X-Git-Url: http://git.tuebingen.mpg.de/?p=paraslash.git;a=blobdiff_plain;f=crypt.h;h=9623a0035a3b1a89818bd99c3c09c1dac041519b;hp=5e25748c09551bf1b33e7b142baaafd73df5bd36;hb=62c0894fbb589dd45e69b7d9ef1fd152a9960d62;hpb=8d106ca317a2c42f35a86ba244f843688f6939e6 diff --git a/crypt.h b/crypt.h index 5e25748c..9623a003 100644 --- a/crypt.h +++ b/crypt.h @@ -1,20 +1,15 @@ -/* - * Copyright (C) 2005 Andre Noll - * - * Licensed under the GPL v2. For licencing details see COPYING. - */ +/* Copyright (C) 2005 Andre Noll , see file COPYING. */ /** \file crypt.h Public crypto interface. */ +/* + * Asymmetric pubkey cryptosystem (apc). + * + * This is just RSA, but this fact is a hidden implementation detail. + */ -/* These are used to distinguish between loading of private/public key. */ - -/** The key to load is a public key. */ -#define LOAD_PUBLIC_KEY 0 -/** The key to load is a private key. */ -#define LOAD_PRIVATE_KEY 1 /** The size of the challenge sent to the client. */ -#define CHALLENGE_SIZE 64 +#define APC_CHALLENGE_SIZE 64 /** Opaque structure for public and private keys. */ struct asymmetric_key; @@ -29,7 +24,7 @@ struct asymmetric_key; * * \return The size of the encrypted data on success, negative on errors. */ -int pub_encrypt(struct asymmetric_key *pub, unsigned char *inbuf, +int apc_pub_encrypt(struct asymmetric_key *pub, unsigned char *inbuf, unsigned len, unsigned char *outbuf); /** @@ -44,7 +39,7 @@ int pub_encrypt(struct asymmetric_key *pub, unsigned char *inbuf, * * \return The size of the recovered plaintext on success, negative on errors. */ -int priv_decrypt(const char *key_file, unsigned char *outbuf, +int apc_priv_decrypt(const char *key_file, unsigned char *outbuf, unsigned char *inbuf, int inlen); /** @@ -55,17 +50,17 @@ int priv_decrypt(const char *key_file, unsigned char *outbuf, * * \return The size of the key on success, negative on errors. */ -int get_public_key(const char *key_file, struct asymmetric_key **result); +int apc_get_pubkey(const char *key_file, struct asymmetric_key **result); /** * Deallocate a public key. * * \param key Pointer to the key structure to free. * - * This should be called for keys obtained by get_public_key() if the key is no + * This should be called for keys obtained by \ref apc_get_pubkey() if the key is no * longer needed. */ -void free_public_key(struct asymmetric_key *key); +void apc_free_pubkey(struct asymmetric_key *key); /** @@ -82,17 +77,20 @@ void free_public_key(struct asymmetric_key *key); void get_random_bytes_or_die(unsigned char *buf, int num); /** - * Seed pseudo random number generators. + * Initialize the crypto backend. * - * This function seeds the PRNG used by random() with a random seed obtained - * from the crypto implementation. On errors, an error message is logged and - * the function calls exit(). + * This function initializes the crypto library and seeds the pseudo random + * number generator used by random() with a random seed obtained from the + * crypto implementation. On errors, an error message is logged and the + * function calls exit(). * * \sa \ref get_random_bytes_or_die(), srandom(3), random(3), \ref * para_random(). */ -void init_random_seed_or_die(void); +void crypt_init(void); +/** Allocate all resources of the crypto backend. */ +void crypt_shutdown(void); /** Opaque structure for stream ciphers. */ struct stream_cipher; @@ -160,7 +158,7 @@ _static_inline_ void sc_trafo(struct iovec *src, struct iovec *dst, /** * Deallocate a stream cipher structure. * - * \param sc A stream cipher previously obtained by sc_new(). + * \param sc A stream cipher previously obtained by \ref sc_new(). */ void sc_free(struct stream_cipher *sc); @@ -190,7 +188,7 @@ void hash_function(const char *data, unsigned long len, unsigned char *hash); * will be filled by the function with the ascii representation of the hash * value given by \a hash, and a terminating \p NULL byte. */ -void hash_to_asc(unsigned char *hash, char *asc); +void hash_to_asc(const unsigned char *hash, char *asc); /** * Compare two hashes. @@ -201,4 +199,4 @@ void hash_to_asc(unsigned char *hash, char *asc); * \return 1, -1, or zero, depending on whether \a h1 is greater than, * less than or equal to h2, respectively. */ -int hash_compare(unsigned char *h1, unsigned char *h2); +int hash_compare(const unsigned char *h1, const unsigned char *h2);