diff --git a/openrct2.common.props b/openrct2.common.props index 1cccd581e7..d11b4e02f2 100644 --- a/openrct2.common.props +++ b/openrct2.common.props @@ -53,7 +53,7 @@ C4549: 'operator': operator before comma has no effect; did you intend 'operator'? C4555: expression has no effect; expected expression with side-effect --> - __AVX2__;__SSE4_1__;OPENGL_NO_LINK;_CRT_SECURE_NO_WARNINGS;_USE_MATH_DEFINES;CURL_STATICLIB;SDL_MAIN_HANDLED;_WINSOCK_DEPRECATED_NO_WARNINGS;NOMINMAX;%(PreprocessorDefinitions) + __AVX2__;__SSE4_1__;OPENGL_NO_LINK;_CRT_SECURE_NO_WARNINGS;_USE_MATH_DEFINES;CURL_STATICLIB;SDL_MAIN_HANDLED;_WINSOCK_DEPRECATED_NO_WARNINGS;NOMINMAX;__USE_CNG__;%(PreprocessorDefinitions) MultiThreaded MultiThreadedDLL true @@ -61,7 +61,7 @@ /utf-8 /std:c++17 /permissive- /Zc:externConstexpr - wininet.lib;imm32.lib;version.lib;winmm.lib;crypt32.lib;wldap32.lib;shlwapi.lib;setupapi.lib;%(AdditionalDependencies) + wininet.lib;imm32.lib;version.lib;winmm.lib;crypt32.lib;wldap32.lib;shlwapi.lib;setupapi.lib;ncrypt.lib;%(AdditionalDependencies) /OPT:NOLBR /ignore:4099 %(AdditionalOptions) @@ -76,7 +76,7 @@ DebugFull - benchmarkd.lib;libbreakpadd.lib;libbreakpad_clientd.lib;bz2d.lib;discord-rpc.lib;freetyped.lib;jansson_d.lib;libcrypto.lib;libcurl-d.lib;libpng16d.lib;libspeexdsp.lib;libssl.lib;SDL2d.lib;zip.lib;zlibd.lib;%(AdditionalDependencies) + benchmarkd.lib;libbreakpadd.lib;libbreakpad_clientd.lib;bz2d.lib;discord-rpc.lib;freetyped.lib;jansson_d.lib;libcurl-d.lib;libpng16d.lib;libspeexdsp.lib;SDL2d.lib;zip.lib;zlibd.lib;%(AdditionalDependencies) @@ -94,7 +94,7 @@ DebugFull true true - benchmark.lib;libbreakpad.lib;libbreakpad_client.lib;bz2.lib;discord-rpc.lib;freetype.lib;jansson.lib;libcrypto.lib;libcurl.lib;libpng16.lib;libspeexdsp.lib;libssl.lib;SDL2.lib;zip.lib;zlib.lib;%(AdditionalDependencies) + benchmark.lib;libbreakpad.lib;libbreakpad_client.lib;bz2.lib;discord-rpc.lib;freetype.lib;jansson.lib;libcurl.lib;libpng16.lib;libspeexdsp.lib;SDL2.lib;zip.lib;zlib.lib;%(AdditionalDependencies) diff --git a/src/openrct2/core/Crypt.CNG.cpp b/src/openrct2/core/Crypt.CNG.cpp new file mode 100644 index 0000000000..6002a8dc58 --- /dev/null +++ b/src/openrct2/core/Crypt.CNG.cpp @@ -0,0 +1,575 @@ +#pragma region Copyright (c) 2018 OpenRCT2 Developers +/***************************************************************************** +* OpenRCT2, an open source clone of Roller Coaster Tycoon 2. +* +* OpenRCT2 is the work of many authors, a full list can be found in contributors.md +* For more information, visit https://github.com/OpenRCT2/OpenRCT2 +* +* OpenRCT2 is free software: you can redistribute it and/or modify +* it under the terms of the GNU General Public License as published by +* the Free Software Foundation, either version 3 of the License, or +* (at your option) any later version. +* +* A full copy of the GNU General Public License can be found in licence.txt +*****************************************************************************/ +#pragma endregion + +#ifdef __USE_CNG__ + +#include "Crypt.h" +#include "../platform/Platform2.h" +#include "IStream.hpp" +#include +#include +#include +#include + +// clang-format off +// CNG: Cryptography API: Next Generation (CNG) +// available in Windows Vista onwards. +#define WIN32_LEAN_AND_MEAN +#include +#include +#include +#include +#define NT_SUCCESS(Status) (((NTSTATUS)(Status)) >= 0) +// clang-format on + +using namespace Crypt; + +static void CngThrowOnBadStatus(const std::string_view& name, NTSTATUS status) +{ + if (!NT_SUCCESS(status)) + { + throw std::runtime_error(std::string(name) + " failed: " + std::to_string(status)); + } +} + +static void ThrowBadAllocOnNull(const void * ptr) +{ + if (ptr == nullptr) + { + throw std::bad_alloc(); + } +} + +template +class CngHashAlgorithm final : public TBase +{ +private: + const wchar_t * _algName; + BCRYPT_ALG_HANDLE _hAlg{}; + BCRYPT_HASH_HANDLE _hHash{}; + PBYTE _pbHashObject{}; + bool _reusable{}; + +public: + CngHashAlgorithm(const wchar_t * algName) + { + // BCRYPT_HASH_REUSABLE_FLAG only available from Windows 8 + _algName = algName; + _reusable = Platform::IsOSVersionAtLeast(6, 2, 0); + Initialise(); + } + + ~CngHashAlgorithm() + { + Dispose(); + } + + TBase * Clear() override + { + if (_reusable) + { + // Finishing the current digest clears the state ready for a new digest + Finish(); + } + else + { + Dispose(); + Initialise(); + } + return this; + } + + TBase * Update(const void * data, size_t dataLen) override + { + auto status = BCryptHashData(_hHash, (PBYTE)data, (ULONG)dataLen, 0); + CngThrowOnBadStatus("BCryptHashData", status); + return this; + } + + typename TBase::Result Finish() override + { + typename TBase::Result result; + auto status = BCryptFinishHash(_hHash, result.data(), (ULONG)result.size(), 0); + CngThrowOnBadStatus("BCryptFinishHash", status); + return result; + } + +private: + void Initialise() + { + auto flags = _reusable ? BCRYPT_HASH_REUSABLE_FLAG : 0; + auto status = BCryptOpenAlgorithmProvider(&_hAlg, _algName, nullptr, flags); + CngThrowOnBadStatus("BCryptOpenAlgorithmProvider", status); + + // Calculate the size of the buffer to hold the hash object + DWORD cbHashObject{}; + DWORD cbData{}; + status = BCryptGetProperty(_hAlg, BCRYPT_OBJECT_LENGTH, (PBYTE)&cbHashObject, sizeof(DWORD), &cbData, 0); + CngThrowOnBadStatus("BCryptGetProperty", status); + + // Create a hash + _pbHashObject = (PBYTE)HeapAlloc(GetProcessHeap(), 0, cbHashObject); + ThrowBadAllocOnNull(_pbHashObject); + status = BCryptCreateHash(_hAlg, &_hHash, _pbHashObject, cbHashObject, nullptr, 0, 0); + CngThrowOnBadStatus("BCryptCreateHash", status); + } + + void Dispose() + { + BCryptCloseAlgorithmProvider(_hAlg, 0); + BCryptDestroyHash(_hHash); + HeapFree(GetProcessHeap(), 0, _pbHashObject); + + _hAlg = {}; + _hHash = {}; + _pbHashObject = {}; + } +}; + +class DerReader +{ +private: + ivstream _stream; + + template + T Read(std::istream& stream) + { + T value; + stream.read((char*)&value, sizeof(T)); + return value; + } + + template + std::vector Read(std::istream& stream, size_t count) + { + std::vector values(count); + stream.read((char*)values.data(), sizeof(T) * count); + return values; + } + + int ReadTag(std::istream& stream) + { + auto a = Read(stream); + // auto tagClass = a >> 6; + // auto tagConstructed = ((a & 0x20) != 0); + auto tagNumber = a & 0x1F; + if (tagNumber == 0x1F) + { + throw std::runtime_error("Unsupported DER tag"); + } + return tagNumber; + } + + int ReadLength(std::istream& stream) + { + auto a = Read(stream); + auto len = a & 0x7F; + if (len == a) + { + return len; + } + if (len > 6) + { + throw std::runtime_error("Length over 48 bits not supported at this position"); + } + if (len == 0) + { + throw std::runtime_error("Unknown length"); + } + auto result = 0; + for (auto i = 0; i < len; i++) + { + result = (result << 8) + Read(stream); + } + return result; + } + +public: + DerReader(const std::vector& data) + : _stream(data) + { + } + + void ReadSequenceHeader() + { + auto a = Read(_stream); + if (a == 0x8130) + { + Read(_stream); + } + else if (a == 0x8230) + { + Read(_stream); + } + else + { + throw std::runtime_error("Invalid DER code"); + } + } + + std::vector ReadInteger() + { + auto t = ReadTag(_stream); + if (t != 2) + { + throw std::runtime_error("Expected INTEGER"); + } + auto len = ReadLength(_stream); + auto result = Read(_stream, len); + + auto v = result[0]; + auto neg = (v > 127); + auto pad = neg ? 255 : 0; + for (size_t i = 0; i < result.size(); i++) + { + if (result[i] != pad) + { + result.erase(result.begin(), result.begin() + i); + break; + } + } + return result; + } +}; + +class DerWriter +{ +private: + std::vector _buffer; + +public: + void WriteSequenceHeader() + { + _buffer.push_back(0x30); + _buffer.push_back(0x81); + _buffer.push_back(0x89); + } + + void WriteInteger(const std::vector& data) + { + if (data.size() < 128) + { + _buffer.push_back((uint8_t)data.size()); + } + else if (data.size() <= std::numeric_limits().max()) + { + _buffer.push_back(0b10000001); + _buffer.push_back((uint8_t)data.size()); + } + else if (data.size() <= std::numeric_limits().max()) + { + _buffer.push_back(0b10000010); + _buffer.push_back((data.size() >> 8) & 0xFF); + _buffer.push_back(data.size() & 0xFF); + } + _buffer.insert(_buffer.end(), data.begin(), data.end()); + } + + std::vector&& Complete() + { + return std::move(_buffer); + } +}; + +class CngRsaKey final : public RsaKey +{ +private: + struct RsaKeyParams + { + std::vector Modulus; + std::vector Exponent; + std::vector Prime1; + std::vector Prime2; + }; + +public: + NCRYPT_KEY_HANDLE GetKeyHandle() const { return _hKey; } + + ~CngRsaKey() + { + NCryptFreeObject(_hKey); + } + + void SetPrivate(const std::string_view& pem) override + { + auto der = ReadPEM(pem, SZ_PRIVATE_BEGIN_TOKEN, SZ_PRIVATE_END_TOKEN); + DerReader derReader(der); + RsaKeyParams params; + derReader.ReadSequenceHeader(); + derReader.ReadInteger(); + params.Modulus = derReader.ReadInteger(); + params.Exponent = derReader.ReadInteger(); + derReader.ReadInteger(); + params.Prime1 = derReader.ReadInteger(); + params.Prime2 = derReader.ReadInteger(); + _hKey = ImportKey(params); + } + + void SetPublic(const std::string_view& pem) override + { + auto der = ReadPEM(pem, SZ_PUBLIC_BEGIN_TOKEN, SZ_PUBLIC_END_TOKEN); + DerReader derReader(der); + RsaKeyParams params; + derReader.ReadSequenceHeader(); + params.Modulus = derReader.ReadInteger(); + params.Exponent = derReader.ReadInteger(); + _hKey = ImportKey(params); + } + + std::string GetPrivate() override + { + return ""; + } + + std::string GetPublic() override + { + auto params = ExportKey(true); + DerWriter derWriter; + derWriter.WriteSequenceHeader(); + derWriter.WriteInteger(params.Modulus); + derWriter.WriteInteger(params.Exponent); + auto derBytes = derWriter.Complete(); + auto b64 = EncodeBase64(derBytes); + + std::ostringstream sb; + sb << std::string(SZ_PUBLIC_BEGIN_TOKEN) << std::endl; + sb << b64 << std::endl; + sb << std::string(SZ_PUBLIC_END_TOKEN) << std::endl; + return sb.str(); + } + + void Generate() override + { + } + +private: + static constexpr std::string_view SZ_PUBLIC_BEGIN_TOKEN = "-----BEGIN RSA PUBLIC KEY-----"; + static constexpr std::string_view SZ_PUBLIC_END_TOKEN = "-----END RSA PUBLIC KEY-----"; + static constexpr std::string_view SZ_PRIVATE_BEGIN_TOKEN = "-----BEGIN RSA PRIVATE KEY-----"; + static constexpr std::string_view SZ_PRIVATE_END_TOKEN = "-----END RSA PRIVATE KEY-----"; + + NCRYPT_KEY_HANDLE _hKey{}; + + static std::vector ReadPEM(const std::string_view& pem, const std::string_view& beginToken, const std::string_view& endToken) + { + auto beginPos = pem.find(beginToken); + auto endPos = pem.find(endToken); + if (beginPos != std::string::npos && endPos != std::string::npos) + { + beginPos += beginToken.size(); + auto code = Trim(pem.substr(beginPos, endPos - beginPos)); + return DecodeBase64(code); + } + throw std::runtime_error("Invalid PEM file"); + } + + static std::string_view Trim(std::string_view input) + { + for (size_t i = 0; i < input.size(); i++) + { + if (input[i] >= '!') + { + input.remove_prefix(i); + break; + } + } + for (size_t i = input.size() - 1; i >= 0; i--) + { + if (input[i] >= '!') + { + input = input.substr(0, i + 1); + break; + } + } + return input; + } + + static std::string EncodeBase64(const std::vector& input) + { + DWORD chString; + if (!CryptBinaryToStringA(input.data(), (DWORD)input.size(), CRYPT_STRING_BASE64 | CRYPT_STRING_NOCRLF, NULL, &chString)) + { + throw std::runtime_error("CryptBinaryToStringA failed"); + } + std::string result(chString, 0); + if (!CryptBinaryToStringA(input.data(), (DWORD)input.size(), CRYPT_STRING_BASE64 | CRYPT_STRING_NOCRLF, result.data(), &chString)) + { + throw std::runtime_error("CryptBinaryToStringA failed"); + } + return result; + } + + static std::vector DecodeBase64(const std::string_view& input) + { + DWORD cbBinary{}; + if (!CryptStringToBinaryA(input.data(), (DWORD)input.size(), CRYPT_STRING_BASE64, NULL, &cbBinary, NULL, NULL)) + { + throw std::runtime_error("CryptStringToBinaryA failed"); + } + std::vector result(cbBinary); + if (!CryptStringToBinaryA(input.data(), (DWORD)input.size(), CRYPT_STRING_BASE64, result.data(), &cbBinary, NULL, NULL)) + { + throw std::runtime_error("CryptStringToBinaryA failed"); + } + return result; + } + + static NCRYPT_KEY_HANDLE ImportKey(const RsaKeyParams& params) + { + bool isPublic = params.Prime1.size() == 0; + auto blobType = isPublic ? BCRYPT_RSAPUBLIC_BLOB : BCRYPT_RSAPRIVATE_BLOB; + + BCRYPT_RSAKEY_BLOB header{}; + header.Magic = isPublic ? BCRYPT_RSAPUBLIC_MAGIC : BCRYPT_RSAPRIVATE_MAGIC; + header.BitLength = (ULONG)(params.Modulus.size() * 8); + header.cbPublicExp = (ULONG)params.Exponent.size(); + header.cbModulus = (ULONG)params.Modulus.size(); + header.cbPrime1 = (ULONG)params.Prime1.size(); + header.cbPrime2 = (ULONG)params.Prime2.size(); + + std::vector blob; + blob.insert(blob.end(), (uint8_t*)&header, (uint8_t*)(&header + 1)); + blob.insert(blob.end(), params.Exponent.begin(), params.Exponent.end()); + blob.insert(blob.end(), params.Modulus.begin(), params.Modulus.end()); + blob.insert(blob.end(), params.Prime1.begin(), params.Prime1.end()); + blob.insert(blob.end(), params.Prime2.begin(), params.Prime2.end()); + + NCRYPT_PROV_HANDLE hProv{}; + NCRYPT_KEY_HANDLE hKey{}; + auto status = NCryptOpenStorageProvider(&hProv, MS_KEY_STORAGE_PROVIDER, 0); + CngThrowOnBadStatus("NCryptOpenStorageProvider", status); + status = NCryptImportKey(hProv, NULL, blobType, NULL, &hKey, (PBYTE)blob.data(), (DWORD)blob.size(), 0); + NCryptFreeObject(hProv); + CngThrowOnBadStatus("NCryptImportKey", status); + return hKey; + } + + RsaKeyParams ExportKey(bool onlyPublic) + { + auto blobType = onlyPublic ? BCRYPT_RSAPUBLIC_BLOB : BCRYPT_RSAPRIVATE_BLOB; + + std::vector output; + NCRYPT_PROV_HANDLE hProv{}; + try + { + auto status = NCryptOpenStorageProvider(&hProv, MS_KEY_STORAGE_PROVIDER, 0); + CngThrowOnBadStatus("NCryptOpenStorageProvider", status); + DWORD cbOutput{}; + status = NCryptExportKey(_hKey, NULL, blobType, NULL, NULL, 0, &cbOutput, 0); + CngThrowOnBadStatus("NCryptExportKey", status); + output = std::vector(cbOutput); + status = NCryptExportKey(_hKey, NULL, blobType, NULL, output.data(), cbOutput, &cbOutput, 0); + CngThrowOnBadStatus("NCryptExportKey", status); + NCryptFreeObject(hProv); + } + catch (const std::exception&) + { + NCryptFreeObject(hProv); + } + + RsaKeyParams params; + const auto& header = *((BCRYPT_RSAKEY_BLOB*)output.data()); + size_t i = sizeof(BCRYPT_RSAKEY_BLOB); + params.Modulus.insert(params.Modulus.end(), output.begin() + i, output.begin() + i + header.cbModulus); + i += header.cbModulus; + params.Exponent.insert(params.Exponent.end(), output.begin() + i, output.begin() + i + header.cbPublicExp); + return params; + } +}; + +class CngRsaAlgorithm final : public RsaAlgorithm +{ +public: + std::vector SignData(const RsaKey& key, const void * data, size_t dataLen) override + { + auto hKey = static_cast(key).GetKeyHandle(); + auto [cbHash, pbHash] = HashData(data, dataLen); + auto [cbSignature, pbSignature] = std::tuple(); + try + { + BCRYPT_PKCS1_PADDING_INFO paddingInfo{ BCRYPT_SHA256_ALGORITHM }; + auto status = NCryptSignHash(hKey, &paddingInfo, pbHash, cbHash, NULL, 0, &cbSignature, BCRYPT_PAD_PKCS1); + CngThrowOnBadStatus("NCryptSignHash", status); + pbSignature = (PBYTE)HeapAlloc(GetProcessHeap(), 0, cbSignature); + ThrowBadAllocOnNull(pbSignature); + status = NCryptSignHash(hKey, &paddingInfo, pbHash, cbHash, pbSignature, cbSignature, &cbSignature, BCRYPT_PAD_PKCS1); + CngThrowOnBadStatus("NCryptSignHash", status); + + auto result = std::vector(pbSignature, pbSignature + cbSignature); + HeapFree(GetProcessHeap(), 0, pbSignature); + return result; + } + catch (std::exception&) + { + HeapFree(GetProcessHeap(), 0, pbHash); + HeapFree(GetProcessHeap(), 0, pbSignature); + throw; + } + } + + bool VerifyData(const RsaKey& key, const void * data, size_t dataLen, const void * sig, size_t sigLen) override + { + auto hKey = static_cast(key).GetKeyHandle(); + auto [cbHash, pbHash] = HashData(data, dataLen); + auto [cbSignature, pbSignature] = ToHeap(sig, sigLen); + + BCRYPT_PKCS1_PADDING_INFO paddingInfo { BCRYPT_SHA256_ALGORITHM }; + auto status = NCryptVerifySignature(hKey, &paddingInfo, pbHash, cbHash, pbSignature, cbSignature, BCRYPT_PAD_PKCS1); + HeapFree(GetProcessHeap(), 0, pbSignature); + return status == ERROR_SUCCESS; + } + +private: + static std::tuple HashData(const void * data, size_t dataLen) + { + auto hash = Crypt::SHA256(data, dataLen); + return ToHeap(hash.data(), hash.size()); + } + + static std::tuple ToHeap(const void * data, size_t dataLen) + { + auto cbHash = (DWORD)dataLen; + auto pbHash = (PBYTE)HeapAlloc(GetProcessHeap(), 0, dataLen); + ThrowBadAllocOnNull(pbHash); + std::memcpy(pbHash, data, dataLen); + return std::make_tuple(cbHash, pbHash); + } +}; + +namespace Crypt +{ + std::unique_ptr CreateSHA1() + { + return std::make_unique>(BCRYPT_SHA1_ALGORITHM); + } + + std::unique_ptr CreateSHA256() + { + return std::make_unique>(BCRYPT_SHA256_ALGORITHM); + } + + std::unique_ptr CreateRSA() + { + return std::make_unique(); + } + + std::unique_ptr CreateRSAKey() + { + return std::make_unique(); + } +} + +#endif diff --git a/src/openrct2/core/Crypt.OpenSSL.cpp b/src/openrct2/core/Crypt.OpenSSL.cpp index ff950f9c1a..bf09363460 100644 --- a/src/openrct2/core/Crypt.OpenSSL.cpp +++ b/src/openrct2/core/Crypt.OpenSSL.cpp @@ -7,7 +7,7 @@ * OpenRCT2 is licensed under the GNU General Public License version 3. *****************************************************************************/ -#ifndef DISABLE_NETWORK +#if defined(DISABLE_NETWORK) && !defined(__USE_CNG__) # include "Crypt.h"