float('-inf'), float(1.0), float(-1.0),
  382. float('353.3487'), float('2387.23873e492'), float('2387.348732e-392'),
  383. float('.15625'),
  384. 'weoifjwef',
  385. u'\U0001f4a9',
  386. [],
  387. {},
  388. set(), set((1,2,3)), set((1,'sjlfdkj', None, float('inf'))),
  389. ]:
  390. s = dumps(i)
  391. o = loads(s)
  392. self.assertEqual(i, o)
  393. tobj = { 1: 'dflkj', 5: u'sdlkfj', 'float': 1, 'largeint': 1<<342, 'list': [ 1, 2, u'str', 'str' ] }
  394. out = dumps(tobj)
  395. self.assertEqual(tobj, loads(out))
  396. def test_loads(self):
  397. self.assertRaises(ValueError, loads, '\x00\x02\x00')