1 /*
2 * The Initial Developer of the Original Code is International
3 * Business Machines Corporation. Portions created by IBM
4 * Corporation are Copyright(C) 2005 International Business
5 * Machines Corporation. All Rights Reserved.
6 *
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the Common Public License as published by
9 * IBM Corporation; either version 1 of the License, or(at your option)
10 * any later version.
11 *
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * Common Public License for more details.
16 *
17 * You should have received a copy of the Common Public License
18 * along with this program; if not, a copy can be viewed at
19 * http://www.opensource.org/licenses/cpl1.0.php.
20 */
21
22 /* (C) COPYRIGHT International Business Machines Corp. 2001, 2002, 2005 */
23 /*
24 * Copyright 2009 Sun Microsystems, Inc. All rights reserved.
25 * Use is subject to license terms.
26 * Copyright 2018 Jason King
27 */
28
29 #ifndef _TPMTOK_INT_H
30 #define _TPMTOK_INT_H
31
32 #include <stdio.h>
33 #include <pthread.h>
34 #include <string.h>
35 #include <strings.h>
36 #include <sys/md5.h>
37 #include <sys/sha1.h>
38 #include <limits.h>
39 #include <syslog.h>
40 #include <errno.h>
41 #include <sys/types.h>
42 #include <sys/stat.h>
43 #include <sys/param.h>
44 #include <sys/byteorder.h>
45 #include <security/cryptoki.h>
46
47 #include <tss/platform.h>
48 #include <tss/tss_defines.h>
49 #include <tss/tss_typedef.h>
50 #include <tss/tss_structs.h>
51 #include <tss/tspi.h>
52
53 #define VERSION_MAJOR 2
54 #define VERSION_MINOR 1
55
56 #define MAX_SESSION_COUNT 64
57 #define MAX_PIN_LEN 256
58 #define MIN_PIN_LEN 1
59
60 #define MAX_SLOT_ID 10
61
62 #ifndef MIN
63 #define MIN(a, b) ((a) < (b) ? (a) : (b))
64 #endif
65
66 #define MODE_COPY (1 << 0)
67 #define MODE_CREATE (1 << 1)
68 #define MODE_KEYGEN (1 << 2)
69 #define MODE_MODIFY (1 << 3)
70 #define MODE_DERIVE (1 << 4)
71 #define MODE_UNWRAP (1 << 5)
72
73 // RSA block formatting types
74 //
75 #define PKCS_BT_1 1
76 #define PKCS_BT_2 2
77
78 #define OP_ENCRYPT_INIT 1
79 #define OP_DECRYPT_INIT 2
80 #define OP_WRAP 3
81 #define OP_UNWRAP 4
82 #define OP_SIGN_INIT 5
83 #define OP_VERIFY_INIT 6
84
85 enum {
86 STATE_INVALID = 0,
87 STATE_ENCR,
88 STATE_DECR,
89 STATE_DIGEST,
90 STATE_SIGN,
91 STATE_VERIFY
92 };
93
94 #define SHA1_BLOCK_SIZE 64
95 #define SHA1_BLOCK_SIZE_MASK (SHA1_BLOCK_SIZE - 1)
96
97 #define RSA_BLOCK_SIZE 256
98
99 #ifndef PATH_MAX
100 #define PATH_MAX MAXPATHLEN
101 #endif
102
103 #ifndef PACK_DATA
104 #define PACK_DATA
105 #endif
106
107 #define MD5_BLOCK_SIZE 64
108
109 #define DSA_SIGNATURE_SIZE 40
110
111 #define DEFAULT_SO_PIN "87654321"
112
113 typedef enum {
114 ALL = 1,
115 PRIVATE,
116 PUBLIC
117 } SESS_OBJ_TYPE;
118
119 typedef struct _DL_NODE
120 {
121 struct _DL_NODE *next;
122 struct _DL_NODE *prev;
123 void *data;
124 } DL_NODE;
125
126 #define TOKEN_DATA_FILE "token.dat"
127 #define TOKEN_OBJ_DIR "objects"
128 #define TOKEN_OBJ_INDEX_FILE "obj.idx"
129
130 #define TPMTOK_UUID_INDEX_FILENAME "uuids.idx"
131
132 /*
133 * Filenames used to store migration data.
134 */
135 #define SO_MAKEY_FILENAME "so_makey.dat"
136 #define USER_MAKEY_FILENAME "user_makey.dat"
137 #define SO_KEYBLOB_FILENAME "so_blob.dat"
138 #define USER_KEYBLOB_FILENAME "user_blob.dat"
139
140 #define __FUNCTION__ __func__
141
142 //
143 // Both of the strings below have a length of 32 chars and must be
144 // padded with spaces, and non - null terminated.
145 //
146 #define PKW_CRYPTOKI_VERSION_MAJOR 2
147 #define PKW_CRYPTOKI_VERSION_MINOR 1
148 #define PKW_CRYPTOKI_MANUFACTURER "Sun Microsystems, Inc. "
149 #define PKW_CRYPTOKI_LIBDESC "PKCS#11 Interface for TPM "
150 #define PKW_CRYPTOKI_LIB_VERSION_MAJOR 1
151 #define PKW_CRYPTOKI_LIB_VERSION_MINOR 0
152 #define PKW_MAX_DEVICES 10
153
154 #define MAX_TOK_OBJS 2048
155 #define NUMBER_SLOTS_MANAGED 1
156 #define TPM_SLOTID 1
157
158 /*
159 * CKA_HIDDEN will be used to filter return results on
160 * a C_FindObjects call. Used for objects internal to the
161 * TPM token for management
162 */
163 /* custom attributes for the TPM token */
164 #define CKA_HIDDEN CKA_VENDOR_DEFINED + 0x01
165 #define CKA_IBM_OPAQUE CKA_VENDOR_DEFINED + 0x02
166 /*
167 * CKA_ENC_AUTHDATA will be used to store the encrypted SHA-1
168 * hashes of auth data passed in for TPM keys. The authdata
169 * will be encrypted using either the public
170 * leaf key or the private leaf key
171 */
172 #define CKA_ENC_AUTHDATA CKA_VENDOR_DEFINED + 0x03
173
174 /* custom return codes for the TPM token */
175 #define CKR_KEY_NOT_FOUND CKR_VENDOR_DEFINED + 0x01
176 #define CKR_FILE_NOT_FOUND CKR_VENDOR_DEFINED + 0x02
177
178 typedef struct {
179 CK_SLOT_ID slotID;
180 CK_SESSION_HANDLE sessionh;
181 } ST_SESSION_T;
182
183 typedef ST_SESSION_T ST_SESSION_HANDLE;
184
185 typedef struct {
186 void *Previous;
187 void *Next;
188 CK_SLOT_ID SltId;
189 CK_SESSION_HANDLE RealHandle;
190 } Session_Struct_t;
191
192 typedef Session_Struct_t *SessStructP;
193
194 typedef struct {
195 pid_t Pid;
196 pthread_mutex_t ProcMutex;
197 Session_Struct_t *SessListBeg;
198 Session_Struct_t *SessListEnd;
199 pthread_mutex_t SessListMutex;
200 } API_Proc_Struct_t;
201
202
203
204
205 enum {
206 PRF_DUMMYFUNCTION = 1,
207 PRF_FCVFUNCTION,
208 PRF_INITIALIZE,
209 PRF_FINALIZE,
210 PRF_GETINFO,
211 PRF_GETFUNCTIONLIST,
212 PRF_GETSLOTLIST,
213 PRF_GETSLOTINFO,
214 PRF_GETTOKENINFO,
215 PRF_GETMECHLIST,
216 PRF_GETMECHINFO,
217 PRF_INITTOKEN,
218 PRF_INITPIN,
219 PRF_SETPIN,
220 PRF_OPENSESSION,
221 PRF_CLOSESESSION,
222 PRF_CLOSEALLSESSIONS,
223 PRF_GETSESSIONINFO,
224 PRF_GETOPERATIONSTATE,
225 PRF_SETOPERATIONSTATE,
226 PRF_LOGIN,
227 PRF_LOGOUT,
228 PRF_CREATEOBJECT,
229 PRF_COPYOBJECT,
230 PRF_DESTROYOBJECT,
231 PRF_GETOBJECTSIZE,
232 PRF_GETATTRIBUTEVALUE,
233 PRF_SETATTRIBUTEVALUE,
234 PRF_FINDOBJECTSINIT,
235 PRF_FINDOBJECTS,
236 PRF_FINDOBJECTSFINAL,
237 PRF_ENCRYPTINIT,
238 PRF_ENCRYPT,
239 PRF_ENCRYPTUPDATE,
240 PRF_ENCRYPTFINAL,
241 PRF_DECRYPTINIT,
242 PRF_DECRYPT,
243 PRF_DECRYPTUPDATE,
244 PRF_DECRYPTFINAL,
245 PRF_DIGESTINIT,
246 PRF_DIGEST,
247 PRF_DIGESTUPDATE,
248 PRF_DIGESTKEY,
249 PRF_DIGESTFINAL,
250 PRF_SIGNINIT,
251 PRF_SIGN,
252 PRF_SIGNUPDATE,
253 PRF_SIGNFINAL,
254 PRF_SIGNRECOVERINIT,
255 PRF_SIGNRECOVER,
256 PRF_VERIFYINIT,
257 PRF_VERIFY,
258 PRF_VERIFYUPDATE,
259 PRF_VERIFYFINAL,
260 PRF_VERIFYRECOVERINIT,
261 PRF_VERIFYRECOVER,
262 PRF_GENKEY,
263 PRF_GENKEYPAIR,
264 PRF_WRAPKEY,
265 PRF_UNWRAPKEY,
266 PRF_DERIVEKEY,
267 PRF_GENRND,
268 PRF_LASTENTRY
269 };
270
271 typedef struct _ENCR_DECR_CONTEXT
272 {
273 CK_OBJECT_HANDLE key;
274 CK_MECHANISM mech;
275 CK_BYTE *context;
276 CK_ULONG context_len;
277 CK_BBOOL multi;
278 CK_BBOOL active;
279 } ENCR_DECR_CONTEXT;
280
281 typedef struct _DIGEST_CONTEXT
282 {
283 CK_MECHANISM mech;
284 union {
285 MD5_CTX *md5ctx;
286 SHA1_CTX *sha1ctx;
287 void *ref; /* reference ptr for the union */
288 } context;
289 CK_ULONG context_len;
290 CK_BBOOL multi;
291 CK_BBOOL active;
292 } DIGEST_CONTEXT;
293
294 typedef struct _SIGN_VERIFY_CONTEXT
295 {
296 CK_OBJECT_HANDLE key;
297 CK_MECHANISM mech; // current sign mechanism
298 void *context; // temporary work area
299 CK_ULONG context_len;
300 CK_BBOOL multi; // is this a multi - part operation?
301 CK_BBOOL recover; // are we in recover mode?
302 CK_BBOOL active;
303 } SIGN_VERIFY_CONTEXT;
304
305 typedef struct _SESSION
306 {
307 CK_SESSION_HANDLE handle;
308 CK_SESSION_INFO session_info;
309
310 CK_OBJECT_HANDLE *find_list; // array of CK_OBJECT_HANDLE
311 CK_ULONG find_count; // # handles in the list
312 CK_ULONG find_len; // max # of handles in the list
313 CK_ULONG find_idx; // current position
314 CK_BBOOL find_active;
315
316 ENCR_DECR_CONTEXT encr_ctx;
317 ENCR_DECR_CONTEXT decr_ctx;
318 DIGEST_CONTEXT digest_ctx;
319 SIGN_VERIFY_CONTEXT sign_ctx;
320 SIGN_VERIFY_CONTEXT verify_ctx;
321
322 TSS_HCONTEXT hContext;
323 } SESSION;
324
325 typedef struct _TEMPLATE
326 {
327 DL_NODE *attribute_list;
328 } TEMPLATE;
329
330 typedef struct _OBJECT
331 {
332 CK_OBJECT_CLASS class;
333 CK_BYTE name[8]; // for token objects
334
335 SESSION *session; // creator; only for session objects
336 TEMPLATE *template;
337 CK_ULONG count_hi; // only significant for token objects
338 CK_ULONG count_lo; // only significant for token objects
339 CK_ULONG index;
340 } OBJECT;
341
342 typedef struct _OBJECT_MAP
343 {
344 CK_OBJECT_HANDLE handle;
345 CK_BBOOL is_private;
346 CK_BBOOL is_session_obj;
347 SESSION *session;
348 OBJECT *ptr;
349 } OBJECT_MAP;
350
351 typedef struct _ATTRIBUTE_PARSE_LIST
352 {
353 CK_ATTRIBUTE_TYPE type;
354 void *ptr;
355 CK_ULONG len;
356 CK_BBOOL found;
357 } ATTRIBUTE_PARSE_LIST;
358
359 typedef struct _OP_STATE_DATA
360 {
361 CK_STATE session_state;
362 CK_ULONG active_operation;
363 CK_ULONG data_len;
364 } OP_STATE_DATA;
365
366 typedef struct _TWEAK_VEC
367 {
368 int allow_key_mods;
369 } TWEAK_VEC;
370
371 typedef struct _TOKEN_DATA
372 {
373 CK_TOKEN_INFO token_info;
374 CK_BYTE user_pin_sha[SHA1_DIGEST_LENGTH];
375 CK_BYTE so_pin_sha[SHA1_DIGEST_LENGTH];
376 CK_BYTE next_token_object_name[8];
377 TWEAK_VEC tweak_vector;
378 } TOKEN_DATA;
379
380 typedef struct _RSA_DIGEST_CONTEXT {
381 DIGEST_CONTEXT hash_context;
382 CK_BBOOL flag;
383 } RSA_DIGEST_CONTEXT;
384
385 typedef struct _MECH_LIST_ELEMENT
386 {
387 CK_MECHANISM_TYPE mech_type;
388 CK_MECHANISM_INFO mech_info;
389 } MECH_LIST_ELEMENT;
390
391 struct mech_list_item;
392
393 struct mech_list_item {
394 struct mech_list_item *next;
395 MECH_LIST_ELEMENT element;
396 };
397
398 struct mech_list_item *
399 find_mech_list_item_for_type(CK_MECHANISM_TYPE type,
400 struct mech_list_item *head);
401
402 typedef struct _TOK_OBJ_ENTRY
403 {
404 CK_BBOOL deleted;
405 char name[8];
406 CK_ULONG count_lo;
407 CK_ULONG count_hi;
408 } TOK_OBJ_ENTRY;
409
410 typedef struct _LW_SHM_TYPE
411 {
412 pthread_mutex_t mutex;
413 TOKEN_DATA nv_token_data;
414 CK_ULONG num_priv_tok_obj;
415 CK_ULONG num_publ_tok_obj;
416 CK_BBOOL priv_loaded;
417 CK_BBOOL publ_loaded;
418 CK_BBOOL token_available;
419 TOK_OBJ_ENTRY publ_tok_objs[ MAX_TOK_OBJS ];
420 TOK_OBJ_ENTRY priv_tok_objs[ MAX_TOK_OBJS ];
421 } LW_SHM_TYPE;
422
423 typedef unsigned int CK_ULONG_32;
424 typedef CK_ULONG_32 CK_OBJECT_CLASS_32;
425 typedef CK_ULONG_32 CK_ATTRIBUTE_TYPE_32;
426
427 typedef struct CK_ATTRIBUTE_32 {
428 CK_ATTRIBUTE_TYPE_32 type;
429 CK_ULONG_32 pValue;
430 CK_ULONG_32 ulValueLen;
431 } CK_ATTRIBUTE_32;
432
433 char *get_tpm_keystore_path();
434
435 struct messages {
436 char *msg;
437 };
438
439 struct token_specific_struct {
440 CK_BYTE token_debug_tag[MAXPATHLEN];
441
442 CK_RV (*t_init)(char *, CK_SLOT_ID, TSS_HCONTEXT *);
443 int (*t_slot2local)();
444
445 CK_RV (*t_rng)(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
446 CK_RV (*t_session)(CK_SLOT_ID);
447 CK_RV (*t_final)(TSS_HCONTEXT);
448 CK_RV (*t_rsa_decrypt)(TSS_HCONTEXT, CK_BYTE *,
449 CK_ULONG, CK_BYTE *, CK_ULONG *, OBJECT *);
450
451 CK_RV (*t_rsa_encrypt)(
452 TSS_HCONTEXT,
453 CK_BYTE *, CK_ULONG, CK_BYTE *,
454 CK_ULONG *, OBJECT *);
455
456 CK_RV (*t_rsa_sign)(TSS_HCONTEXT,
457 CK_BYTE *,
458 CK_ULONG,
459 CK_BYTE *,
460 CK_ULONG *,
461 OBJECT *);
462
463 CK_RV (*t_rsa_verify)(TSS_HCONTEXT,
464 CK_BYTE *,
465 CK_ULONG,
466 CK_BYTE *,
467 CK_ULONG,
468 OBJECT *);
469
470 CK_RV (*t_rsa_generate_keypair)(TSS_HCONTEXT, TEMPLATE *, TEMPLATE *);
471
472 CK_RV (*t_sha_init)(DIGEST_CONTEXT *);
473
474 CK_RV (*t_sha_update)(
475 DIGEST_CONTEXT *,
476 CK_BYTE *,
477 CK_ULONG);
478
479 CK_RV (*t_sha_final)(
480 DIGEST_CONTEXT *,
481 CK_BYTE *,
482 CK_ULONG *);
483 CK_RV (*t_login)(TSS_HCONTEXT, CK_USER_TYPE, CK_BYTE *, CK_ULONG);
484 CK_RV (*t_logout)(TSS_HCONTEXT);
485 CK_RV (*t_init_pin)(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
486 CK_RV (*t_set_pin)(ST_SESSION_HANDLE, CK_BYTE *,
487 CK_ULONG, CK_BYTE *, CK_ULONG);
488 CK_RV (*t_verify_so_pin)(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
489 };
490
491 typedef struct token_specific_struct token_spec_t;
492
493 /*
494 * Global Variables
495 */
496 extern void copy_slot_info(CK_SLOT_ID, CK_SLOT_INFO_PTR);
497
498 extern struct messages err_msg[];
499
500 extern token_spec_t token_specific;
501 extern CK_BBOOL initialized;
502 extern char *card_function_names[];
503 extern char *total_function_names[];
504
505 extern MECH_LIST_ELEMENT mech_list[];
506 extern CK_ULONG mech_list_len;
507
508 extern pthread_mutex_t native_mutex;
509
510 extern void *xproclock;
511
512 extern pthread_mutex_t pkcs_mutex, obj_list_mutex,
513 sess_list_mutex, login_mutex;
514
515 extern DL_NODE *sess_list;
516 extern DL_NODE *sess_obj_list;
517 extern DL_NODE *publ_token_obj_list;
518 extern DL_NODE *priv_token_obj_list;
519 extern DL_NODE *object_map;
520
521 extern CK_BYTE so_pin_md5[MD5_DIGEST_LENGTH];
522 extern CK_BYTE user_pin_md5[MD5_DIGEST_LENGTH];
523
524 extern CK_BYTE default_user_pin_sha[SHA1_DIGEST_LENGTH];
525 extern CK_BYTE default_so_pin_sha[SHA1_DIGEST_LENGTH];
526 extern CK_BYTE default_so_pin_md5[MD5_DIGEST_LENGTH];
527
528 extern LW_SHM_TYPE *global_shm;
529
530 extern TOKEN_DATA *nv_token_data;
531
532 extern CK_ULONG next_object_handle;
533 extern CK_ULONG next_session_handle;
534
535 extern CK_STATE global_login_state;
536
537 extern CK_BYTE ber_AlgIdRSAEncryption[];
538 extern CK_ULONG ber_AlgIdRSAEncryptionLen;
539 extern CK_BYTE ber_rsaEncryption[];
540 extern CK_ULONG ber_rsaEncryptionLen;
541 extern CK_BYTE ber_idDSA[];
542 extern CK_ULONG ber_idDSALen;
543
544 extern CK_BYTE ber_md5WithRSAEncryption[];
545 extern CK_ULONG ber_md5WithRSAEncryptionLen;
546 extern CK_BYTE ber_sha1WithRSAEncryption[];
547 extern CK_ULONG ber_sha1WithRSAEncryptionLen;
548 extern CK_BYTE ber_AlgMd5[];
549 extern CK_ULONG ber_AlgMd5Len;
550 extern CK_BYTE ber_AlgSha1[];
551 extern CK_ULONG ber_AlgSha1Len;
552
553 extern CK_C_INITIALIZE_ARGS cinit_args;
554
555 /*
556 * Function Prototypes
557 */
558 void *attach_shared_memory();
559 void detach_shared_memory(char *);
560
561 int API_Initialized();
562 void Terminate_All_Process_Sessions();
563 int API_Register();
564 void API_UnRegister();
565
566 void CreateXProcLock(void *);
567 int XProcLock(void *);
568 int XProcUnLock(void *);
569
570 void loginit();
571 void logterm();
572 void logit(int, char *, ...);
573 void AddToSessionList(Session_Struct_t *);
574 void RemoveFromSessionList(Session_Struct_t *);
575
576 int Valid_Session(Session_Struct_t *, ST_SESSION_T *);
577
578 CK_BBOOL pin_expired(CK_SESSION_INFO *, CK_FLAGS);
579 CK_BBOOL pin_locked(CK_SESSION_INFO *, CK_FLAGS);
580 void set_login_flags(CK_USER_TYPE, CK_FLAGS *);
581
582 extern void init_slot_info(TOKEN_DATA *);
583
584 CK_RV update_migration_data(TSS_HCONTEXT,
585 TSS_HKEY, TSS_HKEY, char *, char *, BYTE *, BYTE *);
586 CK_RV token_rng(TSS_HCONTEXT, CK_BYTE *, CK_ULONG);
587
588 TSS_RESULT set_public_modulus(TSS_HCONTEXT, TSS_HKEY,
589 unsigned long, unsigned char *);
590 TSS_RESULT open_tss_context(TSS_HCONTEXT *);
591 CK_RV token_get_tpm_info(TSS_HCONTEXT, TOKEN_DATA *);
592
593 CK_RV clock_set_default_attributes(TEMPLATE *);
594 CK_RV clock_check_required_attributes(TEMPLATE *, CK_ULONG);
595 CK_RV clock_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
596
597 CK_RV counter_set_default_attributes(TEMPLATE *);
598 CK_RV counter_check_required_attributes(TEMPLATE *, CK_ULONG);
599 CK_RV counter_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
600
601 CK_RV compute_next_token_obj_name(CK_BYTE *, CK_BYTE *);
602
603 CK_RV save_token_object(TSS_HCONTEXT, OBJECT *);
604 CK_RV save_public_token_object(OBJECT *);
605 CK_RV save_private_token_object(TSS_HCONTEXT, OBJECT *);
606
607 CK_RV load_public_token_objects(void);
608 CK_RV load_private_token_objects(TSS_HCONTEXT);
609
610 CK_RV reload_token_object(TSS_HCONTEXT, OBJECT *);
611
612 CK_RV delete_token_object(OBJECT *);
613
614 CK_RV init_token_data(TSS_HCONTEXT, TOKEN_DATA *);
615 CK_RV load_token_data(TSS_HCONTEXT, TOKEN_DATA *);
616 CK_RV save_token_data(TOKEN_DATA *);
617 void copy_slot_info(CK_SLOT_ID, CK_SLOT_INFO_PTR);
618
619 CK_RV compute_sha(CK_BYTE *, CK_ULONG_32, CK_BYTE *);
620
621 CK_RV parity_is_odd(CK_BYTE);
622
623 CK_RV build_attribute(CK_ATTRIBUTE_TYPE,
624 CK_BYTE *, CK_ULONG, CK_ATTRIBUTE **);
625
626 CK_RV add_pkcs_padding(CK_BYTE *, UINT32, UINT32, UINT32);
627
628 CK_RV strip_pkcs_padding(CK_BYTE *, UINT32, UINT32 *);
629
630 CK_RV remove_leading_zeros(CK_ATTRIBUTE *);
631
632 CK_RV rsa_pkcs_encrypt(
633 SESSION *,
634 CK_BBOOL,
635 ENCR_DECR_CONTEXT *,
636 CK_BYTE *,
637 CK_ULONG,
638 CK_BYTE *,
639 CK_ULONG *);
640
641 CK_RV rsa_pkcs_decrypt(SESSION *,
642 CK_BBOOL,
643 ENCR_DECR_CONTEXT *,
644 CK_BYTE *,
645 CK_ULONG,
646 CK_BYTE *,
647 CK_ULONG *);
648
649 CK_RV rsa_pkcs_sign(SESSION *,
650 CK_BBOOL,
651 SIGN_VERIFY_CONTEXT *,
652 CK_BYTE *,
653 CK_ULONG,
654 CK_BYTE *,
655 CK_ULONG *);
656
657 CK_RV rsa_pkcs_verify(SESSION *,
658 SIGN_VERIFY_CONTEXT *,
659 CK_BYTE *,
660 CK_ULONG,
661 CK_BYTE *,
662 CK_ULONG);
663
664 CK_RV rsa_pkcs_verify_recover(SESSION *,
665 CK_BBOOL,
666 SIGN_VERIFY_CONTEXT *,
667 CK_BYTE *,
668 CK_ULONG,
669 CK_BYTE *,
670 CK_ULONG *);
671
672 CK_RV rsa_hash_pkcs_sign(SESSION *,
673 CK_BBOOL,
674 SIGN_VERIFY_CONTEXT *,
675 CK_BYTE *,
676 CK_ULONG,
677 CK_BYTE *,
678 CK_ULONG *);
679
680 CK_RV rsa_hash_pkcs_verify(SESSION *,
681 SIGN_VERIFY_CONTEXT *,
682 CK_BYTE *,
683 CK_ULONG,
684 CK_BYTE *,
685 CK_ULONG);
686
687 CK_RV rsa_hash_pkcs_sign_update(SESSION *,
688 SIGN_VERIFY_CONTEXT *,
689 CK_BYTE *,
690 CK_ULONG);
691
692 CK_RV rsa_hash_pkcs_verify_update(SESSION *,
693 SIGN_VERIFY_CONTEXT *,
694 CK_BYTE *,
695 CK_ULONG);
696
697 CK_RV rsa_hash_pkcs_sign_final(SESSION *,
698 CK_BBOOL,
699 SIGN_VERIFY_CONTEXT *,
700 CK_BYTE *,
701 CK_ULONG *);
702
703 CK_RV rsa_hash_pkcs_verify_final(SESSION *,
704 SIGN_VERIFY_CONTEXT *,
705 CK_BYTE *,
706 CK_ULONG);
707
708
709 CK_RV ckm_rsa_key_pair_gen(TSS_HCONTEXT, TEMPLATE *, TEMPLATE *);
710
711 CK_RV sha1_hash(SESSION *, CK_BBOOL,
712 DIGEST_CONTEXT *,
713 CK_BYTE *, CK_ULONG,
714 CK_BYTE *, CK_ULONG *);
715
716 CK_RV sha1_hmac_sign(SESSION *, CK_BBOOL,
717 SIGN_VERIFY_CONTEXT *,
718 CK_BYTE *,
719 CK_ULONG,
720 CK_BYTE *,
721 CK_ULONG *);
722
723 CK_RV sha1_hmac_verify(SESSION *,
724 SIGN_VERIFY_CONTEXT *,
725 CK_BYTE *,
726 CK_ULONG,
727 CK_BYTE *,
728 CK_ULONG);
729
730 CK_RV md5_hash(SESSION *, CK_BBOOL,
731 DIGEST_CONTEXT *,
732 CK_BYTE *, CK_ULONG,
733 CK_BYTE *, CK_ULONG *);
734
735 CK_RV md5_hmac_sign(SESSION *, CK_BBOOL,
736 SIGN_VERIFY_CONTEXT *,
737 CK_BYTE *,
738 CK_ULONG,
739 CK_BYTE *,
740 CK_ULONG *);
741
742 CK_RV md5_hmac_verify(SESSION *,
743 SIGN_VERIFY_CONTEXT *,
744 CK_BYTE *,
745 CK_ULONG,
746 CK_BYTE *,
747 CK_ULONG);
748
749 DL_NODE *dlist_add_as_first(DL_NODE *, void *);
750 DL_NODE *dlist_add_as_last(DL_NODE *, void *);
751 DL_NODE *dlist_find(DL_NODE *, void *);
752 DL_NODE *dlist_get_first(DL_NODE *);
753 DL_NODE *dlist_get_last(DL_NODE *);
754 CK_ULONG dlist_length(DL_NODE *);
755 DL_NODE *dlist_next(DL_NODE *);
756 DL_NODE *dlist_prev(DL_NODE *);
757 void dlist_purge(DL_NODE *);
758 DL_NODE *dlist_remove_node(DL_NODE *, DL_NODE *);
759
760 CK_RV attach_shm(void);
761 CK_RV detach_shm(void);
762
763 // encryption manager routines
764 //
765 CK_RV encr_mgr_init(SESSION *,
766 ENCR_DECR_CONTEXT *,
767 CK_ULONG,
768 CK_MECHANISM *,
769 CK_OBJECT_HANDLE);
770
771 CK_RV encr_mgr_cleanup(ENCR_DECR_CONTEXT *);
772
773 CK_RV encr_mgr_encrypt(SESSION *, CK_BBOOL,
774 ENCR_DECR_CONTEXT *,
775 CK_BYTE *, CK_ULONG,
776 CK_BYTE *, CK_ULONG *);
777
778 CK_RV decr_mgr_init(SESSION *,
779 ENCR_DECR_CONTEXT *,
780 CK_ULONG,
781 CK_MECHANISM *,
782 CK_OBJECT_HANDLE);
783
784 CK_RV decr_mgr_cleanup(ENCR_DECR_CONTEXT *);
785
786 CK_RV decr_mgr_decrypt(SESSION *, CK_BBOOL,
787 ENCR_DECR_CONTEXT *,
788 CK_BYTE *, CK_ULONG,
789 CK_BYTE *, CK_ULONG *);
790
791 CK_RV digest_mgr_cleanup(DIGEST_CONTEXT *);
792
793 CK_RV digest_mgr_init(SESSION *,
794 DIGEST_CONTEXT *,
795 CK_MECHANISM *);
796
797 CK_RV digest_mgr_digest(SESSION *, CK_BBOOL,
798 DIGEST_CONTEXT *,
799 CK_BYTE *, CK_ULONG,
800 CK_BYTE *, CK_ULONG *);
801
802 CK_RV digest_mgr_digest_update(SESSION *,
803 DIGEST_CONTEXT *,
804 CK_BYTE *, CK_ULONG);
805
806 CK_RV digest_mgr_digest_key(SESSION *,
807 DIGEST_CONTEXT *,
808 CK_OBJECT_HANDLE);
809
810 CK_RV digest_mgr_digest_final(SESSION *,
811 DIGEST_CONTEXT *,
812 CK_BYTE *, CK_ULONG *);
813
814 CK_RV key_mgr_generate_key_pair(SESSION *,
815 CK_MECHANISM *,
816 CK_ATTRIBUTE *, CK_ULONG,
817 CK_ATTRIBUTE *, CK_ULONG,
818 CK_OBJECT_HANDLE *,
819 CK_OBJECT_HANDLE *);
820
821 CK_RV key_mgr_wrap_key(SESSION *,
822 CK_BBOOL,
823 CK_MECHANISM *,
824 CK_OBJECT_HANDLE,
825 CK_OBJECT_HANDLE,
826 CK_BYTE *,
827 CK_ULONG *);
828
829 CK_RV key_mgr_unwrap_key(SESSION *,
830 CK_MECHANISM *,
831 CK_ATTRIBUTE *,
832 CK_ULONG,
833 CK_BYTE *,
834 CK_ULONG,
835 CK_OBJECT_HANDLE,
836 CK_OBJECT_HANDLE *);
837
838 CK_RV sign_mgr_init(SESSION *,
839 SIGN_VERIFY_CONTEXT *,
840 CK_MECHANISM *,
841 CK_BBOOL,
842 CK_OBJECT_HANDLE);
843
844 CK_RV sign_mgr_cleanup(SIGN_VERIFY_CONTEXT *);
845
846 CK_RV sign_mgr_sign(SESSION *,
847 CK_BBOOL,
848 SIGN_VERIFY_CONTEXT *,
849 CK_BYTE *,
850 CK_ULONG,
851 CK_BYTE *,
852 CK_ULONG *);
853
854 CK_RV sign_mgr_sign_recover(SESSION *,
855 CK_BBOOL,
856 SIGN_VERIFY_CONTEXT *,
857 CK_BYTE *,
858 CK_ULONG,
859 CK_BYTE *,
860 CK_ULONG *);
861
862 CK_RV sign_mgr_sign_final(SESSION *,
863 CK_BBOOL,
864 SIGN_VERIFY_CONTEXT *,
865 CK_BYTE *,
866 CK_ULONG *);
867
868 CK_RV sign_mgr_sign_update(SESSION *,
869 SIGN_VERIFY_CONTEXT *,
870 CK_BYTE *,
871 CK_ULONG);
872
873 CK_RV verify_mgr_init(SESSION *,
874 SIGN_VERIFY_CONTEXT *,
875 CK_MECHANISM *,
876 CK_BBOOL,
877 CK_OBJECT_HANDLE);
878
879 CK_RV verify_mgr_cleanup(SIGN_VERIFY_CONTEXT *);
880
881 CK_RV verify_mgr_verify(SESSION *,
882 SIGN_VERIFY_CONTEXT *,
883 CK_BYTE *,
884 CK_ULONG,
885 CK_BYTE *,
886 CK_ULONG);
887
888 CK_RV verify_mgr_verify_recover(SESSION *,
889 CK_BBOOL,
890 SIGN_VERIFY_CONTEXT *,
891 CK_BYTE *,
892 CK_ULONG,
893 CK_BYTE *,
894 CK_ULONG *);
895
896 CK_RV verify_mgr_verify_update(SESSION *,
897 SIGN_VERIFY_CONTEXT *,
898 CK_BYTE *,
899 CK_ULONG);
900
901 CK_RV verify_mgr_verify_final(SESSION *,
902 SIGN_VERIFY_CONTEXT *,
903 CK_BYTE *,
904 CK_ULONG);
905
906
907 // session manager routines
908 //
909 CK_RV session_mgr_close_all_sessions(void);
910 CK_RV session_mgr_close_session(SESSION *);
911 SESSION *session_mgr_find(CK_SESSION_HANDLE);
912 CK_RV session_mgr_login_all(CK_USER_TYPE);
913 CK_RV session_mgr_logout_all(void);
914 CK_RV session_mgr_new(CK_ULONG, SESSION **);
915
916 CK_BBOOL session_mgr_readonly_exists(void);
917 CK_BBOOL session_mgr_so_session_exists(void);
918 CK_BBOOL session_mgr_user_session_exists(void);
919 CK_BBOOL session_mgr_public_session_exists(void);
920
921 CK_RV session_mgr_get_op_state(SESSION *, CK_BBOOL,
922 CK_BYTE *, CK_ULONG *);
923
924 CK_RV session_mgr_set_op_state(SESSION *,
925 CK_OBJECT_HANDLE, CK_OBJECT_HANDLE, CK_BYTE *);
926
927 CK_RV object_mgr_add(SESSION *,
928 CK_ATTRIBUTE *, CK_ULONG, CK_OBJECT_HANDLE *);
929
930 CK_RV object_mgr_add_to_map(SESSION *, OBJECT *, CK_OBJECT_HANDLE *);
931
932 CK_RV object_mgr_add_to_shm(OBJECT *);
933 CK_RV object_mgr_del_from_shm(OBJECT *);
934
935 CK_RV object_mgr_copy(SESSION *,
936 CK_ATTRIBUTE *, CK_ULONG, CK_OBJECT_HANDLE,
937 CK_OBJECT_HANDLE *);
938
939 CK_RV object_mgr_create_final(SESSION *,
940 OBJECT *, CK_OBJECT_HANDLE *);
941
942 CK_RV object_mgr_create_skel(SESSION *,
943 CK_ATTRIBUTE *, CK_ULONG, CK_ULONG,
944 CK_ULONG, CK_ULONG, OBJECT **);
945
946 CK_RV object_mgr_destroy_object(SESSION *, CK_OBJECT_HANDLE);
947
948 CK_RV object_mgr_destroy_token_objects(TSS_HCONTEXT);
949
950 CK_RV object_mgr_find_in_map1(TSS_HCONTEXT, CK_OBJECT_HANDLE, OBJECT **);
951
952 CK_RV object_mgr_find_in_map2(TSS_HCONTEXT, OBJECT *, CK_OBJECT_HANDLE *);
953
954 CK_RV object_mgr_find_init(SESSION *, CK_ATTRIBUTE *, CK_ULONG);
955
956 CK_RV object_mgr_find_build_list(SESSION *,
957 CK_ATTRIBUTE *,
958 CK_ULONG,
959 DL_NODE *,
960 CK_BBOOL public_only);
961
962 CK_RV object_mgr_find_final(SESSION *);
963
964 CK_RV object_mgr_get_attribute_values(SESSION *,
965 CK_OBJECT_HANDLE,
966 CK_ATTRIBUTE *,
967 CK_ULONG);
968
969 CK_RV object_mgr_get_object_size(TSS_HCONTEXT, CK_OBJECT_HANDLE,
970 CK_ULONG *);
971
972 CK_BBOOL object_mgr_invalidate_handle1(CK_OBJECT_HANDLE handle);
973
974 CK_BBOOL object_mgr_invalidate_handle2(OBJECT *);
975
976 CK_BBOOL object_mgr_purge_session_objects(SESSION *, SESS_OBJ_TYPE);
977
978 CK_BBOOL object_mgr_purge_token_objects(TSS_HCONTEXT);
979
980 CK_BBOOL object_mgr_purge_private_token_objects(TSS_HCONTEXT);
981
982 CK_RV object_mgr_remove_from_map(CK_OBJECT_HANDLE);
983
984 CK_RV object_mgr_restore_obj(CK_BYTE *, OBJECT *);
985
986 CK_RV object_mgr_set_attribute_values(SESSION *,
987 CK_OBJECT_HANDLE,
988 CK_ATTRIBUTE *,
989 CK_ULONG);
990
991 CK_BBOOL object_mgr_purge_map(SESSION *, SESS_OBJ_TYPE);
992
993 CK_RV object_create(CK_ATTRIBUTE *, CK_ULONG, OBJECT **);
994
995 CK_RV object_create_skel(CK_ATTRIBUTE *,
996 CK_ULONG,
997 CK_ULONG,
998 CK_ULONG,
999 CK_ULONG,
1000 OBJECT **);
1001
1002 CK_RV object_copy(CK_ATTRIBUTE *,
1003 CK_ULONG,
1004 OBJECT *,
1005 OBJECT **);
1006
1007 CK_RV object_flatten(OBJECT *,
1008 CK_BYTE **,
1009 CK_ULONG_32 *);
1010
1011 CK_BBOOL object_free(OBJECT *);
1012
1013 CK_RV object_get_attribute_values(OBJECT *,
1014 CK_ATTRIBUTE *,
1015 CK_ULONG);
1016
1017 CK_ULONG object_get_size(OBJECT *);
1018
1019 CK_RV object_restore(CK_BYTE *,
1020 OBJECT **,
1021 CK_BBOOL replace);
1022
1023 CK_RV object_set_attribute_values(OBJECT *,
1024 CK_ATTRIBUTE *,
1025 CK_ULONG);
1026
1027 CK_BBOOL object_is_modifiable(OBJECT *);
1028 CK_BBOOL object_is_private(OBJECT *);
1029 CK_BBOOL object_is_public(OBJECT *);
1030 CK_BBOOL object_is_token_object(OBJECT *);
1031 CK_BBOOL object_is_session_object(OBJECT *);
1032
1033 CK_BBOOL is_attribute_defined(CK_ATTRIBUTE_TYPE);
1034
1035 CK_RV template_add_attributes(TEMPLATE *,
1036 CK_ATTRIBUTE *, CK_ULONG);
1037
1038 CK_RV template_add_default_attributes(TEMPLATE *,
1039 CK_ULONG,
1040 CK_ULONG,
1041 CK_ULONG);
1042
1043 CK_BBOOL template_attribute_find(TEMPLATE *,
1044 CK_ATTRIBUTE_TYPE, CK_ATTRIBUTE **);
1045
1046 void template_attribute_find_multiple(TEMPLATE *,
1047 ATTRIBUTE_PARSE_LIST *,
1048 CK_ULONG);
1049
1050 CK_BBOOL template_check_exportability(TEMPLATE *, CK_ATTRIBUTE_TYPE type);
1051
1052 CK_RV template_check_required_attributes(TEMPLATE *,
1053 CK_ULONG, CK_ULONG, CK_ULONG);
1054
1055 CK_RV template_check_required_base_attributes(TEMPLATE *,
1056 CK_ULONG);
1057
1058 CK_BBOOL template_compare(CK_ATTRIBUTE *,
1059 CK_ULONG, TEMPLATE *);
1060
1061 CK_RV template_copy(TEMPLATE *, TEMPLATE *);
1062
1063 CK_RV template_flatten(TEMPLATE *, CK_BYTE *);
1064
1065 CK_RV template_free(TEMPLATE *);
1066
1067 CK_BBOOL template_get_class(TEMPLATE *, CK_ULONG *, CK_ULONG *);
1068
1069 CK_ULONG template_get_count(TEMPLATE *);
1070
1071 CK_ULONG template_get_size(TEMPLATE *);
1072 CK_ULONG template_get_compressed_size(TEMPLATE *);
1073
1074 CK_RV template_set_default_common_attributes(TEMPLATE *);
1075
1076 CK_RV template_merge(TEMPLATE *, TEMPLATE **);
1077
1078 CK_RV template_update_attribute(TEMPLATE *, CK_ATTRIBUTE *);
1079
1080 CK_RV template_unflatten(TEMPLATE **, CK_BYTE *, CK_ULONG);
1081
1082 CK_RV template_validate_attribute(TEMPLATE *,
1083 CK_ATTRIBUTE *, CK_ULONG, CK_ULONG, CK_ULONG);
1084
1085 CK_RV template_validate_attributes(TEMPLATE *,
1086 CK_ULONG, CK_ULONG, CK_ULONG);
1087
1088 CK_RV template_validate_base_attribute(TEMPLATE *,
1089 CK_ATTRIBUTE *, CK_ULONG);
1090
1091
1092 // DATA OBJECT ROUTINES
1093 //
1094 CK_RV data_object_check_required_attributes(TEMPLATE *, CK_ULONG);
1095 CK_RV data_object_set_default_attributes(TEMPLATE *, CK_ULONG);
1096 CK_RV data_object_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1097
1098 // CERTIFICATE ROUTINES
1099 CK_RV cert_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1100
1101 CK_RV cert_x509_check_required_attributes(TEMPLATE *, CK_ULONG);
1102 CK_RV cert_x509_set_default_attributes(TEMPLATE *, CK_ULONG);
1103 CK_RV cert_x509_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1104 CK_RV cert_vendor_check_required_attributes(TEMPLATE *, CK_ULONG);
1105 CK_RV cert_vendor_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1106
1107 //
1108 // KEY ROUTINES
1109 //
1110 CK_RV key_object_check_required_attributes(TEMPLATE *, CK_ULONG);
1111 CK_RV key_object_set_default_attributes(TEMPLATE *, CK_ULONG);
1112 CK_RV key_object_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1113
1114 CK_RV publ_key_check_required_attributes(TEMPLATE *, CK_ULONG);
1115 CK_RV publ_key_set_default_attributes(TEMPLATE *, CK_ULONG);
1116 CK_RV publ_key_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1117
1118 CK_RV priv_key_check_required_attributes(TEMPLATE *, CK_ULONG);
1119 CK_RV priv_key_set_default_attributes(TEMPLATE *, CK_ULONG);
1120 CK_RV priv_key_unwrap(TEMPLATE *, CK_ULONG, CK_BYTE *, CK_ULONG);
1121 CK_RV priv_key_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1122
1123 CK_BBOOL secret_key_check_exportability(CK_ATTRIBUTE_TYPE type);
1124 CK_RV secret_key_check_required_attributes(TEMPLATE *, CK_ULONG);
1125 CK_RV secret_key_set_default_attributes(TEMPLATE *, CK_ULONG);
1126 CK_RV secret_key_unwrap(TEMPLATE *, CK_ULONG, CK_BYTE *, CK_ULONG,
1127 CK_BBOOL fromend);
1128 CK_RV secret_key_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *,
1129 CK_ULONG);
1130
1131 // rsa routines
1132 //
1133 CK_RV rsa_publ_check_required_attributes(TEMPLATE *, CK_ULONG);
1134 CK_RV rsa_publ_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1135 CK_RV rsa_publ_set_default_attributes(TEMPLATE *, CK_ULONG);
1136 CK_BBOOL rsa_priv_check_exportability(CK_ATTRIBUTE_TYPE type);
1137 CK_RV rsa_priv_check_required_attributes(TEMPLATE *, CK_ULONG);
1138 CK_RV rsa_priv_set_default_attributes(TEMPLATE *, CK_ULONG);
1139 CK_RV rsa_priv_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1140 CK_RV rsa_priv_wrap_get_data(TEMPLATE *, CK_BBOOL, CK_BYTE **, CK_ULONG *);
1141 CK_RV rsa_priv_unwrap(TEMPLATE *, CK_BYTE *, CK_ULONG);
1142
1143 // Generic secret key routines
1144 CK_RV generic_secret_check_required_attributes(TEMPLATE *, CK_ULONG);
1145 CK_RV generic_secret_set_default_attributes(TEMPLATE *, CK_ULONG);
1146 CK_RV generic_secret_validate_attribute(TEMPLATE *, CK_ATTRIBUTE *, CK_ULONG);
1147 CK_RV generic_secret_wrap_get_data(TEMPLATE *, CK_BBOOL,
1148 CK_BYTE **, CK_ULONG *);
1149
1150 CK_RV generic_secret_unwrap(TEMPLATE *, CK_BYTE *, CK_ULONG, CK_BBOOL fromend);
1151
1152 CK_RV tpm_encrypt_data(TSS_HCONTEXT,
1153 TSS_HKEY, CK_BYTE *, CK_ULONG, CK_BYTE *, CK_ULONG *);
1154
1155 CK_RV tpm_decrypt_data(TSS_HCONTEXT,
1156 TSS_HKEY, CK_BYTE *, CK_ULONG, CK_BYTE *, CK_ULONG *);
1157
1158 CK_ULONG ber_encode_INTEGER(CK_BBOOL,
1159 CK_BYTE **, CK_ULONG *, CK_BYTE *, CK_ULONG);
1160
1161 CK_RV ber_decode_INTEGER(CK_BYTE *,
1162 CK_BYTE **, CK_ULONG *, CK_ULONG *);
1163
1164 CK_RV ber_encode_OCTET_STRING(CK_BBOOL,
1165 CK_BYTE **, CK_ULONG *, CK_BYTE *, CK_ULONG);
1166
1167 CK_RV ber_decode_OCTET_STRING(CK_BYTE *,
1168 CK_BYTE **, CK_ULONG *, CK_ULONG *);
1169
1170 CK_RV ber_encode_SEQUENCE(CK_BBOOL,
1171 CK_BYTE **, CK_ULONG *, CK_BYTE *, CK_ULONG);
1172
1173 CK_RV ber_decode_SEQUENCE(CK_BYTE *,
1174 CK_BYTE **, CK_ULONG *, CK_ULONG *);
1175
1176 CK_RV ber_encode_PrivateKeyInfo(CK_BBOOL,
1177 CK_BYTE **, CK_ULONG *, CK_BYTE *,
1178 CK_ULONG, CK_BYTE *, CK_ULONG);
1179
1180 CK_RV ber_decode_PrivateKeyInfo(CK_BYTE *,
1181 CK_ULONG, CK_BYTE **, CK_ULONG *, CK_BYTE **);
1182
1183 CK_RV ber_encode_RSAPrivateKey(CK_BBOOL,
1184 CK_BYTE **, CK_ULONG *, CK_ATTRIBUTE *,
1185 CK_ATTRIBUTE *, CK_ATTRIBUTE *, CK_ATTRIBUTE *,
1186 CK_ATTRIBUTE *, CK_ATTRIBUTE *, CK_ATTRIBUTE *,
1187 CK_ATTRIBUTE *);
1188
1189 CK_RV ber_decode_RSAPrivateKey(CK_BYTE *,
1190 CK_ULONG, CK_ATTRIBUTE **, CK_ATTRIBUTE **,
1191 CK_ATTRIBUTE **, CK_ATTRIBUTE **, CK_ATTRIBUTE **,
1192 CK_ATTRIBUTE **, CK_ATTRIBUTE **, CK_ATTRIBUTE **);
1193
1194
1195 CK_RV ber_encode_DSAPrivateKey(CK_BBOOL,
1196 CK_BYTE **, CK_ULONG *, CK_ATTRIBUTE *,
1197 CK_ATTRIBUTE *, CK_ATTRIBUTE *, CK_ATTRIBUTE *);
1198
1199 CK_RV ber_decode_DSAPrivateKey(CK_BYTE *,
1200 CK_ULONG, CK_ATTRIBUTE **, CK_ATTRIBUTE **,
1201 CK_ATTRIBUTE **, CK_ATTRIBUTE **);
1202
1203 #define APPID "TPM_STDLL"
1204
1205 /* log to stdout */
1206 #define LogMessage(dest, priority, layer, fmt, ...) \
1207 (void) fprintf(dest, "%s %s %s:%d " fmt "\n", (char *)priority, \
1208 (char *)layer, (char *)__FILE__,\
1209 (int)__LINE__, __VA_ARGS__);
1210
1211 #define LogMessage1(dest, priority, layer, data) \
1212 (void) fprintf(dest, "%s %s %s:%d %s\n", priority, layer, __FILE__, \
1213 __LINE__, data);
1214
1215 /* Debug logging */
1216 #ifdef DEBUG
1217 #define LogDebug(fmt, ...) LogMessage(stdout, "LOG_DEBUG", APPID, \
1218 fmt, __VA_ARGS__)
1219
1220 #define LogDebug1(data) LogMessage1(stdout, "LOG_DEBUG", APPID, data)
1221
1222 /* Error logging */
1223 #define LogError(fmt, ...) LogMessage(stderr, "LOG_ERR", APPID,\
1224 "ERROR: " fmt, __VA_ARGS__)
1225
1226 #define LogError1(data) LogMessage1(stderr, "LOG_ERR", APPID,\
1227 "ERROR: " data)
1228
1229 /* Warn logging */
1230 #define LogWarn(fmt, ...) LogMessage(stdout, "LOG_WARNING", APPID,\
1231 "WARNING: " fmt, __VA_ARGS__)
1232
1233 #define LogWarn1(data) LogMessage1(stdout, "LOG_WARNING", APPID,\
1234 "WARNING: " data)
1235
1236 /* Info Logging */
1237 #define LogInfo(fmt, ...) LogMessage(stdout, "LOG_INFO", APPID,\
1238 fmt, __VA_ARGS__)
1239
1240 #define LogInfo1(data) LogMessage1(stdout, "LOG_INFO", APPID, data)
1241
1242 #define st_err_log(...) LogMessage(stderr, "ST MSG", APPID,\
1243 "", __VA_ARGS__)
1244 #else
1245 #define LogDebug(...)
1246 #define LogDebug1(...)
1247 #define LogBlob(...)
1248 #define LogError(...)
1249 #define LogError1(...)
1250 #define LogWarn(...)
1251 #define LogWarn1(...)
1252 #define LogInfo(...)
1253 #define LogInfo1(...)
1254 #define st_err_log(...)
1255 #endif
1256
1257 /*
1258 * CK_FUNCTION_LIST is a structure holding a Cryptoki spec
1259 * version and pointers of appropriate types to all the
1260 * Cryptoki functions
1261 */
1262
1263 /* CK_FUNCTION_LIST is new for v2.0 */
1264
1265 typedef CK_RV
1266 (CK_PTR ST_C_Initialize)
1267 (void *ppFunctionList, CK_SLOT_ID slotID, CK_CHAR_PTR pCorrelator);
1268 typedef CK_RV
1269 (CK_PTR ST_C_Finalize)
1270 (CK_VOID_PTR pReserved);
1271 typedef CK_RV
1272 (CK_PTR ST_C_Terminate)();
1273 typedef CK_RV
1274 (CK_PTR ST_C_GetInfo)
1275 (CK_INFO_PTR pInfo);
1276 typedef CK_RV
1277 (CK_PTR ST_C_GetFunctionList)
1278 (CK_FUNCTION_LIST_PTR_PTR ppFunctionList);
1279 typedef CK_RV
1280 (CK_PTR ST_C_GetSlotList)
1281 (CK_BBOOL tokenPresent, CK_SLOT_ID_PTR pSlotList,
1282 CK_ULONG_PTR pusCount);
1283 typedef CK_RV
1284 (CK_PTR ST_C_GetSlotInfo)
1285 (CK_SLOT_ID slotID, CK_SLOT_INFO_PTR pInfo);
1286 typedef CK_RV
1287 (CK_PTR ST_C_GetTokenInfo)
1288 (CK_SLOT_ID slotID, CK_TOKEN_INFO_PTR pInfo);
1289 typedef CK_RV
1290 (CK_PTR ST_C_GetMechanismList)
1291 (CK_SLOT_ID slotID, CK_MECHANISM_TYPE_PTR pMechanismList,
1292 CK_ULONG_PTR pusCount);
1293 typedef CK_RV
1294 (CK_PTR ST_C_GetMechanismInfo)
1295 (CK_SLOT_ID slotID, CK_MECHANISM_TYPE type,
1296 CK_MECHANISM_INFO_PTR pInfo);
1297 typedef CK_RV
1298 (CK_PTR ST_C_InitToken)
1299 (CK_SLOT_ID slotID, CK_CHAR_PTR pPin, CK_ULONG usPinLen,
1300 CK_CHAR_PTR pLabel);
1301 typedef CK_RV
1302 (CK_PTR ST_C_InitPIN)
1303 (ST_SESSION_T hSession, CK_CHAR_PTR pPin,
1304 CK_ULONG usPinLen);
1305 typedef CK_RV
1306 (CK_PTR ST_C_SetPIN)
1307 (ST_SESSION_T hSession, CK_CHAR_PTR pOldPin,
1308 CK_ULONG usOldLen, CK_CHAR_PTR pNewPin,
1309 CK_ULONG usNewLen);
1310
1311 typedef CK_RV
1312 (CK_PTR ST_C_OpenSession)
1313 (CK_SLOT_ID slotID, CK_FLAGS flags,
1314 CK_SESSION_HANDLE_PTR phSession);
1315
1316 typedef CK_RV
1317 (CK_PTR ST_C_CloseSession)
1318 (ST_SESSION_T hSession);
1319 typedef CK_RV
1320 (CK_PTR ST_C_CloseAllSessions)
1321 (CK_SLOT_ID slotID);
1322 typedef CK_RV
1323 (CK_PTR ST_C_GetSessionInfo)
1324 (ST_SESSION_T hSession, CK_SESSION_INFO_PTR pInfo);
1325 typedef CK_RV
1326 (CK_PTR ST_C_GetOperationState)
1327 (ST_SESSION_T hSession, CK_BYTE_PTR pOperationState,
1328 CK_ULONG_PTR pulOperationStateLen);
1329 typedef CK_RV
1330 (CK_PTR ST_C_SetOperationState)
1331 (ST_SESSION_T hSession, CK_BYTE_PTR pOperationState,
1332 CK_ULONG ulOperationStateLen,
1333 CK_OBJECT_HANDLE hEncryptionKey,
1334 CK_OBJECT_HANDLE hAuthenticationKey);
1335 typedef CK_RV
1336 (CK_PTR ST_C_Login)(ST_SESSION_T hSession,
1337 CK_USER_TYPE userType, CK_CHAR_PTR pPin,
1338 CK_ULONG usPinLen);
1339 typedef CK_RV
1340 (CK_PTR ST_C_Logout)(ST_SESSION_T hSession);
1341 typedef CK_RV
1342 (CK_PTR ST_C_CreateObject)
1343 (ST_SESSION_T hSession, CK_ATTRIBUTE_PTR pTemplate,
1344 CK_ULONG usCount, CK_OBJECT_HANDLE_PTR phObject);
1345
1346 typedef CK_RV
1347 (CK_PTR ST_C_CopyObject)
1348 (ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1349 CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount,
1350 CK_OBJECT_HANDLE_PTR phNewObject);
1351 typedef CK_RV
1352 (CK_PTR ST_C_DestroyObject)
1353 (ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject);
1354 typedef CK_RV
1355 (CK_PTR ST_C_GetObjectSize)
1356 (ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1357 CK_ULONG_PTR pusSize);
1358 typedef CK_RV
1359 (CK_PTR ST_C_GetAttributeValue)
1360 (ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1361 CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount);
1362 typedef CK_RV
1363 (CK_PTR ST_C_SetAttributeValue)
1364 (ST_SESSION_T hSession, CK_OBJECT_HANDLE hObject,
1365 CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount);
1366 typedef CK_RV
1367 (CK_PTR ST_C_FindObjectsInit)
1368 (ST_SESSION_T hSession, CK_ATTRIBUTE_PTR pTemplate,
1369 CK_ULONG usCount);
1370 typedef CK_RV
1371 (CK_PTR ST_C_FindObjects)
1372 (ST_SESSION_T hSession,
1373 CK_OBJECT_HANDLE_PTR phObject, CK_ULONG usMaxObjectCount,
1374 CK_ULONG_PTR pusObjectCount);
1375 typedef CK_RV
1376 (CK_PTR ST_C_FindObjectsFinal)
1377 (ST_SESSION_T hSession);
1378 typedef CK_RV
1379 (CK_PTR ST_C_EncryptInit)
1380 (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1381 CK_OBJECT_HANDLE hKey);
1382 typedef CK_RV
1383 (CK_PTR ST_C_Encrypt)
1384 (ST_SESSION_T hSession, CK_BYTE_PTR pData,
1385 CK_ULONG usDataLen, CK_BYTE_PTR pEncryptedData,
1386 CK_ULONG_PTR pusEncryptedDataLen);
1387 typedef CK_RV
1388 (CK_PTR ST_C_EncryptUpdate)
1389 (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1390 CK_ULONG usPartLen, CK_BYTE_PTR pEncryptedPart,
1391 CK_ULONG_PTR pusEncryptedPartLen);
1392 typedef CK_RV
1393 (CK_PTR ST_C_EncryptFinal)
1394 (ST_SESSION_T hSession,
1395 CK_BYTE_PTR pLastEncryptedPart,
1396 CK_ULONG_PTR pusLastEncryptedPartLen);
1397 typedef CK_RV
1398 (CK_PTR ST_C_DecryptInit)
1399 (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1400 CK_OBJECT_HANDLE hKey);
1401 typedef CK_RV
1402 (CK_PTR ST_C_Decrypt)
1403 (ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedData,
1404 CK_ULONG usEncryptedDataLen, CK_BYTE_PTR pData,
1405 CK_ULONG_PTR pusDataLen);
1406 typedef CK_RV
1407 (CK_PTR ST_C_DecryptUpdate)
1408 (ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedPart,
1409 CK_ULONG usEncryptedPartLen, CK_BYTE_PTR pPart,
1410 CK_ULONG_PTR pusPartLen);
1411 typedef CK_RV
1412 (CK_PTR ST_C_DecryptFinal)
1413 (ST_SESSION_T hSession, CK_BYTE_PTR pLastPart,
1414 CK_ULONG_PTR pusLastPartLen);
1415 typedef CK_RV
1416 (CK_PTR ST_C_DigestInit)
1417 (ST_SESSION_T hSession,
1418 CK_MECHANISM_PTR pMechanism);
1419 typedef CK_RV
1420 (CK_PTR ST_C_Digest)
1421 (ST_SESSION_T hSession, CK_BYTE_PTR pData,
1422 CK_ULONG usDataLen, CK_BYTE_PTR pDigest,
1423 CK_ULONG_PTR pusDigestLen);
1424 typedef CK_RV
1425 (CK_PTR ST_C_DigestUpdate)
1426 (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1427 CK_ULONG usPartLen);
1428 typedef CK_RV
1429 (CK_PTR ST_C_DigestKey)
1430 (ST_SESSION_T hSession, CK_OBJECT_HANDLE hKey);
1431 typedef CK_RV
1432 (CK_PTR ST_C_DigestFinal)
1433 (ST_SESSION_T hSession, CK_BYTE_PTR pDigest,
1434 CK_ULONG_PTR pusDigestLen);
1435 typedef CK_RV
1436 (CK_PTR ST_C_SignInit)
1437 (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1438 CK_OBJECT_HANDLE hKey);
1439 typedef CK_RV
1440 (CK_PTR ST_C_Sign)
1441 (ST_SESSION_T hSession, CK_BYTE_PTR pData,
1442 CK_ULONG usDataLen, CK_BYTE_PTR pSignature,
1443 CK_ULONG_PTR pusSignatureLen);
1444 typedef CK_RV
1445 (CK_PTR ST_C_SignUpdate)
1446 (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1447 CK_ULONG usPartLen);
1448 typedef CK_RV
1449 (CK_PTR ST_C_SignFinal)
1450 (ST_SESSION_T hSession, CK_BYTE_PTR pSignature,
1451 CK_ULONG_PTR pusSignatureLen);
1452 typedef CK_RV
1453 (CK_PTR ST_C_SignRecoverInit)
1454 (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1455 CK_OBJECT_HANDLE hKey);
1456 typedef CK_RV
1457 (CK_PTR ST_C_SignRecover)
1458 (ST_SESSION_T hSession, CK_BYTE_PTR pData,
1459 CK_ULONG usDataLen, CK_BYTE_PTR pSignature,
1460 CK_ULONG_PTR pusSignatureLen);
1461 typedef CK_RV
1462 (CK_PTR ST_C_VerifyInit)
1463 (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1464 CK_OBJECT_HANDLE hKey);
1465 typedef CK_RV
1466 (CK_PTR ST_C_Verify)
1467 (ST_SESSION_T hSession, CK_BYTE_PTR pData,
1468 CK_ULONG usDataLen, CK_BYTE_PTR pSignature,
1469 CK_ULONG usSignatureLen);
1470 typedef CK_RV
1471 (CK_PTR ST_C_VerifyUpdate)
1472 (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1473 CK_ULONG usPartLen);
1474 typedef CK_RV
1475 (CK_PTR ST_C_VerifyFinal)
1476 (ST_SESSION_T hSession, CK_BYTE_PTR pSignature,
1477 CK_ULONG usSignatureLen);
1478 typedef CK_RV
1479 (CK_PTR ST_C_VerifyRecoverInit)
1480 (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1481 CK_OBJECT_HANDLE hKey);
1482 typedef CK_RV
1483 (CK_PTR ST_C_VerifyRecover)
1484 (ST_SESSION_T hSession, CK_BYTE_PTR pSignature,
1485 CK_ULONG usSignatureLen, CK_BYTE_PTR pData,
1486 CK_ULONG_PTR pusDataLen);
1487 typedef CK_RV
1488 (CK_PTR ST_C_DigestEncryptUpdate)
1489 (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1490 CK_ULONG ulPartLen, CK_BYTE_PTR pEncryptedPart,
1491 CK_ULONG_PTR pulEncryptedPartLen);
1492 typedef CK_RV
1493 (CK_PTR ST_C_DecryptDigestUpdate)
1494 (ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedPart,
1495 CK_ULONG ulEncryptedPartLen, CK_BYTE_PTR pPart,
1496 CK_ULONG_PTR pulPartLen);
1497 typedef CK_RV
1498 (CK_PTR ST_C_SignEncryptUpdate)
1499 (ST_SESSION_T hSession, CK_BYTE_PTR pPart,
1500 CK_ULONG ulPartLen, CK_BYTE_PTR pEncryptedPart,
1501 CK_ULONG_PTR pulEncryptedPartLen);
1502 typedef CK_RV
1503 (CK_PTR ST_C_DecryptVerifyUpdate)
1504 (ST_SESSION_T hSession, CK_BYTE_PTR pEncryptedPart,
1505 CK_ULONG ulEncryptedPartLen, CK_BYTE_PTR pPart,
1506 CK_ULONG_PTR pulPartLen);
1507 typedef CK_RV
1508 (CK_PTR ST_C_GenerateKey)
1509 (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1510 CK_ATTRIBUTE_PTR pTemplate, CK_ULONG usCount,
1511 CK_OBJECT_HANDLE_PTR phKey);
1512 typedef CK_RV
1513 (CK_PTR ST_C_GenerateKeyPair)
1514 (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1515 CK_ATTRIBUTE_PTR pPublicKeyTemplate,
1516 CK_ULONG usPublicKeyAttributeCount,
1517 CK_ATTRIBUTE_PTR pPrivateKeyTemplate,
1518 CK_ULONG usPrivateKeyAttributeCount,
1519 CK_OBJECT_HANDLE_PTR phPrivateKey,
1520 CK_OBJECT_HANDLE_PTR phPublicKey);
1521 typedef CK_RV
1522 (CK_PTR ST_C_WrapKey)
1523 (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1524 CK_OBJECT_HANDLE hWrappingKey, CK_OBJECT_HANDLE hKey,
1525 CK_BYTE_PTR pWrappedKey, CK_ULONG_PTR pusWrappedKeyLen);
1526 typedef CK_RV
1527 (CK_PTR ST_C_UnwrapKey)
1528 (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1529 CK_OBJECT_HANDLE hUnwrappingKey, CK_BYTE_PTR pWrappedKey,
1530 CK_ULONG usWrappedKeyLen, CK_ATTRIBUTE_PTR pTemplate,
1531 CK_ULONG usAttributeCount, CK_OBJECT_HANDLE_PTR phKey);
1532 typedef CK_RV
1533 (CK_PTR ST_C_DeriveKey)
1534 (ST_SESSION_T hSession, CK_MECHANISM_PTR pMechanism,
1535 CK_OBJECT_HANDLE hBaseKey, CK_ATTRIBUTE_PTR pTemplate,
1536 CK_ULONG usAttributeCount, CK_OBJECT_HANDLE_PTR phKey);
1537 typedef CK_RV
1538 (CK_PTR ST_C_SeedRandom)
1539 (ST_SESSION_T hSession, CK_BYTE_PTR pSeed,
1540 CK_ULONG usSeedLen);
1541 typedef CK_RV
1542 (CK_PTR ST_C_GenerateRandom)
1543 (ST_SESSION_T hSession, CK_BYTE_PTR pRandomData,
1544 CK_ULONG usRandomLen);
1545 typedef CK_RV
1546 (CK_PTR ST_C_GetFunctionStatus)
1547 (ST_SESSION_T hSession);
1548 typedef CK_RV
1549 (CK_PTR ST_C_CancelFunction)
1550 (ST_SESSION_T hSession);
1551 typedef CK_RV
1552 (CK_PTR ST_Notify)
1553 (ST_SESSION_T hSession, CK_NOTIFICATION event,
1554 CK_VOID_PTR pApplication);
1555 typedef CK_RV
1556 (CK_PTR ST_C_WaitForSlotEvent)
1557 (CK_FLAGS flags, CK_SLOT_ID_PTR pSlot,
1558 CK_VOID_PTR pReserved);
1559
1560
1561
1562 struct ST_FCN_LIST {
1563
1564 ST_C_Initialize ST_Initialize;
1565 ST_C_Finalize ST_Finalize;
1566
1567 ST_C_GetTokenInfo ST_GetTokenInfo;
1568 ST_C_GetMechanismList ST_GetMechanismList;
1569 ST_C_GetMechanismInfo ST_GetMechanismInfo;
1570 ST_C_InitToken ST_InitToken;
1571 ST_C_InitPIN ST_InitPIN;
1572 ST_C_SetPIN ST_SetPIN;
1573
1574 ST_C_OpenSession ST_OpenSession;
1575 ST_C_CloseSession ST_CloseSession;
1576 ST_C_GetSessionInfo ST_GetSessionInfo;
1577 ST_C_GetOperationState ST_GetOperationState;
1578 ST_C_SetOperationState ST_SetOperationState;
1579 ST_C_Login ST_Login;
1580 ST_C_Logout ST_Logout;
1581
1582 ST_C_CreateObject ST_CreateObject;
1583 ST_C_CopyObject ST_CopyObject;
1584 ST_C_DestroyObject ST_DestroyObject;
1585 ST_C_GetObjectSize ST_GetObjectSize;
1586 ST_C_GetAttributeValue ST_GetAttributeValue;
1587 ST_C_SetAttributeValue ST_SetAttributeValue;
1588 ST_C_FindObjectsInit ST_FindObjectsInit;
1589 ST_C_FindObjects ST_FindObjects;
1590 ST_C_FindObjectsFinal ST_FindObjectsFinal;
1591
1592
1593 ST_C_EncryptInit ST_EncryptInit;
1594 ST_C_Encrypt ST_Encrypt;
1595 ST_C_EncryptUpdate ST_EncryptUpdate;
1596 ST_C_EncryptFinal ST_EncryptFinal;
1597 ST_C_DecryptInit ST_DecryptInit;
1598 ST_C_Decrypt ST_Decrypt;
1599 ST_C_DecryptUpdate ST_DecryptUpdate;
1600 ST_C_DecryptFinal ST_DecryptFinal;
1601 ST_C_DigestInit ST_DigestInit;
1602 ST_C_Digest ST_Digest;
1603 ST_C_DigestUpdate ST_DigestUpdate;
1604 ST_C_DigestKey ST_DigestKey;
1605 ST_C_DigestFinal ST_DigestFinal;
1606 ST_C_SignInit ST_SignInit;
1607 ST_C_Sign ST_Sign;
1608 ST_C_SignUpdate ST_SignUpdate;
1609 ST_C_SignFinal ST_SignFinal;
1610 ST_C_SignRecoverInit ST_SignRecoverInit;
1611 ST_C_SignRecover ST_SignRecover;
1612 ST_C_VerifyInit ST_VerifyInit;
1613 ST_C_Verify ST_Verify;
1614 ST_C_VerifyUpdate ST_VerifyUpdate;
1615 ST_C_VerifyFinal ST_VerifyFinal;
1616 ST_C_VerifyRecoverInit ST_VerifyRecoverInit;
1617 ST_C_VerifyRecover ST_VerifyRecover;
1618 ST_C_DigestEncryptUpdate ST_DigestEncryptUpdate;
1619 ST_C_DecryptDigestUpdate ST_DecryptDigestUpdate;
1620 ST_C_SignEncryptUpdate ST_SignEncryptUpdate;
1621 ST_C_DecryptVerifyUpdate ST_DecryptVerifyUpdate;
1622 ST_C_GenerateKey ST_GenerateKey;
1623 ST_C_GenerateKeyPair ST_GenerateKeyPair;
1624 ST_C_WrapKey ST_WrapKey;
1625 ST_C_UnwrapKey ST_UnwrapKey;
1626 ST_C_DeriveKey ST_DeriveKey;
1627 ST_C_SeedRandom ST_SeedRandom;
1628 ST_C_GenerateRandom ST_GenerateRandom;
1629 ST_C_GetFunctionStatus ST_GetFunctionStatus;
1630 ST_C_CancelFunction ST_CancelFunction;
1631 };
1632
1633 typedef struct ST_FCN_LIST STDLL_FcnList_t;
1634
1635 #endif /* _TPMTOK_INT_H */