mirror of
https://codeberg.org/scip/pcp.git
synced 2025-12-17 20:00:58 +01:00
updated api docs.
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
/*
|
||||
This file is part of Pretty Curved Privacy (pcp1).
|
||||
|
||||
Copyright (C) 2013 T.Linden.
|
||||
Copyright (C) 2013-2014 T.v.Dein.
|
||||
|
||||
This program is free software: you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
@@ -16,13 +16,66 @@
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
|
||||
You can contact me by mail: <tlinden AT cpan DOT org>.
|
||||
You can contact me by mail: <tom AT vondein DOT org>.
|
||||
*/
|
||||
|
||||
|
||||
#ifndef _HAVE_PCP_VAULT
|
||||
#define _HAVE_PCP_VAULT
|
||||
|
||||
/** \defgroup VAULT VAULT
|
||||
@{
|
||||
|
||||
The vault file is used to store keys and key-signatures on disk.
|
||||
It works like a keyring.
|
||||
|
||||
\section vformat Vault File Format
|
||||
|
||||
The vault file contains all public and secret keys. It's a portable
|
||||
binary file.
|
||||
|
||||
The file starts with a header:
|
||||
|
||||
@code
|
||||
+-------------------------------------------+
|
||||
| Field Size Description |
|
||||
+-------------------------------------------+
|
||||
| File ID | 1 | Vault Identifier 0xC4 |
|
||||
+-------------------------------------------+
|
||||
| Version | 4 | Big endian, version |
|
||||
+-------------------------------------------+
|
||||
| Checksum | 32 | SHA256 Checksum |
|
||||
+-------------------------------------------+
|
||||
@endcode
|
||||
|
||||
The checksum is a checksum of all keys.
|
||||
|
||||
The header is followed by the keys. Each key is preceded by an
|
||||
item header which looks like this:
|
||||
|
||||
@code
|
||||
+--------------------------------------------+
|
||||
| Field Size Description |
|
||||
+--------------------------------------------+
|
||||
| Type | 1 | Key type (S,P,M) |
|
||||
+--------------------------------------------+
|
||||
| Size | 4 | Big endian, keysize |
|
||||
+--------------------------------------------+
|
||||
| Version | 4 | Big endian, keyversion |
|
||||
+--------------------------------------------+
|
||||
| Checksum | 32 | SHA256 Key Checksum |
|
||||
+--------------------------------------------+
|
||||
@endcode
|
||||
|
||||
Type can be one of:
|
||||
|
||||
- PCP_KEY_TYPE_MAINSECRET 0x01
|
||||
- PCP_KEY_TYPE_SECRET 0x02
|
||||
- PCP_KEY_TYPE_PUBLIC 0x03
|
||||
|
||||
The item header is followed by the actual key contents.
|
||||
*/
|
||||
|
||||
#include <sys/types.h>
|
||||
#include <sys/stat.h>
|
||||
#include <stdio.h>
|
||||
@@ -37,51 +90,167 @@
|
||||
#include "buffer.h"
|
||||
#include "keysig.h"
|
||||
|
||||
/** \struct _vault_t
|
||||
This structure represents a vault. */
|
||||
struct _vault_t {
|
||||
char *filename;
|
||||
FILE *fd;
|
||||
uint8_t unsafed;
|
||||
uint8_t isnew;
|
||||
uint32_t size;
|
||||
time_t modified;
|
||||
mode_t mode;
|
||||
uint32_t version;
|
||||
byte checksum[32];
|
||||
};
|
||||
|
||||
struct _vault_header_t {
|
||||
uint8_t fileid;
|
||||
uint32_t version;
|
||||
byte checksum[32];
|
||||
};
|
||||
|
||||
struct _vault_item_header_t {
|
||||
uint8_t type;
|
||||
uint32_t size;
|
||||
uint32_t version;
|
||||
byte checksum[32];
|
||||
char *filename; /**< The filename of the vault (full path) */
|
||||
FILE *fd; /**< Filehandle if opened */
|
||||
uint8_t unsafed; /**< Flag to tell if the file needs to be written */
|
||||
uint8_t isnew; /**< Flag to tell if the vault has been newly created */
|
||||
uint32_t size; /**< Filesize */
|
||||
time_t modified; /**< mtime */
|
||||
mode_t mode; /**< File mode */
|
||||
uint32_t version; /**< Vault version */
|
||||
byte checksum[32]; /**< SHA256 checksum over the whole vault */
|
||||
};
|
||||
|
||||
/** Name of the struct */
|
||||
typedef struct _vault_t vault_t;
|
||||
|
||||
/** \struct _vault_header_t
|
||||
Defines the vault header. */
|
||||
struct _vault_header_t {
|
||||
uint8_t fileid; /**< File id, proprietary. Marks the vault as a vault */
|
||||
uint32_t version; /**< File version */
|
||||
byte checksum[32]; /**< SHA256 checksum over the whole vault */
|
||||
};
|
||||
|
||||
/** Name of the struct */
|
||||
typedef struct _vault_header_t vault_header_t;
|
||||
|
||||
/** \struct _vault_item_header_t
|
||||
An item header. */
|
||||
struct _vault_item_header_t {
|
||||
uint8_t type; /**< Item type (secret key, public, key, keysig, \see _PCP_KEY_TYPES */
|
||||
uint32_t size; /**< Size of the item */
|
||||
uint32_t version; /**< Version of the item */
|
||||
byte checksum[32]; /**< SHA256 checksum of the item */
|
||||
};
|
||||
|
||||
/** Name of the struct */
|
||||
typedef struct _vault_item_header_t vault_item_header_t;
|
||||
|
||||
/** Open a vault file.
|
||||
If the file doesn't exist, it will be created.
|
||||
|
||||
\param[in] filename The filename of the vault file.
|
||||
|
||||
\return Returns a vault object.
|
||||
*/
|
||||
vault_t *pcpvault_init(char *filename);
|
||||
|
||||
|
||||
/* Creates a new vault file. Called internally only.
|
||||
If is_tmp If set to 1, create a temporary vault file.
|
||||
*/
|
||||
vault_t *pcpvault_new(char *filename, int is_tmp);
|
||||
|
||||
|
||||
/* Writes the initial vault header to the vault.
|
||||
Called internally only. */
|
||||
int pcpvault_create(vault_t *vault);
|
||||
|
||||
|
||||
/** Add an item to the vault.
|
||||
|
||||
Adds \a item with the size \a itemsize and type \a type
|
||||
to the vault. Generates the item header and the checksum
|
||||
of the item.
|
||||
|
||||
This function writes directly into the vault file. Use
|
||||
with care. To be safe, use pcpvault_addkey() instead.
|
||||
|
||||
\param[out] vault The vault object.
|
||||
\param[in] item The item to write.
|
||||
\param[in] itemsize Size of the item.
|
||||
\param[in] type Type of the item. \see _PCP_KEY_TYPES.
|
||||
|
||||
\return Returns the number of bytes written or 0 in case of
|
||||
an error. Check fatals_if_any().
|
||||
*/
|
||||
int pcpvault_additem(vault_t *vault, void *item, size_t itemsize, uint8_t type);
|
||||
|
||||
|
||||
/** Add a key to the vault.
|
||||
|
||||
This function determines the size of the item to write
|
||||
based on the given type. It converts the internal structure
|
||||
to a binary blob and converty multibyte values to big
|
||||
endian.
|
||||
|
||||
It copies the given vault file to a temporary vault file,
|
||||
adds the item and if this went ok, copies the temporary file
|
||||
back to the original location. It then re-calculates the
|
||||
vault checksum and puts it into the vault header.
|
||||
|
||||
\param[out] vault The vault object.
|
||||
\param[in] item The item to write (a key or keysig)
|
||||
\param[in] type Type of the item. \see _PCP_KEY_TYPES.
|
||||
|
||||
\return Returns 0 on success or 1 in case of errors. Check fatals_if_any().
|
||||
*/
|
||||
int pcpvault_addkey(vault_t *vault, void *item, uint8_t type);
|
||||
|
||||
|
||||
/** Close a vault file.
|
||||
|
||||
If the vault is in unsafed state, write everything to disk
|
||||
and close the vault. Before overwriting the current vault file
|
||||
a backup will be made. If anything fails during writing the
|
||||
backup file will be retained and the error message will
|
||||
contain the filename of the backup file, so that the user
|
||||
doesn't loose data.
|
||||
|
||||
\param[out] vault The vault object.
|
||||
|
||||
\return Returns 0. Check fatals_if_any() anyway.
|
||||
|
||||
*/
|
||||
int pcpvault_close(vault_t *vault);
|
||||
|
||||
|
||||
/** Reads in the vault contents.
|
||||
|
||||
This function reads the open vault contents and puts
|
||||
them into the apropriate hashes. \see KEYHASH.
|
||||
|
||||
Currently only known types can be read. If your're saving
|
||||
unknown types to the vault, an error will occur. \see _PCP_KEY_TYPES.
|
||||
|
||||
Each item will be converted put into the aproprieate
|
||||
structure, multibyte values will be converted to
|
||||
host endianess. It also calculates the checksum of the vault
|
||||
contents and compares it with the one stored in the vault
|
||||
header. If it doesn't match an error will be thrown.
|
||||
|
||||
\param[out] vault The vault object.
|
||||
|
||||
\return Returns 0 on success or -1 in case of errors. Check fatals_if_any().
|
||||
*/
|
||||
int pcpvault_fetchall(vault_t *vault);
|
||||
|
||||
|
||||
/* Write everything back to disk. */
|
||||
int pcpvault_writeall(vault_t *vault);
|
||||
|
||||
/* copy a vault to another file */
|
||||
int pcpvault_copy(vault_t *tmp, vault_t *vault);
|
||||
|
||||
/* delete a vault file */
|
||||
void pcpvault_unlink(vault_t *tmp);
|
||||
|
||||
/* calculate the vault checksum */
|
||||
unsigned char *pcpvault_create_checksum(vault_t *vault);
|
||||
|
||||
/* write the new checksum to the header of the current vault */
|
||||
void pcpvault_update_checksum(vault_t *vault);
|
||||
|
||||
/* bigendian converters */
|
||||
vault_header_t * vh2be(vault_header_t *h);
|
||||
vault_header_t * vh2native(vault_header_t *h);
|
||||
vault_item_header_t * ih2be(vault_item_header_t *h);
|
||||
vault_item_header_t * ih2native(vault_item_header_t *h);
|
||||
|
||||
#endif /* _HAVE_PCP_VAULT */
|
||||
|
||||
/**@}*/
|
||||
|
||||
Reference in New Issue
Block a user