Cryptographic Object Manager
Cryptographic Functions

Framework for Signing, Verifying, Encrypting and Decrypting of data objects.

Framework for Signing, Verifying, Encrypting and Decrypting of data objects.

This group contains functions which operate on cryptographic objects. These objects are signed objects and encrypted objects. Data can be wrapped in those objects for secure transmission.

Keys used by this group are identified by a name, number and version. There is a local key (used for signing and decryption) and a peer key (used for signature verification and encryption).

This module handles the adminstration of signed objects and encrypted objects. The cryptographic functions are performed using callbacks. Therefore you can't instantiate an object of this group directly. You must call the constructor of one of the implementations (like GWEN_CryptMgrKeys_new).

Signed objects and encrypted objects consist of modified TLV (Tag, Length, Value) objects with the following structure:

Position | Length | Description
--- | --- | ---
0 | 1 | Type
1 | 2 | Length of the following value (or 0)
2 | n | Value

A signed object is such a TLV object consisting of:

- signature head (name, number and version of the key used, datetime etc)
- signed data
- signature tail containing the actual signature

Encrypted objects are another kind of TLVs containing:

- crypt head (name, number and version of the key used, message key etc)
- encrypted data