@annadata/capacitor-mqtt-quic 0.2.2 → 0.2.4

package/android/install/wolfssl-android/armeabi-v7a/include/wolfssl/quic.h

@@ -1,310 +0,0 @@
-/* quic.h
- *
- * Copyright (C) 2006-2025 wolfSSL Inc.
- *
- * This file is part of wolfSSL.
- *
- * wolfSSL is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 3 of the License, or
- * (at your option) any later version.
- *
- * wolfSSL is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program; if not, write to the Free Software
- * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
- */
-
-
-
-/* wolfSSL QUIC API */
-
-#ifndef WOLFSSL_QUIC_H
-#define WOLFSSL_QUIC_H
-
-#ifdef __cplusplus
-    extern "C" {
-#endif
-
-#ifdef WOLFSSL_QUIC
-
-#ifndef NO_STDINT_H
-    #include <stdint.h>
-#endif
-
-/* QUIC operates on three encryption levels which determine
- * which keys/algos are used for de-/encryption. These are
- * kept separately for incoming and outgoing data and.
- * Due to the nature of UDP, more than one might be in use
- * at the same time due to resends or out-of-order arrivals.
- */
-typedef enum wolfssl_encryption_level_t {
-    wolfssl_encryption_initial = 0,
-    wolfssl_encryption_early_data,
-    wolfssl_encryption_handshake,
-    wolfssl_encryption_application
-} WOLFSSL_ENCRYPTION_LEVEL;
-
-
-/* All QUIC related callbacks to the application.
- */
-typedef struct wolfssl_quic_method_t WOLFSSL_QUIC_METHOD;
-
-struct wolfssl_quic_method_t {
-    /**
-     * Provide secrets to the QUIC stack when they become available in the SSL
-     * instance during handshake processing. read/write secrets have the same
-     * length. A call may only provide one, passing NULL as the other.
-     */
-    int (*set_encryption_secrets)(WOLFSSL* ssl, WOLFSSL_ENCRYPTION_LEVEL level,
-                                  const uint8_t* read_secret,
-                                  const uint8_t* write_secret,
-                                  size_t secret_len);
-    /**
-     * Provide handshake packets to the QUIC stack to send to the peer. The
-     * QUIC stack will wrap these and take care of re-transmissions.
-     */
-    int (*add_handshake_data)(WOLFSSL* ssl, WOLFSSL_ENCRYPTION_LEVEL level,
-                              const uint8_t* data, size_t len);
-    /**
-     * Flush any buffered packets during handshake.
-     */
-    int (*flush_flight)(WOLFSSL* ssl);
-    /**
-     * Send a TLS alert that happened during handshake. In QUIC, such alerts
-     * lead to connection shutdown.
-     */
-    int (*send_alert)(WOLFSSL* ssl, WOLFSSL_ENCRYPTION_LEVEL level,
-                      uint8_t alert);
-};
-
-
-/**
- * Mark the given SSL context for QUIC protocol handling. Meaning all
- * SSL instances derived from it will inherit this. Provides all callbacks
- * to the QUIC application the SSL stack needs.
- */
-WOLFSSL_API
-int wolfSSL_CTX_set_quic_method(WOLFSSL_CTX* ctx,
-                                const WOLFSSL_QUIC_METHOD* quic_method);
-/**
- * Mark exactly this SSL instance for QUIC protocol handling.
- * Provides all callbacks to the QUIC application the SSL stack needs.
- */
-WOLFSSL_API
-int wolfSSL_set_quic_method(WOLFSSL* ssl,
-                            const WOLFSSL_QUIC_METHOD* quic_method);
-
-/**
- * Check if QUIC handling has been installed on the given SSL instance.
- */
-WOLFSSL_API int wolfSSL_is_quic(WOLFSSL* ssl);
-
-/**
- * Return the current encryption level of the SSL instance for READs.
- */
-WOLFSSL_API
-WOLFSSL_ENCRYPTION_LEVEL  wolfSSL_quic_read_level(const WOLFSSL* ssl);
-
-/**
- * Return the current encryption level of the SSL instance for WRITEs.
- */
-WOLFSSL_API
-WOLFSSL_ENCRYPTION_LEVEL wolfSSL_quic_write_level(const WOLFSSL* ssl);
-
-
-/**
- * Configure the QUIC transport version to use. On `use_legacy` != 0,
- * selects TLSX_KEY_QUIC_TP_PARAMS_DRAFT, otherwise TLSX_KEY_QUIC_TP_PARAMS.
- * This method is part of the BoringSSL API and replicated here for app
- * portability (as in quictls/openssl).
- */
-WOLFSSL_API
-void wolfSSL_set_quic_use_legacy_codepoint(WOLFSSL* ssl, int use_legacy);
-
-/**
- * Set the TLS extension for the transport parameter version to announce
- * to the peer. Known values are TLSX_KEY_QUIC_TP_PARAMS (V1) and
- * TLSX_KEY_QUIC_TP_PARAMS_DRAFT.
- * Setting it to 0 will announce both V1 and draft versions to a server.
- * Servers will, on 0, select the latest version seen from the client.
- * Default is 0.
- */
-WOLFSSL_API
-void wolfSSL_set_quic_transport_version(WOLFSSL* ssl, int version);
-
-/**
- * Get the configured transport version.
- */
-WOLFSSL_API int wolfSSL_get_quic_transport_version(const WOLFSSL* ssl);
-
-/**
- * Set the raw QUIC transport parameter that will be sent in the TLS extension
- * to the peer, using the configured transport version(s).
- */
-WOLFSSL_API int wolfSSL_set_quic_transport_params(WOLFSSL* ssl,
-                                                  const uint8_t* params,
-                                                  size_t params_len);
-/**
- * Get the raw QUIC transport parameter as retrieved via TLS Extension
- * from the peer. If the peer announced several versions,
- * return the latest one.
- * If the extension has not arrived yet, initializes out parameter to
- * NULL, resp. 0.
- */
-WOLFSSL_API
-void wolfSSL_get_peer_quic_transport_params(const WOLFSSL* ssl,
-                                            const uint8_t* *out_params,
-                                            size_t* out_params_len);
-
-/**
- * Get the QUIC version negotiated with the peer during the handshake.
- */
-WOLFSSL_API int wolfSSL_get_peer_quic_transport_version(const WOLFSSL* ssl);
-
-#ifdef WOLFSSL_EARLY_DATA
-WOLFSSL_API void wolfSSL_set_quic_early_data_enabled(WOLFSSL* ssl, int enabled);
-#endif
-
-/**
- * Advisory amount of the maximum data a QUIC protocol handler should have
- * in flight. This varies during handshake processing, for example certificate
- * exchange will increase the limit.
- */
-WOLFSSL_API
-size_t wolfSSL_quic_max_handshake_flight_len(const WOLFSSL* ssl,
-                                             WOLFSSL_ENCRYPTION_LEVEL level);
-
-
-/**
- * The QUIC protocol handler provides peer TLS records to the SSL instance
- * during handshake to progress it. The SSL instance will use the registered
- * callbacks to send packets to the peer.
- * Encryption level is provided to indicate how to decrypt the data. Data may
- * be added for levels not yet reached by the SSL instance. However, data
- * may only be added in ever increasing levels and levels may only increase
- * at TLS record boundaries. Any violation will make this function fail.
- */
-WOLFSSL_API
-int wolfSSL_provide_quic_data(WOLFSSL* ssl, WOLFSSL_ENCRYPTION_LEVEL level,
-                              const uint8_t* data, size_t len);
-
-WOLFSSL_API
-int wolfSSL_quic_do_handshake(WOLFSSL* ssl);
-
-/**
- * Process any CRYPTO data added post-handshake.
- */
-WOLFSSL_API int wolfSSL_process_quic_post_handshake(WOLFSSL* ssl);
-
-/**
- * Process any pending input and flush all output. Can be invoked
- * during and/or after handshake processing.
- */
-WOLFSSL_API int wolfSSL_quic_read_write(WOLFSSL* ssl);
-
-/**
- * Get the AEAD cipher that is currently selected in the SSL instance.
- * Will return NULL if none has been selected so far. This is used by the
- * QUIC stack to encrypt/decrypt packets after the handshake.
- */
-WOLFSSL_API const WOLFSSL_EVP_CIPHER* wolfSSL_quic_get_aead(WOLFSSL* ssl);
-
-/**
- * Use to classify the AEAD cipher for key reuse limits.
- */
-WOLFSSL_API int wolfSSL_quic_aead_is_gcm(const WOLFSSL_EVP_CIPHER* aead_cipher);
-WOLFSSL_API int wolfSSL_quic_aead_is_ccm(const WOLFSSL_EVP_CIPHER* aead_cipher);
-WOLFSSL_API
-int wolfSSL_quic_aead_is_chacha20(const WOLFSSL_EVP_CIPHER* aead_cipher);
-
-/**
- * Get the 'tag' length used by the AEAD cipher. Encryption buffer lengths
- * are plaintext length plus this tag length.
- */
-WOLFSSL_API
-size_t wolfSSL_quic_get_aead_tag_len(const WOLFSSL_EVP_CIPHER* aead_cipher);
-
-/**
- * The message digest currently selected in the SSL instance.
- */
-WOLFSSL_API const WOLFSSL_EVP_MD* wolfSSL_quic_get_md(WOLFSSL* ssl);
-
-/**
- * The QUIC header protection cipher matching the AEAD cipher currently
- * selected in the SSL instance.
- */
-WOLFSSL_API const WOLFSSL_EVP_CIPHER* wolfSSL_quic_get_hp(WOLFSSL* ssl);
-
-/**
- * Create and initialize a cipher context for use in en- or decryption.
- */
-WOLFSSL_API WOLFSSL_EVP_CIPHER_CTX*
-wolfSSL_quic_crypt_new(const WOLFSSL_EVP_CIPHER* cipher,
-                       const uint8_t* key, const uint8_t* iv, int encrypt);
-
-/**
- * Use a previously created cipher context to encrypt the given plain text.
- */
-WOLFSSL_API
-int wolfSSL_quic_aead_encrypt(uint8_t* dest, WOLFSSL_EVP_CIPHER_CTX* aead_ctx,
-                              const uint8_t* plain, size_t plainlen,
-                              const uint8_t* iv, const uint8_t* aad,
-                              size_t aadlen);
-/**
- * Use a previously created cipher context to decrypt the given encoded text.
- */
-WOLFSSL_API
-int wolfSSL_quic_aead_decrypt(uint8_t* dest, WOLFSSL_EVP_CIPHER_CTX* ctx,
-                              const uint8_t* enc, size_t enclen,
-                              const uint8_t* iv, const uint8_t* aad,
-                              size_t aadlen);
-
-/**
- * Extract a pseudo-random key, using the given message digest, a secret
- * and a salt. The key size is the size of the digest.
- */
-WOLFSSL_API
-int wolfSSL_quic_hkdf_extract(uint8_t* dest, const WOLFSSL_EVP_MD* md,
-                              const uint8_t* secret, size_t secretlen,
-                              const uint8_t* salt, size_t saltlen);
-/**
- * Expand a pseudo-random key (secret) into a new key, using the mesasge
- * digest and the info bytes.
- */
-WOLFSSL_API
-int wolfSSL_quic_hkdf_expand(uint8_t* dest, size_t destlen,
-                             const WOLFSSL_EVP_MD* md,
-                             const uint8_t* secret, size_t secretlen,
-                             const uint8_t* info, size_t infolen);
-
-/**
- * Extract and extpand secret, salt and info into a new key.
- */
-WOLFSSL_API
-int wolfSSL_quic_hkdf(uint8_t* dest, size_t destlen,
-                      const WOLFSSL_EVP_MD* md,
-                      const uint8_t* secret, size_t secretlen,
-                      const uint8_t* salt, size_t saltlen,
-                      const uint8_t* info, size_t infolen);
-
-/* most common QUIC packet size as of 2022 was 1,200 bytes
- * largest packet size listed in the RFC is 1,392 bytes
- * this gives plenty of breathing room for capacity of records but keeps sizes
- * read from the wire sane */
-#ifndef WOLFSSL_QUIC_MAX_RECORD_CAPACITY
-    /* 1024*1024 -- 1 MB */
-    #define WOLFSSL_QUIC_MAX_RECORD_CAPACITY (1048576)
-#endif
-
-#endif /* WOLFSSL_QUIC */
-
-#ifdef __cplusplus
-    }  /* extern "C" */
-#endif
-
-#endif /* WOLFSSL_QUIC_H */

package/android/install/wolfssl-android/armeabi-v7a/include/wolfssl/sniffer.h

@@ -1,359 +0,0 @@
-/* sniffer.h
- *
- * Copyright (C) 2006-2025 wolfSSL Inc.
- *
- * This file is part of wolfSSL.
- *
- * wolfSSL is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 3 of the License, or
- * (at your option) any later version.
- *
- * wolfSSL is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program; if not, write to the Free Software
- * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
- */
-
-
-
-#ifndef WOLFSSL_SNIFFER_H
-#define WOLFSSL_SNIFFER_H
-
-#include <wolfssl/wolfcrypt/settings.h>
-#include <wolfssl/wolfcrypt/asn_public.h>
-
-#ifdef HAVE_WOLF_EVENT
-    #include <wolfssl/wolfcrypt/wolfevent.h>
-#endif
-
-
-#ifdef _WIN32
-    #ifdef SSL_SNIFFER_EXPORTS
-        #define SSL_SNIFFER_API __declspec(dllexport)
-    #else
-        #define SSL_SNIFFER_API __declspec(dllimport)
-    #endif
-#else
-    #define SSL_SNIFFER_API
-#endif /* _WIN32 */
-
-
-#ifdef __cplusplus
-    extern "C" {
-#endif
-
-
-typedef struct IpAddrInfo {
-    int version;
-    union {
-        word32 ip4;
-        byte   ip6[16];
-    };
-} IpAddrInfo;
-
-typedef struct SnifferStreamInfo {
-    IpAddrInfo src;          /* server address in network byte order */
-    IpAddrInfo dst;          /* client address in network byte order */
-    word16            dstPort;         /* server port */
-    word16            srcPort;         /* client port */
-} SnifferStreamInfo;
-
-/* @param typeK: (formerly keyType) was shadowing a global declaration in
- *                wolfssl/wolfcrypt/asn.h line 175
- */
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetPrivateKey(const char* address, int port,
-                                      const char* keyFile, int typeK,
-                                      const char* password, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetPrivateKeyBuffer(const char* address, int port,
-                                            const char* keyBuf, int keySz,
-                                            int typeK, const char* password,
-                                            char* error);
-
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetNamedPrivateKey(const char* name,
-                                           const char* address, int port,
-                                           const char* keyFile, int typeK,
-                                           const char* password, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetNamedPrivateKeyBuffer(const char* name,
-                                                 const char* address, int port,
-                                                 const char* keyBuf, int keySz,
-                                                 int typeK, const char* password,
-                                                 char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetEphemeralKey(const char* address, int port,
-                                        const char* keyFile, int typeKey,
-                                        const char* password, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetEphemeralKeyBuffer(const char* address, int port,
-                                              const char* keyBuf, int keySz, int typeKey,
-                                              const char* password, char* error);
-
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetNamedEphemeralKey(const char* name,
-                                             const char* address, int port,
-                                             const char* keyFile, int typeKey,
-                                             const char* password, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetNamedEphemeralKeyBuffer(const char* name,
-                                                   const char* address, int port,
-                                                   const char* keyBuf, int keySz, int typeKey,
-                                                   const char* password, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_DecodePacket(const unsigned char* packet, int length,
-                                     unsigned char** data, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_FreeDecodeBuffer(unsigned char** data, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_FreeZeroDecodeBuffer(unsigned char** data, int sz,
-                                             char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_Trace(const char* traceFile, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_EnableRecovery(int onOff, int maxMemory, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_GetSessionStats(unsigned int* active,
-                                        unsigned int* total,
-                                        unsigned int* peak,
-                                        unsigned int* maxSessions,
-                                        unsigned int* missedData,
-                                        unsigned int* reassemblyMemory,
-                                        char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API void ssl_InitSniffer(void);
-WOLFSSL_API
-SSL_SNIFFER_API void ssl_InitSniffer_ex(int devId);
-WOLFSSL_API
-SSL_SNIFFER_API void ssl_InitSniffer_ex2(int threadNum);
-
-WOLFSSL_API
-SSL_SNIFFER_API void ssl_FreeSniffer(void);
-
-WOLFSSL_API
-SSL_SNIFFER_API void ssl_RemoveStaleSessions(void);
-
-/* ssl_SetPrivateKey typeKs */
-enum {
-    FILETYPE_PEM = 1,
-    FILETYPE_DER = 2,
-};
-
-
-/*
- * New Sniffer API that provides read-only access to the TLS and cipher
- * information associated with the SSL session.
- */
-
-typedef struct SSLInfo
-{
-    unsigned char  isValid;
-            /* indicates if the info in this struct is valid: 0 = no, 1 = yes */
-    unsigned char  protocolVersionMajor;    /* SSL Version: major */
-    unsigned char  protocolVersionMinor;    /* SSL Version: minor */
-    unsigned char  serverCipherSuite0;      /* first byte, normally 0 */
-    unsigned char  serverCipherSuite;       /* second byte, actual suite */
-    unsigned char  serverCipherSuiteName[256];
-            /* cipher name, e.g., "TLS_RSA_..." */
-    unsigned char  serverNameIndication[128];
-    unsigned int   keySize;
-} SSLInfo;
-
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_DecodePacketWithSessionInfo(
-                        const unsigned char* packet, int length,
-                        unsigned char** data, SSLInfo* sslInfo, char* error);
-
-typedef void (*SSLConnCb)(const void* session, SSLInfo* info, void* ctx);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetConnectionCb(SSLConnCb cb);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetConnectionCtx(void* ctx);
-
-
-typedef struct SSLStats
-{
-    unsigned long int sslStandardConns;      /* server_hello count not including resumed sessions */
-    unsigned long int sslClientAuthConns;    /* client's who have presented certificates (mutual authentication) */
-    unsigned long int sslResumedConns;       /* resumed connections */
-    unsigned long int sslEphemeralMisses;    /* TLS v1.2 and older PFS / ephemeral connections missed (not able to decrypt) */
-    unsigned long int sslResumeMisses;       /* Resumption sessions not found */
-    unsigned long int sslCiphersUnsupported; /* No cipher suite match found when compared to supported */
-    unsigned long int sslKeysUnmatched;      /* Key callback failures (not found). Applies to WOLFSSL_SNIFFER_WATCH only */
-    unsigned long int sslKeyFails;           /* Failures loading or using keys */
-    unsigned long int sslDecodeFails;        /* Dropped packets (not application_data or match protocol version) */
-    unsigned long int sslAlerts;             /* Number of decoded alert messages */
-    unsigned long int sslDecryptedBytes;     /* Number of decrypted bytes */
-    unsigned long int sslEncryptedBytes;     /* Number of encrypted bytes */
-    unsigned long int sslEncryptedPackets;   /* Number of encrypted packets */
-    unsigned long int sslDecryptedPackets;   /* Number of decrypted packets */
-    unsigned long int sslKeyMatches;         /* Key callback successes (failures tracked in sslKeysUnmatched). Applies to WOLFSSL_SNIFFER_WATCH only. */
-    unsigned long int sslEncryptedConns;     /* Number of created sniffer sessions */
-    unsigned long int sslResumptionInserts;  /* Number of sessions reused with resumption */
-} SSLStats;
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_ResetStatistics(void);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_ReadStatistics(SSLStats* stats);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_ReadResetStatistics(SSLStats* stats);
-
-
-#if defined(WOLFSSL_STATIC_EPHEMERAL) && defined(WOLFSSL_TLS13)
-/* macro indicating support for key callback */
-#undef  WOLFSSL_SNIFFER_KEY_CALLBACK
-#define WOLFSSL_SNIFFER_KEY_CALLBACK
-
-typedef int (*SSLKeyCb)(void* vSniffer, int namedGroup,
-    const unsigned char* srvPub, unsigned int srvPubSz,
-    const unsigned char* cliPub, unsigned int cliPubSz,
-    DerBuffer* privKey, void* cbCtx, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetKeyCallback(SSLKeyCb cb, void* cbCtx);
-#endif
-
-
-#ifdef WOLFSSL_SNIFFER_WATCH
-typedef int (*SSLWatchCb)(void* vSniffer,
-                        const unsigned char* certHash,
-                        unsigned int certHashSz,
-                        const unsigned char* certChain,
-                        unsigned int certChainSz,
-                        void* ctx, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetWatchKeyCallback(SSLWatchCb cb, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetWatchKeyCallback_ex(SSLWatchCb cb, int devId,
-                        char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetWatchKeyCtx(void* ctx, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetWatchKey_buffer(void* vSniffer,
-                        const unsigned char* key, unsigned int keySz,
-                        int keyType, char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetWatchKey_file(void* vSniffer,
-                        const char* keyFile, int keyType,
-                        const char* password, char* error);
-#endif
-
-#ifdef WOLFSSL_SNIFFER_STORE_DATA_CB
-typedef int (*SSLStoreDataCb)(const unsigned char* decryptBuf,
-        unsigned int decryptBufSz, unsigned int decryptBufOffset, void* ctx);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_SetStoreDataCallback(SSLStoreDataCb cb);
-#endif
-
-#ifdef WOLFSSL_SNIFFER_STORE_DATA_CB
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_DecodePacketWithSessionInfoStoreData(
-        const unsigned char* packet, int length, void* ctx,
-        SSLInfo* sslInfo, char* error);
-#endif
-
-#ifdef WOLFSSL_SNIFFER_CHAIN_INPUT
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_DecodePacketWithChain(void* vChain,
-        unsigned int chainSz, unsigned char** data, char* error);
-#endif
-
-#if defined(WOLFSSL_SNIFFER_CHAIN_INPUT) && \
-    defined(WOLFSSL_SNIFFER_STORE_DATA_CB)
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_DecodePacketWithChainSessionInfoStoreData(
-        void* vChain, unsigned int chainSz, void* ctx, SSLInfo* sslInfo,
-        char* error);
-#endif
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_DecodePacket_GetStream(SnifferStreamInfo* info,
-        const byte* packet, int length, char* error);
-
-#ifdef WOLFSSL_ASYNC_CRYPT
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_DecodePacketAsync(void* packet, unsigned int packetSz,
-    int isChain, unsigned char** data, char* error, SSLInfo* sslInfo,
-    void* userCtx);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_PollSniffer(WOLF_EVENT** events, int maxEvents,
-    WOLF_EVENT_FLAG flags, int* eventCount);
-
-#endif /* WOLFSSL_ASYNC_CRYPT */
-
-#ifdef WOLFSSL_SNIFFER_KEYLOGFILE
-
-typedef enum {
-    SNIFFER_SECRET_TLS12_MASTER_SECRET,
-#if defined(WOLFSSL_TLS13)
-    SNIFFER_SECRET_CLIENT_EARLY_TRAFFIC_SECRET,
-    SNIFFER_SECRET_CLIENT_HANDSHAKE_TRAFFIC_SECRET,
-    SNIFFER_SECRET_SERVER_HANDSHAKE_TRAFFIC_SECRET,
-    SNIFFER_SECRET_CLIENT_TRAFFIC_SECRET,
-    SNIFFER_SECRET_SERVER_TRAFFIC_SECRET,
-#endif /* WOLFSSL_TLS13 */
-    SNIFFER_SECRET_NUM_SECRET_TYPES
-} SnifferSecretType;
-
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_CreateKeyLogSnifferServer(const char* address,
-                                                  int port,
-                                                  char* error);
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_LoadSecretsFromKeyLogFile(const char* keylogfile,
-                                                  char* error);
-
-typedef int (*SSLSnifferSecretCb)(unsigned char* client_random,
-                                  int type,
-                                  unsigned char* output_secret);
-
-#endif /* WOLFSSL_SNIFFER_KEYLOGFILE */
-
-WOLFSSL_API
-SSL_SNIFFER_API int ssl_RemoveSession(const char* clientIp, int clientPort,
-                                      const char* serverIp, int serverPort,
-                                      char* error);
-
-
-#ifdef __cplusplus
-    }  /* extern "C" */
-#endif
-
-#endif /* wolfSSL_SNIFFER_H */
-