key.h

   1 /* $OpenBSD: key.h,v 1.31 2010/08/31 11:54:45 djm Exp $ */
   2
   3 /*
   4  * Copyright (c) 2000, 2001 Markus Friedl.  All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions
   8  * are met:
   9  * 1. Redistributions of source code must retain the above copyright
  10  *    notice, this list of conditions and the following disclaimer.
  11  * 2. Redistributions in binary form must reproduce the above copyright
  12  *    notice, this list of conditions and the following disclaimer in the
  13  *    documentation and/or other materials provided with the distribution.
  14  *
  15  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
  16  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
  17  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
  18  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
  19  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  20  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  21  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  22  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  23  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
  24  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  25  */
  26 #ifndef KEY_H
  27 #define KEY_H
  28
  29 #include "buffer.h"
  30 #include <openssl/rsa.h>
  31 #include <openssl/dsa.h>
  32 #include <openssl/ec.h>
  33
  34 typedef struct Key Key;
  35 enum types {
  36         KEY_RSA1,
  37         KEY_RSA,
  38         KEY_DSA,
  39         KEY_ECDSA,
  40         KEY_RSA_CERT,
  41         KEY_DSA_CERT,
  42         KEY_ECDSA_CERT,
  43         KEY_RSA_CERT_V00,
  44         KEY_DSA_CERT_V00,
  45         KEY_UNSPEC
  46 };
  47 enum fp_type {
  48         SSH_FP_SHA1,
  49         SSH_FP_MD5
  50 };
  51 enum fp_rep {
  52         SSH_FP_HEX,
  53         SSH_FP_BUBBLEBABBLE,
  54         SSH_FP_RANDOMART
  55 };
  56
  57 /* key is stored in external hardware */
  58 #define KEY_FLAG_EXT            0x0001
  59
  60 #define CERT_MAX_PRINCIPALS     256
  61 struct KeyCert {
  62         Buffer           certblob; /* Kept around for use on wire */
  63         u_int            type; /* SSH2_CERT_TYPE_USER or SSH2_CERT_TYPE_HOST */
  64         u_int64_t        serial;
  65         char            *key_id;
  66         u_int            nprincipals;
  67         char            **principals;
  68         u_int64_t        valid_after, valid_before;
  69         Buffer           critical;
  70         Buffer           extensions;
  71         Key             *signature_key;
  72 };
  73
  74 struct Key {
  75         int      type;
  76         int      flags;
  77         RSA     *rsa;
  78         DSA     *dsa;
  79         int      ecdsa_nid;     /* NID of curve */
  80         EC_KEY  *ecdsa;
  81         struct KeyCert *cert;
  82 };
  83
  84 Key             *key_new(int);
  85 void             key_add_private(Key *);
  86 Key             *key_new_private(int);
  87 void             key_free(Key *);
  88 Key             *key_demote(const Key *);
  89 int              key_equal_public(const Key *, const Key *);
  90 int              key_equal(const Key *, const Key *);
  91 char            *key_fingerprint(Key *, enum fp_type, enum fp_rep);
  92 u_char          *key_fingerprint_raw(Key *, enum fp_type, u_int *);
  93 const char      *key_type(const Key *);
  94 const char      *key_cert_type(const Key *);
  95 int              key_write(const Key *, FILE *);
  96 int              key_read(Key *, char **);
  97 u_int            key_size(const Key *);
  98
  99 Key     *key_generate(int, u_int);
 100 Key     *key_from_private(const Key *);
 101 int      key_type_from_name(char *);
 102 int      key_is_cert(const Key *);
 103 int      key_type_plain(int);
 104 int      key_to_certified(Key *, int);
 105 int      key_drop_cert(Key *);
 106 int      key_certify(Key *, Key *);
 107 void     key_cert_copy(const Key *, struct Key *);
 108 int      key_cert_check_authority(const Key *, int, int, const char *,
 109             const char **);
 110 int      key_cert_is_legacy(Key *);
 111
 112 int              key_ecdsa_nid_from_name(const char *);
 113 int              key_curve_name_to_nid(const char *);
 114 const char *     key_curve_nid_to_name(int);
 115 int              key_ecdsa_bits_to_nid(int);
 116 int              key_ecdsa_group_to_nid(const EC_GROUP *);
 117 int              key_ec_validate_public(const EC_GROUP *, const EC_POINT *);
 118 int              key_ec_validate_private(const EC_KEY *);
 119
 120 Key             *key_from_blob(const u_char *, u_int);
 121 int              key_to_blob(const Key *, u_char **, u_int *);
 122 const char      *key_ssh_name(const Key *);
 123 const char      *key_ssh_name_plain(const Key *);
 124 int              key_names_valid2(const char *);
 125
 126 int      key_sign(const Key *, u_char **, u_int *, const u_char *, u_int);
 127 int      key_verify(const Key *, const u_char *, u_int, const u_char *, u_int);
 128
 129 int      ssh_dss_sign(const Key *, u_char **, u_int *, const u_char *, u_int);
 130 int      ssh_dss_verify(const Key *, const u_char *, u_int, const u_char *, u_int);
 131 int      ssh_ecdsa_sign(const Key *, u_char **, u_int *, const u_char *, u_int);
 132 int      ssh_ecdsa_verify(const Key *, const u_char *, u_int, const u_char *, u_int);
 133 int      ssh_rsa_sign(const Key *, u_char **, u_int *, const u_char *, u_int);
 134 int      ssh_rsa_verify(const Key *, const u_char *, u_int, const u_char *, u_int);
 135
 136 #if defined(DEBUG_KEXECDH) || defined(DEBUG_PK)
 137 void    key_dump_ec_point(const EC_GROUP *, const EC_POINT *);
 138 void    key_dump_ec_key(const EC_KEY *);
 139 #endif
 140
 141 #endif