/****************************************************************************
*																			*
*				ASN.1 AlgorithmIdentifier OID Management					*
*					Copyright Peter Gutmann 1992-2023						*
*																			*
****************************************************************************/

#if defined( INC_ALL )
  #include "asn1.h"
  #include "asn1_ext.h"
  #include "asn1_int.h"
#else
  #include "enc_dec/asn1.h"
  #include "enc_dec/asn1_ext.h"
  #include "enc_dec/asn1_int.h"
#endif /* Compiler-specific includes */

#ifdef USE_INT_ASN1

/****************************************************************************
*																			*
*							AlgorithmIdentifier OIDs						*
*																			*
****************************************************************************/

/* A table mapping OIDs to algorithm types.  We take advantage of the fact
   that object identifiers were designed to be handled in the encoded form
   (without any need for decoding) and compare expected OIDs with the raw
   encoded form.  Some OIDs are for pure algorithms, others are for aWithB
   type combinations (usually encryption + hash).  As a variation on this,
   some algorithms have two (or even more parameters), for example 3DES
   encryption + CBC mode, or AES encryption + CBC mode + 128-bit key size.
   The algoIDinfoTbl defines algorithm parameters as:

	{ algo, subAlgo, parameter }

   with the values being:

	algo			subAlgo				parameter
	----			-------				---------
	Encryption		mode				key size (optional)
	Hash			0					block size
	AuthEnc			0					secret size
	PKC Sig			hash algorithm		0
	PKC Sig			0					encoding mech
	PKC Enc			0					encoding mech (optional)

   In order for the table to work for encoding, the values have to be sorted 
   based on their parameters, so that a given algorithm is followed by its
   sub-OIDs sorted first on subAlgo and then parameter.

   There are multiple OIDs for RSA, the main ones being rsa (which doesn't
   specify an exact data format and is deprecated), rsaEncryption (as per
   PKCS #1, recommended), and rsaSignature (ISO 9796).  We use rsaEncryption
   and its derived forms (e.g. md5WithRSAEncryption) rather than alternatives
   like md5WithRSA.  There is also an OID for rsaKeyTransport that uses
   PKCS #1 padding but isn't defined by RSADSI.

   There are a great many OIDs for DSA and/or SHA.  We list the less common
   ones after all the other OIDs so that we always encode the more common
   form, but can decode many forms (there are even more OIDs for SHA or DSA
   with common parameters that we don't bother with).

   AES has a whole series of OIDs that vary depending on the key size used,
   this usually isn't of any use since we can tell the keysize from other 
   places but is needed in a few situations such as when we're deriving a 
   key into an AES context */

static const ALGOID_INFO algoIDinfoTbl[] = {
	/* RSA and <hash>WithRSA */
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_NONE, ALGOID_ENCODING_PKCS1, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x01" )
	  MKDESC( "rsaEncryption (1 2 840 113549 1 1 1)" ) },
#ifdef USE_OAEP
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_NONE, ALGOID_ENCODING_OAEP, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x07" )
	  MKDESC( "rsaOAEP (1 2 840 113549 1 1 7)" ) },
#endif /* USE_OAEP */
#ifdef USE_PSS
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_NONE, ALGOID_ENCODING_PSS, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0A" )
	  MKDESC( "rsaPSS (1 2 840 113549 1 1 10)" ) },
#endif /* USE_PSS */
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_MD5, 16, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x04" )
	  MKDESC( "md5withRSAEncryption (1 2 840 113549 1 1 4)" ) },
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_SHA1, 20, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x05" )
	  MKDESC( "sha1withRSAEncryption (1 2 840 113549 1 1 5)" ) },
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_SHA1, 20, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x05\x2B\x0E\x03\x02\x1D" )
	  MKDESC( "Another sha-1WithRSAEncryption (1 3 14 3 2 29)" ) },
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_SHA1, 20, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x06\x2B\x24\x03\x03\x01\x01" ) 
	  MKDESC( "Another rsaSignatureWithsha1 (1 3 36 3 3 1 1)" ) },
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_SHA2, 32, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0B" )
	  MKDESC( "sha256withRSAEncryption (1 2 840 113549 1 1 11)" ) },
  #ifdef USE_SHA2_EXT
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_SHA2, 48, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0C" )
	  MKDESC( "sha384withRSAEncryption (1 2 840 113549 1 1 12)" ) },
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_SHA2, 64, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0D" )
	  MKDESC( "sha512withRSAEncryption (1 2 840 113549 1 1 13)" ) },
  #endif /* USE_SHA2_EXT */
	/* The following four ALGOID_CLASS_PKC entries are bug workarounds for 
	   implementations that erroneously use xxxWithRSA when they should be 
	   using straight RSA, see the comment in 
	   mechs/sign_rw.c:readCmsSignature() for details */
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_NONE, ALGOID_ENCODING_PKCS1, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x05" )
	  MKDESC( "Bug workaround for implementations using sha1WithRSA instead of RSA" ) },
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_NONE, ALGOID_ENCODING_PKCS1, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0B" )
	  MKDESC( "Bug workaround for implementations using sha256WithRSA instead of RSA" ) },
  #ifdef USE_SHA2_EXT
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_NONE, ALGOID_ENCODING_PKCS1, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0C" )
	  MKDESC( "Bug workaround for implementations using sha384WithRSA instead of RSA" ) },
	{ CRYPT_ALGO_RSA, CRYPT_ALGO_NONE, ALGOID_ENCODING_PKCS1, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0D" )
	  MKDESC( "Bug workaround for implementations using sha512WithRSA instead of RSA" ) },
  #endif /* USE_SHA2_EXT */

	/* DSA and dsaWith<hash> */
#ifdef USE_DSA
	{ CRYPT_ALGO_DSA, CRYPT_ALGO_NONE, ALGOID_ENCODING_NONE, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x07\x2A\x86\x48\xCE\x38\x04\x01" ) 
	  MKDESC( "dsa (1 2 840 10040 4 1)" ) },
	{ CRYPT_ALGO_DSA, CRYPT_ALGO_NONE, ALGOID_ENCODING_NONE, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x05\x2B\x0E\x03\x02\x0C" ) 
	  MKDESC( "Peculiar deprecated dsa (1 3 14 3 2 12)" ) },
	  /* Peculiar deprecated dsa (1 3 14 3 2 12), but used by CDSA and the
	     German PKI profile */
	{ CRYPT_ALGO_DSA, CRYPT_ALGO_SHA1, 20, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x07\x2A\x86\x48\xCE\x38\x04\x03" )
	  MKDESC( "dsaWithSha1 (1 2 840 10040 4 3)" ) },
	{ CRYPT_ALGO_DSA, CRYPT_ALGO_SHA1, 20, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x05\x2B\x0E\x03\x02\x1B" )
	  MKDESC( "Another dsaWithSHA1 (1 3 14 3 2 27)" ) },
	{ CRYPT_ALGO_DSA, CRYPT_ALGO_SHA1, 20, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x02\x01\x01\x02" )
	  MKDESC( "Yet another dsaWithSHA-1 (2 16 840 1 101 2 1 1 2)" ) },
	{ CRYPT_ALGO_DSA, CRYPT_ALGO_SHA1, 20, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x05\x2B\x0E\x03\x02\x0D" ) 
	  MKDESC( "JDK 1.1 erroneous dsaWithSHA(-0) used as dsaWithSHA-1" ) },
	  /* When they ran out of valid dsaWithSHA's, they started using invalid
	     ones.  This one is from JDK 1.1 and is actually dsaWithSHA(-0), but 
		 it's used as if it were dsaWithSHA-1 (1 3 14 3 2 13) */
	{ CRYPT_ALGO_DSA, CRYPT_ALGO_SHA2, 32, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x03\x02" ) 
	  MKDESC( "dsaWithSha256 (2 16 840 1 101 3 4 3 2)" ) },
#endif /* USE_DSA */

	/* Elgamal */
#ifdef USE_ELGAMAL
	{ CRYPT_ALGO_ELGAMAL, CRYPT_ALGO_NONE, ALGOID_ENCODING_PKCS1, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x0A\x2B\x06\x01\x04\x01\x97\x55\x01\x02\x01" )
	  MKDESC( "elgamal (1 3 6 1 4 1 3029 1 2 1)" ) },
#endif /* USE_ELGAMAL */

	/* DH */
#ifdef USE_DH
	{ CRYPT_ALGO_DH, CRYPT_ALGO_NONE, ALGOID_ENCODING_NONE, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x07\x2A\x86\x48\xCE\x3E\x02\x01" )
	  MKDESC( "dhPublicKey (1 2 840 10046 2 1)" ) },
#endif /* USE_DH */

	/* ECDSA and ecdsaWith<hash>.  The xxxWithRecommended/Specified are a
	   complex mess and aren't normally used by anything (for example they
	   were explicitly excluded from the PKIX/SMIME specs because there's no
	   point to them) but due to the fact that there's no public use of ECC
	   certs by CAs there are oddball private-label CAs that use them with
	   no correcting factor in the form of rejection by implementations 
	   present.  For now we ignore them in the hope that the oddball private
	   uses will eventually go away */
#if defined( USE_ECDSA ) || defined( USE_ECDH )
	{ CRYPT_ALGO_ECDSA, CRYPT_ALGO_NONE, ALGOID_ENCODING_NONE, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x07\x2A\x86\x48\xCE\x3D\x02\x01" )
	  MKDESC( "ecPublicKey (1 2 840 10045 2 1)" ) },
#endif /* USE_ECDSA || USE_ECDH */
#ifdef USE_ECDSA
	{ CRYPT_ALGO_ECDSA, CRYPT_ALGO_SHA1, 20, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x07\x2A\x86\x48\xCE\x3D\x04\x01" )
	  MKDESC( "ecdsaWithSHA1 (1 2 840 10045 4 1)" ) },
  #if 0		/* These are too awkward to support easily, and PKIX says they 
			   shouldn't be used anyway */
	{ CRYPT_ALGO_ECDSA, CRYPT_ALGO_SHA1, 20, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x07\x2A\x86\x48\xCE\x3D\x04\x02" )
	  MKDESC( "ecdsaWithRecommended (= ...withSHA1) (1 2 840 10045 4 2)" ) },
	{ CRYPT_ALGO_ECDSA, CRYPT_ALGO_SHA1, 20, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x07\x2A\x86\x48\xCE\x3D\x04\x03" ) 
	  MKDESC( "ecdsaWithSpecified (= ...withSHA1) (1 2 840 10045 4 3)" ) },
  #endif /* 0 */
	{ CRYPT_ALGO_ECDSA, CRYPT_ALGO_SHA2, 32, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x08\x2A\x86\x48\xCE\x3D\x04\x03\x02" )
	  MKDESC( "ecdsaWithSHA256 (1 2 840 10045 4 3 2)" ) },
  #ifdef USE_SHA2_EXT
	{ CRYPT_ALGO_ECDSA, CRYPT_ALGO_SHA2, 48, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x08\x2A\x86\x48\xCE\x3D\x04\x03\x03" )
	  MKDESC( "ecdsaWithSHA384 (1 2 840 10045 4 3 3)" ) },
	{ CRYPT_ALGO_ECDSA, CRYPT_ALGO_SHA2, 64, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x08\x2A\x86\x48\xCE\x3D\x04\x03\x04" )
	  MKDESC( "ecdsaWithSHA512 (1 2 840 10045 4 3 4)" ) },
  #endif /* USE_SHA2_EXT */
#endif /* USE_ECDSA */

	/* Ed25519.  This follows the usual special-snowflake form of not 
	   working like anything else in existence, it's both an 
	   ALGOID_CLASS_PKC identifier when used to identify public keys and an
	   ALGOID_CLASS_PKC_SIG identifier when used for signing, with SHA2-512
	   implicitly hardcoded into it */
#ifdef USE_ED25519
	{ CRYPT_ALGO_ED25519, CRYPT_ALGO_NONE, ALGOID_ENCODING_NONE, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x03\x2B\x65\x70" )
	  MKDESC( "ed25519 (1 3 101 112)" ) },
	{ CRYPT_ALGO_ED25519, CRYPT_ALGO_NONE, ALGOID_ENCODING_NONE /*CRYPT_ALGO_SHA2, 64*/, ALGOID_CLASS_PKCSIG,
	  MKOID( "\x06\x03\x2B\x65\x70" )
	  MKDESC( "ed25519 (1 3 101 112)" ) },
#endif /* USE_ED25519 */

	/* Curve25519 */
#ifdef USE_X25519
	{ CRYPT_ALGO_25519, CRYPT_ALGO_NONE, ALGOID_ENCODING_NONE, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x03\x2B\x65\x6E" )
	  MKDESC( "curve25519 (1 3 101 110)" ) },
#endif /* USE_X25519 */

	/* ML-KEM768 */
#ifdef USE_MLKEM
	{ CRYPT_ALGO_MLKEM, CRYPT_ALGO_NONE, ALGOID_ENCODING_NONE, ALGOID_CLASS_PKC,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x04\x02" ) 
	  MKDESC( "mlkem768 (2 16 840 1 101 3 4 4 2)" ) },
#endif /* USE_MLKEM */

	/* Hash algorithms */
#ifdef USE_MD5
	{ CRYPT_ALGO_MD5, CRYPT_ALGO_NONE, 16, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x08\x2A\x86\x48\x86\xF7\x0D\x02\x05" )
	  MKDESC( "md5 (1 2 840 113549 2 5)" ) },
	{ CRYPT_ALGO_MD5, CRYPT_ALGO_NONE, 16, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x08\x02\x82\x06\x01\x0A\x01\x03\x02" ) 
	  MKDESC( "Another md5 (0 2 262 1 10 1 3 2)" ) },
	{ CRYPT_ALGO_MD5, CRYPT_ALGO_NONE, 16, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x0B\x60\x86\x48\x01\x86\xF8\x37\x01\x02\x08\x32" )
	  MKDESC( "Yet another md5 (2 16 840 1 113719 1 2 8 50)" ) },
#endif /* USE_MD5 */
	{ CRYPT_ALGO_SHA1, CRYPT_ALGO_NONE, 20, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x05\x2B\x0E\x03\x02\x1A" )
	  MKDESC( "sha1 (1 3 14 3 2 26)" ) },
	{ CRYPT_ALGO_SHA1, CRYPT_ALGO_NONE, 20, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x0B\x60\x86\x48\x01\x86\xF8\x37\x01\x02\x08\x52" )
	  MKDESC( "Another sha1 (2 16 840 1 113719 1 2 8 82)" ) },
	{ CRYPT_ALGO_SHA2, CRYPT_ALGO_NONE, 32, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x02\x01" )
	  MKDESC( "sha2-256 (2 16 840 1 101 3 4 2 1)" ) },
  #ifdef USE_SHA2_EXT
	{ CRYPT_ALGO_SHA2, CRYPT_ALGO_NONE, 48, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x02\x02" )
	  MKDESC( "sha2-384 (2 16 840 1 101 3 4 2 2)" ) },
	{ CRYPT_ALGO_SHA2, CRYPT_ALGO_NONE, 64, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x02\x03" )
	  MKDESC( "sha2-512 (2 16 840 1 101 3 4 2 3)" ) },
  #endif /* USE_SHA2_EXT */

	/* MAC algorithms */
	{ CRYPT_ALGO_HMAC_SHA1, CRYPT_ALGO_NONE, 20, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x08\x2B\x06\x01\x05\x05\x08\x01\x02" )
	  MKDESC( "hmac-SHA (1 3 6 1 5 5 8 1 2)" ) },
	{ CRYPT_ALGO_HMAC_SHA1, CRYPT_ALGO_NONE, 20, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x08\x2A\x86\x48\x86\xF7\x0D\x02\x07" )
	  MKDESC( "Another hmacWithSHA1 (1 2 840 113549 2 7)" ) },
	{ CRYPT_ALGO_HMAC_SHA2, CRYPT_ALGO_NONE, 32, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x08\x2A\x86\x48\x86\xF7\x0D\x02\x09" )
	  MKDESC( "hmacWithSHA256 (1 2 840 113549 2 9)" ) },
  #ifdef USE_SHA2_EXT
	{ CRYPT_ALGO_HMAC_SHA2, CRYPT_ALGO_NONE, 48, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x08\x2A\x86\x48\x86\xF7\x0D\x02\x0A" )
	  MKDESC( "hmacWithSHA384 (1 2 840 113549 2 10)" ) },
	{ CRYPT_ALGO_HMAC_SHA2, CRYPT_ALGO_NONE, 64, ALGOID_CLASS_HASH,
	  MKOID( "\x06\x08\x2A\x86\x48\x86\xF7\x0D\x02\x0B" )
	  MKDESC( "hmacWithSHA512 (1 2 840 113549 2 11)" ) },
  #endif /* USE_SHA2_EXT */

	/* Encryption algorithms */
	{ CRYPT_ALGO_AES, CRYPT_MODE_ECB, 16, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x01\x01" )
	  MKDESC( "aes128-ECB (2 16 840 1 101 3 4 1 1)" ) },
	{ CRYPT_ALGO_AES, CRYPT_MODE_ECB, 24, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x01\x15" )
	  MKDESC( "aes192-ECB (2 16 840 1 101 3 4 1 21)" ) },
	{ CRYPT_ALGO_AES, CRYPT_MODE_ECB, 32, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x01\x29" )
	  MKDESC( "aes256-ECB (2 16 840 1 101 3 4 1 41)" ) },
	{ CRYPT_ALGO_AES, CRYPT_MODE_CBC, 16, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x01\x02" )
	  MKDESC( "aes128-CBC (2 16 840 1 101 3 4 1 2)" ) },
	{ CRYPT_ALGO_AES, CRYPT_MODE_CBC, 24, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x01\x16" )
	  MKDESC( "aes192-CBC (2 16 840 1 101 3 4 1 22)" ) },
	{ CRYPT_ALGO_AES, CRYPT_MODE_CBC, 32, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x01\x2A" )
	  MKDESC( "aes256-CBC (2 16 840 1 101 3 4 1 42)" ) },
#ifdef USE_CFB
	{ CRYPT_ALGO_AES, CRYPT_MODE_CFB, 16, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x01\x04" )
	  MKDESC( "aes128-CFB (2 16 840 1 101 3 4 1 4)" ) },
	{ CRYPT_ALGO_AES, CRYPT_MODE_CFB, 24, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x01\x18" )
	  MKDESC( "aes192-CFB (2 16 840 1 101 3 4 1 24)" ) },
	{ CRYPT_ALGO_AES, CRYPT_MODE_CFB, 32, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x60\x86\x48\x01\x65\x03\x04\x01\x2C" )
	  MKDESC( "aes256-CFB (2 16 840 1 101 3 4 1 44)" ) },
#endif /* USE_CFB */
#ifdef USE_CAST
	{ CRYPT_ALGO_CAST, CRYPT_MODE_CBC, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x2A\x86\x48\x86\xF6\x7D\x07\x42\x0A" )
	  MKDESC( "cast5CBC (1 2 840 113533 7 66 10)" ) },
#endif /* USE_CAST */
#ifdef USE_DES
	{ CRYPT_ALGO_DES, CRYPT_MODE_ECB, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x05\x2B\x0E\x03\x02\x06" )
	  MKDESC( "desECB (1 3 14 3 2 6)" ) },
	{ CRYPT_ALGO_DES, CRYPT_MODE_ECB, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x02\x82\x06\x01\x0A\x01\x02\x02\x01" )
	  MKDESC( "Another desECB (0 2 262 1 10 1 2 2 1)" ) },
	{ CRYPT_ALGO_DES, CRYPT_MODE_CBC, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x05\x2B\x0E\x03\x02\x07" )
	  MKDESC( "desCBC (1 3 14 3 2 7)" ) },
	{ CRYPT_ALGO_DES, CRYPT_MODE_CBC, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x02\x82\x06\x01\x0A\x01\x02\x02\x02" ) 
	  MKDESC( "Another desCBC (0 2 262 1 10 1 2 2 2)" ) },
  #ifdef USE_CFB
	{ CRYPT_ALGO_DES, CRYPT_MODE_CFB, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x05\x2B\x0E\x03\x02\x09" )
	  MKDESC( "desCFB (1 3 14 3 2 9)" ) },
	{ CRYPT_ALGO_DES, CRYPT_MODE_CFB, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x02\x82\x06\x01\x0A\x01\x02\x02\x05" )
	  MKDESC( "Another desCFB (0 2 262 1 10 1 2 2 5)" ) },
  #endif /* USE_CFB */
#endif /* USE_DES */
	{ CRYPT_ALGO_3DES, CRYPT_MODE_CBC, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x08\x2A\x86\x48\x86\xF7\x0D\x03\x07" )
	  MKDESC( "des-EDE3-CBC (1 2 840 113549 3 7)" ) },
  #ifdef USE_CFB
	{ CRYPT_ALGO_3DES, CRYPT_MODE_CFB, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x08\x2A\x86\x48\x86\xF7\x0D\x03\x09" )
	  MKDESC( "des-EDE3-CFB (1 2 840 113549 3 9)" ) },
  #endif /* USE_CFB */
	{ CRYPT_ALGO_3DES, CRYPT_MODE_CBC, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x09\x02\x82\x06\x01\x0A\x01\x02\x03\x02" )
	  MKDESC( "Another des3CBC (0 2 262 1 10 1 2 3 2)" ) },
#ifdef USE_RC2
	{ CRYPT_ALGO_RC2, CRYPT_MODE_CBC, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x08\x2A\x86\x48\x86\xF7\x0D\x03\x02" )
	  MKDESC( "rc2CBC (1 2 840 113549 3 2)" ) },
	{ CRYPT_ALGO_RC2, CRYPT_MODE_ECB, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x08\x2A\x86\x48\x86\xF7\x0D\x03\x03" )
	  MKDESC( "rc2ECB (1 2 840 113549 3 3)" ) },
#endif /* USE_RC2 */
#ifdef USE_RC4
	{ CRYPT_ALGO_RC4, CRYPT_MODE_CFB, 0, ALGOID_CLASS_CRYPT,
	  MKOID( "\x06\x08\x2A\x86\x48\x86\xF7\x0D\x03\x04" )
	  MKDESC( "rc4 (1 2 840 113549 3 4)" ) },
#endif /* USE_RC4 */

	/* Authenticated encryption algorithms */
	{ CRYPT_IALGO_GENERIC_SECRET, CRYPT_ALGO_NONE, 16, ALGOID_CLASS_AUTHENC,
	  MKOID( "\x06\x0B\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03\x0F" )
	  MKDESC( "authEnc128 (1 2 840 113549 1 9 16 3 15)" ) },
	{ CRYPT_IALGO_GENERIC_SECRET, CRYPT_ALGO_NONE, 32, ALGOID_CLASS_AUTHENC,
	  MKOID( "\x06\x0B\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03\x10" )
	  MKDESC( "authEnc256 (1 2 840 113549 1 9 16 3 16)" ) },

	{ CRYPT_ALGO_NONE, CRYPT_ALGO_NONE, 0, ALGOID_CLASS_NONE, NULL MKDESC( "" ) },
		{ CRYPT_ALGO_NONE, CRYPT_ALGO_NONE, 0, ALGOID_CLASS_NONE, NULL MKDESC( "" ) }
	};

/****************************************************************************
*																			*
*						AlgorithmIdentifier OID Access Routines				*
*																			*
****************************************************************************/

/* Map an algorithm and optional parameters to an OID and back.  The to-OID
   version can be called either to check whether an algorithm is encodable 
   (checkValid = FALSE) or as part of an actual encoding, throwing an 
   exception if the parameters can't be encoded (checkValid = TRUE).
   
   The algoIDinfoTbl defines algorithm parameters as:

	{ algo, subAlgo, parameter }

   with the values being:

	algo			subAlgo				parameter
	----			-------				---------
	Encryption		mode				key size (optional)
	Hash			0					block size
	AuthEnc			0					secret size
	PKC Sig			hash algorithm		0
	PKC Sig			0					encoding mech
	PKC Enc			0					encoding mech (optional)
	
   algorithmToOI() returns a BYTE string with no explicit length 
   information, the length is obtained using sizeofOID() */

CHECK_RETVAL \
static int getAlgoIDinfo( const ALGOID_INFO **algoIDinfoPtrPtr,
						  int *algoIDinfoNoEntries )
	{
#if CRYPTO_OBJECT_HANDLE != SYSTEM_OBJECT_HANDLE 
	MESSAGE_CATALOGQUERY_INFO catalogQueryInfo;
	int status;
#endif /* CRYPTO_OBJECT_HANDLE != SYSTEM_OBJECT_HANDLE */

	/* Clear return values */
	*algoIDinfoPtrPtr = NULL;
	*algoIDinfoNoEntries = 0;

	/* If we're using a custom crypto HAL, see if we need to override the 
	   built-in OIDs with custom ones */
#if CRYPTO_OBJECT_HANDLE != SYSTEM_OBJECT_HANDLE 
	setMessageCatalogQueryInfo( &catalogQueryInfo, CRYPT_FORMAT_CMS );
	status = krnlSendMessage( CRYPTO_OBJECT_HANDLE, 
							  IMESSAGE_DEV_CATALOGQUERY, &catalogQueryInfo, 
							  CATALOGQUERY_ITEM_ALGOIDINFO );
	if( cryptStatusOK( status ) )
		{
		*algoIDinfoPtrPtr = catalogQueryInfo.infoTable;
		*algoIDinfoNoEntries = catalogQueryInfo.infoNoEntries;

		return( CRYPT_OK );
		}
#endif /* CRYPTO_OBJECT_HANDLE != SYSTEM_OBJECT_HANDLE */

	*algoIDinfoPtrPtr = algoIDinfoTbl;
	*algoIDinfoNoEntries = FAILSAFE_ARRAYSIZE( algoIDinfoTbl, ALGOID_INFO );

	return( CRYPT_OK );
	}

CHECK_RETVAL_PTR \
const BYTE *algorithmToOID( IN_ALGO const CRYPT_ALGO_TYPE cryptAlgo,
							IN_PTR_OPT const ALGOID_PARAMS *algoIDparams,
							IN_BOOL const BOOLEAN checkValid )
	{
	const ALGOID_INFO *algoIDinfo;
	const BYTE *oid = NULL;
	LOOP_INDEX i;
	int algoIDinfoSize, status;

	assert( algoIDparams == NULL || \
			isReadPtr( algoIDparams, sizeof( ALGOID_PARAMS ) ) );

	REQUIRES_N( isEnumRange( cryptAlgo, CRYPT_ALGO ) );
	REQUIRES_N( algoIDparams == NULL || \
				sanityCheckAlgoIDparams( cryptAlgo, algoIDparams ) );
	REQUIRES_N( isBooleanValue( checkValid ) );

	/* First we find the set of entries for the algorithm */
	status = getAlgoIDinfo( &algoIDinfo, &algoIDinfoSize );
	if( cryptStatusError( status ) )
		retIntError_Null();
	LOOP_LARGE( i = 0, 
				i < algoIDinfoSize && \
						algoIDinfo[ i ].algorithm != CRYPT_ALGO_NONE,
				i++ )
		{
		ENSURES_N( LOOP_INVARIANT_LARGE( i, 0, algoIDinfoSize - 1 ) );

		if( algoIDinfo[ i ].algorithm == cryptAlgo )
			{
			oid = algoIDinfo[ i ].oid;
			break;
			}
		}
	ENSURES_N( LOOP_BOUND_OK );
	ENSURES_N( i < algoIDinfoSize );			/* Ensures oid != NULL */

	/* If there are no further parameters present then we're done */
	if( algoIDparams == NULL )
		{
		if( oid != NULL )
			return( oid );
		if( !checkValid )
			return( NULL );
		retIntError_Null();
		}

	/* Beyond this point we keep searching past the initial match point 
	   without resetting i.  This is because the algorithm ID tables are 
	   ordered by the main algorithm, then sub-algorithms and parameters, so 
	   once we've matched the main algorithm we check subsequent entries for 
	   matches for other parameters associated with it */

	/* If it's a PKC and there's a special-case encoding mode present, find 
	   the entry for the encoding mode and exit.  This is because, unlike 
	   other mechanisms which encode everything that's needed in a single 
	   OID, the special encoding modes (OAEP, PSS, etc) are so over-
	   parameterised that the only way to handle them is to use a base OID
	   indicating the encoding mode and follow it with a whole collection of
	   parameters, all stereotyped to have the same value */
#if defined( USE_OAEP ) || defined( USE_PSS )
	if( isPkcAlgo( cryptAlgo ) && \
		algoIDparams->encodingType != ALGOID_ENCODING_NONE )
		{
		oid = NULL;		/* Restart the search */
		LOOP_LARGE_CHECKINC( i < algoIDinfoSize && \
									algoIDinfo[ i ].algorithm == cryptAlgo,
							 i++ )
			{
			ENSURES_N( LOOP_INVARIANT_LARGE_XXX( i, 0, algoIDinfoSize - 1 ) );

			if( algoIDinfo[ i ].parameter == algoIDparams->encodingType )
				{
				oid = algoIDinfo[ i ].oid;
				break;
				}
			}
		ENSURES_N( LOOP_BOUND_OK );
		ENSURES_N( i < algoIDinfoSize );

		if( oid != NULL )
			return( oid );
		if( !checkValid )
			return( NULL );
		retIntError_Null();
		}
#endif /* USE_OAEP || USE_PSS */

	/* If it's a conventional encryption algorithm, find the set of entries 
	   for the mode and optional key size */
	if( isConvAlgo( cryptAlgo ) )
		{
		oid = NULL;		/* Restart the search */
		LOOP_LARGE_CHECKINC( i < algoIDinfoSize && \
									algoIDinfo[ i ].algorithm == cryptAlgo,
							 i++ )
			{
			ENSURES_N( LOOP_INVARIANT_LARGE_XXX( i, 0, algoIDinfoSize - 1 ) );

			if( algoIDinfo[ i ].subAlgo == algoIDparams->cryptMode )
				{
				oid = algoIDinfo[ i ].oid;
				break;
				}
			}
		ENSURES_N( LOOP_BOUND_OK );
		ENSURES_N( i < algoIDinfoSize );		/* Ensures oid != NULL */
		if( algoIDparams->cryptKeySize != 0 )
			{
			oid = NULL;
			LOOP_LARGE_CHECKINC( i < algoIDinfoSize && \
										algoIDinfo[ i ].algorithm == cryptAlgo,
								 i++ )
				{
				ENSURES_N( LOOP_INVARIANT_LARGE_XXX( i, 0, algoIDinfoSize - 1 ) );

				if( algoIDinfo[ i ].parameter == algoIDparams->cryptKeySize )
					{
					oid = algoIDinfo[ i ].oid;
					break;
					}
				}
			ENSURES_N( LOOP_BOUND_OK );
			ENSURES_N( i < algoIDinfoSize );	/* Ensures oid != NULL */
			}
		}

	/* If it's a hash/MAC algorithm, find the entry for the block size */
	if( isHashAlgo( cryptAlgo ) || isMacAlgo( cryptAlgo ) )
		{
		oid = NULL;		/* Restart the search */
		LOOP_LARGE_CHECKINC( i < algoIDinfoSize && \
									algoIDinfo[ i ].algorithm == cryptAlgo,
							 i++ )
			{
			ENSURES_N( LOOP_INVARIANT_LARGE_XXX( i, 0, algoIDinfoSize - 1 ) );

			if( algoIDinfo[ i ].parameter == algoIDparams->hashParam )
				{
				oid = algoIDinfo[ i ].oid;
				break;
				}
			}
		ENSURES_N( LOOP_BOUND_OK );
		ENSURES_N( i < algoIDinfoSize );		/* Ensures oid != NULL */
		}

	/* If it's a signature algorithm, find the set of entries for the hash 
	   algorithm and then the specific algorithm variant within that */
	if( isSigAlgo( cryptAlgo ) )
		{
		oid = NULL;		/* Restart the search */
		LOOP_LARGE_CHECKINC( i < algoIDinfoSize && \
									algoIDinfo[ i ].algorithm == cryptAlgo,
							 i++ )
			{
			ENSURES_N( LOOP_INVARIANT_LARGE_XXX( i, 0, algoIDinfoSize - 1 ) );

			if( algoIDinfo[ i ].subAlgo == algoIDparams->hashAlgo && \
				algoIDinfo[ i ].parameter == algoIDparams->hashParam )
				{
				oid = algoIDinfo[ i ].oid;
				break;
				}
			}
		ENSURES_N( LOOP_BOUND_OK );
		ENSURES_N( i < algoIDinfoSize );		/* Ensures oid != NULL */
		}

	if( oid != NULL )
		return( oid );
	if( !checkValid )
		return( NULL );
	retIntError_Null();
	}

CHECK_RETVAL STDC_NONNULL_ARG( ( 1, 3, 4 ) ) \
int oidToAlgorithm( IN_BUFFER( oidLength ) const BYTE *oid, 
					IN_LENGTH_OID const int oidLength,
					OUT_ALGO_Z CRYPT_ALGO_TYPE *cryptAlgo,
					OUT_PTR ALGOID_PARAMS *algoIDparams,
					IN_ENUM( ALGOID_CLASS ) const ALGOID_CLASS_TYPE type )
	{
	const ALGOID_INFO *algoIDinfo, *algoIDinfoPtr = NULL;
	BYTE oidByte;
	LOOP_INDEX i;
	int algoIDinfoSize, status;

	assert( isReadPtrDynamic( oid, oidLength ) );

	REQUIRES( oidLength >= MIN_OID_SIZE && oidLength == sizeofOID( oid ) && \
			  oidLength <= MAX_OID_SIZE );
	REQUIRES( isEnumRange( type, ALGOID_CLASS ) );

	/* Clear return values */
	*cryptAlgo = CRYPT_ALGO_NONE;
	memset( algoIDparams, 0, sizeof( ALGOID_PARAMS ) );

	/* Look for a matching OID.  For quick-reject matching we check the last 
	   byte of the OID (large groups of OIDs have common prefixes due to 
	   being in the same arc), this rejects the majority of mismatches 
	   without requiring a full comparison, however it also means that we
	   can't use matchOID() for the matching */
	status = getAlgoIDinfo( &algoIDinfo, &algoIDinfoSize );
	if( cryptStatusError( status ) )
		return( status );
	oidByte = oid[ oidLength - 1 ];
	LOOP_LARGE( i = 0, 
				i < algoIDinfoSize && \
						algoIDinfo[ i ].algorithm != CRYPT_ALGO_NONE,
				i++ )
		{
		ENSURES( LOOP_INVARIANT_LARGE( i, 0, algoIDinfoSize - 1 ) );

		if( algoIDinfo[ i ].algoClass == type && \
			oidLength == sizeofOID( algoIDinfo[ i ].oid ) && \
			algoIDinfo[ i ].oid[ oidLength - 1 ] == oidByte && \
			matchOID( oid, oidLength, algoIDinfo[ i ].oid ) )
			{
			algoIDinfoPtr = &algoIDinfo[ i ];
			break;
			}
		}
	ENSURES( LOOP_BOUND_OK );
	ENSURES( i < algoIDinfoSize );

	/* If this OID isn't recognised, let the caller know */
	if( algoIDinfoPtr == NULL )
		return( CRYPT_ERROR_NOTAVAIL );

	/* Copy across the algorithm information */
	*cryptAlgo = algoIDinfoPtr->algorithm;
	switch( algoIDinfoPtr->algoClass )
		{
		case ALGOID_CLASS_CRYPT:
			/* For conventional encryption algorithms the sub-algorithm is 
			   the encryption mode and the parameter is the key size */
			algoIDparams->cryptMode = algoIDinfoPtr->subAlgo;
			algoIDparams->cryptKeySize = algoIDinfoPtr->parameter;
			break;

		case ALGOID_CLASS_HASH:
			/* For hash and MAC algorithms the algorithm is reflected in the
			   hashAlgo member of the algoIDparams and the parameter is the
			   hash size */
			algoIDparams->hashAlgo = algoIDinfoPtr->algorithm;
			algoIDparams->hashParam = algoIDinfoPtr->parameter;
			break;

		case ALGOID_CLASS_AUTHENC:
			/* For authenticated encryption (generic secret) algorithms the
			   parameter is the secret data size */
			algoIDparams->cryptKeySize = algoIDinfoPtr->parameter;
			break;

		case ALGOID_CLASS_PKC:
			/* Record the encoding type if there's one present */
			if( algoIDinfoPtr->parameter != ALGOID_ENCODING_NONE && \
				algoIDinfoPtr->parameter != ALGOID_ENCODING_PKCS1 )
				algoIDparams->encodingType = algoIDinfoPtr->parameter;
			break;

		case ALGOID_CLASS_PKCSIG:
			/* For signature algorithms, record the hash algorithm and hash 
			   size */
			algoIDparams->hashAlgo = algoIDinfoPtr->subAlgo;
			algoIDparams->hashParam = algoIDinfoPtr->parameter;
			break;

		default:
			retIntError();
		}

	return( CRYPT_OK );
	}
#endif /* USE_INT_ASN1 */
