1*726fad2aSDina K Nimeh /* 2*726fad2aSDina K Nimeh * CDDL HEADER START 3*726fad2aSDina K Nimeh * 4*726fad2aSDina K Nimeh * The contents of this file are subject to the terms of the 5*726fad2aSDina K Nimeh * Common Development and Distribution License (the "License"). 6*726fad2aSDina K Nimeh * You may not use this file except in compliance with the License. 7*726fad2aSDina K Nimeh * 8*726fad2aSDina K Nimeh * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9*726fad2aSDina K Nimeh * or http://www.opensolaris.org/os/licensing. 10*726fad2aSDina K Nimeh * See the License for the specific language governing permissions 11*726fad2aSDina K Nimeh * and limitations under the License. 12*726fad2aSDina K Nimeh * 13*726fad2aSDina K Nimeh * When distributing Covered Code, include this CDDL HEADER in each 14*726fad2aSDina K Nimeh * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15*726fad2aSDina K Nimeh * If applicable, add the following below this CDDL HEADER, with the 16*726fad2aSDina K Nimeh * fields enclosed by brackets "[]" replaced with your own identifying 17*726fad2aSDina K Nimeh * information: Portions Copyright [yyyy] [name of copyright owner] 18*726fad2aSDina K Nimeh * 19*726fad2aSDina K Nimeh * CDDL HEADER END 20*726fad2aSDina K Nimeh */ 21*726fad2aSDina K Nimeh 22*726fad2aSDina K Nimeh /* 23*726fad2aSDina K Nimeh * Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved. 24*726fad2aSDina K Nimeh */ 25*726fad2aSDina K Nimeh 26*726fad2aSDina K Nimeh #ifndef _DH_IMPL_H 27*726fad2aSDina K Nimeh #define _DH_IMPL_H 28*726fad2aSDina K Nimeh 29*726fad2aSDina K Nimeh #ifdef __cplusplus 30*726fad2aSDina K Nimeh extern "C" { 31*726fad2aSDina K Nimeh #endif 32*726fad2aSDina K Nimeh 33*726fad2aSDina K Nimeh #include <sys/types.h> 34*726fad2aSDina K Nimeh #include <bignum.h> 35*726fad2aSDina K Nimeh 36*726fad2aSDina K Nimeh #define MIN_DH_KEYLENGTH_IN_BYTES 8 37*726fad2aSDina K Nimeh #define MAX_DH_KEYLENGTH_IN_BYTES 512 38*726fad2aSDina K Nimeh #define DH_MIN_KEY_LEN 64 39*726fad2aSDina K Nimeh #define DH_MAX_KEY_LEN 4096 40*726fad2aSDina K Nimeh 41*726fad2aSDina K Nimeh #ifdef _KERNEL 42*726fad2aSDina K Nimeh 43*726fad2aSDina K Nimeh #include <sys/sunddi.h> 44*726fad2aSDina K Nimeh #include <sys/crypto/common.h> 45*726fad2aSDina K Nimeh 46*726fad2aSDina K Nimeh #define CK_RV ulong_t 47*726fad2aSDina K Nimeh 48*726fad2aSDina K Nimeh #define CKR_OK CRYPTO_SUCCESS 49*726fad2aSDina K Nimeh #define CKR_ARGUMENTS_BAD CRYPTO_ARGUMENTS_BAD 50*726fad2aSDina K Nimeh #define CKR_ATTRIBUTE_TYPE_INVALID CRYPTO_ATTRIBUTE_TYPE_INVALID 51*726fad2aSDina K Nimeh #define CKR_ATTRIBUTE_VALUE_INVALID CRYPTO_ATTRIBUTE_VALUE_INVALID 52*726fad2aSDina K Nimeh #define CKR_DEVICE_ERROR CRYPTO_DEVICE_ERROR 53*726fad2aSDina K Nimeh #define CKR_GENERAL_ERROR CRYPTO_GENERAL_ERROR 54*726fad2aSDina K Nimeh #define CKR_HOST_MEMORY CRYPTO_HOST_MEMORY 55*726fad2aSDina K Nimeh #define CKR_KEY_SIZE_RANGE CRYPTO_KEY_SIZE_RANGE 56*726fad2aSDina K Nimeh 57*726fad2aSDina K Nimeh int random_get_bytes(uint8_t *ran_out, size_t ran_len); 58*726fad2aSDina K Nimeh int random_get_pseudo_bytes(uint8_t *ran_out, size_t ran_len); 59*726fad2aSDina K Nimeh 60*726fad2aSDina K Nimeh #else 61*726fad2aSDina K Nimeh 62*726fad2aSDina K Nimeh #include <security/cryptoki.h> 63*726fad2aSDina K Nimeh #include <security/pkcs11t.h> 64*726fad2aSDina K Nimeh 65*726fad2aSDina K Nimeh #endif /* _KERNEL */ 66*726fad2aSDina K Nimeh 67*726fad2aSDina K Nimeh 68*726fad2aSDina K Nimeh /* DH key using BIGNUM representations */ 69*726fad2aSDina K Nimeh typedef struct { 70*726fad2aSDina K Nimeh int size; /* key size in bits */ 71*726fad2aSDina K Nimeh BIGNUM p; /* p (prime) */ 72*726fad2aSDina K Nimeh BIGNUM g; /* g (base) */ 73*726fad2aSDina K Nimeh BIGNUM x; /* private value (random) */ 74*726fad2aSDina K Nimeh BIGNUM y; /* public value (= g^x mod p) */ 75*726fad2aSDina K Nimeh } DHkey; 76*726fad2aSDina K Nimeh 77*726fad2aSDina K Nimeh /* DH key using byte string representations, useful for parameter lists */ 78*726fad2aSDina K Nimeh typedef struct { 79*726fad2aSDina K Nimeh uint32_t prime_bits; /* size */ 80*726fad2aSDina K Nimeh uchar_t *prime; /* p */ 81*726fad2aSDina K Nimeh uint32_t base_bytes; 82*726fad2aSDina K Nimeh uchar_t *base; /* g */ 83*726fad2aSDina K Nimeh uint32_t value_bits; /* for both x and y */ 84*726fad2aSDina K Nimeh uchar_t *private_x; /* x */ 85*726fad2aSDina K Nimeh uchar_t *public_y; /* y */ 86*726fad2aSDina K Nimeh int (*rfunc)(void *, size_t); /* random function */ 87*726fad2aSDina K Nimeh } DHbytekey; 88*726fad2aSDina K Nimeh 89*726fad2aSDina K Nimeh 90*726fad2aSDina K Nimeh CK_RV dh_genkey_pair(DHbytekey *bkey); 91*726fad2aSDina K Nimeh 92*726fad2aSDina K Nimeh CK_RV dh_key_derive(DHbytekey *bkey, uint32_t key_type, 93*726fad2aSDina K Nimeh uchar_t *secretkey, uint32_t *secretkey_len); 94*726fad2aSDina K Nimeh 95*726fad2aSDina K Nimeh #ifdef __cplusplus 96*726fad2aSDina K Nimeh } 97*726fad2aSDina K Nimeh #endif 98*726fad2aSDina K Nimeh 99*726fad2aSDina K Nimeh #endif /* _DH_IMPL_H */ 100