https://fedorahosted.org/pki/ticket/304

TMS ECC infrastructure (enrollment with client-side and server-side key generation, and key archival)

1 files changed, 11 insertions, 3 deletions

diff --git a/base/tps/src/include/engine/RA.h b/base/tps/src/include/engine/RA.h
index ea04aa4d5..3ec0143d8 100644
--- a/base/tps/src/include/engine/RA.h
+++ b/base/tps/src/include/engine/RA.h
@@ -80,6 +80,13 @@ enum RA_Log_Level {
 	LL_ALL_DATA_IN_PDU = 9
 };
 
+enum RA_Algs {
+        ALG_RSA = 1,
+        ALG_RSA_CRT = 2,
+        ALG_DSA = 3,
+        ALG_EC_F2M = 4,
+        ALG_EC_FP = 5
+};
 
 #ifdef XP_WIN32
 #define TPS_PUBLIC __declspec(dllexport)
@@ -125,12 +132,12 @@ class RA
                                            char** kek_kekSessionKey_s,
                                            char **keycheck_s,
                                            const char *connId);
-	  static void ServerSideKeyGen(RA_Session *session, const char* cuid,
+      static void ServerSideKeyGen(RA_Session *session, const char* cuid,
                                    const char *userid, char* kekSessionKey_s,
-		                           char **publickey_s,
+                                   char **publickey_s,
                                    char **wrappedPrivateKey_s,
                                    char **ivParam_s, const char *connId,
-                                   bool archive, int keysize);
+                                   bool archive, int keysize, bool isECC);
 	  static void RecoverKey(RA_Session *session, const char* cuid,
                              const char *userid, char* kekSessionKey_s,
                              char *cert_s, char **publickey_s,
@@ -368,6 +375,7 @@ class RA
           static void CleanupPublishers();
         static int Failover(HttpConnection *&conn, int len);   
 
+          static bool isAlgorithmECC(BYTE algorithm);
       TPS_PUBLIC static SECCertificateUsage getCertificateUsage(const char *certusage);
       TPS_PUBLIC static bool verifySystemCertByNickname(const char *nickname, const char *certUsage);
       TPS_PUBLIC static bool verifySystemCerts();