pem_decrypt.h
Go to the documentation of this file.
1 /**
2  * @file pem_decrypt.h
3  * @brief PEM file decryption
4  *
5  * @section License
6  *
7  * SPDX-License-Identifier: GPL-2.0-or-later
8  *
9  * Copyright (C) 2010-2025 Oryx Embedded SARL. All rights reserved.
10  *
11  * This file is part of CycloneCRYPTO Open.
12  *
13  * This program is free software; you can redistribute it and/or
14  * modify it under the terms of the GNU General Public License
15  * as published by the Free Software Foundation; either version 2
16  * of the License, or (at your option) any later version.
17  *
18  * This program is distributed in the hope that it will be useful,
19  * but WITHOUT ANY WARRANTY; without even the implied warranty of
20  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
21  * GNU General Public License for more details.
22  *
23  * You should have received a copy of the GNU General Public License
24  * along with this program; if not, write to the Free Software Foundation,
25  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
26  *
27  * @author Oryx Embedded SARL (www.oryx-embedded.com)
28  * @version 2.5.2
29  **/
30 
31 #ifndef _PEM_DECRYPT_H
32 #define _PEM_DECRYPT_H
33 
34 //Dependencies
35 #include "core/crypto.h"
36 #include "pkix/pem_common.h"
37 
38 //Encrypted private key support
39 #ifndef PEM_ENCRYPTED_KEY_SUPPORT
40  #define PEM_ENCRYPTED_KEY_SUPPORT DISABLED
41 #elif (PEM_ENCRYPTED_KEY_SUPPORT != ENABLED && PEM_ENCRYPTED_KEY_SUPPORT != DISABLED)
42  #error PEM_ENCRYPTED_KEY_SUPPORT parameter is not valid
43 #endif
44 
45 //DES encryption support (insecure)
46 #ifndef PEM_DES_SUPPORT
47  #define PEM_DES_SUPPORT DISABLED
48 #elif (PEM_DES_SUPPORT != ENABLED && PEM_DES_SUPPORT != DISABLED)
49  #error PEM_DES_SUPPORT parameter is not valid
50 #endif
51 
52 //Triple DES encryption support (weak)
53 #ifndef PEM_3DES_SUPPORT
54  #define PEM_3DES_SUPPORT DISABLED
55 #elif (PEM_3DES_SUPPORT != ENABLED && PEM_3DES_SUPPORT != DISABLED)
56  #error PEM_3DES_SUPPORT parameter is not valid
57 #endif
58 
59 //AES encryption support
60 #ifndef PEM_AES_SUPPORT
61  #define PEM_AES_SUPPORT ENABLED
62 #elif (PEM_AES_SUPPORT != ENABLED && PEM_AES_SUPPORT != DISABLED)
63  #error PEM_AES_SUPPORT parameter is not valid
64 #endif
65 
66 //Camellia cipher support?
67 #ifndef PEM_CAMELLIA_SUPPORT
68  #define PEM_CAMELLIA_SUPPORT DISABLED
69 #elif (PEM_CAMELLIA_SUPPORT != ENABLED && PEM_CAMELLIA_SUPPORT != DISABLED)
70  #error PEM_CAMELLIA_SUPPORT parameter is not valid
71 #endif
72 
73 //ARIA cipher support?
74 #ifndef PEM_ARIA_SUPPORT
75  #define PEM_ARIA_SUPPORT DISABLED
76 #elif (PEM_ARIA_SUPPORT != ENABLED && PEM_ARIA_SUPPORT != DISABLED)
77  #error PEM_ARIA_SUPPORT parameter is not valid
78 #endif
79 
80 //SM4 encryption support
81 #ifndef PEM_SM4_SUPPORT
82  #define PEM_SM4_SUPPORT DISABLED
83 #elif (PEM_SM4_SUPPORT != ENABLED && PEM_SM4_SUPPORT != DISABLED)
84  #error PEM_SM4_SUPPORT parameter is not valid
85 #endif
86 
87 //C++ guard
88 #ifdef __cplusplus
89 extern "C" {
90 #endif
91 
92 //PEM related functions
93 error_t pemDecryptPrivateKey(const char_t *input, size_t inputLen,
94  const char_t *password, char_t *output, size_t *outputLen);
95 
96 error_t pemDecryptMessage(const PemHeader *header, const char_t *password,
97  const uint8_t *ciphertext, size_t ciphertextLen, uint8_t *plaintext,
98  size_t *plaintextLen);
99 
100 error_t pemFormatIv(const PemHeader *header, uint8_t *iv, size_t ivLen);
101 
102 error_t pemKdf(const char_t *p, size_t pLen, const uint8_t *s, size_t sLen,
103  uint8_t *dk, size_t dkLen);
104 
105 const CipherAlgo *pemGetCipherAlgo(const PemString *algo);
106 uint_t pemGetKeyLength(const PemString *algo);
107 
108 //C++ guard
109 #ifdef __cplusplus
110 }
111 #endif
112 
113 #endif
String representation.
Definition: pem_common.h:48
uint8_t p
Definition: ndp.h:300
PEM common definitions.
const CipherAlgo * pemGetCipherAlgo(const PemString *algo)
Get the cipher algorithm to be used for PEM encryption/decryption.
Definition: pem_decrypt.c:625
error_t pemFormatIv(const PemHeader *header, uint8_t *iv, size_t ivLen)
Extract the IV from the PEM encapsulated header.
Definition: pem_decrypt.c:495
PEM encapsulated header.
Definition: pem_common.h:81
error_t pemDecryptPrivateKey(const char_t *input, size_t inputLen, const char_t *password, char_t *output, size_t *outputLen)
PEM private key decryption.
Definition: pem_decrypt.c:58
error_t
Error codes.
Definition: error.h:43
General definitions for cryptographic algorithms.
uint8_t iv[]
Definition: ike.h:1626
error_t pemKdf(const char_t *p, size_t pLen, const uint8_t *s, size_t sLen, uint8_t *dk, size_t dkLen)
Key derivation function.
Definition: pem_decrypt.c:548
char char_t
Definition: compiler_port.h:55
Common interface for encryption algorithms.
Definition: crypto.h:1111
uint8_t s
Definition: igmp_common.h:234
error_t pemDecryptMessage(const PemHeader *header, const char_t *password, const uint8_t *ciphertext, size_t ciphertextLen, uint8_t *plaintext, size_t *plaintextLen)
PEM message decryption.
Definition: pem_decrypt.c:361
unsigned int uint_t
Definition: compiler_port.h:57
uint_t pemGetKeyLength(const PemString *algo)
Get the encryption key length to be used for PEM encryption/decryption.
Definition: pem_decrypt.c:723