From fd80d48ded8f550f9d2853721b5200bde0d951fa Mon Sep 17 00:00:00 2001 From: Miloslav Trmač Date: Tue, 2 Nov 2010 19:58:05 +0100 Subject: Add symmetric key extraction support Also allow marking keys as "sensitive" (= CKA_SENSITIVE = non-extractable), which is an API change. --- include/ncrypto/ncrypto.h | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'include') diff --git a/include/ncrypto/ncrypto.h b/include/ncrypto/ncrypto.h index 01964f9..76c695a 100644 --- a/include/ncrypto/ncrypto.h +++ b/include/ncrypto/ncrypto.h @@ -55,10 +55,15 @@ CK_RV ncr_get_random_bytes (void *dest, size_t size); struct ncr_symm_key; +/* "Sensitive" corresponds to CKA_SENSITIVE. */ CK_RV ncr_symm_key_create (struct ncr_symm_key **key, CK_KEY_TYPE type, - const void *value, size_t value_size); + _Bool sensitive, const void *value, + size_t value_size); CK_RV ncr_symm_key_generate (struct ncr_symm_key **key, CK_MECHANISM_TYPE mech, - size_t value_size); + _Bool sensitive, size_t value_size); +CK_RV ncr_symm_key_set_sensitive (struct ncr_symm_key *key); +CK_RV ncr_symm_key_export (struct ncr_symm_key *key, void *dest, + size_t *dest_size_ptr); CK_RV ncr_symm_key_destroy (struct ncr_symm_key *key); /* Asymmetric keys */ -- cgit