Gecko [ www.plinplanplanner.net ]

Name	Size	Permission
aes.h	3.66 KB	-rw-r--r--
asn1.h	59.72 KB	-rw-r--r--
asn1err.h	7.67 KB	-rw-r--r--
asn1t.h	35.09 KB	-rw-r--r--
async.h	3.42 KB	-rw-r--r--
asyncerr.h	842 B	-rw-r--r--
bio.h	45.38 KB	-rw-r--r--
bioerr.h	3.43 KB	-rw-r--r--
blowfish.h	2.63 KB	-rw-r--r--
bn.h	23.62 KB	-rw-r--r--
bnerr.h	1.9 KB	-rw-r--r--
buffer.h	1.62 KB	-rw-r--r--
buffererr.h	594 B	-rw-r--r--
byteorder.h	8.43 KB	-rw-r--r--
camellia.h	4.95 KB	-rw-r--r--
cast.h	2.02 KB	-rw-r--r--
cmac.h	1.57 KB	-rw-r--r--
cmp.h	49.42 KB	-rw-r--r--
cmp_util.h	1.7 KB	-rw-r--r--
cmperr.h	7.13 KB	-rw-r--r--
cms.h	34.34 KB	-rw-r--r--
cmserr.h	6.63 KB	-rw-r--r--
comp.h	4.54 KB	-rw-r--r--
comperr.h	1.22 KB	-rw-r--r--
conf.h	10.42 KB	-rw-r--r--
conf_api.h	1.39 KB	-rw-r--r--
conferr.h	2.21 KB	-rw-r--r--
configuration-x86_64.h	4.07 KB	-rw-r--r--
configuration.h	1.55 KB	-rw-r--r--
conftypes.h	1.16 KB	-rw-r--r--
core.h	7.99 KB	-rw-r--r--
core_dispatch.h	57.01 KB	-rw-r--r--
core_names.h	29.49 KB	-rw-r--r--
core_object.h	1.1 KB	-rw-r--r--
crmf.h	20.29 KB	-rw-r--r--
crmferr.h	2.39 KB	-rw-r--r--
crypto.h	24.73 KB	-rw-r--r--
cryptoerr.h	2.47 KB	-rw-r--r--
cryptoerr_legacy.h	78.51 KB	-rw-r--r--
ct.h	22.18 KB	-rw-r--r--
cterr.h	1.65 KB	-rw-r--r--
decoder.h	5.63 KB	-rw-r--r--
decodererr.h	791 B	-rw-r--r--
des.h	8.33 KB	-rw-r--r--
dh.h	15.11 KB	-rw-r--r--
dherr.h	2.51 KB	-rw-r--r--
dsa.h	12.24 KB	-rw-r--r--
dsaerr.h	1.59 KB	-rw-r--r--
dtls1.h	1.43 KB	-rw-r--r--
e_os2.h	8.64 KB	-rw-r--r--
e_ostime.h	1.16 KB	-rw-r--r--
ebcdic.h	1.02 KB	-rw-r--r--
ec.h	66.84 KB	-rw-r--r--
ecdh.h	361 B	-rw-r--r--
ecdsa.h	361 B	-rw-r--r--
ecerr.h	5.28 KB	-rw-r--r--
encoder.h	5.32 KB	-rw-r--r--
encodererr.h	791 B	-rw-r--r--
engine.h	37.91 KB	-rw-r--r--
engineerr.h	2.77 KB	-rw-r--r--
err.h	21.87 KB	-rw-r--r--
ess.h	8.76 KB	-rw-r--r--
esserr.h	1.12 KB	-rw-r--r--
evp.h	109.89 KB	-rw-r--r--
evperr.h	8.03 KB	-rw-r--r--
fips.h	601 B	-rw-r--r--
fips_names.h	1.62 KB	-rw-r--r--
fipskey.h	1.08 KB	-rw-r--r--
hmac.h	2.09 KB	-rw-r--r--
hpke.h	6.82 KB	-rw-r--r--
http.h	5.53 KB	-rw-r--r--
httperr.h	2.45 KB	-rw-r--r--
idea.h	2.94 KB	-rw-r--r--
indicator.h	917 B	-rw-r--r--
kdf.h	5.65 KB	-rw-r--r--
kdferr.h	482 B	-rw-r--r--
lhash.h	18.01 KB	-rw-r--r--
macros.h	11.21 KB	-rw-r--r--
md2.h	1.43 KB	-rw-r--r--
md4.h	1.66 KB	-rw-r--r--
md5.h	1.66 KB	-rw-r--r--
mdc2.h	1.41 KB	-rw-r--r--
ml_kem.h	1.02 KB	-rw-r--r--
modes.h	10.53 KB	-rw-r--r--
obj_mac.h	283.11 KB	-rw-r--r--
objects.h	6.73 KB	-rw-r--r--
objectserr.h	782 B	-rw-r--r--
ocsp.h	28.66 KB	-rw-r--r--
ocsperr.h	2.15 KB	-rw-r--r--
opensslconf.h	515 B	-rw-r--r--
opensslv.h	3.11 KB	-rw-r--r--
ossl_typ.h	562 B	-rw-r--r--
param_build.h	2.74 KB	-rw-r--r--
params.h	7.27 KB	-rw-r--r--
pem.h	25.59 KB	-rw-r--r--
pem2.h	531 B	-rw-r--r--
pemerr.h	2.63 KB	-rw-r--r--
pkcs12.h	19.92 KB	-rw-r--r--
pkcs12err.h	1.85 KB	-rw-r--r--
pkcs7.h	22.13 KB	-rw-r--r--
pkcs7err.h	2.88 KB	-rw-r--r--
prov_ssl.h	1.11 KB	-rw-r--r--
proverr.h	9.3 KB	-rw-r--r--
provider.h	3.82 KB	-rw-r--r--
quic.h	2.26 KB	-rw-r--r--
rand.h	4.08 KB	-rw-r--r--
randerr.h	3.3 KB	-rw-r--r--
rc2.h	2.33 KB	-rw-r--r--
rc4.h	1.17 KB	-rw-r--r--
rc5.h	2.79 KB	-rw-r--r--
ripemd.h	1.68 KB	-rw-r--r--
rsa.h	27.81 KB	-rw-r--r--
rsaerr.h	5.55 KB	-rw-r--r--
safestack.h	18.01 KB	-rw-r--r--
seed.h	3.87 KB	-rw-r--r--
self_test.h	5.02 KB	-rw-r--r--
sha.h	4.58 KB	-rw-r--r--
srp.h	15.12 KB	-rw-r--r--
srtp.h	2.13 KB	-rw-r--r--
ssl.h	135.67 KB	-rw-r--r--
ssl2.h	658 B	-rw-r--r--
ssl3.h	14.87 KB	-rw-r--r--
sslerr.h	22.23 KB	-rw-r--r--
sslerr_legacy.h	26.31 KB	-rw-r--r--
stack.h	3.21 KB	-rw-r--r--
store.h	15.1 KB	-rw-r--r--
storeerr.h	2.04 KB	-rw-r--r--
symhacks.h	1.26 KB	-rw-r--r--
thread.h	871 B	-rw-r--r--
tls1.h	71.38 KB	-rw-r--r--
trace.h	10.55 KB	-rw-r--r--
ts.h	20.12 KB	-rw-r--r--
tserr.h	3 KB	-rw-r--r--
txt_db.h	1.74 KB	-rw-r--r--
types.h	7.33 KB	-rw-r--r--
ui.h	18.8 KB	-rw-r--r--
uierr.h	1.36 KB	-rw-r--r--
whrlpool.h	1.81 KB	-rw-r--r--
x509.h	71.19 KB	-rw-r--r--
x509_acert.h	21.9 KB	-rw-r--r--
x509_vfy.h	51.35 KB	-rw-r--r--
x509err.h	3.3 KB	-rw-r--r--
x509v3.h	128.1 KB	-rw-r--r--
x509v3err.h	4.95 KB	-rw-r--r--

Code Editor : hpke.h

/*
 * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the Apache License 2.0 (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */

/* APIs and data structures for HPKE (RFC9180)  */
#ifndef OSSL_HPKE_H
# define OSSL_HPKE_H
# pragma once

# include <openssl/types.h>

/* HPKE modes */
# define OSSL_HPKE_MODE_BASE              0 /* Base mode  */
# define OSSL_HPKE_MODE_PSK               1 /* Pre-shared key mode */
# define OSSL_HPKE_MODE_AUTH              2 /* Authenticated mode */
# define OSSL_HPKE_MODE_PSKAUTH           3 /* PSK+authenticated mode */

/*
 * Max for ikm, psk, pskid, info and exporter contexts.
 * RFC9180, section 7.2.1 RECOMMENDS 64 octets but we have test vectors from
 * Appendix A.6.1 with a 66 octet IKM so we'll allow that.
 */
# define OSSL_HPKE_MAX_PARMLEN        66
# define OSSL_HPKE_MIN_PSKLEN         32
# define OSSL_HPKE_MAX_INFOLEN        1024

/*
 * The (16bit) HPKE algorithm ID IANA codepoints
 * If/when new IANA codepoints are added there are tables in
 * crypto/hpke/hpke_util.c that must also be updated.
 */
# define OSSL_HPKE_KEM_ID_RESERVED         0x0000 /* not used */
# define OSSL_HPKE_KEM_ID_P256             0x0010 /* NIST P-256 */
# define OSSL_HPKE_KEM_ID_P384             0x0011 /* NIST P-384 */
# define OSSL_HPKE_KEM_ID_P521             0x0012 /* NIST P-521 */
# define OSSL_HPKE_KEM_ID_X25519           0x0020 /* Curve25519 */
# define OSSL_HPKE_KEM_ID_X448             0x0021 /* Curve448 */

# define OSSL_HPKE_KDF_ID_RESERVED         0x0000 /* not used */
# define OSSL_HPKE_KDF_ID_HKDF_SHA256      0x0001 /* HKDF-SHA256 */
# define OSSL_HPKE_KDF_ID_HKDF_SHA384      0x0002 /* HKDF-SHA384 */
# define OSSL_HPKE_KDF_ID_HKDF_SHA512      0x0003 /* HKDF-SHA512 */

# define OSSL_HPKE_AEAD_ID_RESERVED        0x0000 /* not used */
# define OSSL_HPKE_AEAD_ID_AES_GCM_128     0x0001 /* AES-GCM-128 */
# define OSSL_HPKE_AEAD_ID_AES_GCM_256     0x0002 /* AES-GCM-256 */
# define OSSL_HPKE_AEAD_ID_CHACHA_POLY1305 0x0003 /* Chacha20-Poly1305 */
# define OSSL_HPKE_AEAD_ID_EXPORTONLY      0xFFFF /* export-only fake ID */

/* strings for suite components */
# define OSSL_HPKE_KEMSTR_P256        "P-256"              /* KEM id 0x10 */
# define OSSL_HPKE_KEMSTR_P384        "P-384"              /* KEM id 0x11 */
# define OSSL_HPKE_KEMSTR_P521        "P-521"              /* KEM id 0x12 */
# define OSSL_HPKE_KEMSTR_X25519      "X25519"             /* KEM id 0x20 */
# define OSSL_HPKE_KEMSTR_X448        "X448"               /* KEM id 0x21 */
# define OSSL_HPKE_KDFSTR_256         "hkdf-sha256"        /* KDF id 1 */
# define OSSL_HPKE_KDFSTR_384         "hkdf-sha384"        /* KDF id 2 */
# define OSSL_HPKE_KDFSTR_512         "hkdf-sha512"        /* KDF id 3 */
# define OSSL_HPKE_AEADSTR_AES128GCM  "aes-128-gcm"        /* AEAD id 1 */
# define OSSL_HPKE_AEADSTR_AES256GCM  "aes-256-gcm"        /* AEAD id 2 */
# define OSSL_HPKE_AEADSTR_CP         "chacha20-poly1305"  /* AEAD id 3 */
# define OSSL_HPKE_AEADSTR_EXP        "exporter"           /* AEAD id 0xff */

/*
 * Roles for use in creating an OSSL_HPKE_CTX, most
 * important use of this is to control nonce reuse.
 */
# define OSSL_HPKE_ROLE_SENDER 0
# define OSSL_HPKE_ROLE_RECEIVER 1

# ifdef  __cplusplus
extern "C" {
# endif

typedef struct {
    uint16_t    kem_id; /* Key Encapsulation Method id */
    uint16_t    kdf_id; /* Key Derivation Function id */
    uint16_t    aead_id; /* AEAD alg id */
} OSSL_HPKE_SUITE;

/**
 * Suite constants, use this like:
 *          OSSL_HPKE_SUITE myvar = OSSL_HPKE_SUITE_DEFAULT;
 */
# ifndef OPENSSL_NO_ECX
#  define OSSL_HPKE_SUITE_DEFAULT \
    {\
        OSSL_HPKE_KEM_ID_X25519, \
        OSSL_HPKE_KDF_ID_HKDF_SHA256, \
        OSSL_HPKE_AEAD_ID_AES_GCM_128 \
    }
# else
#  define OSSL_HPKE_SUITE_DEFAULT \
    {\
        OSSL_HPKE_KEM_ID_P256, \
        OSSL_HPKE_KDF_ID_HKDF_SHA256, \
        OSSL_HPKE_AEAD_ID_AES_GCM_128 \
    }
#endif

typedef struct ossl_hpke_ctx_st OSSL_HPKE_CTX;

OSSL_HPKE_CTX *OSSL_HPKE_CTX_new(int mode, OSSL_HPKE_SUITE suite, int role,
                                 OSSL_LIB_CTX *libctx, const char *propq);
void OSSL_HPKE_CTX_free(OSSL_HPKE_CTX *ctx);

int OSSL_HPKE_encap(OSSL_HPKE_CTX *ctx,
                    unsigned char *enc, size_t *enclen,
                    const unsigned char *pub, size_t publen,
                    const unsigned char *info, size_t infolen);
int OSSL_HPKE_seal(OSSL_HPKE_CTX *ctx,
                   unsigned char *ct, size_t *ctlen,
                   const unsigned char *aad, size_t aadlen,
                   const unsigned char *pt, size_t ptlen);

int OSSL_HPKE_keygen(OSSL_HPKE_SUITE suite,
                     unsigned char *pub, size_t *publen, EVP_PKEY **priv,
                     const unsigned char *ikm, size_t ikmlen,
                     OSSL_LIB_CTX *libctx, const char *propq);
int OSSL_HPKE_decap(OSSL_HPKE_CTX *ctx,
                    const unsigned char *enc, size_t enclen,
                    EVP_PKEY *recippriv,
                    const unsigned char *info, size_t infolen);
int OSSL_HPKE_open(OSSL_HPKE_CTX *ctx,
                   unsigned char *pt, size_t *ptlen,
                   const unsigned char *aad, size_t aadlen,
                   const unsigned char *ct, size_t ctlen);

int OSSL_HPKE_export(OSSL_HPKE_CTX *ctx,
                     unsigned char *secret,
                     size_t secretlen,
                     const unsigned char *label,
                     size_t labellen);

int OSSL_HPKE_CTX_set1_authpriv(OSSL_HPKE_CTX *ctx, EVP_PKEY *priv);
int OSSL_HPKE_CTX_set1_authpub(OSSL_HPKE_CTX *ctx,
                               const unsigned char *pub,
                               size_t publen);
int OSSL_HPKE_CTX_set1_psk(OSSL_HPKE_CTX *ctx,
                           const char *pskid,
                           const unsigned char *psk, size_t psklen);

int OSSL_HPKE_CTX_set1_ikme(OSSL_HPKE_CTX *ctx,
                            const unsigned char *ikme, size_t ikmelen);

int OSSL_HPKE_CTX_set_seq(OSSL_HPKE_CTX *ctx, uint64_t seq);
int OSSL_HPKE_CTX_get_seq(OSSL_HPKE_CTX *ctx, uint64_t *seq);

int OSSL_HPKE_suite_check(OSSL_HPKE_SUITE suite);
int OSSL_HPKE_get_grease_value(const OSSL_HPKE_SUITE *suite_in,
                               OSSL_HPKE_SUITE *suite,
                               unsigned char *enc, size_t *enclen,
                               unsigned char *ct, size_t ctlen,
                               OSSL_LIB_CTX *libctx, const char *propq);
int OSSL_HPKE_str2suite(const char *str, OSSL_HPKE_SUITE *suite);
size_t OSSL_HPKE_get_ciphertext_size(OSSL_HPKE_SUITE suite, size_t clearlen);
size_t OSSL_HPKE_get_public_encap_size(OSSL_HPKE_SUITE suite);
size_t OSSL_HPKE_get_recommended_ikmelen(OSSL_HPKE_SUITE suite);

# ifdef  __cplusplus
}
# endif

#endif

${this.title}

Code Editor : hpke.h