Embed:
(wiki syntax)
pkcs11.h File Reference
Wrapper for PKCS#11 library libpkcs11-helper. More...
Go to the source code of this file.
Data Structures | |
| struct | mbedtls_pkcs11_context |
| Context for PKCS #11 private keys. More... | |
Functions | |
| void | mbedtls_pkcs11_init (mbedtls_pkcs11_context *ctx) |
| Initialize a mbedtls_pkcs11_context. | |
| int | mbedtls_pkcs11_x509_cert_bind (mbedtls_x509_crt *cert, pkcs11h_certificate_t pkcs11h_cert) |
| Fill in a mbed TLS certificate, based on the given PKCS11 helper certificate. | |
| int | mbedtls_pkcs11_priv_key_bind (mbedtls_pkcs11_context *priv_key, pkcs11h_certificate_t pkcs11_cert) |
| Set up a mbedtls_pkcs11_context storing the given certificate. | |
| void | mbedtls_pkcs11_priv_key_free (mbedtls_pkcs11_context *priv_key) |
| Free the contents of the given private key context. | |
| int | mbedtls_pkcs11_decrypt (mbedtls_pkcs11_context *ctx, int mode, size_t *olen, const unsigned char *input, unsigned char *output, size_t output_max_len) |
| Do an RSA private key decrypt, then remove the message padding. | |
| int | mbedtls_pkcs11_sign (mbedtls_pkcs11_context *ctx, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, unsigned char *sig) |
| Do a private RSA to sign a message digest. | |
| static int | mbedtls_ssl_pkcs11_decrypt (void *ctx, int mode, size_t *olen, const unsigned char *input, unsigned char *output, size_t output_max_len) |
| SSL/TLS wrappers for PKCS#11 functions. | |
Detailed Description
Wrapper for PKCS#11 library libpkcs11-helper.
Definition in file pkcs11.h.
Function Documentation
| int mbedtls_pkcs11_decrypt | ( | mbedtls_pkcs11_context * | ctx, |
| int | mode, | ||
| size_t * | olen, | ||
| const unsigned char * | input, | ||
| unsigned char * | output, | ||
| size_t | output_max_len | ||
| ) |
Do an RSA private key decrypt, then remove the message padding.
- Parameters:
-
ctx PKCS #11 context mode must be MBEDTLS_RSA_PRIVATE, for compatibility with rsa.c's signature input buffer holding the encrypted data output buffer that will hold the plaintext olen will contain the plaintext length output_max_len maximum length of the output buffer
- Returns:
- 0 if successful, or an MBEDTLS_ERR_RSA_XXX error code
- Note:
- The output buffer must be as large as the size of ctx->N (eg. 128 bytes if RSA-1024 is used) otherwise an error is thrown.
| void mbedtls_pkcs11_init | ( | mbedtls_pkcs11_context * | ctx ) |
Initialize a mbedtls_pkcs11_context.
(Just making memory references valid.)
| int mbedtls_pkcs11_priv_key_bind | ( | mbedtls_pkcs11_context * | priv_key, |
| pkcs11h_certificate_t | pkcs11_cert | ||
| ) |
Set up a mbedtls_pkcs11_context storing the given certificate.
Note that the mbedtls_pkcs11_context will take over control of the certificate, freeing it when done.
- Parameters:
-
priv_key Private key structure to fill. pkcs11_cert PKCS #11 helper certificate
- Returns:
- 0 on success
| void mbedtls_pkcs11_priv_key_free | ( | mbedtls_pkcs11_context * | priv_key ) |
| int mbedtls_pkcs11_sign | ( | mbedtls_pkcs11_context * | ctx, |
| int | mode, | ||
| mbedtls_md_type_t | md_alg, | ||
| unsigned int | hashlen, | ||
| const unsigned char * | hash, | ||
| unsigned char * | sig | ||
| ) |
Do a private RSA to sign a message digest.
- Parameters:
-
ctx PKCS #11 context mode must be MBEDTLS_RSA_PRIVATE, for compatibility with rsa.c's signature md_alg a MBEDTLS_MD_XXX (use MBEDTLS_MD_NONE for signing raw data) hashlen message digest length (for MBEDTLS_MD_NONE only) hash buffer holding the message digest sig buffer that will hold the ciphertext
- Returns:
- 0 if the signing operation was successful, or an MBEDTLS_ERR_RSA_XXX error code
- Note:
- The "sig" buffer must be as large as the size of ctx->N (eg. 128 bytes if RSA-1024 is used).
| int mbedtls_pkcs11_x509_cert_bind | ( | mbedtls_x509_crt * | cert, |
| pkcs11h_certificate_t | pkcs11h_cert | ||
| ) |
Generated on Tue Jul 12 2022 12:22:32 by
1.7.2