| OLD | NEW |
| (Empty) |
| 1 /* This Source Code Form is subject to the terms of the Mozilla Public | |
| 2 * License, v. 2.0. If a copy of the MPL was not distributed with this | |
| 3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ | |
| 4 | |
| 5 #ifndef _SECOIDT_H_ | |
| 6 #define _SECOIDT_H_ | |
| 7 | |
| 8 #include "utilrename.h" | |
| 9 | |
| 10 /* | |
| 11 * secoidt.h - public data structures for ASN.1 OID functions | |
| 12 * | |
| 13 * $Id: secoidt.h,v 1.37 2012/12/19 02:10:42 emaldona%redhat.com Exp $ | |
| 14 */ | |
| 15 | |
| 16 #include "secitem.h" | |
| 17 | |
| 18 typedef struct SECOidDataStr SECOidData; | |
| 19 typedef struct SECAlgorithmIDStr SECAlgorithmID; | |
| 20 | |
| 21 /* | |
| 22 ** An X.500 algorithm identifier | |
| 23 */ | |
| 24 struct SECAlgorithmIDStr { | |
| 25 SECItem algorithm; | |
| 26 SECItem parameters; | |
| 27 }; | |
| 28 | |
| 29 /* | |
| 30 * Misc object IDs - these numbers are for convenient handling. | |
| 31 * They are mapped into real object IDs | |
| 32 * | |
| 33 * NOTE: the order of these entries must mach the array "oids" of SECOidData | |
| 34 * in util/secoid.c. | |
| 35 */ | |
| 36 typedef enum { | |
| 37 SEC_OID_UNKNOWN = 0, | |
| 38 SEC_OID_MD2 = 1, | |
| 39 SEC_OID_MD4 = 2, | |
| 40 SEC_OID_MD5 = 3, | |
| 41 SEC_OID_SHA1 = 4, | |
| 42 SEC_OID_RC2_CBC = 5, | |
| 43 SEC_OID_RC4 = 6, | |
| 44 SEC_OID_DES_EDE3_CBC = 7, | |
| 45 SEC_OID_RC5_CBC_PAD = 8, | |
| 46 SEC_OID_DES_ECB = 9, | |
| 47 SEC_OID_DES_CBC = 10, | |
| 48 SEC_OID_DES_OFB = 11, | |
| 49 SEC_OID_DES_CFB = 12, | |
| 50 SEC_OID_DES_MAC = 13, | |
| 51 SEC_OID_DES_EDE = 14, | |
| 52 SEC_OID_ISO_SHA_WITH_RSA_SIGNATURE = 15, | |
| 53 SEC_OID_PKCS1_RSA_ENCRYPTION = 16, | |
| 54 SEC_OID_PKCS1_MD2_WITH_RSA_ENCRYPTION = 17, | |
| 55 SEC_OID_PKCS1_MD4_WITH_RSA_ENCRYPTION = 18, | |
| 56 SEC_OID_PKCS1_MD5_WITH_RSA_ENCRYPTION = 19, | |
| 57 SEC_OID_PKCS1_SHA1_WITH_RSA_ENCRYPTION = 20, | |
| 58 SEC_OID_PKCS5_PBE_WITH_MD2_AND_DES_CBC = 21, | |
| 59 SEC_OID_PKCS5_PBE_WITH_MD5_AND_DES_CBC = 22, | |
| 60 SEC_OID_PKCS5_PBE_WITH_SHA1_AND_DES_CBC = 23, | |
| 61 SEC_OID_PKCS7 = 24, | |
| 62 SEC_OID_PKCS7_DATA = 25, | |
| 63 SEC_OID_PKCS7_SIGNED_DATA = 26, | |
| 64 SEC_OID_PKCS7_ENVELOPED_DATA = 27, | |
| 65 SEC_OID_PKCS7_SIGNED_ENVELOPED_DATA = 28, | |
| 66 SEC_OID_PKCS7_DIGESTED_DATA = 29, | |
| 67 SEC_OID_PKCS7_ENCRYPTED_DATA = 30, | |
| 68 SEC_OID_PKCS9_EMAIL_ADDRESS = 31, | |
| 69 SEC_OID_PKCS9_UNSTRUCTURED_NAME = 32, | |
| 70 SEC_OID_PKCS9_CONTENT_TYPE = 33, | |
| 71 SEC_OID_PKCS9_MESSAGE_DIGEST = 34, | |
| 72 SEC_OID_PKCS9_SIGNING_TIME = 35, | |
| 73 SEC_OID_PKCS9_COUNTER_SIGNATURE = 36, | |
| 74 SEC_OID_PKCS9_CHALLENGE_PASSWORD = 37, | |
| 75 SEC_OID_PKCS9_UNSTRUCTURED_ADDRESS = 38, | |
| 76 SEC_OID_PKCS9_EXTENDED_CERTIFICATE_ATTRIBUTES = 39, | |
| 77 SEC_OID_PKCS9_SMIME_CAPABILITIES = 40, | |
| 78 SEC_OID_AVA_COMMON_NAME = 41, | |
| 79 SEC_OID_AVA_COUNTRY_NAME = 42, | |
| 80 SEC_OID_AVA_LOCALITY = 43, | |
| 81 SEC_OID_AVA_STATE_OR_PROVINCE = 44, | |
| 82 SEC_OID_AVA_ORGANIZATION_NAME = 45, | |
| 83 SEC_OID_AVA_ORGANIZATIONAL_UNIT_NAME = 46, | |
| 84 SEC_OID_AVA_DN_QUALIFIER = 47, | |
| 85 SEC_OID_AVA_DC = 48, | |
| 86 | |
| 87 SEC_OID_NS_TYPE_GIF = 49, | |
| 88 SEC_OID_NS_TYPE_JPEG = 50, | |
| 89 SEC_OID_NS_TYPE_URL = 51, | |
| 90 SEC_OID_NS_TYPE_HTML = 52, | |
| 91 SEC_OID_NS_TYPE_CERT_SEQUENCE = 53, | |
| 92 SEC_OID_MISSI_KEA_DSS_OLD = 54, | |
| 93 SEC_OID_MISSI_DSS_OLD = 55, | |
| 94 SEC_OID_MISSI_KEA_DSS = 56, | |
| 95 SEC_OID_MISSI_DSS = 57, | |
| 96 SEC_OID_MISSI_KEA = 58, | |
| 97 SEC_OID_MISSI_ALT_KEA = 59, | |
| 98 | |
| 99 /* Netscape private certificate extensions */ | |
| 100 SEC_OID_NS_CERT_EXT_NETSCAPE_OK = 60, | |
| 101 SEC_OID_NS_CERT_EXT_ISSUER_LOGO = 61, | |
| 102 SEC_OID_NS_CERT_EXT_SUBJECT_LOGO = 62, | |
| 103 SEC_OID_NS_CERT_EXT_CERT_TYPE = 63, | |
| 104 SEC_OID_NS_CERT_EXT_BASE_URL = 64, | |
| 105 SEC_OID_NS_CERT_EXT_REVOCATION_URL = 65, | |
| 106 SEC_OID_NS_CERT_EXT_CA_REVOCATION_URL = 66, | |
| 107 SEC_OID_NS_CERT_EXT_CA_CRL_URL = 67, | |
| 108 SEC_OID_NS_CERT_EXT_CA_CERT_URL = 68, | |
| 109 SEC_OID_NS_CERT_EXT_CERT_RENEWAL_URL = 69, | |
| 110 SEC_OID_NS_CERT_EXT_CA_POLICY_URL = 70, | |
| 111 SEC_OID_NS_CERT_EXT_HOMEPAGE_URL = 71, | |
| 112 SEC_OID_NS_CERT_EXT_ENTITY_LOGO = 72, | |
| 113 SEC_OID_NS_CERT_EXT_USER_PICTURE = 73, | |
| 114 SEC_OID_NS_CERT_EXT_SSL_SERVER_NAME = 74, | |
| 115 SEC_OID_NS_CERT_EXT_COMMENT = 75, | |
| 116 SEC_OID_NS_CERT_EXT_LOST_PASSWORD_URL = 76, | |
| 117 SEC_OID_NS_CERT_EXT_CERT_RENEWAL_TIME = 77, | |
| 118 SEC_OID_NS_KEY_USAGE_GOVT_APPROVED = 78, | |
| 119 | |
| 120 /* x.509 v3 Extensions */ | |
| 121 SEC_OID_X509_SUBJECT_DIRECTORY_ATTR = 79, | |
| 122 SEC_OID_X509_SUBJECT_KEY_ID = 80, | |
| 123 SEC_OID_X509_KEY_USAGE = 81, | |
| 124 SEC_OID_X509_PRIVATE_KEY_USAGE_PERIOD = 82, | |
| 125 SEC_OID_X509_SUBJECT_ALT_NAME = 83, | |
| 126 SEC_OID_X509_ISSUER_ALT_NAME = 84, | |
| 127 SEC_OID_X509_BASIC_CONSTRAINTS = 85, | |
| 128 SEC_OID_X509_NAME_CONSTRAINTS = 86, | |
| 129 SEC_OID_X509_CRL_DIST_POINTS = 87, | |
| 130 SEC_OID_X509_CERTIFICATE_POLICIES = 88, | |
| 131 SEC_OID_X509_POLICY_MAPPINGS = 89, | |
| 132 SEC_OID_X509_POLICY_CONSTRAINTS = 90, | |
| 133 SEC_OID_X509_AUTH_KEY_ID = 91, | |
| 134 SEC_OID_X509_EXT_KEY_USAGE = 92, | |
| 135 SEC_OID_X509_AUTH_INFO_ACCESS = 93, | |
| 136 | |
| 137 SEC_OID_X509_CRL_NUMBER = 94, | |
| 138 SEC_OID_X509_REASON_CODE = 95, | |
| 139 SEC_OID_X509_INVALID_DATE = 96, | |
| 140 /* End of x.509 v3 Extensions */ | |
| 141 | |
| 142 SEC_OID_X500_RSA_ENCRYPTION = 97, | |
| 143 | |
| 144 /* alg 1485 additions */ | |
| 145 SEC_OID_RFC1274_UID = 98, | |
| 146 SEC_OID_RFC1274_MAIL = 99, | |
| 147 | |
| 148 /* PKCS 12 additions */ | |
| 149 SEC_OID_PKCS12 = 100, | |
| 150 SEC_OID_PKCS12_MODE_IDS = 101, | |
| 151 SEC_OID_PKCS12_ESPVK_IDS = 102, | |
| 152 SEC_OID_PKCS12_BAG_IDS = 103, | |
| 153 SEC_OID_PKCS12_CERT_BAG_IDS = 104, | |
| 154 SEC_OID_PKCS12_OIDS = 105, | |
| 155 SEC_OID_PKCS12_PBE_IDS = 106, | |
| 156 SEC_OID_PKCS12_SIGNATURE_IDS = 107, | |
| 157 SEC_OID_PKCS12_ENVELOPING_IDS = 108, | |
| 158 /* SEC_OID_PKCS12_OFFLINE_TRANSPORT_MODE, | |
| 159 SEC_OID_PKCS12_ONLINE_TRANSPORT_MODE, */ | |
| 160 SEC_OID_PKCS12_PKCS8_KEY_SHROUDING = 109, | |
| 161 SEC_OID_PKCS12_KEY_BAG_ID = 110, | |
| 162 SEC_OID_PKCS12_CERT_AND_CRL_BAG_ID = 111, | |
| 163 SEC_OID_PKCS12_SECRET_BAG_ID = 112, | |
| 164 SEC_OID_PKCS12_X509_CERT_CRL_BAG = 113, | |
| 165 SEC_OID_PKCS12_SDSI_CERT_BAG = 114, | |
| 166 SEC_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC4 = 115, | |
| 167 SEC_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC4 = 116, | |
| 168 SEC_OID_PKCS12_PBE_WITH_SHA1_AND_TRIPLE_DES_CBC = 117, | |
| 169 SEC_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC2_CBC = 118, | |
| 170 SEC_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC = 119, | |
| 171 SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_128_BIT_RC4 = 120, | |
| 172 SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_40_BIT_RC4 = 121, | |
| 173 SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_TRIPLE_DES = 122, | |
| 174 SEC_OID_PKCS12_RSA_SIGNATURE_WITH_SHA1_DIGEST = 123, | |
| 175 /* end of PKCS 12 additions */ | |
| 176 | |
| 177 /* DSA signatures */ | |
| 178 SEC_OID_ANSIX9_DSA_SIGNATURE = 124, | |
| 179 SEC_OID_ANSIX9_DSA_SIGNATURE_WITH_SHA1_DIGEST = 125, | |
| 180 SEC_OID_BOGUS_DSA_SIGNATURE_WITH_SHA1_DIGEST = 126, | |
| 181 | |
| 182 /* Verisign OIDs */ | |
| 183 SEC_OID_VERISIGN_USER_NOTICES = 127, | |
| 184 | |
| 185 /* PKIX OIDs */ | |
| 186 SEC_OID_PKIX_CPS_POINTER_QUALIFIER = 128, | |
| 187 SEC_OID_PKIX_USER_NOTICE_QUALIFIER = 129, | |
| 188 SEC_OID_PKIX_OCSP = 130, | |
| 189 SEC_OID_PKIX_OCSP_BASIC_RESPONSE = 131, | |
| 190 SEC_OID_PKIX_OCSP_NONCE = 132, | |
| 191 SEC_OID_PKIX_OCSP_CRL = 133, | |
| 192 SEC_OID_PKIX_OCSP_RESPONSE = 134, | |
| 193 SEC_OID_PKIX_OCSP_NO_CHECK = 135, | |
| 194 SEC_OID_PKIX_OCSP_ARCHIVE_CUTOFF = 136, | |
| 195 SEC_OID_PKIX_OCSP_SERVICE_LOCATOR = 137, | |
| 196 SEC_OID_PKIX_REGCTRL_REGTOKEN = 138, | |
| 197 SEC_OID_PKIX_REGCTRL_AUTHENTICATOR = 139, | |
| 198 SEC_OID_PKIX_REGCTRL_PKIPUBINFO = 140, | |
| 199 SEC_OID_PKIX_REGCTRL_PKI_ARCH_OPTIONS = 141, | |
| 200 SEC_OID_PKIX_REGCTRL_OLD_CERT_ID = 142, | |
| 201 SEC_OID_PKIX_REGCTRL_PROTOCOL_ENC_KEY = 143, | |
| 202 SEC_OID_PKIX_REGINFO_UTF8_PAIRS = 144, | |
| 203 SEC_OID_PKIX_REGINFO_CERT_REQUEST = 145, | |
| 204 SEC_OID_EXT_KEY_USAGE_SERVER_AUTH = 146, | |
| 205 SEC_OID_EXT_KEY_USAGE_CLIENT_AUTH = 147, | |
| 206 SEC_OID_EXT_KEY_USAGE_CODE_SIGN = 148, | |
| 207 SEC_OID_EXT_KEY_USAGE_EMAIL_PROTECT = 149, | |
| 208 SEC_OID_EXT_KEY_USAGE_TIME_STAMP = 150, | |
| 209 SEC_OID_OCSP_RESPONDER = 151, | |
| 210 | |
| 211 /* Netscape Algorithm OIDs */ | |
| 212 SEC_OID_NETSCAPE_SMIME_KEA = 152, | |
| 213 | |
| 214 /* Skipjack OID -- ### mwelch temporary */ | |
| 215 SEC_OID_FORTEZZA_SKIPJACK = 153, | |
| 216 | |
| 217 /* PKCS 12 V2 oids */ | |
| 218 SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_128_BIT_RC4 = 154, | |
| 219 SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC4 = 155, | |
| 220 SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC = 156, | |
| 221 SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_2KEY_TRIPLE_DES_CBC = 157, | |
| 222 SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_128_BIT_RC2_CBC = 158, | |
| 223 SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC = 159, | |
| 224 SEC_OID_PKCS12_SAFE_CONTENTS_ID = 160, | |
| 225 SEC_OID_PKCS12_PKCS8_SHROUDED_KEY_BAG_ID = 161, | |
| 226 | |
| 227 SEC_OID_PKCS12_V1_KEY_BAG_ID = 162, | |
| 228 SEC_OID_PKCS12_V1_PKCS8_SHROUDED_KEY_BAG_ID = 163, | |
| 229 SEC_OID_PKCS12_V1_CERT_BAG_ID = 164, | |
| 230 SEC_OID_PKCS12_V1_CRL_BAG_ID = 165, | |
| 231 SEC_OID_PKCS12_V1_SECRET_BAG_ID = 166, | |
| 232 SEC_OID_PKCS12_V1_SAFE_CONTENTS_BAG_ID = 167, | |
| 233 SEC_OID_PKCS9_X509_CERT = 168, | |
| 234 SEC_OID_PKCS9_SDSI_CERT = 169, | |
| 235 SEC_OID_PKCS9_X509_CRL = 170, | |
| 236 SEC_OID_PKCS9_FRIENDLY_NAME = 171, | |
| 237 SEC_OID_PKCS9_LOCAL_KEY_ID = 172, | |
| 238 SEC_OID_BOGUS_KEY_USAGE = 173, | |
| 239 | |
| 240 /*Diffe Helman OIDS */ | |
| 241 SEC_OID_X942_DIFFIE_HELMAN_KEY = 174, | |
| 242 | |
| 243 /* Netscape other name types */ | |
| 244 /* SEC_OID_NETSCAPE_NICKNAME is an otherName field of type IA5String | |
| 245 * in the subjectAltName certificate extension. NSS dropped support | |
| 246 * for SEC_OID_NETSCAPE_NICKNAME in NSS 3.13. */ | |
| 247 SEC_OID_NETSCAPE_NICKNAME = 175, | |
| 248 | |
| 249 /* Cert Server OIDS */ | |
| 250 SEC_OID_NETSCAPE_RECOVERY_REQUEST = 176, | |
| 251 | |
| 252 /* New PSM certificate management OIDs */ | |
| 253 SEC_OID_CERT_RENEWAL_LOCATOR = 177, | |
| 254 SEC_OID_NS_CERT_EXT_SCOPE_OF_USE = 178, | |
| 255 | |
| 256 /* CMS (RFC2630) OIDs */ | |
| 257 SEC_OID_CMS_EPHEMERAL_STATIC_DIFFIE_HELLMAN = 179, | |
| 258 SEC_OID_CMS_3DES_KEY_WRAP = 180, | |
| 259 SEC_OID_CMS_RC2_KEY_WRAP = 181, | |
| 260 | |
| 261 /* SMIME attributes */ | |
| 262 SEC_OID_SMIME_ENCRYPTION_KEY_PREFERENCE = 182, | |
| 263 | |
| 264 /* AES OIDs */ | |
| 265 SEC_OID_AES_128_ECB = 183, | |
| 266 SEC_OID_AES_128_CBC = 184, | |
| 267 SEC_OID_AES_192_ECB = 185, | |
| 268 SEC_OID_AES_192_CBC = 186, | |
| 269 SEC_OID_AES_256_ECB = 187, | |
| 270 SEC_OID_AES_256_CBC = 188, | |
| 271 | |
| 272 SEC_OID_SDN702_DSA_SIGNATURE = 189, | |
| 273 | |
| 274 SEC_OID_MS_SMIME_ENCRYPTION_KEY_PREFERENCE = 190, | |
| 275 | |
| 276 SEC_OID_SHA256 = 191, | |
| 277 SEC_OID_SHA384 = 192, | |
| 278 SEC_OID_SHA512 = 193, | |
| 279 | |
| 280 SEC_OID_PKCS1_SHA256_WITH_RSA_ENCRYPTION = 194, | |
| 281 SEC_OID_PKCS1_SHA384_WITH_RSA_ENCRYPTION = 195, | |
| 282 SEC_OID_PKCS1_SHA512_WITH_RSA_ENCRYPTION = 196, | |
| 283 | |
| 284 SEC_OID_AES_128_KEY_WRAP = 197, | |
| 285 SEC_OID_AES_192_KEY_WRAP = 198, | |
| 286 SEC_OID_AES_256_KEY_WRAP = 199, | |
| 287 | |
| 288 /* Elliptic Curve Cryptography (ECC) OIDs */ | |
| 289 SEC_OID_ANSIX962_EC_PUBLIC_KEY = 200, | |
| 290 SEC_OID_ANSIX962_ECDSA_SHA1_SIGNATURE = 201, | |
| 291 | |
| 292 #define SEC_OID_ANSIX962_ECDSA_SIGNATURE_WITH_SHA1_DIGEST \ | |
| 293 SEC_OID_ANSIX962_ECDSA_SHA1_SIGNATURE | |
| 294 | |
| 295 /* ANSI X9.62 named elliptic curves (prime field) */ | |
| 296 SEC_OID_ANSIX962_EC_PRIME192V1 = 202, | |
| 297 SEC_OID_ANSIX962_EC_PRIME192V2 = 203, | |
| 298 SEC_OID_ANSIX962_EC_PRIME192V3 = 204, | |
| 299 SEC_OID_ANSIX962_EC_PRIME239V1 = 205, | |
| 300 SEC_OID_ANSIX962_EC_PRIME239V2 = 206, | |
| 301 SEC_OID_ANSIX962_EC_PRIME239V3 = 207, | |
| 302 SEC_OID_ANSIX962_EC_PRIME256V1 = 208, | |
| 303 | |
| 304 /* SECG named elliptic curves (prime field) */ | |
| 305 SEC_OID_SECG_EC_SECP112R1 = 209, | |
| 306 SEC_OID_SECG_EC_SECP112R2 = 210, | |
| 307 SEC_OID_SECG_EC_SECP128R1 = 211, | |
| 308 SEC_OID_SECG_EC_SECP128R2 = 212, | |
| 309 SEC_OID_SECG_EC_SECP160K1 = 213, | |
| 310 SEC_OID_SECG_EC_SECP160R1 = 214, | |
| 311 SEC_OID_SECG_EC_SECP160R2 = 215, | |
| 312 SEC_OID_SECG_EC_SECP192K1 = 216, | |
| 313 /* SEC_OID_SECG_EC_SECP192R1 is SEC_OID_ANSIX962_EC_PRIME192V1 */ | |
| 314 SEC_OID_SECG_EC_SECP224K1 = 217, | |
| 315 SEC_OID_SECG_EC_SECP224R1 = 218, | |
| 316 SEC_OID_SECG_EC_SECP256K1 = 219, | |
| 317 /* SEC_OID_SECG_EC_SECP256R1 is SEC_OID_ANSIX962_EC_PRIME256V1 */ | |
| 318 SEC_OID_SECG_EC_SECP384R1 = 220, | |
| 319 SEC_OID_SECG_EC_SECP521R1 = 221, | |
| 320 | |
| 321 /* ANSI X9.62 named elliptic curves (characteristic two field) */ | |
| 322 SEC_OID_ANSIX962_EC_C2PNB163V1 = 222, | |
| 323 SEC_OID_ANSIX962_EC_C2PNB163V2 = 223, | |
| 324 SEC_OID_ANSIX962_EC_C2PNB163V3 = 224, | |
| 325 SEC_OID_ANSIX962_EC_C2PNB176V1 = 225, | |
| 326 SEC_OID_ANSIX962_EC_C2TNB191V1 = 226, | |
| 327 SEC_OID_ANSIX962_EC_C2TNB191V2 = 227, | |
| 328 SEC_OID_ANSIX962_EC_C2TNB191V3 = 228, | |
| 329 SEC_OID_ANSIX962_EC_C2ONB191V4 = 229, | |
| 330 SEC_OID_ANSIX962_EC_C2ONB191V5 = 230, | |
| 331 SEC_OID_ANSIX962_EC_C2PNB208W1 = 231, | |
| 332 SEC_OID_ANSIX962_EC_C2TNB239V1 = 232, | |
| 333 SEC_OID_ANSIX962_EC_C2TNB239V2 = 233, | |
| 334 SEC_OID_ANSIX962_EC_C2TNB239V3 = 234, | |
| 335 SEC_OID_ANSIX962_EC_C2ONB239V4 = 235, | |
| 336 SEC_OID_ANSIX962_EC_C2ONB239V5 = 236, | |
| 337 SEC_OID_ANSIX962_EC_C2PNB272W1 = 237, | |
| 338 SEC_OID_ANSIX962_EC_C2PNB304W1 = 238, | |
| 339 SEC_OID_ANSIX962_EC_C2TNB359V1 = 239, | |
| 340 SEC_OID_ANSIX962_EC_C2PNB368W1 = 240, | |
| 341 SEC_OID_ANSIX962_EC_C2TNB431R1 = 241, | |
| 342 | |
| 343 /* SECG named elliptic curves (characteristic two field) */ | |
| 344 SEC_OID_SECG_EC_SECT113R1 = 242, | |
| 345 SEC_OID_SECG_EC_SECT113R2 = 243, | |
| 346 SEC_OID_SECG_EC_SECT131R1 = 244, | |
| 347 SEC_OID_SECG_EC_SECT131R2 = 245, | |
| 348 SEC_OID_SECG_EC_SECT163K1 = 246, | |
| 349 SEC_OID_SECG_EC_SECT163R1 = 247, | |
| 350 SEC_OID_SECG_EC_SECT163R2 = 248, | |
| 351 SEC_OID_SECG_EC_SECT193R1 = 249, | |
| 352 SEC_OID_SECG_EC_SECT193R2 = 250, | |
| 353 SEC_OID_SECG_EC_SECT233K1 = 251, | |
| 354 SEC_OID_SECG_EC_SECT233R1 = 252, | |
| 355 SEC_OID_SECG_EC_SECT239K1 = 253, | |
| 356 SEC_OID_SECG_EC_SECT283K1 = 254, | |
| 357 SEC_OID_SECG_EC_SECT283R1 = 255, | |
| 358 SEC_OID_SECG_EC_SECT409K1 = 256, | |
| 359 SEC_OID_SECG_EC_SECT409R1 = 257, | |
| 360 SEC_OID_SECG_EC_SECT571K1 = 258, | |
| 361 SEC_OID_SECG_EC_SECT571R1 = 259, | |
| 362 | |
| 363 SEC_OID_NETSCAPE_AOLSCREENNAME = 260, | |
| 364 | |
| 365 SEC_OID_AVA_SURNAME = 261, | |
| 366 SEC_OID_AVA_SERIAL_NUMBER = 262, | |
| 367 SEC_OID_AVA_STREET_ADDRESS = 263, | |
| 368 SEC_OID_AVA_TITLE = 264, | |
| 369 SEC_OID_AVA_POSTAL_ADDRESS = 265, | |
| 370 SEC_OID_AVA_POSTAL_CODE = 266, | |
| 371 SEC_OID_AVA_POST_OFFICE_BOX = 267, | |
| 372 SEC_OID_AVA_GIVEN_NAME = 268, | |
| 373 SEC_OID_AVA_INITIALS = 269, | |
| 374 SEC_OID_AVA_GENERATION_QUALIFIER = 270, | |
| 375 SEC_OID_AVA_HOUSE_IDENTIFIER = 271, | |
| 376 SEC_OID_AVA_PSEUDONYM = 272, | |
| 377 | |
| 378 /* More OIDs */ | |
| 379 SEC_OID_PKIX_CA_ISSUERS = 273, | |
| 380 SEC_OID_PKCS9_EXTENSION_REQUEST = 274, | |
| 381 | |
| 382 /* new EC Signature oids */ | |
| 383 SEC_OID_ANSIX962_ECDSA_SIGNATURE_RECOMMENDED_DIGEST = 275, | |
| 384 SEC_OID_ANSIX962_ECDSA_SIGNATURE_SPECIFIED_DIGEST = 276, | |
| 385 SEC_OID_ANSIX962_ECDSA_SHA224_SIGNATURE = 277, | |
| 386 SEC_OID_ANSIX962_ECDSA_SHA256_SIGNATURE = 278, | |
| 387 SEC_OID_ANSIX962_ECDSA_SHA384_SIGNATURE = 279, | |
| 388 SEC_OID_ANSIX962_ECDSA_SHA512_SIGNATURE = 280, | |
| 389 | |
| 390 /* More id-ce and id-pe OIDs from RFC 3280 */ | |
| 391 SEC_OID_X509_HOLD_INSTRUCTION_CODE = 281, | |
| 392 SEC_OID_X509_DELTA_CRL_INDICATOR = 282, | |
| 393 SEC_OID_X509_ISSUING_DISTRIBUTION_POINT = 283, | |
| 394 SEC_OID_X509_CERT_ISSUER = 284, | |
| 395 SEC_OID_X509_FRESHEST_CRL = 285, | |
| 396 SEC_OID_X509_INHIBIT_ANY_POLICY = 286, | |
| 397 SEC_OID_X509_SUBJECT_INFO_ACCESS = 287, | |
| 398 | |
| 399 /* Camellia OIDs (RFC3657)*/ | |
| 400 SEC_OID_CAMELLIA_128_CBC = 288, | |
| 401 SEC_OID_CAMELLIA_192_CBC = 289, | |
| 402 SEC_OID_CAMELLIA_256_CBC = 290, | |
| 403 | |
| 404 /* PKCS 5 V2 OIDS */ | |
| 405 SEC_OID_PKCS5_PBKDF2 = 291, | |
| 406 SEC_OID_PKCS5_PBES2 = 292, | |
| 407 SEC_OID_PKCS5_PBMAC1 = 293, | |
| 408 SEC_OID_HMAC_SHA1 = 294, | |
| 409 SEC_OID_HMAC_SHA224 = 295, | |
| 410 SEC_OID_HMAC_SHA256 = 296, | |
| 411 SEC_OID_HMAC_SHA384 = 297, | |
| 412 SEC_OID_HMAC_SHA512 = 298, | |
| 413 | |
| 414 SEC_OID_PKIX_TIMESTAMPING = 299, | |
| 415 SEC_OID_PKIX_CA_REPOSITORY = 300, | |
| 416 | |
| 417 SEC_OID_ISO_SHA1_WITH_RSA_SIGNATURE = 301, | |
| 418 | |
| 419 SEC_OID_SEED_CBC = 302, | |
| 420 | |
| 421 SEC_OID_X509_ANY_POLICY = 303, | |
| 422 | |
| 423 SEC_OID_PKCS1_RSA_OAEP_ENCRYPTION = 304, | |
| 424 SEC_OID_PKCS1_MGF1 = 305, | |
| 425 SEC_OID_PKCS1_PSPECIFIED = 306, | |
| 426 SEC_OID_PKCS1_RSA_PSS_SIGNATURE = 307, | |
| 427 SEC_OID_PKCS1_SHA224_WITH_RSA_ENCRYPTION = 308, | |
| 428 | |
| 429 SEC_OID_SHA224 = 309, | |
| 430 | |
| 431 SEC_OID_EV_INCORPORATION_LOCALITY = 310, | |
| 432 SEC_OID_EV_INCORPORATION_STATE = 311, | |
| 433 SEC_OID_EV_INCORPORATION_COUNTRY = 312, | |
| 434 SEC_OID_BUSINESS_CATEGORY = 313, | |
| 435 | |
| 436 SEC_OID_NIST_DSA_SIGNATURE_WITH_SHA224_DIGEST = 314, | |
| 437 SEC_OID_NIST_DSA_SIGNATURE_WITH_SHA256_DIGEST = 315, | |
| 438 | |
| 439 /* Microsoft Trust List Signing | |
| 440 * szOID_KP_CTL_USAGE_SIGNING | |
| 441 * where KP stands for Key Purpose | |
| 442 */ | |
| 443 SEC_OID_MS_EXT_KEY_USAGE_CTL_SIGNING = 316, | |
| 444 | |
| 445 SEC_OID_TOTAL | |
| 446 } SECOidTag; | |
| 447 | |
| 448 #define SEC_OID_SECG_EC_SECP192R1 SEC_OID_ANSIX962_EC_PRIME192V1 | |
| 449 #define SEC_OID_SECG_EC_SECP256R1 SEC_OID_ANSIX962_EC_PRIME256V1 | |
| 450 #define SEC_OID_PKCS12_KEY_USAGE SEC_OID_X509_KEY_USAGE | |
| 451 | |
| 452 /* fake OID for DSS sign/verify */ | |
| 453 #define SEC_OID_SHA SEC_OID_MISS_DSS | |
| 454 | |
| 455 typedef enum { | |
| 456 INVALID_CERT_EXTENSION = 0, | |
| 457 UNSUPPORTED_CERT_EXTENSION = 1, | |
| 458 SUPPORTED_CERT_EXTENSION = 2 | |
| 459 } SECSupportExtenTag; | |
| 460 | |
| 461 struct SECOidDataStr { | |
| 462 SECItem oid; | |
| 463 SECOidTag offset; | |
| 464 const char * desc; | |
| 465 unsigned long mechanism; | |
| 466 SECSupportExtenTag supportedExtension; | |
| 467 /* only used for x.509 v3 extensions, so | |
| 468 that we can print the names of those | |
| 469 extensions that we don't even support */ | |
| 470 }; | |
| 471 | |
| 472 /* New Opaque extended OID table API. | |
| 473 * These are algorithm policy Flags, used with functions | |
| 474 * NSS_SetAlgorithmPolicy & NSS_GetAlgorithmPolicy. | |
| 475 */ | |
| 476 #define NSS_USE_ALG_IN_CERT_SIGNATURE 0x00000001 /* CRLs and OCSP, too */ | |
| 477 #define NSS_USE_ALG_IN_CMS_SIGNATURE 0x00000002 /* used in S/MIME */ | |
| 478 #define NSS_USE_ALG_RESERVED 0xfffffffc /* may be used in future */ | |
| 479 | |
| 480 /* Code MUST NOT SET or CLEAR reserved bits, and must NOT depend on them | |
| 481 * being all zeros or having any other known value. The reserved bits | |
| 482 * must be ignored. | |
| 483 */ | |
| 484 | |
| 485 | |
| 486 #endif /* _SECOIDT_H_ */ | |
| OLD | NEW |