Files
GmSSL/include/openssl/gmskf.h
2019-01-23 09:13:30 +08:00

321 lines
16 KiB
C

/* ====================================================================
* Copyright (c) 2015 - 2016 The GmSSL Project. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgment:
* "This product includes software developed by the GmSSL Project.
* (http://gmssl.org/)"
*
* 4. The name "GmSSL Project" must not be used to endorse or promote
* products derived from this software without prior written
* permission. For written permission, please contact
* guanzhi1980@gmail.com.
*
* 5. Products derived from this software may not be called "GmSSL"
* nor may "GmSSL" appear in their names without prior written
* permission of the GmSSL Project.
*
* 6. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by the GmSSL Project
* (http://gmssl.org/)"
*
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
* ====================================================================
*/
#ifndef HEADER_GMSKF_H
#define HEADER_GMSKF_H
#include <openssl/opensslconf.h>
#ifndef OPENSSL_NO_SKF
#include <stdio.h>
#include <openssl/bio.h>
#include <openssl/sgd.h>
#include <openssl/skf.h>
#define SKF_NO_PADDING 0
#define SKF_PKCS5_PADDING 1
#define SKF_DEV_STATE_ABSENT 0x00000000
#define SKF_DEV_STATE_PRESENT 0x00000001
#define SKF_DEV_STATE_UNKNOW 0x00000010
#define SKF_CONTAINER_TYPE_UNDEF 0
#define SKF_CONTAINER_TYPE_RSA 1
#define SKF_CONTAINER_TYPE_ECC 2
#define SKF_ENVELOPEDKEYBLOB_VERSION 1
#define SKF_AUTHKEY_LENGTH 16
#define SKF_AUTHRAND_LENGTH 16
#define SKF_MAX_FILE_SIZE (256*1024)
#define SKF_MAX_CERTIFICATE_SIZE (8*1024)
#define SKF_DEFAULT_ADMIN_PIN_RETRY_COUNT 6
#define SKF_DEFAULT_USER_PIN_RETRY_COUNT 6
#ifdef __cplusplus
extern "C" {
#endif
typedef struct {
union {
ECCPUBLICKEYBLOB ecc;
RSAPUBLICKEYBLOB rsa;
} u;
} SKF_PUBLICKEYBLOB;
#define SKF_MAX_PUBLICKEYBOLB_LENGTH sizeof(SKF_PUBLICKEYBLOB)
typedef struct {
char *name;
unsigned char *buf;
int offset;
int length;
} SKF_FILE_OP_PARAMS;
ULONG DEVAPI SKF_LoadLibrary(LPSTR so_path, LPSTR vendor);
ULONG DEVAPI SKF_UnloadLibrary(void);
ULONG DEVAPI SKF_OpenDevice(LPSTR devName, BYTE authKey[16], DEVINFO *devInfo, DEVHANDLE *phDev);
ULONG DEVAPI SKF_CloseDevice(DEVHANDLE hDev);
ULONG DEVAPI SKF_LoginApplication(DEVHANDLE hDev, LPSTR appName, ULONG userType, LPSTR szPin, HAPPLICATION *phApp);
ULONG DEVAPI SKF_GetDevStateName(ULONG ulDevState, LPSTR *szName);
ULONG DEVAPI SKF_GetContainerTypeName(ULONG ulContainerType, LPSTR *szName);
ULONG DEVAPI SKF_GetAlgorName(ULONG ulAlgID, LPSTR *szName);
ULONG DEVAPI SKF_PrintDevInfo(BIO *out, DEVINFO *devInfo);
ULONG DEVAPI SKF_PrintRSAPublicKey(BIO *out, RSAPUBLICKEYBLOB *blob);
ULONG DEVAPI SKF_PrintRSAPrivateKey(BIO *out, RSAPRIVATEKEYBLOB *blob);
ULONG DEVAPI SKF_PrintECCPublicKey(BIO *out, ECCPUBLICKEYBLOB *blob);
ULONG DEVAPI SKF_PrintECCPrivateKey(BIO *out, ECCPRIVATEKEYBLOB *blob);
ULONG DEVAPI SKF_PrintECCCipher(BIO *out, ECCCIPHERBLOB *blob);
ULONG DEVAPI SKF_PrintECCSignature(BIO *out, ECCSIGNATUREBLOB *blob);
ULONG DEVAPI SKF_GetErrorString(ULONG ulError, LPSTR *szErrorStr);
ULONG DEVAPI SKF_NewECCCipher(ULONG ulCipherLen, ECCCIPHERBLOB **cipherBlob);
ULONG DEVAPI SKF_NewEnvelopedKey(ULONG ulCipherLen, ENVELOPEDKEYBLOB **envelopedKeyBlob);
ULONG DEVAPI SKF_ImportECCPrivateKey(DEVHANDLE hDev, HCONTAINER hContainer, EC_KEY *ec_key, ULONG symmAlgId);
ULONG DEVAPI SKF_ImportRSAPrivateKey(DEVHANDLE hDev, HCONTAINER hContainer, RSA *rsa, ULONG symmAlgId);
ULONG DEVAPI SKF_ImportPrivateKey(DEVHANDLE hDev, HCONTAINER hContainer, EVP_PKEY *pkey, ULONG symmAlgId);
ULONG DEVAPI SKF_ExportECCPublicKey(HCONTAINER hContainer, BOOL bSign, EC_KEY **pp);
ULONG DEVAPI SKF_ExportRSAPublicKey(HCONTAINER hContainer, BOOL bSign, RSA **pp);
ULONG DEVAPI SKF_ExportEVPPublicKey(HCONTAINER hContainer, BOOL bSign, EVP_PKEY **pp);
ULONG DEVAPI SKF_ImportX509CertificateByKeyUsage(HCONTAINER hContainer, X509 *x509);
ULONG DEVAPI SKF_ImportX509Certificate(HCONTAINER hContainer, BOOL bSign, X509 *x509);
ULONG DEVAPI SKF_ExportX509Certificate(HCONTAINER hContainer, BOOL bSign, X509 **px509);
/* BEGIN ERROR CODES */
/*
* The following lines are auto generated by the script mkerr.pl. Any changes
* made after this point may be overwritten when the script is next run.
*/
int ERR_load_SKF_strings(void);
/* Error codes for the SKF functions. */
/* Function codes. */
# define SKF_F_SKF_CANCELWAITFORDEVEVENT 100
# define SKF_F_SKF_CHANGEDEVAUTHKEY 101
# define SKF_F_SKF_CHANGEPIN 102
# define SKF_F_SKF_CLEARSECURESTATE 103
# define SKF_F_SKF_CLOSEAPPLICATION 104
# define SKF_F_SKF_CLOSECONTAINER 105
# define SKF_F_SKF_CLOSEDEVICE 187
# define SKF_F_SKF_CLOSEHANDLE 106
# define SKF_F_SKF_CONNECTDEV 107
# define SKF_F_SKF_CREATEAPPLICATION 108
# define SKF_F_SKF_CREATECONTAINER 109
# define SKF_F_SKF_CREATEFILE 110
# define SKF_F_SKF_DECRYPT 111
# define SKF_F_SKF_DECRYPTFINAL 112
# define SKF_F_SKF_DECRYPTINIT 113
# define SKF_F_SKF_DECRYPTUPDATE 114
# define SKF_F_SKF_DELETEAPPLICATION 115
# define SKF_F_SKF_DELETECONTAINER 116
# define SKF_F_SKF_DELETEFILE 117
# define SKF_F_SKF_DEVAUTH 118
# define SKF_F_SKF_DIGEST 119
# define SKF_F_SKF_DIGESTFINAL 120
# define SKF_F_SKF_DIGESTINIT 121
# define SKF_F_SKF_DIGESTUPDATE 122
# define SKF_F_SKF_DISCONNECTDEV 123
# define SKF_F_SKF_ECCDECRYPT 124
# define SKF_F_SKF_ECCEXPORTSESSIONKEY 125
# define SKF_F_SKF_ECCSIGNDATA 126
# define SKF_F_SKF_ECCVERIFY 127
# define SKF_F_SKF_ENCRYPT 128
# define SKF_F_SKF_ENCRYPTFINAL 129
# define SKF_F_SKF_ENCRYPTINIT 130
# define SKF_F_SKF_ENCRYPTUPDATE 131
# define SKF_F_SKF_ENUMAPPLICATION 132
# define SKF_F_SKF_ENUMCONTAINER 133
# define SKF_F_SKF_ENUMDEV 134
# define SKF_F_SKF_ENUMFILES 135
# define SKF_F_SKF_EXPORTCERTIFICATE 136
# define SKF_F_SKF_EXPORTECCENCPUBLICKEY 137
# define SKF_F_SKF_EXPORTECCPUBLICKEY 188
# define SKF_F_SKF_EXPORTECCSIGNPUBLICKEY 138
# define SKF_F_SKF_EXPORTEVPPUBLICKEY 189
# define SKF_F_SKF_EXPORTPUBLICKEY 139
# define SKF_F_SKF_EXPORTRSAENCPUBLICKEY 140
# define SKF_F_SKF_EXPORTRSAPUBLICKEY 190
# define SKF_F_SKF_EXPORTRSASIGNPUBLICKEY 141
# define SKF_F_SKF_EXPORTX509CERTIFICATE 191
# define SKF_F_SKF_EXTECCDECRYPT 142
# define SKF_F_SKF_EXTECCENCRYPT 143
# define SKF_F_SKF_EXTECCSIGN 144
# define SKF_F_SKF_EXTECCVERIFY 145
# define SKF_F_SKF_EXTRSAPRIKEYOPERATION 146
# define SKF_F_SKF_EXTRSAPUBKEYOPERATION 147
# define SKF_F_SKF_GENECCKEYPAIR 148
# define SKF_F_SKF_GENERATEAGREEMENTDATAANDKEYWITHECC 149
# define SKF_F_SKF_GENERATEAGREEMENTDATAWITHECC 150
# define SKF_F_SKF_GENERATEKEYWITHECC 151
# define SKF_F_SKF_GENEXTRSAKEY 152
# define SKF_F_SKF_GENRANDOM 153
# define SKF_F_SKF_GENRSAKEYPAIR 154
# define SKF_F_SKF_GETCONTAINERTYPE 155
# define SKF_F_SKF_GETDEVINFO 156
# define SKF_F_SKF_GETDEVSTATE 157
# define SKF_F_SKF_GETFILEINFO 158
# define SKF_F_SKF_GETPININFO 159
# define SKF_F_SKF_IMPORTCERTIFICATE 160
# define SKF_F_SKF_IMPORTECCKEYPAIR 161
# define SKF_F_SKF_IMPORTECCPRIVATEKEY 195
# define SKF_F_SKF_IMPORTPRIVATEKEY 192
# define SKF_F_SKF_IMPORTRSAKEYPAIR 162
# define SKF_F_SKF_IMPORTRSAPRIVATEKEY 196
# define SKF_F_SKF_IMPORTSESSIONKEY 163
# define SKF_F_SKF_IMPORTX509CERTIFICATEBYKEYUSAGE 193
# define SKF_F_SKF_LOADLIBRARY 164
# define SKF_F_SKF_LOCKDEV 165
# define SKF_F_SKF_MAC 166
# define SKF_F_SKF_MACFINAL 167
# define SKF_F_SKF_MACINIT 168
# define SKF_F_SKF_MACUPDATE 169
# define SKF_F_SKF_METHOD_LOAD_LIBRARY 170
# define SKF_F_SKF_NEWECCCIPHER 171
# define SKF_F_SKF_NEWENVELOPEDKEY 172
# define SKF_F_SKF_OPENAPPLICATION 173
# define SKF_F_SKF_OPENCONTAINER 174
# define SKF_F_SKF_OPENDEVICE 194
# define SKF_F_SKF_READFILE 175
# define SKF_F_SKF_RSAEXPORTSESSIONKEY 176
# define SKF_F_SKF_RSASIGNDATA 177
# define SKF_F_SKF_RSAVERIFY 178
# define SKF_F_SKF_SETLABEL 179
# define SKF_F_SKF_SETSYMMKEY 180
# define SKF_F_SKF_TRANSMIT 181
# define SKF_F_SKF_UNBLOCKPIN 182
# define SKF_F_SKF_UNLOCKDEV 183
# define SKF_F_SKF_VERIFYPIN 184
# define SKF_F_SKF_WAITFORDEVEVENT 185
# define SKF_F_SKF_WRITEFILE 186
/* Reason codes. */
# define SKF_R_APPLICATION_ALREADY_EXIST 100
# define SKF_R_APPLICATION_NOT_EXIST 101
# define SKF_R_BUFFER_TOO_SMALL 102
# define SKF_R_CERTIFICATE_NOT_FOUND 103
# define SKF_R_CONTAINER_TYPE_NOT_MATCH 104
# define SKF_R_CSP_IMPORT_PUBLIC_KEY_ERROR 105
# define SKF_R_DECRYPT_INVALID_PADDING 106
# define SKF_R_DEVICE_REMOVED 107
# define SKF_R_DIGEST_ERROR 108
# define SKF_R_DSO_LOAD_FAILURE 109
# define SKF_R_EXPORT_FAILED 110
# define SKF_R_FAILURE 111
# define SKF_R_FILE_ALREADY_EXIST 112
# define SKF_R_FILE_ERROR 113
# define SKF_R_FILE_NOT_EXIST 114
# define SKF_R_FUNCTION_NOT_SUPPORTED 115
# define SKF_R_HASH_NOT_EQUAL 116
# define SKF_R_INVALID_APPLICATION_NAME 117
# define SKF_R_INVALID_CONTAINER_TYPE 168
# define SKF_R_INVALID_DIGEST_HANDLE 118
# define SKF_R_INVALID_ECC_PUBLIC_KEY 169
# define SKF_R_INVALID_HANDLE 119
# define SKF_R_INVALID_INPUT_LENGTH 120
# define SKF_R_INVALID_INPUT_VALUE 121
# define SKF_R_INVALID_KEY_INFO_TYPE 122
# define SKF_R_INVALID_KEY_USAGE 123
# define SKF_R_INVALID_MAC_LENGTH 124
# define SKF_R_INVALID_MODULUS_LENGTH 125
# define SKF_R_INVALID_NAME_LENGTH 126
# define SKF_R_INVALID_OBJECT 127
# define SKF_R_INVALID_PARAMETER 128
# define SKF_R_INVALID_PIN 129
# define SKF_R_INVALID_PIN_LENGTH 130
# define SKF_R_INVALID_RSA_MODULUS_LENGTH 131
# define SKF_R_INVALID_RSA_PUBLIC_KEY 170
# define SKF_R_INVALID_USER_TYPE 132
# define SKF_R_KEY_NOT_FOUND 133
# define SKF_R_LOAD_LIBRARY_FAILURE 134
# define SKF_R_MEMORY_ERROR 135
# define SKF_R_NOT_INITIALIZED 136
# define SKF_R_NOT_SUPPORTED_CIPHER_ALGOR 137
# define SKF_R_NOT_SUPPORTED_DIGEST_ALGOR 138
# define SKF_R_NOT_SUPPORTED_PKEY_ALGOR 139
# define SKF_R_NO_EVENT 140
# define SKF_R_NO_SPACE 141
# define SKF_R_OPERATION_NOT_SUPPORTED 142
# define SKF_R_PARSE_CERTIFICATE_FAILURE 171
# define SKF_R_PIN_INCORRECT 143
# define SKF_R_PIN_LOCKED 144
# define SKF_R_RANDOM_GENERATION_FAILED 145
# define SKF_R_READ_FILE_FAILURE 146
# define SKF_R_RSA_DECRYPTION_FAILURE 147
# define SKF_R_RSA_ENCRYPTION_FAILURE 148
# define SKF_R_RSA_KEY_GENERATION_FAILURE 149
# define SKF_R_SKF_METHOD_NOT_INITIALIZED 150
# define SKF_R_SUCCESS 151
# define SKF_R_TIMEOUT 152
# define SKF_R_UNKNOWN_CERTIFICATE_KEYUSAGE 172
# define SKF_R_UNKNOWN_ERROR 153
# define SKF_R_UNKNOWN_VENDOR 154
# define SKF_R_UNSUPPORTED_PRIVATE_KEY_TYPE 173
# define SKF_R_USER_ALREADY_LOGGED_IN 155
# define SKF_R_USER_NOT_LOGGED_IN 156
# define SKF_R_USER_PIN_NOT_INITIALIZED 157
# define SKF_R_WISEC_AUTH_BLOCKED 158
# define SKF_R_WISEC_CERTNOUSAGEERR 159
# define SKF_R_WISEC_CERTUSAGEERR 160
# define SKF_R_WISEC_CONTAINER_EXISTS 161
# define SKF_R_WISEC_CONTAINER_NOT_EXISTS 162
# define SKF_R_WISEC_DEVNOAUTH 163
# define SKF_R_WISEC_FILEATTRIBUTEERR 164
# define SKF_R_WISEC_INVALIDCONTAINERERR 165
# define SKF_R_WISEC_KEYNOUSAGEERR 166
# define SKF_R_WRITE_FILE_FAILURE 167
# ifdef __cplusplus
}
# endif
# endif
#endif