cryptlib.pas

来自「提供了很多种加密算法和CA认证及相关服务如CMP、OCSP等的开发」· PAS 代码 · 共 1,269 行 · 第 1/5 页

  CRYPT_DEVINFO_INITIALISE                          = 4001; { Initialise device for use }
  CRYPT_DEVINFO_INITIALIZE                          = 4001; {  = CRYPT_DEVINFO_INITIALISE  }
  CRYPT_DEVINFO_AUTHENT_USER                        = 4002; { Authenticate user to device }
  CRYPT_DEVINFO_AUTHENT_SUPERVISOR                  = 4003; { Authenticate supervisor to dev.}
  CRYPT_DEVINFO_SET_AUTHENT_USER                    = 4004; { Set user authent.value }
  CRYPT_DEVINFO_SET_AUTHENT_SUPERVISOR              = 4005; { Set supervisor auth.val.}
  CRYPT_DEVINFO_ZEROISE                             = 4006; { Zeroise device }
  CRYPT_DEVINFO_ZEROIZE                             = 4006; {  = CRYPT_DEVINFO_ZEROISE  }
  CRYPT_DEVINFO_LOGGEDIN                            = 4007; { Whether user is logged in }
  CRYPT_DEVINFO_LABEL                               = 4008; { Device/token label }

  { Used internally }
  CRYPT_DEVINFO_LAST                                = 4009; 
  CRYPT_ENVINFO_FIRST                               = 5000;

  {*********************}
  { Envelope attributes }
  {*********************}

  { Pseudo-information on an envelope or meta-information which is used to
  control the way data in an envelope is processed }
  CRYPT_ENVINFO_DATASIZE                            = 5001; { Data size information }
  CRYPT_ENVINFO_COMPRESSION                         = 5002; { Compression information }
  CRYPT_ENVINFO_CONTENTTYPE                         = 5003; { Inner CMS content type }
  CRYPT_ENVINFO_DETACHEDSIGNATURE                   = 5004; { Generate CMS detached signature }
  CRYPT_ENVINFO_SIGNATURE_RESULT                    = 5005; { Signature check result }
  CRYPT_ENVINFO_MAC                                 = 5006; { Use MAC instead of encrypting }
  CRYPT_ENVINFO_CURRENT_COMPONENT                   = 5007; { Env.information cursor management }

  { Resources required for enveloping/deenveloping }
  CRYPT_ENVINFO_PASSWORD                            = 5008; { User password }
  CRYPT_ENVINFO_KEY                                 = 5009; { Conventional encryption key }
  CRYPT_ENVINFO_SIGNATURE                           = 5010; { Signature/signature check key }
  CRYPT_ENVINFO_SIGNATURE_EXTRADATA                 = 5011; { Extra information added to CMS sigs }
  CRYPT_ENVINFO_RECIPIENT                           = 5012; { Recipient email address }
  CRYPT_ENVINFO_PUBLICKEY                           = 5013; { PKC encryption key }
  CRYPT_ENVINFO_PRIVATEKEY                          = 5014; { PKC decryption key }
  CRYPT_ENVINFO_PRIVATEKEY_LABEL                    = 5015; { Label of PKC decryption key }
  CRYPT_ENVINFO_ORIGINATOR                          = 5016; { Originator info/key }
  CRYPT_ENVINFO_SESSIONKEY                          = 5017; { Session key }
  CRYPT_ENVINFO_HASH                                = 5018; { Hash value }
  CRYPT_ENVINFO_TIMESTAMP_AUTHORITY                 = 5019; { Timestamp authority }

  { Keysets used to retrieve keys needed for enveloping/deenveloping }
  CRYPT_ENVINFO_KEYSET_SIGCHECK                     = 5020; { Signature check keyset }
  CRYPT_ENVINFO_KEYSET_ENCRYPT                      = 5021; { PKC encryption keyset }
  CRYPT_ENVINFO_KEYSET_DECRYPT                      = 5022; { PKC decryption keyset }

  { Used internally }
  CRYPT_ENVINFO_LAST                                = 5023; 
  CRYPT_SESSINFO_FIRST                              = 6000;

  {********************}
  { Session attributes }
  {********************}

  { Pseudo-information on a session or meta-information which is used to
  control the way a session is managed }

  { Pseudo-information about the session }
  CRYPT_SESSINFO_ACTIVE                             = 6001; { Whether session is active }

  { Security-related information }
  CRYPT_SESSINFO_USERNAME                           = 6002; { User name }
  CRYPT_SESSINFO_PASSWORD                           = 6003; { Password }
  CRYPT_SESSINFO_PRIVATEKEY                         = 6004; { Server/client private key }
  CRYPT_SESSINFO_KEYSET                             = 6005; { Certificate store }

  { Client/server information }
  CRYPT_SESSINFO_SERVER_NAME                        = 6006; { Server name }
  CRYPT_SESSINFO_SERVER_PORT                        = 6007; { Server port number }
  CRYPT_SESSINFO_CLIENT_NAME                        = 6008; { Client name }
  CRYPT_SESSINFO_CLIENT_PORT                        = 6009; { Client port number }

  { Generic protocol-related information }
  CRYPT_SESSINFO_PROTOCOLVERSION                    = 6010; { Session protocol version }
  CRYPT_SESSINFO_REQUEST                            = 6011; { Cert.request object }
  CRYPT_SESSINFO_RESPONSE                           = 6012; { Cert.response object }

  { Protocol-specific information }
  CRYPT_SESSINFO_TSP_MSGIMPRINT                     = 6013; { TSP message imprint }
  CRYPT_SESSINFO_CMP_CACERTIFICATE                  = 6014; { Issuing CA certificate }
  CRYPT_SESSINFO_CMP_REQUESTTYPE                    = 6015; { Request type }

  { Used internally }
  CRYPT_SESSINFO_LAST                               = 6016; 
  CRYPT_USERINFO_FIRST                              = 7000;

  {********************}
  { User attributes }
  {********************}

  { Security-related information }
  CRYPT_USERINFO_PASSWORD                           = 7001; { Password }

  { User role-related information }
  CRYPT_USERINFO_CAKEY_CERTSIGN                     = 7002; { CA cert signing key }
  CRYPT_USERINFO_CAKEY_CRLSIGN                      = 7003; { CA CRL signing key }
  CRYPT_USERINFO_CAKEY_OCSPSIGN                     = 7004; { CA OCSP signing key }

  { Used internally for range checking }
  CRYPT_USERINFO_LAST                               = 7005; 
  CRYPT_ATTRIBUTE_LAST                              = 7005; {  = CRYPT_USERINFO_LAST  }





{****************************************************************************
*                                                                           *
*                       Attribute Subtypes and Related Values               *
*                                                                           *
****************************************************************************}

{  Flags for the X.509v3 keyUsage extension  }

  CRYPT_KEYUSAGE_NONE                               = $000;
  CRYPT_KEYUSAGE_DIGITALSIGNATURE                   = $001;
  CRYPT_KEYUSAGE_NONREPUDIATION                     = $002;
  CRYPT_KEYUSAGE_KEYENCIPHERMENT                    = $004;
  CRYPT_KEYUSAGE_DATAENCIPHERMENT                   = $008;
  CRYPT_KEYUSAGE_KEYAGREEMENT                       = $010;
  CRYPT_KEYUSAGE_KEYCERTSIGN                        = $020;
  CRYPT_KEYUSAGE_CRLSIGN                            = $040;
  CRYPT_KEYUSAGE_ENCIPHERONLY                       = $080;
  CRYPT_KEYUSAGE_DECIPHERONLY                       = $100;
  CRYPT_KEYUSAGE_LAST                               = $200; {  Last possible value  }

{  X.509v3 cRLReason codes  }


  CRYPT_CRLREASON_UNSPECIFIED                       = 0;
  CRYPT_CRLREASON_KEYCOMPROMISE                     = 1;
  CRYPT_CRLREASON_CACOMPROMISE                      = 2;
  CRYPT_CRLREASON_AFFILIATIONCHANGED                = 3;
  CRYPT_CRLREASON_SUPERSEDED                        = 4;
  CRYPT_CRLREASON_CESSATIONOFOPERATION              = 5;
  CRYPT_CRLREASON_CERTIFICATEHOLD                   = 6;
  CRYPT_CRLREASON_REMOVEFROMCRL                     = 8;
  CRYPT_CRLREASON_LAST                              = 9;



{  X.509v3 CRL reason flags.  These identify the same thing as the cRLReason
   codes but allow for multiple reasons to be specified.  Note that these
   don't follow the X.509 naming since in that scheme the enumerated types
   and bitflags have the same name  }

  CRYPT_CRLREASONFLAG_UNUSED                        = $001;
  CRYPT_CRLREASONFLAG_KEYCOMPROMISE                 = $002;
  CRYPT_CRLREASONFLAG_CACOMPROMISE                  = $004;
  CRYPT_CRLREASONFLAG_AFFILIATIONCHANGED            = $008;
  CRYPT_CRLREASONFLAG_SUPERSEDED                    = $010;
  CRYPT_CRLREASONFLAG_CESSATIONOFOPERATION          = $020;
  CRYPT_CRLREASONFLAG_CERTIFICATEHOLD               = $040;
  CRYPT_CRLREASONFLAG_LAST                          = $080; {  Last poss.value  }

{  X.509v3 CRL holdInstruction codes  }


  CRYPT_HOLDINSTRUCTION_NONE                        = 0;
  CRYPT_HOLDINSTRUCTION_CALLISSUER                  = 1;
  CRYPT_HOLDINSTRUCTION_REJECT                      = 2;
  CRYPT_HOLDINSTRUCTION_PICKUPTOKEN                 = 3;
  CRYPT_HOLDINSTRUCTION_LAST                        = 4;



{  Flags for the Netscape netscape-cert-type extension  }

  CRYPT_NS_CERTTYPE_SSLCLIENT                       = $001;
  CRYPT_NS_CERTTYPE_SSLSERVER                       = $002;
  CRYPT_NS_CERTTYPE_SMIME                           = $004;
  CRYPT_NS_CERTTYPE_OBJECTSIGNING                   = $008;
  CRYPT_NS_CERTTYPE_RESERVED                        = $010;
  CRYPT_NS_CERTTYPE_SSLCA                           = $020;
  CRYPT_NS_CERTTYPE_SMIMECA                         = $040;
  CRYPT_NS_CERTTYPE_OBJECTSIGNINGCA                 = $080;
  CRYPT_NS_CERTTYPE_LAST                            = $100; {  Last possible value  }

{  Flags for the SET certificate-type extension  }

  CRYPT_SET_CERTTYPE_CARD                           = $001;
  CRYPT_SET_CERTTYPE_MER                            = $002;
  CRYPT_SET_CERTTYPE_PGWY                           = $004;
  CRYPT_SET_CERTTYPE_CCA                            = $008;
  CRYPT_SET_CERTTYPE_MCA                            = $010;
  CRYPT_SET_CERTTYPE_PCA                            = $020;
  CRYPT_SET_CERTTYPE_GCA                            = $040;
  CRYPT_SET_CERTTYPE_BCA                            = $080;
  CRYPT_SET_CERTTYPE_RCA                            = $100;
  CRYPT_SET_CERTTYPE_ACQ                            = $200;
  CRYPT_SET_CERTTYPE_LAST                           = $400; {  Last possible value  }

{  CMS contentType values  }


type
  CRYPT_CONTENT_TYPE = (CRYPT_CONTENT_NONE, CRYPT_CONTENT_DATA,
    CRYPT_CONTENT_SIGNEDDATA, CRYPT_CONTENT_ENVELOPEDDATA,
    CRYPT_CONTENT_SIGNEDANDENVELOPEDDATA,
    CRYPT_CONTENT_DIGESTEDDATA, CRYPT_CONTENT_ENCRYPTEDDATA,
    CRYPT_CONTENT_COMPRESSEDDATA, CRYPT_CONTENT_TSTINFO,
    CRYPT_CONTENT_SPCINDIRECTDATACONTEXT, CRYPT_CONTENT_LAST

    );

{  ESS securityClassification codes  }



const
  CRYPT_CLASSIFICATION_UNMARKED                     = 0;
  CRYPT_CLASSIFICATION_UNCLASSIFIED                 = 1;
  CRYPT_CLASSIFICATION_RESTRICTED                   = 2;
  CRYPT_CLASSIFICATION_CONFIDENTIAL                 = 3;
  CRYPT_CLASSIFICATION_SECRET                       = 4;
  CRYPT_CLASSIFICATION_TOP_SECRET                   = 5;
  CRYPT_CLASSIFICATION_LAST                         = 255;



{  OCSP certificate status  }


  CRYPT_OCSPSTATUS_NOTREVOKED                       = 0;
  CRYPT_OCSPSTATUS_REVOKED                          = 1;
  CRYPT_OCSPSTATUS_UNKNOWN                          = 2;



{  CMP status and extended status info values  }


  CRYPT_CMPSTATUS_OK                                = 0;
  CRYPT_CMPSTATUS_GRANTED                           = CRYPT_CMPSTATUS_OK;
  { CRYPT_CMPSTATUS_OK is being redefined }
  CRYPT_CMPSTATUS_GRANTEDWITHMODS                   = 1;
  CRYPT_CMPSTATUS_REJECTION                         = 2;
  CRYPT_CMPSTATUS_WAITING                           = 3;
  CRYPT_CMPSTATUS_REVOCATIONWARNING                 = 4;
  CRYPT_CMPSTATUS_REVOCATIONNOTIFICATION            = 5;
  CRYPT_CMPSTATUS_KEYUPDATEWARNING                  = 6;
  CRYPT_CMPSTATUS_LAST                              = 7;



  CRYPT_CMPSTATUS_EXT_BADALG                        = $001;
  CRYPT_CMPSTATUS_EXT_BADMESSAGECHECK               = $002;
  CRYPT_CMPSTATUS_EXT_BADREQUEST                    = $004;
  CRYPT_CMPSTATUS_EXT_BADTIME                       = $008;
  CRYPT_CMPSTATUS_EXT_BADCERTID                     = $010;
  CRYPT_CMPSTATUS_EXT_BADDATAFORMAT                 = $020;
  CRYPT_CMPSTATUS_EXT_WRONGAUTHORITY                = $040;