[feat] - SSI - TP1

security/TP1/GenSig.java

@@ -0,0 +1,106 @@
+/*
+ * Copyright (c) 1995, 2008, Oracle and/or its affiliates. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   - Redistributions of source code must retain the above copyright
+ *     notice, this list of conditions and the following disclaimer.
+ *
+ *   - Redistributions in binary form must reproduce the above copyright
+ *     notice, this list of conditions and the following disclaimer in the
+ *     documentation and/or other materials provided with the distribution.
+ *
+ *   - Neither the name of Oracle or the names of its
+ *     contributors may be used to endorse or promote products derived
+ *     from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
+ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR
+ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */ 
+
+
+ import java.io.*;
+ import java.security.*;
+ 
+ class GenSig {
+ 
+     public static void main(String[] args) {
+ 
+         /* Generate a DSA signature */
+ 
+         if (args.length != 1) {
+             System.out.println("Usage: GenSig nameOfFileToSign");
+             }
+         else try{
+ 
+             /* Generate a key pair */
+ 
+             KeyPairGenerator keyGen = KeyPairGenerator.getInstance("DSA", "SUN");
+             SecureRandom random = SecureRandom.getInstance("SHA1PRNG", "SUN");
+ 
+             keyGen.initialize(1024, random);
+ 
+             KeyPair pair = keyGen.generateKeyPair();
+             PrivateKey priv = pair.getPrivate();
+             PublicKey pub = pair.getPublic();
+ 
+ 
+             /* Create a Signature object and initialize it with the private key */
+ 
+             Signature dsa = Signature.getInstance("SHA1withDSA", "SUN"); 
+ 
+             dsa.initSign(priv);
+ 
+             /* Update and sign the data */
+ 
+             FileInputStream fis = new FileInputStream(args[0]);
+             BufferedInputStream bufin = new BufferedInputStream(fis);
+             byte[] buffer = new byte[1024];
+             int len;
+             while (bufin.available() != 0) {
+                 len = bufin.read(buffer);
+                 dsa.update(buffer, 0, len);
+                 };
+ 
+             bufin.close();
+ 
+             /* Now that all the data to be signed has been read in, 
+                     generate a signature for it */
+ 
+             byte[] realSig = dsa.sign();
+ 
+         
+             /* Save the signature in a file */
+             FileOutputStream sigfos = new FileOutputStream("sig");
+             sigfos.write(realSig);
+ 
+             sigfos.close();
+ 
+ 
+             /* Save the public key in a file */
+             byte[] key = pub.getEncoded();
+             FileOutputStream keyfos = new FileOutputStream("suepk");
+             keyfos.write(key);
+ 
+             keyfos.close();
+ 
+         } catch (Exception e) {
+             System.err.println("Caught exception " + e.toString());
+         }
+ 
+     };
+ 
+ }
+ 
+ 

security/TP1/GetProps.java

@@ -0,0 +1,74 @@
+/*
+ * Copyright (c) 1995, 2008, Oracle and/or its affiliates. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   - Redistributions of source code must retain the above copyright
+ *     notice, this list of conditions and the following disclaimer.
+ *
+ *   - Redistributions in binary form must reproduce the above copyright
+ *     notice, this list of conditions and the following disclaimer in the
+ *     documentation and/or other materials provided with the distribution.
+ *
+ *   - Neither the name of Oracle or the names of its
+ *     contributors may be used to endorse or promote products derived
+ *     from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
+ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR
+ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */ 
+
+ import java.lang.*;
+ import java.security.*;
+ 
+ class GetProps {
+ 
+     public static void main(String[] args) {
+ 
+         /* Test reading properties w & w/out security manager */
+         
+         String s;
+ 
+         try {
+ 
+             System.out.println("About to get os.name property value");
+ 
+             s = System.getProperty("os.name", "not specified");
+             System.out.println("  The name of your operating system is: " + s);
+ 
+             System.out.println("About to get java.version property value");
+ 
+             s = System.getProperty("java.version", "not specified");
+             System.out.println("  The version of the JVM you are running is: " + s);
+ 
+             System.out.println("About to get user.home property value");
+ 
+             s = System.getProperty("user.home", "not specified");
+             System.out.println("  Your user home directory is: " + s);
+ 
+             System.out.println("About to get java.home property value");
+ 
+             s = System.getProperty("java.home", "not specified");
+             System.out.println("  Your JRE installation directory is: " + s);
+ 
+ 
+         } catch (Exception e) {
+             System.err.println("Caught exception " + e.toString());
+         }
+ 
+     }
+ 
+ }
+ 
+ 

security/TP1/Signature_code_&_octroi_autorisations/Count.java

@@ -0,0 +1,52 @@
+/*
+ * Copyright (c) 1995, 2008, Oracle and/or its affiliates. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   - Redistributions of source code must retain the above copyright
+ *     notice, this list of conditions and the following disclaimer.
+ *
+ *   - Redistributions in binary form must reproduce the above copyright
+ *     notice, this list of conditions and the following disclaimer in the
+ *     documentation and/or other materials provided with the distribution.
+ *
+ *   - Neither the name of Oracle or the names of its
+ *     contributors may be used to endorse or promote products derived
+ *     from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
+ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR
+ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */ 
+
+ import java.io.*;
+
+ public class Count {
+     public static void countChars(InputStream in) throws IOException
+     {
+         int count = 0;
+ 
+         while (in.read() != -1)
+             count++;
+ 
+         System.out.println("Counted " + count + " chars.");
+     }
+ 
+     public static void main(String[] args) throws Exception
+     {
+         if (args.length >= 1)
+             countChars(new FileInputStream(args[0]));
+         else
+             System.err.println("Usage: Count filename");
+     }
+ }

security/TP1/TestDatas/testCount

@@ -0,0 +1,17 @@
+A 
+Dans
+Par
+Pour
+En
+Vers
+Avec
+Deux
+Sans
+Sous
+Mais
+Ou
+Et
+Donc
+Or
+Ni
+Car

security/TP1/VerSig.java

@@ -0,0 +1,100 @@
+/*
+ * Copyright (c) 1995, 2008, Oracle and/or its affiliates. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   - Redistributions of source code must retain the above copyright
+ *     notice, this list of conditions and the following disclaimer.
+ *
+ *   - Redistributions in binary form must reproduce the above copyright
+ *     notice, this list of conditions and the following disclaimer in the
+ *     documentation and/or other materials provided with the distribution.
+ *
+ *   - Neither the name of Oracle or the names of its
+ *     contributors may be used to endorse or promote products derived
+ *     from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+ * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
+ * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR
+ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+ * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+ * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+ * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */ 
+
+
+ import java.io.*;
+ import java.security.*;
+ import java.security.spec.*;
+ 
+ class VerSig {
+ 
+     public static void main(String[] args) {
+ 
+         /* Verify a DSA signature */
+ 
+         if (args.length != 3) {
+             System.out.println("Usage: VerSig publickeyfile signaturefile datafile");
+             }
+         else try{
+ 
+             /* import encoded public key */
+ 
+             FileInputStream keyfis = new FileInputStream(args[0]);
+             byte[] encKey = new byte[keyfis.available()];  
+             keyfis.read(encKey);
+ 
+             keyfis.close();
+ 
+             X509EncodedKeySpec pubKeySpec = new X509EncodedKeySpec(encKey);
+ 
+             KeyFactory keyFactory = KeyFactory.getInstance("DSA", "SUN");
+             PublicKey pubKey = keyFactory.generatePublic(pubKeySpec);
+ 
+             /* input the signature bytes */
+             FileInputStream sigfis = new FileInputStream(args[1]);
+             byte[] sigToVerify = new byte[sigfis.available()]; 
+             sigfis.read(sigToVerify );
+ 
+             sigfis.close();
+ 
+             /* create a Signature object and initialize it with the public key */
+             Signature sig = Signature.getInstance("SHA1withDSA", "SUN");
+             sig.initVerify(pubKey);
+ 
+             /* Update and verify the data */
+ 
+             FileInputStream datafis = new FileInputStream(args[2]);
+             BufferedInputStream bufin = new BufferedInputStream(datafis);
+ 
+             byte[] buffer = new byte[1024];
+             int len;
+             while (bufin.available() != 0) {
+                 len = bufin.read(buffer);
+                 sig.update(buffer, 0, len);
+                 };
+ 
+             bufin.close();
+ 
+ 
+             boolean verifies = sig.verify(sigToVerify);
+ 
+             System.out.println("signature verifies: " + verifies);
+ 
+ 
+         } catch (Exception e) {
+             System.err.println("Caught exception " + e.toString());
+ };
+ 
+     }
+ 
+ }
+ 
+ 

security/TP1/examplepolicy

@@ -0,0 +1,11 @@
+/* AUTOMATICALLY GENERATED ON Fri Oct 18 10:43:50 CEST 2024*/
+/* DO NOT EDIT */
+
+grant codeBase "https://docs.oracle.com/javase/tutorial/security/tour1/examples/" {
+};
+
+grant codeBase "file:/home/kmitresse/PauUniversity/Master-TI-2/security/TP1/" {
+  permission java.util.PropertyPermission "user.home", "read";
+  permission java.util.PropertyPermission "java.home", "read";
+};
+

security/TP1/sig

@@ -0,0 +1 @@
+0,fš°ÁêqkSpÚCT+LÇ?ÚÝ@o·´ouL�»²ôáaj]Wêm@