Index: openssl/engines/ccgost/gost_keywrap.h |
=================================================================== |
--- openssl/engines/ccgost/gost_keywrap.h (revision 0) |
+++ openssl/engines/ccgost/gost_keywrap.h (revision 0) |
@@ -0,0 +1,56 @@ |
+/********************************************************************** |
+ * gost_keywrap.h * |
+ * Copyright (c) 2005-2006 Cryptocom LTD * |
+ * This file is distributed under the same license as OpenSSL * |
+ * * |
+ * Implementation of CryptoPro key wrap algorithm, as defined in * |
+ * RFC 4357 p 6.3 and 6.4 * |
+ * Doesn't need OpenSSL * |
+ **********************************************************************/ |
+#ifndef GOST_KEYWRAP_H |
+#define GOST_KEYWRAP_H |
+#include <string.h> |
+#include "gost89.h" |
+/* Diversifies key using random UserKey Material |
+ * Implements RFC 4357 p 6.5 key diversification algorithm |
+ * |
+ * inputKey - 32byte key to be diversified |
+ * ukm - 8byte user key material |
+ * outputKey - 32byte buffer to store diversified key |
+ * |
+ */ |
+void keyDiversifyCryptoPro(gost_ctx *ctx, |
+ const unsigned char *inputKey, |
+ const unsigned char *ukm, |
+ unsigned char *outputKey); |
+/* |
+ * Wraps key using RFC 4357 6.3 |
+ * ctx - gost encryption context, initialized with some S-boxes |
+ * keyExchangeKey (KEK) 32-byte (256-bit) shared key |
+ * ukm - 8 byte (64 bit) user key material, |
+ * sessionKey - 32-byte (256-bit) key to be wrapped |
+ * wrappedKey - 44-byte buffer to store wrapped key |
+ */ |
+ |
+int keyWrapCryptoPro(gost_ctx *ctx, |
+ const unsigned char *keyExchangeKey, |
+ const unsigned char *ukm, |
+ const unsigned char *sessionKey, |
+ unsigned char *wrappedKey) ; |
+/* |
+ * Unwraps key using RFC 4357 6.4 |
+ * ctx - gost encryption context, initialized with some S-boxes |
+ * keyExchangeKey 32-byte shared key |
+ * wrappedKey 44 byte key to be unwrapped (concatenation of 8-byte UKM, |
+ * 32 byte encrypted key and 4 byte MAC |
+ * |
+ * sessionKEy - 32byte buffer to store sessionKey in |
+ * Returns 1 if key is decrypted successfully, and 0 if MAC doesn't match |
+ */ |
+ |
+ |
+int keyUnwrapCryptoPro(gost_ctx *ctx, |
+ const unsigned char *keyExchangeKey, |
+ const unsigned char *wrappedKey, |
+ unsigned char *sessionKey) ; |
+#endif |