#ifndef DST_H #define DST_H #ifndef HAS_DST_KEY #define DST_KEY RES_9_DST_KEY typedef struct dst_key { char *dk_key_name; /* name of the key */ int dk_key_size; /* this is the size of the key in bits */ int dk_proto; /* what protocols this key can be used for */ int dk_alg; /* algorithm number from key record */ u_int32_t dk_flags; /* and the flags of the public key */ u_int16_t dk_id; /* identifier of the key */ } DST_KEY; #endif /* HAS_DST_KEY */ /* * DST Crypto API defintions */ #define dst_init res_9_dst_init void dst_init(void); #ifndef __APPLE__ int dst_check_algorithm(const int); #endif #define dst_sign_data res_9_dst_sign_data int dst_sign_data(const int mode, /* specifies INIT/UPDATE/FINAL/ALL */ DST_KEY *in_key, /* the key to use */ void **context, /* pointer to state structure */ const u_char *data, /* data to be signed */ const int len, /* length of input data */ u_char *signature, /* buffer to write signature to */ const int sig_len); /* size of output buffer */ #define dst_verify_data res_9_dst_verify_data int dst_verify_data(const int mode, /* specifies INIT/UPDATE/FINAL/ALL */ DST_KEY *in_key, /* the key to use */ void **context, /* pointer to state structure */ const u_char *data, /* data to be verified */ const int len, /* length of input data */ const u_char *signature,/* buffer containing signature */ const int sig_len); /* length of signature */ #define dst_read_key res_9_dst_read_key DST_KEY *dst_read_key(const char *in_name, /* name of key */ const u_int16_t in_id, /* key tag identifier */ const int in_alg, /* key algorithm */ const int key_type); /* Private/PublicKey wanted*/ #define dst_write_key res_9_dst_write_key int dst_write_key(const DST_KEY *key, /* key to write out */ const int key_type); /* Public/Private */ #define dst_dnskey_to_key res_9_dst_dnskey_to_key DST_KEY *dst_dnskey_to_key(const char *in_name, /* KEY record name */ const u_char *key, /* KEY RDATA */ const int len); /* size of input buffer*/ #ifndef __APPLE__ int dst_key_to_dnskey(const DST_KEY *key, /* key to translate */ u_char *out_storage, /* output buffer */ const int out_len); /* size of out_storage*/ #endif #define dst_buffer_to_key res_9_dst_buffer_to_key DST_KEY *dst_buffer_to_key(const char *key_name, /* name of the key */ const int alg, /* algorithm */ const int flags, /* dns flags */ const int protocol, /* dns protocol */ const u_char *key_buf, /* key in dns wire fmt */ const int key_len); /* size of key */ #define dst_key_to_buffer res_9_dst_key_to_buffer int dst_key_to_buffer(DST_KEY *key, u_char *out_buff, int buf_len); #define dst_generate_key res_9_dst_generate_key DST_KEY *dst_generate_key(const char *name, /* name of new key */ const int alg, /* key algorithm to generate */ const int bits, /* size of new key */ const int exp, /* alg dependent parameter*/ const int flags, /* key DNS flags */ const int protocol); /* key DNS protocol */ #define dst_free_key res_9_dst_free_key DST_KEY *dst_free_key(DST_KEY *f_key); #define dst_compare_keys res_9_dst_compare_keys int dst_compare_keys(const DST_KEY *key1, const DST_KEY *key2); #define dst_sig_size res_9_dst_sig_size int dst_sig_size(DST_KEY *key); /* support for dns key tags/ids */ #define dst_s_dns_key_id res_9_dst_s_dns_key_id u_int16_t dst_s_dns_key_id(const u_char *dns_key_rdata, const int rdata_len); #ifndef __APPLE__ u_int16_t dst_s_id_calc(const u_char *key_data, const int key_len); #endif /* Used by callers as well as by the library. */ #define RAW_KEY_SIZE 8192 /* large enough to store any key */ /* DST_API control flags */ /* These are used used in functions dst_sign_data and dst_verify_data */ #define SIG_MODE_INIT 1 /* initialize digest */ #define SIG_MODE_UPDATE 2 /* add data to digest */ #define SIG_MODE_FINAL 4 /* generate/verify signature */ #define SIG_MODE_ALL (SIG_MODE_INIT|SIG_MODE_UPDATE|SIG_MODE_FINAL) /* Flags for dst_read_private_key() */ #define DST_FORCE_READ 0x1000000 #define DST_CAN_SIGN 0x010F #define DST_NO_AUTHEN 0x8000 #define DST_EXTEND_FLAG 0x1000 #define DST_STANDARD 0 #define DST_PRIVATE 0x2000000 #define DST_PUBLIC 0x4000000 #define DST_RAND_SEMI 1 #define DST_RAND_STD 2 #define DST_RAND_KEY 3 #define DST_RAND_DSS 4 /* DST algorithm codes */ #define KEY_RSA 1 #define KEY_DH 2 #define KEY_DSA 3 #define KEY_PRIVATE 254 #define KEY_EXPAND 255 #define KEY_HMAC_MD5 157 #define KEY_HMAC_SHA1 158 #define UNKNOWN_KEYALG 0 #define DST_MAX_ALGS KEY_HMAC_SHA1 /* DST constants to locations in KEY record changes in new KEY record */ #define DST_FLAGS_SIZE 2 #define DST_KEY_PROT 2 #define DST_KEY_ALG 3 #define DST_EXT_FLAG 4 #define DST_KEY_START 4 #ifndef SIGN_F_NOKEY #define SIGN_F_NOKEY 0xC000 #endif /* error codes from dst routines */ #define SIGN_INIT_FAILURE (-23) #define SIGN_UPDATE_FAILURE (-24) #define SIGN_FINAL_FAILURE (-25) #define VERIFY_INIT_FAILURE (-26) #define VERIFY_UPDATE_FAILURE (-27) #define VERIFY_FINAL_FAILURE (-28) #define MISSING_KEY_OR_SIGNATURE (-30) #define UNSUPPORTED_KEYALG (-31) #endif /* DST_H */