common/dst/dst_internal.h

#ifndef DST_INTERNAL_H
#define DST_INTERNAL_H

/*
 * Portions Copyright (c) 1995-1998 by Trusted Information Systems, Inc.
 *
 * Permission to use, copy modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND TRUSTED INFORMATION SYSTEMS
 * DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS.  IN NO EVENT SHALL
 * TRUSTED INFORMATION SYSTEMS BE LIABLE FOR ANY SPECIAL, DIRECT,
 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
 * FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
 * NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
 * WITH THE USE OR PERFORMANCE OF THE SOFTWARE.
 */
#include <limits.h>
#include <sys/param.h>
#if (!defined(BSD)) || (BSD < 199306)
# include <sys/bitypes.h>
#else
# include <sys/types.h>
#endif

#ifndef PATH_MAX
# ifdef POSIX_PATH_MAX
#  define PATH_MAX POSIX_PATH_MAX
# else
#  define PATH_MAX 255 /*%< this is the value of POSIX_PATH_MAX */
# endif
#endif

typedef struct dst_key {
    char    *dk_key_name;   /*%< name of the key */
    int dk_key_size;    /*%< this is the size of the key in bits */
    int dk_proto;       /*%< what protocols this key can be used for */
    int dk_alg;         /*%< algorithm number from key record */
    u_int32_t dk_flags;     /*%< and the flags of the public key */
    u_int16_t dk_id;        /*%< identifier of the key */
    void    *dk_KEY_struct; /*%< pointer to key in crypto pkg fmt */
    struct dst_func *dk_func; /*%< point to cryptto pgk specific function table */
} DST_KEY;
#define HAS_DST_KEY

#include <isc/dst.h>
/*
 * define what crypto systems are supported for RSA,
 * BSAFE is prefered over RSAREF; only one can be set at any time
 */
#if defined(BSAFE) && defined(RSAREF)
# error "Cannot have both BSAFE and RSAREF defined"
#endif

/* Declare dst_lib specific constants */
#define KEY_FILE_FORMAT "1.2"

/* suffixes for key file names */
#define PRIVATE_KEY     "private"
#define PUBLIC_KEY      "key"

/* error handling */
#ifdef REPORT_ERRORS
#define EREPORT(str)        printf str
#else
#define EREPORT(str)        (void)0
#endif

/* use our own special macro to FRRE memory */

#ifndef SAFE_FREE
#define SAFE_FREE(a) \
do{if(a != NULL){memset(a,0, sizeof(*a)); free(a); a=NULL;}} while (0)
#define SAFE_FREE2(a,s) if (a != NULL && (long)s > 0){memset(a,0, s);free(a); a=NULL;}
#endif

typedef struct dst_func {
    int (*sign)(const int mode, DST_KEY *key, void **context,
             const u_int8_t *data, const int len,
             u_int8_t *signature, const int sig_len);
    int (*verify)(const int mode, DST_KEY *key, void **context,
               const u_int8_t *data, const int len,
               const u_int8_t *signature, const int sig_len);
    int (*compare)(const DST_KEY *key1, const DST_KEY *key2);
    int (*generate)(DST_KEY *key, int parms);
    void *(*destroy)(void *key);
    /* conversion functions */
    int (*to_dns_key)(const DST_KEY *key, u_int8_t *out,
               const int out_len);
    int (*from_dns_key)(DST_KEY *key, const u_int8_t *str,
                 const int str_len);
    int (*to_file_fmt)(const DST_KEY *key, char *out,
                const int out_len);
    int (*from_file_fmt)(DST_KEY *key, const char *out,
                  const int out_len);

} dst_func;

extern dst_func *dst_t_func[DST_MAX_ALGS];
extern const char *key_file_fmt_str;
extern const char *dst_path;

#ifndef DST_HASH_SIZE
#define DST_HASH_SIZE 20    /*%< RIPEMD160 and SHA-1 are 20 bytes MD5 is 16 */
#endif

int dst_bsafe_init(void);

int dst_rsaref_init(void);

int dst_hmac_md5_init(void);

int dst_cylink_init(void);

int dst_eay_dss_init(void);

/* from higher level support routines */
int       dst_s_calculate_bits( const u_int8_t *str, const int max_bits);
int       dst_s_verify_str( const char **buf, const char *str);


/* conversion between dns names and key file names */
size_t    dst_s_filename_length( const char *name, const char *suffix);
int       dst_s_build_filename(  char *filename, const char *name,
                     u_int16_t id, int alg, const char *suffix,
                     size_t filename_length);

FILE      *dst_s_fopen (const char *filename, const char *mode, int perm);

/*%
 * read and write network byte order into u_int?_t
 *  all of these should be retired
 */
u_int16_t dst_s_get_int16( const u_int8_t *buf);
void      dst_s_put_int16( u_int8_t *buf, const u_int16_t val);

u_int32_t dst_s_get_int32( const u_int8_t *buf);
void      dst_s_put_int32( u_int8_t *buf, const u_int32_t val);

#ifdef DUMP
# undef DUMP
# define DUMP(a,b,c,d) dst_s_dump(a,b,c,d)
#else
# define DUMP(a,b,c,d)
#endif
void
dst_s_dump(const int mode, const u_char *data, const int size,
            const char *msg);


#endif /* DST_INTERNAL_H */
/*! \file */