9156 Remove openssl dependency from pkcs11_tpm

   1 /*
   2  * The Initial Developer of the Original Code is International
   3  * Business Machines Corporation. Portions created by IBM
   4  * Corporation are Copyright(C) 2005 International Business
   5  * Machines Corporation. All Rights Reserved.
   6  *
   7  * This program is free software; you can redistribute it and/or modify
   8  * it under the terms of the Common Public License as published by
   9  * IBM Corporation; either version 1 of the License, or(at your option)
  10  * any later version.
  11  *
  12  * This program is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  15  * Common Public License for more details.
  16  *
  17  * You should have received a copy of the Common Public License
  18  * along with this program; if not, a copy can be viewed at
  19  * http://www.opensource.org/licenses/cpl1.0.php.
  20  */
  21 
  22 /* (C) COPYRIGHT International Business Machines Corp. 2001, 2002, 2005 */
  23 /*
  24  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
  25  * Use is subject to license terms.

  26  */
  27 
  28 #ifndef _TPMTOK_INT_H
  29 #define _TPMTOK_INT_H
  30 
  31 #include <stdio.h>
  32 #include <pthread.h>
  33 #include <string.h>
  34 #include <strings.h>
  35 #include <md5.h>
  36 #include <sha1.h>
  37 #include <limits.h>
  38 #include <syslog.h>
  39 #include <errno.h>
  40 #include <sys/types.h>
  41 #include <sys/stat.h>
  42 #include <sys/param.h>
  43 #include <sys/byteorder.h>
  44 #include <security/cryptoki.h>
  45 
  46 #include <tss/platform.h>
  47 #include <tss/tss_defines.h>
  48 #include <tss/tss_typedef.h>
  49 #include <tss/tss_structs.h>
  50 #include <tss/tspi.h>
  51 
  52 #define VERSION_MAJOR 2
  53 #define VERSION_MINOR 1
  54 
  55 #define MAX_SESSION_COUNT       64
  56 #define MAX_PIN_LEN     256
  57 #define MIN_PIN_LEN     1
  58 
  59 #define MAX_SLOT_ID     10
  60 
  61 #ifndef MIN
  62 #define MIN(a, b)  ((a) < (b) ? (a) : (b))
  63 #endif
  64 
  65 #define MODE_COPY       (1 << 0)
  66 #define MODE_CREATE     (1 << 1)
  67 #define MODE_KEYGEN     (1 << 2)
  68 #define MODE_MODIFY     (1 << 3)
  69 #define MODE_DERIVE     (1 << 4)
  70 #define MODE_UNWRAP     (1 << 5)
  71 
  72 // RSA block formatting types
  73 //
  74 #define PKCS_BT_1       1
  75 #define PKCS_BT_2       2
  76 
  77 #define OP_ENCRYPT_INIT 1
  78 #define OP_DECRYPT_INIT 2
  79 #define OP_WRAP         3
  80 #define OP_UNWRAP       4
  81 #define OP_SIGN_INIT    5
  82 #define OP_VERIFY_INIT  6
  83 
  84 enum {
  85         STATE_INVALID = 0,
  86         STATE_ENCR,
  87         STATE_DECR,
  88         STATE_DIGEST,
  89         STATE_SIGN,
  90         STATE_VERIFY
  91 };
  92 
  93 #define SHA1_BLOCK_SIZE 64
  94 #define SHA1_BLOCK_SIZE_MASK (SHA1_BLOCK_SIZE - 1)
  95 
  96 #define RSA_BLOCK_SIZE 256
  97 
  98 #ifndef PATH_MAX
  99 #define PATH_MAX MAXPATHLEN
 100 #endif
 101 
 102 #ifndef PACK_DATA
 103 #define PACK_DATA
 104 #endif
 105 
 106 #define MD5_BLOCK_SIZE  64
 107 
 108 #define DSA_SIGNATURE_SIZE  40
 109 
 110 #define DEFAULT_SO_PIN  "87654321"
 111 
 112 typedef enum {
 113         ALL = 1,
 114         PRIVATE,
 115         PUBLIC
 116 } SESS_OBJ_TYPE;
 117 
 118 typedef struct _DL_NODE
 119 {
 120         struct _DL_NODE *next;
 121         struct _DL_NODE *prev;
 122         void  *data;
 123 } DL_NODE;
 124 
 125 #define TOKEN_DATA_FILE "token.dat"
 126 #define TOKEN_OBJ_DIR   "objects"
 127 #define TOKEN_OBJ_INDEX_FILE "obj.idx"
 128 
 129 #define TPMTOK_UUID_INDEX_FILENAME "uuids.idx"
 130 
 131 /*
 132  * Filenames used to store migration data.
 133  */
 134 #define SO_MAKEY_FILENAME       "so_makey.dat"
 135 #define USER_MAKEY_FILENAME     "user_makey.dat"
 136 #define SO_KEYBLOB_FILENAME     "so_blob.dat"
 137 #define USER_KEYBLOB_FILENAME   "user_blob.dat"
 138 
 139 #define __FUNCTION__ __func__
 140 
 141 //
 142 // Both of the strings below have a length of 32 chars and must be
 143 // padded with spaces, and non - null terminated.
 144 //
 145 #define PKW_CRYPTOKI_VERSION_MAJOR      2
 146 #define PKW_CRYPTOKI_VERSION_MINOR      1
 147 #define PKW_CRYPTOKI_MANUFACTURER       "Sun Microsystems, Inc.   "
 148 #define PKW_CRYPTOKI_LIBDESC        "PKCS#11 Interface for TPM  "
 149 #define PKW_CRYPTOKI_LIB_VERSION_MAJOR  1
 150 #define PKW_CRYPTOKI_LIB_VERSION_MINOR  0
 151 #define PKW_MAX_DEVICES          10
 152 
 153 #define MAX_TOK_OBJS  2048
 154 #define NUMBER_SLOTS_MANAGED 1
 155 #define TPM_SLOTID 1
 156 
 157 /*
 158  * CKA_HIDDEN will be used to filter return results on
 159  * a C_FindObjects call. Used for objects internal to the
 160  * TPM token for management
 161  */
 162 /* custom attributes for the TPM token */
 163 #define CKA_HIDDEN      CKA_VENDOR_DEFINED + 0x01
 164 #define CKA_IBM_OPAQUE  CKA_VENDOR_DEFINED + 0x02
 165 /*
 166  * CKA_ENC_AUTHDATA will be used to store the encrypted SHA-1
 167  * hashes of auth data passed in for TPM keys. The authdata
 168  * will be encrypted using either the public
 169  * leaf key or the private leaf key
 170  */
 171 #define CKA_ENC_AUTHDATA CKA_VENDOR_DEFINED + 0x03
 172 
 173 /* custom return codes for the TPM token */
 174 #define CKR_KEY_NOT_FOUND       CKR_VENDOR_DEFINED + 0x01
 175 #define CKR_FILE_NOT_FOUND      CKR_VENDOR_DEFINED + 0x02
 176 
 177 typedef struct {
 178         CK_SLOT_ID  slotID;
 179         CK_SESSION_HANDLE  sessionh;
 180 } ST_SESSION_T;
 181 
 182 typedef ST_SESSION_T ST_SESSION_HANDLE;
 183 
 184 typedef struct {
 185         void *Previous;
 186         void *Next;
 187         CK_SLOT_ID   SltId;
 188         CK_SESSION_HANDLE  RealHandle;
 189 } Session_Struct_t;
 190 
 191 typedef Session_Struct_t *SessStructP;
 192 
 193 typedef struct {
 194         pid_t Pid;
 195         pthread_mutex_t  ProcMutex;
 196         Session_Struct_t *SessListBeg;
 197         Session_Struct_t *SessListEnd;
 198         pthread_mutex_t  SessListMutex;
 199 } API_Proc_Struct_t;
 200 
 201 
 202 
 203 
 204 enum {
 205         PRF_DUMMYFUNCTION = 1,
 206         PRF_FCVFUNCTION,
 207         PRF_INITIALIZE,
 208         PRF_FINALIZE,
 209         PRF_GETINFO,
 210         PRF_GETFUNCTIONLIST,
 211         PRF_GETSLOTLIST,
 212         PRF_GETSLOTINFO,
 213         PRF_GETTOKENINFO,
 214         PRF_GETMECHLIST,
 215         PRF_GETMECHINFO,
 216         PRF_INITTOKEN,
 217         PRF_INITPIN,
 218         PRF_SETPIN,
 219         PRF_OPENSESSION,
 220         PRF_CLOSESESSION,
 221         PRF_CLOSEALLSESSIONS,
 222         PRF_GETSESSIONINFO,
 223         PRF_GETOPERATIONSTATE,
 224         PRF_SETOPERATIONSTATE,
 225         PRF_LOGIN,
 226         PRF_LOGOUT,
 227         PRF_CREATEOBJECT,
 228         PRF_COPYOBJECT,
 229         PRF_DESTROYOBJECT,
 230         PRF_GETOBJECTSIZE,
 231         PRF_GETATTRIBUTEVALUE,
 232         PRF_SETATTRIBUTEVALUE,
 233         PRF_FINDOBJECTSINIT,
 234         PRF_FINDOBJECTS,
 235         PRF_FINDOBJECTSFINAL,
 236         PRF_ENCRYPTINIT,
 237         PRF_ENCRYPT,
 238         PRF_ENCRYPTUPDATE,
 239         PRF_ENCRYPTFINAL,
 240         PRF_DECRYPTINIT,
 241         PRF_DECRYPT,
 242         PRF_DECRYPTUPDATE,
 243         PRF_DECRYPTFINAL,
 244         PRF_DIGESTINIT,
 245         PRF_DIGEST,
 246         PRF_DIGESTUPDATE,
 247         PRF_DIGESTKEY,
 248         PRF_DIGESTFINAL,
 249         PRF_SIGNINIT,
 250         PRF_SIGN,
 251         PRF_SIGNUPDATE,
 252         PRF_SIGNFINAL,
 253         PRF_SIGNRECOVERINIT,
 254         PRF_SIGNRECOVER,
 255         PRF_VERIFYINIT,
 256         PRF_VERIFY,
 257         PRF_VERIFYUPDATE,
 258         PRF_VERIFYFINAL,
 259         PRF_VERIFYRECOVERINIT,
 260         PRF_VERIFYRECOVER,
 261         PRF_GENKEY,
 262         PRF_GENKEYPAIR,
 263         PRF_WRAPKEY,
 264         PRF_UNWRAPKEY,
 265         PRF_DERIVEKEY,
 266         PRF_GENRND,
 267         PRF_LASTENTRY
 268 };
 269 
 270 typedef struct _ENCR_DECR_CONTEXT
 271 {
 272         CK_OBJECT_HANDLE  key;
 273         CK_MECHANISM mech;
 274         CK_BYTE   *context;
 275         CK_ULONG  context_len;
 276         CK_BBOOL  multi;
 277         CK_BBOOL  active;
 278 } ENCR_DECR_CONTEXT;
 279 
 280 typedef struct _DIGEST_CONTEXT
 281 {
 282         CK_MECHANISM   mech;
 283         union {
 284                 MD5_CTX *md5ctx;
 285                 SHA1_CTX *sha1ctx;
 286                 void *ref; /* reference ptr for the union */
 287         } context;
 288         CK_ULONG context_len;
 289         CK_BBOOL multi;
 290         CK_BBOOL active;
 291 } DIGEST_CONTEXT;
 292 
 293 typedef struct _SIGN_VERIFY_CONTEXT
 294 {
 295         CK_OBJECT_HANDLE key;
 296         CK_MECHANISM    mech;   // current sign mechanism
 297         void     *context;  // temporary work area
 298         CK_ULONG context_len;
 299         CK_BBOOL multi;    // is this a multi - part operation?
 300         CK_BBOOL recover;  // are we in recover mode?
 301         CK_BBOOL active;
 302 } SIGN_VERIFY_CONTEXT;
 303 
 304 typedef struct _SESSION
 305 {
 306         CK_SESSION_HANDLE    handle;
 307         CK_SESSION_INFO session_info;
 308 
 309         CK_OBJECT_HANDLE    *find_list; // array of CK_OBJECT_HANDLE
 310         CK_ULONG        find_count;    // # handles in the list
 311         CK_ULONG        find_len;       // max # of handles in the list
 312         CK_ULONG        find_idx;       // current position
 313         CK_BBOOL        find_active;
 314 
 315         ENCR_DECR_CONTEXT    encr_ctx;
 316         ENCR_DECR_CONTEXT    decr_ctx;
 317         DIGEST_CONTEXT  digest_ctx;
 318         SIGN_VERIFY_CONTEXT  sign_ctx;
 319         SIGN_VERIFY_CONTEXT  verify_ctx;
 320 
 321         TSS_HCONTEXT    hContext;
 322 } SESSION;
 323 
 324 typedef struct _TEMPLATE
 325 {
 326         DL_NODE  *attribute_list;
 327 } TEMPLATE;
 328 
 329 typedef struct _OBJECT
 330 {
 331         CK_OBJECT_CLASS   class;
 332         CK_BYTE  name[8];   // for token objects
 333 
 334         SESSION  *session;   // creator; only for session objects
 335         TEMPLATE *template;
 336         CK_ULONG count_hi;  // only significant for token objects
 337         CK_ULONG count_lo;  // only significant for token objects
 338         CK_ULONG index;
 339 } OBJECT;
 340 
 341 typedef struct _OBJECT_MAP
 342 {
 343         CK_OBJECT_HANDLE        handle;
 344         CK_BBOOL is_private;
 345         CK_BBOOL is_session_obj;
 346         SESSION  *session;
 347         OBJECT   *ptr;
 348 } OBJECT_MAP;
 349 
 350 typedef struct _ATTRIBUTE_PARSE_LIST
 351 {
 352         CK_ATTRIBUTE_TYPE type;
 353         void            *ptr;
 354         CK_ULONG          len;
 355         CK_BBOOL          found;
 356 } ATTRIBUTE_PARSE_LIST;
 357 
 358 typedef struct _OP_STATE_DATA
 359 {
 360         CK_STATE    session_state;
 361         CK_ULONG    active_operation;
 362         CK_ULONG    data_len;
 363 } OP_STATE_DATA;
 364 
 365 typedef struct _TWEAK_VEC
 366 {
 367         int   allow_key_mods;
 368 } TWEAK_VEC;
 369 
 370 typedef struct _TOKEN_DATA
 371 {
 372         CK_TOKEN_INFO token_info;
 373         CK_BYTE   user_pin_sha[SHA1_DIGEST_LENGTH];
 374         CK_BYTE   so_pin_sha[SHA1_DIGEST_LENGTH];
 375         CK_BYTE   next_token_object_name[8];
 376         TWEAK_VEC tweak_vector;
 377 } TOKEN_DATA;
 378 
 379 typedef struct _RSA_DIGEST_CONTEXT {
 380         DIGEST_CONTEXT hash_context;
 381         CK_BBOOL        flag;
 382 } RSA_DIGEST_CONTEXT;
 383 
 384 typedef struct _MECH_LIST_ELEMENT
 385 {
 386         CK_MECHANISM_TYPE    mech_type;
 387         CK_MECHANISM_INFO    mech_info;
 388 } MECH_LIST_ELEMENT;
 389 
 390 struct mech_list_item;
 391 
 392 struct mech_list_item {
 393         struct mech_list_item *next;
 394         MECH_LIST_ELEMENT element;
 395 };
 396 
 397 struct mech_list_item *
 398 find_mech_list_item_for_type(CK_MECHANISM_TYPE type,
 399         struct mech_list_item *head);
 400 
 401 typedef struct _TOK_OBJ_ENTRY
 402 {
 403         CK_BBOOL  deleted;
 404         char    name[8];
 405         CK_ULONG  count_lo;
 406         CK_ULONG  count_hi;
 407 } TOK_OBJ_ENTRY;
 408 
 409 typedef struct _LW_SHM_TYPE
 410 {
 411         pthread_mutex_t mutex;
 412         TOKEN_DATA      nv_token_data;
 413         CK_ULONG        num_priv_tok_obj;
 414         CK_ULONG        num_publ_tok_obj;
 415         CK_BBOOL        priv_loaded;
 416         CK_BBOOL        publ_loaded;
 417         CK_BBOOL        token_available;
 418         TOK_OBJ_ENTRY  publ_tok_objs[ MAX_TOK_OBJS ];
 419         TOK_OBJ_ENTRY  priv_tok_objs[ MAX_TOK_OBJS ];
 420 } LW_SHM_TYPE;
 421 
 422 typedef unsigned int CK_ULONG_32;
 423 typedef CK_ULONG_32 CK_OBJECT_CLASS_32;
 424 typedef CK_ULONG_32 CK_ATTRIBUTE_TYPE_32;
 425 
 426 typedef struct CK_ATTRIBUTE_32 {
 427         CK_ATTRIBUTE_TYPE_32 type;
 428         CK_ULONG_32 pValue;
 429         CK_ULONG_32 ulValueLen;
 430 } CK_ATTRIBUTE_32;
 431 
 432 char *get_tpm_keystore_path();
 433 
 434 struct messages {
 435         char *msg;
 436 };
 437 
 438 struct token_specific_struct {
 439         CK_BYTE  token_debug_tag[MAXPATHLEN];
 440 
 441         CK_RV  (*t_init)(char *, CK_SLOT_ID, TSS_HCONTEXT *);
 442         int  (*t_slot2local)();
 443 
 444         CK_RV  (*t_rng)(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
 445         CK_RV  (*t_session)(CK_SLOT_ID);
 446         CK_RV  (*t_final)(TSS_HCONTEXT);
 447         CK_RV (*t_rsa_decrypt)(TSS_HCONTEXT, CK_BYTE *,
 448                 CK_ULONG, CK_BYTE *, CK_ULONG *, OBJECT *);
 449 
 450         CK_RV (*t_rsa_encrypt)(
 451                 TSS_HCONTEXT,
 452                 CK_BYTE *, CK_ULONG, CK_BYTE *,
 453                 CK_ULONG *, OBJECT *);
 454 
 455         CK_RV (*t_rsa_sign)(TSS_HCONTEXT,
 456                 CK_BYTE *,
 457                 CK_ULONG,
 458                 CK_BYTE *,
 459                 CK_ULONG *,
 460                 OBJECT *);
 461 
 462         CK_RV (*t_rsa_verify)(TSS_HCONTEXT,
 463                 CK_BYTE *,
 464                 CK_ULONG,
 465                 CK_BYTE *,
 466                 CK_ULONG,
 467                 OBJECT *);
 468 
 469         CK_RV (*t_rsa_generate_keypair)(TSS_HCONTEXT, TEMPLATE *, TEMPLATE *);
 470 
 471         CK_RV (*t_sha_init)(DIGEST_CONTEXT *);
 472 
 473         CK_RV (*t_sha_update)(
 474                 DIGEST_CONTEXT *,
 475                 CK_BYTE *,
 476                 CK_ULONG);
 477 
 478         CK_RV (*t_sha_final)(
 479                 DIGEST_CONTEXT *,
 480                 CK_BYTE *,
 481                 CK_ULONG *);
 482         CK_RV (*t_login)(TSS_HCONTEXT, CK_USER_TYPE, CK_BYTE *, CK_ULONG);
 483         CK_RV (*t_logout)(TSS_HCONTEXT);
 484         CK_RV (*t_init_pin)(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
 485         CK_RV (*t_set_pin)(ST_SESSION_HANDLE, CK_BYTE *,
 486                 CK_ULONG, CK_BYTE *, CK_ULONG);
 487         CK_RV (*t_verify_so_pin)(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
 488 };
 489 
 490 typedef  struct token_specific_struct token_spec_t;
 491 
 492 /*
 493  * Global Variables
 494  */
 495 extern void copy_slot_info(CK_SLOT_ID, CK_SLOT_INFO_PTR);
 496 
 497 extern struct messages err_msg[];
 498 
 499 extern token_spec_t token_specific;
 500 extern CK_BBOOL initialized;
 501 extern char *card_function_names[];
 502 extern char *total_function_names[];
 503 
 504 extern MECH_LIST_ELEMENT mech_list[];
 505 extern CK_ULONG mech_list_len;
 506 
 507 extern pthread_mutex_t native_mutex;
 508 
 509 extern void *xproclock;
 510 
 511 extern pthread_mutex_t pkcs_mutex, obj_list_mutex,
 512         sess_list_mutex, login_mutex;
 513 
 514 extern DL_NODE *sess_list;
 515 extern DL_NODE *sess_obj_list;
 516 extern DL_NODE *publ_token_obj_list;
 517 extern DL_NODE *priv_token_obj_list;
 518 extern DL_NODE *object_map;
 519 
 520 extern CK_BYTE so_pin_md5[MD5_DIGEST_LENGTH];
 521 extern CK_BYTE user_pin_md5[MD5_DIGEST_LENGTH];
 522 
 523 extern CK_BYTE default_user_pin_sha[SHA1_DIGEST_LENGTH];
 524 extern CK_BYTE default_so_pin_sha[SHA1_DIGEST_LENGTH];
 525 extern CK_BYTE default_so_pin_md5[MD5_DIGEST_LENGTH];
 526 
 527 extern LW_SHM_TYPE *global_shm;
 528 
 529 extern TOKEN_DATA *nv_token_data;
 530 
 531 extern CK_ULONG next_object_handle;
 532 extern CK_ULONG next_session_handle;
 533 
 534 extern CK_STATE global_login_state;
 535 
 536 extern CK_BYTE  ber_AlgIdRSAEncryption[];
 537 extern CK_ULONG ber_AlgIdRSAEncryptionLen;
 538 extern CK_BYTE  ber_rsaEncryption[];
 539 extern CK_ULONG ber_rsaEncryptionLen;
 540 extern CK_BYTE  ber_idDSA[];
 541 extern CK_ULONG ber_idDSALen;
 542 
 543 extern CK_BYTE ber_md5WithRSAEncryption[];
 544 extern CK_ULONG ber_md5WithRSAEncryptionLen;
 545 extern CK_BYTE ber_sha1WithRSAEncryption[];
 546 extern CK_ULONG ber_sha1WithRSAEncryptionLen;
 547 extern CK_BYTE ber_AlgMd5[];
 548 extern CK_ULONG ber_AlgMd5Len;
 549 extern CK_BYTE ber_AlgSha1[];
 550 extern CK_ULONG ber_AlgSha1Len;
 551 
 552 extern CK_C_INITIALIZE_ARGS cinit_args;
 553 
 554 /*
 555  * Function Prototypes
 556  */
 557 void *attach_shared_memory();
 558 void  detach_shared_memory(char *);
 559 
 560 int API_Initialized();
 561 void Terminate_All_Process_Sessions();
 562 int API_Register();
 563 void API_UnRegister();
 564 
 565 void CreateXProcLock(void *);
 566 int XProcLock(void *);
 567 int XProcUnLock(void *);
 568 
 569 void loginit();
 570 void logterm();
 571 void logit(int, char *, ...);
 572 void AddToSessionList(Session_Struct_t *);
 573 void RemoveFromSessionList(Session_Struct_t *);
 574 
 575 int Valid_Session(Session_Struct_t *, ST_SESSION_T *);
 576 
 577 CK_BBOOL pin_expired(CK_SESSION_INFO *, CK_FLAGS);
 578 CK_BBOOL pin_locked(CK_SESSION_INFO *, CK_FLAGS);
 579 void set_login_flags(CK_USER_TYPE, CK_FLAGS *);
 580 
 581 extern void init_slot_info(TOKEN_DATA *);
 582 
 583 CK_RV update_migration_data(TSS_HCONTEXT,
 584         TSS_HKEY, TSS_HKEY, char *, char *, BYTE *, BYTE *);
 585 CK_RV token_rng(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
 586 
 587 TSS_RESULT set_public_modulus(TSS_HCONTEXT, TSS_HKEY,
 588     unsigned long, unsigned char *);
 589 TSS_RESULT open_tss_context(TSS_HCONTEXT *);
 590 CK_RV token_get_tpm_info(TSS_HCONTEXT, TOKEN_DATA *);
 591 
 592 CK_RV clock_set_default_attributes(TEMPLATE *);
 593 CK_RV clock_check_required_attributes(TEMPLATE *, CK_ULONG);
 594 CK_RV clock_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
 595 
 596 CK_RV counter_set_default_attributes(TEMPLATE *);
 597 CK_RV counter_check_required_attributes(TEMPLATE *, CK_ULONG);
 598 CK_RV counter_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
 599 
 600 CK_RV compute_next_token_obj_name(CK_BYTE *, CK_BYTE *);
 601 
 602 CK_RV save_token_object(TSS_HCONTEXT, OBJECT *);
 603 CK_RV save_public_token_object(OBJECT *);
 604 CK_RV save_private_token_object(TSS_HCONTEXT, OBJECT *);
 605 
 606 CK_RV load_public_token_objects(void);
 607 CK_RV load_private_token_objects(TSS_HCONTEXT);
 608 
 609 CK_RV reload_token_object(TSS_HCONTEXT, OBJECT *);
 610 
 611 CK_RV delete_token_object(OBJECT *);
 612 
 613 CK_RV init_token_data(TSS_HCONTEXT, TOKEN_DATA *);
 614 CK_RV load_token_data(TSS_HCONTEXT, TOKEN_DATA *);
 615 CK_RV save_token_data(TOKEN_DATA *);
 616 void copy_slot_info(CK_SLOT_ID, CK_SLOT_INFO_PTR);
 617 
 618 CK_RV compute_sha(CK_BYTE *, CK_ULONG_32, CK_BYTE *);
 619 
 620 CK_RV parity_is_odd(CK_BYTE);
 621 
 622 CK_RV build_attribute(CK_ATTRIBUTE_TYPE,
 623         CK_BYTE *, CK_ULONG, CK_ATTRIBUTE **);
 624 
 625 CK_RV add_pkcs_padding(CK_BYTE *, UINT32, UINT32, UINT32);
 626 
 627 CK_RV strip_pkcs_padding(CK_BYTE *, UINT32, UINT32 *);
 628 
 629 CK_RV remove_leading_zeros(CK_ATTRIBUTE *);
 630 
 631 CK_RV rsa_pkcs_encrypt(
 632         SESSION *,
 633         CK_BBOOL,
 634         ENCR_DECR_CONTEXT *,
 635         CK_BYTE *,
 636         CK_ULONG,
 637         CK_BYTE *,
 638         CK_ULONG *);
 639 
 640 CK_RV rsa_pkcs_decrypt(SESSION *,
 641         CK_BBOOL,
 642         ENCR_DECR_CONTEXT *,
 643         CK_BYTE *,
 644         CK_ULONG,
 645         CK_BYTE *,
 646         CK_ULONG *);
 647 
 648 CK_RV rsa_pkcs_sign(SESSION *,
 649         CK_BBOOL,
 650         SIGN_VERIFY_CONTEXT *,
 651         CK_BYTE *,
 652         CK_ULONG,
 653         CK_BYTE *,
 654         CK_ULONG *);
 655 
 656 CK_RV rsa_pkcs_verify(SESSION *,
 657         SIGN_VERIFY_CONTEXT *,
 658         CK_BYTE *,
 659         CK_ULONG,
 660         CK_BYTE *,
 661         CK_ULONG);
 662 
 663 CK_RV rsa_pkcs_verify_recover(SESSION *,
 664         CK_BBOOL,
 665         SIGN_VERIFY_CONTEXT *,
 666         CK_BYTE *,
 667         CK_ULONG,
 668         CK_BYTE *,
 669         CK_ULONG *);
 670 
 671 CK_RV rsa_hash_pkcs_sign(SESSION *,
 672         CK_BBOOL,
 673         SIGN_VERIFY_CONTEXT *,
 674         CK_BYTE *,
 675         CK_ULONG,
 676         CK_BYTE *,
 677         CK_ULONG *);
 678 
 679 CK_RV rsa_hash_pkcs_verify(SESSION *,
 680         SIGN_VERIFY_CONTEXT *,
 681         CK_BYTE *,
 682         CK_ULONG,
 683         CK_BYTE *,
 684         CK_ULONG);
 685 
 686 CK_RV rsa_hash_pkcs_sign_update(SESSION *,
 687         SIGN_VERIFY_CONTEXT *,
 688         CK_BYTE *,
 689         CK_ULONG);
 690 
 691 CK_RV rsa_hash_pkcs_verify_update(SESSION *,
 692         SIGN_VERIFY_CONTEXT *,
 693         CK_BYTE *,
 694         CK_ULONG);
 695 
 696 CK_RV rsa_hash_pkcs_sign_final(SESSION *,
 697         CK_BBOOL,
 698         SIGN_VERIFY_CONTEXT *,
 699         CK_BYTE *,
 700         CK_ULONG *);
 701 
 702 CK_RV rsa_hash_pkcs_verify_final(SESSION *,
 703         SIGN_VERIFY_CONTEXT *,
 704         CK_BYTE *,
 705         CK_ULONG);
 706 
 707 
 708 CK_RV ckm_rsa_key_pair_gen(TSS_HCONTEXT, TEMPLATE *, TEMPLATE *);
 709 
 710 CK_RV sha1_hash(SESSION *, CK_BBOOL,
 711         DIGEST_CONTEXT *,
 712         CK_BYTE *, CK_ULONG,
 713         CK_BYTE *, CK_ULONG *);
 714 
 715 CK_RV sha1_hmac_sign(SESSION *, CK_BBOOL,
 716         SIGN_VERIFY_CONTEXT *,
 717         CK_BYTE *,
 718         CK_ULONG,
 719         CK_BYTE *,
 720         CK_ULONG *);
 721 
 722 CK_RV sha1_hmac_verify(SESSION *,
 723         SIGN_VERIFY_CONTEXT *,
 724         CK_BYTE *,
 725         CK_ULONG,
 726         CK_BYTE *,
 727         CK_ULONG);
 728 
 729 CK_RV md5_hash(SESSION *, CK_BBOOL,
 730         DIGEST_CONTEXT *,
 731         CK_BYTE *, CK_ULONG,
 732         CK_BYTE *, CK_ULONG *);
 733 
 734 CK_RV md5_hmac_sign(SESSION *, CK_BBOOL,
 735         SIGN_VERIFY_CONTEXT *,
 736         CK_BYTE *,
 737         CK_ULONG,
 738         CK_BYTE *,
 739         CK_ULONG *);
 740 
 741 CK_RV md5_hmac_verify(SESSION *,
 742         SIGN_VERIFY_CONTEXT *,
 743         CK_BYTE *,
 744         CK_ULONG,
 745         CK_BYTE *,
 746         CK_ULONG);
 747 
 748 DL_NODE *dlist_add_as_first(DL_NODE *, void *);
 749 DL_NODE *dlist_add_as_last(DL_NODE *, void *);
 750 DL_NODE *dlist_find(DL_NODE *, void *);
 751 DL_NODE *dlist_get_first(DL_NODE *);
 752 DL_NODE *dlist_get_last(DL_NODE *);
 753         CK_ULONG dlist_length(DL_NODE *);
 754 DL_NODE *dlist_next(DL_NODE *);
 755 DL_NODE *dlist_prev(DL_NODE *);
 756 void dlist_purge(DL_NODE *);
 757 DL_NODE *dlist_remove_node(DL_NODE *, DL_NODE *);
 758 
 759 CK_RV attach_shm(void);
 760 CK_RV detach_shm(void);
 761 
 762 // encryption manager routines
 763 //
 764 CK_RV encr_mgr_init(SESSION *,
 765         ENCR_DECR_CONTEXT *,
 766         CK_ULONG,
 767         CK_MECHANISM *,
 768         CK_OBJECT_HANDLE);
 769 
 770 CK_RV encr_mgr_cleanup(ENCR_DECR_CONTEXT *);
 771 
 772 CK_RV encr_mgr_encrypt(SESSION *, CK_BBOOL,
 773         ENCR_DECR_CONTEXT *,
 774         CK_BYTE *, CK_ULONG,
 775         CK_BYTE *, CK_ULONG *);
 776 
 777 CK_RV decr_mgr_init(SESSION *,
 778         ENCR_DECR_CONTEXT *,
 779         CK_ULONG,
 780         CK_MECHANISM *,
 781         CK_OBJECT_HANDLE);
 782 
 783 CK_RV decr_mgr_cleanup(ENCR_DECR_CONTEXT *);
 784 
 785 CK_RV decr_mgr_decrypt(SESSION *, CK_BBOOL,
 786         ENCR_DECR_CONTEXT *,
 787         CK_BYTE *, CK_ULONG,
 788         CK_BYTE *, CK_ULONG *);
 789 
 790 CK_RV digest_mgr_cleanup(DIGEST_CONTEXT *);
 791 
 792 CK_RV digest_mgr_init(SESSION *,
 793         DIGEST_CONTEXT *,
 794         CK_MECHANISM *);
 795 
 796 CK_RV digest_mgr_digest(SESSION *, CK_BBOOL,
 797         DIGEST_CONTEXT *,
 798         CK_BYTE *, CK_ULONG,
 799         CK_BYTE *, CK_ULONG *);
 800 
 801 CK_RV digest_mgr_digest_update(SESSION *,
 802         DIGEST_CONTEXT *,
 803         CK_BYTE *, CK_ULONG);
 804 
 805 CK_RV digest_mgr_digest_key(SESSION *,
 806         DIGEST_CONTEXT *,
 807         CK_OBJECT_HANDLE);
 808 
 809 CK_RV digest_mgr_digest_final(SESSION *,
 810         DIGEST_CONTEXT *,
 811         CK_BYTE *, CK_ULONG *);
 812 
 813 CK_RV key_mgr_generate_key_pair(SESSION *,
 814         CK_MECHANISM *,
 815         CK_ATTRIBUTE *, CK_ULONG,
 816         CK_ATTRIBUTE *, CK_ULONG,
 817         CK_OBJECT_HANDLE *,
 818         CK_OBJECT_HANDLE *);
 819 
 820 CK_RV key_mgr_wrap_key(SESSION *,
 821         CK_BBOOL,
 822         CK_MECHANISM *,
 823         CK_OBJECT_HANDLE,
 824         CK_OBJECT_HANDLE,
 825         CK_BYTE *,
 826         CK_ULONG *);
 827 
 828 CK_RV key_mgr_unwrap_key(SESSION *,
 829         CK_MECHANISM *,
 830         CK_ATTRIBUTE *,
 831         CK_ULONG,
 832         CK_BYTE *,
 833         CK_ULONG,
 834         CK_OBJECT_HANDLE,
 835         CK_OBJECT_HANDLE *);
 836 
 837 CK_RV sign_mgr_init(SESSION *,
 838         SIGN_VERIFY_CONTEXT *,
 839         CK_MECHANISM *,
 840         CK_BBOOL,
 841         CK_OBJECT_HANDLE);
 842 
 843 CK_RV sign_mgr_cleanup(SIGN_VERIFY_CONTEXT *);
 844 
 845 CK_RV sign_mgr_sign(SESSION *,
 846         CK_BBOOL,
 847         SIGN_VERIFY_CONTEXT *,
 848         CK_BYTE *,
 849         CK_ULONG,
 850         CK_BYTE *,
 851         CK_ULONG *);
 852 
 853 CK_RV sign_mgr_sign_recover(SESSION *,
 854         CK_BBOOL,
 855         SIGN_VERIFY_CONTEXT *,
 856         CK_BYTE *,
 857         CK_ULONG,
 858         CK_BYTE *,
 859         CK_ULONG *);
 860 
 861 CK_RV sign_mgr_sign_final(SESSION *,
 862         CK_BBOOL,
 863         SIGN_VERIFY_CONTEXT *,
 864         CK_BYTE *,
 865         CK_ULONG *);
 866 
 867 CK_RV sign_mgr_sign_update(SESSION *,
 868         SIGN_VERIFY_CONTEXT *,
 869         CK_BYTE *,
 870         CK_ULONG);
 871 
 872 CK_RV verify_mgr_init(SESSION *,
 873         SIGN_VERIFY_CONTEXT *,
 874         CK_MECHANISM *,
 875         CK_BBOOL,
 876         CK_OBJECT_HANDLE);
 877 
 878 CK_RV verify_mgr_cleanup(SIGN_VERIFY_CONTEXT *);
 879 
 880 CK_RV verify_mgr_verify(SESSION *,
 881         SIGN_VERIFY_CONTEXT *,
 882         CK_BYTE *,
 883         CK_ULONG,
 884         CK_BYTE *,
 885         CK_ULONG);
 886 
 887 CK_RV verify_mgr_verify_recover(SESSION *,
 888         CK_BBOOL,
 889         SIGN_VERIFY_CONTEXT *,
 890         CK_BYTE *,
 891         CK_ULONG,
 892         CK_BYTE *,
 893         CK_ULONG *);
 894 
 895 CK_RV verify_mgr_verify_update(SESSION *,
 896         SIGN_VERIFY_CONTEXT *,
 897         CK_BYTE *,
 898         CK_ULONG);
 899 
 900 CK_RV verify_mgr_verify_final(SESSION *,
 901         SIGN_VERIFY_CONTEXT *,
 902         CK_BYTE *,
 903         CK_ULONG);
 904 
 905 
 906 // session manager routines
 907 //
 908 CK_RV session_mgr_close_all_sessions(void);
 909 CK_RV session_mgr_close_session(SESSION *);
 910 SESSION *session_mgr_find(CK_SESSION_HANDLE);
 911 CK_RV session_mgr_login_all(CK_USER_TYPE);
 912 CK_RV session_mgr_logout_all(void);
 913 CK_RV session_mgr_new(CK_ULONG, SESSION **);
 914 
 915 CK_BBOOL session_mgr_readonly_exists(void);
 916 CK_BBOOL session_mgr_so_session_exists(void);
 917 CK_BBOOL session_mgr_user_session_exists(void);
 918 CK_BBOOL session_mgr_public_session_exists(void);
 919 
 920 CK_RV session_mgr_get_op_state(SESSION *, CK_BBOOL,
 921         CK_BYTE *, CK_ULONG *);
 922 
 923 CK_RV session_mgr_set_op_state(SESSION *,
 924         CK_OBJECT_HANDLE, CK_OBJECT_HANDLE, CK_BYTE *);
 925 
 926 CK_RV object_mgr_add(SESSION *,
 927         CK_ATTRIBUTE *, CK_ULONG, CK_OBJECT_HANDLE *);
 928 
 929 CK_RV object_mgr_add_to_map(SESSION *, OBJECT *, CK_OBJECT_HANDLE *);
 930 
 931 CK_RV object_mgr_add_to_shm(OBJECT *);
 932 CK_RV object_mgr_del_from_shm(OBJECT *);
 933 
 934 CK_RV object_mgr_copy(SESSION *,
 935         CK_ATTRIBUTE *, CK_ULONG, CK_OBJECT_HANDLE,
 936         CK_OBJECT_HANDLE *);
 937 
 938 CK_RV object_mgr_create_final(SESSION *,
 939         OBJECT *, CK_OBJECT_HANDLE *);
 940 
 941 CK_RV object_mgr_create_skel(SESSION *,
 942         CK_ATTRIBUTE *, CK_ULONG, CK_ULONG,
 943         CK_ULONG, CK_ULONG, OBJECT **);
 944 
 945 CK_RV object_mgr_destroy_object(SESSION *, CK_OBJECT_HANDLE);
 946 
 947 CK_RV object_mgr_destroy_token_objects(TSS_HCONTEXT);
 948 
 949 CK_RV object_mgr_find_in_map1(TSS_HCONTEXT, CK_OBJECT_HANDLE, OBJECT **);
 950 
 951 CK_RV object_mgr_find_in_map2(TSS_HCONTEXT, OBJECT *, CK_OBJECT_HANDLE *);
 952 
 953 CK_RV object_mgr_find_init(SESSION *, CK_ATTRIBUTE *, CK_ULONG);
 954 
 955 CK_RV object_mgr_find_build_list(SESSION *,
 956         CK_ATTRIBUTE *,
 957         CK_ULONG,
 958         DL_NODE *,
 959         CK_BBOOL public_only);
 960 
 961 CK_RV object_mgr_find_final(SESSION *);
 962 
 963 CK_RV object_mgr_get_attribute_values(SESSION *,
 964         CK_OBJECT_HANDLE,
 965         CK_ATTRIBUTE *,
 966         CK_ULONG);
 967 
 968 CK_RV object_mgr_get_object_size(TSS_HCONTEXT, CK_OBJECT_HANDLE,
 969         CK_ULONG *);
 970 
 971 CK_BBOOL object_mgr_invalidate_handle1(CK_OBJECT_HANDLE handle);
 972 
 973 CK_BBOOL object_mgr_invalidate_handle2(OBJECT *);
 974 
 975 CK_BBOOL object_mgr_purge_session_objects(SESSION *, SESS_OBJ_TYPE);
 976 
 977 CK_BBOOL object_mgr_purge_token_objects(TSS_HCONTEXT);
 978 
 979 CK_BBOOL object_mgr_purge_private_token_objects(TSS_HCONTEXT);
 980 
 981 CK_RV object_mgr_remove_from_map(CK_OBJECT_HANDLE);
 982 
 983 CK_RV object_mgr_restore_obj(CK_BYTE *, OBJECT *);
 984 
 985 CK_RV object_mgr_set_attribute_values(SESSION *,
 986         CK_OBJECT_HANDLE,
 987         CK_ATTRIBUTE *,
 988         CK_ULONG);
 989 
 990 CK_BBOOL object_mgr_purge_map(SESSION *, SESS_OBJ_TYPE);
 991 
 992 CK_RV object_create(CK_ATTRIBUTE *, CK_ULONG, OBJECT **);
 993 
 994 CK_RV object_create_skel(CK_ATTRIBUTE *,
 995         CK_ULONG,
 996         CK_ULONG,
 997         CK_ULONG,
 998         CK_ULONG,
 999         OBJECT **);
1000 
1001 CK_RV object_copy(CK_ATTRIBUTE *,
1002         CK_ULONG,
1003         OBJECT *,
1004         OBJECT **);
1005 
1006 CK_RV object_flatten(OBJECT *,
1007         CK_BYTE **,
1008         CK_ULONG_32 *);
1009 
1010 CK_BBOOL object_free(OBJECT *);
1011 
1012 CK_RV object_get_attribute_values(OBJECT *,
1013         CK_ATTRIBUTE *,
1014         CK_ULONG);
1015 
1016 CK_ULONG object_get_size(OBJECT *);
1017 
1018 CK_RV object_restore(CK_BYTE *,
1019         OBJECT **,
1020         CK_BBOOL replace);
1021 
1022 CK_RV object_set_attribute_values(OBJECT *,
1023         CK_ATTRIBUTE *,
1024         CK_ULONG);
1025 
1026 CK_BBOOL object_is_modifiable(OBJECT *);
1027 CK_BBOOL object_is_private(OBJECT *);
1028 CK_BBOOL object_is_public(OBJECT *);
1029 CK_BBOOL object_is_token_object(OBJECT *);
1030 CK_BBOOL object_is_session_object(OBJECT *);
1031 
1032 CK_BBOOL is_attribute_defined(CK_ATTRIBUTE_TYPE);
1033 
1034 CK_RV template_add_attributes(TEMPLATE *,
1035         CK_ATTRIBUTE *, CK_ULONG);
1036 
1037 CK_RV template_add_default_attributes(TEMPLATE *,
1038         CK_ULONG,
1039         CK_ULONG,
1040         CK_ULONG);
1041 
1042 CK_BBOOL template_attribute_find(TEMPLATE *,
1043         CK_ATTRIBUTE_TYPE, CK_ATTRIBUTE **);
1044 
1045 void template_attribute_find_multiple(TEMPLATE *,
1046         ATTRIBUTE_PARSE_LIST *,
1047         CK_ULONG);
1048 
1049 CK_BBOOL template_check_exportability(TEMPLATE *, CK_ATTRIBUTE_TYPE type);
1050 
1051 CK_RV template_check_required_attributes(TEMPLATE *,
1052         CK_ULONG, CK_ULONG, CK_ULONG);
1053 
1054 CK_RV template_check_required_base_attributes(TEMPLATE *,
1055         CK_ULONG);
1056 
1057 CK_BBOOL template_compare(CK_ATTRIBUTE *,
1058         CK_ULONG, TEMPLATE *);
1059 
1060 CK_RV template_copy(TEMPLATE *, TEMPLATE *);
1061 
1062 CK_RV template_flatten(TEMPLATE *, CK_BYTE *);
1063 
1064 CK_RV template_free(TEMPLATE *);
1065 
1066 CK_BBOOL template_get_class(TEMPLATE *, CK_ULONG *, CK_ULONG *);
1067 
1068 CK_ULONG template_get_count(TEMPLATE *);
1069 
1070 CK_ULONG template_get_size(TEMPLATE *);
1071 CK_ULONG template_get_compressed_size(TEMPLATE *);
1072 
1073 CK_RV template_set_default_common_attributes(TEMPLATE *);
1074 
1075 CK_RV template_merge(TEMPLATE *, TEMPLATE **);
1076 
1077 CK_RV template_update_attribute(TEMPLATE *, CK_ATTRIBUTE *);
1078 
1079 CK_RV template_unflatten(TEMPLATE **, CK_BYTE *, CK_ULONG);
1080 
1081 CK_RV template_validate_attribute(TEMPLATE *,
1082         CK_ATTRIBUTE *, CK_ULONG, CK_ULONG, CK_ULONG);
1083 
1084 CK_RV template_validate_attributes(TEMPLATE *,
1085         CK_ULONG, CK_ULONG, CK_ULONG);
1086 
1087 CK_RV template_validate_base_attribute(TEMPLATE *,
1088         CK_ATTRIBUTE *, CK_ULONG);
1089 
1090 
1091 // DATA OBJECT ROUTINES
1092 //
1093 CK_RV data_object_check_required_attributes(TEMPLATE *, CK_ULONG);
1094 CK_RV data_object_set_default_attributes(TEMPLATE *, CK_ULONG);
1095 CK_RV data_object_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1096 
1097 // CERTIFICATE ROUTINES
1098 CK_RV cert_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1099 
1100 CK_RV cert_x509_check_required_attributes(TEMPLATE *, CK_ULONG);
1101 CK_RV cert_x509_set_default_attributes(TEMPLATE *, CK_ULONG);
1102 CK_RV cert_x509_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1103 CK_RV cert_vendor_check_required_attributes(TEMPLATE *, CK_ULONG);
1104 CK_RV cert_vendor_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1105 
1106 //
1107 // KEY ROUTINES
1108 //
1109 CK_RV key_object_check_required_attributes(TEMPLATE *, CK_ULONG);
1110 CK_RV key_object_set_default_attributes(TEMPLATE *, CK_ULONG);
1111 CK_RV key_object_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1112 
1113 CK_RV publ_key_check_required_attributes(TEMPLATE *, CK_ULONG);
1114 CK_RV publ_key_set_default_attributes(TEMPLATE *, CK_ULONG);
1115 CK_RV publ_key_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1116 
1117 CK_RV priv_key_check_required_attributes(TEMPLATE *, CK_ULONG);
1118 CK_RV priv_key_set_default_attributes(TEMPLATE *, CK_ULONG);
1119 CK_RV priv_key_unwrap(TEMPLATE *, CK_ULONG, CK_BYTE *, CK_ULONG);
1120 CK_RV priv_key_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1121 
1122         CK_BBOOL secret_key_check_exportability(CK_ATTRIBUTE_TYPE type);
1123 CK_RV secret_key_check_required_attributes(TEMPLATE *, CK_ULONG);
1124 CK_RV secret_key_set_default_attributes(TEMPLATE *, CK_ULONG);
1125 CK_RV secret_key_unwrap(TEMPLATE *, CK_ULONG, CK_BYTE *, CK_ULONG,
1126         CK_BBOOL fromend);
1127 CK_RV secret_key_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *,
1128         CK_ULONG);
1129 
1130 // rsa routines
1131 //
1132 CK_RV rsa_publ_check_required_attributes(TEMPLATE *, CK_ULONG);
1133 CK_RV rsa_publ_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1134 CK_RV rsa_publ_set_default_attributes(TEMPLATE *, CK_ULONG);
1135         CK_BBOOL rsa_priv_check_exportability(CK_ATTRIBUTE_TYPE type);
1136 CK_RV rsa_priv_check_required_attributes(TEMPLATE *, CK_ULONG);
1137 CK_RV rsa_priv_set_default_attributes(TEMPLATE *, CK_ULONG);
1138 CK_RV rsa_priv_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1139 CK_RV rsa_priv_wrap_get_data(TEMPLATE *, CK_BBOOL, CK_BYTE **, CK_ULONG *);
1140 CK_RV rsa_priv_unwrap(TEMPLATE *, CK_BYTE *, CK_ULONG);
1141 
1142 // Generic secret key routines
1143 CK_RV generic_secret_check_required_attributes(TEMPLATE *, CK_ULONG);
1144 CK_RV generic_secret_set_default_attributes(TEMPLATE *, CK_ULONG);
1145 CK_RV generic_secret_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1146 CK_RV generic_secret_wrap_get_data(TEMPLATE *, CK_BBOOL,
1147         CK_BYTE **, CK_ULONG *);
1148 
1149 CK_RV generic_secret_unwrap(TEMPLATE *, CK_BYTE *, CK_ULONG, CK_BBOOL fromend);
1150 
1151 CK_RV tpm_encrypt_data(TSS_HCONTEXT,
1152         TSS_HKEY, CK_BYTE *, CK_ULONG, CK_BYTE *, CK_ULONG *);
1153 
1154 CK_RV tpm_decrypt_data(TSS_HCONTEXT,
1155         TSS_HKEY, CK_BYTE *, CK_ULONG, CK_BYTE *, CK_ULONG *);
1156 
1157 CK_ULONG ber_encode_INTEGER(CK_BBOOL,
1158         CK_BYTE **, CK_ULONG *, CK_BYTE *, CK_ULONG);
1159 
1160 CK_RV ber_decode_INTEGER(CK_BYTE *,
1161         CK_BYTE **, CK_ULONG *, CK_ULONG *);
1162 
1163 CK_RV ber_encode_OCTET_STRING(CK_BBOOL,
1164         CK_BYTE **, CK_ULONG *, CK_BYTE *, CK_ULONG);
1165 
1166 CK_RV ber_decode_OCTET_STRING(CK_BYTE *,
1167         CK_BYTE **, CK_ULONG *, CK_ULONG *);
1168 
1169 CK_RV ber_encode_SEQUENCE(CK_BBOOL,
1170         CK_BYTE **, CK_ULONG *, CK_BYTE *, CK_ULONG);
1171 
1172 CK_RV ber_decode_SEQUENCE(CK_BYTE *,
1173         CK_BYTE **, CK_ULONG *, CK_ULONG *);
1174 
1175 CK_RV ber_encode_PrivateKeyInfo(CK_BBOOL,
1176         CK_BYTE **, CK_ULONG *, CK_BYTE *,
1177         CK_ULONG, CK_BYTE *, CK_ULONG);
1178 
1179 CK_RV ber_decode_PrivateKeyInfo(CK_BYTE *,
1180         CK_ULONG, CK_BYTE **, CK_ULONG *, CK_BYTE **);
1181 
1182 CK_RV ber_encode_RSAPrivateKey(CK_BBOOL,
1183         CK_BYTE **, CK_ULONG *, CK_ATTRIBUTE *,
1184         CK_ATTRIBUTE *, CK_ATTRIBUTE *, CK_ATTRIBUTE *,
1185         CK_ATTRIBUTE *, CK_ATTRIBUTE *, CK_ATTRIBUTE *,
1186         CK_ATTRIBUTE *);
1187 
1188 CK_RV ber_decode_RSAPrivateKey(CK_BYTE *,
1189         CK_ULONG, CK_ATTRIBUTE **, CK_ATTRIBUTE **,
1190         CK_ATTRIBUTE **, CK_ATTRIBUTE **, CK_ATTRIBUTE **,
1191         CK_ATTRIBUTE **, CK_ATTRIBUTE **, CK_ATTRIBUTE **);
1192 
1193 
1194 CK_RV ber_encode_DSAPrivateKey(CK_BBOOL,
1195         CK_BYTE **, CK_ULONG *, CK_ATTRIBUTE *,
1196         CK_ATTRIBUTE *, CK_ATTRIBUTE *, CK_ATTRIBUTE *);
1197 
1198 CK_RV ber_decode_DSAPrivateKey(CK_BYTE *,
1199         CK_ULONG, CK_ATTRIBUTE **, CK_ATTRIBUTE **,
1200         CK_ATTRIBUTE **, CK_ATTRIBUTE **);
1201 
1202 #define APPID   "TPM_STDLL"
1203 
1204 /* log to stdout */
1205 #define LogMessage(dest, priority, layer, fmt, ...) \
1206         (void) fprintf(dest, "%s %s %s:%d " fmt "\n", (char *)priority, \
1207                 (char *)layer, (char *)__FILE__,\
1208                 (int)__LINE__, __VA_ARGS__);
1209 
1210 #define LogMessage1(dest, priority, layer, data) \
1211         (void) fprintf(dest, "%s %s %s:%d %s\n", priority, layer, __FILE__, \
1212         __LINE__, data);
1213 
1214 /* Debug logging */
1215 #ifdef DEBUG
1216 #define LogDebug(fmt, ...) LogMessage(stdout, "LOG_DEBUG", APPID, \
1217         fmt, __VA_ARGS__)
1218 
1219 #define LogDebug1(data) LogMessage1(stdout, "LOG_DEBUG", APPID, data)
1220 
1221 /* Error logging */
1222 #define LogError(fmt, ...) LogMessage(stderr, "LOG_ERR", APPID,\
1223         "ERROR: " fmt, __VA_ARGS__)
1224 
1225 #define LogError1(data) LogMessage1(stderr, "LOG_ERR", APPID,\
1226         "ERROR: " data)
1227 
1228 /* Warn logging */
1229 #define LogWarn(fmt, ...) LogMessage(stdout, "LOG_WARNING", APPID,\
1230         "WARNING: " fmt, __VA_ARGS__)
1231 
1232 #define LogWarn1(data) LogMessage1(stdout, "LOG_WARNING", APPID,\
1233         "WARNING: " data)
1234 
1235 /* Info Logging */
1236 #define LogInfo(fmt, ...) LogMessage(stdout, "LOG_INFO", APPID,\
1237         fmt, __VA_ARGS__)
1238 
1239 #define LogInfo1(data) LogMessage1(stdout, "LOG_INFO", APPID, data)
1240 
1241 #define st_err_log(...) LogMessage(stderr, "ST MSG", APPID,\
1242         "", __VA_ARGS__)
1243 #else
1244 #define LogDebug(...)
1245 #define LogDebug1(...)
1246 #define LogBlob(...)
1247 #define LogError(...)
1248 #define LogError1(...)
1249 #define LogWarn(...)
1250 #define LogWarn1(...)
1251 #define LogInfo(...)
1252 #define LogInfo1(...)
1253 #define st_err_log(...)
1254 #endif
1255 
1256 /*
1257  * CK_FUNCTION_LIST is a structure holding a Cryptoki spec
1258  * version and pointers of appropriate types to all the
1259  * Cryptoki functions
1260  */
1261 
1262 /* CK_FUNCTION_LIST is new for v2.0 */
1263 
1264 typedef CK_RV
1265         (CK_PTR ST_C_Initialize)
1266         (void *ppFunctionList, CK_SLOT_ID slotID, CK_CHAR_PTR pCorrelator);
1267 typedef CK_RV
1268         (CK_PTR  ST_C_Finalize)
1269         (CK_VOID_PTR pReserved);
1270 typedef CK_RV
1271         (CK_PTR  ST_C_Terminate)();
1272 typedef CK_RV
1273         (CK_PTR  ST_C_GetInfo)
1274         (CK_INFO_PTR pInfo);
1275 typedef CK_RV
1276         (CK_PTR  ST_C_GetFunctionList)
1277         (CK_FUNCTION_LIST_PTR_PTR ppFunctionList);
1278 typedef CK_RV
1279         (CK_PTR  ST_C_GetSlotList)
1280         (CK_BBOOL tokenPresent, CK_SLOT_ID_PTR pSlotList,
1281         CK_ULONG_PTR pusCount);
1282 typedef CK_RV
1283         (CK_PTR  ST_C_GetSlotInfo)
1284         (CK_SLOT_ID slotID, CK_SLOT_INFO_PTR pInfo);
1285 typedef CK_RV
1286         (CK_PTR  ST_C_GetTokenInfo)
1287         (CK_SLOT_ID slotID, CK_TOKEN_INFO_PTR pInfo);
1288 typedef CK_RV
1289         (CK_PTR  ST_C_GetMechanismList)
1290         (CK_SLOT_ID slotID, CK_MECHANISM_TYPE_PTR pMechanismList,
1291         CK_ULONG_PTR pusCount);
1292 typedef CK_RV
1293         (CK_PTR  ST_C_GetMechanismInfo)
1294         (CK_SLOT_ID slotID, CK_MECHANISM_TYPE type,
1295         CK_MECHANISM_INFO_PTR pInfo);
1296 typedef CK_RV
1297         (CK_PTR  ST_C_InitToken)
1298         (CK_SLOT_ID slotID, CK_CHAR_PTR pPin, CK_ULONG usPinLen,
1299         CK_CHAR_PTR pLabel);
1300 typedef CK_RV
1301         (CK_PTR  ST_C_InitPIN)
1302         (ST_SESSION_T hSession, CK_CHAR_PTR pPin,
1303         CK_ULONG usPinLen);
1304 typedef CK_RV
1305         (CK_PTR  ST_C_SetPIN)
1306         (ST_SESSION_T hSession, CK_CHAR_PTR pOldPin,
1307         CK_ULONG usOldLen, CK_CHAR_PTR pNewPin,
1308         CK_ULONG usNewLen);
1309 
1310 typedef CK_RV
1311         (CK_PTR  ST_C_OpenSession)
1312         (CK_SLOT_ID slotID, CK_FLAGS flags,
1313         CK_SESSION_HANDLE_PTR phSession);
1314 
1315 typedef CK_RV
1316         (CK_PTR  ST_C_CloseSession)
1317         (ST_SESSION_T hSession);
1318 typedef CK_RV
1319         (CK_PTR  ST_C_CloseAllSessions)
1320         (CK_SLOT_ID slotID);
1321 typedef CK_RV
1322         (CK_PTR  ST_C_GetSessionInfo)
1323         (ST_SESSION_T hSession, CK_SESSION_INFO_PTR pInfo);
1324 typedef CK_RV
1325         (CK_PTR  ST_C_GetOperationState)
1326         (ST_SESSION_T hSession, CK_BYTE_PTR pOperationState,
1327         CK_ULONG_PTR pulOperationStateLen);
1328 typedef CK_RV
1329         (CK_PTR  ST_C_SetOperationState)
1330         (ST_SESSION_T hSession, CK_BYTE_PTR pOperationState,
1331         CK_ULONG ulOperationStateLen,
1332         CK_OBJECT_HANDLE hEncryptionKey,
1333         CK_OBJECT_HANDLE hAuthenticationKey);
1334 typedef CK_RV
1335         (CK_PTR  ST_C_Login)(ST_SESSION_T hSession,
1336         CK_USER_TYPE userType, CK_CHAR_PTR pPin,
1337         CK_ULONG usPinLen);
1338 typedef CK_RV
1339         (CK_PTR  ST_C_Logout)(ST_SESSION_T hSession);
1340 typedef CK_RV
1341         (CK_PTR  ST_C_CreateObject)
1342         (ST_SESSION_T hSession, CK_ATTRIBUTE_PTR pTemplate,
1343         CK_ULONG usCount, CK_OBJECT_HANDLE_PTR phObject);
1344 
1345 typedef CK_RV
1346         (CK_PTR  ST_C_CopyObject)
1347         (ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1348         CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount,
1349         CK_OBJECT_HANDLE_PTR phNewObject);
1350 typedef CK_RV
1351         (CK_PTR  ST_C_DestroyObject)
1352         (ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject);
1353 typedef CK_RV
1354         (CK_PTR  ST_C_GetObjectSize)
1355         (ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1356         CK_ULONG_PTR pusSize);
1357 typedef CK_RV
1358         (CK_PTR  ST_C_GetAttributeValue)
1359         (ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1360         CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount);
1361 typedef CK_RV
1362         (CK_PTR  ST_C_SetAttributeValue)
1363         (ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1364         CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount);
1365 typedef CK_RV
1366         (CK_PTR  ST_C_FindObjectsInit)
1367         (ST_SESSION_T hSession, CK_ATTRIBUTE_PTR pTemplate,
1368         CK_ULONG usCount);
1369 typedef CK_RV
1370         (CK_PTR  ST_C_FindObjects)
1371         (ST_SESSION_T hSession,
1372         CK_OBJECT_HANDLE_PTR phObject, CK_ULONG usMaxObjectCount,
1373         CK_ULONG_PTR pusObjectCount);
1374 typedef CK_RV
1375         (CK_PTR  ST_C_FindObjectsFinal)
1376         (ST_SESSION_T hSession);
1377 typedef CK_RV
1378         (CK_PTR  ST_C_EncryptInit)
1379         (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1380         CK_OBJECT_HANDLE hKey);
1381 typedef CK_RV
1382         (CK_PTR  ST_C_Encrypt)
1383         (ST_SESSION_T hSession, CK_BYTE_PTR pData,
1384         CK_ULONG usDataLen, CK_BYTE_PTR pEncryptedData,
1385         CK_ULONG_PTR pusEncryptedDataLen);
1386 typedef CK_RV
1387         (CK_PTR  ST_C_EncryptUpdate)
1388         (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1389         CK_ULONG usPartLen, CK_BYTE_PTR pEncryptedPart,
1390         CK_ULONG_PTR pusEncryptedPartLen);
1391 typedef CK_RV
1392         (CK_PTR  ST_C_EncryptFinal)
1393         (ST_SESSION_T hSession,
1394         CK_BYTE_PTR pLastEncryptedPart,
1395         CK_ULONG_PTR pusLastEncryptedPartLen);
1396 typedef CK_RV
1397         (CK_PTR  ST_C_DecryptInit)
1398         (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1399         CK_OBJECT_HANDLE hKey);
1400 typedef CK_RV
1401         (CK_PTR  ST_C_Decrypt)
1402         (ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedData,
1403         CK_ULONG usEncryptedDataLen, CK_BYTE_PTR pData,
1404         CK_ULONG_PTR pusDataLen);
1405 typedef CK_RV
1406         (CK_PTR  ST_C_DecryptUpdate)
1407         (ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedPart,
1408         CK_ULONG usEncryptedPartLen, CK_BYTE_PTR pPart,
1409         CK_ULONG_PTR pusPartLen);
1410 typedef CK_RV
1411         (CK_PTR  ST_C_DecryptFinal)
1412         (ST_SESSION_T hSession, CK_BYTE_PTR pLastPart,
1413         CK_ULONG_PTR pusLastPartLen);
1414 typedef CK_RV
1415         (CK_PTR  ST_C_DigestInit)
1416         (ST_SESSION_T hSession,
1417         CK_MECHANISM_PTR pMechanism);
1418 typedef CK_RV
1419         (CK_PTR  ST_C_Digest)
1420         (ST_SESSION_T hSession, CK_BYTE_PTR pData,
1421         CK_ULONG usDataLen, CK_BYTE_PTR pDigest,
1422         CK_ULONG_PTR pusDigestLen);
1423 typedef CK_RV
1424         (CK_PTR  ST_C_DigestUpdate)
1425         (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1426         CK_ULONG usPartLen);
1427 typedef CK_RV
1428         (CK_PTR  ST_C_DigestKey)
1429         (ST_SESSION_T hSession, CK_OBJECT_HANDLE hKey);
1430 typedef CK_RV
1431         (CK_PTR  ST_C_DigestFinal)
1432         (ST_SESSION_T hSession, CK_BYTE_PTR pDigest,
1433         CK_ULONG_PTR pusDigestLen);
1434 typedef CK_RV
1435         (CK_PTR  ST_C_SignInit)
1436         (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1437         CK_OBJECT_HANDLE hKey);
1438 typedef CK_RV
1439         (CK_PTR  ST_C_Sign)
1440         (ST_SESSION_T hSession, CK_BYTE_PTR pData,
1441         CK_ULONG usDataLen, CK_BYTE_PTR pSignature,
1442         CK_ULONG_PTR pusSignatureLen);
1443 typedef CK_RV
1444         (CK_PTR  ST_C_SignUpdate)
1445         (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1446         CK_ULONG usPartLen);
1447 typedef CK_RV
1448         (CK_PTR  ST_C_SignFinal)
1449         (ST_SESSION_T hSession, CK_BYTE_PTR pSignature,
1450         CK_ULONG_PTR pusSignatureLen);
1451 typedef CK_RV
1452         (CK_PTR  ST_C_SignRecoverInit)
1453         (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1454         CK_OBJECT_HANDLE hKey);
1455 typedef CK_RV
1456         (CK_PTR  ST_C_SignRecover)
1457         (ST_SESSION_T hSession, CK_BYTE_PTR pData,
1458         CK_ULONG usDataLen, CK_BYTE_PTR pSignature,
1459         CK_ULONG_PTR pusSignatureLen);
1460 typedef CK_RV
1461         (CK_PTR  ST_C_VerifyInit)
1462         (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1463         CK_OBJECT_HANDLE hKey);
1464 typedef CK_RV
1465         (CK_PTR  ST_C_Verify)
1466         (ST_SESSION_T hSession, CK_BYTE_PTR pData,
1467         CK_ULONG usDataLen, CK_BYTE_PTR pSignature,
1468         CK_ULONG usSignatureLen);
1469 typedef CK_RV
1470         (CK_PTR  ST_C_VerifyUpdate)
1471         (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1472         CK_ULONG usPartLen);
1473 typedef CK_RV
1474         (CK_PTR  ST_C_VerifyFinal)
1475         (ST_SESSION_T hSession, CK_BYTE_PTR pSignature,
1476         CK_ULONG usSignatureLen);
1477 typedef CK_RV
1478         (CK_PTR  ST_C_VerifyRecoverInit)
1479         (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1480         CK_OBJECT_HANDLE hKey);
1481 typedef CK_RV
1482         (CK_PTR  ST_C_VerifyRecover)
1483         (ST_SESSION_T hSession, CK_BYTE_PTR pSignature,
1484         CK_ULONG usSignatureLen, CK_BYTE_PTR pData,
1485         CK_ULONG_PTR pusDataLen);
1486 typedef CK_RV
1487         (CK_PTR  ST_C_DigestEncryptUpdate)
1488         (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1489         CK_ULONG ulPartLen, CK_BYTE_PTR pEncryptedPart,
1490         CK_ULONG_PTR pulEncryptedPartLen);
1491 typedef CK_RV
1492         (CK_PTR  ST_C_DecryptDigestUpdate)
1493         (ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedPart,
1494         CK_ULONG ulEncryptedPartLen, CK_BYTE_PTR pPart,
1495         CK_ULONG_PTR pulPartLen);
1496 typedef CK_RV
1497         (CK_PTR  ST_C_SignEncryptUpdate)
1498         (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1499         CK_ULONG ulPartLen, CK_BYTE_PTR pEncryptedPart,
1500         CK_ULONG_PTR pulEncryptedPartLen);
1501 typedef CK_RV
1502         (CK_PTR  ST_C_DecryptVerifyUpdate)
1503         (ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedPart,
1504         CK_ULONG ulEncryptedPartLen, CK_BYTE_PTR pPart,
1505         CK_ULONG_PTR pulPartLen);
1506 typedef CK_RV
1507         (CK_PTR  ST_C_GenerateKey)
1508         (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1509         CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount,
1510         CK_OBJECT_HANDLE_PTR phKey);
1511 typedef CK_RV
1512         (CK_PTR  ST_C_GenerateKeyPair)
1513         (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1514         CK_ATTRIBUTE_PTR pPublicKeyTemplate,
1515         CK_ULONG usPublicKeyAttributeCount,
1516         CK_ATTRIBUTE_PTR pPrivateKeyTemplate,
1517         CK_ULONG usPrivateKeyAttributeCount,
1518         CK_OBJECT_HANDLE_PTR phPrivateKey,
1519         CK_OBJECT_HANDLE_PTR phPublicKey);
1520 typedef CK_RV
1521         (CK_PTR  ST_C_WrapKey)
1522         (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1523         CK_OBJECT_HANDLE hWrappingKey, CK_OBJECT_HANDLE hKey,
1524         CK_BYTE_PTR pWrappedKey, CK_ULONG_PTR pusWrappedKeyLen);
1525 typedef CK_RV
1526         (CK_PTR  ST_C_UnwrapKey)
1527         (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1528         CK_OBJECT_HANDLE hUnwrappingKey, CK_BYTE_PTR pWrappedKey,
1529         CK_ULONG usWrappedKeyLen, CK_ATTRIBUTE_PTR pTemplate,
1530         CK_ULONG usAttributeCount, CK_OBJECT_HANDLE_PTR phKey);
1531 typedef CK_RV
1532         (CK_PTR  ST_C_DeriveKey)
1533         (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1534         CK_OBJECT_HANDLE hBaseKey, CK_ATTRIBUTE_PTR pTemplate,
1535         CK_ULONG usAttributeCount, CK_OBJECT_HANDLE_PTR phKey);
1536 typedef CK_RV
1537         (CK_PTR  ST_C_SeedRandom)
1538         (ST_SESSION_T hSession, CK_BYTE_PTR pSeed,
1539         CK_ULONG usSeedLen);
1540 typedef CK_RV
1541         (CK_PTR  ST_C_GenerateRandom)
1542         (ST_SESSION_T hSession, CK_BYTE_PTR pRandomData,
1543         CK_ULONG usRandomLen);
1544 typedef CK_RV
1545         (CK_PTR  ST_C_GetFunctionStatus)
1546         (ST_SESSION_T hSession);
1547 typedef CK_RV
1548         (CK_PTR  ST_C_CancelFunction)
1549         (ST_SESSION_T hSession);
1550 typedef CK_RV
1551         (CK_PTR  ST_Notify)
1552         (ST_SESSION_T hSession, CK_NOTIFICATION event,
1553         CK_VOID_PTR pApplication);
1554 typedef CK_RV
1555         (CK_PTR  ST_C_WaitForSlotEvent)
1556         (CK_FLAGS flags, CK_SLOT_ID_PTR pSlot,
1557         CK_VOID_PTR pReserved);
1558 
1559 
1560 
1561 struct ST_FCN_LIST {
1562 
1563         ST_C_Initialize ST_Initialize;
1564         ST_C_Finalize ST_Finalize;
1565 
1566         ST_C_GetTokenInfo ST_GetTokenInfo;
1567         ST_C_GetMechanismList ST_GetMechanismList;
1568         ST_C_GetMechanismInfo ST_GetMechanismInfo;
1569         ST_C_InitToken ST_InitToken;
1570         ST_C_InitPIN ST_InitPIN;
1571         ST_C_SetPIN ST_SetPIN;
1572 
1573         ST_C_OpenSession ST_OpenSession;
1574         ST_C_CloseSession ST_CloseSession;
1575         ST_C_GetSessionInfo ST_GetSessionInfo;
1576         ST_C_GetOperationState ST_GetOperationState;
1577         ST_C_SetOperationState ST_SetOperationState;
1578         ST_C_Login ST_Login;
1579         ST_C_Logout ST_Logout;
1580 
1581         ST_C_CreateObject ST_CreateObject;
1582         ST_C_CopyObject ST_CopyObject;
1583         ST_C_DestroyObject ST_DestroyObject;
1584         ST_C_GetObjectSize ST_GetObjectSize;
1585         ST_C_GetAttributeValue ST_GetAttributeValue;
1586         ST_C_SetAttributeValue ST_SetAttributeValue;
1587         ST_C_FindObjectsInit ST_FindObjectsInit;
1588         ST_C_FindObjects ST_FindObjects;
1589         ST_C_FindObjectsFinal ST_FindObjectsFinal;
1590 
1591 
1592         ST_C_EncryptInit ST_EncryptInit;
1593         ST_C_Encrypt ST_Encrypt;
1594         ST_C_EncryptUpdate ST_EncryptUpdate;
1595         ST_C_EncryptFinal ST_EncryptFinal;
1596         ST_C_DecryptInit ST_DecryptInit;
1597         ST_C_Decrypt ST_Decrypt;
1598         ST_C_DecryptUpdate ST_DecryptUpdate;
1599         ST_C_DecryptFinal ST_DecryptFinal;
1600         ST_C_DigestInit ST_DigestInit;
1601         ST_C_Digest ST_Digest;
1602         ST_C_DigestUpdate ST_DigestUpdate;
1603         ST_C_DigestKey ST_DigestKey;
1604         ST_C_DigestFinal ST_DigestFinal;
1605         ST_C_SignInit ST_SignInit;
1606         ST_C_Sign ST_Sign;
1607         ST_C_SignUpdate ST_SignUpdate;
1608         ST_C_SignFinal ST_SignFinal;
1609         ST_C_SignRecoverInit ST_SignRecoverInit;
1610         ST_C_SignRecover ST_SignRecover;
1611         ST_C_VerifyInit ST_VerifyInit;
1612         ST_C_Verify ST_Verify;
1613         ST_C_VerifyUpdate ST_VerifyUpdate;
1614         ST_C_VerifyFinal ST_VerifyFinal;
1615         ST_C_VerifyRecoverInit ST_VerifyRecoverInit;
1616         ST_C_VerifyRecover ST_VerifyRecover;
1617         ST_C_DigestEncryptUpdate ST_DigestEncryptUpdate;
1618         ST_C_DecryptDigestUpdate ST_DecryptDigestUpdate;
1619         ST_C_SignEncryptUpdate ST_SignEncryptUpdate;
1620         ST_C_DecryptVerifyUpdate ST_DecryptVerifyUpdate;
1621         ST_C_GenerateKey ST_GenerateKey;
1622         ST_C_GenerateKeyPair ST_GenerateKeyPair;
1623         ST_C_WrapKey ST_WrapKey;
1624         ST_C_UnwrapKey ST_UnwrapKey;
1625         ST_C_DeriveKey ST_DeriveKey;
1626         ST_C_SeedRandom ST_SeedRandom;
1627         ST_C_GenerateRandom ST_GenerateRandom;
1628         ST_C_GetFunctionStatus ST_GetFunctionStatus;
1629         ST_C_CancelFunction ST_CancelFunction;
1630 };
1631 
1632 typedef struct ST_FCN_LIST  STDLL_FcnList_t;
1633 
1634 #endif /* _TPMTOK_INT_H */
--- EOF ---