mirror of https://github.com/docker/cli.git
128 lines
6.4 KiB
Go
128 lines
6.4 KiB
Go
package pkcs11
|
|
|
|
// Vendor specific range for Ncipher network HSM.
|
|
const (
|
|
NFCK_VENDOR_NCIPHER = 0xde436972
|
|
CKA_NCIPHER = NFCK_VENDOR_NCIPHER
|
|
CKM_NCIPHER = NFCK_VENDOR_NCIPHER
|
|
CKK_NCIPHER = NFCK_VENDOR_NCIPHER
|
|
)
|
|
|
|
// Vendor specific mechanisms for HMAC on Ncipher HSMs where Ncipher does not allow use of generic_secret keys.
|
|
const (
|
|
CKM_NC_SHA_1_HMAC_KEY_GEN = CKM_NCIPHER + 0x3 /* no params */
|
|
CKM_NC_MD5_HMAC_KEY_GEN = CKM_NCIPHER + 0x6 /* no params */
|
|
CKM_NC_SHA224_HMAC_KEY_GEN = CKM_NCIPHER + 0x24 /* no params */
|
|
CKM_NC_SHA256_HMAC_KEY_GEN = CKM_NCIPHER + 0x25 /* no params */
|
|
CKM_NC_SHA384_HMAC_KEY_GEN = CKM_NCIPHER + 0x26 /* no params */
|
|
CKM_NC_SHA512_HMAC_KEY_GEN = CKM_NCIPHER + 0x27 /* no params */
|
|
)
|
|
|
|
// Vendor specific range for Mozilla NSS.
|
|
const (
|
|
NSSCK_VENDOR_NSS = 0x4E534350
|
|
CKO_NSS = CKO_VENDOR_DEFINED | NSSCK_VENDOR_NSS
|
|
CKK_NSS = CKK_VENDOR_DEFINED | NSSCK_VENDOR_NSS
|
|
CKC_NSS = CKC_VENDOR_DEFINED | NSSCK_VENDOR_NSS
|
|
CKA_NSS = CKA_VENDOR_DEFINED | NSSCK_VENDOR_NSS
|
|
CKA_TRUST = CKA_NSS + 0x2000
|
|
CKM_NSS = CKM_VENDOR_DEFINED | NSSCK_VENDOR_NSS
|
|
CKR_NSS = CKM_VENDOR_DEFINED | NSSCK_VENDOR_NSS
|
|
CKT_VENDOR_DEFINED = 0x80000000
|
|
CKT_NSS = CKT_VENDOR_DEFINED | NSSCK_VENDOR_NSS
|
|
)
|
|
|
|
// Vendor specific values for Mozilla NSS.
|
|
const (
|
|
CKO_NSS_CRL = CKO_NSS + 1
|
|
CKO_NSS_SMIME = CKO_NSS + 2
|
|
CKO_NSS_TRUST = CKO_NSS + 3
|
|
CKO_NSS_BUILTIN_ROOT_LIST = CKO_NSS + 4
|
|
CKO_NSS_NEWSLOT = CKO_NSS + 5
|
|
CKO_NSS_DELSLOT = CKO_NSS + 6
|
|
CKK_NSS_PKCS8 = CKK_NSS + 1
|
|
CKK_NSS_JPAKE_ROUND1 = CKK_NSS + 2
|
|
CKK_NSS_JPAKE_ROUND2 = CKK_NSS + 3
|
|
CKK_NSS_CHACHA20 = CKK_NSS + 4
|
|
CKA_NSS_URL = CKA_NSS + 1
|
|
CKA_NSS_EMAIL = CKA_NSS + 2
|
|
CKA_NSS_SMIME_INFO = CKA_NSS + 3
|
|
CKA_NSS_SMIME_TIMESTAMP = CKA_NSS + 4
|
|
CKA_NSS_PKCS8_SALT = CKA_NSS + 5
|
|
CKA_NSS_PASSWORD_CHECK = CKA_NSS + 6
|
|
CKA_NSS_EXPIRES = CKA_NSS + 7
|
|
CKA_NSS_KRL = CKA_NSS + 8
|
|
CKA_NSS_PQG_COUNTER = CKA_NSS + 20
|
|
CKA_NSS_PQG_SEED = CKA_NSS + 21
|
|
CKA_NSS_PQG_H = CKA_NSS + 22
|
|
CKA_NSS_PQG_SEED_BITS = CKA_NSS + 23
|
|
CKA_NSS_MODULE_SPEC = CKA_NSS + 24
|
|
CKA_NSS_OVERRIDE_EXTENSIONS = CKA_NSS + 25
|
|
CKA_NSS_JPAKE_SIGNERID = CKA_NSS + 26
|
|
CKA_NSS_JPAKE_PEERID = CKA_NSS + 27
|
|
CKA_NSS_JPAKE_GX1 = CKA_NSS + 28
|
|
CKA_NSS_JPAKE_GX2 = CKA_NSS + 29
|
|
CKA_NSS_JPAKE_GX3 = CKA_NSS + 30
|
|
CKA_NSS_JPAKE_GX4 = CKA_NSS + 31
|
|
CKA_NSS_JPAKE_X2 = CKA_NSS + 32
|
|
CKA_NSS_JPAKE_X2S = CKA_NSS + 33
|
|
CKA_NSS_MOZILLA_CA_POLICY = CKA_NSS + 34
|
|
CKA_TRUST_DIGITAL_SIGNATURE = CKA_TRUST + 1
|
|
CKA_TRUST_NON_REPUDIATION = CKA_TRUST + 2
|
|
CKA_TRUST_KEY_ENCIPHERMENT = CKA_TRUST + 3
|
|
CKA_TRUST_DATA_ENCIPHERMENT = CKA_TRUST + 4
|
|
CKA_TRUST_KEY_AGREEMENT = CKA_TRUST + 5
|
|
CKA_TRUST_KEY_CERT_SIGN = CKA_TRUST + 6
|
|
CKA_TRUST_CRL_SIGN = CKA_TRUST + 7
|
|
CKA_TRUST_SERVER_AUTH = CKA_TRUST + 8
|
|
CKA_TRUST_CLIENT_AUTH = CKA_TRUST + 9
|
|
CKA_TRUST_CODE_SIGNING = CKA_TRUST + 10
|
|
CKA_TRUST_EMAIL_PROTECTION = CKA_TRUST + 11
|
|
CKA_TRUST_IPSEC_END_SYSTEM = CKA_TRUST + 12
|
|
CKA_TRUST_IPSEC_TUNNEL = CKA_TRUST + 13
|
|
CKA_TRUST_IPSEC_USER = CKA_TRUST + 14
|
|
CKA_TRUST_TIME_STAMPING = CKA_TRUST + 15
|
|
CKA_TRUST_STEP_UP_APPROVED = CKA_TRUST + 16
|
|
CKA_CERT_SHA1_HASH = CKA_TRUST + 100
|
|
CKA_CERT_MD5_HASH = CKA_TRUST + 101
|
|
CKM_NSS_AES_KEY_WRAP = CKM_NSS + 1
|
|
CKM_NSS_AES_KEY_WRAP_PAD = CKM_NSS + 2
|
|
CKM_NSS_HKDF_SHA1 = CKM_NSS + 3
|
|
CKM_NSS_HKDF_SHA256 = CKM_NSS + 4
|
|
CKM_NSS_HKDF_SHA384 = CKM_NSS + 5
|
|
CKM_NSS_HKDF_SHA512 = CKM_NSS + 6
|
|
CKM_NSS_JPAKE_ROUND1_SHA1 = CKM_NSS + 7
|
|
CKM_NSS_JPAKE_ROUND1_SHA256 = CKM_NSS + 8
|
|
CKM_NSS_JPAKE_ROUND1_SHA384 = CKM_NSS + 9
|
|
CKM_NSS_JPAKE_ROUND1_SHA512 = CKM_NSS + 10
|
|
CKM_NSS_JPAKE_ROUND2_SHA1 = CKM_NSS + 11
|
|
CKM_NSS_JPAKE_ROUND2_SHA256 = CKM_NSS + 12
|
|
CKM_NSS_JPAKE_ROUND2_SHA384 = CKM_NSS + 13
|
|
CKM_NSS_JPAKE_ROUND2_SHA512 = CKM_NSS + 14
|
|
CKM_NSS_JPAKE_FINAL_SHA1 = CKM_NSS + 15
|
|
CKM_NSS_JPAKE_FINAL_SHA256 = CKM_NSS + 16
|
|
CKM_NSS_JPAKE_FINAL_SHA384 = CKM_NSS + 17
|
|
CKM_NSS_JPAKE_FINAL_SHA512 = CKM_NSS + 18
|
|
CKM_NSS_HMAC_CONSTANT_TIME = CKM_NSS + 19
|
|
CKM_NSS_SSL3_MAC_CONSTANT_TIME = CKM_NSS + 20
|
|
CKM_NSS_TLS_PRF_GENERAL_SHA256 = CKM_NSS + 21
|
|
CKM_NSS_TLS_MASTER_KEY_DERIVE_SHA256 = CKM_NSS + 22
|
|
CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256 = CKM_NSS + 23
|
|
CKM_NSS_TLS_MASTER_KEY_DERIVE_DH_SHA256 = CKM_NSS + 24
|
|
CKM_NSS_TLS_EXTENDED_MASTER_KEY_DERIVE = CKM_NSS + 25
|
|
CKM_NSS_TLS_EXTENDED_MASTER_KEY_DERIVE_DH = CKM_NSS + 26
|
|
CKM_NSS_CHACHA20_KEY_GEN = CKM_NSS + 27
|
|
CKM_NSS_CHACHA20_POLY1305 = CKM_NSS + 28
|
|
CKM_NSS_PKCS12_PBE_SHA224_HMAC_KEY_GEN = CKM_NSS + 29
|
|
CKM_NSS_PKCS12_PBE_SHA256_HMAC_KEY_GEN = CKM_NSS + 30
|
|
CKM_NSS_PKCS12_PBE_SHA384_HMAC_KEY_GEN = CKM_NSS + 31
|
|
CKM_NSS_PKCS12_PBE_SHA512_HMAC_KEY_GEN = CKM_NSS + 32
|
|
CKR_NSS_CERTDB_FAILED = CKR_NSS + 1
|
|
CKR_NSS_KEYDB_FAILED = CKR_NSS + 2
|
|
CKT_NSS_TRUSTED = CKT_NSS + 1
|
|
CKT_NSS_TRUSTED_DELEGATOR = CKT_NSS + 2
|
|
CKT_NSS_MUST_VERIFY_TRUST = CKT_NSS + 3
|
|
CKT_NSS_NOT_TRUSTED = CKT_NSS + 10
|
|
CKT_NSS_TRUST_UNKNOWN = CKT_NSS + 5
|
|
)
|