47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Common Public License Version 0.5
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * THIS COMMON PUBLIC LICENSE ("AGREEMENT"). ANY USE,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * REPRODUCTION OR DISTRIBUTION OF THE PROGRAM CONSTITUTES
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * 1. DEFINITIONS
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * "Contribution" means:
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * a) in the case of the initial Contributor, the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * initial code and documentation distributed under
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * this Agreement, and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * b) in the case of each subsequent Contributor:
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * i) changes to the Program, and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * ii) additions to the Program;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * where such changes and/or additions to the Program
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * originate from and are distributed by that
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * particular Contributor. A Contribution 'originates'
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * from a Contributor if it was added to the Program
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * by such Contributor itself or anyone acting on such
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor's behalf. Contributions do not include
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * additions to the Program which: (i) are separate
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * modules of software distributed in conjunction with
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * the Program under their own license agreement, and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * (ii) are not derivative works of the Program.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * "Contributor" means any person or entity that distributes
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * the Program.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * "Licensed Patents " mean patent claims licensable by a
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor which are necessarily infringed by the use or
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * sale of its Contribution alone or when combined with the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * "Program" means the Contributions distributed in
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * accordance with this Agreement.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * "Recipient" means anyone who receives the Program under
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * this Agreement, including all Contributors.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * 2. GRANT OF RIGHTS
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * a) Subject to the terms of this Agreement, each
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor hereby grants Recipient a
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * no - exclusive, worldwide, royalt - free copyright
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * license to reproduce, prepare derivative works of,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * publicly display, publicly perform, distribute and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * sublicense the Contribution of such Contributor, if
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * any, and such derivative works, in source code and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * object code form.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * b) Subject to the terms of this Agreement, each
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor hereby grants Recipient a
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * no - exclusive, worldwide, royalt - free patent
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * license under Licensed Patents to make, use, sell,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * offer to sell, import and otherwise transfer the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contribution of such Contributor, if any, in source
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * code and object code form. This patent license
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * shall apply to the combination of the Contribution
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * and the Program if, at the time the Contribution is
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * added by the Contributor, such addition of the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contribution causes such combination to be covered
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * by the Licensed Patents. The patent license shall
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * not apply to any other combinations which include
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * the Contribution. No hardware per se is licensed
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * c) Recipient understands that although each
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor grants the licenses to its
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributions set forth herein, no assurances are
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * provided by any Contributor that the Program does
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * not infringe the patent or other intellectual
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * property rights of any other entity. Each
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor disclaims any liability to Recipient
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * for claims brought by any other entity based on
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * infringement of intellectual property rights or
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * otherwise. As a condition to exercising the rights
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * and licenses granted hereunder, each Recipient
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * hereby assumes sole responsibility to secure any
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * other intellectual property rights needed, if any.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * For example, if a third party patent license is
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * required to allow Recipient to distribute the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Program, it is Recipient's responsibility to
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * acquire that license before distributing the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * d) Each Contributor represents that to its
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * knowledge it has sufficient copyright rights in its
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contribution, if any, to grant the copyright
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * license set forth in this Agreement.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * 3. REQUIREMENTS
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * A Contributor may choose to distribute the Program in
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * object code form under its own license agreement, provided
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * a) it complies with the terms and conditions of
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * this Agreement; and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * b) its license agreement:
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * i) effectively disclaims on behalf of all
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributors all warranties and conditions, express
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * and implied, including warranties or conditions of
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * title and no - infringement, and implied warranties
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * or conditions of merchantability and fitness for a
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * particular purpose;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * ii) effectively excludes on behalf of all
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributors all liability for damages, including
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * direct, indirect, special, incidental and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * consequential damages, such as lost profits;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * iii) states that any provisions which differ from
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * this Agreement are offered by that Contributor
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * alone and not by any other party; and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * iv) states that source code for the Program is
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * available from such Contributor, and informs
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * licensees how to obtain it in a reasonable manner
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * on or through a medium customarily used for
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * software exchange.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * When the Program is made available in source code form:
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * a) it must be made available under this Agreement;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * b) a copy of this Agreement must be included with
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * each copy of the Program.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributors may not remove or alter any copyright notices
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * contained within the Program.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Each Contributor must identify itself as the originator of
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * its Contribution, if any, in a manner that reasonably
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * allows subsequent Recipients to identify the originator of
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * the Contribution.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * 4. COMMERCIAL DISTRIBUTION
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Commercial distributors of software may accept certain
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * responsibilities with respect to end users, business
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * partners and the like. While this license is intended to
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * facilitate the commercial use of the Program, the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor who includes the Program in a commercial
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * product offering should do so in a manner which does not
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * create potential liability for other Contributors.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Therefore, if a Contributor includes the Program in a
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * commercial product offering, such Contributor ("Commercial
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor") hereby agrees to defend and indemnify every
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * other Contributor ("Indemnified Contributor") against any
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * losses, damages and costs (collectively "Losses") arising
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * from claims, lawsuits and other legal actions brought by a
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * third party against the Indemnified Contributor to the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * extent caused by the acts or omissions of such Commercial
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor in connection with its distribution of the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Program in a commercial product offering. The obligations
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * in this section do not apply to any claims or Losses
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * relating to any actual or alleged intellectual property
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * infringement. In order to qualify, an Indemnified
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor must: a) promptly notify the Commercial
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor in writing of such claim, and b) allow the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Commercial Contributor to control, and cooperate with the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Commercial Contributor in, the defense and any related
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * settlement negotiations. The Indemnified Contributor may
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * participate in any such claim at its own expense.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * For example, a Contributor might include the Program in a
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * commercial product offering, Product X. That Contributor
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * is then a Commercial Contributor. If that Commercial
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor then makes performance claims, or offers
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * warranties related to Product X, those performance claims
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * and warranties are such Commercial Contributor's
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * responsibility alone. Under this section, the Commercial
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor would have to defend claims against the other
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributors related to those performance claims and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * warranties, and if a court requires any other Contributor
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * to pay any damages as a result, the Commercial Contributor
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * must pay those damages.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * 5. NO WARRANTY
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, THE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * PROGRAM IS PROVIDED ON AN "AS IS" BASIS, WITHOUT
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * CONDITIONS OF TITLE, NO - INFRINGEMENT, MERCHANTABILITY OR
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is solely
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * responsible for determining the appropriateness of using
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * and distributing the Program and assumes all risks
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * associated with its exercise of rights under this
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Agreement, including but not limited to the risks and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * costs of program errors, compliance with applicable laws,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * damage to or loss of data, programs or equipment, and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * unavailability or interruption of operations.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * 6. DISCLAIMER OF LIABILITY
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, NEITHER
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * RECIPIENT NOR ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * POSSIBILITY OF SUCH DAMAGES.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * If any provision of this Agreement is invalid or
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * unenforceable under applicable law, it shall not affect
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * the validity or enforceability of the remainder of the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * terms of this Agreement, and without further action by the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * parties hereto, such provision shall be reformed to the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * minimum extent necessary to make such provision valid and
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * enforceable.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * If Recipient institutes patent litigation against a
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor with respect to a patent applicable to
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * software (including a cros - claim or counterclaim in a
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * lawsuit), then any patent licenses granted by that
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Contributor to such Recipient under this Agreement shall
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * terminate as of the date such litigation is filed. In
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * addition, If Recipient institutes patent litigation
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * against any entity (including a cros - claim or
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * counterclaim in a lawsuit) alleging that the Program
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * itself (excluding combinations of the Program with other
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * software or hardware) infringes such Recipient's
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * patent(s), then such Recipient's rights granted under
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Section 2(b) shall terminate as of the date such
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * litigation is filed.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * All Recipient's rights under this Agreement shall
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * terminate if it fails to comply with any of the material
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * terms or conditions of this Agreement and does not cure
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * such failure in a reasonable period of time after becoming
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * aware of such noncompliance. If all Recipient's rights
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * under this Agreement terminate, Recipient agrees to cease
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * use and distribution of the Program as soon as reasonably
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * practicable. However, Recipient's obligations under this
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Agreement and any licenses granted by Recipient relating
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * to the Program shall continue and survive.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Everyone is permitted to copy and distribute copies of
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * this Agreement, but in order to avoid inconsistency the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Agreement is copyrighted and may only be modified in the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * following manner. The Agreement Steward reserves the right
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * to publish new versions (including revisions) of this
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Agreement from time to time. No one other than the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Agreement Steward has the right to modify this Agreement.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * IBM is the initial Agreement Steward. IBM may assign the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * responsibility to serve as the Agreement Steward to a
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * suitable separate entity. Each new version of the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Agreement will be given a distinguishing version number.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * The Program (including Contributions) may always be
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * distributed subject to the version of the Agreement under
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * which it was received. In addition, after a new version of
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * the Agreement is published, Contributor may elect to
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * distribute the Program (including its Contributions) under
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * the new version. Except as expressly stated in Sections
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * 2(a) and 2(b) above, Recipient receives no rights or
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * licenses to the intellectual property of any Contributor
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * under this Agreement, whether expressly, by implication,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * estoppel or otherwise. All rights in the Program not
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * expressly granted under this Agreement are reserved.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * This Agreement is governed by the laws of the State of New
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * York and the intellectual property laws of the United
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * States of America. No party to this Agreement will bring a
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * legal action under this Agreement more than one year after
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * the cause of action arose. Each party waives its rights to
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * a jury trial in any resulting litigation.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * (C) COPYRIGHT International Business Machines Corp. 2001, 2002
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Copyright 2009 Sun Microsystems, Inc. All rights reserved.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Use is subject to license terms.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollkey_object_check_required_attributes(TEMPLATE *tmpl, CK_ULONG mode)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_KEY_TYPE, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (template_check_required_base_attributes(tmpl, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollkey_object_set_default_attributes(TEMPLATE *tmpl, CK_ULONG mode)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // satisfy the compiler
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll id_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sdate_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll edate_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll derive_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll local_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (! id_attr || ! sdate_attr || ! edate_attr ||
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll derive_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll derive_attr->pValue = (CK_BYTE *)derive_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll local_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll local_attr->pValue = (CK_BYTE *)local_attr + sizeof (CK_ATTRIBUTE);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, id_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, sdate_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, edate_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, derive_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, local_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollkey_object_validate_attribute(TEMPLATE *tmpl,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (mode == MODE_CREATE || mode == MODE_DERIVE ||
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll mode == MODE_KEYGEN || mode == MODE_UNWRAP)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (template_validate_base_attribute(tmpl, attr, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollpubl_key_check_required_attributes(TEMPLATE *tmpl, CK_ULONG mode) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (key_object_check_required_attributes(tmpl, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollpubl_key_set_default_attributes(TEMPLATE *tmpl, CK_ULONG mode)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = key_object_set_default_attributes(tmpl, mode);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // add the default CKO_PUBLIC_KEY attributes
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll class_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll subject_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll encrypt_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll verify_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll verify_recover_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll wrap_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (! class || ! subject_attr || ! encrypt_attr ||
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll ! verify_attr || ! verify_recover_attr || ! wrap_attr) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (verify_recover_attr) free(verify_recover_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll class_attr->ulValueLen = sizeof (CK_OBJECT_CLASS);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll class_attr->pValue = (CK_BYTE *)class_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_OBJECT_CLASS *)class_attr->pValue = CKO_PUBLIC_KEY;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll subject_attr->ulValueLen = 0; // empty string
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll encrypt_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll encrypt_attr->pValue = (CK_BYTE *)encrypt_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll verify_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll verify_attr->pValue = (CK_BYTE *)verify_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll verify_recover_attr->type = CKA_VERIFY_RECOVER;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll verify_recover_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll verify_recover_attr->pValue = (CK_BYTE *)verify_recover_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_BBOOL *)verify_recover_attr->pValue = TRUE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, class_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, subject_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, encrypt_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, verify_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, verify_recover_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, wrap_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (nv_token_data->tweak_vector.allow_key_mods == TRUE)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (key_object_validate_attribute(tmpl, attr, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollpriv_key_check_required_attributes(TEMPLATE *tmpl, CK_ULONG mode) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (key_object_check_required_attributes(tmpl, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollpriv_key_set_default_attributes(TEMPLATE *tmpl, CK_ULONG mode)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = key_object_set_default_attributes(tmpl, mode);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll class_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll subject_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sensitive_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll decrypt_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sign_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sign_recover_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll unwrap_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll extractable_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll never_extr_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll always_sens_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (! class_attr || ! subject_attr || ! sensitive_attr ||
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll ! decrypt_attr || ! sign_attr || ! sign_recover_attr ||
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (sign_recover_attr) free(sign_recover_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (extractable_attr) free(extractable_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (always_sens_attr) free(always_sens_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (never_extr_attr) free(never_extr_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll class_attr->ulValueLen = sizeof (CK_OBJECT_CLASS);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll class_attr->pValue = (CK_BYTE *)class_attr + sizeof (CK_ATTRIBUTE);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_OBJECT_CLASS *)class_attr->pValue = CKO_PRIVATE_KEY;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll subject_attr->ulValueLen = 0; // empty string
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sensitive_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sensitive_attr->pValue = (CK_BYTE *)sensitive_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_BBOOL *)sensitive_attr->pValue = FALSE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll decrypt_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll decrypt_attr->pValue = (CK_BYTE *)decrypt_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sign_recover_attr->type = CKA_SIGN_RECOVER;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sign_recover_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sign_recover_attr->pValue = (CK_BYTE *)sign_recover_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_BBOOL *)sign_recover_attr->pValue = TRUE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll unwrap_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll unwrap_attr->pValue = (CK_BYTE *)unwrap_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll extractable_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll extractable_attr->pValue = (CK_BYTE *)extractable_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_BBOOL *)extractable_attr->pValue = TRUE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll never_extr_attr->type = CKA_NEVER_EXTRACTABLE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll never_extr_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll never_extr_attr->pValue = (CK_BYTE *)never_extr_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_BBOOL *)never_extr_attr->pValue = FALSE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll always_sens_attr->type = CKA_ALWAYS_SENSITIVE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll always_sens_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll always_sens_attr->pValue = (CK_BYTE *)always_sens_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_BBOOL *)always_sens_attr->pValue = FALSE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, class_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, subject_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, sensitive_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, decrypt_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, sign_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, sign_recover_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, unwrap_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, extractable_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, never_extr_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, always_sens_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = rsa_priv_unwrap(tmpl, data, data_len);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * CKA_LOCAL == FALSE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * CKA_ALWAYS_SENSITIVE == FALSE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * CKA_EXTRACTABLE == TRUE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * CKA_NEVER_EXTRACTABLE == FALSE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_LOCAL, &false, 1, &local);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_ALWAYS_SENSITIVE, &false, 1, &always_sens);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_SENSITIVE, &false, 1, &sensitive);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_EXTRACTABLE, &true, 1, &extractable);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_NEVER_EXTRACTABLE, &false, 1, &never_extract);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, local);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, always_sens);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, sensitive);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, extractable);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, never_extract);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollpriv_key_validate_attribute(TEMPLATE *tmpl, CK_ATTRIBUTE *attr, CK_ULONG mode) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // we might want to do this for MODE_COPY too
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (nv_token_data->tweak_vector.allow_key_mods == TRUE)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // after key creation, CKA_SENSITIVE may only be set to TRUE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (mode == MODE_CREATE || mode == MODE_KEYGEN)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if ((mode != MODE_CREATE && mode != MODE_KEYGEN) &&
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sizeof (CK_ATTRIBUTE) + sizeof (CK_BBOOL));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (key_object_validate_attribute(tmpl, attr, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollsecret_key_check_required_attributes(TEMPLATE *tmpl, CK_ULONG mode)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (key_object_check_required_attributes(tmpl, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollsecret_key_set_default_attributes(TEMPLATE *tmpl, CK_ULONG mode)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = key_object_set_default_attributes(tmpl, mode);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll class_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sensitive_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll encrypt_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll decrypt_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sign_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll verify_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll wrap_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll unwrap_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll extractable_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll never_extr_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll always_sens_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (! class_attr || ! sensitive_attr || ! encrypt_attr ||
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll ! decrypt_attr || ! sign_attr || ! verify_attr ||
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll ! wrap_attr || ! unwrap_attr || ! extractable_attr ||
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (extractable_attr) free(extractable_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (never_extr_attr) free(never_extr_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (always_sens_attr) free(always_sens_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll class_attr->ulValueLen = sizeof (CK_OBJECT_CLASS);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll class_attr->pValue = (CK_BYTE *)class_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_OBJECT_CLASS *)class_attr->pValue = CKO_SECRET_KEY;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sensitive_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sensitive_attr->pValue = (CK_BYTE *)sensitive_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_BBOOL *)sensitive_attr->pValue = FALSE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll encrypt_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll encrypt_attr->pValue = (CK_BYTE *)encrypt_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll decrypt_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll decrypt_attr->pValue = (CK_BYTE *)decrypt_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll verify_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll verify_attr->pValue = (CK_BYTE *)verify_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll unwrap_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll unwrap_attr->pValue = (CK_BYTE *)unwrap_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll extractable_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll extractable_attr->pValue = (CK_BYTE *)extractable_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_BBOOL *)extractable_attr->pValue = TRUE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll always_sens_attr->type = CKA_ALWAYS_SENSITIVE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll always_sens_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll always_sens_attr->pValue = (CK_BYTE *)always_sens_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_BBOOL *)always_sens_attr->pValue = FALSE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll never_extr_attr->type = CKA_NEVER_EXTRACTABLE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll never_extr_attr->ulValueLen = sizeof (CK_BBOOL);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll never_extr_attr->pValue = (CK_BYTE *)never_extr_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_BBOOL *)never_extr_attr->pValue = FALSE;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, class_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, sensitive_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, encrypt_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, decrypt_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, sign_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, verify_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, wrap_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, unwrap_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, extractable_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, never_extr_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, always_sens_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = generic_secret_unwrap(tmpl, data, data_len, fromend);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // CKA_LOCAL == FALSE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // CKA_ALWAYS_SENSITIVE == FALSE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // CKA_EXTRACTABLE == TRUE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // CKA_NEVER_EXTRACTABLE == FALSE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_LOCAL, &false, 1, &local);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_ALWAYS_SENSITIVE, &false, 1, &always_sens);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_SENSITIVE, &false, 1, &sensitive);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_EXTRACTABLE, &true, 1, &extractable);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_NEVER_EXTRACTABLE, &false, 1, &never_extract);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, local);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, always_sens);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, sensitive);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, extractable);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, never_extract);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollsecret_key_validate_attribute(TEMPLATE *tmpl, CK_ATTRIBUTE *attr,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (nv_token_data->tweak_vector.allow_key_mods == TRUE)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // after key creation, CKA_SENSITIVE may only be set to TRUE
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if ((mode != MODE_CREATE && mode != MODE_DERIVE &&
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if ((mode != MODE_CREATE && mode != MODE_DERIVE &&
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll mode != MODE_KEYGEN) && (value != FALSE)) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll sizeof (CK_ATTRIBUTE) + sizeof (CK_BBOOL));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (key_object_validate_attribute(tmpl,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollsecret_key_check_exportability(CK_ATTRIBUTE_TYPE type)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollrsa_publ_check_required_attributes(TEMPLATE *tmpl, CK_ULONG mode)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_MODULUS, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_MODULUS_BITS, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_PUBLIC_EXPONENT, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (mode == MODE_CREATE || mode == MODE_KEYGEN) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (publ_key_check_required_attributes(tmpl, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollrsa_publ_set_default_attributes(TEMPLATE *tmpl, CK_ULONG mode)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) publ_key_set_default_attributes(tmpl, mode);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll type_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll modulus_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll modulus_bits_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll public_exp_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll ! modulus_bits_attr || ! public_exp_attr) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (modulus_bits_attr) free(modulus_bits_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (public_exp_attr) free(public_exp_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll type_attr->ulValueLen = sizeof (CK_KEY_TYPE);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_KEY_TYPE *)type_attr->pValue = CKK_RSA;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll modulus_bits_attr->type = CKA_MODULUS_BITS;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll modulus_bits_attr->ulValueLen = sizeof (CK_ULONG);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll modulus_bits_attr->pValue = (CK_BYTE *)modulus_bits_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_ULONG *)modulus_bits_attr->pValue = bits;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll public_exp_attr->type = CKA_PUBLIC_EXPONENT;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, type_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, modulus_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, modulus_bits_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, public_exp_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollrsa_publ_validate_attribute(TEMPLATE *tmpl, CK_ATTRIBUTE *attr, CK_ULONG mode) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (attr->ulValueLen != sizeof (CK_ULONG)) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll CK_ULONG mod_bits = *(CK_ULONG *)attr->pValue;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (mode == MODE_CREATE || mode == MODE_KEYGEN)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (publ_key_validate_attribute(tmpl, attr, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollrsa_priv_check_required_attributes(TEMPLATE *tmpl, CK_ULONG mode) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_MODULUS, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // PKCS #11 is flexible with respect to which attributes must be present
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // in an RSA key. Keys can be specified in Chinese Remainder format or
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // they can be specified in modula exponent format. Right now, I only
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // support keys created in Chinese Remainder format. That is, we return
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // CKR_TEMPLATE_INCOMPLETE if a modula exponent key is specified. This
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // is allowed by PKCS #11.
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // In the future, we should allow for creation of keys in modula exp
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // format too. This raises some issues. It's easy enough to recognize
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // when a key has been specified in modula exponent format. And it's
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // easy enough to recognize when all attributes have been specified
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // (which is what we require right now). What's trickier to handle is
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // the "middle" cases in which more than the minimum yet less than the
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // full number of attributes have been specified. Do we revert back to
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // modula - exponent representation? Do we compute the missing
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll // attributes ourselves? Do we simply return CKR_TEMPLATE_INCOMPLETE?
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_PUBLIC_EXPONENT, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_PRIVATE_EXPONENT, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_PRIME_1, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_PRIME_2, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_EXPONENT_1, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_EXPONENT_2, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_COEFFICIENT, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (priv_key_check_required_attributes(tmpl, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollrsa_priv_set_default_attributes(TEMPLATE *tmpl, CK_ULONG mode)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) priv_key_set_default_attributes(tmpl, mode);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll type_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll modulus_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll public_exp_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll private_exp_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (! type_attr || ! modulus_attr || ! public_exp_attr ||
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (public_exp_attr) free(public_exp_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (private_exp_attr) free(private_exp_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll public_exp_attr->type = CKA_PUBLIC_EXPONENT;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll private_exp_attr->type = CKA_PRIVATE_EXPONENT;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll type_attr->ulValueLen = sizeof (CK_KEY_TYPE);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll type_attr->pValue = (CK_BYTE *)type_attr + sizeof (CK_ATTRIBUTE);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_KEY_TYPE *)type_attr->pValue = CKK_RSA;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, type_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, modulus_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, public_exp_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, private_exp_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollrsa_priv_validate_attribute(TEMPLATE *tmpl, CK_ATTRIBUTE *attr, CK_ULONG mode) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (priv_key_validate_attribute(tmpl, attr, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollrsa_priv_check_exportability(CK_ATTRIBUTE_TYPE type) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * create the ASN.1 encoding for the private key for wrapping as defined
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * ASN.1 type PrivateKeyInfo ::= SEQUENCE {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * version Version
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * privateKeyAlgorithm PrivateKeyAlgorithmIdentifier
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * privateKey PrivateKey
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * attributes OPTIONAL
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * Where PrivateKey is defined as follows for RSA:
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * ASN.1 type RSAPrivateKey
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * RSAPrivateKey ::= SEQUENCE {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * version Version
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * modulus INTEGER
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * publicExponent INTEGER
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * privateExponent INTEGER
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * prime1 INTEGER
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * prime2 INTEGER
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * exponent1 INTEGER
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * exponent2 INTEGER
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll * coefficient INTEGER
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll CK_ATTRIBUTE *publ_exp = NULL, *priv_exp = NULL;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll CK_ATTRIBUTE *prime1 = NULL, *prime2 = NULL;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll CK_ATTRIBUTE *exponent1 = NULL, *exponent2 = NULL;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (template_attribute_find(tmpl, CKA_MODULUS, &modulus) == FALSE) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (template_attribute_find(tmpl, CKA_PUBLIC_EXPONENT,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (template_attribute_find(tmpl, CKA_PRIVATE_EXPONENT,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (template_attribute_find(tmpl, CKA_PRIME_1,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (template_attribute_find(tmpl, CKA_PRIME_2,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (template_attribute_find(tmpl, CKA_EXPONENT_1,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (template_attribute_find(tmpl, CKA_EXPONENT_2,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (template_attribute_find(tmpl, CKA_COEFFICIENT,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = ber_encode_RSAPrivateKey(length_only, data, data_len,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll modulus, publ_exp, priv_exp, prime1, prime2,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = ber_decode_RSAPrivateKey(data, total_length,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll &modulus, &publ_exp, &priv_exp, &prime1, &prime2,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, modulus);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, publ_exp);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, priv_exp);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, prime1);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, prime2);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, exponent1);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, exponent2);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, coeff);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollgeneric_secret_check_required_attributes(TEMPLATE *tmpl, CK_ULONG mode)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_VALUE, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll found = template_attribute_find(tmpl, CKA_VALUE_LEN, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (secret_key_check_required_attributes(tmpl, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollgeneric_secret_set_default_attributes(TEMPLATE *tmpl, CK_ULONG mode)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) secret_key_set_default_attributes(tmpl, mode);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll type_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll value_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll value_len_attr = (CK_ATTRIBUTE *)malloc(sizeof (CK_ATTRIBUTE) +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (! type_attr || ! value_attr || ! value_len_attr) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll value_len_attr->ulValueLen = sizeof (CK_ULONG);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll value_len_attr->pValue = (CK_BYTE *)value_len_attr +
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll type_attr->ulValueLen = sizeof (CK_KEY_TYPE);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll *(CK_KEY_TYPE *)type_attr->pValue = CKK_GENERIC_SECRET;
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, type_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, value_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, value_len_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollgeneric_secret_validate_attribute(TEMPLATE *tmpl,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll if (mode == MODE_KEYGEN || mode == MODE_DERIVE)
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll return (secret_key_validate_attribute(tmpl, attr, mode));
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollgeneric_secret_check_exportability(CK_ATTRIBUTE_TYPE type) {
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersollgeneric_secret_wrap_get_data(TEMPLATE * tmpl,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = template_attribute_find(tmpl, CKA_VALUE, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) memcpy(ptr, attr->pValue, attr->ulValueLen);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = template_attribute_find(tmpl, CKA_VALUE_LEN, &attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_VALUE, ptr, data_len, &value_attr);
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll rc = build_attribute(CKA_VALUE_LEN, (CK_BYTE *)&data_len,
47e946e784719ae402ace34695f67b0e6e76ae5cWyllys Ingersoll (void) template_update_attribute(tmpl, value_attr);