| Index: mozilla/security/nss/lib/freebl/blapit.h
|
| ===================================================================
|
| --- mozilla/security/nss/lib/freebl/blapit.h (revision 191424)
|
| +++ mozilla/security/nss/lib/freebl/blapit.h (working copy)
|
| @@ -1,415 +0,0 @@
|
| -/*
|
| - * blapit.h - public data structures for the crypto library
|
| - *
|
| - * This Source Code Form is subject to the terms of the Mozilla Public
|
| - * License, v. 2.0. If a copy of the MPL was not distributed with this
|
| - * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
| -/* $Id: blapit.h,v 1.30 2012/09/28 22:46:32 rrelyea%redhat.com Exp $ */
|
| -
|
| -#ifndef _BLAPIT_H_
|
| -#define _BLAPIT_H_
|
| -
|
| -#include "seccomon.h"
|
| -#include "prlink.h"
|
| -#include "plarena.h"
|
| -#include "ecl-exp.h"
|
| -
|
| -
|
| -/* RC2 operation modes */
|
| -#define NSS_RC2 0
|
| -#define NSS_RC2_CBC 1
|
| -
|
| -/* RC5 operation modes */
|
| -#define NSS_RC5 0
|
| -#define NSS_RC5_CBC 1
|
| -
|
| -/* DES operation modes */
|
| -#define NSS_DES 0
|
| -#define NSS_DES_CBC 1
|
| -#define NSS_DES_EDE3 2
|
| -#define NSS_DES_EDE3_CBC 3
|
| -
|
| -#define DES_KEY_LENGTH 8 /* Bytes */
|
| -
|
| -/* AES operation modes */
|
| -#define NSS_AES 0
|
| -#define NSS_AES_CBC 1
|
| -#define NSS_AES_CTS 2
|
| -#define NSS_AES_CTR 3
|
| -#define NSS_AES_GCM 4
|
| -
|
| -/* Camellia operation modes */
|
| -#define NSS_CAMELLIA 0
|
| -#define NSS_CAMELLIA_CBC 1
|
| -
|
| -/* SEED operation modes */
|
| -#define NSS_SEED 0
|
| -#define NSS_SEED_CBC 1
|
| -
|
| -#define DSA1_SUBPRIME_LEN 20 /* Bytes */
|
| -#define DSA1_SIGNATURE_LEN (DSA1_SUBPRIME_LEN*2) /* Bytes */
|
| -#define DSA_MAX_SUBPRIME_LEN 32 /* Bytes */
|
| -#define DSA_MAX_SIGNATURE_LEN (DSA_MAX_SUBPRIME_LEN*2)/* Bytes */
|
| -
|
| -/*
|
| - * Mark the old defines as deprecated. This will warn code that expected
|
| - * DSA1 only that they need to change if the are to support DSA2.
|
| - */
|
| -#if defined(__GNUC__) && (__GNUC__ > 3)
|
| -/* make GCC warn when we use these #defines */
|
| -typedef int __BLAPI_DEPRECATED __attribute__((deprecated));
|
| -#define DSA_SUBPRIME_LEN ((__BLAPI_DEPRECATED)DSA1_SUBPRIME_LEN)
|
| -#define DSA_SIGNATURE_LEN ((__BLAPI_DEPRECATED)DSA1_SIGNATURE_LEN)
|
| -#define DSA_Q_BITS ((__BLAPI_DEPRECATED)(DSA1_SUBPRIME_LEN*8))
|
| -#else
|
| -#ifdef _WIN32
|
| -/* This magic gets the windows compiler to give us a deprecation
|
| - * warning */
|
| -#pragma deprecated(DSA_SUBPRIME_LEN, DSA_SIGNATURE_LEN, DSA_QBITS)
|
| -#endif
|
| -#define DSA_SUBPRIME_LEN DSA1_SUBPRIME_LEN
|
| -#define DSA_SIGNATURE_LEN DSA1_SIGNATURE_LEN
|
| -#define DSA_Q_BITS (DSA1_SUBPRIME_LEN*8)
|
| -#endif
|
| -
|
| -
|
| -/* XXX We shouldn't have to hard code this limit. For
|
| - * now, this is the quickest way to support ECDSA signature
|
| - * processing (ECDSA signature lengths depend on curve
|
| - * size). This limit is sufficient for curves upto
|
| - * 576 bits.
|
| - */
|
| -#define MAX_ECKEY_LEN 72 /* Bytes */
|
| -
|
| -/* EC point compression format */
|
| -#define EC_POINT_FORM_COMPRESSED_Y0 0x02
|
| -#define EC_POINT_FORM_COMPRESSED_Y1 0x03
|
| -#define EC_POINT_FORM_UNCOMPRESSED 0x04
|
| -#define EC_POINT_FORM_HYBRID_Y0 0x06
|
| -#define EC_POINT_FORM_HYBRID_Y1 0x07
|
| -
|
| -/*
|
| - * Number of bytes each hash algorithm produces
|
| - */
|
| -#define MD2_LENGTH 16 /* Bytes */
|
| -#define MD5_LENGTH 16 /* Bytes */
|
| -#define SHA1_LENGTH 20 /* Bytes */
|
| -#define SHA256_LENGTH 32 /* bytes */
|
| -#define SHA384_LENGTH 48 /* bytes */
|
| -#define SHA512_LENGTH 64 /* bytes */
|
| -#define HASH_LENGTH_MAX SHA512_LENGTH
|
| -
|
| -/*
|
| - * Input block size for each hash algorithm.
|
| - */
|
| -
|
| -#define MD2_BLOCK_LENGTH 64 /* bytes */
|
| -#define MD5_BLOCK_LENGTH 64 /* bytes */
|
| -#define SHA1_BLOCK_LENGTH 64 /* bytes */
|
| -#define SHA224_BLOCK_LENGTH 64 /* bytes */
|
| -#define SHA256_BLOCK_LENGTH 64 /* bytes */
|
| -#define SHA384_BLOCK_LENGTH 128 /* bytes */
|
| -#define SHA512_BLOCK_LENGTH 128 /* bytes */
|
| -#define HASH_BLOCK_LENGTH_MAX SHA512_BLOCK_LENGTH
|
| -
|
| -#define AES_KEY_WRAP_IV_BYTES 8
|
| -#define AES_KEY_WRAP_BLOCK_SIZE 8 /* bytes */
|
| -#define AES_BLOCK_SIZE 16 /* bytes */
|
| -
|
| -#define AES_128_KEY_LENGTH 16 /* bytes */
|
| -#define AES_192_KEY_LENGTH 24 /* bytes */
|
| -#define AES_256_KEY_LENGTH 32 /* bytes */
|
| -
|
| -#define CAMELLIA_BLOCK_SIZE 16 /* bytes */
|
| -
|
| -#define SEED_BLOCK_SIZE 16 /* bytes */
|
| -#define SEED_KEY_LENGTH 16 /* bytes */
|
| -
|
| -#define NSS_FREEBL_DEFAULT_CHUNKSIZE 2048
|
| -
|
| -/*
|
| - * These values come from the initial key size limits from the PKCS #11
|
| - * module. They may be arbitrarily adjusted to any value freebl supports.
|
| - */
|
| -#define RSA_MIN_MODULUS_BITS 128
|
| -#define RSA_MAX_MODULUS_BITS 16384
|
| -#define RSA_MAX_EXPONENT_BITS 64
|
| -#define DH_MIN_P_BITS 128
|
| -#define DH_MAX_P_BITS 16384
|
| -
|
| -/*
|
| - * The FIPS 186-1 algorithm for generating primes P and Q allows only 9
|
| - * distinct values for the length of P, and only one value for the
|
| - * length of Q.
|
| - * The algorithm uses a variable j to indicate which of the 9 lengths
|
| - * of P is to be used.
|
| - * The following table relates j to the lengths of P and Q in bits.
|
| - *
|
| - * j bits in P bits in Q
|
| - * _ _________ _________
|
| - * 0 512 160
|
| - * 1 576 160
|
| - * 2 640 160
|
| - * 3 704 160
|
| - * 4 768 160
|
| - * 5 832 160
|
| - * 6 896 160
|
| - * 7 960 160
|
| - * 8 1024 160
|
| - *
|
| - * The FIPS-186-1 compliant PQG generator takes j as an input parameter.
|
| - *
|
| - * FIPS 186-3 algorithm specifies 4 distinct P and Q sizes:
|
| - *
|
| - * bits in P bits in Q
|
| - * _________ _________
|
| - * 1024 160
|
| - * 2048 224
|
| - * 2048 256
|
| - * 3072 256
|
| - *
|
| - * The FIPS-186-3 complaiant PQG generator (PQG V2) takes arbitrary p and q
|
| - * lengths as input and returns an error if they aren't in this list.
|
| - */
|
| -
|
| -#define DSA1_Q_BITS 160
|
| -#define DSA_MAX_P_BITS 3072
|
| -#define DSA_MIN_P_BITS 512
|
| -#define DSA_MAX_Q_BITS 256
|
| -#define DSA_MIN_Q_BITS 160
|
| -
|
| -#if DSA_MAX_Q_BITS != DSA_MAX_SUBPRIME_LEN*8
|
| -#error "Inconsistent declaration of DSA SUBPRIME/Q parameters in blapit.h"
|
| -#endif
|
| -
|
| -
|
| -/*
|
| - * function takes desired number of bits in P,
|
| - * returns index (0..8) or -1 if number of bits is invalid.
|
| - */
|
| -#define PQG_PBITS_TO_INDEX(bits) \
|
| - (((bits) < 512 || (bits) > 1024 || (bits) % 64) ? \
|
| - -1 : (int)((bits)-512)/64)
|
| -
|
| -/*
|
| - * function takes index (0-8)
|
| - * returns number of bits in P for that index, or -1 if index is invalid.
|
| - */
|
| -#define PQG_INDEX_TO_PBITS(j) (((unsigned)(j) > 8) ? -1 : (512 + 64 * (j)))
|
| -
|
| -
|
| -/***************************************************************************
|
| -** Opaque objects
|
| -*/
|
| -
|
| -struct DESContextStr ;
|
| -struct RC2ContextStr ;
|
| -struct RC4ContextStr ;
|
| -struct RC5ContextStr ;
|
| -struct AESContextStr ;
|
| -struct CamelliaContextStr ;
|
| -struct MD2ContextStr ;
|
| -struct MD5ContextStr ;
|
| -struct SHA1ContextStr ;
|
| -struct SHA256ContextStr ;
|
| -struct SHA512ContextStr ;
|
| -struct AESKeyWrapContextStr ;
|
| -struct SEEDContextStr ;
|
| -
|
| -typedef struct DESContextStr DESContext;
|
| -typedef struct RC2ContextStr RC2Context;
|
| -typedef struct RC4ContextStr RC4Context;
|
| -typedef struct RC5ContextStr RC5Context;
|
| -typedef struct AESContextStr AESContext;
|
| -typedef struct CamelliaContextStr CamelliaContext;
|
| -typedef struct MD2ContextStr MD2Context;
|
| -typedef struct MD5ContextStr MD5Context;
|
| -typedef struct SHA1ContextStr SHA1Context;
|
| -typedef struct SHA256ContextStr SHA256Context;
|
| -/* SHA224Context is really a SHA256ContextStr. This is not a mistake. */
|
| -typedef struct SHA256ContextStr SHA224Context;
|
| -typedef struct SHA512ContextStr SHA512Context;
|
| -/* SHA384Context is really a SHA512ContextStr. This is not a mistake. */
|
| -typedef struct SHA512ContextStr SHA384Context;
|
| -typedef struct AESKeyWrapContextStr AESKeyWrapContext;
|
| -typedef struct SEEDContextStr SEEDContext;
|
| -
|
| -/***************************************************************************
|
| -** RSA Public and Private Key structures
|
| -*/
|
| -
|
| -/* member names from PKCS#1, section 7.1 */
|
| -struct RSAPublicKeyStr {
|
| - PLArenaPool * arena;
|
| - SECItem modulus;
|
| - SECItem publicExponent;
|
| -};
|
| -typedef struct RSAPublicKeyStr RSAPublicKey;
|
| -
|
| -/* member names from PKCS#1, section 7.2 */
|
| -struct RSAPrivateKeyStr {
|
| - PLArenaPool * arena;
|
| - SECItem version;
|
| - SECItem modulus;
|
| - SECItem publicExponent;
|
| - SECItem privateExponent;
|
| - SECItem prime1;
|
| - SECItem prime2;
|
| - SECItem exponent1;
|
| - SECItem exponent2;
|
| - SECItem coefficient;
|
| -};
|
| -typedef struct RSAPrivateKeyStr RSAPrivateKey;
|
| -
|
| -
|
| -/***************************************************************************
|
| -** DSA Public and Private Key and related structures
|
| -*/
|
| -
|
| -struct PQGParamsStr {
|
| - PLArenaPool *arena;
|
| - SECItem prime; /* p */
|
| - SECItem subPrime; /* q */
|
| - SECItem base; /* g */
|
| - /* XXX chrisk: this needs to be expanded to hold j and validationParms (RFC2459 7.3.2) */
|
| -};
|
| -typedef struct PQGParamsStr PQGParams;
|
| -
|
| -struct PQGVerifyStr {
|
| - PLArenaPool * arena; /* includes this struct, seed, & h. */
|
| - unsigned int counter;
|
| - SECItem seed;
|
| - SECItem h;
|
| -};
|
| -typedef struct PQGVerifyStr PQGVerify;
|
| -
|
| -struct DSAPublicKeyStr {
|
| - PQGParams params;
|
| - SECItem publicValue;
|
| -};
|
| -typedef struct DSAPublicKeyStr DSAPublicKey;
|
| -
|
| -struct DSAPrivateKeyStr {
|
| - PQGParams params;
|
| - SECItem publicValue;
|
| - SECItem privateValue;
|
| -};
|
| -typedef struct DSAPrivateKeyStr DSAPrivateKey;
|
| -
|
| -/***************************************************************************
|
| -** Diffie-Hellman Public and Private Key and related structures
|
| -** Structure member names suggested by PKCS#3.
|
| -*/
|
| -
|
| -struct DHParamsStr {
|
| - PLArenaPool * arena;
|
| - SECItem prime; /* p */
|
| - SECItem base; /* g */
|
| -};
|
| -typedef struct DHParamsStr DHParams;
|
| -
|
| -struct DHPublicKeyStr {
|
| - PLArenaPool * arena;
|
| - SECItem prime;
|
| - SECItem base;
|
| - SECItem publicValue;
|
| -};
|
| -typedef struct DHPublicKeyStr DHPublicKey;
|
| -
|
| -struct DHPrivateKeyStr {
|
| - PLArenaPool * arena;
|
| - SECItem prime;
|
| - SECItem base;
|
| - SECItem publicValue;
|
| - SECItem privateValue;
|
| -};
|
| -typedef struct DHPrivateKeyStr DHPrivateKey;
|
| -
|
| -/***************************************************************************
|
| -** Data structures used for elliptic curve parameters and
|
| -** public and private keys.
|
| -*/
|
| -
|
| -/*
|
| -** The ECParams data structures can encode elliptic curve
|
| -** parameters for both GFp and GF2m curves.
|
| -*/
|
| -
|
| -typedef enum { ec_params_explicit,
|
| - ec_params_named
|
| -} ECParamsType;
|
| -
|
| -typedef enum { ec_field_GFp = 1,
|
| - ec_field_GF2m
|
| -} ECFieldType;
|
| -
|
| -struct ECFieldIDStr {
|
| - int size; /* field size in bits */
|
| - ECFieldType type;
|
| - union {
|
| - SECItem prime; /* prime p for (GFp) */
|
| - SECItem poly; /* irreducible binary polynomial for (GF2m) */
|
| - } u;
|
| - int k1; /* first coefficient of pentanomial or
|
| - * the only coefficient of trinomial
|
| - */
|
| - int k2; /* two remaining coefficients of pentanomial */
|
| - int k3;
|
| -};
|
| -typedef struct ECFieldIDStr ECFieldID;
|
| -
|
| -struct ECCurveStr {
|
| - SECItem a; /* contains octet stream encoding of
|
| - * field element (X9.62 section 4.3.3)
|
| - */
|
| - SECItem b;
|
| - SECItem seed;
|
| -};
|
| -typedef struct ECCurveStr ECCurve;
|
| -
|
| -struct ECParamsStr {
|
| - PLArenaPool * arena;
|
| - ECParamsType type;
|
| - ECFieldID fieldID;
|
| - ECCurve curve;
|
| - SECItem base;
|
| - SECItem order;
|
| - int cofactor;
|
| - SECItem DEREncoding;
|
| - ECCurveName name;
|
| - SECItem curveOID;
|
| -};
|
| -typedef struct ECParamsStr ECParams;
|
| -
|
| -struct ECPublicKeyStr {
|
| - ECParams ecParams;
|
| - SECItem publicValue; /* elliptic curve point encoded as
|
| - * octet stream.
|
| - */
|
| -};
|
| -typedef struct ECPublicKeyStr ECPublicKey;
|
| -
|
| -struct ECPrivateKeyStr {
|
| - ECParams ecParams;
|
| - SECItem publicValue; /* encoded ec point */
|
| - SECItem privateValue; /* private big integer */
|
| - SECItem version; /* As per SEC 1, Appendix C, Section C.4 */
|
| -};
|
| -typedef struct ECPrivateKeyStr ECPrivateKey;
|
| -
|
| -typedef void * (*BLapiAllocateFunc)(void);
|
| -typedef void (*BLapiDestroyContextFunc)(void *cx, PRBool freeit);
|
| -typedef SECStatus (*BLapiInitContextFunc)(void *cx,
|
| - const unsigned char *key,
|
| - unsigned int keylen,
|
| - const unsigned char *,
|
| - int,
|
| - unsigned int ,
|
| - unsigned int );
|
| -typedef SECStatus (*BLapiEncrypt)(void *cx, unsigned char *output,
|
| - unsigned int *outputLen,
|
| - unsigned int maxOutputLen,
|
| - const unsigned char *input,
|
| - unsigned int inputLen);
|
| -
|
| -#endif /* _BLAPIT_H_ */
|
|
|