#ifndef __ICA_OPENSSL_API_H__ #define __ICA_OPENSSL_API_H__ /** ** abstract data types for API **/ #define ICA_ADAPTER_HANDLE int #if defined(linux) || defined (_AIX) #define ICA_CALL #endif #if defined(WIN32) || defined(_WIN32) #define ICA_CALL __stdcall #endif /*------------------------------------------------* | RSA defines and typedefs | *------------------------------------------------*/ /* * All data elements of the RSA key are in big-endian format * Modulus-Exponent form of key * */ #define MAX_EXP_SIZE 256 #define MAX_MODULUS_SIZE 256 #define MAX_MODEXP_SIZE (MAX_EXP_SIZE + MAX_MODULUS_SIZE) #define MAX_OPERAND_SIZE MAX_EXP_SIZE typedef unsigned char ICA_KEY_RSA_MODEXPO_REC[MAX_MODEXP_SIZE]; /* * All data elements of the RSA key are in big-endian format * Chinese Remainder Thereom(CRT) form of key * Used only for Decrypt, the encrypt form is typically Modulus-Exponent * */ #define MAX_BP_SIZE 136 #define MAX_BQ_SIZE 128 #define MAX_NP_SIZE 136 #define MAX_NQ_SIZE 128 #define MAX_QINV_SIZE 136 #define MAX_RSACRT_SIZE (MAX_BP_SIZE+MAX_BQ_SIZE+MAX_NP_SIZE+MAX_NQ_SIZE+MAX_QINV_SIZE) #define RSA_GEN_OPERAND_MAX 256 /* bytes */ typedef unsigned char ICA_KEY_RSA_CRT_REC[MAX_RSACRT_SIZE]; /*------------------------------------------------* | RSA key token types | *------------------------------------------------*/ #define RSA_PUBLIC_MODULUS_EXPONENT 3 #define RSA_PKCS_PRIVATE_CHINESE_REMAINDER 6 #define KEYTYPE_MODEXPO 1 #define KEYTYPE_PKCSCRT 2 /*------------------------------------------------* | RSA Key Token format | *------------------------------------------------*/ /* * NOTE: All the fields in the ICA_KEY_RSA_MODEXPO structure * (lengths, offsets, exponents, modulus, etc.) are * stored in big-endian format */ typedef struct _ICA_KEY_RSA_MODEXPO { unsigned int keyType; /* RSA key type. */ unsigned int keyLength; /* Total length of the token. */ unsigned int modulusBitLength; /* Modulus n bit length. */ /* -- Start of the data length.*/ unsigned int nLength; /* Modulus n = p * q */ unsigned int expLength; /* exponent (public or private)*/ /* e = 1/d * mod(p-1)(q-1) */ /* -- Start of the data offsets*/ unsigned int nOffset; /* Modulus n . */ unsigned int expOffset; /* exponent (public or private)*/ unsigned char reserved[112]; /* reserved area */ /* -- Start of the variable -- */ /* -- length token data. -- */ ICA_KEY_RSA_MODEXPO_REC keyRecord; } ICA_KEY_RSA_MODEXPO; #define SZ_HEADER_MODEXPO (sizeof(ICA_KEY_RSA_MODEXPO) - sizeof(ICA_KEY_RSA_MODEXPO_REC)) /* * NOTE: All the fields in the ICA_KEY_RSA_CRT structure * (lengths, offsets, exponents, modulus, etc.) are * stored in big-endian format */ typedef struct _ICA_KEY_RSA_CRT { unsigned int keyType; /* RSA key type. */ unsigned int keyLength; /* Total length of the token. */ unsigned int modulusBitLength; /* Modulus n bit length. */ /* -- Start of the data length.*/ #if _AIX unsigned int nLength; /* Modulus n = p * q */ #endif unsigned int pLength; /* Prime number p . */ unsigned int qLength; /* Prime number q . */ unsigned int dpLength; /* dp = d * mod(p-1) . */ unsigned int dqLength; /* dq = d * mod(q-1) . */ unsigned int qInvLength; /* PKCS: qInv = Ap/q */ /* -- Start of the data offsets*/ #if _AIX unsigned int nOffset; /* Modulus n . */ #endif unsigned int pOffset; /* Prime number p . */ unsigned int qOffset; /* Prime number q . */ unsigned int dpOffset; /* dp . */ unsigned int dqOffset; /* dq . */ unsigned int qInvOffset; /* qInv for PKCS */ #if _AIX unsigned char reserved[80]; /* reserved area */ #else unsigned char reserved[88]; /* reserved area */ #endif /* -- Start of the variable -- */ /* -- length token data. -- */ ICA_KEY_RSA_CRT_REC keyRecord; } ICA_KEY_RSA_CRT; #define SZ_HEADER_CRT (sizeof(ICA_KEY_RSA_CRT) - sizeof(ICA_KEY_RSA_CRT_REC)) unsigned int icaOpenAdapter( unsigned int adapterId, ICA_ADAPTER_HANDLE *pAdapterHandle ); unsigned int icaCloseAdapter( ICA_ADAPTER_HANDLE adapterHandle ); unsigned int icaRsaModExpo( ICA_ADAPTER_HANDLE hAdapterHandle, unsigned int inputDataLength, unsigned char *pInputData, ICA_KEY_RSA_MODEXPO *pKeyModExpo, unsigned int *pOutputDataLength, unsigned char *pOutputData ); unsigned int icaRsaCrt( ICA_ADAPTER_HANDLE hAdapterHandle, unsigned int inputDataLength, unsigned char *pInputData, ICA_KEY_RSA_CRT *pKeyCrt, unsigned int *pOutputDataLength, unsigned char *pOutputData ); unsigned int icaRandomNumberGenerate( ICA_ADAPTER_HANDLE hAdapterHandle, unsigned int outputDataLength, unsigned char *pOutputData ); /* Specific macros and definitions to not have IFDEF;s all over the main code */ #if (_AIX) static const char *IBMCA_LIBNAME = "/lib/libica.a(shr.o)"; #elif (WIN32) static const char *IBMCA_LIBNAME = "cryptica"; #else static const char *IBMCA_LIBNAME = "ica"; #endif #if (WIN32) /* The ICA_KEY_RSA_MODEXPO & ICA_KEY_RSA_CRT lengths and offsets must be in big-endian format. */ #define CORRECT_ENDIANNESS(b) ( \ (((unsigned long) (b) & 0x000000ff) << 24) | \ (((unsigned long) (b) & 0x0000ff00) << 8) | \ (((unsigned long) (b) & 0x00ff0000) >> 8) | \ (((unsigned long) (b) & 0xff000000) >> 24) \ ) #define CRT_KEY_TYPE RSA_PKCS_PRIVATE_CHINESE_REMAINDER #define ME_KEY_TYPE RSA_PUBLIC_MODULUS_EXPONENT #else #define CORRECT_ENDIANNESS(b) (b) #define CRT_KEY_TYPE KEYTYPE_PKCSCRT #define ME_KEY_TYPE KEYTYPE_MODEXPO #endif #endif /* __ICA_OPENSSL_API_H__ */