17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate * CDDL HEADER START
37c478bd9Sstevel@tonic-gate *
47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5*d3a28a55Sdinak * Common Development and Distribution License (the "License").
6*d3a28a55Sdinak * You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate *
87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate * and limitations under the License.
127c478bd9Sstevel@tonic-gate *
137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate *
197c478bd9Sstevel@tonic-gate * CDDL HEADER END
207c478bd9Sstevel@tonic-gate */
217c478bd9Sstevel@tonic-gate /*
22*d3a28a55Sdinak * Copyright 2007 Sun Microsystems, Inc. All rights reserved.
237c478bd9Sstevel@tonic-gate * Use is subject to license terms.
247c478bd9Sstevel@tonic-gate */
257c478bd9Sstevel@tonic-gate
267c478bd9Sstevel@tonic-gate /*
277c478bd9Sstevel@tonic-gate * Signing and MACing Functions
287c478bd9Sstevel@tonic-gate * (as defined in PKCs#11 spec section 11.11)
297c478bd9Sstevel@tonic-gate */
307c478bd9Sstevel@tonic-gate
317c478bd9Sstevel@tonic-gate #include "metaGlobal.h"
327c478bd9Sstevel@tonic-gate
337c478bd9Sstevel@tonic-gate
347c478bd9Sstevel@tonic-gate /*
357c478bd9Sstevel@tonic-gate * meta_SignInit
367c478bd9Sstevel@tonic-gate *
377c478bd9Sstevel@tonic-gate */
387c478bd9Sstevel@tonic-gate CK_RV
meta_SignInit(CK_SESSION_HANDLE hSession,CK_MECHANISM_PTR pMechanism,CK_OBJECT_HANDLE hKey)397c478bd9Sstevel@tonic-gate meta_SignInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanism,
407c478bd9Sstevel@tonic-gate CK_OBJECT_HANDLE hKey)
417c478bd9Sstevel@tonic-gate {
427c478bd9Sstevel@tonic-gate CK_RV rv;
437c478bd9Sstevel@tonic-gate meta_session_t *session;
447c478bd9Sstevel@tonic-gate meta_object_t *key;
457c478bd9Sstevel@tonic-gate
467c478bd9Sstevel@tonic-gate if (pMechanism == NULL)
477c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
487c478bd9Sstevel@tonic-gate
497c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
507c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
517c478bd9Sstevel@tonic-gate return (rv);
527c478bd9Sstevel@tonic-gate
537c478bd9Sstevel@tonic-gate rv = meta_handle2object(hKey, &key);
547c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
557c478bd9Sstevel@tonic-gate REFRELEASE(session);
567c478bd9Sstevel@tonic-gate return (rv);
577c478bd9Sstevel@tonic-gate }
587c478bd9Sstevel@tonic-gate
59*d3a28a55Sdinak rv = meta_operation_init(CKF_SIGN, session, pMechanism, key);
607c478bd9Sstevel@tonic-gate
617c478bd9Sstevel@tonic-gate OBJRELEASE(key);
627c478bd9Sstevel@tonic-gate REFRELEASE(session);
637c478bd9Sstevel@tonic-gate
647c478bd9Sstevel@tonic-gate return (rv);
657c478bd9Sstevel@tonic-gate }
667c478bd9Sstevel@tonic-gate
677c478bd9Sstevel@tonic-gate
687c478bd9Sstevel@tonic-gate /*
697c478bd9Sstevel@tonic-gate * meta_Sign
707c478bd9Sstevel@tonic-gate *
717c478bd9Sstevel@tonic-gate */
727c478bd9Sstevel@tonic-gate CK_RV
meta_Sign(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pData,CK_ULONG ulDataLen,CK_BYTE_PTR pSignature,CK_ULONG_PTR pulSignatureLen)737c478bd9Sstevel@tonic-gate meta_Sign(CK_SESSION_HANDLE hSession,
747c478bd9Sstevel@tonic-gate CK_BYTE_PTR pData, CK_ULONG ulDataLen,
757c478bd9Sstevel@tonic-gate CK_BYTE_PTR pSignature, CK_ULONG_PTR pulSignatureLen)
767c478bd9Sstevel@tonic-gate {
777c478bd9Sstevel@tonic-gate CK_RV rv;
787c478bd9Sstevel@tonic-gate meta_session_t *session;
797c478bd9Sstevel@tonic-gate
807c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
817c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
827c478bd9Sstevel@tonic-gate return (rv);
837c478bd9Sstevel@tonic-gate
847c478bd9Sstevel@tonic-gate if (pData == NULL || pulSignatureLen == NULL) {
85*d3a28a55Sdinak meta_operation_cleanup(session, CKF_SIGN, FALSE);
867c478bd9Sstevel@tonic-gate REFRELEASE(session);
877c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
887c478bd9Sstevel@tonic-gate }
897c478bd9Sstevel@tonic-gate
90*d3a28a55Sdinak rv = meta_do_operation(CKF_SIGN, MODE_SINGLE, session, NULL,
917c478bd9Sstevel@tonic-gate pData, ulDataLen, pSignature, pulSignatureLen);
927c478bd9Sstevel@tonic-gate
937c478bd9Sstevel@tonic-gate REFRELEASE(session);
947c478bd9Sstevel@tonic-gate
957c478bd9Sstevel@tonic-gate return (rv);
967c478bd9Sstevel@tonic-gate }
977c478bd9Sstevel@tonic-gate
987c478bd9Sstevel@tonic-gate
997c478bd9Sstevel@tonic-gate /*
1007c478bd9Sstevel@tonic-gate * meta_SignUpdate
1017c478bd9Sstevel@tonic-gate *
1027c478bd9Sstevel@tonic-gate */
1037c478bd9Sstevel@tonic-gate CK_RV
meta_SignUpdate(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pPart,CK_ULONG ulPartLen)1047c478bd9Sstevel@tonic-gate meta_SignUpdate(CK_SESSION_HANDLE hSession,
1057c478bd9Sstevel@tonic-gate CK_BYTE_PTR pPart, CK_ULONG ulPartLen)
1067c478bd9Sstevel@tonic-gate {
1077c478bd9Sstevel@tonic-gate CK_RV rv;
1087c478bd9Sstevel@tonic-gate meta_session_t *session;
1097c478bd9Sstevel@tonic-gate
1107c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
1117c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
1127c478bd9Sstevel@tonic-gate return (rv);
1137c478bd9Sstevel@tonic-gate
1147c478bd9Sstevel@tonic-gate if (pPart == NULL) {
115*d3a28a55Sdinak meta_operation_cleanup(session, CKF_SIGN, FALSE);
1167c478bd9Sstevel@tonic-gate REFRELEASE(session);
1177c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
1187c478bd9Sstevel@tonic-gate }
1197c478bd9Sstevel@tonic-gate
120*d3a28a55Sdinak rv = meta_do_operation(CKF_SIGN, MODE_UPDATE, session, NULL,
1217c478bd9Sstevel@tonic-gate pPart, ulPartLen, NULL, NULL);
1227c478bd9Sstevel@tonic-gate
1237c478bd9Sstevel@tonic-gate REFRELEASE(session);
1247c478bd9Sstevel@tonic-gate
1257c478bd9Sstevel@tonic-gate return (rv);
1267c478bd9Sstevel@tonic-gate }
1277c478bd9Sstevel@tonic-gate
1287c478bd9Sstevel@tonic-gate
1297c478bd9Sstevel@tonic-gate /*
1307c478bd9Sstevel@tonic-gate * meta_SignFinal
1317c478bd9Sstevel@tonic-gate *
1327c478bd9Sstevel@tonic-gate */
1337c478bd9Sstevel@tonic-gate CK_RV
meta_SignFinal(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pSignature,CK_ULONG_PTR pulSignatureLen)1347c478bd9Sstevel@tonic-gate meta_SignFinal(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSignature,
1357c478bd9Sstevel@tonic-gate CK_ULONG_PTR pulSignatureLen)
1367c478bd9Sstevel@tonic-gate {
1377c478bd9Sstevel@tonic-gate CK_RV rv;
1387c478bd9Sstevel@tonic-gate meta_session_t *session;
1397c478bd9Sstevel@tonic-gate
1407c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
1417c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
1427c478bd9Sstevel@tonic-gate return (rv);
1437c478bd9Sstevel@tonic-gate
1447c478bd9Sstevel@tonic-gate if (pulSignatureLen == NULL) {
145*d3a28a55Sdinak meta_operation_cleanup(session, CKF_SIGN, FALSE);
1467c478bd9Sstevel@tonic-gate REFRELEASE(session);
1477c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
1487c478bd9Sstevel@tonic-gate }
1497c478bd9Sstevel@tonic-gate
150*d3a28a55Sdinak rv = meta_do_operation(CKF_SIGN, MODE_FINAL, session, NULL,
1517c478bd9Sstevel@tonic-gate NULL, 0, pSignature, pulSignatureLen);
1527c478bd9Sstevel@tonic-gate
1537c478bd9Sstevel@tonic-gate REFRELEASE(session);
1547c478bd9Sstevel@tonic-gate
1557c478bd9Sstevel@tonic-gate return (rv);
1567c478bd9Sstevel@tonic-gate }
1577c478bd9Sstevel@tonic-gate
1587c478bd9Sstevel@tonic-gate /*
1597c478bd9Sstevel@tonic-gate * meta_SignRecoverInit
1607c478bd9Sstevel@tonic-gate *
1617c478bd9Sstevel@tonic-gate */
1627c478bd9Sstevel@tonic-gate CK_RV
meta_SignRecoverInit(CK_SESSION_HANDLE hSession,CK_MECHANISM_PTR pMechanism,CK_OBJECT_HANDLE hKey)1637c478bd9Sstevel@tonic-gate meta_SignRecoverInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanism,
1647c478bd9Sstevel@tonic-gate CK_OBJECT_HANDLE hKey)
1657c478bd9Sstevel@tonic-gate {
1667c478bd9Sstevel@tonic-gate CK_RV rv;
1677c478bd9Sstevel@tonic-gate meta_session_t *session;
1687c478bd9Sstevel@tonic-gate meta_object_t *key;
1697c478bd9Sstevel@tonic-gate
1707c478bd9Sstevel@tonic-gate if (pMechanism == NULL)
1717c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
1727c478bd9Sstevel@tonic-gate
1737c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
1747c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
1757c478bd9Sstevel@tonic-gate return (rv);
1767c478bd9Sstevel@tonic-gate
1777c478bd9Sstevel@tonic-gate rv = meta_handle2object(hKey, &key);
1787c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
1797c478bd9Sstevel@tonic-gate REFRELEASE(session);
1807c478bd9Sstevel@tonic-gate return (rv);
1817c478bd9Sstevel@tonic-gate }
1827c478bd9Sstevel@tonic-gate
183*d3a28a55Sdinak rv = meta_operation_init(CKF_SIGN_RECOVER, session, pMechanism, key);
1847c478bd9Sstevel@tonic-gate
1857c478bd9Sstevel@tonic-gate OBJRELEASE(key);
1867c478bd9Sstevel@tonic-gate REFRELEASE(session);
1877c478bd9Sstevel@tonic-gate
1887c478bd9Sstevel@tonic-gate return (rv);
1897c478bd9Sstevel@tonic-gate }
1907c478bd9Sstevel@tonic-gate
1917c478bd9Sstevel@tonic-gate
1927c478bd9Sstevel@tonic-gate /*
1937c478bd9Sstevel@tonic-gate * meta_SignRecover
1947c478bd9Sstevel@tonic-gate *
1957c478bd9Sstevel@tonic-gate */
1967c478bd9Sstevel@tonic-gate CK_RV
meta_SignRecover(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pData,CK_ULONG ulDataLen,CK_BYTE_PTR pSignature,CK_ULONG_PTR pulSignatureLen)1977c478bd9Sstevel@tonic-gate meta_SignRecover(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pData,
1987c478bd9Sstevel@tonic-gate CK_ULONG ulDataLen, CK_BYTE_PTR pSignature, CK_ULONG_PTR pulSignatureLen)
1997c478bd9Sstevel@tonic-gate {
2007c478bd9Sstevel@tonic-gate CK_RV rv;
2017c478bd9Sstevel@tonic-gate meta_session_t *session;
2027c478bd9Sstevel@tonic-gate
2037c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
2047c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
2057c478bd9Sstevel@tonic-gate return (rv);
2067c478bd9Sstevel@tonic-gate
2077c478bd9Sstevel@tonic-gate if (pData == NULL || pulSignatureLen == NULL) {
208*d3a28a55Sdinak meta_operation_cleanup(session, CKF_SIGN_RECOVER, FALSE);
2097c478bd9Sstevel@tonic-gate REFRELEASE(session);
2107c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
2117c478bd9Sstevel@tonic-gate }
2127c478bd9Sstevel@tonic-gate
213*d3a28a55Sdinak rv = meta_do_operation(CKF_SIGN_RECOVER, MODE_SINGLE, session, NULL,
2147c478bd9Sstevel@tonic-gate pData, ulDataLen, pSignature, pulSignatureLen);
2157c478bd9Sstevel@tonic-gate
2167c478bd9Sstevel@tonic-gate REFRELEASE(session);
2177c478bd9Sstevel@tonic-gate
2187c478bd9Sstevel@tonic-gate return (rv);
2197c478bd9Sstevel@tonic-gate }
220