1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
|
/* Copyright 2017 IBM Corp.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
* implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#ifndef CCA_STRUCTURES_H
#define CCA_STRUCTURES_H
/* tokenID */
#define PKA_EXTERNAL_TOKEN 0x1E
#define PKA_INTERNAL_TOKEN 0x1F
/* sectionID */
#define RSA_PRIVATE_KEY_1024_EXTERNAL 0x02
#define RSA_PUBLIC_SECTION 0x04
#define RSA_PRIVATE_KEY_2048_CRT_DEP 0x05 /* deprecated */
#define RSA_PRIVATE_KEY_1024_INTERNAL 0x06
#define RSA_PRIVATE_KEY_CRT 0x08
/* keyFormat */
#define RSA_EXTERNAL_UNENCRYPTED 0x40
#define RSA_EXTERNAL_ENCRYPTED 0x42
#define RSA_INTERNAL_ENCRYPTED 0x08
/* tokenType */
#define RSA_TOKEN_EXTERNAL 0x00
#define RSA_TOKEN_INTERNAL_IMPORT_CLEARTEXT 0x21
#define RSA_TOKEN_INTERNAL_IMPORT_CIPHERTEXT 0x22
#define RSA_TOKEN_INTERNAL_GEN_REGEN 0x23
#define RSA_TOKEN_INTERNAL_GEN_RANDOM 0x24
/* keyUsageFlag */
#define SIG_ONLY 0x00
#define KM_ONLY 0xc0
#define KEY_MGMT 0x80
/* Application hard coded sizes
*/
#define E_SIZE 4 /* bytes, exponent maximum, typically 010001 */
#define N_SIZE 256 /* bytes, public modulus for 2048 bit key */
#define N_SIZE_MAX 512 /* bytes, public modulus for 4096 bit key */
#define N_BIT_SIZE 2048 /* bits, public modulus for 2048 bit key */
#define N_BIT_SIZE_MAX 4096 /* bits, public modulus for 4096 bit key */
#define SHA1_SIZE 20
#define SHA256_SIZE 32
#define SHA512_SIZE 64
/* PKA96 RSA token header */
typedef struct tdRsaKeyTokenHeader
{
unsigned char tokenId;
unsigned char version;
unsigned short tokenLength;
unsigned long reserved;
} RsaKeyTokenHeader;
typedef struct tdRsaKeyTokenPublic {
unsigned char sectionId;
unsigned char version;
unsigned short sectionLength; /* Length of the RSA public key section */
unsigned char reserved[2];
unsigned short eLength;
unsigned short nBitLength;
unsigned short nByteLength; /* Prime divisor length in bytes */
unsigned char e[E_SIZE];
unsigned char n[N_SIZE_MAX];
} RsaKeyTokenPublic ;
typedef struct tdRsaKeyTokenPrivate {
unsigned char sectionId;
unsigned char version;
unsigned short sectionLength;
unsigned char sha1HashPrivKey[SHA1_SIZE];
unsigned long reserved0;
unsigned char keyFormat;
unsigned char tokenType;
unsigned char sha1HashOptional[SHA1_SIZE];
unsigned char keyUsageFlag;
unsigned char reserved1[3];
unsigned short pLength;
unsigned short qLength;
unsigned short dpLength;
unsigned short dqLength;
unsigned short uLength;
unsigned short nLength;
unsigned short reserved2;
unsigned short reserved3;
unsigned short padLength;
unsigned long reserved4;
unsigned char reserved5[16];
unsigned char reserved6[32];
unsigned char confounder[8];
/* p */
/* q */
/* dp */
/* dq */
/* u */
/* pad */
/* n */
} RsaKeyTokenPrivate;
long getPKA96PublicKey(RsaKeyTokenPublic *rsaKeyTokenPublic,
long keyTokenLength,
unsigned char *keyToken,
unsigned int bitSize);
long parsePKA96KeyTokenHeader(RsaKeyTokenHeader *rsaKeyTokenHeader,
long *keyTokenLength,
unsigned char **keyToken);
long parsePKA96KeyTokenPublicKey(RsaKeyTokenPublic *rsaKeyTokenPublic,
long *pubKeyTokenLength,
unsigned char **pubKeyToken,
int hasPrivKey);
long parsePKA96KeyTokenPrivateKey(RsaKeyTokenPublic *rsaKeyTokenPublic,
RsaKeyTokenPrivate *rsaKeyTokenPrivate,
long *keyTokenLength,
unsigned char **keyToken,
unsigned int bitSize);
/*
Debug Print Functions
*/
void printPKA96KeyTokenHeader(RsaKeyTokenHeader *rsaKeyTokenHeader);
void printPKA96KeyTokenPublicKey(RsaKeyTokenPublic *rsaKeyTokenPublic);
void printPKA96KeyTokenPrivateKey(RsaKeyTokenPrivate *rsaKeyTokenPrivate);
void printSectionID(unsigned char sectionId);
void printKeyFormat(unsigned char keyFormat);
void printTokenType (unsigned char tokenType);
void printKeyUsageFlag(unsigned char keyUsageFlag);
#endif
|
