CustomNamedCurves.cs 39 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917
  1. #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
  2. #pragma warning disable
  3. using System;
  4. using System.Collections;
  5. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1;
  6. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.GM;
  7. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.Sec;
  8. using BestHTTP.SecureProtocol.Org.BouncyCastle.Asn1.X9;
  9. using BestHTTP.SecureProtocol.Org.BouncyCastle.Math;
  10. using BestHTTP.SecureProtocol.Org.BouncyCastle.Math.EC;
  11. using BestHTTP.SecureProtocol.Org.BouncyCastle.Math.EC.Custom.Djb;
  12. using BestHTTP.SecureProtocol.Org.BouncyCastle.Math.EC.Custom.GM;
  13. using BestHTTP.SecureProtocol.Org.BouncyCastle.Math.EC.Custom.Sec;
  14. using BestHTTP.SecureProtocol.Org.BouncyCastle.Math.EC.Endo;
  15. using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
  16. using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Collections;
  17. using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Encoders;
  18. namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.EC
  19. {
  20. public sealed class CustomNamedCurves
  21. {
  22. private CustomNamedCurves()
  23. {
  24. }
  25. private static BigInteger FromHex(string hex)
  26. {
  27. return new BigInteger(1, Hex.Decode(hex));
  28. }
  29. private static ECCurve ConfigureCurve(ECCurve curve)
  30. {
  31. return curve;
  32. }
  33. private static ECCurve ConfigureCurveGlv(ECCurve c, GlvTypeBParameters p)
  34. {
  35. return c.Configure().SetEndomorphism(new GlvTypeBEndomorphism(c, p)).Create();
  36. }
  37. /*
  38. * curve25519
  39. */
  40. internal class Curve25519Holder
  41. : X9ECParametersHolder
  42. {
  43. private Curve25519Holder() { }
  44. internal static readonly X9ECParametersHolder Instance = new Curve25519Holder();
  45. protected override X9ECParameters CreateParameters()
  46. {
  47. byte[] S = null;
  48. ECCurve curve = ConfigureCurve(new Curve25519());
  49. /*
  50. * NOTE: Curve25519 was specified in Montgomery form. Rewriting in Weierstrass form
  51. * involves substitution of variables, so the base-point x coordinate is 9 + (486662 / 3).
  52. *
  53. * The Curve25519 paper doesn't say which of the two possible y values the base
  54. * point has. The choice here is guided by language in the Ed25519 paper.
  55. *
  56. * (The other possible y value is 5F51E65E475F794B1FE122D388B72EB36DC2B28192839E4DD6163A5D81312C14)
  57. */
  58. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  59. + "2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD245A"
  60. + "20AE19A1B8A086B4E01EDD2C7748D14C923D4D7E6D7C61B229E9C5A27ECED3D9"));
  61. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  62. }
  63. }
  64. /*
  65. * secp128r1
  66. */
  67. internal class SecP128R1Holder
  68. : X9ECParametersHolder
  69. {
  70. private SecP128R1Holder() { }
  71. internal static readonly X9ECParametersHolder Instance = new SecP128R1Holder();
  72. protected override X9ECParameters CreateParameters()
  73. {
  74. byte[] S = Hex.Decode("000E0D4D696E6768756151750CC03A4473D03679");
  75. ECCurve curve = ConfigureCurve(new SecP128R1Curve());
  76. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  77. + "161FF7528B899B2D0C28607CA52C5B86"
  78. + "CF5AC8395BAFEB13C02DA292DDED7A83"));
  79. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  80. }
  81. };
  82. /*
  83. * secp160k1
  84. */
  85. internal class SecP160K1Holder
  86. : X9ECParametersHolder
  87. {
  88. private SecP160K1Holder() { }
  89. internal static readonly X9ECParametersHolder Instance = new SecP160K1Holder();
  90. protected override X9ECParameters CreateParameters()
  91. {
  92. byte[] S = null;
  93. GlvTypeBParameters glv = new GlvTypeBParameters(
  94. new BigInteger("9ba48cba5ebcb9b6bd33b92830b2a2e0e192f10a", 16),
  95. new BigInteger("c39c6c3b3a36d7701b9c71a1f5804ae5d0003f4", 16),
  96. new BigInteger[]{
  97. new BigInteger("9162fbe73984472a0a9e", 16),
  98. new BigInteger("-96341f1138933bc2f505", 16) },
  99. new BigInteger[]{
  100. new BigInteger("127971af8721782ecffa3", 16),
  101. new BigInteger("9162fbe73984472a0a9e", 16) },
  102. new BigInteger("9162fbe73984472a0a9d0590", 16),
  103. new BigInteger("96341f1138933bc2f503fd44", 16),
  104. 176);
  105. ECCurve curve = ConfigureCurveGlv(new SecP160K1Curve(), glv);
  106. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  107. + "3B4C382CE37AA192A4019E763036F4F5DD4D7EBB"
  108. + "938CF935318FDCED6BC28286531733C3F03C4FEE"));
  109. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  110. }
  111. };
  112. /*
  113. * secp160r1
  114. */
  115. internal class SecP160R1Holder
  116. : X9ECParametersHolder
  117. {
  118. private SecP160R1Holder() { }
  119. internal static readonly X9ECParametersHolder Instance = new SecP160R1Holder();
  120. protected override X9ECParameters CreateParameters()
  121. {
  122. byte[] S = Hex.Decode("1053CDE42C14D696E67687561517533BF3F83345");
  123. ECCurve curve = ConfigureCurve(new SecP160R1Curve());
  124. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  125. + "4A96B5688EF573284664698968C38BB913CBFC82"
  126. + "23A628553168947D59DCC912042351377AC5FB32"));
  127. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  128. }
  129. };
  130. /*
  131. * secp160r2
  132. */
  133. internal class SecP160R2Holder
  134. : X9ECParametersHolder
  135. {
  136. private SecP160R2Holder() { }
  137. internal static readonly X9ECParametersHolder Instance = new SecP160R2Holder();
  138. protected override X9ECParameters CreateParameters()
  139. {
  140. byte[] S = Hex.Decode("B99B99B099B323E02709A4D696E6768756151751");
  141. ECCurve curve = ConfigureCurve(new SecP160R2Curve());
  142. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  143. + "52DCB034293A117E1F4FF11B30F7199D3144CE6D"
  144. + "FEAFFEF2E331F296E071FA0DF9982CFEA7D43F2E"));
  145. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  146. }
  147. };
  148. /*
  149. * secp192k1
  150. */
  151. internal class SecP192K1Holder
  152. : X9ECParametersHolder
  153. {
  154. private SecP192K1Holder() { }
  155. internal static readonly X9ECParametersHolder Instance = new SecP192K1Holder();
  156. protected override X9ECParameters CreateParameters()
  157. {
  158. byte[] S = null;
  159. GlvTypeBParameters glv = new GlvTypeBParameters(
  160. new BigInteger("bb85691939b869c1d087f601554b96b80cb4f55b35f433c2", 16),
  161. new BigInteger("3d84f26c12238d7b4f3d516613c1759033b1a5800175d0b1", 16),
  162. new BigInteger[]{
  163. new BigInteger("71169be7330b3038edb025f1", 16),
  164. new BigInteger("-b3fb3400dec5c4adceb8655c", 16) },
  165. new BigInteger[]{
  166. new BigInteger("12511cfe811d0f4e6bc688b4d", 16),
  167. new BigInteger("71169be7330b3038edb025f1", 16) },
  168. new BigInteger("71169be7330b3038edb025f1d0f9", 16),
  169. new BigInteger("b3fb3400dec5c4adceb8655d4c94", 16),
  170. 208);
  171. ECCurve curve = ConfigureCurveGlv(new SecP192K1Curve(), glv);
  172. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  173. + "DB4FF10EC057E9AE26B07D0280B7F4341DA5D1B1EAE06C7D"
  174. + "9B2F2F6D9C5628A7844163D015BE86344082AA88D95E2F9D"));
  175. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  176. }
  177. }
  178. /*
  179. * secp192r1
  180. */
  181. internal class SecP192R1Holder
  182. : X9ECParametersHolder
  183. {
  184. private SecP192R1Holder() { }
  185. internal static readonly X9ECParametersHolder Instance = new SecP192R1Holder();
  186. protected override X9ECParameters CreateParameters()
  187. {
  188. byte[] S = Hex.Decode("3045AE6FC8422F64ED579528D38120EAE12196D5");
  189. ECCurve curve = ConfigureCurve(new SecP192R1Curve());
  190. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  191. + "188DA80EB03090F67CBF20EB43A18800F4FF0AFD82FF1012"
  192. + "07192B95FFC8DA78631011ED6B24CDD573F977A11E794811"));
  193. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  194. }
  195. }
  196. /*
  197. * secp224k1
  198. */
  199. internal class SecP224K1Holder
  200. : X9ECParametersHolder
  201. {
  202. private SecP224K1Holder() { }
  203. internal static readonly X9ECParametersHolder Instance = new SecP224K1Holder();
  204. protected override X9ECParameters CreateParameters()
  205. {
  206. byte[] S = null;
  207. GlvTypeBParameters glv = new GlvTypeBParameters(
  208. new BigInteger("fe0e87005b4e83761908c5131d552a850b3f58b749c37cf5b84d6768", 16),
  209. new BigInteger("60dcd2104c4cbc0be6eeefc2bdd610739ec34e317f9b33046c9e4788", 16),
  210. new BigInteger[]{
  211. new BigInteger("6b8cf07d4ca75c88957d9d670591", 16),
  212. new BigInteger("-b8adf1378a6eb73409fa6c9c637d", 16) },
  213. new BigInteger[]{
  214. new BigInteger("1243ae1b4d71613bc9f780a03690e", 16),
  215. new BigInteger("6b8cf07d4ca75c88957d9d670591", 16) },
  216. new BigInteger("6b8cf07d4ca75c88957d9d67059037a4", 16),
  217. new BigInteger("b8adf1378a6eb73409fa6c9c637ba7f5", 16),
  218. 240);
  219. ECCurve curve = ConfigureCurveGlv(new SecP224K1Curve(), glv);
  220. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  221. + "A1455B334DF099DF30FC28A169A467E9E47075A90F7E650EB6B7A45C"
  222. + "7E089FED7FBA344282CAFBD6F7E319F7C0B0BD59E2CA4BDB556D61A5"));
  223. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  224. }
  225. }
  226. /*
  227. * secp224r1
  228. */
  229. internal class SecP224R1Holder
  230. : X9ECParametersHolder
  231. {
  232. private SecP224R1Holder() { }
  233. internal static readonly X9ECParametersHolder Instance = new SecP224R1Holder();
  234. protected override X9ECParameters CreateParameters()
  235. {
  236. byte[] S = Hex.Decode("BD71344799D5C7FCDC45B59FA3B9AB8F6A948BC5");
  237. ECCurve curve = ConfigureCurve(new SecP224R1Curve());
  238. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  239. + "B70E0CBD6BB4BF7F321390B94A03C1D356C21122343280D6115C1D21"
  240. + "BD376388B5F723FB4C22DFE6CD4375A05A07476444D5819985007E34"));
  241. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  242. }
  243. }
  244. /*
  245. * secp256k1
  246. */
  247. internal class SecP256K1Holder
  248. : X9ECParametersHolder
  249. {
  250. private SecP256K1Holder() {}
  251. internal static readonly X9ECParametersHolder Instance = new SecP256K1Holder();
  252. protected override X9ECParameters CreateParameters()
  253. {
  254. byte[] S = null;
  255. GlvTypeBParameters glv = new GlvTypeBParameters(
  256. new BigInteger("7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee", 16),
  257. new BigInteger("5363ad4cc05c30e0a5261c028812645a122e22ea20816678df02967c1b23bd72", 16),
  258. new BigInteger[]{
  259. new BigInteger("3086d221a7d46bcde86c90e49284eb15", 16),
  260. new BigInteger("-e4437ed6010e88286f547fa90abfe4c3", 16) },
  261. new BigInteger[]{
  262. new BigInteger("114ca50f7a8e2f3f657c1108d9d44cfd8", 16),
  263. new BigInteger("3086d221a7d46bcde86c90e49284eb15", 16) },
  264. new BigInteger("3086d221a7d46bcde86c90e49284eb153dab", 16),
  265. new BigInteger("e4437ed6010e88286f547fa90abfe4c42212", 16),
  266. 272);
  267. ECCurve curve = ConfigureCurveGlv(new SecP256K1Curve(), glv);
  268. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  269. + "79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798"
  270. + "483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8"));
  271. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  272. }
  273. }
  274. /*
  275. * secp256r1
  276. */
  277. internal class SecP256R1Holder
  278. : X9ECParametersHolder
  279. {
  280. private SecP256R1Holder() {}
  281. internal static readonly X9ECParametersHolder Instance = new SecP256R1Holder();
  282. protected override X9ECParameters CreateParameters()
  283. {
  284. byte[] S = Hex.Decode("C49D360886E704936A6678E1139D26B7819F7E90");
  285. ECCurve curve = ConfigureCurve(new SecP256R1Curve());
  286. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  287. + "6B17D1F2E12C4247F8BCE6E563A440F277037D812DEB33A0F4A13945D898C296"
  288. + "4FE342E2FE1A7F9B8EE7EB4A7C0F9E162BCE33576B315ECECBB6406837BF51F5"));
  289. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  290. }
  291. }
  292. /*
  293. * secp384r1
  294. */
  295. internal class SecP384R1Holder
  296. : X9ECParametersHolder
  297. {
  298. private SecP384R1Holder() { }
  299. internal static readonly X9ECParametersHolder Instance = new SecP384R1Holder();
  300. protected override X9ECParameters CreateParameters()
  301. {
  302. byte[] S = Hex.Decode("A335926AA319A27A1D00896A6773A4827ACDAC73");
  303. ECCurve curve = ConfigureCurve(new SecP384R1Curve());
  304. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  305. + "AA87CA22BE8B05378EB1C71EF320AD746E1D3B628BA79B9859F741E082542A385502F25DBF55296C3A545E3872760AB7"
  306. + "3617DE4A96262C6F5D9E98BF9292DC29F8F41DBD289A147CE9DA3113B5F0B8C00A60B1CE1D7E819D7A431D7C90EA0E5F"));
  307. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  308. }
  309. }
  310. /*
  311. * secp521r1
  312. */
  313. internal class SecP521R1Holder
  314. : X9ECParametersHolder
  315. {
  316. private SecP521R1Holder() { }
  317. internal static readonly X9ECParametersHolder Instance = new SecP521R1Holder();
  318. protected override X9ECParameters CreateParameters()
  319. {
  320. byte[] S = Hex.Decode("D09E8800291CB85396CC6717393284AAA0DA64BA");
  321. ECCurve curve = ConfigureCurve(new SecP521R1Curve());
  322. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  323. + "00C6858E06B70404E9CD9E3ECB662395B4429C648139053FB521F828AF606B4D3DBAA14B5E77EFE75928FE1DC127A2FFA8DE3348B3C1856A429BF97E7E31C2E5BD66"
  324. + "011839296A789A3BC0045C8A5FB42C7D1BD998F54449579B446817AFBD17273E662C97EE72995EF42640C550B9013FAD0761353C7086A272C24088BE94769FD16650"));
  325. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  326. }
  327. }
  328. /*
  329. * sect113r1
  330. */
  331. internal class SecT113R1Holder
  332. : X9ECParametersHolder
  333. {
  334. private SecT113R1Holder() { }
  335. internal static readonly X9ECParametersHolder Instance = new SecT113R1Holder();
  336. protected override X9ECParameters CreateParameters()
  337. {
  338. byte[] S = Hex.Decode("10E723AB14D696E6768756151756FEBF8FCB49A9");
  339. ECCurve curve = ConfigureCurve(new SecT113R1Curve());
  340. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  341. + "009D73616F35F4AB1407D73562C10F"
  342. + "00A52830277958EE84D1315ED31886"));
  343. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  344. }
  345. };
  346. /*
  347. * sect113r2
  348. */
  349. internal class SecT113R2Holder
  350. : X9ECParametersHolder
  351. {
  352. private SecT113R2Holder() { }
  353. internal static readonly X9ECParametersHolder Instance = new SecT113R2Holder();
  354. protected override X9ECParameters CreateParameters()
  355. {
  356. byte[] S = Hex.Decode("10C0FB15760860DEF1EEF4D696E676875615175D");
  357. ECCurve curve = ConfigureCurve(new SecT113R2Curve());
  358. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  359. + "01A57A6A7B26CA5EF52FCDB8164797"
  360. + "00B3ADC94ED1FE674C06E695BABA1D"));
  361. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  362. }
  363. };
  364. /*
  365. * sect131r1
  366. */
  367. internal class SecT131R1Holder
  368. : X9ECParametersHolder
  369. {
  370. private SecT131R1Holder() { }
  371. internal static readonly X9ECParametersHolder Instance = new SecT131R1Holder();
  372. protected override X9ECParameters CreateParameters()
  373. {
  374. byte[] S = Hex.Decode("4D696E676875615175985BD3ADBADA21B43A97E2");
  375. ECCurve curve = ConfigureCurve(new SecT131R1Curve());
  376. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  377. + "0081BAF91FDF9833C40F9C181343638399"
  378. + "078C6E7EA38C001F73C8134B1B4EF9E150"));
  379. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  380. }
  381. };
  382. /*
  383. * sect131r2
  384. */
  385. internal class SecT131R2Holder
  386. : X9ECParametersHolder
  387. {
  388. private SecT131R2Holder() { }
  389. internal static readonly X9ECParametersHolder Instance = new SecT131R2Holder();
  390. protected override X9ECParameters CreateParameters()
  391. {
  392. byte[] S = Hex.Decode("985BD3ADBAD4D696E676875615175A21B43A97E3");
  393. ECCurve curve = ConfigureCurve(new SecT131R2Curve());
  394. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  395. + "0356DCD8F2F95031AD652D23951BB366A8"
  396. + "0648F06D867940A5366D9E265DE9EB240F"));
  397. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  398. }
  399. };
  400. /*
  401. * sect163k1
  402. */
  403. internal class SecT163K1Holder
  404. : X9ECParametersHolder
  405. {
  406. private SecT163K1Holder() { }
  407. internal static readonly X9ECParametersHolder Instance = new SecT163K1Holder();
  408. protected override X9ECParameters CreateParameters()
  409. {
  410. byte[] S = null;
  411. ECCurve curve = ConfigureCurve(new SecT163K1Curve());
  412. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  413. + "02FE13C0537BBC11ACAA07D793DE4E6D5E5C94EEE8"
  414. + "0289070FB05D38FF58321F2E800536D538CCDAA3D9"));
  415. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  416. }
  417. };
  418. /*
  419. * sect163r1
  420. */
  421. internal class SecT163R1Holder
  422. : X9ECParametersHolder
  423. {
  424. private SecT163R1Holder() { }
  425. internal static readonly X9ECParametersHolder Instance = new SecT163R1Holder();
  426. protected override X9ECParameters CreateParameters()
  427. {
  428. byte[] S = Hex.Decode("24B7B137C8A14D696E6768756151756FD0DA2E5C");
  429. ECCurve curve = ConfigureCurve(new SecT163R1Curve());
  430. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  431. + "0369979697AB43897789566789567F787A7876A654"
  432. + "00435EDB42EFAFB2989D51FEFCE3C80988F41FF883"));
  433. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  434. }
  435. };
  436. /*
  437. * sect163r2
  438. */
  439. internal class SecT163R2Holder
  440. : X9ECParametersHolder
  441. {
  442. private SecT163R2Holder() { }
  443. internal static readonly X9ECParametersHolder Instance = new SecT163R2Holder();
  444. protected override X9ECParameters CreateParameters()
  445. {
  446. byte[] S = Hex.Decode("85E25BFE5C86226CDB12016F7553F9D0E693A268");
  447. ECCurve curve = ConfigureCurve(new SecT163R2Curve());
  448. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  449. + "03F0EBA16286A2D57EA0991168D4994637E8343E36"
  450. + "00D51FBC6C71A0094FA2CDD545B11C5C0C797324F1"));
  451. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  452. }
  453. };
  454. /*
  455. * sect193r1
  456. */
  457. internal class SecT193R1Holder
  458. : X9ECParametersHolder
  459. {
  460. private SecT193R1Holder() { }
  461. internal static readonly X9ECParametersHolder Instance = new SecT193R1Holder();
  462. protected override X9ECParameters CreateParameters()
  463. {
  464. byte[] S = Hex.Decode("103FAEC74D696E676875615175777FC5B191EF30");
  465. ECCurve curve = ConfigureCurve(new SecT193R1Curve());
  466. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  467. + "01F481BC5F0FF84A74AD6CDF6FDEF4BF6179625372D8C0C5E1"
  468. + "0025E399F2903712CCF3EA9E3A1AD17FB0B3201B6AF7CE1B05"));
  469. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  470. }
  471. };
  472. /*
  473. * sect193r2
  474. */
  475. internal class SecT193R2Holder
  476. : X9ECParametersHolder
  477. {
  478. private SecT193R2Holder() { }
  479. internal static readonly X9ECParametersHolder Instance = new SecT193R2Holder();
  480. protected override X9ECParameters CreateParameters()
  481. {
  482. byte[] S = Hex.Decode("10B7B4D696E676875615175137C8A16FD0DA2211");
  483. ECCurve curve = ConfigureCurve(new SecT193R2Curve());
  484. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  485. + "00D9B67D192E0367C803F39E1A7E82CA14A651350AAE617E8F"
  486. + "01CE94335607C304AC29E7DEFBD9CA01F596F927224CDECF6C"));
  487. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  488. }
  489. };
  490. /*
  491. * sect233k1
  492. */
  493. internal class SecT233K1Holder
  494. : X9ECParametersHolder
  495. {
  496. private SecT233K1Holder() { }
  497. internal static readonly X9ECParametersHolder Instance = new SecT233K1Holder();
  498. protected override X9ECParameters CreateParameters()
  499. {
  500. byte[] S = null;
  501. ECCurve curve = ConfigureCurve(new SecT233K1Curve());
  502. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  503. + "017232BA853A7E731AF129F22FF4149563A419C26BF50A4C9D6EEFAD6126"
  504. + "01DB537DECE819B7F70F555A67C427A8CD9BF18AEB9B56E0C11056FAE6A3"));
  505. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  506. }
  507. };
  508. /*
  509. * sect233r1
  510. */
  511. internal class SecT233R1Holder
  512. : X9ECParametersHolder
  513. {
  514. private SecT233R1Holder() { }
  515. internal static readonly X9ECParametersHolder Instance = new SecT233R1Holder();
  516. protected override X9ECParameters CreateParameters()
  517. {
  518. byte[] S = Hex.Decode("74D59FF07F6B413D0EA14B344B20A2DB049B50C3");
  519. ECCurve curve = ConfigureCurve(new SecT233R1Curve());
  520. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  521. + "00FAC9DFCBAC8313BB2139F1BB755FEF65BC391F8B36F8F8EB7371FD558B"
  522. + "01006A08A41903350678E58528BEBF8A0BEFF867A7CA36716F7E01F81052"));
  523. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  524. }
  525. };
  526. /*
  527. * sect239k1
  528. */
  529. internal class SecT239K1Holder
  530. : X9ECParametersHolder
  531. {
  532. private SecT239K1Holder() { }
  533. internal static readonly X9ECParametersHolder Instance = new SecT239K1Holder();
  534. protected override X9ECParameters CreateParameters()
  535. {
  536. byte[] S = null;
  537. ECCurve curve = ConfigureCurve(new SecT239K1Curve());
  538. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  539. + "29A0B6A887A983E9730988A68727A8B2D126C44CC2CC7B2A6555193035DC"
  540. + "76310804F12E549BDB011C103089E73510ACB275FC312A5DC6B76553F0CA"));
  541. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  542. }
  543. };
  544. /*
  545. * sect283k1
  546. */
  547. internal class SecT283K1Holder
  548. : X9ECParametersHolder
  549. {
  550. private SecT283K1Holder() { }
  551. internal static readonly X9ECParametersHolder Instance = new SecT283K1Holder();
  552. protected override X9ECParameters CreateParameters()
  553. {
  554. byte[] S = null;
  555. ECCurve curve = ConfigureCurve(new SecT283K1Curve());
  556. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  557. + "0503213F78CA44883F1A3B8162F188E553CD265F23C1567A16876913B0C2AC2458492836"
  558. + "01CCDA380F1C9E318D90F95D07E5426FE87E45C0E8184698E45962364E34116177DD2259"));
  559. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  560. }
  561. };
  562. /*
  563. * sect283r1
  564. */
  565. internal class SecT283R1Holder
  566. : X9ECParametersHolder
  567. {
  568. private SecT283R1Holder() { }
  569. internal static readonly X9ECParametersHolder Instance = new SecT283R1Holder();
  570. protected override X9ECParameters CreateParameters()
  571. {
  572. byte[] S = Hex.Decode("77E2B07370EB0F832A6DD5B62DFC88CD06BB84BE");
  573. ECCurve curve = ConfigureCurve(new SecT283R1Curve());
  574. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  575. + "05F939258DB7DD90E1934F8C70B0DFEC2EED25B8557EAC9C80E2E198F8CDBECD86B12053"
  576. + "03676854FE24141CB98FE6D4B20D02B4516FF702350EDDB0826779C813F0DF45BE8112F4"));
  577. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  578. }
  579. };
  580. /*
  581. * sect409k1
  582. */
  583. internal class SecT409K1Holder
  584. : X9ECParametersHolder
  585. {
  586. private SecT409K1Holder() { }
  587. internal static readonly X9ECParametersHolder Instance = new SecT409K1Holder();
  588. protected override X9ECParameters CreateParameters()
  589. {
  590. byte[] S = null;
  591. ECCurve curve = ConfigureCurve(new SecT409K1Curve());
  592. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  593. + "0060F05F658F49C1AD3AB1890F7184210EFD0987E307C84C27ACCFB8F9F67CC2C460189EB5AAAA62EE222EB1B35540CFE9023746"
  594. + "01E369050B7C4E42ACBA1DACBF04299C3460782F918EA427E6325165E9EA10E3DA5F6C42E9C55215AA9CA27A5863EC48D8E0286B"));
  595. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  596. }
  597. };
  598. /*
  599. * sect409r1
  600. */
  601. internal class SecT409R1Holder
  602. : X9ECParametersHolder
  603. {
  604. private SecT409R1Holder() { }
  605. internal static readonly X9ECParametersHolder Instance = new SecT409R1Holder();
  606. protected override X9ECParameters CreateParameters()
  607. {
  608. byte[] S = Hex.Decode("4099B5A457F9D69F79213D094C4BCD4D4262210B");
  609. ECCurve curve = ConfigureCurve(new SecT409R1Curve());
  610. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  611. + "015D4860D088DDB3496B0C6064756260441CDE4AF1771D4DB01FFE5B34E59703DC255A868A1180515603AEAB60794E54BB7996A7"
  612. + "0061B1CFAB6BE5F32BBFA78324ED106A7636B9C5A7BD198D0158AA4F5488D08F38514F1FDF4B4F40D2181B3681C364BA0273C706"));
  613. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  614. }
  615. };
  616. /*
  617. * sect571k1
  618. */
  619. internal class SecT571K1Holder
  620. : X9ECParametersHolder
  621. {
  622. private SecT571K1Holder() { }
  623. internal static readonly X9ECParametersHolder Instance = new SecT571K1Holder();
  624. protected override X9ECParameters CreateParameters()
  625. {
  626. byte[] S = null;
  627. ECCurve curve = ConfigureCurve(new SecT571K1Curve());
  628. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  629. + "026EB7A859923FBC82189631F8103FE4AC9CA2970012D5D46024804801841CA44370958493B205E647DA304DB4CEB08CBBD1BA39494776FB988B47174DCA88C7E2945283A01C8972"
  630. + "0349DC807F4FBF374F4AEADE3BCA95314DD58CEC9F307A54FFC61EFC006D8A2C9D4979C0AC44AEA74FBEBBB9F772AEDCB620B01A7BA7AF1B320430C8591984F601CD4C143EF1C7A3"));
  631. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  632. }
  633. };
  634. /*
  635. * sect571r1
  636. */
  637. internal class SecT571R1Holder
  638. : X9ECParametersHolder
  639. {
  640. private SecT571R1Holder() { }
  641. internal static readonly X9ECParametersHolder Instance = new SecT571R1Holder();
  642. protected override X9ECParameters CreateParameters()
  643. {
  644. byte[] S = Hex.Decode("2AA058F73A0E33AB486B0F610410C53A7F132310");
  645. ECCurve curve = ConfigureCurve(new SecT571R1Curve());
  646. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  647. + "0303001D34B856296C16C0D40D3CD7750A93D1D2955FA80AA5F40FC8DB7B2ABDBDE53950F4C0D293CDD711A35B67FB1499AE60038614F1394ABFA3B4C850D927E1E7769C8EEC2D19"
  648. + "037BF27342DA639B6DCCFFFEB73D69D78C6C27A6009CBBCA1980F8533921E8A684423E43BAB08A576291AF8F461BB2A8B3531D2F0485C19B16E2F1516E23DD3C1A4827AF1B8AC15B"));
  649. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  650. }
  651. };
  652. /*
  653. * sm2p256v1
  654. */
  655. internal class SM2P256V1Holder
  656. : X9ECParametersHolder
  657. {
  658. private SM2P256V1Holder() { }
  659. internal static readonly X9ECParametersHolder Instance = new SM2P256V1Holder();
  660. protected override X9ECParameters CreateParameters()
  661. {
  662. byte[] S = null;
  663. ECCurve curve = ConfigureCurve(new SM2P256V1Curve());
  664. X9ECPoint G = new X9ECPoint(curve, Hex.Decode("04"
  665. + "32C4AE2C1F1981195F9904466A39C9948FE30BBFF2660BE1715A4589334C74C7"
  666. + "BC3736A2F4F6779C59BDCEE36B692153D0A9877CC62A474002DF32E52139F0A0"));
  667. return new X9ECParameters(curve, G, curve.Order, curve.Cofactor, S);
  668. }
  669. }
  670. private static readonly IDictionary nameToCurve = BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateHashtable();
  671. private static readonly IDictionary nameToOid = BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateHashtable();
  672. private static readonly IDictionary oidToCurve = BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateHashtable();
  673. private static readonly IDictionary oidToName = BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateHashtable();
  674. private static readonly IList names = BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.CreateArrayList();
  675. private static void DefineCurve(string name, X9ECParametersHolder holder)
  676. {
  677. names.Add(name);
  678. name = BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.ToUpperInvariant(name);
  679. nameToCurve.Add(name, holder);
  680. }
  681. private static void DefineCurveWithOid(string name, DerObjectIdentifier oid, X9ECParametersHolder holder)
  682. {
  683. names.Add(name);
  684. oidToName.Add(oid, name);
  685. oidToCurve.Add(oid, holder);
  686. name = BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.ToUpperInvariant(name);
  687. nameToOid.Add(name, oid);
  688. nameToCurve.Add(name, holder);
  689. }
  690. private static void DefineCurveAlias(string name, DerObjectIdentifier oid)
  691. {
  692. object curve = oidToCurve[oid];
  693. if (curve == null)
  694. throw new InvalidOperationException();
  695. name = BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.ToUpperInvariant(name);
  696. nameToOid.Add(name, oid);
  697. nameToCurve.Add(name, curve);
  698. }
  699. static CustomNamedCurves()
  700. {
  701. DefineCurve("curve25519", Curve25519Holder.Instance);
  702. //DefineCurveWithOid("secp112r1", SecObjectIdentifiers.SecP112r1, SecP112R1Holder.Instance);
  703. //DefineCurveWithOid("secp112r2", SecObjectIdentifiers.SecP112r2, SecP112R2Holder.Instance);
  704. DefineCurveWithOid("secp128r1", SecObjectIdentifiers.SecP128r1, SecP128R1Holder.Instance);
  705. //DefineCurveWithOid("secp128r2", SecObjectIdentifiers.SecP128r2, SecP128R2Holder.Instance);
  706. DefineCurveWithOid("secp160k1", SecObjectIdentifiers.SecP160k1, SecP160K1Holder.Instance);
  707. DefineCurveWithOid("secp160r1", SecObjectIdentifiers.SecP160r1, SecP160R1Holder.Instance);
  708. DefineCurveWithOid("secp160r2", SecObjectIdentifiers.SecP160r2, SecP160R2Holder.Instance);
  709. DefineCurveWithOid("secp192k1", SecObjectIdentifiers.SecP192k1, SecP192K1Holder.Instance);
  710. DefineCurveWithOid("secp192r1", SecObjectIdentifiers.SecP192r1, SecP192R1Holder.Instance);
  711. DefineCurveWithOid("secp224k1", SecObjectIdentifiers.SecP224k1, SecP224K1Holder.Instance);
  712. DefineCurveWithOid("secp224r1", SecObjectIdentifiers.SecP224r1, SecP224R1Holder.Instance);
  713. DefineCurveWithOid("secp256k1", SecObjectIdentifiers.SecP256k1, SecP256K1Holder.Instance);
  714. DefineCurveWithOid("secp256r1", SecObjectIdentifiers.SecP256r1, SecP256R1Holder.Instance);
  715. DefineCurveWithOid("secp384r1", SecObjectIdentifiers.SecP384r1, SecP384R1Holder.Instance);
  716. DefineCurveWithOid("secp521r1", SecObjectIdentifiers.SecP521r1, SecP521R1Holder.Instance);
  717. DefineCurveWithOid("sect113r1", SecObjectIdentifiers.SecT113r1, SecT113R1Holder.Instance);
  718. DefineCurveWithOid("sect113r2", SecObjectIdentifiers.SecT113r2, SecT113R2Holder.Instance);
  719. DefineCurveWithOid("sect131r1", SecObjectIdentifiers.SecT131r1, SecT131R1Holder.Instance);
  720. DefineCurveWithOid("sect131r2", SecObjectIdentifiers.SecT131r2, SecT131R2Holder.Instance);
  721. DefineCurveWithOid("sect163k1", SecObjectIdentifiers.SecT163k1, SecT163K1Holder.Instance);
  722. DefineCurveWithOid("sect163r1", SecObjectIdentifiers.SecT163r1, SecT163R1Holder.Instance);
  723. DefineCurveWithOid("sect163r2", SecObjectIdentifiers.SecT163r2, SecT163R2Holder.Instance);
  724. DefineCurveWithOid("sect193r1", SecObjectIdentifiers.SecT193r1, SecT193R1Holder.Instance);
  725. DefineCurveWithOid("sect193r2", SecObjectIdentifiers.SecT193r2, SecT193R2Holder.Instance);
  726. DefineCurveWithOid("sect233k1", SecObjectIdentifiers.SecT233k1, SecT233K1Holder.Instance);
  727. DefineCurveWithOid("sect233r1", SecObjectIdentifiers.SecT233r1, SecT233R1Holder.Instance);
  728. DefineCurveWithOid("sect239k1", SecObjectIdentifiers.SecT239k1, SecT239K1Holder.Instance);
  729. DefineCurveWithOid("sect283k1", SecObjectIdentifiers.SecT283k1, SecT283K1Holder.Instance);
  730. DefineCurveWithOid("sect283r1", SecObjectIdentifiers.SecT283r1, SecT283R1Holder.Instance);
  731. DefineCurveWithOid("sect409k1", SecObjectIdentifiers.SecT409k1, SecT409K1Holder.Instance);
  732. DefineCurveWithOid("sect409r1", SecObjectIdentifiers.SecT409r1, SecT409R1Holder.Instance);
  733. DefineCurveWithOid("sect571k1", SecObjectIdentifiers.SecT571k1, SecT571K1Holder.Instance);
  734. DefineCurveWithOid("sect571r1", SecObjectIdentifiers.SecT571r1, SecT571R1Holder.Instance);
  735. DefineCurveWithOid("sm2p256v1", GMObjectIdentifiers.sm2p256v1, SM2P256V1Holder.Instance);
  736. DefineCurveAlias("B-163", SecObjectIdentifiers.SecT163r2);
  737. DefineCurveAlias("B-233", SecObjectIdentifiers.SecT233r1);
  738. DefineCurveAlias("B-283", SecObjectIdentifiers.SecT283r1);
  739. DefineCurveAlias("B-409", SecObjectIdentifiers.SecT409r1);
  740. DefineCurveAlias("B-571", SecObjectIdentifiers.SecT571r1);
  741. DefineCurveAlias("K-163", SecObjectIdentifiers.SecT163k1);
  742. DefineCurveAlias("K-233", SecObjectIdentifiers.SecT233k1);
  743. DefineCurveAlias("K-283", SecObjectIdentifiers.SecT283k1);
  744. DefineCurveAlias("K-409", SecObjectIdentifiers.SecT409k1);
  745. DefineCurveAlias("K-571", SecObjectIdentifiers.SecT571k1);
  746. DefineCurveAlias("P-192", SecObjectIdentifiers.SecP192r1);
  747. DefineCurveAlias("P-224", SecObjectIdentifiers.SecP224r1);
  748. DefineCurveAlias("P-256", SecObjectIdentifiers.SecP256r1);
  749. DefineCurveAlias("P-384", SecObjectIdentifiers.SecP384r1);
  750. DefineCurveAlias("P-521", SecObjectIdentifiers.SecP521r1);
  751. }
  752. public static X9ECParameters GetByName(string name)
  753. {
  754. X9ECParametersHolder holder = (X9ECParametersHolder)nameToCurve[BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.ToUpperInvariant(name)];
  755. return holder == null ? null : holder.Parameters;
  756. }
  757. /**
  758. * return the X9ECParameters object for the named curve represented by
  759. * the passed in object identifier. Null if the curve isn't present.
  760. *
  761. * @param oid an object identifier representing a named curve, if present.
  762. */
  763. public static X9ECParameters GetByOid(DerObjectIdentifier oid)
  764. {
  765. X9ECParametersHolder holder = (X9ECParametersHolder)oidToCurve[oid];
  766. return holder == null ? null : holder.Parameters;
  767. }
  768. /**
  769. * return the object identifier signified by the passed in name. Null
  770. * if there is no object identifier associated with name.
  771. *
  772. * @return the object identifier associated with name, if present.
  773. */
  774. public static DerObjectIdentifier GetOid(string name)
  775. {
  776. return (DerObjectIdentifier)nameToOid[BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities.Platform.ToUpperInvariant(name)];
  777. }
  778. /**
  779. * return the named curve name represented by the given object identifier.
  780. */
  781. public static string GetName(DerObjectIdentifier oid)
  782. {
  783. return (string)oidToName[oid];
  784. }
  785. /**
  786. * returns an enumeration containing the name strings for curves
  787. * contained in this structure.
  788. */
  789. public static IEnumerable Names
  790. {
  791. get { return new EnumerableProxy(names); }
  792. }
  793. }
  794. }
  795. #pragma warning restore
  796. #endif