Manual Pages  — CRYPTO

• SYNOPSIS
• DESCRIPTION
• DEPRECATION NOTICE
• THEORY OF OPERATION
• SYMMETRIC-KEY OPERATION
• Algorithms
• IOCTL Request Descriptions
• ASYMMETRIC-KEY OPERATION
• Asymmetric-key algorithms
• Asymmetric-key commands
• SEE ALSO
• HISTORY
• BUGS

struct crypt_find_op {
    int     crid;       /* driver id + flags */
    char    name[32];   /* device/driver name */
};

struct session_op {
    u_int32_t cipher;   /* e.g. CRYPTO_DES_CBC */
    u_int32_t mac;      /* e.g. CRYPTO_MD5_HMAC */

    u_int32_t keylen;   /* cipher key */
    const void *key;
    int mackeylen;      /* mac key */
    const void *mackey;

    u_int32_t ses;      /* returns: ses # */
};

Multiple sessions may be bound to a single file descriptor. The session ID returned in sessp->ses is supplied as a required field in the symmetric-operation structure crypt_op for future encryption or hashing requests.

For non-zero symmetric-key privacy algorithms, the privacy algorithm must be specified in sessp->cipher, the key length in sessp->keylen, and the key value in the octets addressed by sessp->key.

For keyed one-way hash algorithms, the one-way hash must be specified in sessp->mac, the key length in sessp->mackey, and the key value in the octets addressed by sessp->mackeylen.

Support for a specific combination of fused privacy and integrity-check algorithms depends on whether the underlying hardware supports that combination. Not all combinations are supported by all hardware, even if the hardware supports each operation as a stand-alone non-fused operation.

struct session2_op {
    u_int32_t cipher;   /* e.g. CRYPTO_DES_CBC */
    u_int32_t mac;      /* e.g. CRYPTO_MD5_HMAC */

    u_int32_t keylen;   /* cipher key */
    const void *key;
    int mackeylen;      /* mac key */
    const void *mackey;

    u_int32_t ses;      /* returns: ses # */
    int crid;           /* driver id + flags (rw) */
    int pad[4];         /* for future expansion */
};

struct crypt_op {
    u_int32_t ses;
    u_int16_t op;       /* e.g. COP_ENCRYPT */
    u_int16_t flags;
    u_int len;
    caddr_t src, dst;
    caddr_t mac;                /* must be large enough for result */
    caddr_t iv;
};

struct crypt_aead {
    u_int32_t ses;
    u_int16_t op;       /* e.g. COP_ENCRYPT */
    u_int16_t flags;
    u_int len;
    u_int aadlen;
    u_int ivlen;
    caddr_t src, dst;
    caddr_t aad;
    caddr_t tag;                /* must be large enough for result */
    caddr_t iv;
};

struct crypt_kop {
    u_int crk_op;               /* e.g. CRK_MOD_EXP */
    u_int crk_status;           /* return status */
    u_short crk_iparams;        /* # of input params */
    u_short crk_oparams;        /* # of output params */
    u_int crk_pad1;
    struct crparam crk_param[CRK_MAXPARAM];
};

/* Bignum parameter, in packed bytes. */
struct crparam {
    void * crp_p;
    u_int crp_nbits;
};

The semantics of these arguments are currently undocumented.