vendor.go

package pkcs11

// Vendor specific range for Ncipher network HSM.
const (
	NFCK_VENDOR_NCIPHER = 0xde436972
	CKA_NCIPHER         = NFCK_VENDOR_NCIPHER
	CKM_NCIPHER         = NFCK_VENDOR_NCIPHER
	CKK_NCIPHER         = NFCK_VENDOR_NCIPHER
)

// Vendor specific mechanisms for HMAC on Ncipher HSMs where Ncipher does not allow use of generic_secret keys.
const (
	CKM_NC_SHA_1_HMAC_KEY_GEN  = CKM_NCIPHER + 0x3  // no params
	CKM_NC_MD5_HMAC_KEY_GEN    = CKM_NCIPHER + 0x6  // no params
	CKM_NC_SHA224_HMAC_KEY_GEN = CKM_NCIPHER + 0x24 // no params
	CKM_NC_SHA256_HMAC_KEY_GEN = CKM_NCIPHER + 0x25 // no params
	CKM_NC_SHA384_HMAC_KEY_GEN = CKM_NCIPHER + 0x26 // no params
	CKM_NC_SHA512_HMAC_KEY_GEN = CKM_NCIPHER + 0x27 // no params
)

// Vendor specific range for Mozilla NSS.
const (
	NSSCK_VENDOR_NSS   = 0x4E534350
	CKO_NSS            = CKO_VENDOR_DEFINED | NSSCK_VENDOR_NSS
	CKK_NSS            = CKK_VENDOR_DEFINED | NSSCK_VENDOR_NSS
	CKC_NSS            = CKC_VENDOR_DEFINED | NSSCK_VENDOR_NSS
	CKA_NSS            = CKA_VENDOR_DEFINED | NSSCK_VENDOR_NSS
	CKA_TRUST          = CKA_NSS + 0x2000
	CKM_NSS            = CKM_VENDOR_DEFINED | NSSCK_VENDOR_NSS
	CKR_NSS            = CKM_VENDOR_DEFINED | NSSCK_VENDOR_NSS
	CKT_VENDOR_DEFINED = 0x80000000
	CKT_NSS            = CKT_VENDOR_DEFINED | NSSCK_VENDOR_NSS
)

// Vendor specific values for Mozilla NSS.
const (
	CKO_NSS_CRL                               = CKO_NSS + 1
	CKO_NSS_SMIME                             = CKO_NSS + 2
	CKO_NSS_TRUST                             = CKO_NSS + 3
	CKO_NSS_BUILTIN_ROOT_LIST                 = CKO_NSS + 4
	CKO_NSS_NEWSLOT                           = CKO_NSS + 5
	CKO_NSS_DELSLOT                           = CKO_NSS + 6
	CKK_NSS_PKCS8                             = CKK_NSS + 1
	CKK_NSS_JPAKE_ROUND1                      = CKK_NSS + 2
	CKK_NSS_JPAKE_ROUND2                      = CKK_NSS + 3
	CKK_NSS_CHACHA20                          = CKK_NSS + 4
	CKA_NSS_URL                               = CKA_NSS + 1
	CKA_NSS_EMAIL                             = CKA_NSS + 2
	CKA_NSS_SMIME_INFO                        = CKA_NSS + 3
	CKA_NSS_SMIME_TIMESTAMP                   = CKA_NSS + 4
	CKA_NSS_PKCS8_SALT                        = CKA_NSS + 5
	CKA_NSS_PASSWORD_CHECK                    = CKA_NSS + 6
	CKA_NSS_EXPIRES                           = CKA_NSS + 7
	CKA_NSS_KRL                               = CKA_NSS + 8
	CKA_NSS_PQG_COUNTER                       = CKA_NSS + 20
	CKA_NSS_PQG_SEED                          = CKA_NSS + 21
	CKA_NSS_PQG_H                             = CKA_NSS + 22
	CKA_NSS_PQG_SEED_BITS                     = CKA_NSS + 23
	CKA_NSS_MODULE_SPEC                       = CKA_NSS + 24
	CKA_NSS_OVERRIDE_EXTENSIONS               = CKA_NSS + 25
	CKA_NSS_JPAKE_SIGNERID                    = CKA_NSS + 26
	CKA_NSS_JPAKE_PEERID                      = CKA_NSS + 27
	CKA_NSS_JPAKE_GX1                         = CKA_NSS + 28
	CKA_NSS_JPAKE_GX2                         = CKA_NSS + 29
	CKA_NSS_JPAKE_GX3                         = CKA_NSS + 30
	CKA_NSS_JPAKE_GX4                         = CKA_NSS + 31
	CKA_NSS_JPAKE_X2                          = CKA_NSS + 32
	CKA_NSS_JPAKE_X2S                         = CKA_NSS + 33
	CKA_NSS_MOZILLA_CA_POLICY                 = CKA_NSS + 34
	CKA_NSS_SERVER_DISTRUST_AFTER             = CKA_NSS + 35
	CKA_NSS_EMAIL_DISTRUST_AFTER              = CKA_NSS + 36
	CKA_TRUST_DIGITAL_SIGNATURE               = CKA_TRUST + 1
	CKA_TRUST_NON_REPUDIATION                 = CKA_TRUST + 2
	CKA_TRUST_KEY_ENCIPHERMENT                = CKA_TRUST + 3
	CKA_TRUST_DATA_ENCIPHERMENT               = CKA_TRUST + 4
	CKA_TRUST_KEY_AGREEMENT                   = CKA_TRUST + 5
	CKA_TRUST_KEY_CERT_SIGN                   = CKA_TRUST + 6
	CKA_TRUST_CRL_SIGN                        = CKA_TRUST + 7
	CKA_TRUST_SERVER_AUTH                     = CKA_TRUST + 8
	CKA_TRUST_CLIENT_AUTH                     = CKA_TRUST + 9
	CKA_TRUST_CODE_SIGNING                    = CKA_TRUST + 10
	CKA_TRUST_EMAIL_PROTECTION                = CKA_TRUST + 11
	CKA_TRUST_IPSEC_END_SYSTEM                = CKA_TRUST + 12
	CKA_TRUST_IPSEC_TUNNEL                    = CKA_TRUST + 13
	CKA_TRUST_IPSEC_USER                      = CKA_TRUST + 14
	CKA_TRUST_TIME_STAMPING                   = CKA_TRUST + 15
	CKA_TRUST_STEP_UP_APPROVED                = CKA_TRUST + 16
	CKA_CERT_SHA1_HASH                        = CKA_TRUST + 100
	CKA_CERT_MD5_HASH                         = CKA_TRUST + 101
	CKM_NSS_AES_KEY_WRAP                      = CKM_NSS + 1
	CKM_NSS_AES_KEY_WRAP_PAD                  = CKM_NSS + 2
	CKM_NSS_HKDF_SHA1                         = CKM_NSS + 3
	CKM_NSS_HKDF_SHA256                       = CKM_NSS + 4
	CKM_NSS_HKDF_SHA384                       = CKM_NSS + 5
	CKM_NSS_HKDF_SHA512                       = CKM_NSS + 6
	CKM_NSS_JPAKE_ROUND1_SHA1                 = CKM_NSS + 7
	CKM_NSS_JPAKE_ROUND1_SHA256               = CKM_NSS + 8
	CKM_NSS_JPAKE_ROUND1_SHA384               = CKM_NSS + 9
	CKM_NSS_JPAKE_ROUND1_SHA512               = CKM_NSS + 10
	CKM_NSS_JPAKE_ROUND2_SHA1                 = CKM_NSS + 11
	CKM_NSS_JPAKE_ROUND2_SHA256               = CKM_NSS + 12
	CKM_NSS_JPAKE_ROUND2_SHA384               = CKM_NSS + 13
	CKM_NSS_JPAKE_ROUND2_SHA512               = CKM_NSS + 14
	CKM_NSS_JPAKE_FINAL_SHA1                  = CKM_NSS + 15
	CKM_NSS_JPAKE_FINAL_SHA256                = CKM_NSS + 16
	CKM_NSS_JPAKE_FINAL_SHA384                = CKM_NSS + 17
	CKM_NSS_JPAKE_FINAL_SHA512                = CKM_NSS + 18
	CKM_NSS_HMAC_CONSTANT_TIME                = CKM_NSS + 19
	CKM_NSS_SSL3_MAC_CONSTANT_TIME            = CKM_NSS + 20
	CKM_NSS_TLS_PRF_GENERAL_SHA256            = CKM_NSS + 21
	CKM_NSS_TLS_MASTER_KEY_DERIVE_SHA256      = CKM_NSS + 22
	CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256     = CKM_NSS + 23
	CKM_NSS_TLS_MASTER_KEY_DERIVE_DH_SHA256   = CKM_NSS + 24
	CKM_NSS_TLS_EXTENDED_MASTER_KEY_DERIVE    = CKM_NSS + 25
	CKM_NSS_TLS_EXTENDED_MASTER_KEY_DERIVE_DH = CKM_NSS + 26
	CKM_NSS_CHACHA20_KEY_GEN                  = CKM_NSS + 27
	CKM_NSS_CHACHA20_POLY1305                 = CKM_NSS + 28
	CKM_NSS_PKCS12_PBE_SHA224_HMAC_KEY_GEN    = CKM_NSS + 29
	CKM_NSS_PKCS12_PBE_SHA256_HMAC_KEY_GEN    = CKM_NSS + 30
	CKM_NSS_PKCS12_PBE_SHA384_HMAC_KEY_GEN    = CKM_NSS + 31
	CKM_NSS_PKCS12_PBE_SHA512_HMAC_KEY_GEN    = CKM_NSS + 32
	CKR_NSS_CERTDB_FAILED                     = CKR_NSS + 1
	CKR_NSS_KEYDB_FAILED                      = CKR_NSS + 2
	CKT_NSS_TRUSTED                           = CKT_NSS + 1
	CKT_NSS_TRUSTED_DELEGATOR                 = CKT_NSS + 2
	CKT_NSS_MUST_VERIFY_TRUST                 = CKT_NSS + 3
	CKT_NSS_NOT_TRUSTED                       = CKT_NSS + 10
	CKT_NSS_TRUST_UNKNOWN                     = CKT_NSS + 5
)