Download Source Code
BAE Systems supplies a modular set of freeware libraries that provide security services for applications and can be easily adapted to future security architectures. Each library provides a modular, high-level, platform-independent application program interface (API). Our libraries allow application developers to meet security requirements with minimal effort.
SMP Source
Zip file containing consolidated source code, project files, make files, and readme files for the v2.5 ACL, Certificate Management Library (CML), Storage Retrieval Library (SRL), S/MIME Freeware Library (SFL), Crypto Token Interface Libraries (CTIL) and CTILManager libraries. |
zip |
SMP Source - v2.5.1 PATCH
The following was fixed or added in SMP patch 2.5.1:
Decoding and processing of the tag type 7 data (free form field) when checking a security label in the SecurityLabel::check method in ACL.
Bug fix in tracking of required categories in the SecurityLabel::requiredCatCheck method in ACL.
Bug fix in local ACL cache when storing and retrieving attribute certificates as cacheable objects.
Bug fix in revocation hash table deletion code in revocation status checking library.
|
zip |
SMP Source - v2.5.2 PATCH (October 3, 2006)
The following was fixed or added in SMP patch 2.5.2:
Corrected a bug where certificates added to the database from a URL are not found locally with the SRL_RequestObjs() function.
Corrected a bug where certificates added to the database from a URL do not include the flag to include the crossCertificatePair directory attribute.
Set the default LDAP client behavior from v2 to v3.
Removed memory leaks from the ACL and SFL libraries.
Fixed the incorrect algorithm in Findcrlissuer() function that was causing performance problems.
Fixed a code bug where the base class for a CRL is added to the cache instead of the derived class.
Delta CRL processing now occurs if the freshest extension is in the CRL, not just in the certificate.
CRL processing code now works around not having an AsnInt::operator >() function by using < and == operators. Also fixed a problem with a delta CRL being issued at the same time as a base CRL.
Added support to more extended key usages in the CML.
Removed a memory leak from the ACL.
The code now considers a delta CRL applicable to a base CRL if the CRLNumbers in the delta and base are equal.
Fixed a problem with CRL updates to the database using improper hash values.
Can now build CML into static libraries.
Various fixes in the ACL, CML, and SFL libraries.
Now supports Crypto++ 5.2.1 and GCC v4.1.1 and below.
Fixed a bug in the dbu_read_entry.
The patch has been tested on Linux/Windows without issue.
|
zip |
Certificate Builder and Test Utilities
Source code, Windows project files, and Unix makefiles for v2.5 CertificateBuilder test utility that can be used to generate key material, X.509 Certificates, X.509 (2000) Attribute Certificates, X.501 Clearance Attributes, and RFC 2634 Security Labels. Also contains source code, project files, and makefiles for SFL test drivers/utilities such as report_tool and testTripleWrap. Also includes the IETF Examples-09 test messages used to test the SFL. See the smp/SMIME/readmeTest.txt describing these 3 utilities and how to build them.
#### The source code includes PKCS #12 software developed by the OpenSSLProject for use in the OpenSSL Toolkit." #### |
zip |
SMP Setup Documentation
|
Word |
PDF |
SMP Public License
|
Link |
eSNACC Source
Note: MS Windows NT/98/2000/XP project files and Unix makefiles for v1.7 Enhanced SNACC ASN.1 Compiler and Library. Source code is compilable for Linux, Solaris 2.8 and MS Windows NT/98/2000/XP that has been enhanced by BAE Systems to implement the Distinguished Encoding Rules. This file includes a sample test project demonstrating the use of the SNACC classes.
|
Zip |
eSNACC Source - v1.7.3 Patch (July 7, 2005)
4k memory leak fix in asn-buf.cpp
hash.cpp bug -- Potential crash in SplitAndInsert function fixed
bmp string fix in asn-stringtype.cpp
Conditional call to getseg when seglen > 0 added in asn-stringtype.cpp
The patch has been tested on Linux/Windows without issue.
|
tgz |
eSNACC Source - v1.7.4 Patch (October 3, 2006)
Fixed a bug where the C library BEncAsnBitsContent() function incorrectly encoded empty BIT STRINGs.
Fixed a bug with C-code generation where the tag decoding code for a choice within a set is incorrect.
Fixed ExpBufSetWriteError() function to pass in a double pointer instead of a single pointer to preserve allocated memory.
Fixed a bug where numbers greater than 4 bytes were not passing constraint tests even though the range was defined as up to MAX, which is much greater than 4 bytes.
AsnBits::SetSize() function now uses a safer memory copy instead of a string copy when re-sizing.
Code now compiles on GCC compilers up to v4.1.1
Fixed memory leaks when freeing an AsnAny data type
Fixed bug in IA5String constraint checking which was ignoring null characters when checking the size.
Fixed a bug in generated C code when a tagged choice is within a sequence.
Fixed a bug in the AsnAny C code generation where an optional field is incorrectly checked for its existence.
The patch has been tested on Linux/Windows without issue.
|
tgz |
|