summaryrefslogtreecommitdiffstats
path: root/base/symkey/src/com/netscape/symkey/SymKey.h
blob: 5a53d48c906f0773a5b635a24ad889c8fc2a3b4f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
// --- BEGIN COPYRIGHT BLOCK ---
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; version 2 of the License.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License along
// with this program; if not, write to the Free Software Foundation, Inc.,
// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
//
// (C) 2007 Red Hat, Inc.
// All rights reserved.
// --- END COPYRIGHT BLOCK ---

#ifndef _TKSSYMKEY_H_
#define _TKSSYMKEY_H_

extern PK11SlotInfo *defaultSlot;

typedef enum {
	enc,		
	mac,		
	kek		
	} keyType;
#define KEYLENGTH 16	
#define PREFIXLENGHT  128
#define DES2_LENGTH 16
#define DES3_LENGTH 24
#define EIGHT_BYTES 8
#define KEYNAMELENGTH PREFIXLENGHT+7
#define TRANSPORT_KEY_NAME "sharedSecret"
#define DEFKEYSET_NAME "defKeySet"

extern char masterKeyPrefix[PREFIXLENGHT];
extern char sharedSecretSymKeyName[KEYNAMELENGTH];

void GetDiversificationData(jbyte *cuidValue,BYTE *KDC,keyType keytype);
PK11SymKey * ReturnSymKey( PK11SlotInfo *slot, char *keyname);
void GetKeyName(jbyte *keyVersion,char *keyname);
PK11SymKey * ComputeCardKeyOnToken(PK11SymKey *masterKey, BYTE* data);
PRStatus EncryptData(const Buffer &kek_key, PK11SymKey *card_key, Buffer &input, Buffer &output);
PK11SlotInfo *ReturnSlot(char *tokenNameChars);
PK11SymKey *ComputeCardKey(PK11SymKey *masterKey, unsigned char *data, PK11SlotInfo *slot);
PK11SymKey *CreateUnWrappedSymKeyOnToken( PK11SlotInfo *slot, PK11SymKey * unWrappingKey, BYTE *keyToBeUnWrapped, int sizeOfKeyToBeUnWrapped, PRBool isPerm);
PK11SymKey *ReturnDeveloperSymKey(PK11SlotInfo *slot, char *keyType, char *keySet, Buffer &inputKey);

char *GetSharedSecretKeyName(char *newKeyName);

#define DES2_WORKAROUND
#endif /* _TKSSYMKEY_H_ */