xref: /illumos-gate/usr/src/lib/libcryptoutil/common/mechkeygen.c (revision 66582b606a8194f7f3ba5b3a3a6dca5b0d346361) 
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 /*
22  * Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
23  * Use is subject to license terms.
24  * Copyright 2012 Milan Jurik. All rights reserved.
25  * Copyright 2016 Jason King.  All rights reserved.
26  */
27 
28 #include <cryptoutil.h>
29 
30 /*
31  * Get the key generation mechanism for the given mechanism.
32  *
33  * All mechanisms in PKCS #11 v2.20 are listed here.
34  */
35 CK_RV
36 pkcs11_mech2keygen(CK_MECHANISM_TYPE mech_type, CK_MECHANISM_TYPE *gen_mech)
37 {
38 	switch (mech_type) {
39 
40 	case CKM_RSA_PKCS_KEY_PAIR_GEN:
41 	case CKM_RSA_PKCS:
42 	case CKM_RSA_9796:
43 	case CKM_RSA_X_509:
44 	case CKM_MD2_RSA_PKCS:
45 	case CKM_MD5_RSA_PKCS:
46 	case CKM_SHA1_RSA_PKCS:
47 	case CKM_SHA256_RSA_PKCS:
48 	case CKM_SHA384_RSA_PKCS:
49 	case CKM_SHA512_RSA_PKCS:
50 	case CKM_SHA256_RSA_PKCS_PSS:
51 	case CKM_SHA384_RSA_PKCS_PSS:
52 	case CKM_SHA512_RSA_PKCS_PSS:
53 	case CKM_RIPEMD128_RSA_PKCS:
54 	case CKM_RIPEMD160_RSA_PKCS:
55 	case CKM_RSA_PKCS_OAEP:
56 	case CKM_RSA_PKCS_OAEP_TPM_1_1:
57 	case CKM_RSA_PKCS_TPM_1_1:
58 		*gen_mech = CKM_RSA_PKCS_KEY_PAIR_GEN;
59 		break;
60 
61 	case CKM_RSA_X9_31_KEY_PAIR_GEN:
62 	case CKM_RSA_X9_31:
63 	case CKM_SHA1_RSA_X9_31:
64 		*gen_mech = CKM_RSA_X9_31_KEY_PAIR_GEN;
65 		break;
66 
67 	case CKM_RSA_PKCS_PSS:
68 	case CKM_SHA1_RSA_PKCS_PSS:
69 		*gen_mech = CKM_RSA_PKCS_KEY_PAIR_GEN;
70 		break;
71 
72 	case CKM_DH_PKCS_PARAMETER_GEN:
73 		*gen_mech = CKM_DH_PKCS_PARAMETER_GEN;
74 		break;
75 
76 	case CKM_DSA_KEY_PAIR_GEN:
77 	case CKM_DSA:
78 	case CKM_DSA_SHA1:
79 	case CKM_DSA_SHA224:
80 	case CKM_DSA_SHA256:
81 	case CKM_DSA_SHA384:
82 	case CKM_DSA_SHA512:
83 		*gen_mech = CKM_DSA_KEY_PAIR_GEN;
84 		break;
85 
86 	case CKM_DSA_PARAMETER_GEN:
87 		*gen_mech = CKM_DSA_PARAMETER_GEN;
88 		break;
89 
90 	case CKM_DSA_PROBABLISTIC_PARAMETER_GEN:
91 		*gen_mech = CKM_DSA_PROBABLISTIC_PARAMETER_GEN;
92 		break;
93 
94 	case CKM_DSA_SHAWE_TAYLOR_PARAMETER_GEN:
95 		*gen_mech = CKM_DSA_SHAWE_TAYLOR_PARAMETER_GEN;
96 		break;
97 
98 	case CKM_FORTEZZA_TIMESTAMP:
99 		*gen_mech = CKM_DSA_KEY_PAIR_GEN;
100 		break;
101 
102 	case CKM_DH_PKCS_KEY_PAIR_GEN:
103 	case CKM_DH_PKCS_DERIVE:
104 		*gen_mech = CKM_DH_PKCS_KEY_PAIR_GEN;
105 		break;
106 
107 	case CKM_ECDSA:
108 	case CKM_ECDSA_SHA1:
109 	case CKM_ECDSA_SHA224:
110 	case CKM_ECDSA_SHA256:
111 	case CKM_ECDSA_SHA384:
112 	case CKM_ECDSA_SHA512:
113 	case CKM_EC_KEY_PAIR_GEN:
114 	case CKM_ECDH1_DERIVE:
115 	case CKM_ECDH1_COFACTOR_DERIVE:
116 	case CKM_ECMQV_DERIVE:
117 		*gen_mech = CKM_EC_KEY_PAIR_GEN;
118 		break;
119 
120 	case CKM_X9_42_DH_KEY_PAIR_GEN:
121 	case CKM_X9_42_DH_DERIVE:
122 	case CKM_X9_42_DH_HYBRID_DERIVE:
123 	case CKM_X9_42_MQV_DERIVE:
124 		*gen_mech = CKM_X9_42_DH_KEY_PAIR_GEN;
125 		break;
126 
127 	case CKM_X9_42_DH_PARAMETER_GEN:
128 		*gen_mech = CKM_X9_42_DH_PARAMETER_GEN;
129 		break;
130 
131 	case CKM_KEA_KEY_PAIR_GEN:
132 	case CKM_KEA_KEY_DERIVE:
133 		*gen_mech = CKM_KEA_KEY_PAIR_GEN;
134 		break;
135 
136 	case CKM_MD2:
137 	case CKM_MD2_HMAC:
138 	case CKM_MD2_HMAC_GENERAL:
139 	case CKM_MD5:
140 	case CKM_MD5_HMAC:
141 	case CKM_MD5_HMAC_GENERAL:
142 	case CKM_SHA_1:
143 	case CKM_SHA_1_HMAC:
144 	case CKM_SHA_1_HMAC_GENERAL:
145 	case CKM_SHA256:
146 	case CKM_SHA256_HMAC:
147 	case CKM_SHA256_HMAC_GENERAL:
148 	case CKM_SHA384:
149 	case CKM_SHA384_HMAC:
150 	case CKM_SHA384_HMAC_GENERAL:
151 	case CKM_SHA512:
152 	case CKM_SHA512_HMAC:
153 	case CKM_SHA512_HMAC_GENERAL:
154 	case CKM_SHA512_224:
155 	case CKM_SHA512_224_HMAC:
156 	case CKM_SHA512_224_HMAC_GENERAL:
157 	case CKM_SHA512_224_KEY_DERIVATION:
158 	case CKM_SHA512_256:
159 	case CKM_SHA512_256_HMAC:
160 	case CKM_SHA512_256_HMAC_GENERAL:
161 	case CKM_SHA512_256_KEY_DERIVATION:
162 	case CKM_GENERIC_SECRET_KEY_GEN:
163 	case CKM_FASTHASH:
164 	case CKM_PKCS5_PBKD2:
165 	case CKM_PBA_SHA1_WITH_SHA1_HMAC:
166 	case CKM_CMS_SIG:
167 		*gen_mech = CKM_GENERIC_SECRET_KEY_GEN;
168 		break;
169 
170 	case CKM_SSL3_MD5_MAC:
171 	case CKM_SSL3_SHA1_MAC:
172 	case CKM_SSL3_PRE_MASTER_KEY_GEN:
173 	case CKM_SSL3_MASTER_KEY_DERIVE:
174 	case CKM_SSL3_KEY_AND_MAC_DERIVE:
175 	case CKM_SSL3_MASTER_KEY_DERIVE_DH:
176 		*gen_mech = CKM_SSL3_PRE_MASTER_KEY_GEN;
177 		break;
178 
179 	case CKM_TLS_PRE_MASTER_KEY_GEN:
180 	case CKM_TLS_MASTER_KEY_DERIVE:
181 	case CKM_TLS_KEY_AND_MAC_DERIVE:
182 	case CKM_TLS_MASTER_KEY_DERIVE_DH:
183 	case CKM_TLS_PRF:
184 		*gen_mech = CKM_TLS_PRE_MASTER_KEY_GEN;
185 		break;
186 
187 	case CKM_WTLS_PRE_MASTER_KEY_GEN:
188 	case CKM_WTLS_MASTER_KEY_DERIVE:
189 	case CKM_WTLS_MASTER_KEY_DERIVE_DH_ECC:
190 	case CKM_WTLS_PRF:
191 	case CKM_WTLS_SERVER_KEY_AND_MAC_DERIVE:
192 	case CKM_WTLS_CLIENT_KEY_AND_MAC_DERIVE:
193 		*gen_mech = CKM_WTLS_PRE_MASTER_KEY_GEN;
194 		break;
195 
196 	case CKM_CONCATENATE_BASE_AND_KEY:
197 	case CKM_CONCATENATE_BASE_AND_DATA:
198 	case CKM_CONCATENATE_DATA_AND_BASE:
199 	case CKM_XOR_BASE_AND_DATA:
200 	case CKM_EXTRACT_KEY_FROM_KEY:
201 	case CKM_RIPEMD128:
202 	case CKM_RIPEMD128_HMAC:
203 	case CKM_RIPEMD128_HMAC_GENERAL:
204 	case CKM_RIPEMD160:
205 	case CKM_RIPEMD160_HMAC:
206 	case CKM_RIPEMD160_HMAC_GENERAL:
207 	case CKM_SHA1_KEY_DERIVATION:
208 	case CKM_SHA256_KEY_DERIVATION:
209 	case CKM_SHA384_KEY_DERIVATION:
210 	case CKM_SHA512_KEY_DERIVATION:
211 	case CKM_MD5_KEY_DERIVATION:
212 	case CKM_MD2_KEY_DERIVATION:
213 	/* not sure the following 2 should be CKK_DES or not */
214 	case CKM_KEY_WRAP_LYNKS: /* wrap/unwrap secret key w/ DES key */
215 	case CKM_KEY_WRAP_SET_OAEP:  /* wrap/unwarp DES key w/ RSA key */
216 		*gen_mech = CKM_GENERIC_SECRET_KEY_GEN;
217 		break;
218 
219 	case CKM_RC2_KEY_GEN:
220 	case CKM_RC2_ECB:
221 	case CKM_RC2_CBC:
222 	case CKM_RC2_MAC:
223 	case CKM_RC2_MAC_GENERAL:
224 	case CKM_RC2_CBC_PAD:
225 	case CKM_PBE_SHA1_RC2_128_CBC:
226 	case CKM_PBE_SHA1_RC2_40_CBC:
227 		*gen_mech = CKM_RC2_KEY_GEN;
228 		break;
229 
230 	case CKM_RC4_KEY_GEN:
231 	case CKM_RC4:
232 	case CKM_PBE_SHA1_RC4_128:
233 	case CKM_PBE_SHA1_RC4_40:
234 		*gen_mech = CKM_RC4_KEY_GEN;
235 		break;
236 
237 	case CKM_DES_KEY_GEN:
238 	case CKM_DES_ECB:
239 	case CKM_DES_CBC:
240 	case CKM_DES_MAC:
241 	case CKM_DES_MAC_GENERAL:
242 	case CKM_DES_CBC_PAD:
243 	case CKM_PBE_MD2_DES_CBC:
244 	case CKM_PBE_MD5_DES_CBC:
245 	case CKM_DES_OFB64:
246 	case CKM_DES_OFB8:
247 	case CKM_DES_CFB64:
248 	case CKM_DES_CFB8:
249 	case CKM_DES_ECB_ENCRYPT_DATA:
250 	case CKM_DES_CBC_ENCRYPT_DATA:
251 		*gen_mech = CKM_DES_KEY_GEN;
252 		break;
253 
254 	case CKM_DES2_KEY_GEN:
255 	case CKM_PBE_SHA1_DES2_EDE_CBC:
256 		*gen_mech = CKM_DES2_KEY_GEN;
257 		break;
258 
259 	case CKM_DES3_KEY_GEN:
260 	case CKM_DES3_ECB:
261 	case CKM_DES3_CBC:
262 	case CKM_DES3_MAC:
263 	case CKM_DES3_MAC_GENERAL:
264 	case CKM_DES3_CBC_PAD:
265 	case CKM_PBE_SHA1_DES3_EDE_CBC:
266 	case CKM_DES3_ECB_ENCRYPT_DATA:
267 	case CKM_DES3_CBC_ENCRYPT_DATA:
268 	case CKM_DES3_CMAC:
269 	case CKM_DES3_CMAC_GENERAL:
270 		*gen_mech = CKM_DES3_KEY_GEN;
271 		break;
272 
273 	case CKM_ACTI:
274 	case CKM_ACTI_KEY_GEN:
275 		*gen_mech = CKM_ACTI_KEY_GEN;
276 		break;
277 
278 	case CKM_CAST_KEY_GEN:
279 	case CKM_CAST_ECB:
280 	case CKM_CAST_CBC:
281 	case CKM_CAST_MAC:
282 	case CKM_CAST_MAC_GENERAL:
283 	case CKM_CAST_CBC_PAD:
284 	case CKM_PBE_MD5_CAST_CBC:
285 		*gen_mech = CKM_CAST_KEY_GEN;
286 		break;
287 
288 	case CKM_CAST3_KEY_GEN:
289 	case CKM_CAST3_ECB:
290 	case CKM_CAST3_CBC:
291 	case CKM_CAST3_MAC:
292 	case CKM_CAST3_MAC_GENERAL:
293 	case CKM_CAST3_CBC_PAD:
294 	case CKM_PBE_MD5_CAST3_CBC:
295 		*gen_mech = CKM_CAST3_KEY_GEN;
296 		break;
297 
298 	/* CAST5 and CAST128 are the same alg */
299 	case CKM_CAST5_CBC:
300 	case CKM_CAST5_CBC_PAD:
301 	case CKM_CAST5_ECB:
302 	case CKM_CAST5_KEY_GEN:
303 	case CKM_CAST5_MAC:
304 	case CKM_CAST5_MAC_GENERAL:
305 	case CKM_PBE_MD5_CAST5_CBC:
306 	case CKM_PBE_SHA1_CAST5_CBC:
307 		*gen_mech = CKM_CAST5_KEY_GEN;
308 		break;
309 
310 	case CKM_RC5_KEY_GEN:
311 	case CKM_RC5_ECB:
312 	case CKM_RC5_CBC:
313 	case CKM_RC5_MAC:
314 	case CKM_RC5_MAC_GENERAL:
315 	case CKM_RC5_CBC_PAD:
316 		*gen_mech = CKM_RC5_KEY_GEN;
317 		break;
318 
319 	case CKM_IDEA_KEY_GEN:
320 	case CKM_IDEA_ECB:
321 	case CKM_IDEA_CBC:
322 	case CKM_IDEA_MAC:
323 	case CKM_IDEA_MAC_GENERAL:
324 	case CKM_IDEA_CBC_PAD:
325 		*gen_mech = CKM_IDEA_KEY_GEN;
326 		break;
327 
328 	case CKM_SKIPJACK_KEY_GEN:
329 	case CKM_SKIPJACK_ECB64:
330 	case CKM_SKIPJACK_CBC64:
331 	case CKM_SKIPJACK_OFB64:
332 	case CKM_SKIPJACK_CFB64:
333 	case CKM_SKIPJACK_CFB32:
334 	case CKM_SKIPJACK_CFB16:
335 	case CKM_SKIPJACK_CFB8:
336 	case CKM_SKIPJACK_WRAP:
337 	case CKM_SKIPJACK_PRIVATE_WRAP:
338 	case CKM_SKIPJACK_RELAYX:
339 		*gen_mech = CKM_SKIPJACK_KEY_GEN;
340 		break;
341 
342 	case CKM_BATON_KEY_GEN:
343 	case CKM_BATON_ECB128:
344 	case CKM_BATON_ECB96:
345 	case CKM_BATON_CBC128:
346 	case CKM_BATON_COUNTER:
347 	case CKM_BATON_SHUFFLE:
348 	case CKM_BATON_WRAP:
349 		*gen_mech = CKM_BATON_KEY_GEN;
350 		break;
351 
352 	case CKM_JUNIPER_KEY_GEN:
353 	case CKM_JUNIPER_ECB128:
354 	case CKM_JUNIPER_CBC128:
355 	case CKM_JUNIPER_COUNTER:
356 	case CKM_JUNIPER_SHUFFLE:
357 	case CKM_JUNIPER_WRAP:
358 		*gen_mech = CKM_JUNIPER_KEY_GEN;
359 		break;
360 
361 	case CKM_CDMF_KEY_GEN:
362 	case CKM_CDMF_ECB:
363 	case CKM_CDMF_CBC:
364 	case CKM_CDMF_MAC:
365 	case CKM_CDMF_MAC_GENERAL:
366 	case CKM_CDMF_CBC_PAD:
367 		*gen_mech = CKM_CDMF_KEY_GEN;
368 		break;
369 
370 	case CKM_AES_KEY_GEN:
371 	case CKM_AES_ECB:
372 	case CKM_AES_CBC:
373 	case CKM_AES_MAC:
374 	case CKM_AES_MAC_GENERAL:
375 	case CKM_AES_CBC_PAD:
376 	case CKM_AES_ECB_ENCRYPT_DATA:
377 	case CKM_AES_CBC_ENCRYPT_DATA:
378 	case CKM_AES_CCM:
379 	case CKM_AES_CFB1:
380 	case CKM_AES_CFB128:
381 	case CKM_AES_CFB64:
382 	case CKM_AES_CFB8:
383 	case CKM_AES_CMAC:
384 	case CKM_AES_CMAC_GENERAL:
385 	case CKM_AES_CTR:
386 	case CKM_AES_CTS:
387 	case CKM_AES_GCM:
388 	case CKM_AES_GMAC:
389 	case CKM_AES_KEY_WRAP:
390 	case CKM_AES_KEY_WRAP_PAD:
391 	case CKM_AES_OFB:
392 	case CKM_AES_XCBC_MAC:
393 	case CKM_AES_XCBC_MAC_96:
394 		*gen_mech = CKM_AES_KEY_GEN;
395 		break;
396 
397 	case CKM_BLOWFISH_KEY_GEN:
398 	case CKM_BLOWFISH_CBC:
399 	case CKM_BLOWFISH_CBC_PAD:
400 		*gen_mech = CKM_BLOWFISH_KEY_GEN;
401 		break;
402 
403 	case CKM_TWOFISH_KEY_GEN:
404 	case CKM_TWOFISH_CBC:
405 		*gen_mech = CKM_TWOFISH_KEY_GEN;
406 		break;
407 
408 	case CKM_CAMELLIA_CBC:
409 	case CKM_CAMELLIA_CBC_ENCRYPT_DATA:
410 	case CKM_CAMELLIA_CBC_PAD:
411 	case CKM_CAMELLIA_CTR:
412 	case CKM_CAMELLIA_ECB:
413 	case CKM_CAMELLIA_ECB_ENCRYPT_DATA:
414 	case CKM_CAMELLIA_KEY_GEN:
415 	case CKM_CAMELLIA_MAC:
416 	case CKM_CAMELLIA_MAC_GENERAL:
417 		*gen_mech = CKM_CAMELLIA_KEY_GEN;
418 		break;
419 
420 	case CKM_ARIA_CBC:
421 	case CKM_ARIA_CBC_ENCRYPT_DATA:
422 	case CKM_ARIA_CBC_PAD:
423 	case CKM_ARIA_ECB:
424 	case CKM_ARIA_ECB_ENCRYPT_DATA:
425 	case CKM_ARIA_KEY_GEN:
426 	case CKM_ARIA_MAC:
427 	case CKM_ARIA_MAC_GENERAL:
428 		*gen_mech = CKM_ARIA_KEY_GEN;
429 		break;
430 
431 	case CKM_GOST28147:
432 	case CKM_GOST28147_ECB:
433 	case CKM_GOST28147_KEY_GEN:
434 	case CKM_GOST28147_KEY_WRAP:
435 	case CKM_GOST28147_MAC:
436 		*gen_mech = CKM_GOST28147_KEY_GEN;
437 		break;
438 
439 	case CKM_GOSTR3410:
440 	case CKM_GOSTR3410_DERIVE:
441 	case CKM_GOSTR3410_KEY_PAIR_GEN:
442 	case CKM_GOSTR3410_KEY_WRAP:
443 	case CKM_GOSTR3410_WITH_GOSTR3411:
444 		*gen_mech = CKM_GOSTR3410_KEY_PAIR_GEN;
445 		break;
446 
447 	case CKM_HOTP:
448 	case CKM_HOTP_KEY_GEN:
449 		*gen_mech = CKM_HOTP_KEY_GEN;
450 		break;
451 
452 	case CKM_SECURID:
453 	case CKM_SECURID_KEY_GEN:
454 		*gen_mech = CKM_SECURID_KEY_GEN;
455 		break;
456 
457 	case CKM_SEED_CBC:
458 	case CKM_SEED_CBC_ENCRYPT_DATA:
459 	case CKM_SEED_CBC_PAD:
460 	case CKM_SEED_ECB:
461 	case CKM_SEED_ECB_ENCRYPT_DATA:
462 	case CKM_SEED_KEY_GEN:
463 	case CKM_SEED_MAC:
464 	case CKM_SEED_MAC_GENERAL:
465 		*gen_mech = CKM_SEED_KEY_GEN;
466 		break;
467 
468 	default:
469 		return (CKR_MECHANISM_INVALID);
470 	}
471 
472 	return (CKR_OK);
473 }
474