include/wincrypt.h

   1 /*
   2  * Copyright (C) 2002 Travis Michielsen
   3  * Copyright (C) 2004-2005 Juan Lang
   4  *
   5  * This library is free software; you can redistribute it and/or
   6  * modify it under the terms of the GNU Lesser General Public
   7  * License as published by the Free Software Foundation; either
   8  * version 2.1 of the License, or (at your option) any later version.
   9  *
  10  * This library is distributed in the hope that it will be useful,
  11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  13  * Lesser General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU Lesser General Public
  16  * License along with this library; if not, write to the Free Software
  17  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  18  */
  19
  20 #ifndef __WINE_WINCRYPT_H
  21 #define __WINE_WINCRYPT_H
  22
  23 #ifdef __cplusplus
  24 extern "C" {
  25 #endif
  26
  27 /* some typedefs for function parameters */
  28 typedef unsigned int ALG_ID;
  29 typedef unsigned long HCRYPTPROV;
  30 typedef unsigned long HCRYPTKEY;
  31 typedef unsigned long HCRYPTHASH;
  32 typedef void *HCERTSTORE;
  33 typedef void *HCRYPTMSG;
  34
  35 /* CSP Structs */
  36
  37 typedef struct _PROV_ENUMALGS {
  38   ALG_ID aiAlgid;
  39   DWORD  dwBitLen;
  40   DWORD  dwNameLen;
  41   CHAR   szName[20];
  42 } PROV_ENUMALGS;
  43
  44 typedef struct _PROV_ENUMALGS_EX {
  45   ALG_ID aiAlgid;
  46   DWORD  dwDefaultLen;
  47   DWORD  dwMinLen;
  48   DWORD  dwMaxLen;
  49   DWORD  dwProtocols;
  50   DWORD  dwNameLen;
  51   CHAR   szName[20];
  52   DWORD  dwLongNameLen;
  53   CHAR   szLongName[40];
  54 } PROV_ENUMALGS_EX;
  55
  56 #define SCHANNEL_MAC_KEY 0
  57 #define SCHANNEL_ENC_KEY 1
  58
  59 typedef struct _SCHANNEL_ALG {
  60   DWORD  dwUse;
  61   ALG_ID Algid;
  62   DWORD  cBits;
  63   DWORD  dwFlags;
  64   DWORD  dwReserved;
  65 } SCHANNEL_ALG, *PSCHANNEL_ALG;
  66
  67 typedef struct _HMAC_INFO {
  68   ALG_ID HashAlgid;
  69   BYTE*  pbInnerString;
  70   DWORD  cbInnerString;
  71   BYTE*  pbOuterString;
  72   DWORD  cbOuterString;
  73 } HMAC_INFO, *PHMAC_INFO;
  74
  75 typedef struct _CRYPTOAPI_BLOB {
  76   DWORD    cbData;
  77   BYTE*    pbData;
  78 } CRYPT_INTEGER_BLOB,  *PCRYPT_INTEGER_BLOB,
  79   CRYPT_UINT_BLOB,     *PCRYPT_UINT_BLOB,
  80   CRYPT_OBJID_BLOB,    *PCRYPT_OBJID_BLOB,
  81   CERT_NAME_BLOB,      *PCERT_NAME_BLOB,
  82   CERT_RDN_VALUE_BLOB, *PCERT_RDN_VALUE_BLOB,
  83   CERT_BLOB,           *PCERT_BLOB,
  84   CRL_BLOB,            *PCRL_BLOB,
  85   DATA_BLOB,           *PDATA_BLOB,
  86   CRYPT_DATA_BLOB,     *PCRYPT_DATA_BLOB,
  87   CRYPT_HASH_BLOB,     *PCRYPT_HASH_BLOB,
  88   CRYPT_DIGEST_BLOB,   *PCRYPT_DIGEST_BLOB,
  89   CRYPT_DER_BLOB,      *PCRYPT_DER_BLOB,
  90   CRYPT_ATTR_BLOB,     *PCRYPT_ATTR_BLOB;
  91
  92 typedef struct _CRYPTPROTECT_PROMPTSTRUCT{
  93   DWORD   cbSize;
  94   DWORD   dwPromptFlags;
  95   HWND    hwndApp;
  96   LPCWSTR szPrompt;
  97 } CRYPTPROTECT_PROMPTSTRUCT, *PCRYPTPROTECT_PROMPTSTRUCT;
  98
  99 typedef struct _CRYPT_ALGORITHM_IDENTIFIER {
 100   LPSTR            pszObjId;
 101   CRYPT_OBJID_BLOB Parameters;
 102 } CRYPT_ALGORITHM_IDENTIFIER, *PCRYPT_ALGORITHM_IDENTIFIER;
 103
 104 typedef struct _CRYPT_ATTRIBUTE_TYPE_VALUE {
 105   LPSTR               pszObjId;
 106   CRYPT_OBJID_BLOB    Value;
 107 } CRYPT_ATTRIBUTE_TYPE_VALUE, *PCRYPT_ATTRIBUTE_TYPE_VALUE;
 108
 109 typedef struct _PUBLICKEYSTRUC {
 110     BYTE   bType;
 111     BYTE   bVersion;
 112     WORD   reserved;
 113     ALG_ID aiKeyAlg;
 114 } BLOBHEADER, PUBLICKEYSTRUC;
 115
 116 typedef struct _RSAPUBKEY {
 117     DWORD   magic;
 118     DWORD   bitlen;
 119     DWORD   pubexp;
 120 } RSAPUBKEY;
 121
 122 typedef struct _CRYPT_BIT_BLOB {
 123     DWORD cbData;
 124     BYTE  *pbData;
 125     DWORD cUnusedBits;
 126 } CRYPT_BIT_BLOB, *PCRYPT_BIT_BLOB;
 127
 128 typedef struct _CERT_PUBLIC_KEY_INFO {
 129     CRYPT_ALGORITHM_IDENTIFIER Algorithm;
 130     CRYPT_BIT_BLOB             PublicKey;
 131 } CERT_PUBLIC_KEY_INFO, *PCERT_PUBLIC_KEY_INFO;
 132
 133 typedef struct _CERT_EXTENSION {
 134     LPSTR               pszObjId;
 135     BOOL                fCritical;
 136     CRYPT_OBJID_BLOB    Value;
 137 } CERT_EXTENSION, *PCERT_EXTENSION;
 138
 139 typedef struct _CERT_EXTENSIONS {
 140     DWORD           cExtension;
 141     PCERT_EXTENSION rgExtension;
 142 } CERT_EXTENSIONS, *PCERT_EXTENSIONS;
 143
 144 typedef struct _CERT_INFO {
 145     DWORD                      dwVersion;
 146     CRYPT_INTEGER_BLOB         SerialNumber;
 147     CRYPT_ALGORITHM_IDENTIFIER SignatureAlgorithm;
 148     CERT_NAME_BLOB             Issuer;
 149     FILETIME                   NotBefore;
 150     FILETIME                   NotAfter;
 151     CERT_NAME_BLOB             Subject;
 152     CERT_PUBLIC_KEY_INFO       SubjectPublicKeyInfo;
 153     CRYPT_BIT_BLOB             IssuerUniqueId;
 154     CRYPT_BIT_BLOB             SubjectUniqueId;
 155     DWORD                      cExtension;
 156     PCERT_EXTENSION            rgExtension;
 157 } CERT_INFO, *PCERT_INFO;
 158
 159 typedef struct _CERT_RDN_ATTR {
 160     LPSTR               pszObjId;
 161     DWORD               dwValueType;
 162     CERT_RDN_VALUE_BLOB Value;
 163 } CERT_RDN_ATTR, *PCERT_RDN_ATTR;
 164
 165 typedef struct _CERT_RDN {
 166     DWORD          cRDNAttr;
 167     PCERT_RDN_ATTR rgRDNAttr;
 168 } CERT_RDN, *PCERT_RDN;
 169
 170 typedef struct _CERT_NAME_INFO {
 171     DWORD     cRDN;
 172     PCERT_RDN rgRDN;
 173 } CERT_NAME_INFO, *PCERT_NAME_INFO;
 174
 175 typedef struct _CERT_NAME_VALUE {
 176     DWORD               dwValueType;
 177     CERT_RDN_VALUE_BLOB Value;
 178 } CERT_NAME_VALUE, *PCERT_NAME_VALUE;
 179
 180 typedef struct _CERT_ENCRYPTED_PRIVATE_KEY_INFO {
 181     CRYPT_ALGORITHM_IDENTIFIER EncryptionAlgorithm;
 182     CRYPT_DATA_BLOB            EncryptedPrivateKey;
 183 } CERT_ENCRYPTED_PRIVATE_KEY_INFO, *PCERT_ENCRYPTED_PRIVATE_KEY_INFO;
 184
 185 typedef struct _CERT_AUTHORITY_KEY_ID_INFO {
 186     CRYPT_DATA_BLOB    KeyId;
 187     CERT_NAME_BLOB     CertIssuer;
 188     CRYPT_INTEGER_BLOB CertSerialNumber;
 189 } CERT_AUTHORITY_KEY_ID_INFO, *PCERT_AUTHORITY_KEY_ID_INFO;
 190
 191 typedef struct _CERT_PRIVATE_KEY_VALIDITY {
 192     FILETIME NotBefore;
 193     FILETIME NotAfter;
 194 } CERT_PRIVATE_KEY_VALIDITY, *PCERT_PRIVATE_KEY_VALIDITY;
 195
 196 typedef struct _CERT_KEY_ATTRIBUTES_INFO {
 197     CRYPT_DATA_BLOB            KeyId;
 198     CRYPT_BIT_BLOB             IntendedKeyUsage;
 199     PCERT_PRIVATE_KEY_VALIDITY pPrivateKeyUsagePeriod;
 200 } CERT_KEY_ATTRIBUTES_INFO, *PCERT_KEY_ATTRIBUTES_INFO;
 201
 202 /* byte 0 */
 203 #define CERT_DIGITAL_SIGNATURE_KEY_USAGE 0x80
 204 #define CERT_NON_REPUDIATION_KEY_USAGE   0x40
 205 #define CERT_KEY_ENCIPHERMENT_KEY_USAGE  0x20
 206 #define CERT_DATA_ENCIPHERMENT_KEY_USAGE 0x10
 207 #define CERT_KEY_AGREEMENT_KEY_USAGE     0x80
 208 #define CERT_KEY_CERT_SIGN_KEY_USAGE     0x40
 209 #define CERT_OFFLINE_CRL_SIGN_KEY_USAGE  0x20
 210 #define CERT_CRL_SIGN_KEY_USAGE          0x10
 211 #define CERT_ENCIPHER_ONLY_KEY_USAGE     0x01
 212 /* byte 1 */
 213 #define CERT_DECIPHER_ONLY_KEY_USAGE     0x80
 214
 215 typedef struct _CERT_POLICY_ID {
 216     DWORD  cCertPolicyElementId;
 217     LPSTR *rgbszCertPolicyElementId;
 218 } CERT_POLICY_ID, *PCERT_POLICY_ID;
 219
 220 typedef struct _CERT_KEY_USAGE_RESTRICTION_INFO {
 221     DWORD           cCertPolicyId;
 222     PCERT_POLICY_ID rgCertPolicyId;
 223     CRYPT_BIT_BLOB  RestrictedKeyUsage;
 224 } CERT_KEY_USAGE_RESTRICTION_INFO, *PCERT_KEY_USAGE_RESTRICTION_INFO;
 225
 226 typedef struct _CERT_OTHER_NAME {
 227     LPSTR            pszObjId;
 228     CRYPT_OBJID_BLOB Value;
 229 } CERT_OTHER_NAME, *PCERT_OTHER_NAME;
 230
 231 typedef struct _CERT_ALT_NAME_ENTRY {
 232     DWORD dwAltNameChoice;
 233     union {
 234         PCERT_OTHER_NAME pOtherName;
 235         LPWSTR           pwszRfc822Name;
 236         LPWSTR           pwszDNSName;
 237         CERT_NAME_BLOB   DirectoryName;
 238         LPWSTR           pwszURL;
 239         CRYPT_DATA_BLOB  IPaddress;
 240         LPSTR            pszRegisteredID;
 241     } DUMMYUNIONNAME;
 242 } CERT_ALT_NAME_ENTRY, *PCERT_ALT_NAME_ENTRY;
 243
 244 #define CERT_ALT_NAME_OTHER_NAME     1
 245 #define CERT_ALT_NAME_RFC822_NAME    2
 246 #define CERT_ALT_NAME_DNS_NAME       3
 247 #define CERT_ALT_NAME_X400_ADDRESS   4
 248 #define CERT_ALT_NAME_DIRECTORY_NAME 5
 249 #define CERT_ALT_NAME_EDI_PARTY_NAME 6
 250 #define CERT_ALT_NAME_URL            7
 251 #define CERT_ALT_NAME_IP_ADDRESS     8
 252 #define CERT_ALT_NAME_REGISTERED_ID  9
 253
 254 typedef struct _CERT_ALT_NAME_INFO {
 255     DWORD                cAltEntry;
 256     PCERT_ALT_NAME_ENTRY rgAltEntry;
 257 } CERT_ALT_NAME_INFO, *PCERT_ALT_NAME_INFO;
 258
 259 #define CERT_ALT_NAME_ENTRY_ERR_INDEX_MASK  0xff
 260 #define CERT_ALT_NAME_ENTRY_ERR_INDEX_SHIFT 16
 261 #define CERT_ALT_NAME_VALUE_ERR_INDEX_MASK  0x0000ffff
 262 #define CERT_ALT_NAME_VALUE_ERR_INDEX_SHIFT 0
 263 #define GET_CERT_ALT_NAME_ENTRY_ERR_INDEX(x) \
 264  (((x) >> CERT_ALT_NAME_ENTRY_ERR_INDEX_SHIFT) & \
 265   CERT_ALT_NAME_ENTRY_ERR_INDEX_MASK)
 266 #define GET_CERT_ALT_NAME_VALUE_ERR_INDEX(x) \
 267  ((x) & CERT_ALT_NAME_VALUE_ERR_INDEX_MASK)
 268
 269 typedef struct _CERT_BASIC_CONSTRAINTS_INFO {
 270     CRYPT_BIT_BLOB  SubjectType;
 271     BOOL            fPathLenConstraint;
 272     DWORD           dwPathLenConstraint;
 273     DWORD           cSubtreesConstraint;
 274     CERT_NAME_BLOB *rgSubtreesConstraint;
 275 } CERT_BASIC_CONSTRAINTS_INFO, *PCERT_BASIC_CONSTRAINTS_INFO;
 276
 277 #define CERT_CA_SUBJECT_FLAG         0x80
 278 #define CERT_END_ENTITY_SUBJECT_FLAG 0x40
 279
 280 typedef struct _CERT_BASIC_CONSTRAINTS2_INFO {
 281     BOOL  fCA;
 282     BOOL  fPathLenConstraint;
 283     DWORD dwPathLenConstraint;
 284 } CERT_BASIC_CONSTRAINTS2_INFO, *PCERT_BASIC_CONSTRAINTS2_INFO;
 285
 286 typedef struct _CERT_POLICY_QUALIFIER_INFO {
 287     LPSTR            pszPolicyQualifierId;
 288     CRYPT_OBJID_BLOB Qualifier;
 289 } CERT_POLICY_QUALIFIER_INFO, *PCERT_POLICY_QUALIFIER_INFO;
 290
 291 typedef struct _CERT_POLICY_INFO {
 292     LPSTR                       pszPolicyIdentifier;
 293     DWORD                       cPolicyQualifier;
 294     CERT_POLICY_QUALIFIER_INFO *rgPolicyQualifier;
 295 } CERT_POLICY_INFO, *PCERT_POLICY_INFO;
 296
 297 typedef struct _CERT_POLICIES_INFO {
 298     DWORD             cPolicyInfo;
 299     CERT_POLICY_INFO *rgPolicyInfo;
 300 } CERT_POLICIES_INFO, *PCERT_POLICIES_INFO;
 301
 302 typedef struct _CERT_POLICY_QUALIFIER_NOTICE_REFERENCE {
 303     LPSTR pszOrganization;
 304     DWORD cNoticeNumbers;
 305     int  *rgNoticeNumbers;
 306 } CERT_POLICY_QUALIFIER_NOTICE_REFERENCE,
 307  *PCERT_POLICY_QUALIFIER_NOTICE_REFERENCE;
 308
 309 typedef struct _CERT_POLICY_QUALIFIER_USER_NOTICE {
 310     CERT_POLICY_QUALIFIER_NOTICE_REFERENCE *pNoticeReference;
 311     LPWSTR                                  pszDisplayText;
 312 } CERT_POLICY_QUALIFIER_USER_NOTICE, *PCERT_POLICY_QUALIFIER_USER_NOTICE;
 313
 314 typedef struct _CPS_URLS {
 315     LPWSTR                      pszURL;
 316     CRYPT_ALGORITHM_IDENTIFIER *pAlgorithm;
 317     CRYPT_DATA_BLOB            *pDigest;
 318 } CPS_URLS, *PCPS_URLS;
 319
 320 typedef struct _CERT_POLICY95_QUALIFIER1 {
 321     LPWSTR    pszPracticesReference;
 322     LPSTR     pszNoticeIdentifier;
 323     LPSTR     pszNSINoticeIdentifier;
 324     DWORD     cCPSURLs;
 325     CPS_URLS *rgCPSURLs;
 326 } CERT_POLICY95_QUALIFIER1, *PCERT_POLICY95_QUALIFIER1;
 327
 328 typedef struct _CERT_POLICY_MAPPING {
 329     LPSTR pszIssuerDomainPolicy;
 330     LPSTR pszSubjectDomainPolicy;
 331 } CERT_POLICY_MAPPING, *PCERT_POLICY_MAPPING;
 332
 333 typedef struct _CERT_POLICY_MAPPINGS_INFO {
 334     DWORD                cPolicyMapping;
 335     PCERT_POLICY_MAPPING rgPolicyMapping;
 336 } CERT_POLICY_MAPPINGS_INFO, *PCERT_POLICY_MAPPINGS_INFO;
 337
 338 typedef struct _CERT_POLICY_CONSTRAINTS_INFO {
 339     BOOL  fRequireExplicitPolicy;
 340     DWORD dwRequireExplicitPolicySkipCerts;
 341     BOOL  fInhibitPolicyMapping;
 342     DWORD dwInhibitPolicyMappingSkipCerts;
 343 } CERT_POLICY_CONSTRAINTS_INFO, *PCERT_POLICY_CONSTRAINTS_INFO;
 344
 345 typedef struct _CRYPT_CONTENT_INFO_SEQUENCE_OF_ANY {
 346     LPSTR           pszObjId;
 347     DWORD           cValue;
 348     PCRYPT_DER_BLOB rgValue;
 349 } CRYPT_CONTENT_INFO_SEQUENCE_OF_ANY, *PCRYPT_CONTENT_INFO_SEQUENCE_OF_ANY;
 350
 351 typedef struct _CRYPT_CONTENT_INFO {
 352     LPSTR          pszObjId;
 353     CRYPT_DER_BLOB Content;
 354 } CRYPT_CONTENT_INFO, *PCRYPT_CONTENT_INFO;
 355
 356 typedef struct _CRYPT_SEQUENCE_OF_ANY {
 357     DWORD           cValue;
 358     PCRYPT_DER_BLOB rgValue;
 359 } CRYPT_SEQUENCE_OF_ANY, *PCRYPT_SEQUENCE_OF_ANY;
 360
 361 typedef struct _CERT_AUTHORITY_KEY_ID2_INFO {
 362     CRYPT_DATA_BLOB    KeyId;
 363     CERT_ALT_NAME_INFO AuthorityCertIssuer;
 364     CRYPT_INTEGER_BLOB AuthorityCertSerialNumber;
 365 } CERT_AUTHORITY_KEY_ID2_INFO, *PCERT_AUTHORITY_KEY_ID2_INFO;
 366
 367 typedef struct _CERT_ACCESS_DESCRIPTION {
 368     LPSTR               pszAccessMethod;
 369     CERT_ALT_NAME_ENTRY AccessLocation;
 370 } CERT_ACCESS_DESCRIPTION, *PCERT_ACCESS_DESCRIPTION;
 371
 372 typedef struct _CERT_AUTHORITY_INFO_ACCESS {
 373     DWORD                    cAccDescr;
 374     PCERT_ACCESS_DESCRIPTION rgAccDescr;
 375 } CERT_AUTHORITY_INFO_ACCESS, *PCERT_AUTHORITY_INFO_ACCESS;
 376
 377 typedef struct _CERT_CONTEXT {
 378     DWORD      dwCertEncodingType;
 379     BYTE       *pbCertEncoded;
 380     DWORD      cbCertEncoded;
 381     PCERT_INFO pCertInfo;
 382     HCERTSTORE hCertStore;
 383 } CERT_CONTEXT, *PCERT_CONTEXT;
 384 typedef const CERT_CONTEXT *PCCERT_CONTEXT;
 385
 386 typedef struct _CRL_ENTRY {
 387     CRYPT_INTEGER_BLOB SerialNumber;
 388     FILETIME           RevocationDate;
 389     DWORD              cExtension;
 390     PCERT_EXTENSION    rgExtension;
 391 } CRL_ENTRY, *PCRL_ENTRY;
 392
 393 typedef struct _CRL_INFO {
 394     DWORD           dwVersion;
 395     CRYPT_ALGORITHM_IDENTIFIER SignatureAlgorithm;
 396     CERT_NAME_BLOB  Issuer;
 397     FILETIME        ThisUpdate;
 398     FILETIME        NextUpdate;
 399     DWORD           cCRLEntry;
 400     PCRL_ENTRY      rgCRLEntry;
 401     DWORD           cExtension;
 402     PCERT_EXTENSION rgExtension;
 403 } CRL_INFO, *PCRL_INFO;
 404
 405 typedef struct _CRL_CONTEXT {
 406     DWORD      dwCertEncodingType;
 407     BYTE      *pbCrlEncoded;
 408     DWORD      cbCrlEncoded;
 409     PCRL_INFO  pCrlInfo;
 410     HCERTSTORE hCertStore;
 411 } CRL_CONTEXT, *PCRL_CONTEXT;
 412 typedef const CRL_CONTEXT *PCCRL_CONTEXT;
 413
 414 typedef struct _VTableProvStruc {
 415     DWORD    Version;
 416     FARPROC  pFuncVerifyImage;
 417     FARPROC  pFuncReturnhWnd;
 418     DWORD    dwProvType;
 419     BYTE    *pbContextInfo;
 420     DWORD    cbContextInfo;
 421     LPSTR    pszProvName;
 422 } VTableProvStruc, *PVTableProvStruc;
 423
 424 typedef struct _CRYPT_ATTRIBUTE {
 425     LPSTR            pszObjId;
 426     DWORD            cValue;
 427     PCRYPT_DATA_BLOB rgValue;
 428 } CRYPT_ATTRIBUTE, *PCRYPT_ATTRIBUTE;
 429
 430 typedef struct _CRYPT_ATTRIBUTES {
 431     DWORD            cAttr;
 432     PCRYPT_ATTRIBUTE rgAttr;
 433 } CRYPT_ATTRIBUTES, *PCRYPT_ATTRIBUTES;
 434
 435 typedef struct _CERT_PRIVATE_KEY_INFO {
 436     DWORD                      Version;
 437     CRYPT_ALGORITHM_IDENTIFIER Algorithm;
 438     CRYPT_DER_BLOB             PrivateKey;
 439     PCRYPT_ATTRIBUTES          pAttributes;
 440 } CERT_PRIVATE_KEY_INFO, *PCERT_PRIVATE_KEY_INFO;
 441
 442 typedef struct _CTL_USAGE {
 443     DWORD  cUsageIdentifier;
 444     LPSTR *rgpszUsageIdentifier;
 445 } CTL_USAGE, *PCTL_USAGE, CERT_ENHKEY_USAGE, *PCERT_ENHKEY_USAGE;
 446
 447 typedef struct _CTL_ENTRY {
 448     CRYPT_DATA_BLOB  SubjectIdentifier;
 449     DWORD            cAttribute;
 450     PCRYPT_ATTRIBUTE rgAttribute;
 451 } CTL_ENTRY, *PCTL_ENTRY;
 452
 453 typedef struct _CTL_INFO {
 454     DWORD                      dwVersion;
 455     CTL_USAGE                  SubjectUsage;
 456     CRYPT_DATA_BLOB            ListIdentifier;
 457     CRYPT_INTEGER_BLOB         SequenceNumber;
 458     FILETIME                   ThisUpdate;
 459     FILETIME                   NextUpdate;
 460     CRYPT_ALGORITHM_IDENTIFIER SubjectAlgorithm;
 461     DWORD                      cCTLEntry;
 462     PCTL_ENTRY                 rgCTLEntry;
 463     DWORD                      cExtension;
 464     PCERT_EXTENSION            rgExtension;
 465 } CTL_INFO, *PCTL_INFO;
 466
 467 typedef struct _CTL_CONTEXT {
 468     DWORD      dwMsgAndCertEncodingType;
 469     BYTE      *pbCtlEncoded;
 470     DWORD      cbCtlEncoded;
 471     PCTL_INFO  pCtlInfo;
 472     HCERTSTORE hCertStore;
 473     HCRYPTMSG  hCryptMsg;
 474     BYTE      *pbCtlContext;
 475     DWORD      cbCtlContext;
 476 } CTL_CONTEXT, *PCTL_CONTEXT;
 477 typedef const CTL_CONTEXT *PCCTL_CONTEXT;
 478
 479 typedef struct _CMSG_SIGNER_INFO {
 480     DWORD                      dwVersion;
 481     CERT_NAME_BLOB             Issuer;
 482     CRYPT_INTEGER_BLOB         SerialNumber;
 483     CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm;
 484     CRYPT_ALGORITHM_IDENTIFIER HashEncryptionAlgorithm;
 485     CRYPT_DATA_BLOB            EncryptedHash;
 486     CRYPT_ATTRIBUTES           AuthAttrs;
 487     CRYPT_ATTRIBUTES           UnauthAttrs;
 488 } CMSG_SIGNER_INFO, *PCMSG_SIGNER_INFO;
 489
 490 typedef struct _CERT_REVOCATION_CRL_INFO {
 491     DWORD         cbSize;
 492     PCCRL_CONTEXT pBaseCrlContext;
 493     PCCRL_CONTEXT pDeltaCrlContext;
 494     PCRL_ENTRY    pCrlEntry;
 495     BOOL          fDeltaCrlEntry;
 496 } CERT_REVOCATION_CRL_INFO, *PCERT_REVOCATION_CRL_INFO;
 497
 498 typedef struct _CERT_REVOCATION_INFO {
 499     DWORD                     cbSize;
 500     DWORD                     dwRevocationResult;
 501     LPCSTR                    pszRevocationOid;
 502     LPVOID                    pvOidSpecificInfo;
 503     BOOL                      fHasFreshnessTime;
 504     DWORD                     dwFreshnessTime;
 505     PCERT_REVOCATION_CRL_INFO pCrlInfo;
 506 } CERT_REVOCATION_INFO, *PCERT_REVOCATION_INFO;
 507
 508 typedef struct _CERT_TRUST_LIST_INFO {
 509     DWORD         cbSize;
 510     PCTL_ENTRY    pCtlEntry;
 511     PCCTL_CONTEXT pCtlContext;
 512 } CERT_TRUST_LIST_INFO, *PCERT_TRUST_LIST_INFO;
 513
 514 typedef struct _CERT_TRUST_STATUS {
 515     DWORD dwErrorStatus;
 516     DWORD dwInfoStatus;
 517 } CERT_TRUST_STATUS, *PCERT_TRUST_STATUS;
 518
 519 typedef struct _CERT_CHAIN_ELEMENT {
 520     DWORD                 cbSize;
 521     PCCERT_CONTEXT        pCertContext;
 522     CERT_TRUST_STATUS     TrustStatus;
 523     PCERT_REVOCATION_INFO pRevocationInfo;
 524     PCERT_ENHKEY_USAGE    pIssuanceUsage;
 525     PCERT_ENHKEY_USAGE    pApplicationUsage;
 526     LPCWSTR               pwszExtendedErrorInfo;
 527 } CERT_CHAIN_ELEMENT, *PCERT_CHAIN_ELEMENT;
 528
 529 typedef struct _CERT_SIMPLE_CHAIN {
 530     DWORD                 cbSize;
 531     CERT_TRUST_STATUS     TrustStatus;
 532     DWORD                 cElement;
 533     PCERT_CHAIN_ELEMENT  *rgpElement;
 534     PCERT_TRUST_LIST_INFO pTrustListInfo;
 535     BOOL                  fHasRevocationFreshnessTime;
 536     DWORD                 dwRevocationFreshnessTime;
 537 } CERT_SIMPLE_CHAIN, *PCERT_SIMPLE_CHAIN;
 538
 539 typedef struct _CERT_CHAIN_CONTEXT CERT_CHAIN_CONTEXT, *PCERT_CHAIN_CONTEXT;
 540 typedef const CERT_CHAIN_CONTEXT *PCCERT_CHAIN_CONTEXT;
 541
 542 struct _CERT_CHAIN_CONTEXT {
 543     DWORD                 cbSize;
 544     CERT_TRUST_STATUS     TrustStatus;
 545     DWORD                 cChain;
 546     PCERT_SIMPLE_CHAIN   *rgpChain;
 547     DWORD                 cLowerQualityChainContext;
 548     PCCERT_CHAIN_CONTEXT *rgbLowerQualityChainContext;
 549     BOOL                  fHasRevocationFreshnessTime;
 550     DWORD                 dwRevocationFreshnessTime;
 551 };
 552
 553 typedef struct _CERT_CHAIN_POLICY_PARA {
 554     DWORD cbSize;
 555     DWORD dwFlags;
 556     void *pvExtraPolicyPara;
 557 } CERT_CHAIN_POLICY_PARA, *PCERT_CHAIN_POLICY_PARA;
 558
 559 typedef struct _CERT_CHAIN_POLICY_STATUS {
 560     DWORD cbSize;
 561     DWORD dwError;
 562     LONG  lChainIndex;
 563     LONG  lElementIndex;
 564     void *pvExtraPolicyStatus;
 565 } CERT_CHAIN_POLICY_STATUS, *PCERT_CHAIN_POLICY_STATUS;
 566
 567 typedef struct _CERT_SYSTEM_STORE_INFO {
 568     DWORD cbSize;
 569 } CERT_SYSTEM_STORE_INFO, *PCERT_SYSTEM_STORE_INFO;
 570
 571 typedef struct _CERT_PHYSICAL_STORE_INFO {
 572     DWORD           cbSize;
 573     LPSTR           pszOpenStoreProvider;
 574     DWORD           dwOpenEncodingType;
 575     DWORD           dwOpenFlags;
 576     CRYPT_DATA_BLOB OpenParameters;
 577     DWORD           dwFlags;
 578     DWORD           dwPriority;
 579 } CERT_PHYSICAL_STORE_INFO, *PCERT_PHYSICAL_STORE_INFO;
 580
 581 typedef struct _CERT_SYSTEM_STORE_RELOCATE_PARA {
 582     union {
 583         HKEY  hKeyBase;
 584         VOID *pvBase;
 585     } DUMMYUNIONNAME;
 586     union {
 587         void   *pvSystemStore;
 588         LPCSTR  pszSystemStore;
 589         LPCWSTR pwszSystemStore;
 590     } DUMMYUNIONNAME2;
 591 } CERT_SYSTEM_STORE_RELOCATE_PARA, *PCERT_SYSTEM_STORE_RELOCATE_PARA;
 592
 593 typedef BOOL (WINAPI *PFN_CERT_ENUM_SYSTEM_STORE_LOCATION)(
 594  LPCWSTR pwszStoreLocation, DWORD dwFlags, void *pvReserved, void *pvArg);
 595
 596 typedef BOOL (WINAPI *PFN_CERT_ENUM_SYSTEM_STORE)(const void *pvSystemStore,
 597  DWORD dwFlags, PCERT_SYSTEM_STORE_INFO pStoreInfo, void *pvReserved,
 598  void *pvArg);
 599
 600 typedef BOOL (WINAPI *PFN_CERT_ENUM_PHYSICAL_STORE)(const void *pvSystemStore,
 601  DWORD dwFlags, LPCWSTR pwszStoreName, PCERT_PHYSICAL_STORE_INFO pStoreInfo,
 602  void *pvReserved, void *pvArg);
 603
 604 /* Encode/decode object */
 605 typedef LPVOID (WINAPI *PFN_CRYPT_ALLOC)(size_t cbsize);
 606 typedef VOID   (WINAPI *PFN_CRYPT_FREE)(LPVOID pv);
 607
 608 typedef struct _CRYPT_ENCODE_PARA {
 609     DWORD           cbSize;
 610     PFN_CRYPT_ALLOC pfnAlloc;
 611     PFN_CRYPT_FREE  pfnFree;
 612 } CRYPT_ENCODE_PARA, *PCRYPT_ENCODE_PARA;
 613
 614 typedef struct _CRYPT_DECODE_PARA {
 615     DWORD           cbSize;
 616     PFN_CRYPT_ALLOC pfnAlloc;
 617     PFN_CRYPT_FREE  pfnFree;
 618 } CRYPT_DECODE_PARA, *PCRYPT_DECODE_PARA;
 619
 620 /* Algorithm IDs */
 621
 622 #define GET_ALG_CLASS(x)                (x & (7 << 13))
 623 #define GET_ALG_TYPE(x)                 (x & (15 << 9))
 624 #define GET_ALG_SID(x)                  (x & (511))
 625
 626 /* Algorithm Classes */
 627 #define ALG_CLASS_ANY                   (0)
 628 #define ALG_CLASS_SIGNATURE             (1 << 13)
 629 #define ALG_CLASS_MSG_ENCRYPT           (2 << 13)
 630 #define ALG_CLASS_DATA_ENCRYPT          (3 << 13)
 631 #define ALG_CLASS_HASH                  (4 << 13)
 632 #define ALG_CLASS_KEY_EXCHANGE          (5 << 13)
 633 /* Algorithm types */
 634 #define ALG_TYPE_ANY                    (0)
 635 #define ALG_TYPE_DSS                    (1 << 9)
 636 #define ALG_TYPE_RSA                    (2 << 9)
 637 #define ALG_TYPE_BLOCK                  (3 << 9)
 638 #define ALG_TYPE_STREAM                 (4 << 9)
 639 #define ALG_TYPE_DH                     (5 << 9)
 640 #define ALG_TYPE_SECURECHANNEL          (6 << 9)
 641
 642 /* SIDs */
 643 #define ALG_SID_ANY                     (0)
 644 /* RSA SIDs */
 645 #define ALG_SID_RSA_ANY                 0
 646 #define ALG_SID_RSA_PKCS                1
 647 #define ALG_SID_RSA_MSATWORK            2
 648 #define ALG_SID_RSA_ENTRUST             3
 649 #define ALG_SID_RSA_PGP                 4
 650 /* DSS SIDs */
 651 #define ALG_SID_DSS_ANY                 0
 652 #define ALG_SID_DSS_PKCS                1
 653 #define ALG_SID_DSS_DMS                 2
 654
 655 /* DES SIDs */
 656 #define ALG_SID_DES                     1
 657 #define ALG_SID_3DES                    3
 658 #define ALG_SID_DESX                    4
 659 #define ALG_SID_IDEA                    5
 660 #define ALG_SID_CAST                    6
 661 #define ALG_SID_SAFERSK64               7
 662 #define ALG_SID_SAFERSK128              8
 663 #define ALG_SID_3DES_112                9
 664 /* Diffie-Hellmans SIDs */
 665 #define ALG_SID_DH_SANDF                1
 666 #define ALG_SID_DH_EPHEM                2
 667 #define ALG_SID_AGREED_KEY_ANY          3
 668 #define ALG_SID_KEA                     4
 669 /* RC2 SIDs */
 670 #define ALG_SID_RC4                     1
 671 #define ALG_SID_RC2                     2
 672 #define ALG_SID_SEAL                    2
 673 /* Hash SIDs */
 674 #define ALG_SID_MD2                     1
 675 #define ALG_SID_MD4                     2
 676 #define ALG_SID_MD5                     3
 677 #define ALG_SID_SHA                     4
 678 #define ALG_SID_MAC                     5
 679 #define ALG_SID_RIPEMD                  6
 680 #define ALG_SID_RIPEMD160               7
 681 #define ALG_SID_SSL3SHAMD5              8
 682 #define ALG_SID_HMAC                    9
 683 #define ALG_SID_TLS1PRF                10
 684 /* SCHANNEL SIDs */
 685 #define ALG_SID_SSL3_MASTER             1
 686 #define ALG_SID_SCHANNEL_MASTER_HASH    2
 687 #define ALG_SID_SCHANNEL_MAC_KEY        3
 688 #define ALG_SID_PCT1_MASTER             4
 689 #define ALG_SID_SSL2_MASTER             5
 690 #define ALG_SID_TLS1_MASTER             6
 691 #define ALG_SID_SCHANNEL_ENC_KEY        7
 692
 693 /* Algorithm Definitions */
 694 #define CALG_MD2                  (ALG_CLASS_HASH         | ALG_TYPE_ANY           | ALG_SID_MD2)
 695 #define CALG_MD4                  (ALG_CLASS_HASH         | ALG_TYPE_ANY           | ALG_SID_MD4)
 696 #define CALG_MD5                  (ALG_CLASS_HASH         | ALG_TYPE_ANY           | ALG_SID_MD5)
 697 #define CALG_SHA                  (ALG_CLASS_HASH         | ALG_TYPE_ANY           | ALG_SID_SHA)
 698 #define CALG_MAC                  (ALG_CLASS_HASH         | ALG_TYPE_ANY           | ALG_SID_MAC)
 699 #define CALG_SSL3_SHAMD5          (ALG_CLASS_HASH         | ALG_TYPE_ANY           | ALG_SID_SSL3SHAMD5)
 700 #define CALG_HMAC                 (ALG_CLASS_HASH         | ALG_TYPE_ANY           | ALG_SID_HMAC)
 701 #define CALG_TLS1PRF              (ALG_CLASS_HASH         | ALG_TYPE_ANY           | ALG_SID_TLS1PRF)
 702 #define CALG_RSA_SIGN             (ALG_CLASS_SIGNATURE    | ALG_TYPE_RSA           | ALG_SID_RSA_ANY)
 703 #define CALG_DSS_SIGN             (ALG_CLASS_SIGNATURE    | ALG_TYPE_DSS           | ALG_SID_DSS_ANY)
 704 #define CALG_DH_SF                (ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_DH            | ALG_SID_DH_SANDF)
 705 #define CALG_DH_EPHEM             (ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_DH            | ALG_SID_DH_EPHEM)
 706 #define CALG_RSA_KEYX             (ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_RSA           | ALG_SID_RSA_ANY)
 707 #define CALG_DES                  (ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK         | ALG_SID_DES)
 708 #define CALG_RC2                  (ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK         | ALG_SID_RC2)
 709 #define CALG_3DES                 (ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK         | ALG_SID_3DES)
 710 #define CALG_3DES_112             (ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK         | ALG_SID_3DES_112)
 711 #define CALG_RC4                  (ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_STREAM        | ALG_SID_RC4)
 712 #define CALG_SEAL                 (ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_STREAM        | ALG_SID_SEAL)
 713 #define CALG_SSL3_MASTER          (ALG_CLASS_MSG_ENCRYPT  | ALG_TYPE_SECURECHANNEL | ALG_SID_SSL3_MASTER)
 714 #define CALG_SCHANNEL_MASTER_HASH (ALG_CLASS_MSG_ENCRYPT  | ALG_TYPE_SECURECHANNEL | ALG_SID_SCHANNEL_MASTER_HASH)
 715 #define CALG_SCHANNEL_MAC_KEY     (ALG_CLASS_MSG_ENCRYPT  | ALG_TYPE_SECURECHANNEL | ALG_SID_SCHANNEL_MAC_KEY)
 716 #define CALG_SCHANNEL_ENC_KEY     (ALG_CLASS_MSG_ENCRYPT  | ALG_TYPE_SECURECHANNEL | ALG_SID_SCHANNEL_ENC_KEY)
 717 #define CALG_PCT1_MASTER          (ALG_CLASS_MSG_ENCRYPT  | ALG_TYPE_SECURECHANNEL | ALG_SID_PCT1_MASTER)
 718 #define CALG_SSL2_MASTER          (ALG_CLASS_MSG_ENCRYPT  | ALG_TYPE_SECURECHANNEL | ALG_SID_SSL2_MASTER)
 719 #define CALG_TLS1_MASTER          (ALG_CLASS_MSG_ENCRYPT  | ALG_TYPE_SECURECHANNEL | ALG_SID_TLS1_MASTER)
 720
 721 /* Protocol Flags */
 722 #define CRYPT_FLAG_PCT1    0x0001
 723 #define CRYPT_FLAG_SSL2    0x0002
 724 #define CRYPT_FLAG_SSL3    0x0004
 725 #define CRYPT_FLAG_TLS1    0x0008
 726 #define CRYPT_FLAG_IPSEC   0x0010
 727 #define CRYPT_FLAG_SIGNING 0x0020
 728
 729 /* Provider names */
 730 #define MS_DEF_PROV_A                            "Microsoft Base Cryptographic Provider v1.0"
 731 #if defined(__GNUC__)
 732 # define MS_DEF_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
 733         'B','a','s','e',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ', \
 734         'P','r','o','v','i','d','e','r',' ','v','1','.','0',0 }
 735 #elif defined(_MSC_VER)
 736 # define MS_DEF_PROV_W      L"Microsoft Base Cryptographic Provider v1.0"
 737 #else
 738 static const WCHAR MS_DEF_PROV_W[] =             { 'M','i','c','r','o','s','o','f','t',' ',
 739         'B','a','s','e',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ',
 740         'P','r','o','v','i','d','e','r',' ','v','1','.','0',0 };
 741 #endif
 742 #define MS_DEF_PROV                              WINELIB_NAME_AW(MS_DEF_PROV_)
 743
 744 #define MS_ENHANCED_PROV_A                       "Microsoft Enhanced Cryptographic Provider v1.0"
 745 #if defined(__GNUC__)
 746 # define MS_ENHANCED_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
 747         'E','n','h','a','n','c','e','d',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ', \
 748         'P','r','o','v','i','d','e','r',' ','v','1','.','0',0 }
 749 #elif defined(_MSC_VER)
 750 # define MS_ENHANCED_PROV_W     L"Microsoft Enhanced Cryptographic Provider v1.0"
 751 #else
 752 static const WCHAR MS_ENHANCED_PROV_W[] =        { 'M','i','c','r','o','s','o','f','t',' ',
 753         'E','n','h','a','n','c','e','d',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ',
 754         'P','r','o','v','i','d','e','r',' ','v','1','.','0',0 };
 755 #endif
 756 #define MS_ENHANCED_PROV                         WINELIB_NAME_AW(MS_ENHANCED_PROV_)
 757
 758 #define MS_STRONG_PROV_A                         "Microsoft Strong Cryptographic Provider"
 759 #if defined(__GNUC__)
 760 # define MS_STRONG_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
 761         'S','t','r','o','n','g',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ', \
 762         'P','r','o','v','i','d','e','r',0 }
 763 #elif defined(_MSC_VER)
 764 # define MS_STRONG_PROV_W     L"Microsoft Strong Cryptographic Provider"
 765 #else
 766 static const WCHAR MS_STRONG_PROV_W[] =          { 'M','i','c','r','o','s','o','f','t',' ',
 767         'S','t','r','o','n','g',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ',
 768         'P','r','o','v','i','d','e','r',0 };
 769 #endif
 770 #define MS_STRONG_PROV                           WINELIB_NAME_AW(MS_STRONG_PROV_)
 771
 772 #define MS_DEF_RSA_SIG_PROV_A                    "Microsoft RSA Signature Cryptographic Provider"
 773 #if defined(__GNUC__)
 774 # define MS_DEF_RSA_SIG_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
 775         'R','S','A',' ','S','i','g','n','a','t','u','r','e',' ', \
 776         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
 777 #elif defined(_MSC_VER)
 778 # define MS_DEF_RSA_SIG_PROV_W      L"Microsoft RSA Signature Cryptographic Provider"
 779 #else
 780 static const WCHAR MS_DEF_RSA_SIG_PROV_W[] =     { 'M','i','c','r','o','s','o','f','t',' ',
 781         'R','S','A',' ','S','i','g','n','a','t','u','r','e',' ',
 782         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
 783 #endif
 784 #define MS_DEF_RSA_SIG_PROV                      WINELIB_NAME_AW(MS_DEF_RSA_SIG_PROV_)
 785
 786 #define MS_DEF_RSA_SCHANNEL_PROV_A               "Microsoft RSA SChannel Cryptographic Provider"
 787 #if defined(__GNUC__)
 788 # define MS_DEF_RSA_SCHANNEL_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
 789         'R','S','A',' ','S','C','h','a','n','n','e','l',' ', \
 790         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
 791 #elif defined(_MSC_VER)
 792 # define MS_DEF_RSA_SCHANNEL_PROV_W     L"Microsoft RSA SChannel Cryptographic Provider"
 793 #else
 794 static const WCHAR MS_DEF_RSA_SCHANNEL_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
 795         'R','S','A',' ','S','C','h','a','n','n','e','l',' ',
 796         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
 797 #endif
 798 #define MS_DEF_RSA_SCHANNEL_PROV                 WINELIB_NAME_AW(MS_DEF_RSA_SCHANNEL_PROV_)
 799
 800 #define MS_DEF_DSS_PROV_A                        "Microsoft Base DSS Cryptographic Provider"
 801 #if defined(__GNUC__)
 802 # define MS_DEF_DSS_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
 803         'B','a','s','e',' ','D','S','S',' ', \
 804         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
 805 #elif defined(_MSC_VER)
 806 # define MS_DEF_DSS_PROV_W     L"Microsoft Base DSS Cryptographic Provider"
 807 #else
 808 static const WCHAR MS_DEF_DSS_PROV_W[] =         { 'M','i','c','r','o','s','o','f','t',' ',
 809         'B','a','s','e',' ','D','S','S',' ',
 810         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
 811 #endif
 812 #define MS_DEF_DSS_PROV                          WINELIB_NAME_AW(MS_DEF_DSS_PROV_)
 813
 814 #define MS_DEF_DSS_DH_PROV_A                     "Microsoft Base DSS and Diffie-Hellman Cryptographic Provider"
 815 #if defined(__GNUC__)
 816 # define MS_DEF_DSS_DH_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
 817         'B','a','s','e',' ','D','S','S',' ','a','n','d',' ', \
 818         'D','i','f','f','i','e','-','H','e','l','l','m','a','n',' ', \
 819         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
 820 #elif defined(_MSC_VER)
 821 # define MS_DEF_DSS_DH_PROV_W     L"Microsoft Base DSS and Diffie-Hellman Cryptographic Provider"
 822 #else
 823 static const WCHAR MS_DEF_DSS_DH_PROV_W[] =      { 'M','i','c','r','o','s','o','f','t',' ',
 824         'B','a','s','e',' ','D','S','S',' ','a','n','d',' ',
 825         'D','i','f','f','i','e','-','H','e','l','l','m','a','n',' ',
 826         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
 827 #endif
 828 #define MS_DEF_DSS_DH_PROV                       WINELIB_NAME_AW(MS_DEF_DSS_DH_PROV_)
 829
 830 #define MS_ENH_DSS_DH_PROV_A                     "Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider"
 831 #if defined(__GNUC__)
 832 # define MS_ENH_DSS_DH_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
 833         'E','n','h','a','n','c','e','d',' ','D','S','S',' ','a','n','d',' ', \
 834         'D','i','f','f','i','e','-','H','e','l','l','m','a','n',' ', \
 835         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
 836 #elif defined(_MSC_VER)
 837 # define MS_ENH_DSS_DH_PROV_W     L"Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider"
 838 #else
 839 static const WCHAR MS_ENH_DSS_DH_PROV_W[] =      { 'M','i','c','r','o','s','o','f','t',' ',
 840         'E','n','h','a','n','c','e','d',' ','D','S','S',' ','a','n','d',' ',
 841         'D','i','f','f','i','e','-','H','e','l','l','m','a','n',' ',
 842         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
 843 #endif
 844 #define MS_ENH_DSS_DH_PROV                       WINELIB_NAME_AW(MS_ENH_DSS_DH_PROV_)
 845
 846 #define MS_DEF_DH_SCHANNEL_PROV_A                "Microsoft DH SChannel Cryptographic Provider"
 847 #if defined(__GNUC__)
 848 # define MS_DEF_DH_SCHANNEL_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
 849         'D','H',' ','S','C','h','a','n','n','e','l',' ', \
 850         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
 851 #elif defined(_MSC_VER)
 852 # define MS_DEF_DH_SCHANNEL_PROV_W     L"Microsoft DH SChannel Cryptographic Provider"
 853 #else
 854 static const WCHAR MS_DEF_DH_SCHANNEL_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
 855         'D','H',' ','S','C','h','a','n','n','e','l',' ',
 856         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
 857 #endif
 858 #define MS_DEF_DH_SCHANNEL_PROV                  WINELIB_NAME_AW(MS_DEF_DH_SCHANNEL_PROV_)
 859
 860 #define MS_SCARD_PROV_A                          "Microsoft Base Smart Card Cryptographic Provider"
 861 #if defined(__GNUC__)
 862 # define MS_SCARD_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
 863         'B','a','s','e',' ','S','m','a','r','t',' ','C','a','r','d',' ', \
 864         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
 865 #elif defined(_MSC_VER)
 866 # define MS_SCARD_PROV_W     L"Microsoft Base Smart Card Cryptographic Provider"
 867 #else
 868 static const WCHAR MS_SCARD_PROV_W[] =           { 'M','i','c','r','o','s','o','f','t',' ',
 869         'B','a','s','e',' ','S','m','a','r','t',' ','C','a','r','d',' ',
 870         'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
 871 #endif
 872 #define MS_SCARD_PROV                            WINELIB_NAME_AW(MS_SCARD_PROV_)
 873
 874 /* Key Specs*/
 875 #define AT_KEYEXCHANGE          1
 876 #define AT_SIGNATURE            2
 877
 878 /* Provider Types */
 879 #define PROV_RSA_FULL             1
 880 #define PROV_RSA_SIG              2
 881 #define PROV_DSS                  3
 882 #define PROV_FORTEZZA             4
 883 #define PROV_MS_EXCHANGE          5
 884 #define PROV_SSL                  6
 885 #define PROV_RSA_SCHANNEL         12
 886 #define PROV_DSS_DH               13
 887 #define PROV_EC_ECDSA_SIG         14
 888 #define PROV_EC_ECNRA_SIG         15
 889 #define PROV_EC_ECDSA_FULL        16
 890 #define PROV_EC_ECNRA_FULL        17
 891 #define PROV_DH_SCHANNEL          18
 892 #define PROV_SPYRUS_LYNKS         20
 893 #define PROV_RNG                  21
 894 #define PROV_INTEL_SEC            22
 895 #define PROV_REPLACE_OWF          23
 896 #define PROV_RSA_AES              24
 897
 898 /* FLAGS Section */
 899
 900 /* Provider Parameters */
 901 #define PP_ENUMALGS             1
 902 #define PP_ENUMCONTAINERS       2
 903 #define PP_IMPTYPE              3
 904 #define PP_NAME                 4
 905 #define PP_VERSION              5
 906 #define PP_CONTAINER            6
 907
 908 #define CRYPT_FIRST             1
 909 #define CRYPT_NEXT              2
 910
 911 #define CRYPT_IMPL_HARDWARE     1
 912 #define CRYPT_IMPL_SOFTWARE     2
 913 #define CRYPT_IMPL_MIXED        3
 914 #define CRYPT_IMPL_UNKNOWN      4
 915
 916 /* CryptAcquireContext */
 917 #define CRYPT_VERIFYCONTEXT       0xF0000000
 918 #define CRYPT_NEWKEYSET           0x00000008
 919 #define CRYPT_DELETEKEYSET        0x00000010
 920 #define CRYPT_MACHINE_KEYSET      0x00000020
 921 #define CRYPT_SILENT              0x00000040
 922
 923 /* Crypt{Get|Set}Provider */
 924 #define CRYPT_MACHINE_DEFAULT     0x00000001
 925 #define CRYPT_USER_DEFAULT        0x00000002
 926 #define CRYPT_DELETE_DEFAULT      0x00000004
 927
 928 /* Crypt{Get/Set}ProvParam */
 929 #define PP_CLIENT_HWND          1
 930 #define PP_ENUMALGS             1
 931 #define PP_ENUMCONTAINERS       2
 932 #define PP_IMPTYPE              3
 933 #define PP_NAME                 4
 934 #define PP_VERSION              5
 935 #define PP_CONTAINER            6
 936 #define PP_CHANGE_PASSWORD      7
 937 #define PP_KEYSET_SEC_DESCR     8
 938 #define PP_KEY_TYPE_SUBTYPE     10
 939 #define PP_CONTEXT_INFO         11
 940 #define PP_KEYEXCHANGE_KEYSIZE  12
 941 #define PP_SIGNATURE_KEYSIZE    13
 942 #define PP_KEYEXCHANGE_ALG      14
 943 #define PP_SIGNATURE_ALG        15
 944 #define PP_PROVTYPE             16
 945 #define PP_KEYSTORAGE           17
 946 #define PP_SYM_KEYSIZE          19
 947 #define PP_SESSION_KEYSIZE      20
 948 #define PP_UI_PROMPT            21
 949 #define PP_ENUMALGS_EX          22
 950 #define PP_DELETEKEY            24
 951 #define PP_ENUMMANDROOTS        25
 952 #define PP_ENUMELECTROOTS       26
 953 #define PP_KEYSET_TYPE          27
 954 #define PP_ADMIN_PIN            31
 955 #define PP_KEYEXCHANGE_PIN      32
 956 #define PP_SIGNATURE_PIN        33
 957 #define PP_SIG_KEYSIZE_INC      34
 958 #define PP_KEYX_KEYSIZE_INC     35
 959 #define PP_UNIQUE_CONTAINER     36
 960 #define PP_SGC_INFO             37
 961 #define PP_USE_HARDWARE_RNG     38
 962 #define PP_KEYSPEC              39
 963 #define PP_ENUMEX_SIGNING_PROT  40
 964
 965 /* Crypt{Get/Set}KeyParam */
 966 #define KP_IV                   1
 967 #define KP_SALT                 2
 968 #define KP_PADDING              3
 969 #define KP_MODE                 4
 970 #define KP_MODE_BITS            5
 971 #define KP_PERMISSIONS          6
 972 #define KP_ALGID                7
 973 #define KP_BLOCKLEN             8
 974 #define KP_KEYLEN               9
 975 #define KP_SALT_EX              10
 976 #define KP_P                    11
 977 #define KP_G                    12
 978 #define KP_Q                    13
 979 #define KP_X                    14
 980 #define KP_Y                    15
 981 #define KP_RA                   16
 982 #define KP_RB                   17
 983 #define KP_INFO                 18
 984 #define KP_EFFECTIVE_KEYLEN     19
 985 #define KP_SCHANNEL_ALG         20
 986 #define KP_CLIENT_RANDOM        21
 987 #define KP_SERVER_RANDOM        22
 988 #define KP_RP                   23
 989 #define KP_PRECOMP_MD5          24
 990 #define KP_PRECOMP_SHA          25
 991 #define KP_CERTIFICATE          26
 992 #define KP_CLEAR_KEY            27
 993 #define KP_PUB_EX_LEN           28
 994 #define KP_PUB_EX_VAL           29
 995 #define KP_KEYVAL               30
 996 #define KP_ADMIN_PIN            31
 997 #define KP_KEYEXCHANGE_PIN      32
 998 #define KP_SIGNATURE_PIN        33
 999 #define KP_PREHASH              34
1000
1001 /* CryptSignHash/CryptVerifySignature */
1002 #define CRYPT_NOHASHOID         0x00000001
1003 #define CRYPT_TYPE2_FORMAT      0x00000002
1004 #define CRYPT_X931_FORMAT       0x00000004
1005
1006 /* Crypt{Get,Set}HashParam */
1007 #define HP_ALGID                0x0001
1008 #define HP_HASHVAL              0x0002
1009 #define HP_HASHSIZE             0x0004
1010 #define HP_HMAC_INFO            0x0005
1011 #define HP_TLS1PRF_LABEL        0x0006
1012 #define HP_TLS1PRF_SEED         0x0007
1013
1014 /* Crypt{Get,Set}KeyParam */
1015 #define CRYPT_MODE_CBC          1
1016 #define CRYPT_MODE_ECB          2
1017 #define CRYPT_MODE_OFB          3
1018 #define CRYPT_MODE_CFB          4
1019
1020 #define CRYPT_ENCRYPT           0x0001
1021 #define CRYPT_DECRYPT           0x0002
1022 #define CRYPT_EXPORT            0x0004
1023 #define CRYPT_READ              0x0008
1024 #define CRYPT_WRITE             0x0010
1025 #define CRYPT_MAC               0x0020
1026
1027 /* Crypt*Key */
1028 #define CRYPT_EXPORTABLE        0x00000001
1029 #define CRYPT_USER_PROTECTED    0x00000002
1030 #define CRYPT_CREATE_SALT       0x00000004
1031 #define CRYPT_UPDATE_KEY        0x00000008
1032 #define CRYPT_NO_SALT           0x00000010
1033 #define CRYPT_PREGEN            0x00000040
1034 #define CRYPT_SERVER            0x00000400
1035 #define CRYPT_ARCHIVABLE        0x00004000
1036
1037 /* CryptExportKey */
1038 #define CRYPT_SSL2_FALLBACK     0x00000002
1039 #define CRYPT_DESTROYKEY        0x00000004
1040 #define CRYPT_OAEP              0x00000040
1041
1042 /* CryptHashSessionKey */
1043 #define CRYPT_LITTLE_ENDIAN     0x00000001
1044
1045 /* Crypt{Protect,Unprotect}Data PROMPTSTRUCT flags */
1046 #define CRYPTPROTECT_PROMPT_ON_PROTECT    0x0001
1047 #define CRYPTPROTECT_PROMPT_ON_UNPROTECT  0x0002
1048 /* Crypt{Protect,Unprotect}Data flags */
1049 #define CRYPTPROTECT_UI_FORBIDDEN       0x0001
1050 #define CRYPTPROTECT_LOCAL_MACHINE      0x0004
1051 #define CRYPTPROTECT_AUDIT              0x0010
1052 #define CRYPTPROTECT_VERIFY_PROTECTION  0x0040
1053
1054 /* Blob Types */
1055 #define SIMPLEBLOB              0x1
1056 #define PUBLICKEYBLOB           0x6
1057 #define PRIVATEKEYBLOB          0x7
1058 #define PLAINTEXTKEYBLOB        0x8
1059 #define OPAQUEKEYBLOB           0x9
1060 #define PUBLICKEYBLOBEX         0xA
1061 #define SYMMETRICWRAPKEYBLOB    0xB
1062
1063 #define CUR_BLOB_VERSION        2
1064
1065 /* cert store provider types */
1066 #define CERT_STORE_PROV_MSG                  ((LPCSTR)1)
1067 #define CERT_STORE_PROV_MEMORY               ((LPCSTR)2)
1068 #define CERT_STORE_PROV_FILE                 ((LPCSTR)3)
1069 #define CERT_STORE_PROV_REG                  ((LPCSTR)4)
1070 #define CERT_STORE_PROV_PKCS7                ((LPCSTR)5)
1071 #define CERT_STORE_PROV_SERIALIZED           ((LPCSTR)6)
1072 #define CERT_STORE_PROV_FILENAME_A           ((LPCSTR)7)
1073 #define CERT_STORE_PROV_FILENAME_W           ((LPCSTR)8)
1074 #define CERT_STORE_PROV_SYSTEM_A             ((LPCSTR)9)
1075 #define CERT_STORE_PROV_SYSTEM_W             ((LPCSTR)10)
1076 #define CERT_STORE_PROV_SYSTEM               CERT_STORE_PROV_SYSTEM_W
1077 #define CERT_STORE_PROV_COLLECTION           ((LPCSTR)11)
1078 #define CERT_STORE_PROV_SYSTEM_REGISTRY_A    ((LPCSTR)12)
1079 #define CERT_STORE_PROV_SYSTEM_REGISTRY_W    ((LPCSTR)13)
1080 #define CERT_STORE_PROV_SYSTEM_REGISTRY      CERT_STORE_PROV_SYSTEM_REGISTRY_W
1081 #define CERT_STORE_PROV_PHYSICAL_W           ((LPCSTR)14)
1082 #define CERT_STORE_PROV_PHYSICAL             CERT_STORE_PROV_PHYSICAL_W
1083 #define CERT_STORE_PROV_SMART_CARD_W         ((LPCSTR)15)
1084 #define CERT_STORE_PROV_SMART_CARD           CERT_STORE_PROV_SMART_CARD_W
1085 #define CERT_STORE_PROV_LDAP_W               ((LPCSTR)16)
1086 #define CERT_STORE_PROV_LDAP                 CERT_STORE_PROV_LDAP_W
1087
1088 #define sz_CERT_STORE_PROV_MEMORY            "Memory"
1089 #define sz_CERT_STORE_PROV_FILENAME_W        "File"
1090 #define sz_CERT_STORE_PROV_FILENAME          sz_CERT_STORE_PROV_FILENAME_W
1091 #define sz_CERT_STORE_PROV_SYSTEM_W          "System"
1092 #define sz_CERT_STORE_PROV_SYSTEM            sz_CERT_STORE_PROV_SYSTEM_W
1093 #define sz_CERT_STORE_PROV_PKCS7             "PKCS7"
1094 #define sz_CERT_STORE_PROV_SERIALIZED        "Serialized"
1095 #define sz_CERT_STORE_PROV_COLLECTION        "Collection"
1096 #define sz_CERT_STORE_PROV_SYSTEM_REGISTRY_W "SystemRegistry"
1097 #define sz_CERT_STORE_PROV_SYSTEM_REGISTRY   sz_CERT_STORE_PROV_SYSTEM_REGISTRY_W
1098 #define sz_CERT_STORE_PROV_PHYSICAL_W        "Physical"
1099 #define sz_CERT_STORE_PROV_PHYSICAL          sz_CERT_STORE_PROV_PHYSICAL_W
1100 #define sz_CERT_STORE_PROV_SMART_CARD_W      "SmartCard"
1101 #define sz_CERT_STORE_PROV_SMART_CARD        sz_CERT_STORE_PROV_SMART_CARD_W
1102 #define sz_CERT_STORE_PROV_LDAP_W            "Ldap"
1103 #define sz_CERT_STORE_PROV_LDAP              sz_CERT_STORE_PROV_LDAP_W
1104
1105 /* types for CertOpenStore dwEncodingType */
1106 #define CERT_ENCODING_TYPE_MASK 0x0000ffff
1107 #define CMSG_ENCODING_TYPE_MASK 0xffff0000
1108 #define GET_CERT_ENCODING_TYPE(x) ((x) & CERT_ENCODING_TYPE_MASK)
1109 #define GET_CMSG_ENCODING_TYPE(x) ((x) & CMSG_ENCODING_TYPE_MASK)
1110
1111 #define CRYPT_ASN_ENCODING  0x00000001
1112 #define CRYPT_NDR_ENCODING  0x00000002
1113 #define X509_ASN_ENCODING   0x00000001
1114 #define X509_NDR_ENCODING   0x00000002
1115 #define PKCS_7_ASN_ENCODING 0x00010000
1116 #define PKCS_7_NDR_ENCODING 0x00020000
1117
1118 /* system store locations */
1119 #define CERT_SYSTEM_STORE_LOCATION_MASK  0x00ff0000
1120 #define CERT_SYSTEM_STORE_LOCATION_SHIFT 16
1121
1122 /* system store location ids */
1123 /* hkcu */
1124 #define CERT_SYSTEM_STORE_CURRENT_USER_ID               1
1125 /* hklm */
1126 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_ID              2
1127 /* hklm\Software\Microsoft\Cryptography\Services */
1128 #define CERT_SYSTEM_STORE_CURRENT_SERVICE_ID            4
1129 #define CERT_SYSTEM_STORE_SERVICES_ID                   5
1130 /* HKEY_USERS */
1131 #define CERT_SYSTEM_STORE_USERS_ID                      6
1132 /* hkcu\Software\Microsoft\Policies\Microsoft\SystemCertificates */
1133 #define CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY_ID  7
1134 /* hklm\Software\Microsoft\Policies\Microsoft\SystemCertificates */
1135 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY_ID 8
1136 /* hklm\Software\Microsoft\EnterpriseCertificates */
1137 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE_ID   9
1138
1139 /* system store location values */
1140 #define CERT_SYSTEM_STORE_CURRENT_USER \
1141  (CERT_SYSTEM_STORE_CURRENT_USER_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
1142 #define CERT_SYSTEM_STORE_LOCAL_MACHINE \
1143  (CERT_SYSTEM_STORE_LOCAL_MACHINE_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
1144 #define CERT_SYSTEM_STORE_CURRENT_SERVICE \
1145  (CERT_SYSTEM_STORE_CURRENT_SERVICE_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
1146 #define CERT_SYSTEM_STORE_SERVICE \
1147  (CERT_SYSTEM_STORE_SERVICES_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
1148 #define CERT_SYSTEM_STORE_USERS \
1149  (CERT_SYSTEM_STORE_USERS_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
1150 #define CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY \
1151  (CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
1152 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY \
1153  (CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
1154 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE \
1155  (CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
1156
1157 /* flags for CertOpenStore dwFlags */
1158 #define CERT_STORE_NO_CRYPT_RELEASE_FLAG            0x00000001
1159 #define CERT_STORE_SET_LOCALIZED_NAME_FLAG          0x00000002
1160 #define CERT_STORE_DEFER_CLOSE_UNTIL_LAST_FREE_FLAG 0x00000004
1161 #define CERT_STORE_DELETE_FLAG                      0x00000010
1162 #define CERT_STORE_UNSAFE_PHYSICAL_FLAG             0x00000020
1163 #define CERT_STORE_SHARE_STORE_FLAG                 0x00000040
1164 #define CERT_STORE_SHARE_CONTEXT_FLAG               0x00000080
1165 #define CERT_STORE_MANIFOLD_FLAG                    0x00000100
1166 #define CERT_STORE_ENUM_ARCHIVED_FLAG               0x00000200
1167 #define CERT_STORE_UPDATE_KEYID_FLAG                0x00000400
1168 #define CERT_STORE_BACKUP_RESTORE_FLAG              0x00000800
1169 #define CERT_STORE_MAXIMUM_ALLOWED_FLAG             0x00001000
1170 #define CERT_STORE_CREATE_NEW_FLAG                  0x00002000
1171 #define CERT_STORE_OPEN_EXISTING_FLAG               0x00004000
1172 #define CERT_STORE_READONLY_FLAG                    0x00008000
1173
1174 /* physical store dwFlags, also used by CertAddStoreToCollection as
1175  * dwUpdateFlags
1176  */
1177 #define CERT_PHYSICAL_STORE_ADD_ENABLE_FLAG                  0x1
1178 #define CERT_PHYSICAL_STORE_OPEN_DISABLE_FLAG                0x2
1179 #define CERT_PHYSICAL_STORE_REMOVE_OPEN_DISABLE_FLAG         0x4
1180 #define CERT_PHYSICAL_STORE_INSERT_COMPUTER_NAME_ENABLE_FLAG 0x8
1181
1182 /* dwFlag values for CertEnumPhysicalStore callback */
1183 #define CERT_PHYSICAL_STORE_PREDEFINED_ENUM_FLAG 0x1
1184
1185 /* predefined store names */
1186 #if defined(__GNUC__)
1187 # define CERT_PHYSICAL_STORE_DEFAULT_NAME (const WCHAR[])\
1188  {'.','D','e','f','a','u','l','t','0'}
1189 # define CERT_PHYSICAL_STORE_GROUP_POLICY_NAME (const WCHAR[])\
1190  {'.','G','r','o','u','p','P','o','l','i','c','y',0}
1191 # define CERT_PHYSICAL_STORE_LOCAL_MACHINE_NAME (const WCHAR[])\
1192  {'.','L','o','c','a','l','M','a','c','h','i','n','e',0}
1193 # define CERT_PHYSICAL_STORE_DS_USER_CERTIFICATE_NAME (const WCHAR[])\
1194  {'.','U','s','e','r','C','e','r','t','i','f','i','c','a','t','e',0}
1195 # define CERT_PHYSICAL_STORE_LOCAL_MACHINE_GROUP_POLICY_NAME (const WCHAR[])\
1196  {'.','L','o','c','a','l','M','a','c','h','i','n','e','G','r','o','u','p',\
1197  'P','o','l','i','c','y',0}
1198 # define CERT_PHYSICAL_STORE_ENTERPRISE_NAME (const WCHAR[])\
1199  {'.','E','n','t','e','r','p','r','i','s','e',0}
1200 # define CERT_PHYSICAL_STORE_AUTH_ROOT_NAME (const WCHAR[])\
1201  {'.','A','u','t','h','R','o','o','t',0}
1202 #elif defined(_MSC_VER)
1203 # define CERT_PHYSICAL_STORE_DEFAULT_NAME \
1204  L".Default"
1205 # define CERT_PHYSICAL_STORE_GROUP_POLICY_NAME \
1206  L".GroupPolicy"
1207 # define CERT_PHYSICAL_STORE_LOCAL_MACHINE_NAME \
1208  L".LocalMachine"
1209 # define CERT_PHYSICAL_STORE_DS_USER_CERTIFICATE_NAME \
1210  L".UserCertificate"
1211 # define CERT_PHYSICAL_STORE_LOCAL_MACHINE_GROUP_POLICY_NAME \
1212  L".LocalMachineGroupPolicy"
1213 # define CERT_PHYSICAL_STORE_ENTERPRISE_NAME \
1214  L".Enterprise"
1215 # define CERT_PHYSICAL_STORE_AUTH_ROOT_NAME \
1216  L".AuthRoot"
1217 #else
1218 static const WCHAR CERT_PHYSICAL_STORE_DEFAULT_NAME[] =
1219  {'.','D','e','f','a','u','l','t','0'};
1220 static const WCHAR CERT_PHYSICAL_STORE_GROUP_POLICY_NAME[] =
1221  {'.','G','r','o','u','p','P','o','l','i','c','y',0};
1222 static const WCHAR CERT_PHYSICAL_STORE_LOCAL_MACHINE_NAME[] =
1223  {'.','L','o','c','a','l','M','a','c','h','i','n','e',0};
1224 static const WCHAR CERT_PHYSICAL_STORE_DS_USER_CERTIFICATE_NAME[] =
1225  {'.','U','s','e','r','C','e','r','t','i','f','i','c','a','t','e',0};
1226 static const WCHAR CERT_PHYSICAL_STORE_LOCAL_MACHINE_GROUP_POLICY_NAME[] =
1227  {'.','L','o','c','a','l','M','a','c','h','i','n','e','G','r','o','u','p',
1228  'P','o','l','i','c','y',0};
1229 static const WCHAR CERT_PHYSICAL_STORE_ENTERPRISE_NAME[] =
1230  {'.','E','n','t','e','r','p','r','i','s','e',0};
1231 static const WCHAR CERT_PHYSICAL_STORE_AUTH_ROOT_NAME[] =
1232  {'.','A','u','t','h','R','o','o','t',0};
1233 #endif
1234
1235 /* cert system store flags */
1236 #define CERT_SYSTEM_STORE_MASK 0xffff0000
1237 #define CERT_SYSTEM_STORE_RELOCATE_FLAG 0x80000000
1238
1239 /* CertFindChainInStore dwFindType types */
1240 #define CERT_CHAIN_FIND_BY_ISSUER 1
1241
1242 /* CERT_INFO versions/flags */
1243 #define CERT_V1 0
1244 #define CERT_V2 1
1245 #define CERT_V3 2
1246 #define CERT_INFO_VERSION_FLAG                 1
1247 #define CERT_INFO_SERIAL_NUMBER_FLAG           2
1248 #define CERT_INFO_SIGNATURE_ALGORITHM_FLAG     3
1249 #define CERT_INFO_ISSUER_FLAG                  4
1250 #define CERT_INFO_NOT_BEFORE_FLAG              5
1251 #define CERT_INFO_NOT_AFTER_FLAG               6
1252 #define CERT_INFO_SUBJECT_FLAG                 7
1253 #define CERT_INFO_SUBJECT_PUBLIC_KEY_INFO_FLAG 8
1254 #define CERT_INFO_ISSUER_UNIQUE_ID_FLAG        9
1255 #define CERT_INFO_SUBJECT_UNIQUE_ID_FLAG       10
1256 #define CERT_INFO_EXTENSION_FLAG               11
1257
1258 /* CERT_REQUEST_INFO versions */
1259 #define CERT_REQUEST_V1 0
1260
1261 /* CRL versions */
1262 #define CRL_V1 0
1263 #define CRL_V2 1
1264
1265 /* CTL versions */
1266 #define CTL_V1 0
1267
1268 /* CERT_RDN attribute dwValueType types */
1269 #define CERT_RDN_TYPE_MASK 0x000000ff
1270 #define CERT_RDN_ANY_TYPE         0
1271 #define CERT_RDN_ENCODED_BLOB     1
1272 #define CERT_RDN_OCTET_STRING     2
1273 #define CERT_RDN_NUMERIC_STRING   3
1274 #define CERT_RDN_PRINTABLE_STRING 4
1275 #define CERT_RDN_TELETEX_STRING   5
1276 #define CERT_RDN_T61_STRING       5
1277 #define CERT_RDN_VIDEOTEX_STRING  6
1278 #define CERT_RDN_IA5_STRING       7
1279 #define CERT_RDN_GRAPHIC_STRING   8
1280 #define CERT_RDN_VISIBLE_STRING   9
1281 #define CERT_RDN_ISO646_STRING    9
1282 #define CERT_RDN_GENERAL_STRING   10
1283 #define CERT_RDN_UNIVERSAL_STRING 11
1284 #define CERT_RDN_INT4_STRING      11
1285 #define CERT_RDN_BMP_STRING       12
1286 #define CERT_RDN_UNICODE_STRING   12
1287 #define CERT_RDN_UTF8_STRING      13
1288
1289 /* CERT_RDN attribute dwValueType flags */
1290 #define CERT_RDN_FLAGS_MASK 0xff000000
1291 #define CERT_RDN_ENABLE_T61_UNICODE_FLAG  0x80000000
1292 #define CERT_RDN_DISABLE_CHECK_TYPE_FLAG  0x4000000
1293 #define CERT_RDN_ENABLE_UTF8_UNICODE_FLAG 0x2000000
1294 #define CERT_RDN_DISABLE_IE4_UTF8_FLAG    0x0100000
1295
1296 #define IS_CERT_RDN_CHAR_STRING(x) \
1297  (((x) & CERT_RDN_TYPE_MASK) >= CERT_RDN_NUMERIC_STRING)
1298
1299 /* CRL reason codes */
1300 #define CRL_REASON_UNSPECIFIED            0
1301 #define CRL_REASON_KEY_COMPROMISE         1
1302 #define CRL_REASON_CA_COMPROMISE          2
1303 #define CRL_REASON_AFFILIATION_CHANGED    3
1304 #define CRL_REASON_SUPERSEDED             4
1305 #define CRL_REASON_CESSATION_OF_OPERATION 5
1306 #define CRL_REASON_CERTIFICATE_HOLD       6
1307 #define CRL_REASON_REMOVE_FROM_CRL        8
1308
1309 /* OIDs */
1310 #define szOID_RSA                           "1.2.840.113549"
1311 #define szOID_PKCS                          "1.2.840.113549.1"
1312 #define szOID_RSA_HASH                      "1.2.840.113549.2"
1313 #define szOID_RSA_ENCRYPT                   "1.2.840.113549.3"
1314 #define szOID_PKCS_1                        "1.2.840.113549.1.1"
1315 #define szOID_PKCS_2                        "1.2.840.113549.1.2"
1316 #define szOID_PKCS_3                        "1.2.840.113549.1.3"
1317 #define szOID_PKCS_4                        "1.2.840.113549.1.4"
1318 #define szOID_PKCS_5                        "1.2.840.113549.1.5"
1319 #define szOID_PKCS_6                        "1.2.840.113549.1.6"
1320 #define szOID_PKCS_7                        "1.2.840.113549.1.7"
1321 #define szOID_PKCS_8                        "1.2.840.113549.1.8"
1322 #define szOID_PKCS_9                        "1.2.840.113549.1.9"
1323 #define szOID_PKCS_10                       "1.2.840.113549.1.10"
1324 #define szOID_PKCS_11                       "1.2.840.113549.1.12"
1325 #define szOID_RSA_RSA                       "1.2.840.113549.1.1.1"
1326 #define CERT_RSA_PUBLIC_KEY_OBJID           szOID_RSA_RSA
1327 #define CERT_DEFAULT_OID_PUBLIC_KEY_SIGN    szOID_RSA_RSA
1328 #define CERT_DEFAULT_OID_PUBLIC_KEY_XCHG    szOID_RSA_RSA
1329 #define szOID_RSA_MD2RSA                    "1.2.840.113549.1.1.2"
1330 #define szOID_RSA_MD4RSA                    "1.2.840.113549.1.1.3"
1331 #define szOID_RSA_MD5RSA                    "1.2.840.113549.1.1.4"
1332 #define szOID_RSA_SHA1RSA                   "1.2.840.113549.1.1.5"
1333 #define szOID_RSA_SET0AEP_RSA               "1.2.840.113549.1.1.6"
1334 #define szOID_RSA_DH                        "1.2.840.113549.1.3.1"
1335 #define szOID_RSA_data                      "1.2.840.113549.1.7.1"
1336 #define szOID_RSA_signedData                "1.2.840.113549.1.7.2"
1337 #define szOID_RSA_envelopedData             "1.2.840.113549.1.7.3"
1338 #define szOID_RSA_signEnvData               "1.2.840.113549.1.7.4"
1339 #define szOID_RSA_digestedData              "1.2.840.113549.1.7.5"
1340 #define szOID_RSA_hashedData                "1.2.840.113549.1.7.5"
1341 #define szOID_RSA_encryptedData             "1.2.840.113549.1.7.6"
1342 #define szOID_RSA_emailAddr                 "1.2.840.113549.1.9.1"
1343 #define szOID_RSA_unstructName              "1.2.840.113549.1.9.2"
1344 #define szOID_RSA_contentType               "1.2.840.113549.1.9.3"
1345 #define szOID_RSA_messageDigest             "1.2.840.113549.1.9.4"
1346 #define szOID_RSA_signingTime               "1.2.840.113549.1.9.5"
1347 #define szOID_RSA_counterSign               "1.2.840.113549.1.9.6"
1348 #define szOID_RSA_challengePwd              "1.2.840.113549.1.9.7"
1349 #define szOID_RSA_unstructAddr              "1.2.840.113549.1.9.9"
1350 #define szOID_RSA_extCertAttrs              "1.2.840.113549.1.9.9"
1351 #define szOID_RSA_certExtensions            "1.2.840.113549.1.9.14"
1352 #define szOID_RSA_SMIMECapabilities         "1.2.840.113549.1.9.15"
1353 #define szOID_RSA_preferSignedData          "1.2.840.113549.1.9.15.1"
1354 #define szOID_RSA_SMIMEalg                  "1.2.840.113549.1.9.16.3"
1355 #define szOID_RSA_SMIMEalgESDH              "1.2.840.113549.1.9.16.3.5"
1356 #define szOID_RSA_SMIMEalgCMS3DESwrap       "1.2.840.113549.1.9.16.3.6"
1357 #define szOID_RSA_SMIMEalgCMSRC2wrap        "1.2.840.113549.1.9.16.3.7"
1358 #define szOID_RSA_MD2                       "1.2.840.113549.2.2"
1359 #define szOID_RSA_MD4                       "1.2.840.113549.2.4"
1360 #define szOID_RSA_MD5                       "1.2.840.113549.2.5"
1361 #define szOID_RSA_RC2CBC                    "1.2.840.113549.3.2"
1362 #define szOID_RSA_RC4                       "1.2.840.113549.3.4"
1363 #define szOID_RSA_DES_EDE3_CBC              "1.2.840.113549.3.7"
1364 #define szOID_RSA_RC5_CBCPad                "1.2.840.113549.3.9"
1365 #define szOID_ANSI_X942                     "1.2.840.10046"
1366 #define szOID_ANSI_X942_DH                  "1.2.840.10046.2.1"
1367 #define szOID_X957                          "1.2.840.10040"
1368 #define szOID_X957_DSA                      "1.2.840.10040.4.1"
1369 #define szOID_X957_SHA1DSA                  "1.2.840.10040.4.3"
1370 #define szOID_DS                            "2.5"
1371 #define szOID_DSALG                         "2.5.8"
1372 #define szOID_DSALG_CRPT                    "2.5.8.1"
1373 #define szOID_DSALG_HASH                    "2.5.8.2"
1374 #define szOID_DSALG_SIGN                    "2.5.8.3"
1375 #define szOID_DSALG_RSA                     "2.5.8.1.1"
1376 #define szOID_OIW                           "1.3.14"
1377 #define szOID_OIWSEC                        "1.3.14.3.2"
1378 #define szOID_OIWSEC_md4RSA                 "1.3.14.3.2.2"
1379 #define szOID_OIWSEC_md5RSA                 "1.3.14.3.2.3"
1380 #define szOID_OIWSEC_md4RSA2                "1.3.14.3.2.4"
1381 #define szOID_OIWSEC_desECB                 "1.3.14.3.2.6"
1382 #define szOID_OIWSEC_desCBC                 "1.3.14.3.2.7"
1383 #define szOID_OIWSEC_desOFB                 "1.3.14.3.2.8"
1384 #define szOID_OIWSEC_desCFB                 "1.3.14.3.2.9"
1385 #define szOID_OIWSEC_desMAC                 "1.3.14.3.2.10"
1386 #define szOID_OIWSEC_rsaSign                "1.3.14.3.2.11"
1387 #define szOID_OIWSEC_dsa                    "1.3.14.3.2.12"
1388 #define szOID_OIWSEC_shaDSA                 "1.3.14.3.2.13"
1389 #define szOID_OIWSEC_mdc2RSA                "1.3.14.3.2.14"
1390 #define szOID_OIWSEC_shaRSA                 "1.3.14.3.2.15"
1391 #define szOID_OIWSEC_dhCommMod              "1.3.14.3.2.16"
1392 #define szOID_OIWSEC_desEDE                 "1.3.14.3.2.17"
1393 #define szOID_OIWSEC_sha                    "1.3.14.3.2.18"
1394 #define szOID_OIWSEC_mdc2                   "1.3.14.3.2.19"
1395 #define szOID_OIWSEC_dsaComm                "1.3.14.3.2.20"
1396 #define szOID_OIWSEC_dsaCommSHA             "1.3.14.3.2.21"
1397 #define szOID_OIWSEC_rsaXchg                "1.3.14.3.2.22"
1398 #define szOID_OIWSEC_keyHashSeal            "1.3.14.3.2.23"
1399 #define szOID_OIWSEC_md2RSASign             "1.3.14.3.2.24"
1400 #define szOID_OIWSEC_md5RSASign             "1.3.14.3.2.25"
1401 #define szOID_OIWSEC_sha1                   "1.3.14.3.2.26"
1402 #define szOID_OIWSEC_dsaSHA1                "1.3.14.3.2.27"
1403 #define szOID_OIWSEC_dsaCommSHA1            "1.3.14.3.2.28"
1404 #define szOID_OIWSEC_sha1RSASign            "1.3.14.3.2.29"
1405 #define szOID_OIWDIR                        "1.3.14.7.2"
1406 #define szOID_OIWDIR_CRPT                   "1.3.14.7.2.1"
1407 #define szOID_OIWDIR_HASH                   "1.3.14.7.2.2"
1408 #define szOID_OIWDIR_SIGN                   "1.3.14.7.2.3"
1409 #define szOID_OIWDIR_md2                    "1.3.14.7.2.2.1"
1410 #define szOID_OIWDIR_md2RSA                 "1.3.14.7.2.3.1"
1411 #define szOID_INFOSEC                       "2.16.840.1.101.2.1"
1412 #define szOID_INFOSEC_sdnsSignature         "2.16.840.1.101.2.1.1.1"
1413 #define szOID_INFOSEC_mosaicSignature       "2.16.840.1.101.2.1.1.2"
1414 #define szOID_INFOSEC_sdnsConfidentiality   "2.16.840.1.101.2.1.1.3"
1415 #define szOID_INFOSEC_mosaicConfidentiality "2.16.840.1.101.2.1.1.4"
1416 #define szOID_INFOSEC_sdnsIntegrity         "2.16.840.1.101.2.1.1.5"
1417 #define szOID_INFOSEC_mosaicIntegrity       "2.16.840.1.101.2.1.1.6"
1418 #define szOID_INFOSEC_sdnsTokenProtection   "2.16.840.1.101.2.1.1.7"
1419 #define szOID_INFOSEC_mosaicTokenProtection "2.16.840.1.101.2.1.1.8"
1420 #define szOID_INFOSEC_sdnsKeyManagement     "2.16.840.1.101.2.1.1.9"
1421 #define szOID_INFOSEC_mosaicKeyManagement   "2.16.840.1.101.2.1.1.10"
1422 #define szOID_INFOSEC_sdnsKMandSig          "2.16.840.1.101.2.1.1.11"
1423 #define szOID_INFOSEC_mosaicKMandSig        "2.16.840.1.101.2.1.1.12"
1424 #define szOID_INFOSEC_SuiteASignature       "2.16.840.1.101.2.1.1.13"
1425 #define szOID_INFOSEC_SuiteAConfidentiality "2.16.840.1.101.2.1.1.14"
1426 #define szOID_INFOSEC_SuiteAIntegrity       "2.16.840.1.101.2.1.1.15"
1427 #define szOID_INFOSEC_SuiteATokenProtection "2.16.840.1.101.2.1.1.16"
1428 #define szOID_INFOSEC_SuiteAKeyManagement   "2.16.840.1.101.2.1.1.17"
1429 #define szOID_INFOSEC_SuiteAKMandSig        "2.16.840.1.101.2.1.1.18"
1430 #define szOID_INFOSEC_mosaicUpdatedSig      "2.16.840.1.101.2.1.1.19"
1431 #define szOID_INFOSEC_mosaicKMandUpdSig     "2.16.840.1.101.2.1.1.20"
1432 #define szOID_INFOSEC_mosaicUpdateInteg     "2.16.840.1.101.2.1.1.21"
1433 #define szOID_COMMON_NAME                   "2.5.4.3"
1434 #define szOID_SUR_NAME                      "2.5.4.4"
1435 #define szOID_DEVICE_SERIAL_NUMBER          "2.5.4.5"
1436 #define szOID_COUNTRY_NAME                  "2.5.4.6"
1437 #define szOID_LOCALITY_NAME                 "2.5.4.7"
1438 #define szOID_STATE_OR_PROVINCE_NAME        "2.5.4.8"
1439 #define szOID_STREET_ADDRESS                "2.5.4.9"
1440 #define szOID_ORGANIZATION_NAME             "2.5.4.10"
1441 #define szOID_ORGANIZATIONAL_UNIT_NAME      "2.5.4.11"
1442 #define szOID_TITLE                         "2.5.4.12"
1443 #define szOID_DESCRIPTION                   "2.5.4.13"
1444 #define szOID_SEARCH_GUIDE                  "2.5.4.14"
1445 #define szOID_BUSINESS_CATEGORY             "2.5.4.15"
1446 #define szOID_POSTAL_ADDRESS                "2.5.4.16"
1447 #define szOID_POSTAL_CODE                   "2.5.4.17"
1448 #define szOID_POST_OFFICE_BOX               "2.5.4.18"
1449 #define szOID_PHYSICAL_DELIVERY_OFFICE_NAME "2.5.4.19"
1450 #define szOID_TELEPHONE_NUMBER              "2.5.4.20"
1451 #define szOID_TELEX_NUMBER                  "2.5.4.21"
1452 #define szOID_TELETEXT_TERMINAL_IDENTIFIER  "2.5.4.22"
1453 #define szOID_FACSIMILE_TELEPHONE_NUMBER    "2.5.4.23"
1454 #define szOID_X21_ADDRESS                   "2.5.4.24"
1455 #define szOID_INTERNATIONAL_ISDN_NUMBER     "2.5.4.25"
1456 #define szOID_REGISTERED_ADDRESS            "2.5.4.26"
1457 #define szOID_DESTINATION_INDICATOR         "2.5.4.27"
1458 #define szOID_PREFERRED_DELIVERY_METHOD     "2.5.4.28"
1459 #define szOID_PRESENTATION_ADDRESS          "2.5.4.29"
1460 #define szOID_SUPPORTED_APPLICATION_CONTEXT "2.5.4.30"
1461 #define szOID_MEMBER                        "2.5.4.31"
1462 #define szOID_OWNER                         "2.5.4.32"
1463 #define szOID_ROLE_OCCUPANT                 "2.5.4.33"
1464 #define szOID_SEE_ALSO                      "2.5.4.34"
1465 #define szOID_USER_PASSWORD                 "2.5.4.35"
1466 #define szOID_USER_CERTIFICATE              "2.5.4.36"
1467 #define szOID_CA_CERTIFICATE                "2.5.4.37"
1468 #define szOID_AUTHORITY_REVOCATION_LIST     "2.5.4.38"
1469 #define szOID_CERTIFICATE_REVOCATION_LIST   "2.5.4.39"
1470 #define szOID_CROSS_CERTIFICATE_PAIR        "2.5.4.40"
1471 #define szOID_GIVEN_NAME                    "2.5.4.42"
1472 #define szOID_INITIALS                      "2.5.4.43"
1473 #define szOID_DN_QUALIFIER                  "2.5.4.46"
1474 #define szOID_AUTHORITY_KEY_IDENTIFIER      "2.5.29.1"
1475 #define szOID_KEY_ATTRIBUTES                "2.5.29.2"
1476 #define szOID_CERT_POLICIES_95              "2.5.29.3"
1477 #define szOID_KEY_USAGE_RESTRICTION         "2.5.29.4"
1478 #define szOID_LEGACY_POLICY_MAPPINGS        "2.5.29.5"
1479 #define szOID_SUBJECT_ALT_NAME              "2.5.29.7"
1480 #define szOID_ISSUER_ALT_NAME               "2.5.29.8"
1481 #define szOID_SUBJECT_DIR_ATTRS             "2.5.29.9"
1482 #define szOID_BASIC_CONSTRAINTS             "2.5.29.10"
1483 #define szOID_SUBJECT_KEY_IDENTIFIER        "2.5.29.14"
1484 #define szOID_KEY_USAGE                     "2.5.29.15"
1485 #define szOID_PRIVATEKEY_USAGE_PERIOD       "2.5.29.16"
1486 #define szOID_SUBJECT_ALT_NAME2             "2.5.29.17"
1487 #define szOID_ISSUER_ALT_NAME2              "2.5.29.18"
1488 #define szOID_BASIC_CONSTRAINTS2            "2.5.29.19"
1489 #define szOID_CRL_NUMBER                    "2.5.29.20"
1490 #define szOID_CRL_REASON_CODE               "2.5.29.21"
1491 #define szOID_REASON_CODE_HOLD              "2.5.29.23"
1492 #define szOID_DELTA_CRL_INDICATOR           "2.5.29.27"
1493 #define szOID_ISSUING_DIST_POINT            "2.5.29.28"
1494 #define szOID_NAME_CONSTRAINTS              "2.5.29.30"
1495 #define szOID_CRL_DIST_POINTS               "2.5.29.31"
1496 #define szOID_CERT_POLICIES                 "2.5.29.32"
1497 #define szOID_ANY_CERT_POLICY               "2.5.29.32.0"
1498 #define szOID_POLICY_MAPPINGS               "2.5.29.33"
1499 #define szOID_AUTHORITY_KEY_IDENTIFIER2     "2.5.29.35"
1500 #define szOID_POLICY_CONSTRAINTS            "2.5.29.36"
1501 #define szOID_ENHANCED_KEY_USAGE            "2.5.29.37"
1502 #define szOID_FRESHEST_CRL                  "2.5.29.46"
1503 #define szOID_DOMAIN_COMPONENT              "0.9.2342.19200300.100.1.25"
1504 #define szOID_PKCS_12_FRIENDLY_NAME_ATTR     "1.2.840.113549.1.9.20"
1505 #define szOID_PKCS_12_LOCAL_KEY_ID           "1.2.840.113549.1.9.21"
1506 #define szOID_CERT_EXTENSIONS                "1.3.6.1.4.1.311.2.1.14"
1507 #define szOID_NEXT_UPDATE_LOCATION           "1.3.6.1.4.1.311.10.2"
1508 #define szOID_REMOVE_CERTIFICATE             "1.3.6.1.4.1.311.10.8.1"
1509 #define szOID_CROSS_CERT_DIST_POINTS         "1.3.6.1.4.1.311.10.9.1"
1510 #define szOID_CTL                            "1.3.6.1.4.1.311.10.10.1"
1511 #define szOID_SORTED_CTL                     "1.3.6.1.4.1.311.10.10.1.1"
1512 #define szOID_ANY_APPLICATION_POLICY         "1.3.6.1.4.1.311.10.12.1"
1513 #define szOID_RENEWAL_CERTIFICATE            "1.3.6.1.4.1.311.13.1"
1514 #define szOID_ENROLLMENT_NAME_VALUE_PAIR     "1.3.6.1.4.1.311.13.2.1"
1515 #define szOID_ENROLLMENT_CSP_PROVIDER        "1.3.6.1.4.1.311.13.2.2"
1516 #define szOID_OS_VERSION                     "1.3.6.1.4.1.311.13.2.3"
1517 #define szOID_PKCS_12_KEY_PROVIDER_NAME_ATTR "1.3.6.1.4.1.311.17.1"
1518 #define szOID_LOCAL_MACHINE_KEYSET           "1.3.6.1.4.1.311.17.2"
1519 #define szOID_AUTO_ENROLL_CTL_USAGE          "1.3.6.1.4.1.311.20.1"
1520 #define szOID_ENROLL_CERTTYPE_EXTENSION      "1.3.6.1.4.1.311.20.2"
1521 #define szOID_ENROLLMENT_AGENT               "1.3.6.1.4.1.311.20.2.1"
1522 #define szOID_CERT_MANIFOLD                  "1.3.6.1.4.1.311.20.3"
1523 #define szOID_CERTSRV_PREVIOUS_CERT_HASH     "1.3.6.1.4.1.311.21.2"
1524 #define szOID_CRL_VIRTUAL_BASE               "1.3.6.1.4.1.311.21.3"
1525 #define szOID_CRL_NEXT_PUBLISH               "1.3.6.1.4.1.311.21.4"
1526 #define szOID_KP_CA_EXCHANGE                 "1.3.6.1.4.1.311.21.5"
1527 #define szOID_KP_KEY_RECOVERY_AGENT          "1.3.6.1.4.1.311.21.6"
1528 #define szOID_CERTIFICATE_TEMPLATE           "1.3.6.1.4.1.311.21.7"
1529 #define szOID_ENTERPRISE_OID_ROOT            "1.3.6.1.4.1.311.21.8"
1530 #define szOID_RDN_DUMMY_SIGNER               "1.3.6.1.4.1.311.21.9"
1531 #define szOID_APPLICATION_CERT_POLICIES      "1.3.6.1.4.1.311.21.10"
1532 #define szOID_APPLICATION_POLICY_MAPPINGS    "1.3.6.1.4.1.311.21.11"
1533 #define szOID_APPLICATION_POLICY_CONSTRAINTS "1.3.6.1.4.1.311.21.12"
1534 #define szOID_ARCHIVED_KEY_ATTR              "1.3.6.1.4.1.311.21.13"
1535 #define szOID_CRL_SELF_CDP                   "1.3.6.1.4.1.311.21.14"
1536 #define szOID_REQUIRE_CERT_CHAIN_POLICY      "1.3.6.1.4.1.311.21.15"
1537 #define szOID_ARCHIVED_KEY_CERT_HASH         "1.3.6.1.4.1.311.21.16"
1538 #define szOID_ISSUED_CERT_HASH               "1.3.6.1.4.1.311.21.17"
1539 #define szOID_DS_EMAIL_REPLICATION           "1.3.6.1.4.1.311.21.19"
1540 #define szOID_REQUEST_CLIENT_INFO            "1.3.6.1.4.1.311.21.20"
1541 #define szOID_ENCRYPTED_KEY_HASH             "1.3.6.1.4.1.311.21.21"
1542 #define szOID_CERTSRV_CROSSCA_VERSION        "1.3.6.1.4.1.311.21.22"
1543 #define szOID_KEYID_RDN                      "1.3.6.1.4.1.311.10.7.1"
1544 #define szOID_PKIX                           "1.3.6.1.5.5.7"
1545 #define szOID_PKIX_PE                        "1.3.6.1.5.5.7.1"
1546 #define szOID_AUTHORITY_INFO_ACCESS          "1.3.6.1.5.5.7.1.1"
1547 #define szOID_PKIX_POLICY_QUALIFIER_CPS      "1.3.6.1.5.5.7.2.1"
1548 #define szOID_PKIX_POLICY_QUALIFIER_USERNOTICE "1.3.6.1.5.5.7.2.2"
1549 #define szOID_PKIX_KP                        "1.3.6.1.5.5.7.3"
1550 #define szOID_PKIX_KP_SERVER_AUTH            "1.3.6.1.5.5.7.3.1"
1551 #define szOID_PKIX_KP_CLIENT_AUTH            "1.3.6.1.5.5.7.3.2"
1552 #define szOID_PKIX_KP_CODE_SIGNING           "1.3.6.1.5.5.7.3.3"
1553 #define szOID_PKIX_KP_EMAIL_PROTECTION       "1.3.6.1.5.5.7.3.4"
1554 #define szOID_PKIX_KP_IPSEC_END_SYSTEM       "1.3.6.1.5.5.7.3.5"
1555 #define szOID_PKIX_KP_IPSEC_TUNNEL           "1.3.6.1.5.5.7.3.6"
1556 #define szOID_PKIX_KP_IPSEC_USER             "1.3.6.1.5.5.7.3.7"
1557 #define szOID_PKIX_KP_TIMESTAMP_SIGNING      "1.3.6.1.5.5.7.3.8"
1558 #define szOID_IPSEC_KP_IKE_INTERMEDIATE      "1.3.6.1.5.5.8.2.2"
1559
1560 #ifndef szOID_SERIALIZED
1561 #define szOID_SERIALIZED                     "1.3.6.1.4.1.311.10.3.3.1"
1562 #endif
1563
1564 #ifndef szOID_NT_PRINCIPAL_NAME
1565 #define szOID_NT_PRINCIPAL_NAME              "1.3.6.1.4.1.311.20.2.3"
1566 #endif
1567
1568 #ifndef szOID_CERTSRV_CA_VERSION
1569 #define szOID_CERTSRV_CA_VERSION             "1.3.6.1.4.1.311.21.1"
1570 #endif
1571
1572 #ifndef szOID_PRODUCT_UPDATE
1573 #define szOID_PRODUCT_UPDATE                 "1.3.6.1.4.1.311.31.1"
1574 #endif
1575
1576 #define CRYPT_ENCODE_DECODE_NONE             0
1577 #define X509_CERT                            ((LPCSTR)1)
1578 #define X509_CERT_TO_BE_SIGNED               ((LPCSTR)2)
1579 #define X509_CERT_CRL_TO_BE_SIGNED           ((LPCSTR)3)
1580 #define X509_CERT_REQUEST_TO_BE_SIGNED       ((LPCSTR)4)
1581 #define X509_EXTENSIONS                      ((LPCSTR)5)
1582 #define X509_NAME_VALUE                      ((LPCSTR)6)
1583 #define X509_ANY_STRING                      X509_NAME_VALUE
1584 #define X509_NAME                            ((LPCSTR)7)
1585 #define X509_PUBLIC_KEY_INFO                 ((LPCSTR)8)
1586 #define X509_AUTHORITY_KEY_ID                ((LPCSTR)9)
1587 #define X509_KEY_ATTRIBUTES                  ((LPCSTR)10)
1588 #define X509_KEY_USAGE_RESTRICTION           ((LPCSTR)11)
1589 #define X509_ALTERNATE_NAME                  ((LPCSTR)12)
1590 #define X509_BASIC_CONSTRAINTS               ((LPCSTR)13)
1591 #define X509_KEY_USAGE                       ((LPCSTR)14)
1592 #define X509_BASIC_CONSTRAINTS2              ((LPCSTR)15)
1593 #define X509_CERT_POLICIES                   ((LPCSTR)16)
1594 #define PKCS_UTC_TIME                        ((LPCSTR)17)
1595 #define PKCS_TIME_REQUEST                    ((LPCSTR)18)
1596 #define RSA_CSP_PUBLICKEYBLOB                ((LPCSTR)19)
1597 #define X509_UNICODE_NAME                    ((LPCSTR)20)
1598 #define X509_KEYGEN_REQUEST_TO_BE_SIGNED     ((LPCSTR)21)
1599 #define PKCS_ATTRIBUTE                       ((LPCSTR)22)
1600 #define PKCS_CONTENT_INFO_SEQUENCE_OF_ANY    ((LPCSTR)23)
1601 #define X509_UNICODE_NAME_VALUE              ((LPCSTR)24)
1602 #define X509_UNICODE_ANY_STRING              X509_UNICODE_NAME_VALUE
1603 #define X509_OCTET_STRING                    ((LPCSTR)25)
1604 #define X509_BITS                            ((LPCSTR)26)
1605 #define X509_INTEGER                         ((LPCSTR)27)
1606 #define X509_MULTI_BYTE_INTEGER              ((LPCSTR)28)
1607 #define X509_ENUMERATED                      ((LPCSTR)29)
1608 #define X509_CRL_REASON_CODE                 X509_ENUMERATED
1609 #define X509_CHOICE_OF_TIME                  ((LPCSTR)30)
1610 #define X509_AUTHORITY_KEY_ID2               ((LPCSTR)31)
1611 #define X509_AUTHORITY_INFO_ACCESS           ((LPCSTR)32)
1612 #define PKCS_CONTENT_INFO                    ((LPCSTR)33)
1613 #define X509_SEQUENCE_OF_ANY                 ((LPCSTR)34)
1614 #define X509_CRL_DIST_POINTS                 ((LPCSTR)35)
1615 #define X509_ENHANCED_KEY_USAGE              ((LPCSTR)36)
1616 #define PKCS_CTL                             ((LPCSTR)37)
1617 #define X509_MULTI_BYTE_UINT                 ((LPCSTR)38)
1618 #define X509_DSS_PUBLICKEY                   X509_MULTI_BYTE_UINT
1619 #define X509_DSS_PARAMETERS                  ((LPCSTR)39)
1620 #define X509_DSS_SIGNATURE                   ((LPCSTR)40)
1621 #define PKCS_RC2_CBC_PARAMETERS              ((LPCSTR)41)
1622 #define PKCS_SMIME_CAPABILITIES              ((LPCSTR)42)
1623 #define PKCS_RSA_PRIVATE_KEY                 ((LPCSTR)43)
1624 #define PKCS_PRIVATE_KEY_INFO                ((LPCSTR)44)
1625 #define PKCS_ENCRYPTED_PRIVATE_KEY_INFO      ((LPCSTR)45)
1626 #define X509_PKIX_POLICY_QUALIFIER_USERNOTICE ((LPCSTR)46)
1627 #define X509_DH_PUBLICKEY                    X509_MULTI_BYTE_UINT
1628 #define X509_DH_PARAMETERS                   ((LPCSTR)47)
1629 #define PKCS_ATTRIBUTES                      ((LPCSTR)48)
1630 #define PKCS_SORTED_CTL                      ((LPCSTR)49)
1631 #define X942_DH_PARAMETERS                   ((LPCSTR)50)
1632 #define X509_BITS_WITHOUT_TRAILING_ZEROES    ((LPCSTR)51)
1633 #define X942_OTHER_INFO                      ((LPCSTR)52)
1634 #define X509_CERT_PAIR                       ((LPCSTR)53)
1635 #define X509_ISSUING_DIST_POINT              ((LPCSTR)54)
1636 #define X509_NAME_CONSTRAINTS                ((LPCSTR)55)
1637 #define X509_POLICY_MAPPINGS                 ((LPCSTR)56)
1638 #define X509_POLICY_CONSTRAINTS              ((LPCSTR)57)
1639 #define X509_CROSS_CERT_DIST_POINTS          ((LPCSTR)58)
1640 #define CMC_DATA                             ((LPCSTR)59)
1641 #define CMC_RESPONSE                         ((LPCSTR)60)
1642 #define CMC_STATUS                           ((LPCSTR)61)
1643 #define CMC_ADD_EXTENSIONS                   ((LPCSTR)62)
1644 #define CMC_ADD_ATTRIBUTES                   ((LPCSTR)63)
1645 #define X509_CERTIFICATE_TEMPLATE            ((LPCSTR)64)
1646 #define PKCS7_SIGNER_INFO                    ((LPCSTR)500)
1647 #define CMS_SIGNER_INFO                      ((LPCSTR)501)
1648
1649 /* encode/decode flags */
1650 #define CRYPT_ENCODE_NO_SIGNATURE_BYTE_REVERSAL_FLAG           0x00008
1651 #define CRYPT_ENCODE_ALLOC_FLAG                                0x08000
1652 #define CRYPT_SORTED_CTL_ENCODE_HASHED_SUBJECT_IDENTIFIER_FLAG 0x10000
1653 #define CRYPT_UNICODE_NAME_ENCODE_ENABLE_T61_UNICODE_FLAG \
1654  CERT_RDN_ENABLE_T61_UNICODE_FLAG
1655 #define CRYPT_UNICODE_NAME_ENCODE_ENABLE_UTF8_UNICODE_FLAG \
1656  CERT_RDN_ENABLE_UTF8_UNICODE_FLAG
1657 #define CRYPT_UNICODE_NAME_ENCODE_DISABLE_CHECK_TYPE_FLAG \
1658  CERT_RDN_DISABLE_CHECK_TYPE_FLAG
1659
1660 #define CRYPT_DECODE_NOCOPY_FLAG                               0x00001
1661 #define CRYPT_DECODE_TO_BE_SIGNED_FLAG                         0x00002
1662 #define CRYPT_DECODE_SHARE_OID_STRING_FLAG                     0x00004
1663 #define CRYPT_DECODE_NO_SIGNATURE_BYTE_REVERSAL_FLAG           0x00008
1664 #define CRYPT_DECODE_ALLOC_FLAG                                0x08000
1665 #define CRYPT_UNICODE_NAME_DECODE_DISABLE_IE4_UTF8_FLAG \
1666  CERT_RDN_DISABLE_IE4_UTF8_FLAG
1667
1668 /* function declarations */
1669 /* advapi32.dll */
1670 BOOL WINAPI CryptAcquireContextA(HCRYPTPROV *phProv, LPCSTR pszContainer,
1671                                    LPCSTR pszProvider, DWORD dwProvType,
1672                                    DWORD dwFlags);
1673 BOOL WINAPI CryptAcquireContextW (HCRYPTPROV *phProv, LPCWSTR pszContainer,
1674                 LPCWSTR pszProvider, DWORD dwProvType, DWORD dwFlags);
1675 #define CryptAcquireContext WINELIB_NAME_AW(CryptAcquireContext)
1676 BOOL WINAPI CryptGenRandom (HCRYPTPROV hProv, DWORD dwLen, BYTE *pbBuffer);
1677 BOOL WINAPI CryptContextAddRef (HCRYPTPROV hProv, DWORD *pdwReserved, DWORD dwFlags);
1678 BOOL WINAPI CryptCreateHash (HCRYPTPROV hProv, ALG_ID Algid, HCRYPTKEY hKey,
1679                 DWORD dwFlags, HCRYPTHASH *phHash);
1680 BOOL WINAPI CryptDecrypt (HCRYPTKEY hKey, HCRYPTHASH hHash, BOOL Final,
1681                 DWORD dwFlags, BYTE *pbData, DWORD *pdwDataLen);
1682 BOOL WINAPI CryptDeriveKey (HCRYPTPROV hProv, ALG_ID Algid, HCRYPTHASH hBaseData,
1683                 DWORD dwFlags, HCRYPTKEY *phKey);
1684 BOOL WINAPI CryptDestroyHash (HCRYPTHASH hHash);
1685 BOOL WINAPI CryptDestroyKey (HCRYPTKEY hKey);
1686 BOOL WINAPI CryptDuplicateKey (HCRYPTKEY hKey, DWORD *pdwReserved, DWORD dwFlags, HCRYPTKEY *phKey);
1687 BOOL WINAPI CryptDuplicateHash (HCRYPTHASH hHash, DWORD *pdwReserved,
1688                 DWORD dwFlags, HCRYPTHASH *phHash);
1689 BOOL WINAPI CryptEncrypt (HCRYPTKEY hKey, HCRYPTHASH hHash, BOOL Final,
1690                 DWORD dwFlags, BYTE *pbData, DWORD *pdwDataLen, DWORD dwBufLen);
1691 BOOL WINAPI CryptEnumProvidersA (DWORD dwIndex, DWORD *pdwReserved,
1692                 DWORD dwFlags, DWORD *pdwProvType, LPSTR pszProvName, DWORD *pcbProvName);
1693 BOOL WINAPI CryptEnumProvidersW (DWORD dwIndex, DWORD *pdwReserved,
1694                 DWORD dwFlags, DWORD *pdwProvType, LPWSTR pszProvName, DWORD *pcbProvName);
1695 #define CryptEnumProviders WINELIB_NAME_AW(CryptEnumProviders)
1696 BOOL WINAPI CryptEnumProviderTypesA (DWORD dwIndex, DWORD *pdwReserved,
1697                 DWORD dwFlags, DWORD *pdwProvType, LPSTR pszTypeName, DWORD *pcbTypeName);
1698 BOOL WINAPI CryptEnumProviderTypesW (DWORD dwIndex, DWORD *pdwReserved,
1699                 DWORD dwFlags, DWORD *pdwProvType, LPWSTR pszTypeName, DWORD *pcbTypeName);
1700 #define CryptEnumProviderTypes WINELIB_NAME_AW(CryptEnumProviderTypes)
1701 BOOL WINAPI CryptExportKey (HCRYPTKEY hKey, HCRYPTKEY hExpKey, DWORD dwBlobType,
1702                 DWORD dwFlags, BYTE *pbData, DWORD *pdwDataLen);
1703 BOOL WINAPI CryptGenKey (HCRYPTPROV hProv, ALG_ID Algid, DWORD dwFlags, HCRYPTKEY *phKey);
1704 BOOL WINAPI CryptGetKeyParam (HCRYPTKEY hKey, DWORD dwParam, BYTE *pbData,
1705                 DWORD *pdwDataLen, DWORD dwFlags);
1706 BOOL WINAPI CryptGetHashParam (HCRYPTHASH hHash, DWORD dwParam, BYTE *pbData,
1707                 DWORD *pdwDataLen, DWORD dwFlags);
1708 BOOL WINAPI CryptGetProvParam (HCRYPTPROV hProv, DWORD dwParam, BYTE *pbData,
1709                 DWORD *pdwDataLen, DWORD dwFlags);
1710 BOOL WINAPI CryptGetDefaultProviderA (DWORD dwProvType, DWORD *pdwReserved,
1711                 DWORD dwFlags, LPSTR pszProvName, DWORD *pcbProvName);
1712 BOOL WINAPI CryptGetDefaultProviderW (DWORD dwProvType, DWORD *pdwReserved,
1713                 DWORD dwFlags, LPWSTR pszProvName, DWORD *pcbProvName);
1714 #define CryptGetDefaultProvider WINELIB_NAME_AW(CryptGetDefaultProvider)
1715 BOOL WINAPI CryptGetUserKey (HCRYPTPROV hProv, DWORD dwKeySpec, HCRYPTKEY *phUserKey);
1716 BOOL WINAPI CryptHashData (HCRYPTHASH hHash, BYTE *pbData, DWORD dwDataLen, DWORD dwFlags);
1717 BOOL WINAPI CryptHashSessionKey (HCRYPTHASH hHash, HCRYPTKEY hKey, DWORD dwFlags);
1718 BOOL WINAPI CryptImportKey (HCRYPTPROV hProv, BYTE *pbData, DWORD dwDataLen,
1719                 HCRYPTKEY hPubKey, DWORD dwFlags, HCRYPTKEY *phKey);
1720 BOOL WINAPI CryptReleaseContext (HCRYPTPROV hProv, DWORD dwFlags);
1721 BOOL WINAPI CryptSetHashParam (HCRYPTHASH hHash, DWORD dwParam, BYTE *pbData, DWORD dwFlags);
1722 BOOL WINAPI CryptSetKeyParam (HCRYPTKEY hKey, DWORD dwParam, BYTE *pbData, DWORD dwFlags);
1723 BOOL WINAPI CryptSetProviderA (LPCSTR pszProvName, DWORD dwProvType);
1724 BOOL WINAPI CryptSetProviderW (LPCWSTR pszProvName, DWORD dwProvType);
1725 #define CryptSetProvider WINELIB_NAME_AW(CryptSetProvider)
1726 BOOL WINAPI CryptSetProviderExA (LPCSTR pszProvName, DWORD dwProvType, DWORD *pdwReserved, DWORD dwFlags);
1727 BOOL WINAPI CryptSetProviderExW (LPCWSTR pszProvName, DWORD dwProvType, DWORD *pdwReserved, DWORD dwFlags);
1728 #define CryptSetProviderEx WINELIB_NAME_AW(CryptSetProviderEx)
1729 BOOL WINAPI CryptSetProvParam (HCRYPTPROV hProv, DWORD dwParam, BYTE *pbData, DWORD dwFlags);
1730 BOOL WINAPI CryptSignHashA (HCRYPTHASH hHash, DWORD dwKeySpec, LPCSTR sDescription,
1731                 DWORD dwFlags, BYTE *pbSignature, DWORD *pdwSigLen);
1732 BOOL WINAPI CryptSignHashW (HCRYPTHASH hHash, DWORD dwKeySpec, LPCWSTR sDescription,
1733                 DWORD dwFlags, BYTE *pbSignature, DWORD *pdwSigLen);
1734 #define CryptSignHash WINELIB_NAME_AW(CryptSignHash)
1735 BOOL WINAPI CryptVerifySignatureA (HCRYPTHASH hHash, BYTE *pbSignature, DWORD dwSigLen,
1736                 HCRYPTKEY hPubKey, LPCSTR sDescription, DWORD dwFlags);
1737 BOOL WINAPI CryptVerifySignatureW (HCRYPTHASH hHash, BYTE *pbSignature, DWORD dwSigLen,
1738                 HCRYPTKEY hPubKey, LPCWSTR sDescription, DWORD dwFlags);
1739 #define CryptVerifySignature WINELIB_NAME_AW(CryptVerifySignature)
1740
1741 /* crypt32.dll functions */
1742 BOOL WINAPI CryptRegisterOIDFunction(DWORD,LPCSTR,LPCSTR,LPCWSTR,LPCSTR);
1743 BOOL WINAPI CryptGetOIDFunctionValue(DWORD dwEncodingType, LPCSTR pszFuncName,
1744                                      LPCSTR pszOID, LPCWSTR szValueName, DWORD *pdwValueType,
1745                                      BYTE *pbValueData, DWORD *pcbValueData);
1746 BOOL WINAPI CryptSetOIDFunctionValue(DWORD dwEncodingType, LPCSTR pszFuncName,
1747                                      LPCSTR pszOID, LPCWSTR pwszValueName, DWORD dwValueType,
1748                                      const BYTE *pbValueData, DWORD cbValueData);
1749 BOOL WINAPI CryptUnregisterOIDFunction(DWORD,LPCSTR,LPCSTR);
1750
1751 LPCSTR WINAPI CertAlgIdToOID(DWORD dwAlgId);
1752 DWORD WINAPI CertOIDToAlgId(LPCSTR pszObjId);
1753
1754 /* cert store functions */
1755 HCERTSTORE WINAPI CertOpenStore(LPCSTR lpszStoreProvider, DWORD dwEncodingType,
1756  HCRYPTPROV hCryptProv, DWORD dwFlags, const void *pvPara);
1757
1758 HCERTSTORE WINAPI CertOpenSystemStoreA(HCRYPTPROV hProv,
1759  LPCSTR szSubSystemProtocol);
1760 HCERTSTORE WINAPI CertOpenSystemStoreW(HCRYPTPROV hProv,
1761  LPCWSTR szSubSystemProtocol);
1762 #define CertOpenSystemStore WINELIB_NAME_AW(CertOpenSystemStore)
1763
1764 PCCERT_CONTEXT WINAPI CertEnumCertificatesInStore(HCERTSTORE hCertStore, PCCERT_CONTEXT pPrev);
1765
1766 BOOL WINAPI CertEnumSystemStoreLocation(DWORD dwFlags, void *pvArg,
1767  PFN_CERT_ENUM_SYSTEM_STORE_LOCATION pfnEnum);
1768
1769 BOOL WINAPI CertEnumSystemStore(DWORD dwFlags, void *pvSystemStoreLocationPara,
1770  void *pvArg, PFN_CERT_ENUM_SYSTEM_STORE pfnEnum);
1771
1772 BOOL WINAPI CertEnumPhysicalStore(const void *pvSystemStore, DWORD dwFlags,
1773  void *pvArg, PFN_CERT_ENUM_PHYSICAL_STORE pfnEnum);
1774
1775 BOOL WINAPI CertSaveStore(HCERTSTORE hCertStore, DWORD dwMsgAndCertEncodingType,
1776              DWORD dwSaveAs, DWORD dwSaveTo, void* pvSaveToPara, DWORD dwFlags);
1777
1778 PCCRL_CONTEXT WINAPI CertCreateCRLContext( DWORD dwCertEncodingType,
1779   const BYTE* pbCrlEncoded, DWORD cbCrlEncoded);
1780
1781 BOOL WINAPI CertAddStoreToCollection(HCERTSTORE hCollectionStore,
1782  HCERTSTORE hSiblingStore, DWORD dwUpdateFlags, DWORD dwPriority);
1783
1784 void WINAPI CertRemoveStoreFromCollection(HCERTSTORE hCollectionStore,
1785  HCERTSTORE hSiblingStore);
1786
1787 PCCERT_CHAIN_CONTEXT WINAPI CertFindChainInStore(HCERTSTORE hCertStore,
1788  DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType,
1789  const void *pvFindPara, PCCERT_CHAIN_CONTEXT pPrevChainContext);
1790
1791 BOOL WINAPI CertVerifyCertificateChainPolicy(LPCSTR szPolicyOID,
1792  PCCERT_CHAIN_CONTEXT pChainContext, PCERT_CHAIN_POLICY_PARA pPolicyPara,
1793  PCERT_CHAIN_POLICY_STATUS pPolicyStatus);
1794
1795 BOOL WINAPI CertCloseStore( HCERTSTORE hCertStore, DWORD dwFlags );
1796
1797 BOOL WINAPI CertFreeCertificateContext( PCCERT_CONTEXT pCertContext );
1798
1799 BOOL WINAPI CertFreeCRLContext( PCCRL_CONTEXT pCrlContext );
1800
1801 BOOL WINAPI CertAddCRLContextToStore( HCERTSTORE hCertStore,
1802  PCCRL_CONTEXT pCrlContext, DWORD dwAddDisposition,
1803  PCCRL_CONTEXT *ppStoreContext );
1804
1805 PCCERT_CONTEXT WINAPI CertFindCertificateInStore( HCERTSTORE hCertStore,
1806  DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType,
1807  const void *pvFindPara, PCCERT_CONTEXT pPrevCertContext );
1808
1809 BOOL WINAPI CryptEncodeObject(DWORD dwCertEncodingType, LPCSTR lpszStructType,
1810  const void *pvStructInfo, BYTE *pbEncoded, DWORD *pcbEncoded);
1811 BOOL WINAPI CryptEncodeObjectEx(DWORD dwCertEncodingType, LPCSTR lpszStructType,
1812  const void *pvStructInfo, DWORD dwFlags, PCRYPT_ENCODE_PARA pEncodePara,
1813  void *pvEncoded, DWORD *pcbEncoded);
1814
1815 BOOL WINAPI CryptDecodeObject(DWORD dwCertEncodingType, LPCSTR lpszStructType,
1816  const BYTE *pbEncoded, DWORD cbEncoded, DWORD dwFlags, void *pvStructInfo,
1817  DWORD *pcbStructInfo);
1818 BOOL WINAPI CryptDecodeObjectEx(DWORD dwCertEncodingType, LPCSTR lpszStructType,
1819  const BYTE *pbEncoded, DWORD cbEncoded, DWORD dwFlags,
1820  PCRYPT_DECODE_PARA pDecodePara, void *pvStructInfo, DWORD *pcbStructInfo);
1821
1822 PCRYPT_ATTRIBUTE WINAPI CertFindAttribute(LPCSTR pszObjId, DWORD cAttr,
1823  CRYPT_ATTRIBUTE rgAttr[]);
1824 PCERT_EXTENSION WINAPI CertFindExtension(LPCSTR pszObjId, DWORD cExtensions,
1825  CERT_EXTENSION rgExtensions[]);
1826 PCERT_RDN_ATTR WINAPI CertFindRDNAttr(LPCSTR pszObjId, PCERT_NAME_INFO pName);
1827
1828 LONG WINAPI CertVerifyTimeValidity(LPFILETIME pTimeToVerify,
1829  PCERT_INFO pCertInfo);
1830
1831 BOOL WINAPI CryptProtectData( DATA_BLOB* pDataIn, LPCWSTR szDataDescr,
1832  DATA_BLOB* pOptionalEntropy, PVOID pvReserved,
1833  CRYPTPROTECT_PROMPTSTRUCT* pPromptStruct, DWORD dwFlags, DATA_BLOB* pDataOut );
1834
1835 BOOL WINAPI CryptUnprotectData( DATA_BLOB* pDataIn, LPWSTR* ppszDataDescr,
1836  DATA_BLOB* pOptionalEntropy, PVOID pvReserved,
1837  CRYPTPROTECT_PROMPTSTRUCT* pPromptStruct, DWORD dwFlags, DATA_BLOB* pDataOut );
1838
1839 #ifdef __cplusplus
1840 }
1841 #endif
1842
1843 #endif