OWASP Sweden

TLS Cheat Sheet

package model;

import java.io.Serializable;
import java.util.Calendar;
import java.util.TimeZone;

import model.support.ChecksumSupport;
import support.log.Logger;
import support.log.SystemLogger;

/**
* A class representing a 12 digit Swedish personnummer (Swedish personal
* identification number). To avoid ambiguity the proper Swedish word is chosen
* instead of trying to define an English equivalent.
* 
* A personnummer is formatted in the following way:
* YYYYMMDD-BBBX where BBB is a three digit birth number (odd for men, even for women)
* and X is a check digit calculated from the birth date and birth number.
* 
* This class can also handle a Swedish samordningsnummer (co-ordination number)
* where the figure for the birthday is increased by the number 60 and then the
* check digit is calculated. For further reading see SKV 707 utg 2.
* 
* Instances of this class are immutable value objects.
* 
*
* @author Kalle Gustafsson, Omegapoint AB
* @author John Wilander, Omegapoint AB
*/
public class PersonNummer implements Serializable {
private static final long serialVersionUID = -160928058318117179L;

private static final Logger LOG = SystemLogger.getLogger(PersonNummer.class);

private static final int EARLIEST_YEAR = 1840;
private static final TimeZone STOCKHOLM_TIME_ZONE = TimeZone.getTimeZone("Europe/Stockholm");

private final long m_personNummer; // 12 digit no dash

/**
* Create a personnummer from a twelve digit code that may or may not have
* a dash between the date and the extension.
*
* @param code The personnummer
* @throws IllegalArgumentException On invalid input.
*/
protected PersonNummer(String code) throws InvalidPersonNummerException {
validate(code);
if (code.length() == 13) {
 code = code.substring(0, 8) + code.substring(9);
}
m_personNummer = Long.parseLong(code);
}

/**
* This is declared package-private for the unit tests.
*/
static long validate(String code) throws InvalidPersonNummerException {
if (code.length() != 12 && (!(code.length() == 13 && code.charAt(8) == '-'))) {
 throw new InvalidPersonNummerException("Must be 12 digits", code);
}

if (code.charAt(8) == '-') { // Remove dash if present
 code = code.substring(0, 8) + code.substring(9, 13);
}

Calendar c = Calendar.getInstance(STOCKHOLM_TIME_ZONE);
c.clear();
c.setLenient(false);
try {
 StringBuilder dateCode = new StringBuilder(code.substring(0, 8));
 int coNumCheckInt = Integer.parseInt(dateCode.substring(6, 7));
 if (coNumCheckInt > 3) { // Samordningsnummer (co-ordination number) -> date field
                             // incremented by 60. Read more in Skatteverket SKV 707, utg 2
   dateCode.replace(6, 7, Integer.toString(coNumCheckInt - 6));
 }

 c.set(Integer.parseInt(dateCode.substring(0, 4)), Integer.parseInt(dateCode.substring(4, 6)) - 1, Integer.parseInt(dateCode.substring(6, 8)));

} catch (ArrayIndexOutOfBoundsException e) {
 // Thrown by set if any value is out of range
 throw new InvalidPersonNummerException(e.getMessage(), code);
} catch (NumberFormatException e) {
 throw new InvalidPersonNummerException(e.getMessage(), code);
}

int year;
try {
 year = c.get(Calendar.YEAR);
} catch (IllegalArgumentException e) {
 // This has happened
 throw new InvalidPersonNummerException(e.getMessage(), code);
}

if (year < EARLIEST_YEAR) {
 throw new InvalidPersonNummerException("Year cannot be before " + EARLIEST_YEAR, code);
} else if (c.after(Calendar.getInstance(STOCKHOLM_TIME_ZONE))) {
 throw new InvalidPersonNummerException("The date is in the future.", code);
}

int extension = 0;
try {
 extension = Integer.parseInt(code.substring(8, 12));
} catch (NumberFormatException e) {
 throw new InvalidPersonNummerException("The extension is not a number", code);
}
if (extension < 0) {
 throw new InvalidPersonNummerException("The extension is less than 0", code);
} else if (extension > 9999) {
 throw new InvalidPersonNummerException("The extension is greater than 9999", code);
}

long pid = Long.parseLong(code);
// Validate checksum. Don't include the leading two century digits
if (!ChecksumSupport.validateChecksum(pid % 10000000000L)) {
 LOG.warn("Invalid checksum in personnummer: " + code + ". It should be " + ChecksumSupport.calculateChecksum(pid % 10000000000L));
}
return pid;
}

public String get12DigitWithDash() {
return (m_personNummer / 10000L) + "-" + String.format("%04d", m_personNummer % 10000L);
}

public String get12DigitNoDash() {
return "" + m_personNummer;
}

protected String get10DigitNoDash() {
return (get12DigitNoDash().substring(2));
}

protected String get10DigitWithDash() {
return (get12DigitWithDash().substring(2));
}

/**
* Get the personnummer as a 12-digit long.
*/
public long getCode() {
return m_personNummer;
}

@Override
public String toString() {
// Don't change this. Code that parses logs etc assumes that
// personnummers are formatted like this
return get12DigitWithDash();
}

@Override
public boolean equals(Object o) {
return (o != null) && (o instanceof PersonNummer) && (((PersonNummer) o).m_personNummer == m_personNummer);
}

@Override
public int hashCode() {
return (int) m_personNummer;
}
}

OWASP Sweden

onsdag 21 oktober 2009

AppSec Research 2010 Challenge 5

måndag 19 oktober 2009

TLS/SSL Cheat Sheet

söndag 18 oktober 2009

Orizon 2.0 på AppSec 2010 i Sthlm

torsdag 15 oktober 2009

DDS: Programmera med personnummer, del 2

onsdag 7 oktober 2009

SAML 2.0 -- nu interoperabelt

onsdag 30 september 2009

DDS: Programmera med personnummer

måndag 28 september 2009

770 DDoS-attacker per dygn

Bli medlem!

Bloggarkiv

Deltagare