add gmapi

This commit is contained in:
Zhi Guan
2017-02-15 15:53:30 +08:00
parent 065259f710
commit c04b2060af
18 changed files with 2919 additions and 3 deletions

View File

@@ -98,6 +98,7 @@ typedef struct err_state_st {
# define ERR_LIB_PAILLIER 55
# define ERR_LIB_CPK 56
# define ERR_LIB_OTP 57
# define ERR_LIB_GMAPI 58
# define ERR_LIB_USER 128
@@ -141,6 +142,7 @@ typedef struct err_state_st {
# define PAILLIERerr(f,r) ERR_PUT_error(ERR_LIB_PAILLIER,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
# define CPKerr(f,r) ERR_PUT_error(ERR_LIB_CPK,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
# define OTPerr(f,r) ERR_PUT_error(ERR_LIB_OTP,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
# define GMAPIerr(f,r) ERR_PUT_error(ERR_LIB_GMAPI,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
# define ERR_PACK(l,f,r) ( \
(((unsigned int)(l) & 0x0FF) << 24L) | \
@@ -193,6 +195,7 @@ typedef struct err_state_st {
# define ERR_R_PAILLIER_LIB ERR_LIB_PAILLIER/* 55 */
# define ERR_R_CPK_LIB ERR_LIB_CPK/* 56 */
# define ERR_R_OTP_LIB ERR_LIB_OTP/* 57 */
# define ERR_R_GMAPI_LIB ERR_LIB_GMAPI/* 58 */
# define ERR_R_NESTED_ASN1_ERROR 58
# define ERR_R_MISSING_ASN1_EOS 63

299
include/openssl/gmapi.h Normal file
View File

@@ -0,0 +1,299 @@
/* ====================================================================
* Copyright (c) 2015 - 2016 The GmSSL Project. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgment:
* "This product includes software developed by the GmSSL Project.
* (http://gmssl.org/)"
*
* 4. The name "GmSSL Project" must not be used to endorse or promote
* products derived from this software without prior written
* permission. For written permission, please contact
* guanzhi1980@gmail.com.
*
* 5. Products derived from this software may not be called "GmSSL"
* nor may "GmSSL" appear in their names without prior written
* permission of the GmSSL Project.
*
* 6. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by the GmSSL Project
* (http://gmssl.org/)"
*
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
* ====================================================================
*/
/*
* Converting types between native types and GM API types
*/
#ifndef HEADER_GMAPI_H
#define HEADER_GMAPI_H
#include <openssl/ec.h>
#include <openssl/sm2.h>
#include <openssl/rsa.h>
#include <openssl/evp.h>
#include <openssl/sgd.h>
#include <openssl/saf.h>
#include <openssl/sdf.h>
#include <openssl/skf.h>
#include <openssl/sof.h>
#ifdef __cplusplus
extern "C" {
#endif
const char *GMAPI_keyusage2str(int usage);
int GMAPI_sgd2ciphernid(int sgd);
int GMAPI_sgd2mdnid(int sgd);
/* SGD <==> EVP */
const EVP_MD *EVP_get_digestbysgd(int sgd);
const EVP_CIPHER *EVP_get_cipherbysgd(int sgd);
/* SDF types <==> Native types */
RSA *RSA_new_from_RSArefPublicKey(const RSArefPublicKey *ref);
RSA *RSA_new_from_RSArefPrivateKey(const RSArefPrivateKey *ref);
int RSA_set_RSArefPublicKey(RSA *rsa, const RSArefPublicKey *ref);
int RSA_set_RSArefPrivateKey(RSA *rsa, const RSArefPrivateKey *ref);
int RSA_get_RSArefPublicKey(RSA *rsa, RSArefPublicKey *ref);
int RSA_get_RSArefPrivateKey(RSA *rsa, RSArefPrivateKey *ref);
EC_KEY *EC_KEY_new_from_ECCrefPublicKey(const ECCrefPublicKey *ref);
EC_KEY *EC_KEY_new_from_ECCrefPrivateKey(const ECCrefPrivateKey *ref);
int EC_KEY_set_ECCrefPublicKey(EC_KEY *ec_key, const ECCrefPublicKey *ref);
int EC_KEY_set_ECCrefPrivateKey(EC_KEY *ec_key, const ECCrefPrivateKey *ref);
int EC_KEY_get_ECCrefPublicKey(EC_KEY *ec_key, ECCrefPublicKey *ref);
int EC_KEY_get_ECCrefPrivateKey(EC_KEY *ec_key, ECCrefPrivateKey *ref);
SM2_CIPHERTEXT_VALUE *SM2_CIPHERTEXT_VALUE_new_from_ECCCipher(const ECCCipher *ref);
int SM2_CIPHERTEXT_VALUE_set_ECCCipher(SM2_CIPHERTEXT_VALUE *cv, const ECCCipher *ref);
int SM2_CIPHERTEXT_VALUE_get_ECCCipher(const SM2_CIPHERTEXT_VALUE *cv, ECCCipher *ref);
ECDSA_SIG *ECDSA_SIG_new_from_ECCSignature(const ECCSignature *ref);
int ECDSA_SIG_set_ECCSignature(ECDSA_SIG *sig, const ECCSignature *ref);
int ECDSA_SIG_get_ECCSignature(const ECDSA_SIG *sig, ECCSignature *ref);
/* SKF types <==> Native types */
RSA *RSA_new_from_RSAPUBLICKEYBLOB(const RSAPUBLICKEYBLOB *blob);
RSA *RSA_new_from_RSAPRIVATEKEYBLOB(const RSAPRIVATEKEYBLOB *blob);
int RSA_set_RSAPUBLICKEYBLOB(RSA *rsa, const RSAPUBLICKEYBLOB *blob);
int RSA_set_RSAPRIVATEKEYBLOB(RSA *rsa, const RSAPRIVATEKEYBLOB *blob);
int RSA_get_RSAPUBLICKEYBLOB(RSA *rsa, RSAPUBLICKEYBLOB *blob);
int RSA_get_RSAPRIVATEKEYBLOB(RSA *rsa, RSAPRIVATEKEYBLOB *blob);
EC_KEY *EC_KEY_new_from_ECCPUBLICKEYBLOB(const ECCPUBLICKEYBLOB *blob);
EC_KEY *EC_KEY_new_from_ECCPRIVATEKEYBLOB(const ECCPRIVATEKEYBLOB *blob);
int EC_KEY_set_ECCPUBLICKEYBLOB(EC_KEY *ec_key, const ECCPUBLICKEYBLOB *blob);
int EC_KEY_get_ECCPUBLICKEYBLOB(EC_KEY *ec_key, ECCPUBLICKEYBLOB *blob);
int EC_KEY_set_ECCPRIVATEKEYBLOB(EC_KEY *ec_key, const ECCPRIVATEKEYBLOB *blob);
int EC_KEY_get_ECCPRIVATEKEYBLOB(EC_KEY *ec_key, ECCPRIVATEKEYBLOB *blob);
SM2_CIPHERTEXT_VALUE *SM2_CIPHERTEXT_VALUE_new_from_ECCCIPHERBLOB(const ECCCIPHERBLOB *blob);
int SM2_CIPHERTEXT_VALUE_set_ECCCIPHERBLOB(SM2_CIPHERTEXT_VALUE *cv, const ECCCIPHERBLOB *blob);
int SM2_CIPHERTEXT_VALUE_get_ECCCIPHERBLOB(const SM2_CIPHERTEXT_VALUE *cv, ECCCIPHERBLOB *blob);
ECDSA_SIG *ECDSA_SIG_new_from_ECCSIGNATUREBLOB(const ECCSIGNATUREBLOB *blob);
int ECDSA_SIG_get_ECCSIGNATUREBLOB(const ECDSA_SIG *sig, ECCSIGNATUREBLOB *blob);
int ECDSA_SIG_set_ECCSIGNATUREBLOB(ECDSA_SIG *sig, const ECCSIGNATUREBLOB *blob);
/* BEGIN ERROR CODES */
/*
* The following lines are auto generated by the script mkerr.pl. Any changes
* made after this point may be overwritten when the script is next run.
*/
int ERR_load_GMAPI_strings(void);
/* Error codes for the GMAPI functions. */
/* Function codes. */
# define GMAPI_F_ECDSA_SIG_GET_ECCSIGNATURE 100
# define GMAPI_F_ECDSA_SIG_GET_ECCSIGNATUREBLOB 101
# define GMAPI_F_ECDSA_SIG_NEW_FROM_ECCSIGNATURE 102
# define GMAPI_F_ECDSA_SIG_NEW_FROM_ECCSIGNATUREBLOB 103
# define GMAPI_F_ECDSA_SIG_SET_ECCSIGNATURE 104
# define GMAPI_F_ECDSA_SIG_SET_ECCSIGNATUREBLOB 105
# define GMAPI_F_EC_KEY_GET_ECCPRIVATEKEYBLOB 106
# define GMAPI_F_EC_KEY_GET_ECCPUBLICKEYBLOB 107
# define GMAPI_F_EC_KEY_GET_ECCREFPRIVATEKEY 108
# define GMAPI_F_EC_KEY_GET_ECCREFPUBLICKEY 109
# define GMAPI_F_EC_KEY_NEW_FROM_ECCPRIVATEKEYBLOB 110
# define GMAPI_F_EC_KEY_NEW_FROM_ECCPUBLICKEYBLOB 111
# define GMAPI_F_EC_KEY_NEW_FROM_ECCREFPRIVATEKEY 112
# define GMAPI_F_EC_KEY_NEW_FROM_ECCREFPUBLICKEY 113
# define GMAPI_F_EC_KEY_SET_ECCPRIVATEKEYBLOB 114
# define GMAPI_F_EC_KEY_SET_ECCPUBLICKEYBLOB 115
# define GMAPI_F_EC_KEY_SET_ECCREFPRIVATEKEY 116
# define GMAPI_F_EC_KEY_SET_ECCREFPUBLICKEY 117
# define GMAPI_F_RSA_GET_RSAPRIVATEKEYBLOB 118
# define GMAPI_F_RSA_GET_RSAPUBLICKEYBLOB 119
# define GMAPI_F_RSA_GET_RSAREFPRIVATEKEY 120
# define GMAPI_F_RSA_GET_RSAREFPUBLICKEY 121
# define GMAPI_F_RSA_NEW_FROM_RSAPRIVATEKEYBLOB 122
# define GMAPI_F_RSA_NEW_FROM_RSAPUBLICKEYBLOB 123
# define GMAPI_F_RSA_NEW_FROM_RSAREFPRIVATEKEY 124
# define GMAPI_F_RSA_NEW_FROM_RSAREFPUBLICKEY 125
# define GMAPI_F_RSA_SET_RSAPRIVATEKEYBLOB 126
# define GMAPI_F_RSA_SET_RSAPUBLICKEYBLOB 127
# define GMAPI_F_RSA_SET_RSAREFPRIVATEKEY 128
# define GMAPI_F_RSA_SET_RSAREFPUBLICKEY 129
# define GMAPI_F_SAF_BASE64_CREATEBASE64OBJ 130
# define GMAPI_F_SAF_BASE64_DECODE 131
# define GMAPI_F_SAF_BASE64_DECODEFINAL 132
# define GMAPI_F_SAF_BASE64_DECODEUPDATE 133
# define GMAPI_F_SAF_BASE64_ENCODE 134
# define GMAPI_F_SAF_BASE64_ENCODEFINAL 135
# define GMAPI_F_SAF_BASE64_ENCODEUPDATE 136
# define GMAPI_F_SAF_CREATESYMMKEYOBJ 137
# define GMAPI_F_SAF_ECCPUBLICKEYENC 138
# define GMAPI_F_SAF_ECCPUBLICKEYENCBYCERT 139
# define GMAPI_F_SAF_ECCSIGN 140
# define GMAPI_F_SAF_ECCVERIFYSIGN 141
# define GMAPI_F_SAF_ECCVERIFYSIGNBYCERT 142
# define GMAPI_F_SAF_GENECCKEYPAIR 143
# define GMAPI_F_SAF_GENERATEAGREEMENTDATAWITHECC 144
# define GMAPI_F_SAF_GENERATEKEYWITHECC 145
# define GMAPI_F_SAF_GETECCPUBLICKEY 146
# define GMAPI_F_SAF_MACFINAL 147
# define GMAPI_F_SAF_MACUPDATE 148
# define GMAPI_F_SAF_PKCS7_DECODEDIGESTEDDATA 149
# define GMAPI_F_SAF_PKCS7_ENCODEDIGESTEDDATA 150
# define GMAPI_F_SAF_SYMMDECRYPTUPDATE 151
# define GMAPI_F_SAF_SYMMENCRYPTUPDATE 152
# define GMAPI_F_SKF_CLOSEHANDLE 153
# define GMAPI_F_SKF_DECRYPT 154
# define GMAPI_F_SKF_DECRYPTFINAL 155
# define GMAPI_F_SKF_DECRYPTINIT 156
# define GMAPI_F_SKF_DECRYPTUPDATE 157
# define GMAPI_F_SKF_DIGEST 158
# define GMAPI_F_SKF_DIGESTFINAL 159
# define GMAPI_F_SKF_DIGESTINIT 160
# define GMAPI_F_SKF_DIGESTUPDATE 161
# define GMAPI_F_SKF_ENCRYPT 162
# define GMAPI_F_SKF_ENCRYPTFINAL 163
# define GMAPI_F_SKF_ENCRYPTINIT 164
# define GMAPI_F_SKF_ENCRYPTUPDATE 165
# define GMAPI_F_SKF_EXTECCDECRYPT 166
# define GMAPI_F_SKF_EXTECCENCRYPT 167
# define GMAPI_F_SKF_EXTECCSIGN 168
# define GMAPI_F_SKF_EXTECCVERIFY 169
# define GMAPI_F_SKF_EXTRSAPRIKEYOPERATION 170
# define GMAPI_F_SKF_EXTRSAPUBKEYOPERATION 171
# define GMAPI_F_SKF_GENEXTECCKEYPAIR 172
# define GMAPI_F_SKF_GENEXTRSAKEY 173
# define GMAPI_F_SKF_GENRANDOM 174
# define GMAPI_F_SKF_GETDEVINFO 175
# define GMAPI_F_SKF_GETDEVSTATE 176
# define GMAPI_F_SKF_HANDLE_GET_CBCMAC_CTX 177
# define GMAPI_F_SKF_HANDLE_GET_CIPHER 178
# define GMAPI_F_SKF_HANDLE_GET_CIPHER_CTX 179
# define GMAPI_F_SKF_HANDLE_GET_KEY 180
# define GMAPI_F_SKF_HANDLE_GET_MD_CTX 181
# define GMAPI_F_SKF_MAC 182
# define GMAPI_F_SKF_MACFINAL 183
# define GMAPI_F_SKF_MACINIT 184
# define GMAPI_F_SKF_MACUPDATE 185
# define GMAPI_F_SKF_SETSYMMKEY 186
# define GMAPI_F_SM2_CIPHERTEXT_VALUE_GET_ECCCIPHER 187
# define GMAPI_F_SM2_CIPHERTEXT_VALUE_GET_ECCCIPHERBLOB 188
# define GMAPI_F_SM2_CIPHERTEXT_VALUE_NEW_FROM_ECCCIPHER 189
# define GMAPI_F_SM2_CIPHERTEXT_VALUE_NEW_FROM_ECCCIPHERBLOB 190
# define GMAPI_F_SM2_CIPHERTEXT_VALUE_SET_ECCCIPHER 191
# define GMAPI_F_SM2_CIPHERTEXT_VALUE_SET_ECCCIPHERBLOB 192
/* Reason codes. */
# define GMAPI_R_BUFFER_TOO_SMALL 100
# define GMAPI_R_CBCMAC_FAILURE 101
# define GMAPI_R_CTX_NOT_CREATED 102
# define GMAPI_R_DECODE_EC_PRIVATE_KEY_FAILED 103
# define GMAPI_R_DECODE_EC_PUBLIC_KEY_FAILED 104
# define GMAPI_R_DECRYPT_FAILED 105
# define GMAPI_R_ENCODE_CIPHERTEXT_FAILED 106
# define GMAPI_R_ENCODE_FAILED 107
# define GMAPI_R_ENCODE_RSA_PUBLIC_KEY_FAILED 108
# define GMAPI_R_ENCODE_SIGNATURE_FAILED 109
# define GMAPI_R_ENCRYPT_FAILED 110
# define GMAPI_R_FAIL 111
# define GMAPI_R_GEN_RANDOM 112
# define GMAPI_R_GEN_RSA_FAILED 113
# define GMAPI_R_GET_PRIVATE_KEY_FAILED 114
# define GMAPI_R_GET_PUBLIC_KEY_FAILED 115
# define GMAPI_R_INT_OVERFLOW 116
# define GMAPI_R_INVALID_ALGID 117
# define GMAPI_R_INVALID_ALGOR 118
# define GMAPI_R_INVALID_ARGUMENTS 119
# define GMAPI_R_INVALID_BIGNUM_LENGTH 120
# define GMAPI_R_INVALID_BLOB 121
# define GMAPI_R_INVALID_CIPHERTEXT 122
# define GMAPI_R_INVALID_CIPHERTEXT_LENGTH 123
# define GMAPI_R_INVALID_CIPHERTEXT_MAC 124
# define GMAPI_R_INVALID_CIPHERTEXT_POINT 125
# define GMAPI_R_INVALID_CIPHER_CTX_HANDLE 126
# define GMAPI_R_INVALID_CIPHETEXT_LENGTH 127
# define GMAPI_R_INVALID_CONTEXT 128
# define GMAPI_R_INVALID_DIGEST_ALGOR 129
# define GMAPI_R_INVALID_DIGEST_LENGTH 130
# define GMAPI_R_INVALID_ECC_PRIVATE_KEY 131
# define GMAPI_R_INVALID_ECC_PUBLIC_KEY 132
# define GMAPI_R_INVALID_EC_KEY 133
# define GMAPI_R_INVALID_EC_PRIVATE_KEY 134
# define GMAPI_R_INVALID_EC_PUBLIC_KEY 135
# define GMAPI_R_INVALID_FEED_BIT_LENGTH 136
# define GMAPI_R_INVALID_HANDLE 137
# define GMAPI_R_INVALID_HANDLE_ALGOR 138
# define GMAPI_R_INVALID_HANDLE_MAGIC 139
# define GMAPI_R_INVALID_HANDLE_TYPE 140
# define GMAPI_R_INVALID_HASH_HANDLE 141
# define GMAPI_R_INVALID_ID_LENGTH 142
# define GMAPI_R_INVALID_INPUT_LENGTH 143
# define GMAPI_R_INVALID_IV_LENGTH 144
# define GMAPI_R_INVALID_KEY_HANDLE 145
# define GMAPI_R_INVALID_KEY_LENGTH 146
# define GMAPI_R_INVALID_KEY_USAGE 147
# define GMAPI_R_INVALID_LENGTH 148
# define GMAPI_R_INVALID_MAC_HANDLE 149
# define GMAPI_R_INVALID_PLAINTEXT_LENGTH 150
# define GMAPI_R_INVALID_PRIVATE_KEY 151
# define GMAPI_R_INVALID_PUBLIC_KEY 152
# define GMAPI_R_INVALID_RANDOM_LENGTH 153
# define GMAPI_R_INVALID_RSA_KEY_LENGTH 154
# define GMAPI_R_INVALID_RSA_PRIVATE_KEY 155
# define GMAPI_R_INVALID_RSA_PUBLIC_KEY 156
# define GMAPI_R_INVALID_SIGNATURE 157
# define GMAPI_R_INVALID_SM2_CIPHERTEXT 158
# define GMAPI_R_INVALID_SM2_SIGNATURE 159
# define GMAPI_R_MAC_FAILURE 160
# define GMAPI_R_MALLOC_FAILED 161
# define GMAPI_R_NOT_CONVERTABLE 162
# define GMAPI_R_NO_PUBLIC_KEY 163
# define GMAPI_R_NULL_ARGUMENT 164
# define GMAPI_R_OPERATION_NOT_INITIALIZED 165
# define GMAPI_R_SAF_ERROR 166
# define GMAPI_R_SIGN_FAILED 167
# define GMAPI_R_VERIFY_NOT_PASS 168
# ifdef __cplusplus
}
# endif
#endif

315
include/openssl/sgd.h Normal file
View File

@@ -0,0 +1,315 @@
/* ====================================================================
* Copyright (c) 2015 - 2016 The GmSSL Project. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgment:
* "This product includes software developed by the GmSSL Project.
* (http://gmssl.org/)"
*
* 4. The name "GmSSL Project" must not be used to endorse or promote
* products derived from this software without prior written
* permission. For written permission, please contact
* guanzhi1980@gmail.com.
*
* 5. Products derived from this software may not be called "GmSSL"
* nor may "GmSSL" appear in their names without prior written
* permission of the GmSSL Project.
*
* 6. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by the GmSSL Project
* (http://gmssl.org/)"
*
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
* ====================================================================
*/
/*
* this header file is based on the standard GM/T 0006-2012
* Cryptographic Application Identifier Criterion Specification
*/
#ifndef HEADER_SGD_H
#define HEADER_SGD_H
#include <stdint.h>
/* block cipher modes */
#define SGD_ECB 0x01
#define SGD_CBC 0x02
#define SGD_CFB 0x04
#define SGD_OFB 0x08
#define SGD_MAC 0x10
/* stream cipher modes */
#define SGD_EEA3 0x01
#define SGD_EIA3 0x02
/* ciphers */
#define SGD_SM1 0x00000100
#define SGD_SSF33 0x00000200
#define SGD_SM4 0x00000400
#define SGD_ZUC 0x00000800
/* ciphers with modes */
#define SGD_SM1_ECB (SGD_SM1|SGD_ECB)
#define SGD_SM1_CBC (SGD_SM1|SGD_CBC)
#define SGD_SM1_CFB (SGD_SM1|SGD_CFB)
#define SGD_SM1_OFB (SGD_SM1|SGD_OFB)
#define SGD_SM1_MAC (SGD_SM1|SGD_MAC)
#define SGD_SSF33_ECB (SGD_SSF33|SGD_ECB)
#define SGD_SSF33_CBC (SGD_SSF33|SGD_CBC)
#define SGD_SSF33_CFB (SGD_SSF33|SGD_CFB)
#define SGD_SSF33_OFB (SGD_SSF33|SGD_OFB)
#define SGD_SSF33_MAC (SGD_SSF33|SGD_MAC)
#define SGD_SM4_ECB (SGD_SM4|SGD_ECB)
#define SGD_SM4_CBC (SGD_SM4|SGD_CBC)
#define SGD_SM4_CFB (SGD_SM4|SGD_CFB)
#define SGD_SM4_OFB (SGD_SM4|SGD_OFB)
#define SGD_SM4_MAC (SGD_SM4|SGD_MAC)
#define SGD_ZUC_EEA3 (SGD_ZUC|SGD_EEA3)
#define SGD_ZUC_EIA3 (SGD_ZUC|SGD_EIA3)
/* public key usage */
#define SGD_PK_SIGN 0x0100
#define SGD_PK_DH 0x0200
#define SGD_PK_ENC 0x0400
/* public key types */
#define SGD_RSA 0x00010000
#define SGD_RSA_SIGN (SGD_RSA|SGD_PK_SIGN)
#define SGD_RSA_ENC (SGD_RSA|SGD_PK_ENC)
#define SGD_SM2 0x00020000
#define SGD_SM2_1 (SGD_SM2|SGD_PK_SIGN)
#define SGD_SM2_2 (SGD_SM2|SGD_PK_DH)
#define SGD_SM2_3 (SGD_SM2|SGD_PK_ENC)
/* hash */
#define SGD_SM3 0x00000001
#define SGD_SHA1 0x00000002
#define SGD_SHA256 0x00000004
#define SGD_HASH_FROM 0x00000008
#define SGD_HASH_TO 0x000000FF
/* signatue schemes */
#define SGD_SM3_RSA (SGD_SM3|SGD_RSA)
#define SGD_SHA1_RSA (SGD_SHA1|SGD_RSA)
#define SGD_SHA256_RSA (SGD_SHA256|SGD_RSA)
#define SGD_SM3_SM2 (SGD_SM3|SGD_SM2)
#define SGD_SIG_FROM 0x00040000
#define SGD_SIG_TO 0x800000FF
/* data types */
typedef char SGD_CHAR;
typedef char SGD_INT8;
typedef int16_t SGD_INT16;
typedef int32_t SGD_INT32;
typedef int64_t SGD_INT64;
typedef unsigned char SGD_UCHAR;
typedef uint8_t SGD_UINT8;
typedef uint16_t SGD_UINT16;
typedef uint32_t SGD_UINT32;
typedef uint64_t SGD_UINT64;
typedef uint32_t SGD_RV;
typedef void * SGD_OBJ;
typedef int32_t SGD_BOOL;
#define SGD_TRUE 0x00000001
#define SGD_FALSE 0x00000000
#define SGD_KEY_INDEX 0x00000101
#define SGD_SECRET_KEY 0x00000102
#define SGD_PUBLIC_KEY_SIGN 0x00000103
#define SGD_PUBLIC_KEY_ENCRYPT 0x00000104
#define SGD_PRIVATE_KEY_SIGN 0x00000105
#define SGD_PRIVATE_KEY_ENCRYPT 0x00000106
#define SGD_KEY_COMPONENT 0x00000107
#define SGD_PASSWORD 0x00000108
#define SGD_PUBLIC_KEY_CERT 0x00000109
#define SGD_ATTRIBUTE_CERT 0x1000010A
#define SGD_SIGNATURE_DATA 0x10000111
#define SGD_ENVELOPE_DATA 0x10000112
#define SGD_RANDOM_DATA 0x10000113
#define SGD_PLAIN_DATA 0x10000114
#define SGD_CIPHER_DATA 0x10000115
#define SGD_DIGEST_DATA 0x10000116
#define SGD_USER_DATA 0x10000117
/* certificate */
#define SGD_CERT_VERSION 0x00000001
#define SGD_CERT_SERIAL 0x00000002
#define SGD_CERT_ISSUER 0x00000005
#define SGD_CERT_VALID_TIME 0x00000006
#define SGD_CERT_SUBJECT 0x00000007
#define SGD_CERT_DER_PUBLIC_KEY 0x00000008
#define SGD_CERT_DER_EXTENSIONS 0x00000009
#define SGD_EXT_AUTHORITYKEYIDENTIFIER_INFO 0x00000011
#define SGD_EXT_SUBJECTKEYIDENTIFIER_INFO 0x00000012
#define SGD_EXT_KEYUSAGE_INFO 0x00000013
#define SGD_EXT_PRIVATEKEYUSAGEPERIOD_INFO 0x00000014
#define SGD_EXT_CERTIFICATEPOLICIES_INFO 0x00000015
#define SGD_EXT_POLICYMAPPINGS_INFO 0x00000016
#define SGD_EXT_BASICCONSTRAINTS_INFO 0x00000017
#define SGD_EXT_POLICYCONSTRAINTS_INFO 0x00000018
#define SGD_EXT_EXTKEYUSAGE_INFO 0x00000019
#define SGD_EXT_CRLDISTRIBUTIONPOINTS_INFO 0x0000001A
#define SGD_EXT_NETSCAPE_CERT_TYPE_INFO 0x0000001B
#define SGD_EXT_SELFDEFINED_EXTENSION_INFO 0x0000001C
#define SGD_CERT_ISSUER_CN 0x00000021
#define SGD_CERT_ISSUER_O 0x00000022
#define SGD_CERT_ISSUER_OU 0x00000023
#define SGD_CERT_SUBJECT_CN 0x00000031
#define SGD_CERT_SUBJECT_O 0x00000032
#define SGD_CERT_SUBJECT_OU 0x00000033
#define SGD_CERT_SUBJECT_EMAIL 0x00000034
#define SGD_CERT_NOTBEFORE_TIME 0x00000035
#define SGD_CERT_NOTAFTER_TIME 0x00000036
/* timestamp info */
#define SGD_TIME_OF_STAMP 0x00000201
#define SGD_CN_OF_TSSIGNER 0x00000202 /* Common Name of TS Signer */
#define SGD_ORININAL_DATA 0x00000203
#define SGD_CERT_OF_TSSSERVER 0x00000204
#define SGD_GERTCHAIN_OF_TSSERVER 0x00000205
#define SGD_SOURCE_OF_TIME 0x00000206
#define SGD_TIME_PRECISION 0x00000207
#define SGD_RESPONSE_TYPE 0x00000208
#define SGD_SUBJECT_COUNTRY_OF_TSSIGNER 0x00000209
#define SGD_SUBJECT_ORGNIZATION_OF_TSSIGNER 0x0000020A
#define SGD_SUJECT_CITY_OF_TSSIGNER 0x0000020B
#define SGD_SUBJECT_EMAIL_OF_TSSIGNER 0x0000020C
/* single sign-on */
#define SGD_SP_ID 0x00000001
#define SGD_SP_USER_ID 0x00000002
#define SGD_IDP_ID 0x00000003
#define SGD_IDP_USER_ID 0x00000004
/* data encoding */
#define SGD_ENCODING_RAW 0x00000000
#define SGD_ENCODING_DER 0x01000000
#define SGD_ENCODING_BASE64 0x02000000
#define SGD_ENCODING_PEM 0x03000000
#define SGD_ENCODING_TXT 0x04000000
/* APIs */
#define SGD_PROTOCOL_CSP 1 /* Microsoft CryptoAPI */
#define SGD_PROTOCOL_PKCS11 2 /* PKCS#11 */
#define SGD_PROTOCOL_SDS 3 /* SDF API */
#define SGD_PROTOCOL_UKEY 4 /* SKF API */
#define SGD_PROTOCOL_CNG 5 /* Microsoft CryptoAPI Next Gen */
#define SGD_PROTOCOL_GCS 6 /* */
/* certificate validation */
#define SGD_CRL_VERIFY 1
#define SGD_OCSP_VEIFY 2
/* role */
#define SGD_ROLE_SUPER_MANAGER 0x00000001
#define SGD_ROLE_MANAGER 0x00000002
#define SGD_ROLE_AUDIT_MANAGER 0x00000003
#define SGD_ROLE_AUDITOR 0x00000004
#define SGD_ROLE_OPERATOR 0x00000005
#define SGD_ROLE_USER 0x00000006
/* user operations */
#define SGD_OPERATION_SIGNIN 0x00000001
#define SGD_OPERATION_SIGNOUT 0x00000002
#define SGD_OPERATION_CREATE 0x00000003
#define SGD_OPERATION_DELETE 0x00000004
#define SGD_OPERATION_MODIFY 0x00000005
#define SGD_OPERATION_CHG_PWD 0x00000006
#define SGD_OPERATION_AUTHORIZATION 0x00000007
/* user operation results */
#define SGD_OPERATION_SUCCESS 0x00000000
/* key types */
#define SGD_MAIN_KEY 0x00000101
#define SGD_DEVICE_KEYS 0x00000102
#define SGD_USER_KEYS 0x00000103
#define SGD_KEY 0x00000104
#define SGD_SESSION_KEY 0x00000105
#define SGD_PRIKEY_PASSWD 0x00000106
#define SGD_COMPARTITION_KEY 0x00000107
/* key operations */
#define SGD_KEY_GENERATION 0x00000101
#define SGD_KEY_DISPENSE 0x00000102
#define SGD_KEY_IMPORT 0x00000103
#define SGD_KEY_EXPORT 0x00000104
#define SGD_KEY_DIVISION 0x00000105
#define SGD_KEY_COMPOSE 0x00000106
#define SGD_KEY_RENEWAL 0x00000107
#define SGD_KEY_BACKUP 0x00000108
#define SGD_KEY_RESTORE 0x00000109
#define SGD_KEY_DESTORY 0x0000010A
/* system operations */
#define SGD_SYSTEM_INIT 0x00000201
#define SGD_SYSTEM_START 0x00000202
#define SGD_SYSTEM_SHUT 0x00000203
#define SGD_SYSTEM_RESTART 0x00000204
#define SGD_SYSTEM_QUERY 0x00000205
#define SGD_SYSTEM_BACKUP 0x00000206
#define SGD_SYSTEM_RESTORE 0x00000207
/* device info */
#define SGD_DEVICE_SORT 0x00000201
#define SGD_DEVICE_TYPE 0x00000202
#define SGD_DEVICE_NAME 0x00000203
#define SGD_DEVICE_MANUFACTURER 0x00000204
#define SGD_DEVICE_HARDWARE_VERSION 0x00000205
#define SGD_DEVICE_SOFTWARE_VERSION 0x00000206
#define SGD_DEVICE_STANDARD_VERSION 0x00000207
#define SGD_DEVICE_SERIAL_NUMBER 0x00000208
#define SGD_DEVICE_SUPPORT_SYMM_ALG 0x00000209
#define SGD_DEVICE_SUPPORT_PKEY_ALG 0x0000020A
#define SGD_DEVICE_SUPPORT_HASH_ALG 0x0000020B
#define SGD_DEVICE_SUPPORT_STORAGE_SPACE 0x0000020C
#define SGD_DEVICE_SUPPORT_FREE_SPACE 0x0000020D
#define SGD_DEVICE_RUNTIME 0x0000020E
#define SGD_DEVICE_USED_TIMES 0x0000020F
#define SGD_DEVICE_LOCATION 0x00000210
#define SGD_DEVICE_DESCRIPTION 0x00000211
#define SGD_DEVICE_MANAGER_INFO 0x00000212
#define SGD_DEVICE_MAX_DATA_SIZE 0x00000213
/* device types */
#define SGD_DEVICE_SORT_SJ 0x02000000 /* Server */
#define SGD_DEVICE_SORT_SK 0x03000000 /* PCI-E Card */
#define SGD_DEVICE_SORT_SM 0x04000000 /* USB-Key and SmartCard */
/* device functionality */
#define SGD_DEVICE_SORT_FE 0x00000100 /* encryption */
#define SGD_DEVICE_SORT_FA 0x00000200 /* authentication */
#define SGD_DEVICE_SORT_FM 0x00000300 /* key management */
/* device status */
#define SGD_STATUS_INIT 0x00000201
#define SGD_STATUS_READY 0x00000202
#define SGD_STATUS_EXCEPTION 0x00000203
#endif