// SPDX-License-Identifier: LGPL-2.1+

/*

 * Dan Williams <dcbw@redhat.com>

 * Copyright (C) 2007 - 2014 Red Hat, Inc.

 */

#ifndef __NM_CRYPTO_H__

#define __NM_CRYPTO_H__

#if !((NETWORKMANAGER_COMPILATION) & NM_NETWORKMANAGER_COMPILATION_WITH_LIBNM_CORE_PRIVATE)

#error Cannot use this header.

#endif

typedef enum {

	NM_CRYPTO_CIPHER_UNKNOWN,

	NM_CRYPTO_CIPHER_DES_EDE3_CBC,

	NM_CRYPTO_CIPHER_DES_CBC,

	NM_CRYPTO_CIPHER_AES_128_CBC,

	NM_CRYPTO_CIPHER_AES_192_CBC,

	NM_CRYPTO_CIPHER_AES_256_CBC,

} NMCryptoCipherType;

typedef struct {

	const char *name;

	NMCryptoCipherType cipher;

	guint8 digest_len;

	guint8 real_iv_len;

} NMCryptoCipherInfo;

const NMCryptoCipherInfo *nm_crypto_cipher_get_info (NMCryptoCipherType cipher);

const NMCryptoCipherInfo *nm_crypto_cipher_get_info_by_name (const char *cipher_name, gssize p_len);

typedef enum {

	NM_CRYPTO_KEY_TYPE_UNKNOWN = 0,

	NM_CRYPTO_KEY_TYPE_RSA,

	NM_CRYPTO_KEY_TYPE_DSA

} NMCryptoKeyType;

typedef enum {

	NM_CRYPTO_FILE_FORMAT_UNKNOWN = 0,

	NM_CRYPTO_FILE_FORMAT_X509,

	NM_CRYPTO_FILE_FORMAT_RAW_KEY,

	NM_CRYPTO_FILE_FORMAT_PKCS12

} NMCryptoFileFormat;

/*****************************************************************************/

GBytes *nm_crypto_read_file (const char *filename,

                             GError **error);

gboolean nm_crypto_load_and_verify_certificate (const char *file,

                                                NMCryptoFileFormat *out_file_format,

                                                GBytes **out_certificat,

                                                GError **error);

gboolean nm_crypto_is_pkcs12_file (const char *file, GError **error);

gboolean nm_crypto_is_pkcs12_data (const guint8 *data, gsize len, GError **error);

NMCryptoFileFormat nm_crypto_verify_private_key_data (const guint8 *data,

                                                      gsize data_len,

                                                      const char *password,

                                                      gboolean *out_is_encrypted,

                                                      GError **error);

NMCryptoFileFormat nm_crypto_verify_private_key (const char *file,

                                                 const char *password,

                                                 gboolean *out_is_encrypted,

                                                 GError **error);

void nm_crypto_md5_hash (const guint8 *salt,

                         gsize salt_len,

                         const guint8 *password,

                         gsize password_len,

                         guint8 *buffer,

                         gsize buflen);

gboolean nm_crypto_randomize (void *buffer, gsize buffer_len, GError **error);

/*****************************************************************************/

GBytes *nmtst_crypto_decrypt_openssl_private_key_data (const guint8 *data,

                                                       gsize data_len,

                                                       const char *password,

                                                       NMCryptoKeyType *out_key_type,

                                                       GError **error);

GBytes *nmtst_crypto_decrypt_openssl_private_key (const char *file,

                                                  const char *password,

                                                  NMCryptoKeyType *out_key_type,

                                                  GError **error);

GBytes *nmtst_crypto_rsa_key_encrypt (const guint8 *data,

                                      gsize len,

                                      const char *in_password,

                                      char **out_password,

                                      GError **error);

guint8 *nmtst_crypto_make_des_aes_key (NMCryptoCipherType cipher,

                                       const guint8 *salt,

                                       gsize salt_len,

                                       const char *password,

                                       gsize *out_len,

                                       GError **error);

/*****************************************************************************/

#endif  /* __NM_CRYPTO_H__ */