/*

[0] Fix | Delete

* Copyright (C) Internet Systems Consortium, Inc. ("ISC")

[1] Fix | Delete

*

[2] Fix | Delete

* This Source Code Form is subject to the terms of the Mozilla Public

[3] Fix | Delete

* License, v. 2.0. If a copy of the MPL was not distributed with this

[4] Fix | Delete

* file, you can obtain one at https://mozilla.org/MPL/2.0/.

[5] Fix | Delete

*

[6] Fix | Delete

* See the COPYRIGHT file distributed with this work for additional

[7] Fix | Delete

* information regarding copyright ownership.

[8] Fix | Delete

*/

[9] Fix | Delete

[10] Fix | Delete

/* The documentation about this file is in README.site */

[11] Fix | Delete

[12] Fix | Delete

#ifndef PK11_SITE_H

[13] Fix | Delete

#define PK11_SITE_H 1

[14] Fix | Delete

[15] Fix | Delete

/*! \file pk11/site.h */

[16] Fix | Delete

[17] Fix | Delete

/*\brief Put here specific PKCS#11 tweaks

[18] Fix | Delete

*

[19] Fix | Delete

*\li PK11_<mechanism>_SKIP:

[20] Fix | Delete

* Don't consider the lack of this mechanism as a fatal error.

[21] Fix | Delete

*

[22] Fix | Delete

*\li PK11_<mechanism>_REPLACE:

[23] Fix | Delete

* Same as SKIP, and implement the mechanism using lower-level steps.

[24] Fix | Delete

*

[25] Fix | Delete

*\li PK11_<algorithm>_DISABLE:

[26] Fix | Delete

* Same as SKIP, and disable support for the algorithm.

[27] Fix | Delete

*

[28] Fix | Delete

*\li PK11_PAD_HMAC_KEYS:

[29] Fix | Delete

* Extend HMAC keys shorter than digest length.

[30] Fix | Delete

*/

[31] Fix | Delete

[32] Fix | Delete

/* current implemented flags are:

[33] Fix | Delete

PK11_DH_PKCS_PARAMETER_GEN_SKIP

[34] Fix | Delete

PK11_DSA_PARAMETER_GEN_SKIP

[35] Fix | Delete

PK11_RSA_PKCS_REPLACE

[36] Fix | Delete

PK11_MD5_HMAC_REPLACE

[37] Fix | Delete

PK11_SHA_1_HMAC_REPLACE

[38] Fix | Delete

PK11_SHA224_HMAC_REPLACE

[39] Fix | Delete

PK11_SHA256_HMAC_REPLACE

[40] Fix | Delete

PK11_SHA384_HMAC_REPLACE

[41] Fix | Delete

PK11_SHA512_HMAC_REPLACE

[42] Fix | Delete

PK11_MD5_DISABLE

[43] Fix | Delete

PK11_DSA_DISABLE

[44] Fix | Delete

PK11_DH_DISABLE

[45] Fix | Delete

PK11_PAD_HMAC_KEYS

[46] Fix | Delete

*/

[47] Fix | Delete

[48] Fix | Delete

/*

[49] Fix | Delete

* Predefined flavors

[50] Fix | Delete

*/

[51] Fix | Delete

/* Thales nCipher */

[52] Fix | Delete

#define PK11_THALES_FLAVOR 0

[53] Fix | Delete

/* SoftHSMv1 with SHA224 */

[54] Fix | Delete

#define PK11_SOFTHSMV1_FLAVOR 1

[55] Fix | Delete

/* SoftHSMv2 */

[56] Fix | Delete

#define PK11_SOFTHSMV2_FLAVOR 2

[57] Fix | Delete

/* Cryptech */

[58] Fix | Delete

#define PK11_CRYPTECH_FLAVOR 3

[59] Fix | Delete

/* AEP Keyper */

[60] Fix | Delete

#define PK11_AEP_FLAVOR 4

[61] Fix | Delete

/* Utimaco HSM */

[62] Fix | Delete

#define PK11_UTIMACO_FLAVOR 5

[63] Fix | Delete

[64] Fix | Delete

/* Default is for Thales nCipher */

[65] Fix | Delete

#ifndef PK11_FLAVOR

[66] Fix | Delete

#define PK11_FLAVOR PK11_THALES_FLAVOR

[67] Fix | Delete

#endif

[68] Fix | Delete

[69] Fix | Delete

#if PK11_FLAVOR == PK11_THALES_FLAVOR

[70] Fix | Delete

#define PK11_DH_PKCS_PARAMETER_GEN_SKIP

[71] Fix | Delete

/* doesn't work but supported #define PK11_DSA_PARAMETER_GEN_SKIP */

[72] Fix | Delete

#define PK11_MD5_HMAC_REPLACE

[73] Fix | Delete

#endif

[74] Fix | Delete

[75] Fix | Delete

#if PK11_FLAVOR == PK11_SOFTHSMV1_FLAVOR

[76] Fix | Delete

#define PK11_PAD_HMAC_KEYS

[77] Fix | Delete

#endif

[78] Fix | Delete

[79] Fix | Delete

#if PK11_FLAVOR == PK11_SOFTHSMV2_FLAVOR

[80] Fix | Delete

/* SoftHSMv2 was updated to enforce minimal key sizes... argh! */

[81] Fix | Delete

#define PK11_MD5_HMAC_REPLACE

[82] Fix | Delete

#define PK11_SHA_1_HMAC_REPLACE

[83] Fix | Delete

#define PK11_SHA224_HMAC_REPLACE

[84] Fix | Delete

#define PK11_SHA256_HMAC_REPLACE

[85] Fix | Delete

#define PK11_SHA384_HMAC_REPLACE

[86] Fix | Delete

#define PK11_SHA512_HMAC_REPLACE

[87] Fix | Delete

#endif

[88] Fix | Delete

[89] Fix | Delete

#if PK11_FLAVOR == PK11_CRYPTECH_FLAVOR

[90] Fix | Delete

#define PK11_DH_DISABLE

[91] Fix | Delete

#define PK11_DSA_DISABLE

[92] Fix | Delete

#define PK11_MD5_DISABLE

[93] Fix | Delete

#define PK11_SHA_1_HMAC_REPLACE

[94] Fix | Delete

#define PK11_SHA224_HMAC_REPLACE

[95] Fix | Delete

#define PK11_SHA256_HMAC_REPLACE

[96] Fix | Delete

#define PK11_SHA384_HMAC_REPLACE

[97] Fix | Delete

#define PK11_SHA512_HMAC_REPLACE

[98] Fix | Delete

#endif

[99] Fix | Delete

[100] Fix | Delete

#if PK11_FLAVOR == PK11_AEP_FLAVOR

[101] Fix | Delete

#define PK11_DH_DISABLE

[102] Fix | Delete

#define PK11_DSA_DISABLE

[103] Fix | Delete

#define PK11_RSA_PKCS_REPLACE

[104] Fix | Delete

#define PK11_MD5_HMAC_REPLACE

[105] Fix | Delete

#define PK11_SHA_1_HMAC_REPLACE

[106] Fix | Delete

#define PK11_SHA224_HMAC_REPLACE

[107] Fix | Delete

#define PK11_SHA256_HMAC_REPLACE

[108] Fix | Delete

#define PK11_SHA384_HMAC_REPLACE

[109] Fix | Delete

#define PK11_SHA512_HMAC_REPLACE

[110] Fix | Delete

#endif

[111] Fix | Delete

[112] Fix | Delete

#endif /* PK11_SITE_H */

[113] Fix | Delete

[114] Fix | Delete