corePKCS11  v3.2.0
PKCS #11 Cryptoki Library
core_pkcs11.h
Go to the documentation of this file.
1 /*
2  * corePKCS11 v3.2.0
3  * Copyright (C) 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
4  *
5  * Permission is hereby granted, free of charge, to any person obtaining a copy of
6  * this software and associated documentation files (the "Software"), to deal in
7  * the Software without restriction, including without limitation the rights to
8  * use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
9  * the Software, and to permit persons to whom the Software is furnished to do so,
10  * subject to the following conditions:
11  *
12  * The above copyright notice and this permission notice shall be included in all
13  * copies or substantial portions of the Software.
14  *
15  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
17  * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
18  * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
19  * IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
20  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
21  */
22 
23 #ifndef _CORE_PKCS11_H_
24 #define _CORE_PKCS11_H_
25 
26 #include <stdint.h>
27 
28 /* *INDENT-OFF* */
29 #ifdef __cplusplus
30  extern "C" {
31 #endif
32 /* *INDENT-ON* */
33 
34 #ifdef _WIN32
35  #pragma pack(push, cryptoki, 1)
36 #endif
37 
53 #define CK_PTR *
54 
59 #ifndef NULL_PTR
60  #define NULL_PTR 0
61 #endif
62 
68 #define CK_DEFINE_FUNCTION( returnType, name ) returnType name
69 
75 #define CK_DECLARE_FUNCTION( returnType, name ) returnType name
76 
82 #define CK_DECLARE_FUNCTION_POINTER( returnType, name ) returnType( CK_PTR name )
83 
89 #define CK_CALLBACK_FUNCTION( returnType, name ) returnType( CK_PTR name )
90 
95 #define pkcs11SHA256_DIGEST_LENGTH 32UL
96 
101 #define pkcs11AES_CMAC_SIGNATURE_LENGTH 16UL
102 
109 #define pkcs11ECDSA_P256_SIGNATURE_LENGTH 64UL
110 
115 #define pkcs11ECDSA_P256_KEY_BITS 256UL
116 
121 #define pkcs11RSA_PUBLIC_EXPONENT { 0x01, 0x00, 0x01 }
122 
128 #define pkcs11RSA_2048_MODULUS_BITS 2048UL
129 
134 #define pkcs11RSA_2048_SIGNATURE_LENGTH ( pkcs11RSA_2048_MODULUS_BITS / 8UL )
135 
143 #define pkcs11RSA_SIGNATURE_INPUT_LENGTH 51UL
144 
150 #define pkcs11ELLIPTIC_CURVE_NISTP256 "1.2.840.10045.3.1.7"
151 
156 #define pkcs11MAX_LABEL_LENGTH 32UL /* 31 characters + 1 null terminator. */
157 
162 #define pkcs11DER_ENCODED_OID_P256 { 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07 }
163 
164 
170 #ifndef pkcs11configIMPORT_PRIVATE_KEYS_SUPPORTED
171  #define pkcs11configIMPORT_PRIVATE_KEYS_SUPPORTED 1
172 #endif
173 
194 #define pkcs11STUFF_APPENDED_TO_RSA_SIG { 0x30, 0x31, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01, 0x05, 0x00, 0x04, 0x20 }
195 
196 /* Bring in the public header. */
197 
198 /* Undefine the macro for Keil Compiler to avoid conflict */
199 #if defined( __PASTE ) && defined( __CC_ARM )
200  /* ARM RCVT stdint.h has a duplicate definition with PKCS #11. */
201  #undef __PASTE
202 #endif
203 
204 #ifdef CreateMutex
205  #undef CreateMutex /* This is a workaround because CreateMutex is redefined to CreateMutexW in synchapi.h in windows. :/ */
206 #endif
207 
208 #include "pkcs11.h"
209 
215 typedef struct PKCS11_CertificateTemplate
216 {
217  CK_ATTRIBUTE xObjectClass;
218  CK_ATTRIBUTE xSubject;
219  CK_ATTRIBUTE xCertificateType;
220  CK_ATTRIBUTE xValue;
221  CK_ATTRIBUTE xLabel;
222  CK_ATTRIBUTE xTokenObject;
224 
225 /*------------------------ PKCS #11 wrapper functions -------------------------*/
226 
232 /* @[declare_pkcs11_core_xinitializepkcs11] */
233 CK_RV xInitializePKCS11( void );
234 /* @[declare_pkcs11_core_xinitializepkcs11] */
235 
250 /* @[declare_pkcs11_core_xgetslotlist] */
251 CK_RV xGetSlotList( CK_SLOT_ID ** ppxSlotId,
252  CK_ULONG * pxSlotCount );
253 /* @[declare_pkcs11_core_xgetslotlist] */
254 
264 /* @[declare_pkcs11_core_xinitializepkcs11session] */
265 CK_RV xInitializePkcs11Session( CK_SESSION_HANDLE * pxSession );
266 /* @[declare_pkcs11_core_xinitializepkcs11session] */
267 
274 /* @[declare_pkcs11_core_xinitializepkcs11token] */
275 CK_RV xInitializePkcs11Token( void );
276 /* @[declare_pkcs11_core_xinitializepkcs11token] */
277 
295 /* @[declare_pkcs11_core_xfindobjectwithlabelandclass] */
296 CK_RV xFindObjectWithLabelAndClass( CK_SESSION_HANDLE xSession,
297  char * pcLabelName,
298  CK_ULONG ulLabelNameLen,
299  CK_OBJECT_CLASS xClass,
300  CK_OBJECT_HANDLE_PTR pxHandle );
301 /* @[declare_pkcs11_core_xfindobjectwithlabelandclass] */
302 
322 /* @[declare_pkcs11_core_vappendsha256algorithmidentifiersequence] */
323 CK_RV vAppendSHA256AlgorithmIdentifierSequence( const uint8_t * puc32ByteHashedMessage,
324  uint8_t * puc51ByteHashOidBuffer );
325 /* @[declare_pkcs11_core_vappendsha256algorithmidentifiersequence] */
326 
327 #ifdef _WIN32
328  #pragma pack(pop, cryptoki)
329 #endif
330 
331 /* *INDENT-OFF* */
332 #ifdef __cplusplus
333  }
334 #endif
335 /* *INDENT-ON* */
336 
337 #endif /* ifndef _CORE_PKCS11_H_ */
PKCS11_CertificateTemplate_t::xObjectClass
CK_ATTRIBUTE xObjectClass
CKA_CLASS, set to CKO_CERTIFICATE.
Definition: core_pkcs11.h:217
xInitializePKCS11
CK_RV xInitializePKCS11(void)
Initializes a PKCS #11 session.
Definition: core_pkcs11.c:150
PKCS11_CertificateTemplate_t
Certificate Template The object class must be the first attribute in the array.
Definition: core_pkcs11.h:216
xGetSlotList
CK_RV xGetSlotList(CK_SLOT_ID **ppxSlotId, CK_ULONG *pxSlotCount)
Get a list of available PKCS #11 slots.
Definition: core_pkcs11.c:70
vAppendSHA256AlgorithmIdentifierSequence
CK_RV vAppendSHA256AlgorithmIdentifierSequence(const uint8_t *puc32ByteHashedMessage, uint8_t *puc51ByteHashOidBuffer)
Appends digest algorithm sequence to SHA-256 hash for RSA signatures.
Definition: core_pkcs11.c:374
PKCS11_CertificateTemplate_t::xTokenObject
CK_ATTRIBUTE xTokenObject
CKA_TOKEN.
Definition: core_pkcs11.h:222
xInitializePkcs11Token
CK_RV xInitializePkcs11Token(void)
Initializes a PKCS #11 module and token.
Definition: core_pkcs11.c:176
PKCS11_CertificateTemplate_t::xLabel
CK_ATTRIBUTE xLabel
CKA_LABEL.
Definition: core_pkcs11.h:221
PKCS11_CertificateTemplate_t::xCertificateType
CK_ATTRIBUTE xCertificateType
CKA_CERTIFICATE_TYPE, set to CKC_X_509.
Definition: core_pkcs11.h:219
PKCS11_CertificateTemplate_t::xValue
CK_ATTRIBUTE xValue
CKA_VALUE, the DER byte array of the certificate contents.
Definition: core_pkcs11.h:220
PKCS11_CertificateTemplate_t::xSubject
CK_ATTRIBUTE xSubject
CKA_SUBJECT, this parameter is required by the PKCS #11 standard.
Definition: core_pkcs11.h:218
xInitializePkcs11Session
CK_RV xInitializePkcs11Session(CK_SESSION_HANDLE *pxSession)
Initializes the PKCS #11 module and opens a session.
Definition: core_pkcs11.c:253
xFindObjectWithLabelAndClass
CK_RV xFindObjectWithLabelAndClass(CK_SESSION_HANDLE xSession, char *pcLabelName, CK_ULONG ulLabelNameLen, CK_OBJECT_CLASS xClass, CK_OBJECT_HANDLE_PTR pxHandle)
Searches for an object with a matching label and class provided.
Definition: core_pkcs11.c:309