xref: /illumos-gate/usr/src/lib/pkcs11/pkcs11_tpm/common/tpmtok_int.h (revision 56e2cc86321ec889bf83a888d902c60d6fb2ef8d)
1 /*
2  * The Initial Developer of the Original Code is International
3  * Business Machines Corporation. Portions created by IBM
4  * Corporation are Copyright(C) 2005 International Business
5  * Machines Corporation. All Rights Reserved.
6  *
7  * This program is free software; you can redistribute it and/or modify
8  * it under the terms of the Common Public License as published by
9  * IBM Corporation; either version 1 of the License, or(at your option)
10  * any later version.
11  *
12  * This program is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15  * Common Public License for more details.
16  *
17  * You should have received a copy of the Common Public License
18  * along with this program; if not, a copy can be viewed at
19  * http://www.opensource.org/licenses/cpl1.0.php.
20  */
21 
22 /* (C) COPYRIGHT International Business Machines Corp. 2001, 2002, 2005 */
23 /*
24  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
25  * Use is subject to license terms.
26  */
27 
28 #ifndef _TPMTOK_INT_H
29 #define	_TPMTOK_INT_H
30 
31 #include <stdio.h>
32 #include <pthread.h>
33 #include <string.h>
34 #include <strings.h>
35 #include <md5.h>
36 #include <sha1.h>
37 #include <limits.h>
38 #include <syslog.h>
39 #include <errno.h>
40 #include <sys/types.h>
41 #include <sys/stat.h>
42 #include <sys/param.h>
43 #include <sys/byteorder.h>
44 #include <security/cryptoki.h>
45 
46 #include <tss/platform.h>
47 #include <tss/tss_defines.h>
48 #include <tss/tss_typedef.h>
49 #include <tss/tss_structs.h>
50 #include <tss/tspi.h>
51 
52 #define	VERSION_MAJOR 2
53 #define	VERSION_MINOR 1
54 
55 #define	MAX_SESSION_COUNT	64
56 #define	MAX_PIN_LEN	256
57 #define	MIN_PIN_LEN	1
58 
59 #define	MAX_SLOT_ID	10
60 
61 #ifndef MIN
62 #define	MIN(a, b)  ((a) < (b) ? (a) : (b))
63 #endif
64 
65 #define	MODE_COPY	(1 << 0)
66 #define	MODE_CREATE	(1 << 1)
67 #define	MODE_KEYGEN	(1 << 2)
68 #define	MODE_MODIFY	(1 << 3)
69 #define	MODE_DERIVE	(1 << 4)
70 #define	MODE_UNWRAP	(1 << 5)
71 
72 // RSA block formatting types
73 //
74 #define	PKCS_BT_1	1
75 #define	PKCS_BT_2	2
76 
77 #define	OP_ENCRYPT_INIT 1
78 #define	OP_DECRYPT_INIT 2
79 #define	OP_WRAP		3
80 #define	OP_UNWRAP	4
81 #define	OP_SIGN_INIT	5
82 #define	OP_VERIFY_INIT	6
83 
84 enum {
85 	STATE_INVALID = 0,
86 	STATE_ENCR,
87 	STATE_DECR,
88 	STATE_DIGEST,
89 	STATE_SIGN,
90 	STATE_VERIFY
91 };
92 
93 #define	SHA1_BLOCK_SIZE 64
94 #define	SHA1_BLOCK_SIZE_MASK (SHA1_BLOCK_SIZE - 1)
95 
96 #define	RSA_BLOCK_SIZE 256
97 
98 #ifndef PATH_MAX
99 #define	PATH_MAX MAXPATHLEN
100 #endif
101 
102 #ifndef PACK_DATA
103 #define	PACK_DATA
104 #endif
105 
106 #define	MD5_BLOCK_SIZE  64
107 
108 #define	DSA_SIGNATURE_SIZE  40
109 
110 #define	DEFAULT_SO_PIN  "87654321"
111 
112 typedef enum {
113 	ALL = 1,
114 	PRIVATE,
115 	PUBLIC
116 } SESS_OBJ_TYPE;
117 
118 typedef struct _DL_NODE
119 {
120 	struct _DL_NODE	*next;
121 	struct _DL_NODE	*prev;
122 	void  *data;
123 } DL_NODE;
124 
125 #define	TOKEN_DATA_FILE	"token.dat"
126 #define	TOKEN_OBJ_DIR	"objects"
127 #define	TOKEN_OBJ_INDEX_FILE "obj.idx"
128 
129 #define	TPMTOK_UUID_INDEX_FILENAME "uuids.idx"
130 
131 /*
132  * Filenames used to store migration data.
133  */
134 #define	SO_MAKEY_FILENAME	"so_makey.dat"
135 #define	USER_MAKEY_FILENAME	"user_makey.dat"
136 #define	SO_KEYBLOB_FILENAME	"so_blob.dat"
137 #define	USER_KEYBLOB_FILENAME	"user_blob.dat"
138 
139 #define	__FUNCTION__ __func__
140 
141 //
142 // Both of the strings below have a length of 32 chars and must be
143 // padded with spaces, and non - null terminated.
144 //
145 #define	PKW_CRYPTOKI_VERSION_MAJOR	2
146 #define	PKW_CRYPTOKI_VERSION_MINOR	1
147 #define	PKW_CRYPTOKI_MANUFACTURER	"Sun Microsystems, Inc.	  "
148 #define	PKW_CRYPTOKI_LIBDESC	    "PKCS#11 Interface for TPM	"
149 #define	PKW_CRYPTOKI_LIB_VERSION_MAJOR  1
150 #define	PKW_CRYPTOKI_LIB_VERSION_MINOR  0
151 #define	PKW_MAX_DEVICES		 10
152 
153 #define	MAX_TOK_OBJS  2048
154 #define	NUMBER_SLOTS_MANAGED 1
155 #define	TPM_SLOTID 1
156 
157 /*
158  * CKA_HIDDEN will be used to filter return results on
159  * a C_FindObjects call. Used for objects internal to the
160  * TPM token for management
161  */
162 /* custom attributes for the TPM token */
163 #define	CKA_HIDDEN	CKA_VENDOR_DEFINED + 0x01
164 #define	CKA_IBM_OPAQUE	CKA_VENDOR_DEFINED + 0x02
165 /*
166  * CKA_ENC_AUTHDATA will be used to store the encrypted SHA-1
167  * hashes of auth data passed in for TPM keys. The authdata
168  * will be encrypted using either the public
169  * leaf key or the private leaf key
170  */
171 #define	CKA_ENC_AUTHDATA CKA_VENDOR_DEFINED + 0x03
172 
173 /* custom return codes for the TPM token */
174 #define	CKR_KEY_NOT_FOUND	CKR_VENDOR_DEFINED + 0x01
175 #define	CKR_FILE_NOT_FOUND	CKR_VENDOR_DEFINED + 0x02
176 
177 typedef struct {
178 	CK_SLOT_ID  slotID;
179 	CK_SESSION_HANDLE  sessionh;
180 } ST_SESSION_T;
181 
182 typedef ST_SESSION_T ST_SESSION_HANDLE;
183 
184 typedef struct {
185 	void *Previous;
186 	void *Next;
187 	CK_SLOT_ID   SltId;
188 	CK_SESSION_HANDLE  RealHandle;
189 } Session_Struct_t;
190 
191 typedef Session_Struct_t *SessStructP;
192 
193 typedef struct {
194 	pid_t Pid;
195 	pthread_mutex_t  ProcMutex;
196 	Session_Struct_t *SessListBeg;
197 	Session_Struct_t *SessListEnd;
198 	pthread_mutex_t  SessListMutex;
199 } API_Proc_Struct_t;
200 
201 
202 
203 
204 enum {
205 	PRF_DUMMYFUNCTION = 1,
206 	PRF_FCVFUNCTION,
207 	PRF_INITIALIZE,
208 	PRF_FINALIZE,
209 	PRF_GETINFO,
210 	PRF_GETFUNCTIONLIST,
211 	PRF_GETSLOTLIST,
212 	PRF_GETSLOTINFO,
213 	PRF_GETTOKENINFO,
214 	PRF_GETMECHLIST,
215 	PRF_GETMECHINFO,
216 	PRF_INITTOKEN,
217 	PRF_INITPIN,
218 	PRF_SETPIN,
219 	PRF_OPENSESSION,
220 	PRF_CLOSESESSION,
221 	PRF_CLOSEALLSESSIONS,
222 	PRF_GETSESSIONINFO,
223 	PRF_GETOPERATIONSTATE,
224 	PRF_SETOPERATIONSTATE,
225 	PRF_LOGIN,
226 	PRF_LOGOUT,
227 	PRF_CREATEOBJECT,
228 	PRF_COPYOBJECT,
229 	PRF_DESTROYOBJECT,
230 	PRF_GETOBJECTSIZE,
231 	PRF_GETATTRIBUTEVALUE,
232 	PRF_SETATTRIBUTEVALUE,
233 	PRF_FINDOBJECTSINIT,
234 	PRF_FINDOBJECTS,
235 	PRF_FINDOBJECTSFINAL,
236 	PRF_ENCRYPTINIT,
237 	PRF_ENCRYPT,
238 	PRF_ENCRYPTUPDATE,
239 	PRF_ENCRYPTFINAL,
240 	PRF_DECRYPTINIT,
241 	PRF_DECRYPT,
242 	PRF_DECRYPTUPDATE,
243 	PRF_DECRYPTFINAL,
244 	PRF_DIGESTINIT,
245 	PRF_DIGEST,
246 	PRF_DIGESTUPDATE,
247 	PRF_DIGESTKEY,
248 	PRF_DIGESTFINAL,
249 	PRF_SIGNINIT,
250 	PRF_SIGN,
251 	PRF_SIGNUPDATE,
252 	PRF_SIGNFINAL,
253 	PRF_SIGNRECOVERINIT,
254 	PRF_SIGNRECOVER,
255 	PRF_VERIFYINIT,
256 	PRF_VERIFY,
257 	PRF_VERIFYUPDATE,
258 	PRF_VERIFYFINAL,
259 	PRF_VERIFYRECOVERINIT,
260 	PRF_VERIFYRECOVER,
261 	PRF_GENKEY,
262 	PRF_GENKEYPAIR,
263 	PRF_WRAPKEY,
264 	PRF_UNWRAPKEY,
265 	PRF_DERIVEKEY,
266 	PRF_GENRND,
267 	PRF_LASTENTRY
268 };
269 
270 typedef struct _ENCR_DECR_CONTEXT
271 {
272 	CK_OBJECT_HANDLE  key;
273 	CK_MECHANISM mech;
274 	CK_BYTE	  *context;
275 	CK_ULONG  context_len;
276 	CK_BBOOL  multi;
277 	CK_BBOOL  active;
278 } ENCR_DECR_CONTEXT;
279 
280 typedef struct _DIGEST_CONTEXT
281 {
282 	CK_MECHANISM   mech;
283 	union {
284 		MD5_CTX *md5ctx;
285 		SHA1_CTX *sha1ctx;
286 		void *ref; /* reference ptr for the union */
287 	} context;
288 	CK_ULONG context_len;
289 	CK_BBOOL multi;
290 	CK_BBOOL active;
291 } DIGEST_CONTEXT;
292 
293 typedef struct _SIGN_VERIFY_CONTEXT
294 {
295 	CK_OBJECT_HANDLE key;
296 	CK_MECHANISM	mech;	// current sign mechanism
297 	void	 *context;  // temporary work area
298 	CK_ULONG context_len;
299 	CK_BBOOL multi;    // is this a multi - part operation?
300 	CK_BBOOL recover;  // are we in recover mode?
301 	CK_BBOOL active;
302 } SIGN_VERIFY_CONTEXT;
303 
304 typedef struct _SESSION
305 {
306 	CK_SESSION_HANDLE    handle;
307 	CK_SESSION_INFO	session_info;
308 
309 	CK_OBJECT_HANDLE    *find_list;	// array of CK_OBJECT_HANDLE
310 	CK_ULONG	find_count;    // # handles in the list
311 	CK_ULONG	find_len;	// max # of handles in the list
312 	CK_ULONG	find_idx;	// current position
313 	CK_BBOOL	find_active;
314 
315 	ENCR_DECR_CONTEXT    encr_ctx;
316 	ENCR_DECR_CONTEXT    decr_ctx;
317 	DIGEST_CONTEXT	digest_ctx;
318 	SIGN_VERIFY_CONTEXT  sign_ctx;
319 	SIGN_VERIFY_CONTEXT  verify_ctx;
320 
321 	TSS_HCONTEXT	hContext;
322 } SESSION;
323 
324 typedef struct _TEMPLATE
325 {
326 	DL_NODE  *attribute_list;
327 } TEMPLATE;
328 
329 typedef struct _OBJECT
330 {
331 	CK_OBJECT_CLASS   class;
332 	CK_BYTE	 name[8];   // for token objects
333 
334 	SESSION	 *session;   // creator; only for session objects
335 	TEMPLATE *template;
336 	CK_ULONG count_hi;  // only significant for token objects
337 	CK_ULONG count_lo;  // only significant for token objects
338 	CK_ULONG index;
339 } OBJECT;
340 
341 typedef struct _OBJECT_MAP
342 {
343 	CK_OBJECT_HANDLE	handle;
344 	CK_BBOOL is_private;
345 	CK_BBOOL is_session_obj;
346 	SESSION	 *session;
347 	OBJECT   *ptr;
348 } OBJECT_MAP;
349 
350 typedef struct _ATTRIBUTE_PARSE_LIST
351 {
352 	CK_ATTRIBUTE_TYPE type;
353 	void		*ptr;
354 	CK_ULONG	  len;
355 	CK_BBOOL	  found;
356 } ATTRIBUTE_PARSE_LIST;
357 
358 typedef struct _OP_STATE_DATA
359 {
360 	CK_STATE    session_state;
361 	CK_ULONG    active_operation;
362 	CK_ULONG    data_len;
363 } OP_STATE_DATA;
364 
365 typedef struct _TWEAK_VEC
366 {
367 	int   allow_key_mods;
368 } TWEAK_VEC;
369 
370 typedef struct _TOKEN_DATA
371 {
372 	CK_TOKEN_INFO token_info;
373 	CK_BYTE   user_pin_sha[SHA1_DIGEST_LENGTH];
374 	CK_BYTE   so_pin_sha[SHA1_DIGEST_LENGTH];
375 	CK_BYTE   next_token_object_name[8];
376 	TWEAK_VEC tweak_vector;
377 } TOKEN_DATA;
378 
379 typedef struct _RSA_DIGEST_CONTEXT {
380 	DIGEST_CONTEXT hash_context;
381 	CK_BBOOL	flag;
382 } RSA_DIGEST_CONTEXT;
383 
384 typedef struct _MECH_LIST_ELEMENT
385 {
386 	CK_MECHANISM_TYPE    mech_type;
387 	CK_MECHANISM_INFO    mech_info;
388 } MECH_LIST_ELEMENT;
389 
390 struct mech_list_item;
391 
392 struct mech_list_item {
393 	struct mech_list_item *next;
394 	MECH_LIST_ELEMENT element;
395 };
396 
397 struct mech_list_item *
398 find_mech_list_item_for_type(CK_MECHANISM_TYPE type,
399 	struct mech_list_item *head);
400 
401 typedef struct _TOK_OBJ_ENTRY
402 {
403 	CK_BBOOL  deleted;
404 	char	name[8];
405 	CK_ULONG  count_lo;
406 	CK_ULONG  count_hi;
407 } TOK_OBJ_ENTRY;
408 
409 typedef struct _LW_SHM_TYPE
410 {
411 	pthread_mutex_t	mutex;
412 	TOKEN_DATA	nv_token_data;
413 	CK_ULONG	num_priv_tok_obj;
414 	CK_ULONG	num_publ_tok_obj;
415 	CK_BBOOL	priv_loaded;
416 	CK_BBOOL	publ_loaded;
417 	TOK_OBJ_ENTRY  publ_tok_objs[ MAX_TOK_OBJS ];
418 	TOK_OBJ_ENTRY  priv_tok_objs[ MAX_TOK_OBJS ];
419 } LW_SHM_TYPE;
420 
421 typedef unsigned int CK_ULONG_32;
422 typedef CK_ULONG_32 CK_OBJECT_CLASS_32;
423 typedef CK_ULONG_32 CK_ATTRIBUTE_TYPE_32;
424 
425 typedef struct CK_ATTRIBUTE_32 {
426 	CK_ATTRIBUTE_TYPE_32 type;
427 	CK_ULONG_32 pValue;
428 	CK_ULONG_32 ulValueLen;
429 } CK_ATTRIBUTE_32;
430 
431 char *get_tpm_keystore_path();
432 
433 struct messages {
434 	char *msg;
435 };
436 
437 struct token_specific_struct {
438 	CK_BYTE  token_debug_tag[MAXPATHLEN];
439 
440 	CK_RV  (*t_init)(char *, CK_SLOT_ID, TSS_HCONTEXT *);
441 	int  (*t_slot2local)();
442 
443 	CK_RV  (*t_rng)(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
444 	CK_RV  (*t_session)(CK_SLOT_ID);
445 	CK_RV  (*t_final)(TSS_HCONTEXT);
446 	CK_RV (*t_rsa_decrypt)(TSS_HCONTEXT, CK_BYTE *,
447 		CK_ULONG, CK_BYTE *, CK_ULONG *, OBJECT *);
448 
449 	CK_RV (*t_rsa_encrypt)(
450 		TSS_HCONTEXT,
451 		CK_BYTE *, CK_ULONG, CK_BYTE *,
452 		CK_ULONG *, OBJECT *);
453 
454 	CK_RV (*t_rsa_sign)(TSS_HCONTEXT,
455 		CK_BYTE *,
456 		CK_ULONG,
457 		CK_BYTE *,
458 		CK_ULONG *,
459 		OBJECT *);
460 
461 	CK_RV (*t_rsa_verify)(TSS_HCONTEXT,
462 		CK_BYTE *,
463 		CK_ULONG,
464 		CK_BYTE *,
465 		CK_ULONG,
466 		OBJECT *);
467 
468 	CK_RV (*t_rsa_generate_keypair)(TSS_HCONTEXT, TEMPLATE *, TEMPLATE *);
469 
470 	CK_RV (*t_sha_init)(DIGEST_CONTEXT *);
471 
472 	CK_RV (*t_sha_update)(
473 		DIGEST_CONTEXT *,
474 		CK_BYTE	*,
475 		CK_ULONG);
476 
477 	CK_RV (*t_sha_final)(
478 		DIGEST_CONTEXT *,
479 		CK_BYTE *,
480 		CK_ULONG *);
481 	CK_RV (*t_login)(TSS_HCONTEXT, CK_USER_TYPE, CK_BYTE *, CK_ULONG);
482 	CK_RV (*t_logout)(TSS_HCONTEXT);
483 	CK_RV (*t_init_pin)(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
484 	CK_RV (*t_set_pin)(ST_SESSION_HANDLE, CK_BYTE *,
485 		CK_ULONG, CK_BYTE *, CK_ULONG);
486 	CK_RV (*t_verify_so_pin)(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
487 };
488 
489 typedef  struct token_specific_struct token_spec_t;
490 
491 /*
492  * Global Variables
493  */
494 extern void copy_slot_info(CK_SLOT_ID, CK_SLOT_INFO_PTR);
495 
496 extern struct messages err_msg[];
497 
498 extern token_spec_t token_specific;
499 extern CK_BBOOL initialized;
500 extern char *card_function_names[];
501 extern char *total_function_names[];
502 
503 extern MECH_LIST_ELEMENT mech_list[];
504 extern CK_ULONG mech_list_len;
505 
506 extern pthread_mutex_t native_mutex;
507 
508 extern void *xproclock;
509 
510 extern pthread_mutex_t pkcs_mutex, obj_list_mutex,
511 	sess_list_mutex, login_mutex;
512 
513 extern DL_NODE *sess_list;
514 extern DL_NODE *sess_obj_list;
515 extern DL_NODE *publ_token_obj_list;
516 extern DL_NODE *priv_token_obj_list;
517 extern DL_NODE *object_map;
518 
519 extern CK_BYTE so_pin_md5[MD5_DIGEST_LENGTH];
520 extern CK_BYTE user_pin_md5[MD5_DIGEST_LENGTH];
521 
522 extern CK_BYTE default_user_pin_sha[SHA1_DIGEST_LENGTH];
523 extern CK_BYTE default_so_pin_sha[SHA1_DIGEST_LENGTH];
524 extern CK_BYTE default_so_pin_md5[MD5_DIGEST_LENGTH];
525 
526 extern LW_SHM_TYPE *global_shm;
527 
528 extern TOKEN_DATA *nv_token_data;
529 
530 extern CK_ULONG next_object_handle;
531 extern CK_ULONG next_session_handle;
532 
533 extern CK_STATE global_login_state;
534 
535 extern CK_BYTE	ber_AlgIdRSAEncryption[];
536 extern CK_ULONG	ber_AlgIdRSAEncryptionLen;
537 extern CK_BYTE	ber_rsaEncryption[];
538 extern CK_ULONG	ber_rsaEncryptionLen;
539 extern CK_BYTE	ber_idDSA[];
540 extern CK_ULONG	ber_idDSALen;
541 
542 extern CK_BYTE ber_md5WithRSAEncryption[];
543 extern CK_ULONG ber_md5WithRSAEncryptionLen;
544 extern CK_BYTE ber_sha1WithRSAEncryption[];
545 extern CK_ULONG ber_sha1WithRSAEncryptionLen;
546 extern CK_BYTE ber_AlgMd5[];
547 extern CK_ULONG ber_AlgMd5Len;
548 extern CK_BYTE ber_AlgSha1[];
549 extern CK_ULONG ber_AlgSha1Len;
550 
551 extern CK_C_INITIALIZE_ARGS cinit_args;
552 
553 /*
554  * Function Prototypes
555  */
556 void *attach_shared_memory();
557 void  detach_shared_memory(char *);
558 
559 int API_Initialized();
560 void Terminate_All_Process_Sessions();
561 int API_Register();
562 void API_UnRegister();
563 
564 void CreateXProcLock(void *);
565 int XProcLock(void *);
566 int XProcUnLock(void *);
567 
568 void _init(void);
569 void loginit();
570 void logterm();
571 void logit(int, char *, ...);
572 void AddToSessionList(Session_Struct_t *);
573 void RemoveFromSessionList(Session_Struct_t *);
574 
575 int Valid_Session(Session_Struct_t *, ST_SESSION_T *);
576 
577 CK_BBOOL pin_expired(CK_SESSION_INFO *, CK_FLAGS);
578 CK_BBOOL pin_locked(CK_SESSION_INFO *, CK_FLAGS);
579 void set_login_flags(CK_USER_TYPE, CK_FLAGS *);
580 
581 extern void init_slot_info(TOKEN_DATA *);
582 
583 CK_RV update_migration_data(TSS_HCONTEXT,
584 	TSS_HKEY, TSS_HKEY, char *, char *, BYTE *, BYTE *);
585 CK_RV token_rng(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
586 
587 TSS_RESULT set_public_modulus(TSS_HCONTEXT, TSS_HKEY,
588     unsigned long, unsigned char *);
589 TSS_RESULT open_tss_context(TSS_HCONTEXT *);
590 CK_RV token_get_tpm_info(TSS_HCONTEXT, TOKEN_DATA *);
591 
592 CK_RV clock_set_default_attributes(TEMPLATE *);
593 CK_RV clock_check_required_attributes(TEMPLATE *, CK_ULONG);
594 CK_RV clock_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
595 
596 CK_RV counter_set_default_attributes(TEMPLATE *);
597 CK_RV counter_check_required_attributes(TEMPLATE *, CK_ULONG);
598 CK_RV counter_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
599 
600 CK_RV compute_next_token_obj_name(CK_BYTE *, CK_BYTE *);
601 
602 CK_RV save_token_object(TSS_HCONTEXT, OBJECT *);
603 CK_RV save_public_token_object(OBJECT *);
604 CK_RV save_private_token_object(TSS_HCONTEXT, OBJECT *);
605 
606 CK_RV load_public_token_objects(void);
607 CK_RV load_private_token_objects(TSS_HCONTEXT);
608 
609 CK_RV reload_token_object(TSS_HCONTEXT, OBJECT *);
610 
611 CK_RV delete_token_object(OBJECT *);
612 
613 CK_RV init_token_data(TSS_HCONTEXT, TOKEN_DATA *);
614 CK_RV load_token_data(TSS_HCONTEXT, TOKEN_DATA *);
615 CK_RV save_token_data(TOKEN_DATA *);
616 void copy_slot_info(CK_SLOT_ID, CK_SLOT_INFO_PTR);
617 
618 CK_RV compute_sha(CK_BYTE *, CK_ULONG, CK_BYTE *);
619 
620 CK_RV parity_is_odd(CK_BYTE);
621 
622 CK_RV build_attribute(CK_ATTRIBUTE_TYPE,
623 	CK_BYTE *, CK_ULONG, CK_ATTRIBUTE **);
624 
625 CK_RV add_pkcs_padding(CK_BYTE *, CK_ULONG, CK_ULONG, CK_ULONG);
626 
627 CK_RV strip_pkcs_padding(CK_BYTE *, CK_ULONG, CK_ULONG *);
628 
629 CK_RV remove_leading_zeros(CK_ATTRIBUTE *);
630 
631 CK_RV rsa_pkcs_encrypt(
632 	SESSION *,
633 	CK_BBOOL,
634 	ENCR_DECR_CONTEXT *,
635 	CK_BYTE *,
636 	CK_ULONG,
637 	CK_BYTE *,
638 	CK_ULONG *);
639 
640 CK_RV rsa_pkcs_decrypt(SESSION *,
641 	CK_BBOOL,
642 	ENCR_DECR_CONTEXT *,
643 	CK_BYTE *,
644 	CK_ULONG,
645 	CK_BYTE *,
646 	CK_ULONG *);
647 
648 CK_RV rsa_pkcs_sign(SESSION *,
649 	CK_BBOOL,
650 	SIGN_VERIFY_CONTEXT *,
651 	CK_BYTE *,
652 	CK_ULONG,
653 	CK_BYTE *,
654 	CK_ULONG *);
655 
656 CK_RV rsa_pkcs_verify(SESSION *,
657 	SIGN_VERIFY_CONTEXT *,
658 	CK_BYTE *,
659 	CK_ULONG,
660 	CK_BYTE *,
661 	CK_ULONG);
662 
663 CK_RV rsa_pkcs_verify_recover(SESSION *,
664 	CK_BBOOL,
665 	SIGN_VERIFY_CONTEXT *,
666 	CK_BYTE *,
667 	CK_ULONG,
668 	CK_BYTE *,
669 	CK_ULONG *);
670 
671 CK_RV rsa_hash_pkcs_sign(SESSION *,
672 	CK_BBOOL,
673 	SIGN_VERIFY_CONTEXT *,
674 	CK_BYTE *,
675 	CK_ULONG,
676 	CK_BYTE *,
677 	CK_ULONG *);
678 
679 CK_RV rsa_hash_pkcs_verify(SESSION *,
680 	SIGN_VERIFY_CONTEXT *,
681 	CK_BYTE *,
682 	CK_ULONG,
683 	CK_BYTE *,
684 	CK_ULONG);
685 
686 CK_RV rsa_hash_pkcs_sign_update(SESSION *,
687 	SIGN_VERIFY_CONTEXT *,
688 	CK_BYTE *,
689 	CK_ULONG);
690 
691 CK_RV rsa_hash_pkcs_verify_update(SESSION *,
692 	SIGN_VERIFY_CONTEXT *,
693 	CK_BYTE *,
694 	CK_ULONG);
695 
696 CK_RV rsa_hash_pkcs_sign_final(SESSION *,
697 	CK_BBOOL,
698 	SIGN_VERIFY_CONTEXT *,
699 	CK_BYTE *,
700 	CK_ULONG *);
701 
702 CK_RV rsa_hash_pkcs_verify_final(SESSION *,
703 	SIGN_VERIFY_CONTEXT *,
704 	CK_BYTE *,
705 	CK_ULONG);
706 
707 
708 CK_RV ckm_rsa_key_pair_gen(TSS_HCONTEXT, TEMPLATE *, TEMPLATE *);
709 
710 CK_RV sha1_hash(SESSION *, CK_BBOOL,
711 	DIGEST_CONTEXT *,
712 	CK_BYTE *, CK_ULONG,
713 	CK_BYTE *, CK_ULONG *);
714 
715 CK_RV sha1_hmac_sign(SESSION *, CK_BBOOL,
716 	SIGN_VERIFY_CONTEXT *,
717 	CK_BYTE *,
718 	CK_ULONG,
719 	CK_BYTE *,
720 	CK_ULONG *);
721 
722 CK_RV sha1_hmac_verify(SESSION *,
723 	SIGN_VERIFY_CONTEXT *,
724 	CK_BYTE *,
725 	CK_ULONG,
726 	CK_BYTE *,
727 	CK_ULONG);
728 
729 CK_RV md5_hash(SESSION *, CK_BBOOL,
730 	DIGEST_CONTEXT *,
731 	CK_BYTE *, CK_ULONG,
732 	CK_BYTE *, CK_ULONG *);
733 
734 CK_RV md5_hmac_sign(SESSION *, CK_BBOOL,
735 	SIGN_VERIFY_CONTEXT *,
736 	CK_BYTE *,
737 	CK_ULONG,
738 	CK_BYTE *,
739 	CK_ULONG *);
740 
741 CK_RV md5_hmac_verify(SESSION *,
742 	SIGN_VERIFY_CONTEXT *,
743 	CK_BYTE *,
744 	CK_ULONG,
745 	CK_BYTE *,
746 	CK_ULONG);
747 
748 DL_NODE *dlist_add_as_first(DL_NODE *, void *);
749 DL_NODE *dlist_add_as_last(DL_NODE *, void *);
750 DL_NODE *dlist_find(DL_NODE *, void *);
751 DL_NODE *dlist_get_first(DL_NODE *);
752 DL_NODE *dlist_get_last(DL_NODE *);
753 	CK_ULONG dlist_length(DL_NODE *);
754 DL_NODE *dlist_next(DL_NODE *);
755 DL_NODE *dlist_prev(DL_NODE *);
756 void dlist_purge(DL_NODE *);
757 DL_NODE *dlist_remove_node(DL_NODE *, DL_NODE *);
758 
759 CK_RV attach_shm(void);
760 CK_RV detach_shm(void);
761 
762 // encryption manager routines
763 //
764 CK_RV encr_mgr_init(SESSION *,
765 	ENCR_DECR_CONTEXT *,
766 	CK_ULONG,
767 	CK_MECHANISM *,
768 	CK_OBJECT_HANDLE);
769 
770 CK_RV encr_mgr_cleanup(ENCR_DECR_CONTEXT *);
771 
772 CK_RV encr_mgr_encrypt(SESSION *, CK_BBOOL,
773 	ENCR_DECR_CONTEXT *,
774 	CK_BYTE *, CK_ULONG,
775 	CK_BYTE *, CK_ULONG *);
776 
777 CK_RV decr_mgr_init(SESSION *,
778 	ENCR_DECR_CONTEXT *,
779 	CK_ULONG,
780 	CK_MECHANISM *,
781 	CK_OBJECT_HANDLE);
782 
783 CK_RV decr_mgr_cleanup(ENCR_DECR_CONTEXT *);
784 
785 CK_RV decr_mgr_decrypt(SESSION *, CK_BBOOL,
786 	ENCR_DECR_CONTEXT *,
787 	CK_BYTE *, CK_ULONG,
788 	CK_BYTE *, CK_ULONG *);
789 
790 CK_RV digest_mgr_cleanup(DIGEST_CONTEXT *);
791 
792 CK_RV digest_mgr_init(SESSION *,
793 	DIGEST_CONTEXT *,
794 	CK_MECHANISM *);
795 
796 CK_RV digest_mgr_digest(SESSION *, CK_BBOOL,
797 	DIGEST_CONTEXT *,
798 	CK_BYTE *, CK_ULONG,
799 	CK_BYTE *, CK_ULONG *);
800 
801 CK_RV digest_mgr_digest_update(SESSION *,
802 	DIGEST_CONTEXT *,
803 	CK_BYTE *, CK_ULONG);
804 
805 CK_RV digest_mgr_digest_key(SESSION *,
806 	DIGEST_CONTEXT *,
807 	CK_OBJECT_HANDLE);
808 
809 CK_RV digest_mgr_digest_final(SESSION *,
810 	DIGEST_CONTEXT *,
811 	CK_BYTE *, CK_ULONG *);
812 
813 CK_RV key_mgr_generate_key_pair(SESSION *,
814 	CK_MECHANISM *,
815 	CK_ATTRIBUTE *, CK_ULONG,
816 	CK_ATTRIBUTE *, CK_ULONG,
817 	CK_OBJECT_HANDLE *,
818 	CK_OBJECT_HANDLE *);
819 
820 CK_RV key_mgr_wrap_key(SESSION *,
821 	CK_BBOOL,
822 	CK_MECHANISM *,
823 	CK_OBJECT_HANDLE,
824 	CK_OBJECT_HANDLE,
825 	CK_BYTE *,
826 	CK_ULONG *);
827 
828 CK_RV key_mgr_unwrap_key(SESSION *,
829 	CK_MECHANISM *,
830 	CK_ATTRIBUTE *,
831 	CK_ULONG,
832 	CK_BYTE *,
833 	CK_ULONG,
834 	CK_OBJECT_HANDLE,
835 	CK_OBJECT_HANDLE *);
836 
837 CK_RV sign_mgr_init(SESSION *,
838 	SIGN_VERIFY_CONTEXT *,
839 	CK_MECHANISM *,
840 	CK_BBOOL,
841 	CK_OBJECT_HANDLE);
842 
843 CK_RV sign_mgr_cleanup(SIGN_VERIFY_CONTEXT *);
844 
845 CK_RV sign_mgr_sign(SESSION *,
846 	CK_BBOOL,
847 	SIGN_VERIFY_CONTEXT *,
848 	CK_BYTE *,
849 	CK_ULONG,
850 	CK_BYTE *,
851 	CK_ULONG *);
852 
853 CK_RV sign_mgr_sign_recover(SESSION *,
854 	CK_BBOOL,
855 	SIGN_VERIFY_CONTEXT *,
856 	CK_BYTE *,
857 	CK_ULONG,
858 	CK_BYTE *,
859 	CK_ULONG *);
860 
861 CK_RV sign_mgr_sign_final(SESSION *,
862 	CK_BBOOL,
863 	SIGN_VERIFY_CONTEXT *,
864 	CK_BYTE *,
865 	CK_ULONG *);
866 
867 CK_RV sign_mgr_sign_update(SESSION *,
868 	SIGN_VERIFY_CONTEXT *,
869 	CK_BYTE *,
870 	CK_ULONG);
871 
872 CK_RV verify_mgr_init(SESSION *,
873 	SIGN_VERIFY_CONTEXT *,
874 	CK_MECHANISM *,
875 	CK_BBOOL,
876 	CK_OBJECT_HANDLE);
877 
878 CK_RV verify_mgr_cleanup(SIGN_VERIFY_CONTEXT *);
879 
880 CK_RV verify_mgr_verify(SESSION *,
881 	SIGN_VERIFY_CONTEXT *,
882 	CK_BYTE *,
883 	CK_ULONG,
884 	CK_BYTE *,
885 	CK_ULONG);
886 
887 CK_RV verify_mgr_verify_recover(SESSION *,
888 	CK_BBOOL,
889 	SIGN_VERIFY_CONTEXT *,
890 	CK_BYTE *,
891 	CK_ULONG,
892 	CK_BYTE *,
893 	CK_ULONG *);
894 
895 CK_RV verify_mgr_verify_update(SESSION *,
896 	SIGN_VERIFY_CONTEXT *,
897 	CK_BYTE *,
898 	CK_ULONG);
899 
900 CK_RV verify_mgr_verify_final(SESSION *,
901 	SIGN_VERIFY_CONTEXT *,
902 	CK_BYTE *,
903 	CK_ULONG);
904 
905 
906 // session manager routines
907 //
908 CK_RV session_mgr_close_all_sessions(void);
909 CK_RV session_mgr_close_session(SESSION *);
910 SESSION *session_mgr_find(CK_SESSION_HANDLE);
911 CK_RV session_mgr_login_all(CK_USER_TYPE);
912 CK_RV session_mgr_logout_all(void);
913 CK_RV session_mgr_new(CK_ULONG, SESSION **);
914 
915 CK_BBOOL session_mgr_readonly_exists(void);
916 CK_BBOOL session_mgr_so_session_exists(void);
917 CK_BBOOL session_mgr_user_session_exists(void);
918 CK_BBOOL session_mgr_public_session_exists(void);
919 
920 CK_RV session_mgr_get_op_state(SESSION *, CK_BBOOL,
921 	CK_BYTE *, CK_ULONG *);
922 
923 CK_RV session_mgr_set_op_state(SESSION *,
924 	CK_OBJECT_HANDLE, CK_OBJECT_HANDLE, CK_BYTE *);
925 
926 CK_RV object_mgr_add(SESSION *,
927 	CK_ATTRIBUTE *, CK_ULONG, CK_OBJECT_HANDLE *);
928 
929 CK_RV object_mgr_add_to_map(SESSION *, OBJECT *, CK_OBJECT_HANDLE *);
930 
931 CK_RV object_mgr_add_to_shm(OBJECT *);
932 CK_RV object_mgr_del_from_shm(OBJECT *);
933 
934 CK_RV object_mgr_copy(SESSION *,
935 	CK_ATTRIBUTE *, CK_ULONG, CK_OBJECT_HANDLE,
936 	CK_OBJECT_HANDLE *);
937 
938 CK_RV object_mgr_create_final(SESSION *,
939 	OBJECT *, CK_OBJECT_HANDLE *);
940 
941 CK_RV object_mgr_create_skel(SESSION *,
942 	CK_ATTRIBUTE *, CK_ULONG, CK_ULONG,
943 	CK_ULONG, CK_ULONG, OBJECT **);
944 
945 CK_RV object_mgr_destroy_object(SESSION *, CK_OBJECT_HANDLE);
946 
947 CK_RV object_mgr_destroy_token_objects(TSS_HCONTEXT);
948 
949 CK_RV object_mgr_find_in_map1(TSS_HCONTEXT, CK_OBJECT_HANDLE, OBJECT **);
950 
951 CK_RV object_mgr_find_in_map2(TSS_HCONTEXT, OBJECT *, CK_OBJECT_HANDLE *);
952 
953 CK_RV object_mgr_find_init(SESSION *, CK_ATTRIBUTE *, CK_ULONG);
954 
955 CK_RV object_mgr_find_build_list(SESSION *,
956 	CK_ATTRIBUTE *,
957 	CK_ULONG,
958 	DL_NODE *,
959 	CK_BBOOL public_only);
960 
961 CK_RV object_mgr_find_final(SESSION *);
962 
963 CK_RV object_mgr_get_attribute_values(SESSION *,
964 	CK_OBJECT_HANDLE,
965 	CK_ATTRIBUTE *,
966 	CK_ULONG);
967 
968 CK_RV object_mgr_get_object_size(TSS_HCONTEXT, CK_OBJECT_HANDLE,
969 	CK_ULONG *);
970 
971 CK_BBOOL object_mgr_invalidate_handle1(CK_OBJECT_HANDLE handle);
972 
973 CK_BBOOL object_mgr_invalidate_handle2(OBJECT *);
974 
975 CK_BBOOL object_mgr_purge_session_objects(SESSION *, SESS_OBJ_TYPE);
976 
977 CK_BBOOL object_mgr_purge_token_objects(TSS_HCONTEXT);
978 
979 CK_BBOOL object_mgr_purge_private_token_objects(TSS_HCONTEXT);
980 
981 CK_RV object_mgr_remove_from_map(CK_OBJECT_HANDLE);
982 
983 CK_RV object_mgr_restore_obj(CK_BYTE *, OBJECT *);
984 
985 CK_RV object_mgr_set_attribute_values(SESSION *,
986 	CK_OBJECT_HANDLE,
987 	CK_ATTRIBUTE *,
988 	CK_ULONG);
989 
990 CK_BBOOL object_mgr_purge_map(SESSION *, SESS_OBJ_TYPE);
991 
992 CK_RV object_create(CK_ATTRIBUTE *, CK_ULONG, OBJECT **);
993 
994 CK_RV object_create_skel(CK_ATTRIBUTE *,
995 	CK_ULONG,
996 	CK_ULONG,
997 	CK_ULONG,
998 	CK_ULONG,
999 	OBJECT **);
1000 
1001 CK_RV object_copy(CK_ATTRIBUTE *,
1002 	CK_ULONG,
1003 	OBJECT *,
1004 	OBJECT **);
1005 
1006 CK_RV object_flatten(OBJECT *,
1007 	CK_BYTE **,
1008 	CK_ULONG *);
1009 
1010 CK_BBOOL object_free(OBJECT *);
1011 
1012 CK_RV object_get_attribute_values(OBJECT *,
1013 	CK_ATTRIBUTE *,
1014 	CK_ULONG);
1015 
1016 CK_ULONG object_get_size(OBJECT *);
1017 
1018 CK_RV object_restore(CK_BYTE *,
1019 	OBJECT **,
1020 	CK_BBOOL replace);
1021 
1022 CK_RV object_set_attribute_values(OBJECT *,
1023 	CK_ATTRIBUTE *,
1024 	CK_ULONG);
1025 
1026 CK_BBOOL object_is_modifiable(OBJECT *);
1027 CK_BBOOL object_is_private(OBJECT *);
1028 CK_BBOOL object_is_public(OBJECT *);
1029 CK_BBOOL object_is_token_object(OBJECT *);
1030 CK_BBOOL object_is_session_object(OBJECT *);
1031 
1032 CK_BBOOL is_attribute_defined(CK_ATTRIBUTE_TYPE);
1033 
1034 CK_RV template_add_attributes(TEMPLATE *,
1035 	CK_ATTRIBUTE *, CK_ULONG);
1036 
1037 CK_RV template_add_default_attributes(TEMPLATE *,
1038 	CK_ULONG,
1039 	CK_ULONG,
1040 	CK_ULONG);
1041 
1042 CK_BBOOL template_attribute_find(TEMPLATE *,
1043 	CK_ATTRIBUTE_TYPE, CK_ATTRIBUTE **);
1044 
1045 void template_attribute_find_multiple(TEMPLATE *,
1046 	ATTRIBUTE_PARSE_LIST *,
1047 	CK_ULONG);
1048 
1049 CK_BBOOL template_check_exportability(TEMPLATE *, CK_ATTRIBUTE_TYPE type);
1050 
1051 CK_RV template_check_required_attributes(TEMPLATE *,
1052 	CK_ULONG, CK_ULONG, CK_ULONG);
1053 
1054 CK_RV template_check_required_base_attributes(TEMPLATE *,
1055 	CK_ULONG);
1056 
1057 CK_BBOOL template_compare(CK_ATTRIBUTE *,
1058 	CK_ULONG, TEMPLATE *);
1059 
1060 CK_RV template_copy(TEMPLATE *, TEMPLATE *);
1061 
1062 CK_RV template_flatten(TEMPLATE *, CK_BYTE *);
1063 
1064 CK_RV template_free(TEMPLATE *);
1065 
1066 CK_BBOOL template_get_class(TEMPLATE *, CK_ULONG *, CK_ULONG *);
1067 
1068 CK_ULONG template_get_count(TEMPLATE *);
1069 
1070 CK_ULONG template_get_size(TEMPLATE *);
1071 CK_ULONG template_get_compressed_size(TEMPLATE *);
1072 
1073 CK_RV template_set_default_common_attributes(TEMPLATE *);
1074 
1075 CK_RV template_merge(TEMPLATE *, TEMPLATE **);
1076 
1077 CK_RV template_update_attribute(TEMPLATE *, CK_ATTRIBUTE *);
1078 
1079 CK_RV template_unflatten(TEMPLATE **, CK_BYTE *, CK_ULONG);
1080 
1081 CK_RV template_validate_attribute(TEMPLATE *,
1082 	CK_ATTRIBUTE *, CK_ULONG, CK_ULONG, CK_ULONG);
1083 
1084 CK_RV template_validate_attributes(TEMPLATE *,
1085 	CK_ULONG, CK_ULONG, CK_ULONG);
1086 
1087 CK_RV template_validate_base_attribute(TEMPLATE *,
1088 	CK_ATTRIBUTE *, CK_ULONG);
1089 
1090 
1091 // DATA OBJECT ROUTINES
1092 //
1093 CK_RV data_object_check_required_attributes(TEMPLATE *, CK_ULONG);
1094 CK_RV data_object_set_default_attributes(TEMPLATE *, CK_ULONG);
1095 CK_RV data_object_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1096 
1097 // CERTIFICATE ROUTINES
1098 CK_RV cert_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1099 
1100 CK_RV cert_x509_check_required_attributes(TEMPLATE *, CK_ULONG);
1101 CK_RV cert_x509_set_default_attributes(TEMPLATE *, CK_ULONG);
1102 CK_RV cert_x509_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1103 CK_RV cert_vendor_check_required_attributes(TEMPLATE *, CK_ULONG);
1104 CK_RV cert_vendor_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1105 
1106 //
1107 // KEY ROUTINES
1108 //
1109 CK_RV key_object_check_required_attributes(TEMPLATE *, CK_ULONG);
1110 CK_RV key_object_set_default_attributes(TEMPLATE *, CK_ULONG);
1111 CK_RV key_object_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1112 
1113 CK_RV publ_key_check_required_attributes(TEMPLATE *, CK_ULONG);
1114 CK_RV publ_key_set_default_attributes(TEMPLATE *, CK_ULONG);
1115 CK_RV publ_key_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1116 
1117 CK_RV priv_key_check_required_attributes(TEMPLATE *, CK_ULONG);
1118 CK_RV priv_key_set_default_attributes(TEMPLATE *, CK_ULONG);
1119 CK_RV priv_key_unwrap(TEMPLATE *, CK_ULONG, CK_BYTE *, CK_ULONG);
1120 CK_RV priv_key_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1121 
1122 	CK_BBOOL secret_key_check_exportability(CK_ATTRIBUTE_TYPE type);
1123 CK_RV secret_key_check_required_attributes(TEMPLATE *, CK_ULONG);
1124 CK_RV secret_key_set_default_attributes(TEMPLATE *, CK_ULONG);
1125 CK_RV secret_key_unwrap(TEMPLATE *, CK_ULONG, CK_BYTE *, CK_ULONG,
1126 	CK_BBOOL fromend);
1127 CK_RV secret_key_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *,
1128 	CK_ULONG);
1129 
1130 // rsa routines
1131 //
1132 CK_RV rsa_publ_check_required_attributes(TEMPLATE *, CK_ULONG);
1133 CK_RV rsa_publ_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1134 CK_RV rsa_publ_set_default_attributes(TEMPLATE *, CK_ULONG);
1135 	CK_BBOOL rsa_priv_check_exportability(CK_ATTRIBUTE_TYPE type);
1136 CK_RV rsa_priv_check_required_attributes(TEMPLATE *, CK_ULONG);
1137 CK_RV rsa_priv_set_default_attributes(TEMPLATE *, CK_ULONG);
1138 CK_RV rsa_priv_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1139 CK_RV rsa_priv_wrap_get_data(TEMPLATE *, CK_BBOOL, CK_BYTE **, CK_ULONG *);
1140 CK_RV rsa_priv_unwrap(TEMPLATE *, CK_BYTE *, CK_ULONG);
1141 
1142 // Generic secret key routines
1143 CK_RV generic_secret_check_required_attributes(TEMPLATE *, CK_ULONG);
1144 CK_RV generic_secret_set_default_attributes(TEMPLATE *, CK_ULONG);
1145 CK_RV generic_secret_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1146 CK_RV generic_secret_wrap_get_data(TEMPLATE *, CK_BBOOL,
1147 	CK_BYTE **, CK_ULONG *);
1148 
1149 CK_RV generic_secret_unwrap(TEMPLATE *, CK_BYTE *, CK_ULONG, CK_BBOOL fromend);
1150 
1151 CK_RV tpm_encrypt_data(TSS_HCONTEXT,
1152 	TSS_HKEY, CK_BYTE *, CK_ULONG, CK_BYTE *, CK_ULONG *);
1153 
1154 CK_RV tpm_decrypt_data(TSS_HCONTEXT,
1155 	TSS_HKEY, CK_BYTE *, CK_ULONG, CK_BYTE *, CK_ULONG *);
1156 
1157 CK_ULONG ber_encode_INTEGER(CK_BBOOL,
1158 	CK_BYTE **, CK_ULONG *, CK_BYTE *, CK_ULONG);
1159 
1160 CK_RV ber_decode_INTEGER(CK_BYTE *,
1161 	CK_BYTE **, CK_ULONG *, CK_ULONG *);
1162 
1163 CK_RV ber_encode_OCTET_STRING(CK_BBOOL,
1164 	CK_BYTE **, CK_ULONG *, CK_BYTE *, CK_ULONG);
1165 
1166 CK_RV ber_decode_OCTET_STRING(CK_BYTE *,
1167 	CK_BYTE **, CK_ULONG *, CK_ULONG *);
1168 
1169 CK_RV ber_encode_SEQUENCE(CK_BBOOL,
1170 	CK_BYTE **, CK_ULONG *, CK_BYTE *, CK_ULONG);
1171 
1172 CK_RV ber_decode_SEQUENCE(CK_BYTE *,
1173 	CK_BYTE **, CK_ULONG *, CK_ULONG *);
1174 
1175 CK_RV ber_encode_PrivateKeyInfo(CK_BBOOL,
1176 	CK_BYTE **, CK_ULONG *, CK_BYTE *,
1177 	CK_ULONG, CK_BYTE *, CK_ULONG);
1178 
1179 CK_RV ber_decode_PrivateKeyInfo(CK_BYTE *,
1180 	CK_ULONG, CK_BYTE **, CK_ULONG *, CK_BYTE **);
1181 
1182 CK_RV ber_encode_RSAPrivateKey(CK_BBOOL,
1183 	CK_BYTE **, CK_ULONG *, CK_ATTRIBUTE *,
1184 	CK_ATTRIBUTE *, CK_ATTRIBUTE *, CK_ATTRIBUTE *,
1185 	CK_ATTRIBUTE *, CK_ATTRIBUTE *, CK_ATTRIBUTE *,
1186 	CK_ATTRIBUTE *);
1187 
1188 CK_RV ber_decode_RSAPrivateKey(CK_BYTE *,
1189 	CK_ULONG, CK_ATTRIBUTE **, CK_ATTRIBUTE **,
1190 	CK_ATTRIBUTE **, CK_ATTRIBUTE **, CK_ATTRIBUTE **,
1191 	CK_ATTRIBUTE **, CK_ATTRIBUTE **, CK_ATTRIBUTE **);
1192 
1193 
1194 CK_RV ber_encode_DSAPrivateKey(CK_BBOOL,
1195 	CK_BYTE **, CK_ULONG *, CK_ATTRIBUTE *,
1196 	CK_ATTRIBUTE *, CK_ATTRIBUTE *, CK_ATTRIBUTE *);
1197 
1198 CK_RV ber_decode_DSAPrivateKey(CK_BYTE *,
1199 	CK_ULONG, CK_ATTRIBUTE **, CK_ATTRIBUTE **,
1200 	CK_ATTRIBUTE **, CK_ATTRIBUTE **);
1201 
1202 #define	APPID	"TPM_STDLL"
1203 
1204 /* log to stdout */
1205 #define	LogMessage(dest, priority, layer, fmt, ...) \
1206 	(void) fprintf(dest, "%s %s %s:%d " fmt "\n", (char *)priority, \
1207 		(char *)layer, (char *)__FILE__,\
1208 		(int)__LINE__, __VA_ARGS__);
1209 
1210 #define	LogMessage1(dest, priority, layer, data) \
1211 	(void) fprintf(dest, "%s %s %s:%d %s\n", priority, layer, __FILE__, \
1212 	__LINE__, data);
1213 
1214 /* Debug logging */
1215 #ifdef DEBUG
1216 #define	LogDebug(fmt, ...) LogMessage(stdout, "LOG_DEBUG", APPID, \
1217 	fmt, __VA_ARGS__)
1218 
1219 #define	LogDebug1(data) LogMessage1(stdout, "LOG_DEBUG", APPID, data)
1220 
1221 /* Error logging */
1222 #define	LogError(fmt, ...) LogMessage(stderr, "LOG_ERR", APPID,\
1223 	"ERROR: " fmt, __VA_ARGS__)
1224 
1225 #define	LogError1(data) LogMessage1(stderr, "LOG_ERR", APPID,\
1226 	"ERROR: " data)
1227 
1228 /* Warn logging */
1229 #define	LogWarn(fmt, ...) LogMessage(stdout, "LOG_WARNING", APPID,\
1230 	"WARNING: " fmt, __VA_ARGS__)
1231 
1232 #define	LogWarn1(data) LogMessage1(stdout, "LOG_WARNING", APPID,\
1233 	"WARNING: " data)
1234 
1235 /* Info Logging */
1236 #define	LogInfo(fmt, ...) LogMessage(stdout, "LOG_INFO", APPID,\
1237 	fmt, __VA_ARGS__)
1238 
1239 #define	LogInfo1(data) LogMessage1(stdout, "LOG_INFO", APPID, data)
1240 
1241 #define	st_err_log(...) LogMessage(stderr, "ST MSG", APPID,\
1242 	"", __VA_ARGS__)
1243 #else
1244 #define	LogDebug(...)
1245 #define	LogDebug1(...)
1246 #define	LogBlob(...)
1247 #define	LogError(...)
1248 #define	LogError1(...)
1249 #define	LogWarn(...)
1250 #define	LogWarn1(...)
1251 #define	LogInfo(...)
1252 #define	LogInfo1(...)
1253 #define	st_err_log(...)
1254 #endif
1255 
1256 /*
1257  * CK_FUNCTION_LIST is a structure holding a Cryptoki spec
1258  * version and pointers of appropriate types to all the
1259  * Cryptoki functions
1260  */
1261 
1262 /* CK_FUNCTION_LIST is new for v2.0 */
1263 
1264 typedef CK_RV
1265 	(CK_PTR ST_C_Initialize)
1266 	(void *ppFunctionList, CK_SLOT_ID slotID, CK_CHAR_PTR pCorrelator);
1267 typedef CK_RV
1268 	(CK_PTR  ST_C_Finalize)
1269 	(CK_VOID_PTR pReserved);
1270 typedef CK_RV
1271 	(CK_PTR  ST_C_Terminate)();
1272 typedef CK_RV
1273 	(CK_PTR  ST_C_GetInfo)
1274 	(CK_INFO_PTR pInfo);
1275 typedef CK_RV
1276 	(CK_PTR  ST_C_GetFunctionList)
1277 	(CK_FUNCTION_LIST_PTR_PTR ppFunctionList);
1278 typedef CK_RV
1279 	(CK_PTR  ST_C_GetSlotList)
1280 	(CK_BBOOL tokenPresent, CK_SLOT_ID_PTR pSlotList,
1281 	CK_ULONG_PTR pusCount);
1282 typedef CK_RV
1283 	(CK_PTR  ST_C_GetSlotInfo)
1284 	(CK_SLOT_ID slotID, CK_SLOT_INFO_PTR pInfo);
1285 typedef CK_RV
1286 	(CK_PTR  ST_C_GetTokenInfo)
1287 	(CK_SLOT_ID slotID, CK_TOKEN_INFO_PTR pInfo);
1288 typedef CK_RV
1289 	(CK_PTR  ST_C_GetMechanismList)
1290 	(CK_SLOT_ID slotID, CK_MECHANISM_TYPE_PTR pMechanismList,
1291 	CK_ULONG_PTR pusCount);
1292 typedef CK_RV
1293 	(CK_PTR  ST_C_GetMechanismInfo)
1294 	(CK_SLOT_ID slotID, CK_MECHANISM_TYPE type,
1295 	CK_MECHANISM_INFO_PTR pInfo);
1296 typedef CK_RV
1297 	(CK_PTR  ST_C_InitToken)
1298 	(CK_SLOT_ID slotID, CK_CHAR_PTR pPin, CK_ULONG usPinLen,
1299 	CK_CHAR_PTR pLabel);
1300 typedef CK_RV
1301 	(CK_PTR  ST_C_InitPIN)
1302 	(ST_SESSION_T hSession, CK_CHAR_PTR pPin,
1303 	CK_ULONG usPinLen);
1304 typedef CK_RV
1305 	(CK_PTR  ST_C_SetPIN)
1306 	(ST_SESSION_T hSession, CK_CHAR_PTR pOldPin,
1307 	CK_ULONG usOldLen, CK_CHAR_PTR pNewPin,
1308 	CK_ULONG usNewLen);
1309 
1310 typedef CK_RV
1311 	(CK_PTR  ST_C_OpenSession)
1312 	(CK_SLOT_ID slotID, CK_FLAGS flags,
1313 	CK_SESSION_HANDLE_PTR phSession);
1314 
1315 typedef CK_RV
1316 	(CK_PTR  ST_C_CloseSession)
1317 	(ST_SESSION_T hSession);
1318 typedef CK_RV
1319 	(CK_PTR  ST_C_CloseAllSessions)
1320 	(CK_SLOT_ID slotID);
1321 typedef CK_RV
1322 	(CK_PTR  ST_C_GetSessionInfo)
1323 	(ST_SESSION_T hSession, CK_SESSION_INFO_PTR pInfo);
1324 typedef CK_RV
1325 	(CK_PTR  ST_C_GetOperationState)
1326 	(ST_SESSION_T hSession, CK_BYTE_PTR pOperationState,
1327 	CK_ULONG_PTR pulOperationStateLen);
1328 typedef CK_RV
1329 	(CK_PTR  ST_C_SetOperationState)
1330 	(ST_SESSION_T hSession, CK_BYTE_PTR pOperationState,
1331 	CK_ULONG ulOperationStateLen,
1332 	CK_OBJECT_HANDLE hEncryptionKey,
1333 	CK_OBJECT_HANDLE hAuthenticationKey);
1334 typedef CK_RV
1335 	(CK_PTR  ST_C_Login)(ST_SESSION_T hSession,
1336 	CK_USER_TYPE userType, CK_CHAR_PTR pPin,
1337 	CK_ULONG usPinLen);
1338 typedef CK_RV
1339 	(CK_PTR  ST_C_Logout)(ST_SESSION_T hSession);
1340 typedef CK_RV
1341 	(CK_PTR  ST_C_CreateObject)
1342 	(ST_SESSION_T hSession, CK_ATTRIBUTE_PTR pTemplate,
1343 	CK_ULONG usCount, CK_OBJECT_HANDLE_PTR phObject);
1344 
1345 typedef CK_RV
1346 	(CK_PTR  ST_C_CopyObject)
1347 	(ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1348 	CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount,
1349 	CK_OBJECT_HANDLE_PTR phNewObject);
1350 typedef CK_RV
1351 	(CK_PTR  ST_C_DestroyObject)
1352 	(ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject);
1353 typedef CK_RV
1354 	(CK_PTR  ST_C_GetObjectSize)
1355 	(ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1356 	CK_ULONG_PTR pusSize);
1357 typedef CK_RV
1358 	(CK_PTR  ST_C_GetAttributeValue)
1359 	(ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1360 	CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount);
1361 typedef CK_RV
1362 	(CK_PTR  ST_C_SetAttributeValue)
1363 	(ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1364 	CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount);
1365 typedef CK_RV
1366 	(CK_PTR  ST_C_FindObjectsInit)
1367 	(ST_SESSION_T hSession, CK_ATTRIBUTE_PTR pTemplate,
1368 	CK_ULONG usCount);
1369 typedef CK_RV
1370 	(CK_PTR  ST_C_FindObjects)
1371 	(ST_SESSION_T hSession,
1372 	CK_OBJECT_HANDLE_PTR phObject, CK_ULONG usMaxObjectCount,
1373 	CK_ULONG_PTR pusObjectCount);
1374 typedef CK_RV
1375 	(CK_PTR  ST_C_FindObjectsFinal)
1376 	(ST_SESSION_T hSession);
1377 typedef CK_RV
1378 	(CK_PTR  ST_C_EncryptInit)
1379 	(ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1380 	CK_OBJECT_HANDLE hKey);
1381 typedef CK_RV
1382 	(CK_PTR  ST_C_Encrypt)
1383 	(ST_SESSION_T hSession, CK_BYTE_PTR pData,
1384 	CK_ULONG usDataLen, CK_BYTE_PTR pEncryptedData,
1385 	CK_ULONG_PTR pusEncryptedDataLen);
1386 typedef CK_RV
1387 	(CK_PTR  ST_C_EncryptUpdate)
1388 	(ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1389 	CK_ULONG usPartLen, CK_BYTE_PTR pEncryptedPart,
1390 	CK_ULONG_PTR pusEncryptedPartLen);
1391 typedef CK_RV
1392 	(CK_PTR  ST_C_EncryptFinal)
1393 	(ST_SESSION_T hSession,
1394 	CK_BYTE_PTR pLastEncryptedPart,
1395 	CK_ULONG_PTR pusLastEncryptedPartLen);
1396 typedef CK_RV
1397 	(CK_PTR  ST_C_DecryptInit)
1398 	(ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1399 	CK_OBJECT_HANDLE hKey);
1400 typedef CK_RV
1401 	(CK_PTR  ST_C_Decrypt)
1402 	(ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedData,
1403 	CK_ULONG usEncryptedDataLen, CK_BYTE_PTR pData,
1404 	CK_ULONG_PTR pusDataLen);
1405 typedef CK_RV
1406 	(CK_PTR  ST_C_DecryptUpdate)
1407 	(ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedPart,
1408 	CK_ULONG usEncryptedPartLen, CK_BYTE_PTR pPart,
1409 	CK_ULONG_PTR pusPartLen);
1410 typedef CK_RV
1411 	(CK_PTR  ST_C_DecryptFinal)
1412 	(ST_SESSION_T hSession, CK_BYTE_PTR pLastPart,
1413 	CK_ULONG_PTR pusLastPartLen);
1414 typedef CK_RV
1415 	(CK_PTR  ST_C_DigestInit)
1416 	(ST_SESSION_T hSession,
1417 	CK_MECHANISM_PTR pMechanism);
1418 typedef CK_RV
1419 	(CK_PTR  ST_C_Digest)
1420 	(ST_SESSION_T hSession, CK_BYTE_PTR pData,
1421 	CK_ULONG usDataLen, CK_BYTE_PTR pDigest,
1422 	CK_ULONG_PTR pusDigestLen);
1423 typedef CK_RV
1424 	(CK_PTR  ST_C_DigestUpdate)
1425 	(ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1426 	CK_ULONG usPartLen);
1427 typedef CK_RV
1428 	(CK_PTR  ST_C_DigestKey)
1429 	(ST_SESSION_T hSession, CK_OBJECT_HANDLE hKey);
1430 typedef CK_RV
1431 	(CK_PTR  ST_C_DigestFinal)
1432 	(ST_SESSION_T hSession, CK_BYTE_PTR pDigest,
1433 	CK_ULONG_PTR pusDigestLen);
1434 typedef CK_RV
1435 	(CK_PTR  ST_C_SignInit)
1436 	(ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1437 	CK_OBJECT_HANDLE hKey);
1438 typedef CK_RV
1439 	(CK_PTR  ST_C_Sign)
1440 	(ST_SESSION_T hSession, CK_BYTE_PTR pData,
1441 	CK_ULONG usDataLen, CK_BYTE_PTR pSignature,
1442 	CK_ULONG_PTR pusSignatureLen);
1443 typedef CK_RV
1444 	(CK_PTR  ST_C_SignUpdate)
1445 	(ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1446 	CK_ULONG usPartLen);
1447 typedef CK_RV
1448 	(CK_PTR  ST_C_SignFinal)
1449 	(ST_SESSION_T hSession, CK_BYTE_PTR pSignature,
1450 	CK_ULONG_PTR pusSignatureLen);
1451 typedef CK_RV
1452 	(CK_PTR  ST_C_SignRecoverInit)
1453 	(ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1454 	CK_OBJECT_HANDLE hKey);
1455 typedef CK_RV
1456 	(CK_PTR  ST_C_SignRecover)
1457 	(ST_SESSION_T hSession, CK_BYTE_PTR pData,
1458 	CK_ULONG usDataLen, CK_BYTE_PTR pSignature,
1459 	CK_ULONG_PTR pusSignatureLen);
1460 typedef CK_RV
1461 	(CK_PTR  ST_C_VerifyInit)
1462 	(ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1463 	CK_OBJECT_HANDLE hKey);
1464 typedef CK_RV
1465 	(CK_PTR  ST_C_Verify)
1466 	(ST_SESSION_T hSession, CK_BYTE_PTR pData,
1467 	CK_ULONG usDataLen, CK_BYTE_PTR pSignature,
1468 	CK_ULONG usSignatureLen);
1469 typedef CK_RV
1470 	(CK_PTR  ST_C_VerifyUpdate)
1471 	(ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1472 	CK_ULONG usPartLen);
1473 typedef CK_RV
1474 	(CK_PTR  ST_C_VerifyFinal)
1475 	(ST_SESSION_T hSession, CK_BYTE_PTR pSignature,
1476 	CK_ULONG usSignatureLen);
1477 typedef CK_RV
1478 	(CK_PTR  ST_C_VerifyRecoverInit)
1479 	(ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1480 	CK_OBJECT_HANDLE hKey);
1481 typedef CK_RV
1482 	(CK_PTR  ST_C_VerifyRecover)
1483 	(ST_SESSION_T hSession, CK_BYTE_PTR pSignature,
1484 	CK_ULONG usSignatureLen, CK_BYTE_PTR pData,
1485 	CK_ULONG_PTR pusDataLen);
1486 typedef CK_RV
1487 	(CK_PTR  ST_C_DigestEncryptUpdate)
1488 	(ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1489 	CK_ULONG ulPartLen, CK_BYTE_PTR pEncryptedPart,
1490 	CK_ULONG_PTR pulEncryptedPartLen);
1491 typedef CK_RV
1492 	(CK_PTR  ST_C_DecryptDigestUpdate)
1493 	(ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedPart,
1494 	CK_ULONG ulEncryptedPartLen, CK_BYTE_PTR pPart,
1495 	CK_ULONG_PTR pulPartLen);
1496 typedef CK_RV
1497 	(CK_PTR  ST_C_SignEncryptUpdate)
1498 	(ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1499 	CK_ULONG ulPartLen, CK_BYTE_PTR pEncryptedPart,
1500 	CK_ULONG_PTR pulEncryptedPartLen);
1501 typedef CK_RV
1502 	(CK_PTR  ST_C_DecryptVerifyUpdate)
1503 	(ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedPart,
1504 	CK_ULONG ulEncryptedPartLen, CK_BYTE_PTR pPart,
1505 	CK_ULONG_PTR pulPartLen);
1506 typedef CK_RV
1507 	(CK_PTR  ST_C_GenerateKey)
1508 	(ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1509 	CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount,
1510 	CK_OBJECT_HANDLE_PTR phKey);
1511 typedef CK_RV
1512 	(CK_PTR  ST_C_GenerateKeyPair)
1513 	(ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1514 	CK_ATTRIBUTE_PTR pPublicKeyTemplate,
1515 	CK_ULONG usPublicKeyAttributeCount,
1516 	CK_ATTRIBUTE_PTR pPrivateKeyTemplate,
1517 	CK_ULONG usPrivateKeyAttributeCount,
1518 	CK_OBJECT_HANDLE_PTR phPrivateKey,
1519 	CK_OBJECT_HANDLE_PTR phPublicKey);
1520 typedef CK_RV
1521 	(CK_PTR  ST_C_WrapKey)
1522 	(ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1523 	CK_OBJECT_HANDLE hWrappingKey, CK_OBJECT_HANDLE hKey,
1524 	CK_BYTE_PTR pWrappedKey, CK_ULONG_PTR pusWrappedKeyLen);
1525 typedef CK_RV
1526 	(CK_PTR  ST_C_UnwrapKey)
1527 	(ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1528 	CK_OBJECT_HANDLE hUnwrappingKey, CK_BYTE_PTR pWrappedKey,
1529 	CK_ULONG usWrappedKeyLen, CK_ATTRIBUTE_PTR pTemplate,
1530 	CK_ULONG usAttributeCount, CK_OBJECT_HANDLE_PTR phKey);
1531 typedef CK_RV
1532 	(CK_PTR  ST_C_DeriveKey)
1533 	(ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1534 	CK_OBJECT_HANDLE hBaseKey, CK_ATTRIBUTE_PTR pTemplate,
1535 	CK_ULONG usAttributeCount, CK_OBJECT_HANDLE_PTR phKey);
1536 typedef CK_RV
1537 	(CK_PTR  ST_C_SeedRandom)
1538 	(ST_SESSION_T hSession, CK_BYTE_PTR pSeed,
1539 	CK_ULONG usSeedLen);
1540 typedef CK_RV
1541 	(CK_PTR  ST_C_GenerateRandom)
1542 	(ST_SESSION_T hSession, CK_BYTE_PTR pRandomData,
1543 	CK_ULONG usRandomLen);
1544 typedef CK_RV
1545 	(CK_PTR  ST_C_GetFunctionStatus)
1546 	(ST_SESSION_T hSession);
1547 typedef CK_RV
1548 	(CK_PTR  ST_C_CancelFunction)
1549 	(ST_SESSION_T hSession);
1550 typedef CK_RV
1551 	(CK_PTR  ST_Notify)
1552 	(ST_SESSION_T hSession, CK_NOTIFICATION event,
1553 	CK_VOID_PTR pApplication);
1554 typedef CK_RV
1555 	(CK_PTR  ST_C_WaitForSlotEvent)
1556 	(CK_FLAGS flags, CK_SLOT_ID_PTR pSlot,
1557 	CK_VOID_PTR pReserved);
1558 
1559 
1560 
1561 struct ST_FCN_LIST {
1562 
1563 	ST_C_Initialize ST_Initialize;
1564 	ST_C_Finalize ST_Finalize;
1565 
1566 	ST_C_GetTokenInfo ST_GetTokenInfo;
1567 	ST_C_GetMechanismList ST_GetMechanismList;
1568 	ST_C_GetMechanismInfo ST_GetMechanismInfo;
1569 	ST_C_InitToken ST_InitToken;
1570 	ST_C_InitPIN ST_InitPIN;
1571 	ST_C_SetPIN ST_SetPIN;
1572 
1573 	ST_C_OpenSession ST_OpenSession;
1574 	ST_C_CloseSession ST_CloseSession;
1575 	ST_C_GetSessionInfo ST_GetSessionInfo;
1576 	ST_C_GetOperationState ST_GetOperationState;
1577 	ST_C_SetOperationState ST_SetOperationState;
1578 	ST_C_Login ST_Login;
1579 	ST_C_Logout ST_Logout;
1580 
1581 	ST_C_CreateObject ST_CreateObject;
1582 	ST_C_CopyObject ST_CopyObject;
1583 	ST_C_DestroyObject ST_DestroyObject;
1584 	ST_C_GetObjectSize ST_GetObjectSize;
1585 	ST_C_GetAttributeValue ST_GetAttributeValue;
1586 	ST_C_SetAttributeValue ST_SetAttributeValue;
1587 	ST_C_FindObjectsInit ST_FindObjectsInit;
1588 	ST_C_FindObjects ST_FindObjects;
1589 	ST_C_FindObjectsFinal ST_FindObjectsFinal;
1590 
1591 
1592 	ST_C_EncryptInit ST_EncryptInit;
1593 	ST_C_Encrypt ST_Encrypt;
1594 	ST_C_EncryptUpdate ST_EncryptUpdate;
1595 	ST_C_EncryptFinal ST_EncryptFinal;
1596 	ST_C_DecryptInit ST_DecryptInit;
1597 	ST_C_Decrypt ST_Decrypt;
1598 	ST_C_DecryptUpdate ST_DecryptUpdate;
1599 	ST_C_DecryptFinal ST_DecryptFinal;
1600 	ST_C_DigestInit ST_DigestInit;
1601 	ST_C_Digest ST_Digest;
1602 	ST_C_DigestUpdate ST_DigestUpdate;
1603 	ST_C_DigestKey ST_DigestKey;
1604 	ST_C_DigestFinal ST_DigestFinal;
1605 	ST_C_SignInit ST_SignInit;
1606 	ST_C_Sign ST_Sign;
1607 	ST_C_SignUpdate ST_SignUpdate;
1608 	ST_C_SignFinal ST_SignFinal;
1609 	ST_C_SignRecoverInit ST_SignRecoverInit;
1610 	ST_C_SignRecover ST_SignRecover;
1611 	ST_C_VerifyInit ST_VerifyInit;
1612 	ST_C_Verify ST_Verify;
1613 	ST_C_VerifyUpdate ST_VerifyUpdate;
1614 	ST_C_VerifyFinal ST_VerifyFinal;
1615 	ST_C_VerifyRecoverInit ST_VerifyRecoverInit;
1616 	ST_C_VerifyRecover ST_VerifyRecover;
1617 	ST_C_DigestEncryptUpdate ST_DigestEncryptUpdate;
1618 	ST_C_DecryptDigestUpdate ST_DecryptDigestUpdate;
1619 	ST_C_SignEncryptUpdate ST_SignEncryptUpdate;
1620 	ST_C_DecryptVerifyUpdate ST_DecryptVerifyUpdate;
1621 	ST_C_GenerateKey ST_GenerateKey;
1622 	ST_C_GenerateKeyPair ST_GenerateKeyPair;
1623 	ST_C_WrapKey ST_WrapKey;
1624 	ST_C_UnwrapKey ST_UnwrapKey;
1625 	ST_C_DeriveKey ST_DeriveKey;
1626 	ST_C_SeedRandom ST_SeedRandom;
1627 	ST_C_GenerateRandom ST_GenerateRandom;
1628 	ST_C_GetFunctionStatus ST_GetFunctionStatus;
1629 	ST_C_CancelFunction ST_CancelFunction;
1630 };
1631 
1632 typedef struct ST_FCN_LIST  STDLL_FcnList_t;
1633 
1634 #endif /* _TPMTOK_INT_H */
1635