106 lines
3.7 KiB
C#
106 lines
3.7 KiB
C#
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
|
|
#pragma warning disable
|
|
using System;
|
|
using System.Collections;
|
|
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Agreement;
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Parameters;
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Math;
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
|
|
|
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Tls
|
|
{
|
|
public class DefaultTlsDHVerifier
|
|
: TlsDHVerifier
|
|
{
|
|
public static readonly int DefaultMinimumPrimeBits = 2048;
|
|
|
|
protected static readonly IList DefaultGroups = BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateArrayList();
|
|
|
|
private static void AddDefaultGroup(DHParameters dhParameters)
|
|
{
|
|
DefaultGroups.Add(dhParameters);
|
|
}
|
|
|
|
static DefaultTlsDHVerifier()
|
|
{
|
|
AddDefaultGroup(DHStandardGroups.rfc7919_ffdhe2048);
|
|
AddDefaultGroup(DHStandardGroups.rfc7919_ffdhe3072);
|
|
AddDefaultGroup(DHStandardGroups.rfc7919_ffdhe4096);
|
|
AddDefaultGroup(DHStandardGroups.rfc7919_ffdhe6144);
|
|
AddDefaultGroup(DHStandardGroups.rfc7919_ffdhe8192);
|
|
|
|
AddDefaultGroup(DHStandardGroups.rfc3526_1536);
|
|
AddDefaultGroup(DHStandardGroups.rfc3526_2048);
|
|
AddDefaultGroup(DHStandardGroups.rfc3526_3072);
|
|
AddDefaultGroup(DHStandardGroups.rfc3526_4096);
|
|
AddDefaultGroup(DHStandardGroups.rfc3526_6144);
|
|
AddDefaultGroup(DHStandardGroups.rfc3526_8192);
|
|
}
|
|
|
|
// IList is (DHParameters)
|
|
protected readonly IList mGroups;
|
|
protected readonly int mMinimumPrimeBits;
|
|
|
|
/// <summary>Accept various standard DH groups with 'P' at least <c>DefaultMinimumPrimeBits</c> bits.</summary>
|
|
public DefaultTlsDHVerifier()
|
|
: this(DefaultMinimumPrimeBits)
|
|
{
|
|
}
|
|
|
|
/// <summary>Accept various standard DH groups with 'P' at least the specified number of bits.</summary>
|
|
public DefaultTlsDHVerifier(int minimumPrimeBits)
|
|
: this(DefaultGroups, minimumPrimeBits)
|
|
{
|
|
}
|
|
|
|
/// <summary>Accept a custom set of group parameters, subject to a minimum bitlength for 'P'.</summary>
|
|
/// <param name="groups">An <c>IList</c> of acceptable <c>DHParameters</c>.</param>
|
|
/// <param name="minimumPrimeBits">The minimum acceptable bitlength of the 'P' parameter.</param>
|
|
public DefaultTlsDHVerifier(IList groups, int minimumPrimeBits)
|
|
{
|
|
this.mGroups = groups;
|
|
this.mMinimumPrimeBits = minimumPrimeBits;
|
|
}
|
|
|
|
public virtual bool Accept(DHParameters dhParameters)
|
|
{
|
|
return CheckMinimumPrimeBits(dhParameters) && CheckGroup(dhParameters);
|
|
}
|
|
|
|
public virtual int MinimumPrimeBits
|
|
{
|
|
get { return mMinimumPrimeBits; }
|
|
}
|
|
|
|
protected virtual bool AreGroupsEqual(DHParameters a, DHParameters b)
|
|
{
|
|
return a == b || (AreParametersEqual(a.P, b.P) && AreParametersEqual(a.G, b.G));
|
|
}
|
|
|
|
protected virtual bool AreParametersEqual(BigInteger a, BigInteger b)
|
|
{
|
|
return a == b || a.Equals(b);
|
|
}
|
|
|
|
protected virtual bool CheckGroup(DHParameters dhParameters)
|
|
{
|
|
foreach (DHParameters group in mGroups)
|
|
{
|
|
if (AreGroupsEqual(dhParameters, group))
|
|
{
|
|
return true;
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
protected virtual bool CheckMinimumPrimeBits(DHParameters dhParameters)
|
|
{
|
|
return dhParameters.P.BitLength >= MinimumPrimeBits;
|
|
}
|
|
}
|
|
}
|
|
#pragma warning restore
|
|
#endif
|