xref: /illumos-gate/usr/src/uts/common/sys/crypto/common.h (revision 1d9df23bbf4124f12ca7832d6eaaa600e0aa8eda)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 /*
22  * Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
23  * Use is subject to license terms.
24  */
25 
26 #ifndef _SYS_CRYPTO_COMMON_H
27 #define	_SYS_CRYPTO_COMMON_H
28 
29 #pragma ident	"%Z%%M%	%I%	%E% SMI"
30 
31 /*
32  * Header file for the common data structures of the cryptographic framework
33  */
34 
35 #ifdef __cplusplus
36 extern "C" {
37 #endif
38 
39 #include <sys/types.h>
40 #include <sys/uio.h>
41 #include <sys/stream.h>
42 #include <sys/mutex.h>
43 #include <sys/condvar.h>
44 
45 
46 /* Cryptographic Mechanisms */
47 
48 #define	CRYPTO_MAX_MECH_NAME 32
49 typedef char crypto_mech_name_t[CRYPTO_MAX_MECH_NAME];
50 
51 typedef uint64_t crypto_mech_type_t;
52 
53 typedef struct crypto_mechanism {
54 	crypto_mech_type_t	cm_type;	/* mechanism type */
55 	caddr_t			cm_param;	/* mech. parameter */
56 	size_t			cm_param_len;	/* mech. parameter len */
57 } crypto_mechanism_t;
58 
59 #ifdef  _SYSCALL32
60 
61 typedef struct crypto_mechanism32 {
62 	crypto_mech_type_t	cm_type;	/* mechanism type */
63 	caddr32_t		cm_param;	/* mech. parameter */
64 	size32_t		cm_param_len;   /* mech. parameter len */
65 } crypto_mechanism32_t;
66 
67 #endif  /* _SYSCALL32 */
68 
69 #ifdef _KERNEL
70 /* CK_AES_CTR_PARAMS provides parameters to the CKM_AES_CTR mechanism */
71 typedef struct CK_AES_CTR_PARAMS {
72 	ulong_t	ulCounterBits;
73 	uint8_t cb[16];
74 } CK_AES_CTR_PARAMS;
75 #endif
76 
77 /* CK_AES_CCM_PARAMS provides parameters to the CKM_AES_CCM mechanism */
78 typedef struct CK_AES_CCM_PARAMS {
79 	ulong_t ulMACSize;
80 	ulong_t ulNonceSize;
81 	ulong_t ulAuthDataSize;
82 	ulong_t ulDataSize; /* used for plaintext or ciphertext */
83 	uchar_t *nonce;
84 	uchar_t *authData;
85 } CK_AES_CCM_PARAMS;
86 
87 #ifdef _KERNEL
88 /*
89  * CK_ECDH1_DERIVE_PARAMS provides the parameters to the
90  * CKM_ECDH1_KEY_DERIVE mechanism
91  */
92 typedef struct CK_ECDH1_DERIVE_PARAMS {
93 	ulong_t		kdf;
94 	ulong_t		ulSharedDataLen;
95 	uchar_t		*pSharedData;
96 	ulong_t		ulPublicDataLen;
97 	uchar_t		*pPublicData;
98 } CK_ECDH1_DERIVE_PARAMS;
99 #endif
100 
101 #ifdef _KERNEL
102 #ifdef  _SYSCALL32
103 
104 /* needed for 32-bit applications running on 64-bit kernels */
105 typedef struct CK_AES_CTR_PARAMS32 {
106 	uint32_t ulCounterBits;
107 	uint8_t cb[16];
108 } CK_AES_CTR_PARAMS32;
109 
110 /* needed for 32-bit applications running on 64-bit kernels */
111 typedef struct CK_AES_CCM_PARAMS32 {
112 	uint32_t ulMACSize;
113 	uint32_t ulNonceSize;
114 	uint32_t ulAuthDataSize;
115 	uint32_t ulDataSize;
116 	caddr32_t nonce;
117 	caddr32_t authData;
118 } CK_AES_CCM_PARAMS32;
119 
120 typedef struct CK_ECDH1_DERIVE_PARAMS32 {
121 	uint32_t	kdf;
122 	uint32_t	ulSharedDataLen;
123 	caddr32_t	pSharedData;
124 	uint32_t	ulPublicDataLen;
125 	caddr32_t	pPublicData;
126 } CK_ECDH1_DERIVE_PARAMS32;
127 
128 #endif  /* _SYSCALL32 */
129 #endif /* _KERNEL */
130 
131 /*
132  * The measurement unit bit flag for a mechanism's minimum or maximum key size.
133  * The unit are mechanism dependant.  It can be in bits or in bytes.
134  */
135 typedef uint32_t crypto_keysize_unit_t;
136 
137 /*
138  * The following bit flags are valid in cm_mech_flags field in
139  * the crypto_mech_info_t structure of the SPI.
140  *
141  * Only the first two bit flags are valid in mi_keysize_unit
142  * field in the crypto_mechanism_info_t structure of the API.
143  */
144 #define	CRYPTO_KEYSIZE_UNIT_IN_BITS	0x00000001
145 #define	CRYPTO_KEYSIZE_UNIT_IN_BYTES	0x00000002
146 #define	CRYPTO_CAN_SHARE_OPSTATE	0x00000004 /* supports sharing */
147 
148 
149 /* Mechanisms supported out-of-the-box */
150 #define	SUN_CKM_MD4			"CKM_MD4"
151 #define	SUN_CKM_MD5			"CKM_MD5"
152 #define	SUN_CKM_MD5_HMAC		"CKM_MD5_HMAC"
153 #define	SUN_CKM_MD5_HMAC_GENERAL	"CKM_MD5_HMAC_GENERAL"
154 #define	SUN_CKM_SHA1			"CKM_SHA_1"
155 #define	SUN_CKM_SHA1_HMAC		"CKM_SHA_1_HMAC"
156 #define	SUN_CKM_SHA1_HMAC_GENERAL	"CKM_SHA_1_HMAC_GENERAL"
157 #define	SUN_CKM_SHA256			"CKM_SHA256"
158 #define	SUN_CKM_SHA256_HMAC		"CKM_SHA256_HMAC"
159 #define	SUN_CKM_SHA256_HMAC_GENERAL	"CKM_SHA256_HMAC_GENERAL"
160 #define	SUN_CKM_SHA384			"CKM_SHA384"
161 #define	SUN_CKM_SHA384_HMAC		"CKM_SHA384_HMAC"
162 #define	SUN_CKM_SHA384_HMAC_GENERAL	"CKM_SHA384_HMAC_GENERAL"
163 #define	SUN_CKM_SHA512			"CKM_SHA512"
164 #define	SUN_CKM_SHA512_HMAC		"CKM_SHA512_HMAC"
165 #define	SUN_CKM_SHA512_HMAC_GENERAL	"CKM_SHA512_HMAC_GENERAL"
166 #define	SUN_CKM_DES_CBC			"CKM_DES_CBC"
167 #define	SUN_CKM_DES3_CBC		"CKM_DES3_CBC"
168 #define	SUN_CKM_DES_ECB			"CKM_DES_ECB"
169 #define	SUN_CKM_DES3_ECB		"CKM_DES3_ECB"
170 #define	SUN_CKM_BLOWFISH_CBC		"CKM_BLOWFISH_CBC"
171 #define	SUN_CKM_BLOWFISH_ECB		"CKM_BLOWFISH_ECB"
172 #define	SUN_CKM_AES_CBC			"CKM_AES_CBC"
173 #define	SUN_CKM_AES_ECB			"CKM_AES_ECB"
174 #define	SUN_CKM_AES_CTR			"CKM_AES_CTR"
175 #define	SUN_CKM_AES_CCM			"CKM_AES_CCM"
176 #define	SUN_CKM_RC4			"CKM_RC4"
177 #define	SUN_CKM_RSA_PKCS		"CKM_RSA_PKCS"
178 #define	SUN_CKM_RSA_X_509		"CKM_RSA_X_509"
179 #define	SUN_CKM_MD5_RSA_PKCS		"CKM_MD5_RSA_PKCS"
180 #define	SUN_CKM_SHA1_RSA_PKCS		"CKM_SHA1_RSA_PKCS"
181 #define	SUN_CKM_SHA256_RSA_PKCS		"CKM_SHA256_RSA_PKCS"
182 #define	SUN_CKM_SHA384_RSA_PKCS		"CKM_SHA384_RSA_PKCS"
183 #define	SUN_CKM_SHA512_RSA_PKCS		"CKM_SHA512_RSA_PKCS"
184 #define	SUN_CKM_EC_KEY_PAIR_GEN		"CKM_EC_KEY_PAIR_GEN"
185 #define	SUN_CKM_ECDH1_DERIVE		"CKM_ECDH1_DERIVE"
186 #define	SUN_CKM_ECDSA_SHA1		"CKM_ECDSA_SHA1"
187 #define	SUN_CKM_ECDSA			"CKM_ECDSA"
188 
189 /* Shared operation context format for CKM_RC4 */
190 typedef struct {
191 #if defined(__amd64)
192 	uint32_t i, j;
193 	uint32_t arr[256];
194 #else
195 	uchar_t arr[256];
196 	uchar_t i, j;
197 #endif /* __amd64 */
198 	uint64_t pad;		/* For 64-bit alignment */
199 } arcfour_state_t;
200 
201 /* Data arguments of cryptographic operations */
202 
203 typedef enum crypto_data_format {
204 	CRYPTO_DATA_RAW = 1,
205 	CRYPTO_DATA_UIO,
206 	CRYPTO_DATA_MBLK
207 } crypto_data_format_t;
208 
209 typedef struct crypto_data {
210 	crypto_data_format_t	cd_format;	/* Format identifier	*/
211 	off_t			cd_offset;	/* Offset from the beginning */
212 	size_t			cd_length;	/* # of bytes in use */
213 	caddr_t			cd_miscdata;	/* ancillary data */
214 	union {
215 		/* Raw format */
216 		iovec_t cdu_raw;		/* Pointer and length	    */
217 
218 		/* uio scatter-gather format */
219 		uio_t	*cdu_uio;
220 
221 		/* mblk scatter-gather format */
222 		mblk_t	*cdu_mp;		/* The mblk chain */
223 
224 	} cdu;	/* Crypto Data Union */
225 } crypto_data_t;
226 
227 #define	cd_raw		cdu.cdu_raw
228 #define	cd_uio		cdu.cdu_uio
229 #define	cd_mp		cdu.cdu_mp
230 
231 typedef struct crypto_dual_data {
232 	crypto_data_t		dd_data;	/* The data */
233 	off_t			dd_offset2;	/* Used by dual operation */
234 	size_t			dd_len2;	/* # of bytes to take	*/
235 } crypto_dual_data_t;
236 
237 #define	dd_format	dd_data.cd_format
238 #define	dd_offset1	dd_data.cd_offset
239 #define	dd_len1		dd_data.cd_length
240 #define	dd_miscdata	dd_data.cd_miscdata
241 #define	dd_raw		dd_data.cd_raw
242 #define	dd_uio		dd_data.cd_uio
243 #define	dd_mp		dd_data.cd_mp
244 
245 /* The keys, and their contents */
246 
247 typedef enum {
248 	CRYPTO_KEY_RAW = 1,	/* ck_data is a cleartext key */
249 	CRYPTO_KEY_REFERENCE,	/* ck_obj_id is an opaque reference */
250 	CRYPTO_KEY_ATTR_LIST	/* ck_attrs is a list of object attributes */
251 } crypto_key_format_t;
252 
253 typedef uint64_t crypto_attr_type_t;
254 
255 /* Attribute types to use for passing a RSA public key or a private key. */
256 #define	SUN_CKA_MODULUS			0x00000120
257 #define	SUN_CKA_MODULUS_BITS		0x00000121
258 #define	SUN_CKA_PUBLIC_EXPONENT		0x00000122
259 #define	SUN_CKA_PRIVATE_EXPONENT	0x00000123
260 #define	SUN_CKA_PRIME_1			0x00000124
261 #define	SUN_CKA_PRIME_2			0x00000125
262 #define	SUN_CKA_EXPONENT_1		0x00000126
263 #define	SUN_CKA_EXPONENT_2		0x00000127
264 #define	SUN_CKA_COEFFICIENT		0x00000128
265 #define	SUN_CKA_PRIME			0x00000130
266 #define	SUN_CKA_SUBPRIME		0x00000131
267 #define	SUN_CKA_BASE			0x00000132
268 
269 #define	CKK_EC			0x00000003
270 #define	CKK_GENERIC_SECRET	0x00000010
271 #define	CKK_RC4			0x00000012
272 #define	CKK_AES			0x0000001F
273 #define	CKK_DES			0x00000013
274 #define	CKK_DES2		0x00000014
275 #define	CKK_DES3		0x00000015
276 
277 #define	CKO_PUBLIC_KEY		0x00000002
278 #define	CKO_PRIVATE_KEY		0x00000003
279 #define	CKA_CLASS		0x00000000
280 #define	CKA_VALUE		0x00000011
281 #define	CKA_KEY_TYPE		0x00000100
282 #define	CKA_VALUE_LEN		0x00000161
283 #define	CKA_EC_PARAMS		0x00000180
284 #define	CKA_EC_POINT		0x00000181
285 
286 typedef uint32_t	crypto_object_id_t;
287 
288 typedef struct crypto_object_attribute {
289 	crypto_attr_type_t	oa_type;	/* attribute type */
290 	caddr_t			oa_value;	/* attribute value */
291 	ssize_t			oa_value_len;	/* length of attribute value */
292 } crypto_object_attribute_t;
293 
294 typedef struct crypto_key {
295 	crypto_key_format_t	ck_format;	/* format identifier */
296 	union {
297 		/* for CRYPTO_KEY_RAW ck_format */
298 		struct {
299 			uint_t	cku_v_length;	/* # of bits in ck_data   */
300 			void	*cku_v_data;	/* ptr to key value */
301 		} cku_key_value;
302 
303 		/* for CRYPTO_KEY_REFERENCE ck_format */
304 		crypto_object_id_t cku_key_id;	/* reference to object key */
305 
306 		/* for CRYPTO_KEY_ATTR_LIST ck_format */
307 		struct {
308 			uint_t cku_a_count;	/* number of attributes */
309 			crypto_object_attribute_t *cku_a_oattr;
310 		} cku_key_attrs;
311 	} cku_data;				/* Crypto Key union */
312 } crypto_key_t;
313 
314 #ifdef  _SYSCALL32
315 
316 typedef struct crypto_object_attribute32 {
317 	uint64_t	oa_type;	/* attribute type */
318 	caddr32_t	oa_value;	/* attribute value */
319 	ssize32_t	oa_value_len;	/* length of attribute value */
320 } crypto_object_attribute32_t;
321 
322 typedef struct crypto_key32 {
323 	crypto_key_format_t	ck_format;	/* format identifier */
324 	union {
325 		/* for CRYPTO_KEY_RAW ck_format */
326 		struct {
327 			uint32_t cku_v_length;	/* # of bytes in ck_data */
328 			caddr32_t cku_v_data;	/* ptr to key value */
329 		} cku_key_value;
330 
331 		/* for CRYPTO_KEY_REFERENCE ck_format */
332 		crypto_object_id_t cku_key_id; /* reference to object key */
333 
334 		/* for CRYPTO_KEY_ATTR_LIST ck_format */
335 		struct {
336 			uint32_t cku_a_count;	/* number of attributes */
337 			caddr32_t cku_a_oattr;
338 		} cku_key_attrs;
339 	} cku_data;				/* Crypto Key union */
340 } crypto_key32_t;
341 
342 #endif  /* _SYSCALL32 */
343 
344 #define	ck_data		cku_data.cku_key_value.cku_v_data
345 #define	ck_length	cku_data.cku_key_value.cku_v_length
346 #define	ck_obj_id	cku_data.cku_key_id
347 #define	ck_count	cku_data.cku_key_attrs.cku_a_count
348 #define	ck_attrs	cku_data.cku_key_attrs.cku_a_oattr
349 
350 /*
351  * Raw key lengths are expressed in number of bits.
352  * The following macro returns the minimum number of
353  * bytes that can contain the specified number of bits.
354  */
355 #define	CRYPTO_BITS2BYTES(n) (((n) + 7) >> 3)
356 
357 /* Providers */
358 
359 typedef enum {
360 	CRYPTO_HW_PROVIDER = 0,
361 	CRYPTO_SW_PROVIDER,
362 	CRYPTO_LOGICAL_PROVIDER
363 } crypto_provider_type_t;
364 
365 typedef uint32_t 	crypto_provider_id_t;
366 #define	KCF_PROVID_INVALID	((uint32_t)-1)
367 
368 typedef struct crypto_provider_entry {
369 	crypto_provider_id_t	pe_provider_id;
370 	uint_t			pe_mechanism_count;
371 } crypto_provider_entry_t;
372 
373 typedef struct crypto_dev_list_entry {
374 	char			le_dev_name[MAXNAMELEN];
375 	uint_t			le_dev_instance;
376 	uint_t			le_mechanism_count;
377 } crypto_dev_list_entry_t;
378 
379 /* User type for authentication ioctls and SPI entry points */
380 
381 typedef enum crypto_user_type {
382 	CRYPTO_SO = 0,
383 	CRYPTO_USER
384 } crypto_user_type_t;
385 
386 /* Version for provider management ioctls and SPI entry points */
387 
388 typedef struct crypto_version {
389 	uchar_t	cv_major;
390 	uchar_t	cv_minor;
391 } crypto_version_t;
392 
393 /* session data structure opaque to the consumer */
394 typedef void *crypto_session_t;
395 
396 /* provider data structure opaque to the consumer */
397 typedef void *crypto_provider_t;
398 
399 /* Limits used by both consumers and providers */
400 #define	CRYPTO_EXT_SIZE_LABEL		32
401 #define	CRYPTO_EXT_SIZE_MANUF		32
402 #define	CRYPTO_EXT_SIZE_MODEL		16
403 #define	CRYPTO_EXT_SIZE_SERIAL		16
404 #define	CRYPTO_EXT_SIZE_TIME		16
405 
406 typedef struct crypto_provider_ext_info {
407 	uchar_t			ei_label[CRYPTO_EXT_SIZE_LABEL];
408 	uchar_t			ei_manufacturerID[CRYPTO_EXT_SIZE_MANUF];
409 	uchar_t			ei_model[CRYPTO_EXT_SIZE_MODEL];
410 	uchar_t			ei_serial_number[CRYPTO_EXT_SIZE_SERIAL];
411 	ulong_t			ei_flags;
412 	ulong_t			ei_max_session_count;
413 	ulong_t			ei_max_pin_len;
414 	ulong_t			ei_min_pin_len;
415 	ulong_t			ei_total_public_memory;
416 	ulong_t			ei_free_public_memory;
417 	ulong_t			ei_total_private_memory;
418 	ulong_t			ei_free_private_memory;
419 	crypto_version_t	ei_hardware_version;
420 	crypto_version_t	ei_firmware_version;
421 	uchar_t			ei_time[CRYPTO_EXT_SIZE_TIME];
422 } crypto_provider_ext_info_t;
423 
424 typedef uint_t		crypto_session_id_t;
425 
426 /*
427  * Common cryptographic status and error codes.
428  */
429 #define	CRYPTO_SUCCESS				0x00000000
430 #define	CRYPTO_CANCEL				0x00000001
431 #define	CRYPTO_HOST_MEMORY			0x00000002
432 #define	CRYPTO_GENERAL_ERROR			0x00000003
433 #define	CRYPTO_FAILED				0x00000004
434 #define	CRYPTO_ARGUMENTS_BAD			0x00000005
435 #define	CRYPTO_ATTRIBUTE_READ_ONLY		0x00000006
436 #define	CRYPTO_ATTRIBUTE_SENSITIVE		0x00000007
437 #define	CRYPTO_ATTRIBUTE_TYPE_INVALID		0x00000008
438 #define	CRYPTO_ATTRIBUTE_VALUE_INVALID		0x00000009
439 #define	CRYPTO_CANCELED				0x0000000A
440 #define	CRYPTO_DATA_INVALID			0x0000000B
441 #define	CRYPTO_DATA_LEN_RANGE			0x0000000C
442 #define	CRYPTO_DEVICE_ERROR			0x0000000D
443 #define	CRYPTO_DEVICE_MEMORY			0x0000000E
444 #define	CRYPTO_DEVICE_REMOVED			0x0000000F
445 #define	CRYPTO_ENCRYPTED_DATA_INVALID		0x00000010
446 #define	CRYPTO_ENCRYPTED_DATA_LEN_RANGE		0x00000011
447 #define	CRYPTO_KEY_HANDLE_INVALID		0x00000012
448 #define	CRYPTO_KEY_SIZE_RANGE			0x00000013
449 #define	CRYPTO_KEY_TYPE_INCONSISTENT		0x00000014
450 #define	CRYPTO_KEY_NOT_NEEDED			0x00000015
451 #define	CRYPTO_KEY_CHANGED			0x00000016
452 #define	CRYPTO_KEY_NEEDED			0x00000017
453 #define	CRYPTO_KEY_INDIGESTIBLE			0x00000018
454 #define	CRYPTO_KEY_FUNCTION_NOT_PERMITTED	0x00000019
455 #define	CRYPTO_KEY_NOT_WRAPPABLE		0x0000001A
456 #define	CRYPTO_KEY_UNEXTRACTABLE		0x0000001B
457 #define	CRYPTO_MECHANISM_INVALID		0x0000001C
458 #define	CRYPTO_MECHANISM_PARAM_INVALID		0x0000001D
459 #define	CRYPTO_OBJECT_HANDLE_INVALID		0x0000001E
460 #define	CRYPTO_OPERATION_IS_ACTIVE		0x0000001F
461 #define	CRYPTO_OPERATION_NOT_INITIALIZED	0x00000020
462 #define	CRYPTO_PIN_INCORRECT			0x00000021
463 #define	CRYPTO_PIN_INVALID			0x00000022
464 #define	CRYPTO_PIN_LEN_RANGE			0x00000023
465 #define	CRYPTO_PIN_EXPIRED			0x00000024
466 #define	CRYPTO_PIN_LOCKED			0x00000025
467 #define	CRYPTO_SESSION_CLOSED			0x00000026
468 #define	CRYPTO_SESSION_COUNT			0x00000027
469 #define	CRYPTO_SESSION_HANDLE_INVALID		0x00000028
470 #define	CRYPTO_SESSION_READ_ONLY		0x00000029
471 #define	CRYPTO_SESSION_EXISTS			0x0000002A
472 #define	CRYPTO_SESSION_READ_ONLY_EXISTS		0x0000002B
473 #define	CRYPTO_SESSION_READ_WRITE_SO_EXISTS	0x0000002C
474 #define	CRYPTO_SIGNATURE_INVALID		0x0000002D
475 #define	CRYPTO_SIGNATURE_LEN_RANGE		0x0000002E
476 #define	CRYPTO_TEMPLATE_INCOMPLETE		0x0000002F
477 #define	CRYPTO_TEMPLATE_INCONSISTENT		0x00000030
478 #define	CRYPTO_UNWRAPPING_KEY_HANDLE_INVALID	0x00000031
479 #define	CRYPTO_UNWRAPPING_KEY_SIZE_RANGE	0x00000032
480 #define	CRYPTO_UNWRAPPING_KEY_TYPE_INCONSISTENT	0x00000033
481 #define	CRYPTO_USER_ALREADY_LOGGED_IN		0x00000034
482 #define	CRYPTO_USER_NOT_LOGGED_IN		0x00000035
483 #define	CRYPTO_USER_PIN_NOT_INITIALIZED		0x00000036
484 #define	CRYPTO_USER_TYPE_INVALID		0x00000037
485 #define	CRYPTO_USER_ANOTHER_ALREADY_LOGGED_IN	0x00000038
486 #define	CRYPTO_USER_TOO_MANY_TYPES		0x00000039
487 #define	CRYPTO_WRAPPED_KEY_INVALID		0x0000003A
488 #define	CRYPTO_WRAPPED_KEY_LEN_RANGE		0x0000003B
489 #define	CRYPTO_WRAPPING_KEY_HANDLE_INVALID	0x0000003C
490 #define	CRYPTO_WRAPPING_KEY_SIZE_RANGE		0x0000003D
491 #define	CRYPTO_WRAPPING_KEY_TYPE_INCONSISTENT	0x0000003E
492 #define	CRYPTO_RANDOM_SEED_NOT_SUPPORTED	0x0000003F
493 #define	CRYPTO_RANDOM_NO_RNG			0x00000040
494 #define	CRYPTO_DOMAIN_PARAMS_INVALID		0x00000041
495 #define	CRYPTO_BUFFER_TOO_SMALL			0x00000042
496 #define	CRYPTO_INFORMATION_SENSITIVE		0x00000043
497 #define	CRYPTO_NOT_SUPPORTED			0x00000044
498 
499 #define	CRYPTO_QUEUED				0x00000045
500 #define	CRYPTO_BUFFER_TOO_BIG			0x00000046
501 #define	CRYPTO_INVALID_CONTEXT			0x00000047
502 #define	CRYPTO_INVALID_MAC			0x00000048
503 #define	CRYPTO_MECH_NOT_SUPPORTED		0x00000049
504 #define	CRYPTO_INCONSISTENT_ATTRIBUTE		0x0000004A
505 #define	CRYPTO_NO_PERMISSION			0x0000004B
506 #define	CRYPTO_INVALID_PROVIDER_ID		0x0000004C
507 #define	CRYPTO_VERSION_MISMATCH			0x0000004D
508 #define	CRYPTO_BUSY				0x0000004E
509 #define	CRYPTO_UNKNOWN_PROVIDER			0x0000004F
510 #define	CRYPTO_MODVERIFICATION_FAILED		0x00000050
511 #define	CRYPTO_OLD_CTX_TEMPLATE			0x00000051
512 #define	CRYPTO_WEAK_KEY				0x00000052
513 
514 /*
515  * Special values that can be used to indicate that information is unavailable
516  * or that there is not practical limit. These values can be used
517  * by fields of the SPI crypto_provider_ext_info(9S) structure.
518  * The value of CRYPTO_UNAVAILABLE_INFO should be the same as
519  * CK_UNAVAILABLE_INFO in the PKCS#11 spec.
520  */
521 #define	CRYPTO_UNAVAILABLE_INFO		((ulong_t)(-1))
522 #define	CRYPTO_EFFECTIVELY_INFINITE	0x0
523 
524 #ifdef __cplusplus
525 }
526 #endif
527 
528 #endif /* _SYS_CRYPTO_COMMON_H */
529