mbed TLS v2.16.6
pkcs11.h
Go to the documentation of this file.
1 
8 /*
9  * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
10  * SPDX-License-Identifier: Apache-2.0
11  *
12  * Licensed under the Apache License, Version 2.0 (the "License"); you may
13  * not use this file except in compliance with the License.
14  * You may obtain a copy of the License at
15  *
16  * http://www.apache.org/licenses/LICENSE-2.0
17  *
18  * Unless required by applicable law or agreed to in writing, software
19  * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
20  * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
21  * See the License for the specific language governing permissions and
22  * limitations under the License.
23  *
24  * This file is part of mbed TLS (https://tls.mbed.org)
25  */
26 #ifndef MBEDTLS_PKCS11_H
27 #define MBEDTLS_PKCS11_H
28 
29 #if !defined(MBEDTLS_CONFIG_FILE)
30 #include "config.h"
31 #else
32 #include MBEDTLS_CONFIG_FILE
33 #endif
34 
35 #if defined(MBEDTLS_PKCS11_C)
36 
37 #include "x509_crt.h"
38 
39 #include <pkcs11-helper-1.0/pkcs11h-certificate.h>
40 
41 #if ( defined(__ARMCC_VERSION) || defined(_MSC_VER) ) && \
42  !defined(inline) && !defined(__cplusplus)
43 #define inline __inline
44 #endif
45 
46 #ifdef __cplusplus
47 extern "C" {
48 #endif
49 
53 typedef struct mbedtls_pkcs11_context
54 {
55  pkcs11h_certificate_t pkcs11h_cert;
56  int len;
58 
64 
73 int mbedtls_pkcs11_x509_cert_bind( mbedtls_x509_crt *cert, pkcs11h_certificate_t pkcs11h_cert );
74 
86  pkcs11h_certificate_t pkcs11_cert );
87 
95 
114  int mode, size_t *olen,
115  const unsigned char *input,
116  unsigned char *output,
117  size_t output_max_len );
118 
136  int mode,
137  mbedtls_md_type_t md_alg,
138  unsigned int hashlen,
139  const unsigned char *hash,
140  unsigned char *sig );
141 
145 static inline int mbedtls_ssl_pkcs11_decrypt( void *ctx, int mode, size_t *olen,
146  const unsigned char *input, unsigned char *output,
147  size_t output_max_len )
148 {
149  return mbedtls_pkcs11_decrypt( (mbedtls_pkcs11_context *) ctx, mode, olen, input, output,
150  output_max_len );
151 }
152 
153 static inline int mbedtls_ssl_pkcs11_sign( void *ctx,
154  int (*f_rng)(void *, unsigned char *, size_t), void *p_rng,
155  int mode, mbedtls_md_type_t md_alg, unsigned int hashlen,
156  const unsigned char *hash, unsigned char *sig )
157 {
158  ((void) f_rng);
159  ((void) p_rng);
160  return mbedtls_pkcs11_sign( (mbedtls_pkcs11_context *) ctx, mode, md_alg,
161  hashlen, hash, sig );
162 }
163 
164 static inline size_t mbedtls_ssl_pkcs11_key_len( void *ctx )
165 {
166  return ( (mbedtls_pkcs11_context *) ctx )->len;
167 }
168 
169 #ifdef __cplusplus
170 }
171 #endif
172 
173 #endif /* MBEDTLS_PKCS11_C */
174 
175 #endif /* MBEDTLS_PKCS11_H */
mbedtls_md_type_t
mbedtls_md_type_t
Supported message digests.
Definition: md.h:58
mbedtls_pkcs11_context
struct mbedtls_pkcs11_context mbedtls_pkcs11_context
mbedtls_ssl_pkcs11_key_len
static size_t mbedtls_ssl_pkcs11_key_len(void *ctx)
Definition: pkcs11.h:164
mbedtls_ssl_pkcs11_sign
static int mbedtls_ssl_pkcs11_sign(void *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, unsigned char *sig)
Definition: pkcs11.h:153
mbedtls_pkcs11_context::len
int len
Definition: pkcs11.h:56
mbedtls_pkcs11_sign
int mbedtls_pkcs11_sign(mbedtls_pkcs11_context *ctx, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, unsigned char *sig)
Do a private RSA to sign a message digest.
mbedtls_pkcs11_x509_cert_bind
int mbedtls_pkcs11_x509_cert_bind(mbedtls_x509_crt *cert, pkcs11h_certificate_t pkcs11h_cert)
mbedtls_pkcs11_init
void mbedtls_pkcs11_init(mbedtls_pkcs11_context *ctx)
mbedtls_x509_crt
Definition: x509_crt.h:53
mbedtls_pkcs11_context::pkcs11h_cert
pkcs11h_certificate_t pkcs11h_cert
Definition: pkcs11.h:55
mbedtls_ssl_pkcs11_decrypt
static int mbedtls_ssl_pkcs11_decrypt(void *ctx, int mode, size_t *olen, const unsigned char *input, unsigned char *output, size_t output_max_len)
Definition: pkcs11.h:145
mbedtls_pkcs11_priv_key_bind
int mbedtls_pkcs11_priv_key_bind(mbedtls_pkcs11_context *priv_key, pkcs11h_certificate_t pkcs11_cert)
config.h
Configuration options (set of defines)
mbedtls_pkcs11_decrypt
int mbedtls_pkcs11_decrypt(mbedtls_pkcs11_context *ctx, int mode, size_t *olen, const unsigned char *input, unsigned char *output, size_t output_max_len)
Do an RSA private key decrypt, then remove the message padding.
mbedtls_pkcs11_priv_key_free
void mbedtls_pkcs11_priv_key_free(mbedtls_pkcs11_context *priv_key)
x509_crt.h
X.509 certificate parsing and writing.
mbedtls_pkcs11_context
Definition: pkcs11.h:53