lc_pkcs7_parser.h

Go to the documentation of this file.

/*
 * Copyright (C) 2024 - 2025, Stephan Mueller <smueller@chronox.de>
 *
 * License: see LICENSE file in root directory
 *
 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ALL OF
 * WHICH ARE HEREBY DISCLAIMED.  NO EVENT SHALL THE AUTHOR BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
 * OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 * LIABILITY, WHETHER CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING ANY WAY OF THE
 * USE OF THIS SOFTWARE, EVEN IF NOT ADVISED OF THE POSSIBILITY OF SUCH
 * DAMAGE.
 */
 
#ifndef _CRYPTO_PKCS7_H
#define _CRYPTO_PKCS7_H
 
#include "ext_headers.h"
#include "lc_hash.h"
#include "lc_pkcs7_common.h"
#include "lc_x509_parser.h"


int lc_pkcs7_decode(struct lc_pkcs7_message *pkcs7, const uint8_t *data,
                    size_t datalen);

void lc_pkcs7_message_clear(struct lc_pkcs7_message *pkcs7);

int lc_pkcs7_get_content_data(const struct lc_pkcs7_message *pkcs7,
                              const uint8_t **data, size_t *datalen);
 
struct lc_verify_rules {
        uint16_t required_keyusage;

        uint16_t required_eku;
};

int lc_pkcs7_verify(struct lc_pkcs7_message *pkcs7,
                    const struct lc_pkcs7_trust_store *trust_store,
                    const struct lc_verify_rules *verify_rules);

int lc_pkcs7_supply_detached_data(struct lc_pkcs7_message *pkcs7,
                                  const uint8_t *data, size_t datalen);

int lc_pkcs7_get_digest(struct lc_pkcs7_message *pkcs7,
                        const uint8_t **message_digest,
                        size_t *message_digest_len,
                        const struct lc_hash **hash_algo);

int lc_pkcs7_trust_store_add(struct lc_pkcs7_trust_store *trust_store,
                             struct lc_x509_certificate *x509);

void lc_pkcs7_trust_store_clear(struct lc_pkcs7_trust_store *trust_store);
 
#endif /* _CRYPTO_PKCS7_H */