1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 /* 22 * Copyright 2008 Sun Microsystems, Inc. All rights reserved. 23 * Use is subject to license terms. 24 */ 25 26 #ifndef _SYS_CRYPTO_COMMON_H 27 #define _SYS_CRYPTO_COMMON_H 28 29 #pragma ident "%Z%%M% %I% %E% SMI" 30 31 /* 32 * Header file for the common data structures of the cryptographic framework 33 */ 34 35 #ifdef __cplusplus 36 extern "C" { 37 #endif 38 39 #include <sys/types.h> 40 #include <sys/uio.h> 41 #include <sys/stream.h> 42 #include <sys/mutex.h> 43 #include <sys/condvar.h> 44 45 46 /* Cryptographic Mechanisms */ 47 48 #define CRYPTO_MAX_MECH_NAME 32 49 typedef char crypto_mech_name_t[CRYPTO_MAX_MECH_NAME]; 50 51 typedef uint64_t crypto_mech_type_t; 52 53 typedef struct crypto_mechanism { 54 crypto_mech_type_t cm_type; /* mechanism type */ 55 caddr_t cm_param; /* mech. parameter */ 56 size_t cm_param_len; /* mech. parameter len */ 57 } crypto_mechanism_t; 58 59 #ifdef _SYSCALL32 60 61 typedef struct crypto_mechanism32 { 62 crypto_mech_type_t cm_type; /* mechanism type */ 63 caddr32_t cm_param; /* mech. parameter */ 64 size32_t cm_param_len; /* mech. parameter len */ 65 } crypto_mechanism32_t; 66 67 #endif /* _SYSCALL32 */ 68 69 #ifdef _KERNEL 70 /* CK_AES_CTR_PARAMS provides parameters to the CKM_AES_CTR mechanism */ 71 typedef struct CK_AES_CTR_PARAMS { 72 ulong_t ulCounterBits; 73 uint8_t cb[16]; 74 } CK_AES_CTR_PARAMS; 75 #endif 76 77 /* CK_AES_CCM_PARAMS provides parameters to the CKM_AES_CCM mechanism */ 78 typedef struct CK_AES_CCM_PARAMS { 79 ulong_t ulMACSize; 80 ulong_t ulNonceSize; 81 ulong_t ulAuthDataSize; 82 ulong_t ulDataSize; /* used for plaintext or ciphertext */ 83 uchar_t *nonce; 84 uchar_t *authData; 85 } CK_AES_CCM_PARAMS; 86 87 #ifdef _KERNEL 88 /* 89 * CK_ECDH1_DERIVE_PARAMS provides the parameters to the 90 * CKM_ECDH1_KEY_DERIVE mechanism 91 */ 92 typedef struct CK_ECDH1_DERIVE_PARAMS { 93 ulong_t kdf; 94 ulong_t ulSharedDataLen; 95 uchar_t *pSharedData; 96 ulong_t ulPublicDataLen; 97 uchar_t *pPublicData; 98 } CK_ECDH1_DERIVE_PARAMS; 99 #endif 100 101 #ifdef _KERNEL 102 #ifdef _SYSCALL32 103 104 /* needed for 32-bit applications running on 64-bit kernels */ 105 typedef struct CK_AES_CTR_PARAMS32 { 106 uint32_t ulCounterBits; 107 uint8_t cb[16]; 108 } CK_AES_CTR_PARAMS32; 109 110 /* needed for 32-bit applications running on 64-bit kernels */ 111 typedef struct CK_AES_CCM_PARAMS32 { 112 uint32_t ulMACSize; 113 uint32_t ulNonceSize; 114 uint32_t ulAuthDataSize; 115 uint32_t ulDataSize; 116 caddr32_t nonce; 117 caddr32_t authData; 118 } CK_AES_CCM_PARAMS32; 119 120 typedef struct CK_ECDH1_DERIVE_PARAMS32 { 121 uint32_t kdf; 122 uint32_t ulSharedDataLen; 123 caddr32_t pSharedData; 124 uint32_t ulPublicDataLen; 125 caddr32_t pPublicData; 126 } CK_ECDH1_DERIVE_PARAMS32; 127 128 #endif /* _SYSCALL32 */ 129 #endif /* _KERNEL */ 130 131 /* 132 * The measurement unit bit flag for a mechanism's minimum or maximum key size. 133 * The unit are mechanism dependant. It can be in bits or in bytes. 134 */ 135 typedef uint32_t crypto_keysize_unit_t; 136 137 /* 138 * The following bit flags are valid in cm_mech_flags field in 139 * the crypto_mech_info_t structure of the SPI. 140 * 141 * Only the first two bit flags are valid in mi_keysize_unit 142 * field in the crypto_mechanism_info_t structure of the API. 143 */ 144 #define CRYPTO_KEYSIZE_UNIT_IN_BITS 0x00000001 145 #define CRYPTO_KEYSIZE_UNIT_IN_BYTES 0x00000002 146 #define CRYPTO_CAN_SHARE_OPSTATE 0x00000004 /* supports sharing */ 147 148 149 /* Mechanisms supported out-of-the-box */ 150 #define SUN_CKM_MD4 "CKM_MD4" 151 #define SUN_CKM_MD5 "CKM_MD5" 152 #define SUN_CKM_MD5_HMAC "CKM_MD5_HMAC" 153 #define SUN_CKM_MD5_HMAC_GENERAL "CKM_MD5_HMAC_GENERAL" 154 #define SUN_CKM_SHA1 "CKM_SHA_1" 155 #define SUN_CKM_SHA1_HMAC "CKM_SHA_1_HMAC" 156 #define SUN_CKM_SHA1_HMAC_GENERAL "CKM_SHA_1_HMAC_GENERAL" 157 #define SUN_CKM_SHA256 "CKM_SHA256" 158 #define SUN_CKM_SHA256_HMAC "CKM_SHA256_HMAC" 159 #define SUN_CKM_SHA256_HMAC_GENERAL "CKM_SHA256_HMAC_GENERAL" 160 #define SUN_CKM_SHA384 "CKM_SHA384" 161 #define SUN_CKM_SHA384_HMAC "CKM_SHA384_HMAC" 162 #define SUN_CKM_SHA384_HMAC_GENERAL "CKM_SHA384_HMAC_GENERAL" 163 #define SUN_CKM_SHA512 "CKM_SHA512" 164 #define SUN_CKM_SHA512_HMAC "CKM_SHA512_HMAC" 165 #define SUN_CKM_SHA512_HMAC_GENERAL "CKM_SHA512_HMAC_GENERAL" 166 #define SUN_CKM_DES_CBC "CKM_DES_CBC" 167 #define SUN_CKM_DES3_CBC "CKM_DES3_CBC" 168 #define SUN_CKM_DES_ECB "CKM_DES_ECB" 169 #define SUN_CKM_DES3_ECB "CKM_DES3_ECB" 170 #define SUN_CKM_BLOWFISH_CBC "CKM_BLOWFISH_CBC" 171 #define SUN_CKM_BLOWFISH_ECB "CKM_BLOWFISH_ECB" 172 #define SUN_CKM_AES_CBC "CKM_AES_CBC" 173 #define SUN_CKM_AES_ECB "CKM_AES_ECB" 174 #define SUN_CKM_AES_CTR "CKM_AES_CTR" 175 #define SUN_CKM_AES_CCM "CKM_AES_CCM" 176 #define SUN_CKM_RC4 "CKM_RC4" 177 #define SUN_CKM_RSA_PKCS "CKM_RSA_PKCS" 178 #define SUN_CKM_RSA_X_509 "CKM_RSA_X_509" 179 #define SUN_CKM_MD5_RSA_PKCS "CKM_MD5_RSA_PKCS" 180 #define SUN_CKM_SHA1_RSA_PKCS "CKM_SHA1_RSA_PKCS" 181 #define SUN_CKM_SHA256_RSA_PKCS "CKM_SHA256_RSA_PKCS" 182 #define SUN_CKM_SHA384_RSA_PKCS "CKM_SHA384_RSA_PKCS" 183 #define SUN_CKM_SHA512_RSA_PKCS "CKM_SHA512_RSA_PKCS" 184 #define SUN_CKM_EC_KEY_PAIR_GEN "CKM_EC_KEY_PAIR_GEN" 185 #define SUN_CKM_ECDH1_DERIVE "CKM_ECDH1_DERIVE" 186 #define SUN_CKM_ECDSA_SHA1 "CKM_ECDSA_SHA1" 187 #define SUN_CKM_ECDSA "CKM_ECDSA" 188 189 /* Shared operation context format for CKM_RC4 */ 190 typedef struct { 191 #if defined(__amd64) 192 uint32_t i, j; 193 uint32_t arr[256]; 194 #else 195 uchar_t arr[256]; 196 uchar_t i, j; 197 #endif /* __amd64 */ 198 uint64_t pad; /* For 64-bit alignment */ 199 } arcfour_state_t; 200 201 /* Data arguments of cryptographic operations */ 202 203 typedef enum crypto_data_format { 204 CRYPTO_DATA_RAW = 1, 205 CRYPTO_DATA_UIO, 206 CRYPTO_DATA_MBLK 207 } crypto_data_format_t; 208 209 typedef struct crypto_data { 210 crypto_data_format_t cd_format; /* Format identifier */ 211 off_t cd_offset; /* Offset from the beginning */ 212 size_t cd_length; /* # of bytes in use */ 213 caddr_t cd_miscdata; /* ancillary data */ 214 union { 215 /* Raw format */ 216 iovec_t cdu_raw; /* Pointer and length */ 217 218 /* uio scatter-gather format */ 219 uio_t *cdu_uio; 220 221 /* mblk scatter-gather format */ 222 mblk_t *cdu_mp; /* The mblk chain */ 223 224 } cdu; /* Crypto Data Union */ 225 } crypto_data_t; 226 227 #define cd_raw cdu.cdu_raw 228 #define cd_uio cdu.cdu_uio 229 #define cd_mp cdu.cdu_mp 230 231 typedef struct crypto_dual_data { 232 crypto_data_t dd_data; /* The data */ 233 off_t dd_offset2; /* Used by dual operation */ 234 size_t dd_len2; /* # of bytes to take */ 235 } crypto_dual_data_t; 236 237 #define dd_format dd_data.cd_format 238 #define dd_offset1 dd_data.cd_offset 239 #define dd_len1 dd_data.cd_length 240 #define dd_miscdata dd_data.cd_miscdata 241 #define dd_raw dd_data.cd_raw 242 #define dd_uio dd_data.cd_uio 243 #define dd_mp dd_data.cd_mp 244 245 /* The keys, and their contents */ 246 247 typedef enum { 248 CRYPTO_KEY_RAW = 1, /* ck_data is a cleartext key */ 249 CRYPTO_KEY_REFERENCE, /* ck_obj_id is an opaque reference */ 250 CRYPTO_KEY_ATTR_LIST /* ck_attrs is a list of object attributes */ 251 } crypto_key_format_t; 252 253 typedef uint64_t crypto_attr_type_t; 254 255 /* Attribute types to use for passing a RSA public key or a private key. */ 256 #define SUN_CKA_MODULUS 0x00000120 257 #define SUN_CKA_MODULUS_BITS 0x00000121 258 #define SUN_CKA_PUBLIC_EXPONENT 0x00000122 259 #define SUN_CKA_PRIVATE_EXPONENT 0x00000123 260 #define SUN_CKA_PRIME_1 0x00000124 261 #define SUN_CKA_PRIME_2 0x00000125 262 #define SUN_CKA_EXPONENT_1 0x00000126 263 #define SUN_CKA_EXPONENT_2 0x00000127 264 #define SUN_CKA_COEFFICIENT 0x00000128 265 #define SUN_CKA_PRIME 0x00000130 266 #define SUN_CKA_SUBPRIME 0x00000131 267 #define SUN_CKA_BASE 0x00000132 268 269 #define CKK_EC 0x00000003 270 #define CKK_GENERIC_SECRET 0x00000010 271 #define CKK_RC4 0x00000012 272 #define CKK_AES 0x0000001F 273 #define CKK_DES 0x00000013 274 #define CKK_DES2 0x00000014 275 #define CKK_DES3 0x00000015 276 277 #define CKO_PUBLIC_KEY 0x00000002 278 #define CKO_PRIVATE_KEY 0x00000003 279 #define CKA_CLASS 0x00000000 280 #define CKA_VALUE 0x00000011 281 #define CKA_KEY_TYPE 0x00000100 282 #define CKA_VALUE_LEN 0x00000161 283 #define CKA_EC_PARAMS 0x00000180 284 #define CKA_EC_POINT 0x00000181 285 286 typedef uint32_t crypto_object_id_t; 287 288 typedef struct crypto_object_attribute { 289 crypto_attr_type_t oa_type; /* attribute type */ 290 caddr_t oa_value; /* attribute value */ 291 ssize_t oa_value_len; /* length of attribute value */ 292 } crypto_object_attribute_t; 293 294 typedef struct crypto_key { 295 crypto_key_format_t ck_format; /* format identifier */ 296 union { 297 /* for CRYPTO_KEY_RAW ck_format */ 298 struct { 299 uint_t cku_v_length; /* # of bits in ck_data */ 300 void *cku_v_data; /* ptr to key value */ 301 } cku_key_value; 302 303 /* for CRYPTO_KEY_REFERENCE ck_format */ 304 crypto_object_id_t cku_key_id; /* reference to object key */ 305 306 /* for CRYPTO_KEY_ATTR_LIST ck_format */ 307 struct { 308 uint_t cku_a_count; /* number of attributes */ 309 crypto_object_attribute_t *cku_a_oattr; 310 } cku_key_attrs; 311 } cku_data; /* Crypto Key union */ 312 } crypto_key_t; 313 314 #ifdef _SYSCALL32 315 316 typedef struct crypto_object_attribute32 { 317 uint64_t oa_type; /* attribute type */ 318 caddr32_t oa_value; /* attribute value */ 319 ssize32_t oa_value_len; /* length of attribute value */ 320 } crypto_object_attribute32_t; 321 322 typedef struct crypto_key32 { 323 crypto_key_format_t ck_format; /* format identifier */ 324 union { 325 /* for CRYPTO_KEY_RAW ck_format */ 326 struct { 327 uint32_t cku_v_length; /* # of bytes in ck_data */ 328 caddr32_t cku_v_data; /* ptr to key value */ 329 } cku_key_value; 330 331 /* for CRYPTO_KEY_REFERENCE ck_format */ 332 crypto_object_id_t cku_key_id; /* reference to object key */ 333 334 /* for CRYPTO_KEY_ATTR_LIST ck_format */ 335 struct { 336 uint32_t cku_a_count; /* number of attributes */ 337 caddr32_t cku_a_oattr; 338 } cku_key_attrs; 339 } cku_data; /* Crypto Key union */ 340 } crypto_key32_t; 341 342 #endif /* _SYSCALL32 */ 343 344 #define ck_data cku_data.cku_key_value.cku_v_data 345 #define ck_length cku_data.cku_key_value.cku_v_length 346 #define ck_obj_id cku_data.cku_key_id 347 #define ck_count cku_data.cku_key_attrs.cku_a_count 348 #define ck_attrs cku_data.cku_key_attrs.cku_a_oattr 349 350 /* 351 * Raw key lengths are expressed in number of bits. 352 * The following macro returns the minimum number of 353 * bytes that can contain the specified number of bits. 354 */ 355 #define CRYPTO_BITS2BYTES(n) (((n) + 7) >> 3) 356 357 /* Providers */ 358 359 typedef enum { 360 CRYPTO_HW_PROVIDER = 0, 361 CRYPTO_SW_PROVIDER, 362 CRYPTO_LOGICAL_PROVIDER 363 } crypto_provider_type_t; 364 365 typedef uint32_t crypto_provider_id_t; 366 #define KCF_PROVID_INVALID ((uint32_t)-1) 367 368 typedef struct crypto_provider_entry { 369 crypto_provider_id_t pe_provider_id; 370 uint_t pe_mechanism_count; 371 } crypto_provider_entry_t; 372 373 typedef struct crypto_dev_list_entry { 374 char le_dev_name[MAXNAMELEN]; 375 uint_t le_dev_instance; 376 uint_t le_mechanism_count; 377 } crypto_dev_list_entry_t; 378 379 /* User type for authentication ioctls and SPI entry points */ 380 381 typedef enum crypto_user_type { 382 CRYPTO_SO = 0, 383 CRYPTO_USER 384 } crypto_user_type_t; 385 386 /* Version for provider management ioctls and SPI entry points */ 387 388 typedef struct crypto_version { 389 uchar_t cv_major; 390 uchar_t cv_minor; 391 } crypto_version_t; 392 393 /* session data structure opaque to the consumer */ 394 typedef void *crypto_session_t; 395 396 /* provider data structure opaque to the consumer */ 397 typedef void *crypto_provider_t; 398 399 /* Limits used by both consumers and providers */ 400 #define CRYPTO_EXT_SIZE_LABEL 32 401 #define CRYPTO_EXT_SIZE_MANUF 32 402 #define CRYPTO_EXT_SIZE_MODEL 16 403 #define CRYPTO_EXT_SIZE_SERIAL 16 404 #define CRYPTO_EXT_SIZE_TIME 16 405 406 typedef struct crypto_provider_ext_info { 407 uchar_t ei_label[CRYPTO_EXT_SIZE_LABEL]; 408 uchar_t ei_manufacturerID[CRYPTO_EXT_SIZE_MANUF]; 409 uchar_t ei_model[CRYPTO_EXT_SIZE_MODEL]; 410 uchar_t ei_serial_number[CRYPTO_EXT_SIZE_SERIAL]; 411 ulong_t ei_flags; 412 ulong_t ei_max_session_count; 413 ulong_t ei_max_pin_len; 414 ulong_t ei_min_pin_len; 415 ulong_t ei_total_public_memory; 416 ulong_t ei_free_public_memory; 417 ulong_t ei_total_private_memory; 418 ulong_t ei_free_private_memory; 419 crypto_version_t ei_hardware_version; 420 crypto_version_t ei_firmware_version; 421 uchar_t ei_time[CRYPTO_EXT_SIZE_TIME]; 422 } crypto_provider_ext_info_t; 423 424 typedef uint_t crypto_session_id_t; 425 426 typedef enum cmd_type { 427 COPY_FROM_DATA, 428 COPY_TO_DATA, 429 COMPARE_TO_DATA, 430 MD5_DIGEST_DATA, 431 SHA1_DIGEST_DATA, 432 SHA2_DIGEST_DATA 433 } cmd_type_t; 434 435 #define CRYPTO_DO_UPDATE 0x01 436 #define CRYPTO_DO_FINAL 0x02 437 #define CRYPTO_DO_MD5 0x04 438 #define CRYPTO_DO_SHA1 0x08 439 #define CRYPTO_DO_SIGN 0x10 440 #define CRYPTO_DO_VERIFY 0x20 441 #define CRYPTO_DO_SHA2 0x40 442 443 #define PROVIDER_OWNS_KEY_SCHEDULE 0x00000001 444 445 /* 446 * Common cryptographic status and error codes. 447 */ 448 #define CRYPTO_SUCCESS 0x00000000 449 #define CRYPTO_CANCEL 0x00000001 450 #define CRYPTO_HOST_MEMORY 0x00000002 451 #define CRYPTO_GENERAL_ERROR 0x00000003 452 #define CRYPTO_FAILED 0x00000004 453 #define CRYPTO_ARGUMENTS_BAD 0x00000005 454 #define CRYPTO_ATTRIBUTE_READ_ONLY 0x00000006 455 #define CRYPTO_ATTRIBUTE_SENSITIVE 0x00000007 456 #define CRYPTO_ATTRIBUTE_TYPE_INVALID 0x00000008 457 #define CRYPTO_ATTRIBUTE_VALUE_INVALID 0x00000009 458 #define CRYPTO_CANCELED 0x0000000A 459 #define CRYPTO_DATA_INVALID 0x0000000B 460 #define CRYPTO_DATA_LEN_RANGE 0x0000000C 461 #define CRYPTO_DEVICE_ERROR 0x0000000D 462 #define CRYPTO_DEVICE_MEMORY 0x0000000E 463 #define CRYPTO_DEVICE_REMOVED 0x0000000F 464 #define CRYPTO_ENCRYPTED_DATA_INVALID 0x00000010 465 #define CRYPTO_ENCRYPTED_DATA_LEN_RANGE 0x00000011 466 #define CRYPTO_KEY_HANDLE_INVALID 0x00000012 467 #define CRYPTO_KEY_SIZE_RANGE 0x00000013 468 #define CRYPTO_KEY_TYPE_INCONSISTENT 0x00000014 469 #define CRYPTO_KEY_NOT_NEEDED 0x00000015 470 #define CRYPTO_KEY_CHANGED 0x00000016 471 #define CRYPTO_KEY_NEEDED 0x00000017 472 #define CRYPTO_KEY_INDIGESTIBLE 0x00000018 473 #define CRYPTO_KEY_FUNCTION_NOT_PERMITTED 0x00000019 474 #define CRYPTO_KEY_NOT_WRAPPABLE 0x0000001A 475 #define CRYPTO_KEY_UNEXTRACTABLE 0x0000001B 476 #define CRYPTO_MECHANISM_INVALID 0x0000001C 477 #define CRYPTO_MECHANISM_PARAM_INVALID 0x0000001D 478 #define CRYPTO_OBJECT_HANDLE_INVALID 0x0000001E 479 #define CRYPTO_OPERATION_IS_ACTIVE 0x0000001F 480 #define CRYPTO_OPERATION_NOT_INITIALIZED 0x00000020 481 #define CRYPTO_PIN_INCORRECT 0x00000021 482 #define CRYPTO_PIN_INVALID 0x00000022 483 #define CRYPTO_PIN_LEN_RANGE 0x00000023 484 #define CRYPTO_PIN_EXPIRED 0x00000024 485 #define CRYPTO_PIN_LOCKED 0x00000025 486 #define CRYPTO_SESSION_CLOSED 0x00000026 487 #define CRYPTO_SESSION_COUNT 0x00000027 488 #define CRYPTO_SESSION_HANDLE_INVALID 0x00000028 489 #define CRYPTO_SESSION_READ_ONLY 0x00000029 490 #define CRYPTO_SESSION_EXISTS 0x0000002A 491 #define CRYPTO_SESSION_READ_ONLY_EXISTS 0x0000002B 492 #define CRYPTO_SESSION_READ_WRITE_SO_EXISTS 0x0000002C 493 #define CRYPTO_SIGNATURE_INVALID 0x0000002D 494 #define CRYPTO_SIGNATURE_LEN_RANGE 0x0000002E 495 #define CRYPTO_TEMPLATE_INCOMPLETE 0x0000002F 496 #define CRYPTO_TEMPLATE_INCONSISTENT 0x00000030 497 #define CRYPTO_UNWRAPPING_KEY_HANDLE_INVALID 0x00000031 498 #define CRYPTO_UNWRAPPING_KEY_SIZE_RANGE 0x00000032 499 #define CRYPTO_UNWRAPPING_KEY_TYPE_INCONSISTENT 0x00000033 500 #define CRYPTO_USER_ALREADY_LOGGED_IN 0x00000034 501 #define CRYPTO_USER_NOT_LOGGED_IN 0x00000035 502 #define CRYPTO_USER_PIN_NOT_INITIALIZED 0x00000036 503 #define CRYPTO_USER_TYPE_INVALID 0x00000037 504 #define CRYPTO_USER_ANOTHER_ALREADY_LOGGED_IN 0x00000038 505 #define CRYPTO_USER_TOO_MANY_TYPES 0x00000039 506 #define CRYPTO_WRAPPED_KEY_INVALID 0x0000003A 507 #define CRYPTO_WRAPPED_KEY_LEN_RANGE 0x0000003B 508 #define CRYPTO_WRAPPING_KEY_HANDLE_INVALID 0x0000003C 509 #define CRYPTO_WRAPPING_KEY_SIZE_RANGE 0x0000003D 510 #define CRYPTO_WRAPPING_KEY_TYPE_INCONSISTENT 0x0000003E 511 #define CRYPTO_RANDOM_SEED_NOT_SUPPORTED 0x0000003F 512 #define CRYPTO_RANDOM_NO_RNG 0x00000040 513 #define CRYPTO_DOMAIN_PARAMS_INVALID 0x00000041 514 #define CRYPTO_BUFFER_TOO_SMALL 0x00000042 515 #define CRYPTO_INFORMATION_SENSITIVE 0x00000043 516 #define CRYPTO_NOT_SUPPORTED 0x00000044 517 518 #define CRYPTO_QUEUED 0x00000045 519 #define CRYPTO_BUFFER_TOO_BIG 0x00000046 520 #define CRYPTO_INVALID_CONTEXT 0x00000047 521 #define CRYPTO_INVALID_MAC 0x00000048 522 #define CRYPTO_MECH_NOT_SUPPORTED 0x00000049 523 #define CRYPTO_INCONSISTENT_ATTRIBUTE 0x0000004A 524 #define CRYPTO_NO_PERMISSION 0x0000004B 525 #define CRYPTO_INVALID_PROVIDER_ID 0x0000004C 526 #define CRYPTO_VERSION_MISMATCH 0x0000004D 527 #define CRYPTO_BUSY 0x0000004E 528 #define CRYPTO_UNKNOWN_PROVIDER 0x0000004F 529 #define CRYPTO_MODVERIFICATION_FAILED 0x00000050 530 #define CRYPTO_OLD_CTX_TEMPLATE 0x00000051 531 #define CRYPTO_WEAK_KEY 0x00000052 532 533 /* 534 * Special values that can be used to indicate that information is unavailable 535 * or that there is not practical limit. These values can be used 536 * by fields of the SPI crypto_provider_ext_info(9S) structure. 537 * The value of CRYPTO_UNAVAILABLE_INFO should be the same as 538 * CK_UNAVAILABLE_INFO in the PKCS#11 spec. 539 */ 540 #define CRYPTO_UNAVAILABLE_INFO ((ulong_t)(-1)) 541 #define CRYPTO_EFFECTIVELY_INFINITE 0x0 542 543 #ifdef __cplusplus 544 } 545 #endif 546 547 #endif /* _SYS_CRYPTO_COMMON_H */ 548