visaljs 0.0.2 → 0.0.3

package/runtime/third_party/boringssl/include/openssl/x509_vfy.h

@@ -0,0 +1,18 @@
+// Copyright 2021 The BoringSSL Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     https://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+/* This header is provided in order to make compiling against code that expects
+   OpenSSL easier. */
+
+#include "x509.h"

package/runtime/third_party/boringssl/include/openssl/x509v3.h

@@ -0,0 +1,63 @@
+// Copyright 2023 The BoringSSL Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     https://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#ifndef OPENSSL_HEADER_X509V3_H
+#define OPENSSL_HEADER_X509V3_H
+
+// This header primarily exists in order to make compiling against code that
+// expects OpenSSL easier. We have merged this header into <openssl/x509.h>.
+// However, due to conflicts, some deprecated symbols are defined here.
+#include <openssl/x509.h>
+
+
+// CRL reason constants.
+
+// TODO(davidben): These constants live here because strongswan defines
+// conflicting symbols and has been relying on them only being defined in
+// <openssl/x509v3.h>. Defining the constants in <openssl/x509.h> would break
+// strongswan, but we would also like for new code to only need
+// <openssl/x509.h>. Introduce properly namespaced versions of these constants
+// and, separately, see if we can fix strongswan to similarly avoid the
+// conflict. Between OpenSSL, strongswan, and wincrypt.h all defining these
+// constants, it seems best for everyone to just avoid them going forward.
+#define CRL_REASON_NONE (-1)
+#define CRL_REASON_UNSPECIFIED 0
+#define CRL_REASON_KEY_COMPROMISE 1
+#define CRL_REASON_CA_COMPROMISE 2
+#define CRL_REASON_AFFILIATION_CHANGED 3
+#define CRL_REASON_SUPERSEDED 4
+#define CRL_REASON_CESSATION_OF_OPERATION 5
+#define CRL_REASON_CERTIFICATE_HOLD 6
+#define CRL_REASON_REMOVE_FROM_CRL 8
+#define CRL_REASON_PRIVILEGE_WITHDRAWN 9
+#define CRL_REASON_AA_COMPROMISE 10
+
+
+// Deprecated constants.
+
+// The following constants are legacy aliases for `X509v3_KU_*`. They are
+// defined here instead of in <openssl/x509.h> because NSS's public headers use
+// the same symbols. Some callers have inadvertently relied on the conflicts
+// only being defined in this header.
+#define KU_DIGITAL_SIGNATURE X509v3_KU_DIGITAL_SIGNATURE
+#define KU_NON_REPUDIATION X509v3_KU_NON_REPUDIATION
+#define KU_KEY_ENCIPHERMENT X509v3_KU_KEY_ENCIPHERMENT
+#define KU_DATA_ENCIPHERMENT X509v3_KU_DATA_ENCIPHERMENT
+#define KU_KEY_AGREEMENT X509v3_KU_KEY_AGREEMENT
+#define KU_KEY_CERT_SIGN X509v3_KU_KEY_CERT_SIGN
+#define KU_CRL_SIGN X509v3_KU_CRL_SIGN
+#define KU_ENCIPHER_ONLY X509v3_KU_ENCIPHER_ONLY
+#define KU_DECIPHER_ONLY X509v3_KU_DECIPHER_ONLY
+
+#endif  // OPENSSL_HEADER_X509V3_H

package/runtime/third_party/boringssl/include/openssl/x509v3_errors.h

@@ -0,0 +1,84 @@
+// Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     https://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#ifndef OPENSSL_HEADER_X509V3_ERRORS_H
+#define OPENSSL_HEADER_X509V3_ERRORS_H
+
+#define X509V3_R_BAD_IP_ADDRESS 100
+#define X509V3_R_BAD_OBJECT 101
+#define X509V3_R_BN_DEC2BN_ERROR 102
+#define X509V3_R_BN_TO_ASN1_INTEGER_ERROR 103
+#define X509V3_R_CANNOT_FIND_FREE_FUNCTION 104
+#define X509V3_R_DIRNAME_ERROR 105
+#define X509V3_R_DISTPOINT_ALREADY_SET 106
+#define X509V3_R_DUPLICATE_ZONE_ID 107
+#define X509V3_R_ERROR_CONVERTING_ZONE 108
+#define X509V3_R_ERROR_CREATING_EXTENSION 109
+#define X509V3_R_ERROR_IN_EXTENSION 110
+#define X509V3_R_EXPECTED_A_SECTION_NAME 111
+#define X509V3_R_EXTENSION_EXISTS 112
+#define X509V3_R_EXTENSION_NAME_ERROR 113
+#define X509V3_R_EXTENSION_NOT_FOUND 114
+#define X509V3_R_EXTENSION_SETTING_NOT_SUPPORTED 115
+#define X509V3_R_EXTENSION_VALUE_ERROR 116
+#define X509V3_R_ILLEGAL_EMPTY_EXTENSION 117
+#define X509V3_R_ILLEGAL_HEX_DIGIT 118
+#define X509V3_R_INCORRECT_POLICY_SYNTAX_TAG 119
+#define X509V3_R_INVALID_BOOLEAN_STRING 120
+#define X509V3_R_INVALID_EXTENSION_STRING 121
+#define X509V3_R_INVALID_MULTIPLE_RDNS 122
+#define X509V3_R_INVALID_NAME 123
+#define X509V3_R_INVALID_NULL_ARGUMENT 124
+#define X509V3_R_INVALID_NULL_NAME 125
+#define X509V3_R_INVALID_NULL_VALUE 126
+#define X509V3_R_INVALID_NUMBER 127
+#define X509V3_R_INVALID_NUMBERS 128
+#define X509V3_R_INVALID_OBJECT_IDENTIFIER 129
+#define X509V3_R_INVALID_OPTION 130
+#define X509V3_R_INVALID_POLICY_IDENTIFIER 131
+#define X509V3_R_INVALID_PROXY_POLICY_SETTING 132
+#define X509V3_R_INVALID_PURPOSE 133
+#define X509V3_R_INVALID_SECTION 134
+#define X509V3_R_INVALID_SYNTAX 135
+#define X509V3_R_ISSUER_DECODE_ERROR 136
+#define X509V3_R_MISSING_VALUE 137
+#define X509V3_R_NEED_ORGANIZATION_AND_NUMBERS 138
+#define X509V3_R_NO_CONFIG_DATABASE 139
+#define X509V3_R_NO_ISSUER_CERTIFICATE 140
+#define X509V3_R_NO_ISSUER_DETAILS 141
+#define X509V3_R_NO_POLICY_IDENTIFIER 142
+#define X509V3_R_NO_PROXY_CERT_POLICY_LANGUAGE_DEFINED 143
+#define X509V3_R_NO_PUBLIC_KEY 144
+#define X509V3_R_NO_SUBJECT_DETAILS 145
+#define X509V3_R_ODD_NUMBER_OF_DIGITS 146
+#define X509V3_R_OPERATION_NOT_DEFINED 147
+#define X509V3_R_OTHERNAME_ERROR 148
+#define X509V3_R_POLICY_LANGUAGE_ALREADY_DEFINED 149
+#define X509V3_R_POLICY_PATH_LENGTH 150
+#define X509V3_R_POLICY_PATH_LENGTH_ALREADY_DEFINED 151
+#define X509V3_R_POLICY_WHEN_PROXY_LANGUAGE_REQUIRES_NO_POLICY 152
+#define X509V3_R_SECTION_NOT_FOUND 153
+#define X509V3_R_UNABLE_TO_GET_ISSUER_DETAILS 154
+#define X509V3_R_UNABLE_TO_GET_ISSUER_KEYID 155
+#define X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT 156
+#define X509V3_R_UNKNOWN_EXTENSION 157
+#define X509V3_R_UNKNOWN_EXTENSION_NAME 158
+#define X509V3_R_UNKNOWN_OPTION 159
+#define X509V3_R_UNSUPPORTED_OPTION 160
+#define X509V3_R_UNSUPPORTED_TYPE 161
+#define X509V3_R_USER_TOO_LONG 162
+#define X509V3_R_INVALID_VALUE 163
+#define X509V3_R_TRAILING_DATA_IN_EXTENSION 164
+
+#endif  // OPENSSL_HEADER_X509V3_ERRORS_H

package/runtime/third_party/boringssl/include/openssl/xwing.h

@@ -0,0 +1,115 @@
+// Copyright 2025 The BoringSSL Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     https://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+#ifndef OPENSSL_HEADER_XWING_H
+#define OPENSSL_HEADER_XWING_H
+
+#include <openssl/base.h>  // IWYU pragma: export
+
+#if defined(__cplusplus)
+extern "C" {
+#endif
+
+
+// MLKEM768-X25519 (X-Wing).
+//
+// This implements the hybrid key encapsulation mechanism "MLKEM768-X25519" from
+// https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-concrete-hybrid-kems-02
+// which is also known as "X-Wing".
+
+
+// XWING_private_key contains an X-Wing private key. The contents of this object
+// should never leave the address space since the format is unstable.
+struct XWING_private_key {
+  union {
+    uint8_t bytes[512 * (3 + 3 + 9) + 32 + 32 + 32 + 32 + 32];
+    uint16_t alignment;
+  } opaque;
+};
+
+// XWING_PUBLIC_KEY_BYTES is the number of bytes in an encoded X-Wing public
+// key.
+#define XWING_PUBLIC_KEY_BYTES 1216
+
+// XWING_PRIVATE_KEY_BYTES is the number of bytes in an encoded X-Wing private
+// key.
+#define XWING_PRIVATE_KEY_BYTES 32
+
+// XWING_CIPHERTEXT_BYTES is the number of bytes in the X-Wing ciphertext.
+#define XWING_CIPHERTEXT_BYTES 1120
+
+// XWING_SHARED_SECRET_BYTES is the number of bytes in an X-Wing shared secret.
+#define XWING_SHARED_SECRET_BYTES 32
+
+
+// XWING_generate_key generates a random public/private key pair, writes the
+// encoded public key to `out_encoded_public_key` and the private key to
+// `out_private_key`. Returns one on success and zero on error.
+OPENSSL_EXPORT int XWING_generate_key(
+    uint8_t out_encoded_public_key[XWING_PUBLIC_KEY_BYTES],
+    struct XWING_private_key *out_private_key);
+
+// XWING_public_from_private sets `out_encoded_public_key` to the public key
+// that corresponds to `private_key`. Returns one on success and zero on error.
+OPENSSL_EXPORT int XWING_public_from_private(
+    uint8_t out_encoded_public_key[XWING_PUBLIC_KEY_BYTES],
+    const struct XWING_private_key *private_key);
+
+// XWING_encap encapsulates a random shared secret for `encoded_public_key`,
+// writes the ciphertext to `out_ciphertext`, and writes the random shared
+// secret to `out_shared_secret`. Returns one on success and zero on error.
+OPENSSL_EXPORT int XWING_encap(
+    uint8_t out_ciphertext[XWING_CIPHERTEXT_BYTES],
+    uint8_t out_shared_secret[XWING_SHARED_SECRET_BYTES],
+    const uint8_t encoded_public_key[XWING_PUBLIC_KEY_BYTES]);
+
+// XWING_encap_external_entropy encapsulates the shared secret for the given
+// `eseed` entropy using `encoded_public_key`, writes the ciphertext to
+// `out_ciphertext`, and writes the random shared secret to `out_shared_secret`.
+// Returns one on success and zero on error.
+OPENSSL_EXPORT int XWING_encap_external_entropy(
+    uint8_t out_ciphertext[XWING_CIPHERTEXT_BYTES],
+    uint8_t out_shared_secret[XWING_SHARED_SECRET_BYTES],
+    const uint8_t encoded_public_key[XWING_PUBLIC_KEY_BYTES],
+    const uint8_t eseed[64]);
+
+// XWING_decap decapsulates a shared secret from `ciphertext` using
+// `private_key` and writes it to `out_shared_secret`. Returns one on success
+// and zero on error.
+OPENSSL_EXPORT int XWING_decap(
+    uint8_t out_shared_secret[XWING_SHARED_SECRET_BYTES],
+    const uint8_t ciphertext[XWING_CIPHERTEXT_BYTES],
+    const struct XWING_private_key *private_key);
+
+// Serialisation of keys.
+
+// XWING_marshal_private_key serializes `private_key` to `out` in the standard
+// format for X-Wing private keys. It returns one on success or zero on
+// allocation error.
+OPENSSL_EXPORT int XWING_marshal_private_key(
+    CBB *out, const struct XWING_private_key *private_key);
+
+// XWING_parse_private_key parses a private key in the standard format for
+// X-Wing private keys from `in` and writes the result to `out_public_key`. It
+// returns one on success or zero on parse error or if there are trailing bytes
+// in `in`.
+OPENSSL_EXPORT int XWING_parse_private_key(
+    struct XWING_private_key *out_private_key, CBS *in);
+
+
+#if defined(__cplusplus)
+}  // extern C
+#endif
+
+#endif  // OPENSSL_HEADER_XWING_H