dst_internal.h revision e20788e1216ed720aefa84f3295f7899d9f28c22
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson/*
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Portions Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson * Portions Copyright (C) 2000-2002 Internet Software Consortium.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Permission to use, copy, modify, and/or distribute this software for any
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * purpose with or without fee is hereby granted, provided that the above
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson * copyright notice and this permission notice appear in all copies.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User *
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt * THE SOFTWARE IS PROVIDED "AS IS" AND ISC AND NETWORK ASSOCIATES DISCLAIMS
83a28ca274521e15086fc39febde507bcc4e145eMark Andrews * ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt * WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt * FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt * IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt *
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * Portions Copyright (C) 1995-2000 by Network Associates, Inc.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein *
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * Permission to use, copy, modify, and/or distribute this software for any
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * purpose with or without fee is hereby granted, provided that the above
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * copyright notice and this permission notice appear in all copies.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein *
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * THE SOFTWARE IS PROVIDED "AS IS" AND ISC AND NETWORK ASSOCIATES DISCLAIMS
86b0285d7e65601645db4090d62ee6cb63abad6cAndreas Gustafsson * ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
194e2dfffa6a167b8eef0ad11864026b423a1c30Mark Andrews * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
194e2dfffa6a167b8eef0ad11864026b423a1c30Mark Andrews * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein */
c1a883f2e04d94e99c433b1f6cfd0c0338f4ed85Mark Andrews
938440694b33cd752e9e4b71a526368b4811c177Tinderbox User/* $Id: dst_internal.h,v 1.31 2011/10/20 21:20:02 marka Exp $ */
19c7b1a0293498a3e36692c59646ed6e15ffc8d0Tinderbox User
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews#ifndef DST_DST_INTERNAL_H
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#define DST_DST_INTERNAL_H 1
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <isc/lang.h>
86b0285d7e65601645db4090d62ee6cb63abad6cAndreas Gustafsson#include <isc/buffer.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <isc/int.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <isc/magic.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <isc/region.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <isc/types.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <isc/md5.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <isc/refcount.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <isc/sha1.h>
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson#include <isc/sha2.h>
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson#include <isc/stdtime.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <isc/hmacmd5.h>
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson#include <isc/hmacsha.h>
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <dns/time.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <dst/dst.h>
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#ifdef OPENSSL
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson#include <openssl/dh.h>
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson#include <openssl/dsa.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <openssl/err.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <openssl/evp.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#include <openssl/objects.h>
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson#include <openssl/rsa.h>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#endif
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt
30eec077db2bdcb6f2a0dc388a3cdde2ede75ec1Mark AndrewsISC_LANG_BEGINDECLS
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#define KEY_MAGIC ISC_MAGIC('D','S','T','K')
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#define CTX_MAGIC ISC_MAGIC('D','S','T','C')
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#define VALID_KEY(x) ISC_MAGIC_VALID(x, KEY_MAGIC)
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#define VALID_CTX(x) ISC_MAGIC_VALID(x, CTX_MAGIC)
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinextern isc_mem_t *dst__memory_pool;
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein/***
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein *** Types
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein ***/
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafssontypedef struct dst_func dst_func_t;
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafssontypedef struct dst_hmacmd5_key dst_hmacmd5_key_t;
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafssontypedef struct dst_hmacsha1_key dst_hmacsha1_key_t;
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafssontypedef struct dst_hmacsha224_key dst_hmacsha224_key_t;
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafssontypedef struct dst_hmacsha256_key dst_hmacsha256_key_t;
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafssontypedef struct dst_hmacsha384_key dst_hmacsha384_key_t;
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafssontypedef struct dst_hmacsha512_key dst_hmacsha512_key_t;
8eea877894ea5bcf5cdd9ca124a8601ad421d753Andreas Gustafsson
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson/*%
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson * Indicate whether a DST context will be used for signing
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * or for verification
86b0285d7e65601645db4090d62ee6cb63abad6cAndreas Gustafsson */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeintypedef enum { DO_SIGN, DO_VERIFY } dst_use_t;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein/*% DST Key Structure */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinstruct dst_key {
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein unsigned int magic;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_refcount_t refs;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dns_name_t * key_name; /*%< name of the key */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein unsigned int key_size; /*%< size of the key in bits */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein unsigned int key_proto; /*%< protocols this key is used for */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein unsigned int key_alg; /*%< algorithm of the key */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_uint32_t key_flags; /*%< flags of the public key */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_uint16_t key_id; /*%< identifier of the key */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_uint16_t key_rid; /*%< identifier of the key when
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein revoked */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_uint16_t key_bits; /*%< hmac digest bits */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dns_rdataclass_t key_class; /*%< class of the key record */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dns_ttl_t key_ttl; /*%< default/initial dnskey ttl */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_mem_t *mctx; /*%< memory context */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein char *engine; /*%< engine name (HSM) */
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson char *label; /*%< engine label (HSM) */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein union {
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein void *generic;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein gss_ctx_id_t gssctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#ifdef OPENSSL
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#if !defined(USE_EVP) || !USE_EVP
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein RSA *rsa;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#endif
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein DSA *dsa;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein DH *dh;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein EVP_PKEY *pkey;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#elif PKCS11CRYPTO
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein iscpk11_object_t *pkey;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#endif
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_hmacmd5_key_t *hmacmd5;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_hmacsha1_key_t *hmacsha1;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_hmacsha224_key_t *hmacsha224;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_hmacsha256_key_t *hmacsha256;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_hmacsha384_key_t *hmacsha384;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_hmacsha512_key_t *hmacsha512;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein } keydata; /*%< pointer to key in crypto pkg fmt */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_stdtime_t times[DST_MAX_TIMES + 1]; /*%< timing metadata */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_boolean_t timeset[DST_MAX_TIMES + 1]; /*%< data set? */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_stdtime_t nums[DST_MAX_NUMERIC + 1]; /*%< numeric metadata */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_boolean_t numset[DST_MAX_NUMERIC + 1]; /*%< data set? */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_boolean_t inactive; /*%< private key not present as it is
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein inactive */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_boolean_t external; /*%< external key */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein int fmt_major; /*%< private key format, major version */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein int fmt_minor; /*%< private key format, minor version */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_func_t * func; /*%< crypto package specific functions */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_buffer_t *key_tkeytoken; /*%< TKEY token data */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein};
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinstruct dst_context {
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein unsigned int magic;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_use_t use;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_key_t *key;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_mem_t *mctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_logcategory_t *category;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein union {
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein void *generic;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_gssapi_signverifyctx_t *gssctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_md5_t *md5ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_sha1_t *sha1ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_sha256_t *sha256ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_sha512_t *sha512ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_hmacmd5_t *hmacmd5ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_hmacsha1_t *hmacsha1ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_hmacsha224_t *hmacsha224ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_hmacsha256_t *hmacsha256ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_hmacsha384_t *hmacsha384ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_hmacsha512_t *hmacsha512ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#ifdef OPENSSL
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein EVP_MD_CTX *evp_md_ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#elif PKCS11CRYPTO
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein iscpk11_context_t *pk11_ctx;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#endif
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein } ctxdata;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein};
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinstruct dst_func {
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein /*
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * Context functions
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*createctx)(dst_key_t *key, dst_context_t *dctx);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*createctx2)(dst_key_t *key, int maxbits,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_context_t *dctx);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein void (*destroyctx)(dst_context_t *dctx);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*adddata)(dst_context_t *dctx, const isc_region_t *data);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein /*
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * Key operations
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*sign)(dst_context_t *dctx, isc_buffer_t *sig);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*verify)(dst_context_t *dctx, const isc_region_t *sig);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*verify2)(dst_context_t *dctx, int maxbits,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein const isc_region_t *sig);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*computesecret)(const dst_key_t *pub,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein const dst_key_t *priv,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_buffer_t *secret);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_boolean_t (*compare)(const dst_key_t *key1, const dst_key_t *key2);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_boolean_t (*paramcompare)(const dst_key_t *key1,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein const dst_key_t *key2);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*generate)(dst_key_t *key, int parms,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein void (*callback)(int));
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_boolean_t (*isprivate)(const dst_key_t *key);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein void (*destroy)(dst_key_t *key);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein /* conversion functions */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*todns)(const dst_key_t *key, isc_buffer_t *data);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*fromdns)(dst_key_t *key, isc_buffer_t *data);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*tofile)(const dst_key_t *key, const char *directory);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*parse)(dst_key_t *key,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_lex_t *lexer,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein dst_key_t *pub);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein /* cleanup */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein void (*cleanup)(void);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*fromlabel)(dst_key_t *key, const char *engine,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein const char *label, const char *pin);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*dump)(dst_key_t *key, isc_mem_t *mctx, char **buffer,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein int *length);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_result_t (*restore)(dst_key_t *key, const char *keystr);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein};
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein/*%
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * Initializers
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__openssl_init(const char *engine);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinvoid dst__pkcs11_init(isc_mem_t *mctx, const char *engine);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__hmacmd5_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__hmacsha1_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__hmacsha224_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__hmacsha256_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__hmacsha384_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__hmacsha512_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__opensslrsa_init(struct dst_func **funcp,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein unsigned char algorithm);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__pkcs11rsa_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__openssldsa_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__pkcs11dsa_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__openssldh_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__pkcs11dh_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__gssapi_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#ifdef HAVE_OPENSSL_ECDSA
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__opensslecdsa_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#endif
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#ifdef HAVE_PKCS11_ECDSA
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__pkcs11ecdsa_init(struct dst_func **funcp);
86b0285d7e65601645db4090d62ee6cb63abad6cAndreas Gustafsson#endif
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#ifdef HAVE_OPENSSL_GOST
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__opensslgost_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#endif
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#ifdef HAVE_PKCS11_GOST
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__pkcs11gost_init(struct dst_func **funcp);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein#endif
ddccd5811feff696ba460dabfb666ce61040f545Andreas Gustafsson
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein/*%
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * Destructors
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinvoid dst__openssl_destroy(void);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__pkcs11_destroy(void);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein/*%
86b0285d7e65601645db4090d62ee6cb63abad6cAndreas Gustafsson * Memory allocators using the DST memory pool.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt */
86b0285d7e65601645db4090d62ee6cb63abad6cAndreas Gustafssonvoid * dst__mem_alloc(size_t size);
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Huntvoid dst__mem_free(void *ptr);
30eec077db2bdcb6f2a0dc388a3cdde2ede75ec1Mark Andrewsvoid * dst__mem_realloc(void *ptr, size_t size);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein/*%
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * Entropy retriever using the DST entropy pool.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austeinisc_result_t dst__entropy_getdata(void *buf, unsigned int len,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein isc_boolean_t pseudo);
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein/*
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein * Entropy status hook.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein */
86b0285d7e65601645db4090d62ee6cb63abad6cAndreas Gustafssonunsigned int dst__entropy_status(void);
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt
14a656f94b1fd0ababd84a772228dfa52276ba15Evan HuntISC_LANG_ENDDECLS
#endif /* DST_DST_INTERNAL_H */
/*! \file */