1/*	$NetBSD: dst.h,v 1.2 2014/08/03 19:14:24 wiz Exp $	*/
2
3#ifndef DST_H
4#define DST_H
5
6#ifndef HAS_DST_KEY
7typedef struct dst_key {
8	char	*dk_key_name;   /*%< name of the key */
9	int	dk_key_size;    /*%< this is the size of the key in bits */
10	int	dk_proto;       /*%< what protocols this key can be used for */
11	int	dk_alg;         /*%< algorithm number from key record */
12	u_int32_t dk_flags;     /*%< and the flags of the public key */
13	u_int16_t dk_id;        /*%< identifier of the key */
14} DST_KEY;
15#endif /* HAS_DST_KEY */
16/*
17 * do not taint namespace
18 */
19#define	dst_bsafe_init		__dst_bsafe_init
20#define	dst_buffer_to_key	__dst_buffer_to_key
21#define	dst_check_algorithm	__dst_check_algorithm
22#define	dst_compare_keys	__dst_compare_keys
23#define	dst_cylink_init		__dst_cylink_init
24#define	dst_dnskey_to_key	__dst_dnskey_to_key
25#define	dst_eay_dss_init	__dst_eay_dss_init
26#define	dst_free_key		__dst_free_key
27#define	dst_generate_key	__dst_generate_key
28#define	dst_hmac_md5_init	__dst_hmac_md5_init
29#define	dst_init		__dst_init
30#define	dst_key_to_buffer	__dst_key_to_buffer
31#define	dst_key_to_dnskey	__dst_key_to_dnskey
32#define	dst_read_key		__dst_read_key
33#define	dst_rsaref_init		__dst_rsaref_init
34#define	dst_s_build_filename	__dst_s_build_filename
35#define	dst_s_calculate_bits	__dst_s_calculate_bits
36#define	dst_s_conv_bignum_b64_to_u8	__dst_s_conv_bignum_b64_to_u8
37#define	dst_s_conv_bignum_u8_to_b64	__dst_s_conv_bignum_u8_to_b64
38#define	dst_s_dns_key_id	__dst_s_dns_key_id
39#define	dst_s_dump		__dst_s_dump
40#define	dst_s_filename_length	__dst_s_filename_length
41#define	dst_s_fopen		__dst_s_fopen
42#define	dst_s_get_int16		__dst_s_get_int16
43#define	dst_s_get_int32		__dst_s_get_int32
44#define	dst_s_id_calc		__dst_s_id_calc
45#define	dst_s_put_int16		__dst_s_put_int16
46#define	dst_s_put_int32		__dst_s_put_int32
47#define	dst_s_quick_random	__dst_s_quick_random
48#define	dst_s_quick_random_set	__dst_s_quick_random_set
49#define	dst_s_random		__dst_s_random
50#define	dst_s_semi_random	__dst_s_semi_random
51#define	dst_s_verify_str	__dst_s_verify_str
52#define	dst_sig_size		__dst_sig_size
53#define	dst_sign_data		__dst_sign_data
54#define	dst_verify_data		__dst_verify_data
55#define	dst_write_key		__dst_write_key
56
57/*
58 * DST Crypto API definitions
59 */
60void     dst_init(void);
61int      dst_check_algorithm(const int);
62
63
64int dst_sign_data(const int,	 	/*!<   specifies INIT/UPDATE/FINAL/ALL  */
65		  DST_KEY *,	 	/*!<   the key to use  */
66		  void **,	 	/*!<   pointer to state structure  */
67		  const u_char *,	/*!<   data to be signed  */
68		  const int,	 	/*!<   length of input data  */
69		  u_char *,	 	/*!<   buffer to write signature to  */
70		  const int);	 	/*!<   size of output buffer  */
71int dst_verify_data(const int,	 	/*!<   specifies INIT/UPDATE/FINAL/ALL  */
72		    DST_KEY *,	 	/*!<   the key to use  */
73		    void **,	 	/*!<   pointer to state structure  */
74		    const u_char *,	/*!<   data to be verified  */
75		    const int,	 	/*!<   length of input data  */
76		    const u_char *,	/*!<   buffer containing signature  */
77		    const int);	 	/*!<   length of signature  */
78DST_KEY *dst_read_key(const char *,	/*!<   name of key  */
79		      const u_int16_t,	/*!<   key tag identifier  */
80		      const int,	/*!<   key algorithm  */
81		      const int);	/*!<   Private/PublicKey wanted */
82int      dst_write_key(const DST_KEY *,	/*!<   key to write out  */
83		       const int); 	/*!<   Public/Private  */
84DST_KEY *dst_dnskey_to_key(const char *,	/*!<   KEY record name  */
85			   const u_char *,	/*!<   KEY RDATA  */
86			   const int);		/*!<   size of input buffer */
87int      dst_key_to_dnskey(const DST_KEY *,	/*!<   key to translate  */
88			   u_char *,		/*!<   output buffer  */
89			   const int);		/*!<   size of out_storage */
90DST_KEY *dst_buffer_to_key(const char *,  	/*!<   name of the key  */
91			   const int,	  	/*!<   algorithm  */
92			   const int,	  	/*!<   dns flags  */
93			   const int,	  	/*!<   dns protocol  */
94			   const u_char *, 	/*!<   key in dns wire fmt  */
95			   const int);	  	/*!<   size of key  */
96int     dst_key_to_buffer(DST_KEY *, u_char *, int);
97
98DST_KEY *dst_generate_key(const char *,    	/*!<   name of new key  */
99			  const int,       	/*!<   key algorithm to generate  */
100			  const int,      	/*!<   size of new key  */
101			  const int,       	/*!<   alg dependent parameter */
102			  const int,     	/*!<   key DNS flags  */
103			  const int);		/*!<   key DNS protocol  */
104DST_KEY *dst_free_key(DST_KEY *);
105int      dst_compare_keys(const DST_KEY *, const DST_KEY *);
106
107int	dst_sig_size(DST_KEY *);
108
109
110/* support for dns key tags/ids */
111u_int16_t dst_s_dns_key_id(const u_char *, const int);
112u_int16_t dst_s_id_calc(const u_char *, const int);
113
114/* Used by callers as well as by the library.  */
115#define RAW_KEY_SIZE    8192        /*%< large enough to store any key */
116/* DST_API control flags */
117/* These are used used in functions dst_sign_data and dst_verify_data */
118#define SIG_MODE_INIT		1  /*%< initialize digest */
119#define SIG_MODE_UPDATE		2  /*%< add data to digest */
120#define SIG_MODE_FINAL		4  /*%< generate/verify signature */
121#define SIG_MODE_ALL		(SIG_MODE_INIT|SIG_MODE_UPDATE|SIG_MODE_FINAL)
122
123/* Flags for dst_read_private_key()  */
124#define DST_FORCE_READ		0x1000000
125#define DST_CAN_SIGN		0x010F
126#define DST_NO_AUTHEN		0x8000
127#define DST_EXTEND_FLAG         0x1000
128#define DST_STANDARD		0
129#define DST_PRIVATE             0x2000000
130#define DST_PUBLIC              0x4000000
131#define DST_RAND_SEMI           1
132#define DST_RAND_STD            2
133#define DST_RAND_KEY            3
134#define DST_RAND_DSS            4
135
136
137/* DST algorithm codes */
138#define KEY_RSA			1
139#define KEY_DH			2
140#define KEY_DSA			3
141#define KEY_PRIVATE		254
142#define KEY_EXPAND		255
143#define KEY_HMAC_MD5		157
144#define KEY_HMAC_SHA1		158
145#define UNKNOWN_KEYALG		0
146#define DST_MAX_ALGS            KEY_HMAC_SHA1
147
148/* DST constants to locations in KEY record  changes in new KEY record */
149#define DST_FLAGS_SIZE		2
150#define DST_KEY_PROT		2
151#define DST_KEY_ALG		3
152#define DST_EXT_FLAG            4
153#define DST_KEY_START		4
154
155#ifndef SIGN_F_NOKEY
156#define SIGN_F_NOKEY		0xC000
157#endif
158
159/* error codes from dst routines */
160#define SIGN_INIT_FAILURE	(-23)
161#define SIGN_UPDATE_FAILURE	(-24)
162#define SIGN_FINAL_FAILURE	(-25)
163#define VERIFY_INIT_FAILURE	(-26)
164#define VERIFY_UPDATE_FAILURE	(-27)
165#define VERIFY_FINAL_FAILURE	(-28)
166#define MISSING_KEY_OR_SIGNATURE (-30)
167#define UNSUPPORTED_KEYALG	(-31)
168
169#endif /* DST_H */
170/*! \file */
171