Back to index

lightning-sunbird  0.9+nobinonly
Defines | Functions
keyhi.h File Reference
#include "plarena.h"
#include "seccomon.h"
#include "secoidt.h"
#include "secdert.h"
#include "keythi.h"
#include "certt.h"
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Defines

#define PRIVKEY_LIST_HEAD(l)   ((SECKEYPrivateKeyListNode*)PR_LIST_HEAD(&l->list))
#define PRIVKEY_LIST_NEXT(n)   ((SECKEYPrivateKeyListNode *)n->links.next)
#define PRIVKEY_LIST_END(n, l)   (((void *)n) == ((void *)&l->list))
#define PUBKEY_LIST_HEAD(l)   ((SECKEYPublicKeyListNode*)PR_LIST_HEAD(&l->list))
#define PUBKEY_LIST_NEXT(n)   ((SECKEYPublicKeyListNode *)n->links.next)
#define PUBKEY_LIST_END(n, l)   (((void *)n) == ((void *)&l->list))

Functions

SEC_BEGIN_PROTOS void SECKEY_DestroySubjectPublicKeyInfo (CERTSubjectPublicKeyInfo *spki)
SECStatus SECKEY_CopySubjectPublicKeyInfo (PRArenaPool *arena, CERTSubjectPublicKeyInfo *dst, CERTSubjectPublicKeyInfo *src)
SECStatus SECKEY_UpdateCertPQG (CERTCertificate *subjectCert)
SECStatus SECKEY_KEAParamCompare (CERTCertificate *cert1, CERTCertificate *cert2)
unsigned SECKEY_PublicKeyStrength (SECKEYPublicKey *pubk)
unsigned SECKEY_PublicKeyStrengthInBits (SECKEYPublicKey *pubk)
unsigned SECKEY_SignatureLen (const SECKEYPublicKey *pubk)
SECKEYPrivateKey * SECKEY_CopyPrivateKey (SECKEYPrivateKey *privKey)
SECKEYPublicKey * SECKEY_CopyPublicKey (SECKEYPublicKey *pubKey)
SECKEYPublicKey * SECKEY_ConvertToPublicKey (SECKEYPrivateKey *privateKey)
SECKEYPrivateKey * SECKEY_CreateRSAPrivateKey (int keySizeInBits, SECKEYPublicKey **pubk, void *cx)
SECKEYPrivateKey * SECKEY_CreateDHPrivateKey (SECKEYDHParams *param, SECKEYPublicKey **pubk, void *cx)
SECKEYPrivateKey * SECKEY_CreateECPrivateKey (SECKEYECParams *param, SECKEYPublicKey **pubk, void *cx)
CERTSubjectPublicKeyInfo * SECKEY_CreateSubjectPublicKeyInfo (SECKEYPublicKey *k)
SECKEYPublicKey * SECKEY_DecodeDERPublicKey (SECItem *pubkder)
SECKEYPublicKey * SECKEY_ConvertAndDecodePublicKey (char *pubkstr)
CERTSubjectPublicKeyInfo * SECKEY_ConvertAndDecodePublicKeyAndChallenge (char *pkacstr, char *challenge, void *cx)
SECItem * SECKEY_EncodeDERSubjectPublicKeyInfo (SECKEYPublicKey *pubk)
CERTSubjectPublicKeyInfo * SECKEY_DecodeDERSubjectPublicKeyInfo (SECItem *spkider)
CERTSubjectPublicKeyInfo * SECKEY_ConvertAndDecodeSubjectPublicKeyInfo (char *spkistr)
SECKEYPublicKey * SECKEY_ExtractPublicKey (CERTSubjectPublicKeyInfo *)
void SECKEY_DestroyPrivateKey (SECKEYPrivateKey *key)
void SECKEY_DestroyPublicKey (SECKEYPublicKey *key)
void SECKEY_DestroyPrivateKeyInfo (SECKEYPrivateKeyInfo *pvk, PRBool freeit)
void SECKEY_DestroyEncryptedPrivateKeyInfo (SECKEYEncryptedPrivateKeyInfo *epki, PRBool freeit)
SECStatus SECKEY_CopyPrivateKeyInfo (PRArenaPool *poolp, SECKEYPrivateKeyInfo *to, SECKEYPrivateKeyInfo *from)
SECStatus SECKEY_CacheStaticFlags (SECKEYPrivateKey *key)
SECStatus SECKEY_CopyEncryptedPrivateKeyInfo (PRArenaPool *poolp, SECKEYEncryptedPrivateKeyInfo *to, SECKEYEncryptedPrivateKeyInfo *from)
KeyType SECKEY_GetPrivateKeyType (SECKEYPrivateKey *privKey)
KeyType SECKEY_GetPublicKeyType (SECKEYPublicKey *pubKey)
SECKEYPublicKey * SECKEY_ImportDERPublicKey (SECItem *derKey, CK_KEY_TYPE type)
SECKEYPrivateKeyListSECKEY_NewPrivateKeyList (void)
void SECKEY_DestroyPrivateKeyList (SECKEYPrivateKeyList *keys)
void SECKEY_RemovePrivateKeyListNode (SECKEYPrivateKeyListNode *node)
SECStatus SECKEY_AddPrivateKeyToListTail (SECKEYPrivateKeyList *list, SECKEYPrivateKey *key)
SECKEYPublicKeyListSECKEY_NewPublicKeyList (void)
void SECKEY_DestroyPublicKeyList (SECKEYPublicKeyList *keys)
void SECKEY_RemovePublicKeyListNode (SECKEYPublicKeyListNode *node)
SECStatus SECKEY_AddPublicKeyToListTail (SECKEYPublicKeyList *list, SECKEYPublicKey *key)
int SECKEY_ECParamsToKeySize (const SECItem *params)
int SECKEY_ECParamsToBasePointOrderLen (const SECItem *params)

Define Documentation

#define PRIVKEY_LIST_END (   n,
  l 
)    (((void *)n) == ((void *)&l->list))

Definition at line 272 of file keyhi.h.

Definition at line 270 of file keyhi.h.

Definition at line 271 of file keyhi.h.

#define PUBKEY_LIST_END (   n,
  l 
)    (((void *)n) == ((void *)&l->list))

Definition at line 289 of file keyhi.h.

Definition at line 287 of file keyhi.h.

Definition at line 288 of file keyhi.h.


Function Documentation

SECStatus SECKEY_AddPrivateKeyToListTail ( SECKEYPrivateKeyList list,
SECKEYPrivateKey *  key 
)

Definition at line 2409 of file seckey.c.

{
    SECKEYPrivateKeyListNode *node;

    node = (SECKEYPrivateKeyListNode *)PORT_ArenaZAlloc(list->arena,
                sizeof(SECKEYPrivateKeyListNode));
    if ( node == NULL ) {
        goto loser;
    }

    PR_INSERT_BEFORE(&node->links, &list->list);
    node->key = key;
    return(SECSuccess);

loser:
    return(SECFailure);
}

Here is the caller graph for this function:

SECStatus SECKEY_AddPublicKeyToListTail ( SECKEYPublicKeyList list,
SECKEYPublicKey *  key 
)

Definition at line 2486 of file seckey.c.

{
    SECKEYPublicKeyListNode *node;

    node = (SECKEYPublicKeyListNode *)PORT_ArenaZAlloc(list->arena,
                sizeof(SECKEYPublicKeyListNode));
    if ( node == NULL ) {
        goto loser;
    }

    PR_INSERT_BEFORE(&node->links, &list->list);
    node->key = key;
    return(SECSuccess);

loser:
    return(SECFailure);
}

Here is the caller graph for this function:

SECStatus SECKEY_CacheStaticFlags ( SECKEYPrivateKey *  key)

Definition at line 2513 of file seckey.c.

{
    SECStatus rv = SECFailure;
    if (key && key->pkcs11Slot && key->pkcs11ID) {
        key->staticflags |= SECKEY_Attributes_Cached;
        SECKEY_CacheAttribute(key, CKA_PRIVATE);
        rv = SECSuccess;
    }
    return rv;
}

Here is the caller graph for this function:

SECKEYPublicKey* SECKEY_ConvertAndDecodePublicKey ( char *  pubkstr)

Definition at line 1978 of file seckey.c.

{
    SECKEYPublicKey *pubk;
    SECStatus rv;
    SECItem der;

    rv = ATOB_ConvertAsciiToItem (&der, pubkstr);
    if (rv != SECSuccess)
       return NULL;

    pubk = SECKEY_DecodeDERPublicKey (&der);

    PORT_Free (der.data);
    return pubk;
}
CERTSubjectPublicKeyInfo* SECKEY_ConvertAndDecodePublicKeyAndChallenge ( char *  pkacstr,
char *  challenge,
void cx 
)

Definition at line 2078 of file seckey.c.

{
    CERTSubjectPublicKeyInfo *spki = NULL;
    CERTPublicKeyAndChallenge pkac;
    SECStatus rv;
    SECItem signedItem;
    PRArenaPool *arena = NULL;
    CERTSignedData sd;
    SECItem sig;
    SECKEYPublicKey *pubKey = NULL;
    unsigned int len;
    
    signedItem.data = NULL;
    
    /* convert the base64 encoded data to binary */
    rv = ATOB_ConvertAsciiToItem(&signedItem, pkacstr);
    if (rv != SECSuccess) {
       goto loser;
    }

    /* create an arena */
    arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
    if (arena == NULL) {
       goto loser;
    }

    /* decode the outer wrapping of signed data */
    PORT_Memset(&sd, 0, sizeof(CERTSignedData));
    rv = SEC_QuickDERDecodeItem(arena, &sd, CERT_SignedDataTemplate, &signedItem );
    if ( rv ) {
       goto loser;
    }

    /* decode the public key and challenge wrapper */
    PORT_Memset(&pkac, 0, sizeof(CERTPublicKeyAndChallenge));
    rv = SEC_QuickDERDecodeItem(arena, &pkac, CERT_PublicKeyAndChallengeTemplate, 
                         &sd.data);
    if ( rv ) {
       goto loser;
    }

    /* decode the subject public key info */
    spki = SECKEY_DecodeDERSubjectPublicKeyInfo(&pkac.spki);
    if ( spki == NULL ) {
       goto loser;
    }
    
    /* get the public key */
    pubKey = seckey_ExtractPublicKey(spki);
    if ( pubKey == NULL ) {
       goto loser;
    }

    /* check the signature */
    sig = sd.signature;
    DER_ConvertBitString(&sig);
    rv = VFY_VerifyDataWithAlgorithmID(sd.data.data, sd.data.len, pubKey, &sig,
                     &sd.signatureAlgorithm, NULL, wincx);
    if ( rv != SECSuccess ) {
       goto loser;
    }
    
    /* check the challenge */
    if ( challenge ) {
       len = PORT_Strlen(challenge);
       /* length is right */
       if ( len != pkac.challenge.len ) {
           goto loser;
       }
       /* actual data is right */
       if ( PORT_Memcmp(challenge, pkac.challenge.data, len) != 0 ) {
           goto loser;
       }
    }
    goto done;

loser:
    /* make sure that we return null if we got an error */
    if ( spki ) {
       SECKEY_DestroySubjectPublicKeyInfo(spki);
    }
    spki = NULL;
    
done:
    if ( signedItem.data ) {
       PORT_Free(signedItem.data);
    }
    if ( arena ) {
       PORT_FreeArena(arena, PR_FALSE);
    }
    if ( pubKey ) {
       SECKEY_DestroyPublicKey(pubKey);
    }
    
    return spki;
}

Here is the caller graph for this function:

CERTSubjectPublicKeyInfo* SECKEY_ConvertAndDecodeSubjectPublicKeyInfo ( char *  spkistr)

Definition at line 2057 of file seckey.c.

{
    CERTSubjectPublicKeyInfo *spki;
    SECStatus rv;
    SECItem der;

    rv = ATOB_ConvertAsciiToItem(&der, spkistr);
    if (rv != SECSuccess)
       return NULL;

    spki = SECKEY_DecodeDERSubjectPublicKeyInfo(&der);

    PORT_Free(der.data);
    return spki;
}
SECKEYPublicKey* SECKEY_ConvertToPublicKey ( SECKEYPrivateKey *  privateKey)

Definition at line 1710 of file seckey.c.

{
    SECKEYPublicKey *pubk;
    PRArenaPool *arena;
    CERTCertificate *cert;
    SECStatus rv;

    /*
     * First try to look up the cert.
     */
    cert = PK11_GetCertFromPrivateKey(privk);
    if (cert) {
       pubk = CERT_ExtractPublicKey(cert);
       CERT_DestroyCertificate(cert);
       return pubk;
    }

    /* couldn't find the cert, build pub key by hand */
    arena = PORT_NewArena (DER_DEFAULT_CHUNKSIZE);
    if (arena == NULL) {
       PORT_SetError (SEC_ERROR_NO_MEMORY);
       return NULL;
    }
    pubk = (SECKEYPublicKey *)PORT_ArenaZAlloc(arena,
                                             sizeof (SECKEYPublicKey));
    if (pubk == NULL) {
       PORT_FreeArena(arena,PR_FALSE);
       return NULL;
    }
    pubk->keyType = privk->keyType;
    pubk->pkcs11Slot = NULL;
    pubk->pkcs11ID = CK_INVALID_HANDLE;
    pubk->arena = arena;

    /*
     * fortezza is at the head of this switch, since we don't want to
     * allocate an arena... CERT_ExtractPublicKey will to that for us.
     */
    switch(privk->keyType) {
      case fortezzaKey:
      case nullKey:
      case dhKey:
      case dsaKey:
       /* Nothing to query, if the cert isn't there, we're done -- no way
        * to get the public key */
       break;
      case rsaKey:
       rv = PK11_ReadAttribute(privk->pkcs11Slot,privk->pkcs11ID,
                            CKA_MODULUS,arena,&pubk->u.rsa.modulus);
       if (rv != SECSuccess)  break;
       rv = PK11_ReadAttribute(privk->pkcs11Slot,privk->pkcs11ID,
                     CKA_PUBLIC_EXPONENT,arena,&pubk->u.rsa.publicExponent);
       if (rv != SECSuccess)  break;
       return pubk;
       break;
    default:
       break;
    }

    PORT_FreeArena (arena, PR_FALSE);
    return NULL;
}

Here is the caller graph for this function:

SECStatus SECKEY_CopyEncryptedPrivateKeyInfo ( PRArenaPool poolp,
SECKEYEncryptedPrivateKeyInfo *  to,
SECKEYEncryptedPrivateKeyInfo *  from 
)

Definition at line 2262 of file seckey.c.

{
    SECStatus rv = SECFailure;

    if((to == NULL) || (from == NULL)) {
       return SECFailure;
    }

    rv = SECOID_CopyAlgorithmID(poolp, &to->algorithm, &from->algorithm);
    if(rv != SECSuccess) {
       return SECFailure;
    }
    rv = SECITEM_CopyItem(poolp, &to->encryptedData, &from->encryptedData);

    return rv;
}

Here is the caller graph for this function:

SECKEYPrivateKey* SECKEY_CopyPrivateKey ( SECKEYPrivateKey *  privKey)

Definition at line 1535 of file seckey.c.

{
    SECKEYPrivateKey *copyk;
    PRArenaPool *arena;
    
    if (!privk || !privk->pkcs11Slot) {
       PORT_SetError(SEC_ERROR_INVALID_ARGS);
       return NULL;
    }
    
    arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
    if (arena == NULL) {
       return NULL;
    }

    copyk = (SECKEYPrivateKey *) PORT_ArenaZAlloc (arena, sizeof (SECKEYPrivateKey));
    if (copyk) {
       copyk->arena = arena;
       copyk->keyType = privk->keyType;

       /* copy the PKCS #11 parameters */
       copyk->pkcs11Slot = PK11_ReferenceSlot(privk->pkcs11Slot);
       /* if the key we're referencing was a temparary key we have just
        * created, that we want to go away when we're through, we need
        * to make a copy of it */
       if (privk->pkcs11IsTemp) {
           copyk->pkcs11ID = 
                     PK11_CopyKey(privk->pkcs11Slot,privk->pkcs11ID);
           if (copyk->pkcs11ID == CK_INVALID_HANDLE) goto fail;
       } else {
           copyk->pkcs11ID = privk->pkcs11ID;
       }
       copyk->pkcs11IsTemp = privk->pkcs11IsTemp;
       copyk->wincx = privk->wincx;
       copyk->staticflags = privk->staticflags;
       return copyk;
    } else {
       PORT_SetError (SEC_ERROR_NO_MEMORY);
    }

fail:
    PORT_FreeArena (arena, PR_FALSE);
    return NULL;
}

Here is the caller graph for this function:

SECStatus SECKEY_CopyPrivateKeyInfo ( PRArenaPool poolp,
SECKEYPrivateKeyInfo *  to,
SECKEYPrivateKeyInfo *  from 
)

Definition at line 2238 of file seckey.c.

{
    SECStatus rv = SECFailure;

    if((to == NULL) || (from == NULL)) {
       return SECFailure;
    }

    rv = SECOID_CopyAlgorithmID(poolp, &to->algorithm, &from->algorithm);
    if(rv != SECSuccess) {
       return SECFailure;
    }
    rv = SECITEM_CopyItem(poolp, &to->privateKey, &from->privateKey);
    if(rv != SECSuccess) {
       return SECFailure;
    }
    rv = SECITEM_CopyItem(poolp, &to->version, &from->version);

    return rv;
}

Here is the caller graph for this function:

SECKEYPublicKey* SECKEY_CopyPublicKey ( SECKEYPublicKey *  pubKey)

Definition at line 1581 of file seckey.c.

{
    SECKEYPublicKey *copyk;
    PRArenaPool *arena;
    SECStatus rv = SECSuccess;

    arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
    if (arena == NULL) {
       PORT_SetError (SEC_ERROR_NO_MEMORY);
       return NULL;
    }

    copyk = (SECKEYPublicKey *) PORT_ArenaZAlloc (arena, sizeof (SECKEYPublicKey));
    if (!copyk) {
        PORT_SetError (SEC_ERROR_NO_MEMORY);
        PORT_FreeArena (arena, PR_FALSE);
        return NULL;
    }

    copyk->arena = arena;
    copyk->keyType = pubk->keyType;
    if (pubk->pkcs11Slot && 
        PK11_IsPermObject(pubk->pkcs11Slot,pubk->pkcs11ID)) {
        copyk->pkcs11Slot = PK11_ReferenceSlot(pubk->pkcs11Slot);
        copyk->pkcs11ID = pubk->pkcs11ID;
    } else {
        copyk->pkcs11Slot = NULL;  /* go get own reference */
        copyk->pkcs11ID = CK_INVALID_HANDLE;
    }
    switch (pubk->keyType) {
      case rsaKey:
          rv = SECITEM_CopyItem(arena, &copyk->u.rsa.modulus,
                                &pubk->u.rsa.modulus);
          if (rv == SECSuccess) {
              rv = SECITEM_CopyItem (arena, &copyk->u.rsa.publicExponent,
                                     &pubk->u.rsa.publicExponent);
              if (rv == SECSuccess)
                  return copyk;
          }
          break;
      case dsaKey:
          rv = SECITEM_CopyItem(arena, &copyk->u.dsa.publicValue,
                                &pubk->u.dsa.publicValue);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.dsa.params.prime,
                                &pubk->u.dsa.params.prime);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.dsa.params.subPrime,
                                &pubk->u.dsa.params.subPrime);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.dsa.params.base,
                                &pubk->u.dsa.params.base);
          break;
      case keaKey:
          rv = SECITEM_CopyItem(arena, &copyk->u.kea.publicValue,
                                &pubk->u.kea.publicValue);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.kea.params.hash,
                                &pubk->u.kea.params.hash);
          break;
      case fortezzaKey:
          copyk->u.fortezza.KEAversion = pubk->u.fortezza.KEAversion;
          copyk->u.fortezza.DSSversion = pubk->u.fortezza.DSSversion;
          PORT_Memcpy(copyk->u.fortezza.KMID, pubk->u.fortezza.KMID,
                      sizeof(pubk->u.fortezza.KMID));
          rv = SECITEM_CopyItem(arena, &copyk->u.fortezza.clearance, 
                                &pubk->u.fortezza.clearance);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.fortezza.KEApriviledge, 
                                &pubk->u.fortezza.KEApriviledge);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.fortezza.DSSpriviledge, 
                                &pubk->u.fortezza.DSSpriviledge);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.fortezza.KEAKey, 
                                &pubk->u.fortezza.KEAKey);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.fortezza.DSSKey, 
                                &pubk->u.fortezza.DSSKey);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.fortezza.params.prime, 
                                &pubk->u.fortezza.params.prime);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.fortezza.params.subPrime, 
                                &pubk->u.fortezza.params.subPrime);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.fortezza.params.base, 
                                &pubk->u.fortezza.params.base);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.fortezza.keaParams.prime, 
                                &pubk->u.fortezza.keaParams.prime);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.fortezza.keaParams.subPrime, 
                                &pubk->u.fortezza.keaParams.subPrime);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.fortezza.keaParams.base, 
                                &pubk->u.fortezza.keaParams.base);
          break;
      case dhKey:
          rv = SECITEM_CopyItem(arena,&copyk->u.dh.prime,&pubk->u.dh.prime);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena,&copyk->u.dh.base,&pubk->u.dh.base);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena, &copyk->u.dh.publicValue, 
                                &pubk->u.dh.publicValue);
          break;
      case ecKey:
          copyk->u.ec.size = pubk->u.ec.size;
          rv = SECITEM_CopyItem(arena,&copyk->u.ec.DEREncodedParams,
                                &pubk->u.ec.DEREncodedParams);
          if (rv != SECSuccess) break;
          rv = SECITEM_CopyItem(arena,&copyk->u.ec.publicValue,
                                &pubk->u.ec.publicValue);
          break;
      case nullKey:
          return copyk;
      default:
          rv = SECFailure;
          break;
    }
    if (rv == SECSuccess)
        return copyk;

    SECKEY_DestroyPublicKey (copyk);
    return NULL;
}

Here is the caller graph for this function:

SECStatus SECKEY_CopySubjectPublicKeyInfo ( PRArenaPool arena,
CERTSubjectPublicKeyInfo *  dst,
CERTSubjectPublicKeyInfo *  src 
)

Definition at line 302 of file seckey.c.

{
    SECStatus rv;
    SECItem spk;

    rv = SECOID_CopyAlgorithmID(arena, &to->algorithm, &from->algorithm);
    if (rv == SECSuccess) {
       /*
        * subjectPublicKey is a bit string, whose length is in bits.
        * Convert the length from bits to bytes for SECITEM_CopyItem.
        */
       spk = from->subjectPublicKey;
       DER_ConvertBitString(&spk);
       rv = SECITEM_CopyItem(arena, &to->subjectPublicKey, &spk);
       /* Set the length back to bits. */
       if (rv == SECSuccess) {
           to->subjectPublicKey.len = from->subjectPublicKey.len;
       }
    }

    return rv;
}

Here is the caller graph for this function:

SECKEYPrivateKey* SECKEY_CreateDHPrivateKey ( SECKEYDHParams *  param,
SECKEYPublicKey **  pubk,
void cx 
)

Definition at line 224 of file seckey.c.

{
    SECKEYPrivateKey *privk;
    PK11SlotInfo *slot = PK11_GetBestSlot(CKM_DH_PKCS_KEY_PAIR_GEN,cx);
    if (!slot) {
       return NULL;
    }

    privk = PK11_GenerateKeyPair(slot, CKM_DH_PKCS_KEY_PAIR_GEN, param, 
                                 pubk, PR_FALSE, PR_FALSE, cx);
    if (!privk) 
       privk = PK11_GenerateKeyPair(slot, CKM_DH_PKCS_KEY_PAIR_GEN, param, 
                                    pubk, PR_FALSE, PR_TRUE, cx);

    PK11_FreeSlot(slot);
    return(privk);
}

Here is the caller graph for this function:

SECKEYPrivateKey* SECKEY_CreateECPrivateKey ( SECKEYECParams param,
SECKEYPublicKey **  pubk,
void cx 
)

Definition at line 250 of file seckey.c.

{
    SECKEYPrivateKey *privk;
    PK11SlotInfo *slot = PK11_GetBestSlot(CKM_EC_KEY_PAIR_GEN,cx);
    if (!slot) {
       return NULL;
    }

    privk = PK11_GenerateKeyPair(slot, CKM_EC_KEY_PAIR_GEN, param, 
                                 pubk, PR_FALSE, PR_FALSE, cx);
    if (!privk) 
       privk = PK11_GenerateKeyPair(slot, CKM_EC_KEY_PAIR_GEN, param, 
                                    pubk, PR_FALSE, PR_TRUE, cx);

    PK11_FreeSlot(slot);
    return(privk);
}

Here is the caller graph for this function:

SECKEYPrivateKey* SECKEY_CreateRSAPrivateKey ( int  keySizeInBits,
SECKEYPublicKey **  pubk,
void cx 
)

Definition at line 198 of file seckey.c.

{
    SECKEYPrivateKey *privk;
    PK11RSAGenParams param;
    PK11SlotInfo *slot = PK11_GetBestSlot(CKM_RSA_PKCS_KEY_PAIR_GEN,cx);
    if (!slot) {
       return NULL;
    }

    param.keySizeInBits = keySizeInBits;
    param.pe = 65537L;
    
    privk = PK11_GenerateKeyPair(slot,CKM_RSA_PKCS_KEY_PAIR_GEN,&param,pubk,
                                   PR_FALSE, PR_TRUE, cx);
    PK11_FreeSlot(slot);
    return(privk);
}

Here is the caller graph for this function:

CERTSubjectPublicKeyInfo* SECKEY_CreateSubjectPublicKeyInfo ( SECKEYPublicKey *  k)

Definition at line 1774 of file seckey.c.

{
    CERTSubjectPublicKeyInfo *spki;
    PRArenaPool *arena;
    SECItem params = { siBuffer, NULL, 0 };

    if (!pubk) {
        PORT_SetError(SEC_ERROR_INVALID_ARGS);
        return NULL;
    }

    arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
    if (arena == NULL) {
       PORT_SetError(SEC_ERROR_NO_MEMORY);
       return NULL;
    }

    spki = (CERTSubjectPublicKeyInfo *) PORT_ArenaZAlloc(arena, sizeof (*spki));
    if (spki != NULL) {
       SECStatus rv;
       SECItem *rv_item;
       
       spki->arena = arena;
       switch(pubk->keyType) {
         case rsaKey:
           rv = SECOID_SetAlgorithmID(arena, &spki->algorithm,
                                 SEC_OID_PKCS1_RSA_ENCRYPTION, 0);
           if (rv == SECSuccess) {
              /*
               * DER encode the public key into the subjectPublicKeyInfo.
               */
              prepare_rsa_pub_key_for_asn1(pubk);
              rv_item = SEC_ASN1EncodeItem(arena, &spki->subjectPublicKey,
                                        pubk, SECKEY_RSAPublicKeyTemplate);
              if (rv_item != NULL) {
                  /*
                   * The stored value is supposed to be a BIT_STRING,
                   * so convert the length.
                   */
                  spki->subjectPublicKey.len <<= 3;
                  /*
                   * We got a good one; return it.
                   */
                  return spki;
              }
           }
           break;
         case dsaKey:
           /* DER encode the params. */
           prepare_pqg_params_for_asn1(&pubk->u.dsa.params);
           rv_item = SEC_ASN1EncodeItem(arena, &params, &pubk->u.dsa.params,
                                    SECKEY_PQGParamsTemplate);
           if (rv_item != NULL) {
              rv = SECOID_SetAlgorithmID(arena, &spki->algorithm,
                                      SEC_OID_ANSIX9_DSA_SIGNATURE,
                                      &params);
              if (rv == SECSuccess) {
                  /*
                   * DER encode the public key into the subjectPublicKeyInfo.
                   */
                  prepare_dsa_pub_key_for_asn1(pubk);
                  rv_item = SEC_ASN1EncodeItem(arena, &spki->subjectPublicKey,
                                           pubk,
                                           SECKEY_DSAPublicKeyTemplate);
                  if (rv_item != NULL) {
                     /*
                      * The stored value is supposed to be a BIT_STRING,
                      * so convert the length.
                      */
                     spki->subjectPublicKey.len <<= 3;
                     /*
                      * We got a good one; return it.
                      */
                     return spki;
                  }
              }
           }
           SECITEM_FreeItem(&params, PR_FALSE);
           break;
         case ecKey:
           rv = SECITEM_CopyItem(arena, &params, 
                              &pubk->u.ec.DEREncodedParams);
           if (rv != SECSuccess) break;

           rv = SECOID_SetAlgorithmID(arena, &spki->algorithm,
                                   SEC_OID_ANSIX962_EC_PUBLIC_KEY,
                                   &params);
           if (rv != SECSuccess) break;

           rv = SECITEM_CopyItem(arena, &spki->subjectPublicKey,
                              &pubk->u.ec.publicValue);

           if (rv == SECSuccess) {
               /*
               * The stored value is supposed to be a BIT_STRING,
               * so convert the length.
               */
               spki->subjectPublicKey.len <<= 3;
              /*
               * We got a good one; return it.
               */
              return spki;
           }
           break;
         case keaKey:
         case dhKey: /* later... */

         break;  
         case fortezzaKey:
#ifdef notdef
           /* encode the DSS parameters (PQG) */
           rv = FortezzaBuildParams(&params,pubk);
           if (rv != SECSuccess) break;

           /* set the algorithm */
           rv = SECOID_SetAlgorithmID(arena, &spki->algorithm,
                                   SEC_OID_MISSI_KEA_DSS, &params);
           PORT_Free(params.data);
           if (rv == SECSuccess) {
              /*
               * Encode the public key into the subjectPublicKeyInfo.
               * Fortezza key material is not standard DER
               */
              rv = FortezzaEncodeCertKey(arena,&spki->subjectPublicKey,pubk);
              if (rv == SECSuccess) {
                  /*
                   * The stored value is supposed to be a BIT_STRING,
                   * so convert the length.
                   */
                  spki->subjectPublicKey.len <<= 3;

                  /*
                   * We got a good one; return it.
                   */
                  return spki;
              }
           }
#endif
           break;
         default:
           break;
       }
    } else {
       PORT_SetError(SEC_ERROR_NO_MEMORY);
    }

    PORT_FreeArena(arena, PR_FALSE);
    return NULL;
}

Here is the caller graph for this function:

SECKEYPublicKey* SECKEY_DecodeDERPublicKey ( SECItem *  pubkder)

Definition at line 1937 of file seckey.c.

{
    PRArenaPool *arena;
    SECKEYPublicKey *pubk;
    SECStatus rv;
    SECItem newPubkder;

    arena = PORT_NewArena (DER_DEFAULT_CHUNKSIZE);
    if (arena == NULL) {
       PORT_SetError (SEC_ERROR_NO_MEMORY);
       return NULL;
    }

    pubk = (SECKEYPublicKey *) PORT_ArenaZAlloc (arena, sizeof (SECKEYPublicKey));
    if (pubk != NULL) {
       pubk->arena = arena;
       pubk->pkcs11Slot = NULL;
       pubk->pkcs11ID = 0;
       prepare_rsa_pub_key_for_asn1(pubk);
        /* copy the DER into the arena, since Quick DER returns data that points
           into the DER input, which may get freed by the caller */
        rv = SECITEM_CopyItem(arena, &newPubkder, pubkder);
        if ( rv == SECSuccess ) {
           rv = SEC_QuickDERDecodeItem(arena, pubk, SECKEY_RSAPublicKeyTemplate,
                            &newPubkder);
        }
       if (rv == SECSuccess)
           return pubk;
       SECKEY_DestroyPublicKey (pubk);
    } else {
       PORT_SetError (SEC_ERROR_NO_MEMORY);
    }

    PORT_FreeArena (arena, PR_FALSE);
    return NULL;
}

Here is the caller graph for this function:

CERTSubjectPublicKeyInfo* SECKEY_DecodeDERSubjectPublicKeyInfo ( SECItem *  spkider)

Definition at line 2018 of file seckey.c.

{
    PRArenaPool *arena;
    CERTSubjectPublicKeyInfo *spki;
    SECStatus rv;
    SECItem newSpkider;

    arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
    if (arena == NULL) {
       PORT_SetError(SEC_ERROR_NO_MEMORY);
       return NULL;
    }

    spki = (CERTSubjectPublicKeyInfo *)
              PORT_ArenaZAlloc(arena, sizeof (CERTSubjectPublicKeyInfo));
    if (spki != NULL) {
       spki->arena = arena;

        /* copy the DER into the arena, since Quick DER returns data that points
           into the DER input, which may get freed by the caller */
        rv = SECITEM_CopyItem(arena, &newSpkider, spkider);
        if ( rv == SECSuccess ) {
            rv = SEC_QuickDERDecodeItem(arena,spki,
                                CERT_SubjectPublicKeyInfoTemplate, &newSpkider);
        }
       if (rv == SECSuccess)
           return spki;
    } else {
       PORT_SetError(SEC_ERROR_NO_MEMORY);
    }

    PORT_FreeArena(arena, PR_FALSE);
    return NULL;
}

Here is the caller graph for this function:

void SECKEY_DestroyEncryptedPrivateKeyInfo ( SECKEYEncryptedPrivateKeyInfo *  epki,
PRBool  freeit 
)

Definition at line 2208 of file seckey.c.

{
    PRArenaPool *poolp;

    if(epki != NULL) {
       if(epki->arena) {
           poolp = epki->arena;
           /* zero structure since PORT_FreeArena does not support
            * this yet.
            */
           PORT_Memset(epki->encryptedData.data, 0, epki->encryptedData.len);
           PORT_Memset((char *)epki, 0, sizeof(*epki));
           if(freeit == PR_TRUE) {
              PORT_FreeArena(poolp, PR_TRUE);
           } else {
              epki->arena = poolp;
           }
       } else {
           SECITEM_ZfreeItem(&epki->encryptedData, PR_FALSE);
           SECOID_DestroyAlgorithmID(&epki->algorithm, PR_FALSE);
           PORT_Memset((char *)epki, 0, sizeof(epki));
           if(freeit == PR_TRUE) {
              PORT_Free(epki);
           }
       }
    }
}

Here is the caller graph for this function:

void SECKEY_DestroyPrivateKey ( SECKEYPrivateKey *  key)

Definition at line 269 of file seckey.c.

{
    if (privk) {
       if (privk->pkcs11Slot) {
           if (privk->pkcs11IsTemp) {
              PK11_DestroyObject(privk->pkcs11Slot,privk->pkcs11ID);
           }
           PK11_FreeSlot(privk->pkcs11Slot);

       }
       if (privk->arena) {
           PORT_FreeArena(privk->arena, PR_TRUE);
       }
    }
}
void SECKEY_DestroyPrivateKeyInfo ( SECKEYPrivateKeyInfo *  pvk,
PRBool  freeit 
)

Definition at line 2177 of file seckey.c.

{
    PRArenaPool *poolp;

    if(pvk != NULL) {
       if(pvk->arena) {
           poolp = pvk->arena;
           /* zero structure since PORT_FreeArena does not support
            * this yet.
            */
           PORT_Memset(pvk->privateKey.data, 0, pvk->privateKey.len);
           PORT_Memset((char *)pvk, 0, sizeof(*pvk));
           if(freeit == PR_TRUE) {
              PORT_FreeArena(poolp, PR_TRUE);
           } else {
              pvk->arena = poolp;
           }
       } else {
           SECITEM_ZfreeItem(&pvk->version, PR_FALSE);
           SECITEM_ZfreeItem(&pvk->privateKey, PR_FALSE);
           SECOID_DestroyAlgorithmID(&pvk->algorithm, PR_FALSE);
           PORT_Memset((char *)pvk, 0, sizeof(pvk));
           if(freeit == PR_TRUE) {
              PORT_Free(pvk);
           }
       }
    }
}

Here is the caller graph for this function:

Definition at line 2384 of file seckey.c.

Here is the caller graph for this function:

void SECKEY_DestroyPublicKey ( SECKEYPublicKey *  key)

Definition at line 286 of file seckey.c.

{
    if (pubk) {
       if (pubk->pkcs11Slot) {
           if (!PK11_IsPermObject(pubk->pkcs11Slot,pubk->pkcs11ID)) {
              PK11_DestroyObject(pubk->pkcs11Slot,pubk->pkcs11ID);
           }
           PK11_FreeSlot(pubk->pkcs11Slot);
       }
       if (pubk->arena) {
           PORT_FreeArena(pubk->arena, PR_FALSE);
       }
    }
}

Definition at line 2461 of file seckey.c.

SEC_BEGIN_PROTOS void SECKEY_DestroySubjectPublicKeyInfo ( CERTSubjectPublicKeyInfo *  spki)

Definition at line 1925 of file seckey.c.

{
    if (spki && spki->arena) {
       PORT_FreeArena(spki->arena, PR_FALSE);
    }
}

Here is the caller graph for this function:

Definition at line 1302 of file seckey.c.

{
    SECOidTag tag;
    SECItem oid = { siBuffer, NULL, 0};
       
    /* The encodedParams data contains 0x06 (SEC_ASN1_OBJECT_ID),
     * followed by the length of the curve oid and the curve oid.
     */
    oid.len = encodedParams->data[1];
    oid.data = encodedParams->data + 2;
    if ((tag = SECOID_FindOIDTag(&oid)) == SEC_OID_UNKNOWN)
       return 0;

    switch (tag) {
    case SEC_OID_SECG_EC_SECP112R1:
        return 112;
    case SEC_OID_SECG_EC_SECP112R2:
        return 110;

    case SEC_OID_SECG_EC_SECT113R1:
    case SEC_OID_SECG_EC_SECT113R2:
       return 113;

    case SEC_OID_SECG_EC_SECP128R1:
       return 128;
    case SEC_OID_SECG_EC_SECP128R2:
       return 126;

    case SEC_OID_SECG_EC_SECT131R1:
    case SEC_OID_SECG_EC_SECT131R2:
       return 131;

    case SEC_OID_SECG_EC_SECP160K1:
    case SEC_OID_SECG_EC_SECP160R1:
    case SEC_OID_SECG_EC_SECP160R2:
       return 161;

    case SEC_OID_SECG_EC_SECT163K1:
       return 163;
    case SEC_OID_SECG_EC_SECT163R1:
       return 162;
    case SEC_OID_SECG_EC_SECT163R2:
    case SEC_OID_ANSIX962_EC_C2PNB163V1:
       return 163;
    case SEC_OID_ANSIX962_EC_C2PNB163V2:
    case SEC_OID_ANSIX962_EC_C2PNB163V3:
       return 162;

    case SEC_OID_ANSIX962_EC_C2PNB176V1:
       return 161;

    case SEC_OID_ANSIX962_EC_C2TNB191V1:
       return 191;
    case SEC_OID_ANSIX962_EC_C2TNB191V2:
       return 190;
    case SEC_OID_ANSIX962_EC_C2TNB191V3:
       return 189;
    case SEC_OID_ANSIX962_EC_C2ONB191V4:
       return 191;
    case SEC_OID_ANSIX962_EC_C2ONB191V5:
       return 188;

    case SEC_OID_SECG_EC_SECP192K1:
    case SEC_OID_ANSIX962_EC_PRIME192V1:
    case SEC_OID_ANSIX962_EC_PRIME192V2:
    case SEC_OID_ANSIX962_EC_PRIME192V3:
       return 192;

    case SEC_OID_SECG_EC_SECT193R1:
    case SEC_OID_SECG_EC_SECT193R2:
       return 193;

    case SEC_OID_ANSIX962_EC_C2PNB208W1:
       return 193;

    case SEC_OID_SECG_EC_SECP224K1:
       return 225;
    case SEC_OID_SECG_EC_SECP224R1:
       return 224;

    case SEC_OID_SECG_EC_SECT233K1:
       return 232;
    case SEC_OID_SECG_EC_SECT233R1:
       return 233;

    case SEC_OID_SECG_EC_SECT239K1:
    case SEC_OID_ANSIX962_EC_C2TNB239V1:
       return 238;
    case SEC_OID_ANSIX962_EC_C2TNB239V2:
       return 237;
    case SEC_OID_ANSIX962_EC_C2TNB239V3:
       return 236;
    case SEC_OID_ANSIX962_EC_C2ONB239V4:
       return 238;
    case SEC_OID_ANSIX962_EC_C2ONB239V5:
       return 237;
    case SEC_OID_ANSIX962_EC_PRIME239V1:
    case SEC_OID_ANSIX962_EC_PRIME239V2:
    case SEC_OID_ANSIX962_EC_PRIME239V3:
       return 239;

    case SEC_OID_SECG_EC_SECP256K1:
    case SEC_OID_ANSIX962_EC_PRIME256V1:
       return 256;

    case SEC_OID_ANSIX962_EC_C2PNB272W1:
       return 257;

    case SEC_OID_SECG_EC_SECT283K1:
       return 281;
    case SEC_OID_SECG_EC_SECT283R1:
       return 282;

    case SEC_OID_ANSIX962_EC_C2PNB304W1:
       return 289;

    case SEC_OID_ANSIX962_EC_C2TNB359V1:
       return 353;

    case SEC_OID_ANSIX962_EC_C2PNB368W1:
       return 353;

    case SEC_OID_SECG_EC_SECP384R1:
       return 384;

    case SEC_OID_SECG_EC_SECT409K1:
       return 407;
    case SEC_OID_SECG_EC_SECT409R1:
       return 409;

    case SEC_OID_ANSIX962_EC_C2TNB431R1:
       return 418;

    case SEC_OID_SECG_EC_SECP521R1:
       return 521;

    case SEC_OID_SECG_EC_SECT571K1:
    case SEC_OID_SECG_EC_SECT571R1:
       return 570;

    default:
       PORT_SetError(SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE);
       return 0;
    }
}

Here is the caller graph for this function:

int SECKEY_ECParamsToKeySize ( const SECItem *  params)

Definition at line 1173 of file seckey.c.

{
    SECOidTag tag;
    SECItem oid = { siBuffer, NULL, 0};
       
    /* The encodedParams data contains 0x06 (SEC_ASN1_OBJECT_ID),
     * followed by the length of the curve oid and the curve oid.
     */
    oid.len = encodedParams->data[1];
    oid.data = encodedParams->data + 2;
    if ((tag = SECOID_FindOIDTag(&oid)) == SEC_OID_UNKNOWN)
       return 0;

    switch (tag) {
    case SEC_OID_SECG_EC_SECP112R1:
    case SEC_OID_SECG_EC_SECP112R2:
        return 112;

    case SEC_OID_SECG_EC_SECT113R1:
    case SEC_OID_SECG_EC_SECT113R2:
       return 113;

    case SEC_OID_SECG_EC_SECP128R1:
    case SEC_OID_SECG_EC_SECP128R2:
       return 128;

    case SEC_OID_SECG_EC_SECT131R1:
    case SEC_OID_SECG_EC_SECT131R2:
       return 131;

    case SEC_OID_SECG_EC_SECP160K1:
    case SEC_OID_SECG_EC_SECP160R1:
    case SEC_OID_SECG_EC_SECP160R2:
       return 160;

    case SEC_OID_SECG_EC_SECT163K1:
    case SEC_OID_SECG_EC_SECT163R1:
    case SEC_OID_SECG_EC_SECT163R2:
    case SEC_OID_ANSIX962_EC_C2PNB163V1:
    case SEC_OID_ANSIX962_EC_C2PNB163V2:
    case SEC_OID_ANSIX962_EC_C2PNB163V3:
       return 163;

    case SEC_OID_ANSIX962_EC_C2PNB176V1:
       return 176;

    case SEC_OID_ANSIX962_EC_C2TNB191V1:
    case SEC_OID_ANSIX962_EC_C2TNB191V2:
    case SEC_OID_ANSIX962_EC_C2TNB191V3:
    case SEC_OID_ANSIX962_EC_C2ONB191V4:
    case SEC_OID_ANSIX962_EC_C2ONB191V5:
       return 191;

    case SEC_OID_SECG_EC_SECP192K1:
    case SEC_OID_ANSIX962_EC_PRIME192V1:
    case SEC_OID_ANSIX962_EC_PRIME192V2:
    case SEC_OID_ANSIX962_EC_PRIME192V3:
       return 192;

    case SEC_OID_SECG_EC_SECT193R1:
    case SEC_OID_SECG_EC_SECT193R2:
       return 193;

    case SEC_OID_ANSIX962_EC_C2PNB208W1:
       return 208;

    case SEC_OID_SECG_EC_SECP224K1:
    case SEC_OID_SECG_EC_SECP224R1:
       return 224;

    case SEC_OID_SECG_EC_SECT233K1:
    case SEC_OID_SECG_EC_SECT233R1:
       return 233;

    case SEC_OID_SECG_EC_SECT239K1:
    case SEC_OID_ANSIX962_EC_C2TNB239V1:
    case SEC_OID_ANSIX962_EC_C2TNB239V2:
    case SEC_OID_ANSIX962_EC_C2TNB239V3:
    case SEC_OID_ANSIX962_EC_C2ONB239V4:
    case SEC_OID_ANSIX962_EC_C2ONB239V5:
    case SEC_OID_ANSIX962_EC_PRIME239V1:
    case SEC_OID_ANSIX962_EC_PRIME239V2:
    case SEC_OID_ANSIX962_EC_PRIME239V3:
       return 239;

    case SEC_OID_SECG_EC_SECP256K1:
    case SEC_OID_ANSIX962_EC_PRIME256V1:
       return 256;

    case SEC_OID_ANSIX962_EC_C2PNB272W1:
       return 272;

    case SEC_OID_SECG_EC_SECT283K1:
    case SEC_OID_SECG_EC_SECT283R1:
       return 283;

    case SEC_OID_ANSIX962_EC_C2PNB304W1:
       return 304;

    case SEC_OID_ANSIX962_EC_C2TNB359V1:
       return 359;

    case SEC_OID_ANSIX962_EC_C2PNB368W1:
       return 368;

    case SEC_OID_SECG_EC_SECP384R1:
       return 384;

    case SEC_OID_SECG_EC_SECT409K1:
    case SEC_OID_SECG_EC_SECT409R1:
       return 409;

    case SEC_OID_ANSIX962_EC_C2TNB431R1:
       return 431;

    case SEC_OID_SECG_EC_SECP521R1:
       return 521;

    case SEC_OID_SECG_EC_SECT571K1:
    case SEC_OID_SECG_EC_SECT571R1:
       return 571;

    default:
       PORT_SetError(SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE);
       return 0;
    }
}

Here is the caller graph for this function:

SECItem* SECKEY_EncodeDERSubjectPublicKeyInfo ( SECKEYPublicKey *  pubk)

Definition at line 1995 of file seckey.c.

{
    CERTSubjectPublicKeyInfo *spki=NULL;
    SECItem *spkiDER=NULL;

    /* get the subjectpublickeyinfo */
    spki = SECKEY_CreateSubjectPublicKeyInfo(pubk);
    if( spki == NULL ) {
       goto finish;
    }

    /* DER-encode the subjectpublickeyinfo */
    spkiDER = SEC_ASN1EncodeItem(NULL /*arena*/, NULL/*dest*/, spki,
                                   CERT_SubjectPublicKeyInfoTemplate);
finish:
    if (spki!=NULL) {
       SECKEY_DestroySubjectPublicKeyInfo(spki);
    }
    return spkiDER;
}
SECKEYPublicKey* SECKEY_ExtractPublicKey ( CERTSubjectPublicKeyInfo *  )

Definition at line 1140 of file seckey.c.

{
    return seckey_ExtractPublicKey(spki);
}

Here is the caller graph for this function:

KeyType SECKEY_GetPrivateKeyType ( SECKEYPrivateKey *  privKey)

Definition at line 2282 of file seckey.c.

{
   return privKey->keyType;
}

Here is the caller graph for this function:

KeyType SECKEY_GetPublicKeyType ( SECKEYPublicKey *  pubKey)

Definition at line 2288 of file seckey.c.

{
   return pubKey->keyType;
}

Here is the caller graph for this function:

SECKEYPublicKey* SECKEY_ImportDERPublicKey ( SECItem *  derKey,
CK_KEY_TYPE  type 
)

Definition at line 2294 of file seckey.c.

{
    SECKEYPublicKey *pubk = NULL;
    SECStatus rv = SECFailure;
    SECItem newDerKey;

    if (!derKey) {
        return NULL;
    } 

    pubk = PORT_ZNew(SECKEYPublicKey);
    if(pubk == NULL) {
        goto finish;
    }
    pubk->arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
    if (NULL == pubk->arena) {
        goto finish;
    }
    rv = SECITEM_CopyItem(pubk->arena, &newDerKey, derKey);
    if (SECSuccess != rv) {
        goto finish;
    }

    pubk->pkcs11Slot = NULL;
    pubk->pkcs11ID = CK_INVALID_HANDLE;

    switch( type ) {
      case CKK_RSA:
       prepare_rsa_pub_key_for_asn1(pubk);
        rv = SEC_QuickDERDecodeItem(pubk->arena, pubk, SECKEY_RSAPublicKeyTemplate, &newDerKey);
        pubk->keyType = rsaKey;
        break;
      case CKK_DSA:
       prepare_dsa_pub_key_for_asn1(pubk);
        rv = SEC_QuickDERDecodeItem(pubk->arena, pubk, SECKEY_DSAPublicKeyTemplate, &newDerKey);
        pubk->keyType = dsaKey;
        break;
      case CKK_DH:
       prepare_dh_pub_key_for_asn1(pubk);
        rv = SEC_QuickDERDecodeItem(pubk->arena, pubk, SECKEY_DHPublicKeyTemplate, &newDerKey);
        pubk->keyType = dhKey;
        break;
      default:
        rv = SECFailure;
        break;
    }

finish:
    if( rv != SECSuccess && pubk != NULL) {
        if (pubk->arena) {
            PORT_FreeArena(pubk->arena, PR_TRUE);
        }
        PORT_Free(pubk);
        pubk = NULL;
    }
    return pubk;
}
SECStatus SECKEY_KEAParamCompare ( CERTCertificate *  cert1,
CERTCertificate *  cert2 
)

Definition at line 355 of file seckey.c.

{

    SECStatus rv;

    SECKEYPublicKey *pubKey1 = 0;
    SECKEYPublicKey *pubKey2 = 0;

    SECKEYKEAParams params1;
    SECKEYKEAParams params2;


    rv = SECFailure;

    /* get cert1's public key */
    pubKey1 = CERT_ExtractPublicKey(cert1);
    if ( !pubKey1 ) {
       return(SECFailure);
    }
    

    /* get cert2's public key */
    pubKey2 = CERT_ExtractPublicKey(cert2);
    if ( !pubKey2 ) {
       return(SECFailure);
    }

    /* handle the case when both public keys are new
     * fortezza KEA public keys.    */

    if ((pubKey1->keyType == keaKey) &&
        (pubKey2->keyType == keaKey) ) {

        rv = (SECStatus)SECITEM_CompareItem(&pubKey1->u.kea.params.hash,
                                &pubKey2->u.kea.params.hash);
       goto done;
    }

    /* handle the case when both public keys are old fortezza
     * public keys.              */

    if ((pubKey1->keyType == fortezzaKey) &&
        (pubKey2->keyType == fortezzaKey) ) {

        rv = (SECStatus)SECITEM_CompareItem(&pubKey1->u.fortezza.keaParams.prime,
                                &pubKey2->u.fortezza.keaParams.prime);

       if (rv == SECEqual) {
           rv = (SECStatus)SECITEM_CompareItem(&pubKey1->u.fortezza.keaParams.subPrime,
                                    &pubKey2->u.fortezza.keaParams.subPrime);
       }

       if (rv == SECEqual) {
           rv = (SECStatus)SECITEM_CompareItem(&pubKey1->u.fortezza.keaParams.base,
                                    &pubKey2->u.fortezza.keaParams.base);
       }
       
       goto done;
    }


    /* handle the case when the public keys are a mixture of 
     * old and new.                          */

    rv = SECKEY_KEASetParams(&params1, pubKey1);
    if (rv != SECSuccess) return rv;

    rv = SECKEY_KEASetParams(&params2, pubKey2);
    if (rv != SECSuccess) return rv;

    rv = (SECStatus)SECITEM_CompareItem(&params1.hash, &params2.hash);

done:
    SECKEY_DestroyPublicKey(pubKey1);
    SECKEY_DestroyPublicKey(pubKey2);

    return rv;   /* returns SECEqual if parameters are equal */

}

Here is the caller graph for this function:

Definition at line 2353 of file seckey.c.

{
    PRArenaPool *arena = NULL;
    SECKEYPrivateKeyList *ret = NULL;

    arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
    if ( arena == NULL ) {
        goto loser;
    }

    ret = (SECKEYPrivateKeyList *)PORT_ArenaZAlloc(arena,
                sizeof(SECKEYPrivateKeyList));
    if ( ret == NULL ) {
        goto loser;
    }

    ret->arena = arena;

    PR_INIT_CLIST(&ret->list);

    return(ret);

loser:
    if ( arena != NULL ) {
        PORT_FreeArena(arena, PR_FALSE);
    }

    return(NULL);
}

Here is the caller graph for this function:

Definition at line 2430 of file seckey.c.

{
    PRArenaPool *arena = NULL;
    SECKEYPublicKeyList *ret = NULL;

    arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
    if ( arena == NULL ) {
        goto loser;
    }

    ret = (SECKEYPublicKeyList *)PORT_ArenaZAlloc(arena,
                sizeof(SECKEYPublicKeyList));
    if ( ret == NULL ) {
        goto loser;
    }

    ret->arena = arena;

    PR_INIT_CLIST(&ret->list);

    return(ret);

loser:
    if ( arena != NULL ) {
        PORT_FreeArena(arena, PR_FALSE);
    }

    return(NULL);
}

Here is the caller graph for this function:

unsigned SECKEY_PublicKeyStrength ( SECKEYPublicKey *  pubk)

Definition at line 1450 of file seckey.c.

{
    unsigned char b0;

    /* interpret modulus length as key strength... in
     * fortezza that's the public key length */

    switch (pubk->keyType) {
    case rsaKey:
       b0 = pubk->u.rsa.modulus.data[0];
       return b0 ? pubk->u.rsa.modulus.len : pubk->u.rsa.modulus.len - 1;
    case dsaKey:
       b0 = pubk->u.dsa.publicValue.data[0];
       return b0 ? pubk->u.dsa.publicValue.len :
           pubk->u.dsa.publicValue.len - 1;
    case dhKey:
       b0 = pubk->u.dh.publicValue.data[0];
       return b0 ? pubk->u.dh.publicValue.len :
           pubk->u.dh.publicValue.len - 1;
    case fortezzaKey:
       return PR_MAX(pubk->u.fortezza.KEAKey.len, pubk->u.fortezza.DSSKey.len);
    case ecKey:
       /* Get the key size in bits and adjust */
       if (pubk->u.ec.size == 0) {
           pubk->u.ec.size = 
              SECKEY_ECParamsToKeySize(&pubk->u.ec.DEREncodedParams);
       } 
       return (pubk->u.ec.size + 7)/8;
    default:
       break;
    }
    PORT_SetError(SEC_ERROR_INVALID_KEY);
    return 0;
}

Here is the caller graph for this function:

unsigned SECKEY_PublicKeyStrengthInBits ( SECKEYPublicKey *  pubk)

Definition at line 1487 of file seckey.c.

{
    switch (pubk->keyType) {
    case rsaKey:
    case dsaKey:
    case dhKey:
    case fortezzaKey:
       return SECKEY_PublicKeyStrength(pubk) * 8; /* 1 byte = 8 bits */
    case ecKey:
       if (pubk->u.ec.size == 0) {
           pubk->u.ec.size = 
              SECKEY_ECParamsToKeySize(&pubk->u.ec.DEREncodedParams);
       } 
       return pubk->u.ec.size;
    default:
       break;
    }
    PORT_SetError(SEC_ERROR_INVALID_KEY);
    return 0;
}

Here is the caller graph for this function:

Definition at line 2398 of file seckey.c.

{
    PR_ASSERT(node->key);
    SECKEY_DestroyPrivateKey(node->key);
    node->key = NULL;
    PR_REMOVE_LINK(&node->links);
    return;

}

Here is the caller graph for this function:

Definition at line 2475 of file seckey.c.

{
    PR_ASSERT(node->key);
    SECKEY_DestroyPublicKey(node->key);
    node->key = NULL;
    PR_REMOVE_LINK(&node->links);
    return;

}

Here is the caller graph for this function:

unsigned SECKEY_SignatureLen ( const SECKEYPublicKey *  pubk)

Definition at line 1510 of file seckey.c.

{
    unsigned char b0;
    unsigned size;

    switch (pubk->keyType) {
    case rsaKey:
       b0 = pubk->u.rsa.modulus.data[0];
       return b0 ? pubk->u.rsa.modulus.len : pubk->u.rsa.modulus.len - 1;
    case fortezzaKey:
    case dsaKey:
       return DSA_SIGNATURE_LEN;
    case ecKey:
       /* Get the base point order length in bits and adjust */
       size = SECKEY_ECParamsToBasePointOrderLen(
              &pubk->u.ec.DEREncodedParams);
       return ((size + 7)/8) * 2;
    default:
       break;
    }
    PORT_SetError(SEC_ERROR_INVALID_KEY);
    return 0;
}

Here is the caller graph for this function:

SECStatus SECKEY_UpdateCertPQG ( CERTCertificate *  subjectCert)

Definition at line 579 of file seckey.c.

{
    if (!subjectCert) {
        PORT_SetError(SEC_ERROR_INVALID_ARGS);
       return SECFailure;
    }
    return seckey_UpdateCertPQGChain(subjectCert,0);
}

Here is the caller graph for this function: