mirror of
https://github.com/guanzhi/GmSSL.git
synced 2026-06-17 02:14:01 +08:00
first step of v2 final release
This commit is contained in:
Zhi Guan
@@ -1,2 +1,2 @@
|
||||
LIBS=../../libcrypto
|
||||
SOURCE[../../libcrypto]=sdf_err.c sdf_lib.c sdf_meth.c
|
||||
SOURCE[../../libcrypto]=sdf_err.c sdf_lib.c sdf_ext.c sdf_meth.c sdf_sansec.c
|
||||
|
||||
@@ -19,6 +19,8 @@
|
||||
# define ERR_REASON(reason) ERR_PACK(ERR_LIB_SDF,0,reason)
|
||||
|
||||
static ERR_STRING_DATA SDF_str_functs[] = {
|
||||
{ERR_FUNC(SDF_F_SANSEC_DECODE_ECCCIPHER), "sansec_decode_ecccipher"},
|
||||
{ERR_FUNC(SDF_F_SANSEC_ENCODE_ECCCIPHER), "sansec_encode_ecccipher"},
|
||||
{ERR_FUNC(SDF_F_SDF_CALCULATEMAC), "SDF_CalculateMAC"},
|
||||
{ERR_FUNC(SDF_F_SDF_CLOSEDEVICE), "SDF_CloseDevice"},
|
||||
{ERR_FUNC(SDF_F_SDF_CLOSESESSION), "SDF_CloseSession"},
|
||||
@@ -78,7 +80,8 @@ static ERR_STRING_DATA SDF_str_functs[] = {
|
||||
"SDF_InternalPublicKeyOperation_RSA"},
|
||||
{ERR_FUNC(SDF_F_SDF_INTERNALSIGN_ECC), "SDF_InternalSign_ECC"},
|
||||
{ERR_FUNC(SDF_F_SDF_INTERNALVERIFY_ECC), "SDF_InternalVerify_ECC"},
|
||||
{ERR_FUNC(SDF_F_SDF_METHOD_LOAD_LIBRARY), "SDF_METHOD_LOAD_LIBRARY"},
|
||||
{ERR_FUNC(SDF_F_SDF_LOADLIBRARY), "SDF_LoadLibrary"},
|
||||
{ERR_FUNC(SDF_F_SDF_METHOD_LOAD_LIBRARY), "SDF_METHOD_load_library"},
|
||||
{ERR_FUNC(SDF_F_SDF_OPENDEVICE), "SDF_OpenDevice"},
|
||||
{ERR_FUNC(SDF_F_SDF_OPENSESSION), "SDF_OpenSession"},
|
||||
{ERR_FUNC(SDF_F_SDF_READFILE), "SDF_ReadFile"},
|
||||
@@ -89,17 +92,166 @@ static ERR_STRING_DATA SDF_str_functs[] = {
|
||||
};
|
||||
|
||||
static ERR_STRING_DATA SDF_str_reasons[] = {
|
||||
{ERR_REASON(SDF_R_ALGORITHM_MODE_NOT_SUPPORTED),
|
||||
"algorithm mode not supported"},
|
||||
{ERR_REASON(SDF_R_ALGORITHM_NOT_SUPPORTED), "algorithm not supported"},
|
||||
{ERR_REASON(SDF_R_BUFFER_TOO_SMALL), "buffer too small"},
|
||||
{ERR_REASON(SDF_R_COMMUNICATION_FAILURE), "communication failure"},
|
||||
{ERR_REASON(SDF_R_DSO_LOAD_FAILURE), "dso load failure"},
|
||||
{ERR_REASON(SDF_R_ENCRYPT_DATA_ERROR), "encrypt data error"},
|
||||
{ERR_REASON(SDF_R_ERROR), "error"},
|
||||
{ERR_REASON(SDF_R_FILE_ALREADY_EXIST), "file already exist"},
|
||||
{ERR_REASON(SDF_R_FILE_NOT_EXIST), "file not exist"},
|
||||
{ERR_REASON(SDF_R_HARDWARE_ERROR), "hardware error"},
|
||||
{ERR_REASON(SDF_R_INVALID_CIPHER_ALGOR), "invalid cipher algor"},
|
||||
{ERR_REASON(SDF_R_INVALID_DIGEST_ALGOR), "invalid digest algor"},
|
||||
{ERR_REASON(SDF_R_INVALID_FILE_OFFSET), "invalid file offset"},
|
||||
{ERR_REASON(SDF_R_INVALID_FILE_SIZE), "invalid file size"},
|
||||
{ERR_REASON(SDF_R_INVALID_INPUT_ARGUMENT), "invalid input argument"},
|
||||
{ERR_REASON(SDF_R_INVALID_KEY), "invalid key"},
|
||||
{ERR_REASON(SDF_R_INVALID_KEY_LENGTH), "invalid key length"},
|
||||
{ERR_REASON(SDF_R_INVALID_KEY_TYPE), "invalid key type"},
|
||||
{ERR_REASON(SDF_R_INVALID_OUTPUT_ARGUMENT), "invalid output argument"},
|
||||
{ERR_REASON(SDF_R_INVALID_SANSEC_ECCCIPHER_LENGTH),
|
||||
"invalid sansec ecccipher length"},
|
||||
{ERR_REASON(SDF_R_INVALID_SDF_LIBRARY), "invalid sdf library"},
|
||||
{ERR_REASON(SDF_R_INVALID_SESSION_HANDLE), "invalid session handle"},
|
||||
{ERR_REASON(SDF_R_KEY_NOT_EXIST), "key not exist"},
|
||||
{ERR_REASON(SDF_R_LOAD_LIBRARY_FAILURE), "load library failure"},
|
||||
{ERR_REASON(SDF_R_MAC_ERROR), "mac error"},
|
||||
{ERR_REASON(SDF_R_METHOD_OPERATION_FAILURE), "method operation failure"},
|
||||
{ERR_REASON(SDF_R_MULTI_STEP_OPERATION_ERROR),
|
||||
"multi step operation error"},
|
||||
{ERR_REASON(SDF_R_NOT_INITIALIZED), "not initialized"},
|
||||
{ERR_REASON(SDF_R_NOT_SUPPORTED), "not supported"},
|
||||
{ERR_REASON(SDF_R_NOT_SUPPORTED_CIPHER_ALGOR),
|
||||
"not supported cipher algor"},
|
||||
{ERR_REASON(SDF_R_NOT_SUPPORTED_DIGEST_ALGOR),
|
||||
"not supported digest algor"},
|
||||
{ERR_REASON(SDF_R_NOT_SUPPORTED_ECC_ALGOR), "not supported ecc algor"},
|
||||
{ERR_REASON(SDF_R_NOT_SUPPORTED_PKEY_ALGOR), "not supported pkey algor"},
|
||||
{ERR_REASON(SDF_R_NO_PRIVATE_KEY_ACCESS_RIGHT),
|
||||
"no private key access right"},
|
||||
{ERR_REASON(SDF_R_OPEN_DEVICE_FAILURE), "open device failure"},
|
||||
{ERR_REASON(SDF_R_OPEN_SESSION_FAILURE), "open session failure"},
|
||||
{ERR_REASON(SDF_R_OPERATION_FAILED), "operation failed"},
|
||||
{ERR_REASON(SDF_R_OPERATION_NOT_SUPPORTED), "operation not supported"},
|
||||
{ERR_REASON(SDF_R_PRIVATE_KEY_OPERATION_FAILURE),
|
||||
"private key operation failure"},
|
||||
{ERR_REASON(SDF_R_PRKERR), "prkerr"},
|
||||
{ERR_REASON(SDF_R_PUBLIC_KEY_OPERATION_FAILURE),
|
||||
"public key operation failure"},
|
||||
{ERR_REASON(SDF_R_RANDOM_GENERATION_ERROR), "random generation error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_BASE), "sansec base"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_ALGOR_NOT_SUPPORTED),
|
||||
"sansec card algor not supported"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_ALG_MODE_NOT_SUPPORTED),
|
||||
"sansec card alg mode not supported"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_BASE), "sansec card base"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_BUFFER_TOO_SMALL),
|
||||
"sansec card buffer too small"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_COMMMUCATION_FAILED),
|
||||
"sansec card commmucation failed"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_CRYPTO_NOT_INITED),
|
||||
"sansec card crypto not inited"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_DATA_PADDING_ERROR),
|
||||
"sansec card data padding error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_DATA_SIZE), "sansec card data size"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_DEVICE_STATUS_ERROR),
|
||||
"sansec card device status error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_DEVICE_STATUS_ERROR_05),
|
||||
"sansec card device status error 05"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_FILE_NOT_EXIST),
|
||||
"sansec card file not exist"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_FILE_OFFSET_ERROR),
|
||||
"sansec card file offset error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_FILE_SIZE_ERROR),
|
||||
"sansec card file size error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_HARDWARE_FAILURE),
|
||||
"sansec card hardware failure"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_KEY_ERROR), "sansec card key error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_KEY_NOT_EXIST),
|
||||
"sansec card key not exist"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_KEY_TYPE_ERROR),
|
||||
"sansec card key type error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_LOGIN_ERROR), "sansec card login error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_LOGIN_ERROR_05),
|
||||
"sansec card login error 05"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_MANAGEMENT_DENYED),
|
||||
"sansec card management denyed"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_MANAGEMENT_DENYED_05),
|
||||
"sansec card management denyed 05"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_NOT_SUPPORTED),
|
||||
"sansec card not supported"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_OPEN_DEVICE_FAILED),
|
||||
"sansec card open device failed"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_OPEN_SESSION_FAILED),
|
||||
"sansec card open session failed"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_OPERATION_DENYED),
|
||||
"sansec card operation denyed"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_OPERATION_DENYED_05),
|
||||
"sansec card operation denyed 05"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_PARAMENT_ERROR),
|
||||
"sansec card parament error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_PARAMENT_ERROR_05),
|
||||
"sansec card parament error 05"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_PRIVATE_KEY_ACCESS_DENYED),
|
||||
"sansec card private key access denyed"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_PRIVATE_KEY_OPERATION_ERROR),
|
||||
"sansec card private key operation error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_PUBLIC_KEY_OPERATION_ERROR),
|
||||
"sansec card public key operation error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_READER_BASE), "sansec card reader base"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_READER_CARD_INSERT),
|
||||
"sansec card reader card insert"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_READER_CARD_INSERT_TYPE),
|
||||
"sansec card reader card insert type"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_READER_NO_CARD),
|
||||
"sansec card reader no card"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_READER_PIN_ERROR),
|
||||
"sansec card reader pin error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_SIGN_ERROR), "sansec card sign error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_STEP_ERROR), "sansec card step error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_SYMMETRIC_ALGOR_ERROR),
|
||||
"sansec card symmetric algor error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_UNKNOW_ERROR), "sansec card unknow error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_USERID_ERROR), "sansec card userid error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_USERID_ERROR_05),
|
||||
"sansec card userid error 05"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CARD_VERIFY_ERROR), "sansec card verify error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CONFIG_ERROR), "sansec config error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_CONNECT_ERROR), "sansec connect error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_FILE_ALREADY_EXIST),
|
||||
"sansec file already exist"},
|
||||
{ERR_REASON(SDF_R_SANSEC_INVALID_AUTHENCODE),
|
||||
"sansec invalid authencode"},
|
||||
{ERR_REASON(SDF_R_SANSEC_INVALID_COMMAND), "sansec invalid command"},
|
||||
{ERR_REASON(SDF_R_SANSEC_INVALID_PARAMETERS),
|
||||
"sansec invalid parameters"},
|
||||
{ERR_REASON(SDF_R_SANSEC_INVALID_USER), "sansec invalid user"},
|
||||
{ERR_REASON(SDF_R_SANSEC_NO_AVAILABLE_CSM), "sansec no available csm"},
|
||||
{ERR_REASON(SDF_R_SANSEC_NO_AVAILABLE_HSM), "sansec no available hsm"},
|
||||
{ERR_REASON(SDF_R_SANSEC_PROTOCOL_VERSION_ERROR),
|
||||
"sansec protocol version error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_SEM_TIMEOUT), "sansec sem timeout"},
|
||||
{ERR_REASON(SDF_R_SANSEC_SET_SOCKET_OPTION_ERROR),
|
||||
"sansec set socket option error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_SOCKET_RECV_0), "sansec socket recv 0"},
|
||||
{ERR_REASON(SDF_R_SANSEC_SOCKET_RECV_ERROR), "sansec socket recv error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_SOCKET_SEND_ERROR), "sansec socket send error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_SOCKET_TIMEOUT), "sansec socket timeout"},
|
||||
{ERR_REASON(SDF_R_SANSEC_SYNC_ERROR), "sansec sync error"},
|
||||
{ERR_REASON(SDF_R_SANSEC_SYNC_LOGIN_ERROR), "sansec sync login error"},
|
||||
{ERR_REASON(SDF_R_SDF_METHOD_RETURN_FAILURE),
|
||||
"sdf method return failure"},
|
||||
{ERR_REASON(SDF_R_SDF_OPERATION_FAILED), "sdf operation failed"},
|
||||
{ERR_REASON(SDF_R_SIGNING_FAILURE), "signing failure"},
|
||||
{ERR_REASON(SDF_R_SUCCESS), "success"},
|
||||
{ERR_REASON(SDF_R_SYMMETRIC_OPERATION_FAILURE),
|
||||
"symmetric operation failure"},
|
||||
{ERR_REASON(SDF_R_UNNOWN_ERROR), "unnown error"},
|
||||
{ERR_REASON(SDF_R_VERIFICATION_FAILURE), "verification failure"},
|
||||
{ERR_REASON(SDF_R_WRITE_FILE_FAILURE), "write file failure"},
|
||||
{0, NULL}
|
||||
};
|
||||
|
||||
|
||||
304
crypto/sdf/sdf_ext.c
Normal file
304
crypto/sdf/sdf_ext.c
Normal file
@@ -0,0 +1,304 @@
|
||||
/* ====================================================================
|
||||
* Copyright (c) 2016 - 2017 The GmSSL Project. All rights reserved.
|
||||
*
|
||||
* Redistribution and use in source and binary forms, with or without
|
||||
* modification, are permitted provided that the following conditions
|
||||
* are met:
|
||||
*
|
||||
* 1. Redistributions of source code must retain the above copyright
|
||||
* notice, this list of conditions and the following disclaimer.
|
||||
*
|
||||
* 2. Redistributions in binary form must reproduce the above copyright
|
||||
* notice, this list of conditions and the following disclaimer in
|
||||
* the documentation and/or other materials provided with the
|
||||
* distribution.
|
||||
*
|
||||
* 3. All advertising materials mentioning features or use of this
|
||||
* software must display the following acknowledgment:
|
||||
* "This product includes software developed by the GmSSL Project.
|
||||
* (http://gmssl.org/)"
|
||||
*
|
||||
* 4. The name "GmSSL Project" must not be used to endorse or promote
|
||||
* products derived from this software without prior written
|
||||
* permission. For written permission, please contact
|
||||
* guanzhi1980@gmail.com.
|
||||
*
|
||||
* 5. Products derived from this software may not be called "GmSSL"
|
||||
* nor may "GmSSL" appear in their names without prior written
|
||||
* permission of the GmSSL Project.
|
||||
*
|
||||
* 6. Redistributions of any form whatsoever must retain the following
|
||||
* acknowledgment:
|
||||
* "This product includes software developed by the GmSSL Project
|
||||
* (http://gmssl.org/)"
|
||||
*
|
||||
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
|
||||
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
||||
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
|
||||
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
||||
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
||||
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
||||
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
||||
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
||||
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
* ====================================================================
|
||||
*/
|
||||
|
||||
#include <string.h>
|
||||
#include <openssl/err.h>
|
||||
#include <openssl/gmsdf.h>
|
||||
#include "internal/sdf_int.h"
|
||||
#include "../../e_os.h"
|
||||
|
||||
|
||||
|
||||
static void print_str(const char *name, const void *value)
|
||||
{
|
||||
(void)printf("%-20s: %s\n", name, (char *)value);
|
||||
}
|
||||
|
||||
static void print_int(const char *name, unsigned int value)
|
||||
{
|
||||
(void)printf("%-20s: %u\n", name, value);
|
||||
}
|
||||
|
||||
/*
|
||||
static void print_buf(const char *name, const unsigned char *buf, size_t buflen)
|
||||
{
|
||||
size_t i;
|
||||
(void)printf("%-20s: ", name);
|
||||
for (i = 0; i < buflen; i++) {
|
||||
(void)printf("%02x", buf[i]);
|
||||
}
|
||||
(void)puts("\n");
|
||||
}
|
||||
*/
|
||||
|
||||
typedef struct {
|
||||
ULONG id;
|
||||
char *name;
|
||||
} table_item_t;
|
||||
|
||||
static table_item_t sdf_cipher_caps[] = {
|
||||
{ SGD_SM1_ECB, "sm1-ecb" },
|
||||
{ SGD_SM1_CBC, "sm1-cbc" },
|
||||
{ SGD_SM1_CFB, "sm1-cfb" },
|
||||
{ SGD_SM1_OFB, "sm1-ofb128" },
|
||||
{ SGD_SM1_MAC, "cbcmac-sm1" },
|
||||
{ SGD_SSF33_ECB, "ssf33-ecb" },
|
||||
{ SGD_SSF33_CBC, "ssf33-cbc" },
|
||||
{ SGD_SSF33_CFB, "ssf33-cfb" },
|
||||
{ SGD_SSF33_OFB, "ssf33-ofb128" },
|
||||
{ SGD_SSF33_MAC, "cbcmac-ssf33" },
|
||||
{ SGD_SM4_ECB, "sms4-ecb" },
|
||||
{ SGD_SM4_CBC, "sms4-cbc" },
|
||||
{ SGD_SM4_CFB, "sms4-cfb" },
|
||||
{ SGD_SM4_OFB, "sms4-ofb128" },
|
||||
{ SGD_SM4_MAC, "cbcmac-sms4" },
|
||||
{ SGD_ZUC_EEA3, "zuc_128eea3" },
|
||||
{ SGD_ZUC_EIA3, "zuc_128eia3" }
|
||||
};
|
||||
|
||||
static table_item_t sdf_digest_caps[] = {
|
||||
{ SGD_SM3, "sm3" },
|
||||
{ SGD_SHA1, "sha1" },
|
||||
{ SGD_SHA256, "sha256" },
|
||||
};
|
||||
|
||||
static table_item_t sdf_pkey_caps[] = {
|
||||
{ SGD_RSA_SIGN, "rsa" },
|
||||
{ SGD_RSA_ENC, "rsaEncryption" },
|
||||
{ SGD_SM2_1, "sm2sign" },
|
||||
{ SGD_SM2_2, "sm2exchange" },
|
||||
{ SGD_SM2_3, "sm2encrypt" }
|
||||
};
|
||||
|
||||
int SDF_PrintDeviceInfo(DEVICEINFO *pstDeviceInfo)
|
||||
{
|
||||
int i, n;
|
||||
DEVICEINFO buf;
|
||||
DEVICEINFO *devInfo = &buf;
|
||||
|
||||
memcpy(devInfo, pstDeviceInfo, sizeof(DEVICEINFO));
|
||||
devInfo->IssuerName[39] = 0;
|
||||
devInfo->DeviceName[15] = 0;
|
||||
devInfo->DeviceSerial[15] = 0;
|
||||
|
||||
print_str(" Issuer", devInfo->IssuerName);
|
||||
print_str(" Device Name", devInfo->DeviceName);
|
||||
print_str(" Serial Number", devInfo->DeviceSerial);
|
||||
print_int(" Hardware Version", devInfo->DeviceVersion);
|
||||
print_int(" Standard Version", devInfo->StandardVersion);
|
||||
printf("%-20s: ", " Public Key Algors");
|
||||
for (i = n = 0; i < OSSL_NELEM(sdf_pkey_caps); i++) {
|
||||
if ((devInfo->AsymAlgAbility[0] & sdf_pkey_caps[i].id) ==
|
||||
sdf_pkey_caps[i].id) {
|
||||
printf("%s%s", n ? ", " : "", sdf_pkey_caps[i].name);
|
||||
n++;
|
||||
}
|
||||
}
|
||||
printf("\n");
|
||||
|
||||
printf("%-20s: ", " Ciphers");
|
||||
for (i = n = 0; i < OSSL_NELEM(sdf_cipher_caps); i++) {
|
||||
if ((devInfo->SymAlgAbility & sdf_cipher_caps[i].id) ==
|
||||
sdf_cipher_caps[i].id) {
|
||||
printf("%s%s", n ? ", " : "", sdf_cipher_caps[i].name);
|
||||
n++;
|
||||
}
|
||||
}
|
||||
printf("\n");
|
||||
|
||||
printf("%-20s: ", " Digests");
|
||||
for (i = n = 0; i < OSSL_NELEM(sdf_digest_caps); i++) {
|
||||
if ((devInfo->HashAlgAbility & sdf_digest_caps[i].id) ==
|
||||
sdf_digest_caps[i].id) {
|
||||
printf("%s%s", n ? ", " : "", sdf_digest_caps[i].name);
|
||||
n++;
|
||||
}
|
||||
}
|
||||
printf("\n");
|
||||
|
||||
|
||||
return SDR_OK;
|
||||
}
|
||||
|
||||
int SDF_PrintRSAPublicKey(RSArefPublicKey *blob)
|
||||
{
|
||||
BIO *bio = NULL;
|
||||
|
||||
if (!(bio = BIO_new_fp(stdout, BIO_NOCLOSE))) {
|
||||
return SDR_UNKNOWERR;
|
||||
}
|
||||
|
||||
(void)BIO_printf(bio, "bits: %d\n", blob->bits);
|
||||
(void)BIO_printf(bio, "m:\n ");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->m, sizeof(blob->m));
|
||||
(void)BIO_printf(bio, "\n");
|
||||
(void)BIO_printf(bio, "e:\n ");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->e, sizeof(blob->e));
|
||||
(void)BIO_printf(bio, "\n");
|
||||
|
||||
BIO_free(bio);
|
||||
return SDR_OK;
|
||||
}
|
||||
|
||||
int SDF_PrintRSAPrivateKey(RSArefPrivateKey *blob)
|
||||
{
|
||||
BIO *bio = NULL;
|
||||
|
||||
if (!(bio = BIO_new_fp(stdout, BIO_NOCLOSE))) {
|
||||
return SDR_UNKNOWERR;
|
||||
}
|
||||
|
||||
(void)BIO_printf(bio, "bits: %d", blob->bits);
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "m");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->m, sizeof(blob->m));
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "e");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->e, sizeof(blob->e));
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "d");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->d, sizeof(blob->d));
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "prime[0]");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->prime[0], sizeof(blob->prime[0]));
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "prime[1]");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->prime[1], sizeof(blob->prime[1]));
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "pexp[0]");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->pexp[0], sizeof(blob->pexp[0]));
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "pexp[1]");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->pexp[1], sizeof(blob->pexp[1]));
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "coef");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->coef, sizeof(blob->coef));
|
||||
(void)BIO_printf(bio, "\n");
|
||||
|
||||
BIO_free(bio);
|
||||
return SDR_OK;
|
||||
}
|
||||
|
||||
int SDF_PrintECCPublicKey(ECCrefPublicKey *blob)
|
||||
{
|
||||
BIO *bio = NULL;
|
||||
|
||||
if (!(bio = BIO_new_fp(stdout, BIO_NOCLOSE))) {
|
||||
return SDR_UNKNOWERR;
|
||||
}
|
||||
|
||||
(void)BIO_printf(bio, "bits: %d", blob->bits);
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "x");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->x, sizeof(blob->x));
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "y");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->y, sizeof(blob->y));
|
||||
(void)BIO_printf(bio, "\n");
|
||||
|
||||
BIO_free(bio);
|
||||
return SDR_OK;
|
||||
}
|
||||
|
||||
int SDF_PrintECCPrivateKey(ECCrefPrivateKey *blob)
|
||||
{
|
||||
BIO *bio = NULL;
|
||||
|
||||
if (!(bio = BIO_new_fp(stdout, BIO_NOCLOSE))) {
|
||||
return SDR_UNKNOWERR;
|
||||
}
|
||||
|
||||
(void)BIO_printf(bio, "bits: %d", blob->bits);
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "K");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->K, sizeof(blob->K));
|
||||
(void)BIO_printf(bio, "\n");
|
||||
|
||||
BIO_free(bio);
|
||||
return SDR_OK;
|
||||
}
|
||||
|
||||
int SDF_PrintECCCipher(ECCCipher *blob)
|
||||
{
|
||||
BIO *bio = NULL;
|
||||
|
||||
if (!(bio = BIO_new_fp(stdout, BIO_NOCLOSE))) {
|
||||
return SDR_UNKNOWERR;
|
||||
}
|
||||
|
||||
(void)BIO_printf(bio, "%s:\n ", "x");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->x, sizeof(blob->x));
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "y");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->y, sizeof(blob->y));
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "M");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->M, sizeof(blob->M));
|
||||
(void)BIO_printf(bio, "\nL: %d", blob->L);
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "C");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->C, sizeof(blob->C));
|
||||
(void)BIO_printf(bio, "\n");
|
||||
|
||||
BIO_free(bio);
|
||||
return SDR_OK;
|
||||
}
|
||||
|
||||
int SDF_PrintECCSignature(ECCSignature *blob)
|
||||
{
|
||||
BIO *bio = NULL;
|
||||
|
||||
if (!(bio = BIO_new_fp(stdout, BIO_NOCLOSE))) {
|
||||
return SDR_UNKNOWERR;
|
||||
}
|
||||
|
||||
(void)BIO_printf(bio, "%s:\n ", "r");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->r, sizeof(blob->r));
|
||||
(void)BIO_printf(bio, "\n%s:\n ", "s");
|
||||
(void)BIO_hex_string(bio, 4, 16, blob->s, sizeof(blob->s));
|
||||
(void)BIO_printf(bio, "\n");
|
||||
|
||||
BIO_free(bio);
|
||||
return SDR_OK;
|
||||
}
|
||||
|
||||
int SDF_ImportKey(
|
||||
void *hSessionHandle,
|
||||
unsigned char *pucKey,
|
||||
unsigned int uiKeyLength,
|
||||
void **phKeyHandle)
|
||||
{
|
||||
return 0;
|
||||
}
|
||||
2853
crypto/sdf/sdf_lib.c
2853
crypto/sdf/sdf_lib.c
File diff suppressed because it is too large
Load Diff
@@ -47,78 +47,95 @@
|
||||
* ====================================================================
|
||||
*/
|
||||
|
||||
#include <openssl/err.h>
|
||||
#include <openssl/gmsdf.h>
|
||||
#include <openssl/crypto.h>
|
||||
#include "internal/dso.h"
|
||||
#include "internal/sdf_meth.h"
|
||||
#include "internal/sdf_int.h"
|
||||
|
||||
#define SDF_METHOD_BIND_FUNCTION_EX(func,name) \
|
||||
sdf->func = (SDF_##func##_FuncPtr)DSO_bind_func(sdf->dso, "SDF_"#name)
|
||||
|
||||
#define SDF_METHOD_BIND_FUNCTION(func) \
|
||||
SDF_METHOD_BIND_FUNCTION_EX(func,func)
|
||||
|
||||
SDF_METHOD *SDF_METHOD_load_library(const char *so_path)
|
||||
{
|
||||
SDF_METHOD *ret = NULL;
|
||||
SDF_METHOD *sdf = NULL;
|
||||
DSO *dso = NULL;
|
||||
|
||||
if (!(dso = DSO_load(NULL, so_path, NULL, 0))) {
|
||||
goto end;
|
||||
}
|
||||
if (!(sdf = OPENSSL_zalloc(sizeof(*sdf)))) {
|
||||
SDFerr(SDF_F_SDF_METHOD_LOAD_LIBRARY, ERR_R_MALLOC_FAILURE);
|
||||
goto end;
|
||||
}
|
||||
if (!(sdf->dso = DSO_load(NULL, so_path, NULL, 0))) {
|
||||
SDFerr(SDF_F_SDF_METHOD_LOAD_LIBRARY, SDF_R_DSO_LOAD_FAILURE);
|
||||
goto end;
|
||||
}
|
||||
|
||||
sdf->OpenDevice = (SDF_OpenDevice_FuncPtr)DSO_bind_func(dso, "SDF_OpenDevice");
|
||||
sdf->CloseDevice = (SDF_CloseDevice_FuncPtr)DSO_bind_func(dso, "SDF_CloseDevice");
|
||||
sdf->OpenSession = (SDF_OpenSession_FuncPtr)DSO_bind_func(dso, "SDF_OpenSession");
|
||||
sdf->CloseSession = (SDF_CloseSession_FuncPtr)DSO_bind_func(dso, "SDF_CloseSession");
|
||||
sdf->GetDeviceInfo = (SDF_GetDeviceInfo_FuncPtr)DSO_bind_func(dso, "SDF_GetDeviceInfo");
|
||||
sdf->GenerateRandom = (SDF_GenerateRandom_FuncPtr)DSO_bind_func(dso, "SDF_GenerateRandom");
|
||||
sdf->GetPrivateKeyAccessRight = (SDF_GetPrivateKeyAccessRight_FuncPtr)DSO_bind_func(dso, "SDF_GetPrivateKeyAccessRight");
|
||||
sdf->ReleasePrivateKeyAccessRight = (SDF_ReleasePrivateKeyAccessRight_FuncPtr)DSO_bind_func(dso, "SDF_ReleasePrivateKeyAccessRight");
|
||||
sdf->ExportSignPublicKey_RSA = (SDF_ExportSignPublicKey_RSA_FuncPtr)DSO_bind_func(dso, "SDF_ExportSignPublicKey_RSA");
|
||||
sdf->ExportEncPublicKey_RSA = (SDF_ExportEncPublicKey_RSA_FuncPtr)DSO_bind_func(dso, "SDF_ExportEncPublicKey_RSA");
|
||||
sdf->GenerateKeyPair_RSA = (SDF_GenerateKeyPair_RSA_FuncPtr)DSO_bind_func(dso, "SDF_GenerateKeyPair_RSA");
|
||||
sdf->GenerateKeyWithIPK_RSA = (SDF_GenerateKeyWithIPK_RSA_FuncPtr)DSO_bind_func(dso, "SDF_GenerateKeyWithIPK_RSA");
|
||||
sdf->GenerateKeyWithEPK_RSA = (SDF_GenerateKeyWithEPK_RSA_FuncPtr)DSO_bind_func(dso, "SDF_GenerateKeyWithEPK_RSA");
|
||||
sdf->ImportKeyWithISK_RSA = (SDF_ImportKeyWithISK_RSA_FuncPtr)DSO_bind_func(dso, "SDF_ImportKeyWithISK_RSA");
|
||||
sdf->ExchangeDigitEnvelopeBaseOnRSA = (SDF_ExchangeDigitEnvelopeBaseOnRSA_FuncPtr)DSO_bind_func(dso, "SDF_ExchangeDigitEnvelopeBaseOnRSA");
|
||||
sdf->ExportSignPublicKey_ECC = (SDF_ExportSignPublicKey_ECC_FuncPtr)DSO_bind_func(dso, "SDF_ExportSignPublicKey_ECC");
|
||||
sdf->ExportEncPublicKey_ECC = (SDF_ExportEncPublicKey_ECC_FuncPtr)DSO_bind_func(dso, "SDF_ExportEncPublicKey_ECC");
|
||||
sdf->GenerateKeyPair_ECC = (SDF_GenerateKeyPair_ECC_FuncPtr)DSO_bind_func(dso, "SDF_GenerateKeyPair_ECC");
|
||||
sdf->GenerateKeyWithIPK_ECC = (SDF_GenerateKeyWithIPK_ECC_FuncPtr)DSO_bind_func(dso, "SDF_GenerateKeyWithIPK_ECC");
|
||||
sdf->GenerateKeyWithEPK_ECC = (SDF_GenerateKeyWithEPK_ECC_FuncPtr)DSO_bind_func(dso, "SDF_GenerateKeyWithEPK_ECC");
|
||||
sdf->ImportKeyWithISK_ECC = (SDF_ImportKeyWithISK_ECC_FuncPtr)DSO_bind_func(dso, "SDF_ImportKeyWithISK_ECC");
|
||||
sdf->GenerateAgreementDataWithECC = (SDF_GenerateAgreementDataWithECC_FuncPtr)DSO_bind_func(dso, "SDF_GenerateAgreementDataWithECC");
|
||||
sdf->GenerateKeyWithECC = (SDF_GenerateKeyWithECC_FuncPtr)DSO_bind_func(dso, "SDF_GenerateKeyWithECC");
|
||||
sdf->GenerateAgreementDataAndKeyWithECC = (SDF_GenerateAgreementDataAndKeyWithECC_FuncPtr)DSO_bind_func(dso, "SDF_GenerateAgreementDataAndKeyWithECC");
|
||||
sdf->ExchangeDigitEnvelopeBaseOnECC = (SDF_ExchangeDigitEnvelopeBaseOnECC_FuncPtr)DSO_bind_func(dso, "SDF_ExchangeDigitEnvelopeBaseOnECC");
|
||||
sdf->GenerateKeyWithKEK = (SDF_GenerateKeyWithKEK_FuncPtr)DSO_bind_func(dso, "SDF_GenerateKeyWithKEK");
|
||||
sdf->ImportKeyWithKEK = (SDF_ImportKeyWithKEK_FuncPtr)DSO_bind_func(dso, "SDF_ImportKeyWithKEK");
|
||||
sdf->DestroyKey = (SDF_DestroyKey_FuncPtr)DSO_bind_func(dso, "SDF_DestroyKey");
|
||||
sdf->ExternalPublicKeyOperation_RSA = (SDF_ExternalPublicKeyOperation_RSA_FuncPtr)DSO_bind_func(dso, "SDF_ExternalPublicKeyOperation_RSA");
|
||||
sdf->InternalPublicKeyOperation_RSA = (SDF_InternalPublicKeyOperation_RSA_FuncPtr)DSO_bind_func(dso, "SDF_InternalPublicKeyOperation_RSA");
|
||||
sdf->InternalPrivateKeyOperation_RSA = (SDF_InternalPrivateKeyOperation_RSA_FuncPtr)DSO_bind_func(dso, "SDF_InternalPrivateKeyOperation_RSA");
|
||||
sdf->ExternalVerify_ECC = (SDF_ExternalVerify_ECC_FuncPtr)DSO_bind_func(dso, "SDF_ExternalVerify_ECC");
|
||||
sdf->InternalSign_ECC = (SDF_InternalSign_ECC_FuncPtr)DSO_bind_func(dso, "SDF_InternalSign_ECC");
|
||||
sdf->InternalVerify_ECC = (SDF_InternalVerify_ECC_FuncPtr)DSO_bind_func(dso, "SDF_InternalVerify_ECC");
|
||||
sdf->ExternalEncrypt_ECC = (SDF_ExternalEncrypt_ECC_FuncPtr)DSO_bind_func(dso, "SDF_ExternalEncrypt_ECC");
|
||||
sdf->ExternalDecrypt_ECC = (SDF_ExternalDecrypt_ECC_FuncPtr)DSO_bind_func(dso, "SDF_ExternalDecrypt_ECC");
|
||||
sdf->InternalEncrypt_ECC = (SDF_InternalEncrypt_ECC_FuncPtr)DSO_bind_func(dso, "SDF_InternalEncrypt_ECC");
|
||||
sdf->InternalDecrypt_ECC = (SDF_InternalDecrypt_ECC_FuncPtr)DSO_bind_func(dso, "SDF_InternalDecrypt_ECC");
|
||||
sdf->Encrypt = (SDF_Encrypt_FuncPtr)DSO_bind_func(dso, "SDF_Encrypt");
|
||||
sdf->Decrypt = (SDF_Decrypt_FuncPtr)DSO_bind_func(dso, "SDF_Decrypt");
|
||||
sdf->CalculateMAC = (SDF_CalculateMAC_FuncPtr)DSO_bind_func(dso, "SDF_CalculateMAC");
|
||||
sdf->HashInit = (SDF_HashInit_FuncPtr)DSO_bind_func(dso, "SDF_HashInit");
|
||||
sdf->HashUpdate = (SDF_HashUpdate_FuncPtr)DSO_bind_func(dso, "SDF_HashUpdate");
|
||||
sdf->HashFinal = (SDF_HashFinal_FuncPtr)DSO_bind_func(dso, "SDF_HashFinal");
|
||||
sdf->CreateFileObject = (SDF_CreateFile_FuncPtr)DSO_bind_func(dso, "SDF_CreateFile");
|
||||
sdf->ReadFileObject = (SDF_ReadFile_FuncPtr)DSO_bind_func(dso, "SDF_ReadFile");
|
||||
sdf->WriteFileObject = (SDF_WriteFile_FuncPtr)DSO_bind_func(dso, "SDF_WriteFile");
|
||||
sdf->DeleteFileObject = (SDF_DeleteFile_FuncPtr)DSO_bind_func(dso, "SDF_DeleteFile");
|
||||
|
||||
SDF_METHOD_BIND_FUNCTION(OpenDevice);
|
||||
SDF_METHOD_BIND_FUNCTION(CloseDevice);
|
||||
SDF_METHOD_BIND_FUNCTION(OpenSession);
|
||||
SDF_METHOD_BIND_FUNCTION(CloseSession);
|
||||
SDF_METHOD_BIND_FUNCTION(GetDeviceInfo);
|
||||
SDF_METHOD_BIND_FUNCTION(GenerateRandom);
|
||||
SDF_METHOD_BIND_FUNCTION(GetPrivateKeyAccessRight);
|
||||
SDF_METHOD_BIND_FUNCTION(ReleasePrivateKeyAccessRight);
|
||||
SDF_METHOD_BIND_FUNCTION(ExportSignPublicKey_RSA);
|
||||
SDF_METHOD_BIND_FUNCTION(ExportEncPublicKey_RSA);
|
||||
SDF_METHOD_BIND_FUNCTION(GenerateKeyPair_RSA);
|
||||
SDF_METHOD_BIND_FUNCTION(GenerateKeyWithIPK_RSA);
|
||||
SDF_METHOD_BIND_FUNCTION(GenerateKeyWithEPK_RSA);
|
||||
SDF_METHOD_BIND_FUNCTION(ImportKeyWithISK_RSA);
|
||||
SDF_METHOD_BIND_FUNCTION(ExchangeDigitEnvelopeBaseOnRSA);
|
||||
SDF_METHOD_BIND_FUNCTION(ExportSignPublicKey_ECC);
|
||||
SDF_METHOD_BIND_FUNCTION(ExportEncPublicKey_ECC);
|
||||
SDF_METHOD_BIND_FUNCTION(GenerateKeyPair_ECC);
|
||||
SDF_METHOD_BIND_FUNCTION(GenerateKeyWithIPK_ECC);
|
||||
SDF_METHOD_BIND_FUNCTION(GenerateKeyWithEPK_ECC);
|
||||
SDF_METHOD_BIND_FUNCTION(ImportKeyWithISK_ECC);
|
||||
SDF_METHOD_BIND_FUNCTION(GenerateAgreementDataWithECC);
|
||||
SDF_METHOD_BIND_FUNCTION(GenerateKeyWithECC);
|
||||
SDF_METHOD_BIND_FUNCTION(GenerateAgreementDataAndKeyWithECC);
|
||||
SDF_METHOD_BIND_FUNCTION(ExchangeDigitEnvelopeBaseOnECC);
|
||||
SDF_METHOD_BIND_FUNCTION(GenerateKeyWithKEK);
|
||||
SDF_METHOD_BIND_FUNCTION(ImportKeyWithKEK);
|
||||
SDF_METHOD_BIND_FUNCTION(DestroyKey);
|
||||
SDF_METHOD_BIND_FUNCTION(ExternalPublicKeyOperation_RSA);
|
||||
//SDF_METHOD_BIND_FUNCTION(InternalPublicKeyOperation_RSA);
|
||||
SDF_METHOD_BIND_FUNCTION(InternalPrivateKeyOperation_RSA);
|
||||
SDF_METHOD_BIND_FUNCTION(ExternalVerify_ECC);
|
||||
SDF_METHOD_BIND_FUNCTION(InternalSign_ECC);
|
||||
SDF_METHOD_BIND_FUNCTION(InternalVerify_ECC);
|
||||
SDF_METHOD_BIND_FUNCTION(ExternalEncrypt_ECC);
|
||||
#if 0
|
||||
SDF_METHOD_BIND_FUNCTION(ExternalDecrypt_ECC);
|
||||
SDF_METHOD_BIND_FUNCTION(InternalEncrypt_ECC);
|
||||
SDF_METHOD_BIND_FUNCTION(InternalDecrypt_ECC);
|
||||
#endif
|
||||
SDF_METHOD_BIND_FUNCTION(Encrypt);
|
||||
SDF_METHOD_BIND_FUNCTION(Decrypt);
|
||||
SDF_METHOD_BIND_FUNCTION(CalculateMAC);
|
||||
SDF_METHOD_BIND_FUNCTION(HashInit);
|
||||
SDF_METHOD_BIND_FUNCTION(HashUpdate);
|
||||
SDF_METHOD_BIND_FUNCTION(HashFinal);
|
||||
SDF_METHOD_BIND_FUNCTION_EX(CreateObject,CreateFile);
|
||||
SDF_METHOD_BIND_FUNCTION_EX(ReadObject,ReadFile);
|
||||
SDF_METHOD_BIND_FUNCTION_EX(WriteObject,WriteFile);
|
||||
SDF_METHOD_BIND_FUNCTION_EX(DeleteObject,DeleteFile);
|
||||
|
||||
ret = sdf;
|
||||
sdf = NULL;
|
||||
|
||||
end:
|
||||
OPENSSL_free(sdf);
|
||||
DSO_free(dso);
|
||||
SDF_METHOD_free(sdf);
|
||||
return ret;
|
||||
}
|
||||
|
||||
void SDF_METHOD_free(SDF_METHOD *meth)
|
||||
{
|
||||
if (meth) DSO_free(meth->dso);
|
||||
OPENSSL_free(meth);
|
||||
}
|
||||
|
||||
|
||||
|
||||
330
crypto/sdf/sdf_sansec.c
Normal file
330
crypto/sdf/sdf_sansec.c
Normal file
@@ -0,0 +1,330 @@
|
||||
/* ====================================================================
|
||||
* Copyright (c) 2016 - 2017 The GmSSL Project. All rights reserved.
|
||||
*
|
||||
* Redistribution and use in source and binary forms, with or without
|
||||
* modification, are permitted provided that the following conditions
|
||||
* are met:
|
||||
*
|
||||
* 1. Redistributions of source code must retain the above copyright
|
||||
* notice, this list of conditions and the following disclaimer.
|
||||
*
|
||||
* 2. Redistributions in binary form must reproduce the above copyright
|
||||
* notice, this list of conditions and the following disclaimer in
|
||||
* the documentation and/or other materials provided with the
|
||||
* distribution.
|
||||
*
|
||||
* 3. All advertising materials mentioning features or use of this
|
||||
* software must display the following acknowledgment:
|
||||
* "This product includes software developed by the GmSSL Project.
|
||||
* (http://gmssl.org/)"
|
||||
*
|
||||
* 4. The name "GmSSL Project" must not be used to endorse or promote
|
||||
* products derived from this software without prior written
|
||||
* permission. For written permission, please contact
|
||||
* guanzhi1980@gmail.com.
|
||||
*
|
||||
* 5. Products derived from this software may not be called "GmSSL"
|
||||
* nor may "GmSSL" appear in their names without prior written
|
||||
* permission of the GmSSL Project.
|
||||
*
|
||||
* 6. Redistributions of any form whatsoever must retain the following
|
||||
* acknowledgment:
|
||||
* "This product includes software developed by the GmSSL Project
|
||||
* (http://gmssl.org/)"
|
||||
*
|
||||
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
|
||||
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
||||
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
|
||||
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
||||
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
||||
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
||||
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
||||
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
||||
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
* ====================================================================
|
||||
*/
|
||||
|
||||
#include <openssl/err.h>
|
||||
#include <openssl/gmsdf.h>
|
||||
#include "internal/sdf_int.h"
|
||||
#include "../../e_os.h"
|
||||
#include "sdf_sansec.h"
|
||||
|
||||
typedef struct {
|
||||
unsigned int std_id;
|
||||
unsigned int vendor_id;
|
||||
} SDF_ALGOR_PAIR;
|
||||
|
||||
static SDF_ALGOR_PAIR sansec_ciphers[] = {
|
||||
{ SGD_SM1, SANSEC_SM1 },
|
||||
{ SGD_SM1_ECB, SANSEC_SM1_ECB },
|
||||
{ SGD_SM1_CBC, SANSEC_SM1_CBC },
|
||||
{ SGD_SM1_CFB, SANSEC_SM1_CFB },
|
||||
{ SGD_SM1_OFB, SANSEC_SM1_OFB },
|
||||
{ SGD_SM1_MAC, SANSEC_SM1_MAC },
|
||||
{ SGD_SM4, SANSEC_SM4 },
|
||||
{ SGD_SM4_ECB, SANSEC_SM4_ECB },
|
||||
{ SGD_SM4_CBC, SANSEC_SM4_CBC },
|
||||
{ SGD_SM4_CFB, SANSEC_SM4_CFB },
|
||||
{ SGD_SM4_OFB, SANSEC_SM4_OFB },
|
||||
{ SGD_SM4_MAC, SANSEC_SM4_MAC },
|
||||
{ SGD_SSF33, SANSEC_SSF33 },
|
||||
{ SGD_SSF33_ECB, SANSEC_SSF33_ECB },
|
||||
{ SGD_SSF33_CBC, SANSEC_SSF33_CBC },
|
||||
{ SGD_SSF33_CFB, SANSEC_SSF33_CFB },
|
||||
{ SGD_SSF33_OFB, SANSEC_SSF33_OFB },
|
||||
{ SGD_SSF33_MAC, SANSEC_SSF33_MAC },
|
||||
{ 0, SANSEC_AES },
|
||||
{ 0, SANSEC_AES_ECB },
|
||||
{ 0, SANSEC_AES_CBC },
|
||||
{ 0, SANSEC_AES_CFB },
|
||||
{ 0, SANSEC_AES_OFB },
|
||||
{ 0, SANSEC_AES_MAC },
|
||||
{ 0, SANSEC_DES },
|
||||
{ 0, SANSEC_DES_ECB },
|
||||
{ 0, SANSEC_DES_CBC },
|
||||
{ 0, SANSEC_DES_CFB },
|
||||
{ 0, SANSEC_DES_OFB },
|
||||
{ 0, SANSEC_DES_MAC },
|
||||
{ 0, SANSEC_3DES },
|
||||
{ 0, SANSEC_3DES_ECB },
|
||||
{ 0, SANSEC_3DES_CBC },
|
||||
{ 0, SANSEC_3DES_CFB },
|
||||
{ 0, SANSEC_3DES_OFB },
|
||||
{ 0, SANSEC_3DES_MAC },
|
||||
};
|
||||
|
||||
static unsigned int sansec_get_cipher_algor(unsigned int vendor_id)
|
||||
{
|
||||
int i;
|
||||
for (i = 0; i < OSSL_NELEM(sansec_ciphers); i++) {
|
||||
if (vendor_id == sansec_ciphers[i].vendor_id) {
|
||||
return sansec_ciphers[i].std_id;
|
||||
}
|
||||
}
|
||||
return 0;
|
||||
}
|
||||
|
||||
static unsigned int sansec_get_cipher_cap(unsigned int vendor_cap)
|
||||
{
|
||||
unsigned int std_cap = 0;
|
||||
int i;
|
||||
|
||||
for (i = 0; i < OSSL_NELEM(sansec_ciphers); i++) {
|
||||
if (vendor_cap & sansec_ciphers[i].vendor_id) {
|
||||
std_cap |= sansec_ciphers[i].std_id;
|
||||
}
|
||||
}
|
||||
|
||||
return std_cap;
|
||||
}
|
||||
|
||||
static SDF_ALGOR_PAIR sansec_digests[] = {
|
||||
{ SGD_SM3, SANSEC_SM3 },
|
||||
{ SGD_SHA1, SANSEC_SHA1 },
|
||||
{ SGD_SHA256, SANSEC_SHA256 },
|
||||
{ 0, SANSEC_SHA512 },
|
||||
{ 0, SANSEC_SHA384 },
|
||||
{ 0, SANSEC_SHA224 },
|
||||
{ 0, SANSEC_MD5 },
|
||||
};
|
||||
|
||||
static unsigned int sansec_get_digest_algor(unsigned int vendor_id)
|
||||
{
|
||||
int i;
|
||||
for (i = 0; i < OSSL_NELEM(sansec_digests); i++) {
|
||||
if (vendor_id == sansec_digests[i].vendor_id) {
|
||||
return sansec_digests[i].std_id;
|
||||
}
|
||||
}
|
||||
return 0;
|
||||
}
|
||||
|
||||
static unsigned int sansec_get_digest_cap(unsigned int vendor_cap)
|
||||
{
|
||||
unsigned int std_cap = 0;
|
||||
int i;
|
||||
|
||||
for (i = 0; i < OSSL_NELEM(sansec_digests); i++) {
|
||||
if (vendor_cap & sansec_digests[i].vendor_id) {
|
||||
std_cap |= sansec_digests[i].std_id;
|
||||
}
|
||||
}
|
||||
|
||||
return std_cap;
|
||||
}
|
||||
|
||||
static SDF_ALGOR_PAIR sansec_pkeys[] = {
|
||||
{ SGD_RSA,SANSEC_RSA },
|
||||
{ SGD_RSA_SIGN,SANSEC_RSA_SIGN },
|
||||
{ SGD_RSA_ENC,SANSEC_RSA_ENC },
|
||||
{ SGD_SM2,SANSEC_SM2 },
|
||||
{ SGD_SM2_1,SANSEC_SM2_1 },
|
||||
{ SGD_SM2_2,SANSEC_SM2_2 },
|
||||
{ SGD_SM2_3,SANSEC_SM2_3 },
|
||||
};
|
||||
|
||||
static unsigned int sansec_get_pkey_algor(unsigned int vendor_id)
|
||||
{
|
||||
int i;
|
||||
for (i = 0; i < OSSL_NELEM(sansec_pkeys); i++) {
|
||||
if (vendor_id == sansec_pkeys[i].vendor_id) {
|
||||
return sansec_pkeys[i].std_id;
|
||||
}
|
||||
}
|
||||
return 0;
|
||||
}
|
||||
|
||||
static unsigned int sansec_get_pkey_cap(unsigned int vendor_cap)
|
||||
{
|
||||
unsigned int std_cap = 0;
|
||||
int i;
|
||||
|
||||
for (i = 0; i < OSSL_NELEM(sansec_pkeys); i++) {
|
||||
if (vendor_cap & sansec_pkeys[i].vendor_id) {
|
||||
std_cap |= sansec_pkeys[i].std_id;
|
||||
}
|
||||
}
|
||||
|
||||
return std_cap;
|
||||
}
|
||||
|
||||
static int sansec_encode_ecccipher(const ECCCipher *ec, void *vendor)
|
||||
{
|
||||
int ret;
|
||||
SANSEC_ECCCipher *sansec = vendor;
|
||||
ret = sizeof(SANSEC_ECCCipher);
|
||||
|
||||
if (ec->L > sizeof(sansec->C)) {
|
||||
SDFerr(SDF_F_SANSEC_ENCODE_ECCCIPHER,
|
||||
SDF_R_INVALID_SANSEC_ECCCIPHER_LENGTH);
|
||||
return 0;
|
||||
}
|
||||
|
||||
if (vendor) {
|
||||
sansec->clength = ec->L;
|
||||
memcpy(sansec->x, ec->x, sizeof(ec->x));
|
||||
memcpy(sansec->y, ec->y, sizeof(ec->y));
|
||||
memcpy(sansec->M, ec->M, sizeof(ec->M));
|
||||
memset(sansec->M + sizeof(ec->M), 0, sizeof(sansec->M) - sizeof(ec->M));
|
||||
memcpy(sansec->C, ec->C, ec->L);
|
||||
memset(sansec->C + ec->L, 0, sizeof(sansec->C) - ec->L);
|
||||
}
|
||||
|
||||
return ret;
|
||||
}
|
||||
|
||||
static int sansec_decode_ecccipher(ECCCipher *ec, const void *vendor)
|
||||
{
|
||||
int ret;
|
||||
const SANSEC_ECCCipher *sansec = vendor;
|
||||
ret = sizeof(ECCCipher) -1 + sansec->clength;
|
||||
|
||||
if (sansec->clength > sizeof(sansec->C)) {
|
||||
SDFerr(SDF_F_SANSEC_DECODE_ECCCIPHER,
|
||||
SDF_R_INVALID_SANSEC_ECCCIPHER_LENGTH);
|
||||
return 0;
|
||||
}
|
||||
|
||||
if (ec) {
|
||||
memcpy(ec->x, sansec->x, sizeof(ec->x));
|
||||
memcpy(ec->y, sansec->y, sizeof(ec->y));
|
||||
memcpy(ec->M, sansec->M, sizeof(ec->M));
|
||||
ec->L = sansec->clength;
|
||||
memcpy(ec->C, sansec->C, sansec->clength);
|
||||
}
|
||||
|
||||
return ret;
|
||||
}
|
||||
|
||||
static SDF_ERR_REASON sansec_errors[] = {
|
||||
{ SANSEC_BASE, SDF_R_SANSEC_BASE },
|
||||
{ SANSEC_INVALID_USER, SDF_R_SANSEC_INVALID_USER },
|
||||
{ SANSEC_INVALID_AUTHENCODE, SDF_R_SANSEC_INVALID_AUTHENCODE },
|
||||
{ SANSEC_PROTOCOL_VERSION_ERROR, SDF_R_SANSEC_PROTOCOL_VERSION_ERROR },
|
||||
{ SANSEC_INVALID_COMMAND, SDF_R_SANSEC_INVALID_COMMAND },
|
||||
{ SANSEC_INVALID_PARAMETERS, SDF_R_SANSEC_INVALID_PARAMETERS },
|
||||
{ SANSEC_FILE_ALREADY_EXIST, SDF_R_SANSEC_FILE_ALREADY_EXIST },
|
||||
{ SANSEC_SYNC_ERROR, SDF_R_SANSEC_SYNC_ERROR },
|
||||
{ SANSEC_SYNC_LOGIN_ERROR, SDF_R_SANSEC_SYNC_LOGIN_ERROR },
|
||||
{ SANSEC_SOCKET_TIMEOUT, SDF_R_SANSEC_SOCKET_TIMEOUT },
|
||||
{ SANSEC_CONNECT_ERROR, SDF_R_SANSEC_CONNECT_ERROR },
|
||||
{ SANSEC_SET_SOCKET_OPTION_ERROR, SDF_R_SANSEC_SET_SOCKET_OPTION_ERROR },
|
||||
{ SANSEC_SOCKET_SEND_ERROR, SDF_R_SANSEC_SOCKET_SEND_ERROR },
|
||||
{ SANSEC_SOCKET_RECV_ERROR, SDF_R_SANSEC_SOCKET_RECV_ERROR },
|
||||
{ SANSEC_SOCKET_RECV_0, SDF_R_SANSEC_SOCKET_RECV_0 },
|
||||
{ SANSEC_SEM_TIMEOUT, SDF_R_SANSEC_SEM_TIMEOUT },
|
||||
{ SANSEC_NO_AVAILABLE_HSM, SDF_R_SANSEC_NO_AVAILABLE_HSM },
|
||||
{ SANSEC_NO_AVAILABLE_CSM, SDF_R_SANSEC_NO_AVAILABLE_CSM },
|
||||
{ SANSEC_CONFIG_ERROR, SDF_R_SANSEC_CONFIG_ERROR },
|
||||
{ SANSEC_CARD_BASE, SDF_R_SANSEC_CARD_BASE },
|
||||
{ SANSEC_CARD_UNKNOW_ERROR, SDF_R_SANSEC_CARD_UNKNOW_ERROR },
|
||||
{ SANSEC_CARD_NOT_SUPPORTED, SDF_R_SANSEC_CARD_NOT_SUPPORTED },
|
||||
{ SANSEC_CARD_COMMMUCATION_FAILED, SDF_R_SANSEC_CARD_COMMMUCATION_FAILED },
|
||||
{ SANSEC_CARD_HARDWARE_FAILURE, SDF_R_SANSEC_CARD_HARDWARE_FAILURE },
|
||||
{ SANSEC_CARD_OPEN_DEVICE_FAILED, SDF_R_SANSEC_CARD_OPEN_DEVICE_FAILED },
|
||||
{ SANSEC_CARD_OPEN_SESSION_FAILED, SDF_R_SANSEC_CARD_OPEN_SESSION_FAILED },
|
||||
{ SANSEC_CARD_PRIVATE_KEY_ACCESS_DENYED, SDF_R_SANSEC_CARD_PRIVATE_KEY_ACCESS_DENYED },
|
||||
{ SANSEC_CARD_KEY_NOT_EXIST, SDF_R_SANSEC_CARD_KEY_NOT_EXIST },
|
||||
{ SANSEC_CARD_ALGOR_NOT_SUPPORTED, SDF_R_SANSEC_CARD_ALGOR_NOT_SUPPORTED },
|
||||
{ SANSEC_CARD_ALG_MODE_NOT_SUPPORTED, SDF_R_SANSEC_CARD_ALG_MODE_NOT_SUPPORTED },
|
||||
{ SANSEC_CARD_PUBLIC_KEY_OPERATION_ERROR, SDF_R_SANSEC_CARD_PUBLIC_KEY_OPERATION_ERROR },
|
||||
{ SANSEC_CARD_PRIVATE_KEY_OPERATION_ERROR, SDF_R_SANSEC_CARD_PRIVATE_KEY_OPERATION_ERROR },
|
||||
{ SANSEC_CARD_SIGN_ERROR, SDF_R_SANSEC_CARD_SIGN_ERROR },
|
||||
{ SANSEC_CARD_VERIFY_ERROR, SDF_R_SANSEC_CARD_VERIFY_ERROR },
|
||||
{ SANSEC_CARD_SYMMETRIC_ALGOR_ERROR, SDF_R_SANSEC_CARD_SYMMETRIC_ALGOR_ERROR },
|
||||
{ SANSEC_CARD_STEP_ERROR, SDF_R_SANSEC_CARD_STEP_ERROR },
|
||||
{ SANSEC_CARD_FILE_SIZE_ERROR, SDF_R_SANSEC_CARD_FILE_SIZE_ERROR },
|
||||
{ SANSEC_CARD_FILE_NOT_EXIST, SDF_R_SANSEC_CARD_FILE_NOT_EXIST },
|
||||
{ SANSEC_CARD_FILE_OFFSET_ERROR, SDF_R_SANSEC_CARD_FILE_OFFSET_ERROR },
|
||||
{ SANSEC_CARD_KEY_TYPE_ERROR, SDF_R_SANSEC_CARD_KEY_TYPE_ERROR },
|
||||
{ SANSEC_CARD_KEY_ERROR, SDF_R_SANSEC_CARD_KEY_ERROR },
|
||||
{ SANSEC_CARD_BUFFER_TOO_SMALL, SDF_R_SANSEC_CARD_BUFFER_TOO_SMALL },
|
||||
{ SANSEC_CARD_DATA_PADDING_ERROR, SDF_R_SANSEC_CARD_DATA_PADDING_ERROR },
|
||||
{ SANSEC_CARD_DATA_SIZE, SDF_R_SANSEC_CARD_DATA_SIZE },
|
||||
{ SANSEC_CARD_CRYPTO_NOT_INITED, SDF_R_SANSEC_CARD_CRYPTO_NOT_INITED },
|
||||
{ SANSEC_CARD_MANAGEMENT_DENYED, SDF_R_SANSEC_CARD_MANAGEMENT_DENYED },
|
||||
{ SANSEC_CARD_OPERATION_DENYED, SDF_R_SANSEC_CARD_OPERATION_DENYED },
|
||||
{ SANSEC_CARD_DEVICE_STATUS_ERROR, SDF_R_SANSEC_CARD_DEVICE_STATUS_ERROR },
|
||||
{ SANSEC_CARD_LOGIN_ERROR, SDF_R_SANSEC_CARD_LOGIN_ERROR },
|
||||
{ SANSEC_CARD_USERID_ERROR, SDF_R_SANSEC_CARD_USERID_ERROR },
|
||||
{ SANSEC_CARD_PARAMENT_ERROR, SDF_R_SANSEC_CARD_PARAMENT_ERROR },
|
||||
{ SANSEC_CARD_MANAGEMENT_DENYED_05, SDF_R_SANSEC_CARD_MANAGEMENT_DENYED_05 },
|
||||
{ SANSEC_CARD_OPERATION_DENYED_05, SDF_R_SANSEC_CARD_OPERATION_DENYED_05 },
|
||||
{ SANSEC_CARD_DEVICE_STATUS_ERROR_05, SDF_R_SANSEC_CARD_DEVICE_STATUS_ERROR_05 },
|
||||
{ SANSEC_CARD_LOGIN_ERROR_05, SDF_R_SANSEC_CARD_LOGIN_ERROR_05 },
|
||||
{ SANSEC_CARD_USERID_ERROR_05, SDF_R_SANSEC_CARD_USERID_ERROR_05 },
|
||||
{ SANSEC_CARD_PARAMENT_ERROR_05, SDF_R_SANSEC_CARD_PARAMENT_ERROR_05 },
|
||||
{ SANSEC_CARD_READER_BASE, SDF_R_SANSEC_CARD_READER_BASE },
|
||||
{ SANSEC_CARD_READER_PIN_ERROR, SDF_R_SANSEC_CARD_READER_PIN_ERROR },
|
||||
{ SANSEC_CARD_READER_NO_CARD, SDF_R_SANSEC_CARD_READER_NO_CARD },
|
||||
{ SANSEC_CARD_READER_CARD_INSERT, SDF_R_SANSEC_CARD_READER_CARD_INSERT },
|
||||
{ SANSEC_CARD_READER_CARD_INSERT_TYPE, SDF_R_SANSEC_CARD_READER_CARD_INSERT_TYPE },
|
||||
};
|
||||
|
||||
static unsigned long sansec_get_error_reason(int err)
|
||||
{
|
||||
int i = 0;
|
||||
for (i = 0; i < OSSL_NELEM(sansec_errors); i++) {
|
||||
if (err == sansec_errors[i].err) {
|
||||
return sansec_errors[i].reason;
|
||||
}
|
||||
}
|
||||
return 0;
|
||||
}
|
||||
|
||||
SDF_VENDOR sdf_sansec = {
|
||||
"sansec",
|
||||
sansec_get_cipher_algor,
|
||||
sansec_get_cipher_cap,
|
||||
sansec_get_digest_algor,
|
||||
sansec_get_digest_cap,
|
||||
sansec_get_pkey_algor,
|
||||
sansec_get_pkey_cap,
|
||||
sansec_encode_ecccipher,
|
||||
sansec_decode_ecccipher,
|
||||
sansec_get_error_reason,
|
||||
};
|
||||
192
crypto/sdf/sdf_sansec.h
Normal file
192
crypto/sdf/sdf_sansec.h
Normal file
@@ -0,0 +1,192 @@
|
||||
/* ====================================================================
|
||||
* Copyright (c) 2016 - 2017 The GmSSL Project. All rights reserved.
|
||||
*
|
||||
* Redistribution and use in source and binary forms, with or without
|
||||
* modification, are permitted provided that the following conditions
|
||||
* are met:
|
||||
*
|
||||
* 1. Redistributions of source code must retain the above copyright
|
||||
* notice, this list of conditions and the following disclaimer.
|
||||
*
|
||||
* 2. Redistributions in binary form must reproduce the above copyright
|
||||
* notice, this list of conditions and the following disclaimer in
|
||||
* the documentation and/or other materials provided with the
|
||||
* distribution.
|
||||
*
|
||||
* 3. All advertising materials mentioning features or use of this
|
||||
* software must display the following acknowledgment:
|
||||
* "This product includes software developed by the GmSSL Project.
|
||||
* (http://gmssl.org/)"
|
||||
*
|
||||
* 4. The name "GmSSL Project" must not be used to endorse or promote
|
||||
* products derived from this software without prior written
|
||||
* permission. For written permission, please contact
|
||||
* guanzhi1980@gmail.com.
|
||||
*
|
||||
* 5. Products derived from this software may not be called "GmSSL"
|
||||
* nor may "GmSSL" appear in their names without prior written
|
||||
* permission of the GmSSL Project.
|
||||
*
|
||||
* 6. Redistributions of any form whatsoever must retain the following
|
||||
* acknowledgment:
|
||||
* "This product includes software developed by the GmSSL Project
|
||||
* (http://gmssl.org/)"
|
||||
*
|
||||
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
|
||||
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
||||
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
|
||||
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
||||
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
||||
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
||||
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
||||
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
||||
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
* ====================================================================
|
||||
*/
|
||||
#ifndef HEADER_SDF_SANSEC_H
|
||||
#define HEADER_SDF_SANSEC_H
|
||||
|
||||
#include <openssl/sgd.h>
|
||||
|
||||
#define SANSEC_SM1 (SGD_SM1)
|
||||
#define SANSEC_SM1_ECB (SANSEC_SM1|SGD_ECB)
|
||||
#define SANSEC_SM1_CBC (SANSEC_SM1|SGD_CBC)
|
||||
#define SANSEC_SM1_CFB (SANSEC_SM1|SGD_CFB)
|
||||
#define SANSEC_SM1_OFB (SANSEC_SM1|SGD_OFB)
|
||||
#define SANSEC_SM1_MAC (SANSEC_SM1|SGD_MAC)
|
||||
|
||||
#define SANSEC_SM4 0x00002000
|
||||
#define SANSEC_SM4_ECB (SANSEC_SM4|SGD_ECB)
|
||||
#define SANSEC_SM4_CBC (SANSEC_SM4|SGD_CBC)
|
||||
#define SANSEC_SM4_CFB (SANSEC_SM4|SGD_CFB)
|
||||
#define SANSEC_SM4_OFB (SANSEC_SM4|SGD_OFB)
|
||||
#define SANSEC_SM4_MAC (SANSEC_SM4|SGD_MAC)
|
||||
|
||||
#define SANSEC_SSF33 (SGD_SSF33)
|
||||
#define SANSEC_SSF33_ECB (SANSEC_SSF33|SGD_ECB)
|
||||
#define SANSEC_SSF33_CBC (SANSEC_SSF33|SGD_CBC)
|
||||
#define SANSEC_SSF33_CFB (SANSEC_SSF33|SGD_CFB)
|
||||
#define SANSEC_SSF33_OFB (SANSEC_SSF33|SGD_OFB)
|
||||
#define SANSEC_SSF33_MAC (SANSEC_SSF33|SGD_MAC)
|
||||
|
||||
#define SANSEC_AES 0x00000400
|
||||
#define SANSEC_AES_ECB (SANSEC_AES|SGD_ECB)
|
||||
#define SANSEC_AES_CBC (SANSEC_AES|SGD_CBC)
|
||||
#define SANSEC_AES_CFB (SANSEC_AES|SGD_CFB)
|
||||
#define SANSEC_AES_OFB (SANSEC_AES|SGD_OFB)
|
||||
#define SANSEC_AES_MAC (SANSEC_AES|SGD_MAC)
|
||||
|
||||
#define SANSEC_DES 0x00004000
|
||||
#define SANSEC_DES_ECB (SANSEC_DES|SGD_ECB)
|
||||
#define SANSEC_DES_CBC (SANSEC_DES|SGD_CBC)
|
||||
#define SANSEC_DES_CFB (SANSEC_DES|SGD_CFB)
|
||||
#define SANSEC_DES_OFB (SANSEC_DES|SGD_OFB)
|
||||
#define SANSEC_DES_MAC (SANSEC_DES|SGD_MAC)
|
||||
|
||||
#define SANSEC_3DES 0x00000800
|
||||
#define SANSEC_3DES_ECB (SANSEC_3DES|SGD_ECB)
|
||||
#define SANSEC_3DES_CBC (SANSEC_3DES|SGD_CBC)
|
||||
#define SANSEC_3DES_CFB (SANSEC_3DES|SGD_CFB)
|
||||
#define SANSEC_3DES_OFB (SANSEC_3DES|SGD_OFB)
|
||||
#define SANSEC_3DES_MAC (SANSEC_3DES|SGD_MAC)
|
||||
|
||||
#define SANSEC_SM3 (SGD_SM3)
|
||||
#define SANSEC_SHA1 (SGD_SHA1)
|
||||
#define SANSEC_SHA256 (SGD_SHA256)
|
||||
#define SANSEC_SHA512 0x00000008
|
||||
#define SANSEC_SHA384 0x00000010
|
||||
#define SANSEC_SHA224 0x00000020
|
||||
#define SANSEC_MD5 0x00000080
|
||||
|
||||
#define SANSEC_RSA (SGD_RSA)
|
||||
#define SANSEC_RSA_SIGN (SGD_RSA_SIGN)
|
||||
#define SANSEC_RSA_ENC 0x00010200
|
||||
#define SANSEC_SM2 (SGD_SM2)
|
||||
#define SANSEC_SM2_1 (SGD_SM2_1)
|
||||
#define SANSEC_SM2_2 (SGD_SM2_2)
|
||||
#define SANSEC_SM2_3 (SGD_SM2_3)
|
||||
|
||||
#define SANSEC_BASE (SDR_BASE + 0x00010000)
|
||||
#define SANSEC_INVALID_USER (SANSEC_BASE + 0x00000001)
|
||||
#define SANSEC_INVALID_AUTHENCODE (SANSEC_BASE + 0x00000002)
|
||||
#define SANSEC_PROTOCOL_VERSION_ERROR (SANSEC_BASE + 0x00000003)
|
||||
#define SANSEC_INVALID_COMMAND (SANSEC_BASE + 0x00000004)
|
||||
#define SANSEC_INVALID_PARAMETERS (SANSEC_BASE + 0x00000005)
|
||||
#define SANSEC_FILE_ALREADY_EXIST (SANSEC_BASE + 0x00000006)
|
||||
#define SANSEC_SYNC_ERROR (SANSEC_BASE + 0x00000007)
|
||||
#define SANSEC_SYNC_LOGIN_ERROR (SANSEC_BASE + 0x00000008)
|
||||
#define SANSEC_SOCKET_TIMEOUT (SANSEC_BASE + 0x00000100)
|
||||
#define SANSEC_CONNECT_ERROR (SANSEC_BASE + 0x00000101)
|
||||
#define SANSEC_SET_SOCKET_OPTION_ERROR (SANSEC_BASE + 0x00000102)
|
||||
#define SANSEC_SOCKET_SEND_ERROR (SANSEC_BASE + 0x00000104)
|
||||
#define SANSEC_SOCKET_RECV_ERROR (SANSEC_BASE + 0x00000105)
|
||||
#define SANSEC_SOCKET_RECV_0 (SANSEC_BASE + 0x00000106)
|
||||
#define SANSEC_SEM_TIMEOUT (SANSEC_BASE + 0x00000200)
|
||||
#define SANSEC_NO_AVAILABLE_HSM (SANSEC_BASE + 0x00000201)
|
||||
#define SANSEC_NO_AVAILABLE_CSM (SANSEC_BASE + 0x00000202)
|
||||
#define SANSEC_CONFIG_ERROR (SANSEC_BASE + 0x00000301)
|
||||
#define SANSEC_CARD_BASE (SDR_BASE + 0x00020000)
|
||||
#define SANSEC_CARD_UNKNOW_ERROR (SANSEC_CARD_BASE + 0x00000001)
|
||||
#define SANSEC_CARD_NOT_SUPPORTED (SANSEC_CARD_BASE + 0x00000002)
|
||||
#define SANSEC_CARD_COMMMUCATION_FAILED (SANSEC_CARD_BASE + 0x00000003)
|
||||
#define SANSEC_CARD_HARDWARE_FAILURE (SANSEC_CARD_BASE + 0x00000004)
|
||||
#define SANSEC_CARD_OPEN_DEVICE_FAILED (SANSEC_CARD_BASE + 0x00000005)
|
||||
#define SANSEC_CARD_OPEN_SESSION_FAILED (SANSEC_CARD_BASE + 0x00000006)
|
||||
#define SANSEC_CARD_PRIVATE_KEY_ACCESS_DENYED (SANSEC_CARD_BASE + 0x00000007)
|
||||
#define SANSEC_CARD_KEY_NOT_EXIST (SANSEC_CARD_BASE + 0x00000008)
|
||||
#define SANSEC_CARD_ALGOR_NOT_SUPPORTED (SANSEC_CARD_BASE + 0x00000009)
|
||||
#define SANSEC_CARD_ALG_MODE_NOT_SUPPORTED (SANSEC_CARD_BASE + 0x00000010)
|
||||
#define SANSEC_CARD_PUBLIC_KEY_OPERATION_ERROR (SANSEC_CARD_BASE + 0x00000011)
|
||||
#define SANSEC_CARD_PRIVATE_KEY_OPERATION_ERROR (SANSEC_CARD_BASE + 0x00000012)
|
||||
#define SANSEC_CARD_SIGN_ERROR (SANSEC_CARD_BASE + 0x00000013)
|
||||
#define SANSEC_CARD_VERIFY_ERROR (SANSEC_CARD_BASE + 0x00000014)
|
||||
#define SANSEC_CARD_SYMMETRIC_ALGOR_ERROR (SANSEC_CARD_BASE + 0x00000015)
|
||||
#define SANSEC_CARD_STEP_ERROR (SANSEC_CARD_BASE + 0x00000016)
|
||||
#define SANSEC_CARD_FILE_SIZE_ERROR (SANSEC_CARD_BASE + 0x00000017)
|
||||
#define SANSEC_CARD_FILE_NOT_EXIST (SANSEC_CARD_BASE + 0x00000018)
|
||||
#define SANSEC_CARD_FILE_OFFSET_ERROR (SANSEC_CARD_BASE + 0x00000019)
|
||||
#define SANSEC_CARD_KEY_TYPE_ERROR (SANSEC_CARD_BASE + 0x00000020)
|
||||
#define SANSEC_CARD_KEY_ERROR (SANSEC_CARD_BASE + 0x00000021)
|
||||
#define SANSEC_CARD_BUFFER_TOO_SMALL (SANSEC_CARD_BASE + 0x00000101)
|
||||
#define SANSEC_CARD_DATA_PADDING_ERROR (SANSEC_CARD_BASE + 0x00000102)
|
||||
#define SANSEC_CARD_DATA_SIZE (SANSEC_CARD_BASE + 0x00000103)
|
||||
#define SANSEC_CARD_CRYPTO_NOT_INITED (SANSEC_CARD_BASE + 0x00000104)
|
||||
#define SANSEC_CARD_MANAGEMENT_DENYED (SANSEC_CARD_BASE + 0x00001001)
|
||||
#define SANSEC_CARD_OPERATION_DENYED (SANSEC_CARD_BASE + 0x00001002)
|
||||
#define SANSEC_CARD_DEVICE_STATUS_ERROR (SANSEC_CARD_BASE + 0x00001003)
|
||||
#define SANSEC_CARD_LOGIN_ERROR (SANSEC_CARD_BASE + 0x00001011)
|
||||
#define SANSEC_CARD_USERID_ERROR (SANSEC_CARD_BASE + 0x00001012)
|
||||
#define SANSEC_CARD_PARAMENT_ERROR (SANSEC_CARD_BASE + 0x00001013)
|
||||
#define SANSEC_CARD_MANAGEMENT_DENYED_05 (SANSEC_CARD_BASE + 0x00000801)
|
||||
#define SANSEC_CARD_OPERATION_DENYED_05 (SANSEC_CARD_BASE + 0x00000802)
|
||||
#define SANSEC_CARD_DEVICE_STATUS_ERROR_05 (SANSEC_CARD_BASE + 0x00000803)
|
||||
#define SANSEC_CARD_LOGIN_ERROR_05 (SANSEC_CARD_BASE + 0x00000811)
|
||||
#define SANSEC_CARD_USERID_ERROR_05 (SANSEC_CARD_BASE + 0x00000812)
|
||||
#define SANSEC_CARD_PARAMENT_ERROR_05 (SANSEC_CARD_BASE + 0x00000813)
|
||||
#define SANSEC_CARD_READER_BASE (SDR_BASE + 0x00030000)
|
||||
#define SANSEC_CARD_READER_PIN_ERROR (SANSEC_CARD_READER_BASE + 0x000063CE)
|
||||
#define SANSEC_CARD_READER_NO_CARD (SANSEC_CARD_READER_BASE + 0x0000FF01)
|
||||
#define SANSEC_CARD_READER_CARD_INSERT (SANSEC_CARD_READER_BASE + 0x0000FF02)
|
||||
#define SANSEC_CARD_READER_CARD_INSERT_TYPE (SANSEC_CARD_READER_BASE + 0x0000FF03)
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C" {
|
||||
#endif
|
||||
|
||||
#pragma pack(1)
|
||||
typedef struct {
|
||||
unsigned int clength;
|
||||
unsigned char x[ECCref_MAX_LEN];
|
||||
unsigned char y[ECCref_MAX_LEN];
|
||||
unsigned char C[136];
|
||||
unsigned char M[ECCref_MAX_LEN];
|
||||
} SANSEC_ECCCipher;
|
||||
#pragma pack()
|
||||
|
||||
#ifdef __cplusplus
|
||||
}
|
||||
#endif
|
||||
#endif
|
||||
Reference in New Issue
Block a user