The size of X and Y coordinate in 2 parameter style EC public key.

Format is as defined in COSE (RFC 8152) and SEC 1: Elliptic Curve Cryptography.

This size is well-known and documented in public standards.

Definition at line 222 of file t_cose_crypto.h.

The size of the output of SHA-256 in bytes.

(It is safe to define this independently here as its size is well-known and fixed. There is no need to reference platform-specific headers and incur messy dependence.)

Definition at line 309 of file t_cose_crypto.h.

Size of the signature output for the NIST P-256 Curve.

Definition at line 67 of file t_cose_crypto.h.

Size of the largest signature of any of the algorithm types supported.

This will have to be adjusted if support for other algorithms larger is added.

This is a compile time constant so it can be used to define stack variable sizes.

Definition at line 79 of file t_cose_crypto.h.

Get an elliptic curve public key.

Part of the t_cose crypto adaptation layer.

Parameters

[in]	key_select	Used to look up the public key to return when kid is NULL_USEFUL_BUF_C.
[in]	kid	A key ID to look up against. May be NULL_USEFUL_BUF_C. This is typically the kid from the COSE unprotected header.
[out]	cose_curve_id	The curve ID of the key returned as defined by COSE (RFC 8152) or the IANA COSE registry.
[in]	buf_to_hold_x_coord	Pointer and length into which the X coordinate is put.
[in]	buf_to_hold_y_coord	Pointer and length into which the Y coordinate is put.
[out]	x_coord	Pointer and length of the returned X coordinate.
[out]	y_coord	Pointer and length of the returned Y coordinate.

Return values

T_COSE_SUCCESS	The key was found and is returned.
T_COSE_ERR_UNKNOWN_KEY	The key identified by key_select or a kid was not found.
T_COSE_ERR_WRONG_TYPE_OF_KEY	The key was found, but it was the wrong type for the operation.
T_COSE_ERR_FAIL	General unspecific failure.
T_COSE_ERR_KEY_BUFFER_SIZE	Buffer to hold the output was too small.

This finds and returns a public key. Where it looks for the key is dependent on the OS / platform.

T_COSE_CRYPTO_EC_P256_COORD_SIZE is the size of the X or Y coordinate for the NIST P-256 curve.

See the note in the Detailed Description (the \file comment block) for details on how useful_buf and useful_buf_c are used to return the X and Y coordinates.

Finish a cryptographic hash.

Part of the t_cose crypto adaptation layer.

Parameters

[in,out]	hash_ctx	Pointer to the hash context.
[in]	buffer_to_hold_result	Pointer and length into which the resulting hash is put.
[out]	hash_result	Pointer and length of the resulting hash.

Return values

T_COSE_ERR_HASH_GENERAL_FAIL	Some general failure of the hash function.
T_COSE_ERR_HASH_BUFFER_SIZE	The size of the buffer to hold the hash result was too small.

Call this to complete the hashing operation. If the everything completed correctly, the resulting hash is returned. Note that any errors that occurred during t_cose_crypto_hash_update() are returned here.

See the note in the Detailed Description (the \file comment block) for details on how useful_buf and useful_buf_c are used to return the hash.

Start cryptographic hash.

Part of the t_cose crypto adaptation layer.

Parameters

[in,out]	hash_ctx	Pointer to the hash context that will be initialized.
[in]	cose_hash_alg_id	Algorithm ID that identifies the hash to use. This is from the IANA COSE Registry. As of the creation of this interface no identifiers of only a hash functions have been registered. Signature algorithms that include specification of the hash have been registered, but they are not to be used here. Until hash functions only have been officially registered, some IDs are defined in the proprietary space in t_cose_common.h.

Return values

T_COSE_ERR_UNSUPPORTED_HASH	The requested algorithm is unknown or unsupported.
T_COSE_ERR_HASH_GENERAL_FAIL	Some general failure of the hash function

This initializes the hash context for the particular algorithm. It must be called first. A hash_ctx can be reused if it is reinitialized.

Feed data into a cryptographic hash.

Part of the t_cose crypto adaptation layer.

Parameters

[in,out]	hash_ctx	Pointer to the hash context in which accumulate the hash.
[in]	data_to_hash	Pointer and length of data to feed into hash. The pointer may by NULL in which case no hashing is performed.

There is no return value. If an error occurs it is remembered in hash_ctx and returned when t_cose_crypto_hash_finish() is called. Once in the error state, this function may be called, but it will not do anything.

Perform public key signing.

Part of the t_cose crypto adaptation layer.

Parameters

[in]	cose_alg_id	The algorithm to sign with. The IDs are defined in COSE (RFC 8152) or in the IANA COSE Registry. A proprietary ID can also be defined locally (#define) if the needed one hasn't been registered.
[in]	key_select	Indicates which key to use to sign.
[in]	hash_to_sign	The bytes to sign. Typically, a hash of a payload.
[in]	signature_buffer	Pointer and length of buffer into which the resulting signature is put.
[in]	signature	Pointer and length of the signature returned.

Return values

T_COSE_SUCCESS	Successfully created the signature.
T_COSE_ERR_SIG_BUFFER_SIZE	The signature_buffer too small.
T_COSE_ERR_UNSUPPORTED_SIGNING_ALG	The requested signing algorithm, cose_alg_id, is not supported.
T_COSE_ERR_UNKNOWN_KEY	The key identified by key_select was not found.
T_COSE_ERR_WRONG_TYPE_OF_KEY	The key was found, but it was the wrong type.
T_COSE_ERR_INVALID_ARGUMENT	Some (unspecified) argument was not valid.
T_COSE_ERR_INSUFFICIENT_MEMORY	Insufficient heap memory.
T_COSE_ERR_FAIL	General unspecific failure.
T_COSE_ERR_TAMPERING_DETECTED	Equivalent to PSA_ERROR_TAMPERING_DETECTED.

This is called to do public key signing. The implementation will vary from one platform / OS to another but should conform to the description here.

The key selection depends on the platform / OS.

See the note in the Detailed Description (the \file comment block) for details on how useful_buf and useful_buf_c are used to return the signature.

To find out the size of the signature buffer needed, call this with signature_buffer->ptr NULL and signature_buffer->len a very large number like UINT32_MAX. The size will be returned in signature->len.

perform public key signature verification.

Part of the t_cose crypto adaptation layer.

Parameters

[in]	cose_alg_id	The algorithm to use for verification. The IDs are defined in COSE (RFC 8152) or in the IANA COSE Registry. A proprietary ID can also be defined locally (#define) if the needed one hasn't been registered.
[in]	key_select	Verification key selection.
[in]	key_id	A key id or NULL_USEFUL_BUF_C.
[in]	hash_to_verify	The data or hash that is to be verified.
[in]	signature	The signature.

This verifies that the signature passed in was over the hash_to_verify passed in.

The public key used to verify the signature is selected by the key_id if it is not NULL_USEFUL_BUF_C or the key_select if it is.

The key selected must be, or include, a public key of the correct type for cose_alg_id.

Return values

T_COSE_SUCCESS	The signature is valid
T_COSE_ERR_SIG_VERIFY	Signature verification failed. For example, the cryptographic operations completed successfully but hash wasn't as expected.
T_COSE_ERR_UNKNOWN_KEY	The key identified by key_select or a kid was not found.
T_COSE_ERR_WRONG_TYPE_OF_KEY	The key was found, but it was the wrong type for the operation.
T_COSE_ERR_UNSUPPORTED_SIGNING_ALG	The requested signing algorithm is not supported.
T_COSE_ERR_INVALID_ARGUMENT	Some (unspecified) argument was not valid.
T_COSE_ERR_INSUFFICIENT_MEMORY	Out of heap memory.
T_COSE_ERR_FAIL	General unspecific failure.
T_COSE_ERR_TAMPERING_DETECTED	Equivalent to PSA_ERROR_TAMPERING_DETECTED.

Get the size in bytes of a particular signature type.

Parameters

[in]

cose_sig_alg_id

The COSE algorithm ID.

Returns

The size in bytes of the signature for a public-key signing algorithm.

Definition at line 402 of file t_cose_crypto.h.