yuzu/externals/libressl/crypto/cms/cms_asn1.c

/* $OpenBSD: cms_asn1.c,v 1.18 2019/08/11 10:43:57 jsing Exp $ */
/*
 * Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
 * project.
 */
/* ====================================================================
 * Copyright (c) 2008 The OpenSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
 *
 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission. For written permission, please contact
 *    licensing@OpenSSL.org.
 *
 * 5. Products derived from this software may not be called "OpenSSL"
 *    nor may "OpenSSL" appear in their names without prior written
 *    permission of the OpenSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 */

#include <openssl/asn1t.h>
#include <openssl/pem.h>
#include <openssl/x509v3.h>
#include <openssl/cms.h>
#include "cms_lcl.h"


static const ASN1_TEMPLATE CMS_IssuerAndSerialNumber_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_IssuerAndSerialNumber, issuer),
		.field_name = "issuer",
		.item = &X509_NAME_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_IssuerAndSerialNumber, serialNumber),
		.field_name = "serialNumber",
		.item = &ASN1_INTEGER_it,
	},
};

const ASN1_ITEM CMS_IssuerAndSerialNumber_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_IssuerAndSerialNumber_seq_tt,
	.tcount = sizeof(CMS_IssuerAndSerialNumber_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_IssuerAndSerialNumber),
	.sname = "CMS_IssuerAndSerialNumber",
};

static const ASN1_TEMPLATE CMS_OtherCertificateFormat_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_OtherCertificateFormat, otherCertFormat),
		.field_name = "otherCertFormat",
		.item = &ASN1_OBJECT_it,
	},
	{
		.flags = ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_OtherCertificateFormat, otherCert),
		.field_name = "otherCert",
		.item = &ASN1_ANY_it,
	},
};

static const ASN1_ITEM CMS_OtherCertificateFormat_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_OtherCertificateFormat_seq_tt,
	.tcount = sizeof(CMS_OtherCertificateFormat_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_OtherCertificateFormat),
	.sname = "CMS_OtherCertificateFormat",
};

static const ASN1_TEMPLATE CMS_CertificateChoices_ch_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_CertificateChoices, d.certificate),
		.field_name = "d.certificate",
		.item = &X509_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 0,
		.offset = offsetof(CMS_CertificateChoices, d.extendedCertificate),
		.field_name = "d.extendedCertificate",
		.item = &ASN1_SEQUENCE_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 1,
		.offset = offsetof(CMS_CertificateChoices, d.v1AttrCert),
		.field_name = "d.v1AttrCert",
		.item = &ASN1_SEQUENCE_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 2,
		.offset = offsetof(CMS_CertificateChoices, d.v2AttrCert),
		.field_name = "d.v2AttrCert",
		.item = &ASN1_SEQUENCE_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 3,
		.offset = offsetof(CMS_CertificateChoices, d.other),
		.field_name = "d.other",
		.item = &CMS_OtherCertificateFormat_it,
	},
};

const ASN1_ITEM CMS_CertificateChoices_it = {
	.itype = ASN1_ITYPE_CHOICE,
	.utype = offsetof(CMS_CertificateChoices, type),
	.templates = CMS_CertificateChoices_ch_tt,
	.tcount = sizeof(CMS_CertificateChoices_ch_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_CertificateChoices),
	.sname = "CMS_CertificateChoices",
};

static const ASN1_TEMPLATE CMS_SignerIdentifier_ch_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_SignerIdentifier, d.issuerAndSerialNumber),
		.field_name = "d.issuerAndSerialNumber",
		.item = &CMS_IssuerAndSerialNumber_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 0,
		.offset = offsetof(CMS_SignerIdentifier, d.subjectKeyIdentifier),
		.field_name = "d.subjectKeyIdentifier",
		.item = &ASN1_OCTET_STRING_it,
	},
};

static const ASN1_ITEM CMS_SignerIdentifier_it = {
	.itype = ASN1_ITYPE_CHOICE,
	.utype = offsetof(CMS_SignerIdentifier, type),
	.templates = CMS_SignerIdentifier_ch_tt,
	.tcount = sizeof(CMS_SignerIdentifier_ch_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_SignerIdentifier),
	.sname = "CMS_SignerIdentifier",
};

static const ASN1_TEMPLATE CMS_EncapsulatedContentInfo_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_EncapsulatedContentInfo, eContentType),
		.field_name = "eContentType",
		.item = &ASN1_OBJECT_it,
	},
	{
		.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_OPTIONAL | ASN1_TFLG_NDEF,
		.tag = 0,
		.offset = offsetof(CMS_EncapsulatedContentInfo, eContent),
		.field_name = "eContent",
		.item = &ASN1_OCTET_STRING_NDEF_it,
	},
};

static const ASN1_ITEM CMS_EncapsulatedContentInfo_it = {
	.itype = ASN1_ITYPE_NDEF_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_EncapsulatedContentInfo_seq_tt,
	.tcount = sizeof(CMS_EncapsulatedContentInfo_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_EncapsulatedContentInfo),
	.sname = "CMS_EncapsulatedContentInfo",
};

/* Minor tweak to operation: free up signer key, cert */
static int
cms_si_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it, void *exarg)
{
	if (operation == ASN1_OP_FREE_POST) {
		CMS_SignerInfo *si = (CMS_SignerInfo *)*pval;
		EVP_PKEY_free(si->pkey);
		X509_free(si->signer);
		EVP_MD_CTX_free(si->mctx);
	}
	return 1;
}

static const ASN1_AUX CMS_SignerInfo_aux = {
	.app_data = NULL,
	.flags = 0,
	.ref_offset = 0,
	.ref_lock = 0,
	.asn1_cb = cms_si_cb,
	.enc_offset = 0,
};
static const ASN1_TEMPLATE CMS_SignerInfo_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_SignerInfo, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_SignerInfo, sid),
		.field_name = "sid",
		.item = &CMS_SignerIdentifier_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_SignerInfo, digestAlgorithm),
		.field_name = "digestAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_SET_OF | ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_SignerInfo, signedAttrs),
		.field_name = "signedAttrs",
		.item = &X509_ATTRIBUTE_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_SignerInfo, signatureAlgorithm),
		.field_name = "signatureAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_SignerInfo, signature),
		.field_name = "signature",
		.item = &ASN1_OCTET_STRING_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_SET_OF | ASN1_TFLG_OPTIONAL,
		.tag = 1,
		.offset = offsetof(CMS_SignerInfo, unsignedAttrs),
		.field_name = "unsignedAttrs",
		.item = &X509_ATTRIBUTE_it,
	},
};

const ASN1_ITEM CMS_SignerInfo_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_SignerInfo_seq_tt,
	.tcount = sizeof(CMS_SignerInfo_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = &CMS_SignerInfo_aux,
	.size = sizeof(CMS_SignerInfo),
	.sname = "CMS_SignerInfo",
};

static const ASN1_TEMPLATE CMS_OtherRevocationInfoFormat_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_OtherRevocationInfoFormat, otherRevInfoFormat),
		.field_name = "otherRevInfoFormat",
		.item = &ASN1_OBJECT_it,
	},
	{
		.flags = ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_OtherRevocationInfoFormat, otherRevInfo),
		.field_name = "otherRevInfo",
		.item = &ASN1_ANY_it,
	},
};

static const ASN1_ITEM CMS_OtherRevocationInfoFormat_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_OtherRevocationInfoFormat_seq_tt,
	.tcount = sizeof(CMS_OtherRevocationInfoFormat_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_OtherRevocationInfoFormat),
	.sname = "CMS_OtherRevocationInfoFormat",
};

static const ASN1_TEMPLATE CMS_RevocationInfoChoice_ch_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_RevocationInfoChoice, d.crl),
		.field_name = "d.crl",
		.item = &X509_CRL_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 1,
		.offset = offsetof(CMS_RevocationInfoChoice, d.other),
		.field_name = "d.other",
		.item = &CMS_OtherRevocationInfoFormat_it,
	},
};

const ASN1_ITEM CMS_RevocationInfoChoice_it = {
	.itype = ASN1_ITYPE_CHOICE,
	.utype = offsetof(CMS_RevocationInfoChoice, type),
	.templates = CMS_RevocationInfoChoice_ch_tt,
	.tcount = sizeof(CMS_RevocationInfoChoice_ch_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_RevocationInfoChoice),
	.sname = "CMS_RevocationInfoChoice",
};

static const ASN1_TEMPLATE CMS_SignedData_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_SignedData, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = ASN1_TFLG_SET_OF,
		.tag = 0,
		.offset = offsetof(CMS_SignedData, digestAlgorithms),
		.field_name = "digestAlgorithms",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_SignedData, encapContentInfo),
		.field_name = "encapContentInfo",
		.item = &CMS_EncapsulatedContentInfo_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_SET_OF | ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_SignedData, certificates),
		.field_name = "certificates",
		.item = &CMS_CertificateChoices_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_SET_OF | ASN1_TFLG_OPTIONAL,
		.tag = 1,
		.offset = offsetof(CMS_SignedData, crls),
		.field_name = "crls",
		.item = &CMS_RevocationInfoChoice_it,
	},
	{
		.flags = ASN1_TFLG_SET_OF,
		.tag = 0,
		.offset = offsetof(CMS_SignedData, signerInfos),
		.field_name = "signerInfos",
		.item = &CMS_SignerInfo_it,
	},
};

const ASN1_ITEM CMS_SignedData_it = {
	.itype = ASN1_ITYPE_NDEF_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_SignedData_seq_tt,
	.tcount = sizeof(CMS_SignedData_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_SignedData),
	.sname = "CMS_SignedData",
};

static const ASN1_TEMPLATE CMS_OriginatorInfo_seq_tt[] = {
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_SET_OF | ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_OriginatorInfo, certificates),
		.field_name = "certificates",
		.item = &CMS_CertificateChoices_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_SET_OF | ASN1_TFLG_OPTIONAL,
		.tag = 1,
		.offset = offsetof(CMS_OriginatorInfo, crls),
		.field_name = "crls",
		.item = &CMS_RevocationInfoChoice_it,
	},
};

static const ASN1_ITEM CMS_OriginatorInfo_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_OriginatorInfo_seq_tt,
	.tcount = sizeof(CMS_OriginatorInfo_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_OriginatorInfo),
	.sname = "CMS_OriginatorInfo",
};

static const ASN1_TEMPLATE CMS_EncryptedContentInfo_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_EncryptedContentInfo, contentType),
		.field_name = "contentType",
		.item = &ASN1_OBJECT_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_EncryptedContentInfo, contentEncryptionAlgorithm),
		.field_name = "contentEncryptionAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_EncryptedContentInfo, encryptedContent),
		.field_name = "encryptedContent",
		.item = &ASN1_OCTET_STRING_NDEF_it,
	},
};

static const ASN1_ITEM CMS_EncryptedContentInfo_it = {
	.itype = ASN1_ITYPE_NDEF_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_EncryptedContentInfo_seq_tt,
	.tcount = sizeof(CMS_EncryptedContentInfo_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_EncryptedContentInfo),
	.sname = "CMS_EncryptedContentInfo",
};

static const ASN1_TEMPLATE CMS_KeyTransRecipientInfo_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KeyTransRecipientInfo, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KeyTransRecipientInfo, rid),
		.field_name = "rid",
		.item = &CMS_SignerIdentifier_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KeyTransRecipientInfo, keyEncryptionAlgorithm),
		.field_name = "keyEncryptionAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KeyTransRecipientInfo, encryptedKey),
		.field_name = "encryptedKey",
		.item = &ASN1_OCTET_STRING_it,
	},
};

const ASN1_ITEM CMS_KeyTransRecipientInfo_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_KeyTransRecipientInfo_seq_tt,
	.tcount = sizeof(CMS_KeyTransRecipientInfo_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_KeyTransRecipientInfo),
	.sname = "CMS_KeyTransRecipientInfo",
};

static const ASN1_TEMPLATE CMS_OtherKeyAttribute_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_OtherKeyAttribute, keyAttrId),
		.field_name = "keyAttrId",
		.item = &ASN1_OBJECT_it,
	},
	{
		.flags = ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_OtherKeyAttribute, keyAttr),
		.field_name = "keyAttr",
		.item = &ASN1_ANY_it,
	},
};

const ASN1_ITEM CMS_OtherKeyAttribute_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_OtherKeyAttribute_seq_tt,
	.tcount = sizeof(CMS_OtherKeyAttribute_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_OtherKeyAttribute),
	.sname = "CMS_OtherKeyAttribute",
};

static const ASN1_TEMPLATE CMS_RecipientKeyIdentifier_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_RecipientKeyIdentifier, subjectKeyIdentifier),
		.field_name = "subjectKeyIdentifier",
		.item = &ASN1_OCTET_STRING_it,
	},
	{
		.flags = ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_RecipientKeyIdentifier, date),
		.field_name = "date",
		.item = &ASN1_GENERALIZEDTIME_it,
	},
	{
		.flags = ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_RecipientKeyIdentifier, other),
		.field_name = "other",
		.item = &CMS_OtherKeyAttribute_it,
	},
};

const ASN1_ITEM CMS_RecipientKeyIdentifier_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_RecipientKeyIdentifier_seq_tt,
	.tcount = sizeof(CMS_RecipientKeyIdentifier_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_RecipientKeyIdentifier),
	.sname = "CMS_RecipientKeyIdentifier",
};

static const ASN1_TEMPLATE CMS_KeyAgreeRecipientIdentifier_ch_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KeyAgreeRecipientIdentifier, d.issuerAndSerialNumber),
		.field_name = "d.issuerAndSerialNumber",
		.item = &CMS_IssuerAndSerialNumber_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 0,
		.offset = offsetof(CMS_KeyAgreeRecipientIdentifier, d.rKeyId),
		.field_name = "d.rKeyId",
		.item = &CMS_RecipientKeyIdentifier_it,
	},
};

static const ASN1_ITEM CMS_KeyAgreeRecipientIdentifier_it = {
	.itype = ASN1_ITYPE_CHOICE,
	.utype = offsetof(CMS_KeyAgreeRecipientIdentifier, type),
	.templates = CMS_KeyAgreeRecipientIdentifier_ch_tt,
	.tcount = sizeof(CMS_KeyAgreeRecipientIdentifier_ch_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_KeyAgreeRecipientIdentifier),
	.sname = "CMS_KeyAgreeRecipientIdentifier",
};

static int
cms_rek_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it, void *exarg)
{
	CMS_RecipientEncryptedKey *rek = (CMS_RecipientEncryptedKey *)*pval;
	if (operation == ASN1_OP_FREE_POST) {
		EVP_PKEY_free(rek->pkey);
	}
	return 1;
}

static const ASN1_AUX CMS_RecipientEncryptedKey_aux = {
	.app_data = NULL,
	.flags = 0,
	.ref_offset = 0,
	.ref_lock = 0,
	.asn1_cb = cms_rek_cb,
	.enc_offset = 0,
};
static const ASN1_TEMPLATE CMS_RecipientEncryptedKey_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_RecipientEncryptedKey, rid),
		.field_name = "rid",
		.item = &CMS_KeyAgreeRecipientIdentifier_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_RecipientEncryptedKey, encryptedKey),
		.field_name = "encryptedKey",
		.item = &ASN1_OCTET_STRING_it,
	},
};

const ASN1_ITEM CMS_RecipientEncryptedKey_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_RecipientEncryptedKey_seq_tt,
	.tcount = sizeof(CMS_RecipientEncryptedKey_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = &CMS_RecipientEncryptedKey_aux,
	.size = sizeof(CMS_RecipientEncryptedKey),
	.sname = "CMS_RecipientEncryptedKey",
};

static const ASN1_TEMPLATE CMS_OriginatorPublicKey_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_OriginatorPublicKey, algorithm),
		.field_name = "algorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_OriginatorPublicKey, publicKey),
		.field_name = "publicKey",
		.item = &ASN1_BIT_STRING_it,
	},
};

const ASN1_ITEM CMS_OriginatorPublicKey_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_OriginatorPublicKey_seq_tt,
	.tcount = sizeof(CMS_OriginatorPublicKey_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_OriginatorPublicKey),
	.sname = "CMS_OriginatorPublicKey",
};

static const ASN1_TEMPLATE CMS_OriginatorIdentifierOrKey_ch_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_OriginatorIdentifierOrKey, d.issuerAndSerialNumber),
		.field_name = "d.issuerAndSerialNumber",
		.item = &CMS_IssuerAndSerialNumber_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 0,
		.offset = offsetof(CMS_OriginatorIdentifierOrKey, d.subjectKeyIdentifier),
		.field_name = "d.subjectKeyIdentifier",
		.item = &ASN1_OCTET_STRING_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 1,
		.offset = offsetof(CMS_OriginatorIdentifierOrKey, d.originatorKey),
		.field_name = "d.originatorKey",
		.item = &CMS_OriginatorPublicKey_it,
	},
};

static const ASN1_ITEM CMS_OriginatorIdentifierOrKey_it = {
	.itype = ASN1_ITYPE_CHOICE,
	.utype = offsetof(CMS_OriginatorIdentifierOrKey, type),
	.templates = CMS_OriginatorIdentifierOrKey_ch_tt,
	.tcount = sizeof(CMS_OriginatorIdentifierOrKey_ch_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_OriginatorIdentifierOrKey),
	.sname = "CMS_OriginatorIdentifierOrKey",
};

static int
cms_kari_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it, void *exarg)
{
	CMS_KeyAgreeRecipientInfo *kari = (CMS_KeyAgreeRecipientInfo *)*pval;
	if (operation == ASN1_OP_NEW_POST) {
		kari->ctx = EVP_CIPHER_CTX_new();
		if (kari->ctx == NULL)
			return 0;
		EVP_CIPHER_CTX_set_flags(kari->ctx, EVP_CIPHER_CTX_FLAG_WRAP_ALLOW);
		kari->pctx = NULL;
	} else if (operation == ASN1_OP_FREE_POST) {
		EVP_PKEY_CTX_free(kari->pctx);
		EVP_CIPHER_CTX_free(kari->ctx);
	}
	return 1;
}

static const ASN1_AUX CMS_KeyAgreeRecipientInfo_aux = {
	.app_data = NULL,
	.flags = 0,
	.ref_offset = 0,
	.ref_lock = 0,
	.asn1_cb = cms_kari_cb,
	.enc_offset = 0,
};
static const ASN1_TEMPLATE CMS_KeyAgreeRecipientInfo_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KeyAgreeRecipientInfo, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = ASN1_TFLG_EXPLICIT,
		.tag = 0,
		.offset = offsetof(CMS_KeyAgreeRecipientInfo, originator),
		.field_name = "originator",
		.item = &CMS_OriginatorIdentifierOrKey_it,
	},
	{
		.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_OPTIONAL,
		.tag = 1,
		.offset = offsetof(CMS_KeyAgreeRecipientInfo, ukm),
		.field_name = "ukm",
		.item = &ASN1_OCTET_STRING_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KeyAgreeRecipientInfo, keyEncryptionAlgorithm),
		.field_name = "keyEncryptionAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = ASN1_TFLG_SEQUENCE_OF,
		.tag = 0,
		.offset = offsetof(CMS_KeyAgreeRecipientInfo, recipientEncryptedKeys),
		.field_name = "recipientEncryptedKeys",
		.item = &CMS_RecipientEncryptedKey_it,
	},
};

const ASN1_ITEM CMS_KeyAgreeRecipientInfo_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_KeyAgreeRecipientInfo_seq_tt,
	.tcount = sizeof(CMS_KeyAgreeRecipientInfo_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = &CMS_KeyAgreeRecipientInfo_aux,
	.size = sizeof(CMS_KeyAgreeRecipientInfo),
	.sname = "CMS_KeyAgreeRecipientInfo",
};

static const ASN1_TEMPLATE CMS_KEKIdentifier_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KEKIdentifier, keyIdentifier),
		.field_name = "keyIdentifier",
		.item = &ASN1_OCTET_STRING_it,
	},
	{
		.flags = ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_KEKIdentifier, date),
		.field_name = "date",
		.item = &ASN1_GENERALIZEDTIME_it,
	},
	{
		.flags = ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_KEKIdentifier, other),
		.field_name = "other",
		.item = &CMS_OtherKeyAttribute_it,
	},
};

static const ASN1_ITEM CMS_KEKIdentifier_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_KEKIdentifier_seq_tt,
	.tcount = sizeof(CMS_KEKIdentifier_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_KEKIdentifier),
	.sname = "CMS_KEKIdentifier",
};

static const ASN1_TEMPLATE CMS_KEKRecipientInfo_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KEKRecipientInfo, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KEKRecipientInfo, kekid),
		.field_name = "kekid",
		.item = &CMS_KEKIdentifier_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KEKRecipientInfo, keyEncryptionAlgorithm),
		.field_name = "keyEncryptionAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_KEKRecipientInfo, encryptedKey),
		.field_name = "encryptedKey",
		.item = &ASN1_OCTET_STRING_it,
	},
};

const ASN1_ITEM CMS_KEKRecipientInfo_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_KEKRecipientInfo_seq_tt,
	.tcount = sizeof(CMS_KEKRecipientInfo_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_KEKRecipientInfo),
	.sname = "CMS_KEKRecipientInfo",
};

static const ASN1_TEMPLATE CMS_PasswordRecipientInfo_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_PasswordRecipientInfo, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_PasswordRecipientInfo, keyDerivationAlgorithm),
		.field_name = "keyDerivationAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_PasswordRecipientInfo, keyEncryptionAlgorithm),
		.field_name = "keyEncryptionAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_PasswordRecipientInfo, encryptedKey),
		.field_name = "encryptedKey",
		.item = &ASN1_OCTET_STRING_it,
	},
};

const ASN1_ITEM CMS_PasswordRecipientInfo_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_PasswordRecipientInfo_seq_tt,
	.tcount = sizeof(CMS_PasswordRecipientInfo_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_PasswordRecipientInfo),
	.sname = "CMS_PasswordRecipientInfo",
};

static const ASN1_TEMPLATE CMS_OtherRecipientInfo_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_OtherRecipientInfo, oriType),
		.field_name = "oriType",
		.item = &ASN1_OBJECT_it,
	},
	{
		.flags = ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_OtherRecipientInfo, oriValue),
		.field_name = "oriValue",
		.item = &ASN1_ANY_it,
	},
};

static const ASN1_ITEM CMS_OtherRecipientInfo_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_OtherRecipientInfo_seq_tt,
	.tcount = sizeof(CMS_OtherRecipientInfo_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_OtherRecipientInfo),
	.sname = "CMS_OtherRecipientInfo",
};

/* Free up RecipientInfo additional data */
static int
cms_ri_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it, void *exarg)
{
	if (operation == ASN1_OP_FREE_PRE) {
		CMS_RecipientInfo *ri = (CMS_RecipientInfo *)*pval;
		if (ri->type == CMS_RECIPINFO_TRANS) {
			CMS_KeyTransRecipientInfo *ktri = ri->d.ktri;
			EVP_PKEY_free(ktri->pkey);
			X509_free(ktri->recip);
			EVP_PKEY_CTX_free(ktri->pctx);
		} else if (ri->type == CMS_RECIPINFO_KEK) {
			CMS_KEKRecipientInfo *kekri = ri->d.kekri;
			freezero(kekri->key, kekri->keylen);
		} else if (ri->type == CMS_RECIPINFO_PASS) {
			CMS_PasswordRecipientInfo *pwri = ri->d.pwri;
			freezero(pwri->pass, pwri->passlen);
		}
	}
	return 1;
}

static const ASN1_AUX CMS_RecipientInfo_aux = {
	.app_data = NULL,
	.flags = 0,
	.ref_offset = 0,
	.ref_lock = 0,
	.asn1_cb = cms_ri_cb,
	.enc_offset = 0,
};
static const ASN1_TEMPLATE CMS_RecipientInfo_ch_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_RecipientInfo, d.ktri),
		.field_name = "d.ktri",
		.item = &CMS_KeyTransRecipientInfo_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 1,
		.offset = offsetof(CMS_RecipientInfo, d.kari),
		.field_name = "d.kari",
		.item = &CMS_KeyAgreeRecipientInfo_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 2,
		.offset = offsetof(CMS_RecipientInfo, d.kekri),
		.field_name = "d.kekri",
		.item = &CMS_KEKRecipientInfo_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 3,
		.offset = offsetof(CMS_RecipientInfo, d.pwri),
		.field_name = "d.pwri",
		.item = &CMS_PasswordRecipientInfo_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 4,
		.offset = offsetof(CMS_RecipientInfo, d.ori),
		.field_name = "d.ori",
		.item = &CMS_OtherRecipientInfo_it,
	},
};

const ASN1_ITEM CMS_RecipientInfo_it = {
	.itype = ASN1_ITYPE_CHOICE,
	.utype = offsetof(CMS_RecipientInfo, type),
	.templates = CMS_RecipientInfo_ch_tt,
	.tcount = sizeof(CMS_RecipientInfo_ch_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = &CMS_RecipientInfo_aux,
	.size = sizeof(CMS_RecipientInfo),
	.sname = "CMS_RecipientInfo",
};

static const ASN1_TEMPLATE CMS_EnvelopedData_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_EnvelopedData, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_EnvelopedData, originatorInfo),
		.field_name = "originatorInfo",
		.item = &CMS_OriginatorInfo_it,
	},
	{
		.flags = ASN1_TFLG_SET_OF,
		.tag = 0,
		.offset = offsetof(CMS_EnvelopedData, recipientInfos),
		.field_name = "recipientInfos",
		.item = &CMS_RecipientInfo_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_EnvelopedData, encryptedContentInfo),
		.field_name = "encryptedContentInfo",
		.item = &CMS_EncryptedContentInfo_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_SET_OF | ASN1_TFLG_OPTIONAL,
		.tag = 1,
		.offset = offsetof(CMS_EnvelopedData, unprotectedAttrs),
		.field_name = "unprotectedAttrs",
		.item = &X509_ATTRIBUTE_it,
	},
};

const ASN1_ITEM CMS_EnvelopedData_it = {
	.itype = ASN1_ITYPE_NDEF_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_EnvelopedData_seq_tt,
	.tcount = sizeof(CMS_EnvelopedData_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_EnvelopedData),
	.sname = "CMS_EnvelopedData",
};

static const ASN1_TEMPLATE CMS_DigestedData_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_DigestedData, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_DigestedData, digestAlgorithm),
		.field_name = "digestAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_DigestedData, encapContentInfo),
		.field_name = "encapContentInfo",
		.item = &CMS_EncapsulatedContentInfo_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_DigestedData, digest),
		.field_name = "digest",
		.item = &ASN1_OCTET_STRING_it,
	},
};

const ASN1_ITEM CMS_DigestedData_it = {
	.itype = ASN1_ITYPE_NDEF_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_DigestedData_seq_tt,
	.tcount = sizeof(CMS_DigestedData_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_DigestedData),
	.sname = "CMS_DigestedData",
};

static const ASN1_TEMPLATE CMS_EncryptedData_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_EncryptedData, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_EncryptedData, encryptedContentInfo),
		.field_name = "encryptedContentInfo",
		.item = &CMS_EncryptedContentInfo_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_SET_OF | ASN1_TFLG_OPTIONAL,
		.tag = 1,
		.offset = offsetof(CMS_EncryptedData, unprotectedAttrs),
		.field_name = "unprotectedAttrs",
		.item = &X509_ATTRIBUTE_it,
	},
};

const ASN1_ITEM CMS_EncryptedData_it = {
	.itype = ASN1_ITYPE_NDEF_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_EncryptedData_seq_tt,
	.tcount = sizeof(CMS_EncryptedData_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_EncryptedData),
	.sname = "CMS_EncryptedData",
};

static const ASN1_TEMPLATE CMS_AuthenticatedData_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_AuthenticatedData, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_AuthenticatedData, originatorInfo),
		.field_name = "originatorInfo",
		.item = &CMS_OriginatorInfo_it,
	},
	{
		.flags = ASN1_TFLG_SET_OF,
		.tag = 0,
		.offset = offsetof(CMS_AuthenticatedData, recipientInfos),
		.field_name = "recipientInfos",
		.item = &CMS_RecipientInfo_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_AuthenticatedData, macAlgorithm),
		.field_name = "macAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 1,
		.offset = offsetof(CMS_AuthenticatedData, digestAlgorithm),
		.field_name = "digestAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_AuthenticatedData, encapContentInfo),
		.field_name = "encapContentInfo",
		.item = &CMS_EncapsulatedContentInfo_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_SET_OF | ASN1_TFLG_OPTIONAL,
		.tag = 2,
		.offset = offsetof(CMS_AuthenticatedData, authAttrs),
		.field_name = "authAttrs",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_AuthenticatedData, mac),
		.field_name = "mac",
		.item = &ASN1_OCTET_STRING_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_SET_OF | ASN1_TFLG_OPTIONAL,
		.tag = 3,
		.offset = offsetof(CMS_AuthenticatedData, unauthAttrs),
		.field_name = "unauthAttrs",
		.item = &X509_ALGOR_it,
	},
};

static const ASN1_ITEM CMS_AuthenticatedData_it = {
	.itype = ASN1_ITYPE_NDEF_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_AuthenticatedData_seq_tt,
	.tcount = sizeof(CMS_AuthenticatedData_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_AuthenticatedData),
	.sname = "CMS_AuthenticatedData",
};

static const ASN1_TEMPLATE CMS_CompressedData_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_CompressedData, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_CompressedData, compressionAlgorithm),
		.field_name = "compressionAlgorithm",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_CompressedData, encapContentInfo),
		.field_name = "encapContentInfo",
		.item = &CMS_EncapsulatedContentInfo_it,
	},
};

const ASN1_ITEM CMS_CompressedData_it = {
	.itype = ASN1_ITYPE_NDEF_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_CompressedData_seq_tt,
	.tcount = sizeof(CMS_CompressedData_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_CompressedData),
	.sname = "CMS_CompressedData",
};

/* This is the ANY DEFINED BY table for the top level ContentInfo structure */

static const ASN1_TEMPLATE cms_default_tt = {
	.flags = ASN1_TFLG_EXPLICIT,
	.tag = 0,
	.offset = offsetof(CMS_ContentInfo, d.other),
	.field_name = "d.other",
	.item = &ASN1_ANY_it,
};

static const ASN1_ADB_TABLE CMS_ContentInfo_adbtbl[] = {
	{
		.value = NID_pkcs7_data,
		.tt = {
			.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_NDEF,
			.tag = 0,
			.offset = offsetof(CMS_ContentInfo, d.data),
			.field_name = "d.data",
			.item = &ASN1_OCTET_STRING_NDEF_it,
		},
	
	},
	{
		.value = NID_pkcs7_signed,
		.tt = {
			.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_NDEF,
			.tag = 0,
			.offset = offsetof(CMS_ContentInfo, d.signedData),
			.field_name = "d.signedData",
			.item = &CMS_SignedData_it,
		},
	
	},
	{
		.value = NID_pkcs7_enveloped,
		.tt = {
			.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_NDEF,
			.tag = 0,
			.offset = offsetof(CMS_ContentInfo, d.envelopedData),
			.field_name = "d.envelopedData",
			.item = &CMS_EnvelopedData_it,
		},
	
	},
	{
		.value = NID_pkcs7_digest,
		.tt = {
			.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_NDEF,
			.tag = 0,
			.offset = offsetof(CMS_ContentInfo, d.digestedData),
			.field_name = "d.digestedData",
			.item = &CMS_DigestedData_it,
		},
	
	},
	{
		.value = NID_pkcs7_encrypted,
		.tt = {
			.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_NDEF,
			.tag = 0,
			.offset = offsetof(CMS_ContentInfo, d.encryptedData),
			.field_name = "d.encryptedData",
			.item = &CMS_EncryptedData_it,
		},
	
	},
	{
		.value = NID_id_smime_ct_authData,
		.tt = {
			.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_NDEF,
			.tag = 0,
			.offset = offsetof(CMS_ContentInfo, d.authenticatedData),
			.field_name = "d.authenticatedData",
			.item = &CMS_AuthenticatedData_it,
		},
	
	},
	{
		.value = NID_id_smime_ct_compressedData,
		.tt = {
			.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_NDEF,
			.tag = 0,
			.offset = offsetof(CMS_ContentInfo, d.compressedData),
			.field_name = "d.compressedData",
			.item = &CMS_CompressedData_it,
		},
	
	},
};

static const ASN1_ADB CMS_ContentInfo_adb = {
	.flags = 0,
	.offset = offsetof(CMS_ContentInfo, contentType),
	.app_items = 0,
	.tbl = CMS_ContentInfo_adbtbl,
	.tblcount = sizeof(CMS_ContentInfo_adbtbl) / sizeof(ASN1_ADB_TABLE),
	.default_tt = &cms_default_tt,
	.null_tt = NULL,
};

/* CMS streaming support */
static int
cms_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it, void *exarg)
{
	ASN1_STREAM_ARG *sarg = exarg;
	CMS_ContentInfo *cms = NULL;
	if (pval)
		cms = (CMS_ContentInfo *)*pval;
	else
		return 1;
	switch (operation) {

	case ASN1_OP_STREAM_PRE:
		if (CMS_stream(&sarg->boundary, cms) <= 0)
			return 0;
		/* fall thru */
	case ASN1_OP_DETACHED_PRE:
		sarg->ndef_bio = CMS_dataInit(cms, sarg->out);
		if (!sarg->ndef_bio)
			return 0;
		break;

	case ASN1_OP_STREAM_POST:
	case ASN1_OP_DETACHED_POST:
		if (CMS_dataFinal(cms, sarg->ndef_bio) <= 0)
			return 0;
		break;

	}
	return 1;
}

static const ASN1_AUX CMS_ContentInfo_aux = {
	.app_data = NULL,
	.flags = 0,
	.ref_offset = 0,
	.ref_lock = 0,
	.asn1_cb = cms_cb,
	.enc_offset = 0,
};
static const ASN1_TEMPLATE CMS_ContentInfo_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_ContentInfo, contentType),
		.field_name = "contentType",
		.item = &ASN1_OBJECT_it,
	},
	{
		.flags = ASN1_TFLG_ADB_OID,
		.tag = -1,
		.offset = 0,
		.field_name = "CMS_ContentInfo",
		.item = (const ASN1_ITEM *)&CMS_ContentInfo_adb,
	},
};

const ASN1_ITEM CMS_ContentInfo_it = {
	.itype = ASN1_ITYPE_NDEF_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_ContentInfo_seq_tt,
	.tcount = sizeof(CMS_ContentInfo_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = &CMS_ContentInfo_aux,
	.size = sizeof(CMS_ContentInfo),
	.sname = "CMS_ContentInfo",
};

/* Specials for signed attributes */

/*
 * When signing attributes we want to reorder them to match the sorted
 * encoding.
 */

static const ASN1_TEMPLATE CMS_Attributes_Sign_item_tt = {
	.flags = ASN1_TFLG_SET_ORDER,
	.tag = 0,
	.offset = 0,
	.field_name = "CMS_ATTRIBUTES",
	.item = &X509_ATTRIBUTE_it,
};

const ASN1_ITEM CMS_Attributes_Sign_it = {
	.itype = ASN1_ITYPE_PRIMITIVE,
	.utype = -1,
	.templates = &CMS_Attributes_Sign_item_tt,
	.tcount = 0,
	.funcs = NULL,
	.size = 0,
	.sname = "CMS_Attributes_Sign",
};

/*
 * When verifying attributes we need to use the received order. So we use
 * SEQUENCE OF and tag it to SET OF
 */

static const ASN1_TEMPLATE CMS_Attributes_Verify_item_tt = {
	.flags = ASN1_TFLG_SEQUENCE_OF | ASN1_TFLG_IMPTAG | ASN1_TFLG_UNIVERSAL,
	.tag = V_ASN1_SET,
	.offset = 0,
	.field_name = "CMS_ATTRIBUTES",
	.item = &X509_ATTRIBUTE_it,
};

const ASN1_ITEM CMS_Attributes_Verify_it = {
	.itype = ASN1_ITYPE_PRIMITIVE,
	.utype = -1,
	.templates = &CMS_Attributes_Verify_item_tt,
	.tcount = 0,
	.funcs = NULL,
	.size = 0,
	.sname = "CMS_Attributes_Verify",
};



static const ASN1_TEMPLATE CMS_ReceiptsFrom_ch_tt[] = {
	{
		.flags = ASN1_TFLG_IMPLICIT,
		.tag = 0,
		.offset = offsetof(CMS_ReceiptsFrom, d.allOrFirstTier),
		.field_name = "d.allOrFirstTier",
		.item = &LONG_it,
	},
	{
		.flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_SEQUENCE_OF,
		.tag = 1,
		.offset = offsetof(CMS_ReceiptsFrom, d.receiptList),
		.field_name = "d.receiptList",
		.item = &GENERAL_NAMES_it,
	},
};

static const ASN1_ITEM CMS_ReceiptsFrom_it = {
	.itype = ASN1_ITYPE_CHOICE,
	.utype = offsetof(CMS_ReceiptsFrom, type),
	.templates = CMS_ReceiptsFrom_ch_tt,
	.tcount = sizeof(CMS_ReceiptsFrom_ch_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_ReceiptsFrom),
	.sname = "CMS_ReceiptsFrom",
};

static const ASN1_TEMPLATE CMS_ReceiptRequest_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_ReceiptRequest, signedContentIdentifier),
		.field_name = "signedContentIdentifier",
		.item = &ASN1_OCTET_STRING_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_ReceiptRequest, receiptsFrom),
		.field_name = "receiptsFrom",
		.item = &CMS_ReceiptsFrom_it,
	},
	{
		.flags = ASN1_TFLG_SEQUENCE_OF,
		.tag = 0,
		.offset = offsetof(CMS_ReceiptRequest, receiptsTo),
		.field_name = "receiptsTo",
		.item = &GENERAL_NAMES_it,
	},
};

const ASN1_ITEM CMS_ReceiptRequest_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_ReceiptRequest_seq_tt,
	.tcount = sizeof(CMS_ReceiptRequest_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_ReceiptRequest),
	.sname = "CMS_ReceiptRequest",
};

static const ASN1_TEMPLATE CMS_Receipt_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_Receipt, version),
		.field_name = "version",
		.item = &LONG_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_Receipt, contentType),
		.field_name = "contentType",
		.item = &ASN1_OBJECT_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_Receipt, signedContentIdentifier),
		.field_name = "signedContentIdentifier",
		.item = &ASN1_OCTET_STRING_it,
	},
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_Receipt, originatorSignatureValue),
		.field_name = "originatorSignatureValue",
		.item = &ASN1_OCTET_STRING_it,
	},
};

const ASN1_ITEM CMS_Receipt_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_Receipt_seq_tt,
	.tcount = sizeof(CMS_Receipt_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_Receipt),
	.sname = "CMS_Receipt",
};

/*
 * Utilities to encode the CMS_SharedInfo structure used during key
 * derivation.
 */

typedef struct {
	X509_ALGOR *keyInfo;
	ASN1_OCTET_STRING *entityUInfo;
	ASN1_OCTET_STRING *suppPubInfo;
} CMS_SharedInfo;

static const ASN1_TEMPLATE CMS_SharedInfo_seq_tt[] = {
	{
		.flags = 0,
		.tag = 0,
		.offset = offsetof(CMS_SharedInfo, keyInfo),
		.field_name = "keyInfo",
		.item = &X509_ALGOR_it,
	},
	{
		.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_OPTIONAL,
		.tag = 0,
		.offset = offsetof(CMS_SharedInfo, entityUInfo),
		.field_name = "entityUInfo",
		.item = &ASN1_OCTET_STRING_it,
	},
	{
		.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_OPTIONAL,
		.tag = 2,
		.offset = offsetof(CMS_SharedInfo, suppPubInfo),
		.field_name = "suppPubInfo",
		.item = &ASN1_OCTET_STRING_it,
	},
};

static const ASN1_ITEM CMS_SharedInfo_it = {
	.itype = ASN1_ITYPE_SEQUENCE,
	.utype = V_ASN1_SEQUENCE,
	.templates = CMS_SharedInfo_seq_tt,
	.tcount = sizeof(CMS_SharedInfo_seq_tt) / sizeof(ASN1_TEMPLATE),
	.funcs = NULL,
	.size = sizeof(CMS_SharedInfo),
	.sname = "CMS_SharedInfo",
};

int
CMS_SharedInfo_encode(unsigned char **pder, X509_ALGOR *kekalg,
    ASN1_OCTET_STRING *ukm, int keylen)
{
	union {
		CMS_SharedInfo *pecsi;
		ASN1_VALUE *a;
	} intsi = {
		NULL
	};

	ASN1_OCTET_STRING oklen;
	unsigned char kl[4];
	CMS_SharedInfo ecsi;

	keylen <<= 3;
	kl[0] = (keylen >> 24) & 0xff;
	kl[1] = (keylen >> 16) & 0xff;
	kl[2] = (keylen >> 8) & 0xff;
	kl[3] = keylen & 0xff;
	oklen.length = 4;
	oklen.data = kl;
	oklen.type = V_ASN1_OCTET_STRING;
	oklen.flags = 0;
	ecsi.keyInfo = kekalg;
	ecsi.entityUInfo = ukm;
	ecsi.suppPubInfo = &oklen;
	intsi.pecsi = &ecsi;

	return ASN1_item_i2d(intsi.a, pder, &CMS_SharedInfo_it);
}