lib/algorithms.h

   1 /*
   2  * Copyright (C) 2000-2012 Free Software Foundation, Inc.
   3  *
   4  * Author: Nikos Mavrogiannopoulos
   5  *
   6  * This file is part of GnuTLS.
   7  *
   8  * The GnuTLS is free software; you can redistribute it and/or
   9  * modify it under the terms of the GNU Lesser General Public License
  10  * as published by the Free Software Foundation; either version 3 of
  11  * the License, or (at your option) any later version.
  12  *
  13  * This library is distributed in the hope that it will be useful, but
  14  * WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  16  * Lesser General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU Lesser General Public License
  19  * along with this program.  If not, see <http://www.gnu.org/licenses/>
  20  *
  21  */
  22
  23 #ifndef ALGORITHMS_H
  24 #define ALGORITHMS_H
  25
  26 #include "gnutls_auth.h"
  27
  28 #define GNUTLS_RENEGO_PROTECTION_REQUEST_MAJOR 0x00
  29 #define GNUTLS_RENEGO_PROTECTION_REQUEST_MINOR 0xFF
  30
  31 /* would allow for 256 ciphersuites */
  32 #define MAX_CIPHERSUITE_SIZE 512
  33
  34 /* Functions for version handling. */
  35 gnutls_protocol_t _gnutls_version_lowest (gnutls_session_t session);
  36 gnutls_protocol_t _gnutls_version_max (gnutls_session_t session);
  37 int _gnutls_version_priority (gnutls_session_t session,
  38                               gnutls_protocol_t version);
  39 int _gnutls_version_is_supported (gnutls_session_t session,
  40                                   const gnutls_protocol_t version);
  41 int _gnutls_version_get_major (gnutls_protocol_t ver);
  42 int _gnutls_version_get_minor (gnutls_protocol_t ver);
  43 gnutls_protocol_t _gnutls_version_get (int major, int minor);
  44
  45 /* Functions for feature checks */
  46 int _gnutls_version_has_selectable_prf (gnutls_protocol_t version);
  47 int _gnutls_version_has_selectable_sighash (gnutls_protocol_t version);
  48 int _gnutls_version_has_extensions (gnutls_protocol_t version);
  49 int _gnutls_version_has_explicit_iv (gnutls_protocol_t version);
  50
  51 /* Functions for MACs. */
  52 int _gnutls_mac_is_ok (gnutls_mac_algorithm_t algorithm);
  53 gnutls_digest_algorithm_t _gnutls_x509_oid_to_digest (const char *oid);
  54 const char *_gnutls_x509_mac_to_oid (gnutls_mac_algorithm_t mac);
  55
  56 /* Functions for digests. */
  57 const char *_gnutls_x509_digest_to_oid (gnutls_digest_algorithm_t algorithm);
  58 const char *_gnutls_digest_get_name (gnutls_digest_algorithm_t algorithm);
  59
  60 /* Functions for cipher suites. */
  61 int _gnutls_supported_ciphersuites (gnutls_session_t session,
  62                                     uint8_t* cipher_suites,
  63                                     unsigned int max_cipher_suite_size);
  64 const char *_gnutls_cipher_suite_get_name (const uint8_t suite[2]);
  65 gnutls_mac_algorithm_t _gnutls_cipher_suite_get_prf (const uint8_t suite[2]);
  66 gnutls_cipher_algorithm_t _gnutls_cipher_suite_get_cipher_algo (const
  67                                                                 uint8_t suite[2]);
  68 gnutls_kx_algorithm_t _gnutls_cipher_suite_get_kx_algo (const uint8_t suite[2]);
  69 gnutls_mac_algorithm_t _gnutls_cipher_suite_get_mac_algo (const
  70                                                           uint8_t suite[2]);
  71
  72 int
  73 _gnutls_cipher_suite_get_id (gnutls_kx_algorithm_t kx_algorithm,
  74                               gnutls_cipher_algorithm_t cipher_algorithm,
  75                               gnutls_mac_algorithm_t mac_algorithm, uint8_t suite[2]);
  76
  77 /* Functions for ciphers. */
  78 int _gnutls_cipher_is_block (gnutls_cipher_algorithm_t algorithm);
  79 int _gnutls_cipher_algo_is_aead (gnutls_cipher_algorithm_t algorithm);
  80 int _gnutls_cipher_is_ok (gnutls_cipher_algorithm_t algorithm);
  81 int _gnutls_cipher_get_iv_size (gnutls_cipher_algorithm_t algorithm);
  82 int _gnutls_cipher_get_export_flag (gnutls_cipher_algorithm_t algorithm);
  83 /* at least for now iv_size == tag_size */
  84 #define _gnutls_cipher_get_tag_size _gnutls_cipher_get_iv_size
  85
  86 /* Functions for key exchange. */
  87 int _gnutls_kx_needs_dh_params (gnutls_kx_algorithm_t algorithm);
  88 int _gnutls_kx_needs_rsa_params (gnutls_kx_algorithm_t algorithm);
  89 mod_auth_st *_gnutls_kx_auth_struct (gnutls_kx_algorithm_t algorithm);
  90 int _gnutls_kx_is_ok (gnutls_kx_algorithm_t algorithm);
  91
  92 /* Type to KX mappings. */
  93 gnutls_kx_algorithm_t _gnutls_map_kx_get_kx (gnutls_credentials_type_t type,
  94                                              int server);
  95 gnutls_credentials_type_t _gnutls_map_kx_get_cred (gnutls_kx_algorithm_t
  96                                                    algorithm, int server);
  97
  98 /* KX to PK mapping. */
  99
 100 /* DSA + RSA + ECC */
 101 #define GNUTLS_DISTINCT_PK_ALGORITHMS 3
 102 gnutls_pk_algorithm_t _gnutls_map_pk_get_pk (gnutls_kx_algorithm_t
 103                                              kx_algorithm);
 104 gnutls_pk_algorithm_t _gnutls_x509_oid2pk_algorithm (const char *oid);
 105 const char *_gnutls_x509_pk_to_oid (gnutls_pk_algorithm_t pk);
 106
 107 enum encipher_type
 108 { CIPHER_ENCRYPT = 0, CIPHER_SIGN = 1, CIPHER_IGN };
 109
 110 enum encipher_type _gnutls_kx_encipher_type (gnutls_kx_algorithm_t algorithm);
 111
 112 /* Functions for sign algorithms. */
 113 gnutls_sign_algorithm_t _gnutls_x509_oid2sign_algorithm (const char *oid);
 114 gnutls_pk_algorithm_t _gnutls_x509_sign_to_pk (gnutls_sign_algorithm_t sign);
 115 const char *_gnutls_x509_sign_to_oid (gnutls_pk_algorithm_t,
 116                                       gnutls_digest_algorithm_t mac);
 117 gnutls_sign_algorithm_t _gnutls_tls_aid_to_sign (const sign_algorithm_st *
 118                                                  aid);
 119 const sign_algorithm_st* _gnutls_sign_to_tls_aid (gnutls_sign_algorithm_t sign);
 120
 121 int _gnutls_mac_priority (gnutls_session_t session,
 122                           gnutls_mac_algorithm_t algorithm);
 123 int _gnutls_cipher_priority (gnutls_session_t session,
 124                              gnutls_cipher_algorithm_t algorithm);
 125 int _gnutls_kx_priority (gnutls_session_t session,
 126                          gnutls_kx_algorithm_t algorithm);
 127
 128 unsigned int _gnutls_pk_bits_to_subgroup_bits (unsigned int pk_bits);
 129
 130 /* ECC */
 131 struct gnutls_ecc_curve_entry_st
 132 {
 133   const char *name;
 134   const char* oid;
 135   gnutls_ecc_curve_t id;
 136   int tls_id; /* The RFC4492 namedCurve ID */
 137   int size; /* the size in bytes */
 138
 139   /** The prime that defines the field the curve is in (encoded in hex) */
 140   const char *prime;
 141   /** The fields A param (hex) */
 142   const char *A;
 143   /** The fields B param (hex) */
 144   const char *B;
 145   /** The order of the curve (hex) */
 146   const char *order;
 147   /** The x co-ordinate of the base point on the curve (hex) */
 148   const char *Gx;
 149   /** The y co-ordinate of the base point on the curve (hex) */
 150   const char *Gy;
 151 };
 152 typedef struct gnutls_ecc_curve_entry_st gnutls_ecc_curve_entry_st;
 153
 154 const gnutls_ecc_curve_entry_st * _gnutls_ecc_curve_get_params (gnutls_ecc_curve_t curve);
 155 gnutls_ecc_curve_t _gnutls_ecc_curve_get_id (const char *name);
 156 int _gnutls_tls_id_to_ecc_curve (int num);
 157 int _gnutls_ecc_curve_get_tls_id (gnutls_ecc_curve_t supported_ecc);
 158 const char * _gnutls_ecc_curve_get_oid (gnutls_ecc_curve_t curve);
 159 gnutls_ecc_curve_t _gnutls_oid_to_ecc_curve (const char* oid);
 160 gnutls_ecc_curve_t _gnutls_ecc_bits_to_curve (int bits);
 161 #define MAX_ECC_CURVE_SIZE 66
 162
 163 static inline int _gnutls_kx_is_ecc(gnutls_kx_algorithm_t kx)
 164 {
 165   if (kx == GNUTLS_KX_ECDHE_RSA || kx == GNUTLS_KX_ECDHE_ECDSA  ||
 166     kx == GNUTLS_KX_ANON_ECDH || kx == GNUTLS_KX_ECDHE_PSK)
 167     return 1;
 168
 169   return 0;
 170 }
 171
 172 #endif