1/********************************************************************** 2 * gost_keywrap.h * 3 * Copyright (c) 2005-2006 Cryptocom LTD * 4 * This file is distributed under the same license as OpenSSL * 5 * * 6 * Implementation of CryptoPro key wrap algorithm, as defined in * 7 * RFC 4357 p 6.3 and 6.4 * 8 * Doesn't need OpenSSL * 9 **********************************************************************/ 10#ifndef GOST_KEYWRAP_H 11# define GOST_KEYWRAP_H 12# include <string.h> 13# include "gost89.h" 14/*- 15 * Diversifies key using random UserKey Material 16 * Implements RFC 4357 p 6.5 key diversification algorithm 17 * 18 * inputKey - 32byte key to be diversified 19 * ukm - 8byte user key material 20 * outputKey - 32byte buffer to store diversified key 21 * 22 */ 23void keyDiversifyCryptoPro(gost_ctx * ctx, 24 const unsigned char *inputKey, 25 const unsigned char *ukm, 26 unsigned char *outputKey); 27/*- 28 * Wraps key using RFC 4357 6.3 29 * ctx - gost encryption context, initialized with some S-boxes 30 * keyExchangeKey (KEK) 32-byte (256-bit) shared key 31 * ukm - 8 byte (64 bit) user key material, 32 * sessionKey - 32-byte (256-bit) key to be wrapped 33 * wrappedKey - 44-byte buffer to store wrapped key 34 */ 35 36int keyWrapCryptoPro(gost_ctx * ctx, 37 const unsigned char *keyExchangeKey, 38 const unsigned char *ukm, 39 const unsigned char *sessionKey, 40 unsigned char *wrappedKey); 41/*- 42 * Unwraps key using RFC 4357 6.4 43 * ctx - gost encryption context, initialized with some S-boxes 44 * keyExchangeKey 32-byte shared key 45 * wrappedKey 44 byte key to be unwrapped (concatenation of 8-byte UKM, 46 * 32 byte encrypted key and 4 byte MAC 47 * 48 * sessionKEy - 32byte buffer to store sessionKey in 49 * Returns 1 if key is decrypted successfully, and 0 if MAC doesn't match 50 */ 51 52int keyUnwrapCryptoPro(gost_ctx * ctx, 53 const unsigned char *keyExchangeKey, 54 const unsigned char *wrappedKey, 55 unsigned char *sessionKey); 56#endif 57