mirror of
https://github.com/reactos/reactos.git
synced 2025-03-10 10:14:44 +00:00
435a566751
* sumatrapdf - vendor import * everything compiles (libjpeg, poppler, fitz, sumatrapdf) * does NOT link (remove the comment tags in the parent directory.rbuild file (rosapps dir) to build it) svn path=/trunk/; revision=29295
451 lines
8.7 KiB
C
451 lines
8.7 KiB
C
#include "fitz.h"
|
|
#include "mupdf.h"
|
|
|
|
static const unsigned char padding[32] =
|
|
{
|
|
0x28, 0xbf, 0x4e, 0x5e, 0x4e, 0x75, 0x8a, 0x41,
|
|
0x64, 0x00, 0x4e, 0x56, 0xff, 0xfa, 0x01, 0x08,
|
|
0x2e, 0x2e, 0x00, 0xb6, 0xd0, 0x68, 0x3e, 0x80,
|
|
0x2f, 0x0c, 0xa9, 0xfe, 0x64, 0x53, 0x69, 0x7a
|
|
};
|
|
|
|
static void voodoo50(unsigned char *buf, int n)
|
|
{
|
|
fz_md5 md5;
|
|
int i;
|
|
|
|
for (i = 0; i < 50; i++)
|
|
{
|
|
fz_md5init(&md5);
|
|
fz_md5update(&md5, buf, n);
|
|
fz_md5final(&md5, buf);
|
|
}
|
|
}
|
|
|
|
static void voodoo19(unsigned char *data, int ndata, unsigned char *key, int nkey)
|
|
{
|
|
fz_arc4 arc4;
|
|
unsigned char keybuf[16];
|
|
int i, k;
|
|
|
|
for (i = 1; i <= 19; i++)
|
|
{
|
|
for (k = 0; k < nkey; k++)
|
|
keybuf[k] = key[k] ^ (unsigned char)i;
|
|
fz_arc4init(&arc4, keybuf, nkey);
|
|
fz_arc4encrypt(&arc4, data, data, ndata);
|
|
}
|
|
}
|
|
|
|
static void padpassword(unsigned char *buf, char *pw, int pwlen)
|
|
{
|
|
if (pwlen > 32)
|
|
pwlen = 32;
|
|
memcpy(buf, pw, pwlen);
|
|
memcpy(buf + pwlen, padding, 32 - pwlen);
|
|
}
|
|
|
|
/*
|
|
* Create crypt object for decrypting given the
|
|
* Encoding dictionary and file ID
|
|
*/
|
|
fz_error *
|
|
pdf_newdecrypt(pdf_crypt **cp, fz_obj *enc, fz_obj *id)
|
|
{
|
|
pdf_crypt *crypt = nil;
|
|
fz_obj *obj;
|
|
int m;
|
|
|
|
obj = fz_dictgets(enc, "V");
|
|
m = 0;
|
|
if (fz_isint(obj))
|
|
m = fz_toint(obj);
|
|
if (m != 1 && m != 2)
|
|
return fz_throw("unsupported encryption: %d", m);
|
|
|
|
crypt = fz_malloc(sizeof(pdf_crypt));
|
|
if (!crypt)
|
|
return fz_outofmem;
|
|
|
|
crypt->encrypt = fz_keepobj(enc);
|
|
crypt->id = nil;
|
|
|
|
obj = fz_dictgets(enc, "O");
|
|
if (!fz_isstring(obj) || fz_tostrlen(obj) != 32)
|
|
goto cleanup;
|
|
memcpy(crypt->o, fz_tostrbuf(obj), 32);
|
|
|
|
obj = fz_dictgets(enc, "U");
|
|
if (!fz_isstring(obj) || fz_tostrlen(obj) != 32)
|
|
goto cleanup;
|
|
memcpy(crypt->u, fz_tostrbuf(obj), 32);
|
|
|
|
obj = fz_dictgets(enc, "P");
|
|
if (!fz_isint(obj))
|
|
goto cleanup;
|
|
crypt->p = fz_toint(obj);
|
|
|
|
obj = fz_dictgets(enc, "Length");
|
|
if (fz_isint(obj))
|
|
crypt->n = fz_toint(obj) / 8;
|
|
else
|
|
crypt->n = 40 / 8;
|
|
if (crypt->n < 5) goto cleanup;
|
|
if (crypt->n > 16) goto cleanup;
|
|
|
|
obj = fz_dictgets(enc, "R");
|
|
if (!fz_isint(obj))
|
|
goto cleanup;
|
|
crypt->r = fz_toint(obj);
|
|
if (crypt->r != 2 && crypt->r != 3)
|
|
goto cleanup;
|
|
if (crypt->r == 2 && crypt->n != 5)
|
|
goto cleanup;
|
|
|
|
if (!fz_isarray(id) || fz_arraylen(id) != 2)
|
|
goto cleanup;
|
|
obj = fz_arrayget(id, 0);
|
|
if (!fz_isstring(obj))
|
|
goto cleanup;
|
|
crypt->id = fz_keepobj(obj);
|
|
|
|
crypt->keylen = crypt->n + 5;
|
|
if (crypt->keylen > 16)
|
|
crypt->keylen = 16;
|
|
|
|
memset(crypt->key, 0, 16);
|
|
|
|
*cp = crypt;
|
|
return nil;
|
|
|
|
cleanup:
|
|
pdf_dropcrypt(crypt);
|
|
return fz_throw("corrupt encryption dictionary");
|
|
}
|
|
|
|
void
|
|
pdf_dropcrypt(pdf_crypt *crypt)
|
|
{
|
|
if (crypt->encrypt) fz_dropobj(crypt->encrypt);
|
|
if (crypt->id) fz_dropobj(crypt->id);
|
|
fz_free(crypt);
|
|
}
|
|
|
|
static void
|
|
createobjkey(pdf_crypt *crypt, unsigned oid, unsigned gid, unsigned char *key)
|
|
{
|
|
unsigned char message[5];
|
|
fz_md5 md5;
|
|
|
|
/* Algorithm 3.1 Encryption of data using an encryption key */
|
|
|
|
fz_md5init(&md5);
|
|
|
|
fz_md5update(&md5, crypt->key, crypt->n);
|
|
|
|
message[0] = oid & 0xFF;
|
|
message[1] = (oid >> 8) & 0xFF;
|
|
message[2] = (oid >> 16) & 0xFF;
|
|
|
|
message[3] = gid & 0xFF;
|
|
message[4] = (gid >> 8) & 0xFF;
|
|
|
|
fz_md5update(&md5, message, 5);
|
|
|
|
fz_md5final(&md5, key);
|
|
}
|
|
|
|
/*
|
|
* Algorithm 3.2 Computing an encryption key
|
|
*/
|
|
static void
|
|
createkey(pdf_crypt *crypt, char *userpw, int pwlen)
|
|
{
|
|
unsigned char buf[32];
|
|
fz_md5 md5;
|
|
|
|
/* Step 1 + 2 */
|
|
fz_md5init(&md5);
|
|
padpassword(buf, userpw, pwlen);
|
|
fz_md5update(&md5, buf, 32);
|
|
|
|
/* Step 3 */
|
|
fz_md5update(&md5, crypt->o, 32);
|
|
|
|
/* Step 4 */
|
|
buf[0] = crypt->p & 0xFF;
|
|
buf[1] = (crypt->p >> 8) & 0xFF;
|
|
buf[2] = (crypt->p >> 16) & 0xFF;
|
|
buf[3] = (crypt->p >> 24) & 0xFF;
|
|
fz_md5update(&md5, buf, 4);
|
|
|
|
/* Step 5 */
|
|
fz_md5update(&md5, fz_tostrbuf(crypt->id), fz_tostrlen(crypt->id));
|
|
fz_md5final(&md5, crypt->key);
|
|
|
|
/* Step 6 (rev 3 only) */
|
|
if (crypt->r == 3)
|
|
voodoo50(crypt->key, crypt->n);
|
|
|
|
/* Step 7: key is in crypt->key */
|
|
}
|
|
|
|
/*
|
|
* Algorithm 3.3 Computing the O value
|
|
*/
|
|
static void
|
|
createowner(pdf_crypt *crypt, char *userpw, char *ownerpw)
|
|
{
|
|
unsigned char buf[32];
|
|
unsigned char key[16];
|
|
fz_arc4 arc4;
|
|
fz_md5 md5;
|
|
|
|
/* Step 1 + 2 */
|
|
if (strlen(ownerpw) == 0)
|
|
ownerpw = userpw;
|
|
padpassword(buf, ownerpw, strlen(ownerpw));
|
|
fz_md5init(&md5);
|
|
fz_md5update(&md5, buf, 32);
|
|
fz_md5final(&md5, key);
|
|
|
|
/* Step 3 (rev 3 only) */
|
|
if (crypt->r == 3)
|
|
voodoo50(key, crypt->n);
|
|
|
|
/* Step 4 */
|
|
fz_arc4init(&arc4, key, crypt->n);
|
|
|
|
/* Step 5 */
|
|
padpassword(buf, userpw, strlen(ownerpw));
|
|
|
|
/* Step 6 */
|
|
fz_arc4encrypt(&arc4, buf, buf, 32);
|
|
|
|
/* Step 7 (rev 3 only) */
|
|
if (crypt->r == 3)
|
|
voodoo19(buf, 32, key, crypt->n);
|
|
|
|
/* Step 8 */
|
|
memcpy(crypt->o, buf, 32);
|
|
}
|
|
|
|
/*
|
|
* Algorithm 3.4 Computing the U value (rev 2)
|
|
* Algorithm 3.5 Computing the U value (rev 3)
|
|
*/
|
|
static void
|
|
createuser(pdf_crypt *crypt, char *userpw, int pwlen)
|
|
{
|
|
unsigned char key[16];
|
|
fz_arc4 arc4;
|
|
fz_md5 md5;
|
|
|
|
if (crypt->r == 2)
|
|
{
|
|
createkey(crypt, userpw, pwlen);
|
|
fz_arc4init(&arc4, crypt->key, crypt->n);
|
|
fz_arc4encrypt(&arc4, crypt->u, (unsigned char *)padding, 32);
|
|
}
|
|
|
|
if (crypt->r == 3)
|
|
{
|
|
/* Step 1 */
|
|
createkey(crypt, userpw, pwlen);
|
|
|
|
/* Step 2 */
|
|
fz_md5init(&md5);
|
|
fz_md5update(&md5, (unsigned char *)padding, 32);
|
|
|
|
/* Step 3 */
|
|
fz_md5update(&md5, fz_tostrbuf(crypt->id), fz_tostrlen(crypt->id));
|
|
fz_md5final(&md5, key);
|
|
|
|
/* Step 4 */
|
|
fz_arc4init(&arc4, crypt->key, crypt->n);
|
|
fz_arc4encrypt(&arc4, key, key, 16);
|
|
|
|
/* Step 5 */
|
|
voodoo19(key, 16, crypt->key, crypt->n);
|
|
|
|
/* Step 6 */
|
|
memcpy(crypt->u, key, 16);
|
|
memset(crypt->u + 16, 0, 16);
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Create crypt object for encrypting, given passwords,
|
|
* permissions, and file ID
|
|
*/
|
|
fz_error *
|
|
pdf_newencrypt(pdf_crypt **cp, char *userpw, char *ownerpw, int p, int n, fz_obj *id)
|
|
{
|
|
fz_error *error;
|
|
pdf_crypt *crypt;
|
|
|
|
crypt = fz_malloc(sizeof(pdf_crypt));
|
|
if (!crypt)
|
|
return fz_outofmem;
|
|
|
|
crypt->encrypt = nil;
|
|
crypt->id = fz_keepobj(fz_arrayget(id, 0));
|
|
crypt->p = p;
|
|
crypt->n = MIN(MAX(n / 8, 5), 16);
|
|
crypt->keylen = MIN(crypt->n + 5, 16);
|
|
crypt->r = crypt->n == 5 ? 2 : 3;
|
|
|
|
createowner(crypt, userpw, ownerpw);
|
|
createuser(crypt, userpw, strlen(userpw));
|
|
|
|
error = fz_packobj(&crypt->encrypt,
|
|
"<< /Filter /Standard "
|
|
"/V %i /R %i "
|
|
"/O %# /U %# "
|
|
"/P %i "
|
|
"/Length %i >>",
|
|
crypt->r == 2 ? 1 : 2,
|
|
crypt->r,
|
|
crypt->o, 32,
|
|
crypt->u, 32,
|
|
crypt->p,
|
|
crypt->n * 8);
|
|
if (error)
|
|
{
|
|
pdf_dropcrypt(crypt);
|
|
return error;
|
|
}
|
|
|
|
*cp = crypt;
|
|
return nil;
|
|
}
|
|
|
|
/*
|
|
* Algorithm 3.6 Checking the user password
|
|
*/
|
|
|
|
fz_error *
|
|
pdf_setpassword(pdf_crypt *crypt, char *pw)
|
|
{
|
|
fz_error *error = pdf_setuserpassword(crypt, pw, strlen(pw));
|
|
if (error)
|
|
{
|
|
fz_droperror(error);
|
|
error = pdf_setownerpassword(crypt, pw, strlen(pw));
|
|
}
|
|
return error;
|
|
}
|
|
|
|
fz_error *
|
|
pdf_setuserpassword(pdf_crypt *crypt, char *userpw, int pwlen)
|
|
{
|
|
unsigned char saved[32];
|
|
unsigned char test[32];
|
|
|
|
memcpy(saved, crypt->u, 32);
|
|
createuser(crypt, userpw, pwlen);
|
|
memcpy(test, crypt->u, 32);
|
|
memcpy(crypt->u, saved, 32);
|
|
|
|
if (memcmp(test, saved, crypt->r == 3 ? 16 : 32) != 0)
|
|
return fz_throw("invalid password");
|
|
|
|
return nil;
|
|
}
|
|
|
|
fz_error *
|
|
pdf_setownerpassword(pdf_crypt *crypt, char *ownerpw, int pwlen)
|
|
{
|
|
unsigned char buf[32];
|
|
unsigned char key[16];
|
|
fz_arc4 arc4;
|
|
fz_md5 md5;
|
|
|
|
/* Step 1 + 2 */
|
|
padpassword(buf, ownerpw, pwlen);
|
|
fz_md5init(&md5);
|
|
fz_md5update(&md5, buf, 32);
|
|
fz_md5final(&md5, key);
|
|
|
|
/* Step 3 (rev 3 only) */
|
|
if (crypt->r == 3)
|
|
voodoo50(key, crypt->n);
|
|
|
|
/* Step 4 */
|
|
fz_arc4init(&arc4, key, crypt->n);
|
|
|
|
if (crypt->r == 2)
|
|
{
|
|
fz_arc4encrypt(&arc4, buf, crypt->o, 32);
|
|
}
|
|
|
|
if (crypt->r == 3)
|
|
{
|
|
unsigned char keyxor[16];
|
|
int i;
|
|
int k;
|
|
|
|
memcpy(buf, crypt->o, 32);
|
|
|
|
for(i = 19; i >= 0; --i)
|
|
{
|
|
for(k = 0; k < crypt->keylen; ++k)
|
|
keyxor[k] = key[k] ^ i;
|
|
fz_arc4init(&arc4, keyxor, crypt->keylen);
|
|
fz_arc4encrypt(&arc4, buf, buf, 32);
|
|
}
|
|
}
|
|
|
|
return pdf_setuserpassword(crypt, buf, 32);
|
|
}
|
|
|
|
/*
|
|
* Recursively (and destructively!) de/encrypt all strings in obj
|
|
*/
|
|
void
|
|
pdf_cryptobj(pdf_crypt *crypt, fz_obj *obj, int oid, int gid)
|
|
{
|
|
fz_arc4 arc4;
|
|
unsigned char key[16];
|
|
unsigned char *s;
|
|
int i, n;
|
|
|
|
if (fz_isstring(obj))
|
|
{
|
|
s = fz_tostrbuf(obj);
|
|
n = fz_tostrlen(obj);
|
|
createobjkey(crypt, oid, gid, key);
|
|
fz_arc4init(&arc4, key, crypt->keylen);
|
|
fz_arc4encrypt(&arc4, s, s, n);
|
|
}
|
|
|
|
else if (fz_isarray(obj))
|
|
{
|
|
n = fz_arraylen(obj);
|
|
for (i = 0; i < n; i++)
|
|
{
|
|
pdf_cryptobj(crypt, fz_arrayget(obj, i), oid, gid);
|
|
}
|
|
}
|
|
|
|
else if (fz_isdict(obj))
|
|
{
|
|
n = fz_dictlen(obj);
|
|
for (i = 0; i < n; i++)
|
|
{
|
|
pdf_cryptobj(crypt, fz_dictgetval(obj, i), oid, gid);
|
|
}
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Create filter suitable for de/encrypting a stream
|
|
*/
|
|
fz_error *
|
|
pdf_cryptstream(fz_filter **fp, pdf_crypt *crypt, int oid, int gid)
|
|
{
|
|
unsigned char key[16];
|
|
createobjkey(crypt, oid, gid, key);
|
|
return fz_newarc4filter(fp, key, crypt->keylen);
|
|
}
|
|
|