softSlotToken.c revision 7c478bd95313f5f23a4c958a745db2134aa03244
/*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License, Version 1.0 only
* (the "License"). You may not use this file except in compliance
* with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
* Copyright 2004 Sun Microsystems, Inc. All rights reserved.
* Use is subject to license terms.
*/
#pragma ident "%Z%%M% %I% %E% SMI"
#include <strings.h>
#include <cryptoutil.h>
#include <security/cryptoki.h>
#include <arcfour.h>
#include "softGlobal.h"
#include "softSession.h"
#include <des_impl.h>
#include <aes_impl.h>
#include "softDH.h"
#include "softObject.h"
#include "softKeystore.h"
#include "softKeystoreUtil.h"
static CK_MECHANISM_TYPE soft_mechanisms[] = {
};
/*
* This is the table of CK_MECHANISM_INFO structs for the supported mechanisms.
* The index for this table is the same as the one above for the same
* mechanism.
* The minimum and maximum sizes of the key for the mechanism can be measured
* in bits or in bytes (i.e. mechanism-dependent). This table specifies the
* supported range of key sizes in bytes; unless noted as in bits.
*/
static CK_MECHANISM_INFO soft_mechanism_info[] = {
CKF_GENERATE}, /* CKM_DES_KEY_GEN */
/*
* Note that DES3 is allowed even if CRYPTO_UNLIMITED is not specified.
* This is because 3DES has an exception to the Solaris PAC enforced
* no crypto greater than 128 bit in core Solaris rule.
* The actual key length of 3DES is 192, but most cryptographers regard
* it to be effectively 112.
*/
CKF_GENERATE}, /* CKM_DES3_KEY_GEN */
CKF_GENERATE}, /* CKM_AES_KEY_GEN */
{0, 0, CKF_DIGEST}, /* CKM_SHA_1 */
{0, 0, CKF_DIGEST}, /* CKM_MD5 */
/* in bits */
/* in bits */
/* in bits */
/* CKM_DH_PKCS_KEY_PAIR_GEN */
/* in bits */
/* CKM_DH_PKCS_DERIVE; */
/* in bits */
{0, 0, CKF_GENERATE}, /* CKM_PBE_SHA1_RC4_128 */
{0, 0, CKF_GENERATE}, /* CKM_PKCS5_PBKD2 */
{0, 0, CKF_DERIVE}, /* CKM_SSL3_KEY_AND_MAC_DERIVE */
{0, 0, CKF_DERIVE} /* CKM_TLS_KEY_AND_MAC_DERIVE */
};
/*
* Slot ID for softtoken is always 1. tokenPresent is ignored.
* Also, only one slot is used.
*/
/*ARGSUSED*/
{
if (!softtoken_initialized)
return (CKR_CRYPTOKI_NOT_INITIALIZED);
return (CKR_ARGUMENTS_BAD);
}
/*
* Application only wants to know the number of slots.
*/
*pulCount = 1;
return (CKR_OK);
}
} else {
pSlotList[0] = SOFTTOKEN_SLOTID;
}
*pulCount = 1;
return (rv);
}
{
if (!softtoken_initialized)
return (CKR_CRYPTOKI_NOT_INITIALIZED);
return (CKR_ARGUMENTS_BAD);
/* Make sure the slot ID is valid */
if (slotID != SOFTTOKEN_SLOTID)
return (CKR_SLOT_ID_INVALID);
/* Provide information about the slot in the provided buffer */
64);
if (soft_token_present) {
}
return (CKR_OK);
}
{
ulong_t token_flag = 0;
char *ks_cryptpin = NULL;
if (!softtoken_initialized)
return (CKR_CRYPTOKI_NOT_INITIALIZED);
/* Make sure the slot ID is valid */
if (slotID != SOFTTOKEN_SLOTID)
return (CKR_SLOT_ID_INVALID);
return (CKR_ARGUMENTS_BAD);
if (!soft_token_present)
return (CKR_DEVICE_REMOVED);
/* Provide information about a token in the provided buffer */
B_FALSE);
return (rv);
if (!pin_initialized)
if (ks_cryptpin)
return (CKR_OK);
}
/*ARGSUSED*/
{
if (!softtoken_initialized)
return (CKR_CRYPTOKI_NOT_INITIALIZED);
/*
* This is currently not implemented, however we could cause this
* to wait for the token files to appear if soft_token_present is
* false.
* However there is currently no polite and portable way to do that
* because we might not even be able to get to an fd to the
* parent directory, so instead we don't support any slot events.
*/
return (CKR_FUNCTION_NOT_SUPPORTED);
}
{
ulong_t i;
if (!softtoken_initialized)
return (CKR_CRYPTOKI_NOT_INITIALIZED);
if (slotID != SOFTTOKEN_SLOTID)
return (CKR_SLOT_ID_INVALID);
if (pMechanismList == NULL) {
/*
* Application only wants to know the number of
* supported mechanism types.
*/
return (CKR_OK);
}
return (CKR_BUFFER_TOO_SMALL);
}
for (i = 0; i < mechnum; i++) {
pMechanismList[i] = soft_mechanisms[i];
}
return (CKR_OK);
}
{
ulong_t i;
if (!softtoken_initialized)
return (CKR_CRYPTOKI_NOT_INITIALIZED);
if (slotID != SOFTTOKEN_SLOTID)
return (CKR_SLOT_ID_INVALID);
return (CKR_ARGUMENTS_BAD);
}
for (i = 0; i < mechnum; i++) {
if (soft_mechanisms[i] == type)
break;
}
if (i == mechnum)
/* unsupported mechanism */
return (CKR_MECHANISM_INVALID);
return (CKR_OK);
}
/*ARGSUSED*/
{
if (!softtoken_initialized)
return (CKR_CRYPTOKI_NOT_INITIALIZED);
return (CKR_FUNCTION_NOT_SUPPORTED);
}
/*ARGSUSED*/
{
if (!softtoken_initialized)
return (CKR_CRYPTOKI_NOT_INITIALIZED);
return (CKR_FUNCTION_NOT_SUPPORTED);
}
{
if (!softtoken_initialized)
return (CKR_CRYPTOKI_NOT_INITIALIZED);
/*
* Obtain the session pointer. Also, increment the session
* reference count.
*/
return (rv);
if (!soft_token_present) {
return (CKR_DEVICE_REMOVED);
}
return (CKR_PIN_LEN_RANGE);
}
/*
* We don't support CKF_PROTECTED_AUTHENTICATION_PATH
*/
return (CKR_ARGUMENTS_BAD);
}
/* check the state of the session */
return (CKR_SESSION_READ_ONLY);
}
return (rv);
}