1#ifndef DST_H 2#define DST_H 3 4#ifndef HAS_DST_KEY 5#define DST_KEY RES_9_DST_KEY 6typedef struct dst_key { 7 char *dk_key_name; /* name of the key */ 8 int dk_key_size; /* this is the size of the key in bits */ 9 int dk_proto; /* what protocols this key can be used for */ 10 int dk_alg; /* algorithm number from key record */ 11 u_int32_t dk_flags; /* and the flags of the public key */ 12 u_int16_t dk_id; /* identifier of the key */ 13} DST_KEY; 14#endif /* HAS_DST_KEY */ 15 16/* 17 * DST Crypto API defintions 18 */ 19#define dst_init res_9_dst_init 20void dst_init(void); 21#ifndef __APPLE__ 22int dst_check_algorithm(const int); 23#endif 24 25#define dst_sign_data res_9_dst_sign_data 26int dst_sign_data(const int mode, /* specifies INIT/UPDATE/FINAL/ALL */ 27 DST_KEY *in_key, /* the key to use */ 28 void **context, /* pointer to state structure */ 29 const u_char *data, /* data to be signed */ 30 const int len, /* length of input data */ 31 u_char *signature, /* buffer to write signature to */ 32 const int sig_len); /* size of output buffer */ 33 34#define dst_verify_data res_9_dst_verify_data 35int dst_verify_data(const int mode, /* specifies INIT/UPDATE/FINAL/ALL */ 36 DST_KEY *in_key, /* the key to use */ 37 void **context, /* pointer to state structure */ 38 const u_char *data, /* data to be verified */ 39 const int len, /* length of input data */ 40 const u_char *signature,/* buffer containing signature */ 41 const int sig_len); /* length of signature */ 42 43#define dst_read_key res_9_dst_read_key 44DST_KEY *dst_read_key(const char *in_name, /* name of key */ 45 const u_int16_t in_id, /* key tag identifier */ 46 const int in_alg, /* key algorithm */ 47 const int key_type); /* Private/PublicKey wanted*/ 48 49#define dst_write_key res_9_dst_write_key 50int dst_write_key(const DST_KEY *key, /* key to write out */ 51 const int key_type); /* Public/Private */ 52 53#define dst_dnskey_to_key res_9_dst_dnskey_to_key 54DST_KEY *dst_dnskey_to_key(const char *in_name, /* KEY record name */ 55 const u_char *key, /* KEY RDATA */ 56 const int len); /* size of input buffer*/ 57 58#ifndef __APPLE__ 59int dst_key_to_dnskey(const DST_KEY *key, /* key to translate */ 60 u_char *out_storage, /* output buffer */ 61 const int out_len); /* size of out_storage*/ 62#endif 63 64#define dst_buffer_to_key res_9_dst_buffer_to_key 65DST_KEY *dst_buffer_to_key(const char *key_name, /* name of the key */ 66 const int alg, /* algorithm */ 67 const int flags, /* dns flags */ 68 const int protocol, /* dns protocol */ 69 const u_char *key_buf, /* key in dns wire fmt */ 70 const int key_len); /* size of key */ 71 72 73#define dst_key_to_buffer res_9_dst_key_to_buffer 74int dst_key_to_buffer(DST_KEY *key, u_char *out_buff, int buf_len); 75 76#define dst_generate_key res_9_dst_generate_key 77DST_KEY *dst_generate_key(const char *name, /* name of new key */ 78 const int alg, /* key algorithm to generate */ 79 const int bits, /* size of new key */ 80 const int exp, /* alg dependent parameter*/ 81 const int flags, /* key DNS flags */ 82 const int protocol); /* key DNS protocol */ 83 84#define dst_free_key res_9_dst_free_key 85DST_KEY *dst_free_key(DST_KEY *f_key); 86 87#define dst_compare_keys res_9_dst_compare_keys 88int dst_compare_keys(const DST_KEY *key1, const DST_KEY *key2); 89 90#define dst_sig_size res_9_dst_sig_size 91int dst_sig_size(DST_KEY *key); 92 93/* support for dns key tags/ids */ 94#define dst_s_dns_key_id res_9_dst_s_dns_key_id 95u_int16_t dst_s_dns_key_id(const u_char *dns_key_rdata, const int rdata_len); 96#ifndef __APPLE__ 97u_int16_t dst_s_id_calc(const u_char *key_data, const int key_len); 98#endif 99 100/* Used by callers as well as by the library. */ 101#define RAW_KEY_SIZE 8192 /* large enough to store any key */ 102 103/* DST_API control flags */ 104/* These are used used in functions dst_sign_data and dst_verify_data */ 105#define SIG_MODE_INIT 1 /* initialize digest */ 106#define SIG_MODE_UPDATE 2 /* add data to digest */ 107#define SIG_MODE_FINAL 4 /* generate/verify signature */ 108#define SIG_MODE_ALL (SIG_MODE_INIT|SIG_MODE_UPDATE|SIG_MODE_FINAL) 109 110/* Flags for dst_read_private_key() */ 111#define DST_FORCE_READ 0x1000000 112#define DST_CAN_SIGN 0x010F 113#define DST_NO_AUTHEN 0x8000 114#define DST_EXTEND_FLAG 0x1000 115#define DST_STANDARD 0 116#define DST_PRIVATE 0x2000000 117#define DST_PUBLIC 0x4000000 118#define DST_RAND_SEMI 1 119#define DST_RAND_STD 2 120#define DST_RAND_KEY 3 121#define DST_RAND_DSS 4 122 123 124/* DST algorithm codes */ 125#define KEY_RSA 1 126#define KEY_DH 2 127#define KEY_DSA 3 128#define KEY_PRIVATE 254 129#define KEY_EXPAND 255 130#define KEY_HMAC_MD5 157 131#define KEY_HMAC_SHA1 158 132#define UNKNOWN_KEYALG 0 133#define DST_MAX_ALGS KEY_HMAC_SHA1 134 135/* DST constants to locations in KEY record changes in new KEY record */ 136#define DST_FLAGS_SIZE 2 137#define DST_KEY_PROT 2 138#define DST_KEY_ALG 3 139#define DST_EXT_FLAG 4 140#define DST_KEY_START 4 141 142#ifndef SIGN_F_NOKEY 143#define SIGN_F_NOKEY 0xC000 144#endif 145 146/* error codes from dst routines */ 147#define SIGN_INIT_FAILURE (-23) 148#define SIGN_UPDATE_FAILURE (-24) 149#define SIGN_FINAL_FAILURE (-25) 150#define VERIFY_INIT_FAILURE (-26) 151#define VERIFY_UPDATE_FAILURE (-27) 152#define VERIFY_FINAL_FAILURE (-28) 153#define MISSING_KEY_OR_SIGNATURE (-30) 154#define UNSUPPORTED_KEYALG (-31) 155 156#endif /* DST_H */ 157