kcapi-sys 0.0.3

Rust FFI bindings for libkcapi, the kernel crypto api library.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

//! libkcapi/kcapi.h rustified.  Read doc comments there.
//! This is version libkcapi 0.6.1

extern crate libc;
use libc::{c_int, c_uint, c_char, c_uchar, size_t, ssize_t};

#[repr(C)]
#[deriving(Show, Copy, PartialEq, Eq)]
pub struct kcapi_cipher_info {
    pub blocksize: c_uint,
    pub ivsize: c_uint,
    pub hash_digestsize: c_uint,
    pub blk_min_keysize: c_uint,
    pub blk_max_keysize: c_uint,
    pub aead_maxauthsize: c_uint,
    pub rng_seedsize: c_uint,
}

#[repr(C)]
#[deriving(Show, Copy, PartialEq, Eq)]
pub struct kcapi_cipher_data {
    pub iv: *const c_uchar,
    pub ivlen: size_t,
}

#[repr(C)]
#[deriving(Show, Copy, PartialEq, Eq)]
pub struct kcapi_aead_data {
    pub datalen: size_t,
    pub data: *mut c_uchar,
    pub assoclen: size_t,
    pub assoc: *mut c_uchar,
    pub taglen: size_t,
    pub tag: *mut c_uchar,
}

#[repr(C)]
#[deriving(Show, Copy, PartialEq, Eq)]
pub struct kcapi_handle {
    pub tfmfd: c_int,
    pub opfd: c_int,
    pub pipes: [c_int, ..2],
    pub cipher: kcapi_cipher_data,
    pub aead: kcapi_aead_data,
    pub info: kcapi_cipher_info,
}

/* Symmetric Cipher API */
extern "C" {
    pub fn kcapi_cipher_init(handle: *mut kcapi_handle, ciphername: *const c_char) -> c_int;
    pub fn kcapi_cipher_destroy(handle: *mut kcapi_handle) -> c_int;
    pub fn kcapi_cipher_setkey(handle: *mut kcapi_handle, key: *const c_uchar, keylen: size_t) -> c_int;
    pub fn kcapi_cipher_setiv(handle: *mut kcapi_handle, iv: *const c_uchar, ivlen: size_t) -> c_int;
    pub fn kcapi_cipher_encrypt(handle: *mut kcapi_handle,
                                indata: *const c_uchar, inlen: size_t,
                                out: *const c_uchar, outlen: size_t) -> ssize_t;
    pub fn kcapi_cipher_decrypt(handle: *mut kcapi_handle,
                                indata: *const c_uchar, inlen: size_t,
                                out: *const c_uchar, outlen: size_t) -> ssize_t;
    /*  These commented out pending figuring out iovecs in Rust
    pub fn kcapi_cipher_stream_init_enc(handle: *mut kcapi_handle,iov: *mut iovec, iovlen: size_t)-> ssize_t;
    pub fn kcapi_cipher_stream_init_dec(handle: *mut kcapi_handle,iov: *mut iovec, iovlen: size_t)-> ssize_t;
    pub fn kcapi_cipher_stream_update(handle: *mut kcapi_handle,iov: *mut iovec, iovlen: size_t)-> ssize_t;
    pub fn kcapi_cipher_stream_op(handle: *mut kcapi_handle, iov: *mut iovec, iovlen: size_t)-> ssize_t;
    */
    pub fn kcapi_cipher_ivsize(handle: *mut kcapi_handle) -> c_uint;
    pub fn kcapi_cipher_blocksize(handle: *mut kcapi_handle) -> c_uint;
}


#[test]
/// This test fails if you don't have the netlink patch applied to get cipher info.
/// Which I don't.  But we can just fill that in by hand as a workaround.
fn test_init() {
    unsafe {
    let mut kcapi_handle = unsafe { ::std::mem::uninitialized() };
    let r = kcapi_cipher_init(&mut kcapi_handle as *mut _, "cbc(aes)".to_c_str().as_ptr());
    //assert!(r == 0);
    }
}