mbed TLS v2.2.0
pkcs11.h
Go to the documentation of this file.
1 
25 #ifndef MBEDTLS_PKCS11_H
26 #define MBEDTLS_PKCS11_H
27 
28 #if !defined(MBEDTLS_CONFIG_FILE)
29 #include "config.h"
30 #else
31 #include MBEDTLS_CONFIG_FILE
32 #endif
33 
34 #if defined(MBEDTLS_PKCS11_C)
35 
36 #include "x509_crt.h"
37 
38 #include <pkcs11-helper-1.0/pkcs11h-certificate.h>
39 
40 #if ( defined(__ARMCC_VERSION) || defined(_MSC_VER) ) && \
41  !defined(inline) && !defined(__cplusplus)
42 #define inline __inline
43 #endif
44 
45 #ifdef __cplusplus
46 extern "C" {
47 #endif
48 
52 typedef struct {
53  pkcs11h_certificate_t pkcs11h_cert;
54  int len;
55 } mbedtls_pkcs11_context;
56 
61 void mbedtls_pkcs11_init( mbedtls_pkcs11_context *ctx );
62 
71 int mbedtls_pkcs11_x509_cert_bind( mbedtls_x509_crt *cert, pkcs11h_certificate_t pkcs11h_cert );
72 
83 int mbedtls_pkcs11_priv_key_bind( mbedtls_pkcs11_context *priv_key,
84  pkcs11h_certificate_t pkcs11_cert );
85 
92 void mbedtls_pkcs11_priv_key_free( mbedtls_pkcs11_context *priv_key );
93 
111 int mbedtls_pkcs11_decrypt( mbedtls_pkcs11_context *ctx,
112  int mode, size_t *olen,
113  const unsigned char *input,
114  unsigned char *output,
115  size_t output_max_len );
116 
133 int mbedtls_pkcs11_sign( mbedtls_pkcs11_context *ctx,
134  int mode,
135  mbedtls_md_type_t md_alg,
136  unsigned int hashlen,
137  const unsigned char *hash,
138  unsigned char *sig );
139 
143 static inline int mbedtls_ssl_pkcs11_decrypt( void *ctx, int mode, size_t *olen,
144  const unsigned char *input, unsigned char *output,
145  size_t output_max_len )
146 {
147  return mbedtls_pkcs11_decrypt( (mbedtls_pkcs11_context *) ctx, mode, olen, input, output,
148  output_max_len );
149 }
150 
151 static inline int mbedtls_ssl_pkcs11_sign( void *ctx,
152  int (*f_rng)(void *, unsigned char *, size_t), void *p_rng,
153  int mode, mbedtls_md_type_t md_alg, unsigned int hashlen,
154  const unsigned char *hash, unsigned char *sig )
155 {
156  ((void) f_rng);
157  ((void) p_rng);
158  return mbedtls_pkcs11_sign( (mbedtls_pkcs11_context *) ctx, mode, md_alg,
159  hashlen, hash, sig );
160 }
161 
162 static inline size_t mbedtls_ssl_pkcs11_key_len( void *ctx )
163 {
164  return ( (mbedtls_pkcs11_context *) ctx )->len;
165 }
166 
167 #ifdef __cplusplus
168 }
169 #endif
170 
171 #endif /* MBEDTLS_PKCS11_C */
172 
173 #endif /* MBEDTLS_PKCS11_H */
Compatibility names (set of defines)
X.509 certificate parsing and writing.
Container for an X.509 certificate.
Definition: x509_crt.h:52
mbedtls_md_type_t
Definition: md.h:39