moonbitstack/mooncrypt/asn1

moonbitstack/mooncrypt/asn1 does not have a README file

Refused

pub(all) suberror Refused {
  Malformed(String)
  Unsupported(String)
} derive(Eq)

A refused encoding. Malformed is a hostile or corrupt certificate; Unsupported is well-formed DER this parser deliberately does not read, and the two are separated so a caller can log an interop gap without calling it an attack.

impl Show for Refused

Refused::equal

source

fn Refused::equal(Refused, Refused) -> Bool

Refused::not_equal

source

fn Refused::not_equal(x : Refused, y : Refused) -> Bool

Refused::output

source

fn Refused::output(self : Refused, logger : &Logger) -> Unit

Refused::to_string

source

fn Refused::to_string(self : Refused) -> String

Bits

source

pub(all) struct Bits {
  bytes : Bytes
  unused : Int
} derive(Eq, @moonbitlang/core/debug.Debug
Debug)

A decoded BIT STRING: the content bytes and how many low bits of the last byte are padding.

Bits::equal

source

fn Bits::equal(Bits, Bits) -> Bool

Bits::get

source

fn Bits::get(self : Bits, i : Int) -> Bool

Whether bit i is set, counting from the most significant bit of the first byte — the numbering X.509 uses for keyUsage. Bits inside the padding, or past the end, read as unset.

Bits::not_equal

source

fn Bits::not_equal(x : Bits, y : Bits) -> Bool

Bits::to_repr

source

fn Bits::to_repr(Bits) -> @moonbitlang/core/debug.Repr
Repr

Tlv

source

pub(all) struct Tlv {
  tag : Int
  value : BytesView
  raw : BytesView
}

One decoded element: the tag byte, the contents, and raw — tag, length and contents together. raw is what a signature covers and how far to step to reach the next element.

Tlv::bits

source

fn Tlv::bits(self : Tlv) -> Bits raise Refused

A BIT STRING.

Tlv::bool

source

fn Tlv::bool(self : Tlv) -> Bool raise Refused

A BOOLEAN. DER admits only 0x00 and 0xFF, so any other octet is refused.

Tlv::int

source

fn Tlv::int(self : Tlv) -> @moonbitlang/core/bigint.BigInt
BigInt raise Refused

An INTEGER, two's complement as X.690 §8.3 defines it.

Tlv::items

source

fn Tlv::items(self : Tlv) -> Array[Tlv] raise Refused

The elements a constructed value holds, in encoding order.

Tlv::octets

source

fn Tlv::octets(self : Tlv) -> BytesView raise Refused

An OCTET STRING's contents.

Tlv::oid

source

fn Tlv::oid(self : Tlv) -> String raise Refused

An OBJECT IDENTIFIER in dotted-decimal form. The first octet packs two arcs (X.690 §8.19.4); the rest are base-128, high bit set on every byte but an arc's last.

Tlv::text

source

fn Tlv::text(self : Tlv) -> String raise Refused

A DirectoryString or IA5String as text — the string types an X.509 Name and a SAN entry are written in. UniversalString is refused: it is UTF-32 and no certificate in practice uses it.

Tlv::time

source

fn Tlv::time(self : Tlv) -> Int64 raise Refused

A UTCTime or GeneralizedTime as seconds since the Unix epoch. RFC 5280 §4.1.2.5 pins both to the seconds-and-Z form, and a two-digit year to 1950..2049, so the other shapes X.690 allows are refused rather than guessed at.

ascii

source

fn ascii(v : BytesView) -> String raise Refused

Octets of one of the ASCII string types as text. Taken on its own because a subjectAltName tags its entries with the field number, not the string type, so the octets arrive with nothing left to dispatch on.

bit_string

source

fn bit_string(content : Bytes) -> Bytes

A DER BIT STRING (tag 0x03) with no unused trailing bits: a leading 0x00 count then content.

context

source

fn context(tag : Int, n : Int) -> Bool

Whether tag is the context-specific [n] of an IMPLICIT or EXPLICIT field.

explicit

source

fn explicit(tag_num : Int, content : Bytes) -> Bytes

A context-specific constructed value [tag_num] wrapping content (tag 0xA0 | tag_num) — the EXPLICIT tagging X.509 uses for the certificate version and extensions.

integer

source

fn integer(magnitude : Bytes) -> Bytes

A DER INTEGER (tag 0x02) from a big-endian magnitude: strip redundant leading zero bytes, then prepend one 0x00 if the top bit is set, so the value stays non-negative (X.690 §8.3).

length_of

source

fn length_of(n : Int) -> Bytes

Encode a definite length (X.690 §8.1.3): the short form is the single byte for lengths under 128; the long form is 0x80 | n followed by the length in n big-endian bytes.

null

source

fn null() -> Bytes

A DER NULL (tag 0x05, empty).

octet_string

source

fn octet_string(content : Bytes) -> Bytes

A DER OCTET STRING (tag 0x04).

oid

source

fn oid(arcs : Array[Int]) -> Bytes

A DER OBJECT IDENTIFIER (tag 0x06) from its arcs (X.690 §8.19): the first byte encodes 40·arc1 + arc2, and each later arc is base-128 big-endian with the high bit set on every byte but the last.

only

source

fn only(input : BytesView) -> Tlv raise Refused

Read the one element that is the whole of input. Bytes after it are an error — a certificate with a payload glued to its end is two documents, and the second one is not covered by the signature over the first.

read

source

fn read(input : BytesView) -> Tlv raise Refused

Read the element at the head of input. Raises rather than reading past the end: the length is checked against the bytes that remain, in 64-bit arithmetic so a length near 2^31 cannot wrap the check.

sequence

source

fn sequence(elements : Array[Bytes]) -> Bytes

A DER SEQUENCE (tag 0x30): the concatenated elements.

set_of

source

fn set_of(elements : Array[Bytes]) -> Bytes

A DER SET (tag 0x31): the concatenated elements.

tlv

source

fn tlv(tag : Int, value : Bytes) -> Bytes

A tag-length-value: the tag byte, the definite length of value, then value.

utc_time

source

fn utc_time(s : String) -> Bytes

A DER UTCTime (tag 0x17), the YYMMDDHHMMSSZ form X.509 validity uses before 2050.

utf8_string

source

fn utf8_string(s : String) -> Bytes

A DER UTF8String (tag 0x0c).

Source Files

asn1.mbt

Install

Download zip

mooncrypt — cryptographic algorithms for MoonBit, one algorithm per package: SHA-1, SHA-2, MD5, HMAC, HKDF, PBKDF2, Ed25519, ECDSA P-256 and RSA PKCS#1 v1.5, on a small set of traits so a third algorithm drops in without touching the library.

cryptocryptographyhashsha256hmaced25519ecdsarsajwtmoonbit

moonbitstack

Apache-2.0

github.com/moonbitstack/mooncrypt

Updated 6 hours ago

1K downloads

Site source Report issue Packages Build queue Skills Statistics

#Refused

#Refused::equal

#Refused::not_equal

#Refused::output

#Refused::to_string

#Bits

#Bits::equal

#Bits::get

#Bits::not_equal

#Bits::to_repr

#Tlv

#Tlv::bits

#Tlv::bool

#Tlv::int

#Tlv::items

#Tlv::octets

#Tlv::oid

#Tlv::text

#Tlv::time

#ascii

#bit_string

#context

#explicit

#integer

#length_of

#null

#octet_string

#oid

#only

#read

#sequence

#set_of

#tlv

#utc_time

#utf8_string

Source Files

Refused

Refused::equal

Refused::not_equal

Refused::output

Refused::to_string

Bits

Bits::equal

Bits::get

Bits::not_equal

Bits::to_repr

Tlv

Tlv::bits

Tlv::bool

Tlv::int

Tlv::items

Tlv::octets

Tlv::oid

Tlv::text

Tlv::time

ascii

bit_string

context

explicit

integer

length_of

null

octet_string

oid

only

read

sequence

set_of

tlv

utc_time

utf8_string