diff options
author | Dmitry Belyavsky <beldmit@manul.localdomain> | 2015-08-14 20:50:01 +0300 |
---|---|---|
committer | Dmitry Belyavsky <beldmit@manul.localdomain> | 2015-08-14 20:50:01 +0300 |
commit | c98ba9d03213d0c63d6874539d59f7b55fbc3fae (patch) | |
tree | a27387a57d4bce07cc89f18a00687e7c24fa7ea2 /gost_keywrap.h | |
parent | 6bae2877d22e1bb30b20a7b09d6e5f8399e0e98b (diff) | |
download | gost-engine-c98ba9d03213d0c63d6874539d59f7b55fbc3fae.zip gost-engine-c98ba9d03213d0c63d6874539d59f7b55fbc3fae.tar.gz gost-engine-c98ba9d03213d0c63d6874539d59f7b55fbc3fae.tar.bz2 |
Initial commit
Diffstat (limited to 'gost_keywrap.h')
-rw-r--r-- | gost_keywrap.h | 56 |
1 files changed, 56 insertions, 0 deletions
diff --git a/gost_keywrap.h b/gost_keywrap.h new file mode 100644 index 0000000..7def4c9 --- /dev/null +++ b/gost_keywrap.h @@ -0,0 +1,56 @@ +/********************************************************************** + * gost_keywrap.h * + * Copyright (c) 2005-2006 Cryptocom LTD * + * This file is distributed under the same license as OpenSSL * + * * + * Implementation of CryptoPro key wrap algorithm, as defined in * + * RFC 4357 p 6.3 and 6.4 * + * Doesn't need OpenSSL * + **********************************************************************/ +#ifndef GOST_KEYWRAP_H +# define GOST_KEYWRAP_H +# include <string.h> +# include "gost89.h" +/*- + * Diversifies key using random UserKey Material + * Implements RFC 4357 p 6.5 key diversification algorithm + * + * inputKey - 32byte key to be diversified + * ukm - 8byte user key material + * outputKey - 32byte buffer to store diversified key + * + */ +void keyDiversifyCryptoPro(gost_ctx * ctx, + const unsigned char *inputKey, + const unsigned char *ukm, + unsigned char *outputKey); +/*- + * Wraps key using RFC 4357 6.3 + * ctx - gost encryption context, initialized with some S-boxes + * keyExchangeKey (KEK) 32-byte (256-bit) shared key + * ukm - 8 byte (64 bit) user key material, + * sessionKey - 32-byte (256-bit) key to be wrapped + * wrappedKey - 44-byte buffer to store wrapped key + */ + +int keyWrapCryptoPro(gost_ctx * ctx, + const unsigned char *keyExchangeKey, + const unsigned char *ukm, + const unsigned char *sessionKey, + unsigned char *wrappedKey); +/*- + * Unwraps key using RFC 4357 6.4 + * ctx - gost encryption context, initialized with some S-boxes + * keyExchangeKey 32-byte shared key + * wrappedKey 44 byte key to be unwrapped (concatenation of 8-byte UKM, + * 32 byte encrypted key and 4 byte MAC + * + * sessionKEy - 32byte buffer to store sessionKey in + * Returns 1 if key is decrypted successfully, and 0 if MAC doesn't match + */ + +int keyUnwrapCryptoPro(gost_ctx * ctx, + const unsigned char *keyExchangeKey, + const unsigned char *wrappedKey, + unsigned char *sessionKey); +#endif |