c75c0ae088
Change-Id: I3299f8fc4602c24688339dbffb1d7939282ad6b3 Reviewed-on: https://boringssl-review.googlesource.com/6723 Reviewed-by: Adam Langley <agl@google.com>
93 lines
3.6 KiB
C
93 lines
3.6 KiB
C
/* Copyright (c) 2015, Google Inc.
|
||
*
|
||
* Permission to use, copy, modify, and/or distribute this software for any
|
||
* purpose with or without fee is hereby granted, provided that the above
|
||
* copyright notice and this permission notice appear in all copies.
|
||
*
|
||
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
||
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
||
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
|
||
* SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
||
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
|
||
* OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
|
||
* CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
|
||
|
||
#ifndef OPENSSL_HEADER_CURVE25519_H
|
||
#define OPENSSL_HEADER_CURVE25519_H
|
||
|
||
#include <openssl/base.h>
|
||
|
||
#if defined(__cplusplus)
|
||
extern "C" {
|
||
#endif
|
||
|
||
|
||
/* Curve25519.
|
||
*
|
||
* Curve25519 is an elliptic curve. See
|
||
* https://tools.ietf.org/html/draft-irtf-cfrg-curves-11. */
|
||
|
||
|
||
/* X25519.
|
||
*
|
||
* Curve25519 is an elliptic curve. The same name is also sometimes used for
|
||
* the Diffie-Hellman primitive built from it but “X25519” is a more precise
|
||
* name for that, which is the one used here. See http://cr.yp.to/ecdh.html and
|
||
* https://tools.ietf.org/html/draft-irtf-cfrg-curves-11. */
|
||
|
||
/* X25519_keypair sets |out_public_value| and |out_private_key| to a freshly
|
||
* generated, public–private key pair. */
|
||
OPENSSL_EXPORT void X25519_keypair(uint8_t out_public_value[32],
|
||
uint8_t out_private_key[32]);
|
||
|
||
/* X25519 writes a shared key to |out_shared_key| that is calculated from the
|
||
* given private key and the peer's public value. It returns one on success and
|
||
* zero on error.
|
||
*
|
||
* Don't use the shared key directly, rather use a KDF and also include the two
|
||
* public values as inputs. */
|
||
OPENSSL_EXPORT int X25519(uint8_t out_shared_key[32],
|
||
const uint8_t private_key[32],
|
||
const uint8_t peers_public_value[32]);
|
||
|
||
/* X25519_public_from_private calculates a Diffie-Hellman public value from the
|
||
* given private key and writes it to |out_public_value|. */
|
||
OPENSSL_EXPORT void X25519_public_from_private(uint8_t out_public_value[32],
|
||
const uint8_t private_key[32]);
|
||
|
||
|
||
/* Ed25519.
|
||
*
|
||
* Ed25519 is a signature scheme using a twisted-Edwards curve that is
|
||
* birationally equivalent to curve25519. */
|
||
|
||
#define ED25519_PRIVATE_KEY_LEN 64
|
||
#define ED25519_PUBLIC_KEY_LEN 32
|
||
#define ED25519_SIGNATURE_LEN 64
|
||
|
||
/* ED25519_keypair sets |out_public_key| and |out_private_key| to a freshly
|
||
* generated, public–private key pair. */
|
||
OPENSSL_EXPORT void ED25519_keypair(uint8_t out_public_key[32],
|
||
uint8_t out_private_key[64]);
|
||
|
||
/* ED25519_sign sets |out_sig| to be a signature of |message_len| bytes from
|
||
* |message| using |private_key|. It returns one on success or zero on
|
||
* error. */
|
||
OPENSSL_EXPORT int ED25519_sign(uint8_t out_sig[64], const uint8_t *message,
|
||
size_t message_len,
|
||
const uint8_t private_key[64]);
|
||
|
||
/* ED25519_verify returns one iff |signature| is a valid signature, by
|
||
* |public_key| of |message_len| bytes from |message|. It returns zero
|
||
* otherwise. */
|
||
OPENSSL_EXPORT int ED25519_verify(const uint8_t *message, size_t message_len,
|
||
const uint8_t signature[64],
|
||
const uint8_t public_key[32]);
|
||
|
||
|
||
#if defined(__cplusplus)
|
||
} /* extern C */
|
||
#endif
|
||
|
||
#endif /* OPENSSL_HEADER_CURVE25519_H */
|