17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate  * CDDL HEADER START
37c478bd9Sstevel@tonic-gate  *
47c478bd9Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
5*d3a28a55Sdinak  * Common Development and Distribution License (the "License").
6*d3a28a55Sdinak  * You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate  *
87c478bd9Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate  * See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate  * and limitations under the License.
127c478bd9Sstevel@tonic-gate  *
137c478bd9Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate  *
197c478bd9Sstevel@tonic-gate  * CDDL HEADER END
207c478bd9Sstevel@tonic-gate  */
217c478bd9Sstevel@tonic-gate /*
22*d3a28a55Sdinak  * Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
237c478bd9Sstevel@tonic-gate  * Use is subject to license terms.
247c478bd9Sstevel@tonic-gate  */
257c478bd9Sstevel@tonic-gate 
267c478bd9Sstevel@tonic-gate /*
277c478bd9Sstevel@tonic-gate  * Signing and MACing Functions
287c478bd9Sstevel@tonic-gate  * (as defined in PKCs#11 spec section 11.11)
297c478bd9Sstevel@tonic-gate  */
307c478bd9Sstevel@tonic-gate 
317c478bd9Sstevel@tonic-gate #include "metaGlobal.h"
327c478bd9Sstevel@tonic-gate 
337c478bd9Sstevel@tonic-gate 
347c478bd9Sstevel@tonic-gate /*
357c478bd9Sstevel@tonic-gate  * meta_SignInit
367c478bd9Sstevel@tonic-gate  *
377c478bd9Sstevel@tonic-gate  */
387c478bd9Sstevel@tonic-gate CK_RV
meta_SignInit(CK_SESSION_HANDLE hSession,CK_MECHANISM_PTR pMechanism,CK_OBJECT_HANDLE hKey)397c478bd9Sstevel@tonic-gate meta_SignInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanism,
407c478bd9Sstevel@tonic-gate     CK_OBJECT_HANDLE hKey)
417c478bd9Sstevel@tonic-gate {
427c478bd9Sstevel@tonic-gate 	CK_RV rv;
437c478bd9Sstevel@tonic-gate 	meta_session_t *session;
447c478bd9Sstevel@tonic-gate 	meta_object_t *key;
457c478bd9Sstevel@tonic-gate 
467c478bd9Sstevel@tonic-gate 	if (pMechanism == NULL)
477c478bd9Sstevel@tonic-gate 		return (CKR_ARGUMENTS_BAD);
487c478bd9Sstevel@tonic-gate 
497c478bd9Sstevel@tonic-gate 	rv = meta_handle2session(hSession, &session);
507c478bd9Sstevel@tonic-gate 	if (rv != CKR_OK)
517c478bd9Sstevel@tonic-gate 		return (rv);
527c478bd9Sstevel@tonic-gate 
537c478bd9Sstevel@tonic-gate 	rv = meta_handle2object(hKey, &key);
547c478bd9Sstevel@tonic-gate 	if (rv != CKR_OK) {
557c478bd9Sstevel@tonic-gate 		REFRELEASE(session);
567c478bd9Sstevel@tonic-gate 		return (rv);
577c478bd9Sstevel@tonic-gate 	}
587c478bd9Sstevel@tonic-gate 
59*d3a28a55Sdinak 	rv = meta_operation_init(CKF_SIGN, session, pMechanism, key);
607c478bd9Sstevel@tonic-gate 
617c478bd9Sstevel@tonic-gate 	OBJRELEASE(key);
627c478bd9Sstevel@tonic-gate 	REFRELEASE(session);
637c478bd9Sstevel@tonic-gate 
647c478bd9Sstevel@tonic-gate 	return (rv);
657c478bd9Sstevel@tonic-gate }
667c478bd9Sstevel@tonic-gate 
677c478bd9Sstevel@tonic-gate 
687c478bd9Sstevel@tonic-gate /*
697c478bd9Sstevel@tonic-gate  * meta_Sign
707c478bd9Sstevel@tonic-gate  *
717c478bd9Sstevel@tonic-gate  */
727c478bd9Sstevel@tonic-gate CK_RV
meta_Sign(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pData,CK_ULONG ulDataLen,CK_BYTE_PTR pSignature,CK_ULONG_PTR pulSignatureLen)737c478bd9Sstevel@tonic-gate meta_Sign(CK_SESSION_HANDLE hSession,
747c478bd9Sstevel@tonic-gate     CK_BYTE_PTR pData, CK_ULONG ulDataLen,
757c478bd9Sstevel@tonic-gate     CK_BYTE_PTR pSignature, CK_ULONG_PTR pulSignatureLen)
767c478bd9Sstevel@tonic-gate {
777c478bd9Sstevel@tonic-gate 	CK_RV rv;
787c478bd9Sstevel@tonic-gate 	meta_session_t *session;
797c478bd9Sstevel@tonic-gate 
807c478bd9Sstevel@tonic-gate 	rv = meta_handle2session(hSession, &session);
817c478bd9Sstevel@tonic-gate 	if (rv != CKR_OK)
827c478bd9Sstevel@tonic-gate 		return (rv);
837c478bd9Sstevel@tonic-gate 
847c478bd9Sstevel@tonic-gate 	if (pData == NULL || pulSignatureLen == NULL) {
85*d3a28a55Sdinak 		meta_operation_cleanup(session, CKF_SIGN, FALSE);
867c478bd9Sstevel@tonic-gate 		REFRELEASE(session);
877c478bd9Sstevel@tonic-gate 		return (CKR_ARGUMENTS_BAD);
887c478bd9Sstevel@tonic-gate 	}
897c478bd9Sstevel@tonic-gate 
90*d3a28a55Sdinak 	rv = meta_do_operation(CKF_SIGN, MODE_SINGLE, session, NULL,
917c478bd9Sstevel@tonic-gate 	    pData, ulDataLen, pSignature, pulSignatureLen);
927c478bd9Sstevel@tonic-gate 
937c478bd9Sstevel@tonic-gate 	REFRELEASE(session);
947c478bd9Sstevel@tonic-gate 
957c478bd9Sstevel@tonic-gate 	return (rv);
967c478bd9Sstevel@tonic-gate }
977c478bd9Sstevel@tonic-gate 
987c478bd9Sstevel@tonic-gate 
997c478bd9Sstevel@tonic-gate /*
1007c478bd9Sstevel@tonic-gate  * meta_SignUpdate
1017c478bd9Sstevel@tonic-gate  *
1027c478bd9Sstevel@tonic-gate  */
1037c478bd9Sstevel@tonic-gate CK_RV
meta_SignUpdate(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pPart,CK_ULONG ulPartLen)1047c478bd9Sstevel@tonic-gate meta_SignUpdate(CK_SESSION_HANDLE hSession,
1057c478bd9Sstevel@tonic-gate     CK_BYTE_PTR pPart, CK_ULONG ulPartLen)
1067c478bd9Sstevel@tonic-gate {
1077c478bd9Sstevel@tonic-gate 	CK_RV rv;
1087c478bd9Sstevel@tonic-gate 	meta_session_t *session;
1097c478bd9Sstevel@tonic-gate 
1107c478bd9Sstevel@tonic-gate 	rv = meta_handle2session(hSession, &session);
1117c478bd9Sstevel@tonic-gate 	if (rv != CKR_OK)
1127c478bd9Sstevel@tonic-gate 		return (rv);
1137c478bd9Sstevel@tonic-gate 
1147c478bd9Sstevel@tonic-gate 	if (pPart == NULL) {
115*d3a28a55Sdinak 		meta_operation_cleanup(session, CKF_SIGN, FALSE);
1167c478bd9Sstevel@tonic-gate 		REFRELEASE(session);
1177c478bd9Sstevel@tonic-gate 		return (CKR_ARGUMENTS_BAD);
1187c478bd9Sstevel@tonic-gate 	}
1197c478bd9Sstevel@tonic-gate 
120*d3a28a55Sdinak 	rv = meta_do_operation(CKF_SIGN, MODE_UPDATE, session, NULL,
1217c478bd9Sstevel@tonic-gate 	    pPart, ulPartLen, NULL, NULL);
1227c478bd9Sstevel@tonic-gate 
1237c478bd9Sstevel@tonic-gate 	REFRELEASE(session);
1247c478bd9Sstevel@tonic-gate 
1257c478bd9Sstevel@tonic-gate 	return (rv);
1267c478bd9Sstevel@tonic-gate }
1277c478bd9Sstevel@tonic-gate 
1287c478bd9Sstevel@tonic-gate 
1297c478bd9Sstevel@tonic-gate /*
1307c478bd9Sstevel@tonic-gate  * meta_SignFinal
1317c478bd9Sstevel@tonic-gate  *
1327c478bd9Sstevel@tonic-gate  */
1337c478bd9Sstevel@tonic-gate CK_RV
meta_SignFinal(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pSignature,CK_ULONG_PTR pulSignatureLen)1347c478bd9Sstevel@tonic-gate meta_SignFinal(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSignature,
1357c478bd9Sstevel@tonic-gate     CK_ULONG_PTR pulSignatureLen)
1367c478bd9Sstevel@tonic-gate {
1377c478bd9Sstevel@tonic-gate 	CK_RV rv;
1387c478bd9Sstevel@tonic-gate 	meta_session_t *session;
1397c478bd9Sstevel@tonic-gate 
1407c478bd9Sstevel@tonic-gate 	rv = meta_handle2session(hSession, &session);
1417c478bd9Sstevel@tonic-gate 	if (rv != CKR_OK)
1427c478bd9Sstevel@tonic-gate 		return (rv);
1437c478bd9Sstevel@tonic-gate 
1447c478bd9Sstevel@tonic-gate 	if (pulSignatureLen == NULL) {
145*d3a28a55Sdinak 		meta_operation_cleanup(session, CKF_SIGN, FALSE);
1467c478bd9Sstevel@tonic-gate 		REFRELEASE(session);
1477c478bd9Sstevel@tonic-gate 		return (CKR_ARGUMENTS_BAD);
1487c478bd9Sstevel@tonic-gate 	}
1497c478bd9Sstevel@tonic-gate 
150*d3a28a55Sdinak 	rv = meta_do_operation(CKF_SIGN, MODE_FINAL, session, NULL,
1517c478bd9Sstevel@tonic-gate 	    NULL, 0, pSignature, pulSignatureLen);
1527c478bd9Sstevel@tonic-gate 
1537c478bd9Sstevel@tonic-gate 	REFRELEASE(session);
1547c478bd9Sstevel@tonic-gate 
1557c478bd9Sstevel@tonic-gate 	return (rv);
1567c478bd9Sstevel@tonic-gate }
1577c478bd9Sstevel@tonic-gate 
1587c478bd9Sstevel@tonic-gate /*
1597c478bd9Sstevel@tonic-gate  * meta_SignRecoverInit
1607c478bd9Sstevel@tonic-gate  *
1617c478bd9Sstevel@tonic-gate  */
1627c478bd9Sstevel@tonic-gate CK_RV
meta_SignRecoverInit(CK_SESSION_HANDLE hSession,CK_MECHANISM_PTR pMechanism,CK_OBJECT_HANDLE hKey)1637c478bd9Sstevel@tonic-gate meta_SignRecoverInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanism,
1647c478bd9Sstevel@tonic-gate     CK_OBJECT_HANDLE hKey)
1657c478bd9Sstevel@tonic-gate {
1667c478bd9Sstevel@tonic-gate 	CK_RV rv;
1677c478bd9Sstevel@tonic-gate 	meta_session_t *session;
1687c478bd9Sstevel@tonic-gate 	meta_object_t *key;
1697c478bd9Sstevel@tonic-gate 
1707c478bd9Sstevel@tonic-gate 	if (pMechanism == NULL)
1717c478bd9Sstevel@tonic-gate 		return (CKR_ARGUMENTS_BAD);
1727c478bd9Sstevel@tonic-gate 
1737c478bd9Sstevel@tonic-gate 	rv = meta_handle2session(hSession, &session);
1747c478bd9Sstevel@tonic-gate 	if (rv != CKR_OK)
1757c478bd9Sstevel@tonic-gate 		return (rv);
1767c478bd9Sstevel@tonic-gate 
1777c478bd9Sstevel@tonic-gate 	rv = meta_handle2object(hKey, &key);
1787c478bd9Sstevel@tonic-gate 	if (rv != CKR_OK) {
1797c478bd9Sstevel@tonic-gate 		REFRELEASE(session);
1807c478bd9Sstevel@tonic-gate 		return (rv);
1817c478bd9Sstevel@tonic-gate 	}
1827c478bd9Sstevel@tonic-gate 
183*d3a28a55Sdinak 	rv = meta_operation_init(CKF_SIGN_RECOVER, session, pMechanism, key);
1847c478bd9Sstevel@tonic-gate 
1857c478bd9Sstevel@tonic-gate 	OBJRELEASE(key);
1867c478bd9Sstevel@tonic-gate 	REFRELEASE(session);
1877c478bd9Sstevel@tonic-gate 
1887c478bd9Sstevel@tonic-gate 	return (rv);
1897c478bd9Sstevel@tonic-gate }
1907c478bd9Sstevel@tonic-gate 
1917c478bd9Sstevel@tonic-gate 
1927c478bd9Sstevel@tonic-gate /*
1937c478bd9Sstevel@tonic-gate  * meta_SignRecover
1947c478bd9Sstevel@tonic-gate  *
1957c478bd9Sstevel@tonic-gate  */
1967c478bd9Sstevel@tonic-gate CK_RV
meta_SignRecover(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pData,CK_ULONG ulDataLen,CK_BYTE_PTR pSignature,CK_ULONG_PTR pulSignatureLen)1977c478bd9Sstevel@tonic-gate meta_SignRecover(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pData,
1987c478bd9Sstevel@tonic-gate     CK_ULONG ulDataLen, CK_BYTE_PTR pSignature, CK_ULONG_PTR pulSignatureLen)
1997c478bd9Sstevel@tonic-gate {
2007c478bd9Sstevel@tonic-gate 	CK_RV rv;
2017c478bd9Sstevel@tonic-gate 	meta_session_t *session;
2027c478bd9Sstevel@tonic-gate 
2037c478bd9Sstevel@tonic-gate 	rv = meta_handle2session(hSession, &session);
2047c478bd9Sstevel@tonic-gate 	if (rv != CKR_OK)
2057c478bd9Sstevel@tonic-gate 		return (rv);
2067c478bd9Sstevel@tonic-gate 
2077c478bd9Sstevel@tonic-gate 	if (pData == NULL || pulSignatureLen == NULL) {
208*d3a28a55Sdinak 		meta_operation_cleanup(session, CKF_SIGN_RECOVER, FALSE);
2097c478bd9Sstevel@tonic-gate 		REFRELEASE(session);
2107c478bd9Sstevel@tonic-gate 		return (CKR_ARGUMENTS_BAD);
2117c478bd9Sstevel@tonic-gate 	}
2127c478bd9Sstevel@tonic-gate 
213*d3a28a55Sdinak 	rv = meta_do_operation(CKF_SIGN_RECOVER, MODE_SINGLE, session, NULL,
2147c478bd9Sstevel@tonic-gate 	    pData, ulDataLen, pSignature, pulSignatureLen);
2157c478bd9Sstevel@tonic-gate 
2167c478bd9Sstevel@tonic-gate 	REFRELEASE(session);
2177c478bd9Sstevel@tonic-gate 
2187c478bd9Sstevel@tonic-gate 	return (rv);
2197c478bd9Sstevel@tonic-gate }
220