1*0a6a1f1dSLionel Sambuc /* $NetBSD: dst.h,v 1.2 2014/08/03 19:14:24 wiz Exp $ */ 22fe8fb19SBen Gras 32fe8fb19SBen Gras #ifndef DST_H 42fe8fb19SBen Gras #define DST_H 52fe8fb19SBen Gras 62fe8fb19SBen Gras #ifndef HAS_DST_KEY 72fe8fb19SBen Gras typedef struct dst_key { 82fe8fb19SBen Gras char *dk_key_name; /*%< name of the key */ 92fe8fb19SBen Gras int dk_key_size; /*%< this is the size of the key in bits */ 102fe8fb19SBen Gras int dk_proto; /*%< what protocols this key can be used for */ 112fe8fb19SBen Gras int dk_alg; /*%< algorithm number from key record */ 122fe8fb19SBen Gras u_int32_t dk_flags; /*%< and the flags of the public key */ 132fe8fb19SBen Gras u_int16_t dk_id; /*%< identifier of the key */ 142fe8fb19SBen Gras } DST_KEY; 152fe8fb19SBen Gras #endif /* HAS_DST_KEY */ 162fe8fb19SBen Gras /* 172fe8fb19SBen Gras * do not taint namespace 182fe8fb19SBen Gras */ 192fe8fb19SBen Gras #define dst_bsafe_init __dst_bsafe_init 202fe8fb19SBen Gras #define dst_buffer_to_key __dst_buffer_to_key 212fe8fb19SBen Gras #define dst_check_algorithm __dst_check_algorithm 222fe8fb19SBen Gras #define dst_compare_keys __dst_compare_keys 232fe8fb19SBen Gras #define dst_cylink_init __dst_cylink_init 242fe8fb19SBen Gras #define dst_dnskey_to_key __dst_dnskey_to_key 252fe8fb19SBen Gras #define dst_eay_dss_init __dst_eay_dss_init 262fe8fb19SBen Gras #define dst_free_key __dst_free_key 272fe8fb19SBen Gras #define dst_generate_key __dst_generate_key 282fe8fb19SBen Gras #define dst_hmac_md5_init __dst_hmac_md5_init 292fe8fb19SBen Gras #define dst_init __dst_init 302fe8fb19SBen Gras #define dst_key_to_buffer __dst_key_to_buffer 312fe8fb19SBen Gras #define dst_key_to_dnskey __dst_key_to_dnskey 322fe8fb19SBen Gras #define dst_read_key __dst_read_key 332fe8fb19SBen Gras #define dst_rsaref_init __dst_rsaref_init 342fe8fb19SBen Gras #define dst_s_build_filename __dst_s_build_filename 352fe8fb19SBen Gras #define dst_s_calculate_bits __dst_s_calculate_bits 362fe8fb19SBen Gras #define dst_s_conv_bignum_b64_to_u8 __dst_s_conv_bignum_b64_to_u8 372fe8fb19SBen Gras #define dst_s_conv_bignum_u8_to_b64 __dst_s_conv_bignum_u8_to_b64 382fe8fb19SBen Gras #define dst_s_dns_key_id __dst_s_dns_key_id 392fe8fb19SBen Gras #define dst_s_dump __dst_s_dump 402fe8fb19SBen Gras #define dst_s_filename_length __dst_s_filename_length 412fe8fb19SBen Gras #define dst_s_fopen __dst_s_fopen 422fe8fb19SBen Gras #define dst_s_get_int16 __dst_s_get_int16 432fe8fb19SBen Gras #define dst_s_get_int32 __dst_s_get_int32 442fe8fb19SBen Gras #define dst_s_id_calc __dst_s_id_calc 452fe8fb19SBen Gras #define dst_s_put_int16 __dst_s_put_int16 462fe8fb19SBen Gras #define dst_s_put_int32 __dst_s_put_int32 472fe8fb19SBen Gras #define dst_s_quick_random __dst_s_quick_random 482fe8fb19SBen Gras #define dst_s_quick_random_set __dst_s_quick_random_set 492fe8fb19SBen Gras #define dst_s_random __dst_s_random 502fe8fb19SBen Gras #define dst_s_semi_random __dst_s_semi_random 512fe8fb19SBen Gras #define dst_s_verify_str __dst_s_verify_str 522fe8fb19SBen Gras #define dst_sig_size __dst_sig_size 532fe8fb19SBen Gras #define dst_sign_data __dst_sign_data 542fe8fb19SBen Gras #define dst_verify_data __dst_verify_data 552fe8fb19SBen Gras #define dst_write_key __dst_write_key 562fe8fb19SBen Gras 572fe8fb19SBen Gras /* 58*0a6a1f1dSLionel Sambuc * DST Crypto API definitions 592fe8fb19SBen Gras */ 602fe8fb19SBen Gras void dst_init(void); 612fe8fb19SBen Gras int dst_check_algorithm(const int); 622fe8fb19SBen Gras 632fe8fb19SBen Gras 642fe8fb19SBen Gras int dst_sign_data(const int, /*!< specifies INIT/UPDATE/FINAL/ALL */ 652fe8fb19SBen Gras DST_KEY *, /*!< the key to use */ 662fe8fb19SBen Gras void **, /*!< pointer to state structure */ 672fe8fb19SBen Gras const u_char *, /*!< data to be signed */ 682fe8fb19SBen Gras const int, /*!< length of input data */ 692fe8fb19SBen Gras u_char *, /*!< buffer to write signature to */ 702fe8fb19SBen Gras const int); /*!< size of output buffer */ 712fe8fb19SBen Gras int dst_verify_data(const int, /*!< specifies INIT/UPDATE/FINAL/ALL */ 722fe8fb19SBen Gras DST_KEY *, /*!< the key to use */ 732fe8fb19SBen Gras void **, /*!< pointer to state structure */ 742fe8fb19SBen Gras const u_char *, /*!< data to be verified */ 752fe8fb19SBen Gras const int, /*!< length of input data */ 762fe8fb19SBen Gras const u_char *, /*!< buffer containing signature */ 772fe8fb19SBen Gras const int); /*!< length of signature */ 782fe8fb19SBen Gras DST_KEY *dst_read_key(const char *, /*!< name of key */ 792fe8fb19SBen Gras const u_int16_t, /*!< key tag identifier */ 802fe8fb19SBen Gras const int, /*!< key algorithm */ 812fe8fb19SBen Gras const int); /*!< Private/PublicKey wanted */ 822fe8fb19SBen Gras int dst_write_key(const DST_KEY *, /*!< key to write out */ 832fe8fb19SBen Gras const int); /*!< Public/Private */ 842fe8fb19SBen Gras DST_KEY *dst_dnskey_to_key(const char *, /*!< KEY record name */ 852fe8fb19SBen Gras const u_char *, /*!< KEY RDATA */ 862fe8fb19SBen Gras const int); /*!< size of input buffer */ 872fe8fb19SBen Gras int dst_key_to_dnskey(const DST_KEY *, /*!< key to translate */ 882fe8fb19SBen Gras u_char *, /*!< output buffer */ 892fe8fb19SBen Gras const int); /*!< size of out_storage */ 902fe8fb19SBen Gras DST_KEY *dst_buffer_to_key(const char *, /*!< name of the key */ 912fe8fb19SBen Gras const int, /*!< algorithm */ 922fe8fb19SBen Gras const int, /*!< dns flags */ 932fe8fb19SBen Gras const int, /*!< dns protocol */ 942fe8fb19SBen Gras const u_char *, /*!< key in dns wire fmt */ 952fe8fb19SBen Gras const int); /*!< size of key */ 962fe8fb19SBen Gras int dst_key_to_buffer(DST_KEY *, u_char *, int); 972fe8fb19SBen Gras 982fe8fb19SBen Gras DST_KEY *dst_generate_key(const char *, /*!< name of new key */ 992fe8fb19SBen Gras const int, /*!< key algorithm to generate */ 1002fe8fb19SBen Gras const int, /*!< size of new key */ 1012fe8fb19SBen Gras const int, /*!< alg dependent parameter */ 1022fe8fb19SBen Gras const int, /*!< key DNS flags */ 1032fe8fb19SBen Gras const int); /*!< key DNS protocol */ 1042fe8fb19SBen Gras DST_KEY *dst_free_key(DST_KEY *); 1052fe8fb19SBen Gras int dst_compare_keys(const DST_KEY *, const DST_KEY *); 1062fe8fb19SBen Gras 1072fe8fb19SBen Gras int dst_sig_size(DST_KEY *); 1082fe8fb19SBen Gras 1092fe8fb19SBen Gras 1102fe8fb19SBen Gras /* support for dns key tags/ids */ 1112fe8fb19SBen Gras u_int16_t dst_s_dns_key_id(const u_char *, const int); 1122fe8fb19SBen Gras u_int16_t dst_s_id_calc(const u_char *, const int); 1132fe8fb19SBen Gras 1142fe8fb19SBen Gras /* Used by callers as well as by the library. */ 1152fe8fb19SBen Gras #define RAW_KEY_SIZE 8192 /*%< large enough to store any key */ 1162fe8fb19SBen Gras /* DST_API control flags */ 1172fe8fb19SBen Gras /* These are used used in functions dst_sign_data and dst_verify_data */ 1182fe8fb19SBen Gras #define SIG_MODE_INIT 1 /*%< initialize digest */ 1192fe8fb19SBen Gras #define SIG_MODE_UPDATE 2 /*%< add data to digest */ 1202fe8fb19SBen Gras #define SIG_MODE_FINAL 4 /*%< generate/verify signature */ 1212fe8fb19SBen Gras #define SIG_MODE_ALL (SIG_MODE_INIT|SIG_MODE_UPDATE|SIG_MODE_FINAL) 1222fe8fb19SBen Gras 1232fe8fb19SBen Gras /* Flags for dst_read_private_key() */ 1242fe8fb19SBen Gras #define DST_FORCE_READ 0x1000000 1252fe8fb19SBen Gras #define DST_CAN_SIGN 0x010F 1262fe8fb19SBen Gras #define DST_NO_AUTHEN 0x8000 1272fe8fb19SBen Gras #define DST_EXTEND_FLAG 0x1000 1282fe8fb19SBen Gras #define DST_STANDARD 0 1292fe8fb19SBen Gras #define DST_PRIVATE 0x2000000 1302fe8fb19SBen Gras #define DST_PUBLIC 0x4000000 1312fe8fb19SBen Gras #define DST_RAND_SEMI 1 1322fe8fb19SBen Gras #define DST_RAND_STD 2 1332fe8fb19SBen Gras #define DST_RAND_KEY 3 1342fe8fb19SBen Gras #define DST_RAND_DSS 4 1352fe8fb19SBen Gras 1362fe8fb19SBen Gras 1372fe8fb19SBen Gras /* DST algorithm codes */ 1382fe8fb19SBen Gras #define KEY_RSA 1 1392fe8fb19SBen Gras #define KEY_DH 2 1402fe8fb19SBen Gras #define KEY_DSA 3 1412fe8fb19SBen Gras #define KEY_PRIVATE 254 1422fe8fb19SBen Gras #define KEY_EXPAND 255 1432fe8fb19SBen Gras #define KEY_HMAC_MD5 157 1442fe8fb19SBen Gras #define KEY_HMAC_SHA1 158 1452fe8fb19SBen Gras #define UNKNOWN_KEYALG 0 1462fe8fb19SBen Gras #define DST_MAX_ALGS KEY_HMAC_SHA1 1472fe8fb19SBen Gras 1482fe8fb19SBen Gras /* DST constants to locations in KEY record changes in new KEY record */ 1492fe8fb19SBen Gras #define DST_FLAGS_SIZE 2 1502fe8fb19SBen Gras #define DST_KEY_PROT 2 1512fe8fb19SBen Gras #define DST_KEY_ALG 3 1522fe8fb19SBen Gras #define DST_EXT_FLAG 4 1532fe8fb19SBen Gras #define DST_KEY_START 4 1542fe8fb19SBen Gras 1552fe8fb19SBen Gras #ifndef SIGN_F_NOKEY 1562fe8fb19SBen Gras #define SIGN_F_NOKEY 0xC000 1572fe8fb19SBen Gras #endif 1582fe8fb19SBen Gras 1592fe8fb19SBen Gras /* error codes from dst routines */ 1602fe8fb19SBen Gras #define SIGN_INIT_FAILURE (-23) 1612fe8fb19SBen Gras #define SIGN_UPDATE_FAILURE (-24) 1622fe8fb19SBen Gras #define SIGN_FINAL_FAILURE (-25) 1632fe8fb19SBen Gras #define VERIFY_INIT_FAILURE (-26) 1642fe8fb19SBen Gras #define VERIFY_UPDATE_FAILURE (-27) 1652fe8fb19SBen Gras #define VERIFY_FINAL_FAILURE (-28) 1662fe8fb19SBen Gras #define MISSING_KEY_OR_SIGNATURE (-30) 1672fe8fb19SBen Gras #define UNSUPPORTED_KEYALG (-31) 1682fe8fb19SBen Gras 1692fe8fb19SBen Gras #endif /* DST_H */ 1702fe8fb19SBen Gras /*! \file */ 171