131 lines
3.8 KiB
C
131 lines
3.8 KiB
C
/*
|
|
* keyraw.h -- raw key and signature access and conversion
|
|
*
|
|
* Copyright (c) 2005-2008, NLnet Labs. All rights reserved.
|
|
*
|
|
* See LICENSE for the license.
|
|
*
|
|
*/
|
|
|
|
/**
|
|
* \file
|
|
*
|
|
* raw key and signature access and conversion
|
|
*
|
|
* Since those functions heavily rely op cryptographic operations,
|
|
* this module is dependent on openssl.
|
|
*
|
|
*/
|
|
|
|
#ifndef LDNS_KEYRAW_H
|
|
#define LDNS_KEYRAW_H
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
#if LDNS_BUILD_CONFIG_HAVE_SSL
|
|
# include <openssl/ssl.h>
|
|
# include <openssl/evp.h>
|
|
#endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
|
|
|
|
/**
|
|
* get the length of the keydata in bits
|
|
* \param[in] keydata the raw key data
|
|
* \param[in] len the length of the keydata
|
|
* \param[in] alg the cryptographic algorithm this is a key for
|
|
* \return the keysize in bits, or 0 on error
|
|
*/
|
|
size_t sldns_rr_dnskey_key_size_raw(const unsigned char *keydata,
|
|
const size_t len, int alg);
|
|
|
|
/**
|
|
* Calculates keytag of DNSSEC key, operates on wireformat rdata.
|
|
* \param[in] key the key as uncompressed wireformat rdata.
|
|
* \param[in] keysize length of key data.
|
|
* \return the keytag
|
|
*/
|
|
uint16_t sldns_calc_keytag_raw(uint8_t* key, size_t keysize);
|
|
|
|
#if LDNS_BUILD_CONFIG_HAVE_SSL
|
|
/**
|
|
* Get the PKEY id for GOST, loads GOST into openssl as a side effect.
|
|
* Only available if GOST is compiled into the library and openssl.
|
|
* \return the gost id for EVP_CTX creation.
|
|
*/
|
|
int sldns_key_EVP_load_gost_id(void);
|
|
|
|
/** Release the engine reference held for the GOST engine. */
|
|
void sldns_key_EVP_unload_gost(void);
|
|
|
|
/**
|
|
* Like sldns_key_buf2dsa, but uses raw buffer.
|
|
* \param[in] key the uncompressed wireformat of the key.
|
|
* \param[in] len length of key data
|
|
* \return a DSA * structure with the key material
|
|
*/
|
|
DSA *sldns_key_buf2dsa_raw(unsigned char* key, size_t len);
|
|
|
|
/**
|
|
* Converts a holding buffer with key material to EVP PKEY in openssl.
|
|
* Only available if ldns was compiled with GOST.
|
|
* \param[in] key data to convert
|
|
* \param[in] keylen length of the key data
|
|
* \return the key or NULL on error.
|
|
*/
|
|
EVP_PKEY* sldns_gost2pkey_raw(unsigned char* key, size_t keylen);
|
|
|
|
/**
|
|
* Converts a holding buffer with key material to EVP PKEY in openssl.
|
|
* Only available if ldns was compiled with ECDSA.
|
|
* \param[in] key data to convert
|
|
* \param[in] keylen length of the key data
|
|
* \param[in] algo precise algorithm to initialize ECC group values.
|
|
* \return the key or NULL on error.
|
|
*/
|
|
EVP_PKEY* sldns_ecdsa2pkey_raw(unsigned char* key, size_t keylen, uint8_t algo);
|
|
|
|
/**
|
|
* Like sldns_key_buf2rsa, but uses raw buffer.
|
|
* \param[in] key the uncompressed wireformat of the key.
|
|
* \param[in] len length of key data
|
|
* \return a RSA * structure with the key material
|
|
*/
|
|
RSA *sldns_key_buf2rsa_raw(unsigned char* key, size_t len);
|
|
|
|
/**
|
|
* Converts a holding buffer with key material to EVP PKEY in openssl.
|
|
* Only available if ldns was compiled with ED25519.
|
|
* \param[in] key the uncompressed wireformat of the key.
|
|
* \param[in] len length of key data
|
|
* \return the key or NULL on error.
|
|
*/
|
|
EVP_PKEY* sldns_ed255192pkey_raw(const unsigned char* key, size_t len);
|
|
|
|
/**
|
|
* Converts a holding buffer with key material to EVP PKEY in openssl.
|
|
* Only available if ldns was compiled with ED448.
|
|
* \param[in] key the uncompressed wireformat of the key.
|
|
* \param[in] len length of key data
|
|
* \return the key or NULL on error.
|
|
*/
|
|
EVP_PKEY* sldns_ed4482pkey_raw(const unsigned char* key, size_t len);
|
|
|
|
/**
|
|
* Utility function to calculate hash using generic EVP_MD pointer.
|
|
* \param[in] data the data to hash.
|
|
* \param[in] len length of data.
|
|
* \param[out] dest the destination of the hash, must be large enough.
|
|
* \param[in] md the message digest to use.
|
|
* \return true if worked, false on failure.
|
|
*/
|
|
int sldns_digest_evp(unsigned char* data, unsigned int len,
|
|
unsigned char* dest, const EVP_MD* md);
|
|
|
|
#endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif /* LDNS_KEYRAW_H */
|