1 files changed, 127 insertions, 0 deletions

diff --git a/crypto/asymmetric_keys/pkcs7.asn1 b/crypto/asymmetric_keys/pkcs7.asn1
new file mode 100644
index 000000000000..a5a14ef28c86
--- /dev/null
+++ b/crypto/asymmetric_keys/pkcs7.asn1
@@ -0,0 +1,127 @@
+PKCS7ContentInfo ::= SEQUENCE {
+        contentType     ContentType,
+        content         [0] EXPLICIT SignedData OPTIONAL
+}
+
+ContentType ::= OBJECT IDENTIFIER ({ pkcs7_note_OID })
+
+SignedData ::= SEQUENCE {
+        version                 INTEGER,
+        digestAlgorithms        DigestAlgorithmIdentifiers,
+        contentInfo             ContentInfo,
+        certificates            CHOICE {
+                certSet         [0] IMPLICIT ExtendedCertificatesAndCertificates,
+                certSequence    [2] IMPLICIT Certificates
+        } OPTIONAL ({ pkcs7_note_certificate_list }),
+        crls CHOICE {
+                crlSet          [1] IMPLICIT CertificateRevocationLists,
+                crlSequence     [3] IMPLICIT CRLSequence
+        } OPTIONAL,
+        signerInfos             SignerInfos
+}
+
+ContentInfo ::= SEQUENCE {
+        contentType     ContentType,
+        content         [0] EXPLICIT Data OPTIONAL
+}
+
+Data ::= ANY ({ pkcs7_note_data })
+
+DigestAlgorithmIdentifiers ::= CHOICE {
+        daSet                   SET OF DigestAlgorithmIdentifier,
+        daSequence              SEQUENCE OF DigestAlgorithmIdentifier
+}
+
+DigestAlgorithmIdentifier ::= SEQUENCE {
+        algorithm   OBJECT IDENTIFIER ({ pkcs7_note_OID }),
+        parameters  ANY OPTIONAL
+}
+
+--
+-- Certificates and certificate lists
+--
+ExtendedCertificatesAndCertificates ::= SET OF ExtendedCertificateOrCertificate
+
+ExtendedCertificateOrCertificate ::= CHOICE {
+  certificate           Certificate,                            -- X.509
+  extendedCertificate   [0] IMPLICIT ExtendedCertificate        -- PKCS#6
+}
+
+ExtendedCertificate ::= Certificate -- cheating
+
+Certificates ::= SEQUENCE OF Certificate
+
+CertificateRevocationLists ::= SET OF CertificateList
+
+CertificateList ::= SEQUENCE OF Certificate -- This may be defined incorrectly
+
+CRLSequence ::= SEQUENCE OF CertificateList
+
+Certificate ::= ANY ({ pkcs7_extract_cert }) -- X.509
+
+--
+-- Signer information
+--
+SignerInfos ::= CHOICE {
+        siSet           SET OF SignerInfo,
+        siSequence      SEQUENCE OF SignerInfo
+}
+
+SignerInfo ::= SEQUENCE {
+        version                 INTEGER,
+        issuerAndSerialNumber   IssuerAndSerialNumber,
+        digestAlgorithm         DigestAlgorithmIdentifier ({ pkcs7_sig_note_digest_algo }),
+        authenticatedAttributes CHOICE {
+                aaSet           [0] IMPLICIT SetOfAuthenticatedAttribute
+                                        ({ pkcs7_sig_note_set_of_authattrs }),
+                aaSequence      [2] EXPLICIT SEQUENCE OF AuthenticatedAttribute
+                        -- Explicit because easier to compute digest on
+                        -- sequence of attributes and then reuse encoded
+                        -- sequence in aaSequence.
+        } OPTIONAL,
+        digestEncryptionAlgorithm
+                                DigestEncryptionAlgorithmIdentifier ({ pkcs7_sig_note_pkey_algo }),
+        encryptedDigest         EncryptedDigest,
+        unauthenticatedAttributes CHOICE {
+                uaSet           [1] IMPLICIT SET OF UnauthenticatedAttribute,
+                uaSequence      [3] IMPLICIT SEQUENCE OF UnauthenticatedAttribute
+        } OPTIONAL
+} ({ pkcs7_note_signed_info })
+
+IssuerAndSerialNumber ::= SEQUENCE {
+        issuer                  Name ({ pkcs7_sig_note_issuer }),
+        serialNumber            CertificateSerialNumber ({ pkcs7_sig_note_serial })
+}
+
+CertificateSerialNumber ::= INTEGER
+
+SetOfAuthenticatedAttribute ::= SET OF AuthenticatedAttribute
+
+AuthenticatedAttribute ::= SEQUENCE {
+        type                    OBJECT IDENTIFIER ({ pkcs7_note_OID }),
+        values                  SET OF ANY ({ pkcs7_sig_note_authenticated_attr })
+}
+
+UnauthenticatedAttribute ::= SEQUENCE {
+        type                    OBJECT IDENTIFIER ({ pkcs7_note_OID }),
+        values                  SET OF ANY
+}
+
+DigestEncryptionAlgorithmIdentifier ::= SEQUENCE {
+        algorithm               OBJECT IDENTIFIER ({ pkcs7_note_OID }),
+        parameters              ANY OPTIONAL
+}
+
+EncryptedDigest ::= OCTET STRING ({ pkcs7_sig_note_signature })
+
+---
+--- X.500 Name
+---
+Name ::= SEQUENCE OF RelativeDistinguishedName
+
+RelativeDistinguishedName ::= SET OF AttributeValueAssertion
+
+AttributeValueAssertion ::= SEQUENCE {
+        attributeType           OBJECT IDENTIFIER ({ pkcs7_note_OID }),
+        attributeValue          ANY
+}