/* packet-cose.c

 * Routines for CBOR Object Signing and Encryption (COSE) dissection

 * References:

 *     RFC 8949: https://tools.ietf.org/html/rfc8949

 *     RFC 9052: https://tools.ietf.org/html/rfc9052

 *     RFC 9053: https://tools.ietf.org/html/rfc9053

 *     RFC 9360: https://tools.ietf.org/html/rfc9360

 *     RFC 9459: https://tools.ietf.org/html/rfc9459

 *     RFC 9861: https://tools.ietf.org/html/rfc9861

 *

 * Copyright 2019-2021, Brian Sipos <brian.sipos@gmail.com>

 *

 * Wireshark - Network traffic analyzer

 * By Gerald Combs <gerald@wireshark.org>

 * Copyright 1998 Gerald Combs

 *

 * SPDX-License-Identifier: LGPL-2.1-or-later

 */

#include "config.h"

#define WS_LOG_DOMAIN "packet-cose"

#include "packet-cose.h"

#include "packet-media-type.h"

#include <epan/wscbor.h>

#include <epan/packet.h>

#include <epan/prefs.h>

#include <epan/proto.h>

#include <epan/media_params.h>

#include <epan/expert.h>

#include <epan/exceptions.h>

#include <wsutil/array.h>

#include <gcrypt.h>

#include <inttypes.h>

void proto_register_cose(void);

void proto_reg_handoff_cose(void);

/// Protocol column name

static const char *const proto_name_cose = "COSE";

/// Protocol preferences and defaults

/// Protocol handles

static int proto_cose;

static int proto_cose_params;

/// Dissect opaque CBOR data

static dissector_handle_t handle_cbor;

/// Dissector handles

static dissector_handle_t handle_cose_msg_hdr;

static dissector_handle_t handle_cose_msg_tagged;

static dissector_handle_t handle_cose_media_type;

static dissector_handle_t handle_cose_sign;

static dissector_handle_t handle_cose_sign1;

static dissector_handle_t handle_cose_encrypt;

static dissector_handle_t handle_cose_encrypt0;

static dissector_handle_t handle_cose_mac;

static dissector_handle_t handle_cose_mac0;

static dissector_handle_t handle_cose_key;

static dissector_handle_t handle_cose_key_set;

/// Dissect opaque data

static dissector_table_t table_media;

/// Dissect extension items

static dissector_table_t table_cose_msg_tag;

static dissector_table_t table_cose_media_subtype;

static dissector_table_t table_header;

static dissector_table_t table_keyparam;

static const val64_string alg_vals[] = {

    {-65535, "RS1"},

    {-65534, "A128CTR"},

    {-65533, "A192CTR"},

    {-65532, "A256CTR"},

    {-65531, "A128CBC"},

    {-65530, "A192CBC"},

    {-65529, "A256CBC"},

    {-268, "ESB512"},

    {-267, "ESB384"},

    {-266, "ESB320"},

    {-265, "ESB256"},

    {-264, "KT256"},

    {-263, "KT128"},

    {-260, "WalnutDSA"},

    {-259, "RS512"},

    {-258, "RS384"},

    {-257, "RS256"},

    {-53, "Ed448"},

    {-52, "ESP512"},

    {-51, "ESP384"},

    {-50, "ML-DSA-87"},

    {-49, "ML-DSA-65"},

    {-48, "ML-DSA-44"},

    {-47, "ES256K"},

    {-46, "HSS-LMS"},

    {-45, "SHAKE256"},

    {-44, "SHA-512"},

    {-43, "SHA-384"},

    {-42, "RSAES-OAEP w/ SHA-512"},

    {-41, "RSAES-OAEP w/ SHA-256"},

    {-40, "RSAES-OAEP w/ SHA-1"},

    {-39, "PS512"},

    {-38, "PS384"},

    {-37, "PS256"},

    {-36, "ES512"},

    {-35, "ES384"},

    {-34, "ECDH-SS + A256KW"},

    {-33, "ECDH-SS + A192KW"},

    {-32, "ECDH-SS + A128KW"},

    {-31, "ECDH-ES + A256KW"},

    {-30, "ECDH-ES + A192KW"},

    {-29, "ECDH-ES + A128KW"},

    {-28, "ECDH-SS + HKDF-512"},

    {-27, "ECDH-SS + HKDF-256"},

    {-26, "ECDH-ES + HKDF-512"},

    {-25, "ECDH-ES + HKDF-256"},

    {-19, "Ed25519"},

    {-18, "SHAKE128"},

    {-17, "SHA-512/256"},

    {-16, "SHA-256"},

    {-15, "SHA-256/64"},

    {-14, "SHA-1"},

    {-13, "direct+HKDF-AES-256"},

    {-12, "direct+HKDF-AES-128"},

    {-11, "direct+HKDF-SHA-512"},

    {-10, "direct+HKDF-SHA-256"},

    {-9, "ESP256"},

    {-8, "EdDSA"},

    {-7, "ES256"},

    {-6, "direct"},

    {-5, "A256KW"},

    {-4, "A192KW"},

    {-3, "A128KW"},

    {0, "Reserved"},

    {1, "A128GCM"},

    {2, "A192GCM"},

    {3, "A256GCM"},

    {4, "HMAC 256/64"},

    {5, "HMAC 256/256"},

    {6, "HMAC 384/384"},

    {7, "HMAC 512/512"},

    {10, "AES-CCM-16-64-128"},

    {11, "AES-CCM-16-64-256"},

    {12, "AES-CCM-64-64-128"},

    {13, "AES-CCM-64-64-256"},

    {14, "AES-MAC 128/64"},

    {15, "AES-MAC 256/64"},

    {24, "ChaCha20/Poly1305"},

    {25, "AES-MAC 128/128"},

    {26, "AES-MAC 256/128"},

    {30, "AES-CCM-16-128-128"},

    {31, "AES-CCM-16-128-256"},

    {32, "AES-CCM-64-128-128"},

    {33, "AES-CCM-64-128-256"},

    {34, "IV-GENERATION"},

    {0, NULL},

};

static const val64_string kty_vals[] = {

    {0, "Reserved"},

    {1, "OKP"},

    {2, "EC2"},

    {3, "RSA"},

    {4, "Symmetric"},

    {5, "HSS-LMS"},

    {6, "WalnutDSA"},

    {7, "AKP"},

    {0, NULL},

};

static const val64_string keyops_vals[] = {

    {1, "sign"},

    {2, "verify"},

    {3, "encrypt"},

    {4, "decrypt"},

    {5, "key wrap"},

    {6, "key unwrap"},

    {7, "derive key"},

    {8, "derive bits"},

    {9, "MAC create"},

    {10, "MAC verify"},

    {0, NULL},

};

static const val64_string crv_vals[] = {

    {0, "Reserved"},

    {1, "P-256"},

    {2, "P-384"},

    {3, "P-521"},

    {4, "X25519"},

    {5, "X448"},

    {6, "Ed25519"},

    {7, "Ed448"},

    {0, NULL},

};

static int hf_msg_tag;

static int hf_hdr_prot_bstr;

static int hf_hdr_unprot;

static int hf_payload_null;

static int hf_payload_bstr;

static int hf_cose_signature_list;

static int hf_cose_signature;

static int hf_signature;

static int hf_ciphertext_null;

static int hf_ciphertext_bstr;

static int hf_cose_recipient_list;

static int hf_cose_recipient;

static int hf_tag;

static int hf_hdr_label_int;

static int hf_hdr_label_tstr;

static int hf_hdr_salt;

static int hf_hdr_static_key;

static int hf_hdr_ephem_key;

static int hf_hdr_alg_int;

static int hf_hdr_alg_tstr;

static int hf_hdr_crit_list;

static int hf_hdr_ctype_uint;

static int hf_hdr_ctype_tstr;

static int hf_hdr_kid;

static int hf_hdr_kid_text;

static int hf_hdr_iv;

static int hf_hdr_piv;

static int hf_hdr_x5bag;

static int hf_hdr_x5chain;

static int hf_hdr_x5t;

static int hf_hdr_x5t_hash;

static int hf_hdr_x5u;

static int hf_key;

static int hf_keyparam_kty_int;

static int hf_keyparam_kty_tstr;

static int hf_keyparam_keyops_list;

static int hf_keyparam_keyops_int;

static int hf_keyparam_keyops_tstr;

static int hf_keyparam_baseiv;

static int hf_keyparam_crv_int;

static int hf_keyparam_crv_tstr;

static int hf_keyparam_xcoord;

static int hf_keyparam_ycoord;

static int hf_keyparam_dcoord;

static int hf_keyparam_k;

static int hf_keyparam_pub;

static int hf_keyparam_priv;

/// Field definitions

static hf_register_info fields[] = {

    {&hf_msg_tag, {"Message type tag", "cose.msgtag", FT_UINT64, BASE_DEC, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_prot_bstr, {"Protected Headers (bstr)", "cose.msg.prot_bstr", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_unprot, {"Unprotected Headers", "cose.msg.unprot", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_payload_null, {"Payload Detached", "cose.msg.detached_payload", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_payload_bstr, {"Payload", "cose.msg.payload", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_signature, {"Signature", "cose.msg.signature", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_cose_signature_list, {"Signature List, Count", "cose.msg.signature_list", FT_UINT64, BASE_DEC, NULL, 0x0, NULL, HFILL}},

    {&hf_cose_signature, {"COSE_Signature", "cose.msg.cose_signature", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_ciphertext_null, {"Ciphertext Detached", "cose.msg.detached_ciphertext", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_ciphertext_bstr, {"Ciphertext", "cose.msg.ciphertext", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_cose_recipient_list, {"Recipient List, Count", "cose.msg.recipient_list", FT_UINT64, BASE_DEC, NULL, 0x0, NULL, HFILL}},

    {&hf_cose_recipient, {"COSE_Recipient", "cose.msg.cose_recipient", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_tag, {"Tag", "cose.msg.mac_tag", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_label_int, {"Label", "cose.header_label.int", FT_INT64, BASE_DEC, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_label_tstr, {"Label", "cose.header_label.tstr", FT_STRING, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_salt, {"Salt", "cose.salt", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_static_key, {"Static Key", "cose.static_key", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_ephem_key, {"Ephemeral Key", "cose.ephem_key", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_alg_int, {"Algorithm", "cose.alg.int", FT_INT64, BASE_DEC | BASE_VAL64_STRING, VALS64(alg_vals), 0x0, NULL, HFILL}},

    {&hf_hdr_alg_tstr, {"Algorithm", "cose.alg.tstr", FT_STRING, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_crit_list, {"Critical Headers, Count", "cose.crit", FT_INT64, BASE_DEC, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_ctype_uint, {"Content-Format", "cose.content-type.uint", FT_INT64, BASE_DEC, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_ctype_tstr, {"Content-Type", "cose.content-type.tstr", FT_STRING, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_kid, {"Key identifier", "cose.kid", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_kid_text, {"As Text", "cose.kid.as_text", FT_STRING, BASE_NONE, NULL, 0x0, "The kid byte string interpreted as UTF-8 text", HFILL}},

    {&hf_hdr_iv, {"IV", "cose.iv", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_piv, {"Partial IV", "cose.piv", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_x5bag, {"X509 Bag (x5bag)", "cose.x5bag", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_x5chain, {"X509 Chain (x5chain)", "cose.x5chain", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_x5t, {"X509 Thumbprint (x5t)", "cose.x5t", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_x5t_hash, {"Hash Value", "cose.x5t.hash", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_hdr_x5u, {"X509 URI (x5u)", "cose.x5u", FT_STRING, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_key, {"COSE_Key", "cose.key", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_keyparam_kty_int, {"Key Type", "cose.kty.int", FT_INT64, BASE_DEC | BASE_VAL64_STRING, VALS64(kty_vals), 0x0, NULL, HFILL}},

    {&hf_keyparam_kty_tstr, {"Key Type", "cose.kty.tstr", FT_STRING, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_keyparam_keyops_list, {"Key Operations", "cose.keyops", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_keyparam_keyops_int, {"Operation", "cose.keyops.int", FT_INT64, BASE_DEC | BASE_VAL64_STRING, VALS64(keyops_vals), 0x0, NULL, HFILL}},

    {&hf_keyparam_keyops_tstr, {"Operation", "cose.keyops.tstr", FT_STRING, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_keyparam_baseiv, {"Base IV", "cose.baseiv", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_keyparam_crv_int, {"Curve Type", "cose.crv.int", FT_INT64, BASE_DEC | BASE_VAL64_STRING, VALS64(crv_vals), 0x0, NULL, HFILL}},

    {&hf_keyparam_crv_tstr, {"Curve Type", "cose.crv.tstr", FT_STRING, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_keyparam_xcoord, {"X-coordinate", "cose.key.xcoord", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_keyparam_ycoord, {"Y-coordinate", "cose.key.ycoord", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_keyparam_dcoord, {"Private Key", "cose.key.dcoord", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_keyparam_k, {"Key", "cose.key.k", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_keyparam_pub, {"Public key", "cose.key.pub", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

    {&hf_keyparam_priv, {"Private key", "cose.key.priv", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL}},

};

static int ett_msg;

static int ett_sig_list;

static int ett_sig;

static int ett_recip_list;

static int ett_recip;

static int ett_prot_bstr;

static int ett_unprot;

static int ett_hdr_map;

static int ett_hdr_label;

static int ett_hdr_kid;

static int ett_hdr_static_key;

static int ett_hdr_ephem_key;

static int ett_hdr_crit_list;

static int ett_hdr_x5cert_list;

static int ett_hdr_x5t_list;

static int ett_key;

static int ett_key_set;

static int ett_keyops_list;

/// Tree structures

static int *ett[] = {

    &ett_msg,

    &ett_sig_list,

    &ett_sig,

    &ett_recip_list,

    &ett_recip,

    &ett_prot_bstr,

    &ett_unprot,

    &ett_hdr_map,

    &ett_hdr_label,

    &ett_hdr_kid,

    &ett_hdr_static_key,

    &ett_hdr_ephem_key,

    &ett_hdr_crit_list,

    &ett_hdr_x5cert_list,

    &ett_hdr_x5t_list,

    &ett_key,

    &ett_key_set,

    &ett_keyops_list,

};

static expert_field ei_invalid_tag;

static expert_field ei_value_partial_decode;

static ei_register_info expertitems[] = {

    {&ei_invalid_tag, { "cose.invalid_tag", PI_UNDECODED, PI_WARN, "COSE dissector did not match any known tag", EXPFILL}},

    {&ei_value_partial_decode, { "cose.partial_decode", PI_MALFORMED, PI_WARN, "Value is only partially decoded", EXPFILL}},

};

/* Compatible with GHashFunc signature. */

static unsigned cose_param_key_hash(const void *ptr) {

    const cose_param_key_t *obj = (const cose_param_key_t *)ptr;

    unsigned val = 0;

    if (obj->principal) {

        val ^= g_int64_hash(obj->principal);

    }

    if (obj->label) {

        val ^= g_variant_hash(obj->label);

    }

    return val;

}

/* Compatible with GEqualFunc signature. */

static gboolean cose_param_key_equal(const void *a, const void *b) {

    const cose_param_key_t *aobj = (const cose_param_key_t *)a;

    const cose_param_key_t *bobj = (const cose_param_key_t *)b;

    if (aobj->principal && bobj->principal) {

        if (!g_variant_equal(aobj->principal, bobj->principal)) {

            return FALSE;

        }

    }

    else if ((aobj->principal == NULL) != (bobj->principal == NULL)) {

        return FALSE;

    }

    gboolean match;

    if (aobj->label && bobj->label) {

        match = g_variant_equal(aobj->label, bobj->label);

    }

    else {

        // don't care

        match = FALSE;

    }

    return match;

}

/* Compatible with GDestroyNotify signature. */

static void cose_param_key_free(void *ptr) {

    cose_param_key_t *obj = (cose_param_key_t *)ptr;

    if (obj->principal) {

        g_variant_unref(obj->principal);

    }

    if (obj->label) {

        g_variant_unref(obj->label);

    }

    g_free(obj);

}

/// Known hash properties

static const cose_hash_props_t cose_hash_props_list[] = {

    {-45, GCRY_MD_SHAKE256, 64},

    {-44, GCRY_MD_SHA512, 64},

    {-43, GCRY_MD_SHA384, 48},

    {-18, GCRY_MD_SHAKE128, 32},

    {-17, GCRY_MD_SHA512, 32}, // truncated

    {-16, GCRY_MD_SHA256, 32},

    {-15, GCRY_MD_SHA256, 16}, // truncated

    {-14, GCRY_MD_SHA1, 20},

};

/// Derived lookup map

static GHashTable *cose_hash_props_map = NULL;

const cose_hash_props_t * cose_get_hash_props(int64_t alg) {

    if (cose_hash_props_map) {

        // fast lookup when available

        return g_hash_table_lookup(cose_hash_props_map, &alg);

    }

    else {

        return NULL;

    }

}

/// Known AEAD properties

static const cose_aead_props_t cose_aead_props_list[] = {

    {1, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_GCM, 16, 12, 16},

    {2, GCRY_CIPHER_AES192, GCRY_CIPHER_MODE_GCM, 24, 12, 16},

    {3, GCRY_CIPHER_AES256, GCRY_CIPHER_MODE_GCM, 32, 12, 16},

    {10, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_CCM, 16, 13, 8},

    {11, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_CCM, 32, 13, 8},

    {12, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_CCM, 16, 7, 8},

    {13, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_CCM, 32, 7, 8},

    {24, GCRY_CIPHER_CHACHA20, GCRY_CIPHER_MODE_POLY1305, 32, 12, 16},

    {30, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_CCM, 16, 13, 16},

    {31, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_CCM, 32, 13, 16},

    {32, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_CCM, 16, 7, 16},

    {33, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_CCM, 32, 7, 16},

};

/// Derived lookup map

static GHashTable *cose_aead_props_map = NULL;

const cose_aead_props_t * cose_get_aead_props(int64_t alg) {

    if (cose_aead_props_map) {

        // fast lookup when available

        return g_hash_table_lookup(cose_aead_props_map, &alg);

    }

    else {

        return NULL;

    }

}

/// Known curve properties

static const cose_ecc_props_t cose_ecc_props_list[] = {

    {1, 32}, // P-256

    {2, 48}, // P-384

    {3, 66}, // P-521

    {4, 32}, // X25519

    {5, 57}, // X448

    {6, 32}, // Ed25519

    {7, 57}, // Ed448

    {8, 32}, // secp256k1

};

/// Derived lookup map

static GHashTable *cose_ecc_props_map = NULL;

const cose_ecc_props_t * cose_get_ecc_props(int64_t crv) {

    if (cose_ecc_props_map) {

        // fast lookup when available

        return g_hash_table_lookup(cose_ecc_props_map, &crv);

    }

    else {

        return NULL;

    }

}

/** Get a specific item value (map key or value) from a header map.

 * @param alloc The allocator for temporary data.

 * @param tvb The buffer to read from.

 * @param[in,out] offset The starting offset to read and advance.

 * @return A pointer to the simple value or NULL.

 */

static GVariant * get_header_value(wmem_allocator_t *alloc, tvbuff_t *tvb, int *offset) {

    GVariant *result = NULL;

    wscbor_chunk_t *chunk = wscbor_chunk_read(alloc, tvb, offset);

    switch (chunk->type_major) {

        case CBOR_TYPE_UINT:

        case CBOR_TYPE_NEGINT: {

            int64_t *label = wscbor_require_int64(alloc, chunk);

            if (label) {

                result = g_variant_new_int64(*label);

            }

            break;

        }

        case CBOR_TYPE_STRING: {

            const char *label = wscbor_require_tstr(alloc, chunk);

            if (label) {

                result = g_variant_new_string(label);

            }

            break;

        }

        default:

            break;

    }

    wscbor_chunk_free(chunk);

    return result;

}

/** Dissect an ID-value pair within a context.

 *

 * @param dis_table The cose_param_key_t dissector table.

 * @param[in,out] ctx The context from other pairs.

 * @return True if the pair was dissected (even as opaque CBOR data).

 */

static bool dissect_header_pair(dissector_table_t dis_table, cose_header_context_t *ctx, tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset) {

    wscbor_chunk_t *chunk_label = wscbor_chunk_read(pinfo->pool, tvb, offset);

    proto_item *item_label = NULL;

    proto_tree *volatile tree_label = NULL;

    tvbuff_t *volatile tvb_value = NULL;

    cose_param_key_t key = { 0 };

    const char *label_str = NULL;

    switch (chunk_label->type_major) {

        case CBOR_TYPE_UINT:

        case CBOR_TYPE_NEGINT: {

            int64_t *label = wscbor_require_int64(pinfo->pool, chunk_label);

            item_label = proto_tree_add_cbor_int64(tree, hf_hdr_label_int, pinfo, tvb, chunk_label, label);

            if (label) {

                key.label = ctx->label =

                    g_variant_new_int64(*label);

                label_str = wmem_strdup_printf(pinfo->pool, "%" PRId64, *label);

            }

            break;

        }

        case CBOR_TYPE_STRING: {

            const char *label = wscbor_require_tstr(pinfo->pool, chunk_label);

            item_label = proto_tree_add_cbor_tstr(tree, hf_hdr_label_tstr, pinfo, tvb, chunk_label);

            if (label) {

                key.label = ctx->label =

                    g_variant_new_string(label);

                label_str = label;

            }

            break;

        }

        default:

            break;

    }

    // First attempt with context then without

    key.principal = ctx->principal;

    dissector_handle_t dissector = dissector_get_custom_table_handle(dis_table, &key);

    if (!dissector) {

        key.principal = NULL;

        dissector = dissector_get_custom_table_handle(dis_table, &key);

    }

    const char *dis_name = dissector_handle_get_description(dissector);

    if (item_label && dis_name) {

        proto_item_set_text(item_label, "%s: %s (%s)",

                            PITEM_HFINFO(item_label)->name, dis_name, label_str);

    }

    tree_label = proto_item_add_subtree(item_label, ett_hdr_label);

    // Peek into the value as tvb

    const int offset_value = *offset;

    if (!wscbor_skip_next_item(pinfo->pool, tvb, offset)) {

        return false;

    }

    tvb_value = tvb_new_subset_length(tvb, offset_value, *offset - offset_value);

    int sublen = 0;

    if (dissector) {

        sublen = call_dissector_only(dissector, tvb_value, pinfo, tree_label, ctx);

        if ((sublen < 0) ||

            ((sublen > 0) && ((unsigned)sublen < tvb_reported_length(tvb_value)))) {

            expert_add_info(pinfo, proto_tree_get_parent(tree), &ei_value_partial_decode);

        }

    }

    if (ctx->label) {

        g_variant_unref(ctx->label);

        ctx->label = NULL;

    }

    if (sublen == 0) {

        TRY {

            call_dissector(handle_cbor, tvb_value, pinfo, tree_label);

        }

        CATCH_ALL {}

        ENDTRY;

    }

    return true;

}

static void

cose_header_context_cleanup(void *user_data) {

    cose_header_context_t *ctx = (cose_header_context_t *)user_data;

    if (ctx->principal) {

        g_variant_unref(ctx->principal);

    }

    if (ctx->label) {

        g_variant_unref(ctx->label);

        ctx->label = NULL;

    }

}

static void

g_variant_cleanup(void *user_data) {

    GVariant *var = (GVariant *)user_data;

    g_variant_unref(var);

}

/** Dissect an entire header map, either for messages, recipients, or keys.

 *

 * @param dis_table The cose_param_key_t dissector table.

 * @param tvb The source data.

 * @param tree The parent of the header map.

 * @param[in,out] offset The data offset.

 * @param principal_key The map key associated with a principal value to read first.

 */

static void dissect_header_map(dissector_table_t dis_table, tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset, GVariant *principal_key) {

    wscbor_chunk_t *chunk_hdr_map = wscbor_chunk_read(pinfo->pool, tvb, offset);

    wscbor_require_map(chunk_hdr_map);

    proto_item *item_hdr_map = proto_tree_get_parent(tree);

    wscbor_chunk_mark_errors(pinfo, item_hdr_map, chunk_hdr_map);

    if (!wscbor_skip_if_errors(pinfo->pool, tvb, offset, chunk_hdr_map)) {

        proto_tree *tree_hdr_map = proto_item_add_subtree(item_hdr_map, ett_hdr_map);

        cose_header_context_t *ctx = wmem_new0(pinfo->pool, cose_header_context_t);

        CLEANUP_PUSH(cose_header_context_cleanup, ctx);

        // Peek ahead to principal key (and value) first

        if (principal_key) {

            int peek_offset = *offset;

            for (uint64_t ix = 0; ix < chunk_hdr_map->head_value; ++ix) {

                GVariant *key = get_header_value(pinfo->pool, tvb, &peek_offset);

                if (key) {

                    if (g_variant_equal(key, principal_key)) {

                        ctx->principal = get_header_value(pinfo->pool, tvb, &peek_offset);

                    }

                    g_variant_unref(key);

                    if (ctx->principal) {

                        break;

                    }

                }

                // ignore non-principal value entirely

                wscbor_skip_next_item(pinfo->pool, tvb, &peek_offset);

            }

        }

        for (uint64_t ix = 0; ix < chunk_hdr_map->head_value; ++ix) {

            if (!dissect_header_pair(dis_table, ctx, tvb, pinfo, tree_hdr_map, offset)) {

                break;

            }

        }

        CLEANUP_CALL_AND_POP;

        wmem_free(pinfo->pool, ctx);

    }

    proto_item_set_len(item_hdr_map, *offset - chunk_hdr_map->start);

}

static int dissect_cose_msg_header_map(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_) {

    int offset = 0;

    GVariant *alg_key = g_variant_new_int64(1);

    CLEANUP_PUSH(g_variant_cleanup, alg_key);

    dissect_header_map(table_header, tvb, pinfo, tree, &offset, alg_key);

    CLEANUP_CALL_AND_POP;

    return offset;

}

/** Indicate the tag which informed the message type.

 */

static void dissect_msg_tag(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree_msg, const wscbor_chunk_t *chunk_msg _U_, const void *data) {

    if (!data) {

        return;

    }

    const wscbor_tag_t *tag = (const wscbor_tag_t *)data;

    proto_tree_add_uint64(tree_msg, hf_msg_tag, tvb, tag->start, tag->length, tag->value);

}

/** Common behavior for pair of header maps.

 */

static void dissect_headers(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset) {

    // Protected in bstr

    wscbor_chunk_t *chunk_prot_bstr = wscbor_chunk_read(pinfo->pool, tvb, offset);

    tvbuff_t *tvb_prot = wscbor_require_bstr(pinfo->pool, chunk_prot_bstr);

    proto_item *item_prot_bstr = proto_tree_add_cbor_bstr(tree, hf_hdr_prot_bstr, pinfo, tvb, chunk_prot_bstr);

    if (tvb_prot) {

        proto_tree *tree_prot = proto_item_add_subtree(item_prot_bstr, ett_prot_bstr);

        if (tvb_reported_length(tvb_prot) > 0) {

            dissect_cose_msg_header_map(tvb_prot, pinfo, tree_prot, NULL);

        }

    }

    // Unprotected

    tvbuff_t *tvb_unprot = tvb_new_subset_remaining(tvb, *offset);

    proto_item *item_unprot = proto_tree_add_item(tree, hf_hdr_unprot, tvb_unprot, 0, -1, ENC_NA);

    proto_tree *tree_unprot = proto_item_add_subtree(item_unprot, ett_unprot);

    const int sublen = dissect_cose_msg_header_map(tvb_unprot, pinfo, tree_unprot, NULL);

    *offset += sublen;

    proto_item_set_len(item_unprot, sublen);

}

/** Common behavior for payload.

 */

static void dissect_payload(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset) {

    wscbor_chunk_t *chunk = wscbor_chunk_read(pinfo->pool, tvb, offset);

    if (chunk->type_major == CBOR_TYPE_FLOAT_CTRL) {

        proto_tree_add_cbor_ctrl(tree, hf_payload_null, pinfo, tvb, chunk);

    }

    else {

        wscbor_require_bstr(pinfo->pool, chunk);

        proto_tree_add_cbor_bstr(tree, hf_payload_bstr, pinfo, tvb, chunk);

    }

}

static void dissect_signature(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset) {

    wscbor_chunk_t *chunk = wscbor_chunk_read(pinfo->pool, tvb, offset);

    wscbor_require_bstr(pinfo->pool, chunk);

    proto_tree_add_cbor_bstr(tree, hf_signature, pinfo, tvb, chunk);

}

static void dissect_cose_signature(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset) {

    wscbor_chunk_t *chunk_sig = wscbor_chunk_read(pinfo->pool, tvb, offset);

    wscbor_require_array_size(chunk_sig, 3, 3);

    proto_item *item_sig = proto_tree_add_cbor_container(tree, hf_cose_signature, pinfo, tvb, chunk_sig);

    if (!wscbor_skip_if_errors(pinfo->pool, tvb, offset, chunk_sig)) {

        proto_tree *tree_sig = proto_item_add_subtree(item_sig, ett_sig);

        dissect_headers(tvb, pinfo, tree_sig, offset);

        dissect_signature(tvb, pinfo, tree_sig, offset);

    }

    proto_item_set_len(item_sig, *offset - chunk_sig->start);

}

static void dissect_ciphertext(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset) {

    wscbor_chunk_t *chunk = wscbor_chunk_read(pinfo->pool, tvb, offset);

    if (chunk->type_major == CBOR_TYPE_FLOAT_CTRL) {

        proto_tree_add_cbor_ctrl(tree, hf_ciphertext_null, pinfo, tvb, chunk);

    }

    else {

        wscbor_require_bstr(pinfo->pool, chunk);

        proto_tree_add_cbor_bstr(tree, hf_ciphertext_bstr, pinfo, tvb, chunk);

    }

}

static void dissect_cose_recipient(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset);

// NOLINTNEXTLINE(misc-no-recursion)

static void dissect_cose_recipient_list(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset) {

    wscbor_chunk_t *chunk_list = wscbor_chunk_read(pinfo->pool, tvb, offset);

    wscbor_require_array(chunk_list);

    proto_item *item_list = proto_tree_add_cbor_container(tree, hf_cose_recipient_list, pinfo, tvb, chunk_list);

    if (!wscbor_skip_if_errors(pinfo->pool, tvb, offset, chunk_list)) {

        proto_tree *tree_recip_list = proto_item_add_subtree(item_list, ett_recip_list);

        for (uint64_t ix = 0; ix < chunk_list->head_value; ++ix) {

            dissect_cose_recipient(tvb, pinfo, tree_recip_list, offset);

        }

    }

    proto_item_set_len(item_list, *offset - chunk_list->start);

}

// NOLINTNEXTLINE(misc-no-recursion)

static void dissect_cose_recipient(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset) {

    wscbor_chunk_t *chunk_recip = wscbor_chunk_read(pinfo->pool, tvb, offset);

    wscbor_require_array_size(chunk_recip, 3, 4);

    proto_item *item_recip = proto_tree_add_cbor_container(tree, hf_cose_recipient, pinfo, tvb, chunk_recip);

    if (!wscbor_skip_if_errors(pinfo->pool, tvb, offset, chunk_recip)) {

        proto_tree *tree_recip = proto_item_add_subtree(item_recip, ett_recip);

        dissect_headers(tvb, pinfo, tree_recip, offset);

        dissect_ciphertext(tvb, pinfo, tree_recip, offset);

        if (chunk_recip->head_value > 3) {

            increment_dissection_depth(pinfo);

            dissect_cose_recipient_list(tvb, pinfo, tree_recip, offset);

            decrement_dissection_depth(pinfo);

        }

    }

    proto_item_set_len(item_recip, *offset - chunk_recip->start);

}

static void dissect_tag(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset) {

    wscbor_chunk_t *chunk = wscbor_chunk_read(pinfo->pool, tvb, offset);

    wscbor_require_bstr(pinfo->pool, chunk);

    proto_tree_add_cbor_bstr(tree, hf_tag, pinfo, tvb, chunk);

}

// Top-level protocol dissectors

static int dissect_cose_sign(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data) {

    int offset = 0;

    wscbor_chunk_t *chunk_msg = wscbor_chunk_read(pinfo->pool, tvb, &offset);

    wscbor_require_array_size(chunk_msg, 4, 4);

    proto_item *item_msg = proto_tree_add_cbor_container(tree, proto_cose, pinfo, tvb, chunk_msg);

    proto_item_append_text(item_msg, ": COSE_Sign");

    if (!wscbor_skip_if_errors(pinfo->pool, tvb, &offset, chunk_msg)) {

        proto_tree *tree_msg = proto_item_add_subtree(item_msg, ett_msg);

        dissect_msg_tag(tvb, pinfo, tree_msg, chunk_msg, data);

        dissect_headers(tvb, pinfo, tree_msg, &offset);

        dissect_payload(tvb, pinfo, tree_msg, &offset);

        wscbor_chunk_t *chunk_sig_list = wscbor_chunk_read(pinfo->pool, tvb, &offset);

        wscbor_require_array(chunk_sig_list);

        proto_item *item_sig_list = proto_tree_add_cbor_container(tree_msg, hf_cose_signature_list, pinfo, tvb, chunk_sig_list);

        if (!wscbor_skip_if_errors(pinfo->pool, tvb, &offset, chunk_sig_list)) {

            proto_tree *tree_sig_list = proto_item_add_subtree(item_sig_list, ett_sig_list);

            for (uint64_t ix = 0; ix < chunk_sig_list->head_value; ++ix) {

                dissect_cose_signature(tvb, pinfo, tree_sig_list, &offset);

            }

        }

        proto_item_set_len(item_sig_list, offset - chunk_sig_list->start);

    }

    return offset;

}

static int dissect_cose_sign1(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data) {

    int offset = 0;

    wscbor_chunk_t *chunk_msg = wscbor_chunk_read(pinfo->pool, tvb, &offset);

    wscbor_require_array_size(chunk_msg, 4, 4);

    proto_item *item_msg = proto_tree_add_cbor_container(tree, proto_cose, pinfo, tvb, chunk_msg);

    proto_item_append_text(item_msg, ": COSE_Sign1");

    if (!wscbor_skip_if_errors(pinfo->pool, tvb, &offset, chunk_msg)) {

        proto_tree *tree_msg = proto_item_add_subtree(item_msg, ett_msg);

        dissect_msg_tag(tvb, pinfo, tree_msg, chunk_msg, data);

        dissect_headers(tvb, pinfo, tree_msg, &offset);

        dissect_payload(tvb, pinfo, tree_msg, &offset);

        dissect_signature(tvb, pinfo, tree_msg, &offset);

    }

    return offset;

}

static int dissect_cose_encrypt(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data) {

    int offset = 0;

    wscbor_chunk_t *chunk_msg = wscbor_chunk_read(pinfo->pool, tvb, &offset);

    wscbor_require_array_size(chunk_msg, 4, 4);

    proto_item *item_msg = proto_tree_add_cbor_container(tree, proto_cose, pinfo, tvb, chunk_msg);

    proto_item_append_text(item_msg, ": COSE_Encrypt");

    if (!wscbor_skip_if_errors(pinfo->pool, tvb, &offset, chunk_msg)) {

        proto_tree *tree_msg = proto_item_add_subtree(item_msg, ett_msg);

        dissect_msg_tag(tvb, pinfo, tree_msg, chunk_msg, data);

        dissect_headers(tvb, pinfo, tree_msg, &offset);

        dissect_ciphertext(tvb, pinfo, tree_msg, &offset);

        dissect_cose_recipient_list(tvb, pinfo, tree_msg, &offset);

    }

    return offset;

}

static int dissect_cose_encrypt0(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data) {

    int offset = 0;

    wscbor_chunk_t *chunk_msg = wscbor_chunk_read(pinfo->pool, tvb, &offset);

    wscbor_require_array_size(chunk_msg, 3, 3);

    proto_item *item_msg = proto_tree_add_cbor_container(tree, proto_cose, pinfo, tvb, chunk_msg);

    proto_item_append_text(item_msg, ": COSE_Encrypt0");

    if (!wscbor_skip_if_errors(pinfo->pool, tvb, &offset, chunk_msg)) {

        proto_tree *tree_msg = proto_item_add_subtree(item_msg, ett_msg);

        dissect_msg_tag(tvb, pinfo, tree_msg, chunk_msg, data);

        dissect_headers(tvb, pinfo, tree_msg, &offset);

        dissect_ciphertext(tvb, pinfo, tree_msg, &offset);

    }

    return offset;

}

static int dissect_cose_mac(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data) {

    int offset = 0;

    wscbor_chunk_t *chunk_msg = wscbor_chunk_read(pinfo->pool, tvb, &offset);

    wscbor_require_array_size(chunk_msg, 5, 5);

    proto_item *item_msg = proto_tree_add_cbor_container(tree, proto_cose, pinfo, tvb, chunk_msg);

    proto_item_append_text(item_msg, ": COSE_Mac");

    if (!wscbor_skip_if_errors(pinfo->pool, tvb, &offset, chunk_msg)) {

        proto_tree *tree_msg = proto_item_add_subtree(item_msg, ett_msg);

        dissect_msg_tag(tvb, pinfo, tree_msg, chunk_msg, data);

        dissect_headers(tvb, pinfo, tree_msg, &offset);

        dissect_payload(tvb, pinfo, tree_msg, &offset);

        dissect_tag(tvb, pinfo, tree_msg, &offset);

        dissect_cose_recipient_list(tvb, pinfo, tree_msg, &offset);

    }

    return offset;

}

static int dissect_cose_mac0(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data) {

    int offset = 0;

    wscbor_chunk_t *chunk_msg = wscbor_chunk_read(pinfo->pool, tvb, &offset);

    wscbor_require_array_size(chunk_msg, 4, 4);

    proto_item *item_msg = proto_tree_add_cbor_container(tree, proto_cose, pinfo, tvb, chunk_msg);

    proto_item_append_text(item_msg, ": COSE_Mac0");

    if (!wscbor_skip_if_errors(pinfo->pool, tvb, &offset, chunk_msg)) {

        proto_tree *tree_msg = proto_item_add_subtree(item_msg, ett_msg);

        dissect_msg_tag(tvb, pinfo, tree_msg, chunk_msg, data);

        dissect_headers(tvb, pinfo, tree_msg, &offset);

        dissect_payload(tvb, pinfo, tree_msg, &offset);

        dissect_tag(tvb, pinfo, tree_msg, &offset);

    }

    return offset;

}

/** Dissect a tagged COSE message.

 */

static int dissect_cose_msg_tagged(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_) {

    int offset = 0;

    // All messages have the same base structure, attempt all tags present

    wscbor_chunk_t *chunk = wscbor_chunk_read(pinfo->pool, tvb, &offset);

    for (wmem_list_frame_t *it = wmem_list_head(chunk->tags); it;

            it = wmem_list_frame_next(it)) {

        wscbor_tag_t *tag = (wscbor_tag_t *) wmem_list_frame_data(it);

        // first usable tag wins

        dissector_handle_t dissector = dissector_get_custom_table_handle(table_cose_msg_tag, &(tag->value));

        if (!dissector) {

            continue;

        }

        int sublen = call_dissector_only(dissector, tvb, pinfo, tree, tag);

        if (sublen > 0) {

            return sublen;

        }

    }

    proto_item *item_msg = proto_tree_add_item(tree, proto_cose, tvb, 0, -1, ENC_NA);

    expert_add_info(pinfo, item_msg, &ei_invalid_tag);

    return -1;

}

/** Dissect the application/cose media type with optional parameters.

 */

static int dissect_cose_media_type(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data) {

    const media_content_info_t *content_info = (media_content_info_t *)data;

    const char *subtype = NULL;

    if (content_info->media_str) {

        subtype = ws_find_media_type_parameter(pinfo->pool, content_info->media_str, "cose-type");

    }

    dissector_handle_t dissector;

    if (subtype) {

        dissector = dissector_get_string_handle(table_cose_media_subtype, subtype);

    }

    else {

        // no media type parameter, require tagged message

        dissector = handle_cose_msg_tagged;

    }

    int sublen = call_dissector_only(dissector, tvb, pinfo, tree, NULL);

    if (sublen > 0) {

        return sublen;

    }

    proto_item *item_msg = proto_tree_add_item(tree, proto_cose, tvb, 0, -1, ENC_NA);

    expert_add_info(pinfo, item_msg, &ei_invalid_tag);

    return -1;

}

static void dissect_value_alg(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int *offset) {

    wscbor_chunk_t *chunk = wscbor_chunk_read(pinfo->pool, tvb, offset);

    switch (chunk->type_major) {

        case CBOR_TYPE_UINT:

        case CBOR_TYPE_NEGINT: {

            int64_t *val = wscbor_require_int64(pinfo->pool, chunk);

            proto_tree_add_cbor_int64(tree, hf_hdr_alg_int, pinfo, tvb, chunk, val);

            break;

        }

        case CBOR_TYPE_STRING: {

            proto_tree_add_cbor_tstr(tree, hf_hdr_alg_tstr, pinfo, tvb, chunk);

            break;

        }

        default:

            break;

    }

}

static int dissect_header_salt(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_) {

    int offset = 0;

    wscbor_chunk_t *chunk = wscbor_chunk_read(pinfo->pool, tvb, &offset);

    wscbor_require_bstr(pinfo->pool, chunk);

    proto_tree_add_cbor_bstr(tree, hf_hdr_salt, pinfo, tvb, chunk);

    return offset;

}