doc/tpm-api.texi
doc/version.texi
doc/x509-api.texi
+doc/hpke-api.texi
extra/includes/Makefile
extra/includes/Makefile.in
extra/libgnutls-openssl.la
API_FILES=gnutls-api.texi socket-api.texi x509-api.texi pkcs12-api.texi \
tpm-api.texi pkcs11-api.texi abstract-api.texi compat-api.texi \
dtls-api.texi crypto-api.texi ocsp-api.texi tpm-api.texi dane-api.texi \
- pkcs7-api.texi
+ pkcs7-api.texi hpke-api.texi
MAINTAINERCLEANFILES += stamp_enums stamp_functions functions enums
done
mv -f $@-tmp $@
+hpke-api.texi: $(top_srcdir)/lib/includes/gnutls/hpke.h
+ echo "" > $@-tmp
+ cat $^ >$@-headers-tmp
+ for i in `$(PERL) $(top_srcdir)/doc/scripts/getfuncs.pl < $@-headers-tmp |sort|uniq`; do \
+ echo $(ECHO_N) "Creating documentation for $$i... " && \
+ $(PERL) $(srcdir)/scripts/gdoc -texinfo \
+ -function $$i \
+ $(C_SOURCE_FILES) >> $@-tmp && \
+ echo "ok"; \
+ done
+ rm -f $@-headers-tmp
+ mv -f $@-tmp $@
+
# Generated texinfos.
# for some reason it does not work when cross compiling
if !WINDOWS
$(top_srcdir)/lib/includes/gnutls/ocsp.h $(top_srcdir)/lib/includes/gnutls/tpm.h \
$(top_srcdir)/libdane/includes/gnutls/dane.h $(top_srcdir)/lib/includes/gnutls/x509-ext.h \
$(top_srcdir)/lib/includes/gnutls/urls.h $(top_srcdir)/lib/includes/gnutls/system-keys.h \
- $(top_srcdir)/lib/includes/gnutls/pkcs7.h $(top_srcdir)/lib/includes/gnutls/socket.h
+ $(top_srcdir)/lib/includes/gnutls/pkcs7.h $(top_srcdir)/lib/includes/gnutls/socket.h \
+ $(top_srcdir)/lib/includes/gnutls/hpke.h
C_SOURCE_FILES = $(top_srcdir)/lib/*/*.c $(top_srcdir)/lib/*.c $(top_srcdir)/libdane/*.c
C_X509_SOURCE_FILES = $(top_srcdir)/lib/x509/*.c $(top_srcdir)/lib/*.c $(top_srcdir)/lib/system/certs.c
#include "config.h"
#endif /* HAVE_CONFIG_H */
-#include <gnutls/abstract.h>
+#include <gnutls/hpke.h>
#define GNUTLS_HPKE_MAX_DHKEM_PUBKEY_SIZE 133
#define GNUTLS_HPKE_MAX_HASH_SIZE 64
#include "config.h"
#endif /* HAVE_CONFIG_H */
-#include "gnutls/abstract.h"
+#include "gnutls/hpke.h"
int _gnutls_is_kem_dh(const gnutls_hpke_kem_t kem);
gnutls/openpgp.h gnutls/crypto.h gnutls/pkcs11.h \
gnutls/abstract.h gnutls/dtls.h gnutls/ocsp.h gnutls/tpm.h \
gnutls/x509-ext.h gnutls/self-test.h gnutls/system-keys.h \
- gnutls/urls.h gnutls/pkcs7.h gnutls/socket.h
+ gnutls/urls.h gnutls/pkcs7.h gnutls/socket.h gnutls/hpke.h
if ENABLE_CXX
nobase_include_HEADERS += gnutls/gnutlsxx.h
#include <gnutls/openpgp.h>
#include <gnutls/tpm.h>
-#include <stdint.h>
-
#ifdef __cplusplus
extern "C" {
#endif
int gnutls_pubkey_print(gnutls_pubkey_t pubkey,
gnutls_certificate_print_formats_t format,
gnutls_datum_t *out);
-
-/**
- * gnutls_hpke_kem_t:
- * @GNUTLS_HPKE_KEM_DHKEM_P256: DHKEM using P-256
- * @GNUTLS_HPKE_KEM_DHKEM_P384: DHKEM using P-384
- * @GNUTLS_HPKE_KEM_DHKEM_P521: DHKEM using P-521
- * @GNUTLS_HPKE_KEM_DHKEM_X25519: DHKEM using X25519
- * @GNUTLS_HPKE_KEM_DHKEM_X448: DHKEM using X448
- * Enumeration of HPKE KEM algorithms.
- */
-typedef enum gnutls_hpke_kem_t {
- GNUTLS_HPKE_KEM_DHKEM_P256 = 0x0010,
- GNUTLS_HPKE_KEM_DHKEM_P384 = 0x0011,
- GNUTLS_HPKE_KEM_DHKEM_P521 = 0x0012,
- GNUTLS_HPKE_KEM_DHKEM_X25519 = 0x0020,
- GNUTLS_HPKE_KEM_DHKEM_X448 = 0x0021
-} gnutls_hpke_kem_t;
-
-/**
- * gnutls_hpke_kdf_t:
- * @GNUTLS_HPKE_KDF_HKDF_SHA256: HKDF using SHA-256
- * @GNUTLS_HPKE_KDF_HKDF_SHA384: HKDF using SHA-384
- * @GNUTLS_HPKE_KDF_HKDF_SHA512: HKDF using SHA-512
- * Enumeration of HPKE KDF algorithms.
- */
-typedef enum gnutls_hpke_kdf_t {
- GNUTLS_HPKE_KDF_HKDF_SHA256 = 0x0001,
- GNUTLS_HPKE_KDF_HKDF_SHA384 = 0x0002,
- GNUTLS_HPKE_KDF_HKDF_SHA512 = 0x0003
-} gnutls_hpke_kdf_t;
-
-/**
- * gnutls_hpke_aead_t:
- * @GNUTLS_HPKE_AEAD_AES_128_GCM: AES-128-GCM
- * @GNUTLS_HPKE_AEAD_AES_256_GCM: AES-256-GCM
- * @GNUTLS_HPKE_AEAD_CHACHA20_POLY1305: ChaCha20-Poly1305
- * Enumeration of HPKE AEAD algorithms.
- */
-typedef enum gnutls_hpke_aead_t {
- GNUTLS_HPKE_AEAD_AES_128_GCM = 0x0001,
- GNUTLS_HPKE_AEAD_AES_256_GCM = 0x0002,
- GNUTLS_HPKE_AEAD_CHACHA20_POLY1305 = 0x0003,
- GNUTLS_HPKE_AEAD_EXPORT_ONLY = 0xFFFF
-} gnutls_hpke_aead_t;
-
-typedef enum gnutls_hpke_mode_t {
- GNUTLS_HPKE_MODE_BASE = 0,
- GNUTLS_HPKE_MODE_PSK = 1,
- GNUTLS_HPKE_MODE_AUTH = 2,
- GNUTLS_HPKE_MODE_AUTH_PSK = 3
-} gnutls_hpke_mode_t;
-
-typedef enum gnutls_hpke_role_t {
- GNUTLS_HPKE_ROLE_SENDER = 0,
- GNUTLS_HPKE_ROLE_RECEIVER = 1
-} gnutls_hpke_role_t;
-
-typedef struct gnutls_hpke_context_st *gnutls_hpke_context_t;
-
-int gnutls_hpke_context_init(gnutls_hpke_context_t *ctx,
- const gnutls_hpke_mode_t mode,
- const gnutls_hpke_role_t role,
- const gnutls_hpke_kem_t kem,
- const gnutls_hpke_kdf_t kdf,
- const gnutls_hpke_aead_t aead);
-
-int gnutls_hpke_context_deinit(gnutls_hpke_context_t ctx);
-
-int gnutls_hpke_context_set_psk(gnutls_hpke_context_t ctx,
- const gnutls_datum_t *psk,
- const gnutls_datum_t *psk_id);
-
-int gnutls_hpke_context_set_sender_privkey(gnutls_hpke_context_t ctx,
- gnutls_privkey_t sender_privkey);
-
-int gnutls_hpke_context_set_sender_pubkey(gnutls_hpke_context_t ctx,
- gnutls_pubkey_t sender_pubkey);
-
-size_t gnutls_hpke_context_get_enc_size(const gnutls_hpke_context_t ctx);
-
-int gnutls_hpke_encap(gnutls_hpke_context_t ctx, const gnutls_datum_t *info,
- gnutls_datum_t *enc, gnutls_pubkey_t receiver_pubkey);
-
-int gnutls_hpke_seal(gnutls_hpke_context_t ctx, const gnutls_datum_t *aad,
- const gnutls_datum_t *plaintext,
- gnutls_datum_t *ciphertext);
-
-int gnutls_hpke_decap(gnutls_hpke_context_t ctx, const gnutls_datum_t *info,
- const gnutls_datum_t *enc,
- gnutls_privkey_t receiver_privkey);
-
-int gnutls_hpke_open(gnutls_hpke_context_t ctx, const gnutls_datum_t *aad,
- const gnutls_datum_t *ciphertext,
- gnutls_datum_t *plaintext);
-
-int gnutls_hpke_context_set_ikme(gnutls_hpke_context_t ctx,
- const gnutls_datum_t *ikme);
-
-int gnutls_hpke_generate_keypair(const gnutls_hpke_kem_t kem,
- const gnutls_datum_t *ikm,
- gnutls_privkey_t *privkey,
- gnutls_pubkey_t *pubkey);
-
-int gnutls_hpke_get_seq(gnutls_hpke_context_t ctx, uint64_t *seq);
-int gnutls_hpke_set_seq(gnutls_hpke_context_t ctx, uint64_t seq);
-
-int gnutls_hpke_export(gnutls_hpke_context_t ctx,
- const gnutls_datum_t *exporter_context, const size_t L,
- gnutls_datum_t *secret);
#ifdef __cplusplus
}
#endif
--- /dev/null
+/*
+ * Copyright © 2026 David Dudas
+ *
+ * Author: David Dudas <david.dudas03@e-uvt.ro>
+ *
+ * This file is part of GnuTLS.
+ *
+ * The GnuTLS is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public License
+ * as published by the Free Software Foundation; either version 2.1 of
+ * the License, or (at your option) any later version.
+ *
+ * This library is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+
+ * along with this program. If not, see <https://www.gnu.org/licenses/>
+
+ *
+ */
+
+#ifndef GNUTLS_HPKE_H
+#define GNUTLS_HPKE_H
+
+#include <gnutls/gnutls.h>
+
+#include <stdint.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/**
+ * gnutls_hpke_kem_t:
+ * @GNUTLS_HPKE_KEM_DHKEM_P256: DHKEM using P-256
+ * @GNUTLS_HPKE_KEM_DHKEM_P384: DHKEM using P-384
+ * @GNUTLS_HPKE_KEM_DHKEM_P521: DHKEM using P-521
+ * @GNUTLS_HPKE_KEM_DHKEM_X25519: DHKEM using X25519
+ * @GNUTLS_HPKE_KEM_DHKEM_X448: DHKEM using X448
+ * Enumeration of HPKE KEM algorithms.
+ */
+typedef enum gnutls_hpke_kem_t {
+ GNUTLS_HPKE_KEM_DHKEM_P256 = 0x0010,
+ GNUTLS_HPKE_KEM_DHKEM_P384 = 0x0011,
+ GNUTLS_HPKE_KEM_DHKEM_P521 = 0x0012,
+ GNUTLS_HPKE_KEM_DHKEM_X25519 = 0x0020,
+ GNUTLS_HPKE_KEM_DHKEM_X448 = 0x0021
+} gnutls_hpke_kem_t;
+
+/**
+ * gnutls_hpke_kdf_t:
+ * @GNUTLS_HPKE_KDF_HKDF_SHA256: HKDF using SHA-256
+ * @GNUTLS_HPKE_KDF_HKDF_SHA384: HKDF using SHA-384
+ * @GNUTLS_HPKE_KDF_HKDF_SHA512: HKDF using SHA-512
+ * Enumeration of HPKE KDF algorithms.
+ */
+typedef enum gnutls_hpke_kdf_t {
+ GNUTLS_HPKE_KDF_HKDF_SHA256 = 0x0001,
+ GNUTLS_HPKE_KDF_HKDF_SHA384 = 0x0002,
+ GNUTLS_HPKE_KDF_HKDF_SHA512 = 0x0003
+} gnutls_hpke_kdf_t;
+
+/**
+ * gnutls_hpke_aead_t:
+ * @GNUTLS_HPKE_AEAD_AES_128_GCM: AES-128-GCM
+ * @GNUTLS_HPKE_AEAD_AES_256_GCM: AES-256-GCM
+ * @GNUTLS_HPKE_AEAD_CHACHA20_POLY1305: ChaCha20-Poly1305
+ * Enumeration of HPKE AEAD algorithms.
+ */
+typedef enum gnutls_hpke_aead_t {
+ GNUTLS_HPKE_AEAD_AES_128_GCM = 0x0001,
+ GNUTLS_HPKE_AEAD_AES_256_GCM = 0x0002,
+ GNUTLS_HPKE_AEAD_CHACHA20_POLY1305 = 0x0003,
+ GNUTLS_HPKE_AEAD_EXPORT_ONLY = 0xFFFF
+} gnutls_hpke_aead_t;
+
+/**
+ * gnutls_hpke_mode_t:
+ * GNUTLS_HPKE_MODE_BASE: HPKE base mode
+ * GNUTLS_HPKE_MODE_PSK: HPKE psk mode
+ * GNUTLS_HPKE_MODE_AUTH: HPKE auth mode
+ * GNUTLS_HPKE_MODE_AUTH_PSK: HPKE auth+psk mode
+ * Enumeration of HPKE modes.
+ */
+typedef enum gnutls_hpke_mode_t {
+ GNUTLS_HPKE_MODE_BASE = 0,
+ GNUTLS_HPKE_MODE_PSK = 1,
+ GNUTLS_HPKE_MODE_AUTH = 2,
+ GNUTLS_HPKE_MODE_AUTH_PSK = 3
+} gnutls_hpke_mode_t;
+
+/**
+ * gnutls_hpke_role_t
+ * GNUTLS_HPKE_ROLE_SENDER: HPKE sender role
+ * GNUTLS_HPKE_ROLE_RECEIVER: HPKE receiver role
+ */
+typedef enum gnutls_hpke_role_t {
+ GNUTLS_HPKE_ROLE_SENDER = 0,
+ GNUTLS_HPKE_ROLE_RECEIVER = 1
+} gnutls_hpke_role_t;
+
+typedef struct gnutls_hpke_context_st *gnutls_hpke_context_t;
+
+int gnutls_hpke_context_init(gnutls_hpke_context_t *ctx,
+ const gnutls_hpke_mode_t mode,
+ const gnutls_hpke_role_t role,
+ const gnutls_hpke_kem_t kem,
+ const gnutls_hpke_kdf_t kdf,
+ const gnutls_hpke_aead_t aead);
+
+int gnutls_hpke_context_deinit(gnutls_hpke_context_t ctx);
+
+int gnutls_hpke_context_set_psk(gnutls_hpke_context_t ctx,
+ const gnutls_datum_t *psk,
+ const gnutls_datum_t *psk_id);
+
+int gnutls_hpke_context_set_sender_privkey(gnutls_hpke_context_t ctx,
+ gnutls_privkey_t sender_privkey);
+
+int gnutls_hpke_context_set_sender_pubkey(gnutls_hpke_context_t ctx,
+ gnutls_pubkey_t sender_pubkey);
+
+size_t gnutls_hpke_context_get_enc_size(const gnutls_hpke_context_t ctx);
+
+int gnutls_hpke_encap(gnutls_hpke_context_t ctx, const gnutls_datum_t *info,
+ gnutls_datum_t *enc, gnutls_pubkey_t receiver_pubkey);
+
+int gnutls_hpke_seal(gnutls_hpke_context_t ctx, const gnutls_datum_t *aad,
+ const gnutls_datum_t *plaintext,
+ gnutls_datum_t *ciphertext);
+
+int gnutls_hpke_decap(gnutls_hpke_context_t ctx, const gnutls_datum_t *info,
+ const gnutls_datum_t *enc,
+ gnutls_privkey_t receiver_privkey);
+
+int gnutls_hpke_open(gnutls_hpke_context_t ctx, const gnutls_datum_t *aad,
+ const gnutls_datum_t *ciphertext,
+ gnutls_datum_t *plaintext);
+
+int gnutls_hpke_context_set_ikme(gnutls_hpke_context_t ctx,
+ const gnutls_datum_t *ikme);
+
+int gnutls_hpke_generate_keypair(const gnutls_hpke_kem_t kem,
+ const gnutls_datum_t *ikm,
+ gnutls_privkey_t *privkey,
+ gnutls_pubkey_t *pubkey);
+
+int gnutls_hpke_get_seq(gnutls_hpke_context_t ctx, uint64_t *seq);
+int gnutls_hpke_set_seq(gnutls_hpke_context_t ctx, uint64_t seq);
+
+int gnutls_hpke_export(gnutls_hpke_context_t ctx,
+ const gnutls_datum_t *exporter_context, const size_t L,
+ gnutls_datum_t *secret);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif // GNUTLS_HPKE_H
#include <gnutls/gnutls.h>
#include <gnutls/crypto.h>
+#include <gnutls/hpke.h>
#include <gnutls/abstract.h>
#include "utils.h"
projects / thirdparty / gnutls.git / commitdiff
