ctap_crypto.h

Go to the documentation of this file.

/*
 * SPDX-FileCopyrightText: 2021 Freie Universität Berlin
 * SPDX-License-Identifier: LGPL-2.1-only
 */
 
#pragma once

 
#include <stdint.h>
 
#include "hashes/sha256.h"
#include "fido2/ctap.h"
 
#ifdef __cplusplus
extern "C" {
#endif

#define CTAP_CRYPTO_KEY_SIZE 32

#define CTAP_CRYPTO_ES256_DER_MAX_SIZE 72

typedef struct {
    uint8_t x[CTAP_CRYPTO_KEY_SIZE];    
    uint8_t y[CTAP_CRYPTO_KEY_SIZE];    
} ctap_crypto_pub_key_t;

typedef struct {
    ctap_crypto_pub_key_t pub;          
    uint8_t priv[CTAP_CRYPTO_KEY_SIZE]; 
} ctap_crypto_key_agreement_key_t;

ctap_status_code_t fido2_ctap_crypto_init(void);

ctap_status_code_t fido2_ctap_crypto_prng(uint8_t *buf, size_t len);

ctap_status_code_t fido2_ctap_crypto_sha256_init(sha256_context_t *ctx);

ctap_status_code_t fido2_ctap_crypto_sha256_update(sha256_context_t *ctx, const void *data, size_t len);

ctap_status_code_t fido2_ctap_crypto_sha256_final(sha256_context_t *ctx, void *digest);

ctap_status_code_t fido2_ctap_crypto_sha256(const void *data, size_t len,
                             void *digest);

ctap_status_code_t fido2_ctap_crypto_hmac_sha256_init(hmac_context_t *ctx, const void *key,
                                       size_t key_length);

ctap_status_code_t fido2_ctap_crypto_hmac_sha256_update(hmac_context_t *ctx, const void *data, size_t len);

ctap_status_code_t fido2_ctap_crypto_hmac_sha256_final(hmac_context_t *ctx, void *digest);

ctap_status_code_t fido2_ctap_crypto_hmac_sha256(const void *key,
                                  size_t key_length, const void *data, size_t len,
                                  void *digest);

ctap_status_code_t fido2_ctap_crypto_gen_keypair(ctap_crypto_pub_key_t *pub_key, uint8_t *priv_key, size_t len);

ctap_status_code_t fido2_ctap_crypto_ecdh(uint8_t *out, size_t len,
                           ctap_crypto_pub_key_t *pub_key, uint8_t *priv_key, size_t key_len);

ctap_status_code_t fido2_ctap_crypto_get_sig(uint8_t *hash, size_t hash_len, uint8_t *sig,
                              size_t *sig_len, const uint8_t *key, size_t key_len);

ctap_status_code_t fido2_ctap_crypto_aes_enc(uint8_t * out, size_t *out_len, uint8_t * in,
                              size_t in_len, const uint8_t * key, size_t key_len);

ctap_status_code_t fido2_ctap_crypto_aes_dec(uint8_t * out, size_t *out_len, uint8_t * in,
                              size_t in_len, const uint8_t * key, size_t key_len);

ctap_status_code_t fido2_ctap_crypto_aes_ccm_enc(uint8_t *out, size_t out_len,
                                  const uint8_t *in, size_t in_len,
                                  uint8_t *auth_data, size_t auth_data_len,
                                  uint8_t mac_len, uint8_t length_encoding,
                                  const uint8_t *nonce, size_t nonce_len,
                                  const uint8_t *key, size_t key_len);

ctap_status_code_t fido2_ctap_crypto_aes_ccm_dec(uint8_t *out, size_t out_len,
                                  const uint8_t *in, size_t in_len,
                                  uint8_t *auth_data, size_t auth_data_len,
                                  uint8_t mac_len, uint8_t length_encoding,
                                  const uint8_t *nonce, size_t nonce_len,
                                  const uint8_t *key, size_t key_len);
#ifdef __cplusplus
}
#endif