Gecko [ paxlifestyle.com ]

Name	Size	Permission	Date
aes.h	3.23 KB	-rw-r--r--	2026-05-20 00:00
asn1.h	56.38 KB	-rw-r--r--	2026-05-20 00:00
asn1err.h	5.05 KB	-rw-r--r--	2026-05-20 00:00
asn1t.h	37.7 KB	-rw-r--r--	2026-05-20 00:00
async.h	2.95 KB	-rw-r--r--	2026-05-20 00:00
asyncerr.h	739 B	-rw-r--r--	2026-05-20 00:00
bio.h	40.43 KB	-rw-r--r--	2026-05-20 00:00
bioerr.h	2.3 KB	-rw-r--r--	2026-05-20 00:00
blowfish.h	2.09 KB	-rw-r--r--	2026-05-20 00:00
bn.h	21.79 KB	-rw-r--r--	2026-05-20 00:00
bnerr.h	1.3 KB	-rw-r--r--	2026-05-20 00:00
buffer.h	1.55 KB	-rw-r--r--	2026-05-20 00:00
buffererr.h	587 B	-rw-r--r--	2026-05-20 00:00
byteorder.h	8.25 KB	-rw-r--r--	2026-05-20 00:00
camellia.h	3.19 KB	-rw-r--r--	2026-05-20 00:00
cast.h	1.84 KB	-rw-r--r--	2026-05-20 00:00
cmac.h	1.42 KB	-rw-r--r--	2026-05-20 00:00
cmp.h	46.91 KB	-rw-r--r--	2026-05-20 00:00
cmp_util.h	1.59 KB	-rw-r--r--	2026-05-20 00:00
cmperr.h	4.71 KB	-rw-r--r--	2026-05-20 00:00
cms.h	30.37 KB	-rw-r--r--	2026-05-20 00:00
cmserr.h	4.44 KB	-rw-r--r--	2026-05-20 00:00
comp.h	4.59 KB	-rw-r--r--	2026-05-20 00:00
comperr.h	1002 B	-rw-r--r--	2026-05-20 00:00
conf.h	10.14 KB	-rw-r--r--	2026-05-20 00:00
conf_api.h	1.3 KB	-rw-r--r--	2026-05-20 00:00
conferr.h	1.66 KB	-rw-r--r--	2026-05-20 00:00
configuration-x86_64.h	4.43 KB	-rw-r--r--	2026-05-20 00:00
configuration.h	1.55 KB	-rw-r--r--	2026-05-20 00:00
conftypes.h	1.15 KB	-rw-r--r--	2026-05-20 00:00
core.h	7.64 KB	-rw-r--r--	2026-05-20 00:00
core_dispatch.h	45.85 KB	-rw-r--r--	2026-05-20 00:00
core_names.h	29.14 KB	-rw-r--r--	2026-05-20 00:00
core_object.h	1.02 KB	-rw-r--r--	2026-05-20 00:00
crmf.h	19.18 KB	-rw-r--r--	2026-05-20 00:00
crmferr.h	1.81 KB	-rw-r--r--	2026-05-20 00:00
crypto.h	22.58 KB	-rw-r--r--	2026-05-20 00:00
cryptoerr.h	1.94 KB	-rw-r--r--	2026-05-20 00:00
cryptoerr_legacy.h	46.89 KB	-rw-r--r--	2026-05-20 00:00
ct.h	21.72 KB	-rw-r--r--	2026-05-20 00:00
cterr.h	1.21 KB	-rw-r--r--	2026-05-20 00:00
decoder.h	4.79 KB	-rw-r--r--	2026-05-20 00:00
decodererr.h	740 B	-rw-r--r--	2026-05-20 00:00
des.h	7.58 KB	-rw-r--r--	2026-05-20 00:00
dh.h	12.72 KB	-rw-r--r--	2026-05-20 00:00
dherr.h	1.66 KB	-rw-r--r--	2026-05-20 00:00
dsa.h	10.72 KB	-rw-r--r--	2026-05-20 00:00
dsaerr.h	1.14 KB	-rw-r--r--	2026-05-20 00:00
dtls1.h	1.21 KB	-rw-r--r--	2026-05-20 00:00
e_os2.h	8.25 KB	-rw-r--r--	2026-05-20 00:00
e_ostime.h	1.12 KB	-rw-r--r--	2026-05-20 00:00
ebcdic.h	1 KB	-rw-r--r--	2026-05-20 00:00
ec.h	60.85 KB	-rw-r--r--	2026-05-20 00:00
ecdh.h	361 B	-rw-r--r--	2026-05-20 00:00
ecdsa.h	361 B	-rw-r--r--	2026-05-20 00:00
ecerr.h	3.28 KB	-rw-r--r--	2026-05-20 00:00
encoder.h	4.46 KB	-rw-r--r--	2026-05-20 00:00
encodererr.h	741 B	-rw-r--r--	2026-05-20 00:00
engine.h	0 B	-rw-r--r--	2026-05-20 00:00
err.h	19.96 KB	-rw-r--r--	2026-05-20 00:00
ess.h	8.5 KB	-rw-r--r--	2026-05-20 00:00
esserr.h	982 B	-rw-r--r--	2026-05-20 00:00
evp.h	93.39 KB	-rw-r--r--	2026-05-20 00:00
evperr.h	5.4 KB	-rw-r--r--	2026-05-20 00:00
fips.h	601 B	-rw-r--r--	2026-05-20 00:00
fips_names.h	1.6 KB	-rw-r--r--	2026-05-20 00:00
fipskey.h	1.21 KB	-rw-r--r--	2026-05-20 00:00
hmac.h	1.85 KB	-rw-r--r--	2026-05-20 00:00
hpke.h	5.94 KB	-rw-r--r--	2026-05-20 00:00
http.h	4.61 KB	-rw-r--r--	2026-05-20 00:00
httperr.h	1.81 KB	-rw-r--r--	2026-05-20 00:00
idea.h	2.23 KB	-rw-r--r--	2026-05-20 00:00
indicator.h	818 B	-rw-r--r--	2026-05-20 00:00
kdf.h	4.98 KB	-rw-r--r--	2026-05-20 00:00
kdferr.h	480 B	-rw-r--r--	2026-05-20 00:00
lhash.h	32.59 KB	-rw-r--r--	2026-05-20 00:00
macros.h	10.47 KB	-rw-r--r--	2026-05-20 00:00
md2.h	1.3 KB	-rw-r--r--	2026-05-20 00:00
md4.h	1.57 KB	-rw-r--r--	2026-05-20 00:00
md5.h	1.57 KB	-rw-r--r--	2026-05-20 00:00
mdc2.h	1.28 KB	-rw-r--r--	2026-05-20 00:00
ml_kem.h	959 B	-rw-r--r--	2026-05-20 00:00
modes.h	7.94 KB	-rw-r--r--	2026-05-20 00:00
obj_mac.h	282.74 KB	-rw-r--r--	2026-05-20 00:00
objects.h	7.39 KB	-rw-r--r--	2026-05-20 00:00
objectserr.h	686 B	-rw-r--r--	2026-05-20 00:00
ocsp.h	27.2 KB	-rw-r--r--	2026-05-20 00:00
ocsperr.h	1.6 KB	-rw-r--r--	2026-05-20 00:00
opensslconf.h	510 B	-rw-r--r--	2026-05-20 00:00
opensslv.h	3.37 KB	-rw-r--r--	2026-05-20 00:00
ossl_typ.h	561 B	-rw-r--r--	2026-05-20 00:00
param_build.h	2.31 KB	-rw-r--r--	2026-05-20 00:00
params.h	6.89 KB	-rw-r--r--	2026-05-20 00:00
pem.h	22.14 KB	-rw-r--r--	2026-05-20 00:00
pem2.h	523 B	-rw-r--r--	2026-05-20 00:00
pemerr.h	1.79 KB	-rw-r--r--	2026-05-20 00:00
pkcs12.h	16.61 KB	-rw-r--r--	2026-05-20 00:00
pkcs12err.h	1.39 KB	-rw-r--r--	2026-05-20 00:00
pkcs7.h	21.36 KB	-rw-r--r--	2026-05-20 00:00
pkcs7err.h	2.19 KB	-rw-r--r--	2026-05-20 00:00
prov_ssl.h	969 B	-rw-r--r--	2026-05-20 00:00
proverr.h	6.26 KB	-rw-r--r--	2026-05-20 00:00
provider.h	3.3 KB	-rw-r--r--	2026-05-20 00:00
quic.h	2.05 KB	-rw-r--r--	2026-05-20 00:00
rand.h	3.96 KB	-rw-r--r--	2026-05-20 00:00
randerr.h	2.43 KB	-rw-r--r--	2026-05-20 00:00
rc2.h	1.73 KB	-rw-r--r--	2026-05-20 00:00
rc4.h	1.05 KB	-rw-r--r--	2026-05-20 00:00
rc5.h	2.1 KB	-rw-r--r--	2026-05-20 00:00
ripemd.h	1.5 KB	-rw-r--r--	2026-05-20 00:00
rsa.h	21.78 KB	-rw-r--r--	2026-05-20 00:00
rsaerr.h	3.77 KB	-rw-r--r--	2026-05-20 00:00
safestack.h	28.47 KB	-rw-r--r--	2026-05-20 00:00
seed.h	3.53 KB	-rw-r--r--	2026-05-20 00:00
self_test.h	4.61 KB	-rw-r--r--	2026-05-20 00:00
sha.h	4.3 KB	-rw-r--r--	2026-05-20 00:00
srp.h	14.8 KB	-rw-r--r--	2026-05-20 00:00
srtp.h	1.84 KB	-rw-r--r--	2026-05-20 00:00
ssl.h	119.35 KB	-rw-r--r--	2026-05-20 00:00
ssl2.h	625 B	-rw-r--r--	2026-05-20 00:00
ssl3.h	12.45 KB	-rw-r--r--	2026-05-20 00:00
sslerr.h	15.05 KB	-rw-r--r--	2026-05-20 00:00
sslerr_legacy.h	17.84 KB	-rw-r--r--	2026-05-20 00:00
stack.h	3.05 KB	-rw-r--r--	2026-05-20 00:00
store.h	13.68 KB	-rw-r--r--	2026-05-20 00:00
storeerr.h	1.66 KB	-rw-r--r--	2026-05-20 00:00
symhacks.h	1.08 KB	-rw-r--r--	2026-05-20 00:00
thread.h	865 B	-rw-r--r--	2026-05-20 00:00
tls1.h	61.84 KB	-rw-r--r--	2026-05-20 00:00
trace.h	10.57 KB	-rw-r--r--	2026-05-20 00:00
ts.h	18.96 KB	-rw-r--r--	2026-05-20 00:00
tserr.h	2.03 KB	-rw-r--r--	2026-05-20 00:00
txt_db.h	1.6 KB	-rw-r--r--	2026-05-20 00:00
types.h	7.13 KB	-rw-r--r--	2026-05-20 00:00
ui.h	18.08 KB	-rw-r--r--	2026-05-20 00:00
uierr.h	1.04 KB	-rw-r--r--	2026-05-20 00:00
whrlpool.h	1.64 KB	-rw-r--r--	2026-05-20 00:00
x509.h	65.91 KB	-rw-r--r--	2026-05-20 00:00
x509_acert.h	21.41 KB	-rw-r--r--	2026-05-20 00:00
x509_vfy.h	46.07 KB	-rw-r--r--	2026-05-20 00:00
x509err.h	2.26 KB	-rw-r--r--	2026-05-20 00:00
x509v3.h	126.32 KB	-rw-r--r--	2026-05-20 00:00
x509v3err.h	3.49 KB	-rw-r--r--	2026-05-20 00:00

Rename

/*
 * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the Apache License 2.0 (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */

/* APIs and data structures for HPKE (RFC9180)  */
#ifndef OSSL_HPKE_H
#define OSSL_HPKE_H
#pragma once

#include <openssl/types.h>

/* HPKE modes */
#define OSSL_HPKE_MODE_BASE 0 /* Base mode  */
#define OSSL_HPKE_MODE_PSK 1 /* Pre-shared key mode */
#define OSSL_HPKE_MODE_AUTH 2 /* Authenticated mode */
#define OSSL_HPKE_MODE_PSKAUTH 3 /* PSK+authenticated mode */

/*
 * Max for ikm, psk, pskid, info and exporter contexts.
 * RFC9180, section 7.2.1 RECOMMENDS 64 octets but we have test vectors from
 * Appendix A.6.1 with a 66 octet IKM so we'll allow that.
 */
#define OSSL_HPKE_MAX_PARMLEN 66
#define OSSL_HPKE_MIN_PSKLEN 32
#define OSSL_HPKE_MAX_INFOLEN 1024

/*
 * The (16bit) HPKE algorithm ID IANA codepoints
 * If/when new IANA codepoints are added there are tables in
 * crypto/hpke/hpke_util.c that must also be updated.
 */
#define OSSL_HPKE_KEM_ID_RESERVED 0x0000 /* not used */
#define OSSL_HPKE_KEM_ID_P256 0x0010 /* NIST P-256 */
#define OSSL_HPKE_KEM_ID_P384 0x0011 /* NIST P-384 */
#define OSSL_HPKE_KEM_ID_P521 0x0012 /* NIST P-521 */
#define OSSL_HPKE_KEM_ID_X25519 0x0020 /* Curve25519 */
#define OSSL_HPKE_KEM_ID_X448 0x0021 /* Curve448 */

#define OSSL_HPKE_KDF_ID_RESERVED 0x0000 /* not used */
#define OSSL_HPKE_KDF_ID_HKDF_SHA256 0x0001 /* HKDF-SHA256 */
#define OSSL_HPKE_KDF_ID_HKDF_SHA384 0x0002 /* HKDF-SHA384 */
#define OSSL_HPKE_KDF_ID_HKDF_SHA512 0x0003 /* HKDF-SHA512 */

#define OSSL_HPKE_AEAD_ID_RESERVED 0x0000 /* not used */
#define OSSL_HPKE_AEAD_ID_AES_GCM_128 0x0001 /* AES-GCM-128 */
#define OSSL_HPKE_AEAD_ID_AES_GCM_256 0x0002 /* AES-GCM-256 */
#define OSSL_HPKE_AEAD_ID_CHACHA_POLY1305 0x0003 /* Chacha20-Poly1305 */
#define OSSL_HPKE_AEAD_ID_EXPORTONLY 0xFFFF /* export-only fake ID */

/* strings for suite components */
#define OSSL_HPKE_KEMSTR_P256 "P-256" /* KEM id 0x10 */
#define OSSL_HPKE_KEMSTR_P384 "P-384" /* KEM id 0x11 */
#define OSSL_HPKE_KEMSTR_P521 "P-521" /* KEM id 0x12 */
#define OSSL_HPKE_KEMSTR_X25519 "X25519" /* KEM id 0x20 */
#define OSSL_HPKE_KEMSTR_X448 "X448" /* KEM id 0x21 */
#define OSSL_HPKE_KDFSTR_256 "hkdf-sha256" /* KDF id 1 */
#define OSSL_HPKE_KDFSTR_384 "hkdf-sha384" /* KDF id 2 */
#define OSSL_HPKE_KDFSTR_512 "hkdf-sha512" /* KDF id 3 */
#define OSSL_HPKE_AEADSTR_AES128GCM "aes-128-gcm" /* AEAD id 1 */
#define OSSL_HPKE_AEADSTR_AES256GCM "aes-256-gcm" /* AEAD id 2 */
#define OSSL_HPKE_AEADSTR_CP "chacha20-poly1305" /* AEAD id 3 */
#define OSSL_HPKE_AEADSTR_EXP "exporter" /* AEAD id 0xff */

/*
 * Roles for use in creating an OSSL_HPKE_CTX, most
 * important use of this is to control nonce reuse.
 */
#define OSSL_HPKE_ROLE_SENDER 0
#define OSSL_HPKE_ROLE_RECEIVER 1

#ifdef __cplusplus
extern "C" {
#endif

typedef struct {
    uint16_t kem_id; /* Key Encapsulation Method id */
    uint16_t kdf_id; /* Key Derivation Function id */
    uint16_t aead_id; /* AEAD alg id */
} OSSL_HPKE_SUITE;

/**
 * Suite constants, use this like:
 *          OSSL_HPKE_SUITE myvar = OSSL_HPKE_SUITE_DEFAULT;
 */
#ifndef OPENSSL_NO_ECX
#define OSSL_HPKE_SUITE_DEFAULT       \
    {                                 \
        OSSL_HPKE_KEM_ID_X25519,      \
        OSSL_HPKE_KDF_ID_HKDF_SHA256, \
        OSSL_HPKE_AEAD_ID_AES_GCM_128 \
    }
#else
#define OSSL_HPKE_SUITE_DEFAULT       \
    {                                 \
        OSSL_HPKE_KEM_ID_P256,        \
        OSSL_HPKE_KDF_ID_HKDF_SHA256, \
        OSSL_HPKE_AEAD_ID_AES_GCM_128 \
    }
#endif

typedef struct ossl_hpke_ctx_st OSSL_HPKE_CTX;

OSSL_HPKE_CTX *OSSL_HPKE_CTX_new(int mode, OSSL_HPKE_SUITE suite, int role,
    OSSL_LIB_CTX *libctx, const char *propq);
void OSSL_HPKE_CTX_free(OSSL_HPKE_CTX *ctx);

int OSSL_HPKE_encap(OSSL_HPKE_CTX *ctx,
    unsigned char *enc, size_t *enclen,
    const unsigned char *pub, size_t publen,
    const unsigned char *info, size_t infolen);
int OSSL_HPKE_seal(OSSL_HPKE_CTX *ctx,
    unsigned char *ct, size_t *ctlen,
    const unsigned char *aad, size_t aadlen,
    const unsigned char *pt, size_t ptlen);

int OSSL_HPKE_keygen(OSSL_HPKE_SUITE suite,
    unsigned char *pub, size_t *publen, EVP_PKEY **priv,
    const unsigned char *ikm, size_t ikmlen,
    OSSL_LIB_CTX *libctx, const char *propq);
int OSSL_HPKE_decap(OSSL_HPKE_CTX *ctx,
    const unsigned char *enc, size_t enclen,
    EVP_PKEY *recippriv,
    const unsigned char *info, size_t infolen);
int OSSL_HPKE_open(OSSL_HPKE_CTX *ctx,
    unsigned char *pt, size_t *ptlen,
    const unsigned char *aad, size_t aadlen,
    const unsigned char *ct, size_t ctlen);

int OSSL_HPKE_export(OSSL_HPKE_CTX *ctx,
    unsigned char *secret,
    size_t secretlen,
    const unsigned char *label,
    size_t labellen);

int OSSL_HPKE_CTX_set1_authpriv(OSSL_HPKE_CTX *ctx, EVP_PKEY *priv);
int OSSL_HPKE_CTX_set1_authpub(OSSL_HPKE_CTX *ctx,
    const unsigned char *pub,
    size_t publen);
int OSSL_HPKE_CTX_set1_psk(OSSL_HPKE_CTX *ctx,
    const char *pskid,
    const unsigned char *psk, size_t psklen);

int OSSL_HPKE_CTX_set1_ikme(OSSL_HPKE_CTX *ctx,
    const unsigned char *ikme, size_t ikmelen);

int OSSL_HPKE_CTX_set_seq(OSSL_HPKE_CTX *ctx, uint64_t seq);
int OSSL_HPKE_CTX_get_seq(OSSL_HPKE_CTX *ctx, uint64_t *seq);

int OSSL_HPKE_suite_check(OSSL_HPKE_SUITE suite);
int OSSL_HPKE_get_grease_value(const OSSL_HPKE_SUITE *suite_in,
    OSSL_HPKE_SUITE *suite,
    unsigned char *enc, size_t *enclen,
    unsigned char *ct, size_t ctlen,
    OSSL_LIB_CTX *libctx, const char *propq);
int OSSL_HPKE_str2suite(const char *str, OSSL_HPKE_SUITE *suite);
size_t OSSL_HPKE_get_ciphertext_size(OSSL_HPKE_SUITE suite, size_t clearlen);
size_t OSSL_HPKE_get_public_encap_size(OSSL_HPKE_SUITE suite);
size_t OSSL_HPKE_get_recommended_ikmelen(OSSL_HPKE_SUITE suite);

#ifdef __cplusplus
}
#endif

#endif