17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate * CDDL HEADER START
37c478bd9Sstevel@tonic-gate *
47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5*d3a28a55Sdinak * Common Development and Distribution License (the "License").
6*d3a28a55Sdinak * You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate *
87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate * and limitations under the License.
127c478bd9Sstevel@tonic-gate *
137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate *
197c478bd9Sstevel@tonic-gate * CDDL HEADER END
207c478bd9Sstevel@tonic-gate */
217c478bd9Sstevel@tonic-gate /*
22*d3a28a55Sdinak * Copyright 2007 Sun Microsystems, Inc. All rights reserved.
237c478bd9Sstevel@tonic-gate * Use is subject to license terms.
247c478bd9Sstevel@tonic-gate */
257c478bd9Sstevel@tonic-gate
267c478bd9Sstevel@tonic-gate /*
277c478bd9Sstevel@tonic-gate * Functions for Verifying Signatures and MACS
287c478bd9Sstevel@tonic-gate * (as defined in PKCS#11 spec section 11.13)
297c478bd9Sstevel@tonic-gate */
307c478bd9Sstevel@tonic-gate
317c478bd9Sstevel@tonic-gate #include "metaGlobal.h"
327c478bd9Sstevel@tonic-gate
337c478bd9Sstevel@tonic-gate
347c478bd9Sstevel@tonic-gate /*
357c478bd9Sstevel@tonic-gate * meta_VerifyInit
367c478bd9Sstevel@tonic-gate *
377c478bd9Sstevel@tonic-gate */
387c478bd9Sstevel@tonic-gate CK_RV
meta_VerifyInit(CK_SESSION_HANDLE hSession,CK_MECHANISM_PTR pMechanism,CK_OBJECT_HANDLE hKey)397c478bd9Sstevel@tonic-gate meta_VerifyInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanism,
407c478bd9Sstevel@tonic-gate CK_OBJECT_HANDLE hKey)
417c478bd9Sstevel@tonic-gate {
427c478bd9Sstevel@tonic-gate CK_RV rv;
437c478bd9Sstevel@tonic-gate meta_session_t *session;
447c478bd9Sstevel@tonic-gate meta_object_t *key;
457c478bd9Sstevel@tonic-gate
467c478bd9Sstevel@tonic-gate if (pMechanism == NULL)
477c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
487c478bd9Sstevel@tonic-gate
497c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
507c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
517c478bd9Sstevel@tonic-gate return (rv);
527c478bd9Sstevel@tonic-gate
537c478bd9Sstevel@tonic-gate rv = meta_handle2object(hKey, &key);
547c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
557c478bd9Sstevel@tonic-gate REFRELEASE(session);
567c478bd9Sstevel@tonic-gate return (rv);
577c478bd9Sstevel@tonic-gate }
587c478bd9Sstevel@tonic-gate
59*d3a28a55Sdinak rv = meta_operation_init(CKF_VERIFY, session, pMechanism, key);
607c478bd9Sstevel@tonic-gate
617c478bd9Sstevel@tonic-gate OBJRELEASE(key);
627c478bd9Sstevel@tonic-gate REFRELEASE(session);
637c478bd9Sstevel@tonic-gate
647c478bd9Sstevel@tonic-gate return (rv);
657c478bd9Sstevel@tonic-gate }
667c478bd9Sstevel@tonic-gate
677c478bd9Sstevel@tonic-gate
687c478bd9Sstevel@tonic-gate /*
697c478bd9Sstevel@tonic-gate * meta_Verify
707c478bd9Sstevel@tonic-gate *
717c478bd9Sstevel@tonic-gate */
727c478bd9Sstevel@tonic-gate CK_RV
meta_Verify(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pData,CK_ULONG ulDataLen,CK_BYTE_PTR pSignature,CK_ULONG ulSignatureLen)737c478bd9Sstevel@tonic-gate meta_Verify(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pData, CK_ULONG ulDataLen,
747c478bd9Sstevel@tonic-gate CK_BYTE_PTR pSignature, CK_ULONG ulSignatureLen)
757c478bd9Sstevel@tonic-gate {
767c478bd9Sstevel@tonic-gate CK_RV rv;
777c478bd9Sstevel@tonic-gate meta_session_t *session;
787c478bd9Sstevel@tonic-gate
797c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
807c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
817c478bd9Sstevel@tonic-gate return (rv);
827c478bd9Sstevel@tonic-gate
837c478bd9Sstevel@tonic-gate /* Note: unlike other ops, both buffers are inputs, and required. */
847c478bd9Sstevel@tonic-gate if (pData == NULL || pSignature == NULL) {
85*d3a28a55Sdinak meta_operation_cleanup(session, CKF_VERIFY, FALSE);
867c478bd9Sstevel@tonic-gate REFRELEASE(session);
877c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
887c478bd9Sstevel@tonic-gate }
897c478bd9Sstevel@tonic-gate
90*d3a28a55Sdinak rv = meta_do_operation(CKF_VERIFY, MODE_SINGLE, session, NULL,
917c478bd9Sstevel@tonic-gate pData, ulDataLen, pSignature, &ulSignatureLen);
927c478bd9Sstevel@tonic-gate
937c478bd9Sstevel@tonic-gate REFRELEASE(session);
947c478bd9Sstevel@tonic-gate
957c478bd9Sstevel@tonic-gate return (rv);
967c478bd9Sstevel@tonic-gate }
977c478bd9Sstevel@tonic-gate
987c478bd9Sstevel@tonic-gate
997c478bd9Sstevel@tonic-gate /*
1007c478bd9Sstevel@tonic-gate * meta_VerifyUpdate
1017c478bd9Sstevel@tonic-gate *
1027c478bd9Sstevel@tonic-gate */
1037c478bd9Sstevel@tonic-gate CK_RV
meta_VerifyUpdate(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pPart,CK_ULONG ulPartLen)1047c478bd9Sstevel@tonic-gate meta_VerifyUpdate(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pPart,
1057c478bd9Sstevel@tonic-gate CK_ULONG ulPartLen)
1067c478bd9Sstevel@tonic-gate {
1077c478bd9Sstevel@tonic-gate CK_RV rv;
1087c478bd9Sstevel@tonic-gate meta_session_t *session;
1097c478bd9Sstevel@tonic-gate
1107c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
1117c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
1127c478bd9Sstevel@tonic-gate return (rv);
1137c478bd9Sstevel@tonic-gate
1147c478bd9Sstevel@tonic-gate if (pPart == NULL) {
115*d3a28a55Sdinak meta_operation_cleanup(session, CKF_VERIFY, FALSE);
1167c478bd9Sstevel@tonic-gate REFRELEASE(session);
1177c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
1187c478bd9Sstevel@tonic-gate }
1197c478bd9Sstevel@tonic-gate
120*d3a28a55Sdinak rv = meta_do_operation(CKF_VERIFY, MODE_UPDATE, session, NULL,
1217c478bd9Sstevel@tonic-gate pPart, ulPartLen, NULL, NULL);
1227c478bd9Sstevel@tonic-gate
1237c478bd9Sstevel@tonic-gate REFRELEASE(session);
1247c478bd9Sstevel@tonic-gate
1257c478bd9Sstevel@tonic-gate return (rv);
1267c478bd9Sstevel@tonic-gate }
1277c478bd9Sstevel@tonic-gate
1287c478bd9Sstevel@tonic-gate
1297c478bd9Sstevel@tonic-gate /*
1307c478bd9Sstevel@tonic-gate * meta_VerifyFinal
1317c478bd9Sstevel@tonic-gate *
1327c478bd9Sstevel@tonic-gate */
1337c478bd9Sstevel@tonic-gate CK_RV
meta_VerifyFinal(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pSignature,CK_ULONG ulSignatureLen)1347c478bd9Sstevel@tonic-gate meta_VerifyFinal(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSignature,
1357c478bd9Sstevel@tonic-gate CK_ULONG ulSignatureLen)
1367c478bd9Sstevel@tonic-gate {
1377c478bd9Sstevel@tonic-gate CK_RV rv;
1387c478bd9Sstevel@tonic-gate meta_session_t *session;
1397c478bd9Sstevel@tonic-gate
1407c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
1417c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
1427c478bd9Sstevel@tonic-gate return (rv);
1437c478bd9Sstevel@tonic-gate
1447c478bd9Sstevel@tonic-gate /*
1457c478bd9Sstevel@tonic-gate * Unlike other ops the buffer is an input. Allow NULL if there's
1467c478bd9Sstevel@tonic-gate * no more input.
1477c478bd9Sstevel@tonic-gate */
1487c478bd9Sstevel@tonic-gate if (pSignature == NULL && ulSignatureLen != 0) {
149*d3a28a55Sdinak meta_operation_cleanup(session, CKF_VERIFY, FALSE);
1507c478bd9Sstevel@tonic-gate REFRELEASE(session);
1517c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
1527c478bd9Sstevel@tonic-gate }
1537c478bd9Sstevel@tonic-gate
154*d3a28a55Sdinak rv = meta_do_operation(CKF_VERIFY, MODE_FINAL, session, NULL,
1557c478bd9Sstevel@tonic-gate pSignature, ulSignatureLen, NULL, NULL);
1567c478bd9Sstevel@tonic-gate
1577c478bd9Sstevel@tonic-gate REFRELEASE(session);
1587c478bd9Sstevel@tonic-gate
1597c478bd9Sstevel@tonic-gate return (rv);
1607c478bd9Sstevel@tonic-gate }
1617c478bd9Sstevel@tonic-gate
1627c478bd9Sstevel@tonic-gate
1637c478bd9Sstevel@tonic-gate /*
1647c478bd9Sstevel@tonic-gate * meta_VerifyRecoverInit
1657c478bd9Sstevel@tonic-gate *
1667c478bd9Sstevel@tonic-gate */
1677c478bd9Sstevel@tonic-gate CK_RV
meta_VerifyRecoverInit(CK_SESSION_HANDLE hSession,CK_MECHANISM_PTR pMechanism,CK_OBJECT_HANDLE hKey)1687c478bd9Sstevel@tonic-gate meta_VerifyRecoverInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanism,
1697c478bd9Sstevel@tonic-gate CK_OBJECT_HANDLE hKey)
1707c478bd9Sstevel@tonic-gate {
1717c478bd9Sstevel@tonic-gate CK_RV rv;
1727c478bd9Sstevel@tonic-gate meta_session_t *session;
1737c478bd9Sstevel@tonic-gate meta_object_t *key;
1747c478bd9Sstevel@tonic-gate
1757c478bd9Sstevel@tonic-gate if (pMechanism == NULL)
1767c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
1777c478bd9Sstevel@tonic-gate
1787c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
1797c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
1807c478bd9Sstevel@tonic-gate return (rv);
1817c478bd9Sstevel@tonic-gate
1827c478bd9Sstevel@tonic-gate rv = meta_handle2object(hKey, &key);
1837c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
1847c478bd9Sstevel@tonic-gate REFRELEASE(session);
1857c478bd9Sstevel@tonic-gate return (rv);
1867c478bd9Sstevel@tonic-gate }
1877c478bd9Sstevel@tonic-gate
188*d3a28a55Sdinak rv = meta_operation_init(CKF_VERIFY_RECOVER, session, pMechanism, key);
1897c478bd9Sstevel@tonic-gate
1907c478bd9Sstevel@tonic-gate OBJRELEASE(key);
1917c478bd9Sstevel@tonic-gate REFRELEASE(session);
1927c478bd9Sstevel@tonic-gate
1937c478bd9Sstevel@tonic-gate return (rv);
1947c478bd9Sstevel@tonic-gate }
1957c478bd9Sstevel@tonic-gate
1967c478bd9Sstevel@tonic-gate
1977c478bd9Sstevel@tonic-gate /*
1987c478bd9Sstevel@tonic-gate * meta_VerifyRecover
1997c478bd9Sstevel@tonic-gate *
2007c478bd9Sstevel@tonic-gate */
2017c478bd9Sstevel@tonic-gate CK_RV
meta_VerifyRecover(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pSignature,CK_ULONG ulSignatureLen,CK_BYTE_PTR pData,CK_ULONG_PTR pulDataLen)2027c478bd9Sstevel@tonic-gate meta_VerifyRecover(CK_SESSION_HANDLE hSession, CK_BYTE_PTR pSignature,
2037c478bd9Sstevel@tonic-gate CK_ULONG ulSignatureLen, CK_BYTE_PTR pData, CK_ULONG_PTR pulDataLen)
2047c478bd9Sstevel@tonic-gate {
2057c478bd9Sstevel@tonic-gate CK_RV rv;
2067c478bd9Sstevel@tonic-gate meta_session_t *session;
2077c478bd9Sstevel@tonic-gate
2087c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
2097c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
2107c478bd9Sstevel@tonic-gate return (rv);
2117c478bd9Sstevel@tonic-gate
2127c478bd9Sstevel@tonic-gate if (pSignature == NULL || pulDataLen == NULL) {
213*d3a28a55Sdinak meta_operation_cleanup(session, CKF_VERIFY_RECOVER, FALSE);
2147c478bd9Sstevel@tonic-gate REFRELEASE(session);
2157c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
2167c478bd9Sstevel@tonic-gate }
2177c478bd9Sstevel@tonic-gate
218*d3a28a55Sdinak rv = meta_do_operation(CKF_VERIFY_RECOVER, MODE_SINGLE, session, NULL,
2197c478bd9Sstevel@tonic-gate pSignature, ulSignatureLen, pData, pulDataLen);
2207c478bd9Sstevel@tonic-gate
2217c478bd9Sstevel@tonic-gate REFRELEASE(session);
2227c478bd9Sstevel@tonic-gate
2237c478bd9Sstevel@tonic-gate return (rv);
2247c478bd9Sstevel@tonic-gate }
225