20#ifndef FREERDP_LIB_CORE_SECURITY_H
21#define FREERDP_LIB_CORE_SECURITY_H
24#include <freerdp/crypto/crypto.h>
26#include <freerdp/freerdp.h>
27#include <freerdp/api.h>
29#include <winpr/stream.h>
32FREERDP_LOCAL BOOL security_master_secret(
const BYTE* premaster_secret,
size_t pre_len,
33 const BYTE* client_random,
size_t client_len,
34 const BYTE* server_random,
size_t server_len,
35 BYTE* output,
size_t out_len);
38FREERDP_LOCAL BOOL security_session_key_blob(
const BYTE* master_secret,
size_t master_len,
39 const BYTE* client_random,
size_t client_len,
40 const BYTE* server_random,
size_t server_len,
41 BYTE* output,
size_t out_len);
43FREERDP_LOCAL
void security_mac_salt_key(
const BYTE* session_key_blob,
size_t session_len,
44 const BYTE* client_random,
size_t client_len,
45 const BYTE* server_random,
size_t server_len, BYTE* output,
49FREERDP_LOCAL BOOL security_licensing_encryption_key(
const BYTE* session_key_blob,
50 size_t session_len,
const BYTE* client_random,
51 size_t client_len,
const BYTE* server_random,
52 size_t server_len, BYTE* output,
56FREERDP_LOCAL BOOL security_mac_data(
const BYTE* mac_salt_key,
size_t mac_salt_key_length,
57 const BYTE* data,
size_t length, BYTE* output,
58 size_t output_length);
61FREERDP_LOCAL BOOL security_mac_signature(rdpRdp* rdp,
const BYTE* data, UINT32 length,
62 BYTE* output,
size_t out_len);
65FREERDP_LOCAL BOOL security_salted_mac_signature(rdpRdp* rdp,
const BYTE* data, UINT32 length,
66 BOOL encryption, BYTE* output,
size_t out_len);
69FREERDP_LOCAL BOOL security_establish_keys(rdpRdp* rdp);
71FREERDP_LOCAL
void security_lock(rdpRdp* rdp);
73FREERDP_LOCAL
void security_unlock(rdpRdp* rdp);
76FREERDP_LOCAL BOOL security_encrypt(BYTE* data,
size_t length, rdpRdp* rdp);
79FREERDP_LOCAL BOOL security_decrypt(BYTE* data,
size_t length, rdpRdp* rdp);
82FREERDP_LOCAL BOOL security_hmac_signature(
const BYTE* data,
size_t length, BYTE* output,
83 size_t out_len, rdpRdp* rdp);
86FREERDP_LOCAL BOOL security_fips_encrypt(BYTE* data,
size_t length, rdpRdp* rdp);
89FREERDP_LOCAL BOOL security_fips_decrypt(BYTE* data,
size_t length, rdpRdp* rdp);
92FREERDP_LOCAL BOOL security_fips_check_signature(
const BYTE* data,
size_t length,
const BYTE* sig,
93 size_t sig_len, rdpRdp* rdp);