Sophie

Sophie

distrib > Mandriva > 2009.0 > i586 > by-pkgid > d9faa203c2b0b6fbb179d93daaea81b7 > files > 182

libdtn-devel-2.6.0-1mdv2009.0.i586.rpm

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html><head><meta http-equiv="Content-Type" content="text/html;charset=UTF-8">
<title>DTN Reference Implementation: Ciphersuite_PS2.cc Source File</title>
<link href="doxygen.css" rel="stylesheet" type="text/css">
<link href="tabs.css" rel="stylesheet" type="text/css">
</head><body>
<!-- Generated by Doxygen 1.5.6 -->
<div class="navigation" id="top">
  <div class="tabs">
    <ul>
      <li><a href="main.html"><span>Main&nbsp;Page</span></a></li>
      <li><a href="namespaces.html"><span>Namespaces</span></a></li>
      <li><a href="annotated.html"><span>Classes</span></a></li>
      <li class="current"><a href="files.html"><span>Files</span></a></li>
    </ul>
  </div>
<h1>Ciphersuite_PS2.cc</h1><a href="Ciphersuite__PS2_8cc.html">Go to the documentation of this file.</a><div class="fragment"><pre class="fragment"><a name="l00001"></a>00001 <span class="comment">/*</span>
<a name="l00002"></a>00002 <span class="comment"> *    Copyright 2006 SPARTA Inc</span>
<a name="l00003"></a>00003 <span class="comment"> * </span>
<a name="l00004"></a>00004 <span class="comment"> *    Licensed under the Apache License, Version 2.0 (the "License");</span>
<a name="l00005"></a>00005 <span class="comment"> *    you may not use this file except in compliance with the License.</span>
<a name="l00006"></a>00006 <span class="comment"> *    You may obtain a copy of the License at</span>
<a name="l00007"></a>00007 <span class="comment"> * </span>
<a name="l00008"></a>00008 <span class="comment"> *        http://www.apache.org/licenses/LICENSE-2.0</span>
<a name="l00009"></a>00009 <span class="comment"> * </span>
<a name="l00010"></a>00010 <span class="comment"> *    Unless required by applicable law or agreed to in writing, software</span>
<a name="l00011"></a>00011 <span class="comment"> *    distributed under the License is distributed on an "AS IS" BASIS,</span>
<a name="l00012"></a>00012 <span class="comment"> *    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.</span>
<a name="l00013"></a>00013 <span class="comment"> *    See the License for the specific language governing permissions and</span>
<a name="l00014"></a>00014 <span class="comment"> *    limitations under the License.</span>
<a name="l00015"></a>00015 <span class="comment"> */</span>
<a name="l00016"></a>00016 
<a name="l00017"></a>00017 <span class="preprocessor">#ifdef HAVE_CONFIG_H</span>
<a name="l00018"></a>00018 <span class="preprocessor"></span><span class="preprocessor">#  include &lt;<a class="code" href="dtn-config_8h.html">dtn-config.h</a>&gt;</span>
<a name="l00019"></a>00019 <span class="preprocessor">#endif</span>
<a name="l00020"></a>00020 <span class="preprocessor"></span>
<a name="l00021"></a>00021 <span class="preprocessor">#ifdef BSP_ENABLED</span>
<a name="l00022"></a>00022 <span class="preprocessor"></span>
<a name="l00023"></a>00023 <span class="preprocessor">#define OPENSSL_FIPS    1       </span><span class="comment">/* required for sha256 */</span>
<a name="l00024"></a>00024 
<a name="l00025"></a>00025 <span class="preprocessor">#include "<a class="code" href="Ciphersuite__PS2_8h.html">Ciphersuite_PS2.h</a>"</span>
<a name="l00026"></a>00026 <span class="preprocessor">#include "<a class="code" href="Ciphersuite__C3_8h.html">Ciphersuite_C3.h</a>"</span>
<a name="l00027"></a>00027 <span class="preprocessor">#include "<a class="code" href="bundling_2Bundle_8h.html">bundling/Bundle.h</a>"</span>
<a name="l00028"></a>00028 <span class="preprocessor">#include "<a class="code" href="BundleDaemon_8h.html">bundling/BundleDaemon.h</a>"</span>
<a name="l00029"></a>00029 <span class="preprocessor">#include "<a class="code" href="BundleProtocol_8h.html">bundling/BundleProtocol.h</a>"</span>
<a name="l00030"></a>00030 <span class="preprocessor">#include "<a class="code" href="SDNV_8h.html">bundling/SDNV.h</a>"</span>
<a name="l00031"></a>00031 <span class="preprocessor">#include "<a class="code" href="contacts_2Link_8h.html">contacts/Link.h</a>"</span>
<a name="l00032"></a>00032 <span class="preprocessor">#include "<a class="code" href="KeySteward_8h.html">security/KeySteward.h</a>"</span>
<a name="l00033"></a>00033 <span class="preprocessor">#include "openssl/evp.h"</span>
<a name="l00034"></a>00034 
<a name="l00035"></a>00035 <span class="keyword">namespace </span>dtn {
<a name="l00036"></a>00036 
<a name="l00037"></a>00037 <span class="keyword">static</span> <span class="keyword">const</span> <span class="keywordtype">char</span> * <a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a> = <span class="stringliteral">"/dtn/bundle/ciphersuite"</span>;
<a name="l00038"></a>00038 
<a name="l00043"></a>00043 <span class="keyword">struct </span>PrimaryBlock_ex {
<a name="l00044"></a>00044     u_int8_t version;
<a name="l00045"></a>00045     u_int64_t processing_flags;
<a name="l00046"></a>00046     u_int64_t block_length;
<a name="l00047"></a>00047     u_int64_t dest_scheme_offset;
<a name="l00048"></a>00048     u_int64_t dest_ssp_offset;
<a name="l00049"></a>00049     u_int64_t source_scheme_offset;
<a name="l00050"></a>00050     u_int64_t source_ssp_offset;
<a name="l00051"></a>00051     u_int64_t replyto_scheme_offset;
<a name="l00052"></a>00052     u_int64_t replyto_ssp_offset;
<a name="l00053"></a>00053     u_int64_t custodian_scheme_offset;
<a name="l00054"></a>00054     u_int64_t custodian_ssp_offset;
<a name="l00055"></a>00055     u_int64_t creation_time;
<a name="l00056"></a>00056     u_int64_t creation_sequence;
<a name="l00057"></a>00057     u_int64_t lifetime;
<a name="l00058"></a>00058     u_int64_t dictionary_length;
<a name="l00059"></a>00059     u_int64_t fragment_offset;
<a name="l00060"></a>00060     u_int64_t original_length;
<a name="l00061"></a>00061 };
<a name="l00062"></a>00062 
<a name="l00063"></a>00063 <span class="comment">// Need quad versions of hton for manipulating full-length (unpacked) SDNV values</span>
<a name="l00064"></a>00064 
<a name="l00065"></a>00065 <span class="preprocessor">#if defined(WORDS_BIGENDIAN) &amp;&amp; (WORDS_BIGENDIAN == 1)</span>
<a name="l00066"></a>00066 <span class="preprocessor"></span><span class="preprocessor">#define htonq( x ) (x)</span>
<a name="l00067"></a>00067 <span class="preprocessor"></span><span class="preprocessor">#define ntohq( x ) (x)</span>
<a name="l00068"></a>00068 <span class="preprocessor"></span><span class="preprocessor">#else</span>
<a name="l00069"></a>00069 <span class="preprocessor"></span>
<a name="l00070"></a>00070 <span class="keyword">inline</span> u_int64_t htonq( u_int64_t x )
<a name="l00071"></a>00071 {
<a name="l00072"></a>00072     u_int64_t   res;
<a name="l00073"></a>00073     u_int32_t   hi = x &gt;&gt; 32;
<a name="l00074"></a>00074     u_int32_t   lo = x &amp; 0xffffffff;
<a name="l00075"></a>00075     hi = htonl( hi );
<a name="l00076"></a>00076     res = htonl( lo );
<a name="l00077"></a>00077     res = res &lt;&lt; 32 | hi;
<a name="l00078"></a>00078 
<a name="l00079"></a>00079     <span class="keywordflow">return</span> res;
<a name="l00080"></a>00080 }
<a name="l00081"></a>00081 
<a name="l00082"></a>00082 <span class="keyword">inline</span> u_int64_t ntohq( u_int64_t x )
<a name="l00083"></a>00083 {
<a name="l00084"></a>00084     u_int64_t   res;
<a name="l00085"></a>00085     u_int32_t   hi = x &gt;&gt; 32;
<a name="l00086"></a>00086     u_int32_t   lo = x &amp; 0xffffffff;
<a name="l00087"></a>00087     hi = ntohl( hi );
<a name="l00088"></a>00088     res = ntohl( lo );
<a name="l00089"></a>00089     res = res &lt;&lt; 32 | hi;
<a name="l00090"></a>00090 
<a name="l00091"></a>00091     <span class="keywordflow">return</span> res;
<a name="l00092"></a>00092 }
<a name="l00093"></a>00093 <span class="preprocessor">#endif</span>
<a name="l00094"></a>00094 <span class="preprocessor"></span>
<a name="l00095"></a>00095 
<a name="l00096"></a>00096 <span class="comment">//----------------------------------------------------------------------</span>
<a name="l00097"></a>00097 Ciphersuite_PS2::Ciphersuite_PS2()
<a name="l00098"></a>00098 {
<a name="l00099"></a>00099 }
<a name="l00100"></a>00100 
<a name="l00101"></a>00101 <span class="comment">//----------------------------------------------------------------------</span>
<a name="l00102"></a>00102 u_int16_t
<a name="l00103"></a>00103 Ciphersuite_PS2::cs_num(<span class="keywordtype">void</span>)
<a name="l00104"></a>00104 {
<a name="l00105"></a>00105     <span class="keywordflow">return</span> CSNUM_PS2;
<a name="l00106"></a>00106 }
<a name="l00107"></a>00107 
<a name="l00108"></a>00108 <span class="comment">//----------------------------------------------------------------------</span>
<a name="l00109"></a>00109 <span class="keywordtype">int</span>
<a name="l00110"></a>00110 Ciphersuite_PS2::consume(Bundle*    bundle,
<a name="l00111"></a>00111                          BlockInfo* block,
<a name="l00112"></a>00112                          u_char*    <a class="code" href="num2sdnv_8c.html#a81cdcc7ff6987bc85c073253e32715f">buf</a>,
<a name="l00113"></a>00113                          <span class="keywordtype">size_t</span>     <a class="code" href="num2sdnv_8c.html#fed088663f8704004425cdae2120b9b3">len</a>)
<a name="l00114"></a>00114 {
<a name="l00115"></a>00115     <span class="keywordtype">int</span> cc = block-&gt;owner()-&gt;consume(bundle, block, buf, len);
<a name="l00116"></a>00116 
<a name="l00117"></a>00117     <span class="keywordflow">if</span> (cc == -1) {
<a name="l00118"></a>00118         <span class="keywordflow">return</span> -1; <span class="comment">// protocol error</span>
<a name="l00119"></a>00119     }
<a name="l00120"></a>00120     
<a name="l00121"></a>00121     
<a name="l00122"></a>00122     <span class="comment">// in on-the-fly scenario, process this data for those interested</span>
<a name="l00123"></a>00123     
<a name="l00124"></a>00124     <span class="keywordflow">if</span> (! block-&gt;complete()) {
<a name="l00125"></a>00125         <a class="code" href="SDNV_8cc.html#ca68c0d4ac8df0838e209fb5300f7be3">ASSERT</a>(cc == (<span class="keywordtype">int</span>)len);
<a name="l00126"></a>00126         <span class="keywordflow">return</span> cc;
<a name="l00127"></a>00127     }
<a name="l00128"></a>00128 
<a name="l00129"></a>00129     <span class="keywordflow">if</span> ( block-&gt;locals() == NULL ) {      <span class="comment">// then we need to parse it</span>
<a name="l00130"></a>00130         parse(block);
<a name="l00131"></a>00131     }
<a name="l00132"></a>00132     
<a name="l00133"></a>00133     <span class="keywordflow">return</span> cc;
<a name="l00134"></a>00134 }
<a name="l00135"></a>00135 
<a name="l00136"></a>00136 <span class="comment">//----------------------------------------------------------------------</span>
<a name="l00137"></a>00137 <span class="keywordtype">bool</span>
<a name="l00138"></a>00138 Ciphersuite_PS2::validate(<span class="keyword">const</span> Bundle*           bundle,
<a name="l00139"></a>00139                           BlockInfoVec*           block_list,
<a name="l00140"></a>00140                           BlockInfo*              block,
<a name="l00141"></a>00141                           status_report_reason_t* reception_reason,
<a name="l00142"></a>00142                           status_report_reason_t* deletion_reason)
<a name="l00143"></a>00143 {
<a name="l00144"></a>00144     (void)reception_reason;
<a name="l00145"></a>00145 
<a name="l00146"></a>00146     <span class="keywordtype">size_t</span>          sdnv_len;
<a name="l00147"></a>00147     u_char*         buf;
<a name="l00148"></a>00148     <span class="keywordtype">size_t</span>          len;
<a name="l00149"></a>00149     <span class="keywordtype">size_t</span>          digest_len;
<a name="l00150"></a>00150     u_char          ps_digest[EVP_MAX_MD_SIZE];
<a name="l00151"></a>00151     u_int32_t       rlen = 0;
<a name="l00152"></a>00152     BP_Local_CS*    locals = NULL;
<a name="l00153"></a>00153     u_int64_t       field_length;
<a name="l00154"></a>00154     std::vector&lt;u_int64_t&gt;              correlator_list;
<a name="l00155"></a>00155     std::vector&lt;u_int64_t&gt;::iterator    cl_iter;
<a name="l00156"></a>00156     EndpointID      local_eid = BundleDaemon::instance()-&gt;local_eid();
<a name="l00157"></a>00157     BlockInfoVec::iterator iter;
<a name="l00158"></a>00158     u_int16_t       cs_flags;
<a name="l00159"></a>00159     <span class="keywordtype">int</span>             err = 0;
<a name="l00160"></a>00160     DataBuffer      db;
<a name="l00161"></a>00161         
<a name="l00162"></a>00162     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::validate()"</span>);
<a name="l00163"></a>00163     locals = <span class="keyword">dynamic_cast&lt;</span>BP_Local_CS*<span class="keyword">&gt;</span>(block-&gt;locals());
<a name="l00164"></a>00164     CS_FAIL_IF_NULL(locals);
<a name="l00165"></a>00165     cs_flags = locals-&gt;cs_flags();
<a name="l00166"></a>00166     
<a name="l00167"></a>00167     <span class="keywordflow">if</span> ( destination_is_local_node(bundle, block) )
<a name="l00168"></a>00168     {  <span class="comment">//yes - this is ours so go to work</span>
<a name="l00169"></a>00169             
<a name="l00170"></a>00170         <span class="keywordflow">if</span> ( !(cs_flags &amp; CS_BLOCK_HAS_RESULT) ) {
<a name="l00171"></a>00171             <a class="code" href="SDNV_8cc.html#3f24cadc9f28aba33472df0500092dcb">log_err_p</a>(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::validate: block has no security_result"</span>);
<a name="l00172"></a>00172             <span class="keywordflow">goto</span> fail;
<a name="l00173"></a>00173         }
<a name="l00174"></a>00174         
<a name="l00175"></a>00175         create_digest(bundle, block_list, block, db);   
<a name="l00176"></a>00176         digest_len = db.len();
<a name="l00177"></a>00177         memcpy(ps_digest, db.buf(), digest_len);     
<a name="l00178"></a>00178 
<a name="l00179"></a>00179         log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::validate() digest      0x%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx"</span>,
<a name="l00180"></a>00180                     ps_digest[0], ps_digest[1], ps_digest[2], ps_digest[3], ps_digest[4], ps_digest[5], ps_digest[6], ps_digest[7], ps_digest[8], ps_digest[9], ps_digest[10], 
<a name="l00181"></a>00181                     ps_digest[11], ps_digest[12], ps_digest[13], ps_digest[14], ps_digest[15], ps_digest[16], ps_digest[17], ps_digest[18], ps_digest[19]);
<a name="l00182"></a>00182 
<a name="l00183"></a>00183         <span class="comment">// get pieces from results -- should be just the signature</span>
<a name="l00184"></a>00184         buf = locals-&gt;security_result().buf();
<a name="l00185"></a>00185         len = locals-&gt;security_result().len();
<a name="l00186"></a>00186         
<a name="l00187"></a>00187         log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::validate() security result, len = %zu"</span>, len);
<a name="l00188"></a>00188         <span class="keywordflow">while</span> ( len &gt; 0 ) {
<a name="l00189"></a>00189             u_char item_type = *buf++;
<a name="l00190"></a>00190             --len;
<a name="l00191"></a>00191             sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>(buf, len, &amp;field_length);
<a name="l00192"></a>00192             buf += sdnv_len;
<a name="l00193"></a>00193             len -= sdnv_len;
<a name="l00194"></a>00194             
<a name="l00195"></a>00195             <span class="keywordflow">switch</span> ( item_type ) {
<a name="l00196"></a>00196             <span class="keywordflow">case</span> CS_signature_field:
<a name="l00197"></a>00197             {
<a name="l00198"></a>00198                 log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::validate() CS_signature_field item, len %llu"</span>, U64FMT(field_length));
<a name="l00199"></a>00199                         
<a name="l00200"></a>00200                 err = KeySteward::verify(bundle, buf, field_length, ps_digest, rlen);
<a name="l00201"></a>00201                 <span class="keywordflow">if</span> ( err == 0 ) {
<a name="l00202"></a>00202                     locals-&gt;set_proc_flag(CS_BLOCK_PASSED_VALIDATION | CS_BLOCK_COMPLETED_DO_NOT_FORWARD);
<a name="l00203"></a>00203                 } <span class="keywordflow">else</span> {
<a name="l00204"></a>00204                     <a class="code" href="SDNV_8cc.html#3f24cadc9f28aba33472df0500092dcb">log_err_p</a>(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::validate: CS_signature_field validation failed"</span>);                      
<a name="l00205"></a>00205                     <span class="keywordflow">goto</span> fail;
<a name="l00206"></a>00206                 }
<a name="l00207"></a>00207                         
<a name="l00208"></a>00208             }
<a name="l00209"></a>00209             <span class="keywordflow">break</span>;
<a name="l00210"></a>00210                     
<a name="l00211"></a>00211             <span class="keywordflow">default</span>:    <span class="comment">// deal with improper items</span>
<a name="l00212"></a>00212                 <a class="code" href="SDNV_8cc.html#3f24cadc9f28aba33472df0500092dcb">log_err_p</a>(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::validate: unexpected item type %d in security_result"</span>, item_type);
<a name="l00213"></a>00213                 <span class="keywordflow">goto</span> fail;
<a name="l00214"></a>00214             }
<a name="l00215"></a>00215             buf += field_length;
<a name="l00216"></a>00216             len -= field_length;
<a name="l00217"></a>00217         }
<a name="l00218"></a>00218     } <span class="keywordflow">else</span>
<a name="l00219"></a>00219         locals-&gt;set_proc_flag(CS_BLOCK_DID_NOT_FAIL);   <span class="comment">// not for here so we didn't check this block</span>
<a name="l00220"></a>00220         
<a name="l00221"></a>00221     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::validate() done"</span>);
<a name="l00222"></a>00222     
<a name="l00223"></a>00223     <span class="keywordflow">return</span> <span class="keyword">true</span>;
<a name="l00224"></a>00224     
<a name="l00225"></a>00225     
<a name="l00226"></a>00226     
<a name="l00227"></a>00227  fail:    
<a name="l00228"></a>00228     locals-&gt;set_proc_flag(CS_BLOCK_FAILED_VALIDATION | CS_BLOCK_COMPLETED_DO_NOT_FORWARD);
<a name="l00229"></a>00229     *deletion_reason = BundleProtocol::REASON_SECURITY_FAILED;
<a name="l00230"></a>00230     <span class="keywordflow">return</span> <span class="keyword">false</span>;
<a name="l00231"></a>00231 }
<a name="l00232"></a>00232 
<a name="l00233"></a>00233 <span class="comment">//----------------------------------------------------------------------</span>
<a name="l00234"></a>00234 <span class="keywordtype">int</span>
<a name="l00235"></a>00235 Ciphersuite_PS2::prepare(<span class="keyword">const</span> Bundle*    bundle,
<a name="l00236"></a>00236                          BlockInfoVec*    xmit_blocks,
<a name="l00237"></a>00237                          <span class="keyword">const</span> BlockInfo* source,
<a name="l00238"></a>00238                          <span class="keyword">const</span> <a class="code" href="namespacedtn.html#6efb37e503f8062c537b022eb755b94e" title="Typedef for a reference on a link.">LinkRef</a>&amp;   link,
<a name="l00239"></a>00239                          list_owner_t     list)
<a name="l00240"></a>00240 {
<a name="l00241"></a>00241     (void)bundle;
<a name="l00242"></a>00242     (void)link;
<a name="l00243"></a>00243     
<a name="l00244"></a>00244     <span class="keywordtype">int</span>             result = <a class="code" href="BlockProcessor_8h.html#cce9a45a37bad1da41648533b0e15457">BP_FAIL</a>;
<a name="l00245"></a>00245     u_int16_t       cs_flags = 0;
<a name="l00246"></a>00246     BP_Local_CS*    locals = NULL;
<a name="l00247"></a>00247     BP_Local_CS*    source_locals = NULL;
<a name="l00248"></a>00248     EndpointID      local_eid = BundleDaemon::instance()-&gt;local_eid();
<a name="l00249"></a>00249     BundleDaemon*   bd = BundleDaemon::instance();
<a name="l00250"></a>00250     
<a name="l00251"></a>00251 <span class="comment">//XXXpl - fix this test</span>
<a name="l00252"></a>00252     <span class="keywordflow">if</span> ( (source != NULL)  &amp;&amp;
<a name="l00253"></a>00253          (dynamic_cast&lt;BP_Local_CS*&gt;(source-&gt;locals())-&gt;security_dest() == bd-&gt;local_eid().data()) ) {
<a name="l00254"></a>00254         log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::prepare() - not being forwarded"</span>);
<a name="l00255"></a>00255         <span class="keywordflow">return</span> <a class="code" href="BlockProcessor_8h.html#446572d61c813971cb4d5ce4ee1b9c0b">BP_SUCCESS</a>;     <span class="comment">//it was for us so don't forward</span>
<a name="l00256"></a>00256     }
<a name="l00257"></a>00257     
<a name="l00258"></a>00258     BlockInfo       bi = BlockInfo(BundleProtocol::find_processor(BundleProtocol::PAYLOAD_SECURITY_BLOCK), source);     <span class="comment">// NULL source is OK here</span>
<a name="l00259"></a>00259     
<a name="l00260"></a>00260     <span class="comment">// If this is a received block then there's not a lot to do yet.</span>
<a name="l00261"></a>00261     <span class="comment">// We copy some parameters - the main work is done in generate().</span>
<a name="l00262"></a>00262     <span class="comment">// Insertion is at the end of the list, which means that</span>
<a name="l00263"></a>00263     <span class="comment">// it will be in the same position as received</span>
<a name="l00264"></a>00264     <span class="keywordflow">if</span> ( list == BlockInfo::LIST_RECEIVED ) {
<a name="l00265"></a>00265         
<a name="l00266"></a>00266         <span class="keywordflow">if</span> ( Ciphersuite::destination_is_local_node(bundle, source) )
<a name="l00267"></a>00267             <span class="keywordflow">return</span> <a class="code" href="BlockProcessor_8h.html#446572d61c813971cb4d5ce4ee1b9c0b">BP_SUCCESS</a>;     <span class="comment">//don't forward if it's for here</span>
<a name="l00268"></a>00268 
<a name="l00269"></a>00269         CS_FAIL_IF_NULL(source);
<a name="l00270"></a>00270         xmit_blocks-&gt;push_back(bi);
<a name="l00271"></a>00271         BlockInfo* bp = &amp;(xmit_blocks-&gt;back());
<a name="l00272"></a>00272         CS_FAIL_IF_NULL(bp);
<a name="l00273"></a>00273         bp-&gt;set_eid_list(source-&gt;eid_list());
<a name="l00274"></a>00274         log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::prepare() - forward received block len %u eid_list_count %zu new count %zu"</span>,
<a name="l00275"></a>00275                     source-&gt;full_length(), source-&gt;eid_list().size(), bp-&gt;eid_list().size());
<a name="l00276"></a>00276         
<a name="l00277"></a>00277         CS_FAIL_IF_NULL( source-&gt;locals() );      <span class="comment">// broken</span>
<a name="l00278"></a>00278 
<a name="l00279"></a>00279         source_locals = <span class="keyword">dynamic_cast&lt;</span>BP_Local_CS*<span class="keyword">&gt;</span>(source-&gt;locals());
<a name="l00280"></a>00280         CS_FAIL_IF_NULL(source_locals);           <span class="comment">// also broken</span>
<a name="l00281"></a>00281         bp-&gt;set_locals(<span class="keyword">new</span> BP_Local_CS);
<a name="l00282"></a>00282         locals = <span class="keyword">dynamic_cast&lt;</span>BP_Local_CS*<span class="keyword">&gt;</span>(bp-&gt;locals());
<a name="l00283"></a>00283         CS_FAIL_IF_NULL(locals);
<a name="l00284"></a>00284         locals-&gt;set_owner_cs_num(CSNUM_PS2);
<a name="l00285"></a>00285         cs_flags = source_locals-&gt;cs_flags();
<a name="l00286"></a>00286         locals-&gt;set_list_owner(BlockInfo::LIST_RECEIVED);
<a name="l00287"></a>00287         locals-&gt;set_correlator(source_locals-&gt;correlator());
<a name="l00288"></a>00288         bp-&gt;writable_contents()-&gt;reserve(source-&gt;full_length());
<a name="l00289"></a>00289         bp-&gt;writable_contents()-&gt;set_len(0);
<a name="l00290"></a>00290         
<a name="l00291"></a>00291         <span class="comment">// copy security-src and -dest if they exist</span>
<a name="l00292"></a>00292         <span class="keywordflow">if</span> ( source_locals-&gt;cs_flags() &amp; CS_BLOCK_HAS_SOURCE ) {
<a name="l00293"></a>00293             CS_FAIL_IF(source_locals-&gt;security_src().length() == 0 );
<a name="l00294"></a>00294             log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::prepare() add security_src EID"</span>);
<a name="l00295"></a>00295             cs_flags |= CS_BLOCK_HAS_SOURCE;
<a name="l00296"></a>00296             locals-&gt;set_security_src(source_locals-&gt;security_src());
<a name="l00297"></a>00297         }
<a name="l00298"></a>00298         
<a name="l00299"></a>00299         <span class="keywordflow">if</span> ( source_locals-&gt;cs_flags() &amp; CS_BLOCK_HAS_DEST ) {
<a name="l00300"></a>00300             CS_FAIL_IF(source_locals-&gt;security_dest().length() == 0 );
<a name="l00301"></a>00301             log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::prepare() add security_dest EID"</span>);
<a name="l00302"></a>00302             cs_flags |= CS_BLOCK_HAS_DEST;
<a name="l00303"></a>00303             locals-&gt;set_security_dest(source_locals-&gt;security_dest());
<a name="l00304"></a>00304         }
<a name="l00305"></a>00305         locals-&gt;set_cs_flags(cs_flags);
<a name="l00306"></a>00306         log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::prepare() - inserted block eid_list_count %zu"</span>,
<a name="l00307"></a>00307                     bp-&gt;eid_list().size());
<a name="l00308"></a>00308         result = <a class="code" href="BlockProcessor_8h.html#446572d61c813971cb4d5ce4ee1b9c0b">BP_SUCCESS</a>;
<a name="l00309"></a>00309         <span class="keywordflow">return</span> result;
<a name="l00310"></a>00310     } <span class="keywordflow">else</span> {
<a name="l00311"></a>00311 
<a name="l00312"></a>00312         <span class="comment">// initialize the block</span>
<a name="l00313"></a>00313         log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::prepare() - add new block (or API block etc)"</span>);
<a name="l00314"></a>00314         bi.set_locals(<span class="keyword">new</span> BP_Local_CS);
<a name="l00315"></a>00315         CS_FAIL_IF_NULL(bi.locals());
<a name="l00316"></a>00316         locals = <span class="keyword">dynamic_cast&lt;</span>BP_Local_CS*<span class="keyword">&gt;</span>(bi.locals());
<a name="l00317"></a>00317         CS_FAIL_IF_NULL(locals);
<a name="l00318"></a>00318         locals-&gt;set_owner_cs_num(CSNUM_PS2);
<a name="l00319"></a>00319         locals-&gt;set_list_owner(list);
<a name="l00320"></a>00320         
<a name="l00321"></a>00321         <span class="comment">// if there is a security-src and/or -dest, use it -- might be specified by API</span>
<a name="l00322"></a>00322         <span class="keywordflow">if</span> ( source != NULL &amp;&amp; source-&gt;locals() != NULL)  {
<a name="l00323"></a>00323             locals-&gt;set_security_src(dynamic_cast&lt;BP_Local_CS*&gt;(source-&gt;locals())-&gt;security_src());
<a name="l00324"></a>00324             locals-&gt;set_security_dest(dynamic_cast&lt;BP_Local_CS*&gt;(source-&gt;locals())-&gt;security_dest());
<a name="l00325"></a>00325         }
<a name="l00326"></a>00326         
<a name="l00327"></a>00327         log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::prepare() local_eid %s bundle-&gt;source_ %s"</span>, local_eid.c_str(), bundle-&gt;source().c_str());
<a name="l00328"></a>00328         <span class="comment">// if not, and we didn't create the bundle, specify ourselves as sec-src</span>
<a name="l00329"></a>00329         <span class="keywordflow">if</span> ( (locals-&gt;security_src().length() == 0) &amp;&amp; (local_eid != bundle-&gt;source()))
<a name="l00330"></a>00330             locals-&gt;set_security_src(local_eid.str());
<a name="l00331"></a>00331         
<a name="l00332"></a>00332         <span class="comment">// if we now have one, add it to list, etc</span>
<a name="l00333"></a>00333         <span class="keywordflow">if</span> ( locals-&gt;security_src().length() &gt; 0 ) {
<a name="l00334"></a>00334             log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::prepare() add security_src EID %s"</span>, locals-&gt;security_src().c_str());
<a name="l00335"></a>00335             cs_flags |= CS_BLOCK_HAS_SOURCE;
<a name="l00336"></a>00336             bi.add_eid(locals-&gt;security_src());
<a name="l00337"></a>00337         }
<a name="l00338"></a>00338         
<a name="l00339"></a>00339         <span class="keywordflow">if</span> ( locals-&gt;security_dest().length() &gt; 0 ) {
<a name="l00340"></a>00340             log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::prepare() add security_dest EID %s"</span>, locals-&gt;security_dest().c_str());
<a name="l00341"></a>00341             cs_flags |= CS_BLOCK_HAS_DEST;
<a name="l00342"></a>00342             bi.add_eid(locals-&gt;security_dest());
<a name="l00343"></a>00343         }
<a name="l00344"></a>00344             
<a name="l00345"></a>00345         locals-&gt;set_cs_flags(cs_flags);
<a name="l00346"></a>00346             
<a name="l00347"></a>00347         <span class="comment">// We should already have the primary block in the list.</span>
<a name="l00348"></a>00348         <span class="comment">// We'll insert this after the primary and any BA blocks</span>
<a name="l00349"></a>00349         <span class="comment">// and before everything else</span>
<a name="l00350"></a>00350         <span class="keywordflow">if</span> ( xmit_blocks-&gt;size() &gt; 0 ) {
<a name="l00351"></a>00351             BlockInfoVec::iterator iter = xmit_blocks-&gt;begin();
<a name="l00352"></a>00352             
<a name="l00353"></a>00353             <span class="keywordflow">while</span> ( iter != xmit_blocks-&gt;end()) {
<a name="l00354"></a>00354                 <span class="keywordflow">switch</span> (iter-&gt;type()) {
<a name="l00355"></a>00355                 <span class="keywordflow">case</span> BundleProtocol::PRIMARY_BLOCK:
<a name="l00356"></a>00356                 <span class="keywordflow">case</span> BundleProtocol::BUNDLE_AUTHENTICATION_BLOCK:
<a name="l00357"></a>00357                     ++iter;
<a name="l00358"></a>00358                     <span class="keywordflow">continue</span>;
<a name="l00359"></a>00359                     
<a name="l00360"></a>00360                 <span class="keywordflow">default</span>:
<a name="l00361"></a>00361                     <span class="keywordflow">break</span>;
<a name="l00362"></a>00362                 }
<a name="l00363"></a>00363                 xmit_blocks-&gt;insert(iter, bi);
<a name="l00364"></a>00364                 <span class="keywordflow">break</span>;
<a name="l00365"></a>00365             }
<a name="l00366"></a>00366         } <span class="keywordflow">else</span> {
<a name="l00367"></a>00367             <span class="comment">// it's weird if there are no other blocks but, oh well ...</span>
<a name="l00368"></a>00368             xmit_blocks-&gt;push_back(bi);
<a name="l00369"></a>00369         }
<a name="l00370"></a>00370     }
<a name="l00371"></a>00371     
<a name="l00372"></a>00372     result = <a class="code" href="BlockProcessor_8h.html#446572d61c813971cb4d5ce4ee1b9c0b">BP_SUCCESS</a>;
<a name="l00373"></a>00373     <span class="keywordflow">return</span> result;
<a name="l00374"></a>00374     
<a name="l00375"></a>00375  fail:
<a name="l00376"></a>00376     <span class="keywordflow">if</span> ( locals !=  NULL )
<a name="l00377"></a>00377         locals-&gt;set_proc_flag(CS_BLOCK_PROCESSING_FAILED_DO_NOT_SEND);
<a name="l00378"></a>00378     <span class="keywordflow">return</span> <a class="code" href="BlockProcessor_8h.html#cce9a45a37bad1da41648533b0e15457">BP_FAIL</a>;
<a name="l00379"></a>00379 }
<a name="l00380"></a>00380 
<a name="l00381"></a>00381 <span class="comment">//----------------------------------------------------------------------</span>
<a name="l00382"></a>00382 <span class="keywordtype">int</span>
<a name="l00383"></a>00383 Ciphersuite_PS2::generate(<span class="keyword">const</span> Bundle*  bundle,
<a name="l00384"></a>00384                           BlockInfoVec*  xmit_blocks,
<a name="l00385"></a>00385                           BlockInfo*     block,
<a name="l00386"></a>00386                           <span class="keyword">const</span> <a class="code" href="namespacedtn.html#6efb37e503f8062c537b022eb755b94e" title="Typedef for a reference on a link.">LinkRef</a>&amp; link,
<a name="l00387"></a>00387                           <span class="keywordtype">bool</span>           last)
<a name="l00388"></a>00388 {
<a name="l00389"></a>00389     (void)bundle;
<a name="l00390"></a>00390     (void)link;
<a name="l00391"></a>00391     (void)xmit_blocks;
<a name="l00392"></a>00392     
<a name="l00393"></a>00393     <span class="keywordtype">int</span>             result = <a class="code" href="BlockProcessor_8h.html#cce9a45a37bad1da41648533b0e15457">BP_FAIL</a>;
<a name="l00394"></a>00394     <span class="keywordtype">size_t</span>          sig_len = 0;
<a name="l00395"></a>00395     <span class="keywordtype">size_t</span>          res_len = 0;
<a name="l00396"></a>00396     <span class="keywordtype">size_t</span>          length = 0;
<a name="l00397"></a>00397     <span class="keywordtype">size_t</span>          param_len = 0;
<a name="l00398"></a>00398     u_char          fragment_item[24];             <span class="comment">// 24 is enough for 2 max-sized SDNVs and type and length</span>
<a name="l00399"></a>00399     u_int16_t       cs_flags = 0;
<a name="l00400"></a>00400     BP_Local_CS*    locals = <span class="keyword">dynamic_cast&lt;</span>BP_Local_CS*<span class="keyword">&gt;</span>(block-&gt;locals());
<a name="l00401"></a>00401     u_char*         ptr;
<a name="l00402"></a>00402     <span class="keywordtype">size_t</span>          temp;
<a name="l00403"></a>00403     <span class="keywordtype">size_t</span>          rem;
<a name="l00404"></a>00404     DataBuffer      encrypted_key;
<a name="l00405"></a>00405     EVP_MD_CTX      ctx;
<a name="l00406"></a>00406     <span class="keywordtype">size_t</span>          digest_len;
<a name="l00407"></a>00407     u_char*         buf = NULL;
<a name="l00408"></a>00408     
<a name="l00409"></a>00409     <span class="keywordtype">int</span>             sdnv_len = 0;       <span class="comment">// use an int to handle -1 return values</span>
<a name="l00410"></a>00410     <span class="keywordtype">int</span>             err = 0;
<a name="l00411"></a>00411     <span class="keywordtype">int</span>             len = 0;
<a name="l00412"></a>00412     BlockInfo::DataBuffer* contents = NULL;
<a name="l00413"></a>00413     LocalBuffer*    params = NULL;
<a name="l00414"></a>00414         
<a name="l00415"></a>00415     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::generate() %p"</span>, block);
<a name="l00416"></a>00416     CS_FAIL_IF_NULL(locals);
<a name="l00417"></a>00417     cs_flags = locals-&gt;cs_flags();      <span class="comment">// get flags from prepare()</span>
<a name="l00418"></a>00418     <span class="comment">// if this is a received block then it's easy</span>
<a name="l00419"></a>00419     <span class="keywordflow">if</span> ( locals-&gt;list_owner() == BlockInfo::LIST_RECEIVED ) 
<a name="l00420"></a>00420     {
<a name="l00421"></a>00421         <span class="comment">// generate the preamble and copy the data.</span>
<a name="l00422"></a>00422         <span class="keywordtype">size_t</span> length = block-&gt;source()-&gt;data_length();
<a name="l00423"></a>00423         
<a name="l00424"></a>00424         generate_preamble(xmit_blocks, 
<a name="l00425"></a>00425                           block,
<a name="l00426"></a>00426                           BundleProtocol::PAYLOAD_SECURITY_BLOCK,
<a name="l00427"></a>00427                           BundleProtocol::BLOCK_FLAG_DISCARD_BUNDLE_ONERROR |
<a name="l00428"></a>00428                           (last ? BundleProtocol::BLOCK_FLAG_LAST_BLOCK : 0),
<a name="l00429"></a>00429                           length);
<a name="l00430"></a>00430 
<a name="l00431"></a>00431         BlockInfo::DataBuffer* contents = block-&gt;writable_contents();
<a name="l00432"></a>00432         contents-&gt;reserve(block-&gt;data_offset() + length);
<a name="l00433"></a>00433         contents-&gt;set_len(block-&gt;data_offset() + length);
<a name="l00434"></a>00434         memcpy(contents-&gt;buf() + block-&gt;data_offset(),
<a name="l00435"></a>00435                block-&gt;source()-&gt;data(), length);
<a name="l00436"></a>00436         log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::generate() %p done"</span>, block);
<a name="l00437"></a>00437         <span class="keywordflow">return</span> <a class="code" href="BlockProcessor_8h.html#446572d61c813971cb4d5ce4ee1b9c0b">BP_SUCCESS</a>;
<a name="l00438"></a>00438     }    <span class="comment">/**************  forwarding done  **************/</span>
<a name="l00439"></a>00439     
<a name="l00440"></a>00440     
<a name="l00441"></a>00441     <span class="comment">/* params field will contain</span>
<a name="l00442"></a>00442 <span class="comment">       - fragment offset and length, if a fragment-bundle, plus type and length</span>
<a name="l00443"></a>00443 <span class="comment">    */</span>
<a name="l00444"></a>00444 
<a name="l00445"></a>00445     params = locals-&gt;writable_security_params();
<a name="l00446"></a>00446     
<a name="l00447"></a>00447     param_len = 0;
<a name="l00448"></a>00448     
<a name="l00449"></a>00449     <span class="keywordflow">if</span> ( bundle-&gt;is_fragment() ) {
<a name="l00450"></a>00450         log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::generate() bundle is fragment"</span>);
<a name="l00451"></a>00451         ptr = &amp;fragment_item[2];
<a name="l00452"></a>00452         rem = <span class="keyword">sizeof</span>(fragment_item) - 2;
<a name="l00453"></a>00453         temp = <a class="code" href="SDNV_8cc.html#21c54ef3a5345647ad1cada265a03eb4">SDNV::encode</a>(bundle-&gt;frag_offset(), ptr, rem);
<a name="l00454"></a>00454         ptr += temp;
<a name="l00455"></a>00455         rem -= temp;
<a name="l00456"></a>00456         temp += <a class="code" href="SDNV_8cc.html#21c54ef3a5345647ad1cada265a03eb4">SDNV::encode</a>(bundle-&gt;payload().length(), ptr, rem);
<a name="l00457"></a>00457         fragment_item[0] = CS_fragment_offset_and_length_field;
<a name="l00458"></a>00458         fragment_item[1] = temp;    <span class="comment">//guaranteed to fit as a "one-byte SDNV"</span>
<a name="l00459"></a>00459         param_len += 2 + temp;
<a name="l00460"></a>00460         
<a name="l00461"></a>00461     }
<a name="l00462"></a>00462     
<a name="l00463"></a>00463     <span class="keywordflow">if</span> ( param_len &gt; 0 ) {
<a name="l00464"></a>00464         cs_flags |= CS_BLOCK_HAS_PARAMS;
<a name="l00465"></a>00465         params-&gt;reserve(param_len); 
<a name="l00466"></a>00466         params-&gt;set_len(param_len);
<a name="l00467"></a>00467         log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::generate() security params, len = %zu"</span>, param_len);
<a name="l00468"></a>00468         
<a name="l00469"></a>00469         ptr = params-&gt;buf();
<a name="l00470"></a>00470         
<a name="l00471"></a>00471         <span class="keywordflow">if</span> ( bundle-&gt;is_fragment() ) 
<a name="l00472"></a>00472             memcpy(ptr, fragment_item, 2 + temp);
<a name="l00473"></a>00473     }
<a name="l00474"></a>00474     
<a name="l00475"></a>00475     <span class="comment">// need to calculate the size of the security-result items,</span>
<a name="l00476"></a>00476     <span class="comment">// and the total length of the combined field</span>
<a name="l00477"></a>00477     
<a name="l00478"></a>00478     <span class="comment">/*   result field will contain</span>
<a name="l00479"></a>00479 <span class="comment">         - signed hash, plus type and length</span>
<a name="l00480"></a>00480 <span class="comment">    */</span>
<a name="l00481"></a>00481     EVP_MD_CTX_init(&amp;ctx);
<a name="l00482"></a>00482     err = EVP_DigestInit_ex(&amp;ctx, EVP_sha1(), NULL);
<a name="l00483"></a>00483     CS_FAIL_IF(err == 0);
<a name="l00484"></a>00484     digest_len = EVP_MD_CTX_size(&amp;ctx);
<a name="l00485"></a>00485     EVP_MD_CTX_cleanup(&amp;ctx);
<a name="l00486"></a>00486     
<a name="l00487"></a>00487     KeySteward::signature_length(bundle, NULL, link, digest_len, sig_len);
<a name="l00488"></a>00488     
<a name="l00489"></a>00489     res_len = 1 + <a class="code" href="SDNV_8cc.html#46f4c114c92230c80f6714318251b542">SDNV::encoding_len</a>(sig_len) + sig_len;
<a name="l00490"></a>00490     
<a name="l00491"></a>00491     <span class="comment">// First we need to work out the lengths and create the preamble</span>
<a name="l00492"></a>00492     cs_flags |= CS_BLOCK_HAS_RESULT;
<a name="l00493"></a>00493     locals-&gt;set_cs_flags(cs_flags);
<a name="l00494"></a>00494     length = 0; 
<a name="l00495"></a>00495     length += <a class="code" href="SDNV_8cc.html#46f4c114c92230c80f6714318251b542">SDNV::encoding_len</a>(CSNUM_PS2);
<a name="l00496"></a>00496     length += <a class="code" href="SDNV_8cc.html#46f4c114c92230c80f6714318251b542">SDNV::encoding_len</a>(locals-&gt;cs_flags());
<a name="l00497"></a>00497     
<a name="l00498"></a>00498     param_len = locals-&gt;security_params().len();
<a name="l00499"></a>00499     length += <a class="code" href="SDNV_8cc.html#46f4c114c92230c80f6714318251b542">SDNV::encoding_len</a>(param_len) + param_len;
<a name="l00500"></a>00500     locals-&gt;set_security_result_offset(length);     <span class="comment">//remember this for finalize()</span>
<a name="l00501"></a>00501     length += <a class="code" href="SDNV_8cc.html#46f4c114c92230c80f6714318251b542">SDNV::encoding_len</a>(res_len) + res_len;
<a name="l00502"></a>00502         
<a name="l00503"></a>00503     contents = block-&gt;writable_contents();
<a name="l00504"></a>00504 
<a name="l00505"></a>00505     generate_preamble(xmit_blocks, 
<a name="l00506"></a>00506                       block,
<a name="l00507"></a>00507                       BundleProtocol::PAYLOAD_SECURITY_BLOCK,
<a name="l00508"></a>00508                       BundleProtocol::BLOCK_FLAG_DISCARD_BUNDLE_ONERROR |
<a name="l00509"></a>00509                       (last ? BundleProtocol::BLOCK_FLAG_LAST_BLOCK : 0),
<a name="l00510"></a>00510                       length);
<a name="l00511"></a>00511     
<a name="l00512"></a>00512 
<a name="l00513"></a>00513     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::generate() preamble len %u block len %zu"</span>, block-&gt;data_offset(), length);
<a name="l00514"></a>00514     contents-&gt;reserve(block-&gt;data_offset() + length);
<a name="l00515"></a>00515     contents-&gt;set_len(block-&gt;data_offset() + length);
<a name="l00516"></a>00516     buf = block-&gt;writable_contents()-&gt;buf() + block-&gt;data_offset();
<a name="l00517"></a>00517     len = length;
<a name="l00518"></a>00518     
<a name="l00519"></a>00519     <span class="comment">// Assemble data into block contents.</span>
<a name="l00520"></a>00520         
<a name="l00521"></a>00521     <span class="comment">// ciphersuite number and flags</span>
<a name="l00522"></a>00522     sdnv_len = <a class="code" href="SDNV_8cc.html#21c54ef3a5345647ad1cada265a03eb4">SDNV::encode</a>(locals-&gt;owner_cs_num(), buf, len);
<a name="l00523"></a>00523     CS_FAIL_IF(sdnv_len &lt;= 0);
<a name="l00524"></a>00524     buf += sdnv_len;
<a name="l00525"></a>00525     len -= sdnv_len;
<a name="l00526"></a>00526     
<a name="l00527"></a>00527     sdnv_len = <a class="code" href="SDNV_8cc.html#21c54ef3a5345647ad1cada265a03eb4">SDNV::encode</a>(locals-&gt;cs_flags(), buf, len);
<a name="l00528"></a>00528     CS_FAIL_IF(sdnv_len &lt;= 0);
<a name="l00529"></a>00529     buf += sdnv_len;
<a name="l00530"></a>00530     len -= sdnv_len;
<a name="l00531"></a>00531             
<a name="l00532"></a>00532     <span class="keywordflow">if</span> ( param_len &gt; 0 ) {
<a name="l00533"></a>00533         <span class="comment">// length of params</span>
<a name="l00534"></a>00534         sdnv_len = <a class="code" href="SDNV_8cc.html#21c54ef3a5345647ad1cada265a03eb4">SDNV::encode</a>(param_len, buf, len);
<a name="l00535"></a>00535         CS_FAIL_IF(sdnv_len &lt;= 0);
<a name="l00536"></a>00536         buf += sdnv_len;
<a name="l00537"></a>00537         len -= sdnv_len;
<a name="l00538"></a>00538         
<a name="l00539"></a>00539         <span class="comment">// params data</span>
<a name="l00540"></a>00540         memcpy(buf, locals-&gt;security_params().buf(), param_len );
<a name="l00541"></a>00541         buf += param_len;
<a name="l00542"></a>00542         len -= param_len;
<a name="l00543"></a>00543     }
<a name="l00544"></a>00544 
<a name="l00545"></a>00545     <span class="comment">// length of result -- we have to put this in now</span>
<a name="l00546"></a>00546     sdnv_len = <a class="code" href="SDNV_8cc.html#21c54ef3a5345647ad1cada265a03eb4">SDNV::encode</a>(res_len, buf, len);
<a name="l00547"></a>00547 
<a name="l00548"></a>00548     
<a name="l00549"></a>00549     <span class="comment">//  no, no ! Not yet !!    </span>
<a name="l00550"></a>00550     <span class="comment">//  ASSERT( len == 0 );</span>
<a name="l00551"></a>00551     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::generate() done"</span>);
<a name="l00552"></a>00552         
<a name="l00553"></a>00553 
<a name="l00554"></a>00554     result = <a class="code" href="BlockProcessor_8h.html#446572d61c813971cb4d5ce4ee1b9c0b">BP_SUCCESS</a>;
<a name="l00555"></a>00555     <span class="keywordflow">return</span> result;
<a name="l00556"></a>00556 
<a name="l00557"></a>00557  fail:
<a name="l00558"></a>00558     <span class="keywordflow">if</span> ( locals !=  NULL )
<a name="l00559"></a>00559         locals-&gt;set_proc_flag(CS_BLOCK_PROCESSING_FAILED_DO_NOT_SEND);
<a name="l00560"></a>00560     <span class="keywordflow">return</span> <a class="code" href="BlockProcessor_8h.html#cce9a45a37bad1da41648533b0e15457">BP_FAIL</a>;
<a name="l00561"></a>00561 }
<a name="l00562"></a>00562 
<a name="l00563"></a>00563 <span class="comment">//----------------------------------------------------------------------</span>
<a name="l00564"></a>00564 <span class="keywordtype">int</span>
<a name="l00565"></a>00565 Ciphersuite_PS2::finalize(<span class="keyword">const</span> Bundle*  bundle, 
<a name="l00566"></a>00566                           BlockInfoVec*  xmit_blocks,
<a name="l00567"></a>00567                           BlockInfo*     block, 
<a name="l00568"></a>00568                           <span class="keyword">const</span> <a class="code" href="namespacedtn.html#6efb37e503f8062c537b022eb755b94e" title="Typedef for a reference on a link.">LinkRef</a>&amp; link)
<a name="l00569"></a>00569 {
<a name="l00570"></a>00570     (void)link;
<a name="l00571"></a>00571     <span class="keywordtype">int</span>             result = <a class="code" href="BlockProcessor_8h.html#cce9a45a37bad1da41648533b0e15457">BP_FAIL</a>;
<a name="l00572"></a>00572     <span class="keywordtype">size_t</span>          len;
<a name="l00573"></a>00573     <span class="keywordtype">size_t</span>          sdnv_len;
<a name="l00574"></a>00574     <span class="keywordtype">size_t</span>          res_len;
<a name="l00575"></a>00575     u_char*         buf;
<a name="l00576"></a>00576     u_char          ps_digest[EVP_MAX_MD_SIZE];
<a name="l00577"></a>00577     u_int32_t       rlen = 0;
<a name="l00578"></a>00578     BP_Local_CS*    locals = NULL;
<a name="l00579"></a>00579     std::vector&lt;u_int64_t&gt;              correlator_list;
<a name="l00580"></a>00580     std::vector&lt;u_int64_t&gt;::iterator    cl_iter;
<a name="l00581"></a>00581     EndpointID      local_eid = BundleDaemon::instance()-&gt;local_eid();
<a name="l00582"></a>00582     BlockInfoVec::iterator iter;
<a name="l00583"></a>00583     DataBuffer      db;
<a name="l00584"></a>00584     <span class="keywordtype">int</span>             err = 0;
<a name="l00585"></a>00585     BlockInfo::DataBuffer* contents = NULL;
<a name="l00586"></a>00586     LocalBuffer*    digest_result = NULL;
<a name="l00587"></a>00587     <span class="keywordtype">size_t</span>          sig_len = 0;
<a name="l00588"></a>00588         
<a name="l00589"></a>00589     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::finalize()"</span>);
<a name="l00590"></a>00590     locals = <span class="keyword">dynamic_cast&lt;</span>BP_Local_CS*<span class="keyword">&gt;</span>(block-&gt;locals());
<a name="l00591"></a>00591     CS_FAIL_IF_NULL(locals);
<a name="l00592"></a>00592         
<a name="l00593"></a>00593     <span class="comment">// if this is a received block then we're done</span>
<a name="l00594"></a>00594     <span class="keywordflow">if</span> ( locals-&gt;list_owner() == BlockInfo::LIST_RECEIVED ) 
<a name="l00595"></a>00595         <span class="keywordflow">return</span> <a class="code" href="BlockProcessor_8h.html#446572d61c813971cb4d5ce4ee1b9c0b">BP_SUCCESS</a>;
<a name="l00596"></a>00596     
<a name="l00597"></a>00597     create_digest(bundle, xmit_blocks, block, db);        
<a name="l00598"></a>00598     
<a name="l00599"></a>00599     err = KeySteward::sign(bundle, NULL, link, ps_digest, rlen, db);
<a name="l00600"></a>00600     CS_FAIL_IF(err != 0);
<a name="l00601"></a>00601     sig_len = db.len();
<a name="l00602"></a>00602     res_len = 1 + <a class="code" href="SDNV_8cc.html#46f4c114c92230c80f6714318251b542">SDNV::encoding_len</a>(sig_len) + sig_len;
<a name="l00603"></a>00603     
<a name="l00604"></a>00604     <span class="comment">// build the result item</span>
<a name="l00605"></a>00605     digest_result = locals-&gt;writable_security_result();
<a name="l00606"></a>00606     digest_result-&gt;reserve(res_len);
<a name="l00607"></a>00607     digest_result-&gt;set_len(res_len);
<a name="l00608"></a>00608     
<a name="l00609"></a>00609     buf = digest_result-&gt;buf();
<a name="l00610"></a>00610     len = digest_result-&gt;len();
<a name="l00611"></a>00611     
<a name="l00612"></a>00612     *buf++ = Ciphersuite::CS_signature_field;               <span class="comment">// item type</span>
<a name="l00613"></a>00613     len--;
<a name="l00614"></a>00614     
<a name="l00615"></a>00615     sdnv_len = <a class="code" href="SDNV_8cc.html#21c54ef3a5345647ad1cada265a03eb4">SDNV::encode</a>(sig_len, buf, len);
<a name="l00616"></a>00616     buf += sdnv_len;
<a name="l00617"></a>00617     len -= sdnv_len;
<a name="l00618"></a>00618     
<a name="l00619"></a>00619     memcpy(buf, db.buf(), sig_len);
<a name="l00620"></a>00620     
<a name="l00621"></a>00621     
<a name="l00622"></a>00622     <span class="comment">// now put the result item into the block contents</span>
<a name="l00623"></a>00623     contents = block-&gt;writable_contents();
<a name="l00624"></a>00624     buf = contents-&gt;buf();
<a name="l00625"></a>00625     len = contents-&gt;len();
<a name="l00626"></a>00626     buf += block-&gt;data_offset();    <span class="comment">// we need to add data_offset as well,</span>
<a name="l00627"></a>00627     len -= block-&gt;data_offset();    <span class="comment">// since we're pointing at the whole buffer</span>
<a name="l00628"></a>00628     
<a name="l00629"></a>00629     buf += locals-&gt;security_result_offset();    <span class="comment">//and this offset is just within</span>
<a name="l00630"></a>00630     len -= locals-&gt;security_result_offset();    <span class="comment">//the data portion of the buffer</span>
<a name="l00631"></a>00631     sdnv_len = <a class="code" href="num2sdnv_8c.html#fed088663f8704004425cdae2120b9b3">SDNV::len</a>(buf);  <span class="comment">// size of result-length field</span>
<a name="l00632"></a>00632     buf += sdnv_len;            <span class="comment">// step over that length field</span>
<a name="l00633"></a>00633     len -= sdnv_len;
<a name="l00634"></a>00634     memcpy(buf, digest_result-&gt;buf(), digest_result-&gt;len());
<a name="l00635"></a>00635     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::finalize() done"</span>);
<a name="l00636"></a>00636     
<a name="l00637"></a>00637     result = <a class="code" href="BlockProcessor_8h.html#446572d61c813971cb4d5ce4ee1b9c0b">BP_SUCCESS</a>;
<a name="l00638"></a>00638     <span class="keywordflow">return</span> result;
<a name="l00639"></a>00639 
<a name="l00640"></a>00640  fail:
<a name="l00641"></a>00641     <span class="keywordflow">if</span> ( locals !=  NULL )
<a name="l00642"></a>00642         locals-&gt;set_proc_flag(CS_BLOCK_PROCESSING_FAILED_DO_NOT_SEND);
<a name="l00643"></a>00643     <span class="keywordflow">return</span> <a class="code" href="BlockProcessor_8h.html#cce9a45a37bad1da41648533b0e15457">BP_FAIL</a>;
<a name="l00644"></a>00644 }
<a name="l00645"></a>00645 
<a name="l00646"></a>00646 <span class="comment">//----------------------------------------------------------------------</span>
<a name="l00647"></a>00647 <span class="keywordtype">void</span>
<a name="l00648"></a>00648 Ciphersuite_PS2::digest(<span class="keyword">const</span> Bundle*    bundle,
<a name="l00649"></a>00649                         <span class="keyword">const</span> BlockInfo* caller_block,
<a name="l00650"></a>00650                         <span class="keyword">const</span> BlockInfo* target_block,
<a name="l00651"></a>00651                         <span class="keyword">const</span> <span class="keywordtype">void</span>*      buf,
<a name="l00652"></a>00652                         <span class="keywordtype">size_t</span>           len,
<a name="l00653"></a>00653                         OpaqueContext*   r)
<a name="l00654"></a>00654 {
<a name="l00655"></a>00655     (void)bundle;
<a name="l00656"></a>00656     (void)caller_block;
<a name="l00657"></a>00657     (void)target_block;
<a name="l00658"></a>00658     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::digest() %zu bytes"</span>, len);
<a name="l00659"></a>00659     
<a name="l00660"></a>00660     EVP_MD_CTX*       pctx = <span class="keyword">reinterpret_cast&lt;</span>EVP_MD_CTX*<span class="keyword">&gt;</span>(r);
<a name="l00661"></a>00661     
<a name="l00662"></a>00662     EVP_DigestUpdate( pctx, buf, len );
<a name="l00663"></a>00663 }
<a name="l00664"></a>00664 
<a name="l00665"></a>00665 <span class="comment">//----------------------------------------------------------------------</span>
<a name="l00666"></a>00666 <span class="keywordtype">void</span>
<a name="l00667"></a>00667 Ciphersuite_PS2::create_digest(<span class="keyword">const</span> Bundle*  bundle, 
<a name="l00668"></a>00668                                BlockInfoVec*  block_list,
<a name="l00669"></a>00669                                BlockInfo*     block,
<a name="l00670"></a>00670                                DataBuffer&amp;    db)
<a name="l00671"></a>00671 {
<a name="l00672"></a>00672     <span class="keywordtype">size_t</span>          len;
<a name="l00673"></a>00673     <span class="keywordtype">size_t</span>          sdnv_len;
<a name="l00674"></a>00674     EVP_MD_CTX      ctx;
<a name="l00675"></a>00675     OpaqueContext*  r = <span class="keyword">reinterpret_cast&lt;</span>OpaqueContext*<span class="keyword">&gt;</span>(&amp;ctx);
<a name="l00676"></a>00676     <span class="keywordtype">char</span>*           dict;
<a name="l00677"></a>00677     u_int32_t       offset;
<a name="l00678"></a>00678     u_char*         buf;
<a name="l00679"></a>00679     <span class="keyword">const</span> <span class="keywordtype">char</span>*     ptr;
<a name="l00680"></a>00680     <span class="keywordtype">size_t</span>          plen;
<a name="l00681"></a>00681     <span class="keywordtype">size_t</span>          digest_len;
<a name="l00682"></a>00682     u_char          ps_digest[EVP_MAX_MD_SIZE];
<a name="l00683"></a>00683     u_int32_t       rlen = 0;
<a name="l00684"></a>00684     u_int32_t       header_len;
<a name="l00685"></a>00685     u_char          c;
<a name="l00686"></a>00686     u_int64_t       eid_ref_count = 0LLU;
<a name="l00687"></a>00687     BP_Local_CS*    locals = NULL;
<a name="l00688"></a>00688     BP_Local_CS*    target_locals = NULL;
<a name="l00689"></a>00689     u_int64_t       target_flags;
<a name="l00690"></a>00690     u_int64_t       flags_save;
<a name="l00691"></a>00691     u_int64_t       mask = 0LLU;            
<a name="l00692"></a>00692     u_int64_t       mask_primary = 0LLU;    
<a name="l00693"></a>00693     u_int64_t       target_content_length;
<a name="l00694"></a>00694     u_int64_t       correlator;
<a name="l00695"></a>00695     u_int64_t       cs_flags;
<a name="l00696"></a>00696     u_int64_t       suite_num;
<a name="l00697"></a>00697     std::vector&lt;u_int64_t&gt;              correlator_list;
<a name="l00698"></a>00698     std::vector&lt;u_int64_t&gt;::iterator    cl_iter;
<a name="l00699"></a>00699     EndpointID      local_eid = BundleDaemon::instance()-&gt;local_eid();
<a name="l00700"></a>00700     BlockInfoVec::iterator iter;
<a name="l00701"></a>00701     <span class="keywordtype">int</span>             err = 0;
<a name="l00702"></a>00702     PrimaryBlock_ex primary;
<a name="l00703"></a>00703         
<a name="l00704"></a>00704     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest()"</span>);
<a name="l00705"></a>00705     locals = <span class="keyword">dynamic_cast&lt;</span>BP_Local_CS*<span class="keyword">&gt;</span>(block-&gt;locals());
<a name="l00706"></a>00706         
<a name="l00707"></a>00707     <span class="comment">// prepare context </span>
<a name="l00708"></a>00708     EVP_MD_CTX_init(&amp;ctx);
<a name="l00709"></a>00709     err = EVP_DigestInit_ex(&amp;ctx, EVP_sha256(), NULL);
<a name="l00710"></a>00710     digest_len = EVP_MD_CTX_size(&amp;ctx);
<a name="l00711"></a>00711     <span class="comment">// XXX-pl  check error -- zero is failure</span>
<a name="l00712"></a>00712         
<a name="l00713"></a>00713     <span class="comment">// Walk the list and process each of the blocks.</span>
<a name="l00714"></a>00714     <span class="comment">// We only digest PS, C3 and the payload data,</span>
<a name="l00715"></a>00715     <span class="comment">// all others are ignored</span>
<a name="l00716"></a>00716     
<a name="l00717"></a>00717     <span class="comment">// Note that we can only process PSBs and C3s that follow this block</span>
<a name="l00718"></a>00718     <span class="comment">// as doing otherwise would mean that there would be a</span>
<a name="l00719"></a>00719     <span class="comment">// correlator block preceding its parent</span>
<a name="l00720"></a>00720     
<a name="l00721"></a>00721     <span class="comment">// There can also be tunnelling issues, depending upon the</span>
<a name="l00722"></a>00722     <span class="comment">// exact sequencing of blocks. It seems best to add C blocks</span>
<a name="l00723"></a>00723     <span class="comment">// as early as possible in order to mitigate this problem.</span>
<a name="l00724"></a>00724     <span class="comment">// That has its own drawbacks unfortunately</span>
<a name="l00725"></a>00725     
<a name="l00726"></a>00726     header_len =        1       <span class="comment">//version</span>
<a name="l00727"></a>00727                         +   8       <span class="comment">//flags SDNV</span>
<a name="l00728"></a>00728                         +   4       <span class="comment">//header length itself</span>
<a name="l00729"></a>00729                         +   4       <span class="comment">//destination eid length</span>
<a name="l00730"></a>00730                         +   4       <span class="comment">//source eid length</span>
<a name="l00731"></a>00731                         +   4       <span class="comment">//report-to eid length</span>
<a name="l00732"></a>00732                         +   8       <span class="comment">//creation SDNV #1</span>
<a name="l00733"></a>00733                         +   8       <span class="comment">//creation SDNV #2</span>
<a name="l00734"></a>00734                         +   8;      <span class="comment">//lifetime SDNV</span>
<a name="l00735"></a>00735     
<a name="l00736"></a>00736     <span class="keywordflow">if</span> ( bundle-&gt;is_fragment() ) 
<a name="l00737"></a>00737         header_len +=   8       <span class="comment">//fragment offset SDNV</span>
<a name="l00738"></a>00738                         +   8;      <span class="comment">//total-length SDNV</span>
<a name="l00739"></a>00739     
<a name="l00740"></a>00740     <span class="comment">// do stuff for primary, and ignore it during the walk</span>
<a name="l00741"></a>00741     
<a name="l00742"></a>00742     iter = block_list-&gt;begin();     <span class="comment">//primary</span>
<a name="l00743"></a>00743     
<a name="l00744"></a>00744     err = read_primary(bundle, &amp;*iter, primary, &amp;dict);
<a name="l00745"></a>00745     
<a name="l00746"></a>00746     header_len += strlen(dict + primary.dest_scheme_offset);
<a name="l00747"></a>00747     header_len += strlen(dict + primary.dest_ssp_offset);
<a name="l00748"></a>00748     header_len += strlen(dict + primary.source_scheme_offset);
<a name="l00749"></a>00749     header_len += strlen(dict + primary.source_ssp_offset);
<a name="l00750"></a>00750     header_len += strlen(dict + primary.replyto_scheme_offset);
<a name="l00751"></a>00751     header_len += strlen(dict + primary.replyto_ssp_offset);
<a name="l00752"></a>00752     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest() header_len %u"</span>, header_len);     
<a name="l00753"></a>00753 
<a name="l00754"></a>00754 
<a name="l00755"></a>00755     <span class="comment">// Now start the actual digest process</span>
<a name="l00756"></a>00756     digest( bundle, block, &amp;*iter, &amp;primary.version, 1, r);     <span class="comment">//version</span>
<a name="l00757"></a>00757     
<a name="l00758"></a>00758     primary.processing_flags &amp;= mask_primary;
<a name="l00759"></a>00759     target_flags = htonq(primary.processing_flags);
<a name="l00760"></a>00760     digest( bundle, block, &amp;*iter, &amp;primary.processing_flags, <span class="keyword">sizeof</span>(primary.processing_flags), r);
<a name="l00761"></a>00761     
<a name="l00762"></a>00762     header_len = htonl(header_len);
<a name="l00763"></a>00763     digest( bundle, block, &amp;*iter, &amp;header_len, <span class="keyword">sizeof</span>(header_len), r);
<a name="l00764"></a>00764     
<a name="l00765"></a>00765     
<a name="l00766"></a>00766     offset = strlen(dict + primary.dest_scheme_offset) + strlen(dict + primary.dest_ssp_offset);    <span class="comment">// Note:- "offset" is 4 bytes, not 8</span>
<a name="l00767"></a>00767     offset = htonl(offset);
<a name="l00768"></a>00768     digest( bundle, block, &amp;*iter, &amp;offset, <span class="keyword">sizeof</span>(offset), r);
<a name="l00769"></a>00769     digest( bundle, block, &amp;*iter, dict + primary.dest_scheme_offset, strlen(dict + primary.dest_scheme_offset), r);
<a name="l00770"></a>00770     digest( bundle, block, &amp;*iter, dict + primary.dest_ssp_offset, strlen(dict + primary.dest_ssp_offset), r);
<a name="l00771"></a>00771 
<a name="l00772"></a>00772     offset = strlen(dict + primary.source_scheme_offset) + strlen(dict + primary.source_ssp_offset);
<a name="l00773"></a>00773     offset = htonl(offset);
<a name="l00774"></a>00774     digest( bundle, block, &amp;*iter, &amp;offset, <span class="keyword">sizeof</span>(offset), r);
<a name="l00775"></a>00775     digest( bundle, block, &amp;*iter, dict + primary.source_scheme_offset, strlen(dict + primary.source_scheme_offset), r);
<a name="l00776"></a>00776     digest( bundle, block, &amp;*iter, dict + primary.source_ssp_offset, strlen(dict + primary.source_ssp_offset), r);
<a name="l00777"></a>00777 
<a name="l00778"></a>00778     offset = strlen(dict + primary.replyto_scheme_offset) + strlen(dict + primary.replyto_ssp_offset);
<a name="l00779"></a>00779     offset = htonl(offset);
<a name="l00780"></a>00780     digest( bundle, block, &amp;*iter, &amp;offset, <span class="keyword">sizeof</span>(offset), r);
<a name="l00781"></a>00781     digest( bundle, block, &amp;*iter, dict + primary.replyto_scheme_offset, strlen(dict + primary.replyto_scheme_offset), r);
<a name="l00782"></a>00782     digest( bundle, block, &amp;*iter, dict + primary.replyto_ssp_offset, strlen(dict + primary.replyto_ssp_offset), r);
<a name="l00783"></a>00783     
<a name="l00784"></a>00784     <span class="comment">// two SDNVs for creation timestamp, one for lifetime</span>
<a name="l00785"></a>00785     primary.creation_time = htonq(primary.creation_time);
<a name="l00786"></a>00786     digest( bundle, block, &amp;*iter, &amp;primary.creation_time, <span class="keyword">sizeof</span>(primary.creation_time), r);
<a name="l00787"></a>00787     primary.creation_sequence = htonq(primary.creation_sequence);
<a name="l00788"></a>00788     digest( bundle, block, &amp;*iter, &amp;primary.creation_sequence, <span class="keyword">sizeof</span>(primary.creation_sequence), r);
<a name="l00789"></a>00789     primary.lifetime = htonq(primary.lifetime);
<a name="l00790"></a>00790     digest( bundle, block, &amp;*iter, &amp;primary.lifetime, <span class="keyword">sizeof</span>(primary.lifetime), r);
<a name="l00791"></a>00791     
<a name="l00792"></a>00792     <span class="keywordflow">if</span> ( bundle-&gt;is_fragment() ) {
<a name="l00793"></a>00793         primary.fragment_offset = htonq(primary.fragment_offset);
<a name="l00794"></a>00794         digest( bundle, block, &amp;*iter, &amp;primary.fragment_offset, <span class="keyword">sizeof</span>(primary.fragment_offset), r);
<a name="l00795"></a>00795         primary.original_length = htonq(primary.original_length);
<a name="l00796"></a>00796         digest( bundle, block, &amp;*iter, &amp;primary.original_length, <span class="keyword">sizeof</span>(primary.original_length), r);
<a name="l00797"></a>00797     }
<a name="l00798"></a>00798     
<a name="l00799"></a>00799     ++iter;     <span class="comment">//primary is done now</span>
<a name="l00800"></a>00800     
<a name="l00801"></a>00801     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest() walk block list"</span>);
<a name="l00802"></a>00802     <span class="keywordflow">for</span> ( ;
<a name="l00803"></a>00803           iter != block_list-&gt;end();
<a name="l00804"></a>00804           ++iter)
<a name="l00805"></a>00805     {
<a name="l00806"></a>00806         <span class="comment">// Advance the iterator to our current position.</span>
<a name="l00807"></a>00807         <span class="comment">// While we do it, we also remember the correlator values</span>
<a name="l00808"></a>00808         <span class="comment">// of any PSBs or C3 blocks we encounter.</span>
<a name="l00809"></a>00809         <span class="comment">// We do this to avoid processing any related correlated blocks</span>
<a name="l00810"></a>00810         <span class="comment">// Note that we include the current block in the test below</span>
<a name="l00811"></a>00811         <span class="comment">// in order to prevent encapsulating it !!</span>
<a name="l00812"></a>00812         target_locals = <span class="keyword">dynamic_cast&lt;</span>BP_Local_CS*<span class="keyword">&gt;</span>(iter-&gt;locals());
<a name="l00813"></a>00813         <span class="keywordflow">if</span> ( (&amp;*iter) &lt;= block ) {
<a name="l00814"></a>00814             <span class="keywordflow">if</span> (  iter-&gt;type() == BundleProtocol::PAYLOAD_SECURITY_BLOCK ||
<a name="l00815"></a>00815                   (iter-&gt;type() == BundleProtocol::CONFIDENTIALITY_BLOCK  &amp;&amp;
<a name="l00816"></a>00816                    target_locals-&gt;owner_cs_num() == Ciphersuite_C3::CSNUM_C3  )  ) {
<a name="l00817"></a>00817                 <span class="keywordflow">if</span> ( target_locals-&gt;cs_flags() &amp; CS_BLOCK_HAS_CORRELATOR) {
<a name="l00818"></a>00818                     <span class="comment">//add correlator to exclude-list</span>
<a name="l00819"></a>00819                     correlator_list.push_back(target_locals-&gt;correlator());
<a name="l00820"></a>00820                 }
<a name="l00821"></a>00821             }
<a name="l00822"></a>00822             <span class="keywordflow">continue</span>;
<a name="l00823"></a>00823         }
<a name="l00824"></a>00824         
<a name="l00825"></a>00825         
<a name="l00826"></a>00826         <span class="keywordflow">switch</span> ( iter-&gt;type() ) {
<a name="l00827"></a>00827         <span class="keywordflow">case</span> BundleProtocol::PAYLOAD_SECURITY_BLOCK:
<a name="l00828"></a>00828         <span class="keywordflow">case</span> BundleProtocol::CONFIDENTIALITY_BLOCK:
<a name="l00829"></a>00829         {
<a name="l00830"></a>00830                     
<a name="l00831"></a>00831             log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest() PS or C block type %d cs_num %d"</span>,
<a name="l00832"></a>00832                         iter-&gt;type(), target_locals-&gt;owner_cs_num());
<a name="l00833"></a>00833             <span class="keywordflow">if</span> (  iter-&gt;type() == BundleProtocol::PAYLOAD_SECURITY_BLOCK  &amp;&amp;
<a name="l00834"></a>00834                   target_locals-&gt;owner_cs_num() != Ciphersuite_C3::CSNUM_C3 )  
<a name="l00835"></a>00835                 <span class="keywordflow">continue</span>;       <span class="comment">// only digest C3</span>
<a name="l00836"></a>00836                     
<a name="l00837"></a>00837                     
<a name="l00838"></a>00838             <span class="comment">// see if there's a correlator and, if there is,</span>
<a name="l00839"></a>00839             <span class="comment">// if this is a secondary block. Only process a secondary</span>
<a name="l00840"></a>00840             <span class="comment">// if we also did its primary</span>
<a name="l00841"></a>00841             <span class="keywordtype">bool</span>    skip_target = <span class="keyword">false</span>;
<a name="l00842"></a>00842             target_locals = <span class="keyword">dynamic_cast&lt;</span>BP_Local_CS*<span class="keyword">&gt;</span>(iter-&gt;locals());
<a name="l00843"></a>00843             log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest() target_locals-&gt;cs_flags 0x%hx"</span>, target_locals-&gt;cs_flags());
<a name="l00844"></a>00844             log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest() target_locals-&gt;correlator() 0x%llx"</span>, U64FMT(target_locals-&gt;correlator()));
<a name="l00845"></a>00845             <span class="keywordflow">if</span> ( target_locals-&gt;cs_flags() &amp; CS_BLOCK_HAS_CORRELATOR) {
<a name="l00846"></a>00846                 correlator = target_locals-&gt;correlator();
<a name="l00847"></a>00847                 <span class="keywordflow">for</span> ( cl_iter = correlator_list.begin();
<a name="l00848"></a>00848                       cl_iter &lt; correlator_list.end();
<a name="l00849"></a>00849                       ++cl_iter) {
<a name="l00850"></a>00850                     <span class="keywordflow">if</span> ( correlator == *cl_iter) {                              
<a name="l00851"></a>00851                         skip_target = <span class="keyword">true</span>;
<a name="l00852"></a>00852                         <span class="keywordflow">break</span>;      <span class="comment">//break from for-loop</span>
<a name="l00853"></a>00853                     }
<a name="l00854"></a>00854                 }
<a name="l00855"></a>00855                 <span class="keywordflow">if</span> ( skip_target )
<a name="l00856"></a>00856                     <span class="keywordflow">break</span>;  <span class="comment">//break from switch, continue for "for" loop</span>
<a name="l00857"></a>00857                         
<a name="l00858"></a>00858             }
<a name="l00859"></a>00859                     
<a name="l00860"></a>00860             log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest() digest this block, len %u eid_list().size() %zu"</span>, 
<a name="l00861"></a>00861                         iter-&gt;full_length(), iter-&gt;eid_list().size());
<a name="l00862"></a>00862             <span class="comment">// Either it has no correlator, or it wasn't in the list.</span>
<a name="l00863"></a>00863             <span class="comment">// So we will process it in the digest</span>
<a name="l00864"></a>00864                     
<a name="l00865"></a>00865             <span class="comment">/**********  start preamble processing  **********/</span>
<a name="l00866"></a>00866             buf = iter-&gt;contents().buf();
<a name="l00867"></a>00867             len = iter-&gt;full_length();
<a name="l00868"></a>00868                     
<a name="l00869"></a>00869                     
<a name="l00870"></a>00870             <span class="comment">// Process block type</span>
<a name="l00871"></a>00871             c = *buf++;
<a name="l00872"></a>00872             len--;
<a name="l00873"></a>00873             digest( bundle, block, &amp;*iter, &amp;c, 1, r);
<a name="l00874"></a>00874                     
<a name="l00875"></a>00875             <span class="comment">// Process flags</span>
<a name="l00876"></a>00876             sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>( buf, len, &amp;target_flags);
<a name="l00877"></a>00877             buf += sdnv_len;
<a name="l00878"></a>00878             len -= sdnv_len;
<a name="l00879"></a>00879                     
<a name="l00880"></a>00880             flags_save = target_flags;
<a name="l00881"></a>00881             target_flags &amp;= mask;
<a name="l00882"></a>00882             target_flags = htonq(target_flags);
<a name="l00883"></a>00883             digest( bundle, block, &amp;*iter, &amp;target_flags, <span class="keyword">sizeof</span>(target_flags), r);
<a name="l00884"></a>00884                     
<a name="l00885"></a>00885             <span class="comment">// EID list is next, starting with the count although we don't digest it</span>
<a name="l00886"></a>00886             <span class="keywordflow">if</span> ( flags_save &amp; BundleProtocol::BLOCK_FLAG_EID_REFS ) {                    
<a name="l00887"></a>00887                 sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>(buf, len, &amp;eid_ref_count);
<a name="l00888"></a>00888                 buf += sdnv_len;
<a name="l00889"></a>00889                 len -= sdnv_len;
<a name="l00890"></a>00890                 log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest() eid_ref_count %llu"</span>, U64FMT(eid_ref_count));
<a name="l00891"></a>00891                                                 
<a name="l00892"></a>00892                 <span class="comment">// each ref is a pair of SDNVs, so process 2 * eid_ref_count text pieces</span>
<a name="l00893"></a>00893                 <span class="keywordflow">if</span> ( eid_ref_count &gt; 0 ) {
<a name="l00894"></a>00894                     <span class="keywordflow">for</span> ( u_int32_t i = 0; i &lt; (2 * eid_ref_count); i++ ) {
<a name="l00895"></a>00895                         sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>(buf, len, &amp;offset);
<a name="l00896"></a>00896                         buf += sdnv_len;
<a name="l00897"></a>00897                         len -= sdnv_len;
<a name="l00898"></a>00898                                 
<a name="l00899"></a>00899                         ptr = dict + offset;    <span class="comment">//point at item in dictionary</span>
<a name="l00900"></a>00900                         plen = strlen(ptr);     <span class="comment">// length *without* NULL-terminator</span>
<a name="l00901"></a>00901                         digest( bundle, block, &amp;*iter, ptr, plen, r);
<a name="l00902"></a>00902                     }
<a name="l00903"></a>00903                 }       
<a name="l00904"></a>00904             }
<a name="l00905"></a>00905 
<a name="l00906"></a>00906             <span class="comment">// Process data length</span>
<a name="l00907"></a>00907             sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>(buf, len, &amp;target_content_length);
<a name="l00908"></a>00908             buf += sdnv_len;
<a name="l00909"></a>00909             len -= sdnv_len;
<a name="l00910"></a>00910                     
<a name="l00911"></a>00911             target_content_length = htonq(target_content_length);
<a name="l00912"></a>00912             digest( bundle, block, &amp;*iter, &amp;target_content_length, <span class="keyword">sizeof</span>(target_content_length), r);
<a name="l00913"></a>00913                     
<a name="l00914"></a>00914             <span class="comment">// start of data is where to start main digest</span>
<a name="l00915"></a>00915             offset = buf - iter-&gt;contents().buf();
<a name="l00916"></a>00916             <a class="code" href="SDNV_8cc.html#ca68c0d4ac8df0838e209fb5300f7be3">ASSERT</a>(offset == iter-&gt;data_offset());
<a name="l00917"></a>00917             <span class="comment">/**********  end of preamble processing  **********/</span>
<a name="l00918"></a>00918                     
<a name="l00919"></a>00919                     
<a name="l00920"></a>00920             <span class="comment">/**********  start content processing  **********/</span>
<a name="l00921"></a>00921                     
<a name="l00922"></a>00922             <span class="comment">// if it's the current block, we have to exclude security-result data.</span>
<a name="l00923"></a>00923             <span class="comment">// Note that security-result-length *is* included</span>
<a name="l00924"></a>00924             <span class="keywordflow">if</span> ( (&amp;*iter) == block ) {
<a name="l00925"></a>00925 
<a name="l00926"></a>00926                 <span class="comment">// ciphersuite number and flags</span>
<a name="l00927"></a>00927                 sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>(buf,
<a name="l00928"></a>00928                                         len,
<a name="l00929"></a>00929                                         &amp;suite_num);
<a name="l00930"></a>00930                 buf += sdnv_len;
<a name="l00931"></a>00931                 len -= sdnv_len;
<a name="l00932"></a>00932 
<a name="l00933"></a>00933                 sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>(buf,
<a name="l00934"></a>00934                                         len,
<a name="l00935"></a>00935                                         &amp;cs_flags);
<a name="l00936"></a>00936                 buf += sdnv_len;
<a name="l00937"></a>00937                 len -= sdnv_len;
<a name="l00938"></a>00938                         
<a name="l00939"></a>00939                 <span class="keywordflow">if</span> ( cs_flags &amp; CS_BLOCK_HAS_RESULT ) {
<a name="l00940"></a>00940                     <span class="comment">// if there's a security-result we have to ease up to it</span>
<a name="l00941"></a>00941                     <span class="keywordflow">if</span> ( cs_flags &amp; CS_BLOCK_HAS_CORRELATOR )
<a name="l00942"></a>00942                         buf += <a class="code" href="num2sdnv_8c.html#fed088663f8704004425cdae2120b9b3">SDNV::len</a>(buf);      <span class="comment">//step over correlator</span>
<a name="l00943"></a>00943                             
<a name="l00944"></a>00944                     <span class="keywordflow">if</span> ( cs_flags &amp; CS_BLOCK_HAS_PARAMS )
<a name="l00945"></a>00945                         buf += <a class="code" href="num2sdnv_8c.html#fed088663f8704004425cdae2120b9b3">SDNV::len</a>(buf);      <span class="comment">//step over params</span>
<a name="l00946"></a>00946                             
<a name="l00947"></a>00947                     <span class="keywordflow">if</span> ( cs_flags &amp; CS_BLOCK_HAS_RESULT ) {
<a name="l00948"></a>00948                         sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>(buf, len, &amp;target_content_length);
<a name="l00949"></a>00949                         buf += sdnv_len;
<a name="l00950"></a>00950                         len -= sdnv_len;
<a name="l00951"></a>00951                         buf += <a class="code" href="num2sdnv_8c.html#fed088663f8704004425cdae2120b9b3">SDNV::len</a>(buf);      <span class="comment">//step over security-result-length field</span>
<a name="l00952"></a>00952                     }
<a name="l00953"></a>00953                             
<a name="l00954"></a>00954                     len = buf - iter-&gt;contents().buf();  <span class="comment">//this is the length to use</span>
<a name="l00955"></a>00955                 }
<a name="l00956"></a>00956                 <span class="comment">// now set buf back to the start of the content</span>
<a name="l00957"></a>00957                 buf = iter-&gt;contents().buf();
<a name="l00958"></a>00958             }
<a name="l00959"></a>00959                     
<a name="l00960"></a>00960             iter-&gt;owner()-&gt;process( Ciphersuite_PS2::digest,
<a name="l00961"></a>00961                                     bundle,
<a name="l00962"></a>00962                                     block,
<a name="l00963"></a>00963                                     &amp;*iter,
<a name="l00964"></a>00964                                     offset,
<a name="l00965"></a>00965                                     len,
<a name="l00966"></a>00966                                     r);
<a name="l00967"></a>00967             <span class="comment">/**********  end of content processing  **********/</span>
<a name="l00968"></a>00968             log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest() digest done %p"</span>, &amp;*iter);
<a name="l00969"></a>00969 
<a name="l00970"></a>00970         }
<a name="l00971"></a>00971         <span class="keywordflow">break</span>;  <span class="comment">//break from switch, continue for "for" loop</span>
<a name="l00972"></a>00972             
<a name="l00973"></a>00973         <span class="keywordflow">case</span> BundleProtocol::PAYLOAD_BLOCK:
<a name="l00974"></a>00974         {
<a name="l00975"></a>00975                     
<a name="l00976"></a>00976             <span class="comment">/**********  start preamble processing  **********/</span>
<a name="l00977"></a>00977             buf = iter-&gt;contents().buf();
<a name="l00978"></a>00978             len = iter-&gt;full_length();
<a name="l00979"></a>00979                     
<a name="l00980"></a>00980                     
<a name="l00981"></a>00981             <span class="comment">// Process block type</span>
<a name="l00982"></a>00982             c = *buf++;
<a name="l00983"></a>00983             len--;
<a name="l00984"></a>00984             digest( bundle, block, &amp;*iter, &amp;c, 1, r);
<a name="l00985"></a>00985                     
<a name="l00986"></a>00986             <span class="comment">// Process flags</span>
<a name="l00987"></a>00987             sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>( buf, len, &amp;target_flags);
<a name="l00988"></a>00988             buf += sdnv_len;
<a name="l00989"></a>00989             len -= sdnv_len;
<a name="l00990"></a>00990                                         
<a name="l00991"></a>00991             flags_save = target_flags;
<a name="l00992"></a>00992             target_flags &amp;= mask;
<a name="l00993"></a>00993             target_flags = htonq(target_flags);
<a name="l00994"></a>00994             digest( bundle, block, &amp;*iter, &amp;target_flags, <span class="keyword">sizeof</span>(target_flags), r);
<a name="l00995"></a>00995                     
<a name="l00996"></a>00996             <span class="comment">// EID list is next, starting with the count although we don't digest it</span>
<a name="l00997"></a>00997             <span class="keywordflow">if</span> ( flags_save &amp; BundleProtocol::BLOCK_FLAG_EID_REFS ) {                    
<a name="l00998"></a>00998                 sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>(buf, len, &amp;eid_ref_count);
<a name="l00999"></a>00999                 buf += sdnv_len;
<a name="l01000"></a>01000                 len -= sdnv_len;
<a name="l01001"></a>01001                                                 
<a name="l01002"></a>01002                 <span class="comment">// each ref is a pair of SDNVs, so process 2 * eid_ref_count text pieces</span>
<a name="l01003"></a>01003                 <span class="keywordflow">if</span> ( eid_ref_count &gt; 0 ) {
<a name="l01004"></a>01004                     <span class="keywordflow">for</span> ( u_int32_t i = 0; i &lt; (2 * eid_ref_count); i++ ) {
<a name="l01005"></a>01005                         sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>(buf, len, &amp;offset);
<a name="l01006"></a>01006                         buf += sdnv_len;
<a name="l01007"></a>01007                         len -= sdnv_len;
<a name="l01008"></a>01008                                 
<a name="l01009"></a>01009                         ptr = dict + offset;    <span class="comment">//point at item in dictionary</span>
<a name="l01010"></a>01010                         plen = strlen(ptr);     <span class="comment">// length *without* NULL-terminator</span>
<a name="l01011"></a>01011                         digest( bundle, block, &amp;*iter, ptr, plen, r);
<a name="l01012"></a>01012                     }
<a name="l01013"></a>01013                 }       
<a name="l01014"></a>01014             }
<a name="l01015"></a>01015 
<a name="l01016"></a>01016             <span class="comment">// Process data length</span>
<a name="l01017"></a>01017             sdnv_len = <a class="code" href="SDNV_8cc.html#151d178617a7c2f598cfd7630ebeb7b4">SDNV::decode</a>(buf, len, &amp;target_content_length);
<a name="l01018"></a>01018             buf += sdnv_len;
<a name="l01019"></a>01019             len -= sdnv_len;
<a name="l01020"></a>01020                     
<a name="l01021"></a>01021             target_content_length = htonq(target_content_length);
<a name="l01022"></a>01022             digest( bundle, block, &amp;*iter, &amp;target_content_length, <span class="keyword">sizeof</span>(target_content_length), r);
<a name="l01023"></a>01023                     
<a name="l01024"></a>01024             <span class="comment">// start of data is where to start main digest</span>
<a name="l01025"></a>01025             offset = buf - iter-&gt;contents().buf();
<a name="l01026"></a>01026             <a class="code" href="SDNV_8cc.html#ca68c0d4ac8df0838e209fb5300f7be3">ASSERT</a>(offset == iter-&gt;data_offset());
<a name="l01027"></a>01027             <span class="comment">/**********  end of preamble processing  **********/</span>
<a name="l01028"></a>01028                     
<a name="l01029"></a>01029             <span class="comment">/**********  start content processing  **********/</span>
<a name="l01030"></a>01030                                         
<a name="l01031"></a>01031             iter-&gt;owner()-&gt;process( Ciphersuite_PS2::digest,
<a name="l01032"></a>01032                                     bundle,
<a name="l01033"></a>01033                                     block,
<a name="l01034"></a>01034                                     &amp;*iter,
<a name="l01035"></a>01035                                     offset,
<a name="l01036"></a>01036                                     len,
<a name="l01037"></a>01037                                     r);
<a name="l01038"></a>01038             <span class="comment">/**********  end of content processing  **********/</span>
<a name="l01039"></a>01039             log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest() PAYLOAD_BLOCK done"</span>);
<a name="l01040"></a>01040         }
<a name="l01041"></a>01041         <span class="keywordflow">break</span>;  <span class="comment">//break from switch, continue for "for" loop</span>
<a name="l01042"></a>01042                 
<a name="l01043"></a>01043         <span class="keywordflow">default</span>:
<a name="l01044"></a>01044             <span class="keywordflow">continue</span>;
<a name="l01045"></a>01045         
<a name="l01046"></a>01046         }   <span class="comment">// end of switch  </span>
<a name="l01047"></a>01047     }       <span class="comment">// end of loop-through-all-the-blocks</span>
<a name="l01048"></a>01048     
<a name="l01049"></a>01049     
<a name="l01050"></a>01050     err = EVP_DigestFinal_ex(&amp;ctx, ps_digest, &amp;rlen);
<a name="l01051"></a>01051     <span class="comment">// XXX-pl  check error -- zero is failure</span>
<a name="l01052"></a>01052     
<a name="l01053"></a>01053     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest() digest      0x%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx%2.2hhx"</span>,
<a name="l01054"></a>01054                 ps_digest[0], ps_digest[1], ps_digest[2], ps_digest[3], ps_digest[4], ps_digest[5], ps_digest[6], ps_digest[7], ps_digest[8], ps_digest[9], ps_digest[10], 
<a name="l01055"></a>01055                 ps_digest[11], ps_digest[12], ps_digest[13], ps_digest[14], ps_digest[15], ps_digest[16], ps_digest[17], ps_digest[18], ps_digest[19]);
<a name="l01056"></a>01056 
<a name="l01057"></a>01057     EVP_MD_CTX_cleanup(&amp;ctx);
<a name="l01058"></a>01058     
<a name="l01059"></a>01059     db.reserve(digest_len);
<a name="l01060"></a>01060     db.set_len(digest_len);
<a name="l01061"></a>01061     memcpy(db.buf(), ps_digest, digest_len);
<a name="l01062"></a>01062     
<a name="l01063"></a>01063     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"Ciphersuite_PS2::create_digest() done"</span>);
<a name="l01064"></a>01064     
<a name="l01065"></a>01065 }
<a name="l01066"></a>01066 
<a name="l01067"></a>01067 
<a name="l01068"></a>01068 <span class="comment">//----------------------------------------------------------------------</span>
<a name="l01069"></a>01069 <span class="keywordtype">int</span>
<a name="l01070"></a>01070 Ciphersuite_PS2::read_primary(<span class="keyword">const</span> Bundle*    bundle, 
<a name="l01071"></a>01071                               BlockInfo*       block,
<a name="l01072"></a>01072                               PrimaryBlock_ex&amp; primary,
<a name="l01073"></a>01073                               <span class="keywordtype">char</span>**           dict)
<a name="l01074"></a>01074 {
<a name="l01075"></a>01075     u_char*         buf;
<a name="l01076"></a>01076     <span class="keywordtype">size_t</span>          len;
<a name="l01077"></a>01077 
<a name="l01078"></a>01078     <span class="keywordtype">size_t</span> primary_len = block-&gt;full_length();
<a name="l01079"></a>01079 
<a name="l01080"></a>01080     buf = block-&gt;writable_contents()-&gt;buf();
<a name="l01081"></a>01081     len = block-&gt;writable_contents()-&gt;len();
<a name="l01082"></a>01082 
<a name="l01083"></a>01083     <a class="code" href="SDNV_8cc.html#ca68c0d4ac8df0838e209fb5300f7be3">ASSERT</a>(primary_len == len);
<a name="l01084"></a>01084 
<a name="l01085"></a>01085     primary.version = *(u_int8_t*)buf;
<a name="l01086"></a>01086     buf += 1;
<a name="l01087"></a>01087     len -= 1;
<a name="l01088"></a>01088     
<a name="l01089"></a>01089     <span class="keywordflow">if</span> (primary.version != BundleProtocol::CURRENT_VERSION) {
<a name="l01090"></a>01090         log_warn_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"protocol version mismatch %d != %d"</span>,
<a name="l01091"></a>01091                    primary.version, BundleProtocol::CURRENT_VERSION);
<a name="l01092"></a>01092         <span class="keywordflow">return</span> -1;
<a name="l01093"></a>01093     }
<a name="l01094"></a>01094     
<a name="l01095"></a>01095 <span class="preprocessor">#define PBP_READ_SDNV(location) { \</span>
<a name="l01096"></a>01096 <span class="preprocessor">    int sdnv_len = SDNV::decode(buf, len, location); \</span>
<a name="l01097"></a>01097 <span class="preprocessor">    if (sdnv_len &lt; 0) \</span>
<a name="l01098"></a>01098 <span class="preprocessor">        goto tooshort; \</span>
<a name="l01099"></a>01099 <span class="preprocessor">    buf += sdnv_len; \</span>
<a name="l01100"></a>01100 <span class="preprocessor">    len -= sdnv_len; }</span>
<a name="l01101"></a>01101 <span class="preprocessor"></span>    
<a name="l01102"></a>01102     <span class="comment">// Grab the SDNVs representing the flags and the block length.</span>
<a name="l01103"></a>01103     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.processing_flags);
<a name="l01104"></a>01104     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.block_length);
<a name="l01105"></a>01105 
<a name="l01106"></a>01106     log_debug_p(<a class="code" href="namespacedtn.html#68bf4270dd0a7e5e8390869b83889922">log</a>, <span class="stringliteral">"parsed primary block: version %d length %u"</span>,
<a name="l01107"></a>01107                 primary.version, block-&gt;data_length());    
<a name="l01108"></a>01108     
<a name="l01109"></a>01109 <span class="comment">/*</span>
<a name="l01110"></a>01110 <span class="comment"> * it may be that the ASSERT which follows is not appropriate because we're doing this</span>
<a name="l01111"></a>01111 <span class="comment"> * on the outbound side and it seems that data_length() is the same as full_length().</span>
<a name="l01112"></a>01112 <span class="comment"> * But what's remaining should be the same as what is promised.</span>
<a name="l01113"></a>01113 <span class="comment"> log_debug_p(log, "parsed primary block: version %d length %u full_length %u len remaining %zu",</span>
<a name="l01114"></a>01114 <span class="comment"> primary.version, block-&gt;data_length(), block-&gt;full_length(), len);    </span>
<a name="l01115"></a>01115 <span class="comment"> // What remains in the buffer should now be equal to what the block-length</span>
<a name="l01116"></a>01116 <span class="comment"> // field advertised.</span>
<a name="l01117"></a>01117 <span class="comment"> ASSERT(len == block-&gt;data_length());</span>
<a name="l01118"></a>01118 <span class="comment">*/</span>
<a name="l01119"></a>01119     <a class="code" href="SDNV_8cc.html#ca68c0d4ac8df0838e209fb5300f7be3">ASSERT</a>(len == primary.block_length);
<a name="l01120"></a>01120     
<a name="l01121"></a>01121     <span class="comment">// Read the various SDNVs up to the start of the dictionary.</span>
<a name="l01122"></a>01122     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.dest_scheme_offset);
<a name="l01123"></a>01123     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.dest_ssp_offset);
<a name="l01124"></a>01124     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.source_scheme_offset);
<a name="l01125"></a>01125     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.source_ssp_offset);
<a name="l01126"></a>01126     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.replyto_scheme_offset);
<a name="l01127"></a>01127     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.replyto_ssp_offset);
<a name="l01128"></a>01128     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.custodian_scheme_offset);
<a name="l01129"></a>01129     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.custodian_ssp_offset);
<a name="l01130"></a>01130     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.creation_time);
<a name="l01131"></a>01131     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.creation_sequence);
<a name="l01132"></a>01132     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.lifetime);
<a name="l01133"></a>01133     <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.dictionary_length);
<a name="l01134"></a>01134     *dict = <span class="keyword">reinterpret_cast&lt;</span><span class="keywordtype">char</span>*<span class="keyword">&gt;</span>(buf);
<a name="l01135"></a>01135     <span class="keywordflow">if</span> (bundle-&gt;is_fragment()) {
<a name="l01136"></a>01136         <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.fragment_offset);
<a name="l01137"></a>01137         <a class="code" href="PrimaryBlockProcessor_8cc.html#d91d604c84c78ba383d0919b801f77ad">PBP_READ_SDNV</a>(&amp;primary.original_length);
<a name="l01138"></a>01138     }
<a name="l01139"></a>01139 <span class="preprocessor">#undef PBP_READ_SDNV</span>
<a name="l01140"></a>01140 <span class="preprocessor"></span>    <span class="keywordflow">return</span> 0;
<a name="l01141"></a>01141     
<a name="l01142"></a>01142  tooshort:
<a name="l01143"></a>01143     <span class="keywordflow">return</span> -1;
<a name="l01144"></a>01144 }
<a name="l01145"></a>01145 
<a name="l01146"></a>01146 
<a name="l01147"></a>01147 } <span class="comment">// namespace dtn</span>
<a name="l01148"></a>01148 
<a name="l01149"></a>01149 <span class="preprocessor">#endif </span><span class="comment">/* BSP_ENABLED */</span>
</pre></div></div>
<hr size="1"><address style="text-align: right;"><small>Generated on Mon Jul 21 14:09:38 2008 for DTN Reference Implementation by&nbsp;
<a href="http://www.doxygen.org/index.html">
<img src="doxygen.png" alt="doxygen" align="middle" border="0"></a> 1.5.6 </small></address>
</body>
</html>