more sm. tests

crypto/skf/skf.h

@@ -0,0 +1,692 @@
+/* crypto/skf/skf.h */
+/* ====================================================================
+ * Copyright (c) 2014 - 2015 The GmSSL Project.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in
+ *    the documentation and/or other materials provided with the
+ *    distribution.
+ *
+ * 3. All advertising materials mentioning features or use of this
+ *    software must display the following acknowledgment:
+ *    "This product includes software developed by the GmSSL Project.
+ *    (http://gmssl.org/)"
+ *
+ * 4. The name "GmSSL Project" must not be used to endorse or promote
+ *    products derived from this software without prior written
+ *    permission. For written permission, please contact
+ *    guanzhi1980@gmail.com.
+ *
+ * 5. Products derived from this software may not be called "GmSSL"
+ *    nor may "GmSSL" appear in their names without prior written
+ *    permission of the GmSSL Project.
+ *
+ * 6. Redistributions of any form whatsoever must retain the following
+ *    acknowledgment:
+ *    "This product includes software developed by the GmSSL Project
+ *    (http://gmssl.org/)"
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
+ * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE GmSSL PROJECT OR
+ * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ * ====================================================================
+ *
+ */
+
+
+#ifndef HEADER_SKF_H
+#define HEADER_SKF_H
+
+
+#define SGD_SM1_ECB		0x00000101
+#define SGD_SM1_CBC		0x00000102
+#define SGD_SM1_CFB		0x00000104
+#define SGD_SM1_OFB		0x00000108
+#define SGD_SM1_MAC		0x00000110
+#define SGD_SSF33_ECB		0x00000201
+#define SGD_SSF33_CBC		0x00000202
+#define SGD_SSF33_CFB		0x00000204
+#define SGD_SSF33_OFB		0x00000208
+#define SGD_SSF33_MAC		0x00000210
+#define SGD_SM4_ECB		0x00000401
+#define SGD_SM4_CBC		0x00000402
+#define SGD_SM4_CFB		0x00000404
+#define SGD_SM4_OFB		0x00000408
+#define SGD_SM4_MAC		0x00000410
+#define SGD_RSA			0x00010000
+#define SGD_SM2_1		0x00020100
+#define SGD_SM2_2		0x00020200
+#define SGD_SM2_3		0x00020400
+#define SGD_SM3			0x00000001
+#define SGD_SHA1		0x00000002
+#define SGD_SHA256		0x00000004
+
+#ifndef WIN32
+typedef signed char		INT8;
+typedef signed short		INT16;
+typedef signed int		INT32;
+typedef unsigned char		UINT8;
+typedef unsigned short		UINT16;
+typedef unsigned int		UINT32;
+typedef long			BOOL;
+typedef UINT8			BYTE;
+typedef UINT8			CHAR;
+typedef INT16			SHORT;
+typedef UINT16			USHORT;
+typedef INT32			LONG;
+typedef UINT32			ULONG;
+typedef UINT32			UINT;
+typedef UINT16			WORD;
+typedef UINT32			DWORD;
+typedef UINT32			FLAGS;
+typedef CHAR *			LPSTR;
+typedef void *			HANDLE;
+#endif
+
+typedef HANDLE DEVHANDLE;
+typedef HANDLE HAPPLICATION;
+typedef HANDLE HSESSION;
+typedef HANDLE HCONTAINER;
+
+
+#ifndef FALSE
+#define FALSE			0x00000000
+#endif
+
+#ifndef TRUE
+#define TRUE			0x00000001
+#endif
+
+#ifdef WIN32
+#define DEVAPI __stdcall
+#else
+#define DEVAPI
+#endif
+
+#ifndef ADMIN_TYPE
+#define ADMIN_TYPE			0
+#endif
+
+#ifndef USER_TYPE
+#define USER_TYPE			1
+#endif
+
+#define MAX_RSA_MODULUS_LEN		256
+#define MAX_RSA_EXPONENT_LEN		4
+#define ECC_MAX_XCOORDINATE_BITS_LEN	512
+#define ECC_MAX_YCOORDINATE_BITS_LEN	512
+#define ECC_MAX_MODULUS_BITS_LEN	512
+
+#define MAX_IV_LEN			32
+
+#define MAX_FILE_NAME_SIZE		32
+#define MAX_FILE_CONTAINER_NAME_SIZE	64
+
+#define SECURE_NEVER_ACCOUNT		0x00000000
+#define SECURE_ADM_ACCOUNT		0x00000001
+#define SECURE_USER_ACCOUNT		0x00000010
+#define SECURE_ANYONE_ACCOUNT		0x000000FF
+
+
+
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+	
+typedef struct Struct_Version{
+	BYTE major;
+	BYTE minor;
+} VERSION;
+
+typedef struct Struct_DEVINFO {
+	VERSION	Version;
+	CHAR	Manufacturer[64];
+	CHAR	Issuer[64];
+	CHAR	Label[32];
+	CHAR	SerialNumber[32];
+	VERSION	HWVersion;
+	VERSION	FirmwareVersion;
+	ULONG	AlgSymCap;
+	ULONG	AlgAsymCap;
+	ULONG	AlgHashCap;
+	ULONG	DevAuthAlgId;
+	ULONG	TotalSpace;
+	ULONG	FreeSpace;
+	ULONG	MaxECCBufferSize;
+	ULONG	MaxBufferSize;
+	BYTE  	Reserved[64];
+} DEVINFO, *PDEVINFO;
+
+typedef struct Struct_RSAPUBLICKEYBLOB {
+	ULONG	AlgID;
+	ULONG	BitLen;
+	BYTE	Modulus[MAX_RSA_MODULUS_LEN];
+	BYTE	PublicExponent[MAX_RSA_EXPONENT_LEN];
+} RSAPUBLICKEYBLOB, *PRSAPUBLICKEYBLOB;
+
+typedef struct Struct_RSAPRIVATEKEYBLOB {
+	ULONG	AlgID;
+	ULONG	BitLen;
+	BYTE	Modulus[MAX_RSA_MODULUS_LEN];
+	BYTE	PublicExponent[MAX_RSA_EXPONENT_LEN];
+	BYTE	PrivateExponent[MAX_RSA_MODULUS_LEN];
+	BYTE	Prime1[MAX_RSA_MODULUS_LEN/2];
+	BYTE	Prime2[MAX_RSA_MODULUS_LEN/2];
+	BYTE	Prime1Exponent[MAX_RSA_MODULUS_LEN/2];
+	BYTE	Prime2Exponent[MAX_RSA_MODULUS_LEN/2];
+	BYTE	Coefficient[MAX_RSA_MODULUS_LEN/2];
+} RSAPRIVATEKEYBLOB, *PRSAPRIVATEKEYBLOB;
+
+typedef struct Struct_ECCPUBLICKEYBLOB {
+	ULONG	BitLen;
+	BYTE	XCoordinate[ECC_MAX_XCOORDINATE_BITS_LEN/8];
+	BYTE	YCoordinate[ECC_MAX_YCOORDINATE_BITS_LEN/8];
+} ECCPUBLICKEYBLOB, *PECCPUBLICKEYBLOB;
+
+typedef struct Struct_ECCPRIVATEKEYBLOB {
+	ULONG	BitLen;
+	BYTE	PrivateKey[ECC_MAX_MODULUS_BITS_LEN/8];
+} ECCPRIVATEKEYBLOB, *PECCPRIVATEKEYBLOB;
+
+typedef struct Struct_ECCCIPHERBLOB {
+	BYTE	XCoordinate[ECC_MAX_XCOORDINATE_BITS_LEN/8];
+	BYTE	YCoordinate[ECC_MAX_XCOORDINATE_BITS_LEN/8];
+	BYTE	HASH[32];
+	ULONG	CipherLen;
+	BYTE	Cipher[1];
+} ECCCIPHERBLOB, *PECCCIPHERBLOB;
+
+typedef struct Struct_ECCSIGNATUREBLOB {
+	BYTE	r[ECC_MAX_XCOORDINATE_BITS_LEN/8];
+	BYTE	s[ECC_MAX_XCOORDINATE_BITS_LEN/8];
+} ECCSIGNATUREBLOB, *PECCSIGNATUREBLOB;
+
+#ifndef SKF_NO_GMSSL
+#define SKF_NO_PADDING		0
+#define SKF_PKCS5_PADDING	1
+#endif
+
+typedef struct Struct_BLOCKCIPHERPARAM {
+	BYTE	IV[MAX_IV_LEN];
+	ULONG	IVLen;
+	ULONG	PaddingType;
+	ULONG	FeedBitLen;
+} BLOCKCIPHERPARAM, *PBLOCKCIPHERPARAM;
+
+typedef struct SKF_ENVELOPEDKEYBLOB {
+	ULONG	Version;
+	ULONG	ulSymmAlgID;
+	ULONG	ulBits;
+	BYTE	cbEncryptedPriKey[64];
+	ECCPUBLICKEYBLOB	PubKey;
+	ECCCIPHERBLOB		ECCCipherBlob;
+} ENVELOPEDKEYBLOB, *PENVELOPEDKEYBLOB;
+
+typedef struct Struct_FILEATTRIBUTE {
+	CHAR	FileName[MAX_FILE_NAME_SIZE];
+	ULONG	FileSize;
+	ULONG	ReadRights;
+	ULONG	WriteRights;
+} FILEATTRIBUTE, *PFILEATTRIBUTE;
+
+	
+ULONG DEVAPI SKF_WaitForDevEvent(LPSTR szDevName,
+	ULONG *pulDevNameLen,
+	ULONG *pulEvent);
+
+ULONG DEVAPI SKF_CancelWaitForDevEvent();
+
+ULONG DEVAPI SKF_EnumDev(BOOL bPresent,
+	LPSTR szNameList,
+	ULONG *pulSize);
+
+ULONG DEVAPI SKF_ConnectDev(LPSTR szName,
+	DEVHANDLE *phDev);
+
+ULONG DEVAPI SKF_DisConnectDev(DEVHANDLE hDev);
+
+#ifndef SKF_NO_GMSSL
+#define DEV_ABSENT_STATE		0x00000000
+#define DEV_PRESENT_STATE		0x00000001
+#define DEV_UNKNOW_STATE		0x00000010
+#endif
+
+ULONG DEVAPI SKF_GetDevState(LPSTR szDevName,
+	ULONG *pulDevState);
+
+ULONG DEVAPI SKF_SetLabel(DEVHANDLE hDev,
+	LPSTR szLabel);
+
+ULONG DEVAPI SKF_GetDevInfo(DEVHANDLE hDev,
+	DEVINFO *pDevInfo);
+
+ULONG DEVAPI SKF_LockDev(DEVHANDLE hDev,
+	ULONG ulTimeOut);
+
+ULONG DEVAPI SKF_UnlockDev(DEVHANDLE hDev);
+
+ULONG DEVAPI SKF_Transmit(DEVHANDLE hDev,
+	BYTE *pbCommand,
+	ULONG ulCommandLen,
+	BYTE *pbData,
+	ULONG *pulDataLen);
+
+ULONG DEVAPI SKF_ChangeDevAuthKey(DEVHANDLE hDev,
+	BYTE *pbKeyValue,
+	ULONG ulKeyLen);
+
+ULONG DEVAPI SKF_DevAuth(DEVHANDLE hDev,
+	BYTE *pbAuthData,
+	ULONG ulLen);
+
+ULONG DEVAPI SKF_ChangePIN(HAPPLICATION hApplication,
+	ULONG ulPINType,
+	LPSTR szOldPin,
+	LPSTR szNewPin,
+	ULONG *pulRetryCount);
+
+LONG DEVAPI SKF_GetPINInfo(HAPPLICATION hApplication,
+	ULONG ulPINType,
+	ULONG *pulMaxRetryCount, 
+	ULONG *pulRemainRetryCount, 
+	BOOL *pbDefaultPin);
+
+ULONG DEVAPI SKF_VerifyPIN(HAPPLICATION hApplication,
+	ULONG ulPINType,
+	LPSTR szPIN, 
+	ULONG *pulRetryCount);
+
+ULONG DEVAPI SKF_UnblockPIN(HAPPLICATION hApplication,
+	LPSTR szAdminPIN,
+	LPSTR szNewUserPIN,  
+	ULONG *pulRetryCount);
+
+ULONG DEVAPI SKF_ClearSecureState(HAPPLICATION hApplication);
+
+ULONG DEVAPI SKF_CreateApplication(DEVHANDLE hDev,
+	LPSTR szAppName,
+	LPSTR szAdminPin, 
+	DWORD dwAdminPinRetryCount,
+	LPSTR szUserPin, 
+	DWORD dwUserPinRetryCount,
+	DWORD dwCreateFileRights, 
+	HAPPLICATION *phApplication);
+
+ULONG DEVAPI SKF_EnumApplication(DEVHANDLE hDev,
+	LPSTR szAppName,
+	ULONG *pulSize);
+
+ULONG DEVAPI SKF_DeleteApplication(DEVHANDLE hDev, 
+	LPSTR szAppName);
+
+ULONG DEVAPI SKF_OpenApplication(DEVHANDLE hDev, 
+	LPSTR szAppName,
+	HAPPLICATION *phApplication);
+
+ULONG DEVAPI SKF_CloseApplication(HAPPLICATION hApplication);
+
+ULONG DEVAPI SKF_CreateFile(HAPPLICATION hApplication,
+	LPSTR szFileName,
+	ULONG ulFileSize, 
+	ULONG ulReadRights,
+	ULONG ulWriteRights);
+
+ULONG DEVAPI SKF_DeleteFile(HAPPLICATION hApplication,
+	LPSTR szFileName);
+
+ULONG DEVAPI SKF_EnumFiles(HAPPLICATION hApplication, 
+	LPSTR szFileList,
+	ULONG *pulSize);
+
+ULONG DEVAPI SKF_GetFileInfo(HAPPLICATION hApplication,
+	LPSTR szFileName,
+	FILEATTRIBUTE *pFileInfo);
+
+ULONG DEVAPI SKF_ReadFile(HAPPLICATION hApplication,
+	LPSTR szFileName,
+	ULONG ulOffset, 
+	ULONG ulSize, 
+	BYTE *pbOutData, 
+	ULONG *pulOutLen);
+
+ULONG DEVAPI SKF_WriteFile(HAPPLICATION hApplication, 
+	LPSTR szFileName,
+	ULONG ulOffset, 
+	BYTE *pbData,
+	ULONG ulSize);
+
+ULONG DEVAPI SKF_CreateContainer(HAPPLICATION hApplication,
+	LPSTR szContainerName,
+	HCONTAINER *phContainer);
+
+ULONG DEVAPI SKF_DeleteContainer(HAPPLICATION hApplication, 
+	LPSTR szContainerName);
+
+ULONG DEVAPI SKF_EnumContainer(HAPPLICATION hApplication,
+	LPSTR szContainerName,
+	ULONG *pulSize);
+
+ULONG DEVAPI SKF_OpenContainer(HAPPLICATION hApplication,
+	LPSTR szContainerName,
+	HCONTAINER *phContainer);
+
+ULONG DEVAPI SKF_CloseContainer(HCONTAINER hContainer);
+
+#ifndef SKF_NO_GMSSL
+#define CONTAINER_TYPE_UNDEF	0
+#define CONTAINER_TYPE_RSA	1
+#define CONTAINER_TYPE_ECC	2
+#endif
+
+ULONG DEVAPI SKF_GetContainerType(HCONTAINER hContainer,
+	ULONG *pulContainerType);
+
+ULONG DEVAPI SKF_ImportCertificate(HCONTAINER hContainer, 
+	BOOL bExportSignKey,
+	BYTE *pbCert,
+	ULONG ulCertLen);
+
+ULONG DEVAPI SKF_ExportCertificate(HCONTAINER hContainer,
+	BOOL bSignFlag,
+	BYTE *pbCert,
+	ULONG *pulCertLen);
+
+ULONG DEVAPI SKF_ExportPublicKey(HCONTAINER hContainer, 
+	BOOL bSignFlag,
+	BYTE *pbBlob,
+	ULONG *pulBlobLen);
+
+ULONG DEVAPI SKF_GenRandom(DEVHANDLE hDev,
+	BYTE *pbRandom,
+	ULONG ulRandomLen);
+
+ULONG DEVAPI SKF_GenExtRSAKey(DEVHANDLE hDev, 
+	ULONG ulBitsLen,
+	RSAPRIVATEKEYBLOB *pBlob);
+
+ULONG DEVAPI SKF_GenRSAKeyPair(HCONTAINER hContainer, 
+	ULONG ulBitsLen,
+	RSAPUBLICKEYBLOB *pBlob);
+
+ULONG DEVAPI SKF_ImportRSAKeyPair(HCONTAINER hContainer, 
+	ULONG ulSymAlgId,
+	BYTE *pbWrappedKey,
+	ULONG ulWrappedKeyLen,
+	BYTE *pbEncryptedData,
+	ULONG ulEncryptedDataLen);
+
+ULONG DEVAPI SKF_RSASignData(HCONTAINER hContainer, 
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbSignature,
+	ULONG *pulSignLen);
+
+ULONG DEVAPI SKF_RSAVerify(DEVHANDLE hDev, 
+	RSAPUBLICKEYBLOB *pRSAPubKeyBlob,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbSignature, 
+	ULONG ulSignLen);
+
+ULONG DEVAPI SKF_RSAExportSessionKey(HCONTAINER hContainer, 
+	ULONG ulAlgId,
+	RSAPUBLICKEYBLOB *pPubKey,
+	BYTE *pbData,
+	ULONG *pulDataLen,
+	HANDLE *phSessionKey);
+
+ULONG DEVAPI SKF_ExtRSAPubKeyOperation(DEVHANDLE hDev, 
+	RSAPUBLICKEYBLOB *pRSAPubKeyBlob,
+	BYTE *pbInput,
+	ULONG ulInputLen,
+	BYTE *pbOutput,
+	ULONG *pulOutputLen);
+
+ULONG DEVAPI SKF_ExtRSAPriKeyOperation(DEVHANDLE hDev,
+	RSAPRIVATEKEYBLOB *pRSAPriKeyBlob,
+	BYTE *pbInput,
+	ULONG ulInputLen,
+	BYTE *pbOutput,
+	ULONG *pulOutputLen);
+
+ULONG DEVAPI SKF_GenECCKeyPair(HCONTAINER hContainer,
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pBlob);
+
+ULONG DEVAPI SKF_ImportECCKeyPair(HCONTAINER hContainer,
+	ENVELOPEDKEYBLOB *pEnvelopedKeyBlob);
+
+ULONG DEVAPI SKF_ECCSignData(HCONTAINER hContainer,
+	BYTE *pbDigest,
+	ULONG ulDigestLen,
+	ECCSIGNATUREBLOB *pSignature);
+
+ULONG DEVAPI SKF_ECCVerify(DEVHANDLE hDev,
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	BYTE *pbData,
+	ULONG ulDataLen, 
+	ECCSIGNATUREBLOB *pSignature);
+
+ULONG DEVAPI SKF_ECCExportSessionKey(HCONTAINER hContainer,
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pPubKey,
+	ECCCIPHERBLOB *pData,
+	HANDLE *phSessionKey);
+
+ULONG DEVAPI SKF_ExtECCEncrypt(DEVHANDLE hDev,
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	BYTE *pbPlainText,
+	ULONG ulPlainTextLen,
+	ECCCIPHERBLOB *pCipherText);
+
+ULONG DEVAPI SKF_ExtECCDecrypt(DEVHANDLE hDev,
+	ECCPRIVATEKEYBLOB *pECCPriKeyBlob,
+	ECCCIPHERBLOB *pCipherText,
+	BYTE *pbPlainText,
+	ULONG *pulPlainTextLen);
+
+ULONG DEVAPI SKF_ExtECCSign(DEVHANDLE hDev,
+	ECCPRIVATEKEYBLOB *pECCPriKeyBlob,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	ECCSIGNATUREBLOB *pSignature);
+
+ULONG DEVAPI SKF_ExtECCVerify(DEVHANDLE hDev,
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	ECCSIGNATUREBLOB *pSignature);
+
+ULONG DEVAPI SKF_GenerateAgreementDataWithECC(HCONTAINER hContainer,
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pTempECCPubKeyBlob,
+	BYTE *pbID,
+	ULONG ulIDLen,
+	HANDLE *phAgreementHandle);
+
+ULONG DEVAPI SKF_GenerateAgreementDataAndKeyWithECC(HANDLE hContainer, 
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pSponsorECCPubKeyBlob,
+	ECCPUBLICKEYBLOB *pSponsorTempECCPubKeyBlob,
+	ECCPUBLICKEYBLOB *pTempECCPubKeyBlob,
+	BYTE *pbID,
+	ULONG ulIDLen,
+	BYTE *pbSponsorID,
+	ULONG ulSponsorIDLen,
+	HANDLE *phKeyHandle);
+
+ULONG DEVAPI SKF_GenerateKeyWithECC(HANDLE hAgreementHandle,
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	ECCPUBLICKEYBLOB *pTempECCPubKeyBlob,
+	BYTE *pbID,
+	ULONG ulIDLen,
+	HANDLE *phKeyHandle);
+
+ULONG DEVAPI SKF_ImportSessionKey(HCONTAINER hContainer, 
+	ULONG ulAlgId,
+	BYTE *pbWrapedData,
+	ULONG ulWrapedLen,
+	HANDLE *phKey);
+
+ULONG DEVAPI SKF_SetSymmKey(DEVHANDLE hDev, 
+	BYTE *pbKey,
+	ULONG ulAlgID,
+	HANDLE *phKey);
+
+ULONG DEVAPI SKF_EncryptInit(HANDLE hKey,
+	BLOCKCIPHERPARAM EncryptParam);
+
+ULONG DEVAPI SKF_Encrypt(HANDLE hKey,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbEncryptedData,
+	ULONG *pulEncryptedLen);
+
+ULONG DEVAPI SKF_EncryptUpdate(HANDLE hKey,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbEncryptedData,
+	ULONG *pulEncryptedLen);
+
+ULONG DEVAPI SKF_EncryptFinal(HANDLE hKey,
+	BYTE *pbEncryptedData,
+	ULONG *pulEncryptedDataLen);
+
+ULONG DEVAPI SKF_DecryptInit(HANDLE hKey, 
+	BLOCKCIPHERPARAM DecryptParam);
+
+ULONG DEVAPI SKF_Decrypt(HANDLE hKey, 
+	BYTE *pbEncryptedData,
+	ULONG ulEncryptedLen,
+	BYTE *pbData,
+	ULONG *pulDataLen);
+
+ULONG DEVAPI SKF_DecryptUpdate(HANDLE hKey, 
+	BYTE *pbEncryptedData,
+	ULONG ulEncryptedLen,
+	BYTE *pbData,
+	ULONG *pulDataLen);
+
+ULONG DEVAPI SKF_DecryptFinal(HANDLE hKey, 
+	BYTE *pbDecryptedData,
+	ULONG *pulDecryptedDataLen);
+
+ULONG DEVAPI SKF_DigestInit(DEVHANDLE hDev, 
+	ULONG ulAlgID,
+	ECCPUBLICKEYBLOB *pPubKey,
+	BYTE *pbID,
+	ULONG ulIDLen,
+	HANDLE *phHash);
+
+ULONG DEVAPI SKF_Digest(HANDLE hHash, 
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbHashData,
+	ULONG *pulHashLen);
+
+ULONG DEVAPI SKF_DigestUpdate(HANDLE hHash, 
+	BYTE *pbData,
+	ULONG ulDataLen);
+
+ULONG DEVAPI SKF_DigestFinal(HANDLE hHash,
+	BYTE *pHashData,
+	ULONG *pulHashLen);
+
+ULONG DEVAPI SKF_MacInit(HANDLE hKey,
+	BLOCKCIPHERPARAM *pMacParam,
+	HANDLE *phMac);
+
+ULONG DEVAPI SKF_Mac(HANDLE hMac,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbMacData,
+	ULONG *pulMacLen);
+
+ULONG DEVAPI SKF_MacUpdate(HANDLE hMac,
+	BYTE *pbData,
+	ULONG ulDataLen);
+
+ULONG DEVAPI SKF_MacFinal(HANDLE hMac,
+	BYTE *pbMacData,
+	ULONG *pulMacDataLen);
+
+ULONG DEVAPI SKF_CloseHandle(HANDLE hHandle);
+
+
+
+#define SAR_OK				0x00000000
+#define SAR_FAIL			0x0A000001
+#define SAR_UNKNOWNERR			0x0A000002
+#define SAR_NOTSUPPORTYETERR		0x0A000003
+#define SAR_FILEERR			0x0A000004
+#define SAR_INVALIDHANDLEERR		0x0A000005
+#define SAR_INVALIDPARAMERR		0x0A000006
+#define SAR_READFILEERR			0x0A000007
+#define SAR_WRITEFILEERR		0x0A000008
+#define SAR_NAMELENERR			0x0A000009
+#define SAR_KEYUSAGEERR			0x0A00000A
+#define SAR_MODULUSLENERR		0x0A00000B
+#define SAR_NOTINITIALIZEERR		0x0A00000C
+#define SAR_OBJERR			0x0A00000D
+#define SAR_MEMORYERR			0x0A00000E
+#define SAR_TIMEOUTERR			0x0A00000F
+#define SAR_INDATALENERR		0x0A000010
+#define SAR_INDATAERR			0x0A000011
+#define SAR_GENRANDERR			0x0A000012
+#define SAR_HASHOBJERR			0x0A000013
+#define SAR_HASHERR			0x0A000014
+#define SAR_GENRSAKEYERR		0x0A000015
+#define SAR_RSAMODULUSLENERR		0x0A000016
+#define SAR_CSPIMPRTPUBKEYERR		0x0A000017
+#define SAR_RSAENCERR			0x0A000018
+#define SAR_RSADECERR			0x0A000019
+#define SAR_HASHNOTEQUALERR		0x0A00001A
+#define SAR_KEYNOTFOUNTERR		0x0A00001B
+#define SAR_KEYNOTFOUNDERR		0x0A00001B
+#define SAR_CERTNOTFOUNTERR		0x0A00001C
+#define SAR_NOTEXPORTERR		0x0A00001D
+#define SAR_DECRYPTPADERR		0x0A00001E
+#define SAR_MACLENERR			0x0A00001F
+#define SAR_BUFFER_TOO_SMALL		0x0A000020
+#define SAR_KEYINFOTYPEERR		0x0A000021
+#define SAR_NOT_EVENTERR		0x0A000022
+#define SAR_DEVICE_REMOVED		0x0A000023
+#define SAR_PIN_INCORRECT		0x0A000024
+#define SAR_PIN_LOCKED			0x0A000025
+#define SAR_PIN_INVALID			0x0A000026
+#define SAR_PIN_LEN_RANGE		0x0A000027
+#define SAR_USER_ALREADY_LOGGED_IN	0x0A000028
+#define SAR_USER_PIN_NOT_INITIALIZED	0x0A000029
+#define SAR_USER_TYPE_INVALID		0x0A00002A
+#define SAR_APPLICATION_NAME_INVALID	0x0A00002B
+#define SAR_APPLICATION_EXISTS		0x0A00002C
+#define SAR_USER_NOT_LOGGED_IN		0x0A00002D
+#define SAR_APPLICATION_NOT_EXISTS	0x0A00002E
+#define SAR_FILE_ALREADY_EXIST		0x0A00002F
+#define SAR_NO_ROOM			0x0A000030
+#define SAR_FILE_NOT_EXIST		0x0A000031
+
+
+#ifdef __cplusplus
+}
+#endif
+#endif
+

crypto/skf/skf_dummy.c

@@ -0,0 +1,719 @@
+/* engines/skf/skf_dummy.c */
+/* ====================================================================
+ * Copyright (c) 2015-2016 The GmSSL Project.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in
+ *    the documentation and/or other materials provided with the
+ *    distribution.
+ *
+ * 3. All advertising materials mentioning features or use of this
+ *    software must display the following acknowledgment:
+ *    "This product includes software developed by the GmSSL Project.
+ *    (http://gmssl.org/)"
+ *
+ * 4. The name "GmSSL Project" must not be used to endorse or promote
+ *    products derived from this software without prior written
+ *    permission. For written permission, please contact
+ *    guanzhi1980@gmail.com.
+ *
+ * 5. Products derived from this software may not be called "GmSSL"
+ *    nor may "GmSSL" appear in their names without prior written
+ *    permission of the GmSSL Project.
+ *
+ * 6. Redistributions of any form whatsoever must retain the following
+ *    acknowledgment:
+ *    "This product includes software developed by the GmSSL Project
+ *    (http://gmssl.org/)"
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
+ * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE GmSSL PROJECT OR
+ * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ * ====================================================================
+ *
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include "skf.h"
+
+#define DEV_NAME		"skf-soft-token"
+#define DEV_NAME_LIST		DEV_NAME"\0"
+#define APP_NAME		"default-app"
+#define APP_NAME_LIST		APP_NAME"\0"
+#define CONTAINER_NAME		"container0"
+#define CONTAINER_NAME_LIST	CONTAINER_NAME"\0"
+
+
+ULONG DEVAPI SKF_WaitForDevEvent(LPSTR szDevName,
+	ULONG *pulDevNameLen, ULONG *pulEvent)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_CancelWaitForDevEvent()
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_EnumDev(BOOL bPresent,
+	LPSTR szNameList,
+	ULONG *pulSize)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ConnectDev(LPSTR szName,
+	DEVHANDLE *phDev)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DisConnectDev(DEVHANDLE hDev)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_GetDevState(LPSTR szDevName,
+	ULONG *pulDevState)
+{
+	if (!pulDevState) {
+		return SAR_INVALIDPARAMERR;
+	}
+	*pulDevState = DEV_PRESENT_STATE;
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_SetLabel(DEVHANDLE hDev,
+	LPSTR szLabel)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_GetDevInfo(DEVHANDLE hDev,
+	DEVINFO *pDevInfo)
+{
+	DEVINFO devInfo;
+
+	bzero(&devInfo, sizeof(DEVINFO));
+	devInfo.Version.major = 1;
+	devInfo.Version.minor = 0;
+	strcpy((char *)&devInfo.Manufacturer, "GmSSL Project (http://gmssl.org)");
+	strcpy((char *)&devInfo.Issuer, "GmSSL Project (http://gmssl.org)");
+	strcpy((char *)&devInfo.Label, "SKF Softotken");
+	strcpy((char *)&devInfo.SerialNumber, "000001");
+	devInfo.HWVersion.major = 1;
+	devInfo.HWVersion.minor = 0;
+	devInfo.FirmwareVersion.major = 1;
+	devInfo.FirmwareVersion.minor = 0;
+	devInfo.AlgSymCap = 0x0000041F;
+	devInfo.AlgAsymCap = 0x00030700;
+	devInfo.AlgHashCap = 0x00000007;
+	devInfo.DevAuthAlgId = SGD_SM4_CBC;
+	devInfo.TotalSpace = 0;
+	devInfo.FreeSpace = 0;
+	devInfo.MaxECCBufferSize = 0; /* FIXME: max inlen of ECC encrypt */
+	devInfo.MaxBufferSize = 0; /* FIXME: max inlen of SM4 encrypt */
+
+	memcpy(pDevInfo, &devInfo, sizeof(DEVINFO));
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_LockDev(DEVHANDLE hDev,
+	ULONG ulTimeOut)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_UnlockDev(DEVHANDLE hDev)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_Transmit(DEVHANDLE hDev,
+	BYTE *pbCommand,
+	ULONG ulCommandLen,
+	BYTE *pbData,
+	ULONG *pulDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ChangeDevAuthKey(DEVHANDLE hDev,
+	BYTE *pbKeyValue,
+	ULONG ulKeyLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DevAuth(DEVHANDLE hDev,
+	BYTE *pbAuthData,
+	ULONG ulLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ChangePIN(HAPPLICATION hApplication,
+	ULONG ulPINType,
+	LPSTR szOldPin,
+	LPSTR szNewPin,
+	ULONG *pulRetryCount)
+{
+	return SAR_OK;
+}
+
+LONG DEVAPI SKF_GetPINInfo(HAPPLICATION hApplication,
+	ULONG ulPINType,
+	ULONG *pulMaxRetryCount,
+	ULONG *pulRemainRetryCount,
+	BOOL *pbDefaultPin)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_VerifyPIN(HAPPLICATION hApplication,
+	ULONG ulPINType,
+	LPSTR szPIN,
+	ULONG *pulRetryCount)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_UnblockPIN(HAPPLICATION hApplication,
+	LPSTR szAdminPIN,
+	LPSTR szNewUserPIN,
+	ULONG *pulRetryCount)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ClearSecureState(HAPPLICATION hApplication)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_CreateApplication(DEVHANDLE hDev,
+	LPSTR szAppName,
+	LPSTR szAdminPin,
+	DWORD dwAdminPinRetryCount,
+	LPSTR szUserPin,
+	DWORD dwUserPinRetryCount,
+	DWORD dwCreateFileRights,
+	HAPPLICATION *phApplication)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_EnumApplication(DEVHANDLE hDev,
+	LPSTR szAppName,
+	ULONG *pulSize)
+{
+	if (!szAppName) {
+		*pulSize = sizeof(APP_NAME_LIST);
+		return SAR_OK;
+	}
+	if (*pulSize < sizeof(APP_NAME_LIST)) {
+		return SAR_BUFFER_TOO_SMALL;
+	}
+	memcpy(szAppName, APP_NAME_LIST, sizeof(APP_NAME_LIST));
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DeleteApplication(DEVHANDLE hDev,
+	LPSTR szAppName)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_OpenApplication(DEVHANDLE hDev,
+	LPSTR szAppName,
+	HAPPLICATION *phApplication)
+{
+	if (!phApplication) {
+		return SAR_INVALIDPARAMERR;
+	}
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_CloseApplication(HAPPLICATION hApplication)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_CreateFile(HAPPLICATION hApplication,
+	LPSTR szFileName,
+	ULONG ulFileSize, 
+	ULONG ulReadRights,
+	ULONG ulWriteRights)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_DeleteFile(HAPPLICATION hApplication,
+	LPSTR szFileName)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_EnumFiles(HAPPLICATION hApplication, 
+	LPSTR szFileList,
+	ULONG *pulSize)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GetFileInfo(HAPPLICATION hApplication,
+	LPSTR szFileName,
+	FILEATTRIBUTE *pFileInfo)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ReadFile(HAPPLICATION hApplication,
+	LPSTR szFileName,
+	ULONG ulOffset, 
+	ULONG ulSize, 
+	BYTE * pbOutData, 
+	ULONG *pulOutLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_WriteFile(HAPPLICATION hApplication, 
+	LPSTR szFileName,
+	ULONG  ulOffset, 
+	BYTE *pbData,
+	ULONG ulSize)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_CreateContainer(HAPPLICATION hApplication,
+	LPSTR szContainerName,
+	HCONTAINER *phContainer)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DeleteContainer(HAPPLICATION hApplication, 
+	LPSTR szContainerName)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_EnumContainer(HAPPLICATION hApplication,
+	LPSTR szContainerName,
+	ULONG *pulSize)
+{
+	if (!pulSize) {
+		return SAR_INVALIDPARAMERR;
+	}
+	if (!szContainerName) {
+		*pulSize = sizeof(CONTAINER_NAME_LIST);
+		return SAR_OK;
+	}
+	if (*pulSize < sizeof(CONTAINER_NAME_LIST)) {
+		return SAR_BUFFER_TOO_SMALL;
+	}
+	memcpy(szContainerName, CONTAINER_NAME_LIST, sizeof(CONTAINER_NAME_LIST));
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_OpenContainer(HAPPLICATION hApplication,
+	LPSTR szContainerName,
+	HCONTAINER *phContainer)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_CloseContainer(HCONTAINER hContainer)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_GetContainerType(HCONTAINER hContainer,
+	ULONG *pulContainerType)
+{
+	if (!pulContainerType) {
+		return SAR_INVALIDPARAMERR;
+	}
+	*pulContainerType = CONTAINER_TYPE_ECC;
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ImportCertificate(HCONTAINER hContainer, 
+	BOOL bSignFlag,
+	BYTE *pbCert,
+	ULONG ulCertLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ExportCertificate(HCONTAINER hContainer,
+	BOOL bSignFlag,
+	BYTE* pbCert,
+	ULONG *pulCertLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenRandom(DEVHANDLE hDev,
+	BYTE *pbRandom,
+	ULONG ulRandomLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_GenExtRSAKey(DEVHANDLE hDev, 
+	ULONG ulBitsLen,
+	RSAPRIVATEKEYBLOB *pBlob)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenRSAKeyPair(HCONTAINER hContainer, 
+	ULONG ulBitsLen,
+	RSAPUBLICKEYBLOB *pBlob)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ImportRSAKeyPair(HCONTAINER hContainer, 
+	ULONG ulSymAlgId,
+	BYTE *pbWrappedKey,
+	ULONG ulWrappedKeyLen,
+	BYTE *pbEncryptedData,
+	ULONG ulEncryptedDataLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_RSASignData(HCONTAINER hContainer, 
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbSignature,
+	ULONG *pulSignLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_RSAVerify(DEVHANDLE hDev, 
+	RSAPUBLICKEYBLOB *pRSAPubKeyBlob,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbSignature,
+	ULONG ulSignLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_RSAExportSessionKey(HCONTAINER hContainer, 
+	ULONG ulAlgId,
+	RSAPUBLICKEYBLOB *pPubKey,
+	BYTE *pbData,
+	ULONG *pulDataLen,
+	HANDLE *phSessionKey)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtRSAPubKeyOperation(DEVHANDLE hDev, 
+	RSAPUBLICKEYBLOB *pRSAPubKeyBlob,
+	BYTE *pbInput,
+	ULONG ulInputLen,
+	BYTE *pbOutput,
+	ULONG *pulOutputLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtRSAPriKeyOperation(DEVHANDLE hDev,
+	RSAPRIVATEKEYBLOB *pRSAPriKeyBlob,
+	BYTE *pbInput,
+	ULONG ulInputLen,
+	BYTE *pbOutput,
+	ULONG *pulOutputLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenECCKeyPair(HCONTAINER hContainer,
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pBlob)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ImportECCKeyPair(HCONTAINER hContainer,
+	PENVELOPEDKEYBLOB pEnvelopedKeyBlob)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ECCSignData(HCONTAINER hContainer,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	PECCSIGNATUREBLOB pSignature)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ECCVerify(DEVHANDLE hDev,
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	PECCSIGNATUREBLOB pSignature)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ECCExportSessionKey(HCONTAINER hContainer, 
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pPubKey,
+	PECCCIPHERBLOB pData,
+	HANDLE *phSessionKey)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtECCEncrypt(DEVHANDLE hDev,
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	BYTE *pbPlainText,
+	ULONG ulPlainTextLen,
+	PECCCIPHERBLOB pCipherText)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtECCDecrypt(DEVHANDLE hDev,
+	ECCPRIVATEKEYBLOB *pECCPriKeyBlob,
+	PECCCIPHERBLOB pCipherText,
+	BYTE *pbPlainText,
+	ULONG *pulPlainTextLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtECCSign(DEVHANDLE hDev, 
+	ECCPRIVATEKEYBLOB *pECCPriKeyBlob,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	PECCSIGNATUREBLOB pSignature)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtECCVerify(DEVHANDLE hDev, 
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	BYTE *pbData, 
+	ULONG ulDataLen, 
+	PECCSIGNATUREBLOB pSignature)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenerateAgreementDataWithECC(HCONTAINER hContainer,
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pTempECCPubKeyBlob,
+	BYTE *pbID,
+	ULONG ulIDLen,
+	HANDLE *phAgreementHandle)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenerateAgreementDataAndKeyWithECC(HANDLE hContainer, 
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pSponsorECCPubKeyBlob,
+	ECCPUBLICKEYBLOB *pSponsorTempECCPubKeyBlob,
+	ECCPUBLICKEYBLOB *pTempECCPubKeyBlob,
+	BYTE *pbID,
+	ULONG ulIDLen,
+	BYTE *pbSponsorID,
+	ULONG ulSponsorIDLen,
+	HANDLE *phKeyHandle)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenerateKeyWithECC(HANDLE hAgreementHandle,
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	ECCPUBLICKEYBLOB *pTempECCPubKeyBlob,
+	BYTE *pbID, 
+	ULONG ulIDLen, 
+	HANDLE *phKeyHandle)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExportPublicKey(HCONTAINER hContainer, 
+	BOOL bSignFlag,
+	BYTE* pbBlob, 
+	ULONG* pulBlobLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ImportSessionKey(HCONTAINER hContainer, 
+	ULONG ulAlgId,
+	BYTE *pbWrapedData,
+	ULONG ulWrapedLen,
+	HANDLE *phKey)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_SetSymmKey(DEVHANDLE hDev, 
+	BYTE *pbKey,
+	ULONG ulAlgID, 
+	HANDLE *phKey)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_EncryptInit(HANDLE hKey, 
+	BLOCKCIPHERPARAM EncryptParam)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_Encrypt(HANDLE hKey,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbEncryptedData,
+	ULONG *pulEncryptedLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_EncryptUpdate(HANDLE hKey,
+	BYTE *pbData,
+	ULONG ulDataLen, 
+	BYTE *pbEncryptedData, 
+	ULONG *pulEncryptedLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_EncryptFinal(HANDLE hKey,
+	BYTE *pbEncryptedData,
+	ULONG *pulEncryptedDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DecryptInit(HANDLE hKey, 
+	BLOCKCIPHERPARAM DecryptParam)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_Decrypt(HANDLE hKey, 
+	BYTE *pbEncryptedData,
+	ULONG ulEncryptedLen, 
+	BYTE *pbData, 
+	ULONG *pulDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DecryptUpdate(HANDLE hKey, 
+	BYTE *pbEncryptedData,
+	ULONG ulEncryptedLen, 
+	BYTE *pbData, 
+	ULONG *pulDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DecryptFinal(HANDLE hKey, 
+	BYTE *pbDecryptedData,
+	ULONG *pulDecryptedDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DigestInit(DEVHANDLE hDev,
+	ULONG ulAlgID,
+	ECCPUBLICKEYBLOB *pPubKey,
+	BYTE *pucID,
+	ULONG ulIDLen,
+	HANDLE *phHash)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_Digest(HANDLE hHash,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbHashData,
+	ULONG *pulHashLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DigestUpdate(HANDLE hHash,
+	BYTE *pbData,
+	ULONG ulDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DigestFinal(HANDLE hHash,
+	BYTE *pHashData,
+	ULONG *pulHashLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_MacInit(HANDLE hKey, 
+	BLOCKCIPHERPARAM *pMacParam,
+	HANDLE *phMac)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_Mac(HANDLE hMac,
+	BYTE *pbData,
+	ULONG ulDataLen, 
+	BYTE *pbMacData, 
+	ULONG *pulMacLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_MacUpdate(HANDLE hMac, 
+	BYTE *pbData,
+	ULONG ulDataLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_MacFinal(HANDLE hMac, 
+	BYTE *pbMacData,
+	ULONG *pulMacDataLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_CloseHandle(HANDLE hHandle)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+

crypto/skf/skf_err2.c

@@ -0,0 +1,133 @@
+#include "skf/skf.h"
+
+
+
+/*
+ * about the filename err2: this is manually written err file
+ */
+
+
+
+int skf_err2openssl(int err)
+{
+	switch (err) {
+	case SAR_OK:			return SKF_R_SAR_OK;
+	case SAR_FAIL:			return SKF_R_SAR_FAIL;
+	case SAR_UNKNOWNERR:		return SKF_R_
+	case SAR_NOTSUPPORTYETERR:	return SKF_R_
+	case SAR_FILEERR:		return SKF_R_
+	case SAR_INVALIDHANDLEERR:	return SKF_R_
+	case SAR_INVALIDPARAMERR:	return SKF_R_
+	case SAR_READFILEERR:		return SKF_R_
+	case SAR_WRITEFILEERR:		return SKF_R_
+	case SAR_NAMELENERR:		return SKF_R_
+	case SAR_KEYUSAGEERR:		return SKF_R_
+	case SAR_MODULUSLENERR:		return SKF_R_
+	case SAR_NOTINITIALIZEERR:	return SKF_R_
+	case SAR_OBJERR:		return SKF_R_
+	case SAR_MEMORYERR:		return SKF_R_
+	case SAR_TIMEOUTERR:		return SKF_R_
+	case SAR_INDATALENERR:		return SKF_R_
+	case SAR_INDATAERR:		return SKF_R_
+	case SAR_GENRANDERR:		return SKF_R_
+	case SAR_HASHOBJERR:		return SKF_R_
+	case SAR_HASHERR:		return SKF_R_
+	case SAR_GENRSAKEYERR:		return SKF_R_
+	case SAR_RSAMODULUSLENERR:	return SKF_R_
+	case SAR_CSPIMPRTPUBKEYERR:	return SKF_R_
+	case SAR_RSAENCERR:		return SKF_R_
+	case SAR_RSADECERR:		return SKF_R_
+	case SAR_HASHNOTEQUALERR:	return SKF_R_
+	case SAR_KEYNOTFOUNTERR:	return SKF_R_
+	case SAR_CERTNOTFOUNTERR:	return SKF_R_
+	case SAR_NOTEXPORTERR:		return SKF_R_
+	case SAR_DECRYPTPADERR:		return SKF_R_
+	case SAR_MACLENERR:		return SKF_R_
+	case SAR_BUFFER_TOO_SMALL:	return SKF_R_
+	case SAR_KEYINFOTYPEERR:	return SKF_R_
+	case SAR_NOT_EVENTERR:		return SKF_R_
+	case SAR_DEVICE_REMOVED:	return SKF_R_
+	case SAR_PIN_INCORRECT:		return SKF_R_
+	case SAR_PIN_LOCKED:		return SKF_R_
+	case SAR_PIN_INVALID:		return SKF_R_
+	case SAR_PIN_LEN_RANGE:		return SKF_R_
+	case SAR_USER_ALREADY_LOGGED_IN:	return SKF_R_
+	case SAR_USER_PIN_NOT_INITIALIZED:	return SKF_R_
+	case SAR_USER_TYPE_INVALID:	return SKF_R_
+	case SAR_APPLICATION_NAME_INVALID:	return SKF_R_
+	case SAR_APPLICATION_EXISTS:	return SKF_R_
+	case SAR_USER_NOT_LOGGED_IN:	return SKF_R_
+	case SAR_APPLICATION_NOT_EXISTS:	return SKF_R_
+	case SAR_FILE_ALREADY_EXIST:	return SKF_R_
+	case SAR_NO_ROOM:		return SKF_R_
+	case SAR_FILE_NOT_EXIST:	return SKF_R_
+	}
+	return 0;
+}
+
+
+
+
+typedef struct {
+	int err_no;
+	char *err_str;
+} skf_errstr[] = {
+	{ SAR_OK,			"Success" },
+	{ SAR_FAIL,			"Failure" },
+	{ SAR_UNKNOWNERR,		"Unknown error" },
+	{ SAR_NOTSUPPORTYETERR,		"Not supported" },
+	{ SAR_FILEERR,			"File error" },
+	{ SAR_INVALIDHANDLEERR,		"Invalid handler" },
+	{ SAR_INVALIDPARAMERR,		"Invalid parameter" },
+	{ SAR_READFILEERR,		"Read file error" },
+	{ SAR_WRITEFILEERR		"Write file error" },
+	{ SAR_NAMELENERR,		"Name length error" },
+	{ SAR_KEYUSAGEERR,		"Key usage error" },
+	{ SAR_MODULUSLENERR,		"Modulus length error" },
+	{ SAR_NOTINITIALIZEERR,		"Not initialized" },
+	{ SAR_OBJERR,			"Object error" },
+	{ SAR_MEMORYERR,		"Memory error" },
+	{ SAR_TIMEOUTERR,		"Time out" },
+	{ SAR_INDATALENERR,		"Input data length error" },
+	{ SAR_INDATAERR,		"Input data error" },
+	{ SAR_GENRANDERR,		"Generate randomness error" },
+	{ SAR_HASHOBJERR,		"Hash object error" },
+	{ SAR_HASHERR,			"Hash error" },
+	{ SAR_GENRSAKEYERR,		"Genenerate RSA key error" },
+	{ SAR_RSAMODULUSLENERR,		"RSA modulus length error" },
+	{ SAR_CSPIMPRTPUBKEYERR,	"CSP import public key error" },
+	{ SAR_RSAENCERR,		"RSA encryption error" },
+	{ SAR_RSADECERR,		"RSA decryption error" },
+	{ SAR_HASHNOTEQUALERR,		"Hash not equal" },
+	{ SAR_KEYNOTFOUNTERR,		"Key not found" },
+	{ SAR_CERTNOTFOUNTERR,		"Certificate not found" },
+	{ SAR_NOTEXPORTERR,		"Not exported" },
+	{ SAR_DECRYPTPADERR,		"Decrypt pad error" },
+	{ SAR_MACLENERR,		"MAC length error" },
+	{ SAR_BUFFER_TOO_SMALL,		"Buffer too small" },
+	{ SAR_KEYINFOTYPEERR,		"Key info type error" },
+	{ SAR_NOT_EVENTERR,		"No event error" },
+	{ SAR_DEVICE_REMOVED		"Device removed" },
+	{ SAR_PIN_INCORRECT,		"PIN incorrect" },
+	{ SAR_PIN_LOCKED,		"PIN locked" },
+	{ SAR_PIN_INVALID,		"PIN invalid" },
+	{ SAR_PIN_LEN_RANGE,		"PIN length error" },
+	{ SAR_USER_ALREADY_LOGGED_IN,	"User already logged in" },
+	{ SAR_USER_PIN_NOT_INITIALIZED,	"User PIN not initialized" },
+	{ SAR_USER_TYPE_INVALID,	"User type invalid" },
+	{ SAR_APPLICATION_NAME_INVALID, "Application name invalid" },
+	{ SAR_APPLICATION_EXISTS,	"Application already exist" },
+	{ SAR_USER_NOT_LOGGED_IN,	"User not logged in" },
+	{ SAR_APPLICATION_NOT_EXISTS,	"Application not exist" },
+	{ SAR_FILE_ALREADY_EXIST,	"File already exist" },
+	{ SAR_NO_ROOM,			"No file space" },
+	{ SAR_FILE_NOT_EXIST,		"File not exist" }
+};
+
+
+LPSTR DEVAPI SKF_GetErrorString(ULONG ulError)
+{
+	return NULL;
+}
+
+

crypto/skf/skf_gmssl.c

@@ -0,0 +1,722 @@
+/* engines/skf/skf_gmssl.c */
+/* ====================================================================
+ * Copyright (c) 2015-2016 The GmSSL Project.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in
+ *    the documentation and/or other materials provided with the
+ *    distribution.
+ *
+ * 3. All advertising materials mentioning features or use of this
+ *    software must display the following acknowledgment:
+ *    "This product includes software developed by the GmSSL Project.
+ *    (http://gmssl.org/)"
+ *
+ * 4. The name "GmSSL Project" must not be used to endorse or promote
+ *    products derived from this software without prior written
+ *    permission. For written permission, please contact
+ *    guanzhi1980@gmail.com.
+ *
+ * 5. Products derived from this software may not be called "GmSSL"
+ *    nor may "GmSSL" appear in their names without prior written
+ *    permission of the GmSSL Project.
+ *
+ * 6. Redistributions of any form whatsoever must retain the following
+ *    acknowledgment:
+ *    "This product includes software developed by the GmSSL Project
+ *    (http://gmssl.org/)"
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
+ * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE GmSSL PROJECT OR
+ * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ * ====================================================================
+ *
+ */
+/*
+ * this should be the SKF soft-token based on GmSSL libcrypto.
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include "skf.h"
+
+#define DEV_NAME		"skf-soft-token"
+#define DEV_NAME_LIST		DEV_NAME"\0"
+#define APP_NAME		"default-app"
+#define APP_NAME_LIST		APP_NAME"\0"
+#define CONTAINER_NAME		"container0"
+#define CONTAINER_NAME_LIST	CONTAINER_NAME"\0"
+
+
+ULONG DEVAPI SKF_WaitForDevEvent(LPSTR szDevName,
+	ULONG *pulDevNameLen, ULONG *pulEvent)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_CancelWaitForDevEvent()
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_EnumDev(BOOL bPresent,
+	LPSTR szNameList,
+	ULONG *pulSize)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ConnectDev(LPSTR szName,
+	DEVHANDLE *phDev)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DisConnectDev(DEVHANDLE hDev)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_GetDevState(LPSTR szDevName,
+	ULONG *pulDevState)
+{
+	if (!pulDevState) {
+		return SAR_INVALIDPARAMERR;
+	}
+	*pulDevState = DEV_PRESENT_STATE;
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_SetLabel(DEVHANDLE hDev,
+	LPSTR szLabel)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_GetDevInfo(DEVHANDLE hDev,
+	DEVINFO *pDevInfo)
+{
+	DEVINFO devInfo;
+
+	bzero(&devInfo, sizeof(DEVINFO));
+	devInfo.Version.major = 1;
+	devInfo.Version.minor = 0;
+	strcpy((char *)&devInfo.Manufacturer, "GmSSL Project (http://gmssl.org)");
+	strcpy((char *)&devInfo.Issuer, "GmSSL Project (http://gmssl.org)");
+	strcpy((char *)&devInfo.Label, "SKF Softotken");
+	strcpy((char *)&devInfo.SerialNumber, "000001");
+	devInfo.HWVersion.major = 1;
+	devInfo.HWVersion.minor = 0;
+	devInfo.FirmwareVersion.major = 1;
+	devInfo.FirmwareVersion.minor = 0;
+	devInfo.AlgSymCap = 0x0000041F;
+	devInfo.AlgAsymCap = 0x00030700;
+	devInfo.AlgHashCap = 0x00000007;
+	devInfo.DevAuthAlgId = SGD_SM4_CBC;
+	devInfo.TotalSpace = 0;
+	devInfo.FreeSpace = 0;
+	devInfo.MaxECCBufferSize = 0; /* FIXME: max inlen of ECC encrypt */
+	devInfo.MaxBufferSize = 0; /* FIXME: max inlen of SM4 encrypt */
+
+	memcpy(pDevInfo, &devInfo, sizeof(DEVINFO));
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_LockDev(DEVHANDLE hDev,
+	ULONG ulTimeOut)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_UnlockDev(DEVHANDLE hDev)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_Transmit(DEVHANDLE hDev,
+	BYTE *pbCommand,
+	ULONG ulCommandLen,
+	BYTE *pbData,
+	ULONG *pulDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ChangeDevAuthKey(DEVHANDLE hDev,
+	BYTE *pbKeyValue,
+	ULONG ulKeyLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DevAuth(DEVHANDLE hDev,
+	BYTE *pbAuthData,
+	ULONG ulLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ChangePIN(HAPPLICATION hApplication,
+	ULONG ulPINType,
+	LPSTR szOldPin,
+	LPSTR szNewPin,
+	ULONG *pulRetryCount)
+{
+	return SAR_OK;
+}
+
+LONG DEVAPI SKF_GetPINInfo(HAPPLICATION hApplication,
+	ULONG ulPINType,
+	ULONG *pulMaxRetryCount,
+	ULONG *pulRemainRetryCount,
+	BOOL *pbDefaultPin)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_VerifyPIN(HAPPLICATION hApplication,
+	ULONG ulPINType,
+	LPSTR szPIN,
+	ULONG *pulRetryCount)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_UnblockPIN(HAPPLICATION hApplication,
+	LPSTR szAdminPIN,
+	LPSTR szNewUserPIN,
+	ULONG *pulRetryCount)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ClearSecureState(HAPPLICATION hApplication)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_CreateApplication(DEVHANDLE hDev,
+	LPSTR szAppName,
+	LPSTR szAdminPin,
+	DWORD dwAdminPinRetryCount,
+	LPSTR szUserPin,
+	DWORD dwUserPinRetryCount,
+	DWORD dwCreateFileRights,
+	HAPPLICATION *phApplication)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_EnumApplication(DEVHANDLE hDev,
+	LPSTR szAppName,
+	ULONG *pulSize)
+{
+	if (!szAppName) {
+		*pulSize = sizeof(APP_NAME_LIST);
+		return SAR_OK;
+	}
+	if (*pulSize < sizeof(APP_NAME_LIST)) {
+		return SAR_BUFFER_TOO_SMALL;
+	}
+	memcpy(szAppName, APP_NAME_LIST, sizeof(APP_NAME_LIST));
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DeleteApplication(DEVHANDLE hDev,
+	LPSTR szAppName)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_OpenApplication(DEVHANDLE hDev,
+	LPSTR szAppName,
+	HAPPLICATION *phApplication)
+{
+	if (!phApplication) {
+		return SAR_INVALIDPARAMERR;
+	}
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_CloseApplication(HAPPLICATION hApplication)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_CreateFile(HAPPLICATION hApplication,
+	LPSTR szFileName,
+	ULONG ulFileSize, 
+	ULONG ulReadRights,
+	ULONG ulWriteRights)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_DeleteFile(HAPPLICATION hApplication,
+	LPSTR szFileName)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_EnumFiles(HAPPLICATION hApplication, 
+	LPSTR szFileList,
+	ULONG *pulSize)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GetFileInfo(HAPPLICATION hApplication,
+	LPSTR szFileName,
+	FILEATTRIBUTE *pFileInfo)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ReadFile(HAPPLICATION hApplication,
+	LPSTR szFileName,
+	ULONG ulOffset, 
+	ULONG ulSize, 
+	BYTE * pbOutData, 
+	ULONG *pulOutLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_WriteFile(HAPPLICATION hApplication, 
+	LPSTR szFileName,
+	ULONG  ulOffset, 
+	BYTE *pbData,
+	ULONG ulSize)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_CreateContainer(HAPPLICATION hApplication,
+	LPSTR szContainerName,
+	HCONTAINER *phContainer)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DeleteContainer(HAPPLICATION hApplication, 
+	LPSTR szContainerName)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_EnumContainer(HAPPLICATION hApplication,
+	LPSTR szContainerName,
+	ULONG *pulSize)
+{
+	if (!pulSize) {
+		return SAR_INVALIDPARAMERR;
+	}
+	if (!szContainerName) {
+		*pulSize = sizeof(CONTAINER_NAME_LIST);
+		return SAR_OK;
+	}
+	if (*pulSize < sizeof(CONTAINER_NAME_LIST)) {
+		return SAR_BUFFER_TOO_SMALL;
+	}
+	memcpy(szContainerName, CONTAINER_NAME_LIST, sizeof(CONTAINER_NAME_LIST));
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_OpenContainer(HAPPLICATION hApplication,
+	LPSTR szContainerName,
+	HCONTAINER *phContainer)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_CloseContainer(HCONTAINER hContainer)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_GetContainerType(HCONTAINER hContainer,
+	ULONG *pulContainerType)
+{
+	if (!pulContainerType) {
+		return SAR_INVALIDPARAMERR;
+	}
+	*pulContainerType = CONTAINER_TYPE_ECC;
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ImportCertificate(HCONTAINER hContainer, 
+	BOOL bSignFlag,
+	BYTE *pbCert,
+	ULONG ulCertLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_ExportCertificate(HCONTAINER hContainer,
+	BOOL bSignFlag,
+	BYTE* pbCert,
+	ULONG *pulCertLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenRandom(DEVHANDLE hDev,
+	BYTE *pbRandom,
+	ULONG ulRandomLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_GenExtRSAKey(DEVHANDLE hDev, 
+	ULONG ulBitsLen,
+	RSAPRIVATEKEYBLOB *pBlob)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenRSAKeyPair(HCONTAINER hContainer, 
+	ULONG ulBitsLen,
+	RSAPUBLICKEYBLOB *pBlob)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ImportRSAKeyPair(HCONTAINER hContainer, 
+	ULONG ulSymAlgId,
+	BYTE *pbWrappedKey,
+	ULONG ulWrappedKeyLen,
+	BYTE *pbEncryptedData,
+	ULONG ulEncryptedDataLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_RSASignData(HCONTAINER hContainer, 
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbSignature,
+	ULONG *pulSignLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_RSAVerify(DEVHANDLE hDev, 
+	RSAPUBLICKEYBLOB *pRSAPubKeyBlob,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbSignature,
+	ULONG ulSignLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_RSAExportSessionKey(HCONTAINER hContainer, 
+	ULONG ulAlgId,
+	RSAPUBLICKEYBLOB *pPubKey,
+	BYTE *pbData,
+	ULONG *pulDataLen,
+	HANDLE *phSessionKey)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtRSAPubKeyOperation(DEVHANDLE hDev, 
+	RSAPUBLICKEYBLOB *pRSAPubKeyBlob,
+	BYTE *pbInput,
+	ULONG ulInputLen,
+	BYTE *pbOutput,
+	ULONG *pulOutputLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtRSAPriKeyOperation(DEVHANDLE hDev,
+	RSAPRIVATEKEYBLOB *pRSAPriKeyBlob,
+	BYTE *pbInput,
+	ULONG ulInputLen,
+	BYTE *pbOutput,
+	ULONG *pulOutputLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenECCKeyPair(HCONTAINER hContainer,
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pBlob)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ImportECCKeyPair(HCONTAINER hContainer,
+	PENVELOPEDKEYBLOB pEnvelopedKeyBlob)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ECCSignData(HCONTAINER hContainer,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	PECCSIGNATUREBLOB pSignature)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ECCVerify(DEVHANDLE hDev,
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	PECCSIGNATUREBLOB pSignature)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ECCExportSessionKey(HCONTAINER hContainer, 
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pPubKey,
+	PECCCIPHERBLOB pData,
+	HANDLE *phSessionKey)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtECCEncrypt(DEVHANDLE hDev,
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	BYTE *pbPlainText,
+	ULONG ulPlainTextLen,
+	PECCCIPHERBLOB pCipherText)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtECCDecrypt(DEVHANDLE hDev,
+	ECCPRIVATEKEYBLOB *pECCPriKeyBlob,
+	PECCCIPHERBLOB pCipherText,
+	BYTE *pbPlainText,
+	ULONG *pulPlainTextLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtECCSign(DEVHANDLE hDev, 
+	ECCPRIVATEKEYBLOB *pECCPriKeyBlob,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	PECCSIGNATUREBLOB pSignature)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExtECCVerify(DEVHANDLE hDev, 
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	BYTE *pbData, 
+	ULONG ulDataLen, 
+	PECCSIGNATUREBLOB pSignature)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenerateAgreementDataWithECC(HCONTAINER hContainer,
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pTempECCPubKeyBlob,
+	BYTE *pbID,
+	ULONG ulIDLen,
+	HANDLE *phAgreementHandle)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenerateAgreementDataAndKeyWithECC(HANDLE hContainer, 
+	ULONG ulAlgId,
+	ECCPUBLICKEYBLOB *pSponsorECCPubKeyBlob,
+	ECCPUBLICKEYBLOB *pSponsorTempECCPubKeyBlob,
+	ECCPUBLICKEYBLOB *pTempECCPubKeyBlob,
+	BYTE *pbID,
+	ULONG ulIDLen,
+	BYTE *pbSponsorID,
+	ULONG ulSponsorIDLen,
+	HANDLE *phKeyHandle)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_GenerateKeyWithECC(HANDLE hAgreementHandle,
+	ECCPUBLICKEYBLOB *pECCPubKeyBlob,
+	ECCPUBLICKEYBLOB *pTempECCPubKeyBlob,
+	BYTE *pbID, 
+	ULONG ulIDLen, 
+	HANDLE *phKeyHandle)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ExportPublicKey(HCONTAINER hContainer, 
+	BOOL bSignFlag,
+	BYTE* pbBlob, 
+	ULONG* pulBlobLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_ImportSessionKey(HCONTAINER hContainer, 
+	ULONG ulAlgId,
+	BYTE *pbWrapedData,
+	ULONG ulWrapedLen,
+	HANDLE *phKey)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_SetSymmKey(DEVHANDLE hDev, 
+	BYTE *pbKey,
+	ULONG ulAlgID, 
+	HANDLE *phKey)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_EncryptInit(HANDLE hKey, 
+	BLOCKCIPHERPARAM EncryptParam)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_Encrypt(HANDLE hKey,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbEncryptedData,
+	ULONG *pulEncryptedLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_EncryptUpdate(HANDLE hKey,
+	BYTE *pbData,
+	ULONG ulDataLen, 
+	BYTE *pbEncryptedData, 
+	ULONG *pulEncryptedLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_EncryptFinal(HANDLE hKey,
+	BYTE *pbEncryptedData,
+	ULONG *pulEncryptedDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DecryptInit(HANDLE hKey, 
+	BLOCKCIPHERPARAM DecryptParam)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_Decrypt(HANDLE hKey, 
+	BYTE *pbEncryptedData,
+	ULONG ulEncryptedLen, 
+	BYTE *pbData, 
+	ULONG *pulDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DecryptUpdate(HANDLE hKey, 
+	BYTE *pbEncryptedData,
+	ULONG ulEncryptedLen, 
+	BYTE *pbData, 
+	ULONG *pulDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DecryptFinal(HANDLE hKey, 
+	BYTE *pbDecryptedData,
+	ULONG *pulDecryptedDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DigestInit(DEVHANDLE hDev,
+	ULONG ulAlgID,
+	ECCPUBLICKEYBLOB *pPubKey,
+	BYTE *pucID,
+	ULONG ulIDLen,
+	HANDLE *phHash)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_Digest(HANDLE hHash,
+	BYTE *pbData,
+	ULONG ulDataLen,
+	BYTE *pbHashData,
+	ULONG *pulHashLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DigestUpdate(HANDLE hHash,
+	BYTE *pbData,
+	ULONG ulDataLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_DigestFinal(HANDLE hHash,
+	BYTE *pHashData,
+	ULONG *pulHashLen)
+{
+	return SAR_OK;
+}
+
+ULONG DEVAPI SKF_MacInit(HANDLE hKey, 
+	BLOCKCIPHERPARAM *pMacParam,
+	HANDLE *phMac)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_Mac(HANDLE hMac,
+	BYTE *pbData,
+	ULONG ulDataLen, 
+	BYTE *pbMacData, 
+	ULONG *pulMacLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_MacUpdate(HANDLE hMac, 
+	BYTE *pbData,
+	ULONG ulDataLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_MacFinal(HANDLE hMac, 
+	BYTE *pbMacData,
+	ULONG *pulMacDataLen)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+
+ULONG DEVAPI SKF_CloseHandle(HANDLE hHandle)
+{
+	return SAR_NOTSUPPORTYETERR;
+}
+

crypto/skf/skf_lcl.h

@@ -0,0 +1,135 @@
+/* crypto/skf/skf.h */
+/* ====================================================================
+ * Copyright (c) 2016 The GmSSL Project.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in
+ *    the documentation and/or other materials provided with the
+ *    distribution.
+ *
+ * 3. All advertising materials mentioning features or use of this
+ *    software must display the following acknowledgment:
+ *    "This product includes software developed by the GmSSL Project.
+ *    (http://gmssl.org/)"
+ *
+ * 4. The name "GmSSL Project" must not be used to endorse or promote
+ *    products derived from this software without prior written
+ *    permission. For written permission, please contact
+ *    guanzhi1980@gmail.com.
+ *
+ * 5. Products derived from this software may not be called "GmSSL"
+ *    nor may "GmSSL" appear in their names without prior written
+ *    permission of the GmSSL Project.
+ *
+ * 6. Redistributions of any form whatsoever must retain the following
+ *    acknowledgment:
+ *    "This product includes software developed by the GmSSL Project
+ *    (http://gmssl.org/)"
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
+ * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE GmSSL PROJECT OR
+ * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ * ====================================================================
+ *
+ */
+
+#ifndef HEADER_SKF_H
+#define HEADER_SKF_H
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+
+int EC_KEY_set_ECCPUBLICKEYBLOB(EC_KEY *ec_key, const ECCPUBLICKEYBLOB *blob);
+int EC_KEY_get_ECCPUBLICKEYBLOB(EC_KEY *ec_key, ECCPUBLICKEYBLOB *blob);
+int EC_KEY_set_ECCPRIVATEKEYBLOB(EC_KEY *ec_key, const ECCPRIVATEKEYBLOB *blob)
+int EC_KEY_get_ECCPRIVATEKEYBLOB(EC_KEY *ec_key, ECCPRIVATEKEYBLOB *blob);
+
+int SM2_CIPHERTEXT_VALUE_set_ECCCIPHERBLOB(SM2_CIPHERTEXT_VALUE *cv,
+	const ECCCIPHERBLOB *blob);
+int SM2_CIPHERTEXT_VALUE_get_ECCCIPHERBLOB(const SM2_CIPHERTEXT_VALUE *a,
+	void *out, size_t *outlen);
+int ECDSA_SIG_to_SKF_ECCSIGNATUREBLOB(const ECDSA_SIG *sig,
+	const EC_GROUP *group, void *out, size_t *outlen);
+
+int RSA_set_RSAPUBLICKEYBLOB(RSA *rsa, const RSAPUBLICKEYBLOB *blob);
+int RSA_get_RSAPUBLICKEYBLOB(RSA *rsa, RSAPUBLICKEYBLOB *blob);
+int RSA_set_RSAPRIVATEKEYBLOB(RSA *rsa, const RSAPRIVATEKEYBLOB *blob);
+int RSA_to_RSAPRIVATEKEYBLOB(RSA *rsa, RSAPRIVATEKEYBLOB *blob);
+
+
+
+#define SAR_OK				0x00000000
+#define SAR_FAIL			0x0A000001
+#define SAR_UNKNOWNERR			0x0A000002
+#define SAR_NOTSUPPORTYETERR		0x0A000003
+#define SAR_FILEERR			0x0A000004
+#define SAR_INVALIDHANDLEERR		0x0A000005
+#define SAR_INVALIDPARAMERR		0x0A000006
+#define SAR_READFILEERR			0x0A000007
+#define SAR_WRITEFILEERR		0x0A000008
+#define SAR_NAMELENERR			0x0A000009
+#define SAR_KEYUSAGEERR			0x0A00000A
+#define SAR_MODULUSLENERR		0x0A00000B
+#define SAR_NOTINITIALIZEERR		0x0A00000C
+#define SAR_OBJERR			0x0A00000D
+#define SAR_MEMORYERR			0x0A00000E
+#define SAR_TIMEOUTERR			0x0A00000F
+#define SAR_INDATALENERR		0x0A000010
+#define SAR_INDATAERR			0x0A000011
+#define SAR_GENRANDERR			0x0A000012
+#define SAR_HASHOBJERR			0x0A000013
+#define SAR_HASHERR			0x0A000014
+#define SAR_GENRSAKEYERR		0x0A000015
+#define SAR_RSAMODULUSLENERR		0x0A000016
+#define SAR_CSPIMPRTPUBKEYERR		0x0A000017
+#define SAR_RSAENCERR			0x0A000018
+#define SAR_RSADECERR			0x0A000019
+#define SAR_HASHNOTEQUALERR		0x0A00001A
+#define SAR_KEYNOTFOUNTERR		0x0A00001B
+#define SAR_KEYNOTFOUNDERR		0x0A00001B
+#define SAR_CERTNOTFOUNTERR		0x0A00001C
+#define SAR_NOTEXPORTERR		0x0A00001D
+#define SAR_DECRYPTPADERR		0x0A00001E
+#define SAR_MACLENERR			0x0A00001F
+#define SAR_BUFFER_TOO_SMALL		0x0A000020
+#define SAR_KEYINFOTYPEERR		0x0A000021
+#define SAR_NOT_EVENTERR		0x0A000022
+#define SAR_DEVICE_REMOVED		0x0A000023
+#define SAR_PIN_INCORRECT		0x0A000024
+#define SAR_PIN_LOCKED			0x0A000025
+#define SAR_PIN_INVALID			0x0A000026
+#define SAR_PIN_LEN_RANGE		0x0A000027
+#define SAR_USER_ALREADY_LOGGED_IN	0x0A000028
+#define SAR_USER_PIN_NOT_INITIALIZED	0x0A000029
+#define SAR_USER_TYPE_INVALID		0x0A00002A
+#define SAR_APPLICATION_NAME_INVALID	0x0A00002B
+#define SAR_APPLICATION_EXISTS		0x0A00002C
+#define SAR_USER_NOT_LOGGED_IN		0x0A00002D
+#define SAR_APPLICATION_NOT_EXISTS	0x0A00002E
+#define SAR_FILE_ALREADY_EXIST		0x0A00002F
+#define SAR_NO_ROOM			0x0A000030
+
+
+#ifdef __cplusplus
+}
+#endif
+#endif
+

crypto/skf/skf_types.c

@@ -0,0 +1,285 @@
+#include <stdio.h>
+#include <strings.h>
+#include <openssl/sm2.h>
+#include <openssl/rsa.h>
+#include "skf.h"
+
+int EC_KEY_set_ECCPUBLICKEYBLOB(EC_KEY *ec_key, const ECCPUBLICKEYBLOB *blob)
+{
+	int ret = 0;
+	int nbytes;
+	BIGNUM *x = NULL;
+	BIGNUM *y = NULL;
+
+	if (blob->BitLen != EC_GROUP_get_degree(EC_KEY_get0_group(ec_key))) {
+		return 0;
+	}
+
+	nbytes = (blob->BitLen + 7)/8;
+
+	if (!(x = BN_bin2bn(blob->XCoordinate, nbytes, NULL))) {
+		goto end;
+	}
+	if (!(y = BN_bin2bn(blob->YCoordinate, nbytes, NULL))) {
+		goto end;
+	}
+	if (!EC_KEY_set_public_key_affine_coordinates(ec_key, x, y)) {
+		goto end;
+	}
+
+	ret = 1;
+end:
+	BN_free(x);
+	BN_free(y);
+	return ret;
+}
+
+int EC_KEY_get_ECCPUBLICKEYBLOB(EC_KEY *ec_key, ECCPUBLICKEYBLOB *blob)
+{
+	int ret = 0;
+	int nbytes;
+	BIGNUM *x = NULL;
+	BIGNUM *y = NULL;
+	BN_CTX *bn_ctx = NULL;
+	const EC_GROUP *group = EC_KEY_get0_group(ec_key);
+	const EC_POINT *point = EC_KEY_get0_public_key(ec_key);
+
+	nbytes = (EC_GROUP_get_degree(group) + 7)/8;
+	if (nbyte > ECC_MAX_MODULUS_BITS_LEN/8) {
+		goto end;
+	}
+
+	x = BN_new();
+	y = BN_new();
+	bn_ctx = BN_CTX_new();
+	if (!x || !y || !bn_ctx) {
+		goto end;
+	}
+
+	if (EC_METHOD_get_field_type(EC_GROUP_method_of(group)) == NID_X9_62_prime_field) {
+		if (!EC_POINT_get_affine_coordinates_GFp(group, point, x, y, bn_ctx)) {
+			goto end;
+		}
+	} else  {
+		if (!EC_POINT_get_affine_coordinates_GF2m(group, point, x, y, bn_ctx)) {
+			goto end;
+		}
+	}
+
+	bzero(blob, sizeof(*blob));
+	blob->BitLen = EC_GROUP_get_degree(group);
+	if (!BN_bn2bin(x, blob->XCoordinate + nbytes - BN_num_bytes(x))) {
+		goto end;
+	}
+	if (!BN_bn2bin(y, blob->YCoordinate + nbytes - BN_num_bytes(y))) {
+		goto end;
+	}
+
+	ret = 1;
+end:
+	BN_free(x);
+	BN_free(y);
+	BN_CTX_free(bn_ctx);
+	return ret;
+}
+
+int EC_KEY_set_ECCPRIVATEKEYBLOB(EC_KEY *ec_key, const ECCPRIVATEKEYBLOB *blob)
+{
+	int ret = 0;
+	int nbytes;
+	BIGNUM *d = NULL;
+
+	/* is this corrent ?
+	 * because the key length sometimes will be less than field length
+	 */
+	if (blob->BitLen != EC_GROUP_get_degree(EC_KEY_get0_group(ec_key))) {
+		goto end;
+	}
+
+	nbytes = (blob->BitLen + 7)/8;
+	if (!(d = BN_bin2bn(data->PrivateKey, nbytes, NULL))) {
+		goto end;
+	}
+	if (!EC_KEY_set_private_key(ec_key, d)) {
+		goto end;
+	}
+
+	ret = 1;
+end:
+	BN_clear_free(d);
+	return ret;
+}
+
+int EC_KEY_get_ECCPRIVATEKEYBLOB(EC_KEY *ec_key, ECCPRIVATEKEYBLOB *blob)
+{
+	int ret = 0;
+	int nbytes;
+	BIGNUM *order = BN_new();
+	BIGNUM *d = EC_KEY_get0_private_key(ec_key);
+
+	if (!order) {
+		goto end;
+	}
+
+	if (!d) {
+		goto end;
+	}
+
+	
+
+	if (!EC_GROUP_get_order(EC_KEY_get0_group(ec_key), order, NULL)) {
+		goto end;
+	}
+
+	nbytes = BN_num_bytes(order);
+	if (nbytes > ECC_MAX_MODULUS_BITS_LEN/8) {
+		goto end;
+	}
+
+	BN_bn2bin(d, blob->PrivateKey + nbytes - BN_num_bytes(d));
+
+	ret = 1;
+
+end:
+	BN_free(order);
+	return ret;	
+}
+
+int SM2_CIPHERTEXT_VALUE_set_ECCCIPHERBLOB(SM2_CIPHERTEXT_VALUE *cv,
+	const ECCCIPHERBLOB *blob)
+{
+	SM2_CIPHERTEXT_VALUE *ret = NULL;		
+	const ECCCIPHERBLOB *data = (const ECCCIPHERBLOB *)blob;
+	BIGNUM *x = NULL;
+	BIGNUM *y = NULL;
+	
+	if (bloblen < sizeof(ECCCIPHERBLOB)) {
+		goto end;
+	}
+
+	if (!(ret = OPENSSL_malloc(sizeof(SM2_CIPHERTEXT_VALUE)))) {
+		goto end;
+	}
+}
+
+int SM2_CIPHERTEXT_VALUE_get_ECCCIPHERBLOB(const SM2_CIPHERTEXT_VALUE *a,
+	void *out, size_t *outlen)
+{
+	int ret = 0;
+	BIGNUM *x = NULL;
+	BIGNUM *y = NULL;
+	
+
+	return 0;
+}
+
+ECDSA_SIG *ECDSA_SIG_new_from_SKF_ECCSIGNATUREBLOB(
+	const EC_GROUP *group, const void *blob, size_t bloblen)
+{
+	ECDSA_SIG *ret = NULL;
+	int bnlen;
+	const ECCSIGNATUREBLOB *data = blob;
+
+	if (bloblen != sizeof(ECCSIGNATUREBLOB)) {
+		return NULL;
+	}
+
+	bnlen = (EC_GROUP_get_degree(group) + 7)/8;
+
+	if (!(ret = ECDSA_SIG_new())) {
+		return NULL;
+	}
+
+	ret->r = BN_bin2bn(data->r, bnlen, NULL);
+	ret->s = BN_bin2bn(data->s, bnlen, NULL);
+
+	return ret;
+}
+
+int ECDSA_SIG_to_SKF_ECCSIGNATUREBLOB(const ECDSA_SIG *sig,
+	const EC_GROUP *group, void *out, size_t *outlen)
+{
+	int bnlen;
+	ECCSIGNATUREBLOB *data = out;
+
+	if (!out) {
+		if (!outlen) {
+			return 0;
+		}
+		*outlen = sizeof(ECCSIGNATUREBLOB);
+		return 1;
+	}
+	
+	bnlen = (EC_GROUP_get_degree(group) + 7)/8;
+	*outlen = sizeof(ECCSIGNATUREBLOB);
+	
+	BN_bn2bin(sig->r, data->r + bnlen - BN_num_bytes(sig->r));
+	BN_bn2bin(sig->s, data->s + bnlen - BN_num_bytes(sig->s));
+
+	return 1;
+}
+
+int RSA_set_RSAPUBLICKEYBLOB(RSA *rsa, const RSAPUBLICKEYBLOB *blob)
+{
+	int ret = 0;
+
+	if (!(rsa->n = BN_bin2bn(blob->Modulus, blob->BitLen/8, NULL))) {
+		goto end;
+	}
+	if (!(rsa->e = BN_bin2bn(blob->PublicExponent, blob->BitLen/8, NULL))) {
+		goto end;
+	}
+	if (!RSA_check_key(rsa)) {
+		goto end;
+	}
+
+end:
+	return ret;
+}
+
+int RSA_get_RSAPUBLICKEYBLOB(RSA *rsa, RSAPUBLICKEYBLOB *blob)
+{
+	int ret = 0;
+	int nbytes;
+
+	if (!rsa->n || !rsa->e) {
+		goto end;
+	}
+
+	nbytes = BN_num_bytes(rsa->n);
+
+	BN_bn2bin(rsa->n, blob->Modulus + bnlen - BN_num_bytes(rsa->n));
+	BN_bn2bin(rsa->e, blob->PublicExponent + bnlen - BN_num_bytes(rsa->e));
+
+	return ret;
+}
+
+int RSA_set_RSAPRIVATEKEYBLOB(RSA *rsa, const RSAPRIVATEKEYBLOB *blob)
+{
+	int ret = 0;
+
+	if (!blob->AlgID) {
+		goto end;
+	}
+	if (!blob->BitLen) {
+		goto end;
+	}
+
+	rsa->n = BN_bin2bn(blob->Modulus, MAX_RSA_MODULUS_LEN, NULL);
+	rsa->e = BN_bin2bn(blob->PublicExponent, MAX_RSA_EXPONENT_LEN, NULL);
+	rsa->d = BN_bin2bn(blob->Prime1, bnlen, NULL);
+	rsa->p = BN_bin2bn(blob->Prime2, bnlen, NULL);
+	rsa->dmp1 = BN_bin2bn(blob->Prime1Exponent, bnlen, NULL);
+	rsa->dmq1 = BN_bin2bn(blob->Prime2Exponent, bnlen, NULL);
+	rsa->iqmp = BN_bin2bn(blob->Coefficient, bnlen, NULL);
+
+}
+
+int RSA_get_RSAPRIVATEKEYBLOB(RSA *rsa, RSAPRIVATEKEYBLOB *blob)
+{
+	int ret = 0;
+	RSAPRIVATEKEYBLOB *blob = out;
+	
+	return ret;
+}
+

crypto/skf/skftest.c

@@ -0,0 +1,260 @@
+/* engines/skf/skftest.c */
+/* ====================================================================
+ * Copyright (c) 2015-2016 The GmSSL Project.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in
+ *    the documentation and/or other materials provided with the
+ *    distribution.
+ *
+ * 3. All advertising materials mentioning features or use of this
+ *    software must display the following acknowledgment:
+ *    "This product includes software developed by the GmSSL Project.
+ *    (http://gmssl.org/)"
+ *
+ * 4. The name "GmSSL Project" must not be used to endorse or promote
+ *    products derived from this software without prior written
+ *    permission. For written permission, please contact
+ *    guanzhi1980@gmail.com.
+ *
+ * 5. Products derived from this software may not be called "GmSSL"
+ *    nor may "GmSSL" appear in their names without prior written
+ *    permission of the GmSSL Project.
+ *
+ * 6. Redistributions of any form whatsoever must retain the following
+ *    acknowledgment:
+ *    "This product includes software developed by the GmSSL Project
+ *    (http://gmssl.org/)"
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
+ * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE GmSSL PROJECT OR
+ * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ * ====================================================================
+ *
+ */
+
+
+#include <stdio.h>
+#include <string.h>
+#include <stdlib.h>
+#include <assert.h>
+#include "skf.h"
+
+#define AUTH_RAND_LEN		16
+#define AUTH_DATA_LEN		16
+#define AUTH_KEY_LEN		16
+
+int main(int argc, char **argv)
+{
+	ULONG rv;
+	BYTE buf[2048];
+	ULONG len;
+
+	BOOL bPresent = TRUE;
+	CHAR devNameList[256];
+	LPSTR devName;
+	DEVHANDLE hDev = NULL;
+	ULONG devState;
+	char *devStateStr;
+	DEVINFO devInfo;
+
+	BYTE authRand[AUTH_RAND_LEN];
+	BYTE authData[AUTH_DATA_LEN];
+	BYTE authKey[AUTH_KEY_LEN];
+	BLOCKCIPHERPARAM authParam;
+	HANDLE hAuthKey = NULL;
+
+	CHAR appNameList[256];
+	LPSTR appName;
+	HAPPLICATION hApp = NULL;
+
+	CHAR containerNameList[256];
+	LPSTR containerName; 
+	HCONTAINER hContainer = NULL;
+	ULONG containerType;
+	char *containerTypeStr;
+
+	BYTE dgst[32];
+	ULONG dgstLen = sizeof(dgst);
+	ECCSIGNATUREBLOB sigblob;
+
+
+	len = sizeof(devNameList);
+	if ((rv = SKF_EnumDev(bPresent, devNameList, &len)) != SAR_OK) {
+		goto end;
+	}
+
+	devName = devNameList;
+	printf("Device Name : %s\n", devName);
+
+	if ((rv = SKF_GetDevState(devName, &devState)) != SAR_OK) {
+		goto end;
+	}
+
+	switch (devState) {
+	case DEV_ABSENT_STATE:
+		devStateStr = "DEV_ABSENT_STATE";
+		break;
+	case DEV_PRESENT_STATE:
+		devStateStr = "DEV_PRESENT_STATE";
+		break;
+	case DEV_UNKNOW_STATE:
+		devStateStr = "DEV_UNKNOW_STATE";
+		break;
+	default:
+		devStateStr = "(undefined)";	
+	}
+	printf("Device State: %s\n", devStateStr);
+
+	if ((rv = SKF_ConnectDev(devName, &hDev)) != SAR_OK) {
+		goto end;
+	}
+
+	if ((rv = SKF_GetDevInfo(hDev, &devInfo)) != SAR_OK) {
+		goto end;
+	}
+
+	printf("Device Info:\n");
+	printf(" Device Version   : %d.%d\n", devInfo.Version.major, devInfo.Version.minor);
+	printf(" Manufacturer     : %s\n", devInfo.Manufacturer);
+	printf(" Issuer           : %s\n", devInfo.Issuer);
+	printf(" Label            : %s\n", devInfo.Label);
+	printf(" Serial Number    : %s\n", devInfo.SerialNumber);
+	printf(" Hardware Version : %d.%d\n", devInfo.HWVersion.major, devInfo.HWVersion.minor);
+	printf(" Firmware Version : %d.%d\n", devInfo.FirmwareVersion.major, devInfo.FirmwareVersion.minor);
+	printf(" AlgSymCap        : 0x%08x\n", devInfo.AlgSymCap);
+	printf(" AlgAsymCap       : 0x%08x\n", devInfo.AlgAsymCap);
+	printf(" AlgHashCap       : 0x%08x\n", devInfo.AlgHashCap);
+	printf(" AlgHashCap       : 0x%08x\n", devInfo.DevAuthAlgId);
+	printf(" Total Space      : %u\n", devInfo.TotalSpace);
+	printf(" Free Space       : %u\n", devInfo.FreeSpace);
+	printf(" MaxECCBuffer     : %u\n", devInfo.MaxECCBufferSize);
+	printf(" MaxBuffer        : %u\n", devInfo.MaxBufferSize);
+
+
+	/* Device Authentication */
+	if ((rv = SKF_GenRandom(hDev, authRand, sizeof(authRand))) != SAR_OK) {
+		fprintf(stderr, "error: %s %d\n", __FILE__, __LINE__);
+		goto end;
+	}
+
+	if ((rv = SKF_SetSymmKey(hDev, authKey, devInfo.DevAuthAlgId, &hAuthKey)) != SAR_OK) {
+		fprintf(stderr, "error: %s %d\n", __FILE__, __LINE__);
+		goto end;
+	}
+
+	bzero(&authParam, sizeof(authParam));
+	if ((rv = SKF_EncryptInit(hAuthKey, authParam)) != SAR_OK) {
+		fprintf(stderr, "error: %s %d\n", __FILE__, __LINE__);
+		goto end;
+	}
+
+	if ((rv = SKF_Encrypt(hAuthKey, authRand, sizeof(authRand), authData, &len)) != SAR_OK) {
+		fprintf(stderr, "error: %s %d\n", __FILE__, __LINE__);
+		goto end;
+	}
+
+	if ((rv = SKF_DevAuth(hDev, authData, len)) != SAR_OK) {
+		fprintf(stderr, "error: %s %d\n", __FILE__, __LINE__);
+		goto end;
+	}
+	
+	printf("Device Authentication Passed.\n");
+
+	/* Open Application */
+
+	len = sizeof(appNameList);		
+
+	if ((rv = SKF_EnumApplication(hDev, appNameList, &len)) != SAR_OK) {
+		goto end;
+	}
+
+	appName = appNameList;
+	printf("Application Name : %s\n", appName);
+
+	if ((rv = SKF_OpenApplication(hDev, appName, &hApp)) != SAR_OK) {
+		goto end;
+	}
+
+	/* Open Containter */	
+
+	len = sizeof(containerNameList);
+
+	if ((rv = SKF_EnumContainer(hApp, containerNameList, &len)) != SAR_OK) {
+		goto end;
+	}
+
+	containerName = containerNameList;
+	printf("Container Name: %s\n", containerName);
+
+	if ((rv = SKF_OpenContainer(hApp, containerName, &hContainer)) != SAR_OK) {
+		goto end;
+	}
+
+	if ((rv = SKF_GetContainerType(hContainer, &containerType)) != SAR_OK) {
+		goto end;
+	}
+
+	switch (containerType) {
+	case CONTAINER_TYPE_UNDEF:
+		containerTypeStr = "Undef";
+		break;
+	case CONTAINER_TYPE_RSA:
+		containerTypeStr = "RSA";
+		break;
+	case CONTAINER_TYPE_ECC:
+		containerTypeStr = "ECC";
+		break;
+	default:
+		containerTypeStr = "(error)";
+	}		
+	printf("Container Type: %s\n", containerTypeStr);
+
+
+	/* Sign */
+	if ((rv = SKF_ECCSignData(hContainer, dgst, dgstLen, &sigblob)) != SAR_OK) {
+		goto end;
+	}
+
+	/* Export Signing Public Key */
+	if ((rv = SKF_ExportPublicKey(hContainer, TRUE, buf, &len)) != SAR_OK) {
+		goto end;
+	}
+
+	printf("Success\n");
+end:
+	//SKF_CloseContainer(hContainer);
+	//SKF_CloseApplication(hApp);
+	return 0;
+}
+
+int open_container(const char *dev, const char *app, const char *container,
+	const unsigned char *authkey, size_t authkeylen)
+{
+	DEVHANDLE hDev = NULL;
+	DEVINFO devInfo;
+	HAPPLICATION hApp = NULL;
+	HCONTAINER hContainer = NULL;
+
+	
+
+	return 0;
+}
+
+