trunk/Src/wptPassphraseCB.cpp

/* wptPassphraseCB.cpp - GPGME Passphrase Callback
 *      Copyright (C) 2001, 2002, 2003, 2005, 2006 Timo Schulz
 *      Copyright (C) 2005 g10 Code GmbH
 *
 * This file is part of WinPT.
 *
 * WinPT is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License 
 * as published by the Free Software Foundation; either version 2 
 * of the License, or (at your option) any later version.
 *  
 * WinPT is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License 
 * along with WinPT; if not, write to the Free Software Foundation, 
 * Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 
 */

#ifdef HAVE_CONFIG_H
#include <config.h>
#endif

#include <windows.h>
#include <ctype.h>

#include "resource.h"
#include "wptNLS.h"
#include "wptW32API.h"
#include "wptVersion.h"
#include "wptGPG.h"
#include "wptCommonCtl.h"
#include "wptContext.h"
#include "wptDlgs.h"
#include "wptErrors.h"
#include "wptTypes.h"
#include "wptKeylist.h"
#include "wptAgent.h"
#include "wptRegistry.h"
#include "wptUTF8.h"

const char* get_symkey_algo (int algo);

#define item_ctrl_id(cmd) \
    ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_PWD : IDC_DECRYPT_SIGN_PWD)

#define item_ctrl_id2(cmd) \
    ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_HIDE : IDC_DECRYPT_SIGN_HIDE)


void ListBox_AddString_utf8 (HWND lb, const char *txt);

/* Overwrite passphrase and free memory. */
static void
burn_passphrase (char **pwd)
{
    char *pass = *pwd;
    wipememory (pass, strlen (pass));
    delete []pass;
    *pwd = NULL;
}


/* Dialog procedure for the passphrase callback. */
static BOOL CALLBACK
passphrase_callback_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam)
{    
    static passphrase_cb_s *c;
    gpgme_decrypt_result_t res=NULL;
    gpgme_sign_result_t res_sig=NULL;
    gpgme_recipient_t recip=NULL, r;
    winpt_key_s key;
    void *item;
    const char *id;
    char *info;
    int n;

    switch (msg) {
    case WM_ACTIVATE:
        safe_edit_control_init (dlg, item_ctrl_id (c->gpg_cmd));
        break;

    case WM_DESTROY:
        safe_edit_control_free (dlg, item_ctrl_id (c->gpg_cmd));
        break;

    case WM_INITDIALOG:
        c = (passphrase_cb_s *)lparam;
        if (!c)
            BUG (0);
        SetDlgItemText (dlg, IDCANCEL, _("&Cancel"));
        SetWindowText (dlg, c->title);
        if (c->gpg_cmd == GPG_CMD_DECRYPT) {
            SetDlgItemText (dlg, IDC_DECRYPT_HIDE, _("&Hide Typing"));
            SetDlgItemText (dlg, IDC_DECRYPT_LISTINF,
                            _("Encrypted with the following public key(s)"));
            CheckDlgButton (dlg, IDC_DECRYPT_HIDE, BST_CHECKED);
        }
        else if (c->gpg_cmd == GPG_CMD_SIGN) {
            SetDlgItemText (dlg, IDC_DECRYPT_SIGN_HIDE, _("&Hide Typing"));
            CheckDlgButton (dlg, IDC_DECRYPT_SIGN_HIDE, BST_CHECKED);
        }
        /* Because it depends on the order the keys are stored in the
           keyring whether res->recipients is complete or not, we also
           support that the recipients were externally extracted and then
           we use this list. */
        if (c->recipients)
            recip = c->recipients; /* recipients were already extracted. */
        else {
            res = gpgme_op_decrypt_result (c->gpg);
            if (res && res->recipients)
                recip = res->recipients;
        }
        if (recip != NULL && c->gpg_cmd == GPG_CMD_DECRYPT) {
            for (r = recip; r; r = r->next) {
                memset (&key, 0, sizeof (key));
                if (!winpt_get_pubkey (r->keyid, &key)) {
                    gpgme_user_id_t u = key.ctx->uids;

                    id = u->name;
                    if (!id)
                        id = _("Invalid User ID");
                    n = 32+strlen (id)+1+4+strlen (r->keyid)+1;
                    if (u->email)
                        n += strlen (u->email)+1;
                    info = new char [n+1];
                    if (!info)
                        BUG (NULL);
                    if (!u->email || strlen (u->email) < 1)
                        sprintf (info, "%s (%s, 0x%s)", id,
                                 get_key_pubalgo (r->pubkey_algo), r->keyid+8);
                    else
                        sprintf (info, "%s <%s> (%s, 0x%s)", id, u->email,
                                 get_key_pubalgo (r->pubkey_algo), r->keyid+8);
                }
                else {
                    info = new char [32 + strlen (r->keyid)+1 + 4];
                    if (!info)
                        BUG (NULL);
                    sprintf (info, _("Unknown key ID (%s, 0x%s)"), 
                             get_key_pubalgo (r->pubkey_algo), r->keyid+8);
                }
                ListBox_AddString_utf8 (GetDlgItem (dlg, IDC_DECRYPT_LIST), info);
                free_if_alloc (info);
                winpt_release_pubkey (&key);
            }
        }
        else if (c->gpg_cmd == GPG_CMD_DECRYPT)
            EnableWindow (GetDlgItem (dlg, IDC_DECRYPT_LIST), FALSE);
        SetDlgItemText (dlg, c->gpg_cmd == GPG_CMD_DECRYPT?
                        IDC_DECRYPT_PWDINFO : IDC_DECRYPT_SIGN_PWDINFO,
                        c->bad_pwd? _("Bad passphrase; Enter passphrase again") :
                        _("Please enter your passphrase"));
        if (c->gpg_cmd == GPG_CMD_DECRYPT) {
            SetFocus (GetDlgItem (dlg, IDC_DECRYPT_PWD));
            if (res && !res->recipients) {
                const char *s = _("Symmetric encryption.\n"
                                  "%s encrypted data.");
                const char *alg = get_symkey_algo (c->sym.sym_algo);
                info = new char[strlen (s) + strlen (alg) + 2];
                if (!info)
                    BUG (NULL);
                sprintf (info, s, alg);
                SetDlgItemText (dlg, IDC_DECRYPT_MSG, info);
                free_if_alloc (info);
            }
            else
                SetDlgItemText (dlg, IDC_DECRYPT_MSG, c->info);
        }
        else {
            SetFocus (GetDlgItem (dlg, IDC_DECRYPT_SIGN_PWD));
            SetDlgItemText (dlg, IDC_DECRYPT_SIGN_MSG, c->info);
        }
        center_window (dlg, NULL);
        SetForegroundWindow (dlg);
        return FALSE;

        case WM_SYSCOMMAND:
            if (LOWORD (wparam) == SC_CLOSE) {
                SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "");
                c->cancel = 1;
                EndDialog (dlg, TRUE);
            }
            break;

        case WM_COMMAND:
            switch (HIWORD (wparam)) {
            case BN_CLICKED:
                if  (LOWORD (wparam) == IDC_DECRYPT_HIDE
                    || LOWORD (wparam) == IDC_DECRYPT_SIGN_HIDE) {
                    HWND hwnd;
                    int hide = IsDlgButtonChecked (dlg, item_ctrl_id2 (c->gpg_cmd));
                    hwnd = GetDlgItem (dlg, item_ctrl_id (c->gpg_cmd));
                    SendMessage (hwnd, EM_SETPASSWORDCHAR, hide? '*' : 0, 0);
                    SetFocus (hwnd);
                }
            }

            switch (LOWORD (wparam)) {
            case IDOK:  
                /* XXX: the item is even cached when the passphrase is not
                        correct, which means that the user needs to delete all
                        cached entries to continue. */
                if (c->pwd)
                    burn_passphrase (&c->pwd);
                n = item_get_text_length (dlg, item_ctrl_id (c->gpg_cmd));
                if (!n) {
                    c->pwd = new char[2];
                    if (!c->pwd)
                        BUG (NULL);
                    strcpy (c->pwd, "");
                }
                else {
                    c->pwd = new char[n+2];
                    if (!c->pwd)
                        BUG (NULL);
                    SafeGetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), 
                                        c->pwd, n+1);
                }
                res = gpgme_op_decrypt_result (c->gpg);
                if (!res)
                    res_sig = gpgme_op_sign_result (c->gpg);            
                if (reg_prefs.cache_time > 0 && !c->is_card &&
                    (res || res_sig)) {
                    if (agent_get_cache (c->keyid, &item))                      
                        agent_unlock_cache_entry (&item);
                    else 
                        agent_put_cache (c->keyid, c->pwd, reg_prefs.cache_time);
                }
                c->cancel = 0;
                EndDialog (dlg, TRUE);
                return TRUE;
                
            case IDCANCEL:
                SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "");
                c->cancel = 1;
                EndDialog (dlg, FALSE);
                return FALSE;
            }
            break;
    }
    
    return FALSE;
}


/* Extract the main keyid from @pass_info.
   Return value: long main keyid or NULL for an error. */
static const char*
parse_gpg_keyid (const char *pass_info)
{
    static char keyid[16+1];
    
    /* XXX: check for leading alpha-chars? */
    if (strlen (pass_info) < 16) {
        log_debug ("parse_gpg_keyid: error '%s'\r\n", pass_info);
        return NULL;
    }
    /* the format of the desc buffer looks like this:
       request_keyid[16] main_keyid[16] keytype[1] keylength[4]
       we use the main keyid to use only one cache entry. */
    strncpy (keyid, pass_info+17, 16);
    keyid[16] = 0;
    return keyid;
}


/* Parse the information in @uid_hint and @pass_info to generate
   a input message for the user in @desc. */
static int
parse_gpg_description (const char *uid_hint, const char *pass_info,
                       char *desc, int size)
{
    gpgme_pubkey_algo_t algo;
    char usedkey[16+1];
    char mainkey[16+1];
    char *p, *uid;
    int n=0;

    algo = (gpgme_pubkey_algo_t)0;
    /* Each uid_hint contains a long key-ID so it is at least 16 bytes. */
    if (strlen (uid_hint) < 17) {
        *desc = 0;
        log_debug ("parse_gpg_description: error '%s'\r\n", uid_hint);
        return -1;
    }

    while (p = strsep ((char**)&pass_info, " ")) {
        switch (n++) {
        case 0: strncpy (mainkey, p, 16); mainkey[16] = 0; break;
        case 1: strncpy (usedkey, p, 16); usedkey[16] = 0; break;
        case 2: algo = (gpgme_pubkey_algo_t)atol (p); break;
        }
    }
    uid_hint += 16; /* skip keyid */
    uid_hint += 1;  /* space */

    uid = utf8_to_native (uid_hint);
    if (strcmp (usedkey, mainkey))
        _snprintf (desc, size-1, 
                   _("You need a passphrase to unlock the secret key for\n"
                     "user: \"%s\"\n"
                     "%s key, ID %s (main key ID %s)\n"),
                   uid, get_key_pubalgo (algo), usedkey+8, mainkey+8);
    else if (!strcmp (usedkey, mainkey))
        _snprintf (desc, size-1,
                   _("You need a passphrase to unlock the secret key for\n"
                     "user: \"%s\"\n"
                     "%s key, ID %s\n"),
                     uid, get_key_pubalgo (algo), usedkey+8);
    safe_free (uid);
    return 0;
}


/* Extract the serial number from the card ID @id and return it. */
const char*
extract_serial_no (const char *id)
{
    static char buf[8];
    char *p;

    p = strchr (id, '/');
    if (!p) {
        log_debug ("extract_serial_no: error '%s'\r\n", id);
        return NULL;
    }
    strncpy (buf, id+(p-id)-6, 6);
    return buf;
}


/* Passphrase callback with the ability to support caching. */
gpgme_error_t
passphrase_cb (void *hook, const char *uid_hint,
               const char *passphrase_info,
               int prev_was_bad, int fd)
{
    passphrase_cb_s *c = (passphrase_cb_s*)hook;
    HANDLE hd = (HANDLE)fd;
    void *item;
    const char *keyid=NULL, *pass;
    DWORD n;
    int rc = 0;

    if (!c) {
        log_debug ("passphrase_cb: error '!c'\r\n");
        return gpg_error (GPG_ERR_INV_ARG);
    }
    c->bad_pwd = prev_was_bad? 1 : 0;
    if (prev_was_bad && !c->cancel) {
        if (c->pwd)
            burn_passphrase (&c->pwd);
        agent_del_cache (c->keyid);
        c->pwd_init = 1;
    }

    if (passphrase_info) {
        if (strlen (passphrase_info) < 16 && 
            !strstr (passphrase_info, "OPENPGP")) {
            /* assume symetric encryption. */
            int pos=2;
            c->sym.sym_algo = atoi (passphrase_info);
            if (c->sym.sym_algo > 9)
                pos++;
            /* XXX: be more strict. */
            c->sym.s2k_mode = atoi (passphrase_info+pos);
            c->sym.s2k_hash = atoi (passphrase_info+pos+2);
        }

        keyid = parse_gpg_keyid (passphrase_info);
        pass = agent_get_cache (keyid+8, &item);        
        if (pass) {
            agent_unlock_cache_entry (&item);
            c->pwd_init = 0;
            if (!WriteFile (hd, pass, strlen (pass), &n, NULL))
                log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
            if (!WriteFile (hd, "\n", 1, &n, NULL))
                log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
            return 0;
        }
    }

    if (c->pwd_init) {
        if (keyid && strlen (keyid) == 16)
            strcpy (c->keyid, keyid+8);

        /* if @passphrase_info contains 'OPENPGP' we assume a smart card
            has been used. */
        if (strstr (passphrase_info, "OPENPGP")) {
            const char *s=passphrase_info;
            while (s && *s && *s != 'D')
                s++;
            _snprintf (c->info, sizeof c->info-1,
                       _("Please enter the PIN to unlock your secret card key\n"
                         "Card: %s"), extract_serial_no (s));
            c->is_card = 1;
        }
        else if (uid_hint)
            parse_gpg_description (uid_hint, passphrase_info, 
                                   c->info, sizeof (c->info) - 1);
        if (c->gpg_cmd == GPG_CMD_DECRYPT) {
            rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT,
                                 (HWND)c->hwnd, passphrase_callback_proc,
                                 (LPARAM)c);
        }
        else if (c->gpg_cmd == GPG_CMD_SIGN) {
            rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT_SIGN,
                                 (HWND)c->hwnd, passphrase_callback_proc,
                                 (LPARAM)c);
        }
        if (rc == -1) {
            if (!WriteFile (hd, "\n", 1, &n, NULL))
                log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
            return 0;
        }
        c->pwd_init = 0;
    }
    if (c->cancel || !c->pwd) {
        if (!WriteFile (hd, "\n", 1, &n, NULL))
            log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
        return 0;
    }

    if (!WriteFile (hd, c->pwd, strlen (c->pwd), &n, NULL))
        log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
    if (!WriteFile (hd, "\n", 1, &n, NULL))
        log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
    return 0;
}


/* Initialize the given passphrase callback @cb with the
   used gpgme context @ctx, the command @cmd and a title
   @title for the dialog. */
void
set_gpg_passphrase_cb (passphrase_cb_s *cb, gpgme_ctx_t ctx, 
                       int cmd, HWND hwnd, const char *title)
{
    memset (cb, 0, sizeof *cb);
    cb->gpg_cmd = cmd;
    cb->bad_pwd = 0;
    cb->is_card = 0;
    cb->cancel = 0;
    cb->hwnd = hwnd;
    cb->pwd_init = 1;
    free_if_alloc (cb->title);
    cb->title = m_strdup (title);
    gpgme_set_passphrase_cb (ctx, passphrase_cb, cb);
    cb->gpg = ctx;
}


/* Release the gpg recipient list. */
void
release_gpg_recipients (gpgme_recipient_t *recipients)
{
    gpgme_recipient_t r, n;

    r = *recipients;
    while (r != NULL) {
        n = r->next;
        safe_free (r->keyid);
        safe_free (r);
        r = n;
    }
    *recipients = NULL;
}


/* Release a passphrase callback @ctx. */
void
release_gpg_passphrase_cb (passphrase_cb_s *ctx)
{
    if (!ctx)
        return;
    sfree_if_alloc (ctx->pwd);
    free_if_alloc (ctx->title);
    release_gpg_recipients (&ctx->recipients);
}


/* Simple check to measure passphrase (@pass) quality.
   Return value: 0 on success. */
int
check_passwd_quality (const char *pass, int strict)
{
    int i, nd=0, nc=0, n;

    n = strlen (pass);
    if (n < 8)
        return -1;

    for (i=0; i < n; i++) {
        if (isdigit (pass[i])) 
            nd++;
        if (isalpha (pass[i])) 
            nc++;
    }

    /* check that the passphrase contains letters and numbers. */
    if (nd == n || nc == n)
        return -1;

    return 0;
}
1	/* wptPassphraseCB.cpp - GPGME Passphrase Callback
2	* Copyright (C) 2001, 2002, 2003, 2005, 2006 Timo Schulz
3	* Copyright (C) 2005 g10 Code GmbH
4	*
5	* This file is part of WinPT.
6	*
7	* WinPT is free software; you can redistribute it and/or
8	* modify it under the terms of the GNU General Public License
9	* as published by the Free Software Foundation; either version 2
10	* of the License, or (at your option) any later version.
11	*
12	* WinPT is distributed in the hope that it will be useful,
13	* but WITHOUT ANY WARRANTY; without even the implied warranty of
14	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15	* General Public License for more details.
16	*
17	* You should have received a copy of the GNU General Public License
18	* along with WinPT; if not, write to the Free Software Foundation,
19	* Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
20	*/
21
22	#ifdef HAVE_CONFIG_H
23	#include <config.h>
24	#endif
25
26	#include <windows.h>
27	#include <ctype.h>
28
29	#include "resource.h"
30	#include "wptNLS.h"
31	#include "wptW32API.h"
32	#include "wptVersion.h"
33	#include "wptGPG.h"
34	#include "wptCommonCtl.h"
35	#include "wptContext.h"
36	#include "wptDlgs.h"
37	#include "wptErrors.h"
38	#include "wptTypes.h"
39	#include "wptKeylist.h"
40	#include "wptAgent.h"
41	#include "wptRegistry.h"
42	#include "wptUTF8.h"
43
44	const char* get_symkey_algo (int algo);
45
46	#define item_ctrl_id(cmd) \
47	((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_PWD : IDC_DECRYPT_SIGN_PWD)
48
49	#define item_ctrl_id2(cmd) \
50	((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_HIDE : IDC_DECRYPT_SIGN_HIDE)
51
52
53	void ListBox_AddString_utf8 (HWND lb, const char *txt);
54
55	/* Overwrite passphrase and free memory. */
56	static void
57	burn_passphrase (char **pwd)
58	{
59	char pass = pwd;
60	wipememory (pass, strlen (pass));
61	delete []pass;
62	*pwd = NULL;
63	}
64
65
66	/* Dialog procedure for the passphrase callback. */
67	static BOOL CALLBACK
68	passphrase_callback_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam)
69	{
70	static passphrase_cb_s *c;
71	gpgme_decrypt_result_t res=NULL;
72	gpgme_sign_result_t res_sig=NULL;
73	gpgme_recipient_t recip=NULL, r;
74	winpt_key_s key;
75	void *item;
76	const char *id;
77	char *info;
78	int n;
79
80	switch (msg) {
81	case WM_ACTIVATE:
82	safe_edit_control_init (dlg, item_ctrl_id (c->gpg_cmd));
83	break;
84
85	case WM_DESTROY:
86	safe_edit_control_free (dlg, item_ctrl_id (c->gpg_cmd));
87	break;
88
89	case WM_INITDIALOG:
90	c = (passphrase_cb_s *)lparam;
91	if (!c)
92	BUG (0);
93	SetDlgItemText (dlg, IDCANCEL, _("&Cancel"));
94	SetWindowText (dlg, c->title);
95	if (c->gpg_cmd == GPG_CMD_DECRYPT) {
96	SetDlgItemText (dlg, IDC_DECRYPT_HIDE, _("&Hide Typing"));
97	SetDlgItemText (dlg, IDC_DECRYPT_LISTINF,
98	_("Encrypted with the following public key(s)"));
99	CheckDlgButton (dlg, IDC_DECRYPT_HIDE, BST_CHECKED);
100	}
101	else if (c->gpg_cmd == GPG_CMD_SIGN) {
102	SetDlgItemText (dlg, IDC_DECRYPT_SIGN_HIDE, _("&Hide Typing"));
103	CheckDlgButton (dlg, IDC_DECRYPT_SIGN_HIDE, BST_CHECKED);
104	}
105	/* Because it depends on the order the keys are stored in the
106	keyring whether res->recipients is complete or not, we also
107	support that the recipients were externally extracted and then
108	we use this list. */
109	if (c->recipients)
110	recip = c->recipients; /* recipients were already extracted. */
111	else {
112	res = gpgme_op_decrypt_result (c->gpg);
113	if (res && res->recipients)
114	recip = res->recipients;
115	}
116	if (recip != NULL && c->gpg_cmd == GPG_CMD_DECRYPT) {
117	for (r = recip; r; r = r->next) {
118	memset (&key, 0, sizeof (key));
119	if (!winpt_get_pubkey (r->keyid, &key)) {
120	gpgme_user_id_t u = key.ctx->uids;
121
122	id = u->name;
123	if (!id)
124	id = _("Invalid User ID");
125	n = 32+strlen (id)+1+4+strlen (r->keyid)+1;
126	if (u->email)
127	n += strlen (u->email)+1;
128	info = new char [n+1];
129	if (!info)
130	BUG (NULL);
131	if (!u->email \|\| strlen (u->email) < 1)
132	sprintf (info, "%s (%s, 0x%s)", id,
133	get_key_pubalgo (r->pubkey_algo), r->keyid+8);
134	else
135	sprintf (info, "%s <%s> (%s, 0x%s)", id, u->email,
136	get_key_pubalgo (r->pubkey_algo), r->keyid+8);
137	}
138	else {
139	info = new char [32 + strlen (r->keyid)+1 + 4];
140	if (!info)
141	BUG (NULL);
142	sprintf (info, _("Unknown key ID (%s, 0x%s)"),
143	get_key_pubalgo (r->pubkey_algo), r->keyid+8);
144	}
145	ListBox_AddString_utf8 (GetDlgItem (dlg, IDC_DECRYPT_LIST), info);
146	free_if_alloc (info);
147	winpt_release_pubkey (&key);
148	}
149	}
150	else if (c->gpg_cmd == GPG_CMD_DECRYPT)
151	EnableWindow (GetDlgItem (dlg, IDC_DECRYPT_LIST), FALSE);
152	SetDlgItemText (dlg, c->gpg_cmd == GPG_CMD_DECRYPT?
153	IDC_DECRYPT_PWDINFO : IDC_DECRYPT_SIGN_PWDINFO,
154	c->bad_pwd? _("Bad passphrase; Enter passphrase again") :
155	_("Please enter your passphrase"));
156	if (c->gpg_cmd == GPG_CMD_DECRYPT) {
157	SetFocus (GetDlgItem (dlg, IDC_DECRYPT_PWD));
158	if (res && !res->recipients) {
159	const char *s = _("Symmetric encryption.\n"
160	"%s encrypted data.");
161	const char *alg = get_symkey_algo (c->sym.sym_algo);
162	info = new char[strlen (s) + strlen (alg) + 2];
163	if (!info)
164	BUG (NULL);
165	sprintf (info, s, alg);
166	SetDlgItemText (dlg, IDC_DECRYPT_MSG, info);
167	free_if_alloc (info);
168	}
169	else
170	SetDlgItemText (dlg, IDC_DECRYPT_MSG, c->info);
171	}
172	else {
173	SetFocus (GetDlgItem (dlg, IDC_DECRYPT_SIGN_PWD));
174	SetDlgItemText (dlg, IDC_DECRYPT_SIGN_MSG, c->info);
175	}
176	center_window (dlg, NULL);
177	SetForegroundWindow (dlg);
178	return FALSE;
179
180	case WM_SYSCOMMAND:
181	if (LOWORD (wparam) == SC_CLOSE) {
182	SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "");
183	c->cancel = 1;
184	EndDialog (dlg, TRUE);
185	}
186	break;
187
188	case WM_COMMAND:
189	switch (HIWORD (wparam)) {
190	case BN_CLICKED:
191	if (LOWORD (wparam) == IDC_DECRYPT_HIDE
192	\|\| LOWORD (wparam) == IDC_DECRYPT_SIGN_HIDE) {
193	HWND hwnd;
194	int hide = IsDlgButtonChecked (dlg, item_ctrl_id2 (c->gpg_cmd));
195	hwnd = GetDlgItem (dlg, item_ctrl_id (c->gpg_cmd));
196	SendMessage (hwnd, EM_SETPASSWORDCHAR, hide? '*' : 0, 0);
197	SetFocus (hwnd);
198	}
199	}
200
201	switch (LOWORD (wparam)) {
202	case IDOK:
203	/* XXX: the item is even cached when the passphrase is not
204	correct, which means that the user needs to delete all
205	cached entries to continue. */
206	if (c->pwd)
207	burn_passphrase (&c->pwd);
208	n = item_get_text_length (dlg, item_ctrl_id (c->gpg_cmd));
209	if (!n) {
210	c->pwd = new char[2];
211	if (!c->pwd)
212	BUG (NULL);
213	strcpy (c->pwd, "");
214	}
215	else {
216	c->pwd = new char[n+2];
217	if (!c->pwd)
218	BUG (NULL);
219	SafeGetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd),
220	c->pwd, n+1);
221	}
222	res = gpgme_op_decrypt_result (c->gpg);
223	if (!res)
224	res_sig = gpgme_op_sign_result (c->gpg);
225	if (reg_prefs.cache_time > 0 && !c->is_card &&
226	(res \|\| res_sig)) {
227	if (agent_get_cache (c->keyid, &item))
228	agent_unlock_cache_entry (&item);
229	else
230	agent_put_cache (c->keyid, c->pwd, reg_prefs.cache_time);
231	}
232	c->cancel = 0;
233	EndDialog (dlg, TRUE);
234	return TRUE;
235
236	case IDCANCEL:
237	SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "");
238	c->cancel = 1;
239	EndDialog (dlg, FALSE);
240	return FALSE;
241	}
242	break;
243	}
244
245	return FALSE;
246	}
247
248
249	/* Extract the main keyid from @pass_info.
250	Return value: long main keyid or NULL for an error. */
251	static const char*
252	parse_gpg_keyid (const char *pass_info)
253	{
254	static char keyid[16+1];
255
256	/* XXX: check for leading alpha-chars? */
257	if (strlen (pass_info) < 16) {
258	log_debug ("parse_gpg_keyid: error '%s'\r\n", pass_info);
259	return NULL;
260	}
261	/* the format of the desc buffer looks like this:
262	request_keyid[16] main_keyid[16] keytype[1] keylength[4]
263	we use the main keyid to use only one cache entry. */
264	strncpy (keyid, pass_info+17, 16);
265	keyid[16] = 0;
266	return keyid;
267	}
268
269
270	/* Parse the information in @uid_hint and @pass_info to generate
271	a input message for the user in @desc. */
272	static int
273	parse_gpg_description (const char uid_hint, const char pass_info,
274	char *desc, int size)
275	{
276	gpgme_pubkey_algo_t algo;
277	char usedkey[16+1];
278	char mainkey[16+1];
279	char p, uid;
280	int n=0;
281
282	algo = (gpgme_pubkey_algo_t)0;
283	/* Each uid_hint contains a long key-ID so it is at least 16 bytes. */
284	if (strlen (uid_hint) < 17) {
285	*desc = 0;
286	log_debug ("parse_gpg_description: error '%s'\r\n", uid_hint);
287	return -1;
288	}
289
290	while (p = strsep ((char**)&pass_info, " ")) {
291	switch (n++) {
292	case 0: strncpy (mainkey, p, 16); mainkey[16] = 0; break;
293	case 1: strncpy (usedkey, p, 16); usedkey[16] = 0; break;
294	case 2: algo = (gpgme_pubkey_algo_t)atol (p); break;
295	}
296	}
297	uid_hint += 16; /* skip keyid */
298	uid_hint += 1; /* space */
299
300	uid = utf8_to_native (uid_hint);
301	if (strcmp (usedkey, mainkey))
302	_snprintf (desc, size-1,
303	_("You need a passphrase to unlock the secret key for\n"
304	"user: \"%s\"\n"
305	"%s key, ID %s (main key ID %s)\n"),
306	uid, get_key_pubalgo (algo), usedkey+8, mainkey+8);
307	else if (!strcmp (usedkey, mainkey))
308	_snprintf (desc, size-1,
309	_("You need a passphrase to unlock the secret key for\n"
310	"user: \"%s\"\n"
311	"%s key, ID %s\n"),
312	uid, get_key_pubalgo (algo), usedkey+8);
313	safe_free (uid);
314	return 0;
315	}
316
317
318	/* Extract the serial number from the card ID @id and return it. */
319	const char*
320	extract_serial_no (const char *id)
321	{
322	static char buf[8];
323	char *p;
324
325	p = strchr (id, '/');
326	if (!p) {
327	log_debug ("extract_serial_no: error '%s'\r\n", id);
328	return NULL;
329	}
330	strncpy (buf, id+(p-id)-6, 6);
331	return buf;
332	}
333
334
335	/* Passphrase callback with the ability to support caching. */
336	gpgme_error_t
337	passphrase_cb (void hook, const char uid_hint,
338	const char *passphrase_info,
339	int prev_was_bad, int fd)
340	{
341	passphrase_cb_s c = (passphrase_cb_s)hook;
342	HANDLE hd = (HANDLE)fd;
343	void *item;
344	const char keyid=NULL, pass;
345	DWORD n;
346	int rc = 0;
347
348	if (!c) {
349	log_debug ("passphrase_cb: error '!c'\r\n");
350	return gpg_error (GPG_ERR_INV_ARG);
351	}
352	c->bad_pwd = prev_was_bad? 1 : 0;
353	if (prev_was_bad && !c->cancel) {
354	if (c->pwd)
355	burn_passphrase (&c->pwd);
356	agent_del_cache (c->keyid);
357	c->pwd_init = 1;
358	}
359
360	if (passphrase_info) {
361	if (strlen (passphrase_info) < 16 &&
362	!strstr (passphrase_info, "OPENPGP")) {
363	/* assume symetric encryption. */
364	int pos=2;
365	c->sym.sym_algo = atoi (passphrase_info);
366	if (c->sym.sym_algo > 9)
367	pos++;
368	/* XXX: be more strict. */
369	c->sym.s2k_mode = atoi (passphrase_info+pos);
370	c->sym.s2k_hash = atoi (passphrase_info+pos+2);
371	}
372
373	keyid = parse_gpg_keyid (passphrase_info);
374	pass = agent_get_cache (keyid+8, &item);
375	if (pass) {
376	agent_unlock_cache_entry (&item);
377	c->pwd_init = 0;
378	if (!WriteFile (hd, pass, strlen (pass), &n, NULL))
379	log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
380	if (!WriteFile (hd, "\n", 1, &n, NULL))
381	log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
382	return 0;
383	}
384	}
385
386	if (c->pwd_init) {
387	if (keyid && strlen (keyid) == 16)
388	strcpy (c->keyid, keyid+8);
389
390	/* if @passphrase_info contains 'OPENPGP' we assume a smart card
391	has been used. */
392	if (strstr (passphrase_info, "OPENPGP")) {
393	const char *s=passphrase_info;
394	while (s && s && s != 'D')
395	s++;
396	_snprintf (c->info, sizeof c->info-1,
397	_("Please enter the PIN to unlock your secret card key\n"
398	"Card: %s"), extract_serial_no (s));
399	c->is_card = 1;
400	}
401	else if (uid_hint)
402	parse_gpg_description (uid_hint, passphrase_info,
403	c->info, sizeof (c->info) - 1);
404	if (c->gpg_cmd == GPG_CMD_DECRYPT) {
405	rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT,
406	(HWND)c->hwnd, passphrase_callback_proc,
407	(LPARAM)c);
408	}
409	else if (c->gpg_cmd == GPG_CMD_SIGN) {
410	rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT_SIGN,
411	(HWND)c->hwnd, passphrase_callback_proc,
412	(LPARAM)c);
413	}
414	if (rc == -1) {
415	if (!WriteFile (hd, "\n", 1, &n, NULL))
416	log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
417	return 0;
418	}
419	c->pwd_init = 0;
420	}
421	if (c->cancel \|\| !c->pwd) {
422	if (!WriteFile (hd, "\n", 1, &n, NULL))
423	log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
424	return 0;
425	}
426
427	if (!WriteFile (hd, c->pwd, strlen (c->pwd), &n, NULL))
428	log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
429	if (!WriteFile (hd, "\n", 1, &n, NULL))
430	log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
431	return 0;
432	}
433
434
435	/* Initialize the given passphrase callback @cb with the
436	used gpgme context @ctx, the command @cmd and a title
437	@title for the dialog. */
438	void
439	set_gpg_passphrase_cb (passphrase_cb_s *cb, gpgme_ctx_t ctx,
440	int cmd, HWND hwnd, const char *title)
441	{
442	memset (cb, 0, sizeof *cb);
443	cb->gpg_cmd = cmd;
444	cb->bad_pwd = 0;
445	cb->is_card = 0;
446	cb->cancel = 0;
447	cb->hwnd = hwnd;
448	cb->pwd_init = 1;
449	free_if_alloc (cb->title);
450	cb->title = m_strdup (title);
451	gpgme_set_passphrase_cb (ctx, passphrase_cb, cb);
452	cb->gpg = ctx;
453	}
454
455
456	/* Release the gpg recipient list. */
457	void
458	release_gpg_recipients (gpgme_recipient_t *recipients)
459	{
460	gpgme_recipient_t r, n;
461
462	r = *recipients;
463	while (r != NULL) {
464	n = r->next;
465	safe_free (r->keyid);
466	safe_free (r);
467	r = n;
468	}
469	*recipients = NULL;
470	}
471
472
473
474	/* Release a passphrase callback @ctx. */
475	void
476	release_gpg_passphrase_cb (passphrase_cb_s *ctx)
477	{
478	if (!ctx)
479	return;
480	sfree_if_alloc (ctx->pwd);
481	free_if_alloc (ctx->title);
482	release_gpg_recipients (&ctx->recipients);
483	}
484
485
486	/* Simple check to measure passphrase (@pass) quality.
487	Return value: 0 on success. */
488	int
489	check_passwd_quality (const char *pass, int strict)
490	{
491	int i, nd=0, nc=0, n;
492
493	n = strlen (pass);
494	if (n < 8)
495	return -1;
496
497	for (i=0; i < n; i++) {
498	if (isdigit (pass[i]))
499	nd++;
500	if (isalpha (pass[i]))
501	nc++;
502	}
503
504	/* check that the passphrase contains letters and numbers. */
505	if (nd == n \|\| nc == n)
506	return -1;
507
508	return 0;
509	}