16#ifndef CRYPT_CODECSKEY_LOCAL_H
17#define CRYPT_CODECSKEY_LOCAL_H
19#include "hitls_build.h"
20#ifdef HITLS_CRYPTO_CODECSKEY
24#include "crypt_types.h"
25#include "crypt_eal_pkey.h"
27#ifdef HITLS_CRYPTO_RSA
30#ifdef HITLS_CRYPTO_SM2
33#if defined(HITLS_CRYPTO_ED25519) || defined(HITLS_CRYPTO_X25519)
34#include "crypt_curve25519.h"
36#ifdef HITLS_CRYPTO_MLDSA
37#include "crypt_mldsa.h"
38#define MLDSA_SEED_BYTES_LEN 32
40#ifdef HITLS_CRYPTO_MLKEM
41#include "crypt_mlkem.h"
42#define MLKEM_SEED_BYTES_LEN 64
44#ifdef HITLS_CRYPTO_SLH_DSA
45#include "crypt_slh_dsa.h"
47#ifdef HITLS_CRYPTO_XMSS
48#include "crypt_xmss.h"
62 CRYPT_RSA_PUB_N_IDX = 0,
63 CRYPT_RSA_PUB_E_IDX = 1,
64} CRYPT_RSA_PUB_TEMPL_IDX;
67 BSL_ASN1_TAG_ALGOID_IDX = 0,
68 BSL_ASN1_TAG_ALGOID_ANY_IDX = 1,
72 CRYPT_SUBKEYINFO_ALGOID_IDX = 0,
73 CRYPT_SUBKEYINFO_BITSTRING_IDX = 1,
74} CRYPT_SUBKEYINFO_TEMPL_IDX;
77 CRYPT_PKCS_ENCPRIKEY_ENCALG_IDX,
78 CRYPT_PKCS_ENCPRIKEY_DERPARAM_IDX,
79 CRYPT_PKCS_ENCPRIKEY_SYMALG_IDX,
80 CRYPT_PKCS_ENCPRIKEY_SYMIV_IDX,
81 CRYPT_PKCS_ENCPRIKEY_ENCDATA_IDX,
82 CRYPT_PKCS_ENCPRIKEY_MAX
83} CRYPT_PKCS_ENCPRIKEY_TEMPL_IDX;
86 CRYPT_ECPRIKEY_VERSION_IDX = 0,
87 CRYPT_ECPRIKEY_PRIKEY_IDX = 1,
88 CRYPT_ECPRIKEY_PARAM_IDX = 2,
89 CRYPT_ECPRIKEY_PUBKEY_IDX = 3,
90} CRYPT_ECPRIKEY_TEMPL_IDX;
93 CRYPT_ML_DSA_PRVKEY_SEED_IDX = 0,
94 CRYPT_ML_DSA_PRVKEY_IDX = 1,
95} CRYPT_ML_DSA_PRV_TEMPL_IDX;
98 CRYPT_SLH_DSA_PRVKEY_RAW_IDX = 0,
99} CRYPT_SLH_DSA_PRV_TEMPL_IDX;
102 CRYPT_ML_KEM_PRVKEY_SEED_IDX = 0,
103 CRYPT_ML_KEM_PRVKEY_IDX = 1,
104} CRYPT_ML_KEM_PRV_TEMPL_IDX;
107 CRYPT_RSA_PRV_VERSION_IDX = 0,
108 CRYPT_RSA_PRV_N_IDX = 1,
109 CRYPT_RSA_PRV_E_IDX = 2,
110 CRYPT_RSA_PRV_D_IDX = 3,
111 CRYPT_RSA_PRV_P_IDX = 4,
112 CRYPT_RSA_PRV_Q_IDX = 5,
113 CRYPT_RSA_PRV_DP_IDX = 6,
114 CRYPT_RSA_PRV_DQ_IDX = 7,
115 CRYPT_RSA_PRV_QINV_IDX = 8,
116 CRYPT_RSA_PRV_OTHER_PRIME_IDX = 9
117} CRYPT_RSA_PRV_TEMPL_IDX;
120 CRYPT_DSA_PRV_P_IDX = 0,
121 CRYPT_DSA_PRV_Q_IDX = 1,
122 CRYPT_DSA_PRV_G_IDX = 2,
123} CRYPT_DSA_KEYPARAM_TEMPL_IDX;
126 CRYPT_DH_PRV_P_IDX = 0,
127 CRYPT_DH_PRV_G_IDX = 1,
128 CRYPT_DH_PRV_Q_IDX = 2,
129} CRYPT_DH_KEYPARAM_TEMPL_IDX;
131#define CRYPT_ASN1_CTX_SPECIFIC_TAG_RSAPSS_HASH 0
132#define CRYPT_ASN1_CTX_SPECIFIC_TAG_RSAPSS_MASKGEN 1
133#define CRYPT_ASN1_CTX_SPECIFIC_TAG_RSAPSS_SALTLEN 2
134#define CRYPT_ASN1_CTX_SPECIFIC_TAG_RSAPSS_TRAILED 3
136#define PATH_MAX_LEN 4096
137#define PWD_MAX_LEN 4096
139#ifdef HITLS_CRYPTO_KEY_DECODE
141#ifdef HITLS_CRYPTO_RSA
142int32_t ParseRsaPubkeyAsn1Buff(CRYPT_EAL_LibCtx *libctx,
const char *attrName, uint8_t *buff, uint32_t buffLen,
145int32_t ParseRsaPrikeyAsn1Buff(CRYPT_EAL_LibCtx *libctx,
const char *attrName, uint8_t *buff, uint32_t buffLen,
149#if defined(HITLS_CRYPTO_ECDSA) || defined(HITLS_CRYPTO_SM2)
150int32_t ParseEccPrikeyAsn1Buff(CRYPT_EAL_LibCtx *libctx,
const char *attrName, uint8_t *buff, uint32_t buffLen,
154int32_t ParsePk8PriKeyBuff(CRYPT_EAL_LibCtx *libctx,
const char *attrName,
BSL_Buffer *buff,
157#ifdef HITLS_CRYPTO_KEY_EPKI
158int32_t ParsePk8EncPriKeyBuff(CRYPT_EAL_LibCtx *libctx,
const char *attrName,
BSL_Buffer *buff,
const BSL_Buffer *pwd,
161int32_t CRYPT_DECODE_Pkcs8PrvDecrypt(CRYPT_EAL_LibCtx *libctx,
const char *attrName,
BSL_Buffer *buff,
164int32_t CRYPT_DECODE_ParseEncDataAsn1(CRYPT_EAL_LibCtx *libctx,
const char *attrName,
BslCid symAlg,
165 EncryptPara *encPara,
const BSL_Buffer *pwd, BSL_ASN1_DecTemplCallBack keyInfoCb,
BSL_Buffer *decode);
169int32_t CRYPT_EAL_ParseAsn1SubPubkey(CRYPT_EAL_LibCtx *libctx,
const char *attrName, uint8_t *buff, uint32_t buffLen,
170 void **ealPubKey,
bool isComplete);
172int32_t CRYPT_DECODE_AlgoIdAsn1Buff(uint8_t *buff, uint32_t buffLen, BSL_ASN1_DecTemplCallBack keyInfoCb,
173 BSL_ASN1_Buffer *algoId, uint32_t algoIdNum);
175int32_t CRYPT_DECODE_ConstructBufferOutParam(
const BSL_Param *inParam, BSL_Param **outParam, uint8_t *buffer,
178int32_t CRYPT_DECODE_ParseSubKeyInfo(uint8_t *buff, uint32_t buffLen, BSL_ASN1_Buffer *pubAsn1,
bool isComplete);
180int32_t CRYPT_DECODE_PrikeyAsn1Buff(uint8_t *buffer, uint32_t bufferLen, BSL_ASN1_Buffer *asn1, uint32_t arrNum);
182#ifdef HITLS_CRYPTO_RSA
183int32_t CRYPT_DECODE_RsaPubkeyAsn1Buff(uint8_t *buff, uint32_t buffLen, BSL_ASN1_Buffer *pubAsn1, uint32_t arrNum);
185int32_t CRYPT_DECODE_RsaPrikeyAsn1Buff(uint8_t *buff, uint32_t buffLen, BSL_ASN1_Buffer *asn1, uint32_t asn1Num);
188#if defined(HITLS_CRYPTO_DSA) || defined(HITLS_CRYPTO_DH)
189int32_t CRYPT_DECODE_DsaKeyParamAsn1Buff(uint8_t *buff, uint32_t buffLen, BSL_ASN1_Buffer *asn1, uint32_t arrNum);
191int32_t CRYPT_ENCODE_DsaKeyParamAsn1Buff(BSL_ASN1_Buffer *asn1, uint32_t asn1Num,
BSL_Buffer *encode);
194#ifdef HITLS_CRYPTO_MLDSA
195int32_t CRYPT_MLDSA_ParseSubPubkeyAsn1Buff(
void *libCtx, uint8_t *buff, uint32_t buffLen,
196 CRYPT_ML_DSA_Ctx **pubKey,
bool isComplete);
197int32_t CRYPT_DECODE_MldsaPrikeyAsn1Buff(uint8_t *buffer, uint32_t bufferLen, BSL_ASN1_Buffer *asn1, uint32_t arrNum);
198int32_t CRYPT_MLDSA_ParsePkcs8key(
void *libCtx, uint8_t *buffer, uint32_t bufferLen,
199 CRYPT_ML_DSA_Ctx **mldsaPriKey);
202#ifdef HITLS_CRYPTO_SLH_DSA
203int32_t CRYPT_SLHDSA_ParseSubPubkeyAsn1Buff(
void *libCtx, uint8_t *buff, uint32_t buffLen,
204 CryptSlhDsaCtx **pubKey,
bool isComplete);
205int32_t CRYPT_DECODE_SlhDsaPrikeyAsn1Buff(uint8_t *buffer, uint32_t bufferLen, BSL_ASN1_Buffer *asn1, uint32_t arrNum);
206int32_t CRYPT_SLHDSA_ParsePkcs8key(
void *libCtx, uint8_t *buffer, uint32_t bufferLen,
207 CryptSlhDsaCtx **slhDsaPriKey);
210#ifdef HITLS_CRYPTO_MLKEM
211int32_t CRYPT_MLKEM_ParseSubPubkeyAsn1Buff(
void *libCtx, uint8_t *buff, uint32_t buffLen,
212 CRYPT_ML_KEM_Ctx **pubKey,
bool isComplete);
213int32_t CRYPT_DECODE_MlkemPrikeyAsn1Buff(uint8_t *buffer, uint32_t bufferLen, BSL_ASN1_Buffer *asn1, uint32_t arrNum);
214int32_t CRYPT_MLKEM_ParsePkcs8key(
void *libCtx, uint8_t *buffer, uint32_t bufferLen,
215 CRYPT_ML_KEM_Ctx **mlkemPriKey);
217#ifdef HITLS_CRYPTO_X25519
218int32_t CRYPT_X25519_ParsePkcs8Key(
void *libCtx, uint8_t *buffer, uint32_t bufferLen,
219 CRYPT_CURVE25519_Ctx **x25519PriKey);
220int32_t CRYPT_X25519_ParseSubPubkeyAsn1Buff(
void *libCtx, uint8_t *buff, uint32_t buffLen,
221 CRYPT_CURVE25519_Ctx **pubKey,
bool isComplete);
225#ifdef HITLS_CRYPTO_XMSS
226int32_t CRYPT_XMSS_ParseSubPubkeyAsn1Buff(
void *libCtx, uint8_t *buff, uint32_t buffLen, CryptXmssCtx **pubKey,
230#ifdef HITLS_CRYPTO_KEY_ENCODE
231#ifdef HITLS_CRYPTO_RSA
237#if defined(HITLS_CRYPTO_ECDSA) || defined(HITLS_CRYPTO_SM2)
239int32_t CRYPT_ENCODE_EccPrikeyAsn1Buff(BSL_ASN1_Buffer *asn1, uint32_t asn1Num,
BSL_Buffer *encode);
244int32_t CRYPT_ENCODE_SubPubkeyByInfo(BSL_ASN1_Buffer *algo,
BSL_Buffer *bitStr,
BSL_Buffer *encodeH,
247int32_t CRYPT_ENCODE_AlgoIdAsn1Buff(BSL_ASN1_Buffer *algoId, uint32_t algoIdNum, uint8_t **buff,
250int32_t CRYPT_ENCODE_PkcsEncryptedBuff(CRYPT_EAL_LibCtx *libCtx,
const char *attrName,
CRYPT_Pbkdf2Param *pkcsParam,
251 BSL_Buffer *unEncrypted, BSL_ASN1_Buffer *asn1);
253#ifdef HITLS_CRYPTO_KEY_EPKI
254int32_t EncodePk8EncPriKeyBuff(CRYPT_EAL_LibCtx *libCtx,
const char *attrName,
CRYPT_EAL_PkeyCtx *ealPriKey,
260#ifdef HITLS_CRYPTO_RSA
261int32_t CRYPT_ENCODE_RsaPrikeyAsn1Buff(BSL_ASN1_Buffer *asn1, uint32_t asn1Num,
BSL_Buffer *encode);
263int32_t CRYPT_ENCODE_RsaPubkeyAsn1Buff(BSL_ASN1_Buffer *pubAsn1,
BSL_Buffer *encodePub);
267#if defined(HITLS_CRYPTO_ECDSA) || defined(HITLS_CRYPTO_SM2)
268static inline bool IsEcdsaEcParaId(int32_t paraId)
270 return paraId == CRYPT_ECC_NISTP192 || paraId == CRYPT_ECC_NISTP224 || paraId == CRYPT_ECC_NISTP256 ||
271 paraId == CRYPT_ECC_NISTP384 || paraId == CRYPT_ECC_NISTP521 ||
272 paraId == CRYPT_ECC_BRAINPOOLP256R1 || paraId == CRYPT_ECC_BRAINPOOLP384R1 ||
273 paraId == CRYPT_ECC_BRAINPOOLP512R1;
277#if defined(HITLS_CRYPTO_RSA) && (defined(HITLS_CRYPTO_KEY_INFO) || defined(HITLS_CRYPTO_KEY_ENCODE))
281#if defined(HITLS_CRYPTO_ECDSA) || defined(HITLS_CRYPTO_SM2) || \
282 defined(HITLS_CRYPTO_ED25519) || defined(HITLS_CRYPTO_X25519)
struct EAL_PkeyCtx CRYPT_EAL_PkeyCtx
定义 crypt_eal_pkey.h:108