Method encode_rtps_message

dds/DCPS/security/CryptoBuiltInImpl.cpp:1580–1687

}

bool CryptoBuiltInImpl::encode_rtps_message(
  DDS::OctetSeq& encoded_rtps_message,
  const DDS::OctetSeq& plain_rtps_message,
  ParticipantCryptoHandle sending_participant_crypto,
  const ParticipantCryptoHandleSeq& receiving_participant_crypto_list,
  CORBA::Long& receiving_participant_crypto_list_index,
  SecurityException& ex)
{
  receiving_participant_crypto_list_index = static_cast<DDS::Int32>(receiving_participant_crypto_list.length());
  if (DDS::HANDLE_NIL == sending_participant_crypto) {
    // DDS-Security v1.1 8.5.1.9.4
    // This operation may optionally not perform any transformation of the input RTPS message.
    // In this case, the operation shall return false but not set the exception object.
    return false;
  }

  ACE_Guard<ACE_Thread_Mutex> guard(mutex_);
  const KeyTable_t::const_iterator iter = keys_.find(sending_participant_crypto);
  if (iter == keys_.end()) {
    return CommonUtilities::set_security_error(ex, -1, 0, "No entry for sending_participant_crypto");
  }

  const KeySeq& keyseq = iter->second;
  if (!keyseq.length()) {
    return CommonUtilities::set_security_error(ex, -1, 0, "No key for sending_participant_crypto");
  }

  // The input with its RTPS Header changed to an InfoSrc submessage acts as plaintext for encrypt/authenticate
  DDS::OctetSeq transformed(plain_rtps_message.length() + RTPS::SMHDR_SZ);
  transformed.length(transformed.maximum());
  transformed[0] = RTPS::INFO_SRC;
  transformed[1] = 0; // flags: big-endian
  transformed[2] = 0; // high byte of octetsToNextHeader
  transformed[3] = RTPS::INFO_SRC_SZ;
  std::memcpy(transformed.get_buffer() + RTPS::SMHDR_SZ, plain_rtps_message.get_buffer(), plain_rtps_message.length());

  bool ok, addSecBody = false;
  CryptoHeader cryptoHdr;
  CryptoFooter cryptoFooter;
  DDS::OctetSeq out;
  const DDS::OctetSeq* pOut = &transformed;
  const KeyMaterial& key = keyseq[0];
  const KeyId_t sKey = std::make_pair(sending_participant_crypto, 0);

  if (encrypts(key)) {
    ok = encrypt(key, sessions_[sKey], transformed, cryptoHdr, cryptoFooter, out, ex);
    pOut = &out;
    addSecBody = true;

  } else if (authenticates(key)) {
    // the original message's last submsg may have octetsToNextHeader = 0 which
    // isn't valid when appending SEC_POSTFIX, patch in the actual submsg length
    const unsigned int offsetFinal = findLastSubmessage(transformed);
    if (offsetFinal && setOctetsToNextHeader(out, transformed, offsetFinal)) {
      pOut = &out;
    }
    ok = authtag(key, sessions_[sKey], *pOut, cryptoHdr, cryptoFooter, ex);