| Current File : //usr/share/doc/net-snmp/html/pkcs_8c_source.html |
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
<title>net-snmp: pkcs.c Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
<tbody>
<tr style="height: 56px;">
<td style="padding-left: 0.5em;">
<div id="projectname">net-snmp
 <span id="projectnumber">5.4.1</span>
</div>
</td>
</tr>
</tbody>
</table>
</div>
<!-- Generated by Doxygen 1.7.6.1 -->
<div id="navrow1" class="tabs">
<ul class="tablist">
<li><a href="index.html"><span>Main Page</span></a></li>
<li><a href="pages.html"><span>Related Pages</span></a></li>
<li><a href="modules.html"><span>Modules</span></a></li>
<li><a href="annotated.html"><span>Data Structures</span></a></li>
<li class="current"><a href="files.html"><span>Files</span></a></li>
<li><a href="examples.html"><span>Examples</span></a></li>
</ul>
</div>
<div id="navrow2" class="tabs2">
<ul class="tablist">
<li><a href="files.html"><span>File List</span></a></li>
<li><a href="globals.html"><span>Globals</span></a></li>
</ul>
</div>
</div>
<div class="header">
<div class="headertitle">
<div class="title">pkcs.c</div> </div>
</div><!--header-->
<div class="contents">
<div class="fragment"><pre class="fragment"><a name="l00001"></a>00001 <span class="comment">/*</span>
<a name="l00002"></a>00002 <span class="comment"> * Copyright 2007 Sun Microsystems, Inc. All rights reserved.</span>
<a name="l00003"></a>00003 <span class="comment"> * Use is subject to license terms specified in the COPYING file</span>
<a name="l00004"></a>00004 <span class="comment"> * distributed with the Net-SNMP package.</span>
<a name="l00005"></a>00005 <span class="comment"> */</span>
<a name="l00006"></a>00006
<a name="l00007"></a>00007 <span class="comment">/*</span>
<a name="l00008"></a>00008 <span class="comment"> * pkcs.c</span>
<a name="l00009"></a>00009 <span class="comment"> */</span>
<a name="l00010"></a>00010
<a name="l00011"></a>00011 <span class="preprocessor">#include <net-snmp/net-snmp-config.h></span>
<a name="l00012"></a>00012 <span class="preprocessor">#ifdef NETSNMP_USE_PKCS11</span>
<a name="l00013"></a>00013 <span class="preprocessor"></span><span class="preprocessor">#include <net-snmp/types.h></span>
<a name="l00014"></a>00014 <span class="preprocessor">#include <net-snmp/output_api.h></span>
<a name="l00015"></a>00015 <span class="preprocessor">#include <net-snmp/config_api.h></span>
<a name="l00016"></a>00016 <span class="preprocessor">#include <net-snmp/library/snmp_api.h></span>
<a name="l00017"></a>00017 <span class="preprocessor">#include <<a class="code" href="tools_8h.html">net-snmp/library/tools.h</a>></span>
<a name="l00018"></a>00018 <span class="preprocessor">#include <net-snmp/library/keytools.h></span>
<a name="l00019"></a>00019 <span class="preprocessor">#include <net-snmp/library/scapi.h></span>
<a name="l00020"></a>00020 <span class="preprocessor">#include <net-snmp/library/callback.h></span>
<a name="l00021"></a>00021 <span class="preprocessor">#include <security/cryptoki.h></span>
<a name="l00022"></a>00022
<a name="l00023"></a>00023 <span class="keyword">typedef</span> <span class="keyword">struct </span>netsnmp_pkcs_slot_session_s {
<a name="l00024"></a>00024 CK_SLOT_ID sid;
<a name="l00025"></a>00025 CK_SESSION_HANDLE hdl;
<a name="l00026"></a>00026 } netsnmp_pkcs_slot_session;
<a name="l00027"></a>00027
<a name="l00028"></a>00028 <span class="keyword">typedef</span> <span class="keyword">struct </span>netsnmp_pkcs_slot_info_s {
<a name="l00029"></a>00029 <span class="keywordtype">int</span> count;
<a name="l00030"></a>00030 netsnmp_pkcs_slot_session *pSession;
<a name="l00031"></a>00031 } netsnmp_pkcs_slot_info;
<a name="l00032"></a>00032
<a name="l00033"></a>00033 <span class="keyword">static</span> CK_RV get_session_handle(CK_MECHANISM_TYPE, CK_FLAGS,\
<a name="l00034"></a>00034 CK_SESSION_HANDLE_PTR);
<a name="l00035"></a>00035 <span class="keyword">static</span> CK_RV get_slot_session_handle(netsnmp_pkcs_slot_session *,\
<a name="l00036"></a>00036 CK_SESSION_HANDLE_PTR);
<a name="l00037"></a>00037 <span class="keyword">static</span> <span class="keywordtype">char</span> *pkcserr_string(CK_RV);
<a name="l00038"></a>00038 <span class="keyword">static</span> <span class="keywordtype">int</span> free_slots(<span class="keywordtype">int</span>, <span class="keywordtype">int</span>, <span class="keywordtype">void</span> *, <span class="keywordtype">void</span> *);
<a name="l00039"></a>00039
<a name="l00040"></a>00040 <span class="keyword">static</span> netsnmp_pkcs_slot_info *pSlot = NULL;
<a name="l00041"></a>00041
<a name="l00042"></a>00042 <span class="comment">/*</span>
<a name="l00043"></a>00043 <span class="comment"> * initialize the Cryptoki library.</span>
<a name="l00044"></a>00044 <span class="comment"> */</span>
<a name="l00045"></a>00045 <span class="keywordtype">int</span>
<a name="l00046"></a>00046 pkcs_init(<span class="keywordtype">void</span>)
<a name="l00047"></a>00047 {
<a name="l00048"></a>00048 CK_RV rv;
<a name="l00049"></a>00049 CK_ULONG slotcount;
<a name="l00050"></a>00050 CK_SLOT_ID_PTR pSlotList = NULL;
<a name="l00051"></a>00051 netsnmp_pkcs_slot_session *tmp;
<a name="l00052"></a>00052 <span class="keywordtype">int</span> i, rval = SNMPERR_SUCCESS;
<a name="l00053"></a>00053 <span class="comment">/* Initialize pkcs */</span>
<a name="l00054"></a>00054 <span class="keywordflow">if</span> ((rv = C_Initialize(NULL)) != CKR_OK) {
<a name="l00055"></a>00055 DEBUGMSGTL((<span class="stringliteral">"pkcs_init"</span>, <span class="stringliteral">"C_Initialize failed: %s"</span>,
<a name="l00056"></a>00056 pkcserr_string(rv)));
<a name="l00057"></a>00057 <span class="keywordflow">return</span> SNMPERR_SC_NOT_CONFIGURED;
<a name="l00058"></a>00058 }
<a name="l00059"></a>00059
<a name="l00060"></a>00060 <span class="comment">/* Get slot count */</span>
<a name="l00061"></a>00061 rv = C_GetSlotList(1, NULL_PTR, &slotcount);
<a name="l00062"></a>00062 <span class="keywordflow">if</span> (rv != CKR_OK || slotcount == 0) {
<a name="l00063"></a>00063 DEBUGMSGTL((<span class="stringliteral">"pkcs_init"</span>, <span class="stringliteral">"C_GetSlotList failed: %s"</span>,
<a name="l00064"></a>00064 pkcserr_string(rv)));
<a name="l00065"></a>00065 QUITFUN(SNMPERR_GENERR, pkcs_init_quit);
<a name="l00066"></a>00066 }
<a name="l00067"></a>00067
<a name="l00068"></a>00068 <span class="comment">/* Found at least one slot, allocate memory for slot list */</span>
<a name="l00069"></a>00069 pSlotList = malloc(slotcount * <span class="keyword">sizeof</span> (CK_SLOT_ID));
<a name="l00070"></a>00070 pSlot = malloc(<span class="keyword">sizeof</span> (netsnmp_pkcs_slot_info));
<a name="l00071"></a>00071 pSlot->pSession = malloc(slotcount * <span class="keyword">sizeof</span> (netsnmp_pkcs_slot_session));
<a name="l00072"></a>00072
<a name="l00073"></a>00073 <span class="keywordflow">if</span> (pSlotList == NULL_PTR ||
<a name="l00074"></a>00074 pSlot == NULL_PTR ||
<a name="l00075"></a>00075 pSlot->pSession == NULL_PTR) {
<a name="l00076"></a>00076 DEBUGMSGTL((<span class="stringliteral">"pkcs_init"</span>,<span class="stringliteral">"malloc failed."</span>));
<a name="l00077"></a>00077 QUITFUN(SNMPERR_GENERR, pkcs_init_quit);
<a name="l00078"></a>00078 }
<a name="l00079"></a>00079
<a name="l00080"></a>00080 <span class="comment">/* Get the list of slots */</span>
<a name="l00081"></a>00081 <span class="keywordflow">if</span> ((rv = C_GetSlotList(1, pSlotList, &slotcount)) != CKR_OK) {
<a name="l00082"></a>00082 DEBUGMSGTL((<span class="stringliteral">"pkcs_init"</span>, <span class="stringliteral">"C_GetSlotList failed: %s"</span>,
<a name="l00083"></a>00083 pkcserr_string(rv)));
<a name="l00084"></a>00084 QUITFUN(SNMPERR_GENERR, pkcs_init_quit);
<a name="l00085"></a>00085 }
<a name="l00086"></a>00086
<a name="l00087"></a>00087 <span class="comment">/* initialize Slots structure */</span>
<a name="l00088"></a>00088 pSlot->count = slotcount;
<a name="l00089"></a>00089 <span class="keywordflow">for</span> (i = 0, tmp = pSlot->pSession; i < slotcount; i++, tmp++) {
<a name="l00090"></a>00090 tmp->sid = pSlotList[i];
<a name="l00091"></a>00091 tmp->hdl = NULL;
<a name="l00092"></a>00092 }
<a name="l00093"></a>00093
<a name="l00094"></a>00094 <a class="code" href="group__callback.html#gaa74bcb0ea6a8b7270f5e26746ba1fff1" title="This function registers a generic callback function.">snmp_register_callback</a>(SNMP_CALLBACK_LIBRARY, SNMP_CALLBACK_SHUTDOWN,
<a name="l00095"></a>00095 free_slots, NULL);
<a name="l00096"></a>00096
<a name="l00097"></a>00097 pkcs_init_quit:
<a name="l00098"></a>00098 <a class="code" href="group__util.html#ga951e93edb6f0ea941e26155e3f8912a6" title="Frees a pointer only if it is !NULL and sets its value to NULL.">SNMP_FREE</a>(pSlotList);
<a name="l00099"></a>00099 <span class="keywordflow">return</span> rval;
<a name="l00100"></a>00100 }
<a name="l00101"></a>00101
<a name="l00102"></a>00102 <span class="comment">/*</span>
<a name="l00103"></a>00103 <span class="comment"> * close all the opened sessions when finished with Cryptoki library.</span>
<a name="l00104"></a>00104 <span class="comment"> */</span>
<a name="l00105"></a>00105 <span class="keyword">static</span> <span class="keywordtype">int</span>
<a name="l00106"></a>00106 free_slots(<span class="keywordtype">int</span> majorID, <span class="keywordtype">int</span> minorID, <span class="keywordtype">void</span> *serverarg, <span class="keywordtype">void</span> *clientarg)
<a name="l00107"></a>00107 {
<a name="l00108"></a>00108 <span class="keywordtype">int</span> slotcount, i;
<a name="l00109"></a>00109
<a name="l00110"></a>00110 (void) C_Finalize(NULL);
<a name="l00111"></a>00111
<a name="l00112"></a>00112 <span class="keywordflow">if</span> (pSlot != NULL) {
<a name="l00113"></a>00113 slotcount = pSlot->count;
<a name="l00114"></a>00114 <span class="keywordflow">for</span> (i = 0; i < slotcount; i++) {
<a name="l00115"></a>00115 <span class="keywordflow">if</span> (pSlot->pSession != NULL) {
<a name="l00116"></a>00116 free(pSlot->pSession->hdl);
<a name="l00117"></a>00117 }
<a name="l00118"></a>00118 }
<a name="l00119"></a>00119 free(pSlot);
<a name="l00120"></a>00120 }
<a name="l00121"></a>00121
<a name="l00122"></a>00122 <span class="keywordflow">return</span> 0;
<a name="l00123"></a>00123 }
<a name="l00124"></a>00124
<a name="l00125"></a>00125 <span class="comment">/*</span>
<a name="l00126"></a>00126 <span class="comment"> * generate random data</span>
<a name="l00127"></a>00127 <span class="comment"> */</span>
<a name="l00128"></a>00128 <span class="keywordtype">int</span>
<a name="l00129"></a>00129 pkcs_random(u_char * buf, <span class="keywordtype">size_t</span> buflen)
<a name="l00130"></a>00130 {
<a name="l00131"></a>00131 CK_SESSION_HANDLE hSession;
<a name="l00132"></a>00132
<a name="l00133"></a>00133 <span class="keywordflow">if</span> (pSlot != NULL &&
<a name="l00134"></a>00134 get_slot_session_handle(pSlot->pSession, &hSession) == CKR_OK &&
<a name="l00135"></a>00135 C_GenerateRandom(hSession, buf, buflen) == CKR_OK) {
<a name="l00136"></a>00136 <span class="keywordflow">return</span> SNMPERR_SUCCESS;
<a name="l00137"></a>00137 }
<a name="l00138"></a>00138
<a name="l00139"></a>00139 <span class="keywordflow">return</span> SNMPERR_GENERR;
<a name="l00140"></a>00140 }
<a name="l00141"></a>00141
<a name="l00142"></a>00142 <span class="comment">/*</span>
<a name="l00143"></a>00143 <span class="comment"> * retrieve the session handle from the first slot that supports the specified</span>
<a name="l00144"></a>00144 <span class="comment"> * mechanism.</span>
<a name="l00145"></a>00145 <span class="comment"> */</span>
<a name="l00146"></a>00146 <span class="keyword">static</span> CK_RV
<a name="l00147"></a>00147 get_session_handle(CK_MECHANISM_TYPE mech_type, CK_FLAGS flag,
<a name="l00148"></a>00148 CK_SESSION_HANDLE_PTR sess)
<a name="l00149"></a>00149 {
<a name="l00150"></a>00150 CK_RV rv = CKR_OK;
<a name="l00151"></a>00151 CK_MECHANISM_INFO info;
<a name="l00152"></a>00152 netsnmp_pkcs_slot_session *p = NULL;
<a name="l00153"></a>00153 <span class="keywordtype">int</span> i, slotcount = 0;
<a name="l00154"></a>00154
<a name="l00155"></a>00155 <span class="keywordflow">if</span> (pSlot) {
<a name="l00156"></a>00156 slotcount = pSlot->count;
<a name="l00157"></a>00157 p = pSlot->pSession;
<a name="l00158"></a>00158 }
<a name="l00159"></a>00159
<a name="l00160"></a>00160 <span class="comment">/* Find a slot with matching mechanism */</span>
<a name="l00161"></a>00161 <span class="keywordflow">for</span> (i = 0; i < slotcount; i++, p++) {
<a name="l00162"></a>00162 rv = C_GetMechanismInfo(p->sid, mech_type, &info);
<a name="l00163"></a>00163
<a name="l00164"></a>00164 <span class="keywordflow">if</span> (rv != CKR_OK) {
<a name="l00165"></a>00165 <span class="keywordflow">continue</span>; <span class="comment">/* to the next slot */</span>
<a name="l00166"></a>00166 } <span class="keywordflow">else</span> {
<a name="l00167"></a>00167 <span class="keywordflow">if</span> (info.flags & flag) {
<a name="l00168"></a>00168 rv = get_slot_session_handle(p, sess);
<a name="l00169"></a>00169 <span class="keywordflow">break</span>; <span class="comment">/* found */</span>
<a name="l00170"></a>00170 }
<a name="l00171"></a>00171 }
<a name="l00172"></a>00172 }
<a name="l00173"></a>00173
<a name="l00174"></a>00174 <span class="comment">/* Show error if no matching mechanism found */</span>
<a name="l00175"></a>00175 <span class="keywordflow">if</span> (i == slotcount) {
<a name="l00176"></a>00176 DEBUGMSGTL((<span class="stringliteral">"pkcs_init"</span>,<span class="stringliteral">"No cryptographic provider for %s"</span>,
<a name="l00177"></a>00177 mech_type));
<a name="l00178"></a>00178 <span class="keywordflow">return</span> CKR_SESSION_HANDLE_INVALID;
<a name="l00179"></a>00179 }
<a name="l00180"></a>00180
<a name="l00181"></a>00181 <span class="keywordflow">return</span> rv;
<a name="l00182"></a>00182 }
<a name="l00183"></a>00183
<a name="l00184"></a>00184 <span class="comment">/*</span>
<a name="l00185"></a>00185 <span class="comment"> * retrieve the session handle from the specified slot.</span>
<a name="l00186"></a>00186 <span class="comment"> */</span>
<a name="l00187"></a>00187 <span class="keyword">static</span> CK_RV
<a name="l00188"></a>00188 get_slot_session_handle(netsnmp_pkcs_slot_session *p,
<a name="l00189"></a>00189 CK_SESSION_HANDLE_PTR sess)
<a name="l00190"></a>00190 {
<a name="l00191"></a>00191 CK_RV rv = CKR_OK;
<a name="l00192"></a>00192 <span class="keywordflow">if</span> (p == NULL) {
<a name="l00193"></a>00193 *sess = NULL;
<a name="l00194"></a>00194 <span class="keywordflow">return</span> CKR_SESSION_HANDLE_INVALID;
<a name="l00195"></a>00195 }
<a name="l00196"></a>00196
<a name="l00197"></a>00197 <span class="keywordflow">if</span> (p->hdl == NULL) {
<a name="l00198"></a>00198 <span class="comment">/* Open a session */</span>
<a name="l00199"></a>00199 rv = C_OpenSession(p->sid, CKF_SERIAL_SESSION,
<a name="l00200"></a>00200 NULL_PTR, NULL, &p->hdl);
<a name="l00201"></a>00201
<a name="l00202"></a>00202 <span class="keywordflow">if</span> (rv != CKR_OK) {
<a name="l00203"></a>00203 DEBUGMSGTL((<span class="stringliteral">"get_slot_session_handle"</span>,<span class="stringliteral">"can not open PKCS #11 session: %s"</span>,
<a name="l00204"></a>00204 pkcserr_string(rv)));
<a name="l00205"></a>00205 }
<a name="l00206"></a>00206 }
<a name="l00207"></a>00207 *sess = p->hdl;
<a name="l00208"></a>00208
<a name="l00209"></a>00209 <span class="keywordflow">return</span> rv;
<a name="l00210"></a>00210 }
<a name="l00211"></a>00211
<a name="l00212"></a>00212 <span class="comment">/*</span>
<a name="l00213"></a>00213 <span class="comment"> * perform a signature operation to generate MAC.</span>
<a name="l00214"></a>00214 <span class="comment"> */</span>
<a name="l00215"></a>00215 <span class="keywordtype">int</span>
<a name="l00216"></a>00216 pkcs_sign(CK_MECHANISM_TYPE mech_type, u_char * key, u_int keylen,
<a name="l00217"></a>00217 u_char * msg, u_int msglen, u_char * mac, <span class="keywordtype">size_t</span> * maclen)
<a name="l00218"></a>00218 {
<a name="l00219"></a>00219 <span class="comment">/*</span>
<a name="l00220"></a>00220 <span class="comment"> * Key template </span>
<a name="l00221"></a>00221 <span class="comment"> */</span>
<a name="l00222"></a>00222 CK_OBJECT_CLASS <span class="keyword">class </span>= CKO_SECRET_KEY;
<a name="l00223"></a>00223 CK_KEY_TYPE keytype = CKK_GENERIC_SECRET;
<a name="l00224"></a>00224 CK_BBOOL truevalue = TRUE;
<a name="l00225"></a>00225 CK_BBOOL falsevalue= FALSE;
<a name="l00226"></a>00226 CK_ATTRIBUTE <span class="keyword">template</span>[] = {
<a name="l00227"></a>00227 {CKA_CLASS, &<span class="keyword">class</span>, <span class="keyword">sizeof</span> (<span class="keyword">class</span>)},
<a name="l00228"></a>00228 {CKA_KEY_TYPE, &keytype, <span class="keyword">sizeof</span> (keytype)},
<a name="l00229"></a>00229 {CKA_SIGN, &truevalue, <span class="keyword">sizeof</span> (truevalue)},
<a name="l00230"></a>00230 {CKA_TOKEN, &falsevalue, <span class="keyword">sizeof</span> (falsevalue)},
<a name="l00231"></a>00231 {CKA_VALUE, key, keylen}
<a name="l00232"></a>00232 };
<a name="l00233"></a>00233 CK_SESSION_HANDLE hSession;
<a name="l00234"></a>00234 CK_MECHANISM mech;
<a name="l00235"></a>00235 CK_OBJECT_HANDLE hkey = (CK_OBJECT_HANDLE) 0;
<a name="l00236"></a>00236 <span class="keywordtype">int</span> rval = SNMPERR_SUCCESS;
<a name="l00237"></a>00237 <span class="keywordflow">if</span> (get_session_handle(mech_type, CKF_SIGN, &hSession) != CKR_OK ||
<a name="l00238"></a>00238 hSession == NULL) {
<a name="l00239"></a>00239 QUITFUN(SNMPERR_GENERR, pkcs_sign_quit);
<a name="l00240"></a>00240 }
<a name="l00241"></a>00241
<a name="l00242"></a>00242 <span class="comment">/* create a key object */</span>
<a name="l00243"></a>00243 <span class="keywordflow">if</span> (C_CreateObject(hSession, <span class="keyword">template</span>,
<a name="l00244"></a>00244 (<span class="keyword">sizeof</span> (<span class="keyword">template</span>) / <span class="keyword">sizeof</span> (CK_ATTRIBUTE)), &hkey) != CKR_OK) {
<a name="l00245"></a>00245 QUITFUN(SNMPERR_GENERR, pkcs_sign_quit);
<a name="l00246"></a>00246 }
<a name="l00247"></a>00247
<a name="l00248"></a>00248 mech.mechanism = mech_type;
<a name="l00249"></a>00249 mech.pParameter = NULL_PTR;
<a name="l00250"></a>00250 mech.ulParameterLen = 0;
<a name="l00251"></a>00251
<a name="l00252"></a>00252 <span class="comment">/* initialize a signature operation */</span>
<a name="l00253"></a>00253 <span class="keywordflow">if</span> (C_SignInit(hSession, &mech, hkey) != CKR_OK ) {
<a name="l00254"></a>00254 QUITFUN(SNMPERR_GENERR, pkcs_sign_quit);
<a name="l00255"></a>00255 }
<a name="l00256"></a>00256 <span class="comment">/* continue a multiple-part signature operation */</span>
<a name="l00257"></a>00257 <span class="keywordflow">if</span> (C_SignUpdate(hSession, msg, msglen) != CKR_OK) {
<a name="l00258"></a>00258 QUITFUN(SNMPERR_GENERR, pkcs_sign_quit);
<a name="l00259"></a>00259 }
<a name="l00260"></a>00260 <span class="comment">/* finish a multiple-part signature operation */</span>
<a name="l00261"></a>00261 <span class="keywordflow">if</span> (C_SignFinal(hSession, mac, maclen) != CKR_OK) {
<a name="l00262"></a>00262 QUITFUN(SNMPERR_GENERR, pkcs_sign_quit);
<a name="l00263"></a>00263 }
<a name="l00264"></a>00264
<a name="l00265"></a>00265 pkcs_sign_quit:
<a name="l00266"></a>00266
<a name="l00267"></a>00267 <span class="keywordflow">if</span> (key != (CK_OBJECT_HANDLE) 0) {
<a name="l00268"></a>00268 (void) C_DestroyObject(hSession, hkey);
<a name="l00269"></a>00269 }
<a name="l00270"></a>00270 <span class="keywordflow">return</span> rval;
<a name="l00271"></a>00271 }
<a name="l00272"></a>00272
<a name="l00273"></a>00273 <span class="comment">/*</span>
<a name="l00274"></a>00274 <span class="comment"> * perform a message-digesting operation.</span>
<a name="l00275"></a>00275 <span class="comment"> */</span>
<a name="l00276"></a>00276 <span class="keywordtype">int</span>
<a name="l00277"></a>00277 pkcs_digest(CK_MECHANISM_TYPE mech_type, u_char * msg, u_int msglen,
<a name="l00278"></a>00278 u_char * digest, <span class="keywordtype">size_t</span> * digestlen)
<a name="l00279"></a>00279 {
<a name="l00280"></a>00280 <span class="keywordtype">int</span> rval = SNMPERR_SUCCESS;
<a name="l00281"></a>00281 CK_SESSION_HANDLE hSession;
<a name="l00282"></a>00282 CK_MECHANISM mech;
<a name="l00283"></a>00283 <span class="keywordflow">if</span> (get_session_handle(mech_type, CKF_DIGEST, &hSession) != CKR_OK ||
<a name="l00284"></a>00284 hSession == NULL) {
<a name="l00285"></a>00285 QUITFUN(SNMPERR_GENERR, pkcs_digest_quit);
<a name="l00286"></a>00286 }
<a name="l00287"></a>00287
<a name="l00288"></a>00288 mech.mechanism = mech_type;
<a name="l00289"></a>00289 mech.pParameter = NULL_PTR;
<a name="l00290"></a>00290 mech.ulParameterLen = 0;
<a name="l00291"></a>00291
<a name="l00292"></a>00292 <span class="comment">/* initialize a message-digesting operation */</span>
<a name="l00293"></a>00293 <span class="keywordflow">if</span> (C_DigestInit(hSession, &mech)!= CKR_OK ) {
<a name="l00294"></a>00294 QUITFUN(SNMPERR_GENERR, pkcs_digest_quit);
<a name="l00295"></a>00295 }
<a name="l00296"></a>00296 <span class="comment">/* continue a multiple-part message-digesting operation */</span>
<a name="l00297"></a>00297 <span class="keywordflow">if</span> (C_DigestUpdate(hSession, msg, msglen) != CKR_OK ) {
<a name="l00298"></a>00298 QUITFUN(SNMPERR_GENERR, pkcs_digest_quit);
<a name="l00299"></a>00299 }
<a name="l00300"></a>00300 <span class="comment">/* finish a multiple-part message-digesting operation */</span>
<a name="l00301"></a>00301 <span class="keywordflow">if</span> (C_DigestFinal(hSession, digest, digestlen) != CKR_OK) {
<a name="l00302"></a>00302 QUITFUN(SNMPERR_GENERR, pkcs_digest_quit);
<a name="l00303"></a>00303 }
<a name="l00304"></a>00304
<a name="l00305"></a>00305 pkcs_digest_quit:
<a name="l00306"></a>00306 <span class="keywordflow">return</span> rval;
<a name="l00307"></a>00307 }
<a name="l00308"></a>00308
<a name="l00309"></a>00309 <span class="comment">/*</span>
<a name="l00310"></a>00310 <span class="comment"> * encrypt plaintext into ciphertext using key and iv. </span>
<a name="l00311"></a>00311 <span class="comment"> */</span>
<a name="l00312"></a>00312 <span class="keywordtype">int</span>
<a name="l00313"></a>00313 pkcs_encrpyt(CK_MECHANISM_TYPE mech_type, u_char * key, u_int keylen,
<a name="l00314"></a>00314 u_char * iv, u_int ivlen,
<a name="l00315"></a>00315 u_char * plaintext, u_int ptlen,
<a name="l00316"></a>00316 u_char * ciphertext, <span class="keywordtype">size_t</span> * ctlen)
<a name="l00317"></a>00317 {
<a name="l00318"></a>00318 <span class="keywordtype">int</span> rval = SNMPERR_SUCCESS;
<a name="l00319"></a>00319 <span class="keywordtype">int</span> pad_size, offset;
<a name="l00320"></a>00320 <span class="comment">/*</span>
<a name="l00321"></a>00321 <span class="comment"> * Key template </span>
<a name="l00322"></a>00322 <span class="comment"> */</span>
<a name="l00323"></a>00323 CK_OBJECT_CLASS <span class="keyword">class </span>= CKO_SECRET_KEY;
<a name="l00324"></a>00324 CK_KEY_TYPE keytype = CKK_DES;
<a name="l00325"></a>00325 <span class="comment">/* CK_KEY_TYPE AESkeytype = CKK_AES; */</span>
<a name="l00326"></a>00326 CK_BBOOL truevalue = TRUE;
<a name="l00327"></a>00327 CK_BBOOL falsevalue = FALSE;
<a name="l00328"></a>00328
<a name="l00329"></a>00329 CK_ATTRIBUTE <span class="keyword">template</span>[] = {
<a name="l00330"></a>00330 {CKA_CLASS, &<span class="keyword">class</span>, <span class="keyword">sizeof</span> (<span class="keyword">class</span>)},
<a name="l00331"></a>00331 {CKA_KEY_TYPE, &keytype, <span class="keyword">sizeof</span> (keytype)},
<a name="l00332"></a>00332 {CKA_ENCRYPT, &truevalue, <span class="keyword">sizeof</span> (truevalue)},
<a name="l00333"></a>00333 {CKA_TOKEN, &falsevalue, <span class="keyword">sizeof</span> (falsevalue)},
<a name="l00334"></a>00334 {CKA_VALUE, key, keylen}
<a name="l00335"></a>00335 };
<a name="l00336"></a>00336
<a name="l00337"></a>00337 CK_SESSION_HANDLE hSession;
<a name="l00338"></a>00338 CK_MECHANISM mech;
<a name="l00339"></a>00339 CK_OBJECT_HANDLE hkey = (CK_OBJECT_HANDLE) 0;
<a name="l00340"></a>00340
<a name="l00341"></a>00341 <span class="keywordflow">if</span> (get_session_handle(mech_type, CKF_ENCRYPT,
<a name="l00342"></a>00342 &hSession) != CKR_OK ||
<a name="l00343"></a>00343 hSession == NULL) {
<a name="l00344"></a>00344 QUITFUN(SNMPERR_GENERR, pkcs_encrypt_quit);
<a name="l00345"></a>00345 }
<a name="l00346"></a>00346
<a name="l00347"></a>00347 <span class="keywordflow">if</span> (C_CreateObject(hSession, <span class="keyword">template</span>,
<a name="l00348"></a>00348 (<span class="keyword">sizeof</span> (<span class="keyword">template</span>) / <span class="keyword">sizeof</span> (CK_ATTRIBUTE)),
<a name="l00349"></a>00349 &hkey) != CKR_OK) {
<a name="l00350"></a>00350 QUITFUN(SNMPERR_GENERR, pkcs_encrypt_quit);
<a name="l00351"></a>00351 }
<a name="l00352"></a>00352
<a name="l00353"></a>00353 mech.mechanism = mech_type;
<a name="l00354"></a>00354 mech.pParameter = iv;
<a name="l00355"></a>00355 mech.ulParameterLen = ivlen;
<a name="l00356"></a>00356
<a name="l00357"></a>00357 <span class="comment">/* initialize an encryption operation */</span>
<a name="l00358"></a>00358 <span class="keywordflow">if</span> (C_EncryptInit(hSession, &mech, hkey) != CKR_OK ) {
<a name="l00359"></a>00359 QUITFUN(SNMPERR_GENERR, pkcs_encrypt_quit);
<a name="l00360"></a>00360 }
<a name="l00361"></a>00361
<a name="l00362"></a>00362 <span class="comment">/* for DES */</span>
<a name="l00363"></a>00363 pad_size = BYTESIZE(SNMP_TRANS_PRIVLEN_1DES);
<a name="l00364"></a>00364
<a name="l00365"></a>00365 <span class="keywordflow">if</span> (ptlen + pad_size - ptlen % pad_size > *ctlen) {
<a name="l00366"></a>00366 QUITFUN(SNMPERR_GENERR, pkcs_encrypt_quit);
<a name="l00367"></a>00367 }
<a name="l00368"></a>00368
<a name="l00369"></a>00369 <span class="keywordflow">for</span> (offset = 0; offset < ptlen; offset += pad_size) {
<a name="l00370"></a>00370 <span class="comment">/* continue a multiple-part encryption operation */</span>
<a name="l00371"></a>00371 <span class="keywordflow">if</span> (C_EncryptUpdate(hSession, plaintext + offset, pad_size,
<a name="l00372"></a>00372 ciphertext + offset, ctlen) != CKR_OK) {
<a name="l00373"></a>00373 QUITFUN(SNMPERR_GENERR, pkcs_encrypt_quit);
<a name="l00374"></a>00374 }
<a name="l00375"></a>00375 }
<a name="l00376"></a>00376
<a name="l00377"></a>00377 <span class="comment">/* finish a multiple-part encryption operation */</span>
<a name="l00378"></a>00378 <span class="keywordflow">if</span> (C_EncryptFinal(hSession, ciphertext + offset, ctlen) != CKR_OK) {
<a name="l00379"></a>00379 QUITFUN(SNMPERR_GENERR, pkcs_encrypt_quit);
<a name="l00380"></a>00380 }
<a name="l00381"></a>00381 *ctlen = offset;
<a name="l00382"></a>00382
<a name="l00383"></a>00383 pkcs_encrypt_quit:
<a name="l00384"></a>00384 <span class="keywordflow">if</span> (key != (CK_OBJECT_HANDLE) 0) {
<a name="l00385"></a>00385 (void) C_DestroyObject(hSession, hkey);
<a name="l00386"></a>00386 }
<a name="l00387"></a>00387 <span class="keywordflow">return</span> rval;
<a name="l00388"></a>00388 }
<a name="l00389"></a>00389
<a name="l00390"></a>00390 <span class="comment">/* </span>
<a name="l00391"></a>00391 <span class="comment"> * decrypt ciphertext into plaintext using key and iv.</span>
<a name="l00392"></a>00392 <span class="comment"> */</span>
<a name="l00393"></a>00393 <span class="keywordtype">int</span>
<a name="l00394"></a>00394 pkcs_decrpyt(CK_MECHANISM_TYPE mech_type, u_char * key, u_int keylen,
<a name="l00395"></a>00395 u_char * iv, u_int ivlen,
<a name="l00396"></a>00396 u_char * ciphertext, u_int ctlen,
<a name="l00397"></a>00397 u_char * plaintext, <span class="keywordtype">size_t</span> * ptlen)
<a name="l00398"></a>00398 {
<a name="l00399"></a>00399 <span class="keywordtype">int</span> rval = SNMPERR_SUCCESS;
<a name="l00400"></a>00400 <span class="comment">/*</span>
<a name="l00401"></a>00401 <span class="comment"> * Key template </span>
<a name="l00402"></a>00402 <span class="comment"> */</span>
<a name="l00403"></a>00403 CK_OBJECT_CLASS <span class="keyword">class </span>= CKO_SECRET_KEY;
<a name="l00404"></a>00404 CK_KEY_TYPE keytype = CKK_DES;
<a name="l00405"></a>00405 <span class="comment">/* CK_KEY_TYPE AESkeytype = CKK_AES; */</span>
<a name="l00406"></a>00406 CK_BBOOL truevalue = TRUE;
<a name="l00407"></a>00407 CK_BBOOL falsevalue= FALSE;
<a name="l00408"></a>00408 CK_ATTRIBUTE <span class="keyword">template</span>[] = {
<a name="l00409"></a>00409 {CKA_CLASS, &<span class="keyword">class</span>, <span class="keyword">sizeof</span> (<span class="keyword">class</span>)},
<a name="l00410"></a>00410 {CKA_KEY_TYPE, &keytype, <span class="keyword">sizeof</span> (keytype)},
<a name="l00411"></a>00411 {CKA_DECRYPT, &truevalue, <span class="keyword">sizeof</span> (truevalue)},
<a name="l00412"></a>00412 {CKA_TOKEN, &falsevalue, <span class="keyword">sizeof</span> (falsevalue)},
<a name="l00413"></a>00413 {CKA_VALUE, key, keylen}
<a name="l00414"></a>00414 };
<a name="l00415"></a>00415 CK_SESSION_HANDLE hSession;
<a name="l00416"></a>00416 CK_MECHANISM mech;
<a name="l00417"></a>00417 CK_OBJECT_HANDLE hkey = (CK_OBJECT_HANDLE) 0;
<a name="l00418"></a>00418
<a name="l00419"></a>00419 <span class="keywordflow">if</span> (get_session_handle(mech_type, CKF_DECRYPT, &hSession) != CKR_OK ||
<a name="l00420"></a>00420 hSession == NULL) {
<a name="l00421"></a>00421 QUITFUN(SNMPERR_GENERR, pkcs_decrypt_quit);
<a name="l00422"></a>00422 }
<a name="l00423"></a>00423
<a name="l00424"></a>00424 <span class="keywordflow">if</span> (C_CreateObject(hSession, <span class="keyword">template</span>,
<a name="l00425"></a>00425 (<span class="keyword">sizeof</span> (<span class="keyword">template</span>) / <span class="keyword">sizeof</span> (CK_ATTRIBUTE)), &hkey) != CKR_OK) {
<a name="l00426"></a>00426 QUITFUN(SNMPERR_GENERR, pkcs_decrypt_quit);
<a name="l00427"></a>00427 }
<a name="l00428"></a>00428
<a name="l00429"></a>00429 mech.mechanism = mech_type;
<a name="l00430"></a>00430 mech.pParameter = iv;
<a name="l00431"></a>00431 mech.ulParameterLen = ivlen;
<a name="l00432"></a>00432
<a name="l00433"></a>00433 <span class="comment">/* initialize a decryption operation */</span>
<a name="l00434"></a>00434 <span class="keywordflow">if</span> (C_DecryptInit(hSession, &mech, hkey) != CKR_OK ) {
<a name="l00435"></a>00435 QUITFUN(SNMPERR_GENERR, pkcs_decrypt_quit);
<a name="l00436"></a>00436 }
<a name="l00437"></a>00437 <span class="comment">/* continue a multiple-part decryption operation */</span>
<a name="l00438"></a>00438 <span class="keywordflow">if</span> (C_DecryptUpdate(hSession, ciphertext, ctlen, plaintext,
<a name="l00439"></a>00439 ptlen) != CKR_OK) {
<a name="l00440"></a>00440 QUITFUN(SNMPERR_GENERR, pkcs_decrypt_quit);
<a name="l00441"></a>00441 }
<a name="l00442"></a>00442 <span class="comment">/* finish a multiple-part decryption operation */</span>
<a name="l00443"></a>00443 <span class="keywordflow">if</span> (C_DecryptFinal(hSession, plaintext, ptlen) != CKR_OK) {
<a name="l00444"></a>00444 QUITFUN(SNMPERR_GENERR, pkcs_decrypt_quit);
<a name="l00445"></a>00445 }
<a name="l00446"></a>00446
<a name="l00447"></a>00447 pkcs_decrypt_quit:
<a name="l00448"></a>00448 <span class="keywordflow">if</span> (key != (CK_OBJECT_HANDLE) 0) {
<a name="l00449"></a>00449 (void) C_DestroyObject(hSession, hkey);
<a name="l00450"></a>00450 }
<a name="l00451"></a>00451 <span class="keywordflow">return</span> rval;
<a name="l00452"></a>00452 }
<a name="l00453"></a>00453
<a name="l00454"></a>00454 <span class="comment">/*</span>
<a name="l00455"></a>00455 <span class="comment"> * Convert a passphrase into a master user key, Ku, according to the</span>
<a name="l00456"></a>00456 <span class="comment"> * algorithm given in RFC 2274 concerning the SNMPv3 User Security Model (USM)</span>
<a name="l00457"></a>00457 <span class="comment"> */</span>
<a name="l00458"></a>00458 <span class="keywordtype">int</span>
<a name="l00459"></a>00459 pkcs_generate_Ku(CK_MECHANISM_TYPE mech_type, u_char * passphrase, u_int pplen,
<a name="l00460"></a>00460 u_char * Ku, <span class="keywordtype">size_t</span> * kulen)
<a name="l00461"></a>00461 {
<a name="l00462"></a>00462 <span class="keywordtype">int</span> rval = SNMPERR_SUCCESS, nbytes = USM_LENGTH_EXPANDED_PASSPHRASE;
<a name="l00463"></a>00463 CK_SESSION_HANDLE hSession;
<a name="l00464"></a>00464 CK_MECHANISM mech;
<a name="l00465"></a>00465 u_int i, pindex = 0;
<a name="l00466"></a>00466 u_char buf[USM_LENGTH_KU_HASHBLOCK], *bufp;
<a name="l00467"></a>00467
<a name="l00468"></a>00468 <span class="keywordflow">if</span> (get_session_handle(mech_type, CKF_DIGEST, &hSession) != CKR_OK ||
<a name="l00469"></a>00469 hSession == NULL) {
<a name="l00470"></a>00470 QUITFUN(SNMPERR_GENERR, pkcs_generate_Ku_quit);
<a name="l00471"></a>00471 }
<a name="l00472"></a>00472
<a name="l00473"></a>00473 mech.mechanism = mech_type;
<a name="l00474"></a>00474 mech.pParameter = NULL_PTR;
<a name="l00475"></a>00475 mech.ulParameterLen = 0;
<a name="l00476"></a>00476
<a name="l00477"></a>00477 <span class="comment">/* initialize a message-digesting operation */</span>
<a name="l00478"></a>00478 <span class="keywordflow">if</span> (C_DigestInit(hSession, &mech)!= CKR_OK ) {
<a name="l00479"></a>00479 QUITFUN(SNMPERR_GENERR, pkcs_generate_Ku_quit);
<a name="l00480"></a>00480 }
<a name="l00481"></a>00481
<a name="l00482"></a>00482 <span class="keywordflow">while</span> (nbytes > 0) {
<a name="l00483"></a>00483 bufp = buf;
<a name="l00484"></a>00484 <span class="keywordflow">for</span> (i = 0; i < USM_LENGTH_KU_HASHBLOCK; i++) {
<a name="l00485"></a>00485 <span class="comment">/*</span>
<a name="l00486"></a>00486 <span class="comment"> * fill a buffer with the supplied passphrase. When the end</span>
<a name="l00487"></a>00487 <span class="comment"> * of the passphrase is reachedcycle back to the beginning.</span>
<a name="l00488"></a>00488 <span class="comment"> */</span>
<a name="l00489"></a>00489 *bufp++ = passphrase[pindex++ % pplen];
<a name="l00490"></a>00490 }
<a name="l00491"></a>00491 <span class="comment">/* continue a multiple-part message-digesting operation */</span>
<a name="l00492"></a>00492 <span class="keywordflow">if</span> (C_DigestUpdate(hSession, buf, USM_LENGTH_KU_HASHBLOCK) != CKR_OK ) {
<a name="l00493"></a>00493 QUITFUN(SNMPERR_GENERR, pkcs_generate_Ku_quit);
<a name="l00494"></a>00494 }
<a name="l00495"></a>00495 nbytes -= USM_LENGTH_KU_HASHBLOCK;
<a name="l00496"></a>00496 }
<a name="l00497"></a>00497 <span class="comment">/* finish a multiple-part message-digesting operation */</span>
<a name="l00498"></a>00498 <span class="keywordflow">if</span> (C_DigestFinal(hSession, Ku, kulen) != CKR_OK) {
<a name="l00499"></a>00499 QUITFUN(SNMPERR_GENERR, pkcs_generate_Ku_quit);
<a name="l00500"></a>00500 }
<a name="l00501"></a>00501
<a name="l00502"></a>00502 pkcs_generate_Ku_quit:
<a name="l00503"></a>00503 <span class="keywordflow">return</span> rval;
<a name="l00504"></a>00504 }
<a name="l00505"></a>00505
<a name="l00506"></a>00506 <span class="comment">/*</span>
<a name="l00507"></a>00507 <span class="comment"> * pkcserr_stringor: returns a string representation of the given </span>
<a name="l00508"></a>00508 <span class="comment"> * return code.</span>
<a name="l00509"></a>00509 <span class="comment"> */</span>
<a name="l00510"></a>00510 <span class="keyword">static</span> <span class="keywordtype">char</span> *
<a name="l00511"></a>00511 pkcserr_string(CK_RV rv)
<a name="l00512"></a>00512 {
<a name="l00513"></a>00513 <span class="keyword">static</span> <span class="keywordtype">char</span> errstr[128];
<a name="l00514"></a>00514 <span class="keywordflow">switch</span> (rv) {
<a name="l00515"></a>00515 <span class="keywordflow">case</span> CKR_OK:
<a name="l00516"></a>00516 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_OK"</span>);
<a name="l00517"></a>00517 <span class="keywordflow">break</span>;
<a name="l00518"></a>00518 <span class="keywordflow">case</span> CKR_CANCEL:
<a name="l00519"></a>00519 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_CANCEL"</span>);
<a name="l00520"></a>00520 <span class="keywordflow">break</span>;
<a name="l00521"></a>00521 <span class="keywordflow">case</span> CKR_HOST_MEMORY:
<a name="l00522"></a>00522 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_HOST_MEMORY"</span>);
<a name="l00523"></a>00523 <span class="keywordflow">break</span>;
<a name="l00524"></a>00524 <span class="keywordflow">case</span> CKR_SLOT_ID_INVALID:
<a name="l00525"></a>00525 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SLOT_ID_INVALID"</span>);
<a name="l00526"></a>00526 <span class="keywordflow">break</span>;
<a name="l00527"></a>00527 <span class="keywordflow">case</span> CKR_GENERAL_ERROR:
<a name="l00528"></a>00528 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_GENERAL_ERROR"</span>);
<a name="l00529"></a>00529 <span class="keywordflow">break</span>;
<a name="l00530"></a>00530 <span class="keywordflow">case</span> CKR_FUNCTION_FAILED:
<a name="l00531"></a>00531 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_FUNCTION_FAILED"</span>);
<a name="l00532"></a>00532 <span class="keywordflow">break</span>;
<a name="l00533"></a>00533 <span class="keywordflow">case</span> CKR_ARGUMENTS_BAD:
<a name="l00534"></a>00534 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_ARGUMENTS_BAD"</span>);
<a name="l00535"></a>00535 <span class="keywordflow">break</span>;
<a name="l00536"></a>00536 <span class="keywordflow">case</span> CKR_NO_EVENT:
<a name="l00537"></a>00537 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_NO_EVENT"</span>);
<a name="l00538"></a>00538 <span class="keywordflow">break</span>;
<a name="l00539"></a>00539 <span class="keywordflow">case</span> CKR_NEED_TO_CREATE_THREADS:
<a name="l00540"></a>00540 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_NEED_TO_CREATE_THREADS"</span>);
<a name="l00541"></a>00541 <span class="keywordflow">break</span>;
<a name="l00542"></a>00542 <span class="keywordflow">case</span> CKR_CANT_LOCK:
<a name="l00543"></a>00543 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_CANT_LOCK"</span>);
<a name="l00544"></a>00544 <span class="keywordflow">break</span>;
<a name="l00545"></a>00545 <span class="keywordflow">case</span> CKR_ATTRIBUTE_READ_ONLY:
<a name="l00546"></a>00546 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_ATTRIBUTE_READ_ONLY"</span>);
<a name="l00547"></a>00547 <span class="keywordflow">break</span>;
<a name="l00548"></a>00548 <span class="keywordflow">case</span> CKR_ATTRIBUTE_SENSITIVE:
<a name="l00549"></a>00549 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_ATTRIBUTE_SENSITIVE"</span>);
<a name="l00550"></a>00550 <span class="keywordflow">break</span>;
<a name="l00551"></a>00551 <span class="keywordflow">case</span> CKR_ATTRIBUTE_TYPE_INVALID:
<a name="l00552"></a>00552 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_ATTRIBUTE_TYPE_INVALID"</span>);
<a name="l00553"></a>00553 <span class="keywordflow">break</span>;
<a name="l00554"></a>00554 <span class="keywordflow">case</span> CKR_ATTRIBUTE_VALUE_INVALID:
<a name="l00555"></a>00555 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_ATTRIBUTE_VALUE_INVALID"</span>);
<a name="l00556"></a>00556 <span class="keywordflow">break</span>;
<a name="l00557"></a>00557 <span class="keywordflow">case</span> CKR_DATA_INVALID:
<a name="l00558"></a>00558 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_DATA_INVALID"</span>);
<a name="l00559"></a>00559 <span class="keywordflow">break</span>;
<a name="l00560"></a>00560 <span class="keywordflow">case</span> CKR_DATA_LEN_RANGE:
<a name="l00561"></a>00561 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_DATA_LEN_RANGE"</span>);
<a name="l00562"></a>00562 <span class="keywordflow">break</span>;
<a name="l00563"></a>00563 <span class="keywordflow">case</span> CKR_DEVICE_ERROR:
<a name="l00564"></a>00564 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_DEVICE_ERROR"</span>);
<a name="l00565"></a>00565 <span class="keywordflow">break</span>;
<a name="l00566"></a>00566 <span class="keywordflow">case</span> CKR_DEVICE_MEMORY:
<a name="l00567"></a>00567 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_DEVICE_MEMORY"</span>);
<a name="l00568"></a>00568 <span class="keywordflow">break</span>;
<a name="l00569"></a>00569 <span class="keywordflow">case</span> CKR_DEVICE_REMOVED:
<a name="l00570"></a>00570 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_DEVICE_REMOVED"</span>);
<a name="l00571"></a>00571 <span class="keywordflow">break</span>;
<a name="l00572"></a>00572 <span class="keywordflow">case</span> CKR_ENCRYPTED_DATA_INVALID:
<a name="l00573"></a>00573 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_ENCRYPTED_DATA_INVALID"</span>);
<a name="l00574"></a>00574 <span class="keywordflow">break</span>;
<a name="l00575"></a>00575 <span class="keywordflow">case</span> CKR_ENCRYPTED_DATA_LEN_RANGE:
<a name="l00576"></a>00576 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_ENCRYPTED_DATA_LEN_RANGE"</span>);
<a name="l00577"></a>00577 <span class="keywordflow">break</span>;
<a name="l00578"></a>00578 <span class="keywordflow">case</span> CKR_FUNCTION_CANCELED:
<a name="l00579"></a>00579 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_FUNCTION_CANCELED"</span>);
<a name="l00580"></a>00580 <span class="keywordflow">break</span>;
<a name="l00581"></a>00581 <span class="keywordflow">case</span> CKR_FUNCTION_NOT_PARALLEL:
<a name="l00582"></a>00582 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_FUNCTION_NOT_PARALLEL"</span>);
<a name="l00583"></a>00583 <span class="keywordflow">break</span>;
<a name="l00584"></a>00584 <span class="keywordflow">case</span> CKR_FUNCTION_NOT_SUPPORTED:
<a name="l00585"></a>00585 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_FUNCTION_NOT_SUPPORTED"</span>);
<a name="l00586"></a>00586 <span class="keywordflow">break</span>;
<a name="l00587"></a>00587 <span class="keywordflow">case</span> CKR_KEY_HANDLE_INVALID:
<a name="l00588"></a>00588 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_KEY_HANDLE_INVALID"</span>);
<a name="l00589"></a>00589 <span class="keywordflow">break</span>;
<a name="l00590"></a>00590 <span class="keywordflow">case</span> CKR_KEY_SIZE_RANGE:
<a name="l00591"></a>00591 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_KEY_SIZE_RANGE"</span>);
<a name="l00592"></a>00592 <span class="keywordflow">break</span>;
<a name="l00593"></a>00593 <span class="keywordflow">case</span> CKR_KEY_TYPE_INCONSISTENT:
<a name="l00594"></a>00594 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_KEY_TYPE_INCONSISTENT"</span>);
<a name="l00595"></a>00595 <span class="keywordflow">break</span>;
<a name="l00596"></a>00596 <span class="keywordflow">case</span> CKR_KEY_NOT_NEEDED:
<a name="l00597"></a>00597 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_KEY_NOT_NEEDED"</span>);
<a name="l00598"></a>00598 <span class="keywordflow">break</span>;
<a name="l00599"></a>00599 <span class="keywordflow">case</span> CKR_KEY_CHANGED:
<a name="l00600"></a>00600 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_KEY_CHANGED"</span>);
<a name="l00601"></a>00601 <span class="keywordflow">break</span>;
<a name="l00602"></a>00602 <span class="keywordflow">case</span> CKR_KEY_NEEDED:
<a name="l00603"></a>00603 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_KEY_NEEDED"</span>);
<a name="l00604"></a>00604 <span class="keywordflow">break</span>;
<a name="l00605"></a>00605 <span class="keywordflow">case</span> CKR_KEY_INDIGESTIBLE:
<a name="l00606"></a>00606 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_KEY_INDIGESTIBLE"</span>);
<a name="l00607"></a>00607 <span class="keywordflow">break</span>;
<a name="l00608"></a>00608 <span class="keywordflow">case</span> CKR_KEY_FUNCTION_NOT_PERMITTED:
<a name="l00609"></a>00609 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_KEY_FUNCTION_NOT_PERMITTED"</span>);
<a name="l00610"></a>00610 <span class="keywordflow">break</span>;
<a name="l00611"></a>00611 <span class="keywordflow">case</span> CKR_KEY_NOT_WRAPPABLE:
<a name="l00612"></a>00612 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_KEY_NOT_WRAPPABLE"</span>);
<a name="l00613"></a>00613 <span class="keywordflow">break</span>;
<a name="l00614"></a>00614 <span class="keywordflow">case</span> CKR_KEY_UNEXTRACTABLE:
<a name="l00615"></a>00615 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_KEY_UNEXTRACTABLE"</span>);
<a name="l00616"></a>00616 <span class="keywordflow">break</span>;
<a name="l00617"></a>00617 <span class="keywordflow">case</span> CKR_MECHANISM_INVALID:
<a name="l00618"></a>00618 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_MECHANISM_INVALID"</span>);
<a name="l00619"></a>00619 <span class="keywordflow">break</span>;
<a name="l00620"></a>00620 <span class="keywordflow">case</span> CKR_MECHANISM_PARAM_INVALID:
<a name="l00621"></a>00621 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_MECHANISM_PARAM_INVALID"</span>);
<a name="l00622"></a>00622 <span class="keywordflow">break</span>;
<a name="l00623"></a>00623 <span class="keywordflow">case</span> CKR_OBJECT_HANDLE_INVALID:
<a name="l00624"></a>00624 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_OBJECT_HANDLE_INVALID"</span>);
<a name="l00625"></a>00625 <span class="keywordflow">break</span>;
<a name="l00626"></a>00626 <span class="keywordflow">case</span> CKR_OPERATION_ACTIVE:
<a name="l00627"></a>00627 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_OPERATION_ACTIVE"</span>);
<a name="l00628"></a>00628 <span class="keywordflow">break</span>;
<a name="l00629"></a>00629 <span class="keywordflow">case</span> CKR_OPERATION_NOT_INITIALIZED:
<a name="l00630"></a>00630 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_OPERATION_NOT_INITIALIZED"</span>);
<a name="l00631"></a>00631 <span class="keywordflow">break</span>;
<a name="l00632"></a>00632 <span class="keywordflow">case</span> CKR_PIN_INCORRECT:
<a name="l00633"></a>00633 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_PIN_INCORRECT"</span>);
<a name="l00634"></a>00634 <span class="keywordflow">break</span>;
<a name="l00635"></a>00635 <span class="keywordflow">case</span> CKR_PIN_INVALID:
<a name="l00636"></a>00636 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_PIN_INVALID"</span>);
<a name="l00637"></a>00637 <span class="keywordflow">break</span>;
<a name="l00638"></a>00638 <span class="keywordflow">case</span> CKR_PIN_LEN_RANGE:
<a name="l00639"></a>00639 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_PIN_LEN_RANGE"</span>);
<a name="l00640"></a>00640 <span class="keywordflow">break</span>;
<a name="l00641"></a>00641 <span class="keywordflow">case</span> CKR_PIN_EXPIRED:
<a name="l00642"></a>00642 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_PIN_EXPIRED"</span>);
<a name="l00643"></a>00643 <span class="keywordflow">break</span>;
<a name="l00644"></a>00644 <span class="keywordflow">case</span> CKR_PIN_LOCKED:
<a name="l00645"></a>00645 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_PIN_LOCKED"</span>);
<a name="l00646"></a>00646 <span class="keywordflow">break</span>;
<a name="l00647"></a>00647 <span class="keywordflow">case</span> CKR_SESSION_CLOSED:
<a name="l00648"></a>00648 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SESSION_CLOSED"</span>);
<a name="l00649"></a>00649 <span class="keywordflow">break</span>;
<a name="l00650"></a>00650 <span class="keywordflow">case</span> CKR_SESSION_COUNT:
<a name="l00651"></a>00651 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SESSION_COUNT"</span>);
<a name="l00652"></a>00652 <span class="keywordflow">break</span>;
<a name="l00653"></a>00653 <span class="keywordflow">case</span> CKR_SESSION_HANDLE_INVALID:
<a name="l00654"></a>00654 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SESSION_HANDLE_INVALID"</span>);
<a name="l00655"></a>00655 <span class="keywordflow">break</span>;
<a name="l00656"></a>00656 <span class="keywordflow">case</span> CKR_SESSION_PARALLEL_NOT_SUPPORTED:
<a name="l00657"></a>00657 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SESSION_PARALLEL_NOT_SUPPORTED"</span>);
<a name="l00658"></a>00658 <span class="keywordflow">break</span>;
<a name="l00659"></a>00659 <span class="keywordflow">case</span> CKR_SESSION_READ_ONLY:
<a name="l00660"></a>00660 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SESSION_READ_ONLY"</span>);
<a name="l00661"></a>00661 <span class="keywordflow">break</span>;
<a name="l00662"></a>00662 <span class="keywordflow">case</span> CKR_SESSION_EXISTS:
<a name="l00663"></a>00663 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SESSION_EXISTS"</span>);
<a name="l00664"></a>00664 <span class="keywordflow">break</span>;
<a name="l00665"></a>00665 <span class="keywordflow">case</span> CKR_SESSION_READ_ONLY_EXISTS:
<a name="l00666"></a>00666 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SESSION_READ_ONLY_EXISTS"</span>);
<a name="l00667"></a>00667 <span class="keywordflow">break</span>;
<a name="l00668"></a>00668 <span class="keywordflow">case</span> CKR_SESSION_READ_WRITE_SO_EXISTS:
<a name="l00669"></a>00669 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SESSION_READ_WRITE_SO_EXISTS"</span>);
<a name="l00670"></a>00670 <span class="keywordflow">break</span>;
<a name="l00671"></a>00671 <span class="keywordflow">case</span> CKR_SIGNATURE_INVALID:
<a name="l00672"></a>00672 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SIGNATURE_INVALID"</span>);
<a name="l00673"></a>00673 <span class="keywordflow">break</span>;
<a name="l00674"></a>00674 <span class="keywordflow">case</span> CKR_SIGNATURE_LEN_RANGE:
<a name="l00675"></a>00675 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SIGNATURE_LEN_RANGE"</span>);
<a name="l00676"></a>00676 <span class="keywordflow">break</span>;
<a name="l00677"></a>00677 <span class="keywordflow">case</span> CKR_TEMPLATE_INCOMPLETE:
<a name="l00678"></a>00678 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_TEMPLATE_INCOMPLETE"</span>);
<a name="l00679"></a>00679 <span class="keywordflow">break</span>;
<a name="l00680"></a>00680 <span class="keywordflow">case</span> CKR_TEMPLATE_INCONSISTENT:
<a name="l00681"></a>00681 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_TEMPLATE_INCONSISTENT"</span>);
<a name="l00682"></a>00682 <span class="keywordflow">break</span>;
<a name="l00683"></a>00683 <span class="keywordflow">case</span> CKR_TOKEN_NOT_PRESENT:
<a name="l00684"></a>00684 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_TOKEN_NOT_PRESENT"</span>);
<a name="l00685"></a>00685 <span class="keywordflow">break</span>;
<a name="l00686"></a>00686 <span class="keywordflow">case</span> CKR_TOKEN_NOT_RECOGNIZED:
<a name="l00687"></a>00687 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_TOKEN_NOT_RECOGNIZED"</span>);
<a name="l00688"></a>00688 <span class="keywordflow">break</span>;
<a name="l00689"></a>00689 <span class="keywordflow">case</span> CKR_TOKEN_WRITE_PROTECTED:
<a name="l00690"></a>00690 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_TOKEN_WRITE_PROTECTED"</span>);
<a name="l00691"></a>00691 <span class="keywordflow">break</span>;
<a name="l00692"></a>00692 <span class="keywordflow">case</span> CKR_UNWRAPPING_KEY_HANDLE_INVALID:
<a name="l00693"></a>00693 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_UNWRAPPING_KEY_HANDLE_INVALID"</span>);
<a name="l00694"></a>00694 <span class="keywordflow">break</span>;
<a name="l00695"></a>00695 <span class="keywordflow">case</span> CKR_UNWRAPPING_KEY_SIZE_RANGE:
<a name="l00696"></a>00696 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_UNWRAPPING_KEY_SIZE_RANGE"</span>);
<a name="l00697"></a>00697 <span class="keywordflow">break</span>;
<a name="l00698"></a>00698 <span class="keywordflow">case</span> CKR_UNWRAPPING_KEY_TYPE_INCONSISTENT:
<a name="l00699"></a>00699 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_UNWRAPPING_KEY_TYPE_INCONSISTENT"</span>);
<a name="l00700"></a>00700 <span class="keywordflow">break</span>;
<a name="l00701"></a>00701 <span class="keywordflow">case</span> CKR_USER_ALREADY_LOGGED_IN:
<a name="l00702"></a>00702 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_USER_ALREADY_LOGGED_IN"</span>);
<a name="l00703"></a>00703 <span class="keywordflow">break</span>;
<a name="l00704"></a>00704 <span class="keywordflow">case</span> CKR_USER_NOT_LOGGED_IN:
<a name="l00705"></a>00705 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_USER_NOT_LOGGED_IN"</span>);
<a name="l00706"></a>00706 <span class="keywordflow">break</span>;
<a name="l00707"></a>00707 <span class="keywordflow">case</span> CKR_USER_PIN_NOT_INITIALIZED:
<a name="l00708"></a>00708 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_USER_PIN_NOT_INITIALIZED"</span>);
<a name="l00709"></a>00709 <span class="keywordflow">break</span>;
<a name="l00710"></a>00710 <span class="keywordflow">case</span> CKR_USER_TYPE_INVALID:
<a name="l00711"></a>00711 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_USER_TYPE_INVALID"</span>);
<a name="l00712"></a>00712 <span class="keywordflow">break</span>;
<a name="l00713"></a>00713 <span class="keywordflow">case</span> CKR_USER_ANOTHER_ALREADY_LOGGED_IN:
<a name="l00714"></a>00714 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_USER_ANOTHER_ALREADY_LOGGED_IN"</span>);
<a name="l00715"></a>00715 <span class="keywordflow">break</span>;
<a name="l00716"></a>00716 <span class="keywordflow">case</span> CKR_USER_TOO_MANY_TYPES:
<a name="l00717"></a>00717 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_USER_TOO_MANY_TYPES"</span>);
<a name="l00718"></a>00718 <span class="keywordflow">break</span>;
<a name="l00719"></a>00719 <span class="keywordflow">case</span> CKR_WRAPPED_KEY_INVALID:
<a name="l00720"></a>00720 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_WRAPPED_KEY_INVALID"</span>);
<a name="l00721"></a>00721 <span class="keywordflow">break</span>;
<a name="l00722"></a>00722 <span class="keywordflow">case</span> CKR_WRAPPED_KEY_LEN_RANGE:
<a name="l00723"></a>00723 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_WRAPPED_KEY_LEN_RANGE"</span>);
<a name="l00724"></a>00724 <span class="keywordflow">break</span>;
<a name="l00725"></a>00725 <span class="keywordflow">case</span> CKR_WRAPPING_KEY_HANDLE_INVALID:
<a name="l00726"></a>00726 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_WRAPPING_KEY_HANDLE_INVALID"</span>);
<a name="l00727"></a>00727 <span class="keywordflow">break</span>;
<a name="l00728"></a>00728 <span class="keywordflow">case</span> CKR_WRAPPING_KEY_SIZE_RANGE:
<a name="l00729"></a>00729 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_WRAPPING_KEY_SIZE_RANGE"</span>);
<a name="l00730"></a>00730 <span class="keywordflow">break</span>;
<a name="l00731"></a>00731 <span class="keywordflow">case</span> CKR_WRAPPING_KEY_TYPE_INCONSISTENT:
<a name="l00732"></a>00732 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_WRAPPING_KEY_TYPE_INCONSISTENT"</span>);
<a name="l00733"></a>00733 <span class="keywordflow">break</span>;
<a name="l00734"></a>00734 <span class="keywordflow">case</span> CKR_RANDOM_SEED_NOT_SUPPORTED:
<a name="l00735"></a>00735 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_RANDOM_SEED_NOT_SUPPORTED"</span>);
<a name="l00736"></a>00736 <span class="keywordflow">break</span>;
<a name="l00737"></a>00737 <span class="keywordflow">case</span> CKR_RANDOM_NO_RNG:
<a name="l00738"></a>00738 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_RANDOM_NO_RNG"</span>);
<a name="l00739"></a>00739 <span class="keywordflow">break</span>;
<a name="l00740"></a>00740 <span class="keywordflow">case</span> CKR_DOMAIN_PARAMS_INVALID:
<a name="l00741"></a>00741 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_DOMAIN_PARAMS_INVALID"</span>);
<a name="l00742"></a>00742 <span class="keywordflow">break</span>;
<a name="l00743"></a>00743 <span class="keywordflow">case</span> CKR_BUFFER_TOO_SMALL:
<a name="l00744"></a>00744 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_BUFFER_TOO_SMALL"</span>);
<a name="l00745"></a>00745 <span class="keywordflow">break</span>;
<a name="l00746"></a>00746 <span class="keywordflow">case</span> CKR_SAVED_STATE_INVALID:
<a name="l00747"></a>00747 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_SAVED_STATE_INVALID"</span>);
<a name="l00748"></a>00748 <span class="keywordflow">break</span>;
<a name="l00749"></a>00749 <span class="keywordflow">case</span> CKR_INFORMATION_SENSITIVE:
<a name="l00750"></a>00750 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_INFORMATION_SENSITIVE"</span>);
<a name="l00751"></a>00751 <span class="keywordflow">break</span>;
<a name="l00752"></a>00752 <span class="keywordflow">case</span> CKR_STATE_UNSAVEABLE:
<a name="l00753"></a>00753 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_STATE_UNSAVEABLE"</span>);
<a name="l00754"></a>00754 <span class="keywordflow">break</span>;
<a name="l00755"></a>00755 <span class="keywordflow">case</span> CKR_CRYPTOKI_NOT_INITIALIZED:
<a name="l00756"></a>00756 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_CRYPTOKI_NOT_INITIALIZED"</span>);
<a name="l00757"></a>00757 <span class="keywordflow">break</span>;
<a name="l00758"></a>00758 <span class="keywordflow">case</span> CKR_CRYPTOKI_ALREADY_INITIALIZED:
<a name="l00759"></a>00759 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_CRYPTOKI_ALREADY_INITIALIZED"</span>);
<a name="l00760"></a>00760 <span class="keywordflow">break</span>;
<a name="l00761"></a>00761 <span class="keywordflow">case</span> CKR_MUTEX_BAD:
<a name="l00762"></a>00762 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_MUTEX_BAD"</span>);
<a name="l00763"></a>00763 <span class="keywordflow">break</span>;
<a name="l00764"></a>00764 <span class="keywordflow">case</span> CKR_MUTEX_NOT_LOCKED:
<a name="l00765"></a>00765 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_MUTEX_NOT_LOCKED"</span>);
<a name="l00766"></a>00766 <span class="keywordflow">break</span>;
<a name="l00767"></a>00767 <span class="keywordflow">case</span> CKR_VENDOR_DEFINED:
<a name="l00768"></a>00768 <span class="keywordflow">return</span> (<span class="stringliteral">"CKR_VENDOR_DEFINED"</span>);
<a name="l00769"></a>00769 <span class="keywordflow">break</span>;
<a name="l00770"></a>00770 <span class="keywordflow">default</span>:
<a name="l00771"></a>00771 <span class="comment">/* rv not found */</span>
<a name="l00772"></a>00772 snprintf(errstr, <span class="keyword">sizeof</span> (errstr),
<a name="l00773"></a>00773 <span class="stringliteral">"Unknown return code: 0x%x"</span>, rv);
<a name="l00774"></a>00774 <span class="keywordflow">return</span> (errstr);
<a name="l00775"></a>00775 <span class="keywordflow">break</span>;
<a name="l00776"></a>00776 }
<a name="l00777"></a>00777 }
<a name="l00778"></a>00778 <span class="preprocessor">#endif</span>
</pre></div></div><!-- contents -->
<hr class="footer"/><address class="footer"><small>
Generated by  <a href="http://www.doxygen.org/index.html">
<img class="footer" src="doxygen.png" alt="doxygen"/>
</a> 1.7.6.1
</small></address>
</body>
</html>