PKIFNSS.h

Go to the documentation of this file.

#ifndef _PKIFNSS_H_
#define _PKIFNSS_H_

#include "PKIFdll.h"
#include "IPKIFCryptoKeyID.h"
#include "components.h"

#include <bitset>

struct CPKIFNSSImpl;
FD_LIST_PTR(CPKIFCredential);
FD_SMART_PTR(CPKIFKeyUsage);
class CAC_API CPKIFNSS : public IPKIFColleague, public IPKIFCryptoKeyID
{
public:
    CPKIFNSS(const std::string & dbdir = "");
    virtual ~CPKIFNSS(void);

    //IPKIFColleague functions
    void Initialize();

    //Miscellaneous functions
    void GetKeyList(CPKIFCredentialList& v,std::bitset<9>* = NULL);
    void GetKeyList(CPKIFCredentialList& v,CPKIFKeyUsagePtr& ku);

    //key management
    bool OwnsKey(const CPKIFCredential& keyID) const;
    CPKIFCredentialPtr MakeKeyID(const std::string& asciiHexKeyID);

    //functions that operate on key handles
    void Sign(const CPKIFCredential& key, unsigned char* pHashData, int nHashDataLen, unsigned char* pSignature, int* nSignatureLen, PKIFCRYPTO::HASH_ALG hashAlg);
    void Decrypt(const CPKIFCredential& key, unsigned char* pData, int nDataLen, unsigned char* pResult, int* pnResultLen);
    void Encrypt(const CPKIFCredential& key, unsigned char* pData, int nDataLen, unsigned char* pResult, int* pnResultLen);
    bool Verify(const CPKIFCredential& key, unsigned char* pHashData, int nHashDataLen, unsigned char* pSignature, int nSignatureLen, PKIFCRYPTO::HASH_ALG hashAlg);

    IPKIFCryptContext* CryptInit(CPKIFCredentialPtr& key, bool pad = true);
    void Decrypt(IPKIFCryptContext* cryptContext, unsigned char* pData, int nDataLen, unsigned char* pResult, int* pnResultLen, bool final);
    void Encrypt(IPKIFCryptContext* cryptContext, unsigned char* pData, int nDataLen, unsigned char* pResult, int* pnResultLen, bool final);
    
    enum { thisComponent = TOOLKIT_CRYPTO_NSS };

private:
    CPKIFNSS(const CPKIFNSS& copy);
    CPKIFNSS& operator=(const CPKIFNSS& rhs); //added 4/6/2004

    CPKIFNSSImpl * m_impl;
    
    
};
DECLARE_SMART_POINTERS(CPKIFNSS);

#endif