david
2824855ea7
- Recompilación en Delphi10 de todos los paquetes de RO para generar las DCU's en Lib\D10 - Recompilación en Delphi10 de todos los paquetes de DA para generar las DCU's en Lib\D10 git-svn-id: https://192.168.0.254/svn/Componentes.Terceros.RemObjects@9 b6239004-a887-0f4b-9937-50029ccdca16
307 lines
12 KiB
ObjectPascal
307 lines
12 KiB
ObjectPascal
unit uRODXSecurity;
|
||
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
// Unit: DXSecurity
|
||
// Author: G.E. Ozz Nixon Jr. (onixon@dxsock.com)
|
||
// ========================================================================
|
||
// Source Owner: DX, Inc. 1995-2002
|
||
// Copyright: All code is the property of DX, Inc. Licensed for
|
||
// resell by Brain Patchwork DX (tm) and part of the
|
||
// DX (r) product lines, which are (c) 1999-2002
|
||
// DX, Inc. Source may not be distributed without
|
||
// written permission from both Brain Patchwork DX,
|
||
// and DX, Inc.
|
||
// License: (Reminder), None of this code can be added to other
|
||
// developer products without permission. This includes
|
||
// but not limited to DCU's, DCP's, DLL's, OCX's, or
|
||
// any other form of merging our technologies. All of
|
||
// your products released to a public consumer be it
|
||
// shareware, freeware, commercial, etc. must contain a
|
||
// license notification somewhere visible in the
|
||
// application.
|
||
// Example is Internet Explorer - Help->About screen
|
||
// shows the licensed code contained in the application.
|
||
// Code Version: (3rd Generation Code)
|
||
// ========================================================================
|
||
// Description:
|
||
// ========================================================================
|
||
// Content all certificates and security structures and types.
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
|
||
interface
|
||
|
||
{$IFDEF VER100}
|
||
Uses
|
||
Windows;
|
||
|
||
Type
|
||
LongWord=DWord;
|
||
{$ENDIF}
|
||
|
||
Const
|
||
//Encoding/decoding algoritms
|
||
X509_ASN_ENCODING = 1;
|
||
PKCS_7_ASN_ENCODING = 2;
|
||
|
||
//certificat vervion
|
||
CERT_V1=1;
|
||
CERT_V2=2;
|
||
CERT_V3=3;
|
||
|
||
//OID of algorithm
|
||
szOID_RSA='1.2.840.113549';
|
||
szOID_PKCS='1.2.840.113549.1';
|
||
szOID_RSA_HASH='1.2.840.113549.2';
|
||
szOID_RSA_ENCRYPT='1.2.840.113549.3';
|
||
szOID_PKCS_1='1.2.840.113549.1.1';
|
||
szOID_PKCS_2='1.2.840.113549.1.2';
|
||
szOID_PKCS_3='1.2.840.113549.1.3';
|
||
szOID_PKCS_4='1.2.840.113549.1.4';
|
||
szOID_PKCS_5='1.2.840.113549.1.5';
|
||
szOID_PKCS_6='1.2.840.113549.1.6';
|
||
szOID_PKCS_7='1.2.840.113549.1.7';
|
||
szOID_PKCS_8='1.2.840.113549.1.8';
|
||
szOID_PKCS_9='1.2.840.113549.1.9';
|
||
szOID_PKCS_10='1.2.840.113549.1.10';
|
||
szOID_PKCS_12='1.2.840.113549.1.12';
|
||
szOID_RSA_MD2='1.2.840.113549.1.1.2';
|
||
szOID_RSA_MD4='1.2.840.113549.1.1.3';
|
||
szOID_RSA_MD5='1.2.840.113549.1.1.4';
|
||
szOID_RSA_RSA='1.2.840.113549.1.1.1';
|
||
szOID_RSA_MD2RSA='1.2.840.113549.1.1.2';
|
||
szOID_RSA_MD4RSA='1.2.840.113549.1.1.3';
|
||
szOID_RSA_MD5RSA='1.2.840.113549.1.1.4';
|
||
szOID_RSA_SHA1RSA='1.2.840.113549.1.1.5';
|
||
szOID_RSA_SETOAEP_RSA='1.2.840.113549.1.1.5';
|
||
szOID_RSA_DH='1.2.840.113549.1.3.1';
|
||
szOID_RSA_data='1.2.840.113549.1.7.1';
|
||
szOID_RSA_signedData='1.2.840.113549.1.7.2';
|
||
szOID_RSA_envelopedData='1.2.840.113549.1.7.3';
|
||
szOID_RSA_signEnvData='1.2.840.113549.1.7.4';
|
||
szOID_RSA_digestedData='1.2.840.113549.1.7.5';
|
||
szOID_RSA_hashedData='1.2.840.113549.1.7.5';
|
||
szOID_RSA_encryptedData='1.2.840.113549.1.7.6';
|
||
szOID_RSA_emailAddr='1.2.840.113549.1.9.1';
|
||
szOID_RSA_unstructName='1.2.840.113549.1.9.2';
|
||
szOID_RSA_contentType='1.2.840.113549.1.9.3';
|
||
szOID_RSA_messageDigest='1.2.840.113549.1.9.4';
|
||
szOID_RSA_signingTime='1.2.840.113549.1.9.5';
|
||
szOID_RSA_counterSign='1.2.840.113549.1.9.6';
|
||
szOID_RSA_challengePwd='1.2.840.113549.1.9.7';
|
||
szOID_RSA_unstructAddr='1.2.840.113549.1.9.8';
|
||
szOID_RSA_extCertAttrs='1.2.840.113549.1.9.9';
|
||
szOID_RSA_SMIMECapabilities='1.2.840.113549.1.9.15';
|
||
szOID_RSA_preferSignedData='1.2.840.113549.1.9.15.1';
|
||
szOID_RSA_RC2CBC='1.2.840.113549.3.2';
|
||
szOID_RSA_RC4='1.2.840.113549.3.4';
|
||
szOID_RSA_DES_EDE3_CBC='1.2.840.113549.3.7';
|
||
szOID_RSA_RC5_CBCPad='1.2.840.113549.3.9';
|
||
szOID_ANSI_x942='1.2.840.10046';
|
||
szOID_ANSI_x942_DH='1.2.840.10046.2.1';
|
||
szOID_X957='1.2.840.10040';
|
||
szOID_X957_DSA='1.2.840.10040.4.1';
|
||
szOID_DATA_STRUCTURE='1.2.840.10040.4.3';
|
||
szOId_DS='2.5';
|
||
szOID_DSALG='2.5.8';
|
||
szOID_DSALG_CRPT='2.5.8.1';
|
||
szOID_DSALG_HASH='2.5.8.2';
|
||
szOID_DSALG_SIGN='2.5.8.3';
|
||
szOID_DSALG_RSA='2.5.8.1.1';
|
||
szOID_OIW='1.3.14';
|
||
szOID_OIWSEC='1.3.14.3.2';
|
||
szOID_OIWSEC_md4RSA='1.3.14.3.2.2';
|
||
szOID_OIWSEC_md5RSA='1.3.14.3.2.3';
|
||
szOID_OIWSEC_md4RSA2='1.3.14.3.2.4';
|
||
szOID_OIWSEC_desECB='1.3.14.3.2.6';
|
||
szOID_OIWSEC_desCBC='1.3.14.3.2.7';
|
||
szOID_OIWSEC_desOFB='1.3.14.3.2.8';
|
||
szOID_OIWSEC_desCFB='1.3.14.3.2.9';
|
||
szOID_OIWSEC_desMAC='1.3.14.3.2.10';
|
||
szOID_OIWSEC_rsaSign='1.3.14.3.2.11';
|
||
szOID_OIWSEC_dsa='1.3.14.3.2.12';
|
||
szOID_OIWSEC_shaDSA='1.3.14.3.2.13';
|
||
szOID_OIWSEC_mdc2RSA='1.3.14.3.2.14';
|
||
szOID_OIWSEC_shaRSA='1.3.14.3.2.15';
|
||
szOID_OIWSEC_dhCommMod='1.3.14.3.2.16';
|
||
szOID_OIWSEC_desEDE='1.3.14.3.2.17';
|
||
szOID_OIWSEC_sha='1.3.14.3.2.18';
|
||
szOID_OIWSEC_mdc2='1.3.14.3.2.19';
|
||
szOID_OIWSEC_dsaComm='1.3.14.3.2.20';
|
||
szOID_OIWSEC_dsaCommSHA='1.3.14.3.2.21';
|
||
szOID_OIWSEC_rsaXchg='1.3.14.3.2.22';
|
||
szOID_OIWSEC_keyHashSeal='1.3.14.3.2.23';
|
||
szOID_OIWSEC_md2RSASign='1.3.14.3.2.24';
|
||
szOID_OIWSEC_md5RSASign='1.3.14.3.2.25';
|
||
szOID_OIWSEC_sha1='1.3.14.3.2.26';
|
||
szOID_OIWSEC_dsaSHA1='1.3.14.3.2.27';
|
||
szOID_OIWSEC_dsaCommSHA1='1.3.14.3.2.28';
|
||
szOID_OIWSEC_sha1RSASign='1.3.14.3.2.29';
|
||
szOID_OIWDIR='1.3.14.7.2';
|
||
szOID_OIWDIR_CRPT='1.3.14.7.2.1';
|
||
szOID_OIWDIR_HASH='1.3.14.7.2.2';
|
||
szOID_OIWDIR_SIGN='1.3.14.7.2.3';
|
||
szOID_OIWDIR_md2='1.3.14.7.2.2.1';
|
||
szOID_OIWDIR_md2RSA='1.3.14.7.2.3.1';
|
||
szOID_INFOSEC='2.16.840.1.101.2.1';
|
||
szOID_INFOSEC_sdnsSignature='2.16.840.1.101.2.1.1.1';
|
||
szOID_INFOSEC_mosaicSignature='2.16.840.1.101.2.1.1.2';
|
||
szOID_INFOSEC_sdnsConfidentiality='2.16.840.1.101.2.1.1.3';
|
||
szOID_INFOSEC_mosaicConfidentiality='2.16.840.1.101.2.1.1.4';
|
||
szOID_INFOSEC_sdnsIntegrity='2.16.840.1.101.2.1.1.5';
|
||
szOID_INFOSEC_mosaicIntegrity='2.16.840.1.101.2.1.1.6';
|
||
szOID_INFOSEC_sdnsTokenProtection='2.16.840.1.101.2.1.1.7';
|
||
szOID_INFOSEC_mosaicTokenProtection='2.16.840.1.101.2.1.1.8';
|
||
szOID_INFOSEC_sdnsKeyManagement='2.16.840.1.101.2.1.1.9';
|
||
szOID_INFOSEC_mosaicKeyManagement='2.16.840.1.101.2.1.1.10';
|
||
szOID_INFOSEC_sdnsKMandSig='2.16.840.1.101.2.1.1.11';
|
||
szOID_INFOSEC_mosaicKMandSig='2.16.840.1.101.2.1.1.12';
|
||
szOID_INFOSEC_SuiteASignature='2.16.840.1.101.2.1.1.13';
|
||
szOID_INFOSEC_SuiteAConfidentiality='2.16.840.1.101.2.1.1.14';
|
||
szOID_INFOSEC_SuiteAIntegrity='2.16.840.1.101.2.1.1.15';
|
||
szOID_INFOSEC_SuiteATokenProtection='2.16.840.1.101.2.1.1.16';
|
||
szOID_INFOSEC_SuiteAKeyManagement='2.16.840.1.101.2.1.1.17';
|
||
szOID_INFOSEC_SuiteAKMandSig='2.16.840.1.101.2.1.1.18';
|
||
szOID_INFOSEC_mosaicUpdatedSig='2.16.840.1.101.2.1.1.19';
|
||
szOID_INFOSEC_mosaicKMandUpdSig='2.16.840.1.101.2.1.1.20';
|
||
szOID_INFOSEC_mosaicUpdatedInteg='2.16.840.1.101.2.1.1.21';
|
||
|
||
//predefine algorithm types
|
||
X509_DSS_PARAMETERS = szOID_OIWSEC_dsa;
|
||
PKCS_RC2_CBC_PARAMETERS = szOID_RSA_RC2CBC;
|
||
X509_OCTET_STRING = szOID_OIWSEC_desCBC;
|
||
{ X509_OCTET_STRING = szOID_RSA_DES_EDE3_CBC;
|
||
X509_OCTET_STRING = szOID_RSA_RC4;}
|
||
|
||
Type
|
||
HCERTSTORE = Cardinal;
|
||
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
// MSDN:
|
||
// The CryptoAPI BLOB structure is used for an arbitrary array of bytes.
|
||
// It is declared in Wincrypt.h and provides
|
||
// flexibility for objects that can contain various data types.
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
TBLOB = record
|
||
cbData:LONGWORD;
|
||
pbData:^BYTE;
|
||
End;
|
||
|
||
TCRYPT_INTEGER_BLOB=TBLOB;
|
||
PCRYPT_INTEGER_BLOB=^TBLOB;
|
||
TCRYPT_UINT_BLOB=TBLOB;
|
||
PCRYPT_UINT_BLOB=^TBLOB;
|
||
TCRYPT_OBJID_BLOB=TBLOB;
|
||
PCRYPT_OBJID_BLOB=^TBLOB;
|
||
TCERT_NAME_BLOB=TBLOB;
|
||
PCERT_NAME_BLOB=^TBLOB;
|
||
TCERT_RDN_VALUE_BLOB=TBLOB;
|
||
PCERT_RDN_VALUE_BLOB=^TBLOB;
|
||
TCERT_BLOB=TBLOB;
|
||
PCERT_BLOB=^TBLOB;
|
||
TCRL_BLOB=TBLOB;
|
||
PCRL_BLOB=^TBLOB;
|
||
TDATA_BLOB=TBLOB;
|
||
PDATA_BLOB=^TBLOB;
|
||
TCRYPT_DATA_BLOB=TBLOB;
|
||
PCRYPT_DATA_BLOB=^TBLOB;
|
||
TCRYPT_HASH_BLOB=TBLOB;
|
||
PCRYPT_HASH_BLOB=^TBLOB;
|
||
TCRYPT_DIGEST_BLOB=TBLOB;
|
||
PCRYPT_DIGEST_BLOB=^TBLOB;
|
||
TCRYPT_DER_BLOB=TBLOB;
|
||
PCRYPT_DER_BLOB=^TBLOB;
|
||
TCRYPT_ATTR_BLOB=TBLOB;
|
||
PCRYPT_ATTR_BLOB=^TBLOB;
|
||
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
// MSDN:
|
||
// The CRYPT_BIT_BLOB structure contains an array of bytes. In a
|
||
// CRYPT_BIT_BLOB the last byte in the array can contain zero to seven
|
||
// unused bits. Therefore, the number of meaningful bits in the pbData
|
||
// member is cbData * 8 <20> cUnusedBits.
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
PCRYPT_BIT_BLOB=^TCRYPT_BIT_BLOB;
|
||
TCRYPT_BIT_BLOB = packed record
|
||
cbData:LONGWORD;
|
||
pbData:^BYTE;
|
||
cUnusedBits:LONGWORD;
|
||
End;
|
||
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
// MSDN:
|
||
// The CRYPT_ALGORITHM_IDENTIFIER structure specifies an algorithm.
|
||
// The structure includes the object identifier (OID) of the algorithm and
|
||
// any needed parameters for that algorithm. The parameters contained in
|
||
// its CRYPT_OBJID_BLOB are encoded.
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
PCRYPT_ALGORITHM_IDENTIFIER=^TCRYPT_ALGORITHM_IDENTIFIER;
|
||
TCRYPT_ALGORITHM_IDENTIFIER = packed record
|
||
pszObjId:String;
|
||
Parameters:TCRYPT_OBJID_BLOB;
|
||
End;
|
||
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
// MSDN:
|
||
// The CERT_PUBLIC_KEY_INFO structure contains a public key and its algorithm.
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
PCERT_PUBLIC_KEY_INFO=^TCERT_PUBLIC_KEY_INFO;
|
||
TCERT_PUBLIC_KEY_INFO = packed record
|
||
Algorithm:TCRYPT_ALGORITHM_IDENTIFIER;
|
||
PublicKey:TCRYPT_BIT_BLOB;
|
||
End;
|
||
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
// MSDN:
|
||
// The CERT_EXTENSION structure contains the extension information for a
|
||
// certificate, Certificate Revocation List (CRL)
|
||
// or Certificate Trust List (CTL).
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
PCERT_EXTENSION = ^TCERT_EXTENSION;
|
||
TCERT_EXTENSION = packed record
|
||
pszObjId:String;
|
||
fCritical:Boolean;
|
||
Value:TCRYPT_OBJID_BLOB;
|
||
End;
|
||
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
// MSDN:
|
||
// The CERT_INFO structure contains a certificate's information.
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
PCERT_INFO=^TCERT_INFO;
|
||
TCERT_INFO = packed record
|
||
dwVersion:LONGWORD;
|
||
SerialNumber:TCRYPT_INTEGER_BLOB;
|
||
SignatureAlgorithm:TCRYPT_ALGORITHM_IDENTIFIER;
|
||
Issuer:TCERT_NAME_BLOB;
|
||
NotBefore:TDATETIME;
|
||
NotAfter:TDATETIME;
|
||
Subject:TCERT_NAME_BLOB;
|
||
SubjectPublicKeyInfo:TCERT_PUBLIC_KEY_INFO;
|
||
IssuerUniqueId:TCRYPT_BIT_BLOB;
|
||
SubjectUniqueId:TCRYPT_BIT_BLOB;
|
||
cExtension:LONGWORD;
|
||
rgExtension:PCERT_EXTENSION;
|
||
End;
|
||
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
// MSDN:
|
||
// The CERT_CONTEXT structure contains both the encoded and decoded
|
||
// representations of a certificate. A certificate context returned by one
|
||
// of the functions defined in Wincrypt.h must be freed by calling the
|
||
// CertFreeCertificateContext function. The CertDuplicateCertificateContext
|
||
// function can be called to make a duplicate copy (which also must be
|
||
// freed by calling CertFreeCertificateContext).
|
||
///////////////////////////////////////////////////////////////////////////////
|
||
PCERT_CONTEXT=^TCERT_CONTEXT;
|
||
TCERT_CONTEXT = packed record
|
||
dwCertEncodingType:LONGWORD;
|
||
pbCertEncoded:^BYTE;
|
||
cbCertEncoded:LONGWORD;
|
||
pCertInfo:^PCERT_INFO;
|
||
hCertStore:HCERTSTORE;
|
||
End;
|
||
|
||
implementation
|
||
|
||
end.
|