1#ifndef DST_H
2#define DST_H
3
4#ifndef HAS_DST_KEY
5#define DST_KEY RES_9_DST_KEY
6typedef struct dst_key {
7	char	*dk_key_name;   /* name of the key */
8	int	dk_key_size;    /* this is the size of the key in bits */
9	int	dk_proto;       /* what protocols this key can be used for */
10	int	dk_alg;         /* algorithm number from key record */
11	u_int32_t dk_flags;     /* and the flags of the public key */
12	u_int16_t dk_id;        /* identifier of the key */
13} DST_KEY;
14#endif /* HAS_DST_KEY */
15
16/*
17 * DST Crypto API defintions
18 */
19#define dst_init res_9_dst_init
20void     dst_init(void);
21#ifndef __APPLE__
22int      dst_check_algorithm(const int);
23#endif
24
25#define dst_sign_data res_9_dst_sign_data
26int dst_sign_data(const int mode,	 /* specifies INIT/UPDATE/FINAL/ALL */
27		  DST_KEY *in_key,	 /* the key to use */
28		  void **context,	 /* pointer to state structure */
29		  const u_char *data,	 /* data to be signed */
30		  const int len,	 /* length of input data */
31		  u_char *signature,	 /* buffer to write signature to */
32		  const int sig_len);	 /* size of output buffer */
33
34#define dst_verify_data res_9_dst_verify_data
35int dst_verify_data(const int mode,	 /* specifies INIT/UPDATE/FINAL/ALL */
36		    DST_KEY *in_key,	 /* the key to use */
37		    void **context,	 /* pointer to state structure */
38		    const u_char *data,  /* data to be verified */
39		    const int len,	 /* length of input data */
40		    const u_char *signature,/* buffer containing signature */
41		    const int sig_len);	 /* length of signature */
42
43#define dst_read_key res_9_dst_read_key
44DST_KEY *dst_read_key(const char *in_name,   /* name of key */
45		      const u_int16_t in_id, /* key tag identifier */
46		      const int in_alg,      /* key algorithm */
47		      const int key_type);   /* Private/PublicKey wanted*/
48
49#define dst_write_key res_9_dst_write_key
50int      dst_write_key(const DST_KEY *key,  /* key to write out */
51		       const int key_type); /* Public/Private */
52
53#define dst_dnskey_to_key res_9_dst_dnskey_to_key
54DST_KEY *dst_dnskey_to_key(const char *in_name,	/* KEY record name */
55			   const u_char *key,	/* KEY RDATA */
56			   const int len);	/* size of input buffer*/
57
58#ifndef __APPLE__
59int      dst_key_to_dnskey(const DST_KEY *key,	/* key to translate */
60			   u_char *out_storage,	/* output buffer */
61			   const int out_len);	/* size of out_storage*/
62#endif
63
64#define dst_buffer_to_key res_9_dst_buffer_to_key
65DST_KEY *dst_buffer_to_key(const char *key_name,  /* name of the key */
66			   const int alg,	  /* algorithm */
67			   const int flags,	  /* dns flags */
68			   const int protocol,	  /* dns protocol */
69			   const u_char *key_buf, /* key in dns wire fmt */
70			   const int key_len);	  /* size of key */
71
72
73#define dst_key_to_buffer res_9_dst_key_to_buffer
74int     dst_key_to_buffer(DST_KEY *key, u_char *out_buff, int buf_len);
75
76#define dst_generate_key res_9_dst_generate_key
77DST_KEY *dst_generate_key(const char *name,    /* name of new key */
78			  const int alg,       /* key algorithm to generate */
79			  const int bits,      /* size of new key */
80			  const int exp,       /* alg dependent parameter*/
81			  const int flags,     /* key DNS flags */
82			  const int protocol); /* key DNS protocol */
83
84#define dst_free_key res_9_dst_free_key
85DST_KEY *dst_free_key(DST_KEY *f_key);
86
87#define dst_compare_keys res_9_dst_compare_keys
88int      dst_compare_keys(const DST_KEY *key1, const DST_KEY *key2);
89
90#define dst_sig_size res_9_dst_sig_size
91int	dst_sig_size(DST_KEY *key);
92
93/* support for dns key tags/ids */
94#define dst_s_dns_key_id res_9_dst_s_dns_key_id
95u_int16_t dst_s_dns_key_id(const u_char *dns_key_rdata, const int rdata_len);
96#ifndef __APPLE__
97u_int16_t dst_s_id_calc(const u_char *key_data, const int key_len);
98#endif
99
100/* Used by callers as well as by the library.  */
101#define RAW_KEY_SIZE    8192        /* large enough to store any key */
102
103/* DST_API control flags */
104/* These are used used in functions dst_sign_data and dst_verify_data */
105#define SIG_MODE_INIT		1  /* initialize digest */
106#define SIG_MODE_UPDATE		2  /* add data to digest */
107#define SIG_MODE_FINAL		4  /* generate/verify signature */
108#define SIG_MODE_ALL		(SIG_MODE_INIT|SIG_MODE_UPDATE|SIG_MODE_FINAL)
109
110/* Flags for dst_read_private_key()  */
111#define DST_FORCE_READ		0x1000000
112#define DST_CAN_SIGN		0x010F
113#define DST_NO_AUTHEN		0x8000
114#define DST_EXTEND_FLAG         0x1000
115#define DST_STANDARD		0
116#define DST_PRIVATE             0x2000000
117#define DST_PUBLIC              0x4000000
118#define DST_RAND_SEMI           1
119#define DST_RAND_STD            2
120#define DST_RAND_KEY            3
121#define DST_RAND_DSS            4
122
123
124/* DST algorithm codes */
125#define KEY_RSA			1
126#define KEY_DH			2
127#define KEY_DSA			3
128#define KEY_PRIVATE		254
129#define KEY_EXPAND		255
130#define KEY_HMAC_MD5		157
131#define KEY_HMAC_SHA1		158
132#define UNKNOWN_KEYALG		0
133#define DST_MAX_ALGS            KEY_HMAC_SHA1
134
135/* DST constants to locations in KEY record  changes in new KEY record */
136#define DST_FLAGS_SIZE		2
137#define DST_KEY_PROT		2
138#define DST_KEY_ALG		3
139#define DST_EXT_FLAG            4
140#define DST_KEY_START		4
141
142#ifndef SIGN_F_NOKEY
143#define SIGN_F_NOKEY		0xC000
144#endif
145
146/* error codes from dst routines */
147#define SIGN_INIT_FAILURE	(-23)
148#define SIGN_UPDATE_FAILURE	(-24)
149#define SIGN_FINAL_FAILURE	(-25)
150#define VERIFY_INIT_FAILURE	(-26)
151#define VERIFY_UPDATE_FAILURE	(-27)
152#define VERIFY_FINAL_FAILURE	(-28)
153#define MISSING_KEY_OR_SIGNATURE (-30)
154#define UNSUPPORTED_KEYALG	(-31)
155
156#endif /* DST_H */
157