sandbox
mbedtls ported to mbed-classic
Fork of
mbedtls
by 
Christopher Haster
pkcs11.c File Reference
Wrapper for PKCS#11 library libpkcs11-helper. More...
Go to the source code of this file.
Functions | |
| void | mbedtls_pkcs11_init (mbedtls_pkcs11_context *ctx) |
| Initialize a mbedtls_pkcs11_context. | |
| int | mbedtls_pkcs11_x509_cert_bind (mbedtls_x509_crt *cert, pkcs11h_certificate_t pkcs11_cert) |
| Fill in a mbed TLS certificate, based on the given PKCS11 helper certificate. | |
| int | mbedtls_pkcs11_priv_key_bind (mbedtls_pkcs11_context *priv_key, pkcs11h_certificate_t pkcs11_cert) |
| Set up a mbedtls_pkcs11_context storing the given certificate. | |
| void | mbedtls_pkcs11_priv_key_free (mbedtls_pkcs11_context *priv_key) |
| Free the contents of the given private key context. | |
| int | mbedtls_pkcs11_decrypt (mbedtls_pkcs11_context *ctx, int mode, size_t *olen, const unsigned char *input, unsigned char *output, size_t output_max_len) |
| Do an RSA private key decrypt, then remove the message padding. | |
| int | mbedtls_pkcs11_sign (mbedtls_pkcs11_context *ctx, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, unsigned char *sig) |
| Do a private RSA to sign a message digest. | |
Detailed Description
Wrapper for PKCS#11 library libpkcs11-helper.
Copyright (C) 2006-2015, ARM Limited, All Rights Reserved SPDX-License-Identifier: Apache-2.0
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
This file is part of mbed TLS (https://tls.mbed.org)
Definition in file pkcs11.c.
Function Documentation
| int mbedtls_pkcs11_decrypt | ( | mbedtls_pkcs11_context * | ctx, |
| int | mode, | ||
| size_t * | olen, | ||
| const unsigned char * | input, | ||
| unsigned char * | output, | ||
| size_t | output_max_len | ||
| ) |
Do an RSA private key decrypt, then remove the message padding.
- Parameters:
-
ctx PKCS #11 context mode must be MBEDTLS_RSA_PRIVATE, for compatibility with rsa.c's signature input buffer holding the encrypted data output buffer that will hold the plaintext olen will contain the plaintext length output_max_len maximum length of the output buffer
- Returns:
- 0 if successful, or an MBEDTLS_ERR_RSA_XXX error code
- Note:
- The output buffer must be as large as the size of ctx->N (eg. 128 bytes if RSA-1024 is used) otherwise an error is thrown.
| void mbedtls_pkcs11_init | ( | mbedtls_pkcs11_context * | ctx ) |
Initialize a mbedtls_pkcs11_context.
(Just making memory references valid.)
| int mbedtls_pkcs11_priv_key_bind | ( | mbedtls_pkcs11_context * | priv_key, |
| pkcs11h_certificate_t | pkcs11_cert | ||
| ) |
Set up a mbedtls_pkcs11_context storing the given certificate.
Note that the mbedtls_pkcs11_context will take over control of the certificate, freeing it when done.
- Parameters:
-
priv_key Private key structure to fill. pkcs11_cert PKCS #11 helper certificate
- Returns:
- 0 on success
| void mbedtls_pkcs11_priv_key_free | ( | mbedtls_pkcs11_context * | priv_key ) |
| int mbedtls_pkcs11_sign | ( | mbedtls_pkcs11_context * | ctx, |
| int | mode, | ||
| mbedtls_md_type_t | md_alg, | ||
| unsigned int | hashlen, | ||
| const unsigned char * | hash, | ||
| unsigned char * | sig | ||
| ) |
Do a private RSA to sign a message digest.
- Parameters:
-
ctx PKCS #11 context mode must be MBEDTLS_RSA_PRIVATE, for compatibility with rsa.c's signature md_alg a MBEDTLS_MD_XXX (use MBEDTLS_MD_NONE for signing raw data) hashlen message digest length (for MBEDTLS_MD_NONE only) hash buffer holding the message digest sig buffer that will hold the ciphertext
- Returns:
- 0 if the signing operation was successful, or an MBEDTLS_ERR_RSA_XXX error code
- Note:
- The "sig" buffer must be as large as the size of ctx->N (eg. 128 bytes if RSA-1024 is used).
| int mbedtls_pkcs11_x509_cert_bind | ( | mbedtls_x509_crt * | cert, |
| pkcs11h_certificate_t | pkcs11h_cert | ||
| ) |
Generated on Tue Jul 12 2022 12:52:52 by
1.7.2