xref: /minix3/lib/libc/include/isc/dst.h (revision 0a6a1f1d05b60e214de2f05a7310ddd1f0e590e7)
1*0a6a1f1dSLionel Sambuc /*	$NetBSD: dst.h,v 1.2 2014/08/03 19:14:24 wiz Exp $	*/
22fe8fb19SBen Gras 
32fe8fb19SBen Gras #ifndef DST_H
42fe8fb19SBen Gras #define DST_H
52fe8fb19SBen Gras 
62fe8fb19SBen Gras #ifndef HAS_DST_KEY
72fe8fb19SBen Gras typedef struct dst_key {
82fe8fb19SBen Gras 	char	*dk_key_name;   /*%< name of the key */
92fe8fb19SBen Gras 	int	dk_key_size;    /*%< this is the size of the key in bits */
102fe8fb19SBen Gras 	int	dk_proto;       /*%< what protocols this key can be used for */
112fe8fb19SBen Gras 	int	dk_alg;         /*%< algorithm number from key record */
122fe8fb19SBen Gras 	u_int32_t dk_flags;     /*%< and the flags of the public key */
132fe8fb19SBen Gras 	u_int16_t dk_id;        /*%< identifier of the key */
142fe8fb19SBen Gras } DST_KEY;
152fe8fb19SBen Gras #endif /* HAS_DST_KEY */
162fe8fb19SBen Gras /*
172fe8fb19SBen Gras  * do not taint namespace
182fe8fb19SBen Gras  */
192fe8fb19SBen Gras #define	dst_bsafe_init		__dst_bsafe_init
202fe8fb19SBen Gras #define	dst_buffer_to_key	__dst_buffer_to_key
212fe8fb19SBen Gras #define	dst_check_algorithm	__dst_check_algorithm
222fe8fb19SBen Gras #define	dst_compare_keys	__dst_compare_keys
232fe8fb19SBen Gras #define	dst_cylink_init		__dst_cylink_init
242fe8fb19SBen Gras #define	dst_dnskey_to_key	__dst_dnskey_to_key
252fe8fb19SBen Gras #define	dst_eay_dss_init	__dst_eay_dss_init
262fe8fb19SBen Gras #define	dst_free_key		__dst_free_key
272fe8fb19SBen Gras #define	dst_generate_key	__dst_generate_key
282fe8fb19SBen Gras #define	dst_hmac_md5_init	__dst_hmac_md5_init
292fe8fb19SBen Gras #define	dst_init		__dst_init
302fe8fb19SBen Gras #define	dst_key_to_buffer	__dst_key_to_buffer
312fe8fb19SBen Gras #define	dst_key_to_dnskey	__dst_key_to_dnskey
322fe8fb19SBen Gras #define	dst_read_key		__dst_read_key
332fe8fb19SBen Gras #define	dst_rsaref_init		__dst_rsaref_init
342fe8fb19SBen Gras #define	dst_s_build_filename	__dst_s_build_filename
352fe8fb19SBen Gras #define	dst_s_calculate_bits	__dst_s_calculate_bits
362fe8fb19SBen Gras #define	dst_s_conv_bignum_b64_to_u8	__dst_s_conv_bignum_b64_to_u8
372fe8fb19SBen Gras #define	dst_s_conv_bignum_u8_to_b64	__dst_s_conv_bignum_u8_to_b64
382fe8fb19SBen Gras #define	dst_s_dns_key_id	__dst_s_dns_key_id
392fe8fb19SBen Gras #define	dst_s_dump		__dst_s_dump
402fe8fb19SBen Gras #define	dst_s_filename_length	__dst_s_filename_length
412fe8fb19SBen Gras #define	dst_s_fopen		__dst_s_fopen
422fe8fb19SBen Gras #define	dst_s_get_int16		__dst_s_get_int16
432fe8fb19SBen Gras #define	dst_s_get_int32		__dst_s_get_int32
442fe8fb19SBen Gras #define	dst_s_id_calc		__dst_s_id_calc
452fe8fb19SBen Gras #define	dst_s_put_int16		__dst_s_put_int16
462fe8fb19SBen Gras #define	dst_s_put_int32		__dst_s_put_int32
472fe8fb19SBen Gras #define	dst_s_quick_random	__dst_s_quick_random
482fe8fb19SBen Gras #define	dst_s_quick_random_set	__dst_s_quick_random_set
492fe8fb19SBen Gras #define	dst_s_random		__dst_s_random
502fe8fb19SBen Gras #define	dst_s_semi_random	__dst_s_semi_random
512fe8fb19SBen Gras #define	dst_s_verify_str	__dst_s_verify_str
522fe8fb19SBen Gras #define	dst_sig_size		__dst_sig_size
532fe8fb19SBen Gras #define	dst_sign_data		__dst_sign_data
542fe8fb19SBen Gras #define	dst_verify_data		__dst_verify_data
552fe8fb19SBen Gras #define	dst_write_key		__dst_write_key
562fe8fb19SBen Gras 
572fe8fb19SBen Gras /*
58*0a6a1f1dSLionel Sambuc  * DST Crypto API definitions
592fe8fb19SBen Gras  */
602fe8fb19SBen Gras void     dst_init(void);
612fe8fb19SBen Gras int      dst_check_algorithm(const int);
622fe8fb19SBen Gras 
632fe8fb19SBen Gras 
642fe8fb19SBen Gras int dst_sign_data(const int,	 	/*!<   specifies INIT/UPDATE/FINAL/ALL  */
652fe8fb19SBen Gras 		  DST_KEY *,	 	/*!<   the key to use  */
662fe8fb19SBen Gras 		  void **,	 	/*!<   pointer to state structure  */
672fe8fb19SBen Gras 		  const u_char *,	/*!<   data to be signed  */
682fe8fb19SBen Gras 		  const int,	 	/*!<   length of input data  */
692fe8fb19SBen Gras 		  u_char *,	 	/*!<   buffer to write signature to  */
702fe8fb19SBen Gras 		  const int);	 	/*!<   size of output buffer  */
712fe8fb19SBen Gras int dst_verify_data(const int,	 	/*!<   specifies INIT/UPDATE/FINAL/ALL  */
722fe8fb19SBen Gras 		    DST_KEY *,	 	/*!<   the key to use  */
732fe8fb19SBen Gras 		    void **,	 	/*!<   pointer to state structure  */
742fe8fb19SBen Gras 		    const u_char *,	/*!<   data to be verified  */
752fe8fb19SBen Gras 		    const int,	 	/*!<   length of input data  */
762fe8fb19SBen Gras 		    const u_char *,	/*!<   buffer containing signature  */
772fe8fb19SBen Gras 		    const int);	 	/*!<   length of signature  */
782fe8fb19SBen Gras DST_KEY *dst_read_key(const char *,	/*!<   name of key  */
792fe8fb19SBen Gras 		      const u_int16_t,	/*!<   key tag identifier  */
802fe8fb19SBen Gras 		      const int,	/*!<   key algorithm  */
812fe8fb19SBen Gras 		      const int);	/*!<   Private/PublicKey wanted */
822fe8fb19SBen Gras int      dst_write_key(const DST_KEY *,	/*!<   key to write out  */
832fe8fb19SBen Gras 		       const int); 	/*!<   Public/Private  */
842fe8fb19SBen Gras DST_KEY *dst_dnskey_to_key(const char *,	/*!<   KEY record name  */
852fe8fb19SBen Gras 			   const u_char *,	/*!<   KEY RDATA  */
862fe8fb19SBen Gras 			   const int);		/*!<   size of input buffer */
872fe8fb19SBen Gras int      dst_key_to_dnskey(const DST_KEY *,	/*!<   key to translate  */
882fe8fb19SBen Gras 			   u_char *,		/*!<   output buffer  */
892fe8fb19SBen Gras 			   const int);		/*!<   size of out_storage */
902fe8fb19SBen Gras DST_KEY *dst_buffer_to_key(const char *,  	/*!<   name of the key  */
912fe8fb19SBen Gras 			   const int,	  	/*!<   algorithm  */
922fe8fb19SBen Gras 			   const int,	  	/*!<   dns flags  */
932fe8fb19SBen Gras 			   const int,	  	/*!<   dns protocol  */
942fe8fb19SBen Gras 			   const u_char *, 	/*!<   key in dns wire fmt  */
952fe8fb19SBen Gras 			   const int);	  	/*!<   size of key  */
962fe8fb19SBen Gras int     dst_key_to_buffer(DST_KEY *, u_char *, int);
972fe8fb19SBen Gras 
982fe8fb19SBen Gras DST_KEY *dst_generate_key(const char *,    	/*!<   name of new key  */
992fe8fb19SBen Gras 			  const int,       	/*!<   key algorithm to generate  */
1002fe8fb19SBen Gras 			  const int,      	/*!<   size of new key  */
1012fe8fb19SBen Gras 			  const int,       	/*!<   alg dependent parameter */
1022fe8fb19SBen Gras 			  const int,     	/*!<   key DNS flags  */
1032fe8fb19SBen Gras 			  const int);		/*!<   key DNS protocol  */
1042fe8fb19SBen Gras DST_KEY *dst_free_key(DST_KEY *);
1052fe8fb19SBen Gras int      dst_compare_keys(const DST_KEY *, const DST_KEY *);
1062fe8fb19SBen Gras 
1072fe8fb19SBen Gras int	dst_sig_size(DST_KEY *);
1082fe8fb19SBen Gras 
1092fe8fb19SBen Gras 
1102fe8fb19SBen Gras /* support for dns key tags/ids */
1112fe8fb19SBen Gras u_int16_t dst_s_dns_key_id(const u_char *, const int);
1122fe8fb19SBen Gras u_int16_t dst_s_id_calc(const u_char *, const int);
1132fe8fb19SBen Gras 
1142fe8fb19SBen Gras /* Used by callers as well as by the library.  */
1152fe8fb19SBen Gras #define RAW_KEY_SIZE    8192        /*%< large enough to store any key */
1162fe8fb19SBen Gras /* DST_API control flags */
1172fe8fb19SBen Gras /* These are used used in functions dst_sign_data and dst_verify_data */
1182fe8fb19SBen Gras #define SIG_MODE_INIT		1  /*%< initialize digest */
1192fe8fb19SBen Gras #define SIG_MODE_UPDATE		2  /*%< add data to digest */
1202fe8fb19SBen Gras #define SIG_MODE_FINAL		4  /*%< generate/verify signature */
1212fe8fb19SBen Gras #define SIG_MODE_ALL		(SIG_MODE_INIT|SIG_MODE_UPDATE|SIG_MODE_FINAL)
1222fe8fb19SBen Gras 
1232fe8fb19SBen Gras /* Flags for dst_read_private_key()  */
1242fe8fb19SBen Gras #define DST_FORCE_READ		0x1000000
1252fe8fb19SBen Gras #define DST_CAN_SIGN		0x010F
1262fe8fb19SBen Gras #define DST_NO_AUTHEN		0x8000
1272fe8fb19SBen Gras #define DST_EXTEND_FLAG         0x1000
1282fe8fb19SBen Gras #define DST_STANDARD		0
1292fe8fb19SBen Gras #define DST_PRIVATE             0x2000000
1302fe8fb19SBen Gras #define DST_PUBLIC              0x4000000
1312fe8fb19SBen Gras #define DST_RAND_SEMI           1
1322fe8fb19SBen Gras #define DST_RAND_STD            2
1332fe8fb19SBen Gras #define DST_RAND_KEY            3
1342fe8fb19SBen Gras #define DST_RAND_DSS            4
1352fe8fb19SBen Gras 
1362fe8fb19SBen Gras 
1372fe8fb19SBen Gras /* DST algorithm codes */
1382fe8fb19SBen Gras #define KEY_RSA			1
1392fe8fb19SBen Gras #define KEY_DH			2
1402fe8fb19SBen Gras #define KEY_DSA			3
1412fe8fb19SBen Gras #define KEY_PRIVATE		254
1422fe8fb19SBen Gras #define KEY_EXPAND		255
1432fe8fb19SBen Gras #define KEY_HMAC_MD5		157
1442fe8fb19SBen Gras #define KEY_HMAC_SHA1		158
1452fe8fb19SBen Gras #define UNKNOWN_KEYALG		0
1462fe8fb19SBen Gras #define DST_MAX_ALGS            KEY_HMAC_SHA1
1472fe8fb19SBen Gras 
1482fe8fb19SBen Gras /* DST constants to locations in KEY record  changes in new KEY record */
1492fe8fb19SBen Gras #define DST_FLAGS_SIZE		2
1502fe8fb19SBen Gras #define DST_KEY_PROT		2
1512fe8fb19SBen Gras #define DST_KEY_ALG		3
1522fe8fb19SBen Gras #define DST_EXT_FLAG            4
1532fe8fb19SBen Gras #define DST_KEY_START		4
1542fe8fb19SBen Gras 
1552fe8fb19SBen Gras #ifndef SIGN_F_NOKEY
1562fe8fb19SBen Gras #define SIGN_F_NOKEY		0xC000
1572fe8fb19SBen Gras #endif
1582fe8fb19SBen Gras 
1592fe8fb19SBen Gras /* error codes from dst routines */
1602fe8fb19SBen Gras #define SIGN_INIT_FAILURE	(-23)
1612fe8fb19SBen Gras #define SIGN_UPDATE_FAILURE	(-24)
1622fe8fb19SBen Gras #define SIGN_FINAL_FAILURE	(-25)
1632fe8fb19SBen Gras #define VERIFY_INIT_FAILURE	(-26)
1642fe8fb19SBen Gras #define VERIFY_UPDATE_FAILURE	(-27)
1652fe8fb19SBen Gras #define VERIFY_FINAL_FAILURE	(-28)
1662fe8fb19SBen Gras #define MISSING_KEY_OR_SIGNATURE (-30)
1672fe8fb19SBen Gras #define UNSUPPORTED_KEYALG	(-31)
1682fe8fb19SBen Gras 
1692fe8fb19SBen Gras #endif /* DST_H */
1702fe8fb19SBen Gras /*! \file */
171