lua: add base64 lib

Expose base64 standard, and standard_no_pad encoding to Lua scripts.

src/Makefile.am

@@ -508,6 +508,7 @@ noinst_HEADERS = \
 	util-landlock.h \
 	util-logopenfile.h \
 	util-log-redis.h \
+	util-lua-base64lib.h \
 	util-lua-builtins.h \
 	util-lua-common.h \
 	util-lua-dataset.h \
@@ -1061,6 +1062,7 @@ libsuricata_c_a_SOURCES = \
 	util-logopenfile.c \
 	util-log-redis.c \
 	util-lua.c \
+	util-lua-base64lib.c \
 	util-lua-builtins.c \
 	util-lua-common.c \
 	util-lua-dataset.c \

src/util-lua-base64lib.c

@@ -0,0 +1,100 @@
+/* Copyright (C) 2025 Open Information Security Foundation
+ *
+ * You can copy, redistribute or modify this Program under the terms of
+ * the GNU General Public License version 2 as published by the Free
+ * Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * version 2 along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ */
+
+#include "suricata-common.h"
+#include "rust.h"
+#include "util-lua-base64lib.h"
+#include "util-validate.h"
+
+#include "lauxlib.h"
+
+static int LuaBase64EncodeStandard(lua_State *L)
+{
+    size_t input_len;
+    const char *input = luaL_checklstring(L, 1, &input_len);
+    size_t out_len = SCBase64EncodeBufferSize(input_len);
+    char output[out_len + 1];
+    if (SCBase64Encode((uint8_t *)input, input_len, (u_char *)output, &out_len) != 0) {
+        return luaL_error(L, "base64 encoding failed");
+    }
+    lua_pushstring(L, (const char *)output);
+
+    return 1;
+}
+
+static int LuaBase64EncodeStandardNoPad(lua_State *L)
+{
+    size_t input_len;
+    const char *input = luaL_checklstring(L, 1, &input_len);
+    size_t out_len = SCBase64EncodeBufferSize(input_len);
+    char output[out_len + 1];
+    if (SCBase64EncodeNoPad((uint8_t *)input, input_len, (u_char *)output, &out_len) != 0) {
+        return luaL_error(L, "base64 encoding failed");
+    }
+    lua_pushstring(L, (const char *)output);
+
+    return 1;
+}
+
+static int LuaBase64DecodeStandard(lua_State *L)
+{
+    size_t input_len;
+    const char *input = luaL_checklstring(L, 1, &input_len);
+    char output[input_len];
+    uint32_t n = SCBase64Decode((uint8_t *)input, input_len, SCBase64ModeStrict, (uint8_t *)output);
+    if (n == 0) {
+        return luaL_error(L, "base64 decoding failed");
+    }
+    DEBUG_VALIDATE_BUG_ON(n > input_len);
+    output[n] = '\0';
+    lua_pushstring(L, (const char *)output);
+
+    return 1;
+}
+
+static int LuaBase64DecodeStandardNoPad(lua_State *L)
+{
+    size_t input_len;
+    const char *input = luaL_checklstring(L, 1, &input_len);
+    char output[input_len];
+    uint32_t n = SCBase64Decode((uint8_t *)input, input_len, SCBase64ModeNoPad, (uint8_t *)output);
+    if (n == 0) {
+        return luaL_error(L, "base64 decoding failed");
+    }
+    DEBUG_VALIDATE_BUG_ON(n > input_len);
+    output[n] = '\0';
+    lua_pushstring(L, (const char *)output);
+
+    return 1;
+}
+
+static const struct luaL_Reg base64lib[] = {
+    // clang-format off
+    { "encode", LuaBase64EncodeStandard },
+    { "encode_nopad", LuaBase64EncodeStandardNoPad },
+    { "decode", LuaBase64DecodeStandard },
+    { "decode_nopad", LuaBase64DecodeStandardNoPad },
+    { NULL, NULL },
+    // clang-format on
+};
+
+int SCLuaLoadBase64Lib(lua_State *L)
+{
+    luaL_newlib(L, base64lib);
+
+    return 1;
+}

src/util-lua-base64lib.h

@@ -0,0 +1,25 @@
+/* Copyright (C) 2025 Open Information Security Foundation
+ *
+ * You can copy, redistribute or modify this Program under the terms of
+ * the GNU General Public License version 2 as published by the Free
+ * Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * version 2 along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ */
+
+#ifndef SURICATA_LUA_UTIL_BASE64LIB_H
+#define SURICATA_LUA_UTIL_BASE64LIB_H
+
+#include "lua.h"
+
+int SCLuaLoadBase64Lib(lua_State *L);
+
+#endif /* SURICATA_LUA_UTIL_BASE64LIB_H */

src/util-lua-builtins.c

@@ -17,14 +17,16 @@
 
 #include "suricata-common.h"
 #include "util-lua-builtins.h"
-#include "util-lua-hashlib.h"
+#include "util-lua-base64lib.h"
 #include "util-lua-dataset.h"
+#include "util-lua-hashlib.h"
 
 #include "lauxlib.h"
 
 static const luaL_Reg builtins[] = {
-    { "suricata.hashlib", SCLuaLoadHashlib },
+    { "suricata.base64", SCLuaLoadBase64Lib },
     { "suricata.dataset", LuaLoadDatasetLib },
+    { "suricata.hashlib", SCLuaLoadHashlib },
     { NULL, NULL },
 };