Go to the documentation of this file.
51 #ifndef MBEDTLS_PKCS11_H
52 #define MBEDTLS_PKCS11_H
54 #if !defined(MBEDTLS_CONFIG_FILE)
57 #include MBEDTLS_CONFIG_FILE
60 #if defined(MBEDTLS_PKCS11_C)
64 #include <pkcs11-helper-1.0/pkcs11h-certificate.h>
66 #if ( defined(__ARMCC_VERSION) || defined(_MSC_VER) ) && \
67 !defined(inline) && !defined(__cplusplus)
68 #define inline __inline
111 pkcs11h_certificate_t pkcs11_cert );
139 int mode,
size_t *olen,
140 const unsigned char *input,
141 unsigned char *output,
142 size_t output_max_len );
163 unsigned int hashlen,
164 const unsigned char *hash,
165 unsigned char *sig );
171 const unsigned char *input,
unsigned char *output,
172 size_t output_max_len )
179 int (*f_rng)(
void *,
unsigned char *,
size_t),
void *p_rng,
181 const unsigned char *hash,
unsigned char *sig )
186 hashlen, hash, sig );
mbedtls_md_type_t
Supported message digests.
struct mbedtls_pkcs11_context mbedtls_pkcs11_context
static size_t mbedtls_ssl_pkcs11_key_len(void *ctx)
static int mbedtls_ssl_pkcs11_sign(void *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, unsigned char *sig)
int mbedtls_pkcs11_sign(mbedtls_pkcs11_context *ctx, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, unsigned char *sig)
Do a private RSA to sign a message digest.
int mbedtls_pkcs11_x509_cert_bind(mbedtls_x509_crt *cert, pkcs11h_certificate_t pkcs11h_cert)
void mbedtls_pkcs11_init(mbedtls_pkcs11_context *ctx)
pkcs11h_certificate_t pkcs11h_cert
static int mbedtls_ssl_pkcs11_decrypt(void *ctx, int mode, size_t *olen, const unsigned char *input, unsigned char *output, size_t output_max_len)
int mbedtls_pkcs11_priv_key_bind(mbedtls_pkcs11_context *priv_key, pkcs11h_certificate_t pkcs11_cert)
Configuration options (set of defines)
int mbedtls_pkcs11_decrypt(mbedtls_pkcs11_context *ctx, int mode, size_t *olen, const unsigned char *input, unsigned char *output, size_t output_max_len)
Do an RSA private key decrypt, then remove the message padding.
void mbedtls_pkcs11_priv_key_free(mbedtls_pkcs11_context *priv_key)
X.509 certificate parsing and writing.