gen_xecdh.c

Example of ECDH generation using ECX keys.

See Note on examples.

#include <string.h>
#include <stdlib.h>
#include <stdio.h>
 
#include <dinamo.h> /* header do Dinamo */
 
#define HOST_ADDR "127.0.0.1"
#define USER_ID "master"
#define USER_PWD "12345678"
 
#define ECDH_KEY_NAME "ecdh_key"
#define ECDH_PAIR_KEY_NAME "ecdh_pair_key"
#define ECDH_NEW_DERIVED_KEY "ecdh_derived_key"
 
#define ECDH_KEY_ALG (ALG_ECX_X25519)
 
int main()
{
    int nRet = 0;
    struct AUTH_PWD authPwd;
    HSESSIONCTX hSession = NULL;
    HKEYCTX hKey = NULL;
    HKEYCTX hPairKey = NULL;
    BYTE pbPubKey[1024] = {0};
    DWORD dwPubKeyLen = sizeof(pbPubKey);
    BYTE pbSecret[1024] = {0};
    DWORD dwSecretLen = sizeof(pbSecret);
 
 
 
    //Inicializa as bibliotecas do Dinamo
    nRet =  DInitialize(0);
    if(nRet)
    {
        printf("Function failure: DInitialize \nError code: %d\n", nRet);
        goto clean;
    }
 
    printf("Libraries initialized.\n");
 
    //Inicializa a estrutura para conexão com o HSM
    strncpy(authPwd. szAddr, HOST_ADDR, sizeof(authPwd.szAddr));
    authPwd. nPort = DEFAULT_PORT;
    strncpy(authPwd. szUserId, USER_ID, sizeof(authPwd.szUserId));
    strncpy(authPwd. szPassword, USER_PWD, sizeof(authPwd.szPassword));
 
    nRet = DOpenSession(&hSession, SS_USER_PWD,(BYTE *)&authPwd, sizeof(authPwd), ENCRYPTED_CONN);
    if(nRet)
    {
        printf("Function failure: DOpenSession \nError code: %d\n", nRet);
        goto clean;
    }
 
    printf("Session with Dinamo established.\n");
 
 
    nRet = DGenerateKey(hSession, ECDH_KEY_NAME, ECDH_KEY_ALG, 0, &hKey);
    if(nRet)
    {
        printf("Failed to generate primary key.\n");
        goto clean;
    }
 
    printf("Primary key generated successfully.\n");
 
    nRet = DGenerateKey(hSession, ECDH_PAIR_KEY_NAME, ECDH_KEY_ALG, 0, &hPairKey);
    if(nRet)
    {
        printf("Failed to generate key pair.\n");
        goto clean;
    }
 
    printf("Pair key generated successfully.\n");
 
 
 
    nRet = DExportKey(hPairKey, NULL, PUBLICKEY_BLOB, 0, pbPubKey, &dwPubKeyLen);
    if(nRet)
    {
        printf("Failed to export public key from pair.\n");
        goto clean;
    }
 
    printf("Public key of the pair successfully exported.\n");
 
 
 
 
    nRet = DGenEcdhKey(hSession,
                       DN_GEN_KEY_KDF_RAW_SECRET,
                       ECDH_KEY_NAME,
                       pbPubKey,
                       dwPubKeyLen,
                       pbSecret,
                       &dwSecretLen,
                       0);
    if(nRet)
    {
        printf("Failed to generate ECDH RAW Secret.\n");
        goto clean;
    }
 
    printf("ECDH RAW secret successfully generated.\n");
 
    BYTE pbKDFData[] = {0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0x11,0x12,0x13,0x14,0x15,0x16,0x17,0x18};
 
 
    GEN_ECDH_X9_63 stEcdhX963Info;
    memset(&stEcdhX963Info, 0, sizeof(stEcdhX963Info));
 
 
 
    strncpy(stEcdhX963Info. szTargetKeyName, ECDH_NEW_DERIVED_KEY, sizeof(stEcdhX963Info.szTargetKeyName));
    stEcdhX963Info. dwTargetKeyAlg = ALG_AES_256;
    stEcdhX963Info. dwTargetKeyAttributes = EXPORTABLE_KEY | TEMPORARY_KEY;
    stEcdhX963Info. dbPubKey. pvData = pbPubKey;
    stEcdhX963Info.dbPubKey. dwDataLen = dwPubKeyLen;
    stEcdhX963Info. dbKDFData.pvData = pbKDFData;
    stEcdhX963Info.dbKDFData.dwDataLen = sizeof(pbKDFData);
 
 
    nRet = DGenEcdhKey(hSession,
                       DN_GEN_KEY_X9_63_SHA256,
                       ECDH_KEY_NAME,
                       &stEcdhX963Info,
                       sizeof(stEcdhX963Info),
                       NULL,
                       NULL,
                       0);
    if(nRet)
    {
        printf("Failed to generate ECDH X9.63 Secret.\n");
        goto clean;
    }
 
    printf("ECDH X9.64 key successfully derived.\n");
 
 
    nRet = DRemoveObj(hSession, ECDH_NEW_DERIVED_KEY);
    if(nRet)
    {
        printf("Failed to remove derived key.\n");
        goto clean;
    }
 
    printf("Derived key successfully removed.\n");
 
clean:
 
    DDestroyKey(&hKey, REMOVE_FROM_HSM);
    DDestroyKey(&hPairKey, REMOVE_FROM_HSM);
    printf("Context keys have been released.\n");
 
    DCloseSession(&hSession, 0);
    printf("Session closed.\n");
 
    DFinalize();
    printf("Libraries finished.\n");
 
    return nRet;
}