init commit

output/Libraries/BouncyCastle.Crypto/Org/BouncyCastle/Crmf/EncryptedValueBuilder.cs

@@ -0,0 +1,110 @@
+using System;
+using System.IO;
+using Org.BouncyCastle.Asn1;
+using Org.BouncyCastle.Asn1.Crmf;
+using Org.BouncyCastle.Asn1.Pkcs;
+using Org.BouncyCastle.Asn1.X509;
+using Org.BouncyCastle.Crypto;
+using Org.BouncyCastle.Crypto.Parameters;
+using Org.BouncyCastle.Pkcs;
+using Org.BouncyCastle.Utilities;
+using Org.BouncyCastle.Utilities.IO;
+using Org.BouncyCastle.X509;
+
+namespace Org.BouncyCastle.Crmf;
+
+public class EncryptedValueBuilder
+{
+	private readonly IKeyWrapper wrapper;
+
+	private readonly ICipherBuilderWithKey encryptor;
+
+	private readonly IEncryptedValuePadder padder;
+
+	public EncryptedValueBuilder(IKeyWrapper wrapper, ICipherBuilderWithKey encryptor)
+		: this(wrapper, encryptor, null)
+	{
+	}
+
+	public EncryptedValueBuilder(IKeyWrapper wrapper, ICipherBuilderWithKey encryptor, IEncryptedValuePadder padder)
+	{
+		this.wrapper = wrapper;
+		this.encryptor = encryptor;
+		this.padder = padder;
+	}
+
+	public EncryptedValue Build(char[] revocationPassphrase)
+	{
+		return EncryptData(PadData(Strings.ToUtf8ByteArray(revocationPassphrase)));
+	}
+
+	public EncryptedValue Build(X509Certificate holder)
+	{
+		try
+		{
+			return EncryptData(PadData(holder.GetEncoded()));
+		}
+		catch (IOException ex)
+		{
+			throw new CrmfException("cannot encode certificate: " + ex.Message, ex);
+		}
+	}
+
+	public EncryptedValue Build(PrivateKeyInfo privateKeyInfo)
+	{
+		Pkcs8EncryptedPrivateKeyInfoBuilder pkcs8EncryptedPrivateKeyInfoBuilder = new Pkcs8EncryptedPrivateKeyInfoBuilder(privateKeyInfo);
+		AlgorithmIdentifier privateKeyAlgorithm = privateKeyInfo.PrivateKeyAlgorithm;
+		AlgorithmIdentifier symmAlg = (AlgorithmIdentifier)encryptor.AlgorithmDetails;
+		try
+		{
+			Pkcs8EncryptedPrivateKeyInfo pkcs8EncryptedPrivateKeyInfo = pkcs8EncryptedPrivateKeyInfoBuilder.Build(encryptor);
+			DerBitString encSymmKey = new DerBitString(wrapper.Wrap(((KeyParameter)encryptor.Key).GetKey()).Collect());
+			AlgorithmIdentifier keyAlg = (AlgorithmIdentifier)wrapper.AlgorithmDetails;
+			Asn1OctetString valueHint = null;
+			return new EncryptedValue(privateKeyAlgorithm, symmAlg, encSymmKey, keyAlg, valueHint, new DerBitString(pkcs8EncryptedPrivateKeyInfo.GetEncryptedData()));
+		}
+		catch (Exception ex)
+		{
+			throw new CrmfException("cannot wrap key: " + ex.Message, ex);
+		}
+	}
+
+	private EncryptedValue EncryptData(byte[] data)
+	{
+		MemoryOutputStream memoryOutputStream = new MemoryOutputStream();
+		Stream stream = encryptor.BuildCipher(memoryOutputStream).Stream;
+		try
+		{
+			stream.Write(data, 0, data.Length);
+			stream.Close();
+		}
+		catch (IOException ex)
+		{
+			throw new CrmfException("cannot process data: " + ex.Message, ex);
+		}
+		AlgorithmIdentifier intendedAlg = null;
+		AlgorithmIdentifier symmAlg = (AlgorithmIdentifier)encryptor.AlgorithmDetails;
+		DerBitString encSymmKey;
+		try
+		{
+			encSymmKey = new DerBitString(wrapper.Wrap(((KeyParameter)encryptor.Key).GetKey()).Collect());
+		}
+		catch (Exception ex2)
+		{
+			throw new CrmfException("cannot wrap key: " + ex2.Message, ex2);
+		}
+		AlgorithmIdentifier keyAlg = (AlgorithmIdentifier)wrapper.AlgorithmDetails;
+		Asn1OctetString valueHint = null;
+		DerBitString encValue = new DerBitString(memoryOutputStream.ToArray());
+		return new EncryptedValue(intendedAlg, symmAlg, encSymmKey, keyAlg, valueHint, encValue);
+	}
+
+	private byte[] PadData(byte[] data)
+	{
+		if (padder != null)
+		{
+			return padder.GetPaddedData(data);
+		}
+		return data;
+	}
+}