digital_signature.h

Go to the documentation of this file.

// BSD 3-Clause License
// Copyright (c) 2021-2025, 🍀☀🌕🌥 🌊
// See the LICENSE file in the project root for full license information.
 
#pragma once
 
#include "certificate.h"
#include "signature_types.h"
 
#include <kcenon/pacs/core/dicom_dataset.h>
#include <kcenon/pacs/core/dicom_tag.h>
 
#include <kcenon/common/patterns/result.h>
 
#include <optional>
#include <span>
#include <vector>
 
namespace kcenon::pacs::security {
 
class digital_signature {
public:
    // ========================================================================
    // Signature Creation
    // ========================================================================
 
    [[nodiscard]] static auto sign(
        core::dicom_dataset& dataset,
        const certificate& cert,
        const private_key& key,
        signature_algorithm algo = signature_algorithm::rsa_sha256
    ) -> kcenon::common::VoidResult;
 
    [[nodiscard]] static auto sign_tags(
        core::dicom_dataset& dataset,
        const certificate& cert,
        const private_key& key,
        std::span<const core::dicom_tag> tags_to_sign,
        signature_algorithm algo = signature_algorithm::rsa_sha256
    ) -> kcenon::common::VoidResult;
 
    // ========================================================================
    // Signature Verification
    // ========================================================================
 
    [[nodiscard]] static auto verify(
        const core::dicom_dataset& dataset
    ) -> kcenon::common::Result<signature_status>;
 
    [[nodiscard]] static auto verify_with_trust(
        const core::dicom_dataset& dataset,
        const std::vector<certificate>& trusted_certs
    ) -> kcenon::common::Result<signature_status>;
 
    // ========================================================================
    // Signature Information
    // ========================================================================
 
    [[nodiscard]] static auto get_signature_info(
        const core::dicom_dataset& dataset
    ) -> std::optional<signature_info>;
 
    [[nodiscard]] static auto get_all_signatures(
        const core::dicom_dataset& dataset
    ) -> std::vector<signature_info>;
 
    [[nodiscard]] static auto has_signature(
        const core::dicom_dataset& dataset
    ) -> bool;
 
    // ========================================================================
    // Utility Methods
    // ========================================================================
 
    static auto remove_signatures(
        core::dicom_dataset& dataset
    ) -> bool;
 
    [[nodiscard]] static auto generate_signature_uid() -> std::string;
 
private:
    // Internal helper methods
    static auto compute_mac(
        const core::dicom_dataset& dataset,
        std::span<const core::dicom_tag> tags,
        mac_algorithm algo
    ) -> std::vector<std::uint8_t>;
 
    static auto sign_mac(
        std::span<const std::uint8_t> mac_data,
        const private_key& key,
        signature_algorithm algo
    ) -> kcenon::common::Result<std::vector<std::uint8_t>>;
 
    static auto verify_mac_signature(
        std::span<const std::uint8_t> mac_data,
        std::span<const std::uint8_t> signature,
        const certificate& cert,
        signature_algorithm algo
    ) -> bool;
};
 
} // namespace kcenon::pacs::security