xref: /freebsd/contrib/unbound/validator/val_secalgo.h (revision 7d8f797b725e3efc0a4256554654780df83c456c)
1 /*
2  * validator/val_secalgo.h - validator security algorithm functions.
3  *
4  * Copyright (c) 2012, NLnet Labs. All rights reserved.
5  *
6  * This software is open source.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  *
12  * Redistributions of source code must retain the above copyright notice,
13  * this list of conditions and the following disclaimer.
14  *
15  * Redistributions in binary form must reproduce the above copyright notice,
16  * this list of conditions and the following disclaimer in the documentation
17  * and/or other materials provided with the distribution.
18  *
19  * Neither the name of the NLNET LABS nor the names of its contributors may
20  * be used to endorse or promote products derived from this software without
21  * specific prior written permission.
22  *
23  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
24  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
25  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
26  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
27  * HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
28  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
29  * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
30  * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31  * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32  * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34  */
35 
36 /**
37  * \file
38  *
39  * This file contains helper functions for the validator module.
40  * The functions take buffers with raw data and convert to library calls.
41  */
42 
43 #ifndef VALIDATOR_VAL_SECALGO_H
44 #define VALIDATOR_VAL_SECALGO_H
45 struct sldns_buffer;
46 
47 /**
48  * Return size of DS digest according to its hash algorithm.
49  * @param algo: DS digest algo.
50  * @return size in bytes of digest, or 0 if not supported.
51  */
52 size_t ds_digest_size_supported(int algo);
53 
54 /**
55  * @param algo: the DS digest algo
56  * @param buf: the buffer to digest
57  * @param len: length of buffer to digest.
58  * @param res: result stored here (must have sufficient space).
59  * @return false on failure.
60  */
61 int secalgo_ds_digest(int algo, unsigned char* buf, size_t len,
62 	unsigned char* res);
63 
64 /** return true if DNSKEY algorithm id is supported */
65 int dnskey_algo_id_is_supported(int id);
66 
67 /**
68  * Check a canonical sig+rrset and signature against a dnskey
69  * @param buf: buffer with data to verify, the first rrsig part and the
70  *	canonicalized rrset.
71  * @param algo: DNSKEY algorithm.
72  * @param sigblock: signature rdata field from RRSIG
73  * @param sigblock_len: length of sigblock data.
74  * @param key: public key data from DNSKEY RR.
75  * @param keylen: length of keydata.
76  * @param reason: bogus reason in more detail.
77  * @return secure if verification succeeded, bogus on crypto failure,
78  *	unchecked on format errors and alloc failures.
79  */
80 enum sec_status verify_canonrrset(struct sldns_buffer* buf, int algo,
81 	unsigned char* sigblock, unsigned int sigblock_len,
82 	unsigned char* key, unsigned int keylen, char** reason);
83 
84 #endif /* VALIDATOR_VAL_SECALGO_H */
85