djm@openbsd.org | b52ec0b | 2019-12-13 19:09:10 +0000 | [diff] [blame] | 1 | /* $OpenBSD: ssh-sk.h,v 1.6 2019/12/13 19:09:10 djm Exp $ */ |
djm@openbsd.org | ed3467c | 2019-10-31 21:16:20 +0000 | [diff] [blame] | 2 | /* |
| 3 | * Copyright (c) 2019 Google LLC |
| 4 | * |
| 5 | * Permission to use, copy, modify, and distribute this software for any |
| 6 | * purpose with or without fee is hereby granted, provided that the above |
| 7 | * copyright notice and this permission notice appear in all copies. |
| 8 | * |
| 9 | * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES |
| 10 | * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF |
| 11 | * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR |
| 12 | * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES |
| 13 | * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN |
| 14 | * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF |
| 15 | * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. |
| 16 | */ |
| 17 | |
| 18 | #ifndef _SSH_SK_H |
| 19 | #define _SSH_SK_H 1 |
| 20 | |
| 21 | struct sshbuf; |
| 22 | struct sshkey; |
| 23 | |
djm@openbsd.org | ed3467c | 2019-10-31 21:16:20 +0000 | [diff] [blame] | 24 | /* |
markus@openbsd.org | 7c32b51 | 2019-11-12 19:31:45 +0000 | [diff] [blame] | 25 | * Enroll (generate) a new security-key hosted private key of given type |
| 26 | * via the specified provider middleware. |
djm@openbsd.org | ed3467c | 2019-10-31 21:16:20 +0000 | [diff] [blame] | 27 | * If challenge_buf is NULL then a random 256 bit challenge will be used. |
| 28 | * |
| 29 | * Returns 0 on success or a ssherr.h error code on failure. |
| 30 | * |
| 31 | * If successful and the attest_data buffer is not NULL then attestation |
| 32 | * information is placed there. |
| 33 | */ |
markus@openbsd.org | 7c32b51 | 2019-11-12 19:31:45 +0000 | [diff] [blame] | 34 | int sshsk_enroll(int type, const char *provider_path, const char *application, |
djm@openbsd.org | ed3467c | 2019-10-31 21:16:20 +0000 | [diff] [blame] | 35 | uint8_t flags, struct sshbuf *challenge_buf, struct sshkey **keyp, |
| 36 | struct sshbuf *attest); |
| 37 | |
| 38 | /* |
markus@openbsd.org | fe05a36 | 2019-11-12 19:31:18 +0000 | [diff] [blame] | 39 | * Calculate an ECDSA_SK or ED25519_SK signature using the specified key |
markus@openbsd.org | e03a29e | 2019-11-12 19:30:50 +0000 | [diff] [blame] | 40 | * and provider middleware. |
djm@openbsd.org | ed3467c | 2019-10-31 21:16:20 +0000 | [diff] [blame] | 41 | * |
| 42 | * Returns 0 on success or a ssherr.h error code on failure. |
| 43 | */ |
djm@openbsd.org | b52ec0b | 2019-12-13 19:09:10 +0000 | [diff] [blame] | 44 | int sshsk_sign(const char *provider_path, struct sshkey *key, |
djm@openbsd.org | ed3467c | 2019-10-31 21:16:20 +0000 | [diff] [blame] | 45 | u_char **sigp, size_t *lenp, const u_char *data, size_t datalen, |
| 46 | u_int compat); |
| 47 | |
| 48 | #endif /* _SSH_SK_H */ |
| 49 | |