Lines Matching +full:non +full:- +full:secure +full:- +full:domain

1 /* SPDX-License-Identifier: GPL-2.0+ */
18 #define TOKTYPE_NON_CCA		 0x00 /* Non-CCA key token */
42 /* inside view of a CCA secure key token (only type 0x01 version 0x04) */
82 		      /*   AES-128  512  640		 */
83 		      /*   AES-192  576  640		 */
84 		      /*   AES-256  640  640		 */
98 /* inside view of an CCA secure ECC private key */
108 	u8  htype;    /* hash method, 0x02 for SHA-256 */
134  * Simple check if the token is a valid CCA secure AES data key
142  * Simple check if the token is a valid CCA secure AES cipher key
153  * Simple check if the token is a valid CCA secure ECC private
161  * Generate (random) CCA AES DATA secure key.
163 int cca_genseckey(u16 cardnr, u16 domain, u32 keybitsize, u8 *seckey);
166  * Generate CCA AES DATA secure key with given clear key value.
168 int cca_clr2seckey(u16 cardnr, u16 domain, u32 keybitsize,
172  * Derive proteced key from an CCA AES DATA secure key.
174 int cca_sec2protkey(u16 cardnr, u16 domain,
179  * Generate (random) CCA AES CIPHER secure key.
181 int cca_gencipherkey(u16 cardnr, u16 domain, u32 keybitsize, u32 keygenflags,
185  * Derive proteced key from CCA AES cipher secure key.
187 int cca_cipher2protkey(u16 cardnr, u16 domain, const u8 *ckey,
191  * Build CCA AES CIPHER secure key with a given clear key value.
193 int cca_clr2cipherkey(u16 cardnr, u16 domain, u32 keybitsize, u32 keygenflags,
197  * Derive proteced key from CCA ECC secure private key.
199 int cca_ecc2protkey(u16 cardnr, u16 domain, const u8 *key,
205 int cca_query_crypto_facility(u16 cardnr, u16 domain,
212  * Verification Pattern provided inside a secure key.
221  * - apqn is online and is in fact a CCA apqn
222  * - if cardnr is not FFFF only apqns with this cardnr
223  * - if domain is not FFFF only apqns with this domainnr
224  * - if minhwtype > 0 only apqns with hwtype >= minhwtype
225  * - if cur_mkvp != 0 only apqns where cur_mkvp == mkvp
226  * - if old_mkvp != 0 only apqns where old_mkvp == mkvp
227  * - if verify is enabled and a cur_mkvp and/or old_mkvp
231  *   0 = AES_MK_SET - AES MK set, 1 = APKA MK_SET - APKA MK set
234  * entry is simple a 32 bit value with 16 bit cardnr and 16 bit domain nr and
237  * -ENODEV is returned.
239 int cca_findcard2(u32 **apqns, u32 *nr_apqns, u16 cardnr, u16 domain,