1 /** 2 * This file has no copyright assigned and is placed in the Public Domain. 3 * This file is part of the mingw-w64 runtime package. 4 * No warranty is given; refer to the file DISCLAIMER.PD within this package. 5 */ 6 #ifndef __WINCRYPT_H__ 7 #define __WINCRYPT_H__ 8 9 #include <_mingw.h> 10 #include <_mingw_unicode.h> 11 #include <guiddef.h> 12 #include <winapifamily.h> 13 14 #ifdef __cplusplus 15 extern "C" { 16 #endif 17 18 #ifndef _HRESULT_DEFINED 19 #define _HRESULT_DEFINED 20 typedef LONG HRESULT; 21 #endif 22 23 #ifndef DECLSPEC_IMPORT 24 #ifndef __WIDL__ 25 #define DECLSPEC_IMPORT __declspec(dllimport) 26 #else 27 #define DECLSPEC_IMPORT 28 #endif 29 #endif 30 31 #ifndef WINIMPM 32 #define WINIMPM DECLSPEC_IMPORT 33 #endif 34 35 #include <apisetcconv.h> 36 37 #ifndef WINAPI 38 #if defined(_ARM_) 39 #define WINAPI 40 #else 41 #define WINAPI __stdcall 42 #endif 43 #endif 44 45 #ifndef CALLBACK 46 #if defined(_ARM_) 47 #define CALLBACK 48 #else 49 #define CALLBACK __stdcall 50 #endif 51 #endif 52 53 #ifndef CONST 54 #define CONST const 55 #endif 56 57 #ifndef _NO_W32_PSEUDO_MODIFIERS 58 #ifndef IN 59 #define IN 60 #endif 61 62 #ifndef OUT 63 #define OUT 64 #endif 65 66 #ifndef OPTIONAL 67 #define OPTIONAL 68 #endif 69 #endif 70 71 #ifndef WINCRYPT32API 72 #define WINCRYPT32API WINIMPM 73 #endif 74 75 #ifndef WINCRYPT32STRINGAPI 76 #define WINCRYPT32STRINGAPI WINIMPM 77 #endif 78 79 #define GET_ALG_CLASS(x) (x & (7 << 13)) 80 #define GET_ALG_TYPE(x) (x & (15 << 9)) 81 #define GET_ALG_SID(x) (x & 511) 82 83 #define ALG_CLASS_ANY (0) 84 #define ALG_CLASS_SIGNATURE (1 << 13) 85 #define ALG_CLASS_MSG_ENCRYPT (2 << 13) 86 #define ALG_CLASS_DATA_ENCRYPT (3 << 13) 87 #define ALG_CLASS_HASH (4 << 13) 88 #define ALG_CLASS_KEY_EXCHANGE (5 << 13) 89 #define ALG_CLASS_ALL (7 << 13) 90 91 #define ALG_TYPE_ANY (0) 92 #define ALG_TYPE_DSS (1 << 9) 93 #define ALG_TYPE_RSA (2 << 9) 94 #define ALG_TYPE_BLOCK (3 << 9) 95 #define ALG_TYPE_STREAM (4 << 9) 96 #define ALG_TYPE_DH (5 << 9) 97 #define ALG_TYPE_SECURECHANNEL (6 << 9) 98 #if NTDDI_VERSION >= NTDDI_VISTA 99 #define ALG_TYPE_ECDH (7 << 9) 100 #endif 101 #if NTDDI_VERSION >= NTDDI_WIN10_RS1 102 #define ALG_TYPE_THIRDPARTY (8 << 9) 103 #endif 104 105 #define ALG_SID_ANY (0) 106 107 #if NTDDI_VERSION >= NTDDI_WIN10_RS1 108 #define ALG_SID_THIRDPARTY_ANY (0) 109 #endif 110 111 #define ALG_SID_RSA_ANY 0 112 #define ALG_SID_RSA_PKCS 1 113 #define ALG_SID_RSA_MSATWORK 2 114 #define ALG_SID_RSA_ENTRUST 3 115 #define ALG_SID_RSA_PGP 4 116 117 #define ALG_SID_DSS_ANY 0 118 #define ALG_SID_DSS_PKCS 1 119 #define ALG_SID_DSS_DMS 2 120 #if NTDDI_VERSION >= NTDDI_VISTA 121 #define ALG_SID_ECDSA 3 122 #endif 123 124 #define ALG_SID_DES 1 125 #define ALG_SID_3DES 3 126 #define ALG_SID_DESX 4 127 #define ALG_SID_IDEA 5 128 #define ALG_SID_CAST 6 129 #define ALG_SID_SAFERSK64 7 130 #define ALG_SID_SAFERSK128 8 131 #define ALG_SID_3DES_112 9 132 #define ALG_SID_SKIPJACK 10 133 #define ALG_SID_TEK 11 134 #define ALG_SID_CYLINK_MEK 12 135 #define ALG_SID_RC5 13 136 #if NTDDI_VERSION >= NTDDI_WINXP 137 #define ALG_SID_AES_128 14 138 #define ALG_SID_AES_192 15 139 #define ALG_SID_AES_256 16 140 #define ALG_SID_AES 17 141 #endif 142 143 #define CRYPT_MODE_CBCI 6 144 #define CRYPT_MODE_CFBP 7 145 #define CRYPT_MODE_OFBP 8 146 #define CRYPT_MODE_CBCOFM 9 147 #define CRYPT_MODE_CBCOFMI 10 148 149 #define ALG_SID_RC2 2 150 151 #define ALG_SID_RC4 1 152 #define ALG_SID_SEAL 2 153 154 #define ALG_SID_DH_SANDF 1 155 #define ALG_SID_DH_EPHEM 2 156 #define ALG_SID_AGREED_KEY_ANY 3 157 #define ALG_SID_KEA 4 158 #if NTDDI_VERSION >= NTDDI_VISTA 159 #define ALG_SID_ECDH 5 160 #define ALG_SID_ECDH_EPHEM 6 161 #endif 162 163 #define ALG_SID_MD2 1 164 #define ALG_SID_MD4 2 165 #define ALG_SID_MD5 3 166 #define ALG_SID_SHA 4 167 #define ALG_SID_SHA1 4 168 #define ALG_SID_MAC 5 169 #define ALG_SID_RIPEMD 6 170 #define ALG_SID_RIPEMD160 7 171 #define ALG_SID_SSL3SHAMD5 8 172 #define ALG_SID_HMAC 9 173 #define ALG_SID_TLS1PRF 10 174 #if NTDDI_VERSION >= NTDDI_WINXP 175 #define ALG_SID_HASH_REPLACE_OWF 11 176 #endif 177 #if NTDDI_VERSION > NTDDI_WINXPSP2 178 #define ALG_SID_SHA_256 12 179 #define ALG_SID_SHA_384 13 180 #define ALG_SID_SHA_512 14 181 #endif 182 183 #define ALG_SID_SSL3_MASTER 1 184 #define ALG_SID_SCHANNEL_MASTER_HASH 2 185 #define ALG_SID_SCHANNEL_MAC_KEY 3 186 #define ALG_SID_PCT1_MASTER 4 187 #define ALG_SID_SSL2_MASTER 5 188 #define ALG_SID_TLS1_MASTER 6 189 #define ALG_SID_SCHANNEL_ENC_KEY 7 190 191 #if NTDDI_VERSION >= NTDDI_VISTA 192 #define ALG_SID_ECMQV 1 193 #endif 194 195 #define ALG_SID_EXAMPLE 80 196 197 #ifndef ALGIDDEF 198 #define ALGIDDEF 199 typedef unsigned int ALG_ID; 200 #endif 201 202 #define CALG_MD2 (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MD2) 203 #define CALG_MD4 (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MD4) 204 #define CALG_MD5 (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MD5) 205 #define CALG_SHA (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA) 206 #define CALG_SHA1 (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA1) 207 #define CALG_MAC (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MAC) 208 #define CALG_RSA_SIGN (ALG_CLASS_SIGNATURE | ALG_TYPE_RSA | ALG_SID_RSA_ANY) 209 #define CALG_DSS_SIGN (ALG_CLASS_SIGNATURE | ALG_TYPE_DSS | ALG_SID_DSS_ANY) 210 #if NTDDI_VERSION >= NTDDI_WINXP 211 #define CALG_NO_SIGN (ALG_CLASS_SIGNATURE | ALG_TYPE_ANY | ALG_SID_ANY) 212 #endif 213 #define CALG_RSA_KEYX (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_RSA|ALG_SID_RSA_ANY) 214 #define CALG_DES (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_DES) 215 #define CALG_3DES_112 (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_3DES_112) 216 #define CALG_3DES (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_3DES) 217 #define CALG_DESX (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_DESX) 218 #define CALG_RC2 (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_RC2) 219 #define CALG_RC4 (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_STREAM|ALG_SID_RC4) 220 #define CALG_SEAL (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_STREAM|ALG_SID_SEAL) 221 #define CALG_DH_SF (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_DH|ALG_SID_DH_SANDF) 222 #define CALG_DH_EPHEM (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_DH|ALG_SID_DH_EPHEM) 223 #define CALG_AGREEDKEY_ANY (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_DH|ALG_SID_AGREED_KEY_ANY) 224 #define CALG_KEA_KEYX (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_DH|ALG_SID_KEA) 225 #define CALG_HUGHES_MD5 (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_ANY|ALG_SID_MD5) 226 #define CALG_SKIPJACK (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_SKIPJACK) 227 #define CALG_TEK (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_TEK) 228 #define CALG_CYLINK_MEK (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_CYLINK_MEK) 229 #define CALG_SSL3_SHAMD5 (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SSL3SHAMD5) 230 #define CALG_SSL3_MASTER (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_SSL3_MASTER) 231 #define CALG_SCHANNEL_MASTER_HASH (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_SCHANNEL_MASTER_HASH) 232 #define CALG_SCHANNEL_MAC_KEY (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_SCHANNEL_MAC_KEY) 233 #define CALG_SCHANNEL_ENC_KEY (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_SCHANNEL_ENC_KEY) 234 #define CALG_PCT1_MASTER (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_PCT1_MASTER) 235 #define CALG_SSL2_MASTER (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_SSL2_MASTER) 236 #define CALG_TLS1_MASTER (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_TLS1_MASTER) 237 #define CALG_RC5 (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_RC5) 238 #define CALG_HMAC (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_HMAC) 239 #define CALG_TLS1PRF (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_TLS1PRF) 240 #if NTDDI_VERSION >= NTDDI_WINXP 241 #define CALG_HASH_REPLACE_OWF (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_HASH_REPLACE_OWF) 242 #define CALG_AES_128 (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_AES_128) 243 #define CALG_AES_192 (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_AES_192) 244 #define CALG_AES_256 (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_AES_256) 245 #define CALG_AES (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_AES) 246 #endif 247 #if NTDDI_VERSION > NTDDI_WINXPSP2 248 #define CALG_SHA_256 (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA_256) 249 #define CALG_SHA_384 (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA_384) 250 #define CALG_SHA_512 (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA_512) 251 #endif 252 #if NTDDI_VERSION >= NTDDI_VISTA 253 #define CALG_ECDH (ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_DH | ALG_SID_ECDH) 254 #define CALG_ECDH_EPHEM (ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_ECDH | ALG_SID_ECDH_EPHEM) 255 #define CALG_ECMQV (ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_ANY | ALG_SID_ECMQV) 256 #define CALG_ECDSA (ALG_CLASS_SIGNATURE | ALG_TYPE_DSS | ALG_SID_ECDSA) 257 #define CALG_NULLCIPHER (ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_ANY | 0) 258 #endif 259 #if NTDDI_VERSION >= NTDDI_WIN10_RS1 260 #define CALG_THIRDPARTY_KEY_EXCHANGE (ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_THIRDPARTY | ALG_SID_THIRDPARTY_ANY) 261 #define CALG_THIRDPARTY_SIGNATURE (ALG_CLASS_SIGNATURE | ALG_TYPE_THIRDPARTY | ALG_SID_THIRDPARTY_ANY) 262 #define CALG_THIRDPARTY_CIPHER (ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_THIRDPARTY | ALG_SID_THIRDPARTY_ANY) 263 #define CALG_THIRDPARTY_HASH (ALG_CLASS_HASH | ALG_TYPE_THIRDPARTY | ALG_SID_THIRDPARTY_ANY) 264 #endif 265 266 #if NTDDI_VERSION < NTDDI_WINXP 267 #define SIGNATURE_RESOURCE_NUMBER 0x29A 268 269 typedef struct _VTableProvStruc { 270 DWORD Version; 271 FARPROC FuncVerifyImage; 272 FARPROC FuncReturnhWnd; 273 DWORD dwProvType; 274 BYTE *pbContextInfo; 275 DWORD cbContextInfo; 276 LPSTR pszProvName; 277 } VTableProvStruc, *PVTableProvStruc; 278 #endif 279 280 /* In ncrypt.h too */ 281 #ifndef HCRYPTPROV_DEFINED 282 #define HCRYPTPROV_DEFINED 283 typedef ULONG_PTR HCRYPTHASH; 284 typedef ULONG_PTR HCRYPTKEY; 285 typedef ULONG_PTR HCRYPTPROV; 286 #endif 287 288 #define CRYPT_VERIFYCONTEXT 0xf0000000 289 #define CRYPT_NEWKEYSET 0x8 290 #define CRYPT_DELETEKEYSET 0x10 291 #define CRYPT_MACHINE_KEYSET 0x20 292 #define CRYPT_SILENT 0x40 293 #if NTDDI_VERSION >= NTDDI_VISTA 294 #define CRYPT_DEFAULT_CONTAINER_OPTIONAL 0x80 295 #endif 296 297 #define CRYPT_EXPORTABLE 0x1 298 #define CRYPT_USER_PROTECTED 0x2 299 #define CRYPT_CREATE_SALT 0x4 300 #define CRYPT_UPDATE_KEY 0x8 301 #define CRYPT_NO_SALT 0x10 302 #define CRYPT_PREGEN 0x40 303 #define CRYPT_RECIPIENT 0x10 304 #define CRYPT_INITIATOR 0x40 305 #define CRYPT_ONLINE 0x80 306 #define CRYPT_SF 0x100 307 #define CRYPT_CREATE_IV 0x200 308 #define CRYPT_KEK 0x400 309 #define CRYPT_DATA_KEY 0x800 310 #define CRYPT_VOLATILE 0x1000 311 #define CRYPT_SGCKEY 0x2000 312 #if NTDDI_VERSION >= NTDDI_WINXP 313 #define CRYPT_ARCHIVABLE 0x4000 314 #endif 315 #if NTDDI_VERSION >= NTDDI_VISTA 316 #define CRYPT_FORCE_KEY_PROTECTION_HIGH 0x8000 317 #endif 318 #define CRYPT_USER_PROTECTED_STRONG 0x100000 319 320 #define RSA1024BIT_KEY 0x4000000 321 322 #define CRYPT_SERVER 0x400 323 324 #define KEY_LENGTH_MASK 0xffff0000 325 326 #define CRYPT_Y_ONLY 0x1 327 #define CRYPT_SSL2_FALLBACK 0x2 328 #define CRYPT_DESTROYKEY 0x4 329 #if NTDDI_VERSION >= NTDDI_WS03 330 #define CRYPT_DECRYPT_RSA_NO_PADDING_CHECK 0x20 331 #endif 332 #define CRYPT_OAEP 0x40 333 #define CRYPT_BLOB_VER3 0x80 334 #if NTDDI_VERSION >= NTDDI_WINXP 335 #define CRYPT_IPSEC_HMAC_KEY 0x100 336 #endif 337 338 #define CRYPT_SECRETDIGEST 0x1 339 #if NTDDI_VERSION >= NTDDI_WINXP 340 #define CRYPT_OWF_REPL_LM_HASH 0x1 341 #endif 342 #define CRYPT_LITTLE_ENDIAN 0x1 343 344 #define CRYPT_NOHASHOID 0x1 345 #define CRYPT_TYPE2_FORMAT 0x2 346 #define CRYPT_X931_FORMAT 0x4 347 348 #define CRYPT_MACHINE_DEFAULT 0x1 349 #define CRYPT_USER_DEFAULT 0x2 350 #define CRYPT_DELETE_DEFAULT 0x4 351 352 #define SIMPLEBLOB 0x1 353 #define PUBLICKEYBLOB 0x6 354 #define PRIVATEKEYBLOB 0x7 355 #define PLAINTEXTKEYBLOB 0x8 356 #define OPAQUEKEYBLOB 0x9 357 #define PUBLICKEYBLOBEX 0xa 358 #define SYMMETRICWRAPKEYBLOB 0xb 359 #if NTDDI_VERSION >= NTDDI_WS03 360 #define KEYSTATEBLOB 0xc 361 #endif 362 363 #define AT_KEYEXCHANGE 1 364 #define AT_SIGNATURE 2 365 366 #define CRYPT_USERDATA 1 367 368 #define KP_IV 1 369 #define KP_SALT 2 370 #define KP_PADDING 3 371 #define KP_MODE 4 372 #define KP_MODE_BITS 5 373 #define KP_PERMISSIONS 6 374 #define KP_ALGID 7 375 #define KP_BLOCKLEN 8 376 #define KP_KEYLEN 9 377 #define KP_SALT_EX 10 378 #define KP_P 11 379 #define KP_G 12 380 #define KP_Q 13 381 #define KP_X 14 382 #define KP_Y 15 383 #define KP_RA 16 384 #define KP_RB 17 385 #define KP_INFO 18 386 #define KP_EFFECTIVE_KEYLEN 19 387 #define KP_SCHANNEL_ALG 20 388 #define KP_CLIENT_RANDOM 21 389 #define KP_SERVER_RANDOM 22 390 #define KP_RP 23 391 #define KP_PRECOMP_MD5 24 392 #define KP_PRECOMP_SHA 25 393 #define KP_CERTIFICATE 26 394 #define KP_CLEAR_KEY 27 395 #define KP_PUB_EX_LEN 28 396 #define KP_PUB_EX_VAL 29 397 #define KP_KEYVAL 30 398 #define KP_ADMIN_PIN 31 399 #define KP_KEYEXCHANGE_PIN 32 400 #define KP_SIGNATURE_PIN 33 401 #define KP_PREHASH 34 402 #if NTDDI_VERSION >= NTDDI_WS03 403 #define KP_ROUNDS 35 404 #endif 405 #define KP_OAEP_PARAMS 36 406 #define KP_CMS_KEY_INFO 37 407 #define KP_CMS_DH_KEY_INFO 38 408 #define KP_PUB_PARAMS 39 409 #define KP_VERIFY_PARAMS 40 410 #define KP_HIGHEST_VERSION 41 411 #if NTDDI_VERSION >= NTDDI_WS03 412 #define KP_GET_USE_COUNT 42 413 #endif 414 #define KP_PIN_ID 43 415 #define KP_PIN_INFO 44 416 417 #define PKCS5_PADDING 1 418 #define RANDOM_PADDING 2 419 #define ZERO_PADDING 3 420 421 #define CRYPT_MODE_CBC 1 422 #define CRYPT_MODE_ECB 2 423 #define CRYPT_MODE_OFB 3 424 #define CRYPT_MODE_CFB 4 425 #define CRYPT_MODE_CTS 5 426 427 #define CRYPT_ENCRYPT 0x1 428 #define CRYPT_DECRYPT 0x2 429 #define CRYPT_EXPORT 0x4 430 #define CRYPT_READ 0x8 431 #define CRYPT_WRITE 0x10 432 #define CRYPT_MAC 0x20 433 #define CRYPT_EXPORT_KEY 0x40 434 #define CRYPT_IMPORT_KEY 0x80 435 #if NTDDI_VERSION >= NTDDI_WINXP 436 #define CRYPT_ARCHIVE 0x100 437 #endif 438 439 #define HP_ALGID 0x1 440 #define HP_HASHVAL 0x2 441 #define HP_HASHSIZE 0x4 442 #define HP_HMAC_INFO 0x5 443 #define HP_TLS1PRF_LABEL 0x6 444 #define HP_TLS1PRF_SEED 0x7 445 446 #define CRYPT_FAILED FALSE 447 #define CRYPT_SUCCEED TRUE 448 449 #define RCRYPT_SUCCEEDED(RT) ((RT) == CRYPT_SUCCEED) 450 #define RCRYPT_FAILED(RT) ((RT) == CRYPT_FAILED) 451 452 #define PP_ENUMALGS 1 453 #define PP_ENUMCONTAINERS 2 454 #define PP_IMPTYPE 3 455 #define PP_NAME 4 456 #define PP_VERSION 5 457 #define PP_CONTAINER 6 458 #define PP_CHANGE_PASSWORD 7 459 #define PP_KEYSET_SEC_DESCR 8 460 #define PP_CERTCHAIN 9 461 #define PP_KEY_TYPE_SUBTYPE 10 462 #define PP_PROVTYPE 16 463 #define PP_KEYSTORAGE 17 464 #define PP_APPLI_CERT 18 465 #define PP_SYM_KEYSIZE 19 466 #define PP_SESSION_KEYSIZE 20 467 #define PP_UI_PROMPT 21 468 #define PP_ENUMALGS_EX 22 469 #define PP_ENUMMANDROOTS 25 470 #define PP_ENUMELECTROOTS 26 471 #define PP_KEYSET_TYPE 27 472 #define PP_ADMIN_PIN 31 473 #define PP_KEYEXCHANGE_PIN 32 474 #define PP_SIGNATURE_PIN 33 475 #define PP_SIG_KEYSIZE_INC 34 476 #define PP_KEYX_KEYSIZE_INC 35 477 #define PP_UNIQUE_CONTAINER 36 478 #define PP_SGC_INFO 37 479 #define PP_USE_HARDWARE_RNG 38 480 #define PP_KEYSPEC 39 481 #define PP_ENUMEX_SIGNING_PROT 40 482 #if NTDDI_VERSION >= NTDDI_WS03 483 #define PP_CRYPT_COUNT_KEY_USE 41 484 #endif 485 #if NTDDI_VERSION >= NTDDI_VISTA 486 #define PP_USER_CERTSTORE 42 487 #define PP_SMARTCARD_READER 43 488 #define PP_SMARTCARD_GUID 45 489 #define PP_ROOT_CERTSTORE 46 490 #endif 491 #if NTDDI_VERSION >= NTDDI_WIN8 492 #define PP_SMARTCARD_READER_ICON 47 493 #endif 494 495 #define CRYPT_FIRST 1 496 #define CRYPT_NEXT 2 497 #define CRYPT_SGC_ENUM 4 498 499 #define CRYPT_IMPL_HARDWARE 1 500 #define CRYPT_IMPL_SOFTWARE 2 501 #define CRYPT_IMPL_MIXED 3 502 #define CRYPT_IMPL_UNKNOWN 4 503 #define CRYPT_IMPL_REMOVABLE 8 504 505 #define CRYPT_SEC_DESCR 0x1 506 #define CRYPT_PSTORE 0x2 507 #define CRYPT_UI_PROMPT 0x4 508 509 #define CRYPT_FLAG_PCT1 0x1 510 #define CRYPT_FLAG_SSL2 0x2 511 #define CRYPT_FLAG_SSL3 0x4 512 #define CRYPT_FLAG_TLS1 0x8 513 #define CRYPT_FLAG_IPSEC 0x10 514 #define CRYPT_FLAG_SIGNING 0x20 515 516 #define CRYPT_SGC 0x1 517 #define CRYPT_FASTSGC 0x2 518 519 #define PP_CLIENT_HWND 1 520 #define PP_CONTEXT_INFO 11 521 #define PP_KEYEXCHANGE_KEYSIZE 12 522 #define PP_SIGNATURE_KEYSIZE 13 523 #define PP_KEYEXCHANGE_ALG 14 524 #define PP_SIGNATURE_ALG 15 525 #define PP_DELETEKEY 24 526 #if NTDDI_VERSION >= NTDDI_VISTA 527 #define PP_PIN_PROMPT_STRING 44 528 #define PP_SECURE_KEYEXCHANGE_PIN 47 529 #define PP_SECURE_SIGNATURE_PIN 48 530 #endif 531 #if NTDDI_VERSION >= NTDDI_WIN10_RS5 532 #define PP_DISMISS_PIN_UI_SEC 49 533 #endif 534 535 #define PROV_RSA_FULL 1 536 #define PROV_RSA_SIG 2 537 #define PROV_DSS 3 538 #define PROV_FORTEZZA 4 539 #define PROV_MS_EXCHANGE 5 540 #define PROV_SSL 6 541 #define PROV_STT_MER 7 542 #define PROV_STT_ACQ 8 543 #define PROV_STT_BRND 9 544 #define PROV_STT_ROOT 10 545 #define PROV_STT_ISS 11 546 #define PROV_RSA_SCHANNEL 12 547 #define PROV_DSS_DH 13 548 #define PROV_EC_ECDSA_SIG 14 549 #define PROV_EC_ECNRA_SIG 15 550 #define PROV_EC_ECDSA_FULL 16 551 #define PROV_EC_ECNRA_FULL 17 552 #define PROV_DH_SCHANNEL 18 553 #define PROV_SPYRUS_LYNKS 20 554 #define PROV_RNG 21 555 #define PROV_INTEL_SEC 22 556 #if NTDDI_VERSION >= NTDDI_WINXP 557 #define PROV_REPLACE_OWF 23 558 #define PROV_RSA_AES 24 559 #endif 560 561 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP) 562 563 #define MS_DEF_PROV __MINGW_NAME_UAW(MS_DEF_PROV) 564 #define MS_ENHANCED_PROV __MINGW_NAME_UAW(MS_ENHANCED_PROV) 565 #define MS_STRONG_PROV __MINGW_NAME_UAW(MS_STRONG_PROV) 566 #define MS_DEF_RSA_SIG_PROV __MINGW_NAME_UAW(MS_DEF_RSA_SIG_PROV) 567 #define MS_DEF_RSA_SCHANNEL_PROV __MINGW_NAME_UAW(MS_DEF_RSA_SCHANNEL_PROV) 568 #define MS_DEF_DSS_PROV __MINGW_NAME_UAW(MS_DEF_DSS_PROV) 569 #define MS_DEF_DSS_DH_PROV __MINGW_NAME_UAW(MS_DEF_DSS_DH_PROV) 570 #define MS_ENH_DSS_DH_PROV __MINGW_NAME_UAW(MS_ENH_DSS_DH_PROV) 571 #define MS_DEF_DH_SCHANNEL_PROV __MINGW_NAME_UAW(MS_DEF_DH_SCHANNEL_PROV) 572 #define MS_SCARD_PROV __MINGW_NAME_UAW(MS_SCARD_PROV) 573 #if NTDDI_VERSION >= NTDDI_WINXP 574 #define MS_ENH_RSA_AES_PROV_XP __MINGW_NAME_UAW(MS_ENH_RSA_AES_PROV_XP) 575 #define MS_ENH_RSA_AES_PROV __MINGW_NAME_UAW(MS_ENH_RSA_AES_PROV) 576 #endif 577 578 #define MS_DEF_PROV_A "Microsoft Base Cryptographic Provider v1.0" 579 #define MS_DEF_PROV_W L"Microsoft Base Cryptographic Provider v1.0" 580 #define MS_ENHANCED_PROV_A "Microsoft Enhanced Cryptographic Provider v1.0" 581 #define MS_ENHANCED_PROV_W L"Microsoft Enhanced Cryptographic Provider v1.0" 582 #define MS_STRONG_PROV_A "Microsoft Strong Cryptographic Provider" 583 #define MS_STRONG_PROV_W L"Microsoft Strong Cryptographic Provider" 584 #define MS_DEF_RSA_SIG_PROV_A "Microsoft RSA Signature Cryptographic Provider" 585 #define MS_DEF_RSA_SIG_PROV_W L"Microsoft RSA Signature Cryptographic Provider" 586 #define MS_DEF_RSA_SCHANNEL_PROV_A "Microsoft RSA SChannel Cryptographic Provider" 587 #define MS_DEF_RSA_SCHANNEL_PROV_W L"Microsoft RSA SChannel Cryptographic Provider" 588 #define MS_DEF_DSS_PROV_A "Microsoft Base DSS Cryptographic Provider" 589 #define MS_DEF_DSS_PROV_W L"Microsoft Base DSS Cryptographic Provider" 590 #define MS_DEF_DSS_DH_PROV_A "Microsoft Base DSS and Diffie-Hellman Cryptographic Provider" 591 #define MS_DEF_DSS_DH_PROV_W L"Microsoft Base DSS and Diffie-Hellman Cryptographic Provider" 592 #define MS_ENH_DSS_DH_PROV_A "Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider" 593 #define MS_ENH_DSS_DH_PROV_W L"Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider" 594 #define MS_DEF_DH_SCHANNEL_PROV_A "Microsoft DH SChannel Cryptographic Provider" 595 #define MS_DEF_DH_SCHANNEL_PROV_W L"Microsoft DH SChannel Cryptographic Provider" 596 #define MS_SCARD_PROV_A "Microsoft Base Smart Card Crypto Provider" 597 #define MS_SCARD_PROV_W L"Microsoft Base Smart Card Crypto Provider" 598 #if NTDDI_VERSION >= NTDDI_WINXP 599 #define MS_ENH_RSA_AES_PROV_A "Microsoft Enhanced RSA and AES Cryptographic Provider" 600 #define MS_ENH_RSA_AES_PROV_W L"Microsoft Enhanced RSA and AES Cryptographic Provider" 601 #define MS_ENH_RSA_AES_PROV_XP_A "Microsoft Enhanced RSA and AES Cryptographic Provider (Prototype)" 602 #define MS_ENH_RSA_AES_PROV_XP_W L"Microsoft Enhanced RSA and AES Cryptographic Provider (Prototype)" 603 #endif 604 605 #define MAXUIDLEN 64 606 607 #define EXPO_OFFLOAD_REG_VALUE "ExpoOffload" 608 #define EXPO_OFFLOAD_FUNC_NAME "OffloadModExpo" 609 610 #ifndef szKEY_CRYPTOAPI_PRIVATE_KEY_OPTIONS 611 #define szKEY_CRYPTOAPI_PRIVATE_KEY_OPTIONS "Software\\Policies\\Microsoft\\Cryptography" 612 #endif 613 614 #define szKEY_CACHE_ENABLED "CachePrivateKeys" 615 #define szKEY_CACHE_SECONDS "PrivateKeyLifetimeSeconds" 616 617 #if NTDDI_VERSION >= NTDDI_WINXP 618 #define szPRIV_KEY_CACHE_MAX_ITEMS "PrivKeyCacheMaxItems" 619 #define cPRIV_KEY_CACHE_MAX_ITEMS_DEFAULT 20 620 621 #define szPRIV_KEY_CACHE_PURGE_INTERVAL_SECONDS "PrivKeyCachePurgeIntervalSeconds" 622 #define cPRIV_KEY_CACHE_PURGE_INTERVAL_SECONDS_DEFAULT 86400 623 #endif 624 625 #define CUR_BLOB_VERSION 2 626 627 typedef struct _CMS_KEY_INFO { 628 DWORD dwVersion; 629 ALG_ID Algid; 630 BYTE *pbOID; 631 DWORD cbOID; 632 } CMS_KEY_INFO,*PCMS_KEY_INFO; 633 634 typedef struct _HMAC_Info { 635 ALG_ID HashAlgid; 636 BYTE *pbInnerString; 637 DWORD cbInnerString; 638 BYTE *pbOuterString; 639 DWORD cbOuterString; 640 } HMAC_INFO,*PHMAC_INFO; 641 642 typedef struct _SCHANNEL_ALG { 643 DWORD dwUse; 644 ALG_ID Algid; 645 DWORD cBits; 646 DWORD dwFlags; 647 DWORD dwReserved; 648 } SCHANNEL_ALG,*PSCHANNEL_ALG; 649 #define SCHANNEL_MAC_KEY 0x0 650 #define SCHANNEL_ENC_KEY 0x1 651 652 #define INTERNATIONAL_USAGE 0x1 653 654 typedef struct _PROV_ENUMALGS { 655 ALG_ID aiAlgid; 656 DWORD dwBitLen; 657 DWORD dwNameLen; 658 CHAR szName[20]; 659 } PROV_ENUMALGS; 660 661 typedef struct _PROV_ENUMALGS_EX { 662 ALG_ID aiAlgid; 663 DWORD dwDefaultLen; 664 DWORD dwMinLen; 665 DWORD dwMaxLen; 666 DWORD dwProtocols; 667 DWORD dwNameLen; 668 CHAR szName[20]; 669 DWORD dwLongNameLen; 670 CHAR szLongName[40]; 671 } PROV_ENUMALGS_EX; 672 673 typedef struct _PUBLICKEYSTRUC { 674 BYTE bType; 675 BYTE bVersion; 676 WORD reserved; 677 ALG_ID aiKeyAlg; 678 } BLOBHEADER,PUBLICKEYSTRUC; 679 680 typedef struct _RSAPUBKEY { 681 DWORD magic; 682 DWORD bitlen; 683 DWORD pubexp; 684 } RSAPUBKEY; 685 686 typedef struct _PUBKEY { 687 DWORD magic; 688 DWORD bitlen; 689 } DHPUBKEY,DSSPUBKEY,KEAPUBKEY,TEKPUBKEY; 690 691 typedef struct _DSSSEED { 692 DWORD counter; 693 BYTE seed[20]; 694 } DSSSEED; 695 696 typedef struct _PUBKEYVER3 { 697 DWORD magic; 698 DWORD bitlenP; 699 DWORD bitlenQ; 700 DWORD bitlenJ; 701 DSSSEED DSSSeed; 702 } DHPUBKEY_VER3, DSSPUBKEY_VER3; 703 704 typedef struct _PRIVKEYVER3 { 705 DWORD magic; 706 DWORD bitlenP; 707 DWORD bitlenQ; 708 DWORD bitlenJ; 709 DWORD bitlenX; 710 DSSSEED DSSSeed; 711 } DHPRIVKEY_VER3,DSSPRIVKEY_VER3; 712 713 typedef struct _KEY_TYPE_SUBTYPE { 714 DWORD dwKeySpec; 715 GUID Type; 716 GUID Subtype; 717 } KEY_TYPE_SUBTYPE,*PKEY_TYPE_SUBTYPE; 718 719 typedef struct _CERT_FORTEZZA_DATA_PROP { 720 unsigned char SerialNumber[8]; 721 int CertIndex; 722 unsigned char CertLabel[36]; 723 } CERT_FORTEZZA_DATA_PROP; 724 725 #if NTDDI_VERSION >= NTDDI_WS03 726 typedef struct _CRYPT_RC4_KEY_STATE { 727 unsigned char Key[16]; 728 unsigned char SBox[256]; 729 unsigned char i; 730 unsigned char j; 731 } CRYPT_RC4_KEY_STATE,*PCRYPT_RC4_KEY_STATE; 732 733 typedef struct _CRYPT_DES_KEY_STATE { 734 unsigned char Key[8]; 735 unsigned char IV[8]; 736 unsigned char Feedback[8]; 737 } CRYPT_DES_KEY_STATE,*PCRYPT_DES_KEY_STATE; 738 739 typedef struct _CRYPT_3DES_KEY_STATE { 740 unsigned char Key[24]; 741 unsigned char IV[8]; 742 unsigned char Feedback[8]; 743 } CRYPT_3DES_KEY_STATE,*PCRYPT_3DES_KEY_STATE; 744 #endif 745 746 #if NTDDI_VERSION >= NTDDI_VISTA 747 typedef struct _CRYPT_AES_128_KEY_STATE { 748 unsigned char Key[16]; 749 unsigned char IV[16]; 750 unsigned char EncryptionState[11][16]; 751 unsigned char DecryptionState[11][16]; 752 unsigned char Feedback[16]; 753 } CRYPT_AES_128_KEY_STATE,*PCRYPT_AES_128_KEY_STATE; 754 755 typedef struct _CRYPT_AES_256_KEY_STATE { 756 unsigned char Key[32]; 757 unsigned char IV[16]; 758 unsigned char EncryptionState[15][16]; 759 unsigned char DecryptionState[15][16]; 760 unsigned char Feedback[16]; 761 } CRYPT_AES_256_KEY_STATE,*PCRYPT_AES_256_KEY_STATE; 762 #endif 763 #endif 764 765 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_APP) 766 767 #ifndef CRYPTO_BLOBS_DEFINED 768 #define CRYPTO_BLOBS_DEFINED 769 typedef struct _CRYPTOAPI_BLOB { 770 DWORD cbData; 771 BYTE *pbData; 772 } CRYPT_INTEGER_BLOB,*PCRYPT_INTEGER_BLOB,CRYPT_UINT_BLOB,*PCRYPT_UINT_BLOB,CRYPT_OBJID_BLOB,*PCRYPT_OBJID_BLOB,CERT_NAME_BLOB,*PCERT_NAME_BLOB,CERT_RDN_VALUE_BLOB,*PCERT_RDN_VALUE_BLOB,CERT_BLOB,*PCERT_BLOB,CRL_BLOB,*PCRL_BLOB,DATA_BLOB,*PDATA_BLOB,CRYPT_DATA_BLOB,*PCRYPT_DATA_BLOB,CRYPT_HASH_BLOB,*PCRYPT_HASH_BLOB,CRYPT_DIGEST_BLOB,*PCRYPT_DIGEST_BLOB,CRYPT_DER_BLOB,*PCRYPT_DER_BLOB,CRYPT_ATTR_BLOB,*PCRYPT_ATTR_BLOB; 773 #endif 774 #endif 775 776 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP) || defined(WINSTORECOMPAT) 777 WINIMPM WINBOOL WINAPI CryptAcquireContextA (HCRYPTPROV *phProv, LPCSTR szContainer, LPCSTR szProvider, DWORD dwProvType, DWORD dwFlags); 778 WINIMPM WINBOOL WINAPI CryptAcquireContextW (HCRYPTPROV *phProv, LPCWSTR szContainer, LPCWSTR szProvider, DWORD dwProvType, DWORD dwFlags); 779 #define CryptAcquireContext __MINGW_NAME_AW(CryptAcquireContext) 780 WINIMPM WINBOOL WINAPI CryptReleaseContext (HCRYPTPROV hProv, DWORD dwFlags); 781 WINIMPM WINBOOL WINAPI CryptGenRandom (HCRYPTPROV hProv, DWORD dwLen, BYTE *pbBuffer); 782 #endif 783 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP) 784 typedef struct _CMS_DH_KEY_INFO { 785 DWORD dwVersion; 786 ALG_ID Algid; 787 LPSTR pszContentEncObjId; 788 CRYPT_DATA_BLOB PubInfo; 789 void *pReserved; 790 } CMS_DH_KEY_INFO,*PCMS_DH_KEY_INFO; 791 792 #define CryptSignHash __MINGW_NAME_AW(CryptSignHash) 793 #define CryptVerifySignature __MINGW_NAME_AW(CryptVerifySignature) 794 #define CryptSetProvider __MINGW_NAME_AW(CryptSetProvider) 795 #define CryptSetProviderEx __MINGW_NAME_AW(CryptSetProviderEx) 796 #define CryptGetDefaultProvider __MINGW_NAME_AW(CryptGetDefaultProvider) 797 #define CryptEnumProviderTypes __MINGW_NAME_AW(CryptEnumProviderTypes) 798 #define CryptEnumProviders __MINGW_NAME_AW(CryptEnumProviders) 799 800 WINIMPM WINBOOL WINAPI CryptGenKey (HCRYPTPROV hProv, ALG_ID Algid, DWORD dwFlags, HCRYPTKEY *phKey); 801 WINIMPM WINBOOL WINAPI CryptDeriveKey (HCRYPTPROV hProv, ALG_ID Algid, HCRYPTHASH hBaseData, DWORD dwFlags, HCRYPTKEY *phKey); 802 WINIMPM WINBOOL WINAPI CryptDestroyKey (HCRYPTKEY hKey); 803 WINIMPM WINBOOL WINAPI CryptSetKeyParam (HCRYPTKEY hKey, DWORD dwParam, CONST BYTE *pbData, DWORD dwFlags); 804 WINIMPM WINBOOL WINAPI CryptGetKeyParam (HCRYPTKEY hKey, DWORD dwParam, BYTE *pbData, DWORD *pdwDataLen, DWORD dwFlags); 805 WINIMPM WINBOOL WINAPI CryptSetHashParam (HCRYPTHASH hHash, DWORD dwParam, CONST BYTE *pbData, DWORD dwFlags); 806 WINIMPM WINBOOL WINAPI CryptGetHashParam (HCRYPTHASH hHash, DWORD dwParam, BYTE *pbData, DWORD *pdwDataLen, DWORD dwFlags); 807 WINIMPM WINBOOL WINAPI CryptSetProvParam (HCRYPTPROV hProv, DWORD dwParam, CONST BYTE *pbData, DWORD dwFlags); 808 WINIMPM WINBOOL WINAPI CryptGetProvParam (HCRYPTPROV hProv, DWORD dwParam, BYTE *pbData, DWORD *pdwDataLen, DWORD dwFlags); 809 WINIMPM WINBOOL WINAPI CryptGetUserKey (HCRYPTPROV hProv, DWORD dwKeySpec, HCRYPTKEY *phUserKey); 810 WINIMPM WINBOOL WINAPI CryptExportKey (HCRYPTKEY hKey, HCRYPTKEY hExpKey, DWORD dwBlobType, DWORD dwFlags, BYTE *pbData, DWORD *pdwDataLen); 811 WINIMPM WINBOOL WINAPI CryptImportKey (HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDataLen, HCRYPTKEY hPubKey, DWORD dwFlags, HCRYPTKEY *phKey); 812 WINIMPM WINBOOL WINAPI CryptEncrypt (HCRYPTKEY hKey, HCRYPTHASH hHash, WINBOOL Final, DWORD dwFlags, BYTE *pbData, DWORD *pdwDataLen, DWORD dwBufLen); 813 WINIMPM WINBOOL WINAPI CryptDecrypt (HCRYPTKEY hKey, HCRYPTHASH hHash, WINBOOL Final, DWORD dwFlags, BYTE *pbData, DWORD *pdwDataLen); 814 WINIMPM WINBOOL WINAPI CryptCreateHash (HCRYPTPROV hProv, ALG_ID Algid, HCRYPTKEY hKey, DWORD dwFlags, HCRYPTHASH *phHash); 815 WINIMPM WINBOOL WINAPI CryptHashData (HCRYPTHASH hHash, CONST BYTE *pbData, DWORD dwDataLen, DWORD dwFlags); 816 WINIMPM WINBOOL WINAPI CryptHashSessionKey (HCRYPTHASH hHash, HCRYPTKEY hKey, DWORD dwFlags); 817 WINIMPM WINBOOL WINAPI CryptDestroyHash (HCRYPTHASH hHash); 818 WINIMPM WINBOOL WINAPI CryptSignHashA (HCRYPTHASH hHash, DWORD dwKeySpec, LPCSTR szDescription, DWORD dwFlags, BYTE *pbSignature, DWORD *pdwSigLen); 819 WINIMPM WINBOOL WINAPI CryptSignHashW (HCRYPTHASH hHash, DWORD dwKeySpec, LPCWSTR szDescription, DWORD dwFlags, BYTE *pbSignature, DWORD *pdwSigLen); 820 WINIMPM WINBOOL WINAPI CryptVerifySignatureA (HCRYPTHASH hHash, CONST BYTE *pbSignature, DWORD dwSigLen, HCRYPTKEY hPubKey, LPCSTR szDescription, DWORD dwFlags); 821 WINIMPM WINBOOL WINAPI CryptVerifySignatureW (HCRYPTHASH hHash, CONST BYTE *pbSignature, DWORD dwSigLen, HCRYPTKEY hPubKey, LPCWSTR szDescription, DWORD dwFlags); 822 WINIMPM WINBOOL WINAPI CryptSetProviderA (LPCSTR pszProvName, DWORD dwProvType); 823 WINIMPM WINBOOL WINAPI CryptSetProviderW (LPCWSTR pszProvName, DWORD dwProvType); 824 WINIMPM WINBOOL WINAPI CryptSetProviderExA (LPCSTR pszProvName, DWORD dwProvType, DWORD *pdwReserved, DWORD dwFlags); 825 WINIMPM WINBOOL WINAPI CryptSetProviderExW (LPCWSTR pszProvName, DWORD dwProvType, DWORD *pdwReserved, DWORD dwFlags); 826 WINIMPM WINBOOL WINAPI CryptGetDefaultProviderA (DWORD dwProvType, DWORD *pdwReserved, DWORD dwFlags, LPSTR pszProvName, DWORD *pcbProvName); 827 WINIMPM WINBOOL WINAPI CryptGetDefaultProviderW (DWORD dwProvType, DWORD *pdwReserved, DWORD dwFlags, LPWSTR pszProvName, DWORD *pcbProvName); 828 WINIMPM WINBOOL WINAPI CryptEnumProviderTypesA (DWORD dwIndex, DWORD *pdwReserved, DWORD dwFlags, DWORD *pdwProvType, LPSTR szTypeName, DWORD *pcbTypeName); 829 WINIMPM WINBOOL WINAPI CryptEnumProviderTypesW (DWORD dwIndex, DWORD *pdwReserved, DWORD dwFlags, DWORD *pdwProvType, LPWSTR szTypeName, DWORD *pcbTypeName); 830 WINIMPM WINBOOL WINAPI CryptEnumProvidersA (DWORD dwIndex, DWORD *pdwReserved, DWORD dwFlags, DWORD *pdwProvType, LPSTR szProvName, DWORD *pcbProvName); 831 WINIMPM WINBOOL WINAPI CryptEnumProvidersW (DWORD dwIndex, DWORD *pdwReserved, DWORD dwFlags, DWORD *pdwProvType, LPWSTR szProvName, DWORD *pcbProvName); 832 WINIMPM WINBOOL WINAPI CryptContextAddRef (HCRYPTPROV hProv, DWORD *pdwReserved, DWORD dwFlags); 833 WINIMPM WINBOOL WINAPI CryptDuplicateKey (HCRYPTKEY hKey, DWORD *pdwReserved, DWORD dwFlags, HCRYPTKEY *phKey); 834 WINIMPM WINBOOL WINAPI CryptDuplicateHash (HCRYPTHASH hHash, DWORD *pdwReserved, DWORD dwFlags, HCRYPTHASH *phHash); 835 #if NTDDI_VERSION >= NTDDI_WS03 836 WINBOOL __cdecl GetEncSChannel (BYTE **pData, DWORD *dwDecSize); 837 #endif 838 #endif 839 840 #ifndef _DDK_DRIVER_ 841 typedef ULONG_PTR HCRYPTPROV_OR_NCRYPT_KEY_HANDLE; 842 typedef ULONG_PTR HCRYPTPROV_LEGACY; 843 844 #include <bcrypt.h> 845 846 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_APP) 847 #include <ncrypt.h> 848 849 typedef struct _CRYPT_BIT_BLOB { 850 DWORD cbData; 851 BYTE *pbData; 852 DWORD cUnusedBits; 853 } CRYPT_BIT_BLOB,*PCRYPT_BIT_BLOB; 854 855 typedef struct _CRYPT_ALGORITHM_IDENTIFIER { 856 LPSTR pszObjId; 857 CRYPT_OBJID_BLOB Parameters; 858 } CRYPT_ALGORITHM_IDENTIFIER,*PCRYPT_ALGORITHM_IDENTIFIER; 859 #endif 860 861 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP) 862 #define szOID_RSA "1.2.840.113549" 863 #define szOID_PKCS "1.2.840.113549.1" 864 #define szOID_RSA_HASH "1.2.840.113549.2" 865 #define szOID_RSA_ENCRYPT "1.2.840.113549.3" 866 867 #define szOID_PKCS_1 "1.2.840.113549.1.1" 868 #define szOID_PKCS_2 "1.2.840.113549.1.2" 869 #define szOID_PKCS_3 "1.2.840.113549.1.3" 870 #define szOID_PKCS_4 "1.2.840.113549.1.4" 871 #define szOID_PKCS_5 "1.2.840.113549.1.5" 872 #define szOID_PKCS_6 "1.2.840.113549.1.6" 873 #define szOID_PKCS_7 "1.2.840.113549.1.7" 874 #define szOID_PKCS_8 "1.2.840.113549.1.8" 875 #define szOID_PKCS_9 "1.2.840.113549.1.9" 876 #define szOID_PKCS_10 "1.2.840.113549.1.10" 877 #define szOID_PKCS_12 "1.2.840.113549.1.12" 878 879 #define szOID_RSA_RSA "1.2.840.113549.1.1.1" 880 #define szOID_RSA_MD2RSA "1.2.840.113549.1.1.2" 881 #define szOID_RSA_MD4RSA "1.2.840.113549.1.1.3" 882 #define szOID_RSA_MD5RSA "1.2.840.113549.1.1.4" 883 #define szOID_RSA_SHA1RSA "1.2.840.113549.1.1.5" 884 #define szOID_RSA_SETOAEP_RSA "1.2.840.113549.1.1.6" 885 886 #define szOID_RSAES_OAEP "1.2.840.113549.1.1.7" 887 #define szOID_RSA_MGF1 "1.2.840.113549.1.1.8" 888 #define szOID_RSA_PSPECIFIED "1.2.840.113549.1.1.9" 889 #define szOID_RSA_SSA_PSS "1.2.840.113549.1.1.10" 890 #define szOID_RSA_SHA256RSA "1.2.840.113549.1.1.11" 891 #define szOID_RSA_SHA384RSA "1.2.840.113549.1.1.12" 892 #define szOID_RSA_SHA512RSA "1.2.840.113549.1.1.13" 893 894 #define szOID_RSA_DH "1.2.840.113549.1.3.1" 895 896 #define szOID_RSA_data "1.2.840.113549.1.7.1" 897 #define szOID_RSA_signedData "1.2.840.113549.1.7.2" 898 #define szOID_RSA_envelopedData "1.2.840.113549.1.7.3" 899 #define szOID_RSA_signEnvData "1.2.840.113549.1.7.4" 900 #define szOID_RSA_digestedData "1.2.840.113549.1.7.5" 901 #define szOID_RSA_hashedData "1.2.840.113549.1.7.5" 902 #define szOID_RSA_encryptedData "1.2.840.113549.1.7.6" 903 904 #define szOID_RSA_emailAddr "1.2.840.113549.1.9.1" 905 #define szOID_RSA_unstructName "1.2.840.113549.1.9.2" 906 #define szOID_RSA_contentType "1.2.840.113549.1.9.3" 907 #define szOID_RSA_messageDigest "1.2.840.113549.1.9.4" 908 #define szOID_RSA_signingTime "1.2.840.113549.1.9.5" 909 #define szOID_RSA_counterSign "1.2.840.113549.1.9.6" 910 #define szOID_RSA_challengePwd "1.2.840.113549.1.9.7" 911 #define szOID_RSA_unstructAddr "1.2.840.113549.1.9.8" 912 #define szOID_RSA_extCertAttrs "1.2.840.113549.1.9.9" 913 #define szOID_RSA_certExtensions "1.2.840.113549.1.9.14" 914 #define szOID_RSA_SMIMECapabilities "1.2.840.113549.1.9.15" 915 #define szOID_RSA_preferSignedData "1.2.840.113549.1.9.15.1" 916 917 #define szOID_TIMESTAMP_TOKEN "1.2.840.113549.1.9.16.1.4" 918 #define szOID_RFC3161_counterSign "1.3.6.1.4.1.311.3.3.1" 919 920 #define szOID_RSA_SMIMEalg "1.2.840.113549.1.9.16.3" 921 #define szOID_RSA_SMIMEalgESDH "1.2.840.113549.1.9.16.3.5" 922 #define szOID_RSA_SMIMEalgCMS3DESwrap "1.2.840.113549.1.9.16.3.6" 923 #define szOID_RSA_SMIMEalgCMSRC2wrap "1.2.840.113549.1.9.16.3.7" 924 925 #define szOID_RSA_MD2 "1.2.840.113549.2.2" 926 #define szOID_RSA_MD4 "1.2.840.113549.2.4" 927 #define szOID_RSA_MD5 "1.2.840.113549.2.5" 928 929 #define szOID_RSA_RC2CBC "1.2.840.113549.3.2" 930 #define szOID_RSA_RC4 "1.2.840.113549.3.4" 931 #define szOID_RSA_DES_EDE3_CBC "1.2.840.113549.3.7" 932 #define szOID_RSA_RC5_CBCPad "1.2.840.113549.3.9" 933 934 #define szOID_ANSI_X942 "1.2.840.10046" 935 #define szOID_ANSI_X942_DH "1.2.840.10046.2.1" 936 937 #define szOID_X957 "1.2.840.10040" 938 #define szOID_X957_DSA "1.2.840.10040.4.1" 939 #define szOID_X957_SHA1DSA "1.2.840.10040.4.3" 940 941 #define szOID_ECC_PUBLIC_KEY "1.2.840.10045.2.1" 942 #define szOID_ECC_CURVE_P256 "1.2.840.10045.3.1.7" 943 #define szOID_ECC_CURVE_P384 "1.3.132.0.34" 944 #define szOID_ECC_CURVE_P521 "1.3.132.0.35" 945 946 #define szOID_ECC_CURVE_BRAINPOOLP160R1 "1.3.36.3.3.2.8.1.1.1" 947 #define szOID_ECC_CURVE_BRAINPOOLP160T1 "1.3.36.3.3.2.8.1.1.2" 948 #define szOID_ECC_CURVE_BRAINPOOLP192R1 "1.3.36.3.3.2.8.1.1.3" 949 #define szOID_ECC_CURVE_BRAINPOOLP192T1 "1.3.36.3.3.2.8.1.1.4" 950 #define szOID_ECC_CURVE_BRAINPOOLP224R1 "1.3.36.3.3.2.8.1.1.5" 951 #define szOID_ECC_CURVE_BRAINPOOLP224T1 "1.3.36.3.3.2.8.1.1.6" 952 #define szOID_ECC_CURVE_BRAINPOOLP256R1 "1.3.36.3.3.2.8.1.1.7" 953 #define szOID_ECC_CURVE_BRAINPOOLP256T1 "1.3.36.3.3.2.8.1.1.8" 954 #define szOID_ECC_CURVE_BRAINPOOLP320R1 "1.3.36.3.3.2.8.1.1.9" 955 #define szOID_ECC_CURVE_BRAINPOOLP320T1 "1.3.36.3.3.2.8.1.1.10" 956 #define szOID_ECC_CURVE_BRAINPOOLP384R1 "1.3.36.3.3.2.8.1.1.11" 957 #define szOID_ECC_CURVE_BRAINPOOLP384T1 "1.3.36.3.3.2.8.1.1.12" 958 #define szOID_ECC_CURVE_BRAINPOOLP512R1 "1.3.36.3.3.2.8.1.1.13" 959 #define szOID_ECC_CURVE_BRAINPOOLP512T1 "1.3.36.3.3.2.8.1.1.14" 960 961 #define szOID_ECC_CURVE_EC192WAPI "1.2.156.11235.1.1.2.1" 962 #define szOID_CN_ECDSA_SHA256 "1.2.156.11235.1.1.1" 963 964 #define szOID_ECC_CURVE_NISTP192 "1.2.840.10045.3.1.1" 965 #define szOID_ECC_CURVE_NISTP224 "1.3.132.0.33" 966 #define szOID_ECC_CURVE_NISTP256 szOID_ECC_CURVE_P256 967 #define szOID_ECC_CURVE_NISTP384 szOID_ECC_CURVE_P384 968 #define szOID_ECC_CURVE_NISTP521 szOID_ECC_CURVE_P521 969 970 #define szOID_ECC_CURVE_SECP160K1 "1.3.132.0.9" 971 #define szOID_ECC_CURVE_SECP160R1 "1.3.132.0.8" 972 #define szOID_ECC_CURVE_SECP160R2 "1.3.132.0.30" 973 #define szOID_ECC_CURVE_SECP192K1 "1.3.132.0.31" 974 #define szOID_ECC_CURVE_SECP192R1 szOID_ECC_CURVE_NISTP192 975 #define szOID_ECC_CURVE_SECP224K1 "1.3.132.0.32" 976 #define szOID_ECC_CURVE_SECP224R1 szOID_ECC_CURVE_NISTP224 977 #define szOID_ECC_CURVE_SECP256K1 "1.3.132.0.10" 978 #define szOID_ECC_CURVE_SECP256R1 szOID_ECC_CURVE_P256 979 #define szOID_ECC_CURVE_SECP384R1 szOID_ECC_CURVE_P384 980 #define szOID_ECC_CURVE_SECP521R1 szOID_ECC_CURVE_P521 981 982 #define szOID_ECC_CURVE_WTLS7 szOID_ECC_CURVE_SECP160R2 983 #define szOID_ECC_CURVE_WTLS9 "2.23.43.1.4.9" 984 #define szOID_ECC_CURVE_WTLS12 szOID_ECC_CURVE_NISTP224 985 986 #define szOID_ECC_CURVE_X962P192V1 "1.2.840.10045.3.1.1" 987 #define szOID_ECC_CURVE_X962P192V2 "1.2.840.10045.3.1.2" 988 #define szOID_ECC_CURVE_X962P192V3 "1.2.840.10045.3.1.3" 989 #define szOID_ECC_CURVE_X962P239V1 "1.2.840.10045.3.1.4" 990 #define szOID_ECC_CURVE_X962P239V2 "1.2.840.10045.3.1.5" 991 #define szOID_ECC_CURVE_X962P239V3 "1.2.840.10045.3.1.6" 992 #define szOID_ECC_CURVE_X962P256V1 szOID_ECC_CURVE_P256 993 994 #define szOID_ECDSA_SHA1 "1.2.840.10045.4.1" 995 #define szOID_ECDSA_SPECIFIED "1.2.840.10045.4.3" 996 #define szOID_ECDSA_SHA256 "1.2.840.10045.4.3.2" 997 #define szOID_ECDSA_SHA384 "1.2.840.10045.4.3.3" 998 #define szOID_ECDSA_SHA512 "1.2.840.10045.4.3.4" 999 1000 #define szOID_NIST_AES128_CBC "2.16.840.1.101.3.4.1.2" 1001 #define szOID_NIST_AES192_CBC "2.16.840.1.101.3.4.1.22" 1002 #define szOID_NIST_AES256_CBC "2.16.840.1.101.3.4.1.42" 1003 1004 #define szOID_NIST_AES128_WRAP "2.16.840.1.101.3.4.1.5" 1005 #define szOID_NIST_AES192_WRAP "2.16.840.1.101.3.4.1.25" 1006 #define szOID_NIST_AES256_WRAP "2.16.840.1.101.3.4.1.45" 1007 1008 #define szOID_DH_SINGLE_PASS_STDDH_SHA1_KDF "1.3.133.16.840.63.0.2" 1009 #define szOID_DH_SINGLE_PASS_STDDH_SHA256_KDF "1.3.132.1.11.1" 1010 #define szOID_DH_SINGLE_PASS_STDDH_SHA384_KDF "1.3.132.1.11.2" 1011 1012 #define szOID_DS "2.5" 1013 #define szOID_DSALG "2.5.8" 1014 #define szOID_DSALG_CRPT "2.5.8.1" 1015 #define szOID_DSALG_HASH "2.5.8.2" 1016 #define szOID_DSALG_SIGN "2.5.8.3" 1017 #define szOID_DSALG_RSA "2.5.8.1.1" 1018 1019 #define szOID_OIW "1.3.14" 1020 1021 #define szOID_OIWSEC "1.3.14.3.2" 1022 #define szOID_OIWSEC_md4RSA "1.3.14.3.2.2" 1023 #define szOID_OIWSEC_md5RSA "1.3.14.3.2.3" 1024 #define szOID_OIWSEC_md4RSA2 "1.3.14.3.2.4" 1025 #define szOID_OIWSEC_desECB "1.3.14.3.2.6" 1026 #define szOID_OIWSEC_desCBC "1.3.14.3.2.7" 1027 #define szOID_OIWSEC_desOFB "1.3.14.3.2.8" 1028 #define szOID_OIWSEC_desCFB "1.3.14.3.2.9" 1029 #define szOID_OIWSEC_desMAC "1.3.14.3.2.10" 1030 #define szOID_OIWSEC_rsaSign "1.3.14.3.2.11" 1031 #define szOID_OIWSEC_dsa "1.3.14.3.2.12" 1032 #define szOID_OIWSEC_shaDSA "1.3.14.3.2.13" 1033 #define szOID_OIWSEC_mdc2RSA "1.3.14.3.2.14" 1034 #define szOID_OIWSEC_shaRSA "1.3.14.3.2.15" 1035 #define szOID_OIWSEC_dhCommMod "1.3.14.3.2.16" 1036 #define szOID_OIWSEC_desEDE "1.3.14.3.2.17" 1037 #define szOID_OIWSEC_sha "1.3.14.3.2.18" 1038 #define szOID_OIWSEC_mdc2 "1.3.14.3.2.19" 1039 #define szOID_OIWSEC_dsaComm "1.3.14.3.2.20" 1040 #define szOID_OIWSEC_dsaCommSHA "1.3.14.3.2.21" 1041 #define szOID_OIWSEC_rsaXchg "1.3.14.3.2.22" 1042 #define szOID_OIWSEC_keyHashSeal "1.3.14.3.2.23" 1043 #define szOID_OIWSEC_md2RSASign "1.3.14.3.2.24" 1044 #define szOID_OIWSEC_md5RSASign "1.3.14.3.2.25" 1045 #define szOID_OIWSEC_sha1 "1.3.14.3.2.26" 1046 #define szOID_OIWSEC_dsaSHA1 "1.3.14.3.2.27" 1047 #define szOID_OIWSEC_dsaCommSHA1 "1.3.14.3.2.28" 1048 #define szOID_OIWSEC_sha1RSASign "1.3.14.3.2.29" 1049 1050 #define szOID_OIWDIR "1.3.14.7.2" 1051 #define szOID_OIWDIR_CRPT "1.3.14.7.2.1" 1052 #define szOID_OIWDIR_HASH "1.3.14.7.2.2" 1053 #define szOID_OIWDIR_SIGN "1.3.14.7.2.3" 1054 #define szOID_OIWDIR_md2 "1.3.14.7.2.2.1" 1055 #define szOID_OIWDIR_md2RSA "1.3.14.7.2.3.1" 1056 1057 #define szOID_INFOSEC "2.16.840.1.101.2.1" 1058 #define szOID_INFOSEC_sdnsSignature "2.16.840.1.101.2.1.1.1" 1059 #define szOID_INFOSEC_mosaicSignature "2.16.840.1.101.2.1.1.2" 1060 #define szOID_INFOSEC_sdnsConfidentiality "2.16.840.1.101.2.1.1.3" 1061 #define szOID_INFOSEC_mosaicConfidentiality "2.16.840.1.101.2.1.1.4" 1062 #define szOID_INFOSEC_sdnsIntegrity "2.16.840.1.101.2.1.1.5" 1063 #define szOID_INFOSEC_mosaicIntegrity "2.16.840.1.101.2.1.1.6" 1064 #define szOID_INFOSEC_sdnsTokenProtection "2.16.840.1.101.2.1.1.7" 1065 #define szOID_INFOSEC_mosaicTokenProtection "2.16.840.1.101.2.1.1.8" 1066 #define szOID_INFOSEC_sdnsKeyManagement "2.16.840.1.101.2.1.1.9" 1067 #define szOID_INFOSEC_mosaicKeyManagement "2.16.840.1.101.2.1.1.10" 1068 #define szOID_INFOSEC_sdnsKMandSig "2.16.840.1.101.2.1.1.11" 1069 #define szOID_INFOSEC_mosaicKMandSig "2.16.840.1.101.2.1.1.12" 1070 #define szOID_INFOSEC_SuiteASignature "2.16.840.1.101.2.1.1.13" 1071 #define szOID_INFOSEC_SuiteAConfidentiality "2.16.840.1.101.2.1.1.14" 1072 #define szOID_INFOSEC_SuiteAIntegrity "2.16.840.1.101.2.1.1.15" 1073 #define szOID_INFOSEC_SuiteATokenProtection "2.16.840.1.101.2.1.1.16" 1074 #define szOID_INFOSEC_SuiteAKeyManagement "2.16.840.1.101.2.1.1.17" 1075 #define szOID_INFOSEC_SuiteAKMandSig "2.16.840.1.101.2.1.1.18" 1076 #define szOID_INFOSEC_mosaicUpdatedSig "2.16.840.1.101.2.1.1.19" 1077 #define szOID_INFOSEC_mosaicKMandUpdSig "2.16.840.1.101.2.1.1.20" 1078 #define szOID_INFOSEC_mosaicUpdatedInteg "2.16.840.1.101.2.1.1.21" 1079 1080 #define szOID_NIST_sha256 "2.16.840.1.101.3.4.2.1" 1081 #define szOID_NIST_sha384 "2.16.840.1.101.3.4.2.2" 1082 #define szOID_NIST_sha512 "2.16.840.1.101.3.4.2.3" 1083 1084 typedef struct _CRYPT_OBJID_TABLE { 1085 DWORD dwAlgId; 1086 LPCSTR pszObjId; 1087 } CRYPT_OBJID_TABLE,*PCRYPT_OBJID_TABLE; 1088 1089 typedef struct _CRYPT_HASH_INFO { 1090 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 1091 CRYPT_HASH_BLOB Hash; 1092 } CRYPT_HASH_INFO,*PCRYPT_HASH_INFO; 1093 #endif 1094 1095 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_APP) 1096 typedef struct _CERT_EXTENSION { 1097 LPSTR pszObjId; 1098 WINBOOL fCritical; 1099 CRYPT_OBJID_BLOB Value; 1100 } CERT_EXTENSION,*PCERT_EXTENSION; 1101 1102 typedef const CERT_EXTENSION *PCCERT_EXTENSION; 1103 #endif 1104 1105 typedef struct _CRYPT_ATTRIBUTE_TYPE_VALUE { 1106 LPSTR pszObjId; 1107 CRYPT_OBJID_BLOB Value; 1108 } CRYPT_ATTRIBUTE_TYPE_VALUE,*PCRYPT_ATTRIBUTE_TYPE_VALUE; 1109 1110 typedef struct _CRYPT_ATTRIBUTE { 1111 LPSTR pszObjId; 1112 DWORD cValue; 1113 PCRYPT_ATTR_BLOB rgValue; 1114 } CRYPT_ATTRIBUTE,*PCRYPT_ATTRIBUTE; 1115 1116 typedef struct _CRYPT_ATTRIBUTES { 1117 DWORD cAttr; 1118 PCRYPT_ATTRIBUTE rgAttr; 1119 } CRYPT_ATTRIBUTES,*PCRYPT_ATTRIBUTES; 1120 1121 typedef struct _CERT_RDN_ATTR { 1122 LPSTR pszObjId; 1123 DWORD dwValueType; 1124 CERT_RDN_VALUE_BLOB Value; 1125 } CERT_RDN_ATTR,*PCERT_RDN_ATTR; 1126 1127 #define szOID_COMMON_NAME "2.5.4.3" 1128 #define szOID_SUR_NAME "2.5.4.4" 1129 #define szOID_DEVICE_SERIAL_NUMBER "2.5.4.5" 1130 #define szOID_COUNTRY_NAME "2.5.4.6" 1131 #define szOID_LOCALITY_NAME "2.5.4.7" 1132 #define szOID_STATE_OR_PROVINCE_NAME "2.5.4.8" 1133 #define szOID_STREET_ADDRESS "2.5.4.9" 1134 #define szOID_ORGANIZATION_NAME "2.5.4.10" 1135 #define szOID_ORGANIZATIONAL_UNIT_NAME "2.5.4.11" 1136 #define szOID_TITLE "2.5.4.12" 1137 #define szOID_DESCRIPTION "2.5.4.13" 1138 #define szOID_SEARCH_GUIDE "2.5.4.14" 1139 #define szOID_BUSINESS_CATEGORY "2.5.4.15" 1140 #define szOID_POSTAL_ADDRESS "2.5.4.16" 1141 #define szOID_POSTAL_CODE "2.5.4.17" 1142 #define szOID_POST_OFFICE_BOX "2.5.4.18" 1143 #define szOID_PHYSICAL_DELIVERY_OFFICE_NAME "2.5.4.19" 1144 #define szOID_TELEPHONE_NUMBER "2.5.4.20" 1145 #define szOID_TELEX_NUMBER "2.5.4.21" 1146 #define szOID_TELETEXT_TERMINAL_IDENTIFIER "2.5.4.22" 1147 #define szOID_FACSIMILE_TELEPHONE_NUMBER "2.5.4.23" 1148 #define szOID_X21_ADDRESS "2.5.4.24" 1149 #define szOID_INTERNATIONAL_ISDN_NUMBER "2.5.4.25" 1150 #define szOID_REGISTERED_ADDRESS "2.5.4.26" 1151 #define szOID_DESTINATION_INDICATOR "2.5.4.27" 1152 #define szOID_PREFERRED_DELIVERY_METHOD "2.5.4.28" 1153 #define szOID_PRESENTATION_ADDRESS "2.5.4.29" 1154 #define szOID_SUPPORTED_APPLICATION_CONTEXT "2.5.4.30" 1155 #define szOID_MEMBER "2.5.4.31" 1156 #define szOID_OWNER "2.5.4.32" 1157 #define szOID_ROLE_OCCUPANT "2.5.4.33" 1158 #define szOID_SEE_ALSO "2.5.4.34" 1159 #define szOID_USER_PASSWORD "2.5.4.35" 1160 #define szOID_USER_CERTIFICATE "2.5.4.36" 1161 #define szOID_CA_CERTIFICATE "2.5.4.37" 1162 #define szOID_AUTHORITY_REVOCATION_LIST "2.5.4.38" 1163 #define szOID_CERTIFICATE_REVOCATION_LIST "2.5.4.39" 1164 #define szOID_CROSS_CERTIFICATE_PAIR "2.5.4.40" 1165 #define szOID_GIVEN_NAME "2.5.4.42" 1166 #define szOID_INITIALS "2.5.4.43" 1167 #define szOID_DN_QUALIFIER "2.5.4.46" 1168 1169 #define szOID_DOMAIN_COMPONENT "0.9.2342.19200300.100.1.25" 1170 1171 #define szOID_PKCS_12_FRIENDLY_NAME_ATTR "1.2.840.113549.1.9.20" 1172 #define szOID_PKCS_12_LOCAL_KEY_ID "1.2.840.113549.1.9.21" 1173 #define szOID_PKCS_12_KEY_PROVIDER_NAME_ATTR "1.3.6.1.4.1.311.17.1" 1174 #define szOID_LOCAL_MACHINE_KEYSET "1.3.6.1.4.1.311.17.2" 1175 #define szOID_PKCS_12_EXTENDED_ATTRIBUTES "1.3.6.1.4.1.311.17.3" 1176 #define szOID_PKCS_12_PROTECTED_PASSWORD_SECRET_BAG_TYPE_ID "1.3.6.1.4.1.311.17.4" 1177 1178 #define szOID_KEYID_RDN "1.3.6.1.4.1.311.10.7.1" 1179 1180 #define szOID_EV_RDN_LOCALE "1.3.6.1.4.1.311.60.2.1.1" 1181 #define szOID_EV_RDN_STATE_OR_PROVINCE "1.3.6.1.4.1.311.60.2.1.2" 1182 #define szOID_EV_RDN_COUNTRY "1.3.6.1.4.1.311.60.2.1.3" 1183 1184 #define CERT_RDN_ANY_TYPE 0 1185 #define CERT_RDN_ENCODED_BLOB 1 1186 #define CERT_RDN_OCTET_STRING 2 1187 #define CERT_RDN_NUMERIC_STRING 3 1188 #define CERT_RDN_PRINTABLE_STRING 4 1189 #define CERT_RDN_TELETEX_STRING 5 1190 #define CERT_RDN_T61_STRING 5 1191 #define CERT_RDN_VIDEOTEX_STRING 6 1192 #define CERT_RDN_IA5_STRING 7 1193 #define CERT_RDN_GRAPHIC_STRING 8 1194 #define CERT_RDN_VISIBLE_STRING 9 1195 #define CERT_RDN_ISO646_STRING 9 1196 #define CERT_RDN_GENERAL_STRING 10 1197 #define CERT_RDN_UNIVERSAL_STRING 11 1198 #define CERT_RDN_INT4_STRING 11 1199 #define CERT_RDN_BMP_STRING 12 1200 #define CERT_RDN_UNICODE_STRING 12 1201 #define CERT_RDN_UTF8_STRING 13 1202 1203 #define CERT_RDN_TYPE_MASK 0x000000ff 1204 #define CERT_RDN_FLAGS_MASK 0xff000000 1205 1206 #define CERT_RDN_ENABLE_T61_UNICODE_FLAG 0x80000000 1207 #define CERT_RDN_ENABLE_UTF8_UNICODE_FLAG 0x20000000 1208 #define CERT_RDN_FORCE_UTF8_UNICODE_FLAG 0x10000000 1209 #define CERT_RDN_DISABLE_CHECK_TYPE_FLAG 0x40000000 1210 #define CERT_RDN_DISABLE_IE4_UTF8_FLAG 0x1000000 1211 #define CERT_RDN_ENABLE_PUNYCODE_FLAG 0x2000000 1212 1213 #define IS_CERT_RDN_CHAR_STRING(X) (((X) & CERT_RDN_TYPE_MASK) >= CERT_RDN_NUMERIC_STRING) 1214 1215 typedef struct _CERT_RDN { 1216 DWORD cRDNAttr; 1217 PCERT_RDN_ATTR rgRDNAttr; 1218 } CERT_RDN,*PCERT_RDN; 1219 1220 typedef struct _CERT_NAME_INFO { 1221 DWORD cRDN; 1222 PCERT_RDN rgRDN; 1223 } CERT_NAME_INFO,*PCERT_NAME_INFO; 1224 1225 typedef struct _CERT_NAME_VALUE { 1226 DWORD dwValueType; 1227 CERT_RDN_VALUE_BLOB Value; 1228 } CERT_NAME_VALUE,*PCERT_NAME_VALUE; 1229 1230 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_APP) 1231 typedef struct _CERT_PUBLIC_KEY_INFO { 1232 CRYPT_ALGORITHM_IDENTIFIER Algorithm; 1233 CRYPT_BIT_BLOB PublicKey; 1234 } CERT_PUBLIC_KEY_INFO,*PCERT_PUBLIC_KEY_INFO; 1235 #endif 1236 1237 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP) 1238 #define CERT_RSA_PUBLIC_KEY_OBJID szOID_RSA_RSA 1239 #define CERT_DEFAULT_OID_PUBLIC_KEY_SIGN szOID_RSA_RSA 1240 #define CERT_DEFAULT_OID_PUBLIC_KEY_XCHG szOID_RSA_RSA 1241 1242 typedef struct _CRYPT_ECC_PRIVATE_KEY_INFO { 1243 DWORD dwVersion; 1244 CRYPT_DER_BLOB PrivateKey; 1245 LPSTR szCurveOid; 1246 CRYPT_BIT_BLOB PublicKey; 1247 } CRYPT_ECC_PRIVATE_KEY_INFO,*PCRYPT_ECC_PRIVATE_KEY_INFO; 1248 1249 #define CRYPT_ECC_PRIVATE_KEY_INFO_v1 1 1250 1251 typedef struct _CRYPT_PRIVATE_KEY_INFO { 1252 DWORD Version; 1253 CRYPT_ALGORITHM_IDENTIFIER Algorithm; 1254 CRYPT_DER_BLOB PrivateKey; 1255 PCRYPT_ATTRIBUTES pAttributes; 1256 } CRYPT_PRIVATE_KEY_INFO,*PCRYPT_PRIVATE_KEY_INFO; 1257 1258 typedef struct _CRYPT_ENCRYPTED_PRIVATE_KEY_INFO { 1259 CRYPT_ALGORITHM_IDENTIFIER EncryptionAlgorithm; 1260 CRYPT_DATA_BLOB EncryptedPrivateKey; 1261 } CRYPT_ENCRYPTED_PRIVATE_KEY_INFO,*PCRYPT_ENCRYPTED_PRIVATE_KEY_INFO; 1262 1263 typedef WINBOOL (CALLBACK *PCRYPT_DECRYPT_PRIVATE_KEY_FUNC) (CRYPT_ALGORITHM_IDENTIFIER Algorithm, CRYPT_DATA_BLOB EncryptedPrivateKey, BYTE *pbClearTextKey, DWORD *pcbClearTextKey, LPVOID pVoidDecryptFunc); 1264 typedef WINBOOL (CALLBACK *PCRYPT_ENCRYPT_PRIVATE_KEY_FUNC) (CRYPT_ALGORITHM_IDENTIFIER *pAlgorithm, CRYPT_DATA_BLOB *pClearTextPrivateKey, BYTE *pbEncryptedKey, DWORD *pcbEncryptedKey, LPVOID pVoidEncryptFunc); 1265 typedef WINBOOL (CALLBACK *PCRYPT_RESOLVE_HCRYPTPROV_FUNC) (CRYPT_PRIVATE_KEY_INFO *pPrivateKeyInfo, HCRYPTPROV *phCryptProv, LPVOID pVoidResolveFunc); 1266 1267 typedef struct _CRYPT_PKCS8_IMPORT_PARAMS { 1268 CRYPT_DIGEST_BLOB PrivateKey; 1269 PCRYPT_RESOLVE_HCRYPTPROV_FUNC pResolvehCryptProvFunc; 1270 LPVOID pVoidResolveFunc; 1271 PCRYPT_DECRYPT_PRIVATE_KEY_FUNC pDecryptPrivateKeyFunc; 1272 LPVOID pVoidDecryptFunc; 1273 } CRYPT_PKCS8_IMPORT_PARAMS,*PCRYPT_PKCS8_IMPORT_PARAMS, CRYPT_PRIVATE_KEY_BLOB_AND_PARAMS,*PCRYPT_PRIVATE_KEY_BLOB_AND_PARAMS; 1274 1275 typedef struct _CRYPT_PKCS8_EXPORT_PARAMS { 1276 HCRYPTPROV hCryptProv; 1277 DWORD dwKeySpec; 1278 LPSTR pszPrivateKeyObjId; 1279 PCRYPT_ENCRYPT_PRIVATE_KEY_FUNC pEncryptPrivateKeyFunc; 1280 LPVOID pVoidEncryptFunc; 1281 } CRYPT_PKCS8_EXPORT_PARAMS,*PCRYPT_PKCS8_EXPORT_PARAMS; 1282 #endif 1283 1284 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_APP) 1285 typedef struct _CERT_INFO { 1286 DWORD dwVersion; 1287 CRYPT_INTEGER_BLOB SerialNumber; 1288 CRYPT_ALGORITHM_IDENTIFIER SignatureAlgorithm; 1289 CERT_NAME_BLOB Issuer; 1290 FILETIME NotBefore; 1291 FILETIME NotAfter; 1292 CERT_NAME_BLOB Subject; 1293 CERT_PUBLIC_KEY_INFO SubjectPublicKeyInfo; 1294 CRYPT_BIT_BLOB IssuerUniqueId; 1295 CRYPT_BIT_BLOB SubjectUniqueId; 1296 DWORD cExtension; 1297 PCERT_EXTENSION rgExtension; 1298 } CERT_INFO,*PCERT_INFO; 1299 #endif 1300 1301 #define CERT_V1 0 1302 #define CERT_V2 1 1303 #define CERT_V3 2 1304 1305 #define CERT_INFO_VERSION_FLAG 1 1306 #define CERT_INFO_SERIAL_NUMBER_FLAG 2 1307 #define CERT_INFO_SIGNATURE_ALGORITHM_FLAG 3 1308 #define CERT_INFO_ISSUER_FLAG 4 1309 #define CERT_INFO_NOT_BEFORE_FLAG 5 1310 #define CERT_INFO_NOT_AFTER_FLAG 6 1311 #define CERT_INFO_SUBJECT_FLAG 7 1312 #define CERT_INFO_SUBJECT_PUBLIC_KEY_INFO_FLAG 8 1313 #define CERT_INFO_ISSUER_UNIQUE_ID_FLAG 9 1314 #define CERT_INFO_SUBJECT_UNIQUE_ID_FLAG 10 1315 #define CERT_INFO_EXTENSION_FLAG 11 1316 1317 typedef struct _CRL_ENTRY { 1318 CRYPT_INTEGER_BLOB SerialNumber; 1319 FILETIME RevocationDate; 1320 DWORD cExtension; 1321 PCERT_EXTENSION rgExtension; 1322 } CRL_ENTRY,*PCRL_ENTRY; 1323 1324 typedef struct _CRL_INFO { 1325 DWORD dwVersion; 1326 CRYPT_ALGORITHM_IDENTIFIER SignatureAlgorithm; 1327 CERT_NAME_BLOB Issuer; 1328 FILETIME ThisUpdate; 1329 FILETIME NextUpdate; 1330 DWORD cCRLEntry; 1331 PCRL_ENTRY rgCRLEntry; 1332 DWORD cExtension; 1333 PCERT_EXTENSION rgExtension; 1334 } CRL_INFO,*PCRL_INFO; 1335 1336 #define CRL_V1 0 1337 #define CRL_V2 1 1338 1339 #define CERT_BUNDLE_CERTIFICATE 0 1340 #define CERT_BUNDLE_CRL 1 1341 1342 typedef struct _CERT_OR_CRL_BLOB { 1343 DWORD dwChoice; 1344 DWORD cbEncoded; 1345 BYTE *pbEncoded; 1346 } CERT_OR_CRL_BLOB,*PCERT_OR_CRL_BLOB; 1347 1348 typedef struct _CERT_OR_CRL_BUNDLE { 1349 DWORD cItem; 1350 PCERT_OR_CRL_BLOB rgItem; 1351 } CERT_OR_CRL_BUNDLE,*PCERT_OR_CRL_BUNDLE; 1352 1353 typedef struct _CERT_REQUEST_INFO { 1354 DWORD dwVersion; 1355 CERT_NAME_BLOB Subject; 1356 CERT_PUBLIC_KEY_INFO SubjectPublicKeyInfo; 1357 DWORD cAttribute; 1358 PCRYPT_ATTRIBUTE rgAttribute; 1359 } CERT_REQUEST_INFO,*PCERT_REQUEST_INFO; 1360 1361 #define CERT_REQUEST_V1 0 1362 1363 typedef struct _CERT_KEYGEN_REQUEST_INFO { 1364 DWORD dwVersion; 1365 CERT_PUBLIC_KEY_INFO SubjectPublicKeyInfo; 1366 LPWSTR pwszChallengeString; 1367 } CERT_KEYGEN_REQUEST_INFO,*PCERT_KEYGEN_REQUEST_INFO; 1368 1369 #define CERT_KEYGEN_REQUEST_V1 0 1370 1371 typedef struct _CERT_SIGNED_CONTENT_INFO { 1372 CRYPT_DER_BLOB ToBeSigned; 1373 CRYPT_ALGORITHM_IDENTIFIER SignatureAlgorithm; 1374 CRYPT_BIT_BLOB Signature; 1375 } CERT_SIGNED_CONTENT_INFO,*PCERT_SIGNED_CONTENT_INFO; 1376 1377 typedef struct _CTL_USAGE { 1378 DWORD cUsageIdentifier; 1379 LPSTR *rgpszUsageIdentifier; 1380 } CTL_USAGE,*PCTL_USAGE,CERT_ENHKEY_USAGE,*PCERT_ENHKEY_USAGE; 1381 1382 typedef const CTL_USAGE *PCCTL_USAGE; 1383 typedef const CERT_ENHKEY_USAGE *PCCERT_ENHKEY_USAGE; 1384 1385 typedef struct _CTL_ENTRY { 1386 CRYPT_DATA_BLOB SubjectIdentifier; 1387 DWORD cAttribute; 1388 PCRYPT_ATTRIBUTE rgAttribute; 1389 } CTL_ENTRY,*PCTL_ENTRY; 1390 1391 typedef struct _CTL_INFO { 1392 DWORD dwVersion; 1393 CTL_USAGE SubjectUsage; 1394 CRYPT_DATA_BLOB ListIdentifier; 1395 CRYPT_INTEGER_BLOB SequenceNumber; 1396 FILETIME ThisUpdate; 1397 FILETIME NextUpdate; 1398 CRYPT_ALGORITHM_IDENTIFIER SubjectAlgorithm; 1399 DWORD cCTLEntry; 1400 PCTL_ENTRY rgCTLEntry; 1401 DWORD cExtension; 1402 PCERT_EXTENSION rgExtension; 1403 } CTL_INFO,*PCTL_INFO; 1404 1405 #define CTL_V1 0 1406 1407 typedef struct _CRYPT_TIME_STAMP_REQUEST_INFO { 1408 LPSTR pszTimeStampAlgorithm; 1409 LPSTR pszContentType; 1410 CRYPT_OBJID_BLOB Content; 1411 DWORD cAttribute; 1412 PCRYPT_ATTRIBUTE rgAttribute; 1413 } CRYPT_TIME_STAMP_REQUEST_INFO,*PCRYPT_TIME_STAMP_REQUEST_INFO; 1414 1415 typedef struct _CRYPT_ENROLLMENT_NAME_VALUE_PAIR { 1416 LPWSTR pwszName; 1417 LPWSTR pwszValue; 1418 } CRYPT_ENROLLMENT_NAME_VALUE_PAIR,*PCRYPT_ENROLLMENT_NAME_VALUE_PAIR; 1419 1420 typedef struct _CRYPT_CSP_PROVIDER { 1421 DWORD dwKeySpec; 1422 LPWSTR pwszProviderName; 1423 CRYPT_BIT_BLOB Signature; 1424 } CRYPT_CSP_PROVIDER,*PCRYPT_CSP_PROVIDER; 1425 1426 #define CERT_ENCODING_TYPE_MASK 0x0000ffff 1427 #define CMSG_ENCODING_TYPE_MASK 0xffff0000 1428 #define GET_CERT_ENCODING_TYPE(T) (T & CERT_ENCODING_TYPE_MASK) 1429 #define GET_CMSG_ENCODING_TYPE(T) (T & CMSG_ENCODING_TYPE_MASK) 1430 1431 #define CRYPT_ASN_ENCODING 0x1 1432 #define CRYPT_NDR_ENCODING 0x2 1433 #define X509_ASN_ENCODING 0x1 1434 #define X509_NDR_ENCODING 0x2 1435 #define PKCS_7_ASN_ENCODING 0x10000 1436 #define PKCS_7_NDR_ENCODING 0x20000 1437 1438 WINIMPM WINBOOL WINAPI CryptFormatObject (DWORD dwCertEncodingType, DWORD dwFormatType, DWORD dwFormatStrType, void *pFormatStruct, LPCSTR lpszStructType, const BYTE *pbEncoded, DWORD cbEncoded, void *pbFormat, DWORD *pcbFormat); 1439 1440 #define CRYPT_FORMAT_STR_MULTI_LINE 0x1 1441 #define CRYPT_FORMAT_STR_NO_HEX 0x10 1442 1443 #define CRYPT_FORMAT_SIMPLE 0x1 1444 #define CRYPT_FORMAT_X509 0x2 1445 #define CRYPT_FORMAT_OID 0x4 1446 #define CRYPT_FORMAT_RDN_SEMICOLON 0x100 1447 #define CRYPT_FORMAT_RDN_CRLF 0x200 1448 #define CRYPT_FORMAT_RDN_UNQUOTE 0x400 1449 #define CRYPT_FORMAT_RDN_REVERSE 0x800 1450 #define CRYPT_FORMAT_COMMA 0x1000 1451 #define CRYPT_FORMAT_SEMICOLON CRYPT_FORMAT_RDN_SEMICOLON 1452 #define CRYPT_FORMAT_CRLF CRYPT_FORMAT_RDN_CRLF 1453 1454 typedef LPVOID (WINAPI *PFN_CRYPT_ALLOC)(size_t cbSize); 1455 typedef VOID (WINAPI *PFN_CRYPT_FREE)(LPVOID pv); 1456 1457 typedef struct _CRYPT_ENCODE_PARA { 1458 DWORD cbSize; 1459 PFN_CRYPT_ALLOC pfnAlloc; 1460 PFN_CRYPT_FREE pfnFree; 1461 } CRYPT_ENCODE_PARA,*PCRYPT_ENCODE_PARA; 1462 1463 WINIMPM WINBOOL WINAPI CryptEncodeObjectEx (DWORD dwCertEncodingType, LPCSTR lpszStructType, const void *pvStructInfo, DWORD dwFlags, PCRYPT_ENCODE_PARA pEncodePara, void *pvEncoded, DWORD *pcbEncoded); 1464 WINIMPM WINBOOL WINAPI CryptEncodeObject (DWORD dwCertEncodingType, LPCSTR lpszStructType, const void *pvStructInfo, BYTE *pbEncoded, DWORD *pcbEncoded); 1465 1466 #define CRYPT_ENCODE_NO_SIGNATURE_BYTE_REVERSAL_FLAG 0x8 1467 #define CRYPT_ENCODE_ALLOC_FLAG 0x8000 1468 #define CRYPT_UNICODE_NAME_ENCODE_ENABLE_T61_UNICODE_FLAG CERT_RDN_ENABLE_T61_UNICODE_FLAG 1469 #define CRYPT_UNICODE_NAME_ENCODE_ENABLE_UTF8_UNICODE_FLAG CERT_RDN_ENABLE_UTF8_UNICODE_FLAG 1470 #define CRYPT_UNICODE_NAME_ENCODE_FORCE_UTF8_UNICODE_FLAG CERT_RDN_FORCE_UTF8_UNICODE_FLAG 1471 #define CRYPT_UNICODE_NAME_ENCODE_DISABLE_CHECK_TYPE_FLAG CERT_RDN_DISABLE_CHECK_TYPE_FLAG 1472 #define CRYPT_SORTED_CTL_ENCODE_HASHED_SUBJECT_IDENTIFIER_FLAG 0x10000 1473 #define CRYPT_ENCODE_ENABLE_PUNYCODE_FLAG 0x20000 1474 #define CRYPT_ENCODE_ENABLE_UTF8PERCENT_FLAG 0x40000 1475 #define CRYPT_ENCODE_ENABLE_IA5CONVERSION_FLAG (CRYPT_ENCODE_ENABLE_PUNYCODE_FLAG | CRYPT_ENCODE_ENABLE_UTF8PERCENT_FLAG) 1476 1477 typedef struct _CRYPT_DECODE_PARA { 1478 DWORD cbSize; 1479 PFN_CRYPT_ALLOC pfnAlloc; 1480 PFN_CRYPT_FREE pfnFree; 1481 } CRYPT_DECODE_PARA,*PCRYPT_DECODE_PARA; 1482 1483 WINIMPM WINBOOL WINAPI CryptDecodeObjectEx (DWORD dwCertEncodingType, LPCSTR lpszStructType, const BYTE *pbEncoded, DWORD cbEncoded, DWORD dwFlags, PCRYPT_DECODE_PARA pDecodePara, void *pvStructInfo, DWORD *pcbStructInfo); 1484 WINIMPM WINBOOL WINAPI CryptDecodeObject (DWORD dwCertEncodingType, LPCSTR lpszStructType, const BYTE *pbEncoded, DWORD cbEncoded, DWORD dwFlags, void *pvStructInfo, DWORD *pcbStructInfo); 1485 1486 #define CRYPT_DECODE_NOCOPY_FLAG 0x1 1487 #define CRYPT_DECODE_TO_BE_SIGNED_FLAG 0x2 1488 #define CRYPT_DECODE_SHARE_OID_STRING_FLAG 0x4 1489 #define CRYPT_DECODE_NO_SIGNATURE_BYTE_REVERSAL_FLAG 0x8 1490 #define CRYPT_DECODE_ALLOC_FLAG 0x8000 1491 #define CRYPT_UNICODE_NAME_DECODE_DISABLE_IE4_UTF8_FLAG CERT_RDN_DISABLE_IE4_UTF8_FLAG 1492 #define CRYPT_DECODE_ENABLE_PUNYCODE_FLAG 0x2000000 1493 #define CRYPT_DECODE_ENABLE_UTF8PERCENT_FLAG 0x4000000 1494 #define CRYPT_DECODE_ENABLE_IA5CONVERSION_FLAG (CRYPT_DECODE_ENABLE_PUNYCODE_FLAG | CRYPT_DECODE_ENABLE_UTF8PERCENT_FLAG) 1495 1496 #define CRYPT_ENCODE_DECODE_NONE 0 1497 #define X509_CERT ((LPCSTR) 1) 1498 #define X509_CERT_TO_BE_SIGNED ((LPCSTR) 2) 1499 #define X509_CERT_CRL_TO_BE_SIGNED ((LPCSTR) 3) 1500 #define X509_CERT_REQUEST_TO_BE_SIGNED ((LPCSTR) 4) 1501 #define X509_EXTENSIONS ((LPCSTR) 5) 1502 #define X509_NAME_VALUE ((LPCSTR) 6) 1503 #define X509_NAME ((LPCSTR) 7) 1504 #define X509_PUBLIC_KEY_INFO ((LPCSTR) 8) 1505 #define X509_AUTHORITY_KEY_ID ((LPCSTR) 9) 1506 #define X509_KEY_ATTRIBUTES ((LPCSTR) 10) 1507 #define X509_KEY_USAGE_RESTRICTION ((LPCSTR) 11) 1508 #define X509_ALTERNATE_NAME ((LPCSTR) 12) 1509 #define X509_BASIC_CONSTRAINTS ((LPCSTR) 13) 1510 #define X509_KEY_USAGE ((LPCSTR) 14) 1511 #define X509_BASIC_CONSTRAINTS2 ((LPCSTR) 15) 1512 #define X509_CERT_POLICIES ((LPCSTR) 16) 1513 #define PKCS_UTC_TIME ((LPCSTR) 17) 1514 #define PKCS_TIME_REQUEST ((LPCSTR) 18) 1515 #define RSA_CSP_PUBLICKEYBLOB ((LPCSTR) 19) 1516 #define X509_UNICODE_NAME ((LPCSTR) 20) 1517 #define X509_KEYGEN_REQUEST_TO_BE_SIGNED ((LPCSTR) 21) 1518 #define PKCS_ATTRIBUTE ((LPCSTR) 22) 1519 #define PKCS_CONTENT_INFO_SEQUENCE_OF_ANY ((LPCSTR) 23) 1520 #define X509_UNICODE_NAME_VALUE ((LPCSTR) 24) 1521 #define X509_ANY_STRING X509_NAME_VALUE 1522 #define X509_UNICODE_ANY_STRING X509_UNICODE_NAME_VALUE 1523 #define X509_OCTET_STRING ((LPCSTR) 25) 1524 #define X509_BITS ((LPCSTR) 26) 1525 #define X509_INTEGER ((LPCSTR) 27) 1526 #define X509_MULTI_BYTE_INTEGER ((LPCSTR) 28) 1527 #define X509_ENUMERATED ((LPCSTR) 29) 1528 #define X509_CHOICE_OF_TIME ((LPCSTR) 30) 1529 #define X509_AUTHORITY_KEY_ID2 ((LPCSTR) 31) 1530 #define X509_AUTHORITY_INFO_ACCESS ((LPCSTR) 32) 1531 #define X509_SUBJECT_INFO_ACCESS X509_AUTHORITY_INFO_ACCESS 1532 #define X509_CRL_REASON_CODE X509_ENUMERATED 1533 #define PKCS_CONTENT_INFO ((LPCSTR) 33) 1534 #define X509_SEQUENCE_OF_ANY ((LPCSTR) 34) 1535 #define X509_CRL_DIST_POINTS ((LPCSTR) 35) 1536 #define X509_ENHANCED_KEY_USAGE ((LPCSTR) 36) 1537 #define PKCS_CTL ((LPCSTR) 37) 1538 #define X509_MULTI_BYTE_UINT ((LPCSTR) 38) 1539 #define X509_DSS_PUBLICKEY X509_MULTI_BYTE_UINT 1540 #define X509_DSS_PARAMETERS ((LPCSTR) 39) 1541 #define X509_DSS_SIGNATURE ((LPCSTR) 40) 1542 #define PKCS_RC2_CBC_PARAMETERS ((LPCSTR) 41) 1543 #define PKCS_SMIME_CAPABILITIES ((LPCSTR) 42) 1544 #define X509_QC_STATEMENTS_EXT ((LPCSTR) 42) 1545 #define PKCS_RSA_PRIVATE_KEY ((LPCSTR) 43) 1546 #define PKCS_PRIVATE_KEY_INFO ((LPCSTR) 44) 1547 #define PKCS_ENCRYPTED_PRIVATE_KEY_INFO ((LPCSTR) 45) 1548 #define X509_PKIX_POLICY_QUALIFIER_USERNOTICE ((LPCSTR) 46) 1549 #define X509_DH_PUBLICKEY X509_MULTI_BYTE_UINT 1550 #define X509_DH_PARAMETERS ((LPCSTR) 47) 1551 #define X509_ECC_SIGNATURE ((LPCSTR) 47) 1552 #define PKCS_ATTRIBUTES ((LPCSTR) 48) 1553 #define PKCS_SORTED_CTL ((LPCSTR) 49) 1554 #define X942_DH_PARAMETERS ((LPCSTR) 50) 1555 #define X509_BITS_WITHOUT_TRAILING_ZEROES ((LPCSTR) 51) 1556 #define X942_OTHER_INFO ((LPCSTR) 52) 1557 #define X509_CERT_PAIR ((LPCSTR) 53) 1558 #define X509_ISSUING_DIST_POINT ((LPCSTR) 54) 1559 #define X509_NAME_CONSTRAINTS ((LPCSTR) 55) 1560 #define X509_POLICY_MAPPINGS ((LPCSTR) 56) 1561 #define X509_POLICY_CONSTRAINTS ((LPCSTR) 57) 1562 #define X509_CROSS_CERT_DIST_POINTS ((LPCSTR) 58) 1563 #define CMC_DATA ((LPCSTR) 59) 1564 #define CMC_RESPONSE ((LPCSTR) 60) 1565 #define CMC_STATUS ((LPCSTR) 61) 1566 #define CMC_ADD_EXTENSIONS ((LPCSTR) 62) 1567 #define CMC_ADD_ATTRIBUTES ((LPCSTR) 63) 1568 #define X509_CERTIFICATE_TEMPLATE ((LPCSTR) 64) 1569 #define OCSP_SIGNED_REQUEST ((LPCSTR) 65) 1570 #define OCSP_REQUEST ((LPCSTR) 66) 1571 #define OCSP_RESPONSE ((LPCSTR) 67) 1572 #define OCSP_BASIC_SIGNED_RESPONSE ((LPCSTR) 68) 1573 #define OCSP_BASIC_RESPONSE ((LPCSTR) 69) 1574 #define X509_LOGOTYPE_EXT ((LPCSTR) 70) 1575 #define X509_BIOMETRIC_EXT ((LPCSTR) 71) 1576 #define CNG_RSA_PUBLIC_KEY_BLOB ((LPCSTR) 72) 1577 #define X509_OBJECT_IDENTIFIER ((LPCSTR) 73) 1578 #define X509_ALGORITHM_IDENTIFIER ((LPCSTR) 74) 1579 #define PKCS_RSA_SSA_PSS_PARAMETERS ((LPCSTR) 75) 1580 #define PKCS_RSAES_OAEP_PARAMETERS ((LPCSTR) 76) 1581 #define ECC_CMS_SHARED_INFO ((LPCSTR) 77) 1582 #define TIMESTAMP_REQUEST ((LPCSTR) 78) 1583 #define TIMESTAMP_RESPONSE ((LPCSTR) 79) 1584 #define TIMESTAMP_INFO ((LPCSTR) 80) 1585 #define X509_CERT_BUNDLE ((LPCSTR) 81) 1586 #define X509_ECC_PRIVATE_KEY ((LPCSTR) 82) 1587 #define CNG_RSA_PRIVATE_KEY_BLOB ((LPCSTR) 83) 1588 #define X509_SUBJECT_DIR_ATTRS ((LPCSTR) 84) 1589 #define X509_ECC_PARAMETERS ((LPCSTR) 85) 1590 1591 #define PKCS7_SIGNER_INFO ((LPCSTR) 500) 1592 #define CMS_SIGNER_INFO ((LPCSTR) 501) 1593 1594 #define szOID_AUTHORITY_KEY_IDENTIFIER "2.5.29.1" 1595 #define szOID_KEY_ATTRIBUTES "2.5.29.2" 1596 #define szOID_CERT_POLICIES_95 "2.5.29.3" 1597 #define szOID_KEY_USAGE_RESTRICTION "2.5.29.4" 1598 #define szOID_SUBJECT_ALT_NAME "2.5.29.7" 1599 #define szOID_ISSUER_ALT_NAME "2.5.29.8" 1600 #define szOID_BASIC_CONSTRAINTS "2.5.29.10" 1601 /* szOID_KEY_USAGE is defined incorrectly in msdn as 2.5.29.4 -- 1602 http://www.oid-info.com/get/2.5.29.15 RFC3280 */ 1603 #define szOID_KEY_USAGE "2.5.29.15" 1604 #define szOID_PRIVATEKEY_USAGE_PERIOD "2.5.29.16" 1605 #define szOID_BASIC_CONSTRAINTS2 "2.5.29.19" 1606 1607 #define szOID_CERT_POLICIES "2.5.29.32" 1608 #define szOID_ANY_CERT_POLICY "2.5.29.32.0" 1609 #define szOID_INHIBIT_ANY_POLICY "2.5.29.54" 1610 1611 #define szOID_AUTHORITY_KEY_IDENTIFIER2 "2.5.29.35" 1612 #define szOID_SUBJECT_KEY_IDENTIFIER "2.5.29.14" 1613 #define szOID_SUBJECT_ALT_NAME2 "2.5.29.17" 1614 #define szOID_ISSUER_ALT_NAME2 "2.5.29.18" 1615 #define szOID_CRL_REASON_CODE "2.5.29.21" 1616 #define szOID_REASON_CODE_HOLD "2.5.29.23" 1617 #define szOID_CRL_DIST_POINTS "2.5.29.31" 1618 #define szOID_ENHANCED_KEY_USAGE "2.5.29.37" 1619 1620 #define szOID_ANY_ENHANCED_KEY_USAGE "2.5.29.37.0" 1621 1622 #define szOID_CRL_NUMBER "2.5.29.20" 1623 1624 #define szOID_DELTA_CRL_INDICATOR "2.5.29.27" 1625 #define szOID_ISSUING_DIST_POINT "2.5.29.28" 1626 1627 #define szOID_FRESHEST_CRL "2.5.29.46" 1628 #define szOID_NAME_CONSTRAINTS "2.5.29.30" 1629 1630 #define szOID_POLICY_MAPPINGS "2.5.29.33" 1631 #define szOID_LEGACY_POLICY_MAPPINGS "2.5.29.5" 1632 #define szOID_POLICY_CONSTRAINTS "2.5.29.36" 1633 1634 #define szOID_RENEWAL_CERTIFICATE "1.3.6.1.4.1.311.13.1" 1635 #define szOID_ENROLLMENT_NAME_VALUE_PAIR "1.3.6.1.4.1.311.13.2.1" 1636 #define szOID_ENROLLMENT_CSP_PROVIDER "1.3.6.1.4.1.311.13.2.2" 1637 #define szOID_OS_VERSION "1.3.6.1.4.1.311.13.2.3" 1638 1639 #define szOID_ENROLLMENT_AGENT "1.3.6.1.4.1.311.20.2.1" 1640 1641 #define szOID_PKIX "1.3.6.1.5.5.7" 1642 #define szOID_PKIX_PE "1.3.6.1.5.5.7.1" 1643 #define szOID_AUTHORITY_INFO_ACCESS "1.3.6.1.5.5.7.1.1" 1644 #define szOID_SUBJECT_INFO_ACCESS "1.3.6.1.5.5.7.1.11" 1645 #define szOID_BIOMETRIC_EXT "1.3.6.1.5.5.7.1.2" 1646 #define szOID_QC_STATEMENTS_EXT "1.3.6.1.5.5.7.1.3" 1647 #define szOID_LOGOTYPE_EXT "1.3.6.1.5.5.7.1.12" 1648 #define szOID_TLS_FEATURES_EXT "1.3.6.1.5.5.7.1.24" 1649 1650 #define szOID_CERT_EXTENSIONS "1.3.6.1.4.1.311.2.1.14" 1651 #define szOID_NEXT_UPDATE_LOCATION "1.3.6.1.4.1.311.10.2" 1652 #define szOID_REMOVE_CERTIFICATE "1.3.6.1.4.1.311.10.8.1" 1653 #define szOID_CROSS_CERT_DIST_POINTS "1.3.6.1.4.1.311.10.9.1" 1654 1655 #define szOID_CTL "1.3.6.1.4.1.311.10.1" 1656 1657 #define szOID_SORTED_CTL "1.3.6.1.4.1.311.10.1.1" 1658 1659 #ifndef szOID_SERIALIZED 1660 #define szOID_SERIALIZED "1.3.6.1.4.1.311.10.3.3.1" 1661 #endif 1662 1663 #ifndef szOID_NT_PRINCIPAL_NAME 1664 #define szOID_NT_PRINCIPAL_NAME "1.3.6.1.4.1.311.20.2.3" 1665 #endif 1666 1667 #ifndef szOID_INTERNATIONALIZED_EMAIL_ADDRESS 1668 #define szOID_INTERNATIONALIZED_EMAIL_ADDRESS "1.3.6.1.4.1.311.20.2.4" 1669 #endif 1670 1671 #ifndef szOID_PRODUCT_UPDATE 1672 #define szOID_PRODUCT_UPDATE "1.3.6.1.4.1.311.31.1" 1673 #endif 1674 1675 #define szOID_ANY_APPLICATION_POLICY "1.3.6.1.4.1.311.10.12.1" 1676 1677 #define szOID_AUTO_ENROLL_CTL_USAGE "1.3.6.1.4.1.311.20.1" 1678 1679 #define szOID_ENROLL_CERTTYPE_EXTENSION "1.3.6.1.4.1.311.20.2" 1680 1681 #define szOID_CERT_MANIFOLD "1.3.6.1.4.1.311.20.3" 1682 1683 #ifndef szOID_CERTSRV_CA_VERSION 1684 #define szOID_CERTSRV_CA_VERSION "1.3.6.1.4.1.311.21.1" 1685 #endif 1686 #define szOID_CERTSRV_PREVIOUS_CERT_HASH "1.3.6.1.4.1.311.21.2" 1687 #define szOID_CRL_VIRTUAL_BASE "1.3.6.1.4.1.311.21.3" 1688 #define szOID_CRL_NEXT_PUBLISH "1.3.6.1.4.1.311.21.4" 1689 #define szOID_KP_CA_EXCHANGE "1.3.6.1.4.1.311.21.5" 1690 #define szOID_KP_KEY_RECOVERY_AGENT "1.3.6.1.4.1.311.21.6" 1691 #define szOID_CERTIFICATE_TEMPLATE "1.3.6.1.4.1.311.21.7" 1692 #define szOID_ENTERPRISE_OID_ROOT "1.3.6.1.4.1.311.21.8" 1693 #define szOID_RDN_DUMMY_SIGNER "1.3.6.1.4.1.311.21.9" 1694 #define szOID_APPLICATION_CERT_POLICIES "1.3.6.1.4.1.311.21.10" 1695 #define szOID_APPLICATION_POLICY_MAPPINGS "1.3.6.1.4.1.311.21.11" 1696 #define szOID_APPLICATION_POLICY_CONSTRAINTS "1.3.6.1.4.1.311.21.12" 1697 #define szOID_ARCHIVED_KEY_ATTR "1.3.6.1.4.1.311.21.13" 1698 #define szOID_CRL_SELF_CDP "1.3.6.1.4.1.311.21.14" 1699 #define szOID_REQUIRE_CERT_CHAIN_POLICY "1.3.6.1.4.1.311.21.15" 1700 #define szOID_ARCHIVED_KEY_CERT_HASH "1.3.6.1.4.1.311.21.16" 1701 #define szOID_ISSUED_CERT_HASH "1.3.6.1.4.1.311.21.17" 1702 #define szOID_DS_EMAIL_REPLICATION "1.3.6.1.4.1.311.21.19" 1703 #define szOID_REQUEST_CLIENT_INFO "1.3.6.1.4.1.311.21.20" 1704 #define szOID_ENCRYPTED_KEY_HASH "1.3.6.1.4.1.311.21.21" 1705 #define szOID_CERTSRV_CROSSCA_VERSION "1.3.6.1.4.1.311.21.22" 1706 1707 #define szOID_NTDS_REPLICATION "1.3.6.1.4.1.311.25.1" 1708 1709 #define szOID_SUBJECT_DIR_ATTRS "2.5.29.9" 1710 1711 #define szOID_PKIX_KP "1.3.6.1.5.5.7.3" 1712 1713 #define szOID_PKIX_KP_SERVER_AUTH "1.3.6.1.5.5.7.3.1" 1714 #define szOID_PKIX_KP_CLIENT_AUTH "1.3.6.1.5.5.7.3.2" 1715 #define szOID_PKIX_KP_CODE_SIGNING "1.3.6.1.5.5.7.3.3" 1716 #define szOID_PKIX_KP_EMAIL_PROTECTION "1.3.6.1.5.5.7.3.4" 1717 #define szOID_PKIX_KP_IPSEC_END_SYSTEM "1.3.6.1.5.5.7.3.5" 1718 #define szOID_PKIX_KP_IPSEC_TUNNEL "1.3.6.1.5.5.7.3.6" 1719 #define szOID_PKIX_KP_IPSEC_USER "1.3.6.1.5.5.7.3.7" 1720 #define szOID_PKIX_KP_TIMESTAMP_SIGNING "1.3.6.1.5.5.7.3.8" 1721 #define szOID_PKIX_KP_OCSP_SIGNING "1.3.6.1.5.5.7.3.9" 1722 1723 #define szOID_PKIX_OCSP_NONCE "1.3.6.1.5.5.7.48.1.2" 1724 #define szOID_PKIX_OCSP_NOCHECK "1.3.6.1.5.5.7.48.1.5" 1725 1726 #define szOID_IPSEC_KP_IKE_INTERMEDIATE "1.3.6.1.5.5.8.2.2" 1727 1728 #define szOID_PKINIT_KP_KDC "1.3.6.1.5.2.3.5" 1729 1730 #define szOID_KP_CTL_USAGE_SIGNING "1.3.6.1.4.1.311.10.3.1" 1731 1732 #define szOID_KP_TIME_STAMP_SIGNING "1.3.6.1.4.1.311.10.3.2" 1733 1734 #ifndef szOID_SERVER_GATED_CRYPTO 1735 #define szOID_SERVER_GATED_CRYPTO "1.3.6.1.4.1.311.10.3.3" 1736 #endif 1737 1738 #ifndef szOID_SGC_NETSCAPE 1739 #define szOID_SGC_NETSCAPE "2.16.840.1.113730.4.1" 1740 #endif 1741 1742 #define szOID_KP_EFS "1.3.6.1.4.1.311.10.3.4" 1743 #define szOID_EFS_RECOVERY "1.3.6.1.4.1.311.10.3.4.1" 1744 1745 #define szOID_WHQL_CRYPTO "1.3.6.1.4.1.311.10.3.5" 1746 #define szOID_ATTEST_WHQL_CRYPTO "1.3.6.1.4.1.311.10.3.5.1" 1747 #define szOID_NT5_CRYPTO "1.3.6.1.4.1.311.10.3.6" 1748 #define szOID_OEM_WHQL_CRYPTO "1.3.6.1.4.1.311.10.3.7" 1749 #define szOID_EMBEDDED_NT_CRYPTO "1.3.6.1.4.1.311.10.3.8" 1750 #define szOID_ROOT_LIST_SIGNER "1.3.6.1.4.1.311.10.3.9" 1751 #define szOID_KP_QUALIFIED_SUBORDINATION "1.3.6.1.4.1.311.10.3.10" 1752 #define szOID_KP_KEY_RECOVERY "1.3.6.1.4.1.311.10.3.11" 1753 #define szOID_KP_DOCUMENT_SIGNING "1.3.6.1.4.1.311.10.3.12" 1754 #define szOID_KP_LIFETIME_SIGNING "1.3.6.1.4.1.311.10.3.13" 1755 #define szOID_KP_MOBILE_DEVICE_SOFTWARE "1.3.6.1.4.1.311.10.3.14" 1756 #define szOID_KP_SMART_DISPLAY "1.3.6.1.4.1.311.10.3.15" 1757 #define szOID_KP_CSP_SIGNATURE "1.3.6.1.4.1.311.10.3.16" 1758 #define szOID_KP_FLIGHT_SIGNING "1.3.6.1.4.1.311.10.3.27" 1759 #define szOID_PLATFORM_MANIFEST_BINARY_ID "1.3.6.1.4.1.311.10.3.28" 1760 1761 #ifndef szOID_DRM 1762 #define szOID_DRM "1.3.6.1.4.1.311.10.5.1" 1763 #endif 1764 1765 #ifndef szOID_DRM_INDIVIDUALIZATION 1766 #define szOID_DRM_INDIVIDUALIZATION "1.3.6.1.4.1.311.10.5.2" 1767 #endif 1768 1769 #ifndef szOID_LICENSES 1770 #define szOID_LICENSES "1.3.6.1.4.1.311.10.6.1" 1771 #endif 1772 1773 #ifndef szOID_LICENSE_SERVER 1774 #define szOID_LICENSE_SERVER "1.3.6.1.4.1.311.10.6.2" 1775 #endif 1776 1777 #ifndef szOID_KP_SMARTCARD_LOGON 1778 #define szOID_KP_SMARTCARD_LOGON "1.3.6.1.4.1.311.20.2.2" 1779 #endif 1780 1781 #define szOID_KP_KERNEL_MODE_CODE_SIGNING "1.3.6.1.4.1.311.61.1.1" 1782 #define szOID_KP_KERNEL_MODE_TRUSTED_BOOT_SIGNING "1.3.6.1.4.1.311.61.4.1" 1783 #define szOID_REVOKED_LIST_SIGNER "1.3.6.1.4.1.311.10.3.19" 1784 #define szOID_WINDOWS_KITS_SIGNER "1.3.6.1.4.1.311.10.3.20" 1785 #define szOID_WINDOWS_RT_SIGNER "1.3.6.1.4.1.311.10.3.21" 1786 #define szOID_PROTECTED_PROCESS_LIGHT_SIGNER "1.3.6.1.4.1.311.10.3.22" 1787 #define szOID_WINDOWS_TCB_SIGNER "1.3.6.1.4.1.311.10.3.23" 1788 #define szOID_PROTECTED_PROCESS_SIGNER "1.3.6.1.4.1.311.10.3.24" 1789 #define szOID_WINDOWS_THIRD_PARTY_COMPONENT_SIGNER "1.3.6.1.4.1.311.10.3.25" 1790 #define szOID_WINDOWS_SOFTWARE_EXTENSION_SIGNER "1.3.6.1.4.1.311.10.3.26" 1791 #define szOID_DISALLOWED_LIST "1.3.6.1.4.1.311.10.3.30" 1792 #define szOID_PIN_RULES_SIGNER "1.3.6.1.4.1.311.10.3.31" 1793 #define szOID_PIN_RULES_CTL "1.3.6.1.4.1.311.10.3.32" 1794 #define szOID_PIN_RULES_EXT "1.3.6.1.4.1.311.10.3.33" 1795 #define szOID_PIN_RULES_DOMAIN_NAME "1.3.6.1.4.1.311.10.3.34" 1796 #define szOID_PIN_RULES_LOG_END_DATE_EXT "1.3.6.1.4.1.311.10.3.35" 1797 #define szOID_IUM_SIGNING "1.3.6.1.4.1.311.10.3.37" 1798 #define szOID_EV_WHQL_CRYPTO "1.3.6.1.4.1.311.10.3.39" 1799 #define szOID_BIOMETRIC_SIGNING "1.3.6.1.4.1.311.10.3.41" 1800 #define szOID_ENCLAVE_SIGNING "1.3.6.1.4.1.311.10.3.42" 1801 #define szOID_SYNC_ROOT_CTL_EXT "1.3.6.1.4.1.311.10.3.50" 1802 #define szOID_HPKP_DOMAIN_NAME_CTL "1.3.6.1.4.1.311.10.3.60" 1803 #define szOID_HPKP_HEADER_VALUE_CTL "1.3.6.1.4.1.311.10.3.61" 1804 #define szOID_KP_KERNEL_MODE_HAL_EXTENSION_SIGNING "1.3.6.1.4.1.311.61.5.1" 1805 #define szOID_WINDOWS_STORE_SIGNER "1.3.6.1.4.1.311.76.3.1" 1806 #define szOID_DYNAMIC_CODE_GEN_SIGNER "1.3.6.1.4.1.311.76.5.1" 1807 #define szOID_MICROSOFT_PUBLISHER_SIGNER "1.3.6.1.4.1.311.76.8.1" 1808 #define szOID_YESNO_TRUST_ATTR "1.3.6.1.4.1.311.10.4.1" 1809 #define szOID_SITE_PIN_RULES_INDEX_ATTR "1.3.6.1.4.1.311.10.4.2" 1810 #define szOID_SITE_PIN_RULES_FLAGS_ATTR "1.3.6.1.4.1.311.10.4.3" 1811 1812 #define SITE_PIN_RULES_ALL_SUBDOMAINS_FLAG 0x1 1813 1814 #define szOID_PKIX_POLICY_QUALIFIER_CPS "1.3.6.1.5.5.7.2.1" 1815 #define szOID_PKIX_POLICY_QUALIFIER_USERNOTICE "1.3.6.1.5.5.7.2.2" 1816 1817 #define szOID_ROOT_PROGRAM_FLAGS "1.3.6.1.4.1.311.60.1.1" 1818 #define CERT_ROOT_PROGRAM_FLAG_ORG 0x80 1819 #define CERT_ROOT_PROGRAM_FLAG_LSC 0x40 1820 #define CERT_ROOT_PROGRAM_FLAG_SUBJECT_LOGO 0x20 1821 #define CERT_ROOT_PROGRAM_FLAG_OU 0x10 1822 #define CERT_ROOT_PROGRAM_FLAG_ADDRESS 0x08 1823 1824 #define szOID_CERT_POLICIES_95_QUALIFIER1 "2.16.840.1.113733.1.7.1.1" 1825 1826 #define szOID_RDN_TPM_MANUFACTURER "2.23.133.2.1" 1827 #define szOID_RDN_TPM_MODEL "2.23.133.2.2" 1828 #define szOID_RDN_TPM_VERSION "2.23.133.2.3" 1829 1830 #define szOID_RDN_TCG_PLATFORM_MANUFACTURER "2.23.133.2.4" 1831 #define szOID_RDN_TCG_PLATFORM_MODEL "2.23.133.2.5" 1832 #define szOID_RDN_TCG_PLATFORM_VERSION "2.23.133.2.6" 1833 1834 #define szOID_CT_CERT_SCTLIST "1.3.6.1.4.1.11129.2.4.2" 1835 1836 #define szOID_ENROLL_EK_INFO "1.3.6.1.4.1.311.21.23" 1837 #define szOID_ENROLL_AIK_INFO "1.3.6.1.4.1.311.21.39" 1838 #define szOID_ENROLL_ATTESTATION_STATEMENT "1.3.6.1.4.1.311.21.24" 1839 1840 #define szOID_ENROLL_KSP_NAME "1.3.6.1.4.1.311.21.25" 1841 1842 #define szOID_ENROLL_EKPUB_CHALLENGE "1.3.6.1.4.1.311.21.26" 1843 #define szOID_ENROLL_CAXCHGCERT_HASH "1.3.6.1.4.1.311.21.27" 1844 #define szOID_ENROLL_ATTESTATION_CHALLENGE "1.3.6.1.4.1.311.21.28" 1845 #define szOID_ENROLL_ENCRYPTION_ALGORITHM "1.3.6.1.4.1.311.21.29" 1846 1847 #define szOID_KP_TPM_EK_CERTIFICATE "2.23.133.8.1" 1848 #define szOID_KP_TPM_PLATFORM_CERTIFICATE "2.23.133.8.2" 1849 #define szOID_KP_TPM_AIK_CERTIFICATE "2.23.133.8.3" 1850 1851 #define szOID_ENROLL_EKVERIFYKEY "1.3.6.1.4.1.311.21.30" 1852 #define szOID_ENROLL_EKVERIFYCERT "1.3.6.1.4.1.311.21.31" 1853 #define szOID_ENROLL_EKVERIFYCREDS "1.3.6.1.4.1.311.21.32" 1854 1855 #define szOID_ENROLL_SCEP_ERROR "1.3.6.1.4.1.311.21.33" 1856 1857 #define szOID_ENROLL_SCEP_SERVER_STATE "1.3.6.1.4.1.311.21.34" 1858 #define szOID_ENROLL_SCEP_CHALLENGE_ANSWER "1.3.6.1.4.1.311.21.35" 1859 #define szOID_ENROLL_SCEP_CLIENT_REQUEST "1.3.6.1.4.1.311.21.37" 1860 #define szOID_ENROLL_SCEP_SERVER_MESSAGE "1.3.6.1.4.1.311.21.38" 1861 #define szOID_ENROLL_SCEP_SERVER_SECRET "1.3.6.1.4.1.311.21.40" 1862 1863 #define szOID_ENROLL_KEY_AFFINITY "1.3.6.1.4.1.311.21.41" 1864 1865 #define szOID_ENROLL_SCEP_SIGNER_HASH "1.3.6.1.4.1.311.21.42" 1866 1867 #define szOID_ENROLL_EK_CA_KEYID "1.3.6.1.4.1.311.21.43" 1868 1869 #define szOID_ATTR_SUPPORTED_ALGORITHMS "2.5.4.52" 1870 #define szOID_ATTR_TPM_SPECIFICATION "2.23.133.2.16" 1871 #define szOID_ATTR_PLATFORM_SPECIFICATION "2.23.133.2.17" 1872 #define szOID_ATTR_TPM_SECURITY_ASSERTIONS "2.23.133.2.18" 1873 1874 typedef struct _CERT_EXTENSIONS { 1875 DWORD cExtension; 1876 PCERT_EXTENSION rgExtension; 1877 } CERT_EXTENSIONS,*PCERT_EXTENSIONS; 1878 1879 #define CERT_UNICODE_RDN_ERR_INDEX_MASK 0x3ff 1880 #define CERT_UNICODE_RDN_ERR_INDEX_SHIFT 22 1881 #define CERT_UNICODE_ATTR_ERR_INDEX_MASK 0x3f 1882 #define CERT_UNICODE_ATTR_ERR_INDEX_SHIFT 16 1883 #define CERT_UNICODE_VALUE_ERR_INDEX_MASK 0xffff 1884 #define CERT_UNICODE_VALUE_ERR_INDEX_SHIFT 0 1885 1886 #define GET_CERT_UNICODE_RDN_ERR_INDEX(X) ((X >> CERT_UNICODE_RDN_ERR_INDEX_SHIFT) &CERT_UNICODE_RDN_ERR_INDEX_MASK) 1887 #define GET_CERT_UNICODE_ATTR_ERR_INDEX(X) ((X >> CERT_UNICODE_ATTR_ERR_INDEX_SHIFT) &CERT_UNICODE_ATTR_ERR_INDEX_MASK) 1888 #define GET_CERT_UNICODE_VALUE_ERR_INDEX(X) (X &CERT_UNICODE_VALUE_ERR_INDEX_MASK) 1889 1890 typedef struct _CERT_AUTHORITY_KEY_ID_INFO { 1891 CRYPT_DATA_BLOB KeyId; 1892 CERT_NAME_BLOB CertIssuer; 1893 CRYPT_INTEGER_BLOB CertSerialNumber; 1894 } CERT_AUTHORITY_KEY_ID_INFO,*PCERT_AUTHORITY_KEY_ID_INFO; 1895 1896 typedef struct _CERT_PRIVATE_KEY_VALIDITY { 1897 FILETIME NotBefore; 1898 FILETIME NotAfter; 1899 } CERT_PRIVATE_KEY_VALIDITY,*PCERT_PRIVATE_KEY_VALIDITY; 1900 1901 typedef struct _CERT_KEY_ATTRIBUTES_INFO { 1902 CRYPT_DATA_BLOB KeyId; 1903 CRYPT_BIT_BLOB IntendedKeyUsage; 1904 PCERT_PRIVATE_KEY_VALIDITY pPrivateKeyUsagePeriod; 1905 } CERT_KEY_ATTRIBUTES_INFO,*PCERT_KEY_ATTRIBUTES_INFO; 1906 1907 #define CERT_ENCIPHER_ONLY_KEY_USAGE 0x01 1908 #define CERT_CRL_SIGN_KEY_USAGE 0x02 1909 #define CERT_OFFLINE_CRL_SIGN_KEY_USAGE 0x02 1910 #define CERT_KEY_CERT_SIGN_KEY_USAGE 0x04 1911 #define CERT_KEY_AGREEMENT_KEY_USAGE 0x08 1912 #define CERT_DATA_ENCIPHERMENT_KEY_USAGE 0x10 1913 #define CERT_KEY_ENCIPHERMENT_KEY_USAGE 0x20 1914 #define CERT_NON_REPUDIATION_KEY_USAGE 0x40 1915 #define CERT_DIGITAL_SIGNATURE_KEY_USAGE 0x80 1916 1917 #define CERT_DECIPHER_ONLY_KEY_USAGE 0x80 1918 1919 typedef struct _CERT_POLICY_ID { 1920 DWORD cCertPolicyElementId; 1921 LPSTR *rgpszCertPolicyElementId; 1922 } CERT_POLICY_ID,*PCERT_POLICY_ID; 1923 1924 typedef struct _CERT_KEY_USAGE_RESTRICTION_INFO { 1925 DWORD cCertPolicyId; 1926 PCERT_POLICY_ID rgCertPolicyId; 1927 CRYPT_BIT_BLOB RestrictedKeyUsage; 1928 } CERT_KEY_USAGE_RESTRICTION_INFO,*PCERT_KEY_USAGE_RESTRICTION_INFO; 1929 1930 typedef struct _CERT_OTHER_NAME { 1931 LPSTR pszObjId; 1932 CRYPT_OBJID_BLOB Value; 1933 } CERT_OTHER_NAME,*PCERT_OTHER_NAME; 1934 1935 typedef struct _CERT_ALT_NAME_ENTRY { 1936 DWORD dwAltNameChoice; 1937 __C89_NAMELESS union { 1938 PCERT_OTHER_NAME pOtherName; 1939 LPWSTR pwszRfc822Name; 1940 LPWSTR pwszDNSName; 1941 /* CERT_DATA_BLOB is not documented, and x400Address is documented 1942 * to be not implemented; commented out to prevent compile errors 1943 * see http://msdn.microsoft.com/en-us/library/aa377173.aspx for 1944 * CERT_ALT_NAME_ENTRY documentation where this is specified. 1945 CERT_DATA_BLOB x400Address; 1946 */ 1947 CERT_NAME_BLOB DirectoryName; 1948 /* pEdiPartyName is not implemented, either. see: 1949 * http://msdn.microsoft.com/en-us/library/aa924681.aspx or 1950 * http://msdn.microsoft.com/en-us/library/aa377173.aspx 1951 LPWSTR pEdiPartyName; 1952 */ 1953 LPWSTR pwszURL; 1954 CRYPT_DATA_BLOB IPAddress; 1955 LPSTR pszRegisteredID; 1956 }; 1957 } CERT_ALT_NAME_ENTRY,*PCERT_ALT_NAME_ENTRY; 1958 1959 #define CERT_ALT_NAME_OTHER_NAME 1 1960 #define CERT_ALT_NAME_RFC822_NAME 2 1961 #define CERT_ALT_NAME_DNS_NAME 3 1962 #define CERT_ALT_NAME_X400_ADDRESS 4 1963 #define CERT_ALT_NAME_DIRECTORY_NAME 5 1964 #define CERT_ALT_NAME_EDI_PARTY_NAME 6 1965 #define CERT_ALT_NAME_URL 7 1966 #define CERT_ALT_NAME_IP_ADDRESS 8 1967 #define CERT_ALT_NAME_REGISTERED_ID 9 1968 1969 typedef struct _CERT_ALT_NAME_INFO { 1970 DWORD cAltEntry; 1971 PCERT_ALT_NAME_ENTRY rgAltEntry; 1972 } CERT_ALT_NAME_INFO,*PCERT_ALT_NAME_INFO; 1973 #define CERT_ALT_NAME_ENTRY_ERR_INDEX_MASK 0xff 1974 #define CERT_ALT_NAME_ENTRY_ERR_INDEX_SHIFT 16 1975 #define CERT_ALT_NAME_VALUE_ERR_INDEX_MASK 0x0000ffff 1976 #define CERT_ALT_NAME_VALUE_ERR_INDEX_SHIFT 0 1977 1978 #define GET_CERT_ALT_NAME_ENTRY_ERR_INDEX(X) ((X >> CERT_ALT_NAME_ENTRY_ERR_INDEX_SHIFT) &CERT_ALT_NAME_ENTRY_ERR_INDEX_MASK) 1979 #define GET_CERT_ALT_NAME_VALUE_ERR_INDEX(X) (X &CERT_ALT_NAME_VALUE_ERR_INDEX_MASK) 1980 1981 typedef struct _CERT_BASIC_CONSTRAINTS_INFO { 1982 CRYPT_BIT_BLOB SubjectType; 1983 WINBOOL fPathLenConstraint; 1984 DWORD dwPathLenConstraint; 1985 DWORD cSubtreesConstraint; 1986 CERT_NAME_BLOB *rgSubtreesConstraint; 1987 } CERT_BASIC_CONSTRAINTS_INFO, *PCERT_BASIC_CONSTRAINTS_INFO; 1988 1989 #define CERT_CA_SUBJECT_FLAG 0x80 1990 #define CERT_END_ENTITY_SUBJECT_FLAG 0x40 1991 1992 typedef struct _CERT_BASIC_CONSTRAINTS2_INFO { 1993 WINBOOL fCA; 1994 WINBOOL fPathLenConstraint; 1995 DWORD dwPathLenConstraint; 1996 } CERT_BASIC_CONSTRAINTS2_INFO,*PCERT_BASIC_CONSTRAINTS2_INFO; 1997 1998 typedef struct _CERT_POLICY_QUALIFIER_INFO { 1999 LPSTR pszPolicyQualifierId; 2000 CRYPT_OBJID_BLOB Qualifier; 2001 } CERT_POLICY_QUALIFIER_INFO,*PCERT_POLICY_QUALIFIER_INFO; 2002 2003 typedef struct _CERT_POLICY_INFO { 2004 LPSTR pszPolicyIdentifier; 2005 DWORD cPolicyQualifier; 2006 CERT_POLICY_QUALIFIER_INFO *rgPolicyQualifier; 2007 } CERT_POLICY_INFO,*PCERT_POLICY_INFO; 2008 2009 typedef struct _CERT_POLICIES_INFO { 2010 DWORD cPolicyInfo; 2011 CERT_POLICY_INFO *rgPolicyInfo; 2012 } CERT_POLICIES_INFO,*PCERT_POLICIES_INFO; 2013 2014 typedef struct _CERT_POLICY_QUALIFIER_NOTICE_REFERENCE { 2015 LPSTR pszOrganization; 2016 DWORD cNoticeNumbers; 2017 int *rgNoticeNumbers; 2018 } CERT_POLICY_QUALIFIER_NOTICE_REFERENCE,*PCERT_POLICY_QUALIFIER_NOTICE_REFERENCE; 2019 2020 typedef struct _CERT_POLICY_QUALIFIER_USER_NOTICE { 2021 CERT_POLICY_QUALIFIER_NOTICE_REFERENCE *pNoticeReference; 2022 LPWSTR pszDisplayText; 2023 } CERT_POLICY_QUALIFIER_USER_NOTICE,*PCERT_POLICY_QUALIFIER_USER_NOTICE; 2024 2025 typedef struct _CPS_URLS { 2026 LPWSTR pszURL; 2027 CRYPT_ALGORITHM_IDENTIFIER *pAlgorithm; 2028 CRYPT_DATA_BLOB *pDigest; 2029 } CPS_URLS,*PCPS_URLS; 2030 2031 typedef struct _CERT_POLICY95_QUALIFIER1 { 2032 LPWSTR pszPracticesReference; 2033 LPSTR pszNoticeIdentifier; 2034 LPSTR pszNSINoticeIdentifier; 2035 DWORD cCPSURLs; 2036 CPS_URLS *rgCPSURLs; 2037 } CERT_POLICY95_QUALIFIER1,*PCERT_POLICY95_QUALIFIER1; 2038 2039 typedef struct _CERT_POLICY_MAPPING { 2040 LPSTR pszIssuerDomainPolicy; 2041 LPSTR pszSubjectDomainPolicy; 2042 } CERT_POLICY_MAPPING,*PCERT_POLICY_MAPPING; 2043 2044 typedef struct _CERT_POLICY_MAPPINGS_INFO { 2045 DWORD cPolicyMapping; 2046 PCERT_POLICY_MAPPING rgPolicyMapping; 2047 } CERT_POLICY_MAPPINGS_INFO,*PCERT_POLICY_MAPPINGS_INFO; 2048 2049 typedef struct _CERT_POLICY_CONSTRAINTS_INFO { 2050 WINBOOL fRequireExplicitPolicy; 2051 DWORD dwRequireExplicitPolicySkipCerts; 2052 WINBOOL fInhibitPolicyMapping; 2053 DWORD dwInhibitPolicyMappingSkipCerts; 2054 } CERT_POLICY_CONSTRAINTS_INFO,*PCERT_POLICY_CONSTRAINTS_INFO; 2055 2056 typedef struct _CRYPT_CONTENT_INFO_SEQUENCE_OF_ANY { 2057 LPSTR pszObjId; 2058 DWORD cValue; 2059 PCRYPT_DER_BLOB rgValue; 2060 } CRYPT_CONTENT_INFO_SEQUENCE_OF_ANY,*PCRYPT_CONTENT_INFO_SEQUENCE_OF_ANY; 2061 2062 typedef struct _CRYPT_CONTENT_INFO { 2063 LPSTR pszObjId; 2064 CRYPT_DER_BLOB Content; 2065 } CRYPT_CONTENT_INFO,*PCRYPT_CONTENT_INFO; 2066 2067 typedef struct _CRYPT_SEQUENCE_OF_ANY { 2068 DWORD cValue; 2069 PCRYPT_DER_BLOB rgValue; 2070 } CRYPT_SEQUENCE_OF_ANY,*PCRYPT_SEQUENCE_OF_ANY; 2071 2072 typedef struct _CERT_AUTHORITY_KEY_ID2_INFO { 2073 CRYPT_DATA_BLOB KeyId; 2074 CERT_ALT_NAME_INFO AuthorityCertIssuer; 2075 CRYPT_INTEGER_BLOB AuthorityCertSerialNumber; 2076 } CERT_AUTHORITY_KEY_ID2_INFO,*PCERT_AUTHORITY_KEY_ID2_INFO; 2077 2078 typedef struct _CERT_ACCESS_DESCRIPTION { 2079 LPSTR pszAccessMethod; 2080 CERT_ALT_NAME_ENTRY AccessLocation; 2081 } CERT_ACCESS_DESCRIPTION,*PCERT_ACCESS_DESCRIPTION; 2082 2083 typedef struct _CERT_AUTHORITY_INFO_ACCESS { 2084 DWORD cAccDescr; 2085 PCERT_ACCESS_DESCRIPTION rgAccDescr; 2086 } CERT_AUTHORITY_INFO_ACCESS,*PCERT_AUTHORITY_INFO_ACCESS; 2087 2088 typedef CERT_AUTHORITY_INFO_ACCESS CERT_SUBJECT_INFO_ACCESS,*PCERT_SUBJECT_INFO_ACCESS; 2089 2090 #define szOID_PKIX_ACC_DESCR "1.3.6.1.5.5.7.48" 2091 #define szOID_PKIX_OCSP "1.3.6.1.5.5.7.48.1" 2092 #define szOID_PKIX_CA_ISSUERS "1.3.6.1.5.5.7.48.2" 2093 #define szOID_PKIX_TIME_STAMPING "1.3.6.1.5.5.7.48.3" 2094 #define szOID_PKIX_CA_REPOSITORY "1.3.6.1.5.5.7.48.5" 2095 2096 #define CRL_REASON_UNSPECIFIED 0 2097 #define CRL_REASON_KEY_COMPROMISE 1 2098 #define CRL_REASON_CA_COMPROMISE 2 2099 #define CRL_REASON_AFFILIATION_CHANGED 3 2100 #define CRL_REASON_SUPERSEDED 4 2101 #define CRL_REASON_CESSATION_OF_OPERATION 5 2102 #define CRL_REASON_CERTIFICATE_HOLD 6 2103 #define CRL_REASON_REMOVE_FROM_CRL 8 2104 #define CRL_REASON_PRIVILEGE_WITHDRAWN 9 2105 #define CRL_REASON_AA_COMPROMISE 10 2106 2107 typedef struct _CRL_DIST_POINT_NAME { 2108 DWORD dwDistPointNameChoice; 2109 __C89_NAMELESS union { 2110 CERT_ALT_NAME_INFO FullName; 2111 }; 2112 } CRL_DIST_POINT_NAME,*PCRL_DIST_POINT_NAME; 2113 2114 #define CRL_DIST_POINT_NO_NAME 0 2115 #define CRL_DIST_POINT_FULL_NAME 1 2116 #define CRL_DIST_POINT_ISSUER_RDN_NAME 2 2117 2118 typedef struct _CRL_DIST_POINT { 2119 CRL_DIST_POINT_NAME DistPointName; 2120 CRYPT_BIT_BLOB ReasonFlags; 2121 CERT_ALT_NAME_INFO CRLIssuer; 2122 } CRL_DIST_POINT,*PCRL_DIST_POINT; 2123 2124 #define CRL_REASON_UNUSED_FLAG 0x80 2125 #define CRL_REASON_KEY_COMPROMISE_FLAG 0x40 2126 #define CRL_REASON_CA_COMPROMISE_FLAG 0x20 2127 #define CRL_REASON_AFFILIATION_CHANGED_FLAG 0x10 2128 #define CRL_REASON_SUPERSEDED_FLAG 0x08 2129 #define CRL_REASON_CESSATION_OF_OPERATION_FLAG 0x04 2130 #define CRL_REASON_CERTIFICATE_HOLD_FLAG 0x02 2131 #define CRL_REASON_PRIVILEGE_WITHDRAWN_FLAG 0x01 2132 #define CRL_REASON_AA_COMPROMISE_FLAG 0x80 2133 2134 typedef struct _CRL_DIST_POINTS_INFO { 2135 DWORD cDistPoint; 2136 PCRL_DIST_POINT rgDistPoint; 2137 } CRL_DIST_POINTS_INFO,*PCRL_DIST_POINTS_INFO; 2138 2139 #define CRL_DIST_POINT_ERR_INDEX_MASK 0x7f 2140 #define CRL_DIST_POINT_ERR_INDEX_SHIFT 24 2141 #define GET_CRL_DIST_POINT_ERR_INDEX(X) ((X >> CRL_DIST_POINT_ERR_INDEX_SHIFT) &CRL_DIST_POINT_ERR_INDEX_MASK) 2142 2143 #define CRL_DIST_POINT_ERR_CRL_ISSUER_BIT __MSABI_LONG(0x80000000) 2144 #define IS_CRL_DIST_POINT_ERR_CRL_ISSUER(X) (0 != (X & CRL_DIST_POINT_ERR_CRL_ISSUER_BIT)) 2145 2146 typedef struct _CROSS_CERT_DIST_POINTS_INFO { 2147 DWORD dwSyncDeltaTime; 2148 DWORD cDistPoint; 2149 PCERT_ALT_NAME_INFO rgDistPoint; 2150 } CROSS_CERT_DIST_POINTS_INFO,*PCROSS_CERT_DIST_POINTS_INFO; 2151 2152 #define CROSS_CERT_DIST_POINT_ERR_INDEX_MASK 0xff 2153 #define CROSS_CERT_DIST_POINT_ERR_INDEX_SHIFT 24 2154 #define GET_CROSS_CERT_DIST_POINT_ERR_INDEX(X) ((X >> CROSS_CERT_DIST_POINT_ERR_INDEX_SHIFT) &CROSS_CERT_DIST_POINT_ERR_INDEX_MASK) 2155 2156 typedef struct _CERT_PAIR { 2157 CERT_BLOB Forward; 2158 CERT_BLOB Reverse; 2159 } CERT_PAIR,*PCERT_PAIR; 2160 2161 typedef struct _CRL_ISSUING_DIST_POINT { 2162 CRL_DIST_POINT_NAME DistPointName; 2163 WINBOOL fOnlyContainsUserCerts; 2164 WINBOOL fOnlyContainsCACerts; 2165 CRYPT_BIT_BLOB OnlySomeReasonFlags; 2166 WINBOOL fIndirectCRL; 2167 } CRL_ISSUING_DIST_POINT,*PCRL_ISSUING_DIST_POINT; 2168 2169 typedef struct _CERT_GENERAL_SUBTREE { 2170 CERT_ALT_NAME_ENTRY Base; 2171 DWORD dwMinimum; 2172 WINBOOL fMaximum; 2173 DWORD dwMaximum; 2174 } CERT_GENERAL_SUBTREE,*PCERT_GENERAL_SUBTREE; 2175 2176 typedef struct _CERT_NAME_CONSTRAINTS_INFO { 2177 DWORD cPermittedSubtree; 2178 PCERT_GENERAL_SUBTREE rgPermittedSubtree; 2179 DWORD cExcludedSubtree; 2180 PCERT_GENERAL_SUBTREE rgExcludedSubtree; 2181 } CERT_NAME_CONSTRAINTS_INFO,*PCERT_NAME_CONSTRAINTS_INFO; 2182 2183 #define CERT_EXCLUDED_SUBTREE_BIT __MSABI_LONG(0x80000000) 2184 #define IS_CERT_EXCLUDED_SUBTREE(X) (0!=(X & CERT_EXCLUDED_SUBTREE_BIT)) 2185 2186 #define SORTED_CTL_EXT_FLAGS_OFFSET (0) 2187 #define SORTED_CTL_EXT_COUNT_OFFSET (4) 2188 #define SORTED_CTL_EXT_MAX_COLLISION_OFFSET (8) 2189 #define SORTED_CTL_EXT_HASH_BUCKET_OFFSET (12) 2190 2191 #define SORTED_CTL_EXT_HASHED_SUBJECT_IDENTIFIER_FLAG 0x1 2192 2193 typedef struct _CERT_DSS_PARAMETERS { 2194 CRYPT_UINT_BLOB p; 2195 CRYPT_UINT_BLOB q; 2196 CRYPT_UINT_BLOB g; 2197 } CERT_DSS_PARAMETERS,*PCERT_DSS_PARAMETERS; 2198 2199 #define CERT_DSS_R_LEN 20 2200 #define CERT_DSS_S_LEN 20 2201 #define CERT_DSS_SIGNATURE_LEN (CERT_DSS_R_LEN + CERT_DSS_S_LEN) 2202 2203 #define CERT_MAX_ASN_ENCODED_DSS_SIGNATURE_LEN (48) 2204 2205 typedef struct _CERT_DH_PARAMETERS { 2206 CRYPT_UINT_BLOB p; 2207 CRYPT_UINT_BLOB g; 2208 } CERT_DH_PARAMETERS,*PCERT_DH_PARAMETERS; 2209 2210 typedef struct _CERT_ECC_SIGNATURE { 2211 CRYPT_UINT_BLOB r; 2212 CRYPT_UINT_BLOB s; 2213 } CERT_ECC_SIGNATURE,*PCERT_ECC_SIGNATURE; 2214 2215 typedef struct _CERT_X942_DH_VALIDATION_PARAMS { 2216 CRYPT_BIT_BLOB seed; 2217 DWORD pgenCounter; 2218 } CERT_X942_DH_VALIDATION_PARAMS,*PCERT_X942_DH_VALIDATION_PARAMS; 2219 2220 typedef struct _CERT_X942_DH_PARAMETERS { 2221 CRYPT_UINT_BLOB p; 2222 CRYPT_UINT_BLOB g; 2223 CRYPT_UINT_BLOB q; 2224 CRYPT_UINT_BLOB j; 2225 PCERT_X942_DH_VALIDATION_PARAMS pValidationParams; 2226 } CERT_X942_DH_PARAMETERS,*PCERT_X942_DH_PARAMETERS; 2227 2228 #define CRYPT_X942_COUNTER_BYTE_LENGTH 4 2229 #define CRYPT_X942_KEY_LENGTH_BYTE_LENGTH 4 2230 #define CRYPT_X942_PUB_INFO_BYTE_LENGTH (512/8) 2231 2232 typedef struct _CRYPT_X942_OTHER_INFO { 2233 LPSTR pszContentEncryptionObjId; 2234 BYTE rgbCounter[CRYPT_X942_COUNTER_BYTE_LENGTH]; 2235 BYTE rgbKeyLength[CRYPT_X942_KEY_LENGTH_BYTE_LENGTH]; 2236 CRYPT_DATA_BLOB PubInfo; 2237 } CRYPT_X942_OTHER_INFO,*PCRYPT_X942_OTHER_INFO; 2238 2239 #define CRYPT_ECC_CMS_SHARED_INFO_SUPPPUBINFO_BYTE_LENGTH 4 2240 2241 typedef struct _CRYPT_ECC_CMS_SHARED_INFO { 2242 CRYPT_ALGORITHM_IDENTIFIER Algorithm; 2243 CRYPT_DATA_BLOB EntityUInfo; 2244 BYTE rgbSuppPubInfo[CRYPT_ECC_CMS_SHARED_INFO_SUPPPUBINFO_BYTE_LENGTH]; 2245 } CRYPT_ECC_CMS_SHARED_INFO,*PCRYPT_ECC_CMS_SHARED_INFO; 2246 2247 typedef struct _CRYPT_RC2_CBC_PARAMETERS { 2248 DWORD dwVersion; 2249 WINBOOL fIV; 2250 BYTE rgbIV[8]; 2251 } CRYPT_RC2_CBC_PARAMETERS,*PCRYPT_RC2_CBC_PARAMETERS; 2252 2253 #define CRYPT_RC2_40BIT_VERSION 160 2254 #define CRYPT_RC2_56BIT_VERSION 52 2255 #define CRYPT_RC2_64BIT_VERSION 120 2256 #define CRYPT_RC2_128BIT_VERSION 58 2257 2258 typedef struct _CRYPT_SMIME_CAPABILITY { 2259 LPSTR pszObjId; 2260 CRYPT_OBJID_BLOB Parameters; 2261 } CRYPT_SMIME_CAPABILITY,*PCRYPT_SMIME_CAPABILITY; 2262 2263 typedef struct _CRYPT_SMIME_CAPABILITIES { 2264 DWORD cCapability; 2265 PCRYPT_SMIME_CAPABILITY rgCapability; 2266 } CRYPT_SMIME_CAPABILITIES,*PCRYPT_SMIME_CAPABILITIES; 2267 2268 typedef struct _CERT_QC_STATEMENT { 2269 LPSTR pszStatementId; 2270 CRYPT_OBJID_BLOB StatementInfo; 2271 } CERT_QC_STATEMENT,*PCERT_QC_STATEMENT; 2272 2273 typedef struct _CERT_QC_STATEMENTS_EXT_INFO { 2274 DWORD cStatement; 2275 PCERT_QC_STATEMENT rgStatement; 2276 } CERT_QC_STATEMENTS_EXT_INFO,*PCERT_QC_STATEMENTS_EXT_INFO; 2277 2278 #define szOID_QC_EU_COMPLIANCE "0.4.0.1862.1.1" 2279 #define szOID_QC_SSCD "0.4.0.1862.1.4" 2280 2281 typedef struct _CRYPT_MASK_GEN_ALGORITHM { 2282 LPSTR pszObjId; 2283 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 2284 } CRYPT_MASK_GEN_ALGORITHM,*PCRYPT_MASK_GEN_ALGORITHM; 2285 2286 typedef struct _CRYPT_RSA_SSA_PSS_PARAMETERS { 2287 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 2288 CRYPT_MASK_GEN_ALGORITHM MaskGenAlgorithm; 2289 DWORD dwSaltLength; 2290 DWORD dwTrailerField; 2291 } CRYPT_RSA_SSA_PSS_PARAMETERS,*PCRYPT_RSA_SSA_PSS_PARAMETERS; 2292 2293 #define PKCS_RSA_SSA_PSS_TRAILER_FIELD_BC 1 2294 2295 typedef struct _CRYPT_PSOURCE_ALGORITHM { 2296 LPSTR pszObjId; 2297 CRYPT_DATA_BLOB EncodingParameters; 2298 } CRYPT_PSOURCE_ALGORITHM,*PCRYPT_PSOURCE_ALGORITHM; 2299 2300 typedef struct _CRYPT_RSAES_OAEP_PARAMETERS { 2301 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 2302 CRYPT_MASK_GEN_ALGORITHM MaskGenAlgorithm; 2303 CRYPT_PSOURCE_ALGORITHM PSourceAlgorithm; 2304 } CRYPT_RSAES_OAEP_PARAMETERS,*PCRYPT_RSAES_OAEP_PARAMETERS; 2305 2306 #define szOID_VERISIGN_PRIVATE_6_9 "2.16.840.1.113733.1.6.9" 2307 #define szOID_VERISIGN_ONSITE_JURISDICTION_HASH "2.16.840.1.113733.1.6.11" 2308 #define szOID_VERISIGN_BITSTRING_6_13 "2.16.840.1.113733.1.6.13" 2309 2310 #define szOID_VERISIGN_ISS_STRONG_CRYPTO "2.16.840.1.113733.1.8.1" 2311 2312 #define szOIDVerisign_MessageType "2.16.840.1.113733.1.9.2" 2313 #define szOIDVerisign_PkiStatus "2.16.840.1.113733.1.9.3" 2314 #define szOIDVerisign_FailInfo "2.16.840.1.113733.1.9.4" 2315 2316 #define szOIDVerisign_SenderNonce "2.16.840.1.113733.1.9.5" 2317 #define szOIDVerisign_RecipientNonce "2.16.840.1.113733.1.9.6" 2318 2319 #define szOIDVerisign_TransactionID "2.16.840.1.113733.1.9.7" 2320 2321 #define szOID_NETSCAPE "2.16.840.1.113730" 2322 #define szOID_NETSCAPE_CERT_EXTENSION "2.16.840.1.113730.1" 2323 #define szOID_NETSCAPE_CERT_TYPE "2.16.840.1.113730.1.1" 2324 #define szOID_NETSCAPE_BASE_URL "2.16.840.1.113730.1.2" 2325 #define szOID_NETSCAPE_REVOCATION_URL "2.16.840.1.113730.1.3" 2326 #define szOID_NETSCAPE_CA_REVOCATION_URL "2.16.840.1.113730.1.4" 2327 #define szOID_NETSCAPE_CERT_RENEWAL_URL "2.16.840.1.113730.1.7" 2328 #define szOID_NETSCAPE_CA_POLICY_URL "2.16.840.1.113730.1.8" 2329 #define szOID_NETSCAPE_SSL_SERVER_NAME "2.16.840.1.113730.1.12" 2330 #define szOID_NETSCAPE_COMMENT "2.16.840.1.113730.1.13" 2331 2332 #define szOID_NETSCAPE_DATA_TYPE "2.16.840.1.113730.2" 2333 #define szOID_NETSCAPE_CERT_SEQUENCE "2.16.840.1.113730.2.5" 2334 2335 #define NETSCAPE_SIGN_CA_CERT_TYPE 0x01 2336 #define NETSCAPE_SMIME_CA_CERT_TYPE 0x02 2337 #define NETSCAPE_SSL_CA_CERT_TYPE 0x04 2338 #define NETSCAPE_SIGN_CERT_TYPE 0x10 2339 #define NETSCAPE_SMIME_CERT_TYPE 0x20 2340 #define NETSCAPE_SSL_SERVER_AUTH_CERT_TYPE 0x40 2341 #define NETSCAPE_SSL_CLIENT_AUTH_CERT_TYPE 0x80 2342 2343 #define szOID_CT_PKI_DATA "1.3.6.1.5.5.7.12.2" 2344 #define szOID_CT_PKI_RESPONSE "1.3.6.1.5.5.7.12.3" 2345 2346 #define szOID_PKIX_NO_SIGNATURE "1.3.6.1.5.5.7.6.2" 2347 2348 #define szOID_CMC "1.3.6.1.5.5.7.7" 2349 #define szOID_CMC_STATUS_INFO "1.3.6.1.5.5.7.7.1" 2350 #define szOID_CMC_IDENTIFICATION "1.3.6.1.5.5.7.7.2" 2351 #define szOID_CMC_IDENTITY_PROOF "1.3.6.1.5.5.7.7.3" 2352 #define szOID_CMC_DATA_RETURN "1.3.6.1.5.5.7.7.4" 2353 #define szOID_CMC_TRANSACTION_ID "1.3.6.1.5.5.7.7.5" 2354 #define szOID_CMC_SENDER_NONCE "1.3.6.1.5.5.7.7.6" 2355 #define szOID_CMC_RECIPIENT_NONCE "1.3.6.1.5.5.7.7.7" 2356 #define szOID_CMC_ADD_EXTENSIONS "1.3.6.1.5.5.7.7.8" 2357 #define szOID_CMC_ENCRYPTED_POP "1.3.6.1.5.5.7.7.9" 2358 #define szOID_CMC_DECRYPTED_POP "1.3.6.1.5.5.7.7.10" 2359 #define szOID_CMC_LRA_POP_WITNESS "1.3.6.1.5.5.7.7.11" 2360 #define szOID_CMC_GET_CERT "1.3.6.1.5.5.7.7.15" 2361 #define szOID_CMC_GET_CRL "1.3.6.1.5.5.7.7.16" 2362 #define szOID_CMC_REVOKE_REQUEST "1.3.6.1.5.5.7.7.17" 2363 #define szOID_CMC_REG_INFO "1.3.6.1.5.5.7.7.18" 2364 #define szOID_CMC_RESPONSE_INFO "1.3.6.1.5.5.7.7.19" 2365 #define szOID_CMC_QUERY_PENDING "1.3.6.1.5.5.7.7.21" 2366 #define szOID_CMC_ID_POP_LINK_RANDOM "1.3.6.1.5.5.7.7.22" 2367 #define szOID_CMC_ID_POP_LINK_WITNESS "1.3.6.1.5.5.7.7.23" 2368 #define szOID_CMC_ID_CONFIRM_CERT_ACCEPTANCE "1.3.6.1.5.5.7.7.24" 2369 2370 #define szOID_CMC_ADD_ATTRIBUTES "1.3.6.1.4.1.311.10.10.1" 2371 2372 typedef struct _CMC_TAGGED_ATTRIBUTE { 2373 DWORD dwBodyPartID; 2374 CRYPT_ATTRIBUTE Attribute; 2375 } CMC_TAGGED_ATTRIBUTE,*PCMC_TAGGED_ATTRIBUTE; 2376 2377 typedef struct _CMC_TAGGED_CERT_REQUEST { 2378 DWORD dwBodyPartID; 2379 CRYPT_DER_BLOB SignedCertRequest; 2380 } CMC_TAGGED_CERT_REQUEST,*PCMC_TAGGED_CERT_REQUEST; 2381 2382 typedef struct _CMC_TAGGED_REQUEST { 2383 DWORD dwTaggedRequestChoice; 2384 __C89_NAMELESS union { 2385 PCMC_TAGGED_CERT_REQUEST pTaggedCertRequest; 2386 }; 2387 } CMC_TAGGED_REQUEST,*PCMC_TAGGED_REQUEST; 2388 2389 #define CMC_TAGGED_CERT_REQUEST_CHOICE 1 2390 2391 typedef struct _CMC_TAGGED_CONTENT_INFO { 2392 DWORD dwBodyPartID; 2393 CRYPT_DER_BLOB EncodedContentInfo; 2394 } CMC_TAGGED_CONTENT_INFO,*PCMC_TAGGED_CONTENT_INFO; 2395 2396 typedef struct _CMC_TAGGED_OTHER_MSG { 2397 DWORD dwBodyPartID; 2398 LPSTR pszObjId; 2399 CRYPT_OBJID_BLOB Value; 2400 } CMC_TAGGED_OTHER_MSG,*PCMC_TAGGED_OTHER_MSG; 2401 2402 typedef struct _CMC_DATA_INFO { 2403 DWORD cTaggedAttribute; 2404 PCMC_TAGGED_ATTRIBUTE rgTaggedAttribute; 2405 DWORD cTaggedRequest; 2406 PCMC_TAGGED_REQUEST rgTaggedRequest; 2407 DWORD cTaggedContentInfo; 2408 PCMC_TAGGED_CONTENT_INFO rgTaggedContentInfo; 2409 DWORD cTaggedOtherMsg; 2410 PCMC_TAGGED_OTHER_MSG rgTaggedOtherMsg; 2411 } CMC_DATA_INFO,*PCMC_DATA_INFO; 2412 2413 typedef struct _CMC_RESPONSE_INFO { 2414 DWORD cTaggedAttribute; 2415 PCMC_TAGGED_ATTRIBUTE rgTaggedAttribute; 2416 DWORD cTaggedContentInfo; 2417 PCMC_TAGGED_CONTENT_INFO rgTaggedContentInfo; 2418 DWORD cTaggedOtherMsg; 2419 PCMC_TAGGED_OTHER_MSG rgTaggedOtherMsg; 2420 } CMC_RESPONSE_INFO,*PCMC_RESPONSE_INFO; 2421 2422 typedef struct _CMC_PEND_INFO { 2423 CRYPT_DATA_BLOB PendToken; 2424 FILETIME PendTime; 2425 } CMC_PEND_INFO,*PCMC_PEND_INFO; 2426 2427 typedef struct _CMC_STATUS_INFO { 2428 DWORD dwStatus; 2429 DWORD cBodyList; 2430 DWORD *rgdwBodyList; 2431 LPWSTR pwszStatusString; 2432 DWORD dwOtherInfoChoice; 2433 __C89_NAMELESS union { 2434 DWORD dwFailInfo; 2435 PCMC_PEND_INFO pPendInfo; 2436 }; 2437 } CMC_STATUS_INFO,*PCMC_STATUS_INFO; 2438 2439 #define CMC_OTHER_INFO_NO_CHOICE 0 2440 #define CMC_OTHER_INFO_FAIL_CHOICE 1 2441 #define CMC_OTHER_INFO_PEND_CHOICE 2 2442 2443 #define CMC_STATUS_SUCCESS 0 2444 #define CMC_STATUS_FAILED 2 2445 #define CMC_STATUS_PENDING 3 2446 #define CMC_STATUS_NO_SUPPORT 4 2447 #define CMC_STATUS_CONFIRM_REQUIRED 5 2448 2449 #define CMC_FAIL_BAD_ALG 0 2450 #define CMC_FAIL_BAD_MESSAGE_CHECK 1 2451 #define CMC_FAIL_BAD_REQUEST 2 2452 #define CMC_FAIL_BAD_TIME 3 2453 #define CMC_FAIL_BAD_CERT_ID 4 2454 #define CMC_FAIL_UNSUPORTED_EXT 5 2455 #define CMC_FAIL_MUST_ARCHIVE_KEYS 6 2456 #define CMC_FAIL_BAD_IDENTITY 7 2457 #define CMC_FAIL_POP_REQUIRED 8 2458 #define CMC_FAIL_POP_FAILED 9 2459 #define CMC_FAIL_NO_KEY_REUSE 10 2460 #define CMC_FAIL_INTERNAL_CA_ERROR 11 2461 #define CMC_FAIL_TRY_LATER 12 2462 2463 typedef struct _CMC_ADD_EXTENSIONS_INFO { 2464 DWORD dwCmcDataReference; 2465 DWORD cCertReference; 2466 DWORD *rgdwCertReference; 2467 DWORD cExtension; 2468 PCERT_EXTENSION rgExtension; 2469 } CMC_ADD_EXTENSIONS_INFO,*PCMC_ADD_EXTENSIONS_INFO; 2470 2471 typedef struct _CMC_ADD_ATTRIBUTES_INFO { 2472 DWORD dwCmcDataReference; 2473 DWORD cCertReference; 2474 DWORD *rgdwCertReference; 2475 DWORD cAttribute; 2476 PCRYPT_ATTRIBUTE rgAttribute; 2477 } CMC_ADD_ATTRIBUTES_INFO,*PCMC_ADD_ATTRIBUTES_INFO; 2478 2479 typedef struct _CERT_TEMPLATE_EXT { 2480 LPSTR pszObjId; 2481 DWORD dwMajorVersion; 2482 WINBOOL fMinorVersion; 2483 DWORD dwMinorVersion; 2484 } CERT_TEMPLATE_EXT,*PCERT_TEMPLATE_EXT; 2485 2486 typedef struct _CERT_HASHED_URL { 2487 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 2488 CRYPT_HASH_BLOB Hash; 2489 LPWSTR pwszUrl; 2490 } CERT_HASHED_URL,*PCERT_HASHED_URL; 2491 2492 typedef struct _CERT_LOGOTYPE_DETAILS { 2493 LPWSTR pwszMimeType; 2494 DWORD cHashedUrl; 2495 PCERT_HASHED_URL rgHashedUrl; 2496 } CERT_LOGOTYPE_DETAILS,*PCERT_LOGOTYPE_DETAILS; 2497 2498 typedef struct _CERT_LOGOTYPE_REFERENCE { 2499 DWORD cHashedUrl; 2500 PCERT_HASHED_URL rgHashedUrl; 2501 } CERT_LOGOTYPE_REFERENCE,*PCERT_LOGOTYPE_REFERENCE; 2502 2503 typedef struct _CERT_LOGOTYPE_IMAGE_INFO { 2504 DWORD dwLogotypeImageInfoChoice; 2505 DWORD dwFileSize; 2506 DWORD dwXSize; 2507 DWORD dwYSize; 2508 DWORD dwLogotypeImageResolutionChoice; 2509 __C89_NAMELESS union { 2510 DWORD dwNumBits; 2511 DWORD dwTableSize; 2512 }; 2513 LPWSTR pwszLanguage; 2514 } CERT_LOGOTYPE_IMAGE_INFO,*PCERT_LOGOTYPE_IMAGE_INFO; 2515 2516 #define CERT_LOGOTYPE_GRAY_SCALE_IMAGE_INFO_CHOICE 1 2517 #define CERT_LOGOTYPE_COLOR_IMAGE_INFO_CHOICE 2 2518 2519 #define CERT_LOGOTYPE_NO_IMAGE_RESOLUTION_CHOICE 0 2520 #define CERT_LOGOTYPE_BITS_IMAGE_RESOLUTION_CHOICE 1 2521 #define CERT_LOGOTYPE_TABLE_SIZE_IMAGE_RESOLUTION_CHOICE 2 2522 2523 typedef struct _CERT_LOGOTYPE_IMAGE { 2524 CERT_LOGOTYPE_DETAILS LogotypeDetails; 2525 PCERT_LOGOTYPE_IMAGE_INFO pLogotypeImageInfo; 2526 } CERT_LOGOTYPE_IMAGE,*PCERT_LOGOTYPE_IMAGE; 2527 2528 typedef struct _CERT_LOGOTYPE_AUDIO_INFO { 2529 DWORD dwFileSize; 2530 DWORD dwPlayTime; 2531 DWORD dwChannels; 2532 DWORD dwSampleRate; 2533 LPWSTR pwszLanguage; 2534 } CERT_LOGOTYPE_AUDIO_INFO,*PCERT_LOGOTYPE_AUDIO_INFO; 2535 2536 typedef struct _CERT_LOGOTYPE_AUDIO { 2537 CERT_LOGOTYPE_DETAILS LogotypeDetails; 2538 PCERT_LOGOTYPE_AUDIO_INFO pLogotypeAudioInfo; 2539 } CERT_LOGOTYPE_AUDIO,*PCERT_LOGOTYPE_AUDIO; 2540 2541 typedef struct _CERT_LOGOTYPE_DATA { 2542 DWORD cLogotypeImage; 2543 PCERT_LOGOTYPE_IMAGE rgLogotypeImage; 2544 DWORD cLogotypeAudio; 2545 PCERT_LOGOTYPE_AUDIO rgLogotypeAudio; 2546 } CERT_LOGOTYPE_DATA,*PCERT_LOGOTYPE_DATA; 2547 2548 typedef struct _CERT_LOGOTYPE_INFO { 2549 DWORD dwLogotypeInfoChoice; 2550 __C89_NAMELESS union { 2551 PCERT_LOGOTYPE_DATA pLogotypeDirectInfo; 2552 PCERT_LOGOTYPE_REFERENCE pLogotypeIndirectInfo; 2553 }; 2554 } CERT_LOGOTYPE_INFO,*PCERT_LOGOTYPE_INFO; 2555 2556 #define CERT_LOGOTYPE_DIRECT_INFO_CHOICE 1 2557 #define CERT_LOGOTYPE_INDIRECT_INFO_CHOICE 2 2558 2559 typedef struct _CERT_OTHER_LOGOTYPE_INFO { 2560 LPSTR pszObjId; 2561 CERT_LOGOTYPE_INFO LogotypeInfo; 2562 } CERT_OTHER_LOGOTYPE_INFO,*PCERT_OTHER_LOGOTYPE_INFO; 2563 2564 #define szOID_LOYALTY_OTHER_LOGOTYPE "1.3.6.1.5.5.7.20.1" 2565 #define szOID_BACKGROUND_OTHER_LOGOTYPE "1.3.6.1.5.5.7.20.2" 2566 2567 typedef struct _CERT_LOGOTYPE_EXT_INFO { 2568 DWORD cCommunityLogo; 2569 PCERT_LOGOTYPE_INFO rgCommunityLogo; 2570 PCERT_LOGOTYPE_INFO pIssuerLogo; 2571 PCERT_LOGOTYPE_INFO pSubjectLogo; 2572 DWORD cOtherLogo; 2573 PCERT_OTHER_LOGOTYPE_INFO rgOtherLogo; 2574 } CERT_LOGOTYPE_EXT_INFO,*PCERT_LOGOTYPE_EXT_INFO; 2575 2576 typedef struct _CERT_BIOMETRIC_DATA { 2577 DWORD dwTypeOfBiometricDataChoice; 2578 __C89_NAMELESS union { 2579 DWORD dwPredefined; 2580 LPSTR pszObjId; 2581 }; 2582 CERT_HASHED_URL HashedUrl; 2583 } CERT_BIOMETRIC_DATA,*PCERT_BIOMETRIC_DATA; 2584 2585 #define CERT_BIOMETRIC_PREDEFINED_DATA_CHOICE 1 2586 #define CERT_BIOMETRIC_OID_DATA_CHOICE 2 2587 2588 #define CERT_BIOMETRIC_PICTURE_TYPE 0 2589 #define CERT_BIOMETRIC_SIGNATURE_TYPE 1 2590 2591 typedef struct _CERT_BIOMETRIC_EXT_INFO { 2592 DWORD cBiometricData; 2593 PCERT_BIOMETRIC_DATA rgBiometricData; 2594 } CERT_BIOMETRIC_EXT_INFO,*PCERT_BIOMETRIC_EXT_INFO; 2595 2596 typedef struct _OCSP_SIGNATURE_INFO { 2597 CRYPT_ALGORITHM_IDENTIFIER SignatureAlgorithm; 2598 CRYPT_BIT_BLOB Signature; 2599 DWORD cCertEncoded; 2600 PCERT_BLOB rgCertEncoded; 2601 } OCSP_SIGNATURE_INFO,*POCSP_SIGNATURE_INFO; 2602 2603 typedef struct _OCSP_SIGNED_REQUEST_INFO { 2604 CRYPT_DER_BLOB ToBeSigned; 2605 POCSP_SIGNATURE_INFO pOptionalSignatureInfo; 2606 } OCSP_SIGNED_REQUEST_INFO,*POCSP_SIGNED_REQUEST_INFO; 2607 2608 typedef struct _OCSP_CERT_ID { 2609 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 2610 CRYPT_HASH_BLOB IssuerNameHash; 2611 CRYPT_HASH_BLOB IssuerKeyHash; 2612 CRYPT_INTEGER_BLOB SerialNumber; 2613 } OCSP_CERT_ID,*POCSP_CERT_ID; 2614 2615 typedef struct _OCSP_REQUEST_ENTRY { 2616 OCSP_CERT_ID CertId; 2617 DWORD cExtension; 2618 PCERT_EXTENSION rgExtension; 2619 } OCSP_REQUEST_ENTRY,*POCSP_REQUEST_ENTRY; 2620 2621 typedef struct _OCSP_REQUEST_INFO { 2622 DWORD dwVersion; 2623 PCERT_ALT_NAME_ENTRY pRequestorName; 2624 DWORD cRequestEntry; 2625 POCSP_REQUEST_ENTRY rgRequestEntry; 2626 DWORD cExtension; 2627 PCERT_EXTENSION rgExtension; 2628 } OCSP_REQUEST_INFO,*POCSP_REQUEST_INFO; 2629 2630 #define OCSP_REQUEST_V1 0 2631 2632 typedef struct _OCSP_RESPONSE_INFO { 2633 DWORD dwStatus; 2634 LPSTR pszObjId; 2635 CRYPT_OBJID_BLOB Value; 2636 } OCSP_RESPONSE_INFO,*POCSP_RESPONSE_INFO; 2637 2638 #define OCSP_SUCCESSFUL_RESPONSE 0 2639 #define OCSP_MALFORMED_REQUEST_RESPONSE 1 2640 #define OCSP_INTERNAL_ERROR_RESPONSE 2 2641 #define OCSP_TRY_LATER_RESPONSE 3 2642 #define OCSP_SIG_REQUIRED_RESPONSE 5 2643 #define OCSP_UNAUTHORIZED_RESPONSE 6 2644 2645 #define szOID_PKIX_OCSP_BASIC_SIGNED_RESPONSE "1.3.6.1.5.5.7.48.1.1" 2646 2647 typedef struct _OCSP_BASIC_SIGNED_RESPONSE_INFO { 2648 CRYPT_DER_BLOB ToBeSigned; 2649 OCSP_SIGNATURE_INFO SignatureInfo; 2650 } OCSP_BASIC_SIGNED_RESPONSE_INFO,*POCSP_BASIC_SIGNED_RESPONSE_INFO; 2651 2652 typedef struct _OCSP_BASIC_REVOKED_INFO { 2653 FILETIME RevocationDate; 2654 DWORD dwCrlReasonCode; 2655 } OCSP_BASIC_REVOKED_INFO,*POCSP_BASIC_REVOKED_INFO; 2656 2657 typedef struct _OCSP_BASIC_RESPONSE_ENTRY { 2658 OCSP_CERT_ID CertId; 2659 DWORD dwCertStatus; 2660 __C89_NAMELESS union { 2661 POCSP_BASIC_REVOKED_INFO pRevokedInfo; 2662 }; 2663 FILETIME ThisUpdate; 2664 FILETIME NextUpdate; 2665 DWORD cExtension; 2666 PCERT_EXTENSION rgExtension; 2667 } OCSP_BASIC_RESPONSE_ENTRY,*POCSP_BASIC_RESPONSE_ENTRY; 2668 2669 #define OCSP_BASIC_GOOD_CERT_STATUS 0 2670 #define OCSP_BASIC_REVOKED_CERT_STATUS 1 2671 #define OCSP_BASIC_UNKNOWN_CERT_STATUS 2 2672 2673 typedef struct _OCSP_BASIC_RESPONSE_INFO { 2674 DWORD dwVersion; 2675 DWORD dwResponderIdChoice; 2676 __C89_NAMELESS union { 2677 CERT_NAME_BLOB ByNameResponderId; 2678 CRYPT_HASH_BLOB ByKeyResponderId; 2679 }; 2680 FILETIME ProducedAt; 2681 DWORD cResponseEntry; 2682 POCSP_BASIC_RESPONSE_ENTRY rgResponseEntry; 2683 DWORD cExtension; 2684 PCERT_EXTENSION rgExtension; 2685 } OCSP_BASIC_RESPONSE_INFO,*POCSP_BASIC_RESPONSE_INFO; 2686 2687 #define OCSP_BASIC_RESPONSE_V1 0 2688 #define OCSP_BASIC_BY_NAME_RESPONDER_ID 1 2689 #define OCSP_BASIC_BY_KEY_RESPONDER_ID 2 2690 2691 typedef struct _CERT_SUPPORTED_ALGORITHM_INFO { 2692 CRYPT_ALGORITHM_IDENTIFIER Algorithm; 2693 CRYPT_BIT_BLOB IntendedKeyUsage; 2694 CERT_POLICIES_INFO IntendedCertPolicies; 2695 } CERT_SUPPORTED_ALGORITHM_INFO, *PCERT_SUPPORTED_ALGORITHM_INFO; 2696 2697 typedef struct _CERT_TPM_SPECIFICATION_INFO { 2698 LPWSTR pwszFamily; 2699 DWORD dwLevel; 2700 DWORD dwRevision; 2701 } CERT_TPM_SPECIFICATION_INFO, *PCERT_TPM_SPECIFICATION_INFO; 2702 2703 typedef void *HCRYPTOIDFUNCSET; 2704 typedef void *HCRYPTOIDFUNCADDR; 2705 2706 #define CRYPT_OID_ENCODE_OBJECT_FUNC "CryptDllEncodeObject" 2707 #define CRYPT_OID_DECODE_OBJECT_FUNC "CryptDllDecodeObject" 2708 #define CRYPT_OID_ENCODE_OBJECT_EX_FUNC "CryptDllEncodeObjectEx" 2709 #define CRYPT_OID_DECODE_OBJECT_EX_FUNC "CryptDllDecodeObjectEx" 2710 #define CRYPT_OID_CREATE_COM_OBJECT_FUNC "CryptDllCreateCOMObject" 2711 #define CRYPT_OID_VERIFY_REVOCATION_FUNC "CertDllVerifyRevocation" 2712 #define CRYPT_OID_VERIFY_CTL_USAGE_FUNC "CertDllVerifyCTLUsage" 2713 #define CRYPT_OID_FORMAT_OBJECT_FUNC "CryptDllFormatObject" 2714 #define CRYPT_OID_FIND_OID_INFO_FUNC "CryptDllFindOIDInfo" 2715 #define CRYPT_OID_FIND_LOCALIZED_NAME_FUNC "CryptDllFindLocalizedName" 2716 2717 #define CRYPT_OID_REGPATH "Software\\Microsoft\\Cryptography\\OID" 2718 #define CRYPT_OID_REG_ENCODING_TYPE_PREFIX "EncodingType " 2719 #define CRYPT_OID_REG_DLL_VALUE_NAME L"Dll" 2720 #define CRYPT_OID_REG_FUNC_NAME_VALUE_NAME L"FuncName" 2721 #define CRYPT_OID_REG_FUNC_NAME_VALUE_NAME_A "FuncName" 2722 2723 #define CRYPT_OID_REG_FLAGS_VALUE_NAME L"CryptFlags" 2724 2725 #define CRYPT_DEFAULT_OID "DEFAULT" 2726 2727 typedef struct _CRYPT_OID_FUNC_ENTRY { 2728 LPCSTR pszOID; 2729 void *pvFuncAddr; 2730 } CRYPT_OID_FUNC_ENTRY,*PCRYPT_OID_FUNC_ENTRY; 2731 2732 #define CRYPT_INSTALL_OID_FUNC_BEFORE_FLAG 1 2733 #define CRYPT_GET_INSTALLED_OID_FUNC_FLAG 0x1 2734 2735 #define CRYPT_REGISTER_FIRST_INDEX 0 2736 #define CRYPT_REGISTER_LAST_INDEX 0xffffffff 2737 2738 WINIMPM WINBOOL WINAPI CryptInstallOIDFunctionAddress (HMODULE hModule, DWORD dwEncodingType, LPCSTR pszFuncName, DWORD cFuncEntry, const CRYPT_OID_FUNC_ENTRY rgFuncEntry[], DWORD dwFlags); 2739 WINIMPM HCRYPTOIDFUNCSET WINAPI CryptInitOIDFunctionSet (LPCSTR pszFuncName, DWORD dwFlags); 2740 WINIMPM WINBOOL WINAPI CryptGetOIDFunctionAddress (HCRYPTOIDFUNCSET hFuncSet, DWORD dwEncodingType, LPCSTR pszOID, DWORD dwFlags, void **ppvFuncAddr, HCRYPTOIDFUNCADDR *phFuncAddr); 2741 WINIMPM WINBOOL WINAPI CryptGetDefaultOIDDllList (HCRYPTOIDFUNCSET hFuncSet, DWORD dwEncodingType, WCHAR *pwszDllList, DWORD *pcchDllList); 2742 WINIMPM WINBOOL WINAPI CryptGetDefaultOIDFunctionAddress (HCRYPTOIDFUNCSET hFuncSet, DWORD dwEncodingType, LPCWSTR pwszDll, DWORD dwFlags, void **ppvFuncAddr, HCRYPTOIDFUNCADDR *phFuncAddr); 2743 WINIMPM WINBOOL WINAPI CryptFreeOIDFunctionAddress (HCRYPTOIDFUNCADDR hFuncAddr, DWORD dwFlags); 2744 WINIMPM WINBOOL WINAPI CryptRegisterOIDFunction (DWORD dwEncodingType, LPCSTR pszFuncName, LPCSTR pszOID, LPCWSTR pwszDll, LPCSTR pszOverrideFuncName); 2745 WINIMPM WINBOOL WINAPI CryptUnregisterOIDFunction (DWORD dwEncodingType, LPCSTR pszFuncName, LPCSTR pszOID); 2746 WINIMPM WINBOOL WINAPI CryptRegisterDefaultOIDFunction (DWORD dwEncodingType, LPCSTR pszFuncName, DWORD dwIndex, LPCWSTR pwszDll); 2747 WINIMPM WINBOOL WINAPI CryptUnregisterDefaultOIDFunction (DWORD dwEncodingType, LPCSTR pszFuncName, LPCWSTR pwszDll); 2748 WINIMPM WINBOOL WINAPI CryptSetOIDFunctionValue (DWORD dwEncodingType, LPCSTR pszFuncName, LPCSTR pszOID, LPCWSTR pwszValueName, DWORD dwValueType, const BYTE *pbValueData, DWORD cbValueData); 2749 WINIMPM WINBOOL WINAPI CryptGetOIDFunctionValue (DWORD dwEncodingType, LPCSTR pszFuncName, LPCSTR pszOID, LPCWSTR pwszValueName, DWORD *pdwValueType, BYTE *pbValueData, DWORD *pcbValueData); 2750 2751 typedef WINBOOL (WINAPI *PFN_CRYPT_ENUM_OID_FUNC) (DWORD dwEncodingType, LPCSTR pszFuncName, LPCSTR pszOID, DWORD cValue, const DWORD rgdwValueType[], LPCWSTR const rgpwszValueName[], const BYTE *const rgpbValueData[], const DWORD rgcbValueData[], void *pvArg); 2752 2753 WINIMPM WINBOOL WINAPI CryptEnumOIDFunction (DWORD dwEncodingType, LPCSTR pszFuncName, LPCSTR pszOID, DWORD dwFlags, void *pvArg, PFN_CRYPT_ENUM_OID_FUNC pfnEnumOIDFunc); 2754 2755 #define CRYPT_MATCH_ANY_ENCODING_TYPE 0xffffffff 2756 #define CALG_OID_INFO_CNG_ONLY 0xffffffff 2757 #define CALG_OID_INFO_PARAMETERS 0xfffffffe 2758 #define IS_SPECIAL_OID_INFO_ALGID(Algid) (Algid >= CALG_OID_INFO_PARAMETERS) 2759 2760 #define CRYPT_OID_INFO_HASH_PARAMETERS_ALGORITHM L"CryptOIDInfoHashParameters" 2761 #define CRYPT_OID_INFO_ECC_PARAMETERS_ALGORITHM L"CryptOIDInfoECCParameters" 2762 #define CRYPT_OID_INFO_MGF1_PARAMETERS_ALGORITHM L"CryptOIDInfoMgf1Parameters" 2763 #define CRYPT_OID_INFO_NO_SIGN_ALGORITHM L"CryptOIDInfoNoSign" 2764 #define CRYPT_OID_INFO_OAEP_PARAMETERS_ALGORITHM L"CryptOIDInfoOAEPParameters" 2765 #define CRYPT_OID_INFO_ECC_WRAP_PARAMETERS_ALGORITHM L"CryptOIDInfoECCWrapParameters" 2766 #define CRYPT_OID_INFO_NO_PARAMETERS_ALGORITHM L"CryptOIDInfoNoParameters" 2767 2768 typedef struct _CRYPT_OID_INFO { 2769 DWORD cbSize; 2770 LPCSTR pszOID; 2771 LPCWSTR pwszName; 2772 DWORD dwGroupId; 2773 __C89_NAMELESS union { 2774 DWORD dwValue; 2775 ALG_ID Algid; 2776 DWORD dwLength; 2777 }; 2778 CRYPT_DATA_BLOB ExtraInfo; 2779 #ifdef CRYPT_OID_INFO_HAS_EXTRA_FIELDS 2780 LPCWSTR pwszCNGAlgid; 2781 LPCWSTR pwszCNGExtraAlgid; 2782 #endif 2783 } CRYPT_OID_INFO,*PCRYPT_OID_INFO; 2784 2785 typedef const CRYPT_OID_INFO CCRYPT_OID_INFO,*PCCRYPT_OID_INFO; 2786 2787 #define CRYPT_HASH_ALG_OID_GROUP_ID 1 2788 #define CRYPT_ENCRYPT_ALG_OID_GROUP_ID 2 2789 #define CRYPT_PUBKEY_ALG_OID_GROUP_ID 3 2790 #define CRYPT_SIGN_ALG_OID_GROUP_ID 4 2791 #define CRYPT_RDN_ATTR_OID_GROUP_ID 5 2792 #define CRYPT_EXT_OR_ATTR_OID_GROUP_ID 6 2793 #define CRYPT_ENHKEY_USAGE_OID_GROUP_ID 7 2794 #define CRYPT_POLICY_OID_GROUP_ID 8 2795 #define CRYPT_TEMPLATE_OID_GROUP_ID 9 2796 #define CRYPT_KDF_OID_GROUP_ID 10 2797 #define CRYPT_LAST_OID_GROUP_ID 10 2798 2799 #define CRYPT_FIRST_ALG_OID_GROUP_ID CRYPT_HASH_ALG_OID_GROUP_ID 2800 #define CRYPT_LAST_ALG_OID_GROUP_ID CRYPT_SIGN_ALG_OID_GROUP_ID 2801 2802 #define CRYPT_OID_INHIBIT_SIGNATURE_FORMAT_FLAG 0x1 2803 #define CRYPT_OID_USE_PUBKEY_PARA_FOR_PKCS7_FLAG 0x2 2804 #define CRYPT_OID_NO_NULL_ALGORITHM_PARA_FLAG 0x4 2805 2806 #define CRYPT_OID_PUBKEY_ENCRYPT_ONLY_FLAG 0x40000000 2807 #define CRYPT_OID_PUBKEY_SIGN_ONLY_FLAG 0x80000000 2808 #define CRYPT_OID_USE_CURVE_NAME_FOR_ENCODE_FLAG 0x20000000 2809 #define CRYPT_OID_USE_CURVE_PARAMETERS_FOR_ENCODE_FLAG 0x10000000 2810 2811 WINIMPM PCCRYPT_OID_INFO WINAPI CryptFindOIDInfo (DWORD dwKeyType, void *pvKey, DWORD dwGroupId); 2812 2813 #define CRYPT_OID_INFO_OID_KEY 1 2814 #define CRYPT_OID_INFO_NAME_KEY 2 2815 #define CRYPT_OID_INFO_ALGID_KEY 3 2816 #define CRYPT_OID_INFO_SIGN_KEY 4 2817 #define CRYPT_OID_INFO_CNG_ALGID_KEY 5 2818 #define CRYPT_OID_INFO_CNG_SIGN_KEY 6 2819 2820 #define CRYPT_OID_INFO_OID_KEY_FLAGS_MASK 0xffff0000 2821 #define CRYPT_OID_INFO_PUBKEY_SIGN_KEY_FLAG 0x80000000 2822 #define CRYPT_OID_INFO_PUBKEY_ENCRYPT_KEY_FLAG 0x40000000 2823 2824 #define CRYPT_OID_DISABLE_SEARCH_DS_FLAG 0x80000000 2825 2826 #ifdef CRYPT_OID_INFO_HAS_EXTRA_FIELDS 2827 #define CRYPT_OID_PREFER_CNG_ALGID_FLAG 0x40000000 2828 #endif 2829 2830 #define CRYPT_OID_INFO_OID_GROUP_BIT_LEN_MASK 0x0fff0000 2831 #define CRYPT_OID_INFO_OID_GROUP_BIT_LEN_SHIFT 16 2832 2833 #define CRYPT_INSTALL_OID_INFO_BEFORE_FLAG 1 2834 2835 typedef WINBOOL (WINAPI *PFN_CRYPT_ENUM_OID_INFO) (PCCRYPT_OID_INFO pInfo, void *pvArg); 2836 2837 WINIMPM WINBOOL WINAPI CryptRegisterOIDInfo (PCCRYPT_OID_INFO pInfo, DWORD dwFlags); 2838 WINIMPM WINBOOL WINAPI CryptUnregisterOIDInfo (PCCRYPT_OID_INFO pInfo); 2839 WINIMPM WINBOOL WINAPI CryptEnumOIDInfo (DWORD dwGroupId, DWORD dwFlags, void *pvArg, PFN_CRYPT_ENUM_OID_INFO pfnEnumOIDInfo); 2840 WINIMPM LPCWSTR WINAPI CryptFindLocalizedName (LPCWSTR pwszCryptName); 2841 2842 #define CRYPT_LOCALIZED_NAME_ENCODING_TYPE 0 2843 #define CRYPT_LOCALIZED_NAME_OID "LocalizedNames" 2844 2845 #define CERT_STRONG_SIGN_ECDSA_ALGORITHM L"ECDSA" 2846 2847 typedef struct _CERT_STRONG_SIGN_SERIALIZED_INFO { 2848 DWORD dwFlags; 2849 LPWSTR pwszCNGSignHashAlgids; 2850 LPWSTR pwszCNGPubKeyMinBitLengths; 2851 } CERT_STRONG_SIGN_SERIALIZED_INFO,*PCERT_STRONG_SIGN_SERIALIZED_INFO; 2852 2853 typedef struct _CERT_STRONG_SIGN_PARA { 2854 DWORD cbSize; 2855 DWORD dwInfoChoice; 2856 __C89_NAMELESS union { 2857 void *pvInfo; 2858 PCERT_STRONG_SIGN_SERIALIZED_INFO pSerializedInfo; 2859 LPSTR pszOID; 2860 }; 2861 } CERT_STRONG_SIGN_PARA,*PCERT_STRONG_SIGN_PARA; 2862 2863 typedef const CERT_STRONG_SIGN_PARA *PCCERT_STRONG_SIGN_PARA; 2864 2865 #define CERT_STRONG_SIGN_SERIALIZED_INFO_CHOICE 1 2866 #define CERT_STRONG_SIGN_OID_INFO_CHOICE 2 2867 2868 #define CERT_STRONG_SIGN_ENABLE_CRL_CHECK 0x1 2869 #define CERT_STRONG_SIGN_ENABLE_OCSP_CHECK 0x2 2870 2871 #define szOID_CERT_STRONG_SIGN_OS_PREFIX "1.3.6.1.4.1.311.72.1." 2872 2873 #define szOID_CERT_STRONG_SIGN_OS_1 "1.3.6.1.4.1.311.72.1.1" 2874 #define szOID_CERT_STRONG_SIGN_OS_CURRENT szOID_CERT_STRONG_SIGN_OS_1 2875 2876 #define CERT_STRONG_SIGN_PARA_OS_1 { sizeof (CERT_STRONG_SIGN_PARA), CERT_STRONG_SIGN_OID_INFO_CHOICE, szOID_CERT_STRONG_SIGN_OS_1 } 2877 #define CERT_STRONG_SIGN_PARA_OS_CURRENT { sizeof (CERT_STRONG_SIGN_PARA), CERT_STRONG_SIGN_OID_INFO_CHOICE, szOID_CERT_STRONG_SIGN_OS_CURRENT } 2878 2879 #define szOID_CERT_STRONG_KEY_OS_PREFIX "1.3.6.1.4.1.311.72.2." 2880 #define szOID_CERT_STRONG_KEY_OS_1 "1.3.6.1.4.1.311.72.2.1" 2881 #define szOID_CERT_STRONG_KEY_OS_CURRENT szOID_CERT_STRONG_KEY_OS_1 2882 2883 #define CERT_STRONG_KEY_PARA_OS_1 { sizeof (CERT_STRONG_SIGN_PARA), CERT_STRONG_SIGN_OID_INFO_CHOICE, szOID_CERT_STRONG_KEY_OS_1 } 2884 #define CERT_STRONG_KEY_PARA_OS_CURRENT { sizeof (CERT_STRONG_SIGN_PARA), CERT_STRONG_SIGN_OID_INFO_CHOICE, szOID_CERT_STRONG_KEY_OS_CURRENT } 2885 2886 typedef void *HCRYPTMSG; 2887 2888 #define szOID_PKCS_7_DATA "1.2.840.113549.1.7.1" 2889 #define szOID_PKCS_7_SIGNED "1.2.840.113549.1.7.2" 2890 #define szOID_PKCS_7_ENVELOPED "1.2.840.113549.1.7.3" 2891 #define szOID_PKCS_7_SIGNEDANDENVELOPED "1.2.840.113549.1.7.4" 2892 #define szOID_PKCS_7_DIGESTED "1.2.840.113549.1.7.5" 2893 #define szOID_PKCS_7_ENCRYPTED "1.2.840.113549.1.7.6" 2894 2895 #define szOID_PKCS_9_CONTENT_TYPE "1.2.840.113549.1.9.3" 2896 #define szOID_PKCS_9_MESSAGE_DIGEST "1.2.840.113549.1.9.4" 2897 2898 #define CMSG_DATA 1 2899 #define CMSG_SIGNED 2 2900 #define CMSG_ENVELOPED 3 2901 #define CMSG_SIGNED_AND_ENVELOPED 4 2902 #define CMSG_HASHED 5 2903 #define CMSG_ENCRYPTED 6 2904 2905 #define CMSG_ALL_FLAGS (~__MSABI_LONG(0U)) 2906 #define CMSG_DATA_FLAG (1 << CMSG_DATA) 2907 #define CMSG_SIGNED_FLAG (1 << CMSG_SIGNED) 2908 #define CMSG_ENVELOPED_FLAG (1 << CMSG_ENVELOPED) 2909 #define CMSG_SIGNED_AND_ENVELOPED_FLAG (1 << CMSG_SIGNED_AND_ENVELOPED) 2910 #define CMSG_HASHED_FLAG (1 << CMSG_HASHED) 2911 #define CMSG_ENCRYPTED_FLAG (1 << CMSG_ENCRYPTED) 2912 2913 typedef struct _CERT_ISSUER_SERIAL_NUMBER { 2914 CERT_NAME_BLOB Issuer; 2915 CRYPT_INTEGER_BLOB SerialNumber; 2916 } CERT_ISSUER_SERIAL_NUMBER,*PCERT_ISSUER_SERIAL_NUMBER; 2917 2918 typedef struct _CERT_ID { 2919 DWORD dwIdChoice; 2920 __C89_NAMELESS union { 2921 CERT_ISSUER_SERIAL_NUMBER IssuerSerialNumber; 2922 CRYPT_HASH_BLOB KeyId; 2923 CRYPT_HASH_BLOB HashId; 2924 }; 2925 } CERT_ID,*PCERT_ID; 2926 2927 #define CERT_ID_ISSUER_SERIAL_NUMBER 1 2928 #define CERT_ID_KEY_IDENTIFIER 2 2929 #define CERT_ID_SHA1_HASH 3 2930 2931 typedef struct _CMSG_SIGNER_ENCODE_INFO { 2932 DWORD cbSize; 2933 PCERT_INFO pCertInfo; 2934 __C89_NAMELESS union { 2935 HCRYPTPROV hCryptProv; 2936 NCRYPT_KEY_HANDLE hNCryptKey; 2937 }; 2938 DWORD dwKeySpec; 2939 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 2940 void *pvHashAuxInfo; 2941 DWORD cAuthAttr; 2942 PCRYPT_ATTRIBUTE rgAuthAttr; 2943 DWORD cUnauthAttr; 2944 PCRYPT_ATTRIBUTE rgUnauthAttr; 2945 #ifdef CMSG_SIGNER_ENCODE_INFO_HAS_CMS_FIELDS 2946 CERT_ID SignerId; 2947 CRYPT_ALGORITHM_IDENTIFIER HashEncryptionAlgorithm; 2948 void *pvHashEncryptionAuxInfo; 2949 #endif 2950 } CMSG_SIGNER_ENCODE_INFO,*PCMSG_SIGNER_ENCODE_INFO; 2951 2952 typedef struct _CMSG_SIGNED_ENCODE_INFO { 2953 DWORD cbSize; 2954 DWORD cSigners; 2955 PCMSG_SIGNER_ENCODE_INFO rgSigners; 2956 DWORD cCertEncoded; 2957 PCERT_BLOB rgCertEncoded; 2958 DWORD cCrlEncoded; 2959 PCRL_BLOB rgCrlEncoded; 2960 #ifdef CMSG_SIGNED_ENCODE_INFO_HAS_CMS_FIELDS 2961 DWORD cAttrCertEncoded; 2962 PCERT_BLOB rgAttrCertEncoded; 2963 #endif 2964 } CMSG_SIGNED_ENCODE_INFO,*PCMSG_SIGNED_ENCODE_INFO; 2965 2966 typedef struct _CMSG_RECIPIENT_ENCODE_INFO CMSG_RECIPIENT_ENCODE_INFO,*PCMSG_RECIPIENT_ENCODE_INFO; 2967 2968 typedef struct _CMSG_ENVELOPED_ENCODE_INFO { 2969 DWORD cbSize; 2970 HCRYPTPROV_LEGACY hCryptProv; 2971 CRYPT_ALGORITHM_IDENTIFIER ContentEncryptionAlgorithm; 2972 void *pvEncryptionAuxInfo; 2973 DWORD cRecipients; 2974 PCERT_INFO *rgpRecipients; 2975 #ifdef CMSG_ENVELOPED_ENCODE_INFO_HAS_CMS_FIELDS 2976 PCMSG_RECIPIENT_ENCODE_INFO rgCmsRecipients; 2977 DWORD cCertEncoded; 2978 PCERT_BLOB rgCertEncoded; 2979 DWORD cCrlEncoded; 2980 PCRL_BLOB rgCrlEncoded; 2981 DWORD cAttrCertEncoded; 2982 PCERT_BLOB rgAttrCertEncoded; 2983 DWORD cUnprotectedAttr; 2984 PCRYPT_ATTRIBUTE rgUnprotectedAttr; 2985 #endif 2986 } CMSG_ENVELOPED_ENCODE_INFO,*PCMSG_ENVELOPED_ENCODE_INFO; 2987 2988 typedef struct _CMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO { 2989 DWORD cbSize; 2990 CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm; 2991 void *pvKeyEncryptionAuxInfo; 2992 HCRYPTPROV_LEGACY hCryptProv; 2993 CRYPT_BIT_BLOB RecipientPublicKey; 2994 CERT_ID RecipientId; 2995 } CMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO,*PCMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO; 2996 2997 typedef struct _CMSG_RECIPIENT_ENCRYPTED_KEY_ENCODE_INFO { 2998 DWORD cbSize; 2999 CRYPT_BIT_BLOB RecipientPublicKey; 3000 CERT_ID RecipientId; 3001 FILETIME Date; 3002 PCRYPT_ATTRIBUTE_TYPE_VALUE pOtherAttr; 3003 } CMSG_RECIPIENT_ENCRYPTED_KEY_ENCODE_INFO,*PCMSG_RECIPIENT_ENCRYPTED_KEY_ENCODE_INFO; 3004 3005 typedef struct _CMSG_KEY_AGREE_RECIPIENT_ENCODE_INFO { 3006 DWORD cbSize; 3007 CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm; 3008 void *pvKeyEncryptionAuxInfo; 3009 CRYPT_ALGORITHM_IDENTIFIER KeyWrapAlgorithm; 3010 void *pvKeyWrapAuxInfo; 3011 HCRYPTPROV_LEGACY hCryptProv; 3012 DWORD dwKeySpec; 3013 DWORD dwKeyChoice; 3014 __C89_NAMELESS union { 3015 PCRYPT_ALGORITHM_IDENTIFIER pEphemeralAlgorithm; 3016 PCERT_ID pSenderId; 3017 }; 3018 CRYPT_DATA_BLOB UserKeyingMaterial; 3019 DWORD cRecipientEncryptedKeys; 3020 PCMSG_RECIPIENT_ENCRYPTED_KEY_ENCODE_INFO *rgpRecipientEncryptedKeys; 3021 } CMSG_KEY_AGREE_RECIPIENT_ENCODE_INFO,*PCMSG_KEY_AGREE_RECIPIENT_ENCODE_INFO; 3022 3023 #define CMSG_KEY_AGREE_EPHEMERAL_KEY_CHOICE 1 3024 #define CMSG_KEY_AGREE_STATIC_KEY_CHOICE 2 3025 3026 typedef struct _CMSG_MAIL_LIST_RECIPIENT_ENCODE_INFO { 3027 DWORD cbSize; 3028 CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm; 3029 void *pvKeyEncryptionAuxInfo; 3030 HCRYPTPROV hCryptProv; 3031 DWORD dwKeyChoice; 3032 __C89_NAMELESS union { 3033 HCRYPTKEY hKeyEncryptionKey; 3034 void *pvKeyEncryptionKey; 3035 }; 3036 CRYPT_DATA_BLOB KeyId; 3037 FILETIME Date; 3038 PCRYPT_ATTRIBUTE_TYPE_VALUE pOtherAttr; 3039 } CMSG_MAIL_LIST_RECIPIENT_ENCODE_INFO,*PCMSG_MAIL_LIST_RECIPIENT_ENCODE_INFO; 3040 3041 #define CMSG_MAIL_LIST_HANDLE_KEY_CHOICE 1 3042 3043 #define CMSG_KEY_TRANS_RECIPIENT 1 3044 #define CMSG_KEY_AGREE_RECIPIENT 2 3045 #define CMSG_MAIL_LIST_RECIPIENT 3 3046 3047 #define CMSG_RC4_NO_SALT_FLAG 0x40000000 3048 #define CMSG_SP3_COMPATIBLE_ENCRYPT_FLAG 0x80000000 3049 3050 struct _CMSG_RECIPIENT_ENCODE_INFO { 3051 DWORD dwRecipientChoice; 3052 __C89_NAMELESS union { 3053 PCMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO pKeyTrans; 3054 PCMSG_KEY_AGREE_RECIPIENT_ENCODE_INFO pKeyAgree; 3055 PCMSG_MAIL_LIST_RECIPIENT_ENCODE_INFO pMailList; 3056 }; 3057 }; 3058 3059 typedef struct _CMSG_RC2_AUX_INFO { 3060 DWORD cbSize; 3061 DWORD dwBitLen; 3062 } CMSG_RC2_AUX_INFO,*PCMSG_RC2_AUX_INFO; 3063 3064 typedef struct _CMSG_SP3_COMPATIBLE_AUX_INFO { 3065 DWORD cbSize; 3066 DWORD dwFlags; 3067 } CMSG_SP3_COMPATIBLE_AUX_INFO,*PCMSG_SP3_COMPATIBLE_AUX_INFO; 3068 3069 typedef struct _CMSG_RC4_AUX_INFO { 3070 DWORD cbSize; 3071 DWORD dwBitLen; 3072 } CMSG_RC4_AUX_INFO,*PCMSG_RC4_AUX_INFO; 3073 3074 typedef struct _CMSG_SIGNED_AND_ENVELOPED_ENCODE_INFO { 3075 DWORD cbSize; 3076 CMSG_SIGNED_ENCODE_INFO SignedInfo; 3077 CMSG_ENVELOPED_ENCODE_INFO EnvelopedInfo; 3078 } CMSG_SIGNED_AND_ENVELOPED_ENCODE_INFO,*PCMSG_SIGNED_AND_ENVELOPED_ENCODE_INFO; 3079 3080 typedef struct _CMSG_HASHED_ENCODE_INFO { 3081 DWORD cbSize; 3082 HCRYPTPROV_LEGACY hCryptProv; 3083 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 3084 void *pvHashAuxInfo; 3085 } CMSG_HASHED_ENCODE_INFO,*PCMSG_HASHED_ENCODE_INFO; 3086 3087 typedef struct _CMSG_ENCRYPTED_ENCODE_INFO { 3088 DWORD cbSize; 3089 CRYPT_ALGORITHM_IDENTIFIER ContentEncryptionAlgorithm; 3090 void *pvEncryptionAuxInfo; 3091 } CMSG_ENCRYPTED_ENCODE_INFO,*PCMSG_ENCRYPTED_ENCODE_INFO; 3092 3093 typedef WINBOOL (WINAPI *PFN_CMSG_STREAM_OUTPUT) (const void *pvArg, BYTE *pbData, DWORD cbData, WINBOOL fFinal); 3094 3095 #define CMSG_INDEFINITE_LENGTH (0xffffffff) 3096 3097 typedef struct _CMSG_STREAM_INFO { 3098 DWORD cbContent; 3099 PFN_CMSG_STREAM_OUTPUT pfnStreamOutput; 3100 void *pvArg; 3101 } CMSG_STREAM_INFO,*PCMSG_STREAM_INFO; 3102 3103 #define CMSG_BARE_CONTENT_FLAG 0x1 3104 #define CMSG_LENGTH_ONLY_FLAG 0x2 3105 #define CMSG_DETACHED_FLAG 0x4 3106 #define CMSG_AUTHENTICATED_ATTRIBUTES_FLAG 0x8 3107 #define CMSG_CONTENTS_OCTETS_FLAG 0x10 3108 #define CMSG_MAX_LENGTH_FLAG 0x20 3109 #define CMSG_CMS_ENCAPSULATED_CONTENT_FLAG 0x40 3110 #define CMSG_SIGNED_DATA_NO_SIGN_FLAG 0x80 3111 #define CMSG_CRYPT_RELEASE_CONTEXT_FLAG 0x8000 3112 3113 WINIMPM HCRYPTMSG WINAPI CryptMsgOpenToEncode (DWORD dwMsgEncodingType, DWORD dwFlags, DWORD dwMsgType, void const *pvMsgEncodeInfo, LPSTR pszInnerContentObjID, PCMSG_STREAM_INFO pStreamInfo); 3114 WINIMPM DWORD WINAPI CryptMsgCalculateEncodedLength (DWORD dwMsgEncodingType, DWORD dwFlags, DWORD dwMsgType, void const *pvMsgEncodeInfo, LPSTR pszInnerContentObjID, DWORD cbData); 3115 WINIMPM HCRYPTMSG WINAPI CryptMsgOpenToDecode (DWORD dwMsgEncodingType, DWORD dwFlags, DWORD dwMsgType, HCRYPTPROV_LEGACY hCryptProv, PCERT_INFO pRecipientInfo, PCMSG_STREAM_INFO pStreamInfo); 3116 WINIMPM HCRYPTMSG WINAPI CryptMsgDuplicate (HCRYPTMSG hCryptMsg); 3117 WINIMPM WINBOOL WINAPI CryptMsgClose (HCRYPTMSG hCryptMsg); 3118 WINIMPM WINBOOL WINAPI CryptMsgUpdate (HCRYPTMSG hCryptMsg, const BYTE *pbData, DWORD cbData, WINBOOL fFinal); 3119 WINIMPM WINBOOL WINAPI CryptMsgGetParam (HCRYPTMSG hCryptMsg, DWORD dwParamType, DWORD dwIndex, void *pvData, DWORD *pcbData); 3120 3121 #define CMSG_TYPE_PARAM 1 3122 #define CMSG_CONTENT_PARAM 2 3123 #define CMSG_BARE_CONTENT_PARAM 3 3124 #define CMSG_INNER_CONTENT_TYPE_PARAM 4 3125 #define CMSG_SIGNER_COUNT_PARAM 5 3126 #define CMSG_SIGNER_INFO_PARAM 6 3127 #define CMSG_SIGNER_CERT_INFO_PARAM 7 3128 #define CMSG_SIGNER_HASH_ALGORITHM_PARAM 8 3129 #define CMSG_SIGNER_AUTH_ATTR_PARAM 9 3130 #define CMSG_SIGNER_UNAUTH_ATTR_PARAM 10 3131 #define CMSG_CERT_COUNT_PARAM 11 3132 #define CMSG_CERT_PARAM 12 3133 #define CMSG_CRL_COUNT_PARAM 13 3134 #define CMSG_CRL_PARAM 14 3135 #define CMSG_ENVELOPE_ALGORITHM_PARAM 15 3136 #define CMSG_RECIPIENT_COUNT_PARAM 17 3137 #define CMSG_RECIPIENT_INDEX_PARAM 18 3138 #define CMSG_RECIPIENT_INFO_PARAM 19 3139 #define CMSG_HASH_ALGORITHM_PARAM 20 3140 #define CMSG_HASH_DATA_PARAM 21 3141 #define CMSG_COMPUTED_HASH_PARAM 22 3142 #define CMSG_ENCRYPT_PARAM 26 3143 #define CMSG_ENCRYPTED_DIGEST 27 3144 #define CMSG_ENCODED_SIGNER 28 3145 #define CMSG_ENCODED_MESSAGE 29 3146 #define CMSG_VERSION_PARAM 30 3147 #define CMSG_ATTR_CERT_COUNT_PARAM 31 3148 #define CMSG_ATTR_CERT_PARAM 32 3149 #define CMSG_CMS_RECIPIENT_COUNT_PARAM 33 3150 #define CMSG_CMS_RECIPIENT_INDEX_PARAM 34 3151 #define CMSG_CMS_RECIPIENT_ENCRYPTED_KEY_INDEX_PARAM 35 3152 #define CMSG_CMS_RECIPIENT_INFO_PARAM 36 3153 #define CMSG_UNPROTECTED_ATTR_PARAM 37 3154 #define CMSG_SIGNER_CERT_ID_PARAM 38 3155 #define CMSG_CMS_SIGNER_INFO_PARAM 39 3156 3157 typedef struct _CMSG_SIGNER_INFO { 3158 DWORD dwVersion; 3159 CERT_NAME_BLOB Issuer; 3160 CRYPT_INTEGER_BLOB SerialNumber; 3161 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 3162 CRYPT_ALGORITHM_IDENTIFIER HashEncryptionAlgorithm; 3163 CRYPT_DATA_BLOB EncryptedHash; 3164 CRYPT_ATTRIBUTES AuthAttrs; 3165 CRYPT_ATTRIBUTES UnauthAttrs; 3166 } CMSG_SIGNER_INFO,*PCMSG_SIGNER_INFO; 3167 3168 typedef struct _CMSG_CMS_SIGNER_INFO { 3169 DWORD dwVersion; 3170 CERT_ID SignerId; 3171 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 3172 CRYPT_ALGORITHM_IDENTIFIER HashEncryptionAlgorithm; 3173 CRYPT_DATA_BLOB EncryptedHash; 3174 CRYPT_ATTRIBUTES AuthAttrs; 3175 CRYPT_ATTRIBUTES UnauthAttrs; 3176 } CMSG_CMS_SIGNER_INFO,*PCMSG_CMS_SIGNER_INFO; 3177 3178 typedef CRYPT_ATTRIBUTES CMSG_ATTR; 3179 typedef CRYPT_ATTRIBUTES *PCMSG_ATTR; 3180 3181 #define CMSG_SIGNED_DATA_V1 1 3182 #define CMSG_SIGNED_DATA_V3 3 3183 #define CMSG_SIGNED_DATA_PKCS_1_5_VERSION CMSG_SIGNED_DATA_V1 3184 #define CMSG_SIGNED_DATA_CMS_VERSION CMSG_SIGNED_DATA_V3 3185 3186 #define CMSG_SIGNER_INFO_V1 1 3187 #define CMSG_SIGNER_INFO_V3 3 3188 #define CMSG_SIGNER_INFO_PKCS_1_5_VERSION CMSG_SIGNER_INFO_V1 3189 #define CMSG_SIGNER_INFO_CMS_VERSION CMSG_SIGNER_INFO_V3 3190 3191 #define CMSG_HASHED_DATA_V0 0 3192 #define CMSG_HASHED_DATA_V2 2 3193 #define CMSG_HASHED_DATA_PKCS_1_5_VERSION CMSG_HASHED_DATA_V0 3194 #define CMSG_HASHED_DATA_CMS_VERSION CMSG_HASHED_DATA_V2 3195 3196 #define CMSG_ENVELOPED_DATA_V0 0 3197 #define CMSG_ENVELOPED_DATA_V2 2 3198 #define CMSG_ENVELOPED_DATA_PKCS_1_5_VERSION CMSG_ENVELOPED_DATA_V0 3199 #define CMSG_ENVELOPED_DATA_CMS_VERSION CMSG_ENVELOPED_DATA_V2 3200 3201 typedef struct _CMSG_KEY_TRANS_RECIPIENT_INFO { 3202 DWORD dwVersion; 3203 CERT_ID RecipientId; 3204 CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm; 3205 CRYPT_DATA_BLOB EncryptedKey; 3206 } CMSG_KEY_TRANS_RECIPIENT_INFO,*PCMSG_KEY_TRANS_RECIPIENT_INFO; 3207 3208 typedef struct _CMSG_RECIPIENT_ENCRYPTED_KEY_INFO { 3209 CERT_ID RecipientId; 3210 CRYPT_DATA_BLOB EncryptedKey; 3211 FILETIME Date; 3212 PCRYPT_ATTRIBUTE_TYPE_VALUE pOtherAttr; 3213 } CMSG_RECIPIENT_ENCRYPTED_KEY_INFO,*PCMSG_RECIPIENT_ENCRYPTED_KEY_INFO; 3214 3215 typedef struct _CMSG_KEY_AGREE_RECIPIENT_INFO { 3216 DWORD dwVersion; 3217 DWORD dwOriginatorChoice; 3218 __C89_NAMELESS union { 3219 CERT_ID OriginatorCertId; 3220 CERT_PUBLIC_KEY_INFO OriginatorPublicKeyInfo; 3221 }; 3222 CRYPT_DATA_BLOB UserKeyingMaterial; 3223 CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm; 3224 DWORD cRecipientEncryptedKeys; 3225 PCMSG_RECIPIENT_ENCRYPTED_KEY_INFO *rgpRecipientEncryptedKeys; 3226 } CMSG_KEY_AGREE_RECIPIENT_INFO,*PCMSG_KEY_AGREE_RECIPIENT_INFO; 3227 3228 #define CMSG_KEY_AGREE_ORIGINATOR_CERT 1 3229 #define CMSG_KEY_AGREE_ORIGINATOR_PUBLIC_KEY 2 3230 3231 typedef struct _CMSG_MAIL_LIST_RECIPIENT_INFO { 3232 DWORD dwVersion; 3233 CRYPT_DATA_BLOB KeyId; 3234 CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm; 3235 CRYPT_DATA_BLOB EncryptedKey; 3236 FILETIME Date; 3237 PCRYPT_ATTRIBUTE_TYPE_VALUE pOtherAttr; 3238 } CMSG_MAIL_LIST_RECIPIENT_INFO,*PCMSG_MAIL_LIST_RECIPIENT_INFO; 3239 3240 typedef struct _CMSG_CMS_RECIPIENT_INFO { 3241 DWORD dwRecipientChoice; 3242 __C89_NAMELESS union { 3243 PCMSG_KEY_TRANS_RECIPIENT_INFO pKeyTrans; 3244 PCMSG_KEY_AGREE_RECIPIENT_INFO pKeyAgree; 3245 PCMSG_MAIL_LIST_RECIPIENT_INFO pMailList; 3246 }; 3247 } CMSG_CMS_RECIPIENT_INFO,*PCMSG_CMS_RECIPIENT_INFO; 3248 3249 #define CMSG_ENVELOPED_RECIPIENT_V0 0 3250 #define CMSG_ENVELOPED_RECIPIENT_V2 2 3251 #define CMSG_ENVELOPED_RECIPIENT_V3 3 3252 #define CMSG_ENVELOPED_RECIPIENT_V4 4 3253 #define CMSG_KEY_TRANS_PKCS_1_5_VERSION CMSG_ENVELOPED_RECIPIENT_V0 3254 #define CMSG_KEY_TRANS_CMS_VERSION CMSG_ENVELOPED_RECIPIENT_V2 3255 #define CMSG_KEY_AGREE_VERSION CMSG_ENVELOPED_RECIPIENT_V3 3256 #define CMSG_MAIL_LIST_VERSION CMSG_ENVELOPED_RECIPIENT_V4 3257 3258 WINIMPM WINBOOL WINAPI CryptMsgControl (HCRYPTMSG hCryptMsg, DWORD dwFlags, DWORD dwCtrlType, void const *pvCtrlPara); 3259 3260 #define CMSG_CTRL_VERIFY_SIGNATURE 1 3261 #define CMSG_CTRL_DECRYPT 2 3262 #define CMSG_CTRL_VERIFY_HASH 5 3263 #define CMSG_CTRL_ADD_SIGNER 6 3264 #define CMSG_CTRL_DEL_SIGNER 7 3265 #define CMSG_CTRL_ADD_SIGNER_UNAUTH_ATTR 8 3266 #define CMSG_CTRL_DEL_SIGNER_UNAUTH_ATTR 9 3267 #define CMSG_CTRL_ADD_CERT 10 3268 #define CMSG_CTRL_DEL_CERT 11 3269 #define CMSG_CTRL_ADD_CRL 12 3270 #define CMSG_CTRL_DEL_CRL 13 3271 #define CMSG_CTRL_ADD_ATTR_CERT 14 3272 #define CMSG_CTRL_DEL_ATTR_CERT 15 3273 #define CMSG_CTRL_KEY_TRANS_DECRYPT 16 3274 #define CMSG_CTRL_KEY_AGREE_DECRYPT 17 3275 #define CMSG_CTRL_MAIL_LIST_DECRYPT 18 3276 #define CMSG_CTRL_VERIFY_SIGNATURE_EX 19 3277 #define CMSG_CTRL_ADD_CMS_SIGNER_INFO 20 3278 #define CMSG_CTRL_ENABLE_STRONG_SIGNATURE 21 3279 3280 typedef struct _CMSG_CTRL_VERIFY_SIGNATURE_EX_PARA { 3281 DWORD cbSize; 3282 HCRYPTPROV_LEGACY hCryptProv; 3283 DWORD dwSignerIndex; 3284 DWORD dwSignerType; 3285 void *pvSigner; 3286 } CMSG_CTRL_VERIFY_SIGNATURE_EX_PARA,*PCMSG_CTRL_VERIFY_SIGNATURE_EX_PARA; 3287 3288 #define CMSG_VERIFY_SIGNER_PUBKEY 1 3289 #define CMSG_VERIFY_SIGNER_CERT 2 3290 #define CMSG_VERIFY_SIGNER_CHAIN 3 3291 #define CMSG_VERIFY_SIGNER_NULL 4 3292 3293 typedef struct _CMSG_CTRL_DECRYPT_PARA { 3294 DWORD cbSize; 3295 __C89_NAMELESS union { 3296 HCRYPTPROV hCryptProv; 3297 NCRYPT_KEY_HANDLE hNCryptKey; 3298 }; 3299 DWORD dwKeySpec; 3300 DWORD dwRecipientIndex; 3301 } CMSG_CTRL_DECRYPT_PARA,*PCMSG_CTRL_DECRYPT_PARA; 3302 3303 typedef struct _CMSG_CTRL_KEY_TRANS_DECRYPT_PARA { 3304 DWORD cbSize; 3305 __C89_NAMELESS union { 3306 HCRYPTPROV hCryptProv; 3307 NCRYPT_KEY_HANDLE hNCryptKey; 3308 }; 3309 DWORD dwKeySpec; 3310 PCMSG_KEY_TRANS_RECIPIENT_INFO pKeyTrans; 3311 DWORD dwRecipientIndex; 3312 } CMSG_CTRL_KEY_TRANS_DECRYPT_PARA,*PCMSG_CTRL_KEY_TRANS_DECRYPT_PARA; 3313 3314 typedef struct _CMSG_CTRL_KEY_AGREE_DECRYPT_PARA { 3315 DWORD cbSize; 3316 __C89_NAMELESS union { 3317 HCRYPTPROV hCryptProv; 3318 NCRYPT_KEY_HANDLE hNCryptKey; 3319 }; 3320 DWORD dwKeySpec; 3321 PCMSG_KEY_AGREE_RECIPIENT_INFO pKeyAgree; 3322 DWORD dwRecipientIndex; 3323 DWORD dwRecipientEncryptedKeyIndex; 3324 CRYPT_BIT_BLOB OriginatorPublicKey; 3325 } CMSG_CTRL_KEY_AGREE_DECRYPT_PARA,*PCMSG_CTRL_KEY_AGREE_DECRYPT_PARA; 3326 3327 typedef struct _CMSG_CTRL_MAIL_LIST_DECRYPT_PARA { 3328 DWORD cbSize; 3329 HCRYPTPROV hCryptProv; 3330 PCMSG_MAIL_LIST_RECIPIENT_INFO pMailList; 3331 DWORD dwRecipientIndex; 3332 DWORD dwKeyChoice; 3333 __C89_NAMELESS union { 3334 HCRYPTKEY hKeyEncryptionKey; 3335 void *pvKeyEncryptionKey; 3336 }; 3337 } CMSG_CTRL_MAIL_LIST_DECRYPT_PARA,*PCMSG_CTRL_MAIL_LIST_DECRYPT_PARA; 3338 3339 typedef struct _CMSG_CTRL_ADD_SIGNER_UNAUTH_ATTR_PARA { 3340 DWORD cbSize; 3341 DWORD dwSignerIndex; 3342 CRYPT_DATA_BLOB blob; 3343 } CMSG_CTRL_ADD_SIGNER_UNAUTH_ATTR_PARA,*PCMSG_CTRL_ADD_SIGNER_UNAUTH_ATTR_PARA; 3344 3345 typedef struct _CMSG_CTRL_DEL_SIGNER_UNAUTH_ATTR_PARA { 3346 DWORD cbSize; 3347 DWORD dwSignerIndex; 3348 DWORD dwUnauthAttrIndex; 3349 } CMSG_CTRL_DEL_SIGNER_UNAUTH_ATTR_PARA,*PCMSG_CTRL_DEL_SIGNER_UNAUTH_ATTR_PARA; 3350 3351 #define CMSG_VERIFY_COUNTER_SIGN_ENABLE_STRONG_FLAG 0x1 3352 3353 WINBOOL WINAPI CryptMsgVerifyCountersignatureEncoded (HCRYPTPROV_LEGACY hCryptProv, DWORD dwEncodingType, PBYTE pbSignerInfo, DWORD cbSignerInfo, PBYTE pbSignerInfoCountersignature, DWORD cbSignerInfoCountersignature, PCERT_INFO pciCountersigner); 3354 WINBOOL WINAPI CryptMsgVerifyCountersignatureEncodedEx (HCRYPTPROV_LEGACY hCryptProv, DWORD dwEncodingType, PBYTE pbSignerInfo, DWORD cbSignerInfo, PBYTE pbSignerInfoCountersignature, DWORD cbSignerInfoCountersignature, DWORD dwSignerType, void *pvSigner, DWORD dwFlags, void *pvExtra); 3355 WINBOOL WINAPI CryptMsgCountersign (HCRYPTMSG hCryptMsg, DWORD dwIndex, DWORD cCountersigners, PCMSG_SIGNER_ENCODE_INFO rgCountersigners); 3356 WINBOOL WINAPI CryptMsgCountersignEncoded (DWORD dwEncodingType, PBYTE pbSignerInfo, DWORD cbSignerInfo, DWORD cCountersigners, PCMSG_SIGNER_ENCODE_INFO rgCountersigners, PBYTE pbCountersignature, PDWORD pcbCountersignature); 3357 3358 typedef void *(WINAPI *PFN_CMSG_ALLOC) (size_t cb); 3359 typedef void (WINAPI *PFN_CMSG_FREE) (void *pv); 3360 3361 #define CMSG_OID_GEN_ENCRYPT_KEY_FUNC "CryptMsgDllGenEncryptKey" 3362 #define CMSG_OID_EXPORT_ENCRYPT_KEY_FUNC "CryptMsgDllExportEncryptKey" 3363 #define CMSG_OID_IMPORT_ENCRYPT_KEY_FUNC "CryptMsgDllImportEncryptKey" 3364 3365 typedef WINBOOL (WINAPI *PFN_CMSG_GEN_ENCRYPT_KEY) (HCRYPTPROV *phCryptProv, PCRYPT_ALGORITHM_IDENTIFIER paiEncrypt, PVOID pvEncryptAuxInfo, PCERT_PUBLIC_KEY_INFO pPublicKeyInfo, PFN_CMSG_ALLOC pfnAlloc, HCRYPTKEY *phEncryptKey, PBYTE *ppbEncryptParameters, PDWORD pcbEncryptParameters); 3366 typedef WINBOOL (WINAPI *PFN_CMSG_EXPORT_ENCRYPT_KEY) (HCRYPTPROV hCryptProv, HCRYPTKEY hEncryptKey, PCERT_PUBLIC_KEY_INFO pPublicKeyInfo, PBYTE pbData, PDWORD pcbData); 3367 typedef WINBOOL (WINAPI *PFN_CMSG_IMPORT_ENCRYPT_KEY) (HCRYPTPROV hCryptProv, DWORD dwKeySpec, PCRYPT_ALGORITHM_IDENTIFIER paiEncrypt, PCRYPT_ALGORITHM_IDENTIFIER paiPubKey, PBYTE pbEncodedKey, DWORD cbEncodedKey, HCRYPTKEY *phEncryptKey); 3368 3369 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP) 3370 3371 #define CMSG_DEFAULT_INSTALLABLE_FUNC_OID ((LPCSTR) 1) 3372 3373 typedef struct _CMSG_CONTENT_ENCRYPT_INFO { 3374 DWORD cbSize; 3375 HCRYPTPROV_LEGACY hCryptProv; 3376 CRYPT_ALGORITHM_IDENTIFIER ContentEncryptionAlgorithm; 3377 void *pvEncryptionAuxInfo; 3378 DWORD cRecipients; 3379 PCMSG_RECIPIENT_ENCODE_INFO rgCmsRecipients; 3380 PFN_CMSG_ALLOC pfnAlloc; 3381 PFN_CMSG_FREE pfnFree; 3382 DWORD dwEncryptFlags; 3383 __C89_NAMELESS union { 3384 HCRYPTKEY hContentEncryptKey; 3385 BCRYPT_KEY_HANDLE hCNGContentEncryptKey; 3386 }; 3387 DWORD dwFlags; 3388 WINBOOL fCNG; 3389 BYTE *pbCNGContentEncryptKeyObject; 3390 BYTE *pbContentEncryptKey; 3391 DWORD cbContentEncryptKey; 3392 } CMSG_CONTENT_ENCRYPT_INFO,*PCMSG_CONTENT_ENCRYPT_INFO; 3393 3394 #define CMSG_CONTENT_ENCRYPT_PAD_ENCODED_LEN_FLAG 0x1 3395 3396 #define CMSG_CONTENT_ENCRYPT_FREE_PARA_FLAG 0x1 3397 #define CMSG_CONTENT_ENCRYPT_FREE_OBJID_FLAG 0x2 3398 #define CMSG_CONTENT_ENCRYPT_RELEASE_CONTEXT_FLAG 0x8000 3399 3400 #define CMSG_OID_GEN_CONTENT_ENCRYPT_KEY_FUNC "CryptMsgDllGenContentEncryptKey" 3401 #define CMSG_OID_CAPI1_GEN_CONTENT_ENCRYPT_KEY_FUNC CMSG_OID_GEN_CONTENT_ENCRYPT_KEY_FUNC 3402 #define CMSG_OID_CNG_GEN_CONTENT_ENCRYPT_KEY_FUNC "CryptMsgDllCNGGenContentEncryptKey" 3403 3404 typedef WINBOOL (WINAPI *PFN_CMSG_GEN_CONTENT_ENCRYPT_KEY) (PCMSG_CONTENT_ENCRYPT_INFO pContentEncryptInfo, DWORD dwFlags, void *pvReserved); 3405 3406 typedef struct _CMSG_KEY_TRANS_ENCRYPT_INFO { 3407 DWORD cbSize; 3408 DWORD dwRecipientIndex; 3409 CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm; 3410 CRYPT_DATA_BLOB EncryptedKey; 3411 DWORD dwFlags; 3412 } CMSG_KEY_TRANS_ENCRYPT_INFO,*PCMSG_KEY_TRANS_ENCRYPT_INFO; 3413 3414 #define CMSG_KEY_TRANS_ENCRYPT_FREE_PARA_FLAG 0x1 3415 #define CMSG_KEY_TRANS_ENCRYPT_FREE_OBJID_FLAG 0x2 3416 3417 #define CMSG_OID_EXPORT_KEY_TRANS_FUNC "CryptMsgDllExportKeyTrans" 3418 #define CMSG_OID_CAPI1_EXPORT_KEY_TRANS_FUNC CMSG_OID_EXPORT_KEY_TRANS_FUNC 3419 #define CMSG_OID_CNG_EXPORT_KEY_TRANS_FUNC "CryptMsgDllCNGExportKeyTrans" 3420 3421 typedef WINBOOL (WINAPI *PFN_CMSG_EXPORT_KEY_TRANS) (PCMSG_CONTENT_ENCRYPT_INFO pContentEncryptInfo, PCMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO pKeyTransEncodeInfo, PCMSG_KEY_TRANS_ENCRYPT_INFO pKeyTransEncryptInfo, DWORD dwFlags, void *pvReserved); 3422 3423 typedef struct _CMSG_KEY_AGREE_KEY_ENCRYPT_INFO { 3424 DWORD cbSize; 3425 CRYPT_DATA_BLOB EncryptedKey; 3426 } CMSG_KEY_AGREE_KEY_ENCRYPT_INFO,*PCMSG_KEY_AGREE_KEY_ENCRYPT_INFO; 3427 3428 typedef struct _CMSG_KEY_AGREE_ENCRYPT_INFO { 3429 DWORD cbSize; 3430 DWORD dwRecipientIndex; 3431 CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm; 3432 CRYPT_DATA_BLOB UserKeyingMaterial; 3433 DWORD dwOriginatorChoice; 3434 __C89_NAMELESS union { 3435 CERT_ID OriginatorCertId; 3436 CERT_PUBLIC_KEY_INFO OriginatorPublicKeyInfo; 3437 }; 3438 DWORD cKeyAgreeKeyEncryptInfo; 3439 PCMSG_KEY_AGREE_KEY_ENCRYPT_INFO *rgpKeyAgreeKeyEncryptInfo; 3440 DWORD dwFlags; 3441 } CMSG_KEY_AGREE_ENCRYPT_INFO,*PCMSG_KEY_AGREE_ENCRYPT_INFO; 3442 3443 #define CMSG_KEY_AGREE_ENCRYPT_FREE_PARA_FLAG 0x1 3444 #define CMSG_KEY_AGREE_ENCRYPT_FREE_MATERIAL_FLAG 0x2 3445 #define CMSG_KEY_AGREE_ENCRYPT_FREE_PUBKEY_ALG_FLAG 0x4 3446 #define CMSG_KEY_AGREE_ENCRYPT_FREE_PUBKEY_PARA_FLAG 0x8 3447 #define CMSG_KEY_AGREE_ENCRYPT_FREE_PUBKEY_BITS_FLAG 0x10 3448 #define CMSG_KEY_AGREE_ENCRYPT_FREE_OBJID_FLAG 0x20 3449 3450 #define CMSG_OID_EXPORT_KEY_AGREE_FUNC "CryptMsgDllExportKeyAgree" 3451 #define CMSG_OID_CAPI1_EXPORT_KEY_AGREE_FUNC CMSG_OID_EXPORT_KEY_AGREE_FUNC 3452 #define CMSG_OID_CNG_EXPORT_KEY_AGREE_FUNC "CryptMsgDllCNGExportKeyAgree" 3453 3454 typedef WINBOOL (WINAPI *PFN_CMSG_EXPORT_KEY_AGREE) (PCMSG_CONTENT_ENCRYPT_INFO pContentEncryptInfo, PCMSG_KEY_AGREE_RECIPIENT_ENCODE_INFO pKeyAgreeEncodeInfo, PCMSG_KEY_AGREE_ENCRYPT_INFO pKeyAgreeEncryptInfo, DWORD dwFlags, void *pvReserved); 3455 3456 typedef struct _CMSG_MAIL_LIST_ENCRYPT_INFO { 3457 DWORD cbSize; 3458 DWORD dwRecipientIndex; 3459 CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm; 3460 CRYPT_DATA_BLOB EncryptedKey; 3461 DWORD dwFlags; 3462 } CMSG_MAIL_LIST_ENCRYPT_INFO,*PCMSG_MAIL_LIST_ENCRYPT_INFO; 3463 3464 #define CMSG_MAIL_LIST_ENCRYPT_FREE_PARA_FLAG 0x1 3465 #define CMSG_MAIL_LIST_ENCRYPT_FREE_OBJID_FLAG 0x2 3466 3467 #define CMSG_OID_EXPORT_MAIL_LIST_FUNC "CryptMsgDllExportMailList" 3468 #define CMSG_OID_CAPI1_EXPORT_MAIL_LIST_FUNC CMSG_OID_EXPORT_MAIL_LIST_FUNC 3469 #define CMSG_OID_IMPORT_KEY_TRANS_FUNC "CryptMsgDllImportKeyTrans" 3470 #define CMSG_OID_CAPI1_IMPORT_KEY_TRANS_FUNC CMSG_OID_IMPORT_KEY_TRANS_FUNC 3471 #define CMSG_OID_IMPORT_KEY_AGREE_FUNC "CryptMsgDllImportKeyAgree" 3472 #define CMSG_OID_CAPI1_IMPORT_KEY_AGREE_FUNC CMSG_OID_IMPORT_KEY_AGREE_FUNC 3473 #define CMSG_OID_IMPORT_MAIL_LIST_FUNC "CryptMsgDllImportMailList" 3474 #define CMSG_OID_CAPI1_IMPORT_MAIL_LIST_FUNC CMSG_OID_IMPORT_MAIL_LIST_FUNC 3475 3476 typedef WINBOOL (WINAPI *PFN_CMSG_EXPORT_MAIL_LIST) (PCMSG_CONTENT_ENCRYPT_INFO pContentEncryptInfo, PCMSG_MAIL_LIST_RECIPIENT_ENCODE_INFO pMailListEncodeInfo, PCMSG_MAIL_LIST_ENCRYPT_INFO pMailListEncryptInfo, DWORD dwFlags, void *pvReserved); 3477 typedef WINBOOL (WINAPI *PFN_CMSG_IMPORT_KEY_TRANS) (PCRYPT_ALGORITHM_IDENTIFIER pContentEncryptionAlgorithm, PCMSG_CTRL_KEY_TRANS_DECRYPT_PARA pKeyTransDecryptPara, DWORD dwFlags, void *pvReserved, HCRYPTKEY *phContentEncryptKey); 3478 typedef WINBOOL (WINAPI *PFN_CMSG_IMPORT_KEY_AGREE) (PCRYPT_ALGORITHM_IDENTIFIER pContentEncryptionAlgorithm, PCMSG_CTRL_KEY_AGREE_DECRYPT_PARA pKeyAgreeDecryptPara, DWORD dwFlags, void *pvReserved, HCRYPTKEY *phContentEncryptKey); 3479 typedef WINBOOL (WINAPI *PFN_CMSG_IMPORT_MAIL_LIST) (PCRYPT_ALGORITHM_IDENTIFIER pContentEncryptionAlgorithm, PCMSG_CTRL_MAIL_LIST_DECRYPT_PARA pMailListDecryptPara, DWORD dwFlags, void *pvReserved, HCRYPTKEY *phContentEncryptKey); 3480 3481 typedef struct _CMSG_CNG_CONTENT_DECRYPT_INFO { 3482 DWORD cbSize; 3483 CRYPT_ALGORITHM_IDENTIFIER ContentEncryptionAlgorithm; 3484 PFN_CMSG_ALLOC pfnAlloc; 3485 PFN_CMSG_FREE pfnFree; 3486 NCRYPT_KEY_HANDLE hNCryptKey; 3487 BYTE *pbContentEncryptKey; 3488 DWORD cbContentEncryptKey; 3489 BCRYPT_KEY_HANDLE hCNGContentEncryptKey; 3490 BYTE *pbCNGContentEncryptKeyObject; 3491 } CMSG_CNG_CONTENT_DECRYPT_INFO,*PCMSG_CNG_CONTENT_DECRYPT_INFO; 3492 3493 #define CMSG_OID_CNG_IMPORT_KEY_TRANS_FUNC "CryptMsgDllCNGImportKeyTrans" 3494 #define CMSG_OID_CNG_IMPORT_KEY_AGREE_FUNC "CryptMsgDllCNGImportKeyAgree" 3495 #define CMSG_OID_CNG_IMPORT_CONTENT_ENCRYPT_KEY_FUNC "CryptMsgDllCNGImportContentEncryptKey" 3496 3497 typedef WINBOOL (WINAPI *PFN_CMSG_CNG_IMPORT_KEY_TRANS) (PCMSG_CNG_CONTENT_DECRYPT_INFO pCNGContentDecryptInfo, PCMSG_CTRL_KEY_TRANS_DECRYPT_PARA pKeyTransDecryptPara, DWORD dwFlags, void *pvReserved); 3498 typedef WINBOOL (WINAPI *PFN_CMSG_CNG_IMPORT_KEY_AGREE) (PCMSG_CNG_CONTENT_DECRYPT_INFO pCNGContentDecryptInfo, PCMSG_CTRL_KEY_AGREE_DECRYPT_PARA pKeyAgreeDecryptPara, DWORD dwFlags, void *pvReserved); 3499 typedef WINBOOL (WINAPI *PFN_CMSG_CNG_IMPORT_CONTENT_ENCRYPT_KEY) (PCMSG_CNG_CONTENT_DECRYPT_INFO pCNGContentDecryptInfo, DWORD dwFlags, void *pvReserved); 3500 3501 #endif 3502 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_APP) 3503 typedef void *HCERTSTORE; 3504 3505 typedef struct _CERT_CONTEXT { 3506 DWORD dwCertEncodingType; 3507 BYTE *pbCertEncoded; 3508 DWORD cbCertEncoded; 3509 PCERT_INFO pCertInfo; 3510 HCERTSTORE hCertStore; 3511 } CERT_CONTEXT,*PCERT_CONTEXT; 3512 3513 typedef const CERT_CONTEXT *PCCERT_CONTEXT; 3514 #endif 3515 3516 typedef struct _CRL_CONTEXT { 3517 DWORD dwCertEncodingType; 3518 BYTE *pbCrlEncoded; 3519 DWORD cbCrlEncoded; 3520 PCRL_INFO pCrlInfo; 3521 HCERTSTORE hCertStore; 3522 } CRL_CONTEXT,*PCRL_CONTEXT; 3523 3524 typedef const CRL_CONTEXT *PCCRL_CONTEXT; 3525 3526 typedef struct _CTL_CONTEXT { 3527 DWORD dwMsgAndCertEncodingType; 3528 BYTE *pbCtlEncoded; 3529 DWORD cbCtlEncoded; 3530 PCTL_INFO pCtlInfo; 3531 HCERTSTORE hCertStore; 3532 HCRYPTMSG hCryptMsg; 3533 BYTE *pbCtlContent; 3534 DWORD cbCtlContent; 3535 } CTL_CONTEXT,*PCTL_CONTEXT; 3536 3537 typedef const CTL_CONTEXT *PCCTL_CONTEXT; 3538 3539 #define CERT_KEY_PROV_HANDLE_PROP_ID 1 3540 #define CERT_KEY_PROV_INFO_PROP_ID 2 3541 #define CERT_SHA1_HASH_PROP_ID 3 3542 #define CERT_MD5_HASH_PROP_ID 4 3543 #define CERT_HASH_PROP_ID CERT_SHA1_HASH_PROP_ID 3544 #define CERT_KEY_CONTEXT_PROP_ID 5 3545 #define CERT_KEY_SPEC_PROP_ID 6 3546 #define CERT_IE30_RESERVED_PROP_ID 7 3547 #define CERT_PUBKEY_HASH_RESERVED_PROP_ID 8 3548 #define CERT_ENHKEY_USAGE_PROP_ID 9 3549 #define CERT_CTL_USAGE_PROP_ID CERT_ENHKEY_USAGE_PROP_ID 3550 #define CERT_NEXT_UPDATE_LOCATION_PROP_ID 10 3551 #define CERT_FRIENDLY_NAME_PROP_ID 11 3552 #define CERT_PVK_FILE_PROP_ID 12 3553 #define CERT_DESCRIPTION_PROP_ID 13 3554 #define CERT_ACCESS_STATE_PROP_ID 14 3555 #define CERT_SIGNATURE_HASH_PROP_ID 15 3556 #define CERT_SMART_CARD_DATA_PROP_ID 16 3557 #define CERT_EFS_PROP_ID 17 3558 #define CERT_FORTEZZA_DATA_PROP_ID 18 3559 #define CERT_ARCHIVED_PROP_ID 19 3560 #define CERT_KEY_IDENTIFIER_PROP_ID 20 3561 #define CERT_AUTO_ENROLL_PROP_ID 21 3562 #define CERT_PUBKEY_ALG_PARA_PROP_ID 22 3563 #define CERT_CROSS_CERT_DIST_POINTS_PROP_ID 23 3564 #define CERT_ISSUER_PUBLIC_KEY_MD5_HASH_PROP_ID 24 3565 #define CERT_SUBJECT_PUBLIC_KEY_MD5_HASH_PROP_ID 25 3566 #define CERT_ENROLLMENT_PROP_ID 26 3567 #define CERT_DATE_STAMP_PROP_ID 27 3568 #define CERT_ISSUER_SERIAL_NUMBER_MD5_HASH_PROP_ID 28 3569 #define CERT_SUBJECT_NAME_MD5_HASH_PROP_ID 29 3570 #define CERT_EXTENDED_ERROR_INFO_PROP_ID 30 3571 #define CERT_RENEWAL_PROP_ID 64 3572 #define CERT_ARCHIVED_KEY_HASH_PROP_ID 65 3573 #define CERT_AUTO_ENROLL_RETRY_PROP_ID 66 3574 #define CERT_AIA_URL_RETRIEVED_PROP_ID 67 3575 #define CERT_AUTHORITY_INFO_ACCESS_PROP_ID 68 3576 #define CERT_BACKED_UP_PROP_ID 69 3577 #define CERT_OCSP_RESPONSE_PROP_ID 70 3578 #define CERT_REQUEST_ORIGINATOR_PROP_ID 71 3579 #define CERT_SOURCE_LOCATION_PROP_ID 72 3580 #define CERT_SOURCE_URL_PROP_ID 73 3581 #define CERT_NEW_KEY_PROP_ID 74 3582 #define CERT_OCSP_CACHE_PREFIX_PROP_ID 75 3583 #define CERT_SMART_CARD_ROOT_INFO_PROP_ID 76 3584 #define CERT_NO_AUTO_EXPIRE_CHECK_PROP_ID 77 3585 #define CERT_NCRYPT_KEY_HANDLE_PROP_ID 78 3586 #define CERT_HCRYPTPROV_OR_NCRYPT_KEY_HANDLE_PROP_ID 79 3587 #define CERT_SUBJECT_INFO_ACCESS_PROP_ID 80 3588 #define CERT_CA_OCSP_AUTHORITY_INFO_ACCESS_PROP_ID 81 3589 #define CERT_CA_DISABLE_CRL_PROP_ID 82 3590 #define CERT_ROOT_PROGRAM_CERT_POLICIES_PROP_ID 83 3591 #define CERT_ROOT_PROGRAM_NAME_CONSTRAINTS_PROP_ID 84 3592 #define CERT_SUBJECT_OCSP_AUTHORITY_INFO_ACCESS_PROP_ID 85 3593 #define CERT_SUBJECT_DISABLE_CRL_PROP_ID 86 3594 #define CERT_CEP_PROP_ID 87 3595 #define CERT_SIGN_HASH_CNG_ALG_PROP_ID 89 3596 #define CERT_SCARD_PIN_ID_PROP_ID 90 3597 #define CERT_SCARD_PIN_INFO_PROP_ID 91 3598 #define CERT_SUBJECT_PUB_KEY_BIT_LENGTH_PROP_ID 92 3599 #define CERT_PUB_KEY_CNG_ALG_BIT_LENGTH_PROP_ID 93 3600 #define CERT_ISSUER_PUB_KEY_BIT_LENGTH_PROP_ID 94 3601 #define CERT_ISSUER_CHAIN_SIGN_HASH_CNG_ALG_PROP_ID 95 3602 #define CERT_ISSUER_CHAIN_PUB_KEY_CNG_ALG_BIT_LENGTH_PROP_ID 96 3603 #define CERT_NO_EXPIRE_NOTIFICATION_PROP_ID 97 3604 #define CERT_AUTH_ROOT_SHA256_HASH_PROP_ID 98 3605 #define CERT_NCRYPT_KEY_HANDLE_TRANSFER_PROP_ID 99 3606 #define CERT_HCRYPTPROV_TRANSFER_PROP_ID 100 3607 #define CERT_SMART_CARD_READER_PROP_ID 101 3608 #define CERT_SEND_AS_TRUSTED_ISSUER_PROP_ID 102 3609 #define CERT_KEY_REPAIR_ATTEMPTED_PROP_ID 103 3610 #define CERT_DISALLOWED_FILETIME_PROP_ID 104 3611 #define CERT_ROOT_PROGRAM_CHAIN_POLICIES_PROP_ID 105 3612 #define CERT_SMART_CARD_READER_NON_REMOVABLE_PROP_ID 106 3613 3614 #define CERT_SHA256_HASH_PROP_ID 107 3615 3616 #define CERT_SCEP_SERVER_CERTS_PROP_ID 108 3617 #define CERT_SCEP_RA_SIGNATURE_CERT_PROP_ID 109 3618 #define CERT_SCEP_RA_ENCRYPTION_CERT_PROP_ID 110 3619 #define CERT_SCEP_CA_CERT_PROP_ID 111 3620 #define CERT_SCEP_SIGNER_CERT_PROP_ID 112 3621 #define CERT_SCEP_NONCE_PROP_ID 113 3622 3623 #define CERT_SCEP_ENCRYPT_HASH_CNG_ALG_PROP_ID 114 3624 #define CERT_SCEP_FLAGS_PROP_ID 115 3625 #define CERT_SCEP_GUID_PROP_ID 116 3626 #define CERT_SERIALIZABLE_KEY_CONTEXT_PROP_ID 117 3627 3628 #define CERT_ISOLATED_KEY_PROP_ID 118 3629 3630 #define CERT_SERIAL_CHAIN_PROP_ID 119 3631 #define CERT_KEY_CLASSIFICATION_PROP_ID 120 3632 3633 #define CERT_OCSP_MUST_STAPLE_PROP_ID 121 3634 3635 #define CERT_DISALLOWED_ENHKEY_USAGE_PROP_ID 122 3636 #define CERT_NONCOMPLIANT_ROOT_URL_PROP_ID 123 3637 3638 #define CERT_PIN_SHA256_HASH_PROP_ID 124 3639 #define CERT_CLR_DELETE_KEY_PROP_ID 125 3640 #define CERT_NOT_BEFORE_FILETIME_PROP_ID 126 3641 #define CERT_NOT_BEFORE_ENHKEY_USAGE_PROP_ID 127 3642 3643 #define CERT_FIRST_RESERVED_PROP_ID 107 3644 #define CERT_LAST_RESERVED_PROP_ID 0x00007fff 3645 #define CERT_FIRST_USER_PROP_ID 0x8000 3646 #define CERT_LAST_USER_PROP_ID 0x0000ffff 3647 3648 #if defined(__cplusplus) && __cplusplus >= 201103L && !defined(SORTPP_PASS) 3649 #define WINCRYPT_DWORD_CPP_ONLY : DWORD 3650 #else 3651 #define WINCRYPT_DWORD_CPP_ONLY 3652 #endif 3653 3654 typedef enum CertKeyType WINCRYPT_DWORD_CPP_ONLY { 3655 KeyTypeOther = 0, 3656 KeyTypeVirtualSmartCard = 1, 3657 KeyTypePhysicalSmartCard = 2, 3658 KeyTypePassport = 3, 3659 KeyTypePassportRemote = 4, 3660 KeyTypePassportSmartCard = 5, 3661 KeyTypeHardware = 6, 3662 KeyTypeSoftware = 7, 3663 KeyTypeSelfSigned = 8 3664 } CertKeyType; 3665 3666 #define IS_CERT_HASH_PROP_ID(X) (CERT_SHA1_HASH_PROP_ID == (X) || CERT_MD5_HASH_PROP_ID == (X) || CERT_SIGNATURE_HASH_PROP_ID == (X)) 3667 #define IS_PUBKEY_HASH_PROP_ID(X) (CERT_ISSUER_PUBLIC_KEY_MD5_HASH_PROP_ID == (X) || CERT_SUBJECT_PUBLIC_KEY_MD5_HASH_PROP_ID == (X)) 3668 #define IS_CHAIN_HASH_PROP_ID(X) (CERT_ISSUER_PUBLIC_KEY_MD5_HASH_PROP_ID == (X) || CERT_SUBJECT_PUBLIC_KEY_MD5_HASH_PROP_ID == (X) || CERT_ISSUER_SERIAL_NUMBER_MD5_HASH_PROP_ID == (X) || CERT_SUBJECT_NAME_MD5_HASH_PROP_ID == (X)) 3669 #define IS_STRONG_SIGN_PROP_ID(X) (CERT_SIGN_HASH_CNG_ALG_PROP_ID == (X) || CERT_SUBJECT_PUB_KEY_BIT_LENGTH_PROP_ID == (X) || CERT_PUB_KEY_CNG_ALG_BIT_LENGTH_PROP_ID == (X)) 3670 3671 #define szOID_CERT_PROP_ID_PREFIX "1.3.6.1.4.1.311.10.11." 3672 #define _szPROP_ID(PropId) #PropId 3673 #define szOID_CERT_PROP_ID(PropId) szOID_CERT_PROP_ID_PREFIX _szPROP_ID (PropId) 3674 3675 #define __CRYPT32WTEXT(quote) L##quote 3676 #define _CRYPT32WTEXT(quote) __CRYPT32WTEXT (quote) 3677 #define wszOID_CERT_PROP_ID(PropId) _CRYPT32WTEXT (szOID_CERT_PROP_ID_PREFIX) _CRYPT32WTEXT (_szPROP_ID (PropId)) 3678 3679 #define szOID_CERT_KEY_IDENTIFIER_PROP_ID "1.3.6.1.4.1.311.10.11.20" 3680 #define szOID_CERT_ISSUER_SERIAL_NUMBER_MD5_HASH_PROP_ID "1.3.6.1.4.1.311.10.11.28" 3681 #define szOID_CERT_SUBJECT_NAME_MD5_HASH_PROP_ID "1.3.6.1.4.1.311.10.11.29" 3682 #define szOID_CERT_MD5_HASH_PROP_ID "1.3.6.1.4.1.311.10.11.4" 3683 #define szOID_CERT_SIGNATURE_HASH_PROP_ID "1.3.6.1.4.1.311.10.11.15" 3684 #define szOID_DISALLOWED_HASH szOID_CERT_SIGNATURE_HASH_PROP_ID 3685 #define szOID_CERT_DISALLOWED_FILETIME_PROP_ID "1.3.6.1.4.1.311.10.11.104" 3686 3687 #define CERT_ACCESS_STATE_WRITE_PERSIST_FLAG 0x1 3688 #define CERT_ACCESS_STATE_SYSTEM_STORE_FLAG 0x2 3689 #define CERT_ACCESS_STATE_LM_SYSTEM_STORE_FLAG 0x4 3690 #define CERT_ACCESS_STATE_GP_SYSTEM_STORE_FLAG 0x8 3691 #define CERT_ACCESS_STATE_SHARED_USER_FLAG 0x10 3692 3693 #define szOID_ROOT_PROGRAM_AUTO_UPDATE_CA_REVOCATION "1.3.6.1.4.1.311.60.3.1" 3694 #define szOID_ROOT_PROGRAM_AUTO_UPDATE_END_REVOCATION "1.3.6.1.4.1.311.60.3.2" 3695 #define szOID_ROOT_PROGRAM_NO_OCSP_FAILOVER_TO_CRL "1.3.6.1.4.1.311.60.3.3" 3696 3697 typedef struct _CRYPT_KEY_PROV_PARAM { 3698 DWORD dwParam; 3699 BYTE *pbData; 3700 DWORD cbData; 3701 DWORD dwFlags; 3702 } CRYPT_KEY_PROV_PARAM,*PCRYPT_KEY_PROV_PARAM; 3703 3704 typedef struct _CRYPT_KEY_PROV_INFO { 3705 LPWSTR pwszContainerName; 3706 LPWSTR pwszProvName; 3707 DWORD dwProvType; 3708 DWORD dwFlags; 3709 DWORD cProvParam; 3710 PCRYPT_KEY_PROV_PARAM rgProvParam; 3711 DWORD dwKeySpec; 3712 } CRYPT_KEY_PROV_INFO,*PCRYPT_KEY_PROV_INFO; 3713 3714 #define CERT_SET_KEY_PROV_HANDLE_PROP_ID 0x1 3715 #define CERT_SET_KEY_CONTEXT_PROP_ID 0x1 3716 3717 #define CERT_NCRYPT_KEY_SPEC 0xffffffff 3718 3719 typedef struct _CERT_KEY_CONTEXT { 3720 DWORD cbSize; 3721 __C89_NAMELESS union { 3722 HCRYPTPROV hCryptProv; 3723 NCRYPT_KEY_HANDLE hNCryptKey; 3724 }; 3725 DWORD dwKeySpec; 3726 } CERT_KEY_CONTEXT,*PCERT_KEY_CONTEXT; 3727 3728 typedef struct _ROOT_INFO_LUID { 3729 DWORD LowPart; 3730 LONG HighPart; 3731 } ROOT_INFO_LUID,*PROOT_INFO_LUID; 3732 3733 typedef struct _CRYPT_SMART_CARD_ROOT_INFO { 3734 BYTE rgbCardID [16]; 3735 ROOT_INFO_LUID luid; 3736 } CRYPT_SMART_CARD_ROOT_INFO,*PCRYPT_SMART_CARD_ROOT_INFO; 3737 3738 #define CERT_STORE_PROV_MSG ((LPCSTR) 1) 3739 #define CERT_STORE_PROV_MEMORY ((LPCSTR) 2) 3740 #define CERT_STORE_PROV_FILE ((LPCSTR) 3) 3741 #define CERT_STORE_PROV_REG ((LPCSTR) 4) 3742 #define CERT_STORE_PROV_PKCS7 ((LPCSTR) 5) 3743 #define CERT_STORE_PROV_SERIALIZED ((LPCSTR) 6) 3744 #define CERT_STORE_PROV_FILENAME_A ((LPCSTR) 7) 3745 #define CERT_STORE_PROV_FILENAME_W ((LPCSTR) 8) 3746 #define CERT_STORE_PROV_FILENAME CERT_STORE_PROV_FILENAME_W 3747 #define CERT_STORE_PROV_SYSTEM_A ((LPCSTR) 9) 3748 #define CERT_STORE_PROV_SYSTEM_W ((LPCSTR) 10) 3749 #define CERT_STORE_PROV_SYSTEM CERT_STORE_PROV_SYSTEM_W 3750 #define CERT_STORE_PROV_COLLECTION ((LPCSTR) 11) 3751 #define CERT_STORE_PROV_SYSTEM_REGISTRY_A ((LPCSTR) 12) 3752 #define CERT_STORE_PROV_SYSTEM_REGISTRY_W ((LPCSTR) 13) 3753 #define CERT_STORE_PROV_SYSTEM_REGISTRY CERT_STORE_PROV_SYSTEM_REGISTRY_W 3754 #define CERT_STORE_PROV_PHYSICAL_W ((LPCSTR) 14) 3755 #define CERT_STORE_PROV_PHYSICAL CERT_STORE_PROV_PHYSICAL_W 3756 #define CERT_STORE_PROV_SMART_CARD_W ((LPCSTR) 15) 3757 #define CERT_STORE_PROV_SMART_CARD CERT_STORE_PROV_SMART_CARD_W 3758 #define CERT_STORE_PROV_LDAP_W ((LPCSTR) 16) 3759 #define CERT_STORE_PROV_LDAP CERT_STORE_PROV_LDAP_W 3760 #define CERT_STORE_PROV_PKCS12 ((LPCSTR) 17) 3761 3762 #define sz_CERT_STORE_PROV_MEMORY "Memory" 3763 #define sz_CERT_STORE_PROV_FILENAME_W "File" 3764 #define sz_CERT_STORE_PROV_FILENAME sz_CERT_STORE_PROV_FILENAME_W 3765 #define sz_CERT_STORE_PROV_SYSTEM_W "System" 3766 #define sz_CERT_STORE_PROV_SYSTEM sz_CERT_STORE_PROV_SYSTEM_W 3767 #define sz_CERT_STORE_PROV_PKCS7 "PKCS7" 3768 #define sz_CERT_STORE_PROV_PKCS12 "PKCS12" 3769 #define sz_CERT_STORE_PROV_SERIALIZED "Serialized" 3770 3771 #define sz_CERT_STORE_PROV_COLLECTION "Collection" 3772 #define sz_CERT_STORE_PROV_SYSTEM_REGISTRY_W "SystemRegistry" 3773 #define sz_CERT_STORE_PROV_SYSTEM_REGISTRY sz_CERT_STORE_PROV_SYSTEM_REGISTRY_W 3774 #define sz_CERT_STORE_PROV_PHYSICAL_W "Physical" 3775 #define sz_CERT_STORE_PROV_PHYSICAL sz_CERT_STORE_PROV_PHYSICAL_W 3776 3777 #define sz_CERT_STORE_PROV_SMART_CARD_W "SmartCard" 3778 #define sz_CERT_STORE_PROV_SMART_CARD sz_CERT_STORE_PROV_SMART_CARD_W 3779 3780 #define sz_CERT_STORE_PROV_LDAP_W "Ldap" 3781 #define sz_CERT_STORE_PROV_LDAP sz_CERT_STORE_PROV_LDAP_W 3782 3783 #define CERT_STORE_SIGNATURE_FLAG 0x1 3784 #define CERT_STORE_TIME_VALIDITY_FLAG 0x2 3785 #define CERT_STORE_REVOCATION_FLAG 0x4 3786 #define CERT_STORE_NO_CRL_FLAG 0x10000 3787 #define CERT_STORE_NO_ISSUER_FLAG 0x20000 3788 3789 #define CERT_STORE_BASE_CRL_FLAG 0x100 3790 #define CERT_STORE_DELTA_CRL_FLAG 0x200 3791 3792 #define CERT_STORE_NO_CRYPT_RELEASE_FLAG 0x1 3793 #define CERT_STORE_SET_LOCALIZED_NAME_FLAG 0x2 3794 #define CERT_STORE_DEFER_CLOSE_UNTIL_LAST_FREE_FLAG 0x4 3795 #define CERT_STORE_DELETE_FLAG 0x10 3796 #define CERT_STORE_UNSAFE_PHYSICAL_FLAG 0x20 3797 #define CERT_STORE_SHARE_STORE_FLAG 0x40 3798 #define CERT_STORE_SHARE_CONTEXT_FLAG 0x80 3799 #define CERT_STORE_MANIFOLD_FLAG 0x100 3800 #define CERT_STORE_ENUM_ARCHIVED_FLAG 0x200 3801 #define CERT_STORE_UPDATE_KEYID_FLAG 0x400 3802 #define CERT_STORE_BACKUP_RESTORE_FLAG 0x800 3803 #define CERT_STORE_READONLY_FLAG 0x8000 3804 #define CERT_STORE_OPEN_EXISTING_FLAG 0x4000 3805 #define CERT_STORE_CREATE_NEW_FLAG 0x2000 3806 #define CERT_STORE_MAXIMUM_ALLOWED_FLAG 0x1000 3807 3808 #define CERT_SYSTEM_STORE_MASK 0xffff0000 3809 3810 #define CERT_SYSTEM_STORE_RELOCATE_FLAG 0x80000000 3811 3812 typedef struct _CERT_SYSTEM_STORE_RELOCATE_PARA { 3813 __C89_NAMELESS union { 3814 HKEY hKeyBase; 3815 void *pvBase; 3816 }; 3817 __C89_NAMELESS union { 3818 void *pvSystemStore; 3819 LPCSTR pszSystemStore; 3820 LPCWSTR pwszSystemStore; 3821 }; 3822 } CERT_SYSTEM_STORE_RELOCATE_PARA,*PCERT_SYSTEM_STORE_RELOCATE_PARA; 3823 3824 #define CERT_SYSTEM_STORE_DEFER_READ_FLAG 0x20000000 3825 #define CERT_SYSTEM_STORE_UNPROTECTED_FLAG 0x40000000 3826 3827 #define CERT_SYSTEM_STORE_LOCATION_MASK 0x00ff0000 3828 #define CERT_SYSTEM_STORE_LOCATION_SHIFT 16 3829 3830 #define CERT_SYSTEM_STORE_CURRENT_USER_ID 1 3831 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_ID 2 3832 #define CERT_SYSTEM_STORE_CURRENT_SERVICE_ID 4 3833 #define CERT_SYSTEM_STORE_SERVICES_ID 5 3834 #define CERT_SYSTEM_STORE_USERS_ID 6 3835 #define CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY_ID 7 3836 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY_ID 8 3837 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE_ID 9 3838 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_WCOS_ID 10 3839 3840 #define CERT_SYSTEM_STORE_CURRENT_USER (CERT_SYSTEM_STORE_CURRENT_USER_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT) 3841 #define CERT_SYSTEM_STORE_LOCAL_MACHINE (CERT_SYSTEM_STORE_LOCAL_MACHINE_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT) 3842 #define CERT_SYSTEM_STORE_CURRENT_SERVICE (CERT_SYSTEM_STORE_CURRENT_SERVICE_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT) 3843 #define CERT_SYSTEM_STORE_SERVICES (CERT_SYSTEM_STORE_SERVICES_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT) 3844 #define CERT_SYSTEM_STORE_USERS (CERT_SYSTEM_STORE_USERS_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT) 3845 #define CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY (CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT) 3846 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY (CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT) 3847 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE (CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT) 3848 #define CERT_SYSTEM_STORE_LOCAL_MACHINE_WCOS (CERT_SYSTEM_STORE_LOCAL_MACHINE_WCOS_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT) 3849 3850 #define CERT_GROUP_POLICY_SYSTEM_STORE_REGPATH L"Software\\Policies\\Microsoft\\SystemCertificates" 3851 3852 #define CERT_EFSBLOB_REGPATH CERT_GROUP_POLICY_SYSTEM_STORE_REGPATH L"\\EFS" 3853 #define CERT_EFSBLOB_VALUE_NAME L"EFSBlob" 3854 3855 #define CERT_PROT_ROOT_FLAGS_REGPATH CERT_GROUP_POLICY_SYSTEM_STORE_REGPATH L"\\Root\\ProtectedRoots" 3856 #define CERT_PROT_ROOT_FLAGS_VALUE_NAME L"Flags" 3857 #define CERT_PROT_ROOT_DISABLE_CURRENT_USER_FLAG 0x1 3858 #define CERT_PROT_ROOT_INHIBIT_ADD_AT_INIT_FLAG 0x2 3859 #define CERT_PROT_ROOT_INHIBIT_PURGE_LM_FLAG 0x4 3860 #define CERT_PROT_ROOT_DISABLE_LM_AUTH_FLAG 0x8 3861 #define CERT_PROT_ROOT_ONLY_LM_GPT_FLAG 0x8 3862 #define CERT_PROT_ROOT_DISABLE_NT_AUTH_REQUIRED_FLAG 0x10 3863 #define CERT_PROT_ROOT_DISABLE_NOT_DEFINED_NAME_CONSTRAINT_FLAG 0x20 3864 #define CERT_PROT_ROOT_DISABLE_PEER_TRUST 0x10000 3865 #define CERT_PROT_ROOT_PEER_USAGES_VALUE_NAME L"PeerUsages" 3866 #define CERT_PROT_ROOT_PEER_USAGES_VALUE_NAME_A "PeerUsages" 3867 #define CERT_PROT_ROOT_PEER_USAGES_DEFAULT_A szOID_PKIX_KP_CLIENT_AUTH "\0" szOID_PKIX_KP_EMAIL_PROTECTION "\0" szOID_KP_EFS "\0" 3868 3869 #define CERT_TRUST_PUB_SAFER_GROUP_POLICY_REGPATH CERT_GROUP_POLICY_SYSTEM_STORE_REGPATH L"\\TrustedPublisher\\Safer" 3870 #define CERT_LOCAL_MACHINE_SYSTEM_STORE_REGPATH L"Software\\Microsoft\\SystemCertificates" 3871 #define CERT_TRUST_PUB_SAFER_LOCAL_MACHINE_REGPATH CERT_LOCAL_MACHINE_SYSTEM_STORE_REGPATH L"\\TrustedPublisher\\Safer" 3872 #define CERT_TRUST_PUB_AUTHENTICODE_FLAGS_VALUE_NAME L"AuthenticodeFlags" 3873 3874 #define CERT_TRUST_PUB_ALLOW_TRUST_MASK 0x3 3875 #define CERT_TRUST_PUB_ALLOW_END_USER_TRUST 0x0 3876 #define CERT_TRUST_PUB_ALLOW_MACHINE_ADMIN_TRUST 0x1 3877 #define CERT_TRUST_PUB_ALLOW_ENTERPRISE_ADMIN_TRUST 0x2 3878 #define CERT_TRUST_PUB_CHECK_PUBLISHER_REV_FLAG 0x100 3879 #define CERT_TRUST_PUB_CHECK_TIMESTAMP_REV_FLAG 0x200 3880 3881 #define CERT_OCM_SUBCOMPONENTS_LOCAL_MACHINE_REGPATH L"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OC Manager\\Subcomponents" 3882 #define CERT_OCM_SUBCOMPONENTS_ROOT_AUTO_UPDATE_VALUE_NAME L"RootAutoUpdate" 3883 3884 #define CERT_DISABLE_ROOT_AUTO_UPDATE_REGPATH CERT_GROUP_POLICY_SYSTEM_STORE_REGPATH L"\\AuthRoot" 3885 #define CERT_DISABLE_ROOT_AUTO_UPDATE_VALUE_NAME L"DisableRootAutoUpdate" 3886 3887 #define CERT_ENABLE_DISALLOWED_CERT_AUTO_UPDATE_VALUE_NAME L"EnableDisallowedCertAutoUpdate" 3888 3889 #define CERT_DISABLE_PIN_RULES_AUTO_UPDATE_VALUE_NAME L"DisablePinRulesAutoUpdate" 3890 3891 #define CERT_AUTO_UPDATE_LOCAL_MACHINE_REGPATH CERT_LOCAL_MACHINE_SYSTEM_STORE_REGPATH L"\\AuthRoot\\AutoUpdate" 3892 #define CERT_AUTO_UPDATE_ROOT_DIR_URL_VALUE_NAME L"RootDirUrl" 3893 3894 #define CERT_AUTO_UPDATE_SYNC_FROM_DIR_URL_VALUE_NAME L"SyncFromDirUrl" 3895 3896 #define CERT_AUTH_ROOT_AUTO_UPDATE_LOCAL_MACHINE_REGPATH CERT_AUTO_UPDATE_LOCAL_MACHINE_REGPATH 3897 #define CERT_AUTH_ROOT_AUTO_UPDATE_ROOT_DIR_URL_VALUE_NAME CERT_AUTO_UPDATE_ROOT_DIR_URL_VALUE_NAME 3898 #define CERT_AUTH_ROOT_AUTO_UPDATE_SYNC_DELTA_TIME_VALUE_NAME L"SyncDeltaTime" 3899 #define CERT_AUTH_ROOT_AUTO_UPDATE_FLAGS_VALUE_NAME L"Flags" 3900 #define CERT_AUTH_ROOT_AUTO_UPDATE_DISABLE_UNTRUSTED_ROOT_LOGGING_FLAG 0x1 3901 #define CERT_AUTH_ROOT_AUTO_UPDATE_DISABLE_PARTIAL_CHAIN_LOGGING_FLAG 0x2 3902 #define CERT_AUTO_UPDATE_DISABLE_RANDOM_QUERY_STRING_FLAG 0x4 3903 #define CERT_AUTH_ROOT_AUTO_UPDATE_LAST_SYNC_TIME_VALUE_NAME L"LastSyncTime" 3904 #define CERT_AUTH_ROOT_AUTO_UPDATE_ENCODED_CTL_VALUE_NAME L"EncodedCtl" 3905 #define CERT_AUTH_ROOT_CTL_FILENAME L"authroot.stl" 3906 #define CERT_AUTH_ROOT_CTL_FILENAME_A "authroot.stl" 3907 #define CERT_AUTH_ROOT_CAB_FILENAME L"authrootstl.cab" 3908 #define CERT_AUTH_ROOT_SEQ_FILENAME L"authrootseq.txt" 3909 #define CERT_AUTH_ROOT_CERT_EXT L".crt" 3910 3911 #define CERT_DISALLOWED_CERT_AUTO_UPDATE_SYNC_DELTA_TIME_VALUE_NAME L"DisallowedCertSyncDeltaTime" 3912 #define CERT_DISALLOWED_CERT_AUTO_UPDATE_LAST_SYNC_TIME_VALUE_NAME L"DisallowedCertLastSyncTime" 3913 #define CERT_DISALLOWED_CERT_AUTO_UPDATE_ENCODED_CTL_VALUE_NAME L"DisallowedCertEncodedCtl" 3914 #define CERT_DISALLOWED_CERT_CTL_FILENAME L"disallowedcert.stl" 3915 #define CERT_DISALLOWED_CERT_CTL_FILENAME_A "disallowedcert.stl" 3916 #define CERT_DISALLOWED_CERT_CAB_FILENAME L"disallowedcertstl.cab" 3917 #define CERT_DISALLOWED_CERT_AUTO_UPDATE_LIST_IDENTIFIER L"DisallowedCert_AutoUpdate_1" 3918 3919 #define CERT_PIN_RULES_AUTO_UPDATE_SYNC_DELTA_TIME_VALUE_NAME L"PinRulesSyncDeltaTime" 3920 #define CERT_PIN_RULES_AUTO_UPDATE_LAST_SYNC_TIME_VALUE_NAME L"PinRulesLastSyncTime" 3921 #define CERT_PIN_RULES_AUTO_UPDATE_ENCODED_CTL_VALUE_NAME L"PinRulesEncodedCtl" 3922 3923 #define CERT_PIN_RULES_CTL_FILENAME L"pinrules.stl" 3924 #define CERT_PIN_RULES_CTL_FILENAME_A "pinrules.stl" 3925 3926 #define CERT_PIN_RULES_CAB_FILENAME L"pinrulesstl.cab" 3927 3928 #define CERT_PIN_RULES_AUTO_UPDATE_LIST_IDENTIFIER L"PinRules_AutoUpdate_1" 3929 3930 #define CERT_REGISTRY_STORE_REMOTE_FLAG 0x10000 3931 #define CERT_REGISTRY_STORE_SERIALIZED_FLAG 0x20000 3932 #define CERT_REGISTRY_STORE_CLIENT_GPT_FLAG 0x80000000 3933 #define CERT_REGISTRY_STORE_LM_GPT_FLAG 0x1000000 3934 3935 typedef struct _CERT_REGISTRY_STORE_CLIENT_GPT_PARA { 3936 HKEY hKeyBase; 3937 LPWSTR pwszRegPath; 3938 } CERT_REGISTRY_STORE_CLIENT_GPT_PARA,*PCERT_REGISTRY_STORE_CLIENT_GPT_PARA; 3939 3940 #define CERT_REGISTRY_STORE_ROAMING_FLAG 0x40000 3941 3942 typedef struct _CERT_REGISTRY_STORE_ROAMING_PARA { 3943 HKEY hKey; 3944 LPWSTR pwszStoreDirectory; 3945 } CERT_REGISTRY_STORE_ROAMING_PARA,*PCERT_REGISTRY_STORE_ROAMING_PARA; 3946 3947 #define CERT_REGISTRY_STORE_MY_IE_DIRTY_FLAG 0x80000 3948 #define CERT_REGISTRY_STORE_EXTERNAL_FLAG 0x100000 3949 3950 #define CERT_IE_DIRTY_FLAGS_REGPATH L"Software\\Microsoft\\Cryptography\\IEDirtyFlags" 3951 3952 #define CERT_FILE_STORE_COMMIT_ENABLE_FLAG 0x10000 3953 #define CERT_LDAP_STORE_SIGN_FLAG 0x10000 3954 #define CERT_LDAP_STORE_AREC_EXCLUSIVE_FLAG 0x20000 3955 #define CERT_LDAP_STORE_OPENED_FLAG 0x40000 3956 3957 typedef struct _CERT_LDAP_STORE_OPENED_PARA { 3958 void *pvLdapSessionHandle; 3959 LPCWSTR pwszLdapUrl; 3960 } CERT_LDAP_STORE_OPENED_PARA,*PCERT_LDAP_STORE_OPENED_PARA; 3961 3962 #define CERT_LDAP_STORE_UNBIND_FLAG 0x80000 3963 3964 WINIMPM HCERTSTORE WINAPI CertOpenStore (LPCSTR lpszStoreProvider, DWORD dwEncodingType, HCRYPTPROV_LEGACY hCryptProv, DWORD dwFlags, const void *pvPara); 3965 3966 typedef void *HCERTSTOREPROV; 3967 3968 #define CRYPT_OID_OPEN_STORE_PROV_FUNC "CertDllOpenStoreProv" 3969 3970 typedef struct _CERT_STORE_PROV_INFO { 3971 DWORD cbSize; 3972 DWORD cStoreProvFunc; 3973 void **rgpvStoreProvFunc; 3974 HCERTSTOREPROV hStoreProv; 3975 DWORD dwStoreProvFlags; 3976 HCRYPTOIDFUNCADDR hStoreProvFuncAddr2; 3977 } CERT_STORE_PROV_INFO,*PCERT_STORE_PROV_INFO; 3978 3979 typedef WINBOOL (WINAPI *PFN_CERT_DLL_OPEN_STORE_PROV_FUNC) (LPCSTR lpszStoreProvider, DWORD dwEncodingType, HCRYPTPROV_LEGACY hCryptProv, DWORD dwFlags, const void *pvPara, HCERTSTORE hCertStore, PCERT_STORE_PROV_INFO pStoreProvInfo); 3980 3981 #define CERT_STORE_PROV_EXTERNAL_FLAG 0x1 3982 #define CERT_STORE_PROV_DELETED_FLAG 0x2 3983 #define CERT_STORE_PROV_NO_PERSIST_FLAG 0x4 3984 #define CERT_STORE_PROV_SYSTEM_STORE_FLAG 0x8 3985 #define CERT_STORE_PROV_LM_SYSTEM_STORE_FLAG 0x10 3986 #define CERT_STORE_PROV_GP_SYSTEM_STORE_FLAG 0x20 3987 #define CERT_STORE_PROV_SHARED_USER_FLAG 0x40 3988 3989 #define CERT_STORE_PROV_CLOSE_FUNC 0 3990 #define CERT_STORE_PROV_READ_CERT_FUNC 1 3991 #define CERT_STORE_PROV_WRITE_CERT_FUNC 2 3992 #define CERT_STORE_PROV_DELETE_CERT_FUNC 3 3993 #define CERT_STORE_PROV_SET_CERT_PROPERTY_FUNC 4 3994 #define CERT_STORE_PROV_READ_CRL_FUNC 5 3995 #define CERT_STORE_PROV_WRITE_CRL_FUNC 6 3996 #define CERT_STORE_PROV_DELETE_CRL_FUNC 7 3997 #define CERT_STORE_PROV_SET_CRL_PROPERTY_FUNC 8 3998 #define CERT_STORE_PROV_READ_CTL_FUNC 9 3999 #define CERT_STORE_PROV_WRITE_CTL_FUNC 10 4000 #define CERT_STORE_PROV_DELETE_CTL_FUNC 11 4001 #define CERT_STORE_PROV_SET_CTL_PROPERTY_FUNC 12 4002 #define CERT_STORE_PROV_CONTROL_FUNC 13 4003 #define CERT_STORE_PROV_FIND_CERT_FUNC 14 4004 #define CERT_STORE_PROV_FREE_FIND_CERT_FUNC 15 4005 #define CERT_STORE_PROV_GET_CERT_PROPERTY_FUNC 16 4006 #define CERT_STORE_PROV_FIND_CRL_FUNC 17 4007 #define CERT_STORE_PROV_FREE_FIND_CRL_FUNC 18 4008 #define CERT_STORE_PROV_GET_CRL_PROPERTY_FUNC 19 4009 #define CERT_STORE_PROV_FIND_CTL_FUNC 20 4010 #define CERT_STORE_PROV_FREE_FIND_CTL_FUNC 21 4011 #define CERT_STORE_PROV_GET_CTL_PROPERTY_FUNC 22 4012 4013 #define CERT_STORE_PROV_WRITE_ADD_FLAG 0x1 4014 4015 typedef void (WINAPI *PFN_CERT_STORE_PROV_CLOSE) (HCERTSTOREPROV hStoreProv, DWORD dwFlags); 4016 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_READ_CERT) (HCERTSTOREPROV hStoreProv, PCCERT_CONTEXT pStoreCertContext, DWORD dwFlags, PCCERT_CONTEXT *ppProvCertContext); 4017 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_WRITE_CERT) (HCERTSTOREPROV hStoreProv, PCCERT_CONTEXT pCertContext, DWORD dwFlags); 4018 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_DELETE_CERT) (HCERTSTOREPROV hStoreProv, PCCERT_CONTEXT pCertContext, DWORD dwFlags); 4019 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_SET_CERT_PROPERTY) (HCERTSTOREPROV hStoreProv, PCCERT_CONTEXT pCertContext, DWORD dwPropId, DWORD dwFlags, const void *pvData); 4020 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_READ_CRL) (HCERTSTOREPROV hStoreProv, PCCRL_CONTEXT pStoreCrlContext, DWORD dwFlags, PCCRL_CONTEXT *ppProvCrlContext); 4021 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_WRITE_CRL) (HCERTSTOREPROV hStoreProv, PCCRL_CONTEXT pCrlContext, DWORD dwFlags); 4022 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_DELETE_CRL) (HCERTSTOREPROV hStoreProv, PCCRL_CONTEXT pCrlContext, DWORD dwFlags); 4023 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_SET_CRL_PROPERTY) (HCERTSTOREPROV hStoreProv, PCCRL_CONTEXT pCrlContext, DWORD dwPropId, DWORD dwFlags, const void *pvData); 4024 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_READ_CTL) (HCERTSTOREPROV hStoreProv, PCCTL_CONTEXT pStoreCtlContext, DWORD dwFlags, PCCTL_CONTEXT *ppProvCtlContext); 4025 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_WRITE_CTL) (HCERTSTOREPROV hStoreProv, PCCTL_CONTEXT pCtlContext, DWORD dwFlags); 4026 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_DELETE_CTL) (HCERTSTOREPROV hStoreProv, PCCTL_CONTEXT pCtlContext, DWORD dwFlags); 4027 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_SET_CTL_PROPERTY) (HCERTSTOREPROV hStoreProv, PCCTL_CONTEXT pCtlContext, DWORD dwPropId, DWORD dwFlags, const void *pvData); 4028 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_CONTROL) (HCERTSTOREPROV hStoreProv, DWORD dwFlags, DWORD dwCtrlType, void const *pvCtrlPara); 4029 4030 typedef struct _CERT_STORE_PROV_FIND_INFO { 4031 DWORD cbSize; 4032 DWORD dwMsgAndCertEncodingType; 4033 DWORD dwFindFlags; 4034 DWORD dwFindType; 4035 const void *pvFindPara; 4036 } CERT_STORE_PROV_FIND_INFO,*PCERT_STORE_PROV_FIND_INFO; 4037 4038 typedef const CERT_STORE_PROV_FIND_INFO CCERT_STORE_PROV_FIND_INFO,*PCCERT_STORE_PROV_FIND_INFO; 4039 4040 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_FIND_CERT) (HCERTSTOREPROV hStoreProv, PCCERT_STORE_PROV_FIND_INFO pFindInfo, PCCERT_CONTEXT pPrevCertContext, DWORD dwFlags, void **ppvStoreProvFindInfo, PCCERT_CONTEXT *ppProvCertContext); 4041 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_FREE_FIND_CERT) (HCERTSTOREPROV hStoreProv, PCCERT_CONTEXT pCertContext, void *pvStoreProvFindInfo, DWORD dwFlags); 4042 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_GET_CERT_PROPERTY) (HCERTSTOREPROV hStoreProv, PCCERT_CONTEXT pCertContext, DWORD dwPropId, DWORD dwFlags, void *pvData, DWORD *pcbData); 4043 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_FIND_CRL) (HCERTSTOREPROV hStoreProv, PCCERT_STORE_PROV_FIND_INFO pFindInfo, PCCRL_CONTEXT pPrevCrlContext, DWORD dwFlags, void **ppvStoreProvFindInfo, PCCRL_CONTEXT *ppProvCrlContext); 4044 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_FREE_FIND_CRL) (HCERTSTOREPROV hStoreProv, PCCRL_CONTEXT pCrlContext, void *pvStoreProvFindInfo, DWORD dwFlags); 4045 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_GET_CRL_PROPERTY) (HCERTSTOREPROV hStoreProv, PCCRL_CONTEXT pCrlContext, DWORD dwPropId, DWORD dwFlags, void *pvData, DWORD *pcbData); 4046 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_FIND_CTL) (HCERTSTOREPROV hStoreProv, PCCERT_STORE_PROV_FIND_INFO pFindInfo, PCCTL_CONTEXT pPrevCtlContext, DWORD dwFlags, void **ppvStoreProvFindInfo, PCCTL_CONTEXT *ppProvCtlContext); 4047 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_FREE_FIND_CTL) (HCERTSTOREPROV hStoreProv, PCCTL_CONTEXT pCtlContext, void *pvStoreProvFindInfo, DWORD dwFlags); 4048 typedef WINBOOL (WINAPI *PFN_CERT_STORE_PROV_GET_CTL_PROPERTY) (HCERTSTOREPROV hStoreProv, PCCTL_CONTEXT pCtlContext, DWORD dwPropId, DWORD dwFlags, void *pvData, DWORD *pcbData); 4049 4050 WINIMPM HCERTSTORE WINAPI CertDuplicateStore (HCERTSTORE hCertStore); 4051 4052 #define CERT_STORE_SAVE_AS_STORE 1 4053 #define CERT_STORE_SAVE_AS_PKCS7 2 4054 #define CERT_STORE_SAVE_AS_PKCS12 3 4055 4056 #define CERT_STORE_SAVE_TO_FILE 1 4057 #define CERT_STORE_SAVE_TO_MEMORY 2 4058 #define CERT_STORE_SAVE_TO_FILENAME_A 3 4059 #define CERT_STORE_SAVE_TO_FILENAME_W 4 4060 #define CERT_STORE_SAVE_TO_FILENAME CERT_STORE_SAVE_TO_FILENAME_W 4061 4062 #define CERT_CLOSE_STORE_FORCE_FLAG 0x1 4063 #define CERT_CLOSE_STORE_CHECK_FLAG 0x2 4064 4065 WINIMPM WINBOOL WINAPI CertSaveStore (HCERTSTORE hCertStore, DWORD dwEncodingType, DWORD dwSaveAs, DWORD dwSaveTo, void *pvSaveToPara, DWORD dwFlags); 4066 WINIMPM WINBOOL WINAPI CertCloseStore (HCERTSTORE hCertStore, DWORD dwFlags); 4067 WINIMPM PCCERT_CONTEXT WINAPI CertGetSubjectCertificateFromStore (HCERTSTORE hCertStore, DWORD dwCertEncodingType, PCERT_INFO pCertId); 4068 WINIMPM PCCERT_CONTEXT WINAPI CertEnumCertificatesInStore (HCERTSTORE hCertStore, PCCERT_CONTEXT pPrevCertContext); 4069 WINIMPM PCCERT_CONTEXT WINAPI CertFindCertificateInStore (HCERTSTORE hCertStore, DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType, const void *pvFindPara, PCCERT_CONTEXT pPrevCertContext); 4070 4071 #define CERT_COMPARE_MASK 0xffff 4072 #define CERT_COMPARE_SHIFT 16 4073 #define CERT_COMPARE_ANY 0 4074 #define CERT_COMPARE_SHA1_HASH 1 4075 #define CERT_COMPARE_NAME 2 4076 #define CERT_COMPARE_ATTR 3 4077 #define CERT_COMPARE_MD5_HASH 4 4078 #define CERT_COMPARE_PROPERTY 5 4079 #define CERT_COMPARE_PUBLIC_KEY 6 4080 #define CERT_COMPARE_HASH CERT_COMPARE_SHA1_HASH 4081 #define CERT_COMPARE_NAME_STR_A 7 4082 #define CERT_COMPARE_NAME_STR_W 8 4083 #define CERT_COMPARE_KEY_SPEC 9 4084 #define CERT_COMPARE_ENHKEY_USAGE 10 4085 #define CERT_COMPARE_CTL_USAGE CERT_COMPARE_ENHKEY_USAGE 4086 #define CERT_COMPARE_SUBJECT_CERT 11 4087 #define CERT_COMPARE_ISSUER_OF 12 4088 #define CERT_COMPARE_EXISTING 13 4089 #define CERT_COMPARE_SIGNATURE_HASH 14 4090 #define CERT_COMPARE_KEY_IDENTIFIER 15 4091 #define CERT_COMPARE_CERT_ID 16 4092 #define CERT_COMPARE_CROSS_CERT_DIST_POINTS 17 4093 #define CERT_COMPARE_PUBKEY_MD5_HASH 18 4094 #define CERT_COMPARE_SUBJECT_INFO_ACCESS 19 4095 #define CERT_COMPARE_HASH_STR 20 4096 #define CERT_COMPARE_HAS_PRIVATE_KEY 21 4097 4098 #define CERT_FIND_ANY (CERT_COMPARE_ANY << CERT_COMPARE_SHIFT) 4099 #define CERT_FIND_SHA1_HASH (CERT_COMPARE_SHA1_HASH << CERT_COMPARE_SHIFT) 4100 #define CERT_FIND_MD5_HASH (CERT_COMPARE_MD5_HASH << CERT_COMPARE_SHIFT) 4101 #define CERT_FIND_SIGNATURE_HASH (CERT_COMPARE_SIGNATURE_HASH << CERT_COMPARE_SHIFT) 4102 #define CERT_FIND_KEY_IDENTIFIER (CERT_COMPARE_KEY_IDENTIFIER << CERT_COMPARE_SHIFT) 4103 #define CERT_FIND_HASH CERT_FIND_SHA1_HASH 4104 #define CERT_FIND_PROPERTY (CERT_COMPARE_PROPERTY << CERT_COMPARE_SHIFT) 4105 #define CERT_FIND_PUBLIC_KEY (CERT_COMPARE_PUBLIC_KEY << CERT_COMPARE_SHIFT) 4106 #define CERT_FIND_SUBJECT_NAME (CERT_COMPARE_NAME << CERT_COMPARE_SHIFT | CERT_INFO_SUBJECT_FLAG) 4107 #define CERT_FIND_SUBJECT_ATTR (CERT_COMPARE_ATTR << CERT_COMPARE_SHIFT | CERT_INFO_SUBJECT_FLAG) 4108 #define CERT_FIND_ISSUER_NAME (CERT_COMPARE_NAME << CERT_COMPARE_SHIFT | CERT_INFO_ISSUER_FLAG) 4109 #define CERT_FIND_ISSUER_ATTR (CERT_COMPARE_ATTR << CERT_COMPARE_SHIFT | CERT_INFO_ISSUER_FLAG) 4110 #define CERT_FIND_SUBJECT_STR_A (CERT_COMPARE_NAME_STR_A << CERT_COMPARE_SHIFT | CERT_INFO_SUBJECT_FLAG) 4111 #define CERT_FIND_SUBJECT_STR_W (CERT_COMPARE_NAME_STR_W << CERT_COMPARE_SHIFT | CERT_INFO_SUBJECT_FLAG) 4112 #define CERT_FIND_SUBJECT_STR CERT_FIND_SUBJECT_STR_W 4113 #define CERT_FIND_ISSUER_STR_A (CERT_COMPARE_NAME_STR_A << CERT_COMPARE_SHIFT | CERT_INFO_ISSUER_FLAG) 4114 #define CERT_FIND_ISSUER_STR_W (CERT_COMPARE_NAME_STR_W << CERT_COMPARE_SHIFT | CERT_INFO_ISSUER_FLAG) 4115 #define CERT_FIND_ISSUER_STR CERT_FIND_ISSUER_STR_W 4116 #define CERT_FIND_KEY_SPEC (CERT_COMPARE_KEY_SPEC << CERT_COMPARE_SHIFT) 4117 #define CERT_FIND_ENHKEY_USAGE (CERT_COMPARE_ENHKEY_USAGE << CERT_COMPARE_SHIFT) 4118 #define CERT_FIND_CTL_USAGE CERT_FIND_ENHKEY_USAGE 4119 #define CERT_FIND_SUBJECT_CERT (CERT_COMPARE_SUBJECT_CERT << CERT_COMPARE_SHIFT) 4120 #define CERT_FIND_ISSUER_OF (CERT_COMPARE_ISSUER_OF << CERT_COMPARE_SHIFT) 4121 #define CERT_FIND_EXISTING (CERT_COMPARE_EXISTING << CERT_COMPARE_SHIFT) 4122 #define CERT_FIND_CERT_ID (CERT_COMPARE_CERT_ID << CERT_COMPARE_SHIFT) 4123 #define CERT_FIND_CROSS_CERT_DIST_POINTS (CERT_COMPARE_CROSS_CERT_DIST_POINTS << CERT_COMPARE_SHIFT) 4124 #define CERT_FIND_PUBKEY_MD5_HASH (CERT_COMPARE_PUBKEY_MD5_HASH << CERT_COMPARE_SHIFT) 4125 #define CERT_FIND_SUBJECT_INFO_ACCESS (CERT_COMPARE_SUBJECT_INFO_ACCESS << CERT_COMPARE_SHIFT) 4126 #define CERT_FIND_HASH_STR (CERT_COMPARE_HASH_STR << CERT_COMPARE_SHIFT) 4127 #define CERT_FIND_HAS_PRIVATE_KEY (CERT_COMPARE_HAS_PRIVATE_KEY << CERT_COMPARE_SHIFT) 4128 4129 #define CERT_FIND_OPTIONAL_ENHKEY_USAGE_FLAG 0x1 4130 #define CERT_FIND_EXT_ONLY_ENHKEY_USAGE_FLAG 0x2 4131 #define CERT_FIND_PROP_ONLY_ENHKEY_USAGE_FLAG 0x4 4132 #define CERT_FIND_NO_ENHKEY_USAGE_FLAG 0x8 4133 #define CERT_FIND_OR_ENHKEY_USAGE_FLAG 0x10 4134 #define CERT_FIND_VALID_ENHKEY_USAGE_FLAG 0x20 4135 4136 #define CERT_FIND_OPTIONAL_CTL_USAGE_FLAG CERT_FIND_OPTIONAL_ENHKEY_USAGE_FLAG 4137 #define CERT_FIND_EXT_ONLY_CTL_USAGE_FLAG CERT_FIND_EXT_ONLY_ENHKEY_USAGE_FLAG 4138 #define CERT_FIND_PROP_ONLY_CTL_USAGE_FLAG CERT_FIND_PROP_ONLY_ENHKEY_USAGE_FLAG 4139 #define CERT_FIND_NO_CTL_USAGE_FLAG CERT_FIND_NO_ENHKEY_USAGE_FLAG 4140 #define CERT_FIND_OR_CTL_USAGE_FLAG CERT_FIND_OR_ENHKEY_USAGE_FLAG 4141 #define CERT_FIND_VALID_CTL_USAGE_FLAG CERT_FIND_VALID_ENHKEY_USAGE_FLAG 4142 4143 WINIMPM PCCERT_CONTEXT WINAPI CertGetIssuerCertificateFromStore (HCERTSTORE hCertStore, PCCERT_CONTEXT pSubjectContext, PCCERT_CONTEXT pPrevIssuerContext, DWORD *pdwFlags); 4144 WINIMPM WINBOOL WINAPI CertVerifySubjectCertificateContext (PCCERT_CONTEXT pSubject, PCCERT_CONTEXT pIssuer, DWORD *pdwFlags); 4145 WINIMPM PCCERT_CONTEXT WINAPI CertDuplicateCertificateContext (PCCERT_CONTEXT pCertContext); 4146 WINIMPM PCCERT_CONTEXT WINAPI CertCreateCertificateContext (DWORD dwCertEncodingType, const BYTE *pbCertEncoded, DWORD cbCertEncoded); 4147 WINIMPM WINBOOL WINAPI CertFreeCertificateContext (PCCERT_CONTEXT pCertContext); 4148 WINIMPM WINBOOL WINAPI CertSetCertificateContextProperty (PCCERT_CONTEXT pCertContext, DWORD dwPropId, DWORD dwFlags, const void *pvData); 4149 4150 typedef struct _CRL_FIND_ISSUED_FOR_PARA { 4151 PCCERT_CONTEXT pSubjectCert; 4152 PCCERT_CONTEXT pIssuerCert; 4153 } CRL_FIND_ISSUED_FOR_PARA,*PCRL_FIND_ISSUED_FOR_PARA; 4154 4155 typedef struct _CTL_ANY_SUBJECT_INFO { 4156 CRYPT_ALGORITHM_IDENTIFIER SubjectAlgorithm; 4157 CRYPT_DATA_BLOB SubjectIdentifier; 4158 } CTL_ANY_SUBJECT_INFO,*PCTL_ANY_SUBJECT_INFO; 4159 4160 #define CERT_SET_PROPERTY_INHIBIT_PERSIST_FLAG 0x40000000 4161 #define CERT_SET_PROPERTY_IGNORE_PERSIST_ERROR_FLAG 0x80000000 4162 4163 #define CTL_ENTRY_FROM_PROP_CHAIN_FLAG 0x1 4164 4165 #define CRL_FIND_ANY 0 4166 #define CRL_FIND_ISSUED_BY 1 4167 #define CRL_FIND_EXISTING 2 4168 #define CRL_FIND_ISSUED_FOR 3 4169 4170 #define CRL_FIND_ISSUED_BY_AKI_FLAG 0x1 4171 #define CRL_FIND_ISSUED_BY_SIGNATURE_FLAG 0x2 4172 #define CRL_FIND_ISSUED_BY_DELTA_FLAG 0x4 4173 #define CRL_FIND_ISSUED_BY_BASE_FLAG 0x8 4174 #define CRL_FIND_ISSUED_FOR_SET_STRONG_PROPERTIES_FLAG 0x10 4175 4176 #define CERT_STORE_ADD_NEW 1 4177 #define CERT_STORE_ADD_USE_EXISTING 2 4178 #define CERT_STORE_ADD_REPLACE_EXISTING 3 4179 #define CERT_STORE_ADD_ALWAYS 4 4180 #define CERT_STORE_ADD_REPLACE_EXISTING_INHERIT_PROPERTIES 5 4181 #define CERT_STORE_ADD_NEWER 6 4182 #define CERT_STORE_ADD_NEWER_INHERIT_PROPERTIES 7 4183 4184 #define CERT_STORE_CERTIFICATE_CONTEXT 1 4185 #define CERT_STORE_CRL_CONTEXT 2 4186 #define CERT_STORE_CTL_CONTEXT 3 4187 4188 #define CERT_STORE_ALL_CONTEXT_FLAG (~__MSABI_LONG(0U)) 4189 #define CERT_STORE_CERTIFICATE_CONTEXT_FLAG (1 << CERT_STORE_CERTIFICATE_CONTEXT) 4190 #define CERT_STORE_CRL_CONTEXT_FLAG (1 << CERT_STORE_CRL_CONTEXT) 4191 #define CERT_STORE_CTL_CONTEXT_FLAG (1 << CERT_STORE_CTL_CONTEXT) 4192 4193 #define CTL_ANY_SUBJECT_TYPE 1 4194 #define CTL_CERT_SUBJECT_TYPE 2 4195 4196 WINIMPM PCCRL_CONTEXT WINAPI CertEnumCRLsInStore (HCERTSTORE hCertStore, PCCRL_CONTEXT pPrevCrlContext); 4197 WINIMPM WINBOOL WINAPI CertDeleteCRLFromStore (PCCRL_CONTEXT pCrlContext); 4198 WINIMPM PCCRL_CONTEXT WINAPI CertDuplicateCRLContext (PCCRL_CONTEXT pCrlContext); 4199 WINIMPM PCCRL_CONTEXT WINAPI CertFindCRLInStore (HCERTSTORE hCertStore, DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType, const void *pvFindPara, PCCRL_CONTEXT pPrevCrlContext); 4200 WINIMPM WINBOOL WINAPI CertFreeCRLContext (PCCRL_CONTEXT pCrlContext); 4201 4202 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP) || _WIN32_WINNT >= 0x0A00 4203 WINIMPM WINBOOL WINAPI CertGetCertificateContextProperty (PCCERT_CONTEXT pCertContext, DWORD dwPropId, void *pvData, DWORD *pcbData); 4204 WINIMPM DWORD WINAPI CertEnumCertificateContextProperties (PCCERT_CONTEXT pCertContext, DWORD dwPropId); 4205 WINIMPM WINBOOL WINAPI CertDeleteCertificateFromStore (PCCERT_CONTEXT pCertContext); 4206 #endif 4207 4208 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP) 4209 WINIMPM WINBOOL WINAPI CertCreateCTLEntryFromCertificateContextProperties (PCCERT_CONTEXT pCertContext, DWORD cOptAttr, PCRYPT_ATTRIBUTE rgOptAttr, DWORD dwFlags, void *pvReserved, PCTL_ENTRY pCtlEntry, DWORD *pcbCtlEntry); 4210 WINIMPM WINBOOL WINAPI CertSetCertificateContextPropertiesFromCTLEntry (PCCERT_CONTEXT pCertContext, PCTL_ENTRY pCtlEntry, DWORD dwFlags); 4211 WINIMPM PCCRL_CONTEXT WINAPI CertGetCRLFromStore (HCERTSTORE hCertStore, PCCERT_CONTEXT pIssuerContext, PCCRL_CONTEXT pPrevCrlContext, DWORD *pdwFlags); 4212 WINIMPM PCCRL_CONTEXT WINAPI CertCreateCRLContext (DWORD dwCertEncodingType, const BYTE *pbCrlEncoded, DWORD cbCrlEncoded); 4213 WINIMPM WINBOOL WINAPI CertSetCRLContextProperty (PCCRL_CONTEXT pCrlContext, DWORD dwPropId, DWORD dwFlags, const void *pvData); 4214 WINIMPM WINBOOL WINAPI CertGetCRLContextProperty (PCCRL_CONTEXT pCrlContext, DWORD dwPropId, void *pvData, DWORD *pcbData); 4215 WINIMPM DWORD WINAPI CertEnumCRLContextProperties (PCCRL_CONTEXT pCrlContext, DWORD dwPropId); 4216 WINIMPM WINBOOL WINAPI CertFindCertificateInCRL (PCCERT_CONTEXT pCert, PCCRL_CONTEXT pCrlContext, DWORD dwFlags, void *pvReserved, PCRL_ENTRY *ppCrlEntry); 4217 WINIMPM WINBOOL WINAPI CertIsValidCRLForCertificate (PCCERT_CONTEXT pCert, PCCRL_CONTEXT pCrl, DWORD dwFlags, void *pvReserved); 4218 WINIMPM WINBOOL WINAPI CertAddEncodedCertificateToStore (HCERTSTORE hCertStore, DWORD dwCertEncodingType, const BYTE *pbCertEncoded, DWORD cbCertEncoded, DWORD dwAddDisposition, PCCERT_CONTEXT *ppCertContext); 4219 WINIMPM WINBOOL WINAPI CertAddCertificateContextToStore (HCERTSTORE hCertStore, PCCERT_CONTEXT pCertContext, DWORD dwAddDisposition, PCCERT_CONTEXT *ppStoreContext); 4220 WINIMPM WINBOOL WINAPI CertAddSerializedElementToStore (HCERTSTORE hCertStore, const BYTE *pbElement, DWORD cbElement, DWORD dwAddDisposition, DWORD dwFlags, DWORD dwContextTypeFlags, DWORD *pdwContextType, const void **ppvContext); 4221 WINIMPM WINBOOL WINAPI CertAddEncodedCRLToStore (HCERTSTORE hCertStore, DWORD dwCertEncodingType, const BYTE *pbCrlEncoded, DWORD cbCrlEncoded, DWORD dwAddDisposition, PCCRL_CONTEXT *ppCrlContext); 4222 WINIMPM WINBOOL WINAPI CertAddCRLContextToStore (HCERTSTORE hCertStore, PCCRL_CONTEXT pCrlContext, DWORD dwAddDisposition, PCCRL_CONTEXT *ppStoreContext); 4223 WINIMPM WINBOOL WINAPI CertSerializeCertificateStoreElement (PCCERT_CONTEXT pCertContext, DWORD dwFlags, BYTE *pbElement, DWORD *pcbElement); 4224 WINIMPM WINBOOL WINAPI CertSerializeCRLStoreElement (PCCRL_CONTEXT pCrlContext, DWORD dwFlags, BYTE *pbElement, DWORD *pcbElement); 4225 WINIMPM PCCTL_CONTEXT WINAPI CertDuplicateCTLContext (PCCTL_CONTEXT pCtlContext); 4226 WINIMPM PCCTL_CONTEXT WINAPI CertCreateCTLContext (DWORD dwMsgAndCertEncodingType, const BYTE *pbCtlEncoded, DWORD cbCtlEncoded); 4227 WINIMPM WINBOOL WINAPI CertFreeCTLContext (PCCTL_CONTEXT pCtlContext); 4228 WINIMPM WINBOOL WINAPI CertSetCTLContextProperty (PCCTL_CONTEXT pCtlContext, DWORD dwPropId, DWORD dwFlags, const void *pvData); 4229 WINIMPM WINBOOL WINAPI CertGetCTLContextProperty (PCCTL_CONTEXT pCtlContext, DWORD dwPropId, void *pvData, DWORD *pcbData); 4230 WINIMPM DWORD WINAPI CertEnumCTLContextProperties (PCCTL_CONTEXT pCtlContext, DWORD dwPropId); 4231 WINIMPM PCCTL_CONTEXT WINAPI CertEnumCTLsInStore (HCERTSTORE hCertStore, PCCTL_CONTEXT pPrevCtlContext); 4232 WINIMPM PCTL_ENTRY WINAPI CertFindSubjectInCTL (DWORD dwEncodingType, DWORD dwSubjectType, void *pvSubject, PCCTL_CONTEXT pCtlContext, DWORD dwFlags); 4233 WINIMPM PCCTL_CONTEXT WINAPI CertFindCTLInStore (HCERTSTORE hCertStore, DWORD dwMsgAndCertEncodingType, DWORD dwFindFlags, DWORD dwFindType, const void *pvFindPara, PCCTL_CONTEXT pPrevCtlContext); 4234 4235 #define CTL_FIND_ANY 0 4236 #define CTL_FIND_SHA1_HASH 1 4237 #define CTL_FIND_MD5_HASH 2 4238 #define CTL_FIND_USAGE 3 4239 #define CTL_FIND_SUBJECT 4 4240 #define CTL_FIND_EXISTING 5 4241 4242 #define CTL_FIND_SAME_USAGE_FLAG 0x1 4243 4244 #define CTL_FIND_NO_LIST_ID_CBDATA 0xffffffff 4245 #define CTL_FIND_NO_SIGNER_PTR ((PCERT_INFO) -1) 4246 4247 #define CERT_STORE_CTRL_RESYNC 1 4248 #define CERT_STORE_CTRL_NOTIFY_CHANGE 2 4249 #define CERT_STORE_CTRL_COMMIT 3 4250 #define CERT_STORE_CTRL_AUTO_RESYNC 4 4251 #define CERT_STORE_CTRL_CANCEL_NOTIFY 5 4252 4253 #define CERT_STORE_CTRL_INHIBIT_DUPLICATE_HANDLE_FLAG 0x1 4254 4255 #define CERT_STORE_CTRL_COMMIT_FORCE_FLAG 0x1 4256 #define CERT_STORE_CTRL_COMMIT_CLEAR_FLAG 0x2 4257 4258 #define CERT_STORE_LOCALIZED_NAME_PROP_ID 0x1000 4259 4260 #define CERT_CREATE_CONTEXT_NOCOPY_FLAG 0x1 4261 #define CERT_CREATE_CONTEXT_SORTED_FLAG 0x2 4262 #define CERT_CREATE_CONTEXT_NO_HCRYPTMSG_FLAG 0x4 4263 #define CERT_CREATE_CONTEXT_NO_ENTRY_FLAG 0x8 4264 4265 #define CERT_PHYSICAL_STORE_ADD_ENABLE_FLAG 0x1 4266 #define CERT_PHYSICAL_STORE_OPEN_DISABLE_FLAG 0x2 4267 #define CERT_PHYSICAL_STORE_REMOTE_OPEN_DISABLE_FLAG 0x4 4268 #define CERT_PHYSICAL_STORE_INSERT_COMPUTER_NAME_ENABLE_FLAG 0x8 4269 4270 typedef struct _CTL_FIND_USAGE_PARA { 4271 DWORD cbSize; 4272 CTL_USAGE SubjectUsage; 4273 CRYPT_DATA_BLOB ListIdentifier; 4274 PCERT_INFO pSigner; 4275 } CTL_FIND_USAGE_PARA,*PCTL_FIND_USAGE_PARA; 4276 4277 typedef struct _CTL_FIND_SUBJECT_PARA { 4278 DWORD cbSize; 4279 PCTL_FIND_USAGE_PARA pUsagePara; 4280 DWORD dwSubjectType; 4281 void *pvSubject; 4282 } CTL_FIND_SUBJECT_PARA,*PCTL_FIND_SUBJECT_PARA; 4283 4284 typedef WINBOOL (WINAPI *PFN_CERT_CREATE_CONTEXT_SORT_FUNC) (DWORD cbTotalEncoded, DWORD cbRemainEncoded, DWORD cEntry, void *pvSort); 4285 4286 typedef struct _CERT_CREATE_CONTEXT_PARA { 4287 DWORD cbSize; 4288 PFN_CRYPT_FREE pfnFree; 4289 void *pvFree; 4290 PFN_CERT_CREATE_CONTEXT_SORT_FUNC pfnSort; 4291 void *pvSort; 4292 } CERT_CREATE_CONTEXT_PARA,*PCERT_CREATE_CONTEXT_PARA; 4293 4294 typedef struct _CERT_SYSTEM_STORE_INFO { 4295 DWORD cbSize; 4296 } CERT_SYSTEM_STORE_INFO,*PCERT_SYSTEM_STORE_INFO; 4297 4298 typedef struct _CERT_PHYSICAL_STORE_INFO { 4299 DWORD cbSize; 4300 LPSTR pszOpenStoreProvider; 4301 DWORD dwOpenEncodingType; 4302 DWORD dwOpenFlags; 4303 CRYPT_DATA_BLOB OpenParameters; 4304 DWORD dwFlags; 4305 DWORD dwPriority; 4306 } CERT_PHYSICAL_STORE_INFO,*PCERT_PHYSICAL_STORE_INFO; 4307 4308 WINIMPM WINBOOL WINAPI CertAddEncodedCTLToStore (HCERTSTORE hCertStore, DWORD dwMsgAndCertEncodingType, const BYTE *pbCtlEncoded, DWORD cbCtlEncoded, DWORD dwAddDisposition, PCCTL_CONTEXT *ppCtlContext); 4309 WINIMPM WINBOOL WINAPI CertAddCTLContextToStore (HCERTSTORE hCertStore, PCCTL_CONTEXT pCtlContext, DWORD dwAddDisposition, PCCTL_CONTEXT *ppStoreContext); 4310 WINIMPM WINBOOL WINAPI CertSerializeCTLStoreElement (PCCTL_CONTEXT pCtlContext, DWORD dwFlags, BYTE *pbElement, DWORD *pcbElement); 4311 WINIMPM WINBOOL WINAPI CertDeleteCTLFromStore (PCCTL_CONTEXT pCtlContext); 4312 WINIMPM WINBOOL WINAPI CertAddCertificateLinkToStore (HCERTSTORE hCertStore, PCCERT_CONTEXT pCertContext, DWORD dwAddDisposition, PCCERT_CONTEXT *ppStoreContext); 4313 WINIMPM WINBOOL WINAPI CertAddCRLLinkToStore (HCERTSTORE hCertStore, PCCRL_CONTEXT pCrlContext, DWORD dwAddDisposition, PCCRL_CONTEXT *ppStoreContext); 4314 WINIMPM WINBOOL WINAPI CertAddCTLLinkToStore (HCERTSTORE hCertStore, PCCTL_CONTEXT pCtlContext, DWORD dwAddDisposition, PCCTL_CONTEXT *ppStoreContext); 4315 WINIMPM WINBOOL WINAPI CertAddStoreToCollection (HCERTSTORE hCollectionStore, HCERTSTORE hSiblingStore, DWORD dwUpdateFlags, DWORD dwPriority); 4316 WINIMPM void WINAPI CertRemoveStoreFromCollection (HCERTSTORE hCollectionStore, HCERTSTORE hSiblingStore); 4317 WINIMPM WINBOOL WINAPI CertControlStore (HCERTSTORE hCertStore, DWORD dwFlags, DWORD dwCtrlType, void const *pvCtrlPara); 4318 WINIMPM WINBOOL WINAPI CertSetStoreProperty (HCERTSTORE hCertStore, DWORD dwPropId, DWORD dwFlags, const void *pvData); 4319 WINIMPM WINBOOL WINAPI CertGetStoreProperty (HCERTSTORE hCertStore, DWORD dwPropId, void *pvData, DWORD *pcbData); 4320 WINIMPM const void *WINAPI CertCreateContext (DWORD dwContextType, DWORD dwEncodingType, const BYTE *pbEncoded, DWORD cbEncoded, DWORD dwFlags, PCERT_CREATE_CONTEXT_PARA pCreatePara); 4321 WINIMPM WINBOOL WINAPI CertRegisterSystemStore (const void *pvSystemStore, DWORD dwFlags, PCERT_SYSTEM_STORE_INFO pStoreInfo, void *pvReserved); 4322 WINIMPM WINBOOL WINAPI CertRegisterPhysicalStore (const void *pvSystemStore, DWORD dwFlags, LPCWSTR pwszStoreName, PCERT_PHYSICAL_STORE_INFO pStoreInfo, void *pvReserved); 4323 WINIMPM WINBOOL WINAPI CertUnregisterSystemStore (const void *pvSystemStore, DWORD dwFlags); 4324 WINIMPM WINBOOL WINAPI CertUnregisterPhysicalStore (const void *pvSystemStore, DWORD dwFlags, LPCWSTR pwszStoreName); 4325 4326 typedef WINBOOL (WINAPI *PFN_CERT_ENUM_SYSTEM_STORE_LOCATION) (LPCWSTR pwszStoreLocation, DWORD dwFlags, void *pvReserved, void *pvArg); 4327 typedef WINBOOL (WINAPI *PFN_CERT_ENUM_SYSTEM_STORE) (const void *pvSystemStore, DWORD dwFlags, PCERT_SYSTEM_STORE_INFO pStoreInfo, void *pvReserved, void *pvArg); 4328 typedef WINBOOL (WINAPI *PFN_CERT_ENUM_PHYSICAL_STORE) (const void *pvSystemStore, DWORD dwFlags, LPCWSTR pwszStoreName, PCERT_PHYSICAL_STORE_INFO pStoreInfo, void *pvReserved, void *pvArg); 4329 4330 #define CERT_PHYSICAL_STORE_PREDEFINED_ENUM_FLAG 0x1 4331 4332 #define CERT_PHYSICAL_STORE_DEFAULT_NAME L".Default" 4333 #define CERT_PHYSICAL_STORE_GROUP_POLICY_NAME L".GroupPolicy" 4334 #define CERT_PHYSICAL_STORE_LOCAL_MACHINE_NAME L".LocalMachine" 4335 #define CERT_PHYSICAL_STORE_DS_USER_CERTIFICATE_NAME L".UserCertificate" 4336 #define CERT_PHYSICAL_STORE_LOCAL_MACHINE_GROUP_POLICY_NAME L".LocalMachineGroupPolicy" 4337 #define CERT_PHYSICAL_STORE_ENTERPRISE_NAME L".Enterprise" 4338 #define CERT_PHYSICAL_STORE_AUTH_ROOT_NAME L".AuthRoot" 4339 #define CERT_PHYSICAL_STORE_SMART_CARD_NAME L".SmartCard" 4340 4341 WINIMPM WINBOOL WINAPI CertEnumSystemStoreLocation (DWORD dwFlags, void *pvArg, PFN_CERT_ENUM_SYSTEM_STORE_LOCATION pfnEnum); 4342 WINIMPM WINBOOL WINAPI CertEnumSystemStore (DWORD dwFlags, void *pvSystemStoreLocationPara, void *pvArg, PFN_CERT_ENUM_SYSTEM_STORE pfnEnum); 4343 WINIMPM WINBOOL WINAPI CertEnumPhysicalStore (const void *pvSystemStore, DWORD dwFlags, void *pvArg, PFN_CERT_ENUM_PHYSICAL_STORE pfnEnum); 4344 4345 #define CRYPT_OID_OPEN_SYSTEM_STORE_PROV_FUNC "CertDllOpenSystemStoreProv" 4346 #define CRYPT_OID_REGISTER_SYSTEM_STORE_FUNC "CertDllRegisterSystemStore" 4347 #define CRYPT_OID_UNREGISTER_SYSTEM_STORE_FUNC "CertDllUnregisterSystemStore" 4348 #define CRYPT_OID_ENUM_SYSTEM_STORE_FUNC "CertDllEnumSystemStore" 4349 #define CRYPT_OID_REGISTER_PHYSICAL_STORE_FUNC "CertDllRegisterPhysicalStore" 4350 #define CRYPT_OID_UNREGISTER_PHYSICAL_STORE_FUNC "CertDllUnregisterPhysicalStore" 4351 #define CRYPT_OID_ENUM_PHYSICAL_STORE_FUNC "CertDllEnumPhysicalStore" 4352 #define CRYPT_OID_SYSTEM_STORE_LOCATION_VALUE_NAME L"SystemStoreLocation" 4353 4354 #define CMSG_TRUSTED_SIGNER_FLAG 0x1 4355 #define CMSG_SIGNER_ONLY_FLAG 0x2 4356 #define CMSG_USE_SIGNER_INDEX_FLAG 0x4 4357 #define CMSG_CMS_ENCAPSULATED_CTL_FLAG 0x8000 4358 4359 #define CMSG_ENCODE_SORTED_CTL_FLAG 0x1 4360 #define CMSG_ENCODE_HASHED_SUBJECT_IDENTIFIER_FLAG 0x2 4361 4362 WINIMPM WINBOOL WINAPI CertGetEnhancedKeyUsage (PCCERT_CONTEXT pCertContext, DWORD dwFlags, PCERT_ENHKEY_USAGE pUsage, DWORD *pcbUsage); 4363 WINIMPM WINBOOL WINAPI CertSetEnhancedKeyUsage (PCCERT_CONTEXT pCertContext, PCERT_ENHKEY_USAGE pUsage); 4364 WINIMPM WINBOOL WINAPI CertAddEnhancedKeyUsageIdentifier (PCCERT_CONTEXT pCertContext, LPCSTR pszUsageIdentifier); 4365 WINIMPM WINBOOL WINAPI CertRemoveEnhancedKeyUsageIdentifier (PCCERT_CONTEXT pCertContext, LPCSTR pszUsageIdentifier); 4366 WINIMPM WINBOOL WINAPI CertGetValidUsages (DWORD cCerts, PCCERT_CONTEXT *rghCerts, int *cNumOIDs, LPSTR *rghOIDs, DWORD *pcbOIDs); 4367 WINIMPM WINBOOL WINAPI CryptMsgGetAndVerifySigner (HCRYPTMSG hCryptMsg, DWORD cSignerStore, HCERTSTORE *rghSignerStore, DWORD dwFlags, PCCERT_CONTEXT *ppSigner, DWORD *pdwSignerIndex); 4368 WINIMPM WINBOOL WINAPI CryptMsgSignCTL (DWORD dwMsgEncodingType, BYTE *pbCtlContent, DWORD cbCtlContent, PCMSG_SIGNED_ENCODE_INFO pSignInfo, DWORD dwFlags, BYTE *pbEncoded, DWORD *pcbEncoded); 4369 WINIMPM WINBOOL WINAPI CryptMsgEncodeAndSignCTL (DWORD dwMsgEncodingType, PCTL_INFO pCtlInfo, PCMSG_SIGNED_ENCODE_INFO pSignInfo, DWORD dwFlags, BYTE *pbEncoded, DWORD *pcbEncoded); 4370 WINIMPM WINBOOL WINAPI CertFindSubjectInSortedCTL (PCRYPT_DATA_BLOB pSubjectIdentifier, PCCTL_CONTEXT pCtlContext, DWORD dwFlags, void *pvReserved, PCRYPT_DER_BLOB pEncodedAttributes); 4371 WINIMPM WINBOOL WINAPI CertEnumSubjectInSortedCTL (PCCTL_CONTEXT pCtlContext, void **ppvNextSubject, PCRYPT_DER_BLOB pSubjectIdentifier, PCRYPT_DER_BLOB pEncodedAttributes); 4372 4373 typedef struct _CTL_VERIFY_USAGE_PARA { 4374 DWORD cbSize; 4375 CRYPT_DATA_BLOB ListIdentifier; 4376 DWORD cCtlStore; 4377 HCERTSTORE *rghCtlStore; 4378 DWORD cSignerStore; 4379 HCERTSTORE *rghSignerStore; 4380 } CTL_VERIFY_USAGE_PARA,*PCTL_VERIFY_USAGE_PARA; 4381 4382 typedef struct _CTL_VERIFY_USAGE_STATUS { 4383 DWORD cbSize; 4384 DWORD dwError; 4385 DWORD dwFlags; 4386 PCCTL_CONTEXT *ppCtl; 4387 DWORD dwCtlEntryIndex; 4388 PCCERT_CONTEXT *ppSigner; 4389 DWORD dwSignerIndex; 4390 } CTL_VERIFY_USAGE_STATUS,*PCTL_VERIFY_USAGE_STATUS; 4391 4392 #define CERT_VERIFY_INHIBIT_CTL_UPDATE_FLAG 0x1 4393 #define CERT_VERIFY_TRUSTED_SIGNERS_FLAG 0x2 4394 #define CERT_VERIFY_NO_TIME_CHECK_FLAG 0x4 4395 #define CERT_VERIFY_ALLOW_MORE_USAGE_FLAG 0x8 4396 4397 #define CERT_VERIFY_UPDATED_CTL_FLAG 0x1 4398 4399 WINIMPM WINBOOL WINAPI CertVerifyCTLUsage (DWORD dwEncodingType, DWORD dwSubjectType, void *pvSubject, PCTL_USAGE pSubjectUsage, DWORD dwFlags, PCTL_VERIFY_USAGE_PARA pVerifyUsagePara, PCTL_VERIFY_USAGE_STATUS pVerifyUsageStatus); 4400 4401 typedef struct _CERT_REVOCATION_CRL_INFO { 4402 DWORD cbSize; 4403 PCCRL_CONTEXT pBaseCrlContext; 4404 PCCRL_CONTEXT pDeltaCrlContext; 4405 PCRL_ENTRY pCrlEntry; 4406 WINBOOL fDeltaCrlEntry; 4407 } CERT_REVOCATION_CRL_INFO,*PCERT_REVOCATION_CRL_INFO; 4408 4409 typedef struct _CERT_REVOCATION_CHAIN_PARA CERT_REVOCATION_CHAIN_PARA,*PCERT_REVOCATION_CHAIN_PARA; 4410 4411 typedef struct _CERT_REVOCATION_PARA { 4412 DWORD cbSize; 4413 PCCERT_CONTEXT pIssuerCert; 4414 DWORD cCertStore; 4415 HCERTSTORE *rgCertStore; 4416 HCERTSTORE hCrlStore; 4417 LPFILETIME pftTimeToUse; 4418 #ifdef CERT_REVOCATION_PARA_HAS_EXTRA_FIELDS 4419 DWORD dwUrlRetrievalTimeout; 4420 WINBOOL fCheckFreshnessTime; 4421 DWORD dwFreshnessTime; 4422 LPFILETIME pftCurrentTime; 4423 PCERT_REVOCATION_CRL_INFO pCrlInfo; 4424 LPFILETIME pftCacheResync; 4425 PCERT_REVOCATION_CHAIN_PARA pChainPara; 4426 #endif 4427 } CERT_REVOCATION_PARA,*PCERT_REVOCATION_PARA; 4428 4429 typedef struct _CERT_REVOCATION_STATUS { 4430 DWORD cbSize; 4431 DWORD dwIndex; 4432 DWORD dwError; 4433 DWORD dwReason; 4434 WINBOOL fHasFreshnessTime; 4435 DWORD dwFreshnessTime; 4436 } CERT_REVOCATION_STATUS,*PCERT_REVOCATION_STATUS; 4437 4438 #define CERT_CONTEXT_REVOCATION_TYPE 1 4439 4440 #define CERT_VERIFY_REV_CHAIN_FLAG 0x1 4441 #define CERT_VERIFY_CACHE_ONLY_BASED_REVOCATION 0x2 4442 #define CERT_VERIFY_REV_ACCUMULATIVE_TIMEOUT_FLAG 0x4 4443 #define CERT_VERIFY_REV_SERVER_OCSP_FLAG 0x8 4444 #define CERT_VERIFY_REV_NO_OCSP_FAILOVER_TO_CRL_FLAG 0x10 4445 4446 #define CERT_UNICODE_IS_RDN_ATTRS_FLAG 0x1 4447 #define CERT_CASE_INSENSITIVE_IS_RDN_ATTRS_FLAG 0x2 4448 4449 #define CRYPT_VERIFY_CERT_SIGN_SUBJECT_BLOB 1 4450 #define CRYPT_VERIFY_CERT_SIGN_SUBJECT_CERT 2 4451 #define CRYPT_VERIFY_CERT_SIGN_SUBJECT_CRL 3 4452 #define CRYPT_VERIFY_CERT_SIGN_SUBJECT_OCSP_BASIC_SIGNED_RESPONSE 4 4453 4454 #define CRYPT_VERIFY_CERT_SIGN_ISSUER_PUBKEY 1 4455 #define CRYPT_VERIFY_CERT_SIGN_ISSUER_CERT 2 4456 #define CRYPT_VERIFY_CERT_SIGN_ISSUER_CHAIN 3 4457 #define CRYPT_VERIFY_CERT_SIGN_ISSUER_NULL 4 4458 4459 #define CRYPT_VERIFY_CERT_SIGN_DISABLE_MD2_MD4_FLAG 0x1 4460 #define CRYPT_VERIFY_CERT_SIGN_SET_STRONG_PROPERTIES_FLAG 0x2 4461 #define CRYPT_VERIFY_CERT_SIGN_RETURN_STRONG_PROPERTIES_FLAG 0x4 4462 4463 #define CRYPT_OID_EXTRACT_ENCODED_SIGNATURE_PARAMETERS_FUNC "CryptDllExtractEncodedSignatureParameters" 4464 #define CRYPT_OID_SIGN_AND_ENCODE_HASH_FUNC "CryptDllSignAndEncodeHash" 4465 #define CRYPT_OID_VERIFY_ENCODED_SIGNATURE_FUNC "CryptDllVerifyEncodedSignature" 4466 4467 #define CRYPT_DEFAULT_CONTEXT_AUTO_RELEASE_FLAG 0x1 4468 #define CRYPT_DEFAULT_CONTEXT_PROCESS_FLAG 0x2 4469 4470 #define CRYPT_DEFAULT_CONTEXT_CERT_SIGN_OID 1 4471 #define CRYPT_DEFAULT_CONTEXT_MULTI_CERT_SIGN_OID 2 4472 4473 typedef struct _CRYPT_VERIFY_CERT_SIGN_STRONG_PROPERTIES_INFO { 4474 CRYPT_DATA_BLOB CertSignHashCNGAlgPropData; 4475 CRYPT_DATA_BLOB CertIssuerPubKeyBitLengthPropData; 4476 } CRYPT_VERIFY_CERT_SIGN_STRONG_PROPERTIES_INFO, *PCRYPT_VERIFY_CERT_SIGN_STRONG_PROPERTIES_INFO; 4477 4478 typedef WINBOOL (WINAPI *PFN_CRYPT_EXTRACT_ENCODED_SIGNATURE_PARAMETERS_FUNC) (DWORD dwCertEncodingType, PCRYPT_ALGORITHM_IDENTIFIER pSignatureAlgorithm, void **ppvDecodedSignPara, LPWSTR *ppwszCNGHashAlgid); 4479 typedef WINBOOL (WINAPI *PFN_CRYPT_SIGN_AND_ENCODE_HASH_FUNC) (NCRYPT_KEY_HANDLE hKey, DWORD dwCertEncodingType, PCRYPT_ALGORITHM_IDENTIFIER pSignatureAlgorithm, void *pvDecodedSignPara, LPCWSTR pwszCNGPubKeyAlgid, LPCWSTR pwszCNGHashAlgid, BYTE *pbComputedHash, DWORD cbComputedHash, BYTE *pbSignature, DWORD *pcbSignature); 4480 typedef WINBOOL (WINAPI *PFN_CRYPT_VERIFY_ENCODED_SIGNATURE_FUNC) (DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pPubKeyInfo, PCRYPT_ALGORITHM_IDENTIFIER pSignatureAlgorithm, void *pvDecodedSignPara, LPCWSTR pwszCNGPubKeyAlgid, LPCWSTR pwszCNGHashAlgid, BYTE *pbComputedHash, DWORD cbComputedHash, BYTE *pbSignature, DWORD cbSignature); 4481 4482 typedef void *HCRYPTDEFAULTCONTEXT; 4483 4484 typedef struct _CRYPT_DEFAULT_CONTEXT_MULTI_OID_PARA { 4485 DWORD cOID; 4486 LPSTR *rgpszOID; 4487 } CRYPT_DEFAULT_CONTEXT_MULTI_OID_PARA,*PCRYPT_DEFAULT_CONTEXT_MULTI_OID_PARA; 4488 4489 WINIMPM WINBOOL WINAPI CertVerifyRevocation (DWORD dwEncodingType, DWORD dwRevType, DWORD cContext, PVOID rgpvContext[], DWORD dwFlags, PCERT_REVOCATION_PARA pRevPara, PCERT_REVOCATION_STATUS pRevStatus); 4490 WINBOOL WINAPI CertCompareIntegerBlob (PCRYPT_INTEGER_BLOB pInt1, PCRYPT_INTEGER_BLOB pInt2); 4491 WINIMPM WINBOOL WINAPI CertCompareCertificate (DWORD dwCertEncodingType, PCERT_INFO pCertId1, PCERT_INFO pCertId2); 4492 WINIMPM WINBOOL WINAPI CertCompareCertificateName (DWORD dwCertEncodingType, PCERT_NAME_BLOB pCertName1, PCERT_NAME_BLOB pCertName2); 4493 WINIMPM WINBOOL WINAPI CertIsRDNAttrsInCertificateName (DWORD dwCertEncodingType, DWORD dwFlags, PCERT_NAME_BLOB pCertName, PCERT_RDN pRDN); 4494 WINIMPM WINBOOL WINAPI CertComparePublicKeyInfo (DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pPublicKey1, PCERT_PUBLIC_KEY_INFO pPublicKey2); 4495 WINIMPM DWORD WINAPI CertGetPublicKeyLength (DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pPublicKey); 4496 WINIMPM WINBOOL WINAPI CryptVerifyCertificateSignature (HCRYPTPROV_LEGACY hCryptProv, DWORD dwCertEncodingType, const BYTE *pbEncoded, DWORD cbEncoded, PCERT_PUBLIC_KEY_INFO pPublicKey); 4497 WINIMPM WINBOOL WINAPI CryptVerifyCertificateSignatureEx (HCRYPTPROV_LEGACY hCryptProv, DWORD dwCertEncodingType, DWORD dwSubjectType, void *pvSubject, DWORD dwIssuerType, void *pvIssuer, DWORD dwFlags, void *pvExtra); 4498 WINIMPM WINBOOL WINAPI CertIsStrongHashToSign (PCCERT_STRONG_SIGN_PARA pStrongSignPara, LPCWSTR pwszCNGHashAlgid, PCCERT_CONTEXT pSigningCert); 4499 WINIMPM WINBOOL WINAPI CryptHashToBeSigned (HCRYPTPROV_LEGACY hCryptProv, DWORD dwCertEncodingType, const BYTE *pbEncoded, DWORD cbEncoded, BYTE *pbComputedHash, DWORD *pcbComputedHash); 4500 WINIMPM WINBOOL WINAPI CryptHashCertificate (HCRYPTPROV_LEGACY hCryptProv, ALG_ID Algid, DWORD dwFlags, const BYTE *pbEncoded, DWORD cbEncoded, BYTE *pbComputedHash, DWORD *pcbComputedHash); 4501 #if NTDDI_VERSION >= NTDDI_VISTA 4502 WINIMPM WINBOOL WINAPI CryptHashCertificate2 (LPCWSTR pwszCNGHashAlgid, DWORD dwFlags, void *pvReserved, const BYTE *pbEncoded, DWORD cbEncoded, BYTE *pbComputedHash, DWORD *pcbComputedHash); 4503 #endif 4504 WINIMPM WINBOOL WINAPI CryptSignCertificate (HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProvOrNCryptKey, DWORD dwKeySpec, DWORD dwCertEncodingType, const BYTE *pbEncodedToBeSigned, DWORD cbEncodedToBeSigned, PCRYPT_ALGORITHM_IDENTIFIER pSignatureAlgorithm, const void *pvHashAuxInfo, BYTE *pbSignature, DWORD *pcbSignature); 4505 WINIMPM WINBOOL WINAPI CryptSignAndEncodeCertificate (HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProvOrNCryptKey, DWORD dwKeySpec, DWORD dwCertEncodingType, LPCSTR lpszStructType, const void *pvStructInfo, PCRYPT_ALGORITHM_IDENTIFIER pSignatureAlgorithm, const void *pvHashAuxInfo, BYTE *pbEncoded, DWORD *pcbEncoded); 4506 WINIMPM LONG WINAPI CertVerifyTimeValidity (LPFILETIME pTimeToVerify, PCERT_INFO pCertInfo); 4507 WINIMPM LONG WINAPI CertVerifyCRLTimeValidity (LPFILETIME pTimeToVerify, PCRL_INFO pCrlInfo); 4508 WINIMPM WINBOOL WINAPI CertVerifyValidityNesting (PCERT_INFO pSubjectInfo, PCERT_INFO pIssuerInfo); 4509 WINIMPM WINBOOL WINAPI CertVerifyCRLRevocation (DWORD dwCertEncodingType, PCERT_INFO pCertId, DWORD cCrlInfo, PCRL_INFO rgpCrlInfo[]); 4510 WINIMPM LPCSTR WINAPI CertAlgIdToOID (DWORD dwAlgId); 4511 WINIMPM DWORD WINAPI CertOIDToAlgId (LPCSTR pszObjId); 4512 WINIMPM PCERT_EXTENSION WINAPI CertFindExtension (LPCSTR pszObjId, DWORD cExtensions, CERT_EXTENSION rgExtensions[]); 4513 WINIMPM PCRYPT_ATTRIBUTE WINAPI CertFindAttribute (LPCSTR pszObjId, DWORD cAttr, CRYPT_ATTRIBUTE rgAttr[]); 4514 WINIMPM PCERT_RDN_ATTR WINAPI CertFindRDNAttr (LPCSTR pszObjId, PCERT_NAME_INFO pName); 4515 WINIMPM WINBOOL WINAPI CertGetIntendedKeyUsage (DWORD dwCertEncodingType, PCERT_INFO pCertInfo, BYTE *pbKeyUsage, DWORD cbKeyUsage); 4516 WINIMPM WINBOOL WINAPI CryptInstallDefaultContext (HCRYPTPROV hCryptProv, DWORD dwDefaultType, const void *pvDefaultPara, DWORD dwFlags, void *pvReserved, HCRYPTDEFAULTCONTEXT *phDefaultContext); 4517 WINIMPM WINBOOL WINAPI CryptUninstallDefaultContext (HCRYPTDEFAULTCONTEXT hDefaultContext, DWORD dwFlags, void *pvReserved); 4518 WINIMPM WINBOOL WINAPI CryptExportPublicKeyInfo (HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProvOrNCryptKey, DWORD dwKeySpec, DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, DWORD *pcbInfo); 4519 WINIMPM WINBOOL WINAPI CryptExportPublicKeyInfoEx (HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProvOrNCryptKey, DWORD dwKeySpec, DWORD dwCertEncodingType, LPSTR pszPublicKeyObjId, DWORD dwFlags, void *pvAuxInfo, PCERT_PUBLIC_KEY_INFO pInfo, DWORD *pcbInfo); 4520 4521 #define CRYPT_OID_EXPORT_PUBLIC_KEY_INFO_FUNC "CryptDllExportPublicKeyInfoEx" 4522 #define CRYPT_OID_EXPORT_PUBLIC_KEY_INFO_EX2_FUNC "CryptDllExportPublicKeyInfoEx2" 4523 4524 typedef WINBOOL (WINAPI *PFN_CRYPT_EXPORT_PUBLIC_KEY_INFO_EX2_FUNC) (NCRYPT_KEY_HANDLE hNCryptKey, DWORD dwCertEncodingType, LPSTR pszPublicKeyObjId, DWORD dwFlags, void *pvAuxInfo, PCERT_PUBLIC_KEY_INFO pInfo, DWORD *pcbInfo); 4525 4526 #if NTDDI_VERSION >= NTDDI_WIN7 4527 #define CRYPT_OID_EXPORT_PUBLIC_KEY_INFO_FROM_BCRYPT_HANDLE_FUNC "CryptDllExportPublicKeyInfoFromBCryptKeyHandle" 4528 4529 typedef WINBOOL (WINAPI *PFN_CRYPT_EXPORT_PUBLIC_KEY_INFO_FROM_BCRYPT_HANDLE_FUNC) (BCRYPT_KEY_HANDLE hBCryptKey, DWORD dwCertEncodingType, LPSTR pszPublicKeyObjId, DWORD dwFlags, void *pvAuxInfo, PCERT_PUBLIC_KEY_INFO pInfo, DWORD *pcbInfo); 4530 4531 WINIMPM WINBOOL WINAPI CryptExportPublicKeyInfoFromBCryptKeyHandle (BCRYPT_KEY_HANDLE hBCryptKey, DWORD dwCertEncodingType, LPSTR pszPublicKeyObjId, DWORD dwFlags, void *pvAuxInfo, PCERT_PUBLIC_KEY_INFO pInfo, DWORD *pcbInfo); 4532 #endif 4533 4534 #define CRYPT_OID_IMPORT_PUBLIC_KEY_INFO_FUNC "CryptDllImportPublicKeyInfoEx" 4535 #define CRYPT_OID_IMPORT_PRIVATE_KEY_INFO_FUNC "CryptDllImportPrivateKeyInfoEx" 4536 #define CRYPT_OID_EXPORT_PRIVATE_KEY_INFO_FUNC "CryptDllExportPrivateKeyInfoEx" 4537 4538 #define CRYPT_ACQUIRE_CACHE_FLAG 0x1 4539 #define CRYPT_ACQUIRE_USE_PROV_INFO_FLAG 0x2 4540 #define CRYPT_ACQUIRE_COMPARE_KEY_FLAG 0x4 4541 #define CRYPT_ACQUIRE_NO_HEALING 0x8 4542 #define CRYPT_ACQUIRE_SILENT_FLAG 0x40 4543 #define CRYPT_ACQUIRE_WINDOW_HANDLE_FLAG 0x80 4544 4545 #define CRYPT_ACQUIRE_NCRYPT_KEY_FLAGS_MASK 0x70000 4546 #define CRYPT_ACQUIRE_ALLOW_NCRYPT_KEY_FLAG 0x10000 4547 #define CRYPT_ACQUIRE_PREFER_NCRYPT_KEY_FLAG 0x20000 4548 #define CRYPT_ACQUIRE_ONLY_NCRYPT_KEY_FLAG 0x40000 4549 4550 #define CRYPT_FIND_USER_KEYSET_FLAG 0x1 4551 #define CRYPT_FIND_MACHINE_KEYSET_FLAG 0x2 4552 #define CRYPT_FIND_SILENT_KEYSET_FLAG 0x40 4553 4554 #define CRYPT_DELETE_KEYSET CRYPT_DELETEKEYSET 4555 4556 typedef WINBOOL (WINAPI *PFN_IMPORT_PRIV_KEY_FUNC) (HCRYPTPROV hCryptProv, CRYPT_PRIVATE_KEY_INFO *pPrivateKeyInfo, DWORD dwFlags, void *pvAuxInfo); 4557 typedef WINBOOL (WINAPI *PFN_EXPORT_PRIV_KEY_FUNC) (HCRYPTPROV hCryptProv, DWORD dwKeySpec, LPSTR pszPrivateKeyObjId, DWORD dwFlags, void *pvAuxInfo, CRYPT_PRIVATE_KEY_INFO *pPrivateKeyInfo, DWORD *pcbPrivateKeyInfo); 4558 4559 #define CertRDNValueToStr __MINGW_NAME_AW(CertRDNValueToStr) 4560 #define CertNameToStr __MINGW_NAME_AW(CertNameToStr) 4561 4562 WINIMPM WINBOOL WINAPI CryptImportPublicKeyInfo (HCRYPTPROV hCryptProv, DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, HCRYPTKEY *phKey); 4563 WINIMPM WINBOOL WINAPI CryptImportPublicKeyInfoEx (HCRYPTPROV hCryptProv, DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, ALG_ID aiKeyAlg, DWORD dwFlags, void *pvAuxInfo, HCRYPTKEY *phKey); 4564 4565 #if NTDDI_VERSION >= NTDDI_VISTA 4566 #define CRYPT_OID_IMPORT_PUBLIC_KEY_INFO_EX2_FUNC "CryptDllImportPublicKeyInfoEx2" 4567 4568 typedef WINBOOL (WINAPI *PFN_IMPORT_PUBLIC_KEY_INFO_EX2_FUNC) (DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, DWORD dwFlags, void *pvAuxInfo, BCRYPT_KEY_HANDLE *phKey); 4569 4570 WINIMPM WINBOOL WINAPI CryptImportPublicKeyInfoEx2 (DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, DWORD dwFlags, void *pvAuxInfo, BCRYPT_KEY_HANDLE *phKey); 4571 #endif 4572 WINIMPM WINBOOL WINAPI CryptAcquireCertificatePrivateKey (PCCERT_CONTEXT pCert, DWORD dwFlags, void *pvParameters, HCRYPTPROV_OR_NCRYPT_KEY_HANDLE *phCryptProvOrNCryptKey, DWORD *pdwKeySpec, WINBOOL *pfCallerFreeProvOrNCryptKey); 4573 WINIMPM WINBOOL WINAPI CryptFindCertificateKeyProvInfo (PCCERT_CONTEXT pCert, DWORD dwFlags, void *pvReserved); 4574 WINIMPM WINBOOL WINAPI CryptImportPKCS8 (CRYPT_PKCS8_IMPORT_PARAMS sPrivateKeyAndParams, DWORD dwFlags, HCRYPTPROV *phCryptProv, void *pvAuxInfo); 4575 WINIMPM WINBOOL WINAPI CryptExportPKCS8 (HCRYPTPROV hCryptProv, DWORD dwKeySpec, LPSTR pszPrivateKeyObjId, DWORD dwFlags, void *pvAuxInfo, BYTE *pbPrivateKeyBlob, DWORD *pcbPrivateKeyBlob); 4576 WINIMPM WINBOOL WINAPI CryptExportPKCS8Ex (CRYPT_PKCS8_EXPORT_PARAMS *psExportParams, DWORD dwFlags, void *pvAuxInfo, BYTE *pbPrivateKeyBlob, DWORD *pcbPrivateKeyBlob); 4577 WINIMPM WINBOOL WINAPI CryptHashPublicKeyInfo (HCRYPTPROV_LEGACY hCryptProv, ALG_ID Algid, DWORD dwFlags, DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, BYTE *pbComputedHash, DWORD *pcbComputedHash); 4578 WINIMPM DWORD WINAPI CertRDNValueToStrA (DWORD dwValueType, PCERT_RDN_VALUE_BLOB pValue, LPSTR psz, DWORD csz); 4579 WINIMPM DWORD WINAPI CertRDNValueToStrW (DWORD dwValueType, PCERT_RDN_VALUE_BLOB pValue, LPWSTR psz, DWORD csz); 4580 WINIMPM DWORD WINAPI CertNameToStrA (DWORD dwCertEncodingType, PCERT_NAME_BLOB pName, DWORD dwStrType, LPSTR psz, DWORD csz); 4581 WINIMPM DWORD WINAPI CertNameToStrW (DWORD dwCertEncodingType, PCERT_NAME_BLOB pName, DWORD dwStrType, LPWSTR psz, DWORD csz); 4582 4583 4584 #define CERT_SIMPLE_NAME_STR 1 4585 #define CERT_OID_NAME_STR 2 4586 #define CERT_X500_NAME_STR 3 4587 #define CERT_XML_NAME_STR 4 4588 4589 #define CERT_NAME_STR_DISABLE_IE4_UTF8_FLAG 0x10000 4590 #define CERT_NAME_STR_ENABLE_T61_UNICODE_FLAG 0x20000 4591 #define CERT_NAME_STR_ENABLE_UTF8_UNICODE_FLAG 0x40000 4592 #define CERT_NAME_STR_FORCE_UTF8_DIR_STR_FLAG 0x80000 4593 #define CERT_NAME_STR_FORWARD_FLAG 0x1000000 4594 #define CERT_NAME_STR_REVERSE_FLAG 0x2000000 4595 #define CERT_NAME_STR_COMMA_FLAG 0x4000000 4596 #define CERT_NAME_STR_CRLF_FLAG 0x8000000 4597 #define CERT_NAME_STR_NO_QUOTING_FLAG 0x10000000 4598 #define CERT_NAME_STR_NO_PLUS_FLAG 0x20000000 4599 #define CERT_NAME_STR_SEMICOLON_FLAG 0x40000000 4600 #define CERT_NAME_STR_DISABLE_UTF8_DIR_STR_FLAG 0x100000 4601 #define CERT_NAME_STR_ENABLE_PUNYCODE_FLAG 0x200000 4602 4603 #define CertStrToName __MINGW_NAME_AW(CertStrToName) 4604 #define CertGetNameString __MINGW_NAME_AW(CertGetNameString) 4605 4606 WINIMPM WINBOOL WINAPI CertStrToNameA (DWORD dwCertEncodingType, LPCSTR pszX500, DWORD dwStrType, void *pvReserved, BYTE *pbEncoded, DWORD *pcbEncoded, LPCSTR *ppszError); 4607 WINIMPM WINBOOL WINAPI CertStrToNameW (DWORD dwCertEncodingType, LPCWSTR pszX500, DWORD dwStrType, void *pvReserved, BYTE *pbEncoded, DWORD *pcbEncoded, LPCWSTR *ppszError); 4608 WINIMPM DWORD WINAPI CertGetNameStringA (PCCERT_CONTEXT pCertContext, DWORD dwType, DWORD dwFlags, void *pvTypePara, LPSTR pszNameString, DWORD cchNameString); 4609 WINIMPM DWORD WINAPI CertGetNameStringW (PCCERT_CONTEXT pCertContext, DWORD dwType, DWORD dwFlags, void *pvTypePara, LPWSTR pszNameString, DWORD cchNameString); 4610 4611 #define CERT_NAME_EMAIL_TYPE 1 4612 #define CERT_NAME_RDN_TYPE 2 4613 #define CERT_NAME_ATTR_TYPE 3 4614 #define CERT_NAME_SIMPLE_DISPLAY_TYPE 4 4615 #define CERT_NAME_FRIENDLY_DISPLAY_TYPE 5 4616 #define CERT_NAME_DNS_TYPE 6 4617 #define CERT_NAME_URL_TYPE 7 4618 #define CERT_NAME_UPN_TYPE 8 4619 4620 #define CERT_NAME_ISSUER_FLAG 0x1 4621 #define CERT_NAME_DISABLE_IE4_UTF8_FLAG 0x10000 4622 4623 #define CERT_NAME_SEARCH_ALL_NAMES_FLAG 0x2 4624 4625 typedef PCCERT_CONTEXT (WINAPI *PFN_CRYPT_GET_SIGNER_CERTIFICATE) (void *pvGetArg, DWORD dwCertEncodingType, PCERT_INFO pSignerId, HCERTSTORE hMsgCertStore); 4626 4627 typedef struct _CRYPT_SIGN_MESSAGE_PARA { 4628 DWORD cbSize; 4629 DWORD dwMsgEncodingType; 4630 PCCERT_CONTEXT pSigningCert; 4631 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 4632 void *pvHashAuxInfo; 4633 DWORD cMsgCert; 4634 PCCERT_CONTEXT *rgpMsgCert; 4635 DWORD cMsgCrl; 4636 PCCRL_CONTEXT *rgpMsgCrl; 4637 DWORD cAuthAttr; 4638 PCRYPT_ATTRIBUTE rgAuthAttr; 4639 DWORD cUnauthAttr; 4640 PCRYPT_ATTRIBUTE rgUnauthAttr; 4641 DWORD dwFlags; 4642 DWORD dwInnerContentType; 4643 #ifdef CRYPT_SIGN_MESSAGE_PARA_HAS_CMS_FIELDS 4644 CRYPT_ALGORITHM_IDENTIFIER HashEncryptionAlgorithm; 4645 void *pvHashEncryptionAuxInfo; 4646 #endif 4647 } CRYPT_SIGN_MESSAGE_PARA,*PCRYPT_SIGN_MESSAGE_PARA; 4648 4649 #define CRYPT_MESSAGE_BARE_CONTENT_OUT_FLAG 0x1 4650 #define CRYPT_MESSAGE_ENCAPSULATED_CONTENT_OUT_FLAG 0x2 4651 #define CRYPT_MESSAGE_KEYID_SIGNER_FLAG 0x4 4652 #define CRYPT_MESSAGE_SILENT_KEYSET_FLAG 0x40 4653 4654 typedef struct _CRYPT_VERIFY_MESSAGE_PARA { 4655 DWORD cbSize; 4656 DWORD dwMsgAndCertEncodingType; 4657 HCRYPTPROV_LEGACY hCryptProv; 4658 PFN_CRYPT_GET_SIGNER_CERTIFICATE pfnGetSignerCertificate; 4659 void *pvGetArg; 4660 #ifdef CRYPT_VERIFY_MESSAGE_PARA_HAS_EXTRA_FIELDS 4661 PCCERT_STRONG_SIGN_PARA pStrongSignPara; 4662 #endif 4663 } CRYPT_VERIFY_MESSAGE_PARA,*PCRYPT_VERIFY_MESSAGE_PARA; 4664 4665 typedef struct _CRYPT_ENCRYPT_MESSAGE_PARA { 4666 DWORD cbSize; 4667 DWORD dwMsgEncodingType; 4668 HCRYPTPROV_LEGACY hCryptProv; 4669 CRYPT_ALGORITHM_IDENTIFIER ContentEncryptionAlgorithm; 4670 void *pvEncryptionAuxInfo; 4671 DWORD dwFlags; 4672 DWORD dwInnerContentType; 4673 } CRYPT_ENCRYPT_MESSAGE_PARA,*PCRYPT_ENCRYPT_MESSAGE_PARA; 4674 4675 #define CRYPT_MESSAGE_KEYID_RECIPIENT_FLAG 0x4 4676 4677 typedef struct _CRYPT_DECRYPT_MESSAGE_PARA { 4678 DWORD cbSize; 4679 DWORD dwMsgAndCertEncodingType; 4680 DWORD cCertStore; 4681 HCERTSTORE *rghCertStore; 4682 #ifdef CRYPT_DECRYPT_MESSAGE_PARA_HAS_EXTRA_FIELDS 4683 DWORD dwFlags; 4684 #endif 4685 } CRYPT_DECRYPT_MESSAGE_PARA,*PCRYPT_DECRYPT_MESSAGE_PARA; 4686 4687 typedef struct _CRYPT_HASH_MESSAGE_PARA { 4688 DWORD cbSize; 4689 DWORD dwMsgEncodingType; 4690 HCRYPTPROV_LEGACY hCryptProv; 4691 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 4692 void *pvHashAuxInfo; 4693 } CRYPT_HASH_MESSAGE_PARA,*PCRYPT_HASH_MESSAGE_PARA; 4694 4695 typedef struct _CRYPT_KEY_SIGN_MESSAGE_PARA { 4696 DWORD cbSize; 4697 DWORD dwMsgAndCertEncodingType; 4698 __C89_NAMELESS union { 4699 HCRYPTPROV hCryptProv; 4700 NCRYPT_KEY_HANDLE hNCryptKey; 4701 }; 4702 DWORD dwKeySpec; 4703 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 4704 void *pvHashAuxInfo; 4705 CRYPT_ALGORITHM_IDENTIFIER PubKeyAlgorithm; 4706 } CRYPT_KEY_SIGN_MESSAGE_PARA,*PCRYPT_KEY_SIGN_MESSAGE_PARA; 4707 4708 typedef struct _CRYPT_KEY_VERIFY_MESSAGE_PARA { 4709 DWORD cbSize; 4710 DWORD dwMsgEncodingType; 4711 HCRYPTPROV_LEGACY hCryptProv; 4712 } CRYPT_KEY_VERIFY_MESSAGE_PARA,*PCRYPT_KEY_VERIFY_MESSAGE_PARA; 4713 4714 typedef struct _CERT_CHAIN { 4715 DWORD cCerts; 4716 PCERT_BLOB certs; 4717 CRYPT_KEY_PROV_INFO keyLocatorInfo; 4718 } CERT_CHAIN,*PCERT_CHAIN; 4719 4720 #define CertOpenSystemStore __MINGW_NAME_AW(CertOpenSystemStore) 4721 #define CertAddEncodedCertificateToSystemStore __MINGW_NAME_AW(CertAddEncodedCertificateToSystemStore) 4722 4723 WINIMPM WINBOOL WINAPI CryptSignMessage (PCRYPT_SIGN_MESSAGE_PARA pSignPara, WINBOOL fDetachedSignature, DWORD cToBeSigned, const BYTE *rgpbToBeSigned[], DWORD rgcbToBeSigned[], BYTE *pbSignedBlob, DWORD *pcbSignedBlob); 4724 WINIMPM WINBOOL WINAPI CryptVerifyMessageSignature (PCRYPT_VERIFY_MESSAGE_PARA pVerifyPara, DWORD dwSignerIndex, const BYTE *pbSignedBlob, DWORD cbSignedBlob, BYTE *pbDecoded, DWORD *pcbDecoded, PCCERT_CONTEXT *ppSignerCert); 4725 WINIMPM LONG WINAPI CryptGetMessageSignerCount (DWORD dwMsgEncodingType, const BYTE *pbSignedBlob, DWORD cbSignedBlob); 4726 WINIMPM HCERTSTORE WINAPI CryptGetMessageCertificates (DWORD dwMsgAndCertEncodingType, HCRYPTPROV_LEGACY hCryptProv, DWORD dwFlags, const BYTE *pbSignedBlob, DWORD cbSignedBlob); 4727 WINIMPM WINBOOL WINAPI CryptVerifyDetachedMessageSignature (PCRYPT_VERIFY_MESSAGE_PARA pVerifyPara, DWORD dwSignerIndex, const BYTE *pbDetachedSignBlob, DWORD cbDetachedSignBlob, DWORD cToBeSigned, const BYTE *rgpbToBeSigned[], DWORD rgcbToBeSigned[], PCCERT_CONTEXT *ppSignerCert); 4728 WINIMPM WINBOOL WINAPI CryptEncryptMessage (PCRYPT_ENCRYPT_MESSAGE_PARA pEncryptPara, DWORD cRecipientCert, PCCERT_CONTEXT rgpRecipientCert[], const BYTE *pbToBeEncrypted, DWORD cbToBeEncrypted, BYTE *pbEncryptedBlob, DWORD *pcbEncryptedBlob); 4729 WINIMPM WINBOOL WINAPI CryptDecryptMessage (PCRYPT_DECRYPT_MESSAGE_PARA pDecryptPara, const BYTE *pbEncryptedBlob, DWORD cbEncryptedBlob, BYTE *pbDecrypted, DWORD *pcbDecrypted, PCCERT_CONTEXT *ppXchgCert); 4730 WINIMPM WINBOOL WINAPI CryptSignAndEncryptMessage (PCRYPT_SIGN_MESSAGE_PARA pSignPara, PCRYPT_ENCRYPT_MESSAGE_PARA pEncryptPara, DWORD cRecipientCert, PCCERT_CONTEXT rgpRecipientCert[], const BYTE *pbToBeSignedAndEncrypted, DWORD cbToBeSignedAndEncrypted, BYTE *pbSignedAndEncryptedBlob, DWORD *pcbSignedAndEncryptedBlob); 4731 WINIMPM WINBOOL WINAPI CryptDecryptAndVerifyMessageSignature (PCRYPT_DECRYPT_MESSAGE_PARA pDecryptPara, PCRYPT_VERIFY_MESSAGE_PARA pVerifyPara, DWORD dwSignerIndex, const BYTE *pbEncryptedBlob, DWORD cbEncryptedBlob, BYTE *pbDecrypted, DWORD *pcbDecrypted, PCCERT_CONTEXT *ppXchgCert, PCCERT_CONTEXT *ppSignerCert); 4732 WINIMPM WINBOOL WINAPI CryptDecodeMessage (DWORD dwMsgTypeFlags, PCRYPT_DECRYPT_MESSAGE_PARA pDecryptPara, PCRYPT_VERIFY_MESSAGE_PARA pVerifyPara, DWORD dwSignerIndex, const BYTE *pbEncodedBlob, DWORD cbEncodedBlob, DWORD dwPrevInnerContentType, DWORD *pdwMsgType, DWORD *pdwInnerContentType, BYTE *pbDecoded, DWORD *pcbDecoded, PCCERT_CONTEXT *ppXchgCert, PCCERT_CONTEXT *ppSignerCert); 4733 WINIMPM WINBOOL WINAPI CryptHashMessage (PCRYPT_HASH_MESSAGE_PARA pHashPara, WINBOOL fDetachedHash, DWORD cToBeHashed, const BYTE *rgpbToBeHashed[], DWORD rgcbToBeHashed[], BYTE *pbHashedBlob, DWORD *pcbHashedBlob, BYTE *pbComputedHash, DWORD *pcbComputedHash); 4734 WINIMPM WINBOOL WINAPI CryptVerifyMessageHash (PCRYPT_HASH_MESSAGE_PARA pHashPara, BYTE *pbHashedBlob, DWORD cbHashedBlob, BYTE *pbToBeHashed, DWORD *pcbToBeHashed, BYTE *pbComputedHash, DWORD *pcbComputedHash); 4735 WINIMPM WINBOOL WINAPI CryptVerifyDetachedMessageHash (PCRYPT_HASH_MESSAGE_PARA pHashPara, BYTE *pbDetachedHashBlob, DWORD cbDetachedHashBlob, DWORD cToBeHashed, const BYTE *rgpbToBeHashed[], DWORD rgcbToBeHashed[], BYTE *pbComputedHash, DWORD *pcbComputedHash); 4736 WINIMPM WINBOOL WINAPI CryptSignMessageWithKey (PCRYPT_KEY_SIGN_MESSAGE_PARA pSignPara, const BYTE *pbToBeSigned, DWORD cbToBeSigned, BYTE *pbSignedBlob, DWORD *pcbSignedBlob); 4737 WINIMPM WINBOOL WINAPI CryptVerifyMessageSignatureWithKey (PCRYPT_KEY_VERIFY_MESSAGE_PARA pVerifyPara, PCERT_PUBLIC_KEY_INFO pPublicKeyInfo, const BYTE *pbSignedBlob, DWORD cbSignedBlob, BYTE *pbDecoded, DWORD *pcbDecoded); 4738 WINIMPM HCERTSTORE WINAPI CertOpenSystemStoreA (HCRYPTPROV_LEGACY hProv, LPCSTR szSubsystemProtocol); 4739 WINIMPM HCERTSTORE WINAPI CertOpenSystemStoreW (HCRYPTPROV_LEGACY hProv, LPCWSTR szSubsystemProtocol); 4740 WINIMPM WINBOOL WINAPI CertAddEncodedCertificateToSystemStoreA (LPCSTR szCertStoreName, const BYTE *pbCertEncoded, DWORD cbCertEncoded); 4741 WINIMPM WINBOOL WINAPI CertAddEncodedCertificateToSystemStoreW (LPCWSTR szCertStoreName, const BYTE *pbCertEncoded, DWORD cbCertEncoded); 4742 HRESULT WINAPI FindCertsByIssuer (PCERT_CHAIN pCertChains, DWORD *pcbCertChains, DWORD *pcCertChains, BYTE *pbEncodedIssuerName, DWORD cbEncodedIssuerName, LPCWSTR pwszPurpose, DWORD dwKeySpec); 4743 WINIMPM WINBOOL WINAPI CryptQueryObject (DWORD dwObjectType, const void *pvObject, DWORD dwExpectedContentTypeFlags, DWORD dwExpectedFormatTypeFlags, DWORD dwFlags, DWORD *pdwMsgAndCertEncodingType, DWORD *pdwContentType, DWORD *pdwFormatType, HCERTSTORE *phCertStore, HCRYPTMSG *phMsg, const void **ppvContext); 4744 4745 #define CERT_QUERY_OBJECT_FILE 0x1 4746 #define CERT_QUERY_OBJECT_BLOB 0x2 4747 4748 #define CERT_QUERY_CONTENT_CERT 1 4749 #define CERT_QUERY_CONTENT_CTL 2 4750 #define CERT_QUERY_CONTENT_CRL 3 4751 #define CERT_QUERY_CONTENT_SERIALIZED_STORE 4 4752 #define CERT_QUERY_CONTENT_SERIALIZED_CERT 5 4753 #define CERT_QUERY_CONTENT_SERIALIZED_CTL 6 4754 #define CERT_QUERY_CONTENT_SERIALIZED_CRL 7 4755 #define CERT_QUERY_CONTENT_PKCS7_SIGNED 8 4756 #define CERT_QUERY_CONTENT_PKCS7_UNSIGNED 9 4757 #define CERT_QUERY_CONTENT_PKCS7_SIGNED_EMBED 10 4758 #define CERT_QUERY_CONTENT_PKCS10 11 4759 #define CERT_QUERY_CONTENT_PFX 12 4760 #define CERT_QUERY_CONTENT_CERT_PAIR 13 4761 #define CERT_QUERY_CONTENT_PFX_AND_LOAD 14 4762 4763 #define CERT_QUERY_CONTENT_FLAG_CERT (1 << CERT_QUERY_CONTENT_CERT) 4764 #define CERT_QUERY_CONTENT_FLAG_CTL (1 << CERT_QUERY_CONTENT_CTL) 4765 #define CERT_QUERY_CONTENT_FLAG_CRL (1 << CERT_QUERY_CONTENT_CRL) 4766 #define CERT_QUERY_CONTENT_FLAG_SERIALIZED_STORE (1 << CERT_QUERY_CONTENT_SERIALIZED_STORE) 4767 #define CERT_QUERY_CONTENT_FLAG_SERIALIZED_CERT (1 << CERT_QUERY_CONTENT_SERIALIZED_CERT) 4768 #define CERT_QUERY_CONTENT_FLAG_SERIALIZED_CTL (1 << CERT_QUERY_CONTENT_SERIALIZED_CTL) 4769 #define CERT_QUERY_CONTENT_FLAG_SERIALIZED_CRL (1 << CERT_QUERY_CONTENT_SERIALIZED_CRL) 4770 #define CERT_QUERY_CONTENT_FLAG_PKCS7_SIGNED (1 << CERT_QUERY_CONTENT_PKCS7_SIGNED) 4771 #define CERT_QUERY_CONTENT_FLAG_PKCS7_UNSIGNED (1 << CERT_QUERY_CONTENT_PKCS7_UNSIGNED) 4772 #define CERT_QUERY_CONTENT_FLAG_PKCS7_SIGNED_EMBED (1 << CERT_QUERY_CONTENT_PKCS7_SIGNED_EMBED) 4773 #define CERT_QUERY_CONTENT_FLAG_PKCS10 (1 << CERT_QUERY_CONTENT_PKCS10) 4774 #define CERT_QUERY_CONTENT_FLAG_PFX (1 << CERT_QUERY_CONTENT_PFX) 4775 #define CERT_QUERY_CONTENT_FLAG_CERT_PAIR (1 << CERT_QUERY_CONTENT_CERT_PAIR) 4776 #define CERT_QUERY_CONTENT_FLAG_PFX_AND_LOAD (1 << CERT_QUERY_CONTENT_PFX_AND_LOAD) 4777 4778 #define CERT_QUERY_CONTENT_FLAG_ALL (CERT_QUERY_CONTENT_FLAG_CERT | CERT_QUERY_CONTENT_FLAG_CTL | CERT_QUERY_CONTENT_FLAG_CRL | CERT_QUERY_CONTENT_FLAG_SERIALIZED_STORE | CERT_QUERY_CONTENT_FLAG_SERIALIZED_CERT | CERT_QUERY_CONTENT_FLAG_SERIALIZED_CTL | CERT_QUERY_CONTENT_FLAG_SERIALIZED_CRL | CERT_QUERY_CONTENT_FLAG_PKCS7_SIGNED | CERT_QUERY_CONTENT_FLAG_PKCS7_UNSIGNED | CERT_QUERY_CONTENT_FLAG_PKCS7_SIGNED_EMBED | CERT_QUERY_CONTENT_FLAG_PKCS10 | CERT_QUERY_CONTENT_FLAG_PFX | CERT_QUERY_CONTENT_FLAG_CERT_PAIR) 4779 #define CERT_QUERY_CONTENT_FLAG_ALL_ISSUER_CERT (CERT_QUERY_CONTENT_FLAG_CERT | CERT_QUERY_CONTENT_FLAG_SERIALIZED_STORE | CERT_QUERY_CONTENT_FLAG_SERIALIZED_CERT | CERT_QUERY_CONTENT_FLAG_PKCS7_SIGNED | CERT_QUERY_CONTENT_FLAG_PKCS7_UNSIGNED) 4780 4781 #define CERT_QUERY_FORMAT_BINARY 1 4782 #define CERT_QUERY_FORMAT_BASE64_ENCODED 2 4783 #define CERT_QUERY_FORMAT_ASN_ASCII_HEX_ENCODED 3 4784 4785 #define CERT_QUERY_FORMAT_FLAG_BINARY (1 << CERT_QUERY_FORMAT_BINARY) 4786 #define CERT_QUERY_FORMAT_FLAG_BASE64_ENCODED (1 << CERT_QUERY_FORMAT_BASE64_ENCODED) 4787 #define CERT_QUERY_FORMAT_FLAG_ASN_ASCII_HEX_ENCODED (1 << CERT_QUERY_FORMAT_ASN_ASCII_HEX_ENCODED) 4788 4789 #define CERT_QUERY_FORMAT_FLAG_ALL (CERT_QUERY_FORMAT_FLAG_BINARY | CERT_QUERY_FORMAT_FLAG_BASE64_ENCODED | CERT_QUERY_FORMAT_FLAG_ASN_ASCII_HEX_ENCODED) 4790 4791 typedef HANDLE HCRYPTASYNC,*PHCRYPTASYNC; 4792 typedef VOID (WINAPI *PFN_CRYPT_ASYNC_PARAM_FREE_FUNC) (LPSTR pszParamOid, LPVOID pvParam); 4793 4794 WINIMPM LPVOID WINAPI CryptMemAlloc (ULONG cbSize); 4795 WINIMPM LPVOID WINAPI CryptMemRealloc (LPVOID pv, ULONG cbSize); 4796 WINIMPM VOID WINAPI CryptMemFree (LPVOID pv); 4797 WINIMPM WINBOOL WINAPI CryptCreateAsyncHandle (DWORD dwFlags, PHCRYPTASYNC phAsync); 4798 WINIMPM WINBOOL WINAPI CryptSetAsyncParam (HCRYPTASYNC hAsync, LPSTR pszParamOid, LPVOID pvParam, PFN_CRYPT_ASYNC_PARAM_FREE_FUNC pfnFree); 4799 WINIMPM WINBOOL WINAPI CryptGetAsyncParam (HCRYPTASYNC hAsync, LPSTR pszParamOid, LPVOID *ppvParam, PFN_CRYPT_ASYNC_PARAM_FREE_FUNC *ppfnFree); 4800 WINIMPM WINBOOL WINAPI CryptCloseAsyncHandle (HCRYPTASYNC hAsync); 4801 4802 typedef struct _CRYPT_BLOB_ARRAY { 4803 DWORD cBlob; 4804 PCRYPT_DATA_BLOB rgBlob; 4805 } CRYPT_BLOB_ARRAY,*PCRYPT_BLOB_ARRAY; 4806 4807 typedef struct _CRYPT_CREDENTIALS { 4808 DWORD cbSize; 4809 LPCSTR pszCredentialsOid; 4810 LPVOID pvCredentials; 4811 } CRYPT_CREDENTIALS,*PCRYPT_CREDENTIALS; 4812 4813 #define CREDENTIAL_OID_PASSWORD_CREDENTIALS_A ((LPCSTR)1) 4814 #define CREDENTIAL_OID_PASSWORD_CREDENTIALS_W ((LPCSTR)2) 4815 4816 #define CREDENTIAL_OID_PASSWORD_CREDENTIALS __MINGW_NAME_UAW(CREDENTIAL_OID_PASSWORD_CREDENTIALS) 4817 4818 typedef struct _CRYPT_PASSWORD_CREDENTIALSA { 4819 DWORD cbSize; 4820 LPSTR pszUsername; 4821 LPSTR pszPassword; 4822 } CRYPT_PASSWORD_CREDENTIALSA,*PCRYPT_PASSWORD_CREDENTIALSA; 4823 4824 typedef struct _CRYPT_PASSWORD_CREDENTIALSW { 4825 DWORD cbSize; 4826 LPWSTR pszUsername; 4827 LPWSTR pszPassword; 4828 } CRYPT_PASSWORD_CREDENTIALSW,*PCRYPT_PASSWORD_CREDENTIALSW; 4829 4830 typedef __MINGW_NAME_AW(CRYPT_PASSWORD_CREDENTIALS) CRYPT_PASSWORD_CREDENTIALS; 4831 typedef __MINGW_NAME_AW(PCRYPT_PASSWORD_CREDENTIALS) PCRYPT_PASSWORD_CREDENTIALS; 4832 4833 #define SCHEME_OID_RETRIEVE_ENCODED_OBJECT_FUNC "SchemeDllRetrieveEncodedObject" 4834 #define SCHEME_OID_RETRIEVE_ENCODED_OBJECTW_FUNC "SchemeDllRetrieveEncodedObjectW" 4835 #define CONTEXT_OID_CREATE_OBJECT_CONTEXT_FUNC "ContextDllCreateObjectContext" 4836 4837 typedef VOID (WINAPI *PFN_FREE_ENCODED_OBJECT_FUNC) (LPCSTR pszObjectOid, PCRYPT_BLOB_ARRAY pObject, LPVOID pvFreeContext); 4838 4839 #define CONTEXT_OID_CERTIFICATE ((LPCSTR)1) 4840 #define CONTEXT_OID_CRL ((LPCSTR)2) 4841 #define CONTEXT_OID_CTL ((LPCSTR)3) 4842 #define CONTEXT_OID_PKCS7 ((LPCSTR)4) 4843 #define CONTEXT_OID_CAPI2_ANY ((LPCSTR)5) 4844 #define CONTEXT_OID_OCSP_RESP ((LPCSTR)6) 4845 4846 #define CRYPT_RETRIEVE_MULTIPLE_OBJECTS 0x1 4847 #define CRYPT_CACHE_ONLY_RETRIEVAL 0x2 4848 #define CRYPT_WIRE_ONLY_RETRIEVAL 0x4 4849 #define CRYPT_DONT_CACHE_RESULT 0x8 4850 #define CRYPT_ASYNC_RETRIEVAL 0x10 4851 #define CRYPT_VERIFY_CONTEXT_SIGNATURE 0x20 4852 #define CRYPT_VERIFY_DATA_HASH 0x40 4853 #define CRYPT_KEEP_TIME_VALID 0x80 4854 #define CRYPT_DONT_VERIFY_SIGNATURE 0x100 4855 #define CRYPT_DONT_CHECK_TIME_VALIDITY 0x200 4856 #define CRYPT_CHECK_FRESHNESS_TIME_VALIDITY 0x400 4857 #define CRYPT_ACCUMULATIVE_TIMEOUT 0x800 4858 #define CRYPT_STICKY_CACHE_RETRIEVAL 0x1000 4859 #define CRYPT_LDAP_SCOPE_BASE_ONLY_RETRIEVAL 0x2000 4860 #define CRYPT_OFFLINE_CHECK_RETRIEVAL 0x4000 4861 #define CRYPT_LDAP_INSERT_ENTRY_ATTRIBUTE 0x8000 4862 #define CRYPT_LDAP_SIGN_RETRIEVAL 0x10000 4863 #define CRYPT_NO_AUTH_RETRIEVAL 0x20000 4864 #define CRYPT_LDAP_AREC_EXCLUSIVE_RETRIEVAL 0x40000 4865 #define CRYPT_AIA_RETRIEVAL 0x80000 4866 #define CRYPT_HTTP_POST_RETRIEVAL 0x100000 4867 #define CRYPT_PROXY_CACHE_RETRIEVAL 0x200000 4868 #define CRYPT_NOT_MODIFIED_RETRIEVAL 0x400000 4869 #define CRYPT_ENABLE_SSL_REVOCATION_RETRIEVAL 0x800000 4870 #define CRYPT_OCSP_ONLY_RETRIEVAL 0x1000000 4871 #define CRYPT_NO_OCSP_FAILOVER_TO_CRL_RETRIEVAL 0x2000000 4872 #define CRYPT_RANDOM_QUERY_STRING_RETRIEVAL 0x4000000 4873 #define CRYPT_ENABLE_FILE_RETRIEVAL 0x08000000 4874 #define CRYPT_CREATE_NEW_FLUSH_ENTRY 0x10000000 4875 4876 typedef struct _CRYPTNET_URL_CACHE_PRE_FETCH_INFO { 4877 DWORD cbSize; 4878 DWORD dwObjectType; 4879 DWORD dwError; 4880 DWORD dwReserved; 4881 FILETIME ThisUpdateTime; 4882 FILETIME NextUpdateTime; 4883 FILETIME PublishTime; 4884 } CRYPTNET_URL_CACHE_PRE_FETCH_INFO,*PCRYPTNET_URL_CACHE_PRE_FETCH_INFO; 4885 4886 #define CRYPTNET_URL_CACHE_PRE_FETCH_NONE 0 4887 #define CRYPTNET_URL_CACHE_PRE_FETCH_BLOB 1 4888 #define CRYPTNET_URL_CACHE_PRE_FETCH_CRL 2 4889 #define CRYPTNET_URL_CACHE_PRE_FETCH_OCSP 3 4890 #define CRYPTNET_URL_CACHE_PRE_FETCH_AUTOROOT_CAB 5 4891 #define CRYPTNET_URL_CACHE_PRE_FETCH_DISALLOWED_CERT_CAB 6 4892 #define CRYPTNET_URL_CACHE_PRE_FETCH_PIN_RULES_CAB 7 4893 4894 typedef struct _CRYPTNET_URL_CACHE_FLUSH_INFO { 4895 DWORD cbSize; 4896 DWORD dwExemptSeconds; 4897 FILETIME ExpireTime; 4898 } CRYPTNET_URL_CACHE_FLUSH_INFO,*PCRYPTNET_URL_CACHE_FLUSH_INFO; 4899 4900 #define CRYPTNET_URL_CACHE_DEFAULT_FLUSH 0 4901 #define CRYPTNET_URL_CACHE_DISABLE_FLUSH 0xffffffff 4902 4903 typedef struct _CRYPTNET_URL_CACHE_RESPONSE_INFO { 4904 DWORD cbSize; 4905 WORD wResponseType; 4906 WORD wResponseFlags; 4907 FILETIME LastModifiedTime; 4908 DWORD dwMaxAge; 4909 LPCWSTR pwszETag; 4910 DWORD dwProxyId; 4911 } CRYPTNET_URL_CACHE_RESPONSE_INFO,*PCRYPTNET_URL_CACHE_RESPONSE_INFO; 4912 4913 #define CRYPTNET_URL_CACHE_RESPONSE_NONE 0 4914 #define CRYPTNET_URL_CACHE_RESPONSE_HTTP 1 4915 4916 #define CRYPTNET_URL_CACHE_RESPONSE_VALIDATED 0x8000 4917 4918 typedef struct _CRYPT_RETRIEVE_AUX_INFO { 4919 DWORD cbSize; 4920 FILETIME *pLastSyncTime; 4921 DWORD dwMaxUrlRetrievalByteCount; 4922 PCRYPTNET_URL_CACHE_PRE_FETCH_INFO pPreFetchInfo; 4923 PCRYPTNET_URL_CACHE_FLUSH_INFO pFlushInfo; 4924 PCRYPTNET_URL_CACHE_RESPONSE_INFO *ppResponseInfo; 4925 LPWSTR pwszCacheFileNamePrefix; 4926 LPFILETIME pftCacheResync; 4927 WINBOOL fProxyCacheRetrieval; 4928 DWORD dwHttpStatusCode; 4929 } CRYPT_RETRIEVE_AUX_INFO,*PCRYPT_RETRIEVE_AUX_INFO; 4930 4931 #define CRYPT_RETRIEVE_MAX_ERROR_CONTENT_LENGTH 0x1000 4932 4933 WINIMPM WINBOOL WINAPI CryptRetrieveObjectByUrlA (LPCSTR pszUrl, LPCSTR pszObjectOid, DWORD dwRetrievalFlags, DWORD dwTimeout, LPVOID *ppvObject, HCRYPTASYNC hAsyncRetrieve, PCRYPT_CREDENTIALS pCredentials, LPVOID pvVerify, PCRYPT_RETRIEVE_AUX_INFO pAuxInfo); 4934 WINIMPM WINBOOL WINAPI CryptRetrieveObjectByUrlW (LPCWSTR pszUrl, LPCSTR pszObjectOid, DWORD dwRetrievalFlags, DWORD dwTimeout, LPVOID *ppvObject, HCRYPTASYNC hAsyncRetrieve, PCRYPT_CREDENTIALS pCredentials, LPVOID pvVerify, PCRYPT_RETRIEVE_AUX_INFO pAuxInfo); 4935 4936 #define CryptRetrieveObjectByUrl __MINGW_NAME_AW(CryptRetrieveObjectByUrl) 4937 4938 typedef WINBOOL (WINAPI *PFN_CRYPT_CANCEL_RETRIEVAL) (DWORD dwFlags, void *pvArg); 4939 4940 WINIMPM WINBOOL WINAPI CryptInstallCancelRetrieval (PFN_CRYPT_CANCEL_RETRIEVAL pfnCancel, const void *pvArg, DWORD dwFlags, void *pvReserved); 4941 WINIMPM WINBOOL WINAPI CryptUninstallCancelRetrieval (DWORD dwFlags, void *pvReserved); 4942 WINIMPM WINBOOL WINAPI CryptCancelAsyncRetrieval (HCRYPTASYNC hAsyncRetrieval); 4943 4944 #define CRYPT_PARAM_ASYNC_RETRIEVAL_COMPLETION ((LPCSTR)1) 4945 4946 typedef VOID (WINAPI *PFN_CRYPT_ASYNC_RETRIEVAL_COMPLETION_FUNC) (LPVOID pvCompletion, DWORD dwCompletionCode, LPCSTR pszUrl, LPSTR pszObjectOid, LPVOID pvObject); 4947 4948 typedef struct _CRYPT_ASYNC_RETRIEVAL_COMPLETION { 4949 PFN_CRYPT_ASYNC_RETRIEVAL_COMPLETION_FUNC pfnCompletion; 4950 LPVOID pvCompletion; 4951 } CRYPT_ASYNC_RETRIEVAL_COMPLETION,*PCRYPT_ASYNC_RETRIEVAL_COMPLETION; 4952 4953 #define CRYPT_PARAM_CANCEL_ASYNC_RETRIEVAL ((LPCSTR)2) 4954 4955 typedef WINBOOL (WINAPI *PFN_CANCEL_ASYNC_RETRIEVAL_FUNC) (HCRYPTASYNC hAsyncRetrieve); 4956 4957 #define CRYPT_GET_URL_FROM_PROPERTY 0x1 4958 #define CRYPT_GET_URL_FROM_EXTENSION 0x2 4959 #define CRYPT_GET_URL_FROM_UNAUTH_ATTRIBUTE 0x4 4960 #define CRYPT_GET_URL_FROM_AUTH_ATTRIBUTE 0x8 4961 4962 typedef struct _CRYPT_URL_ARRAY { 4963 DWORD cUrl; 4964 LPWSTR *rgwszUrl; 4965 } CRYPT_URL_ARRAY,*PCRYPT_URL_ARRAY; 4966 4967 typedef struct _CRYPT_URL_INFO { 4968 DWORD cbSize; 4969 DWORD dwSyncDeltaTime; 4970 DWORD cGroup; 4971 DWORD *rgcGroupEntry; 4972 } CRYPT_URL_INFO,*PCRYPT_URL_INFO; 4973 4974 WINIMPM WINBOOL WINAPI CryptGetObjectUrl (LPCSTR pszUrlOid, LPVOID pvPara, DWORD dwFlags, PCRYPT_URL_ARRAY pUrlArray, DWORD *pcbUrlArray, PCRYPT_URL_INFO pUrlInfo, DWORD *pcbUrlInfo, LPVOID pvReserved); 4975 4976 #define URL_OID_GET_OBJECT_URL_FUNC "UrlDllGetObjectUrl" 4977 4978 #define URL_OID_CERTIFICATE_ISSUER ((LPCSTR) 1) 4979 #define URL_OID_CERTIFICATE_CRL_DIST_POINT ((LPCSTR) 2) 4980 #define URL_OID_CTL_ISSUER ((LPCSTR) 3) 4981 #define URL_OID_CTL_NEXT_UPDATE ((LPCSTR) 4) 4982 #define URL_OID_CRL_ISSUER ((LPCSTR) 5) 4983 #define URL_OID_CERTIFICATE_FRESHEST_CRL ((LPCSTR) 6) 4984 #define URL_OID_CRL_FRESHEST_CRL ((LPCSTR) 7) 4985 #define URL_OID_CROSS_CERT_DIST_POINT ((LPCSTR) 8) 4986 #define URL_OID_CERTIFICATE_OCSP ((LPCSTR) 9) 4987 #define URL_OID_CERTIFICATE_OCSP_AND_CRL_DIST_POINT ((LPCSTR) 10) 4988 #define URL_OID_CERTIFICATE_CRL_DIST_POINT_AND_OCSP ((LPCSTR) 11) 4989 #define URL_OID_CROSS_CERT_SUBJECT_INFO_ACCESS ((LPCSTR) 12) 4990 #define URL_OID_CERTIFICATE_ONLY_OCSP ((LPCSTR) 13) 4991 4992 typedef struct _CERT_CRL_CONTEXT_PAIR { 4993 PCCERT_CONTEXT pCertContext; 4994 PCCRL_CONTEXT pCrlContext; 4995 } CERT_CRL_CONTEXT_PAIR,*PCERT_CRL_CONTEXT_PAIR; 4996 4997 typedef const CERT_CRL_CONTEXT_PAIR *PCCERT_CRL_CONTEXT_PAIR; 4998 4999 typedef struct _CRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO { 5000 DWORD cbSize; 5001 int iDeltaCrlIndicator; 5002 LPFILETIME pftCacheResync; 5003 LPFILETIME pLastSyncTime; 5004 LPFILETIME pMaxAgeTime; 5005 PCERT_REVOCATION_CHAIN_PARA pChainPara; 5006 PCRYPT_INTEGER_BLOB pDeltaCrlIndicator; 5007 } CRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO, *PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO; 5008 5009 typedef WINBOOL (WINAPI *PFN_CRYPT_ENUM_KEYID_PROP) (const CRYPT_HASH_BLOB *pKeyIdentifier, DWORD dwFlags, void *pvReserved, void *pvArg, DWORD cProp, DWORD *rgdwPropId, void **rgpvData, DWORD *rgcbData); 5010 5011 #define TIME_VALID_OID_GET_OBJECT_FUNC "TimeValidDllGetObject" 5012 #define CERT_CHAIN_CONFIG_REGPATH L"Software\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllCreateCertificateChainEngine\\Config" 5013 5014 #define TIME_VALID_OID_GET_CTL ((LPCSTR)1) 5015 #define TIME_VALID_OID_GET_CRL ((LPCSTR)2) 5016 #define TIME_VALID_OID_GET_CRL_FROM_CERT ((LPCSTR)3) 5017 5018 #define TIME_VALID_OID_GET_FRESHEST_CRL_FROM_CERT ((LPCSTR)4) 5019 #define TIME_VALID_OID_GET_FRESHEST_CRL_FROM_CRL ((LPCSTR)5) 5020 5021 #define TIME_VALID_OID_FLUSH_OBJECT_FUNC "TimeValidDllFlushObject" 5022 5023 #define TIME_VALID_OID_FLUSH_CTL ((LPCSTR)1) 5024 #define TIME_VALID_OID_FLUSH_CRL ((LPCSTR)2) 5025 #define TIME_VALID_OID_FLUSH_CRL_FROM_CERT ((LPCSTR)3) 5026 #define TIME_VALID_OID_FLUSH_FRESHEST_CRL_FROM_CERT ((LPCSTR)4) 5027 #define TIME_VALID_OID_FLUSH_FRESHEST_CRL_FROM_CRL ((LPCSTR)5) 5028 5029 #define CERT_CREATE_SELFSIGN_NO_SIGN 1 5030 #define CERT_CREATE_SELFSIGN_NO_KEY_INFO 2 5031 5032 #define CRYPT_KEYID_DELETE_FLAG 0x10 5033 #define CRYPT_KEYID_MACHINE_FLAG 0x20 5034 #define CRYPT_KEYID_SET_NEW_FLAG 0x2000 5035 #define CRYPT_KEYID_ALLOC_FLAG 0x8000 5036 5037 WINIMPM WINBOOL WINAPI CryptGetTimeValidObject (LPCSTR pszTimeValidOid, LPVOID pvPara, PCCERT_CONTEXT pIssuer, LPFILETIME pftValidFor, DWORD dwFlags, DWORD dwTimeout, LPVOID *ppvObject, PCRYPT_CREDENTIALS pCredentials, PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO pExtraInfo); 5038 WINIMPM WINBOOL WINAPI CryptFlushTimeValidObject (LPCSTR pszFlushTimeValidOid, LPVOID pvPara, PCCERT_CONTEXT pIssuer, DWORD dwFlags, LPVOID pvReserved); 5039 WINIMPM PCCERT_CONTEXT WINAPI CertCreateSelfSignCertificate (HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProvOrNCryptKey, PCERT_NAME_BLOB pSubjectIssuerBlob, DWORD dwFlags, PCRYPT_KEY_PROV_INFO pKeyProvInfo, PCRYPT_ALGORITHM_IDENTIFIER pSignatureAlgorithm, PSYSTEMTIME pStartTime, PSYSTEMTIME pEndTime, PCERT_EXTENSIONS pExtensions); 5040 WINIMPM WINBOOL WINAPI CryptGetKeyIdentifierProperty (const CRYPT_HASH_BLOB *pKeyIdentifier, DWORD dwPropId, DWORD dwFlags, LPCWSTR pwszComputerName, void *pvReserved, void *pvData, DWORD *pcbData); 5041 WINIMPM WINBOOL WINAPI CryptSetKeyIdentifierProperty (const CRYPT_HASH_BLOB *pKeyIdentifier, DWORD dwPropId, DWORD dwFlags, LPCWSTR pwszComputerName, void *pvReserved, const void *pvData); 5042 WINIMPM WINBOOL WINAPI CryptEnumKeyIdentifierProperties (const CRYPT_HASH_BLOB *pKeyIdentifier, DWORD dwPropId, DWORD dwFlags, LPCWSTR pwszComputerName, void *pvReserved, void *pvArg, PFN_CRYPT_ENUM_KEYID_PROP pfnEnum); 5043 WINIMPM WINBOOL WINAPI CryptCreateKeyIdentifierFromCSP (DWORD dwCertEncodingType, LPCSTR pszPubKeyOID, const PUBLICKEYSTRUC *pPubKeyStruc, DWORD cbPubKeyStruc, DWORD dwFlags, void *pvReserved, BYTE *pbHash, DWORD *pcbHash); 5044 5045 #define CERT_CHAIN_MAX_URL_RETRIEVAL_BYTE_COUNT_VALUE_NAME L"MaxUrlRetrievalByteCount" 5046 #define CERT_CHAIN_MAX_URL_RETRIEVAL_BYTE_COUNT_DEFAULT (100 *1024 *1024) 5047 #define CERT_CHAIN_CACHE_RESYNC_FILETIME_VALUE_NAME L"ChainCacheResyncFiletime" 5048 #define CERT_CHAIN_DISABLE_MANDATORY_BASIC_CONSTRAINTS_VALUE_NAME L"DisableMandatoryBasicConstraints" 5049 #define CERT_CHAIN_DISABLE_CA_NAME_CONSTRAINTS_VALUE_NAME L"DisableCANameConstraints" 5050 #define CERT_CHAIN_DISABLE_UNSUPPORTED_CRITICAL_EXTENSIONS_VALUE_NAME L"DisableUnsupportedCriticalExtensions" 5051 #define CERT_CHAIN_MAX_AIA_URL_COUNT_IN_CERT_VALUE_NAME L"MaxAIAUrlCountInCert" 5052 #define CERT_CHAIN_MAX_AIA_URL_COUNT_IN_CERT_DEFAULT 5 5053 #define CERT_CHAIN_MAX_AIA_URL_RETRIEVAL_COUNT_PER_CHAIN_VALUE_NAME L"MaxAIAUrlRetrievalCountPerChain" 5054 #define CERT_CHAIN_MAX_AIA_URL_RETRIEVAL_COUNT_PER_CHAIN_DEFAULT 3 5055 #define CERT_CHAIN_MAX_AIA_URL_RETRIEVAL_BYTE_COUNT_VALUE_NAME L"MaxAIAUrlRetrievalByteCount" 5056 #define CERT_CHAIN_MAX_AIA_URL_RETRIEVAL_BYTE_COUNT_DEFAULT 100000 5057 #define CERT_CHAIN_MAX_AIA_URL_RETRIEVAL_CERT_COUNT_VALUE_NAME L"MaxAIAUrlRetrievalCertCount" 5058 #define CERT_CHAIN_MAX_AIA_URL_RETRIEVAL_CERT_COUNT_DEFAULT 10 5059 #define CERT_CHAIN_OCSP_VALIDITY_SECONDS_VALUE_NAME L"OcspValiditySeconds" 5060 #define CERT_CHAIN_OCSP_VALIDITY_SECONDS_DEFAULT (12 *60 *60) 5061 #define CERT_CHAIN_DISABLE_SERIAL_CHAIN_VALUE_NAME L"DisableSerialChain" 5062 #define CERT_CHAIN_SERIAL_CHAIN_LOG_FILE_NAME_VALUE_NAME L"SerialChainLogFileName" 5063 #define CERT_CHAIN_DISABLE_SYNC_WITH_SSL_TIME_VALUE_NAME L"DisableSyncWithSslTime" 5064 #define CERT_CHAIN_MAX_SSL_TIME_UPDATED_EVENT_COUNT_VALUE_NAME L"MaxSslTimeUpdatedEventCount" 5065 #define CERT_CHAIN_MAX_SSL_TIME_UPDATED_EVENT_COUNT_DEFAULT 5 5066 #define CERT_CHAIN_MAX_SSL_TIME_UPDATED_EVENT_COUNT_DISABLE 0xFFFFFFFF 5067 #define CERT_CHAIN_SSL_HANDSHAKE_LOG_FILE_NAME_VALUE_NAME L"SslHandshakeLogFileName" 5068 #define CERT_CHAIN_ENABLE_WEAK_SIGNATURE_FLAGS_VALUE_NAME L"EnableWeakSignatureFlags" 5069 #define CERT_CHAIN_ENABLE_MD2_MD4_FLAG 0x1 5070 #define CERT_CHAIN_ENABLE_WEAK_RSA_ROOT_FLAG 0x2 5071 #define CERT_CHAIN_ENABLE_WEAK_LOGGING_FLAG 0x4 5072 #define CERT_CHAIN_ENABLE_ONLY_WEAK_LOGGING_FLAG 0x8 5073 #define CERT_CHAIN_MIN_RSA_PUB_KEY_BIT_LENGTH_VALUE_NAME L"MinRsaPubKeyBitLength" 5074 #define CERT_CHAIN_MIN_RSA_PUB_KEY_BIT_LENGTH_DEFAULT 1023 5075 #define CERT_CHAIN_MIN_RSA_PUB_KEY_BIT_LENGTH_DISABLE 0xffffffff 5076 #define CERT_CHAIN_WEAK_RSA_PUB_KEY_TIME_VALUE_NAME L"WeakRsaPubKeyTime" 5077 #define CERT_CHAIN_WEAK_RSA_PUB_KEY_TIME_DEFAULT 0x01ca8a755c6e0000ULL 5078 #define CERT_CHAIN_WEAK_SIGNATURE_LOG_DIR_VALUE_NAME L"WeakSignatureLogDir" 5079 5080 #define CERT_CHAIN_DEFAULT_CONFIG_SUBDIR L"Default" 5081 5082 #define CERT_CHAIN_WEAK_PREFIX_NAME L"Weak" 5083 #define CERT_CHAIN_WEAK_THIRD_PARTY_CONFIG_NAME L"ThirdParty" 5084 #define CERT_CHAIN_WEAK_ALL_CONFIG_NAME L"All" 5085 #define CERT_CHAIN_WEAK_FLAGS_NAME L"Flags" 5086 #define CERT_CHAIN_WEAK_HYGIENE_NAME L"Hygiene" 5087 #define CERT_CHAIN_WEAK_AFTER_TIME_NAME L"AfterTime" 5088 #define CERT_CHAIN_WEAK_FILE_HASH_AFTER_TIME_NAME L"FileHashAfterTime" 5089 #define CERT_CHAIN_WEAK_TIMESTAMP_HASH_AFTER_TIME_NAME L"TimestampHashAfterTime" 5090 #define CERT_CHAIN_WEAK_MIN_BIT_LENGTH_NAME L"MinBitLength" 5091 #define CERT_CHAIN_WEAK_SHA256_ALLOW_NAME L"Sha256Allow" 5092 5093 #define CERT_CHAIN_MIN_PUB_KEY_BIT_LENGTH_DISABLE 0xFFFFFFFF 5094 5095 #define CERT_CHAIN_ENABLE_WEAK_SETTINGS_FLAG 0x80000000 5096 #define CERT_CHAIN_DISABLE_ALL_EKU_WEAK_FLAG 0x00010000 5097 #define CERT_CHAIN_ENABLE_ALL_EKU_HYGIENE_FLAG 0x00020000 5098 #define CERT_CHAIN_DISABLE_OPT_IN_SERVER_AUTH_WEAK_FLAG 0x00040000 5099 #define CERT_CHAIN_DISABLE_SERVER_AUTH_WEAK_FLAG 0x00100000 5100 #define CERT_CHAIN_ENABLE_SERVER_AUTH_HYGIENE_FLAG 0x00200000 5101 #define CERT_CHAIN_DISABLE_CODE_SIGNING_WEAK_FLAG 0x00400000 5102 #define CERT_CHAIN_DISABLE_MOTW_CODE_SIGNING_WEAK_FLAG 0x00800000 5103 #define CERT_CHAIN_ENABLE_CODE_SIGNING_HYGIENE_FLAG 0x01000000 5104 #define CERT_CHAIN_ENABLE_MOTW_CODE_SIGNING_HYGIENE_FLAG 0x02000000 5105 #define CERT_CHAIN_DISABLE_TIMESTAMP_WEAK_FLAG 0x04000000 5106 #define CERT_CHAIN_DISABLE_MOTW_TIMESTAMP_WEAK_FLAG 0x08000000 5107 #define CERT_CHAIN_ENABLE_TIMESTAMP_HYGIENE_FLAG 0x10000000 5108 #define CERT_CHAIN_ENABLE_MOTW_TIMESTAMP_HYGIENE_FLAG 0x20000000 5109 #define CERT_CHAIN_MOTW_IGNORE_AFTER_TIME_WEAK_FLAG 0x40000000 5110 #define CERT_CHAIN_DISABLE_FILE_HASH_WEAK_FLAG 0x00001000 5111 #define CERT_CHAIN_DISABLE_MOTW_FILE_HASH_WEAK_FLAG 0x00002000 5112 #define CERT_CHAIN_DISABLE_TIMESTAMP_HASH_WEAK_FLAG 0x00004000 5113 #define CERT_CHAIN_DISABLE_MOTW_TIMESTAMP_HASH_WEAK_FLAG 0x00008000 5114 #define CERT_CHAIN_DISABLE_WEAK_FLAGS ( CERT_CHAIN_DISABLE_ALL_EKU_WEAK_FLAG | CERT_CHAIN_DISABLE_SERVER_AUTH_WEAK_FLAG | CERT_CHAIN_DISABLE_OPT_IN_SERVER_AUTH_WEAK_FLAG | CERT_CHAIN_DISABLE_CODE_SIGNING_WEAK_FLAG | CERT_CHAIN_DISABLE_MOTW_CODE_SIGNING_WEAK_FLAG | CERT_CHAIN_DISABLE_TIMESTAMP_WEAK_FLAG | CERT_CHAIN_DISABLE_MOTW_TIMESTAMP_WEAK_FLAG ) 5115 #define CERT_CHAIN_DISABLE_FILE_HASH_WEAK_FLAGS ( CERT_CHAIN_DISABLE_FILE_HASH_WEAK_FLAG | CERT_CHAIN_DISABLE_MOTW_FILE_HASH_WEAK_FLAG ) 5116 #define CERT_CHAIN_DISABLE_TIMESTAMP_HASH_WEAK_FLAGS ( CERT_CHAIN_DISABLE_TIMESTAMP_HASH_WEAK_FLAG | CERT_CHAIN_DISABLE_MOTW_TIMESTAMP_HASH_WEAK_FLAG ) 5117 #define CERT_CHAIN_ENABLE_HYGIENE_FLAGS ( CERT_CHAIN_ENABLE_ALL_EKU_HYGIENE_FLAG | CERT_CHAIN_ENABLE_SERVER_AUTH_HYGIENE_FLAG | CERT_CHAIN_ENABLE_CODE_SIGNING_HYGIENE_FLAG | CERT_CHAIN_ENABLE_MOTW_CODE_SIGNING_HYGIENE_FLAG | CERT_CHAIN_ENABLE_TIMESTAMP_HYGIENE_FLAG | CERT_CHAIN_ENABLE_MOTW_TIMESTAMP_HYGIENE_FLAG ) 5118 #define CERT_CHAIN_MOTW_WEAK_FLAGS ( CERT_CHAIN_DISABLE_MOTW_CODE_SIGNING_WEAK_FLAG | CERT_CHAIN_DISABLE_MOTW_TIMESTAMP_WEAK_FLAG | CERT_CHAIN_ENABLE_MOTW_CODE_SIGNING_HYGIENE_FLAG | CERT_CHAIN_ENABLE_MOTW_TIMESTAMP_HYGIENE_FLAG | CERT_CHAIN_MOTW_IGNORE_AFTER_TIME_WEAK_FLAG) 5119 #define CERT_CHAIN_OPT_IN_WEAK_FLAGS ( CERT_CHAIN_DISABLE_OPT_IN_SERVER_AUTH_WEAK_FLAG) 5120 5121 #define CERT_CHAIN_AUTO_CURRENT_USER 1 5122 #define CERT_CHAIN_AUTO_LOCAL_MACHINE 2 5123 #define CERT_CHAIN_AUTO_IMPERSONATED 3 5124 #define CERT_CHAIN_AUTO_PROCESS_INFO 4 5125 #define CERT_CHAIN_AUTO_PINRULE_INFO 5 5126 #define CERT_CHAIN_AUTO_NETWORK_INFO 6 5127 #define CERT_CHAIN_AUTO_SERIAL_LOCAL_MACHINE 7 5128 #define CERT_CHAIN_AUTO_HPKP_RULE_INFO 8 5129 5130 #define CERT_CHAIN_AUTO_FLAGS_VALUE_NAME L"AutoFlags" 5131 5132 #define CERT_CHAIN_AUTO_FLUSH_DISABLE_FLAG 0x00000001 5133 #define CERT_CHAIN_AUTO_LOG_CREATE_FLAG 0x00000002 5134 #define CERT_CHAIN_AUTO_LOG_FREE_FLAG 0x00000004 5135 #define CERT_CHAIN_AUTO_LOG_FLUSH_FLAG 0x00000008 5136 #define CERT_CHAIN_AUTO_LOG_FLAGS ( CERT_CHAIN_AUTO_LOG_CREATE_FLAG | CERT_CHAIN_AUTO_LOG_FREE_FLAG | CERT_CHAIN_AUTO_LOG_FLUSH_FLAG ) 5137 5138 #define CERT_CHAIN_AUTO_FLUSH_FIRST_DELTA_SECONDS_VALUE_NAME L"AutoFlushFirstDeltaSeconds" 5139 #define CERT_CHAIN_AUTO_FLUSH_FIRST_DELTA_SECONDS_DEFAULT (5 * 60) 5140 #define CERT_CHAIN_AUTO_FLUSH_NEXT_DELTA_SECONDS_VALUE_NAME L"AutoFlushNextDeltaSeconds" 5141 #define CERT_CHAIN_AUTO_FLUSH_NEXT_DELTA_SECONDS_DEFAULT (30 * 60) 5142 #define CERT_CHAIN_AUTO_LOG_FILE_NAME_VALUE_NAME L"AutoLogFileName" 5143 #define CERT_CHAIN_DISABLE_AUTO_FLUSH_PROCESS_NAME_LIST_VALUE_NAME L"DisableAutoFlushProcessNameList" 5144 5145 #define CERT_SRV_OCSP_RESP_MIN_VALIDITY_SECONDS_VALUE_NAME L"SrvOcspRespMinValiditySeconds" 5146 #define CERT_SRV_OCSP_RESP_MIN_VALIDITY_SECONDS_DEFAULT (10 *60) 5147 #define CERT_SRV_OCSP_RESP_URL_RETRIEVAL_TIMEOUT_MILLISECONDS_VALUE_NAME L"SrvOcspRespUrlRetrievalTimeoutMilliseconds" 5148 #define CERT_SRV_OCSP_RESP_URL_RETRIEVAL_TIMEOUT_MILLISECONDS_DEFAULT (15 *1000) 5149 #define CERT_SRV_OCSP_RESP_MAX_BEFORE_NEXT_UPDATE_SECONDS_VALUE_NAME L"SrvOcspRespMaxBeforeNextUpdateSeconds" 5150 #define CERT_SRV_OCSP_RESP_MAX_BEFORE_NEXT_UPDATE_SECONDS_DEFAULT (4 *60 *60) 5151 #define CERT_SRV_OCSP_RESP_MIN_BEFORE_NEXT_UPDATE_SECONDS_VALUE_NAME L"SrvOcspRespMinBeforeNextUpdateSeconds" 5152 #define CERT_SRV_OCSP_RESP_MIN_BEFORE_NEXT_UPDATE_SECONDS_DEFAULT (2 *60) 5153 #define CERT_SRV_OCSP_RESP_MIN_AFTER_NEXT_UPDATE_SECONDS_VALUE_NAME L"SrvOcspRespMinAfterNextUpdateSeconds" 5154 #define CERT_SRV_OCSP_RESP_MIN_AFTER_NEXT_UPDATE_SECONDS_DEFAULT (1 *60) 5155 #define CERT_SRV_OCSP_RESP_MIN_SYNC_CERT_FILE_SECONDS_VALUE_NAME L"SrvOcspRespMinSyncCertFileSeconds" 5156 #define CERT_SRV_OCSP_RESP_MIN_SYNC_CERT_FILE_SECONDS_DEFAULT 5 5157 #define CERT_SRV_OCSP_RESP_MAX_SYNC_CERT_FILE_SECONDS_VALUE_NAME L"SrvOcspRespMaxSyncCertFileSeconds" 5158 #define CERT_SRV_OCSP_RESP_MAX_SYNC_CERT_FILE_SECONDS_DEFAULT (1 * 60 * 60) 5159 #define CRYPTNET_MAX_CACHED_OCSP_PER_CRL_COUNT_VALUE_NAME L"CryptnetMaxCachedOcspPerCrlCount" 5160 #define CRYPTNET_MAX_CACHED_OCSP_PER_CRL_COUNT_DEFAULT 500 5161 #define CRYPTNET_OCSP_AFTER_CRL_DISABLE 0xffffffff 5162 #define CRYPTNET_URL_CACHE_DEFAULT_FLUSH_EXEMPT_SECONDS_VALUE_NAME L"CryptnetDefaultFlushExemptSeconds" 5163 #define CRYPTNET_URL_CACHE_DEFAULT_FLUSH_EXEMPT_SECONDS_DEFAULT (28 *24 *60 *60) 5164 #define CRYPTNET_PRE_FETCH_MIN_MAX_AGE_SECONDS_VALUE_NAME L"CryptnetPreFetchMinMaxAgeSeconds" 5165 #define CRYPTNET_PRE_FETCH_MIN_MAX_AGE_SECONDS_DEFAULT (1 *60 *60) 5166 #define CRYPTNET_PRE_FETCH_MAX_MAX_AGE_SECONDS_VALUE_NAME L"CryptnetPreFetchMaxMaxAgeSeconds" 5167 #define CRYPTNET_PRE_FETCH_MAX_MAX_AGE_SECONDS_DEFAULT (14 *24 *60 *60) 5168 #define CRYPTNET_PRE_FETCH_MIN_OCSP_VALIDITY_PERIOD_SECONDS_VALUE_NAME L"CryptnetPreFetchMinOcspValidityPeriodSeconds" 5169 #define CRYPTNET_PRE_FETCH_MIN_OCSP_VALIDITY_PERIOD_SECONDS_DEFAULT (14 *24 *60 *60) 5170 #define CRYPTNET_PRE_FETCH_AFTER_PUBLISH_PRE_FETCH_DIVISOR_VALUE_NAME L"CryptnetPreFetchAfterPublishPreFetchDivisor" 5171 #define CRYPTNET_PRE_FETCH_AFTER_PUBLISH_PRE_FETCH_DIVISOR_DEFAULT 10 5172 #define CRYPTNET_PRE_FETCH_BEFORE_NEXT_UPDATE_PRE_FETCH_DIVISOR_VALUE_NAME L"CryptnetPreFetchBeforeNextUpdatePreFetchDivisor" 5173 #define CRYPTNET_PRE_FETCH_BEFORE_NEXT_UPDATE_PRE_FETCH_DIVISOR_DEFAULT 20 5174 #define CRYPTNET_PRE_FETCH_MIN_BEFORE_NEXT_UPDATE_PRE_FETCH_PERIOD_SECONDS_VALUE_NAME L"CryptnetPreFetchMinBeforeNextUpdatePreFetchSeconds" 5175 #define CRYPTNET_PRE_FETCH_MIN_BEFORE_NEXT_UPDATE_PRE_FETCH_PERIOD_SECONDS_DEFAULT (1 *60 *60) 5176 #define CRYPTNET_PRE_FETCH_VALIDITY_PERIOD_AFTER_NEXT_UPDATE_PRE_FETCH_DIVISOR_VALUE_NAME L"CryptnetPreFetchValidityPeriodAfterNextUpdatePreFetchDivisor" 5177 #define CRYPTNET_PRE_FETCH_VALIDITY_PERIOD_AFTER_NEXT_UPDATE_PRE_FETCH_DIVISOR_DEFAULT 10 5178 #define CRYPTNET_PRE_FETCH_MAX_AFTER_NEXT_UPDATE_PRE_FETCH_PERIOD_SECONDS_VALUE_NAME L"CryptnetPreFetchMaxAfterNextUpdatePreFetchPeriodSeconds" 5179 #define CRYPTNET_PRE_FETCH_MAX_AFTER_NEXT_UPDATE_PRE_FETCH_PERIOD_SECONDS_DEFAULT (4 *60 *60) 5180 #define CRYPTNET_PRE_FETCH_MIN_AFTER_NEXT_UPDATE_PRE_FETCH_PERIOD_SECONDS_VALUE_NAME L"CryptnetPreFetchMinAfterNextUpdatePreFetchPeriodSeconds" 5181 #define CRYPTNET_PRE_FETCH_MIN_AFTER_NEXT_UPDATE_PRE_FETCH_PERIOD_SECONDS_DEFAULT (30 *60) 5182 #define CRYPTNET_PRE_FETCH_AFTER_CURRENT_TIME_PRE_FETCH_PERIOD_SECONDS_VALUE_NAME L"CryptnetPreFetchAfterCurrentTimePreFetchPeriodSeconds" 5183 #define CRYPTNET_PRE_FETCH_AFTER_CURRENT_TIME_PRE_FETCH_PERIOD_SECONDS_DEFAULT (30 *60) 5184 #define CRYPTNET_PRE_FETCH_TRIGGER_PERIOD_SECONDS_VALUE_NAME L"CryptnetPreFetchTriggerPeriodSeconds" 5185 #define CRYPTNET_PRE_FETCH_TRIGGER_PERIOD_SECONDS_DEFAULT (10 *60) 5186 #define CRYPTNET_PRE_FETCH_TRIGGER_DISABLE 0xffffffff 5187 #define CRYPTNET_PRE_FETCH_SCAN_AFTER_TRIGGER_DELAY_SECONDS_VALUE_NAME L"CryptnetPreFetchScanAfterTriggerDelaySeconds" 5188 #define CRYPTNET_PRE_FETCH_SCAN_AFTER_TRIGGER_DELAY_SECONDS_DEFAULT 30 5189 #define CRYPTNET_PRE_FETCH_RETRIEVAL_TIMEOUT_SECONDS_VALUE_NAME L"CryptnetPreFetchRetrievalTimeoutSeconds" 5190 #define CRYPTNET_PRE_FETCH_RETRIEVAL_TIMEOUT_SECONDS_DEFAULT (5 *60) 5191 #define CRYPTNET_CRL_PRE_FETCH_CONFIG_REGPATH CERT_CHAIN_CONFIG_REGPATH L"\\CrlPreFetch" 5192 #define CRYPTNET_CRL_PRE_FETCH_PROCESS_NAME_LIST_VALUE_NAME L"ProcessNameList" 5193 #define CRYPTNET_CRL_PRE_FETCH_URL_LIST_VALUE_NAME L"PreFetchUrlList" 5194 #define CRYPTNET_CRL_PRE_FETCH_DISABLE_INFORMATION_EVENTS_VALUE_NAME L"DisableInformationEvents" 5195 #define CRYPTNET_CRL_PRE_FETCH_LOG_FILE_NAME_VALUE_NAME L"LogFileName" 5196 #define CRYPTNET_CRL_PRE_FETCH_TIMEOUT_SECONDS_VALUE_NAME L"TimeoutSeconds" 5197 #define CRYPTNET_CRL_PRE_FETCH_TIMEOUT_SECONDS_DEFAULT (5 * 60) 5198 #define CRYPTNET_CRL_PRE_FETCH_MAX_AGE_SECONDS_VALUE_NAME L"MaxAgeSeconds" 5199 #define CRYPTNET_CRL_PRE_FETCH_MAX_AGE_SECONDS_DEFAULT (2 * 60 * 60) 5200 #define CRYPTNET_CRL_PRE_FETCH_MAX_AGE_SECONDS_MIN (5 * 60) 5201 #define CRYPTNET_CRL_PRE_FETCH_PUBLISH_BEFORE_NEXT_UPDATE_SECONDS_VALUE_NAME L"PublishBeforeNextUpdateSeconds" 5202 #define CRYPTNET_CRL_PRE_FETCH_PUBLISH_BEFORE_NEXT_UPDATE_SECONDS_DEFAULT (1 * 60 * 60) 5203 #define CRYPTNET_CRL_PRE_FETCH_PUBLISH_RANDOM_INTERVAL_SECONDS_VALUE_NAME L"PublishRandomIntervalSeconds" 5204 #define CRYPTNET_CRL_PRE_FETCH_PUBLISH_RANDOM_INTERVAL_SECONDS_DEFAULT (5 * 60) 5205 #define CRYPTNET_CRL_PRE_FETCH_MIN_BEFORE_NEXT_UPDATE_SECONDS_VALUE_NAME L"MinBeforeNextUpdateSeconds" 5206 #define CRYPTNET_CRL_PRE_FETCH_MIN_BEFORE_NEXT_UPDATE_SECONDS_DEFAULT (5 * 60) 5207 #define CRYPTNET_CRL_PRE_FETCH_MIN_AFTER_NEXT_UPDATE_SECONDS_VALUE_NAME L"MinAfterNextUpdateSeconds" 5208 #define CRYPTNET_CRL_PRE_FETCH_MIN_AFTER_NEXT_UPDATE_SECONDS_DEFAULT (5 * 60) 5209 #define CERT_GROUP_POLICY_CHAIN_CONFIG_REGPATH CERT_GROUP_POLICY_SYSTEM_STORE_REGPATH L"\\ChainEngine\\Config" 5210 #define CERT_CHAIN_URL_RETRIEVAL_TIMEOUT_MILLISECONDS_VALUE_NAME L"ChainUrlRetrievalTimeoutMilliseconds" 5211 #define CERT_CHAIN_URL_RETRIEVAL_TIMEOUT_MILLISECONDS_DEFAULT (15 *1000) 5212 #define CERT_CHAIN_REV_ACCUMULATIVE_URL_RETRIEVAL_TIMEOUT_MILLISECONDS_VALUE_NAME L"ChainRevAccumulativeUrlRetrievalTimeoutMilliseconds" 5213 #define CERT_CHAIN_REV_ACCUMULATIVE_URL_RETRIEVAL_TIMEOUT_MILLISECONDS_DEFAULT (20 *1000) 5214 #define CERT_RETR_BEHAVIOR_INET_AUTH_VALUE_NAME L"EnableInetUnknownAuth" 5215 #define CERT_RETR_BEHAVIOR_INET_STATUS_VALUE_NAME L"EnableInetLocal" 5216 #define CERT_RETR_BEHAVIOR_FILE_VALUE_NAME L"AllowFileUrlScheme" 5217 #define CERT_RETR_BEHAVIOR_LDAP_VALUE_NAME L"DisableLDAPSignAndEncrypt" 5218 #define CRYPTNET_CACHED_OCSP_SWITCH_TO_CRL_COUNT_VALUE_NAME L"CryptnetCachedOcspSwitchToCrlCount" 5219 #define CRYPTNET_CACHED_OCSP_SWITCH_TO_CRL_COUNT_DEFAULT 50 5220 #define CRYPTNET_CRL_BEFORE_OCSP_ENABLE 0xffffffff 5221 #define CERT_CHAIN_DISABLE_AIA_URL_RETRIEVAL_VALUE_NAME L"DisableAIAUrlRetrieval" 5222 #define CERT_CHAIN_OPTIONS_VALUE_NAME L"Options" 5223 #define CERT_CHAIN_OPTION_DISABLE_AIA_URL_RETRIEVAL 0x2 5224 #define CERT_CHAIN_OPTION_ENABLE_SIA_URL_RETRIEVAL 0x4 5225 #define CERT_CHAIN_CROSS_CERT_DOWNLOAD_INTERVAL_HOURS_VALUE_NAME L"CrossCertDownloadIntervalHours" 5226 #define CERT_CHAIN_CROSS_CERT_DOWNLOAD_INTERVAL_HOURS_DEFAULT (24 *7) 5227 #define CERT_CHAIN_CRL_VALIDITY_EXT_PERIOD_HOURS_VALUE_NAME L"CRLValidityExtensionPeriod" 5228 #define CERT_CHAIN_CRL_VALIDITY_EXT_PERIOD_HOURS_DEFAULT 12 5229 5230 #define HCCE_CURRENT_USER ((HCERTCHAINENGINE)NULL) 5231 #define HCCE_LOCAL_MACHINE ((HCERTCHAINENGINE)0x1) 5232 #define HCCE_SERIAL_LOCAL_MACHINE ((HCERTCHAINENGINE)0x2) 5233 5234 #define CERT_CHAIN_CACHE_END_CERT 0x1 5235 #define CERT_CHAIN_THREAD_STORE_SYNC 0x2 5236 #define CERT_CHAIN_CACHE_ONLY_URL_RETRIEVAL 0x4 5237 #define CERT_CHAIN_USE_LOCAL_MACHINE_STORE 0x8 5238 #define CERT_CHAIN_ENABLE_CACHE_AUTO_UPDATE 0x10 5239 #define CERT_CHAIN_ENABLE_SHARE_STORE 0x20 5240 5241 typedef HANDLE HCERTCHAINENGINE; 5242 5243 typedef struct _CERT_CHAIN_ENGINE_CONFIG { 5244 DWORD cbSize; 5245 HCERTSTORE hRestrictedRoot; 5246 HCERTSTORE hRestrictedTrust; 5247 HCERTSTORE hRestrictedOther; 5248 DWORD cAdditionalStore; 5249 HCERTSTORE *rghAdditionalStore; 5250 DWORD dwFlags; 5251 DWORD dwUrlRetrievalTimeout; 5252 DWORD MaximumCachedCertificates; 5253 DWORD CycleDetectionModulus; 5254 #if NTDDI_VERSION >= NTDDI_WIN7 5255 HCERTSTORE hExclusiveRoot; 5256 HCERTSTORE hExclusiveTrustedPeople; 5257 #endif 5258 #if NTDDI_VERSION >= NTDDI_WIN8 5259 DWORD dwExclusiveFlags; 5260 #endif 5261 } CERT_CHAIN_ENGINE_CONFIG,*PCERT_CHAIN_ENGINE_CONFIG; 5262 5263 #if NTDDI_VERSION >= NTDDI_WIN8 5264 #define CERT_CHAIN_EXCLUSIVE_ENABLE_CA_FLAG 0x1 5265 #endif 5266 5267 WINIMPM WINBOOL WINAPI CertCreateCertificateChainEngine (PCERT_CHAIN_ENGINE_CONFIG pConfig, HCERTCHAINENGINE *phChainEngine); 5268 WINIMPM VOID WINAPI CertFreeCertificateChainEngine (HCERTCHAINENGINE hChainEngine); 5269 WINIMPM WINBOOL WINAPI CertResyncCertificateChainEngine (HCERTCHAINENGINE hChainEngine); 5270 5271 typedef struct _CERT_TRUST_STATUS { 5272 DWORD dwErrorStatus; 5273 DWORD dwInfoStatus; 5274 } CERT_TRUST_STATUS,*PCERT_TRUST_STATUS; 5275 5276 #define CERT_TRUST_NO_ERROR 0x0 5277 #define CERT_TRUST_IS_NOT_TIME_VALID 0x1 5278 #define CERT_TRUST_IS_NOT_TIME_NESTED 0x2 5279 #define CERT_TRUST_IS_REVOKED 0x4 5280 #define CERT_TRUST_IS_NOT_SIGNATURE_VALID 0x8 5281 #define CERT_TRUST_IS_NOT_VALID_FOR_USAGE 0x10 5282 #define CERT_TRUST_IS_UNTRUSTED_ROOT 0x20 5283 #define CERT_TRUST_REVOCATION_STATUS_UNKNOWN 0x40 5284 #define CERT_TRUST_IS_CYCLIC 0x80 5285 #define CERT_TRUST_INVALID_EXTENSION 0x100 5286 #define CERT_TRUST_INVALID_POLICY_CONSTRAINTS 0x200 5287 #define CERT_TRUST_INVALID_BASIC_CONSTRAINTS 0x400 5288 #define CERT_TRUST_INVALID_NAME_CONSTRAINTS 0x800 5289 #define CERT_TRUST_HAS_NOT_SUPPORTED_NAME_CONSTRAINT 0x1000 5290 #define CERT_TRUST_HAS_NOT_DEFINED_NAME_CONSTRAINT 0x2000 5291 #define CERT_TRUST_HAS_NOT_PERMITTED_NAME_CONSTRAINT 0x4000 5292 #define CERT_TRUST_HAS_EXCLUDED_NAME_CONSTRAINT 0x8000 5293 #define CERT_TRUST_IS_PARTIAL_CHAIN 0x10000 5294 #define CERT_TRUST_CTL_IS_NOT_TIME_VALID 0x20000 5295 #define CERT_TRUST_CTL_IS_NOT_SIGNATURE_VALID 0x40000 5296 #define CERT_TRUST_CTL_IS_NOT_VALID_FOR_USAGE 0x80000 5297 #define CERT_TRUST_IS_OFFLINE_REVOCATION 0x1000000 5298 #define CERT_TRUST_NO_ISSUANCE_CHAIN_POLICY 0x2000000 5299 #define CERT_TRUST_IS_EXPLICIT_DISTRUST 0x4000000 5300 #define CERT_TRUST_HAS_NOT_SUPPORTED_CRITICAL_EXT 0x8000000 5301 #define CERT_TRUST_HAS_WEAK_SIGNATURE 0x100000 5302 5303 #define CERT_TRUST_HAS_EXACT_MATCH_ISSUER 0x1 5304 #define CERT_TRUST_HAS_KEY_MATCH_ISSUER 0x2 5305 #define CERT_TRUST_HAS_NAME_MATCH_ISSUER 0x4 5306 #define CERT_TRUST_IS_SELF_SIGNED 0x8 5307 #define CERT_TRUST_AUTO_UPDATE_CA_REVOCATION 0x10 5308 #define CERT_TRUST_AUTO_UPDATE_END_REVOCATION 0x20 5309 #define CERT_TRUST_NO_OCSP_FAILOVER_TO_CRL 0x40 5310 #define CERT_TRUST_IS_KEY_ROLLOVER 0x00000080 5311 #define CERT_TRUST_SSL_HANDSHAKE_OCSP 0x00040000 5312 #define CERT_TRUST_SSL_TIME_VALID_OCSP 0x00080000 5313 #define CERT_TRUST_SSL_RECONNECT_OCSP 0x00100000 5314 5315 #define CERT_TRUST_HAS_PREFERRED_ISSUER 0x100 5316 #define CERT_TRUST_HAS_ISSUANCE_CHAIN_POLICY 0x200 5317 #define CERT_TRUST_HAS_VALID_NAME_CONSTRAINTS 0x400 5318 #define CERT_TRUST_IS_PEER_TRUSTED 0x800 5319 #define CERT_TRUST_HAS_CRL_VALIDITY_EXTENDED 0x1000 5320 #define CERT_TRUST_IS_FROM_EXCLUSIVE_TRUST_STORE 0x2000 5321 #if NTDDI_VERSION >= NTDDI_WIN8 5322 #define CERT_TRUST_IS_CA_TRUSTED 0x00004000 5323 #define CERT_TRUST_HAS_AUTO_UPDATE_WEAK_SIGNATURE 0x00008000 5324 #define CERT_TRUST_HAS_ALLOW_WEAK_SIGNATURE 0x00020000 5325 #endif 5326 #define CERT_TRUST_IS_COMPLEX_CHAIN 0x00010000 5327 #define CERT_TRUST_SSL_TIME_VALID 0x01000000 5328 #define CERT_TRUST_NO_TIME_CHECK 0x02000000 5329 5330 typedef struct _CERT_REVOCATION_INFO { 5331 DWORD cbSize; 5332 DWORD dwRevocationResult; 5333 LPCSTR pszRevocationOid; 5334 LPVOID pvOidSpecificInfo; 5335 WINBOOL fHasFreshnessTime; 5336 DWORD dwFreshnessTime; 5337 PCERT_REVOCATION_CRL_INFO pCrlInfo; 5338 } CERT_REVOCATION_INFO,*PCERT_REVOCATION_INFO; 5339 5340 typedef struct _CERT_TRUST_LIST_INFO { 5341 DWORD cbSize; 5342 PCTL_ENTRY pCtlEntry; 5343 PCCTL_CONTEXT pCtlContext; 5344 } CERT_TRUST_LIST_INFO,*PCERT_TRUST_LIST_INFO; 5345 5346 typedef struct _CERT_CHAIN_ELEMENT { 5347 DWORD cbSize; 5348 PCCERT_CONTEXT pCertContext; 5349 CERT_TRUST_STATUS TrustStatus; 5350 PCERT_REVOCATION_INFO pRevocationInfo; 5351 PCERT_ENHKEY_USAGE pIssuanceUsage; 5352 PCERT_ENHKEY_USAGE pApplicationUsage; 5353 LPCWSTR pwszExtendedErrorInfo; 5354 } CERT_CHAIN_ELEMENT,*PCERT_CHAIN_ELEMENT; 5355 5356 typedef const CERT_CHAIN_ELEMENT *PCCERT_CHAIN_ELEMENT; 5357 5358 typedef struct _CERT_SIMPLE_CHAIN { 5359 DWORD cbSize; 5360 CERT_TRUST_STATUS TrustStatus; 5361 DWORD cElement; 5362 PCERT_CHAIN_ELEMENT *rgpElement; 5363 PCERT_TRUST_LIST_INFO pTrustListInfo; 5364 WINBOOL fHasRevocationFreshnessTime; 5365 DWORD dwRevocationFreshnessTime; 5366 } CERT_SIMPLE_CHAIN,*PCERT_SIMPLE_CHAIN; 5367 5368 typedef const CERT_SIMPLE_CHAIN *PCCERT_SIMPLE_CHAIN; 5369 5370 typedef struct _CERT_CHAIN_CONTEXT CERT_CHAIN_CONTEXT,*PCERT_CHAIN_CONTEXT; 5371 typedef const CERT_CHAIN_CONTEXT *PCCERT_CHAIN_CONTEXT; 5372 5373 struct _CERT_CHAIN_CONTEXT { 5374 DWORD cbSize; 5375 CERT_TRUST_STATUS TrustStatus; 5376 DWORD cChain; 5377 PCERT_SIMPLE_CHAIN *rgpChain; 5378 DWORD cLowerQualityChainContext; 5379 PCCERT_CHAIN_CONTEXT *rgpLowerQualityChainContext; 5380 WINBOOL fHasRevocationFreshnessTime; 5381 DWORD dwRevocationFreshnessTime; 5382 DWORD dwCreateFlags; 5383 GUID ChainId; 5384 }; 5385 5386 #define USAGE_MATCH_TYPE_AND 0x0 5387 #define USAGE_MATCH_TYPE_OR 0x1 5388 5389 typedef struct _CERT_USAGE_MATCH { 5390 DWORD dwType; 5391 CERT_ENHKEY_USAGE Usage; 5392 } CERT_USAGE_MATCH,*PCERT_USAGE_MATCH; 5393 5394 typedef struct _CTL_USAGE_MATCH { 5395 DWORD dwType; 5396 CTL_USAGE Usage; 5397 } CTL_USAGE_MATCH,*PCTL_USAGE_MATCH; 5398 5399 typedef struct _CERT_CHAIN_PARA { 5400 DWORD cbSize; 5401 CERT_USAGE_MATCH RequestedUsage; 5402 #ifdef CERT_CHAIN_PARA_HAS_EXTRA_FIELDS 5403 CERT_USAGE_MATCH RequestedIssuancePolicy; 5404 DWORD dwUrlRetrievalTimeout; 5405 WINBOOL fCheckRevocationFreshnessTime; 5406 DWORD dwRevocationFreshnessTime; 5407 LPFILETIME pftCacheResync; 5408 PCCERT_STRONG_SIGN_PARA pStrongSignPara; 5409 DWORD dwStrongSignFlags; 5410 #endif 5411 } CERT_CHAIN_PARA,*PCERT_CHAIN_PARA; 5412 5413 #define CERT_CHAIN_STRONG_SIGN_DISABLE_END_CHECK_FLAG 0x1 5414 #define CERT_CHAIN_DISABLE_PASS1_QUALITY_FILTERING 0x40 5415 #define CERT_CHAIN_RETURN_LOWER_QUALITY_CONTEXTS 0x80 5416 #define CERT_CHAIN_DISABLE_AUTH_ROOT_AUTO_UPDATE 0x100 5417 #define CERT_CHAIN_TIMESTAMP_TIME 0x200 5418 #define CERT_CHAIN_ENABLE_PEER_TRUST 0x400 5419 #define CERT_CHAIN_DISABLE_MY_PEER_TRUST 0x800 5420 #define CERT_CHAIN_DISABLE_MD2_MD4 0x1000 5421 #define CERT_CHAIN_DISABLE_AIA 0x2000 5422 #define CERT_CHAIN_HAS_MOTW 0x4000 5423 #define CERT_CHAIN_ONLY_ADDITIONAL_AND_AUTH_ROOT 0x8000 5424 #define CERT_CHAIN_OPT_IN_WEAK_SIGNATURE 0x10000 5425 #define CERT_CHAIN_REVOCATION_CHECK_END_CERT 0x10000000 5426 #define CERT_CHAIN_REVOCATION_CHECK_CHAIN 0x20000000 5427 #define CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT 0x40000000 5428 #define CERT_CHAIN_REVOCATION_CHECK_CACHE_ONLY 0x80000000 5429 #define CERT_CHAIN_REVOCATION_ACCUMULATIVE_TIMEOUT 0x8000000 5430 #define CERT_CHAIN_REVOCATION_CHECK_OCSP_CERT 0x4000000 5431 5432 WINIMPM WINBOOL WINAPI CertGetCertificateChain (HCERTCHAINENGINE hChainEngine, PCCERT_CONTEXT pCertContext, LPFILETIME pTime, HCERTSTORE hAdditionalStore, PCERT_CHAIN_PARA pChainPara, DWORD dwFlags, LPVOID pvReserved, PCCERT_CHAIN_CONTEXT *ppChainContext); 5433 WINIMPM VOID WINAPI CertFreeCertificateChain (PCCERT_CHAIN_CONTEXT pChainContext); 5434 WINIMPM PCCERT_CHAIN_CONTEXT WINAPI CertDuplicateCertificateChain (PCCERT_CHAIN_CONTEXT pChainContext); 5435 5436 struct _CERT_REVOCATION_CHAIN_PARA { 5437 DWORD cbSize; 5438 HCERTCHAINENGINE hChainEngine; 5439 HCERTSTORE hAdditionalStore; 5440 DWORD dwChainFlags; 5441 DWORD dwUrlRetrievalTimeout; 5442 LPFILETIME pftCurrentTime; 5443 LPFILETIME pftCacheResync; 5444 DWORD cbMaxUrlRetrievalByteCount; 5445 }; 5446 5447 #define REVOCATION_OID_CRL_REVOCATION ((LPCSTR)1) 5448 5449 typedef struct _CRL_REVOCATION_INFO { 5450 PCRL_ENTRY pCrlEntry; 5451 PCCRL_CONTEXT pCrlContext; 5452 PCCERT_CHAIN_CONTEXT pCrlIssuerChain; 5453 } CRL_REVOCATION_INFO,*PCRL_REVOCATION_INFO; 5454 5455 WINIMPM PCCERT_CHAIN_CONTEXT WINAPI CertFindChainInStore (HCERTSTORE hCertStore, DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType, const void *pvFindPara, PCCERT_CHAIN_CONTEXT pPrevChainContext); 5456 5457 #define CERT_CHAIN_FIND_BY_ISSUER 1 5458 5459 typedef WINBOOL (WINAPI *PFN_CERT_CHAIN_FIND_BY_ISSUER_CALLBACK) (PCCERT_CONTEXT pCert, void *pvFindArg); 5460 5461 typedef struct _CERT_CHAIN_FIND_BY_ISSUER_PARA { 5462 DWORD cbSize; 5463 LPCSTR pszUsageIdentifier; 5464 DWORD dwKeySpec; 5465 DWORD dwAcquirePrivateKeyFlags; 5466 DWORD cIssuer; 5467 CERT_NAME_BLOB *rgIssuer; 5468 PFN_CERT_CHAIN_FIND_BY_ISSUER_CALLBACK pfnFindCallback; 5469 void *pvFindArg; 5470 #ifdef CERT_CHAIN_FIND_BY_ISSUER_PARA_HAS_EXTRA_FIELDS 5471 DWORD *pdwIssuerChainIndex; 5472 DWORD *pdwIssuerElementIndex; 5473 #endif 5474 } CERT_CHAIN_FIND_ISSUER_PARA,*PCERT_CHAIN_FIND_ISSUER_PARA,CERT_CHAIN_FIND_BY_ISSUER_PARA,*PCERT_CHAIN_FIND_BY_ISSUER_PARA; 5475 5476 #define CERT_CHAIN_FIND_BY_ISSUER_COMPARE_KEY_FLAG 0x1 5477 #define CERT_CHAIN_FIND_BY_ISSUER_COMPLEX_CHAIN_FLAG 0x2 5478 #define CERT_CHAIN_FIND_BY_ISSUER_CACHE_ONLY_URL_FLAG 0x4 5479 #define CERT_CHAIN_FIND_BY_ISSUER_LOCAL_MACHINE_FLAG 0x8 5480 #define CERT_CHAIN_FIND_BY_ISSUER_NO_KEY_FLAG 0x4000 5481 #define CERT_CHAIN_FIND_BY_ISSUER_CACHE_ONLY_FLAG 0x8000 5482 5483 typedef struct _CERT_CHAIN_POLICY_PARA { 5484 DWORD cbSize; 5485 DWORD dwFlags; 5486 void *pvExtraPolicyPara; 5487 } CERT_CHAIN_POLICY_PARA,*PCERT_CHAIN_POLICY_PARA; 5488 5489 typedef struct _CERT_CHAIN_POLICY_STATUS { 5490 DWORD cbSize; 5491 DWORD dwError; 5492 LONG lChainIndex; 5493 LONG lElementIndex; 5494 void *pvExtraPolicyStatus; 5495 } CERT_CHAIN_POLICY_STATUS,*PCERT_CHAIN_POLICY_STATUS; 5496 5497 #define CERT_CHAIN_POLICY_IGNORE_NOT_TIME_VALID_FLAG 0x1 5498 #define CERT_CHAIN_POLICY_IGNORE_CTL_NOT_TIME_VALID_FLAG 0x2 5499 #define CERT_CHAIN_POLICY_IGNORE_NOT_TIME_NESTED_FLAG 0x4 5500 #define CERT_CHAIN_POLICY_IGNORE_INVALID_BASIC_CONSTRAINTS_FLAG 0x8 5501 5502 #define CERT_CHAIN_POLICY_IGNORE_ALL_NOT_TIME_VALID_FLAGS (CERT_CHAIN_POLICY_IGNORE_NOT_TIME_VALID_FLAG | CERT_CHAIN_POLICY_IGNORE_CTL_NOT_TIME_VALID_FLAG | CERT_CHAIN_POLICY_IGNORE_NOT_TIME_NESTED_FLAG) 5503 5504 #define CERT_CHAIN_POLICY_ALLOW_UNKNOWN_CA_FLAG 0x10 5505 #define CERT_CHAIN_POLICY_IGNORE_WRONG_USAGE_FLAG 0x20 5506 #define CERT_CHAIN_POLICY_IGNORE_INVALID_NAME_FLAG 0x40 5507 #define CERT_CHAIN_POLICY_IGNORE_INVALID_POLICY_FLAG 0x80 5508 5509 #define CERT_CHAIN_POLICY_IGNORE_END_REV_UNKNOWN_FLAG 0x100 5510 #define CERT_CHAIN_POLICY_IGNORE_CTL_SIGNER_REV_UNKNOWN_FLAG 0x200 5511 #define CERT_CHAIN_POLICY_IGNORE_CA_REV_UNKNOWN_FLAG 0x400 5512 #define CERT_CHAIN_POLICY_IGNORE_ROOT_REV_UNKNOWN_FLAG 0x800 5513 5514 #define CERT_CHAIN_POLICY_IGNORE_ALL_REV_UNKNOWN_FLAGS (CERT_CHAIN_POLICY_IGNORE_END_REV_UNKNOWN_FLAG | CERT_CHAIN_POLICY_IGNORE_CTL_SIGNER_REV_UNKNOWN_FLAG | CERT_CHAIN_POLICY_IGNORE_CA_REV_UNKNOWN_FLAG | CERT_CHAIN_POLICY_IGNORE_ROOT_REV_UNKNOWN_FLAG) 5515 5516 #define CERT_CHAIN_POLICY_IGNORE_PEER_TRUST_FLAG 0x1000 5517 #define CERT_CHAIN_POLICY_IGNORE_NOT_SUPPORTED_CRITICAL_EXT_FLAG 0x2000 5518 #define CERT_CHAIN_POLICY_TRUST_TESTROOT_FLAG 0x4000 5519 #define CERT_CHAIN_POLICY_ALLOW_TESTROOT_FLAG 0x8000 5520 5521 WINIMPM WINBOOL WINAPI CertVerifyCertificateChainPolicy (LPCSTR pszPolicyOID, PCCERT_CHAIN_CONTEXT pChainContext, PCERT_CHAIN_POLICY_PARA pPolicyPara, PCERT_CHAIN_POLICY_STATUS pPolicyStatus); 5522 5523 #define CRYPT_OID_VERIFY_CERTIFICATE_CHAIN_POLICY_FUNC "CertDllVerifyCertificateChainPolicy" 5524 5525 #define CERT_CHAIN_POLICY_BASE ((LPCSTR) 1) 5526 #define CERT_CHAIN_POLICY_AUTHENTICODE ((LPCSTR) 2) 5527 #define CERT_CHAIN_POLICY_AUTHENTICODE_TS ((LPCSTR) 3) 5528 #define CERT_CHAIN_POLICY_SSL ((LPCSTR) 4) 5529 #define CERT_CHAIN_POLICY_BASIC_CONSTRAINTS ((LPCSTR) 5) 5530 #define CERT_CHAIN_POLICY_NT_AUTH ((LPCSTR) 6) 5531 #define CERT_CHAIN_POLICY_MICROSOFT_ROOT ((LPCSTR) 7) 5532 #define CERT_CHAIN_POLICY_EV ((LPCSTR) 8) 5533 #define CERT_CHAIN_POLICY_SSL_F12 ((LPCSTR) 9) 5534 #define CERT_CHAIN_POLICY_SSL_HPKP_HEADER ((LPCSTR) 10) 5535 #define CERT_CHAIN_POLICY_THIRD_PARTY_ROOT ((LPCSTR) 11) 5536 #define CERT_CHAIN_POLICY_SSL_KEY_PIN ((LPCSTR) 12) 5537 5538 typedef struct _AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_PARA { 5539 DWORD cbSize; 5540 DWORD dwRegPolicySettings; 5541 PCMSG_SIGNER_INFO pSignerInfo; 5542 } AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_PARA, *PAUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_PARA; 5543 5544 typedef struct _AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_STATUS { 5545 DWORD cbSize; 5546 WINBOOL fCommercial; 5547 } AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_STATUS, *PAUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_STATUS; 5548 5549 typedef struct _AUTHENTICODE_TS_EXTRA_CERT_CHAIN_POLICY_PARA { 5550 DWORD cbSize; 5551 DWORD dwRegPolicySettings; 5552 WINBOOL fCommercial; 5553 } AUTHENTICODE_TS_EXTRA_CERT_CHAIN_POLICY_PARA,*PAUTHENTICODE_TS_EXTRA_CERT_CHAIN_POLICY_PARA; 5554 5555 #define AUTHTYPE_CLIENT 1 5556 #define AUTHTYPE_SERVER 2 5557 5558 typedef struct _HTTPSPolicyCallbackData { 5559 __C89_NAMELESS union { 5560 DWORD cbStruct; 5561 DWORD cbSize; 5562 }; 5563 DWORD dwAuthType; 5564 DWORD fdwChecks; 5565 WCHAR *pwszServerName; 5566 } HTTPSPolicyCallbackData,*PHTTPSPolicyCallbackData,SSL_EXTRA_CERT_CHAIN_POLICY_PARA,*PSSL_EXTRA_CERT_CHAIN_POLICY_PARA; 5567 5568 #define BASIC_CONSTRAINTS_CERT_CHAIN_POLICY_CA_FLAG 0x80000000 5569 #define BASIC_CONSTRAINTS_CERT_CHAIN_POLICY_END_ENTITY_FLAG 0x40000000 5570 #define MICROSOFT_ROOT_CERT_CHAIN_POLICY_ENABLE_TEST_ROOT_FLAG 0x00010000 5571 #define MICROSOFT_ROOT_CERT_CHAIN_POLICY_CHECK_APPLICATION_ROOT_FLAG 0x00020000 5572 #define MICROSOFT_ROOT_CERT_CHAIN_POLICY_DISABLE_FLIGHT_ROOT_FLAG 0x00040000 5573 5574 typedef struct _EV_EXTRA_CERT_CHAIN_POLICY_PARA { 5575 DWORD cbSize; 5576 DWORD dwRootProgramQualifierFlags; 5577 } EV_EXTRA_CERT_CHAIN_POLICY_PARA,*PEV_EXTRA_CERT_CHAIN_POLICY_PARA; 5578 5579 typedef struct _EV_EXTRA_CERT_CHAIN_POLICY_STATUS { 5580 DWORD cbSize; 5581 DWORD dwQualifiers; 5582 DWORD dwIssuanceUsageIndex; 5583 } EV_EXTRA_CERT_CHAIN_POLICY_STATUS,*PEV_EXTRA_CERT_CHAIN_POLICY_STATUS; 5584 5585 #define SSL_F12_ERROR_TEXT_LENGTH 256 5586 typedef struct _SSL_F12_EXTRA_CERT_CHAIN_POLICY_STATUS { 5587 DWORD cbSize; 5588 DWORD dwErrorLevel; 5589 DWORD dwErrorCategory; 5590 DWORD dwReserved; 5591 WCHAR wszErrorText[SSL_F12_ERROR_TEXT_LENGTH]; // Localized 5592 } SSL_F12_EXTRA_CERT_CHAIN_POLICY_STATUS, *PSSL_F12_EXTRA_CERT_CHAIN_POLICY_STATUS; 5593 5594 #define CERT_CHAIN_POLICY_SSL_F12_SUCCESS_LEVEL 0 5595 #define CERT_CHAIN_POLICY_SSL_F12_WARNING_LEVEL 1 5596 #define CERT_CHAIN_POLICY_SSL_F12_ERROR_LEVEL 2 5597 5598 #define CERT_CHAIN_POLICY_SSL_F12_NONE_CATEGORY 0 5599 #define CERT_CHAIN_POLICY_SSL_F12_WEAK_CRYPTO_CATEGORY 1 5600 #define CERT_CHAIN_POLICY_SSL_F12_ROOT_PROGRAM_CATEGORY 2 5601 5602 #define SSL_HPKP_PKP_HEADER_INDEX 0 5603 #define SSL_HPKP_PKP_RO_HEADER_INDEX 1 5604 #define SSL_HPKP_HEADER_COUNT 2 5605 5606 typedef struct _SSL_HPKP_HEADER_EXTRA_CERT_CHAIN_POLICY_PARA { 5607 DWORD cbSize; 5608 DWORD dwReserved; 5609 LPWSTR pwszServerName; 5610 LPSTR rgpszHpkpValue[SSL_HPKP_HEADER_COUNT]; 5611 } SSL_HPKP_HEADER_EXTRA_CERT_CHAIN_POLICY_PARA, *PSSL_HPKP_HEADER_EXTRA_CERT_CHAIN_POLICY_PARA; 5612 5613 typedef struct _SSL_KEY_PIN_EXTRA_CERT_CHAIN_POLICY_PARA { 5614 DWORD cbSize; 5615 DWORD dwReserved; 5616 PCWSTR pwszServerName; 5617 } SSL_KEY_PIN_EXTRA_CERT_CHAIN_POLICY_PARA, *PSSL_KEY_PIN_EXTRA_CERT_CHAIN_POLICY_PARA; 5618 5619 #define SSL_KEY_PIN_ERROR_TEXT_LENGTH 512 5620 typedef struct _SSL_KEY_PIN_EXTRA_CERT_CHAIN_POLICY_STATUS { 5621 DWORD cbSize; 5622 LONG lError; 5623 WCHAR wszErrorText[SSL_KEY_PIN_ERROR_TEXT_LENGTH]; 5624 } SSL_KEY_PIN_EXTRA_CERT_CHAIN_POLICY_STATUS, *PSSL_KEY_PIN_EXTRA_CERT_CHAIN_POLICY_STATUS; 5625 5626 #define CERT_CHAIN_POLICY_SSL_KEY_PIN_MISMATCH_ERROR -2 5627 #define CERT_CHAIN_POLICY_SSL_KEY_PIN_MITM_ERROR -1 5628 #define CERT_CHAIN_POLICY_SSL_KEY_PIN_SUCCESS 0 5629 #define CERT_CHAIN_POLICY_SSL_KEY_PIN_MITM_WARNING 1 5630 #define CERT_CHAIN_POLICY_SSL_KEY_PIN_MISMATCH_WARNING 2 5631 5632 #define CryptStringToBinary __MINGW_NAME_AW(CryptStringToBinary) 5633 #define CryptBinaryToString __MINGW_NAME_AW(CryptBinaryToString) 5634 5635 WINIMPM WINBOOL WINAPI CryptStringToBinaryA (LPCSTR pszString, DWORD cchString, DWORD dwFlags, BYTE *pbBinary, DWORD *pcbBinary, DWORD *pdwSkip, DWORD *pdwFlags); 5636 WINIMPM WINBOOL WINAPI CryptStringToBinaryW (LPCWSTR pszString, DWORD cchString, DWORD dwFlags, BYTE *pbBinary, DWORD *pcbBinary, DWORD *pdwSkip, DWORD *pdwFlags); 5637 WINIMPM WINBOOL WINAPI CryptBinaryToStringA (CONST BYTE *pbBinary, DWORD cbBinary, DWORD dwFlags, LPSTR pszString, DWORD *pcchString); 5638 WINIMPM WINBOOL WINAPI CryptBinaryToStringW (CONST BYTE *pbBinary, DWORD cbBinary, DWORD dwFlags, LPWSTR pszString, DWORD *pcchString); 5639 5640 #define CRYPT_STRING_BASE64HEADER 0x0 5641 #define CRYPT_STRING_BASE64 0x1 5642 #define CRYPT_STRING_BINARY 0x2 5643 #define CRYPT_STRING_BASE64REQUESTHEADER 0x00000003 5644 #define CRYPT_STRING_HEX 0x4 5645 #define CRYPT_STRING_HEXASCII 0x00000005 5646 #define CRYPT_STRING_BASE64_ANY 0x00000006 5647 #define CRYPT_STRING_ANY 0x00000007 5648 #define CRYPT_STRING_HEX_ANY 0x8 5649 #define CRYPT_STRING_BASE64X509CRLHEADER 0x00000009 5650 #define CRYPT_STRING_HEXADDR 0x0000000a 5651 #define CRYPT_STRING_HEXASCIIADDR 0x0000000b 5652 #define CRYPT_STRING_HEXRAW 0x0000000c 5653 #define CRYPT_STRING_BASE64URI 0x0000000d 5654 5655 #define CRYPT_STRING_ENCODEMASK 0x000000ff 5656 #define CRYPT_STRING_RESERVED100 0x00000100 5657 #define CRYPT_STRING_RESERVED200 0x00000200 5658 5659 #define CRYPT_STRING_PERCENTESCAPE 0x08000000 5660 #define CRYPT_STRING_HASHDATA 0x10000000 5661 #define CRYPT_STRING_STRICT 0x20000000 5662 #define CRYPT_STRING_NOCRLF 0x40000000 5663 #define CRYPT_STRING_NOCR 0x80000000 5664 5665 #define szOID_PKCS_12_PbeIds "1.2.840.113549.1.12.1" 5666 #define szOID_PKCS_12_pbeWithSHA1And128BitRC4 "1.2.840.113549.1.12.1.1" 5667 #define szOID_PKCS_12_pbeWithSHA1And40BitRC4 "1.2.840.113549.1.12.1.2" 5668 #define szOID_PKCS_12_pbeWithSHA1And3KeyTripleDES "1.2.840.113549.1.12.1.3" 5669 #define szOID_PKCS_12_pbeWithSHA1And2KeyTripleDES "1.2.840.113549.1.12.1.4" 5670 #define szOID_PKCS_12_pbeWithSHA1And128BitRC2 "1.2.840.113549.1.12.1.5" 5671 #define szOID_PKCS_12_pbeWithSHA1And40BitRC2 "1.2.840.113549.1.12.1.6" 5672 #define szOID_PKCS_5_PBKDF2 "1.2.840.113549.1.5.12" 5673 #define szOID_PKCS_5_PBES2 "1.2.840.113549.1.5.13" 5674 5675 typedef struct _CRYPT_PKCS12_PBE_PARAMS { 5676 int iIterations; 5677 ULONG cbSalt; 5678 } CRYPT_PKCS12_PBE_PARAMS; 5679 5680 #endif 5681 5682 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP) || _WIN32_WINNT >= 0x0A00 5683 WINIMPM HCERTSTORE WINAPI PFXImportCertStore (CRYPT_DATA_BLOB *pPFX, LPCWSTR szPassword, DWORD dwFlags); 5684 #endif 5685 5686 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP) 5687 5688 #define PKCS12_IMPORT_SILENT 0x40 5689 #define CRYPT_USER_KEYSET 0x1000 5690 #define PKCS12_PREFER_CNG_KSP 0x100 5691 #define PKCS12_ALWAYS_CNG_KSP 0x200 5692 #define PKCS12_ONLY_CERTIFICATES 0x00000400 5693 #define PKCS12_ONLY_NOT_ENCRYPTED_CERTIFICATES 0x00000800 5694 #define PKCS12_ALLOW_OVERWRITE_KEY 0x4000 5695 #define PKCS12_NO_PERSIST_KEY 0x8000 5696 #define PKCS12_VIRTUAL_ISOLATION_KEY 0x00010000 5697 #define PKCS12_IMPORT_RESERVED_MASK 0xffff0000 5698 5699 #define PKCS12_OBJECT_LOCATOR_ALL_IMPORT_FLAGS (PKCS12_ALWAYS_CNG_KSP | PKCS12_NO_PERSIST_KEY | PKCS12_IMPORT_SILENT | PKCS12_INCLUDE_EXTENDED_PROPERTIES) 5700 5701 #define PKCS12_ONLY_CERTIFICATES_PROVIDER_TYPE 0 5702 #define PKCS12_ONLY_CERTIFICATES_PROVIDER_NAME L"PfxProvider" 5703 #define PKCS12_ONLY_CERTIFICATES_CONTAINER_NAME L"PfxContainer" 5704 5705 WINIMPM WINBOOL WINAPI PFXIsPFXBlob (CRYPT_DATA_BLOB *pPFX); 5706 WINIMPM WINBOOL WINAPI PFXVerifyPassword (CRYPT_DATA_BLOB *pPFX, LPCWSTR szPassword, DWORD dwFlags); 5707 WINIMPM WINBOOL WINAPI PFXExportCertStoreEx (HCERTSTORE hStore, CRYPT_DATA_BLOB *pPFX, LPCWSTR szPassword, void *pvPara, DWORD dwFlags); 5708 5709 #define REPORT_NO_PRIVATE_KEY 0x1 5710 #define REPORT_NOT_ABLE_TO_EXPORT_PRIVATE_KEY 0x2 5711 #define EXPORT_PRIVATE_KEYS 0x4 5712 #define PKCS12_INCLUDE_EXTENDED_PROPERTIES 0x10 5713 #define PKCS12_PROTECT_TO_DOMAIN_SIDS 0x20 5714 #define PKCS12_EXPORT_SILENT 0x40 5715 #define PKCS12_EXPORT_PBES2_PARAMS 0x0080 5716 #define PKCS12_DISABLE_ENCRYPT_CERTIFICATES 0x0100 5717 #define PKCS12_ENCRYPT_CERTIFICATES 0x0200 5718 #define PKCS12_EXPORT_ECC_CURVE_PARAMETERS 0x1000 5719 #define PKCS12_EXPORT_ECC_CURVE_OID 0x2000 5720 #define PKCS12_EXPORT_RESERVED_MASK 0xffff0000 5721 5722 #define PKCS12_PBKDF2_ID_HMAC_SHA1 "1.2.840.113549.2.7" 5723 #define PKCS12_PBKDF2_ID_HMAC_SHA256 "1.2.840.113549.2.9" 5724 #define PKCS12_PBKDF2_ID_HMAC_SHA384 "1.2.840.113549.2.10" 5725 #define PKCS12_PBKDF2_ID_HMAC_SHA512 "1.2.840.113549.2.11" 5726 5727 typedef struct _PKCS12_PBES2_EXPORT_PARAMS { 5728 DWORD dwSize; 5729 PVOID hNcryptDescriptor; 5730 LPWSTR pwszPbes2Alg; 5731 } PKCS12_PBES2_EXPORT_PARAMS, *PPKCS12_PBES2_EXPORT_PARAMS; 5732 5733 #define PKCS12_PBES2_ALG_AES256_SHA256 L"AES256-SHA256" 5734 #define PKCS12_CONFIG_REGPATH L"Software\\Microsoft\\Windows\\CurrentVersion\\PFX" 5735 #define PKCS12_ENCRYPT_CERTIFICATES_VALUE_NAME L"EncryptCertificates" 5736 5737 WINIMPM WINBOOL WINAPI PFXExportCertStore (HCERTSTORE hStore, CRYPT_DATA_BLOB *pPFX, LPCWSTR szPassword, DWORD dwFlags); 5738 5739 #if NTDDI_VERSION >= NTDDI_VISTA 5740 typedef VOID *HCERT_SERVER_OCSP_RESPONSE; 5741 5742 WINIMPM HCERT_SERVER_OCSP_RESPONSE WINAPI CertOpenServerOcspResponse (PCCERT_CHAIN_CONTEXT pChainContext, DWORD dwFlags, LPVOID pvReserved); 5743 5744 #define CERT_SERVER_OCSP_RESPONSE_ASYNC_FLAG 0x1 5745 5746 WINIMPM VOID WINAPI CertAddRefServerOcspResponse (HCERT_SERVER_OCSP_RESPONSE hServerOcspResponse); 5747 WINIMPM VOID WINAPI CertCloseServerOcspResponse (HCERT_SERVER_OCSP_RESPONSE hServerOcspResponse, DWORD dwFlags); 5748 5749 typedef struct _CERT_SERVER_OCSP_RESPONSE_CONTEXT CERT_SERVER_OCSP_RESPONSE_CONTEXT,*PCERT_SERVER_OCSP_RESPONSE_CONTEXT; 5750 typedef const CERT_SERVER_OCSP_RESPONSE_CONTEXT *PCCERT_SERVER_OCSP_RESPONSE_CONTEXT; 5751 5752 struct _CERT_SERVER_OCSP_RESPONSE_CONTEXT { 5753 DWORD cbSize; 5754 BYTE *pbEncodedOcspResponse; 5755 DWORD cbEncodedOcspResponse; 5756 }; 5757 5758 typedef VOID (CALLBACK *PFN_CERT_SERVER_OCSP_RESPONSE_UPDATE_CALLBACK)(PCCERT_CHAIN_CONTEXT pChainContext, PCCERT_SERVER_OCSP_RESPONSE_CONTEXT pServerOcspResponseContext, PCCRL_CONTEXT pNewCrlContext, PCCRL_CONTEXT pPrevCrlContext, PVOID pvArg, DWORD dwWriteOcspFileError); 5759 5760 typedef struct _CERT_SERVER_OCSP_RESPONSE_OPEN_PARA { 5761 DWORD cbSize; 5762 DWORD dwFlags; 5763 DWORD *pcbUsedSize; 5764 PWSTR pwszOcspDirectory; 5765 PFN_CERT_SERVER_OCSP_RESPONSE_UPDATE_CALLBACK pfnUpdateCallback; 5766 PVOID pvUpdateCallbackArg; 5767 } CERT_SERVER_OCSP_RESPONSE_OPEN_PARA, *PCERT_SERVER_OCSP_RESPONSE_OPEN_PARA; 5768 5769 #define CERT_SERVER_OCSP_RESPONSE_OPEN_PARA_READ_FLAG 0x00000001 5770 #define CERT_SERVER_OCSP_RESPONSE_OPEN_PARA_WRITE_FLAG 0x00000002 5771 5772 WINIMPM PCCERT_SERVER_OCSP_RESPONSE_CONTEXT WINAPI CertGetServerOcspResponseContext (HCERT_SERVER_OCSP_RESPONSE hServerOcspResponse, DWORD dwFlags, LPVOID pvReserved); 5773 WINIMPM VOID WINAPI CertAddRefServerOcspResponseContext (PCCERT_SERVER_OCSP_RESPONSE_CONTEXT pServerOcspResponseContext); 5774 WINIMPM VOID WINAPI CertFreeServerOcspResponseContext (PCCERT_SERVER_OCSP_RESPONSE_CONTEXT pServerOcspResponseContext); 5775 #endif 5776 WINIMPM WINBOOL WINAPI CertRetrieveLogoOrBiometricInfo (PCCERT_CONTEXT pCertContext, LPCSTR lpszLogoOrBiometricType, DWORD dwRetrievalFlags, DWORD dwTimeout, DWORD dwFlags, void *pvReserved, BYTE **ppbData, DWORD *pcbData, LPWSTR *ppwszMimeType); 5777 5778 #define CERT_RETRIEVE_ISSUER_LOGO ((LPCSTR) 1) 5779 #define CERT_RETRIEVE_SUBJECT_LOGO ((LPCSTR) 2) 5780 #define CERT_RETRIEVE_COMMUNITY_LOGO ((LPCSTR) 3) 5781 5782 #define CERT_RETRIEVE_BIOMETRIC_PREDEFINED_BASE_TYPE ((LPCSTR) 1000) 5783 5784 #define CERT_RETRIEVE_BIOMETRIC_PICTURE_TYPE (CERT_RETRIEVE_BIOMETRIC_PREDEFINED_BASE_TYPE + CERT_BIOMETRIC_PICTURE_TYPE) 5785 #define CERT_RETRIEVE_BIOMETRIC_SIGNATURE_TYPE (CERT_RETRIEVE_BIOMETRIC_PREDEFINED_BASE_TYPE + CERT_BIOMETRIC_SIGNATURE_TYPE) 5786 5787 #if NTDDI_VERSION >= NTDDI_WIN7 5788 typedef struct _CERT_SELECT_CHAIN_PARA { 5789 HCERTCHAINENGINE hChainEngine; 5790 PFILETIME pTime; 5791 HCERTSTORE hAdditionalStore; 5792 PCERT_CHAIN_PARA pChainPara; 5793 DWORD dwFlags; 5794 } CERT_SELECT_CHAIN_PARA,*PCERT_SELECT_CHAIN_PARA; 5795 5796 typedef const CERT_SELECT_CHAIN_PARA *PCCERT_SELECT_CHAIN_PARA; 5797 5798 #define CERT_SELECT_MAX_PARA 500 5799 5800 typedef struct _CERT_SELECT_CRITERIA { 5801 DWORD dwType; 5802 DWORD cPara; 5803 void **ppPara; 5804 } CERT_SELECT_CRITERIA,*PCERT_SELECT_CRITERIA; 5805 5806 typedef const CERT_SELECT_CRITERIA *PCCERT_SELECT_CRITERIA; 5807 5808 #define CERT_SELECT_BY_ENHKEY_USAGE 1 5809 #define CERT_SELECT_BY_KEY_USAGE 2 5810 #define CERT_SELECT_BY_POLICY_OID 3 5811 #define CERT_SELECT_BY_PROV_NAME 4 5812 #define CERT_SELECT_BY_EXTENSION 5 5813 #define CERT_SELECT_BY_SUBJECT_HOST_NAME 6 5814 #define CERT_SELECT_BY_ISSUER_ATTR 7 5815 #define CERT_SELECT_BY_SUBJECT_ATTR 8 5816 #define CERT_SELECT_BY_ISSUER_NAME 9 5817 #define CERT_SELECT_BY_PUBLIC_KEY 10 5818 #define CERT_SELECT_BY_TLS_SIGNATURES 11 5819 #define CERT_SELECT_BY_ISSUER_DISPLAYNAME 12 5820 #define CERT_SELECT_BY_FRIENDLYNAME 13 5821 #define CERT_SELECT_BY_THUMBPRINT 14 5822 5823 #define CERT_SELECT_LAST CERT_SELECT_BY_TLS_SIGNATURES 5824 #define CERT_SELECT_MAX (CERT_SELECT_LAST *3) 5825 5826 #define CERT_SELECT_ALLOW_EXPIRED 0x1 5827 #define CERT_SELECT_TRUSTED_ROOT 0x2 5828 #define CERT_SELECT_DISALLOW_SELFSIGNED 0x4 5829 #define CERT_SELECT_HAS_PRIVATE_KEY 0x8 5830 #define CERT_SELECT_HAS_KEY_FOR_SIGNATURE 0x10 5831 #define CERT_SELECT_HAS_KEY_FOR_KEY_EXCHANGE 0x20 5832 #define CERT_SELECT_HARDWARE_ONLY 0x40 5833 #define CERT_SELECT_ALLOW_DUPLICATES 0x80 5834 #define CERT_SELECT_IGNORE_AUTOSELECT 0x00000100 5835 5836 WINIMPM WINBOOL WINAPI CertSelectCertificateChains (LPCGUID pSelectionContext, DWORD dwFlags, PCCERT_SELECT_CHAIN_PARA pChainParameters, DWORD cCriteria, PCCERT_SELECT_CRITERIA rgpCriteria, HCERTSTORE hStore, PDWORD pcSelection, PCCERT_CHAIN_CONTEXT **pprgpSelection); 5837 WINIMPM VOID WINAPI CertFreeCertificateChainList (PCCERT_CHAIN_CONTEXT *prgpSelection); 5838 #endif 5839 5840 #if NTDDI_VERSION >= NTDDI_WIN7 5841 #define TIMESTAMP_VERSION 1 5842 5843 typedef struct _CRYPT_TIMESTAMP_REQUEST { 5844 DWORD dwVersion; 5845 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 5846 CRYPT_DER_BLOB HashedMessage; 5847 LPSTR pszTSAPolicyId; 5848 CRYPT_INTEGER_BLOB Nonce; 5849 WINBOOL fCertReq; 5850 DWORD cExtension; 5851 PCERT_EXTENSION rgExtension; 5852 } CRYPT_TIMESTAMP_REQUEST,*PCRYPT_TIMESTAMP_REQUEST; 5853 5854 typedef struct _CRYPT_TIMESTAMP_RESPONSE { 5855 DWORD dwStatus; 5856 DWORD cFreeText; 5857 LPWSTR *rgFreeText; 5858 CRYPT_BIT_BLOB FailureInfo; 5859 CRYPT_DER_BLOB ContentInfo; 5860 } CRYPT_TIMESTAMP_RESPONSE,*PCRYPT_TIMESTAMP_RESPONSE; 5861 5862 #define TIMESTAMP_STATUS_GRANTED 0 5863 #define TIMESTAMP_STATUS_GRANTED_WITH_MODS 1 5864 #define TIMESTAMP_STATUS_REJECTED 2 5865 #define TIMESTAMP_STATUS_WAITING 3 5866 #define TIMESTAMP_STATUS_REVOCATION_WARNING 4 5867 #define TIMESTAMP_STATUS_REVOKED 5 5868 5869 #define TIMESTAMP_FAILURE_BAD_ALG 0 5870 #define TIMESTAMP_FAILURE_BAD_REQUEST 2 5871 #define TIMESTAMP_FAILURE_BAD_FORMAT 5 5872 #define TIMESTAMP_FAILURE_TIME_NOT_AVAILABLE 14 5873 #define TIMESTAMP_FAILURE_POLICY_NOT_SUPPORTED 15 5874 #define TIMESTAMP_FAILURE_EXTENSION_NOT_SUPPORTED 16 5875 #define TIMESTAMP_FAILURE_INFO_NOT_AVAILABLE 17 5876 #define TIMESTAMP_FAILURE_SYSTEM_FAILURE 25 5877 5878 typedef struct _CRYPT_TIMESTAMP_ACCURACY { 5879 DWORD dwSeconds; 5880 DWORD dwMillis; 5881 DWORD dwMicros; 5882 } CRYPT_TIMESTAMP_ACCURACY,*PCRYPT_TIMESTAMP_ACCURACY; 5883 5884 typedef struct _CRYPT_TIMESTAMP_INFO { 5885 DWORD dwVersion; 5886 LPSTR pszTSAPolicyId; 5887 CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm; 5888 CRYPT_DER_BLOB HashedMessage; 5889 CRYPT_INTEGER_BLOB SerialNumber; 5890 FILETIME ftTime; 5891 PCRYPT_TIMESTAMP_ACCURACY pvAccuracy; 5892 WINBOOL fOrdering; 5893 CRYPT_DER_BLOB Nonce; 5894 CRYPT_DER_BLOB Tsa; 5895 DWORD cExtension; 5896 PCERT_EXTENSION rgExtension; 5897 } CRYPT_TIMESTAMP_INFO,*PCRYPT_TIMESTAMP_INFO; 5898 5899 typedef struct _CRYPT_TIMESTAMP_CONTEXT { 5900 DWORD cbEncoded; 5901 BYTE *pbEncoded; 5902 PCRYPT_TIMESTAMP_INFO pTimeStamp; 5903 } CRYPT_TIMESTAMP_CONTEXT,*PCRYPT_TIMESTAMP_CONTEXT; 5904 5905 typedef struct _CRYPT_TIMESTAMP_PARA { 5906 LPCSTR pszTSAPolicyId; 5907 WINBOOL fRequestCerts; 5908 CRYPT_INTEGER_BLOB Nonce; 5909 DWORD cExtension; 5910 PCERT_EXTENSION rgExtension; 5911 } CRYPT_TIMESTAMP_PARA,*PCRYPT_TIMESTAMP_PARA; 5912 5913 WINBOOL WINAPI CryptRetrieveTimeStamp (LPCWSTR wszUrl, DWORD dwRetrievalFlags, DWORD dwTimeout, LPCSTR pszHashId, const CRYPT_TIMESTAMP_PARA *pPara, const BYTE *pbData, DWORD cbData, PCRYPT_TIMESTAMP_CONTEXT *ppTsContext, PCCERT_CONTEXT *ppTsSigner, HCERTSTORE *phStore); 5914 5915 #define TIMESTAMP_DONT_HASH_DATA 0x1 5916 #define TIMESTAMP_VERIFY_CONTEXT_SIGNATURE 0x20 5917 #define TIMESTAMP_NO_AUTH_RETRIEVAL 0x20000 5918 5919 WINBOOL WINAPI CryptVerifyTimeStampSignature (const BYTE *pbTSContentInfo, DWORD cbTSContentInfo, const BYTE *pbData, DWORD cbData, HCERTSTORE hAdditionalStore, PCRYPT_TIMESTAMP_CONTEXT *ppTsContext, PCCERT_CONTEXT *ppTsSigner, HCERTSTORE *phStore); 5920 #endif 5921 5922 #if NTDDI_VERSION >= NTDDI_WIN8 5923 #define CRYPT_OBJECT_LOCATOR_SPN_NAME_TYPE 1 5924 #define CRYPT_OBJECT_LOCATOR_LAST_RESERVED_NAME_TYPE 32 5925 #define CRYPT_OBJECT_LOCATOR_FIRST_RESERVED_USER_NAME_TYPE 33 5926 #define CRYPT_OBJECT_LOCATOR_LAST_RESERVED_USER_NAME_TYPE 0x0000ffff 5927 5928 #define SSL_OBJECT_LOCATOR_PFX_FUNC "SslObjectLocatorInitializePfx" 5929 #define SSL_OBJECT_LOCATOR_ISSUER_LIST_FUNC "SslObjectLocatorInitializeIssuerList" 5930 #define SSL_OBJECT_LOCATOR_CERT_VALIDATION_CONFIG_FUNC "SslObjectLocatorInitializeCertValidationConfig" 5931 5932 #define CRYPT_OBJECT_LOCATOR_RELEASE_SYSTEM_SHUTDOWN 1 5933 #define CRYPT_OBJECT_LOCATOR_RELEASE_SERVICE_STOP 2 5934 #define CRYPT_OBJECT_LOCATOR_RELEASE_PROCESS_EXIT 3 5935 #define CRYPT_OBJECT_LOCATOR_RELEASE_DLL_UNLOAD 4 5936 5937 typedef WINBOOL (WINAPI *PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_FLUSH) (LPVOID pContext, PCERT_NAME_BLOB *rgIdentifierOrNameList, DWORD dwIdentifierOrNameListCount); 5938 typedef WINBOOL (WINAPI *PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_GET) (LPVOID pPluginContext, PCRYPT_DATA_BLOB pIdentifier, DWORD dwNameType, PCERT_NAME_BLOB pNameBlob, PBYTE *ppbContent, DWORD *pcbContent, PCWSTR *ppwszPassword, PCRYPT_DATA_BLOB *ppIdentifier); 5939 typedef void (WINAPI *PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_RELEASE) (DWORD dwReason, LPVOID pPluginContext); 5940 typedef void (WINAPI *PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_FREE_PASSWORD) (LPVOID pPluginContext, PCWSTR pwszPassword); 5941 typedef void (WINAPI *PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_FREE) (LPVOID pPluginContext, PBYTE pbData); 5942 typedef void (WINAPI *PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_FREE_IDENTIFIER) (LPVOID pPluginContext, PCRYPT_DATA_BLOB pIdentifier); 5943 5944 typedef struct _CRYPT_OBJECT_LOCATOR_PROVIDER_TABLE { 5945 DWORD cbSize; 5946 PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_GET pfnGet; 5947 PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_RELEASE pfnRelease; 5948 PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_FREE_PASSWORD pfnFreePassword; 5949 PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_FREE pfnFree; 5950 PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_FREE_IDENTIFIER pfnFreeIdentifier; 5951 } CRYPT_OBJECT_LOCATOR_PROVIDER_TABLE,*PCRYPT_OBJECT_LOCATOR_PROVIDER_TABLE; 5952 5953 typedef WINBOOL (WINAPI *PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_INITIALIZE) (PFN_CRYPT_OBJECT_LOCATOR_PROVIDER_FLUSH pfnFlush, LPVOID pContext, DWORD *pdwExpectedObjectCount, PCRYPT_OBJECT_LOCATOR_PROVIDER_TABLE *ppFuncTable, void **ppPluginContext); 5954 5955 WINIMPM WINBOOL WINAPI CertIsWeakHash(DWORD dwHashUseType, LPCWSTR pwszCNGHashAlgid, DWORD dwChainFlags, PCCERT_CHAIN_CONTEXT pSignerChainContext, LPFILETIME pTimeStamp, LPCWSTR pwszFileName); 5956 5957 typedef WINBOOL (WINAPI *PFN_CERT_IS_WEAK_HASH)(DWORD dwHashUseType, LPCWSTR pwszCNGHashAlgid, DWORD dwChainFlags, PCCERT_CHAIN_CONTEXT pSignerChainContext, LPFILETIME pTimeStamp, LPCWSTR pwszFileName); 5958 5959 #define CERT_FILE_HASH_USE_TYPE 1 5960 #define CERT_TIMESTAMP_HASH_USE_TYPE 2 5961 5962 #endif 5963 #endif 5964 5965 #endif 5966 5967 #ifdef __cplusplus 5968 } 5969 #endif 5970 5971 #ifndef _WINCRYPT_NO_DPAPI 5972 #include <dpapi.h> 5973 #endif 5974 #endif 5975