81 lines
2.3 KiB
C
81 lines
2.3 KiB
C
/*
|
|
* Copyright (C) 2011 Tobias Brunner
|
|
* HSR Hochschule fuer Technik Rapperswil
|
|
*
|
|
* Copyright (C) 2010 Martin Willi
|
|
* Copyright (C) 2010 revosec AG
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*/
|
|
|
|
/**
|
|
* @defgroup pkcs11_private_key pkcs11_private_key
|
|
* @{ @ingroup pkcs11
|
|
*/
|
|
|
|
#ifndef PKCS11_PRIVATE_KEY_H_
|
|
#define PKCS11_PRIVATE_KEY_H_
|
|
|
|
typedef struct pkcs11_private_key_t pkcs11_private_key_t;
|
|
|
|
#include <credentials/builder.h>
|
|
#include <credentials/keys/private_key.h>
|
|
|
|
#include "pkcs11.h"
|
|
#include "pkcs11_library.h"
|
|
|
|
/**
|
|
* Private Key implementation on top of PKCS#11.
|
|
*/
|
|
struct pkcs11_private_key_t {
|
|
|
|
/**
|
|
* Implements private_key_t interface.
|
|
*/
|
|
private_key_t key;
|
|
};
|
|
|
|
/**
|
|
* Open a private key on a PKCS#11 device.
|
|
*
|
|
* Accepts the BUILD_SMARTCARD_KEYID and the BUILD_SMARTCARD_PIN arguments.
|
|
*
|
|
* @param type type of the key
|
|
* @param args builder_part_t argument list
|
|
* @return loaded key, NULL on failure
|
|
*/
|
|
pkcs11_private_key_t *pkcs11_private_key_connect(key_type_t type, va_list args);
|
|
|
|
/**
|
|
* Get the Cryptoki mechanism for a signature scheme.
|
|
*
|
|
* Verifies that the given key is usable for this scheme.
|
|
*
|
|
* @param lib PKCS#11 library of the token the key resides on
|
|
* @param slot slot of the token
|
|
* @param scheme signature scheme
|
|
* @param type key type
|
|
* @param keylen key length in bits
|
|
* @param hash hash algorithm to apply first (HASH_UNKNOWN if none)
|
|
*/
|
|
CK_MECHANISM_PTR pkcs11_signature_scheme_to_mech(pkcs11_library_t *lib,
|
|
CK_SLOT_ID slot,
|
|
signature_scheme_t scheme,
|
|
key_type_t type, size_t keylen,
|
|
hash_algorithm_t *hash);
|
|
|
|
/**
|
|
* Get the Cryptoki mechanism for a encryption scheme.
|
|
*/
|
|
CK_MECHANISM_PTR pkcs11_encryption_scheme_to_mech(encryption_scheme_t scheme);
|
|
|
|
#endif /** PKCS11_PRIVATE_KEY_H_ @}*/
|