//Reads the catalog file and returns the list of hashes in the catalog
public List <string> ReadCatalogFile(string fileName)
{
//Get cryptographic service provider (CSP) to be passed to CryptCATOpen
List <string> data = new List <string>();
IntPtr cryptProv = IntPtr.Zero;
bool status = CatalogFunctions.CryptAcquireContext(out cryptProv, IntPtr.Zero, IntPtr.Zero, CatalogFunctions.PROV_RSA_FULL, 0);
if (status == false)
{
uint err = (uint)Marshal.GetLastWin32Error();
if (err == CatalogFunctions.NTE_BAD_KEYSET)
{
// No default container was found. Attempt to create it.
status = CatalogFunctions.CryptAcquireContext(out cryptProv, IntPtr.Zero, IntPtr.Zero, CatalogFunctions.PROV_RSA_FULL, CatalogFunctions.CRYPT_NEWKEYSET);
if (status == false)
{
err = (uint)Marshal.GetLastWin32Error();
throw new Exception("Error in CryptAcquireContext: " + err);
}
}
else
{
throw new Exception("Error in CryptAcquireContext: " + err);
}
}
//Open the catalog file for reading
IntPtr hCatalog = CatalogFunctions.CryptCATOpen(fileName, 0, cryptProv, CatalogFunctions.CRYPTCAT_VERSION_1, 0x00000001);
if (hCatalog == CatalogFunctions.INVALID_HANDLE_VALUE)
{
//Unable to open cat file, release the acquired
CatalogFunctions.CryptReleaseContext(cryptProv, 0);
throw new Exception("Unable to read catalog file");
}
//Read the catalog members
IntPtr pMemberPtr = CatalogFunctions.CryptCATEnumerateMember(hCatalog, IntPtr.Zero);
while (pMemberPtr != IntPtr.Zero)
{
CRYPTCATMEMBER cdf = (CRYPTCATMEMBER)Marshal.PtrToStructure(pMemberPtr, typeof(CRYPTCATMEMBER));
//Use the data in cdf
data.Add(cdf.pwszReferenceTag);
pMemberPtr = CatalogFunctions.CryptCATEnumerateMember(hCatalog, pMemberPtr);
}
//Close the catalog file
CatalogFunctions.CryptCATClose(hCatalog);
//Release CSP
CatalogFunctions.CryptReleaseContext(cryptProv, 0);
return(data);
}
private void Form1_Load(object sender, EventArgs e)
{
IntPtr hCatalog = CryptCATOpen("C:\\Program Files\\USBPcap\\usbpcapamd64.cat", 0, IntPtr.Zero, 0, 0);
if (hCatalog != (IntPtr)INVALID_HANDLE_VALUE)
{
IntPtr pMember = IntPtr.Zero;
while ((pMember = CryptCATEnumerateMember(hCatalog, pMember)) != IntPtr.Zero)
{
CRYPTCATMEMBER pCRYPTCATMEMBER = (CRYPTCATMEMBER)Marshal.PtrToStructure(pMember, typeof(CRYPTCATMEMBER));
SIP_INDIRECT_DATA pSIP_INDIRECT_DATA = (SIP_INDIRECT_DATA)Marshal.PtrToStructure(pCRYPTCATMEMBER.pIndirectData, typeof(SIP_INDIRECT_DATA));
StringBuilder sbData = new StringBuilder();
IntPtr pData = pSIP_INDIRECT_DATA.Digest.pbData;
for (int i = 0; i < pSIP_INDIRECT_DATA.Digest.cbData; i++)
{
byte byteValue = Marshal.ReadByte(pData);
sbData.Append(string.Format("{0:X}", byteValue));
pData += 1;
}
Console.WriteLine("Data = " + sbData.ToString());
IntPtr pAttr = IntPtr.Zero;
while ((pAttr = CryptCATEnumerateAttr(hCatalog, pMember, pAttr)) != IntPtr.Zero)
{
CRYPTCATATTRIBUTE pCRYPTCATATTRIBUTE = (CRYPTCATATTRIBUTE)Marshal.PtrToStructure(pAttr, typeof(CRYPTCATATTRIBUTE));
string sReferenceTag = Marshal.PtrToStringUni(pCRYPTCATATTRIBUTE.pwszReferenceTag);
Console.WriteLine("\tReferenceTag = " + sReferenceTag);
StringBuilder sbValue = new StringBuilder();
IntPtr pValue = pCRYPTCATATTRIBUTE.pbValue;
for (int i = 0; i < pCRYPTCATATTRIBUTE.cbValue; i++)
{
byte byteValue = Marshal.ReadByte(pValue);
sbValue.Append(string.Format("{0:X}", byteValue));
pValue += 1;
}
Console.WriteLine("\tValue = " + sbValue.ToString());
}
}
CryptCATClose(hCatalog);
}
else
{
throw new Win32Exception(Marshal.GetLastWin32Error());
}
}
public void CreateCatalogFile(string fileName)
{
CRYPTCATMEMBER ccm = null;
try
{
CatalogFunctions.PFN_CDF_PARSE_ERROR_CALLBACK pfn = ParseErrorCallback;
String s = null; //This null assignment is deliberately done.
IntPtr cdfPtr = CatalogFunctions.CryptCATCDFOpen(fileName, Marshal.GetFunctionPointerForDelegate(pfn));
CRYPTCATCDF cdf = (CRYPTCATCDF)Marshal.PtrToStructure(cdfPtr, typeof(CRYPTCATCDF)); //This call is required else the catlog file creation fails
do
{
ccm = new CRYPTCATMEMBER
{
pIndirectData = Marshal.AllocHGlobal(Marshal.SizeOf(typeof(SIP_INDIRECT_DATA)))
};
unsafe
{
IntPtr ptr = Marshal.StringToHGlobalUni(s);
s = CatalogFunctions.CryptCATCDFEnumMembersByCDFTagEx(cdfPtr, ptr.ToPointer(), Marshal.GetFunctionPointerForDelegate(pfn), ccm, true, IntPtr.Zero);
}
} while (s != null);
CatalogFunctions.CryptCATCDFClose(cdfPtr); //This is required to update the .cat with the files details specified in .cdf file.
}
catch (Exception e)
{
throw;
}
finally
{
// Free the unmanaged memory.
if (ccm != null)
{
Marshal.FreeHGlobal(ccm.pIndirectData);
}
}
}
