1*7c478bd9Sstevel@tonic-gate /*
2*7c478bd9Sstevel@tonic-gate * CDDL HEADER START
3*7c478bd9Sstevel@tonic-gate *
4*7c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5*7c478bd9Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only
6*7c478bd9Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance
7*7c478bd9Sstevel@tonic-gate * with the License.
8*7c478bd9Sstevel@tonic-gate *
9*7c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10*7c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
11*7c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions
12*7c478bd9Sstevel@tonic-gate * and limitations under the License.
13*7c478bd9Sstevel@tonic-gate *
14*7c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
15*7c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16*7c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
17*7c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
18*7c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
19*7c478bd9Sstevel@tonic-gate *
20*7c478bd9Sstevel@tonic-gate * CDDL HEADER END
21*7c478bd9Sstevel@tonic-gate */
22*7c478bd9Sstevel@tonic-gate /*
23*7c478bd9Sstevel@tonic-gate * Copyright 2003 Sun Microsystems, Inc. All rights reserved.
24*7c478bd9Sstevel@tonic-gate * Use is subject to license terms.
25*7c478bd9Sstevel@tonic-gate */
26*7c478bd9Sstevel@tonic-gate
27*7c478bd9Sstevel@tonic-gate #include <security/cryptoki.h>
28*7c478bd9Sstevel@tonic-gate #include "pkcs11Global.h"
29*7c478bd9Sstevel@tonic-gate #include "pkcs11Conf.h"
30*7c478bd9Sstevel@tonic-gate #include "pkcs11Session.h"
31*7c478bd9Sstevel@tonic-gate #include "pkcs11Slot.h"
32*7c478bd9Sstevel@tonic-gate
33*7c478bd9Sstevel@tonic-gate /*
34*7c478bd9Sstevel@tonic-gate * C_EncryptInit will verify that the session handle is valid within
35*7c478bd9Sstevel@tonic-gate * the framework, that the mechanism is not disabled for the slot
36*7c478bd9Sstevel@tonic-gate * associated with this session, and then redirect to the underlying
37*7c478bd9Sstevel@tonic-gate * provider. Policy is checked for C_EncryptInit, and not C_Encrypt
38*7c478bd9Sstevel@tonic-gate * or C_EncryptUpdate, since C_EncryptInit is required to be called
39*7c478bd9Sstevel@tonic-gate * before C_Encrypt and C_EncryptUpdate.
40*7c478bd9Sstevel@tonic-gate */
41*7c478bd9Sstevel@tonic-gate CK_RV
C_EncryptInit(CK_SESSION_HANDLE hSession,CK_MECHANISM_PTR pMechanism,CK_OBJECT_HANDLE hKey)42*7c478bd9Sstevel@tonic-gate C_EncryptInit(CK_SESSION_HANDLE hSession,
43*7c478bd9Sstevel@tonic-gate CK_MECHANISM_PTR pMechanism,
44*7c478bd9Sstevel@tonic-gate CK_OBJECT_HANDLE hKey)
45*7c478bd9Sstevel@tonic-gate {
46*7c478bd9Sstevel@tonic-gate CK_RV rv;
47*7c478bd9Sstevel@tonic-gate pkcs11_session_t *sessp;
48*7c478bd9Sstevel@tonic-gate CK_SLOT_ID slotid;
49*7c478bd9Sstevel@tonic-gate
50*7c478bd9Sstevel@tonic-gate /* Check for a fastpath */
51*7c478bd9Sstevel@tonic-gate if (purefastpath || policyfastpath) {
52*7c478bd9Sstevel@tonic-gate if (policyfastpath &&
53*7c478bd9Sstevel@tonic-gate pkcs11_is_dismech(fast_slot, pMechanism->mechanism)) {
54*7c478bd9Sstevel@tonic-gate return (CKR_MECHANISM_INVALID);
55*7c478bd9Sstevel@tonic-gate }
56*7c478bd9Sstevel@tonic-gate return (fast_funcs->C_EncryptInit(hSession, pMechanism, hKey));
57*7c478bd9Sstevel@tonic-gate }
58*7c478bd9Sstevel@tonic-gate
59*7c478bd9Sstevel@tonic-gate if (!pkcs11_initialized) {
60*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED);
61*7c478bd9Sstevel@tonic-gate }
62*7c478bd9Sstevel@tonic-gate
63*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer */
64*7c478bd9Sstevel@tonic-gate HANDLE2SESSION(hSession, sessp, rv);
65*7c478bd9Sstevel@tonic-gate
66*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
67*7c478bd9Sstevel@tonic-gate return (rv);
68*7c478bd9Sstevel@tonic-gate }
69*7c478bd9Sstevel@tonic-gate
70*7c478bd9Sstevel@tonic-gate slotid = sessp->se_slotid;
71*7c478bd9Sstevel@tonic-gate
72*7c478bd9Sstevel@tonic-gate /* Make sure this is not a disabled mechanism */
73*7c478bd9Sstevel@tonic-gate if (pkcs11_is_dismech(slotid, pMechanism->mechanism)) {
74*7c478bd9Sstevel@tonic-gate return (CKR_MECHANISM_INVALID);
75*7c478bd9Sstevel@tonic-gate }
76*7c478bd9Sstevel@tonic-gate
77*7c478bd9Sstevel@tonic-gate /* Initialize the digest with the underlying provider */
78*7c478bd9Sstevel@tonic-gate rv = FUNCLIST(slotid)->C_EncryptInit(sessp->se_handle,
79*7c478bd9Sstevel@tonic-gate pMechanism, hKey);
80*7c478bd9Sstevel@tonic-gate
81*7c478bd9Sstevel@tonic-gate /* Present consistent interface to the application */
82*7c478bd9Sstevel@tonic-gate if (rv == CKR_FUNCTION_NOT_SUPPORTED) {
83*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED);
84*7c478bd9Sstevel@tonic-gate }
85*7c478bd9Sstevel@tonic-gate
86*7c478bd9Sstevel@tonic-gate return (rv);
87*7c478bd9Sstevel@tonic-gate }
88*7c478bd9Sstevel@tonic-gate
89*7c478bd9Sstevel@tonic-gate /*
90*7c478bd9Sstevel@tonic-gate * C_Encrypt is a pure wrapper to the underlying provider.
91*7c478bd9Sstevel@tonic-gate * The only argument checked is whether or not hSession is valid.
92*7c478bd9Sstevel@tonic-gate */
93*7c478bd9Sstevel@tonic-gate CK_RV
C_Encrypt(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pData,CK_ULONG ulDataLen,CK_BYTE_PTR pEncryptedData,CK_ULONG_PTR pulEncryptedDataLen)94*7c478bd9Sstevel@tonic-gate C_Encrypt(CK_SESSION_HANDLE hSession,
95*7c478bd9Sstevel@tonic-gate CK_BYTE_PTR pData,
96*7c478bd9Sstevel@tonic-gate CK_ULONG ulDataLen,
97*7c478bd9Sstevel@tonic-gate CK_BYTE_PTR pEncryptedData,
98*7c478bd9Sstevel@tonic-gate CK_ULONG_PTR pulEncryptedDataLen)
99*7c478bd9Sstevel@tonic-gate {
100*7c478bd9Sstevel@tonic-gate CK_RV rv;
101*7c478bd9Sstevel@tonic-gate pkcs11_session_t *sessp;
102*7c478bd9Sstevel@tonic-gate
103*7c478bd9Sstevel@tonic-gate /* Check for a fastpath */
104*7c478bd9Sstevel@tonic-gate if (purefastpath || policyfastpath) {
105*7c478bd9Sstevel@tonic-gate return (fast_funcs->C_Encrypt(hSession, pData, ulDataLen,
106*7c478bd9Sstevel@tonic-gate pEncryptedData, pulEncryptedDataLen));
107*7c478bd9Sstevel@tonic-gate }
108*7c478bd9Sstevel@tonic-gate
109*7c478bd9Sstevel@tonic-gate if (!pkcs11_initialized) {
110*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED);
111*7c478bd9Sstevel@tonic-gate }
112*7c478bd9Sstevel@tonic-gate
113*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer */
114*7c478bd9Sstevel@tonic-gate HANDLE2SESSION(hSession, sessp, rv);
115*7c478bd9Sstevel@tonic-gate
116*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
117*7c478bd9Sstevel@tonic-gate return (rv);
118*7c478bd9Sstevel@tonic-gate }
119*7c478bd9Sstevel@tonic-gate
120*7c478bd9Sstevel@tonic-gate /* Initialize the digest with the underlying provider */
121*7c478bd9Sstevel@tonic-gate rv = FUNCLIST(sessp->se_slotid)->C_Encrypt(sessp->se_handle, pData,
122*7c478bd9Sstevel@tonic-gate ulDataLen, pEncryptedData, pulEncryptedDataLen);
123*7c478bd9Sstevel@tonic-gate
124*7c478bd9Sstevel@tonic-gate /* Present consistent interface to the application */
125*7c478bd9Sstevel@tonic-gate if (rv == CKR_FUNCTION_NOT_SUPPORTED) {
126*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED);
127*7c478bd9Sstevel@tonic-gate }
128*7c478bd9Sstevel@tonic-gate
129*7c478bd9Sstevel@tonic-gate return (rv);
130*7c478bd9Sstevel@tonic-gate }
131*7c478bd9Sstevel@tonic-gate
132*7c478bd9Sstevel@tonic-gate /*
133*7c478bd9Sstevel@tonic-gate * C_EncryptUpdate is a pure wrapper to the underlying provider.
134*7c478bd9Sstevel@tonic-gate * The only argument checked is whether or not hSession is valid.
135*7c478bd9Sstevel@tonic-gate */
136*7c478bd9Sstevel@tonic-gate CK_RV
C_EncryptUpdate(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pPart,CK_ULONG ulPartLen,CK_BYTE_PTR pEncryptedPart,CK_ULONG_PTR pulEncryptedPartLen)137*7c478bd9Sstevel@tonic-gate C_EncryptUpdate(CK_SESSION_HANDLE hSession,
138*7c478bd9Sstevel@tonic-gate CK_BYTE_PTR pPart,
139*7c478bd9Sstevel@tonic-gate CK_ULONG ulPartLen,
140*7c478bd9Sstevel@tonic-gate CK_BYTE_PTR pEncryptedPart,
141*7c478bd9Sstevel@tonic-gate CK_ULONG_PTR pulEncryptedPartLen)
142*7c478bd9Sstevel@tonic-gate {
143*7c478bd9Sstevel@tonic-gate CK_RV rv;
144*7c478bd9Sstevel@tonic-gate pkcs11_session_t *sessp;
145*7c478bd9Sstevel@tonic-gate
146*7c478bd9Sstevel@tonic-gate /* Check for a fastpath */
147*7c478bd9Sstevel@tonic-gate if (purefastpath || policyfastpath) {
148*7c478bd9Sstevel@tonic-gate return (fast_funcs->C_EncryptUpdate(hSession, pPart, ulPartLen,
149*7c478bd9Sstevel@tonic-gate pEncryptedPart, pulEncryptedPartLen));
150*7c478bd9Sstevel@tonic-gate }
151*7c478bd9Sstevel@tonic-gate
152*7c478bd9Sstevel@tonic-gate if (!pkcs11_initialized) {
153*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED);
154*7c478bd9Sstevel@tonic-gate }
155*7c478bd9Sstevel@tonic-gate
156*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer */
157*7c478bd9Sstevel@tonic-gate HANDLE2SESSION(hSession, sessp, rv);
158*7c478bd9Sstevel@tonic-gate
159*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
160*7c478bd9Sstevel@tonic-gate return (rv);
161*7c478bd9Sstevel@tonic-gate }
162*7c478bd9Sstevel@tonic-gate
163*7c478bd9Sstevel@tonic-gate /* Initialize the digest with the underlying provider */
164*7c478bd9Sstevel@tonic-gate rv = FUNCLIST(sessp->se_slotid)->C_EncryptUpdate(sessp->se_handle,
165*7c478bd9Sstevel@tonic-gate pPart, ulPartLen, pEncryptedPart, pulEncryptedPartLen);
166*7c478bd9Sstevel@tonic-gate
167*7c478bd9Sstevel@tonic-gate /* Present consistent interface to the application */
168*7c478bd9Sstevel@tonic-gate if (rv == CKR_FUNCTION_NOT_SUPPORTED) {
169*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED);
170*7c478bd9Sstevel@tonic-gate }
171*7c478bd9Sstevel@tonic-gate
172*7c478bd9Sstevel@tonic-gate return (rv);
173*7c478bd9Sstevel@tonic-gate }
174*7c478bd9Sstevel@tonic-gate
175*7c478bd9Sstevel@tonic-gate /*
176*7c478bd9Sstevel@tonic-gate * C_EncryptFinal is a pure wrapper to the underlying provider.
177*7c478bd9Sstevel@tonic-gate * The only argument checked is whether or not hSession is valid.
178*7c478bd9Sstevel@tonic-gate */
179*7c478bd9Sstevel@tonic-gate CK_RV
C_EncryptFinal(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pLastEncryptedPart,CK_ULONG_PTR pulLastEncryptedPartLen)180*7c478bd9Sstevel@tonic-gate C_EncryptFinal(CK_SESSION_HANDLE hSession,
181*7c478bd9Sstevel@tonic-gate CK_BYTE_PTR pLastEncryptedPart,
182*7c478bd9Sstevel@tonic-gate CK_ULONG_PTR pulLastEncryptedPartLen)
183*7c478bd9Sstevel@tonic-gate {
184*7c478bd9Sstevel@tonic-gate CK_RV rv;
185*7c478bd9Sstevel@tonic-gate pkcs11_session_t *sessp;
186*7c478bd9Sstevel@tonic-gate
187*7c478bd9Sstevel@tonic-gate /* Check for a fastpath */
188*7c478bd9Sstevel@tonic-gate if (purefastpath || policyfastpath) {
189*7c478bd9Sstevel@tonic-gate return (fast_funcs->C_EncryptFinal(hSession,
190*7c478bd9Sstevel@tonic-gate pLastEncryptedPart, pulLastEncryptedPartLen));
191*7c478bd9Sstevel@tonic-gate }
192*7c478bd9Sstevel@tonic-gate
193*7c478bd9Sstevel@tonic-gate if (!pkcs11_initialized) {
194*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED);
195*7c478bd9Sstevel@tonic-gate }
196*7c478bd9Sstevel@tonic-gate
197*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer */
198*7c478bd9Sstevel@tonic-gate HANDLE2SESSION(hSession, sessp, rv);
199*7c478bd9Sstevel@tonic-gate
200*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
201*7c478bd9Sstevel@tonic-gate return (rv);
202*7c478bd9Sstevel@tonic-gate }
203*7c478bd9Sstevel@tonic-gate
204*7c478bd9Sstevel@tonic-gate /* Initialize the digest with the underlying provider */
205*7c478bd9Sstevel@tonic-gate rv = FUNCLIST(sessp->se_slotid)->C_EncryptFinal(sessp->se_handle,
206*7c478bd9Sstevel@tonic-gate pLastEncryptedPart, pulLastEncryptedPartLen);
207*7c478bd9Sstevel@tonic-gate
208*7c478bd9Sstevel@tonic-gate /* Present consistent interface to the application */
209*7c478bd9Sstevel@tonic-gate if (rv == CKR_FUNCTION_NOT_SUPPORTED) {
210*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED);
211*7c478bd9Sstevel@tonic-gate }
212*7c478bd9Sstevel@tonic-gate
213*7c478bd9Sstevel@tonic-gate return (rv);
214*7c478bd9Sstevel@tonic-gate }
215*7c478bd9Sstevel@tonic-gate
216*7c478bd9Sstevel@tonic-gate /*
217*7c478bd9Sstevel@tonic-gate * C_DecryptInit will verify that the session handle is valid within
218*7c478bd9Sstevel@tonic-gate * the framework, that the mechanism is not disabled for the slot
219*7c478bd9Sstevel@tonic-gate * associated with this session, and then redirect to the underlying
220*7c478bd9Sstevel@tonic-gate * provider. Policy is checked for C_DecryptInit, and not C_Decrypt
221*7c478bd9Sstevel@tonic-gate * or C_DecryptUpdate, since C_DecryptInit is required to be called
222*7c478bd9Sstevel@tonic-gate * before C_Decrypt and C_DecryptUpdate.
223*7c478bd9Sstevel@tonic-gate */
224*7c478bd9Sstevel@tonic-gate CK_RV
C_DecryptInit(CK_SESSION_HANDLE hSession,CK_MECHANISM_PTR pMechanism,CK_OBJECT_HANDLE hKey)225*7c478bd9Sstevel@tonic-gate C_DecryptInit(CK_SESSION_HANDLE hSession,
226*7c478bd9Sstevel@tonic-gate CK_MECHANISM_PTR pMechanism,
227*7c478bd9Sstevel@tonic-gate CK_OBJECT_HANDLE hKey)
228*7c478bd9Sstevel@tonic-gate {
229*7c478bd9Sstevel@tonic-gate CK_RV rv;
230*7c478bd9Sstevel@tonic-gate pkcs11_session_t *sessp;
231*7c478bd9Sstevel@tonic-gate CK_SLOT_ID slotid;
232*7c478bd9Sstevel@tonic-gate
233*7c478bd9Sstevel@tonic-gate /* Check for a fastpath */
234*7c478bd9Sstevel@tonic-gate if (purefastpath || policyfastpath) {
235*7c478bd9Sstevel@tonic-gate if (policyfastpath &&
236*7c478bd9Sstevel@tonic-gate pkcs11_is_dismech(fast_slot, pMechanism->mechanism)) {
237*7c478bd9Sstevel@tonic-gate return (CKR_MECHANISM_INVALID);
238*7c478bd9Sstevel@tonic-gate }
239*7c478bd9Sstevel@tonic-gate return (fast_funcs->C_DecryptInit(hSession, pMechanism, hKey));
240*7c478bd9Sstevel@tonic-gate }
241*7c478bd9Sstevel@tonic-gate
242*7c478bd9Sstevel@tonic-gate if (!pkcs11_initialized) {
243*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED);
244*7c478bd9Sstevel@tonic-gate }
245*7c478bd9Sstevel@tonic-gate
246*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer */
247*7c478bd9Sstevel@tonic-gate HANDLE2SESSION(hSession, sessp, rv);
248*7c478bd9Sstevel@tonic-gate
249*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
250*7c478bd9Sstevel@tonic-gate return (rv);
251*7c478bd9Sstevel@tonic-gate }
252*7c478bd9Sstevel@tonic-gate
253*7c478bd9Sstevel@tonic-gate slotid = sessp->se_slotid;
254*7c478bd9Sstevel@tonic-gate
255*7c478bd9Sstevel@tonic-gate /* Make sure this is not a disabled mechanism */
256*7c478bd9Sstevel@tonic-gate if (pkcs11_is_dismech(slotid, pMechanism->mechanism)) {
257*7c478bd9Sstevel@tonic-gate return (CKR_MECHANISM_INVALID);
258*7c478bd9Sstevel@tonic-gate }
259*7c478bd9Sstevel@tonic-gate
260*7c478bd9Sstevel@tonic-gate /* Initialize the digest with the underlying provider */
261*7c478bd9Sstevel@tonic-gate rv = FUNCLIST(slotid)->C_DecryptInit(sessp->se_handle,
262*7c478bd9Sstevel@tonic-gate pMechanism, hKey);
263*7c478bd9Sstevel@tonic-gate
264*7c478bd9Sstevel@tonic-gate /* Present consistent interface to the application */
265*7c478bd9Sstevel@tonic-gate if (rv == CKR_FUNCTION_NOT_SUPPORTED) {
266*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED);
267*7c478bd9Sstevel@tonic-gate }
268*7c478bd9Sstevel@tonic-gate
269*7c478bd9Sstevel@tonic-gate return (rv);
270*7c478bd9Sstevel@tonic-gate }
271*7c478bd9Sstevel@tonic-gate
272*7c478bd9Sstevel@tonic-gate /*
273*7c478bd9Sstevel@tonic-gate * C_Decrypt is a pure wrapper to the underlying provider.
274*7c478bd9Sstevel@tonic-gate * The only argument checked is whether or not hSession is valid.
275*7c478bd9Sstevel@tonic-gate */
276*7c478bd9Sstevel@tonic-gate CK_RV
C_Decrypt(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pEncryptedData,CK_ULONG ulEncryptedDataLen,CK_BYTE_PTR pData,CK_ULONG_PTR pulDataLen)277*7c478bd9Sstevel@tonic-gate C_Decrypt(CK_SESSION_HANDLE hSession,
278*7c478bd9Sstevel@tonic-gate CK_BYTE_PTR pEncryptedData,
279*7c478bd9Sstevel@tonic-gate CK_ULONG ulEncryptedDataLen,
280*7c478bd9Sstevel@tonic-gate CK_BYTE_PTR pData,
281*7c478bd9Sstevel@tonic-gate CK_ULONG_PTR pulDataLen)
282*7c478bd9Sstevel@tonic-gate {
283*7c478bd9Sstevel@tonic-gate CK_RV rv;
284*7c478bd9Sstevel@tonic-gate pkcs11_session_t *sessp;
285*7c478bd9Sstevel@tonic-gate
286*7c478bd9Sstevel@tonic-gate /* Check for a fastpath */
287*7c478bd9Sstevel@tonic-gate if (purefastpath || policyfastpath) {
288*7c478bd9Sstevel@tonic-gate return (fast_funcs->C_Decrypt(hSession, pEncryptedData,
289*7c478bd9Sstevel@tonic-gate ulEncryptedDataLen, pData, pulDataLen));
290*7c478bd9Sstevel@tonic-gate }
291*7c478bd9Sstevel@tonic-gate
292*7c478bd9Sstevel@tonic-gate if (!pkcs11_initialized) {
293*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED);
294*7c478bd9Sstevel@tonic-gate }
295*7c478bd9Sstevel@tonic-gate
296*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer */
297*7c478bd9Sstevel@tonic-gate HANDLE2SESSION(hSession, sessp, rv);
298*7c478bd9Sstevel@tonic-gate
299*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
300*7c478bd9Sstevel@tonic-gate return (rv);
301*7c478bd9Sstevel@tonic-gate }
302*7c478bd9Sstevel@tonic-gate
303*7c478bd9Sstevel@tonic-gate /* Initialize the digest with the underlying provider */
304*7c478bd9Sstevel@tonic-gate rv = FUNCLIST(sessp->se_slotid)->C_Decrypt(sessp->se_handle,
305*7c478bd9Sstevel@tonic-gate pEncryptedData, ulEncryptedDataLen, pData, pulDataLen);
306*7c478bd9Sstevel@tonic-gate
307*7c478bd9Sstevel@tonic-gate /* Present consistent interface to the application */
308*7c478bd9Sstevel@tonic-gate if (rv == CKR_FUNCTION_NOT_SUPPORTED) {
309*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED);
310*7c478bd9Sstevel@tonic-gate }
311*7c478bd9Sstevel@tonic-gate
312*7c478bd9Sstevel@tonic-gate return (rv);
313*7c478bd9Sstevel@tonic-gate }
314*7c478bd9Sstevel@tonic-gate
315*7c478bd9Sstevel@tonic-gate /*
316*7c478bd9Sstevel@tonic-gate * C_DecryptUpdate is a pure wrapper to the underlying provider.
317*7c478bd9Sstevel@tonic-gate * The only argument checked is whether or not hSession is valid.
318*7c478bd9Sstevel@tonic-gate */
319*7c478bd9Sstevel@tonic-gate CK_RV
C_DecryptUpdate(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pEncryptedPart,CK_ULONG ulEncryptedPartLen,CK_BYTE_PTR pPart,CK_ULONG_PTR pulPartLen)320*7c478bd9Sstevel@tonic-gate C_DecryptUpdate(CK_SESSION_HANDLE hSession,
321*7c478bd9Sstevel@tonic-gate CK_BYTE_PTR pEncryptedPart,
322*7c478bd9Sstevel@tonic-gate CK_ULONG ulEncryptedPartLen,
323*7c478bd9Sstevel@tonic-gate CK_BYTE_PTR pPart,
324*7c478bd9Sstevel@tonic-gate CK_ULONG_PTR pulPartLen)
325*7c478bd9Sstevel@tonic-gate {
326*7c478bd9Sstevel@tonic-gate CK_RV rv;
327*7c478bd9Sstevel@tonic-gate pkcs11_session_t *sessp;
328*7c478bd9Sstevel@tonic-gate
329*7c478bd9Sstevel@tonic-gate /* Check for a fastpath */
330*7c478bd9Sstevel@tonic-gate if (purefastpath || policyfastpath) {
331*7c478bd9Sstevel@tonic-gate return (fast_funcs->C_DecryptUpdate(hSession, pEncryptedPart,
332*7c478bd9Sstevel@tonic-gate ulEncryptedPartLen, pPart, pulPartLen));
333*7c478bd9Sstevel@tonic-gate }
334*7c478bd9Sstevel@tonic-gate
335*7c478bd9Sstevel@tonic-gate if (!pkcs11_initialized) {
336*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED);
337*7c478bd9Sstevel@tonic-gate }
338*7c478bd9Sstevel@tonic-gate
339*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer */
340*7c478bd9Sstevel@tonic-gate HANDLE2SESSION(hSession, sessp, rv);
341*7c478bd9Sstevel@tonic-gate
342*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
343*7c478bd9Sstevel@tonic-gate return (rv);
344*7c478bd9Sstevel@tonic-gate }
345*7c478bd9Sstevel@tonic-gate
346*7c478bd9Sstevel@tonic-gate /* Initialize the digest with the underlying provider */
347*7c478bd9Sstevel@tonic-gate rv = FUNCLIST(sessp->se_slotid)->C_DecryptUpdate(sessp->se_handle,
348*7c478bd9Sstevel@tonic-gate pEncryptedPart, ulEncryptedPartLen, pPart, pulPartLen);
349*7c478bd9Sstevel@tonic-gate
350*7c478bd9Sstevel@tonic-gate /* Present consistent interface to the application */
351*7c478bd9Sstevel@tonic-gate if (rv == CKR_FUNCTION_NOT_SUPPORTED) {
352*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED);
353*7c478bd9Sstevel@tonic-gate }
354*7c478bd9Sstevel@tonic-gate
355*7c478bd9Sstevel@tonic-gate return (rv);
356*7c478bd9Sstevel@tonic-gate }
357*7c478bd9Sstevel@tonic-gate
358*7c478bd9Sstevel@tonic-gate /*
359*7c478bd9Sstevel@tonic-gate * C_DecryptFinal is a pure wrapper to the underlying provider.
360*7c478bd9Sstevel@tonic-gate * The only argument checked is whether or not hSession is valid.
361*7c478bd9Sstevel@tonic-gate */
362*7c478bd9Sstevel@tonic-gate CK_RV
C_DecryptFinal(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pLastPart,CK_ULONG_PTR pulLastPartLen)363*7c478bd9Sstevel@tonic-gate C_DecryptFinal(CK_SESSION_HANDLE hSession,
364*7c478bd9Sstevel@tonic-gate CK_BYTE_PTR pLastPart,
365*7c478bd9Sstevel@tonic-gate CK_ULONG_PTR pulLastPartLen)
366*7c478bd9Sstevel@tonic-gate {
367*7c478bd9Sstevel@tonic-gate CK_RV rv;
368*7c478bd9Sstevel@tonic-gate pkcs11_session_t *sessp;
369*7c478bd9Sstevel@tonic-gate
370*7c478bd9Sstevel@tonic-gate /* Check for a fastpath */
371*7c478bd9Sstevel@tonic-gate if (purefastpath || policyfastpath) {
372*7c478bd9Sstevel@tonic-gate return (fast_funcs->C_DecryptFinal(hSession, pLastPart,
373*7c478bd9Sstevel@tonic-gate pulLastPartLen));
374*7c478bd9Sstevel@tonic-gate }
375*7c478bd9Sstevel@tonic-gate
376*7c478bd9Sstevel@tonic-gate if (!pkcs11_initialized) {
377*7c478bd9Sstevel@tonic-gate return (CKR_CRYPTOKI_NOT_INITIALIZED);
378*7c478bd9Sstevel@tonic-gate }
379*7c478bd9Sstevel@tonic-gate
380*7c478bd9Sstevel@tonic-gate /* Obtain the session pointer */
381*7c478bd9Sstevel@tonic-gate HANDLE2SESSION(hSession, sessp, rv);
382*7c478bd9Sstevel@tonic-gate
383*7c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
384*7c478bd9Sstevel@tonic-gate return (rv);
385*7c478bd9Sstevel@tonic-gate }
386*7c478bd9Sstevel@tonic-gate
387*7c478bd9Sstevel@tonic-gate /* Initialize the digest with the underlying provider */
388*7c478bd9Sstevel@tonic-gate rv = FUNCLIST(sessp->se_slotid)->C_DecryptFinal(sessp->se_handle,
389*7c478bd9Sstevel@tonic-gate pLastPart, pulLastPartLen);
390*7c478bd9Sstevel@tonic-gate
391*7c478bd9Sstevel@tonic-gate /* Present consistent interface to the application */
392*7c478bd9Sstevel@tonic-gate if (rv == CKR_FUNCTION_NOT_SUPPORTED) {
393*7c478bd9Sstevel@tonic-gate return (CKR_FUNCTION_FAILED);
394*7c478bd9Sstevel@tonic-gate }
395*7c478bd9Sstevel@tonic-gate
396*7c478bd9Sstevel@tonic-gate return (rv);
397*7c478bd9Sstevel@tonic-gate }
398