corePKCS11 v3.2.0
PKCS #11 Cryptoki Library
core_pkcs11.h
Go to the documentation of this file.
1/*
2 * corePKCS11 v3.2.0
3 * Copyright (C) 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
4 *
5 * Permission is hereby granted, free of charge, to any person obtaining a copy of
6 * this software and associated documentation files (the "Software"), to deal in
7 * the Software without restriction, including without limitation the rights to
8 * use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
9 * the Software, and to permit persons to whom the Software is furnished to do so,
10 * subject to the following conditions:
11 *
12 * The above copyright notice and this permission notice shall be included in all
13 * copies or substantial portions of the Software.
14 *
15 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
17 * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
18 * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
19 * IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
20 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
21 */
22
23#ifndef _CORE_PKCS11_H_
24#define _CORE_PKCS11_H_
25
26#include <stdint.h>
27
28/* *INDENT-OFF* */
29#ifdef __cplusplus
30 extern "C" {
31#endif
32/* *INDENT-ON* */
33
34#ifdef _WIN32
35 #pragma pack(push, cryptoki, 1)
36#endif
37
53#define CK_PTR *
54
59#ifndef NULL_PTR
60 #define NULL_PTR 0
61#endif
62
68#define CK_DEFINE_FUNCTION( returnType, name ) returnType name
69
75#define CK_DECLARE_FUNCTION( returnType, name ) returnType name
76
82#define CK_DECLARE_FUNCTION_POINTER( returnType, name ) returnType( CK_PTR name )
83
89#define CK_CALLBACK_FUNCTION( returnType, name ) returnType( CK_PTR name )
90
95#define pkcs11SHA256_DIGEST_LENGTH 32UL
96
101#define pkcs11AES_CMAC_SIGNATURE_LENGTH 16UL
102
109#define pkcs11ECDSA_P256_SIGNATURE_LENGTH 64UL
110
115#define pkcs11ECDSA_P256_KEY_BITS 256UL
116
121#define pkcs11RSA_PUBLIC_EXPONENT { 0x01, 0x00, 0x01 }
122
128#define pkcs11RSA_2048_MODULUS_BITS 2048UL
129
134#define pkcs11RSA_2048_SIGNATURE_LENGTH ( pkcs11RSA_2048_MODULUS_BITS / 8UL )
135
143#define pkcs11RSA_SIGNATURE_INPUT_LENGTH 51UL
144
150#define pkcs11ELLIPTIC_CURVE_NISTP256 "1.2.840.10045.3.1.7"
151
156#define pkcs11MAX_LABEL_LENGTH 32UL /* 31 characters + 1 null terminator. */
157
162#define pkcs11DER_ENCODED_OID_P256 { 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07 }
163
164
170#ifndef pkcs11configIMPORT_PRIVATE_KEYS_SUPPORTED
171 #define pkcs11configIMPORT_PRIVATE_KEYS_SUPPORTED 1
172#endif
173
194#define pkcs11STUFF_APPENDED_TO_RSA_SIG { 0x30, 0x31, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01, 0x05, 0x00, 0x04, 0x20 }
195
196/* Bring in the public header. */
197
198/* Undefine the macro for Keil Compiler to avoid conflict */
199#if defined( __PASTE ) && defined( __CC_ARM )
200 /* ARM RCVT stdint.h has a duplicate definition with PKCS #11. */
201 #undef __PASTE
202#endif
203
204#ifdef CreateMutex
205 #undef CreateMutex /* This is a workaround because CreateMutex is redefined to CreateMutexW in synchapi.h in windows. :/ */
206#endif
207
208#include "pkcs11.h"
209
215typedef struct PKCS11_CertificateTemplate
216{
217 CK_ATTRIBUTE xObjectClass;
218 CK_ATTRIBUTE xSubject;
219 CK_ATTRIBUTE xCertificateType;
220 CK_ATTRIBUTE xValue;
221 CK_ATTRIBUTE xLabel;
222 CK_ATTRIBUTE xTokenObject;
224
225/*------------------------ PKCS #11 wrapper functions -------------------------*/
226
232/* @[declare_pkcs11_core_xinitializepkcs11] */
233CK_RV xInitializePKCS11( void );
234/* @[declare_pkcs11_core_xinitializepkcs11] */
235
250/* @[declare_pkcs11_core_xgetslotlist] */
251CK_RV xGetSlotList( CK_SLOT_ID ** ppxSlotId,
252 CK_ULONG * pxSlotCount );
253/* @[declare_pkcs11_core_xgetslotlist] */
254
264/* @[declare_pkcs11_core_xinitializepkcs11session] */
265CK_RV xInitializePkcs11Session( CK_SESSION_HANDLE * pxSession );
266/* @[declare_pkcs11_core_xinitializepkcs11session] */
267
274/* @[declare_pkcs11_core_xinitializepkcs11token] */
275CK_RV xInitializePkcs11Token( void );
276/* @[declare_pkcs11_core_xinitializepkcs11token] */
277
295/* @[declare_pkcs11_core_xfindobjectwithlabelandclass] */
296CK_RV xFindObjectWithLabelAndClass( CK_SESSION_HANDLE xSession,
297 char * pcLabelName,
298 CK_ULONG ulLabelNameLen,
299 CK_OBJECT_CLASS xClass,
300 CK_OBJECT_HANDLE_PTR pxHandle );
301/* @[declare_pkcs11_core_xfindobjectwithlabelandclass] */
302
322/* @[declare_pkcs11_core_vappendsha256algorithmidentifiersequence] */
323CK_RV vAppendSHA256AlgorithmIdentifierSequence( const uint8_t * puc32ByteHashedMessage,
324 uint8_t * puc51ByteHashOidBuffer );
325/* @[declare_pkcs11_core_vappendsha256algorithmidentifiersequence] */
326
327#ifdef _WIN32
328 #pragma pack(pop, cryptoki)
329#endif
330
331/* *INDENT-OFF* */
332#ifdef __cplusplus
333 }
334#endif
335/* *INDENT-ON* */
336
337#endif /* ifndef _CORE_PKCS11_H_ */
CK_RV vAppendSHA256AlgorithmIdentifierSequence(const uint8_t *puc32ByteHashedMessage, uint8_t *puc51ByteHashOidBuffer)
Appends digest algorithm sequence to SHA-256 hash for RSA signatures.
Definition: core_pkcs11.c:374
CK_RV xGetSlotList(CK_SLOT_ID **ppxSlotId, CK_ULONG *pxSlotCount)
Get a list of available PKCS #11 slots.
Definition: core_pkcs11.c:70
CK_RV xInitializePkcs11Session(CK_SESSION_HANDLE *pxSession)
Initializes the PKCS #11 module and opens a session.
Definition: core_pkcs11.c:253
CK_RV xFindObjectWithLabelAndClass(CK_SESSION_HANDLE xSession, char *pcLabelName, CK_ULONG ulLabelNameLen, CK_OBJECT_CLASS xClass, CK_OBJECT_HANDLE_PTR pxHandle)
Searches for an object with a matching label and class provided.
Definition: core_pkcs11.c:309
CK_RV xInitializePkcs11Token(void)
Initializes a PKCS #11 module and token.
Definition: core_pkcs11.c:176
CK_RV xInitializePKCS11(void)
Initializes a PKCS #11 session.
Definition: core_pkcs11.c:150
Certificate Template The object class must be the first attribute in the array.
Definition: core_pkcs11.h:216
CK_ATTRIBUTE xValue
CKA_VALUE, the DER byte array of the certificate contents.
Definition: core_pkcs11.h:220
CK_ATTRIBUTE xSubject
CKA_SUBJECT, this parameter is required by the PKCS #11 standard.
Definition: core_pkcs11.h:218
CK_ATTRIBUTE xCertificateType
CKA_CERTIFICATE_TYPE, set to CKC_X_509.
Definition: core_pkcs11.h:219
CK_ATTRIBUTE xTokenObject
CKA_TOKEN.
Definition: core_pkcs11.h:222
CK_ATTRIBUTE xObjectClass
CKA_CLASS, set to CKO_CERTIFICATE.
Definition: core_pkcs11.h:217
CK_ATTRIBUTE xLabel
CKA_LABEL.
Definition: core_pkcs11.h:221