[thirdparty/openssl.git] / crypto / dsa / dsa.h

/* crypto/dsa/dsa.h */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 * 
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 * 
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from 
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 * 
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */

/*
 * The DSS routines are based on patches supplied by
 * Steven Schoch <schoch@sheba.arc.nasa.gov>.  He basically did the
 * work and I have just tweaked them a little to fit into my
 * stylistic vision for SSLeay :-) */

#ifndef HEADER_DSA_H
#define HEADER_DSA_H

#include <openssl/e_os2.h>

#ifdef OPENSSL_NO_DSA
#error DSA is disabled.
#endif

#ifndef OPENSSL_NO_BIO
#include <openssl/bio.h>
#endif
#include <openssl/crypto.h>
#include <openssl/ossl_typ.h>

#ifndef OPENSSL_NO_DEPRECATED
#include <openssl/bn.h>
#ifndef OPENSSL_NO_DH
# include <openssl/dh.h>
#endif
#endif

#ifndef OPENSSL_DSA_MAX_MODULUS_BITS
# define OPENSSL_DSA_MAX_MODULUS_BITS	10000
#endif

#define DSA_FLAG_CACHE_MONT_P	0x01
#define DSA_FLAG_NO_EXP_CONSTTIME       0x02 /* new with 0.9.7h; the built-in DSA
                                              * implementation now uses constant time
                                              * modular exponentiation for secret exponents
                                              * by default. This flag causes the
                                              * faster variable sliding window method to
                                              * be used for all exponents.
                                              */

#ifdef  __cplusplus
extern "C" {
#endif

/* Already defined in ossl_typ.h */
/* typedef struct dsa_st DSA; */
/* typedef struct dsa_method DSA_METHOD; */

typedef struct DSA_SIG_st
	{
	BIGNUM *r;
	BIGNUM *s;
	} DSA_SIG;

struct dsa_method
	{
	const char *name;
	DSA_SIG * (*dsa_do_sign)(const unsigned char *dgst, int dlen, DSA *dsa);
	int (*dsa_sign_setup)(DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp,
								BIGNUM **rp);
	int (*dsa_do_verify)(const unsigned char *dgst, int dgst_len,
			     DSA_SIG *sig, DSA *dsa);
	int (*dsa_mod_exp)(DSA *dsa, BIGNUM *rr, BIGNUM *a1, BIGNUM *p1,
			BIGNUM *a2, BIGNUM *p2, BIGNUM *m, BN_CTX *ctx,
			BN_MONT_CTX *in_mont);
	int (*bn_mod_exp)(DSA *dsa, BIGNUM *r, BIGNUM *a, const BIGNUM *p,
				const BIGNUM *m, BN_CTX *ctx,
				BN_MONT_CTX *m_ctx); /* Can be null */
	int (*init)(DSA *dsa);
	int (*finish)(DSA *dsa);
	int flags;
	char *app_data;
	/* If this is non-NULL, it is used to generate DSA parameters */
	int (*dsa_paramgen)(DSA *dsa, int bits,
			const unsigned char *seed, int seed_len,
			int *counter_ret, unsigned long *h_ret,
			BN_GENCB *cb);
	/* If this is non-NULL, it is used to generate DSA keys */
	int (*dsa_keygen)(DSA *dsa);
	};

struct dsa_st
	{
	/* This first variable is used to pick up errors where
	 * a DSA is passed instead of of a EVP_PKEY */
	int pad;
	long version;
	int write_params;
	BIGNUM *p;
	BIGNUM *q;	/* == 20 */
	BIGNUM *g;

	BIGNUM *pub_key;  /* y public key */
	BIGNUM *priv_key; /* x private key */

	BIGNUM *kinv;	/* Signing pre-calc */
	BIGNUM *r;	/* Signing pre-calc */

	int flags;
	/* Normally used to cache montgomery values */
	BN_MONT_CTX *method_mont_p;
	int references;
	CRYPTO_EX_DATA ex_data;
	const DSA_METHOD *meth;
	/* functional reference if 'meth' is ENGINE-provided */
	ENGINE *engine;
	};

#define d2i_DSAparams_fp(fp,x) (DSA *)ASN1_d2i_fp((char *(*)())DSA_new, \
		(char *(*)())d2i_DSAparams,(fp),(unsigned char **)(x))
#define i2d_DSAparams_fp(fp,x) ASN1_i2d_fp(i2d_DSAparams,(fp), \
		(unsigned char *)(x))
#define d2i_DSAparams_bio(bp,x) ASN1_d2i_bio_of(DSA,DSA_new,d2i_DSAparams,bp,x)
#define i2d_DSAparams_bio(bp,x) ASN1_i2d_bio_of_const(DSA,i2d_DSAparams,bp,x)


DSA *DSAparams_dup(DSA *x);
DSA_SIG * DSA_SIG_new(void);
void	DSA_SIG_free(DSA_SIG *a);
int	i2d_DSA_SIG(const DSA_SIG *a, unsigned char **pp);
DSA_SIG * d2i_DSA_SIG(DSA_SIG **v, const unsigned char **pp, long length);

DSA_SIG * DSA_do_sign(const unsigned char *dgst,int dlen,DSA *dsa);
int	DSA_do_verify(const unsigned char *dgst,int dgst_len,
		      DSA_SIG *sig,DSA *dsa);

const DSA_METHOD *DSA_OpenSSL(void);

void	DSA_set_default_method(const DSA_METHOD *);
const DSA_METHOD *DSA_get_default_method(void);
int	DSA_set_method(DSA *dsa, const DSA_METHOD *);

DSA *	DSA_new(void);
DSA *	DSA_new_method(ENGINE *engine);
void	DSA_free (DSA *r);
/* "up" the DSA object's reference count */
int	DSA_up_ref(DSA *r);
int	DSA_size(const DSA *);
	/* next 4 return -1 on error */
int	DSA_sign_setup( DSA *dsa,BN_CTX *ctx_in,BIGNUM **kinvp,BIGNUM **rp);
int	DSA_sign(int type,const unsigned char *dgst,int dlen,
		unsigned char *sig, unsigned int *siglen, DSA *dsa);
int	DSA_verify(int type,const unsigned char *dgst,int dgst_len,
		const unsigned char *sigbuf, int siglen, DSA *dsa);
int DSA_get_ex_new_index(long argl, void *argp, CRYPTO_EX_new *new_func,
	     CRYPTO_EX_dup *dup_func, CRYPTO_EX_free *free_func);
int DSA_set_ex_data(DSA *d, int idx, void *arg);
void *DSA_get_ex_data(DSA *d, int idx);

DSA *	d2i_DSAPublicKey(DSA **a, const unsigned char **pp, long length);
DSA *	d2i_DSAPrivateKey(DSA **a, const unsigned char **pp, long length);
DSA * 	d2i_DSAparams(DSA **a, const unsigned char **pp, long length);

/* Deprecated version */
#ifndef OPENSSL_NO_DEPRECATED
DSA *	DSA_generate_parameters(int bits,
		unsigned char *seed,int seed_len,
		int *counter_ret, unsigned long *h_ret,void
		(*callback)(int, int, void *),void *cb_arg);
#endif /* !defined(OPENSSL_NO_DEPRECATED) */

/* New version */
int	DSA_generate_parameters_ex(DSA *dsa, int bits,
		const unsigned char *seed,int seed_len,
		int *counter_ret, unsigned long *h_ret, BN_GENCB *cb);

int	DSA_generate_key(DSA *a);
int	i2d_DSAPublicKey(const DSA *a, unsigned char **pp);
int 	i2d_DSAPrivateKey(const DSA *a, unsigned char **pp);
int	i2d_DSAparams(const DSA *a,unsigned char **pp);

#ifndef OPENSSL_NO_BIO
int	DSAparams_print(BIO *bp, const DSA *x);
int	DSA_print(BIO *bp, const DSA *x, int off);
#endif
#ifndef OPENSSL_NO_FP_API
int	DSAparams_print_fp(FILE *fp, const DSA *x);
int	DSA_print_fp(FILE *bp, const DSA *x, int off);
#endif

#define DSS_prime_checks 50
/* Primality test according to FIPS PUB 186[-1], Appendix 2.1:
 * 50 rounds of Rabin-Miller */
#define DSA_is_prime(n, callback, cb_arg) \
	BN_is_prime(n, DSS_prime_checks, callback, NULL, cb_arg)

#ifndef OPENSSL_NO_DH
/* Convert DSA structure (key or just parameters) into DH structure
 * (be careful to avoid small subgroup attacks when using this!) */
DH *DSA_dup_DH(const DSA *r);
#endif

#define EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx, nbits) \
	EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN, \
				EVP_PKEY_CTRL_DSA_PARAMGEN_BITS, nbits, NULL)

#define	EVP_PKEY_CTRL_DSA_PARAMGEN_BITS		(EVP_PKEY_ALG_CTRL + 1)
#define	EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS	(EVP_PKEY_ALG_CTRL + 2)
#define	EVP_PKEY_CTRL_DSA_PARAMGEN_MD		(EVP_PKEY_ALG_CTRL + 3)

/* BEGIN ERROR CODES */
/* The following lines are auto generated by the script mkerr.pl. Any changes
 * made after this point may be overwritten when the script is next run.
 */
void ERR_load_DSA_strings(void);

/* Error codes for the DSA functions. */

/* Function codes. */
#define DSA_F_D2I_DSA_SIG				 110
#define DSA_F_DO_DSA_PRINT				 104
#define DSA_F_DSAPARAMS_PRINT				 100
#define DSA_F_DSAPARAMS_PRINT_FP			 101
#define DSA_F_DSA_DO_SIGN				 112
#define DSA_F_DSA_DO_VERIFY				 113
#define DSA_F_DSA_NEW_METHOD				 103
#define DSA_F_DSA_PARAM_DECODE				 119
#define DSA_F_DSA_PRINT_FP				 105
#define DSA_F_DSA_PRIV_DECODE				 115
#define DSA_F_DSA_PRIV_ENCODE				 116
#define DSA_F_DSA_PUB_DECODE				 117
#define DSA_F_DSA_PUB_ENCODE				 118
#define DSA_F_DSA_SIGN					 106
#define DSA_F_DSA_SIGN_SETUP				 107
#define DSA_F_DSA_SIG_NEW				 109
#define DSA_F_DSA_SIG_PRINT				 123
#define DSA_F_DSA_VERIFY				 108
#define DSA_F_I2D_DSA_SIG				 111
#define DSA_F_OLD_DSA_PRIV_DECODE			 122
#define DSA_F_PKEY_DSA_CTRL				 120
#define DSA_F_PKEY_DSA_KEYGEN				 121
#define DSA_F_SIG_CB					 114

/* Reason codes. */
#define DSA_R_BAD_Q_VALUE				 102
#define DSA_R_BN_DECODE_ERROR				 108
#define DSA_R_BN_ERROR					 109
#define DSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE		 100
#define DSA_R_DECODE_ERROR				 104
#define DSA_R_INVALID_DIGEST_TYPE			 106
#define DSA_R_MISSING_PARAMETERS			 101
#define DSA_R_MODULUS_TOO_LARGE				 103
#define DSA_R_NEED_NEW_SETUP_VALUES			 110
#define DSA_R_NO_PARAMETERS_SET				 107
#define DSA_R_PARAMETER_ENCODING_ERROR			 105

#ifdef  __cplusplus
}
#endif
#endif
Commit	Line	Data
d02b48c6	1	/* crypto/dsa/dsa.h */
58964a49	2	/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
d02b48c6 RE	3	* All rights reserved.
	4	*
	5	* This package is an SSL implementation written
	6	* by Eric Young (eay@cryptsoft.com).
	7	* The implementation was written so as to conform with Netscapes SSL.
	8	*
	9	* This library is free for commercial and non-commercial use as long as
	10	* the following conditions are aheared to. The following conditions
	11	* apply to all code found in this distribution, be it the RC4, RSA,
	12	* lhash, DES, etc., code; not just the SSL code. The SSL documentation
	13	* included with this distribution is covered by the same copyright terms
	14	* except that the holder is Tim Hudson (tjh@cryptsoft.com).
	15	*
	16	* Copyright remains Eric Young's, and as such any Copyright notices in
	17	* the code are not to be removed.
	18	* If this package is used in a product, Eric Young should be given attribution
	19	* as the author of the parts of the library used.
	20	* This can be in the form of a textual message at program startup or
	21	* in documentation (online or textual) provided with the package.
	22	*
	23	* Redistribution and use in source and binary forms, with or without
	24	* modification, are permitted provided that the following conditions
	25	* are met:
	26	* 1. Redistributions of source code must retain the copyright
	27	* notice, this list of conditions and the following disclaimer.
	28	* 2. Redistributions in binary form must reproduce the above copyright
	29	* notice, this list of conditions and the following disclaimer in the
	30	* documentation and/or other materials provided with the distribution.
	31	* 3. All advertising materials mentioning features or use of this software
	32	* must display the following acknowledgement:
	33	* "This product includes cryptographic software written by
	34	* Eric Young (eay@cryptsoft.com)"
	35	* The word 'cryptographic' can be left out if the rouines from the library
	36	* being used are not cryptographic related :-).
	37	* 4. If you include any Windows specific code (or a derivative thereof) from
	38	* the apps directory (application code) you must include an acknowledgement:
	39	* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
	40	*
	41	* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
	42	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	43	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	44	* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
	45	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	46	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	47	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	48	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	49	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	50	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	51	* SUCH DAMAGE.
	52	*
	53	* The licence and distribution terms for any publically available version or
	54	* derivative of this code cannot be changed. i.e. this code cannot simply be
	55	* copied and put under another distribution licence
	56	* [including the GNU Public Licence.]
	57	*/
	58
	59	/*
	60	* The DSS routines are based on patches supplied by
	61	* Steven Schoch <schoch@sheba.arc.nasa.gov>. He basically did the
	62	* work and I have just tweaked them a little to fit into my
	63	* stylistic vision for SSLeay :-) */
	64
	65	#ifndef HEADER_DSA_H
	66	#define HEADER_DSA_H
67
751ff1d3 RL	68	#include <openssl/e_os2.h>
751ff1d3 RL	69
cf1b7d96	70	#ifdef OPENSSL_NO_DSA
f5d7a031 UM	71	#error DSA is disabled.
	72	#endif
	73
cf1b7d96	74	#ifndef OPENSSL_NO_BIO
ef33b970 RL	75	#include <openssl/bio.h>
ef33b970 RL	76	#endif
c0711f7f	77	#include <openssl/crypto.h>
2aa9043a	78	#include <openssl/ossl_typ.h>
60a938c6 GT	79
60a938c6 GT	80	#ifndef OPENSSL_NO_DEPRECATED
0f814687	81	#include <openssl/bn.h>
cf1b7d96	82	#ifndef OPENSSL_NO_DH
48c843c3 BM	83	# include <openssl/dh.h>
48c843c3 BM	84	#endif
60a938c6	85	#endif
d02b48c6	86
5e3225cc BM	87	#ifndef OPENSSL_DSA_MAX_MODULUS_BITS
	88	# define OPENSSL_DSA_MAX_MODULUS_BITS 10000
	89	#endif
	90
dfeab068	91	#define DSA_FLAG_CACHE_MONT_P 0x01
46a64376 BM	92	#define DSA_FLAG_NO_EXP_CONSTTIME 0x02 /* new with 0.9.7h; the built-in DSA
	93	* implementation now uses constant time
	94	* modular exponentiation for secret exponents
	95	* by default. This flag causes the
	96	* faster variable sliding window method to
	97	* be used for all exponents.
	98	*/
dfeab068	99
82271cee RL	100	#ifdef __cplusplus
	101	extern "C" {
	102	#endif
	103
3a87a9b9 GT	104	/* Already defined in ossl_typ.h */
	105	/* typedef struct dsa_st DSA; */
	106	/* typedef struct dsa_method DSA_METHOD; */
c0711f7f DSH	107
	108	typedef struct DSA_SIG_st
	109	{
	110	BIGNUM *r;
	111	BIGNUM *s;
	112	} DSA_SIG;
	113
3a87a9b9 GT	114	struct dsa_method
3a87a9b9 GT	115	{
c0711f7f DSH	116	const char *name;
	117	DSA_SIG * (dsa_do_sign)(const unsigned char dgst, int dlen, DSA *dsa);
	118	int (dsa_sign_setup)(DSA dsa, BN_CTX ctx_in, BIGNUM *kinvp,
	119	BIGNUM **rp);
	120	int (dsa_do_verify)(const unsigned char dgst, int dgst_len,
84948b39	121	DSA_SIG sig, DSA dsa);
c0711f7f DSH	122	int (dsa_mod_exp)(DSA dsa, BIGNUM rr, BIGNUM a1, BIGNUM *p1,
	123	BIGNUM a2, BIGNUM p2, BIGNUM m, BN_CTX ctx,
	124	BN_MONT_CTX *in_mont);
	125	int (bn_mod_exp)(DSA dsa, BIGNUM r, BIGNUM a, const BIGNUM *p,
	126	const BIGNUM m, BN_CTX ctx,
	127	BN_MONT_CTX m_ctx); / Can be null */
	128	int (init)(DSA dsa);
	129	int (finish)(DSA dsa);
	130	int flags;
	131	char *app_data;
0e4aa0d2 GT	132	/* If this is non-NULL, it is used to generate DSA parameters */
0e4aa0d2 GT	133	int (dsa_paramgen)(DSA dsa, int bits,
1457619e	134	const unsigned char *seed, int seed_len,
0e4aa0d2 GT	135	int counter_ret, unsigned long h_ret,
	136	BN_GENCB *cb);
	137	/* If this is non-NULL, it is used to generate DSA keys */
	138	int (dsa_keygen)(DSA dsa);
3a87a9b9	139	};
c0711f7f DSH	140
c0711f7f DSH	141	struct dsa_st
d02b48c6 RE	142	{
	143	/* This first variable is used to pick up errors where
	144	* a DSA is passed instead of of a EVP_PKEY */
	145	int pad;
2c2f9e2c	146	long version;
d02b48c6 RE	147	int write_params;
	148	BIGNUM *p;
	149	BIGNUM q; / == 20 */
	150	BIGNUM *g;
	151
	152	BIGNUM pub_key; / y public key */
	153	BIGNUM priv_key; / x private key */
	154
	155	BIGNUM kinv; / Signing pre-calc */
	156	BIGNUM r; / Signing pre-calc */
	157
dfeab068 RE	158	int flags;
dfeab068 RE	159	/* Normally used to cache montgomery values */
879b1980	160	BN_MONT_CTX *method_mont_p;
d02b48c6	161	int references;
c0711f7f	162	CRYPTO_EX_DATA ex_data;
cb78486d GT	163	const DSA_METHOD *meth;
	164	/* functional reference if 'meth' is ENGINE-provided */
	165	ENGINE *engine;
c0711f7f	166	};
a8da8918	167
d02b48c6 RE	168	#define d2i_DSAparams_fp(fp,x) (DSA )ASN1_d2i_fp((char (*)())DSA_new, \
	169	(char ()())d2i_DSAparams,(fp),(unsigned char **)(x))
	170	#define i2d_DSAparams_fp(fp,x) ASN1_i2d_fp(i2d_DSAparams,(fp), \
	171	(unsigned char *)(x))
41a15c4f BL	172	#define d2i_DSAparams_bio(bp,x) ASN1_d2i_bio_of(DSA,DSA_new,d2i_DSAparams,bp,x)
41a15c4f BL	173	#define i2d_DSAparams_bio(bp,x) ASN1_i2d_bio_of_const(DSA,i2d_DSAparams,bp,x)
d02b48c6	174
d02b48c6	175
f4274da1	176	DSA DSAparams_dup(DSA x);
a8da8918 UM	177	DSA_SIG * DSA_SIG_new(void);
a8da8918 UM	178	void DSA_SIG_free(DSA_SIG *a);
a4aba800	179	int i2d_DSA_SIG(const DSA_SIG a, unsigned char *pp);
6343829a	180	DSA_SIG * d2i_DSA_SIG(DSA_SIG v, const unsigned char pp, long length);
a8da8918	181
61f5b6f3 BL	182	DSA_SIG * DSA_do_sign(const unsigned char dgst,int dlen,DSA dsa);
	183	int DSA_do_verify(const unsigned char *dgst,int dgst_len,
	184	DSA_SIG sig,DSA dsa);
a8da8918	185
a4aba800	186	const DSA_METHOD *DSA_OpenSSL(void);
c0711f7f	187
cb78486d GT	188	void DSA_set_default_method(const DSA_METHOD *);
	189	const DSA_METHOD *DSA_get_default_method(void);
	190	int DSA_set_method(DSA dsa, const DSA_METHOD );
f8463356	191
d02b48c6	192	DSA * DSA_new(void);
cb78486d	193	DSA * DSA_new_method(ENGINE *engine);
5cbc2e8b GT	194	void DSA_free (DSA *r);
5cbc2e8b GT	195	/* "up" the DSA object's reference count */
6ac4e8bd	196	int DSA_up_ref(DSA *r);
a4aba800	197	int DSA_size(const DSA *);
d02b48c6 RE	198	/* next 4 return -1 on error */
d02b48c6 RE	199	int DSA_sign_setup( DSA dsa,BN_CTX ctx_in,BIGNUM kinvp,BIGNUM rp);
61f5b6f3	200	int DSA_sign(int type,const unsigned char *dgst,int dlen,
d02b48c6	201	unsigned char sig, unsigned int siglen, DSA *dsa);
61f5b6f3	202	int DSA_verify(int type,const unsigned char *dgst,int dgst_len,
a4aba800	203	const unsigned char sigbuf, int siglen, DSA dsa);
dd9d233e DSH	204	int DSA_get_ex_new_index(long argl, void argp, CRYPTO_EX_new new_func,
	205	CRYPTO_EX_dup dup_func, CRYPTO_EX_free free_func);
	206	int DSA_set_ex_data(DSA d, int idx, void arg);
	207	void DSA_get_ex_data(DSA d, int idx);
d02b48c6	208
6343829a GT	209	DSA * d2i_DSAPublicKey(DSA a, const unsigned char pp, long length);
	210	DSA * d2i_DSAPrivateKey(DSA a, const unsigned char pp, long length);
	211	DSA * d2i_DSAparams(DSA a, const unsigned char pp, long length);
e9224c71 GT	212
	213	/* Deprecated version */
	214	#ifndef OPENSSL_NO_DEPRECATED
a4aba800 RL	215	DSA * DSA_generate_parameters(int bits,
a4aba800 RL	216	unsigned char *seed,int seed_len,
58964a49	217	int counter_ret, unsigned long h_ret,void
82fc1d9c	218	(callback)(int, int, void ),void *cb_arg);
e9224c71 GT	219	#endif /* !defined(OPENSSL_NO_DEPRECATED) */
	220
	221	/* New version */
	222	int DSA_generate_parameters_ex(DSA *dsa, int bits,
1457619e	223	const unsigned char *seed,int seed_len,
e9224c71 GT	224	int counter_ret, unsigned long h_ret, BN_GENCB *cb);
e9224c71 GT	225
d02b48c6	226	int DSA_generate_key(DSA *a);
a4aba800 RL	227	int i2d_DSAPublicKey(const DSA a, unsigned char *pp);
	228	int i2d_DSAPrivateKey(const DSA a, unsigned char *pp);
	229	int i2d_DSAparams(const DSA a,unsigned char *pp);
d02b48c6	230
cf1b7d96	231	#ifndef OPENSSL_NO_BIO
a4aba800 RL	232	int DSAparams_print(BIO bp, const DSA x);
a4aba800 RL	233	int DSA_print(BIO bp, const DSA x, int off);
d02b48c6	234	#endif
cf1b7d96	235	#ifndef OPENSSL_NO_FP_API
a4aba800 RL	236	int DSAparams_print_fp(FILE fp, const DSA x);
a4aba800 RL	237	int DSA_print_fp(FILE bp, const DSA x, int off);
d02b48c6 RE	238	#endif
d02b48c6 RE	239
a87030a1 BM	240	#define DSS_prime_checks 50
	241	/* Primality test according to FIPS PUB 186[-1], Appendix 2.1:
	242	* 50 rounds of Rabin-Miller */
	243	#define DSA_is_prime(n, callback, cb_arg) \
	244	BN_is_prime(n, DSS_prime_checks, callback, NULL, cb_arg)
d02b48c6	245
cf1b7d96	246	#ifndef OPENSSL_NO_DH
48c843c3 BM	247	/* Convert DSA structure (key or just parameters) into DH structure
48c843c3 BM	248	* (be careful to avoid small subgroup attacks when using this!) */
a4aba800	249	DH DSA_dup_DH(const DSA r);
48c843c3 BM	250	#endif
48c843c3 BM	251
c927df3f DSH	252	#define EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx, nbits) \
	253	EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN, \
	254	EVP_PKEY_CTRL_DSA_PARAMGEN_BITS, nbits, NULL)
	255
	256	#define EVP_PKEY_CTRL_DSA_PARAMGEN_BITS (EVP_PKEY_ALG_CTRL + 1)
357d5de5 NL	257	#define EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS (EVP_PKEY_ALG_CTRL + 2)
357d5de5 NL	258	#define EVP_PKEY_CTRL_DSA_PARAMGEN_MD (EVP_PKEY_ALG_CTRL + 3)
c927df3f	259
d02b48c6	260	/* BEGIN ERROR CODES */
6d311938 DSH	261	/* The following lines are auto generated by the script mkerr.pl. Any changes
	262	* made after this point may be overwritten when the script is next run.
	263	*/
c962479b	264	void ERR_load_DSA_strings(void);
6d311938	265
d02b48c6 RE	266	/* Error codes for the DSA functions. */
	267
	268	/* Function codes. */
6d311938	269	#define DSA_F_D2I_DSA_SIG 110
5c95c2ac	270	#define DSA_F_DO_DSA_PRINT 104
d02b48c6 RE	271	#define DSA_F_DSAPARAMS_PRINT 100
d02b48c6 RE	272	#define DSA_F_DSAPARAMS_PRINT_FP 101
6d311938 DSH	273	#define DSA_F_DSA_DO_SIGN 112
6d311938 DSH	274	#define DSA_F_DSA_DO_VERIFY 113
0c372b94	275	#define DSA_F_DSA_NEW_METHOD 103
3e4585c8	276	#define DSA_F_DSA_PARAM_DECODE 119
d02b48c6	277	#define DSA_F_DSA_PRINT_FP 105
448be743 DSH	278	#define DSA_F_DSA_PRIV_DECODE 115
	279	#define DSA_F_DSA_PRIV_ENCODE 116
	280	#define DSA_F_DSA_PUB_DECODE 117
	281	#define DSA_F_DSA_PUB_ENCODE 118
d02b48c6 RE	282	#define DSA_F_DSA_SIGN 106
d02b48c6 RE	283	#define DSA_F_DSA_SIGN_SETUP 107
a8da8918	284	#define DSA_F_DSA_SIG_NEW 109
a4d9c12f	285	#define DSA_F_DSA_SIG_PRINT 123
6d311938	286	#define DSA_F_DSA_VERIFY 108
a8da8918	287	#define DSA_F_I2D_DSA_SIG 111
5c95c2ac	288	#define DSA_F_OLD_DSA_PRIV_DECODE 122
c927df3f	289	#define DSA_F_PKEY_DSA_CTRL 120
75ef7188	290	#define DSA_F_PKEY_DSA_KEYGEN 121
9d6b1ce6	291	#define DSA_F_SIG_CB 114
d02b48c6 RE	292
d02b48c6 RE	293	/* Reason codes. */
5e3225cc BM	294	#define DSA_R_BAD_Q_VALUE 102
	295	#define DSA_R_BN_DECODE_ERROR 108
	296	#define DSA_R_BN_ERROR 109
d02b48c6	297	#define DSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE 100
448be743	298	#define DSA_R_DECODE_ERROR 104
c927df3f	299	#define DSA_R_INVALID_DIGEST_TYPE 106
c962479b	300	#define DSA_R_MISSING_PARAMETERS 101
5e3225cc	301	#define DSA_R_MODULUS_TOO_LARGE 103
245a7eee	302	#define DSA_R_NEED_NEW_SETUP_VALUES 110
75ef7188	303	#define DSA_R_NO_PARAMETERS_SET 107
448be743	304	#define DSA_R_PARAMETER_ENCODING_ERROR 105
6d311938	305
d02b48c6 RE	306	#ifdef __cplusplus
	307	}
	308	#endif
	309	#endif