SecureMessaging.h

gehe zur Dokumentation dieser Datei

 
#pragma once
 
#include "asn1/ASN1TemplateUtil.h"
#include "CommandApdu.h"
#include "pace/CipherMac.h"
#include "pace/SymmetricCipher.h"
#include "ResponseApdu.h"
 
#include <QByteArray>
 
 
namespace governikus
{
 
struct SM_PROTECTED_LE
    : public ASN1_OCTET_STRING {};
DECLARE_ASN1_OBJECT(SM_PROTECTED_LE)
 
 
class SecureMessaging final
{
    private:
        SymmetricCipher mCipher;
        CipherMac mCipherMac;
        quint32 mSendSequenceCounter;
 
        [[nodiscard]] QByteArray padToCipherBlockSize(const QByteArray& pData) const;
        [[nodiscard]] QByteArray unpadFromCipherBlockSize(const QByteArray& pData) const;
        [[nodiscard]] QByteArray createSecuredHeader(const CommandApdu& pCommandApdu) const;
        QByteArray createMac(const QByteArray& pSecuredHeader, const QByteArray& pFormattedEncryptedData, const QByteArray& pSecuredLe);
        [[nodiscard]] int createNewLe(const QByteArray& pSecuredData, int pOldLe) const;
        [[nodiscard]] QByteArray getSendSequenceCounter() const;
        QByteArray getEncryptedIv();
 
        [[nodiscard]] QByteArray createSecuredLe(int pLe) const;
 
    public:
        SecureMessaging(const QByteArray& pPaceAlgorithm, const QByteArray& pEncKey, const QByteArray& pMacKey);
        ~SecureMessaging() = default;
 
        [[nodiscard]] bool isInitialized() const;
 
        CommandApdu encrypt(const CommandApdu& pCommandApdu);
 
        ResponseApdu decrypt(const ResponseApdu& pEncryptedResponseApdu);
};
 
} // namespace governikus