dinamo.h

Vá para a documentação deste arquivo.

/* Dinamo Networks. */
/* Date: 20190528(AAAAMMDD)   */



#ifndef NETDFENCE_H_INCLUDED
#define NETDFENCE_H_INCLUDED

#ifdef _WIN32
    #include <windows.h>
#endif

#include <time.h>

#ifdef _WIN32
    typedef unsigned __int64 ND_uint64_t;
    typedef unsigned __int64 ND_OATH_uint64_t;
    #define AAP_API __stdcall

    typedef unsigned long long int  QWORD;
#else
    typedef unsigned long long ND_uint64_t;
    typedef unsigned long long ND_OATH_uint64_t;
    #ifdef INTEL_GCC
        #define AAP_API __attribute__((stdcall))
    #else
        #define AAP_API
    #endif /* INTEL_GCC */

    typedef unsigned char            BYTE;
    typedef unsigned int             DWORD;
    typedef unsigned long long int  QWORD;
    typedef unsigned short           WORD;
    typedef int                       BOOL;
    typedef unsigned int             UINT;
    typedef signed int               INT;
    typedef signed char              CHAR;

    #ifndef FALSE
    #define FALSE   (0)
    #endif
    #ifndef TRUE
    #define TRUE    (1)
    #endif

#endif

typedef unsigned long           DN_ULONG;

typedef void *HSESSIONCTX;
typedef void *HHASHCTX;
typedef void *HKEYCTX;
typedef void *HCERTCTX;
typedef void *HSPBCTX;
typedef void *HCHAPCTX;
typedef void *HLOGCTX;
typedef void *HOBJMETACTX;
typedef void *HP11ATTRCTX;
typedef void *HOBJMETASEARCHCTX;


/* Client network errors. Negative errors. */

#define D_SOCKET_FAILED                       (-10)
#define D_GETHOSTNAME_FAILED                  (-11)
#define D_CONNECT_FAILED                      (-12)
#define D_SEND_FAILED                         (-13)
#define D_RECV_FAILED                         (-14)
#define D_INVALID_PACKAGE_SIZE                (-15)
#define D_SETSOCKOPT_FAILED                   (-16)
#define D_GETSOCKOPT_FAILED                   (-17)
#define D_ALL_LOAD_BALANCE_HSM_FAILED         (-18)

/* OpenSSL generated errors 1 to 100 */

#define D_SSL_CTX_NEW_FAILED        (1)
#define D_SSL_NEW_FAILED            (2)
#define D_SSL_CONNECT_FAILED        (3)

/* System errors */

#define D_WSASTARTUP           (2001)
#define D_MEMORY_ALLOC         (2002)


/* Client errors */

#define D_INVALID_PARAM                (1001)
#define D_INVALID_TYPE                 (1002)
#define D_INVALID_STATE                (1003)
#define D_LOGGING_NOT_STARTED          (1004)
#define D_MORE_DATA                    (1005)
#define D_INVALID_RESPONSE             (1006)
#define D_INVALID_CONTEXT              (1007)
#define D_KEY_GEN_ERROR                (1008)
#define D_KEY_DEL_ERROR                (1009)
#define D_KEY_NOT_EXISTS               (1010)
#define D_INVALID_DATA_LENGTH          (1011)
#define D_INVALID_KEY_ALG              (1012)
#define D_INVALID_PADDING              (1013)
#define D_INVALID_KEY                  (1014)
#define D_BAD_DATA                     (1015)
#define D_INVALID_PUBKEY               (1016)
#define D_INVALID_ALG_ID               (1017)
#define D_INVALID_HASH                 (1018)
#define D_INIT_HASH_FAILED             (1019)
#define D_INVALID_HASH_STATE           (1020)
#define D_END_HASH_FAILED              (1021)
#define D_GET_INFO_ERROR               (1022)
#define D_INVALID_PIN_LEN              (1023)
#define D_OPEN_FILE_FAILED             (1025)
#define D_BACKUP_FAILED                (1026)
#define D_RESTORE_FAILED               (1027)
#define D_INVALID_CALLBACK             (1028)
#define D_NOT_IMPLEMENTED              (1029)
#define D_AUTH_FAILED                  (1030)
#define D_INVALID_CLEAR_OP             (1031)
#define D_CHANGE_PWD_ERROR             (1032)
#define D_PWD_SIZE_ERROR               (1033)
#define D_IMPORT_KEY_ERROR             (1034)
#define D_INVALID_KEY_ID               (1035)
#define D_INVALID_FLAG                 (1036)
#define D_INVALID_SIGNATURE            (1037)
#define D_INVALID_PUB_KEY              (1038)
#define D_INVALID_KEY_STATE            (1039)
#define D_CREATE_USER_ERROR            (1040)
#define D_NO_MORE_OBJECT               (1041)
#define D_PUT_ENV_VAR_FAILED           (1042)
#define D_INVALID_FILE_SIZE            (1043)
#define D_INVALID_TEXT_SIZE            (1044)
#define D_FILE_ACCESS_ERROR            (1045)
#define D_INVALID_COUNTER              (1046)
#define D_INVALID_MODE                 (1047)
#define D_INVALID_STRUCT_ID            (1048)
#define D_INVALID_IP_ADDRESS           (1049)
#define D_GET_PEER_IP_ERROR            (1050)
#define D_CERTIFICATE_PARSE_FAILED     (1051)
#define D_INVALID_KEY_PART_1           (1052)
#define D_INVALID_KEY_PART_2           (1053)
#define D_INVALID_KEY_PART_3           (1054)
#define D_VERIFY_DAC_FAILED            (1055)
#define D_DEPRECATED                   (1056)
#define D_NO_MATCHING_KEY_FOUND        (1057)
#define D_CALLBACK_ERROR               (1058)
#define D_INTERNAL_ERROR               (1059)
#define D_KEY_NOT_EXPORTABLE_ERROR     (1060)

#define D_INVALID_SPB_ID               (1062)
#define D_JSON_PARSE_ERROR             (1063)
#define D_JSON_PARSE_WRONG_TYPE_ERROR  (1064)
#define D_JSON_SET_VALUE_ERROR         (1065)
#define D_JSON_UNSET_VALUE_ERROR       (1066)
#define D_JSON_VALUE_NOT_FOUND         (1067)
#define D_JSON_OBJ_CREATE_ERROR        (1068)

#define D_SLP_PARSE_ERROR               (1069)
#define D_SLP_INTERNAL_ERROR            (1070)
#define D_SLP_TOO_MANY_SERVERS_ERROR    (1071)

#define D_INVALID_SERVER_VERSION    (1072)

#define D_GENERATE_PKCS12_ERROR             (1073)
#define D_SET_LOAD_BALANCE_LIST_ERROR       (1074)



/* Server errors */

#define D_KEEP_ALIVE_ERROR     (3001)
#define D_RECEIVE_LOG_ERROR    (3002)
#define D_ERROR_NOTIFY         (3003)


/* Server returned errors */

#define D_ERR_UNKNOWN                                        (5000)
#define D_ERR_NET_FAIL                                       (5001)
#define D_ERR_ACCESS_DENIED                                  (5002)
#define D_ERR_CANNOT_CREATE_OBJ                              (5003)
#define D_ERR_CANNOT_OPEN_OBJ                                (5004)
#define D_ERR_CANNOT_DEL_OBJ                                 (5005)
#define D_ERR_CANNOT_ALLOC_RES                               (5006)
#define D_ERR_INVALID_CTX                                    (5007)
#define D_ERR_INVALID_OPERATION                              (5008)
#define D_ERR_INVALID_KEY                                    (5009)
#define D_ERR_NO_TLS_USED                                    (5010)
#define D_ERR_CANNOT_CHANGE_PWD                              (5011)
#define D_ERR_OBJ_NOT_EXPORTABLE                             (5012)
#define D_ERR_USR_ALREADY_EXISTS                             (5013)
#define D_ERR_INVALID_USR_NAME                               (5014)
#define D_ERR_CANNOT_CREATE_USR                              (5015)
#define D_ERR_NO_MORE_LOG_SLOTS                              (5016)
#define D_ERR_CANNOT_DELETE_USR                              (5017)
#define D_ERR_CANNOT_DELETE_MASTER                           (5018)
#define D_ERR_NOT_IMPLEMENTED                                (5019)
#define D_ERR_USR_NOT_FOUND                                  (5020)
#define D_ERR_INVALID_PAYLOAD                                (5021)
#define D_ERR_OBJ_ALREADY_EXISTS                             (5022)
#define D_ERR_INVALID_OBJ_NAME                               (5023)
#define D_ERR_OBJ_IN_USE                                     (5024)
#define D_ERR_CANNOT_WRITE_BACKUP_BLOB                       (5025)
#define D_ERR_CANNOT_OPEN_BACKUP_BLOB                        (5026)
#define D_ERR_CANNOT_RESTORE_BACKUP_BLOB                     (5027)
#define D_ERR_INVALID_BACKUP_PIN_OR_LEN                      (5028)
#define D_ERR_INVALID_XML_SIGNATURE                          (5029)
#define D_ERR_INVALID_CERTIFICATE                            (5030)
#define D_ERR_VERIFY_XML_FAILED                              (5031)
#define D_ERR_INVALID_XML                                    (5032)
#define D_ERR_SIGN_XML_FAILED                                (5033)
#define D_ERR_UPACK_VERIFY_FAILED                            (5034)
#define D_ERR_CANNOT_TRUNCATE_LOG                            (5035)
#define D_ERR_CANNOT_BACKUP_OLD_LOG                          (5036)
#define D_ERR_CERTIFICATE_EXPIRED                            (5037)
#define D_ERR_CERTIFICATE_FAILED                             (5038)
#define D_ERR_CERTIFICATE_NOT_FOUND                          (5039)
#define D_ERR_CERTIFICATE_REVOKED                            (5040)
#define D_ERR_CERTIFICATE_ISSUER_FAILED                      (5041)
#define D_ERR_CERTIFICATE_NOT_YET_VALID                      (5042)
#define D_ERR_CERT_EXPIRED_SIGN_VALID                        (5043)
#define D_ERR_CRL_EXPIRED                                    (5044)
#define D_ERR_INVALID_CRL_SIGN                               (5045)
#define D_ERR_CRL_CERT_MISMATCH                              (5046)
#define D_ERR_CERT_REVOKED                                   (D_ERR_CERTIFICATE_REVOKED)
#define D_ERR_CERT_REVOKED_LIBCLIENT_FIX1                    (5047)
#define D_ERR_ACCESS_DENIED_TOKEN_NOT_NEEDED                 (5048)
#define D_ERR_ACCESS_DENIED_TOKEN_NEEDED                     (5049)
#define D_ERR_CERT_REVOKED_CRL_VAL_UNUSED                    (5050)
#define D_ERR_CERT_VALID_CRL_VAL_UNUSED                      (5051)
#define D_ERR_CANNOT_PARSE_XML                               (5052)
#define D_ERR_CANNOT_CREATE_XML_SIG_TEMPL                    (5053)
#define D_ERR_CANNOT_ADD_XML_SIG_TEMPL_REF                   (5054)
#define D_ERR_CANNOT_ADD_XML_SIG_TEMPL_TRANS                 (5055)
#define D_ERR_CANNOT_ADD_XML_SIG_KEY_INFO                    (5056)
#define D_ERR_CANNOT_ADD_XML_SIG_KEY_CERT                    (5057)
#define D_ERR_CANNOT_ALLOC_XML_SIG_CTX                       (5058)
#define D_ERR_CANNOT_PARSE_DER_PRIV_KEY                      (5059)
#define D_ERR_XML_CANNOT_LOAD_PRIV_KEY                       (5060)
#define D_ERR_XML_CANNOT_LOAD_CERT                           (5061)
#define D_ERR_XML_CANNOT_CREATE_KEY_MNG                      (5062)
#define D_ERR_XML_CANNOT_INIT_KEY_MNG                        (5063)
#define D_ERR_XML_CANNOT_LOAD_TRUSTED_CERTS                  (5064)
#define D_ERR_XML_SIG_NODE_NOT_FOUND                         (5065)
#define D_ERR_XML_CERT_NODE_NOT_FOUND                        (5066)
#define D_ERR_XML_CANNOT_DECODE_CERT_NODE                    (5067)
#define D_ERR_CANNOT_PARSE_DER_CERT                          (5068)
#define D_ERR_CANNOT_DECODE_XML_COMPRESS                     (5069)
#define D_ERR_INVALID_CERTIFICATE_NULL_RES                   (5070)
#define D_ERR_CANNOT_RECREATE_MASTER                         (5071)
#define D_ERR_CANNOT_CREATE_USR_STORAGE1                     (5072)
#define D_ERR_CANNOT_CREATE_USR_STORAGE2                     (5073)
#define D_ERR_CANNOT_CREATE_USR_DEFAULT_ACL                  (5074)
#define D_ERR_CANNOT_ALLOC_CTX                               (5075)
#define D_ERR_CANNOT_LOAD_PRIV_KEY                           (5076)
#define D_ERR_CANNOT_DECODE_PUB_KEY                          (5077)
#define D_ERR_CANNOT_GENERATE_RND_DATA                       (5078)
#define D_ERR_CACHE_LAYER_EXHAUSTED                          (5079)
#define D_ERR_RSA_POWER_SIGN_FAILED                          (5080)
#define D_ERR_CANNOT_GET_SYS_INFO                            (5100)
#define D_ERR_CANNOT_ALLOC_UPACK_ID                          (5101)
#define D_ERR_CANNOT_ALLOC_UPACK_PATH                        (5102)
#define D_ERR_CANNOT_WRITE_UPACK_OBJ                         (5103)
#define D_ERR_INVALID_CRL                                    (5104)
#define D_ERR_OPERATION_FAILED                               (5105)
#define D_ERR_GET_USR_ACL_FAILED                             (5106)
#define D_ERR_INVALID_SIGNATURE                              (5107)
#define D_ERR_CANNOT_GENERATE_SOFT_TOKEN                     (5108)
#define D_ERR_INVALID_SECRET                                 (5109)
#define D_ERR_ACCESS_DENIED_USR_BLOCKED                      (5120)
#define D_ERR_INVALID_IMEI                                   (5121)
#define D_ERR_REPLAY_DETECTED                                (5122)
#define D_ERR_NON_APPROVED_FIPS_OPERATION                    (5123)
#define D_ERR_ACCESS_DENIED_OBJ_BLOCKED                      (5124)
#define D_ERR_FIPS_DRBG_CONTINUOUS_TEST                      (5125)
#define D_ERR_FIPS_RSA_CONTINUOUS_TEST                       (5126)
#define D_ERR_FIPS_ECC_CONTINUOUS_TEST                       (5127)
#define D_ERR_FIPS_DES_CONTINUOUS_TEST                       (5128)
#define D_ERR_FIPS_AES_CONTINUOUS_TEST                       (5129)
#define D_ERR_CANNOT_UPDATE_OBJ                              (5175)
#define D_ERR_CANNOT_GET_PWD_POLICY                          (5176)
#define D_ERR_PWD_BLOCKED_BY_POLICY                          (5177)
#define D_ERR_PWD_EXPIRED                                    (5178)
#define D_ERR_CERT_VALID_CRL_VAL_UNUSED_CRL_EXPIRED          (5179)
#define D_ERR_CERT_VALID_CRL_EXPIRED                         (5180)
#define D_ERR_INVALID_CERT_SIGN                              (5181)
#define D_ERR_CANNOT_LOAD_CORRUPTED_OBJ                      (5200)
#define D_ERR_INVALID_CERT_ISPB_MISMATCH                     (5230)
#define D_ERR_INVALID_CA                                     (5231)
#define D_ERR_DEPRECATED_FUNCTION                            (5303)
#define D_ERR_SERVER_BUSY                                    (5304)
#define D_ERR_SL_BE_BUSY                                     (5305)
#define D_ERR_SVMK_MISMATCH                                  (5306)
#define D_ERR_INVALID_CERT_SN_MISMATCH                       (5307)
#define D_ERR_CANNOT_DEC_SYM_KEY                             (5308)
#define D_ERR_CANNOT_REC_SYM_KEY                             (5309)
#define D_SUCCESS_CANNOT_OPEN_OBJ_AT_REPL                    (5401)
#define D_ERR_CANNOT_OPEN_INVALID_OBJ_AT_REPL                (5402)
#define D_ERR_CANNOT_SL_BE_CHECK_OBJ                         (5500)
#define D_ERR_CANNOT_WRITE_AUTH_INFO_OBJ                     (5501)
#define D_ERR_CANNOT_GEN_RSA_KEY                             (5502)
#define D_ERR_CANNOT_GEN_ECC_CURVE                           (5503)
#define D_ERR_CANNOT_GEN_ECC_KEY                             (5504)
#define D_ERR_CANNOT_GEN_ECC_DER                             (5505)
#define D_ERR_CANNOT_GEN_ECC_DER_KEY                         (5506)
#define D_ERR_CANNOT_CREATE_UNKNOWN_OBJ                      (5507)
#define D_ERR_CANNOT_WRITE_FIPS_MODE                         (5508)
#define D_ERR_CANNOT_WRITE_LOGIN_BLOCK_INFO                  (5509)
#define D_ERR_CANNOT_SETUP_LIVE_SYNC_OBJ                     (5510)
#define D_ERR_CANNOT_CREATE_LIVE_SYNC_OBJ                    (5511)
#define D_ERR_CANNOT_OPEN_LOG                                (5512)
#define D_ERR_COULD_NOT_OPEN_OBJ                             (5513)
#define D_ERR_CANNOT_EXPORT_RAW_OBJ                          (5514)
#define D_ERR_CANNOT_RENAME_OBJ                              (5515)
#define D_ERR_REPLICATION_CANNOT_OPEN_OBJ                    (5516)
#define D_ERR_CANNOT_SETUP_LIVE_SYNC_IMG                     (5517)
#define D_ERR_CANNOT_LOAD_LIVE_SYNC_IMG                      (5518)
#define D_ERR_CANNOT_SETUP_LIVE_SYNC_DEL_USR                 (5519)
#define D_ERR_CANNOT_DEL_LIVE_SYNC_USR                       (5520)
#define D_ERR_CANNOT_SETUP_LIVE_SYNC_DEL_CONFIG              (5521)
#define D_ERR_CANNOT_DEL_LIVE_SYNC_CONFIG                    (5522)
#define D_ERR_CANNOT_SETUP_LIVE_SYNC_CONFIG                  (5523)
#define D_ERR_CANNOT_CREATE_LIVE_SYNC_CONFIG                 (5524)
#define D_ERR_CANNOT_SETUP_LIVE_SYNC_USER                    (5525)
#define D_ERR_CANNOT_CREATE_LIVE_SYNC_USER                   (5526)
#define D_ERR_CANNOT_SETUP_LIVE_SYNC_ACL                     (5527)
#define D_ERR_CANNOT_CREATE_LIVE_SYNC_ACL                    (5528)
#define D_ERR_CANNOT_DEL_AUTH_INFO_OBJ                       (5529)
#define D_ERR_INVALID_KEY_NULL_RES                           (5530)
#define D_ERR_INVALID_MSG_NULL_RES                           (5531)
#define D_ERR_CANNOT_GEN_SYM_KEY                             (5532)
#define D_ERR_CANNOT_SETUP_USR_AUTH_INFO                     (5533)
#define D_ERR_CANNOT_BIND_USR_AUTH_INFO                      (5534)
#define D_ERR_CANNOT_GET_CERT_SN                             (5535)
#define D_ERR_CANNOT_GET_CERT_ISPB                           (5536)
#define D_ERR_INVALID_HASH                                   (5537)
#define D_ERR_INVALID_SIG_LEN                                (5538)
#define D_ERR_INVALID_PUBKEY_LEN                             (5539)
#define D_ERR_INVALID_PSKC_XML                               (5540)
#define D_ERR_CANNOT_FIND_PSKC_XML_NODE                      (5541)
#define D_ERR_CANNOT_FIND_PSKC_XML_ATTR                      (5542)
#define D_ERR_INVALID_PSKC_KEY_DERIVATION                    (5543)
#define D_ERR_INVALID_PSKC_KEY_DERIVATION_IT                 (5544)
#define D_ERR_INVALID_PSKC_KEY_DERIVATION_LEN                (5545)
#define D_ERR_INVALID_PSKC_KEY_DERIVATION_SALT_LEN           (5546)
#define D_ERR_PSKC_KEY_DERIVATION_FAILED                     (5547)
#define D_ERR_INVALID_PSKC_KEY_ALG                           (5548)
#define D_ERR_INVALID_PSKC_KEY_METHOD                        (5549)
#define D_ERR_INVALID_OATH_EPOCH                             (5550)
#define D_ERR_INVALID_OATH_TIMESTEP                          (5551)
#define D_ERR_INVALID_OATH_DRIFT                             (5552)
#define D_ERR_INVALID_PSKC_SECRET_LEN                        (5553)
#define D_ERR_UNKNOWN_PADDING_TYPE                           (5554)
#define D_ERR_DATA_TOO_LARGE_FOR_MODULUS                     (5555)
#define D_ERR_DATA_GREATER_THAN_MODULUS_LEN                  (5556)
#define D_ERR_PADDING_CHECK_FAILED                           (5557)
#define D_ERR_DATA_TOO_LARGE_FOR_KEY_SIZE                    (5558)
#define D_ERR_DATA_TOO_SMALL_FOR_KEY_SIZE                    (5559)
#define D_ERR_INVALID_TYPE1_PADDING                          (5560)
#define D_ERR_INVALID_TYPE2_PADDING                          (5561)
#define D_ERR_BAD_FIXED_HDR_PADDING                          (5562)
#define D_ERR_MISSING_NULL_PADDING                           (5563)
#define D_ERR_BAD_PAD_BYTE_COUNT                             (5564)
#define D_ERR_DATA_TOO_LARGE_FOR_PADDING                     (5565)
#define D_ERR_BN_NO_INVERSE                                  (5566)
#define D_ERR_STATIC_BN_CANNOT_EXPAND                        (5567)
#define D_ERR_BN_IS_NOT_PRIME                                (5568)
#define D_ERR_TOO_MANY_BN_ITERATIONS                         (5569)
#define D_ERR_BN_IS_NOT_A_SQUARE                             (5570)
#define D_ERR_BN_DIV_BY_ZERO                                 (5571)
#define D_ERR_BN_NOT_INITIALIZED                             (5572)
#define D_ERR_BN_INVALID_RANGE                               (5573)
#define D_ERR_BN_BAD_RECIPROCAL                              (5574)
#define D_ERR_BN_CALLED_WITH_EVEN_MODULUS                    (5575)
#define D_ERR_BN_INPUT_NOT_REDUCED                           (5576)
#define D_ERR_BN_TOO_MANY_TMP_VARIABLES                      (5577)
#define D_ERR_BN_INVALID_LEN                                 (5578)
#define D_ERR_BN_ENCODING_ERROR                              (5579)
#define D_ERR_INVALID_PUBLIC_EXP                             (5580)
#define D_ERR_INVALID_SPB_HDR_LEN                            (5581)
#define D_ERR_INVALID_SPB_HDR_VER                            (5582)
#define D_ERR_INVALID_SPB_HDR_SPECIAL_TREATMENT              (5583)
#define D_ERR_INVALID_SPB_HDR_R0                             (5584)
#define D_ERR_INVALID_SPB_HDR_DST_ASYM_ALG                   (5585)
#define D_ERR_INVALID_SPB_HDR_DST_SYM_ALG                    (5586)
#define D_ERR_INVALID_SPB_HDR_SIGN_KEY_TYPE                  (5587)
#define D_ERR_INVALID_SPB_HDR_DST_CA                         (5588)
#define D_ERR_INVALID_SPB_HDR_SIGN_CA                        (5589)
#define D_ERR_INVALID_SIGN_CERT_SN_MISMATCH                  (5590)
#define D_ERR_INVALID_DST_CERT_SN_MISMATCH                   (5591)
#define D_ERR_INVALID_SPB_MSG_LEN                            (5592)
#define D_ERR_CANNOT_PARSE_JSON                              (5593)
#define D_ERR_INVALID_SPB_CHARSET_SIG_OK                     (5594)
#define D_ERR_JSON_MORE_DATA                                 (5595)
#define D_ERR_CANNOT_VIRTUALIZE_JSON                         (5596)
#define D_ERR_CANNOT_CHANGE_OEM_JSON                         (5597)
#define D_ERR_CANNOT_MERGE_JSON                              (5598)
#define D_ERR_INVALID_SPB_CHARSET                            (5599)
#define D_ERR_CANNOT_GET_JSON                                (5600)
#define D_ERR_INVALID_SPB_CHARSET_SIG_ERR                    (5601)
#define D_ERR_SERVER_STARTED                                 (5700)
#define D_ERR_THROTTLED_VM_SIZE                              (10000)
#define D_ERR_THROTTLED_RAM                                  (10001)
#define D_ERR_CANNOT_ALLOC_SOCKET                            (11000)
#define D_ERR_CANNOT_ALLOC_MEM                               (11001)
#define D_ERR_CANNOT_ALLOC_KEY                               (11002)
#define D_ERR_CANNOT_ALLOC_SL_BE_HANDLE                      (11003)
#define D_ERR_CANNOT_ALLOC_IOM                               (11004)
#define D_ERR_CANNOT_INIT_DRBG                               (11005)
#define D_ERR_CANNOT_SEED_DRBG                               (11006)
#define D_ERR_CANNOT_USE_IOM                                 (11007)
#define D_ERR_CANNOT_ALLOC_OBJ_HANDLE                        (11008)
#define D_ERR_REPL_CANNOT_ALLOC_SL_BE_HANDLE                 (11009)
#define D_ERR_CANNOT_ALLOC_TLS_CTX                           (11010)
#define D_ERR_CANNOT_ALLOC_TLS_SOCKET                        (11011)
#define D_ERR_CANNOT_SERIALIZE_XML                           (11012)
#define D_ERR_CANNOT_ALLOC_BN                                (11013)
#define D_ERR_CANNOT_ALLOC_JSON                              (11014)
#define D_ERR_REPLICATION_BUSY                               (36000)
#define D_ERR_REPLICATION_D_BUSY                             (36001)
#define D_ERR_REPLICATION_S_BUSY                             (36002)
#define D_ERR_REPLICATION_STORAGE_LAYER_BUSY                 (36003)
#define D_ERR_REPLICATION_SEC_LAYER_BUSY                     (36004)
#define D_ERR_REPLICATION_PEER_NOT_SYNCED                    (36500)
#define D_ERR_REPLICATION_CANNOT_PREPARE_TRANS               (37001)
#define D_ERR_REPLICATION_CANNOT_P2P_HANDSHAKE               (37002)
#define D_ERR_REPLICATION_CANNOT_P2P_FIND                    (37003)
#define D_ERR_REPLICATION_CANNOT_P2P_CONNECT                 (37004)
#define D_ERR_REPLICATION_CANNOT_P2P_SEND                    (37005)
#define D_ERR_REPLICATION_CANNOT_P2P_RECV                    (37006)
#define D_ERR_REPLICATION_CANNOT_P2P_SEND_ALL                (37007)
#define D_ERR_REPLICATION_CANNOT_P2P_RECV_ALL                (37008)
#define D_ERR_REPLICATION_CANNOT_P2P_SCONNECT                (37009)
#define D_ERR_REPLICATION_CANNOT_P2P_SSEND                   (37010)
#define D_ERR_REPLICATION_CANNOT_P2P_SRECV                   (37011)
#define D_ERR_REPLICATION_CANNOT_P2P_SSEND_ALL               (37012)
#define D_ERR_REPLICATION_CANNOT_P2P_SRECV_ALL               (37013)
#define D_ERR_REPLICATION_CANNOT_P2P_WORK                    (37014)
#define D_ERR_REPLICATION_NOT_FOUND                          (37015)
#define D_ERR_REPLICATION_ACK_NOT_FOUND                      (37016)
#define D_ERR_REPLICATION_INVALID_OPERATION                  (37017)
#define D_ERR_REPLICATION_INVALID_EVENT                      (37018)
#define D_ERR_REPLICATION_OPERATION_FAILED                   (37019)
#define D_ERR_REPLICATION_COMMIT_FAILED                      (37020)
#define D_ERR_REPLICATION_ERASE_FAILED                       (37021)
#define D_ERR_REPLICATION_INQUIRE_FAILED                     (37022)
#define D_ERR_REPLICATION_UPDATE_ACK_FAILED                  (37023)
#define D_ERR_REPLICATION_DISPATCH_FAILED                    (37024)
#define D_ERR_REPLICATION_CANNOT_SL_BE_TRANSP                (37025)
#define D_ERR_REPLICATION_CANNOT_PRUNE_LOG                   (37026)
#define D_ERR_REPLICATION_CANNOT_LOAD_LOG                    (37027)
#define D_ERR_REPLICATION_CANNOT_WORK                        (37028)
#define D_ERR_REPLICATION_CANNOT_VALIDATE_EVENT              (37029)
#define D_ERR_REPLICATION_TRANS_MISMATCH                     (37030)
#define D_ERR_REPLICATION_CANNOT_SYNC_POINT                  (37031)
#define D_ERR_REPLICATION_UNDEFINED_LIVE_SYNC                (37032)
#define D_ERR_REPLICATION_CONNECTED_LIVE_SYNC                (37033)
#define D_ERR_REPLICATION_SELF_LIVE_SYNC                     (37034)
#define D_ERR_REPLICATION_OBJ_IN_USE                         (37035)
#define D_ERR_REPLICATION_CANNOT_BEGIN_TRANS                 (37036)
#define D_ERR_REPLICATION_MAX_NODE_COUNT_REACHED             (37037)
#define D_ERR_REPL_CANNOT_PREPARE_LS_TRANS                   (37038)
#define D_ERR_REPL_PART_CANNOT_ADD_LOG                       (37039)
#define D_ERR_REPL_COOR_CANNOT_ADD_LOG                       (37040)
#define D_ERR_CANNOT_LOAD_LICENSE                            (47000)
#define D_ERR_INVALID_LICENSE                                (47001)
#define D_ERR_LICENSE_EXPIRED                                (47002)
#define D_ERR_LICENSE_BLOCKED                                (47003)


/* Server error macros */

#define D_IS_REPL_BUSY_ERR(dw) ( \
                (DWORD)(dw) == (DWORD) D_ERR_REPLICATION_BUSY   ||             \
                (DWORD)(dw) == (DWORD) D_ERR_REPLICATION_D_BUSY ||             \
                (DWORD)(dw) == (DWORD) D_ERR_REPLICATION_S_BUSY ||             \
                (DWORD)(dw) == (DWORD) D_ERR_REPLICATION_STORAGE_LAYER_BUSY || \
                (DWORD)(dw) == (DWORD) D_ERR_REPLICATION_SEC_LAYER_BUSY        \
             )




#define NOT_LISTED_ERROR (-999999)

/* DOpenSession - Options/parameters */

/* dwParam */
#define SS_ANONYMOUS            (0x00000001)  /*pbData == AUTH_PWD ou AUTH_PWD_EX*/
#define SS_USER_PWD             (0x00000002)  /*pbData == AUTH_PWD*/
#define SS_CERTIFICATE          (0x00000004)  /*pbData == SS_MEDIA_FILE*/
#define SS_CLUSTER              (0x00000008)  /*pbData == NULL*/
#define SS_USR_PWD_EX           (0x00000010)  /*pbData == AUTH_PWD_EX*/
#define SS_ATOKEN               (0x00000020)  /*pbData == AUTH_ATOKEN*/

/* dwFlags */
#define ENCRYPTED_CONN      (0x00000001)  /* Encrypted communication */
#define USER_INTERACTIVE    (0x00000002)  /* User interactive. Not implemented. */
#define CLEAR_CONN          (0x00000004)  /* Not encrypted communication */
#define LB_BYPASS           (0x00000008)  /* Load balance bypass */
#define CACHE_BYPASS        (0x00000010)  /* Session Cache bypass */

/* Strong authentication */

#define SA_AUTH_NONE            (0x00000000)    /* No strong authentication */
#define SA_AUTH_OTP             (0x00000001)    /* OTP authentication */
#define SA_AUTH_CERTIFICATE     (0x00000002)    /* Certificate authentication */

/* SetSessionParam/GetSessionParam */

/* dwParam */
#define SP_SESSION_TIMEOUT  (0x00000001)  /* Time-out sessao pbData == dwTimeout (ms) */
#define SP_SEND_TIMEOUT     (0x00000002)  /* Time-out send pbData == dwTimeout (ms) */
#define SP_RECV_TIMEOUT     (0x00000004)  /* Time-out recv pbData == dwTimeout (ms) */
#define SP_ENCRYPTED        (0x00000008)  /* Read-only pbData == bSessionEncrypted (TRUE/FALSE) */
#define SP_SESSION_ID       (0x00000010)  /* Read-only pbData == dwSessionId */
#define SP_SESSION_CID      (0x00000020)  /* Read-only pbData == DWORD */
#define SP_SESSION_TYPE     (0x00000040)  /* Read-only pbData == DWORD */
#define SP_SESSION_CIPHER   (0x00000080)  /* Read-only pbData == char * */

/* SP_SESSION_TYPE */

#define SP_SESSION_TYPE_CLEAR_CONN      (1)
#define SP_SESSION_TYPE_SSL2            (2)
#define SP_SESSION_TYPE_SSL3            (3)
#define SP_SESSION_TYPE_TLS1            (4)
#define SP_SESSION_TYPE_TLS1_1          (5)
#define SP_SESSION_TYPE_TLS1_2          (6)
#define SP_SESSION_TYPE_UNKNOWN         (7)


/* CloseSession */

/* dwFlags */
#define WAIT_OPERATIONS     (0x00000004)  /* Wait the end of all operations in progress. Not implemented. */
#define CLOSE_PHYSICALLY    (0x00000008)  /* Force the end of the connection with the HSM. Session will not be cached. */


/* DBackupObject */

#define D_BACKUP_OBJ        (1)
#define D_RESTORE_OBJ       (2)

#define D_MAX_BACKUP_OBJ_LEN    (1024*4)

/* Backup */

#define MAKE_BACKUP                         (0)
#define MAKE_RESTORE                        (1)                /* Deprecated. Only defined for backward compatibility. */
#define MAKE_RESTORE_WITH_NET_CONFIG        MAKE_RESTORE
#define MAKE_RESTORE_WITHOUT_NET_CONFIG     (2)

/* GetHsmData/SetHsmData */

/* dwParam */
#define HD_AUDIT_START      (0x00000001)  /* Indicate that the connection will be used to retrieve logs. */
#define HD_AUDIT_RECV       (0x00000002)  /* Receive logs from server. */

/* dwFlags */
#define DATA_ONLY           (0x00000008)  /* Backup/Restore only data */
#define CONFIG_ONLY         (0x00000010)  /* Backup/Restore only configurations*/


/* GetHsmConfig/SetHsmConfig */

/* dwParam*/
#define HC_PASS_PORT_VALUE  (0x00000001)  /* Monitoring port. pbData == wPortNumber */
#define HC_PASS_PORT_ENABLE (0x00000002)  /* Enable/disable monitoring port. pbData == bEnable */
#define HC_MAX_CONNECT      (0x00000004)  /* Maximum connections (processing). pbData == dwMaxConnections */
#define HC_MAX_MONITORING   (0x00000008)  /* Maximum connections (monitoring). pbData == dwMaxConnections */
#define HC_PERMISSION_IP    (0x00000010)  /* Clients IP list. pbData == szIPList (xxx.xxx.xxx.xxx;xxx...) */

/* dwFlags */
#define ENABLE_VALUES       (0x00000020)  /* Enable values indicated by pbData. */
#define DISABLE_VALUES      (0x00000040)  /* Disable values indicated by pbData. */


/* DAdmOperation */

/* dwParam */
#define AO_SHUTDOWN           (0x00000001)  /* Shutdown HSM. pbData == NULL */
#define AO_RESTART            (0x00000002)  /* Restart HSM services. pbData == NULL */
#define AO_KEEPALIVE          (0x00000004)  /* Keep session alive. */
#define AO_SET_DATE_TIME      (0x00000008)  /* Set the HSM's time and date. pbData == struct tm (time.h) */
#define AO_ADD_CLUSTER_LIST   (0x00000010)  /* DEPRECATED! */
#define AO_DEL_CLUSTER_LIST   (0x00000012)  /* DEPRECATED! */
#define AO_GET_CLUSTER_LIST   (0x00000014)  /* DEPRECATED! */
#define AO_RST_CLUSTER_LIST   (0x00000018)  /* DEPRECATED! */
#define AO_SET_PWD_SEC_POLICY (0x00000019)  /* Define password security policies. */
#define AO_GET_PWD_SEC_POLICY (0x00000020)  /* Recover password security policies. */
#define AO_REPL_UPDATE        (0x00000021)  /* Process an update replication command. pbData == NULL */
#define AO_REPL_NODE_MESSAGE  (0x00000022)  /* Send comands to the HSM's replication subsystem. pbData == *REPL_NODE_MSG */
#define AO_LOG_CACHE_STATE    (0x00000023)  /* Get cache log state. pbData == *DWORD */
#define AO_LOG_CACHE_ENABLE   (0x00000024)  /* Enable log cache. pbData == NULL */
#define AO_LOG_CACHE_DISABLE  (0x00000025)  /* Disable log cache. pbData == NULL */
#define AO_SET_TLS_BUNDLE     (0x00000026)  /* Set TLS bundle. pbData == TLS_BUNDLE_INFO */

#define AO_KEEPALIVE_FLAG_NOISELESS ((DWORD) -2371)

#define AO_LOG_CACHE_STATE_ENABLED   (11)
#define AO_LOG_CACHE_STATE_DISABLED  (22)

//
// Replication operation messages
// to be used with AO_REPL_NODE_MESSAGE.
//
#define RNM_PROBE           (1)
#define RNM_DOWN            (2)
#define RNM_SLP_BYPASS_ADD  (3)
#define RNM_SLP_BYPASS_DEL  (4)

/* SetUserParam/GetUserParam */

/* dwParam */
#define UP_USER_NAME                (0x00000001)  /* User name. pbData == szUserName */
#define UP_AUTH_MASK                (0x00000002)  /* Authorization mask. pdData == dwAuthMask */
#define UP_ACCESS_TYPE              (0x00000004)  /* Access type mask. pbData == dwAccessType */
#define UP_CERTIFICATE              (0x00000008)  /* User certificate. pbData == pbCertificate */
#define UP_PASSWORD                 (0x00000010)  /* User password. pbData == pwd */
#define UP_INVALID_LOGIN_ATTEMPTS   (0x00000020)  /* Amount of invalid login attempts. pbData == DWORD */
#define UP_BLOCK_USR                (0x00000040)  /* Block user. == szUserName */
#define UP_UNBLOCK_USR              (0x00000080)  /* Unblock user. == szUserName */
#define UP_USR_PASSWORD             (0x00000100)  /* Re-define user password. == USER_INFO */
#define UP_USR_PA_STATE             (0x00000200)  /* Partition autorization state. == USER_PA_INFO */

/* FindUser */

/* dwFindType */
#define FU_USER_ID          (0x00000001)  /* User ID pvFindParam == szUserId */
#define FU_USER_NAME        (0x00000002)  /* User ID pvFindParam == szUserName */
#define FU_AUTH_MASK        (0x00000004)  /* Authorization mask. pvFindParam == dwAuthMask */
#define FU_ACCESS_TYPE      (0x00000008)  /* Access type. pvFindParam == dwAccessType */
#define FU_ROOT_ID          (0x00000010)  /* Root certificate issuer. pvFindParam == szRootCN */

/* dwFlags */
#define PARTIAL_VALUE       (0x00000080)  /* pvFindParam contains part of the search value. */

/* DGetHsmInfo */

#define HI_BATTERY_LIFE     (0x00000001)  /* Battery remaining life time. pbData == tLife (time_t) */
#define HI_PERFOMANCE_COUNT (0x00000002)  /* Use percentage: CPU, Memory e disk. pbData == * PERFOMANCE_COUNT */
#define HI_MODULE_INFO      (0x00000004)  /* Existing modules. pbData == * MODULE_INFO */
#define HI_HSM_INFO         (0x00000008)  /* HSM's model and version. pbData == szHsmInfo */
#define HI_OPERATIONS_COUNT (0x00000010)  /* Operation counter. pbData == * OPERATIONS_INFO */
#define HI_SYS_HEALTH       (0x00000020)  /* Elapsed time since last update and battery check. pbData == * SYS_HEALTH */
#define HI_FIPS_MODE        (0x00000040)  /* Recover HSM's operation mode. pbData == *DWORD */
#define HI_DISK_INFO        (0x00000080)  /* Recover HSM's disk usage information. pbData == *SYS_DISK_INFO */
#define HI_REPL_INFO        (0x00000100)  /* Recover HSM's replication information. pbData == *SYS_REPL_INFO */
#define HI_CURRENT_DATE     (0x00000200)  /* Recover HSM's date and time. pbData == *QWORD */
#define HI_HW_STR           (0x00000400)  /* Recover HSM's date and time. pbData == *SYS_HW_STR_INFO */
#define HI_NTP_INFO         (0x00000800)  /* Recover HSM's date and time. pbData == *SYS_NTP_INFO */
#define HI_STATS_INFO       (0x00001000)  /* Recover HSM's statistics info. pbData == *SYS_STATUS_INFO */
#define HI_COUNTER_INFO     (0x00002000)  /* Recover HSM's counter info. pbData == *SYS_COUNTER_INFO */
#define HI_FIPS_RCODE_INFO  (0x00004000)  /* Recover HSM's FIPS auto-test return code. pbData == *DWORD */
#define HI_PENDING_INFO     (0x00008000)  /* Recover HSM's pending info. pbData == *SYS_PENDING_INFO */
#define HI_ALL_INFO         (0x00010000)  /* Recover HSM's ALL info. pbData == *SYS_ALL_INFO */


#define INVALID_OBJ_TYPE    (0)

#define MSGSH_NO_INFO  (0xFFFFFFFF)


#define GET_INFO_MAX_REPL_DOMAIN_NAME        (1024)
#define GET_INFO_MAX_REPL_NODES               (255)
#define GET_INFO_MAX_SN_LEN                   (255)
#define GET_INFO_MAX_HW_STR_LEN               (255)
#define GET_INFO_MAX_TPKEY_LEN                 (16)
#define GET_INFO_MAX_NTP_SVRS                  (16)
#define GET_INFO_MAX_NTPQ_LEN                 (256)
#define GET_INFO_MAX_NTP_KT_LEN                (16)
#define GET_INFO_MAX_NTP_KM_LEN                (64)


//Replication states returned by SYS_REPL_INFO structure.
#define REPL_STATE_TWOPC_VIRTUAL       (1)
#define REPL_STATE_TWOPC_PREPARED      (2)
#define REPL_STATE_TWOPC_COMMITTED     (3)
#define REPL_STATE_TWOPC_COMMITTED_TM  (4)

//Replication events returned by SYS_REPL_INFO structure.
#define REPL_EVENT_ET_NULL                       (1)
#define REPL_EVENT_ET_CREATE_USR                 (2)
#define REPL_EVENT_ET_DELETE_USR                 (3)
#define REPL_EVENT_ET_CREATE_OBJ                 (4)
#define REPL_EVENT_ET_DELETE_OBJ                 (5)
#define REPL_EVENT_ET_DELETE_USR_OTP_AUTH_INFO   (6)
#define REPL_EVENT_ET_WRITE_USR_OTP_AUTH_INFO    (7)
#define REPL_EVENT_ET_UPDATE_USR_OTP_AUTH_INFO   (8)
#define REPL_EVENT_ET_CHANGE_USR_PWD             (9)
#define REPL_EVENT_ET_SET_USR_LOCK_COUNT        (10)
#define REPL_EVENT_ET_SET_GLOBAL_SEC_POLICY     (11)
#define REPL_EVENT_ET_SET_SYS_DATE_TIME         (12)
#define REPL_EVENT_ET_UPDATE_ACL                (13)
#define REPL_EVENT_ET_BLOCK_OBJ                 (14)
#define REPL_EVENT_ET_UPDATE_OBJ                (15)
#define REPL_EVENT_ET_SET_USR_NS_AUTH_COOKIE    (16)
#define REPL_EVENT_ET_SET_USR_OTP_MOV_FACTOR    (17)

/* DListUserTrusts */

#define OP_LST_USR_TRUSTERS  (0x01) /* List users that permits the current logged user to access it's partition. */
#define OP_LST_USR_TRUSTEES  (0x02) /* List users that have permission to access the current logged user's partition. */


/* DAssignToken/DUnassignToken */

#define AT_GO3_TOKEN            (1) /* DEPRECATED! */
#define AT_OATH_TOKEN           (2) /* Assign a OATH EVENT OTP token */
#define AT_OATH_TOKEN_TOTP      (3) /* Assign a OATH TIME OTP token */

//
// mod_OATH's NEW_SA; use with structure OATH_SA_v1.
//
#define MAX_OATH_HMAC_LEN         (128)   // up to hmac-sha512, in bytes

#define OATH_SA_v1_type_SHA1            (0x01)
#define OATH_SA_v1_HOTP_DYN_TRUNC_OFF     (16)
#define OATH_SA_v2_default_TIME_STEP      (30)
#define OATH_SA_v2_default_T0_Epoch        (0)


/* DOATHResync */

#define OATH_MIN_HOTP_LEN    (6 + 1) //plus 1 for the null terminator
#define OATH_MAX_HOTP_LEN    (16 + 1) //plus 1 for the null terminator

/* DOATHGetBlobInfo */

#define OATH_ISSUE_OATH_BLOB_t        (1)

/* DEncrypt/DDecrypt */

#define D_NO_RSA_PADDING            (3)
#define D_FORCE_ACTUAL_RSA            (4)


/* DPKCS7Sign - Sign using PKCS#7 */

#define TAC_MOD_CORE_P7_TEXT           0x0001
#define TAC_MOD_CORE_P7_NOCERTS        0x0002
#define TAC_MOD_CORE_P7_NOSIGS         0x0004
#define TAC_MOD_CORE_P7_NOCHAIN        0x0008
#define TAC_MOD_CORE_P7_NOINTERN       0x0010
#define TAC_MOD_CORE_P7_NOVERIFY       0x0020
#define TAC_MOD_CORE_P7_DETACHED       0x0040
#define TAC_MOD_CORE_P7_BINARY         0x0080
#define TAC_MOD_CORE_P7_NOATTR         0x0100
#define TAC_MOD_CORE_P7_NOSMIMECAP     0x0200
#define TAC_MOD_CORE_P7_NOOLDMIMETYPE  0x0400
#define TAC_MOD_CORE_P7_CRLFEOL        0x0800
#define TAC_MOD_CORE_P7_NOCRL          0x2000

#define TAC_MOD_CORE_P7_COSIGN         0x80000000



/* HASH algorithms */

#define ALG_MD5             (1)
#define ALG_SHA1            (2)
#define ALG_SSL_SHA1_MD5    (3)
#define ALG_SHA2_256        (4)
#define ALG_SHA2_384        (5)
#define ALG_SHA2_512        (6)
#define ALG_SHA2_224        (7) //Currently only available for offline use


#define ALG_MD5_InclC14N    (1)
#define ALG_SHA1_InclC14N   (2)
#define ALG_MD5_ExclC14N    (31)
#define ALG_SHA1_ExclC14N   (32)

#define MD5_LEN             (16)
#define SHA1_LEN            (20)
#define SSL_SHA1_MD5_LEN    (36)
#define SHA2_224_LEN        (28)
#define SHA2_256_LEN        (32)
#define SHA2_384_LEN        (48)
#define SHA2_512_LEN        (64)
#define CMAC_3DES_LEN       (8)
#define CMAC_AES_LEN        (16)

#define MAX_HASH_LEN        SHA2_512_LEN

/* Digital signature */

#define NO_HASH_OID         (1)
#define MD5_HASH_OID        (2)
#define SHA_HASH_OID        (3)
#define SHA256_HASH_OID     (4)
#define SHA384_HASH_OID     (5)
#define SHA512_HASH_OID     (6)
#define SHA224_HASH_OID     (7)

#define MD5_HASH_OID_LEN    (18)
#define SHA_HASH_OID_LEN    (15)
#define SHA224_HASH_OID_LEN (19)
#define SHA256_HASH_OID_LEN (19)
#define SHA384_HASH_OID_LEN (19)
#define SHA512_HASH_OID_LEN (19)

/* Symmetric cryptography algorithms */

#define ALG_DES             (1)
#define ALG_3DES_112        (2)  /* EDE */
#define ALG_3DES_168        (3)  /* EDE */
#define ALG_DESX            (91)

#define ALG_AES_128         (7)
#define ALG_AES_192         (8)
#define ALG_AES_256         (9)

#define ALG_ARC4             (10)

/* Symmetric key sizes (bytes) */

#define ALG_DES_LEN             (8)
#define ALG_DES3_112_LEN        (16)
#define ALG_DES3_168_LEN        (24)

//Deprecated
#define DES_LEN             (ALG_DES_LEN)
#define DES3_112_LEN        (ALG_DES3_112_LEN)
#define DES3_168_LEN        (ALG_DES3_168_LEN)

#define ALG_DESX_LEN        (24)

#define ALG_AES_128_LEN     (16)
#define ALG_AES_192_LEN     (24)
#define ALG_AES_256_LEN     (32)

#define ALG_ARC4_LEN         (16)

/* Block sizes */

#define DES_BLOCK            (8)
#define DES3_BLOCK           (8)
#define DESX_BLOCK           (8)
#define AES_BLOCK           (16)
#define AES_128_BLOCK       (16)
#define AES_192_BLOCK       (16)
#define AES_256_BLOCK       (16)

/* Operation modes */

#define MODE_NONE           (0)
#define MODE_ECB            (1 << 0)
#define MODE_CBC            (1 << 1)
#define MODE_CFB            (1 << 2)
#define MODE_OFB            (1 << 3)

/* Operation directions */

#define D_ENCRYPT          (0 << 7)
#define D_DECRYPT          (1 << 7)

/* Asymmetric algorithms */

#define ALG_RSA_512         (4)
#define ALG_RSA_1024        (5)
#define ALG_RSA_2048        (6)
#define ALG_RSA_4096        (11)
#define ALG_RSA_1152        (121)
#define ALG_RSA_1408        (122)
#define ALG_RSA_1984        (123)
#define ALG_RSA_8192        (124)
#define ALG_RSA_2304        (126)
#define ALG_RSA_2560        (127)
#define ALG_RSA_2816        (128)
#define ALG_RSA_3072        (129)

#define ALG_ECC_SECP112R1          (18) // SECG/WTLS curve over a 112 bit prime field
#define ALG_ECC_SECP112R2          (19) // SECG curve over a 112 bit prime field
#define ALG_ECC_SECP128R1          (20) // SECG curve over a 128 bit prime field
#define ALG_ECC_SECP128R2          (21) // SECG curve over a 128 bit prime field
#define ALG_ECC_SECP160K1          (22) // SECG curve over a 160 bit prime field
#define ALG_ECC_SECP160R1          (23) // SECG curve over a 160 bit prime field
#define ALG_ECC_SECP160R2          (24) // SECG/WTLS curve over a 160 bit prime field
#define ALG_ECC_SECP192K1          (25) // SECG curve over a 192 bit prime field
#define ALG_ECC_SECP192R1          (26) // NIST/X9.62/SECG curve over a 192 bit prime field
#define ALG_ECC_SECP224K1          (27) // SECG curve over a 224 bit prime field
#define ALG_ECC_SECP224R1          (28) // NIST/SECG curve over a 224 bit prime field
#define ALG_ECC_SECP256K1          (29) // SECG curve over a 256 bit prime field
#define ALG_ECC_SECP256R1          (30) // X9.62/SECG curve over a 256 bit prime field
#define ALG_ECC_SECP384R1          (31) // NIST/SECG curve over a 384 bit prime field
#define ALG_ECC_SECP521R1          (32) // NIST/SECG curve over a 521 bit prime field
#define ALG_ECC_X9_62_PRIME192V1   (ALG_ECC_SECP192R1)
#define ALG_ECC_X9_62_PRIME192V2   (33) // X9.62 curve over a 192 bit prime field
#define ALG_ECC_X9_62_PRIME192V3   (34) // X9.62 curve over a 192 bit prime field
#define ALG_ECC_X9_62_PRIME239V1   (35) // X9.62 curve over a 239 bit prime field
#define ALG_ECC_X9_62_PRIME239V2   (36) // X9.62 curve over a 239 bit prime field
#define ALG_ECC_X9_62_PRIME239V3   (37) // X9.62 curve over a 239 bit prime field
#define ALG_ECC_X9_62_PRIME256V1   (ALG_ECC_SECP256R1)

#define ALG_ECC_BRAINPOOL_P160R1   (38) // RFC 5639 standard curves
#define ALG_ECC_BRAINPOOL_P160T1   (39)
#define ALG_ECC_BRAINPOOL_P192R1   (40)
#define ALG_ECC_BRAINPOOL_P192T1   (41)
#define ALG_ECC_BRAINPOOL_P224R1   (42)
#define ALG_ECC_BRAINPOOL_P224T1   (43)
#define ALG_ECC_BRAINPOOL_P256R1   (44)
#define ALG_ECC_BRAINPOOL_P256T1   (45)
#define ALG_ECC_BRAINPOOL_P320R1   (46)
#define ALG_ECC_BRAINPOOL_P320T1   (47)
#define ALG_ECC_BRAINPOOL_P384R1   (48)
#define ALG_ECC_BRAINPOOL_P384T1   (49)
#define ALG_ECC_BRAINPOOL_P512R1   (50)
#define ALG_ECC_BRAINPOOL_P512T1   (51)


/* blobs */
#define BLOB_TYPE                  (12)
#define ALG_OBJ_BLOB               (12)
#define ALG_OBJ_BLOB_X509          (13)
#define ALG_OBJ_BLOB_PKCS7         (14)
#define ALG_OBJ_BLOB_CRL           (15)
#define ALG_OBJ_BLOB_HOTP          (16)
#define ALG_OBJ_BLOB_DPGO3         (17) /* TAC-PASS (Vasco Digipass GO3 Compatible) */
#define ALG_OBJ_MAP                (90)
#define ALG_OBJ_EXT_MAP_2_OBJ     (125)


/* Public key objects */

#define ALG_OBJ_PUBKEY_BLOB           (350)
#define ALG_OBJ_PUBKEY_RSA_BLOB       (351) // pkcs1/oem
#define ALG_OBJ_PUBKEY_ECC_BLOB       (352) // SubjectPublicKeyInfo
#define ALG_OBJ_PUBKEY_SPKI_RSA_BLOB  (353) // SubjectPublicKeyInfo

/* HMAC objects */

#define ALG_HMAC_MD5               (92)
#define ALG_HMAC_SHA1              (93)
#define ALG_HMAC_SHA2_256          (94)
#define ALG_HMAC_SHA2_384          (95)
#define ALG_HMAC_SHA2_512          (96)

/* CMAC algorithms - DCreateHash Only */

#define ALG_CMAC_AES              (250)
#define ALG_CMAC_DES              (251)

/* PKCS11 objects */

#define ALG_PKCS11_MAP             (120) // pkcs11 shell obj



#define MAX_ALG_ID            (ALG_OBJ_PUBKEY_SPKI_RSA_BLOB)


/* Public keys -> most significant bit of the DWORD must be set. */

#define ALG_RSA_512_PUB     (ALG_RSA_512 | 1 << 31)
#define ALG_RSA_1024_PUB    (ALG_RSA_1024 | 1 << 31)
#define ALG_RSA_2048_PUB    (ALG_RSA_2048 | 1 << 31)
#define ALG_RSA_4096_PUB    (ALG_RSA_4096 | 1 << 31)
#define ALG_RSA_1152_PUB    (ALG_RSA_1152 | 1 << 31)
#define ALG_RSA_1408_PUB    (ALG_RSA_1408 | 1 << 31)
#define ALG_RSA_1984_PUB    (ALG_RSA_1984 | 1 << 31)
#define ALG_RSA_8192_PUB    (ALG_RSA_8192 | 1 << 31)
#define ALG_RSA_2304_PUB    (ALG_RSA_2304 | 1 << 31)
#define ALG_RSA_2560_PUB    (ALG_RSA_2560 | 1 << 31)
#define ALG_RSA_2816_PUB    (ALG_RSA_2816 | 1 << 31)
#define ALG_RSA_3072_PUB    (ALG_RSA_3072 | 1 << 31)


#define ALG_ECC_SECP112R1_PUB          (ALG_ECC_SECP112R1 | (1 << 31))
#define ALG_ECC_SECP112R2_PUB          (ALG_ECC_SECP112R2 | (1 << 31))
#define ALG_ECC_SECP128R1_PUB          (ALG_ECC_SECP128R1 | (1 << 31))
#define ALG_ECC_SECP128R2_PUB          (ALG_ECC_SECP128R2 | (1 << 31))
#define ALG_ECC_SECP160K1_PUB          (ALG_ECC_SECP160K1 | (1 << 31))
#define ALG_ECC_SECP160R1_PUB          (ALG_ECC_SECP160R1 | (1 << 31))
#define ALG_ECC_SECP160R2_PUB          (ALG_ECC_SECP160R2 | (1 << 31))
#define ALG_ECC_SECP192K1_PUB          (ALG_ECC_SECP192K1 | (1 << 31))
#define ALG_ECC_SECP192R1_PUB          (ALG_ECC_SECP192R1 | (1 << 31))
#define ALG_ECC_SECP224K1_PUB          (ALG_ECC_SECP224K1 | (1 << 31))
#define ALG_ECC_SECP224R1_PUB          (ALG_ECC_SECP224R1 | (1 << 31))
#define ALG_ECC_SECP256K1_PUB          (ALG_ECC_SECP256K1 | (1 << 31))
#define ALG_ECC_SECP256R1_PUB          (ALG_ECC_SECP256R1 | (1 << 31))
#define ALG_ECC_SECP384R1_PUB          (ALG_ECC_SECP384R1 | (1 << 31))
#define ALG_ECC_SECP521R1_PUB          (ALG_ECC_SECP521R1 | (1 << 31))
#define ALG_ECC_X9_62_PRIME192V1_PUB   (ALG_ECC_SECP192R1_PUB)
#define ALG_ECC_X9_62_PRIME192V2_PUB   (ALG_ECC_X9_62_PRIME192V2 | (1 << 31))
#define ALG_ECC_X9_62_PRIME192V3_PUB   (ALG_ECC_X9_62_PRIME192V3 | (1 << 31))
#define ALG_ECC_X9_62_PRIME239V1_PUB   (ALG_ECC_X9_62_PRIME239V1 | (1 << 31))
#define ALG_ECC_X9_62_PRIME239V2_PUB   (ALG_ECC_X9_62_PRIME239V2 | (1 << 31))
#define ALG_ECC_X9_62_PRIME239V3_PUB   (ALG_ECC_X9_62_PRIME239V3 | (1 << 31))
#define ALG_ECC_X9_62_PRIME256V1_PUB   (ALG_ECC_SECP256R1_PUB)

#define ALG_ECC_BRAINPOOL_P160R1_PUB   (ALG_ECC_BRAINPOOL_P160R1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P160T1_PUB   (ALG_ECC_BRAINPOOL_P160T1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P192R1_PUB   (ALG_ECC_BRAINPOOL_P192R1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P192T1_PUB   (ALG_ECC_BRAINPOOL_P192T1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P224R1_PUB   (ALG_ECC_BRAINPOOL_P224R1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P224T1_PUB   (ALG_ECC_BRAINPOOL_P224T1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P256R1_PUB   (ALG_ECC_BRAINPOOL_P256R1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P256T1_PUB   (ALG_ECC_BRAINPOOL_P256T1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P320R1_PUB   (ALG_ECC_BRAINPOOL_P320R1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P320T1_PUB   (ALG_ECC_BRAINPOOL_P320T1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P384R1_PUB   (ALG_ECC_BRAINPOOL_P384R1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P384T1_PUB   (ALG_ECC_BRAINPOOL_P384T1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P512R1_PUB   (ALG_ECC_BRAINPOOL_P512R1 | (1 << 31))
#define ALG_ECC_BRAINPOOL_P512T1_PUB   (ALG_ECC_BRAINPOOL_P512T1 | (1 << 31))

/* Binary objects */

#define ALG_OBJ_INVALID_TYPE    (0)
#define ALG_OBJ_NULL            (ALG_OBJ_INVALID_TYPE)
#define ALG_OBJ                 (12)
#define OBJ_BLOCK               (1)


/* RSA module sizes */
#define RSA_512_LEN             (64)
#define RSA_1024_LEN            (128)
#define RSA_2048_LEN            (256)
#define RSA_4096_LEN            (512)
#define RSA_1152_LEN            (144)
#define RSA_1408_LEN            (176)
#define RSA_1984_LEN            (248)
#define RSA_8192_LEN            (1024)
#define RSA_2304_LEN            (288)
#define RSA_2560_LEN            (320)
#define RSA_2816_LEN            (352)
#define RSA_3072_LEN            (384)


#define RSA_512_PUB_LEN         (RSA_512_LEN  * 2)
#define RSA_1024_PUB_LEN        (RSA_1024_LEN * 2)
#define RSA_2048_PUB_LEN        (RSA_2048_LEN * 2)
#define RSA_4096_PUB_LEN        (RSA_4096_LEN * 2)
#define RSA_1152_PUB_LEN        (RSA_1152_LEN * 2)
#define RSA_1408_PUB_LEN        (RSA_1408_LEN * 2)
#define RSA_1984_PUB_LEN        (RSA_1984_LEN * 2)
#define RSA_8192_PUB_LEN        (RSA_8192_LEN * 2)
#define RSA_2304_PUB_LEN        (RSA_2304_LEN * 2)
#define RSA_2560_PUB_LEN        (RSA_2560_LEN * 2)
#define RSA_2816_PUB_LEN        (RSA_2816_LEN * 2)
#define RSA_3072_PUB_LEN        (RSA_3072_LEN * 2)

#define MAX_RSA_PUB_LEN         RSA_8192_PUB_LEN
#define MAX_RSA_LEN             RSA_8192_LEN


/* ECC key sizes (bits) */
#define ECC_SECP112R1_LEN          (112)
#define ECC_SECP112R2_LEN          (112)
#define ECC_SECP128R1_LEN          (128)
#define ECC_SECP128R2_LEN          (128)
#define ECC_SECP160K1_LEN          (160)
#define ECC_SECP160R1_LEN          (160)
#define ECC_SECP160R2_LEN          (160)
#define ECC_SECP192K1_LEN          (192)
#define ECC_SECP192R1_LEN          (192)
#define ECC_SECP224K1_LEN          (224)
#define ECC_SECP224R1_LEN          (224)
#define ECC_SECP256K1_LEN          (256)
#define ECC_SECP256R1_LEN          (256)
#define ECC_SECP384R1_LEN          (384)
#define ECC_SECP521R1_LEN          (521)
#define ECC_X9_62_PRIME192V1_LEN   (ECC_SECP192R1_LEN)
#define ECC_X9_62_PRIME192V2_LEN   (192)
#define ECC_X9_62_PRIME192V3_LEN   (192)
#define ECC_X9_62_PRIME239V1_LEN   (239)
#define ECC_X9_62_PRIME239V2_LEN   (239)
#define ECC_X9_62_PRIME239V3_LEN   (239)
#define ECC_X9_62_PRIME256V1_LEN   (ECC_SECP256R1_LEN)

#define ECC_BRAINPOOL_P160R1_LEN   (160) // RFC 5639 standard curves
#define ECC_BRAINPOOL_P160T1_LEN   (160)
#define ECC_BRAINPOOL_P192R1_LEN   (192)
#define ECC_BRAINPOOL_P192T1_LEN   (192)
#define ECC_BRAINPOOL_P224R1_LEN   (224)
#define ECC_BRAINPOOL_P224T1_LEN   (224)
#define ECC_BRAINPOOL_P256R1_LEN   (256)
#define ECC_BRAINPOOL_P256T1_LEN   (256)
#define ECC_BRAINPOOL_P320R1_LEN   (320)
#define ECC_BRAINPOOL_P320T1_LEN   (320)
#define ECC_BRAINPOOL_P384R1_LEN   (384)
#define ECC_BRAINPOOL_P384T1_LEN   (384)
#define ECC_BRAINPOOL_P512R1_LEN   (512)
#define ECC_BRAINPOOL_P512T1_LEN   (512)

/* Initialization vector sizes */

#define DES_IV_LEN            (8)
#define AES_IV_LEN            (16)

/* Padding */

#define D_NO_PADDING          (0)
#define D_PKCS5_PADDING       (1)
#define D_ZERO_PADDING        (2)
#define D_OAEP_PADDING        (3)
#define D_PKCS1_PADDING       (4)

/* Key Blobs */

#define PRIVATEKEY_BLOB             (1)
#define PUBLICKEY_BLOB              (2)
#define SIMPLE_BLOB                 (3)
#define PLAINTEXTKEY_BLOB           (4)
#define RAW_BLOB                    (5) //Deprecated
#define HOTP_BLOB                   (6)
#define SIMPLE_BLOB_OAEP            (7)
#define SIMPLE_BLOB_PKCS1           (SIMPLE_BLOB)
#define PUBLICKEY_BLOB_X509         (8)
#define SYM_WRAPPED_KEY_BLOB        (9)
#define OPAQUE_BLOB                 (10)
#define PUBLICKEY_BLOB_HSM          (11)
#define PUBLICKEY_RSA_PARTS_HSM     (12)
#define PRIVATEKEY_BLOB_P8          (13)
#define PRIVATEKEY_BLOB_STRICT      (14)
#define SYM_WRAPPED_KEY_BLOB_P11    (15)//Importkey only



/* Pkcs11 Blobs */
#define P11_BLOB            (1)

/* Pkcs11 Update Flags */

#define UPDATE_P11_target               ( 1 << 0  )
#define UPDATE_P11_associate            ( 1 << 1  )
#define UPDATE_P11_Class                ( 1 << 2  )
#define UPDATE_P11_App                  ( 1 << 3  )
#define UPDATE_P11_Id                   ( 1 << 4  )
#define UPDATE_P11_Label                ( 1 << 5  )
#define UPDATE_P11_Trusted              ( 1 << 6  )
#define UPDATE_P11_WrapWithTrusted      ( 1 << 7  )
#define UPDATE_P11_Local                ( 1 << 8  )
#define UPDATE_P11_CertificateCategory  ( 1 << 9  )
#define UPDATE_P11_JavaMidpSecDomain    ( 1 << 10 )
#define UPDATE_P11_KeyGenMechanism      ( 1 << 11 )

/* Key types */

/* Flags */

#define EXPORTABLE_KEY      (0x00000001)  /* Mark the key as exportable. */
#define NO_CRYPTO           (0x00000002)  /* The key will not be encrypted inside the HSM. Deprecated in newer versions. */
#define TEMPORARY_KEY       (0x00000004)  /* Mark key as temporary. Key will exist while the session exists. (default in ImportKey). */
#define PERMANENT_KEY       (0x00000008)  /* The key will be persistent in the HSM. (default in GenerateKey and ImportKeyPart). */
#define DESTROY_KEY         (0x00000010)  /* Destroy key handle after function use. */
#define REMOVE_FROM_HSM     (0x00000020)  /* Erase a key from the HSM and destroys it's handle. */
#define REMOVE_FROM_HCM     (REMOVE_FROM_HSM)  /* DEPRECATED. use REMOVE_FROM_HSM */
#define REMOVE_ATTRIBUTE    (0x00000040)
#define RSA_PUB_EXP3        (0x00000800)  /* Use exponent 0x03 when generating a RSA key pair */
#define MOD_SPB_RELATED     (0x00001000)  /* Mark as mod_SPB related object */

/* SetKeyParam/GetKeyParam */

#define DKP_ALGID            (1)  /* Key algorithm ID. pbData == nAlgId */
#define DKP_IV               (2)  /* Initialization Vector. pbData == pbIV */
#define DKP_PADDING          (3)  /* Padding format. pbData == dwPadding */
#define DKP_MODE             (4)  /* Operation mode. pbData == dwOpMode */
#define DKP_OWNER            (5)  /* Key owner. pbData == szUserId (separated by ";" ) */
#define DKP_USER             (6)  /* Key user. pbData == szUserId (separated by ";" )*/
#define DKP_READ_LOCK        (7)  /* Key read lock status. pbData == NULL */
#define DKP_ENCRYPTED        (8)  /* Encrypted object. */
#define DKP_KEYLEN           (9)  /* Key size (bytes). */
#define DKP_TEMPORARY_KEY    (10) /* Temporary key. pbData == dwTempKey */
#define DKP_MAP_VALUE        (11) /* Values of a MAP object.pbData == MAP_2_OBJ_INFO*/
#define DKP_BLOCKED          (12) /* Block object. pbData == nBlocked (TRUE|FALSE)*/
#define DKP_CERT_X509_INFO   (13) /* Returns information of a x.509 certificate. pbData == CERT_X509_INFO */
#define DKP_SESSION          (14) /* Session associated to the key handle. pbData == HSESSIONCTX */
#define DKP_KEY_ID           (15) /* Key name associated to the key handle. pbData == szKeyId */
#define DKP_PUB_KEY_EXP      (16) /* Public exponent for the key. pbData == DBLOB */
#define DKP_SP80057_INFO     (17) /* Object's SP80057 info. pbData == OBJ_SP80057_INFO */
#define DKP_KEY_INFO         (18) /* Key info. pbData == GET_USR_KEY_OFFLINE */


/* SetHashParam/GetHashParam */

#define DHP_ALGID            (1)  /* Hash algorithm. */
#define DHP_HASH_VALUE       (2)  /* Hash value. */
#define DHP_HASH_SIZE        (4)  /* Hash size (bytes). */

/* HashSessionKey */

#define DHS_LITTLE_ENDIAN    (1)

/* DSetObjParam */
#define OP_OBJ_BLOCKED              (1)  /* User blocked */
#define OP_OBJ_UNBLOCKED            (2)  /* Used unblocked */

/* LogParam */

#define LP_LOG_PATH            (0x00000001)  /* Log file full path. */
#define LP_LOG_LEVEL           (0x00000002) /* Log level. */

#define LOG_ERROR_LEVEL       (0)
#define LOG_DEBUG_LEVEL       (3)

#define LOG_DISABLED_LEVEL    (1000)

/*  
    DGetHSMLogInit 
    Remote log start and offset options 
*/

#define GET_LOG_START_FULL  (0x00000000) //Deprecated - Use RLOG_GET_LOG_START_FULL instead.
#define GET_LOG_END_FULL    (0x00000000) //Deprecated - Use RLOG_GET_LOG_END_FULL instead.

#define RLOG_GET_LOG_START_FULL (0x00000000)
#define RLOG_GET_LOG_END_FULL   (0x00000000)

#define  RLOG_GET_ZLOG_START_FULL (RLOG_GET_LOG_START_FULL)
#define  RLOG_GET_ZLOG_END_FULL   (0xFFFFFFFF)

// Set both to get full compressed OEM log (pkzip format).
#define  RLOG_GET_OEM_ZLOG_START_FULL (RLOG_GET_LOG_START_FULL)
#define  RLOG_GET_OEM_ZLOG_END_FULL   (RLOG_GET_ZLOG_END_FULL -1)




/* Permissions */

#define ACL_NOP                 (0x00000000)       // "may the Force be with ya'!"
#define ACL_OBJ_DEL             (ACL_NOP + 1)      // delete objects
#define ACL_OBJ_READ            (ACL_OBJ_DEL << 1) // read obj content
#define ACL_OBJ_LIST            (ACL_OBJ_READ)     // list usr objs
#define ACL_OBJ_CREATE          (ACL_OBJ_DEL << 2) // create obj
#define ACL_OBJ_UPDATE          (ACL_OBJ_DEL << 3) // update obj (hdr and alike)
#define ACL_OBJ_WRITE           (ACL_OBJ_UPDATE)   // update obj
#define ACL_USR_CREATE          (ACL_OBJ_DEL << 4) // create usr
#define ACL_USR_DELETE          (ACL_USR_CREATE)   // makes no sense only to create
#define ACL_USR_REMOTE_LOG      (ACL_OBJ_DEL << 5) // can usr use remote log/info?
#define ACL_USR_LIST            (ACL_OBJ_DEL << 6) // can usr get user-list?
#define ACL_SYS_OPERATOR        (ACL_OBJ_DEL << 7) // operate as master (adm mode)
#define ACL_SYS_BACKUP          (ACL_OBJ_DEL << 8) // extract full appliance backup
#define ACL_SYS_RESTORE         (ACL_SYS_BACKUP)   // restore full appliance backup
#define ACL_SYS_UDATE_HSM       (ACL_OBJ_DEL << 9) // firmware and stuff like that
#define ACL_NS_AUTHORIZATION    (ACL_OBJ_DEL << 10) // user must be authorized with "m of n"
#define ACL_VIRTUAL_X509_AUTH    (ACL_OBJ_DEL << 28) // presence means SA (user must use 2F PKI)
#define ACL_VIRTUAL_OTP_AUTH    (ACL_OBJ_DEL << 29) // presence means SA (user must use 2-F OTP)
#define ACL_CHANGE_PWD_NEXT_TIME (ACL_OBJ_DEL << 30) // can force usrs to change pwd on next login


#define ACL_DEFAULT_OWNER ( ACL_OBJ_DEL | ACL_OBJ_READ | ACL_OBJ_CREATE | \
                                ACL_OBJ_UPDATE |ACL_OBJ_WRITE \
                                )

/* DGenerateCVV/DVerifyCVV */

#define    MIN_CVV_LEN            (3 + 1)
#define    MAX_PAN_LEN            (24 + 1)
#define    MAX_EXP_DATE_LEN       (4 + 1)
#define    MAX_SVC_LEN            (3 + 1)

/* DGeneratePVV */

#define EFT_MIN_PVKI        (0x00)
#define EFT_MAX_PVKI        (0x06)
#define EFT_PVV_LEN            (4)

/* DGeneratePIN */

#define GP_DEFAULT_PIN        (1)
#define GP_USER_DEF_PIN       (2)
#define GP_RANDOM_PIN         (3)

/* DEFTExportKey/DEFTKeKImport */

#define EK_EFT_KEK_EXPORT_RAW   (1) // BLOB() == envelope + checksum[3];
#define EK_EFT_KEK_EXPORT_VISA1 (2) // Variant-1 ZCMK, BLOB() == envelope + checksum[3];
#define EK_EFT_KEK_EXPORT_LMK   (3) // BLOB() == 3DES_CBC(SVMK, Key)
#define EK_EFT_KEK_EXPORT_JCB   (4) // BLOB() == envelope + checksum[8];

/* DPINBlockTranslate */

// translate types
#define TP_TRANSLATE_TYPE_AUTO        (0xFF)
#define TP_TRANSLATE_TYPE_IBM_3624    (0x36)
#define TP_TRANSLATE_TYPE_ISO_0        (1) // == VISA 1; HSM default
#define TP_TRANSLATE_TYPE_ISO_1        (2)
#define TP_TRANSLATE_TYPE_ISO_3        (3)

/* Other constants */


#define MAX_USR_PWD                      (16)
#define MAX_USR_LEN                      (16)
#define MAX_CN_LEN                      (256)
#define MAX_PATH_LEN                    (256)
#define MAX_MODULE_NAME_LEN             (128)
#define MAX_MODULE_VERSION_LEN           (32)
#define MAX_ADDR_LEN                    (128)
#define MAX_CHANNEL_CIPHER_NAME_LEN     (128)
#define MIN_PIN_LEN                       (8)
#define MIN_BACKUP_OBJ_PIN_LEN            (8)
#define MAX_BACKUP_OBJ_PIN_LEN            (32)
#define MIN_BACKUP_PIN_LEN               (8)
#define MAX_BACKUP_PIN_LEN               (32)
#define MAX_OBJ_NAME_LEN                 (32)
#define MAX_PIN_LEN                       (6)
#define MAX_MODULE_NAME_VERSION_LEN    (1024)
#define MAX_IP_LEN                       (15)
#define MAX_NET_NAME                     (16)
#define MAX_HOTP_PIN                      (4)
#define MAX_HOTP_IMEI                    (24)
#define MAX_HOTP_APP_NAME                (13)
#define MAX_HOTP_LOGO_LEN              (1632)
#define MAX_P11_OBJ_ID                  (128)
#define MAX_OBJ_ID_BIN_LEN           (32 + 1)
#define MAX_OBJ_ID                        MAX_OBJ_ID_BIN_LEN
#define MAX_OBJ_ID_LEN                    (MAX_USR_LEN + 1 + MAX_OBJ_ID)
#define MAX_OBJ_ID_FQN_LEN                (MAX_OBJ_ID_LEN)
#define MAX_P11_DATE_TXT                 (8)
#define MIN_EFT_PIN_LEN                  (4)
#define MAX_EFT_PIN_LEN                 (12)
#define MIN_KSI_LEN                     (5)
#define MIN_CTR_LEN                      (5)
#define MAX_HSM_DOMAIN_NAME             (32)
#define MAX_HSM_MODEL_NAME              (32)
#define MAX_HSM_ID_NAME                 (32)


/* MOD EFT*/

#define EFT_VISA_KEY_CHECKSUM_LEN          (3)
#define EFT_JCB_KEY_CHECKSUM_LEN           (8)
#define EFT_EXP_DATE_LEN                   (4)

#define EFT_EMV_SDA_SEQ_LEN                (2)
#define EFT_EMV_SDA_DAC_LEN                (2)
#define EFT_EMV_ARC_LEN                    (2)
#define EFT_EMV_CSU_LEN                    (4)
#define EFT_EMV_PAD_LEN                    (8)

#define EFT_EMV_IDN_LEN      (2)
#define EFT_EMV_IDN_ATC_LEN  (2)
#define EFT_EMV_IDN_UN_LEN   (4)

#define EFT_EMV_CSR_VISA_TRACK_NUM_LEN       (3)
#define EFT_EMV_CSR_VISA_SERVICE_ID_LEN      (4)
#define EFT_EMV_CSR_VISA_ISSUER_ID_LEN       (4)
#define EFT_EMV_CSR_VISA_PUB_KEY_INDEX_LEN   (3)

#define EFT_EMV_CSR_VISA_HASH_SIZE      (20)
#define EFT_EMV_CSR_MASTER_HASH_SIZE    (28)



/* DGenerateICCMK */

#define EFT_EMV_GEN_ICC_MK_OP_CBC_EXP  (0x01)
#define EFT_EMV_GEN_ICC_MK_OP_ECB_EXP  (0x02)

/* DMAC_ISO9797_1_Met2*/

#define    EMV_MAC_TYPE_ALG1                (1)
#define    EMV_MAC_TYPE_ALG3                (2)

/* DGenerateEMV_MAC/DGenerateEMV_HMAC/DCalculateARPC */

#define EMV_OP_ISO_9797_1_M2_COMMON                     (0x01)
#define EMV_OP_ISO_9797_1_M2_MCHIP                      (0x02)
#define EMV_OP_ISO_9797_1_M2_VISA                       (0x03)
#define EMV_OP_ISO_9797_1_M2_VISA_CRYPTOGRAM            (0x04)
#define EMV_OP_ISO_9797_1_M2_VISA_ICC_V1_4_PAN_AUTO     (0x05)
#define EMV_OP_ISO_9797_1_M2_RAW                        (0x06)
#define EMV_OP_ISO_9797_1_M1_VISA_CRYPTOGRAM_PADD_V10   (0x7F)
#define EMV_OP_ISO_9797_1_M2_ELO                        (0x07)
#define EMV_OP_ISO_9797_1_M2_JCB                        (0x08)
#define EMV_OP_ISO_9797_1_M1_JCB                        (0x09)
#define EMV_OP_ISO_9797_1_M1_JCB_CRYPTOGRAM             (0x0A)

/* DGenerateDDA_ICCCert */

#define EFT_EMV_DDA_OP_RSA_SIGN1        (0x01) // rsa + sha1

/* DGenerateEMV_CSR */

#define EFT_EMV_OP_CSR_VISA              (0x01)
#define EFT_EMV_OP_CSR_MASTER            (0x02)
#define EFT_EMV_OP_CSR_ELO               (0x03)
#define EFT_EMV_OP_CSR_JCB               (0x04)


/* DGenerateISO9796Cert2 */

#define CORE_P_ISO_9796_USER_ID_LEN          (32)
#define CORE_P_ISO_9796_USER_NAME_LEN        (32)
#define CORE_P_ISO_9796_KEY_LEN             (512) // 128
#define CORE_P_ISO_9796_MIN_KEY_LEN          (64)
#define CORE_P_ISO_9796_EXPONENT_LEN          (8)
#define CORE_P_ISO_9796_MIN_EXPONENT_LEN      (1)


/* DGenerateEMV_PinBlock */

#define PBC_EMV_PIN_BLOCK_OP_COMMON           (EMV_OP_ISO_9797_1_M2_COMMON)
#define PBC_EMV_PIN_BLOCK_OP_MCHIP            (EMV_OP_ISO_9797_1_M2_MCHIP)
#define PBC_EMV_PIN_BLOCK_OP_VISA             (EMV_OP_ISO_9797_1_M2_VISA)
#define PBC_EMV_PIN_BLOCK_OP_VISA_CRYPTOGRAM  (EMV_OP_ISO_9797_1_M2_VISA_CRYPTOGRAM)
#define PBC_EMV_PIN_BLOCK_OP_ELO              (EMV_OP_ISO_9797_1_M2_ELO)
#define PBC_EMV_PIN_BLOCK_OP_JCB              (EMV_OP_ISO_9797_1_M2_JCB)

#define PBC_EMV_PIN_BLOCK_MAX_OUTPUT            (64)


/* DDeriveKeyFromBuffer */

#define EMV_DERIVE_KEY_OP_XOR     (0x01)
#define EMV_DERIVE_KEY_OP_ECB     (0x02)


/* DGeneratePKCS10CSR */

#define CORE_P10_CSR_VERSION1    (0x00)
#define CORE_P10_CSR_DN_MAX_LEN  (2048)

#define P10_CSR_DER            (1)
#define P10_CSR_PEM            (2)

#define CORE_P10_HASH_SHA1   (0x01)
#define CORE_P10_HASH_SHA224 (0x02)
#define CORE_P10_HASH_SHA256 (0x03)
#define CORE_P10_HASH_SHA384 (0x04)
#define CORE_P10_HASH_SHA512 (0x05)

/* DPKCS8ExportKey */

// ASCII
#define CORE_P8_EXPORT_PWD_LEN      (16)
#define ND_MIN_P8_PWD_LEN           (8)
#define ND_MAX_P8_PWD_LEN           (CORE_P8_EXPORT_PWD_LEN)

/* SPB */

#define    ND_SPB_MSG_HEADER_V2_LEN         (588)
#define ND_SPB_MAX_NOTIFY_DATA_SEG    (32 * 1024)


//dwFlags
#define ND_SPB_USE_CIP1 (0x80000000)

/* DSPBEncode */

#define ND_SPB_HASH_MODE_SHA1    (0x02)
#define ND_SPB_HASH_MODE_SHA256  (0x03)

//dwFlags
#define ND_SPB_ENCODE_GEN_01     (0x01)

/* DSPBDecode */

#define ND_SPB_REMOVE_PADDING      (0x01)

//dwFlags
#define ND_SPB_OUT_NO_PADDING      (0x01)
#define ND_SPB_OUT_WITH_PADDING    (0x02)

#define ND_SPB_ISPB_LEN               (8)
#define ND_SPB_CA_LEN                 (2)
#define ND_SPB_DOMAIN_MAX_LEN         (5)
#define ND_SPB_SN_MAX_LEN            (32)
#define ND_SPB_ID_MAX_LEN        (ND_SPB_SN_MAX_LEN + 1 + ND_SPB_CA_LEN + 1)
#define ND_SPB_ID_MAX_FQN_LEN    (MAX_USR_LEN + 1 + ND_SPB_SN_MAX_LEN + 1 + ND_SPB_CA_LEN + 1)
#define ND_SPB_MAX_SUBJECT         (1024)
#define ND_SPB_MAX_ISSUER          (1024)
#define ND_SPB_MAX_ALG_ID           (256)

//strong auth
#define SA_TP_MAX_DES_LEN           (16 + 1)
#define SA_TP_MAX_OFFSET_LEN         (6 + 1)
#define SA_TP_MAX_SERIAL_LEN        (10 + 1)
#define SA_TP_MAX_MKEY_LEN          (32 + 1)
#define SA_TP_MAX_OTP_LEN            (6 + 1)

#define SA_HOTP_CHAP_LEN                (10)

/* Module OATH */

/* DOATHIssueHOTPBlob */
#define ISSUE_OATH_MIN_OTP_LEN    (6)
#define ISSUE_OATH_MAX_OTP_LEN    (16)
#define ISSUE_OATH_MAX_OTP_RETRY  (129)

//bSeedLen
#define ISSUE_OATH_SHA1_LEN      (20)
#define ISSUE_OATH_SHA256_LEN    (32)
#define ISSUE_OATH_SHA512_LEN    (64)

//bTruncationOffset
#define ISSUE_OATH_DYN_TRUNC     (OATH_SA_v1_HOTP_DYN_TRUNC_OFF)

//wTimeStep
#define ISSUE_OATH_DEFAULT_TIME_STEP    (OATH_SA_v2_default_TIME_STEP)
#define ISSUE_OATH_HOTP_TS       (0)

//otT0
#define ISSUE_OATH_HOTP_T0       (OATH_SA_v2_default_T0_Epoch)

//otMovingFactor
#define ISSUE_OATH_INIT_MF       (0)

#define ISSUE_OATH_OUTPUT_BLOB_LEN        (160)

#define OATH_MAX_PSK_LEN                 (255)

#define ISSUE_OATH_GENERATE_HOTP            (1)
#define ISSUE_OATH_GENERATE_TOTP            (2)
#define ISSUE_OATH_IMPORT_HOTP              (3)
#define ISSUE_OATH_IMPORT_TOTP              (4)


#define DEFAULT_PORT            (4433)


/* DListObjsFilter */

#define LST_NO_FILTER        (1)
#define LST_FILTER           (2)

/* DSPBCalculateObjectId */

#define        SPB_GENERATE_KEY_NAME    (1)
#define        SPB_GENERATE_CER_NAME    (2)


/* DIPFilterOperation */

#define D_IPF_ENABLE        (1)
#define D_IPF_DISABLE       (2)
#define D_IPF_LIST         (33)
#define D_IPF_ADD          (44)
#define D_IPF_DEL          (55)


/* DCert2CertInfo */

#define    P2C_SPB_CERT_INFO        (1)
#define    P2C_CERT_BASIC_INFO      (2)

//CERT_X509_BASIC_INFO
#define DN_MAX_SUBJECT         (1024)
#define DN_MAX_ISSUER          (1024)
#define DN_MAX_SN              (1024)
#define DN_MAX_EMAIL           (1024)
#define DN_MAX_ALG_ID           (256)


/* DGenerateDUKPT */

// flags/modes; duk, pek, and mek are mutually exclusive;
#define NEW_DUKPT_MODE_DUK  (0x00000000)
#define NEW_DUKPT_MODE_EXP  (1 << 31)
#define NEW_DUKPT_MODE_DE   (1 << 30)
#define NEW_DUKPT_MODE_PEK  (1 << 29)
#define NEW_DUKPT_MODE_MEK  (1 << 28)
#define NEW_DUKPT_MODE_TMP  (1 << 27)
#define NEW_DUKPT_MODE_IPEK (1 << 26)


/* DGetNetInfo */

#define NET_INFO_MAX_SROUTE_COUNT   (48)
#define NET_INFO_MAX_SROUTE_LEN     (52)
#define NET_INFO_MAX_SNMP_T_COUNT   (16)
#define NET_INFO_MAX_SNMP_SC_STR   (255)
#define NET_INFO_MAX_SNMP_SL_STR   (255)
#define NET_INFO_MAX_SNMP_C_STR     (64)

//Flags
#define NET_INFO_INFO_0        (0)
#define NET_INFO_INFO_1        (1)

/* Bond mode - comes in bond gateway info. */
#define NET_INFO_BOND_HOT_STANDBY  "hot standby"
#define NET_INFO_BOND_BALANCE      "balance"
#define NET_INFO_BOND_AGGREGATION  "aggregation"



/* DCertEncodingConvert and DGetHSMTLSCert*/

#define CERT_OUT_DER    1
#define CERT_OUT_PEM    2



/* DGenEcdhKey -  dwOP*/

#define DN_GEN_KEY_KDF_RAW_SECRET       (0x01)
#define DN_GEN_KEY_X9_63_SHA256         (0x02)


#define DN_ECDH_GEN_KEY_MAX_DATA        (1024)
#define DN_GEN_ECDH_MAX_SHARED_LEN      (128)

/* DCreateHash */

#define DN_HASH_OFFLINE     (1)


/* DFindHSM */

//Service Type
#define DN_FIND_SRVC_TYPE_IP        (1)
#define DN_FIND_SRVC_TYPE_AAP       (2)
#define DN_FIND_SRVC_TYPE_ALL       (3)

//Filter
#define DN_FIND_FILTER_TYPE_POCKET  (0x01)
#define DN_FIND_FILTER_TYPE_XP      (0x02) //Not implemented
#define DN_FIND_FILTER_TYPE_ST      (0x04) //Not implemented
#define DN_FIND_FILTER_TYPE_LEGACY  (0x08) //Not implemented
#define DN_FIND_FILTER_TYPE_UNKNOWN (0x10) //Not implemented
#define DN_FIND_FILTER_TYPE_HSM     (0x40000000)
#define DN_FIND_FILTER_TYPE_ALL     (0x80000000)

#define DN_SLP_POCKET_ID            "$pocket"
#define DN_SLP_HSM_MODEL_POCKET     "DMP"
#define DN_SLP_HSM_MODEL_XP         "DXP"
#define DN_SLP_HSM_MODEL_ST         "DST"
#define DN_SLP_HSM_MODEL_LEGACY     "lhM"
#define DN_SLP_HSM_MODEL_UNKNOWN    "DHSM"


/* DManageAToken */

#define DN_USR_A_TOKEN_KLEN             (16)
#define DN_RND_CHAP_LEN                 (16)

#define DN_A_TOKEN_OP_ISSUE     (1)
#define DN_A_TOKEN_OP_REVOKE    (2)
#define DN_A_TOKEN_OP_LIST      (3)
#define DN_A_TOKEN_OP_L_ISSUE   (4)
#define DN_A_TOKEN_OP_L_REVOKE  (5)

#define DN_A_TOKEN_INFINITE   (~0)


/* DBatchSign */

#define DN_BATCH_SIGN_BLOCK_HEADER  ((DWORD *2) + MAX_OBJ_ID_FQN_LEN)


/* DSetLBList and DGetLBList */

#define DN_LB_LIST  (1)
#define DN_MAX_LB_HSM_COUNT         (16)
#define DN_MAX_LB_SETS              (16)

/* DGetUserKey */

#define D_GET_USR_KEY_OFFLINE   (1)

/*
*
*    Unaligned structures
*
*/

typedef struct tag_HSM_ADDR
{
    char    szAddr[MAX_ADDR_LEN];   
    int     nPort;                  
    time_t  tmNow;                  
    int     nqtdcache;               /* Amount of sessions in cache.*/
}HSM_ADDR;

typedef struct tag_LOAD_BALANCE_LIST
{
    HSM_ADDR *pstLBList; 
    DWORD dwLBListCount; 
}LOAD_BALANCE_LIST;

typedef struct tag_SLP_SRVR_INFO
{
    int nPort;                              
    char szIP[MAX_IP_LEN + 1];              
    char szId[MAX_HSM_ID_NAME + 1];         
    char szModel[MAX_HSM_MODEL_NAME + 1];   
}SLP_SRVR_INFO;

typedef struct tag_DBLOB
{
    void *pvData;       
    DWORD dwDataLen;    
} DBLOB;





/* DCert2CertInfo */

typedef struct tag_SPB_CERT_X509_INFO
{
    DWORD        dwVersion;

    char        szAlgId[ND_SPB_MAX_ALG_ID];

    char        szISPB[ND_SPB_ISPB_LEN+1];
    char        szCA[ND_SPB_CA_LEN+1];
    char        szSN[ND_SPB_SN_MAX_LEN+1];

    char        szSubject[ND_SPB_MAX_SUBJECT];
    char        szIssuer[ND_SPB_MAX_ISSUER];

    struct tm    tmNotBefore;
    struct tm    tmNotAfter;

    DBLOB        dbPublicKey;

}SPB_CERT_X509_INFO;


typedef struct tag_CERT_X509_BASIC_INFO
{
    DWORD       dwVersion;

    char        szAlgId[DN_MAX_ALG_ID];

    char        szSubject[DN_MAX_SUBJECT];
    char        szIssuer[DN_MAX_ISSUER];
    char        szSN[DN_MAX_SN];

    struct tm   tmNotBefore;
    struct tm   tmNotAfter;

    DBLOB       dbPublicKey;
    int         nPubKeyHSMAlgId;
    char        szEmail[DN_MAX_EMAIL];

}CERT_X509_BASIC_INFO;


typedef struct tag_IP_FILTER_INFO
{
    char szUser[MAX_USR_LEN + 1];
    char szIp[MAX_IP_LEN + 1];
}IP_FILTER_INFO;


/* DECPrivateKey2Info and DECPublicKey2Info */

#define DN_EC_MAX_BIG_NUM (1024)

//Field type definitions
#define DN_EC_KEY_FIELD_TYPE_NOT_DEFINED    (0)
#define DN_EC_KEY_FIELD_TYPE_PRIME_FIELD    (1)
#define DN_EC_KEY_FIELD_TYPE_BINARY_FIELD   (2)

//Out format options
#define DN_BN_2_ARRAY_OUT_BIN   (1)
#define DN_BN_2_ARRAY_OUT_HEX   (2)

//In format options
#define DN_EC_KEY_IN_FORMAT_DER (1)

typedef struct tag_DN_EC_BIG_NUMBER
{
    BYTE    pbData[DN_EC_MAX_BIG_NUM];
    DWORD   dwDataLen;
}DN_EC_BIG_NUMBER;

typedef struct tag_DN_EC_POINT_INFO
{
    DN_EC_BIG_NUMBER    bnX;//Point's x-coordinate
    DN_EC_BIG_NUMBER    bnY;//Point's y-coordinate
}DN_EC_POINT_INFO;

typedef struct tag_DN_EC_GROUP_INFO
{
    int nFieldType; //See definitions above

    DN_EC_BIG_NUMBER    bnP;//In Fp fields this is p for F2M fields it's m

    DN_EC_BIG_NUMBER    bnA;//Parameter a of the equation
    DN_EC_BIG_NUMBER    bnB;//Parameter b of the equation

    DN_EC_BIG_NUMBER    bnCofactor;//Cofactor h

    DN_EC_BIG_NUMBER    bnOrder;//Order n of the generator g
    DN_EC_POINT_INFO    stGeneratorPoint;//Generator g / base point


}DN_EC_GROUP_INFO;

typedef struct tag_DN_EC_PUB_KEY_INFO
{

    DN_EC_GROUP_INFO    stGroupInfo;
    DN_EC_POINT_INFO    stPublicPoint;//Public point - w

}DN_EC_PUB_KEY_INFO;

typedef struct tag_DN_EC_PRIV_KEY_INFO
{

    DN_EC_GROUP_INFO    stGroupInfo;
    DN_EC_BIG_NUMBER    bnPrivatevalue;//Private value - s

}DN_EC_PRIV_KEY_INFO;

typedef struct tag_RSA_PUB_KEY_PARTS
{
    DBLOB dbModulus; 
    DBLOB dbPubExponent; 
}RSA_PUB_KEY_PARTS;


#define DN_USER_INFO_CERT_OP_ASSOCIATE (1)
#define DN_USER_INFO_CERT_OP_UNASSOCIATE (2)

typedef struct tag_USER_INFO_CERT
{
    char szUserId[MAX_USR_LEN + 1];   
    BYTE bOP;  
    DBLOB dbCert; 
}USER_INFO_CERT;

typedef struct tag_TLS_BUNDLE_INFO
{
    char            szKEY[MAX_OBJ_ID_FQN_LEN]; 
    char            szCERT[MAX_OBJ_ID_FQN_LEN]; 
}TLS_BUNDLE_INFO;


typedef struct tag_GET_USR_KEY_OFFLINE
{
    char szKeyId[MAX_OBJ_ID_LEN]; 
    int nAlgId; 
    DWORD dwFlags; 
    BOOL bTempKey; 
    BYTE *pbPubKey; 
    DWORD dwPubKeyLen; 
}GET_USR_KEY_OFFLINE;




#ifdef _WIN32
    #pragma pack(push, 1) /* Align by 1 for portability issues.*/
#else
    #pragma pack(1)
#endif


/* Aligned structures */

typedef struct tag_OBJ_HDR_V1
{
    DWORD  version;
    DWORD  type;
    DWORD  attrib;
    DWORD  len;

} OBJ_HDR_V1;


/*
    Estrutura contendo os atributos SP80057 de um objeto do HSM.
*/
typedef struct tag_OBJ_SP80057_INFO
{

    QWORD qwInit; 
    QWORD qwActiv; 
    QWORD qwProc_s; 
    QWORD qwProtect_s; 
    QWORD qwDeactiv; 
    QWORD qwC_occur;  
    QWORD qwComprom;  
    QWORD qwArchive;  
    QWORD qwLast_change;  
    QWORD qwOrig_creat;  
    QWORD qwMask;  
    BYTE  bState;  
}OBJ_SP80057_INFO;


/*
    Estados de objetos KMIP/SP.800-57.
*/
#define DN_SL_SP80057_STATE_UNKNOWN     (0)
#define DN_SL_SP80057_STATE_PRE_ACTIVE  (1)
#define DN_SL_SP80057_STATE_ACTIVE      (2)
#define DN_SL_SP80057_STATE_DEACTIVATED (3)
#define DN_SL_SP80057_STATE_COMPROMISED (4)
#define DN_SL_SP80057_STATE_DESTROYED   (5)
#define DN_SL_SP80057_STATE_DESTROYED_C (6)

/*
    Máscara de uso de objetos SP.800-57.
*/
#define DN_SP80057_UM_SIGN                (0x00000001)
#define DN_SP80057_UM_VERIFY              (0x00000002)
#define DN_SP80057_UM_ENCRYPT             (0x00000004)
#define DN_SP80057_UM_DECRYPT             (0x00000008)
#define DN_SP80057_UM_WRAP_KEY            (0x00000010)
#define DN_SP80057_UM_UNWRAP_KEY          (0x00000020)
#define DN_SP80057_UM_EXPORT              (0x00000040)
#define DN_SP80057_UM_MAC_GENERATE        (0x00000080)
#define DN_SP80057_UM_MAC_VERIFY          (0x00000100)
#define DN_SP80057_UM_DERIVE_KEY          (0x00000200)
#define DN_SP80057_UM_CONTENT_COMMITMENT  (0x00000400)
#define DN_SP80057_UM_KEY_AGREEMENT       (0x00000800)
#define DN_SP80057_UM_CERTIFICATE_SIGN    (0x00001000)
#define DN_SP80057_UM_CRL_SIGN            (0x00002000)
#define DN_SP80057_UM_GENERATE_CRYPTOGRAM (0x00004000)
#define DN_SP80057_UM_VALIDATE_CRYPTOGRAM (0x00008000)
#define DN_SP80057_UM_TRANSLATE_ENCRYPT   (0x00010000)
#define DN_SP80057_UM_TRANSLATE_DECRYPT   (0x00020000)
#define DN_SP80057_UM_TRANSLATE_WRAP      (0x00040000)
#define DN_SP80057_UM_TRANSLATE_UNWRAP    (0x00080000)


/* DListObjsFilter */

typedef struct tag_OBJ_LIST_FILTER
{
    DWORD            dwVERB;
    OBJ_HDR_V1        stObjectHeader;

}OBJ_LIST_FILTER;

#define OBJ_LIST_VERB_VERSION        ( 1 << 0 )
#define OBJ_LIST_VERB_TYPE            ( 1 << 1 )
#define OBJ_LIST_VERB_ATTRIB        ( 1 << 2 )
#define OBJ_LIST_OBJS_OR            ( 1 << 31 )

typedef struct tag_OBJ_LIST_FILTER_OUT_DATA
{
    OBJ_HDR_V1    stObjectHeader;
    char        szObjName[MAX_OBJ_ID_FQN_LEN];

    OBJ_HDR_V1    stSlot1Header;
    char        szSlot1ObjName[MAX_OBJ_ID_FQN_LEN];

    OBJ_HDR_V1    stSlot2Header;
    char        szSlot2ObjName[MAX_OBJ_ID_FQN_LEN];

    BYTE        bBlockedStatus;
    ND_uint64_t    stCreationTime;

}OBJ_LIST_FILTER_OUT_DATA;

typedef struct tag_ISSUE_OTP_BLOB
{
    BYTE                bSeedLen;                   
    BYTE                pbSeed[MAX_OATH_HMAC_LEN];  
    BYTE                bTruncationOffset;          
    WORD                wTimeStep;                  
    ND_OATH_uint64_t    otT0;                       
    BYTE                bUseDefaultMovingFactor;    
    ND_OATH_uint64_t    otMovingFactor;             
}ISSUE_OTP_BLOB;

typedef struct tab_ISSUE_OATH_BLOB_t
{
    BYTE                seed_len;                   
    BYTE                seed[MAX_OATH_HMAC_LEN];    
    ND_OATH_uint64_t    moving_factor;              
    BYTE                truncation_offset;          
    WORD                time_step;                  
    ND_OATH_uint64_t    T0;                         
    DWORD               pad_cks_tag[3];             
} ISSUE_OATH_BLOB_t;


typedef struct tag_OATH_PSKC_TRANSLATE_OUTPUT
{
    ISSUE_OATH_BLOB_t    stOATHBlob;                    
    char                szKeyId[OATH_MAX_PSK_LEN+1];    
}OATH_PSKC_TRANSLATE_OUTPUT;

typedef struct tag_OATH_SA_v1
{
    BYTE  type; 
    BYTE  key_len; 
    BYTE  key[MAX_OATH_HMAC_LEN]; 
    BYTE  truncation_offset; 
} OATH_SA_v1;

typedef struct tag_MOD_OATH_SA_v2
{
    OATH_SA_v1            sa_v1; 
    WORD                time_step; 
    ND_OATH_uint64_t    T0;
} OATH_SA_v2;


typedef struct tag_STAT_CLUSTER_IP
{
    char szIp[MAX_IP_LEN + 1];
}STAT_CLUSTER_IP;


//GMT
typedef struct tag_P11_DATE{
  char       year[4];   /* the year ("1900" - "9999") */
  char       month[2];  /* the month ("01" - "12") */
  char       day[2];    /* the day   ("01" - "31") */
} P11_DATE;

typedef struct tag_CERT_X509_INFO
{
    int            nVersion;

    DBLOB        dbSubject;
    DBLOB        dbIssuer;
    DBLOB        dbSerialNumber;

    P11_DATE    dtNotBefore;
    P11_DATE    dtNotAfter;

}CERT_X509_INFO;

typedef struct tag_HOTP_INFO_EX
{
    DWORD dwStructId;                            //Structure identifier -> SA_ST_ID_HOTP_INFO_EX
    char  szObjId[MAX_OBJ_NAME_LEN + 1];        //HSM HOTP object name
    DWORD dwObjAttr;                            //HSM object attributes
    DWORD dwObjHotpFlags;                        //SoftToken type -> SA_ATTR_OATH_USE_IMEI, SA_ATTR_OATH_USE_TIME ...
    char  szStPin[MAX_HOTP_PIN + 1];            //SoftToken PIN
    char  szStIMEI[MAX_HOTP_IMEI + 1];            //SoftToken related device's serial number
    char  szStAppName[MAX_HOTP_APP_NAME + 1];    //SoftToken application name
    DBLOB *pdbStLogoImage;                        //SoftToken logo image
}HOTP_INFO_EX; //DESCONTINUADO!


//DGetNetInfo
typedef struct tag_SYS_NET_INFO
{
    BYTE pbMac[6];
    char szIp[MAX_IP_LEN + 1];
    char szMask[MAX_IP_LEN + 1];
    char szDefGateway[MAX_IP_LEN + 1];
    BYTE bUp;
    DWORD dwSpeed; //Mb/s
    char szName[MAX_NET_NAME + 1];
} SYS_NET_INFO;

typedef struct tag_SYS_NET_INFO_1
{
    SYS_NET_INFO *pstSysNetInfo;
    DWORD dwSysNetInfoCount;

    char pszStaticRoutes[NET_INFO_MAX_SROUTE_COUNT][NET_INFO_MAX_SROUTE_LEN + 1];
    char szCommunity[NET_INFO_MAX_SNMP_C_STR + 1];
    char szSysContact[NET_INFO_MAX_SNMP_SC_STR + 1];
    char szSyaLocation[NET_INFO_MAX_SNMP_SL_STR + 1];
    char pszTARGETS[NET_INFO_MAX_SNMP_T_COUNT][MAX_NET_NAME + 1];

} SYS_NET_INFO_1;

typedef struct tag_SYS_HEALTH
{
    DWORD dwUptime;     
    DWORD dwBatteryOK;  
}SYS_HEALTH;

typedef struct tag_SYS_DISK_INFO
{
    DWORD dwBlockSize;
    DWORD dwTotalBlocks;
    DWORD dwFreeBlocks;
}SYS_DISK_INFO;

typedef struct tag_SYS_STATUS_INFO
{ 
    DWORD dwSessions; 
    DWORD dwCPU; 
    DWORD dwUnit; 
    DWORD dwMemTotal; 
    DWORD dwMemUsed; 
    DWORD dwSwapTotal; 
    DWORD dwSwapUsed; 
}SYS_STATUS_INFO;

typedef struct tag_SYS_COUNTER_INFO
{
    QWORD qwUsers; 
    QWORD qwObjects; 
    QWORD qwSLBeFileSize; 
    QWORD qwTasks; 
    QWORD qwVMSize; 
}SYS_COUNTER_INFO;


#define DN_MAX_HSM_ALIAS      (128)
#define DN_UPACK_MAX_DESCRIPTION  (255 + 1)

typedef struct tag_SYS_PENDING_INFO
{
    BYTE bPendingBackup; 
    char szPendingUpackDescription[DN_UPACK_MAX_DESCRIPTION]; 
    char szHsmAlias[DN_MAX_HSM_ALIAS+1]; 
}SYS_PENDING_INFO;


typedef struct tag_SYS_HW_STR_INFO
{
    char szSerialNumber[GET_INFO_MAX_SN_LEN + 1];
    char szHardwareString[GET_INFO_MAX_HW_STR_LEN + 1];
    char szTpKey[GET_INFO_MAX_TPKEY_LEN + 1];
}SYS_HW_STR_INFO;

typedef struct tag_SYS_NTP_SVR_INFO
{
    char szAddr[MAX_IP_LEN + 1];
    char szNtpqInfo[GET_INFO_MAX_NTPQ_LEN + 1];
    WORD wKeyIndex;
    DWORD dwKeyLen;
    char szKeyType[GET_INFO_MAX_NTP_KT_LEN + 1];
    char szKeyMat[GET_INFO_MAX_NTP_KM_LEN + 1];
}SYS_NTP_SVR_INFO;

typedef struct tag_SYS_NTP_INFO
{
    BYTE bENABLED;
    SYS_NTP_SVR_INFO pstNtpSvrInfo[GET_INFO_MAX_NTP_SVRS];
}SYS_NTP_INFO;



typedef struct tag_SYS_REPL_INFO
{
    char    szDomain[GET_INFO_MAX_REPL_DOMAIN_NAME + 1];
    DWORD    dwBoundEth;
    QWORD    qwGuid;
    QWORD    qwDateTime;
    QWORD    qwEventType;
    DWORD    dwState;
    DWORD    dwaPeers[GET_INFO_MAX_REPL_NODES + 1]; //Zero terminated IPv4 array. Last item == 0x00000000
    DWORD    dwaPendingAcks[GET_INFO_MAX_REPL_NODES + 1]; //Zero terminated IPv4 array. Last item == 0x00000000
    QWORD    qwSpVal;
    WORD    wSpvv;
    DWORD    dwDiscoveryReset;
    DWORD    dwManagerPulse;
    DWORD    dwRecoveryPulse;
    DWORD    dwDiscoveryPulse;
    DWORD    dwaNodes[GET_INFO_MAX_REPL_NODES + 1]; //Zero terminated IPv4 array. Last item == 0x00000000
}SYS_REPL_INFO;


typedef struct tag_SYS_ALL_INFO
{
    int nFilledCount;
    SYS_STATUS_INFO stStatusInfo;
    DWORD dwFIPSMode;
    SYS_DISK_INFO stDiskInfo;
    SYS_REPL_INFO stReplicationInfo;
    QWORD qwCurrentDateTime;
    SYS_HW_STR_INFO stHardwareInfo;
    SYS_NTP_INFO stNTPInfo;
    SYS_COUNTER_INFO stCounterInfo;
    DWORD dwFIPSReturnCode;
    SYS_PENDING_INFO stPendingInfo;
}SYS_ALL_INFO;


typedef struct tag_REPL_NODE_MSG
{
    BYTE    bOP; //RNM_PROBE, RNM_DOWN...
    DWORD    dwPeer; //IPv4
}REPL_NODE_MSG;


typedef struct tag_HOTP_CHAP
{
    DWORD dwStructId;                            //Structure Id -> SA_ST_ID_HOTP_CHAP
    char szChallenge[SA_HOTP_CHAP_LEN + 1];        //Server created challenge
}HOTP_CHAP;//DEPRECATED!

typedef struct tag_HOTP_SYNC
{
    DWORD dwStructId;                    //Structure Id -> SA_ST_ID_HOTP_SYNC
    char szObjId[MAX_OBJ_NAME_LEN + 1];    //HOTPToken to synchronize
    char szOTP1[SA_TP_MAX_OTP_LEN];        //Expected response from HOTPToken
    char szOTP2[SA_TP_MAX_OTP_LEN];        //Server Counter Response
}HOTP_SYNC;

typedef struct tag_HIP_PARAM
{
  DWORD dwParam;
  DWORD dwHipFlags;
  DWORD dwHipColor;
}HIP_PARAM; //DEPRECATED!

typedef struct tag_HIP_OUTPUT
{
  char      szHipChallenge[1];
  DWORD     dwImageLen;
  BYTE      pbImage[1];
}HIP_OUTPUT; //DEPRECATED!

typedef struct tag_USER_BLOCK
{
    char szUserId[MAX_USR_LEN+1]; 
    int nBlocked; 
    DWORD dwAttempts; 
}USER_BLOCK;

typedef struct tag_DN_A_TOKEN
{
    char pcUserName[MAX_USR_LEN]; 
    BYTE pbKey[DN_USR_A_TOKEN_KLEN]; 
}DN_A_TOKEN;

typedef struct tag_DN_A_TOKEN_FULL
{
    DN_A_TOKEN stAToken; 
    QWORD   qwExpiration; 
}DN_A_TOKEN_FULL;

struct AUTH_PWD
{
    char szAddr[MAX_ADDR_LEN];      
    int  nPort;                     
    char szUserId[MAX_USR_LEN];     
    char szPassword[MAX_USR_PWD];   
};

struct AUTH_PWD_EX
{
    char szAddr[MAX_ADDR_LEN]; 
    int  nPort; 
    char szUserId[MAX_USR_LEN]; 
    char szPassword[MAX_USR_PWD]; 
    DWORD dwAuthType; 
    BYTE *pbStrongAuth; 
    int nStrongAuthLen; 
};

typedef struct tag_AUTH_ATOKEN
{
    char szAddr[MAX_ADDR_LEN]; 
    int  nPort; 
    DN_A_TOKEN stAToken; 
}AUTH_ATOKEN;

typedef struct tag_TLS_MUTUAL_AUTH_INFO
{
    DBLOB dbPrivateKey; 
    char *szPrivateKeyPwd; 
    DBLOB dbPrivateKeyCert; 
    DBLOB dbHSMCert; 
}TLS_MUTUAL_AUTH_INFO;

struct USER_INFO
{
    char szUserId[MAX_USR_LEN+1];   
    char szPassword[MAX_USR_PWD+1]; 
    DWORD dwAuthMask;               
};

/*
    Estados de autorização de partição do usuário.
*/

#define ND_PA_ACL_OBJ_OPEN    (ACL_OBJ_READ)
#define ND_PA_ACL_OBJ_EXPORT  (ACL_OBJ_CREATE)
#define ND_PA_ACL_OBJ_DEL     (ACL_OBJ_DEL)
#define ND_PA_ACL_OBJ_BLOCK   (ACL_OBJ_UPDATE)
#define ND_PA_ACL_NS_DEL      (ACL_USR_DELETE)

#define NSAUTH_ACL_FULL        (~0)

/* 
    Estados de autorização de partição do usuário. 
*/
#define ND_PA_STATE_Unknown     (0)
#define ND_PA_STATE_Absent      (1)
#define ND_PA_STATE_Null        (2)
#define ND_PA_STATE_Associated  (3)
#define ND_PA_STATE_Authorized  (4)

typedef struct tag_USER_PA_INFO
{
    char szUserId[MAX_USR_LEN + 1];   
    DWORD dwState; 
    DWORD dwACL;   
}USER_PA_INFO;



struct MAP_2_OBJ_INFO
{
    DWORD dwObj1AlgId;
    char szObj1Id[MAX_OBJ_NAME_LEN + 1];
    DWORD dwObj2AlgId;
    char szObj2Id[MAX_OBJ_NAME_LEN + 1];
};

typedef struct tab_EXT_MAP_2_OBJ_INFO
{

    DWORD  dwObjAlgId1;
    char   szObjId1[MAX_OBJ_ID_FQN_LEN];
    DWORD  dwObjAlgId2;
    char   szObjId2[MAX_OBJ_ID_FQN_LEN];

} EXT_MAP_2_OBJ_INFO;


struct MODULE_INFO
{
    DWORD dwModuleId;
    char szModuleNameVersion[MAX_MODULE_NAME_VERSION_LEN];
};

typedef struct tag_PKCS11_OBJ_MAP
{
    BYTE  target   [MAX_OBJ_ID_LEN];
    BYTE  associate[MAX_OBJ_ID_LEN];

    DWORD Class; // CKO_DATA, etc;

    BYTE  App  [MAX_P11_OBJ_ID + 1];
    BYTE  Id   [MAX_P11_OBJ_ID + 1];
    BYTE  Label[MAX_P11_OBJ_ID + 1];

    //The three BYTEs below are overloaded
    //must use the MACROs to set the desired parameters.
    //Macros defined below.

    BYTE  Trusted;         // boolean/overloaded
    BYTE  WrapWithTrusted; // boolean/overloaded
    BYTE  Local;           // boolean/overloaded

    DWORD CertificateCategory;
    DWORD JavaMidpSecDomain;
    DWORD KeyGenMechanism;

} PKCS11_OBJ_MAP;

//Trusted -> CKA_TRUSTED, CKA_DERIVE, CKA_ENCRYPT,
//CKA_DECRYPT, CKA_WRAP, CKA_UNWRAP
#define PKCS11_SET_FLAG(x, p)                ((x) |= (1 << (p)))
#define PKCS11_UNSET_FLAG(x, p)                ((x) &= ~(1 << (p)))
#define PKCS11_GET_FLAG(x, p)                ((x) &  (1 << (p)))

//Enable driven option. Disabled by default.
#define PKCS11_SET_OBJ_MAP_CKA_TRUSTED(x)    PKCS11_SET_FLAG(x, 7)
#define PKCS11_UNSET_OBJ_MAP_CKA_TRUSTED(x)    PKCS11_UNSET_FLAG(x, 7)
#define PKCS11_GET_OBJ_MAP_CKA_TRUSTED(x)    PKCS11_GET_FLAG(x, 7)

//Disable driven option. Enabled by default.
#define PKCS11_SET_OBJ_MAP_CKA_DERIVE(x)        PKCS11_UNSET_FLAG(x, 6)
#define PKCS11_UNSET_OBJ_MAP_CKA_DERIVE(x)        PKCS11_SET_FLAG(x, 6)
#define PKCS11_GET_OBJ_MAP_CKA_DERIVE(x)        (!PKCS11_GET_FLAG(x, 6))

#define PKCS11_SET_OBJ_MAP_CKA_ENCRYPT(x)        PKCS11_UNSET_FLAG(x, 5)
#define PKCS11_UNSET_OBJ_MAP_CKA_ENCRYPT(x)        PKCS11_SET_FLAG(x, 5)
#define PKCS11_GET_OBJ_MAP_CKA_ENCRYPT(x)        (!PKCS11_GET_FLAG(x, 5))

#define PKCS11_SET_OBJ_MAP_CKA_DECRYPT(x)        PKCS11_UNSET_FLAG(x, 4)
#define PKCS11_UNSET_OBJ_MAP_CKA_DECRYPT(x)        PKCS11_SET_FLAG(x, 4)
#define PKCS11_GET_OBJ_MAP_CKA_DECRYPT(x)        (!PKCS11_GET_FLAG(x, 4))

#define PKCS11_SET_OBJ_MAP_CKA_WRAP(x)            PKCS11_UNSET_FLAG(x, 3)
#define PKCS11_UNSET_OBJ_MAP_CKA_WRAP(x)        PKCS11_SET_FLAG(x, 3)
#define PKCS11_GET_OBJ_MAP_CKA_WRAP(x)            (!PKCS11_GET_FLAG(x, 3))

#define PKCS11_SET_OBJ_MAP_CKA_UNWRAP(x)        PKCS11_UNSET_FLAG(x, 2)
#define PKCS11_UNSET_OBJ_MAP_CKA_UNWRAP(x)        PKCS11_SET_FLAG(x, 2)
#define PKCS11_GET_OBJ_MAP_CKA_UNWRAP(x)        (!PKCS11_GET_FLAG(x, 2))

//WrapWithTrusted

//Enable driven option. Disabled by default.
#define PKCS11_SET_OBJ_MAP_CKA_WRAP_WITH_TRUSTED(x)        PKCS11_SET_FLAG(x, 7)
#define PKCS11_UNSET_OBJ_MAP_CKA_WRAP_WITH_TRUSTED(x)    PKCS11_UNSET_FLAG(x, 7)
#define PKCS11_GET_OBJ_MAP_CKA_WRAP_WITH_TRUSTED(x)        PKCS11_GET_FLAG(x, 7)

//Local
//Enable driven option. Disabled by default.
#define PKCS11_SET_OBJ_MAP_CKA_LOCAL(x)        PKCS11_SET_FLAG(x, 7)
#define PKCS11_UNSET_OBJ_MAP_CKA_LOCAL(x)    PKCS11_UNSET_FLAG(x, 7)
#define PKCS11_GET_OBJ_MAP_CKA_LOCAL(x)        PKCS11_GET_FLAG(x, 7)

//DAdmOperation options - AO_SET_PWD_SEC_POLICY/AO_GET_PWD_SEC_POLICY

typedef struct tag_PWD_SEC_POLICY
{

    //USE
    BYTE    bMaxInvalidLogins;    //Number of attempts. 0 == sets to HSM internal default.
    BYTE    bExpiration;        //Number of days. 0 == disable policy.
    BYTE    bHistory;            //Number of passwords to track. 0 == disable policy.
    //FORMAT
    BYTE    bMinLength;            //Minimal number of chars (ASCII).
    BYTE    bMinSpecial;        //Minimal number of non-alpha chars.
    BYTE    bUpper;                //Minimal number of upper-case chars.
    BYTE    bLower;                //Minimal number of lower-case chars.

}PWD_SEC_POLICY;

typedef struct tag_EFT_VISA_KEY_PARTS
{
    BYTE    pbKeyPart1[3 * DES_BLOCK];                      
    BYTE    pbKeyPart1Checksum[EFT_VISA_KEY_CHECKSUM_LEN];  
    BYTE    pbKeyPart2[3 * DES_BLOCK];                      
    BYTE    pbKeyPart2Checksum[EFT_VISA_KEY_CHECKSUM_LEN];  
    BYTE    pbKeyPart3[3 * DES_BLOCK];                      
    BYTE    pbKeyPart3Checksum[EFT_VISA_KEY_CHECKSUM_LEN];  
    BYTE    pbMKCheckSum[EFT_VISA_KEY_CHECKSUM_LEN];        
}EFT_VISA_KEY_PARTS;

typedef struct tag_EFT_FULL_CKS_KEY_PARTS
{
    BYTE    pbKeyPart1[3 * DES_BLOCK];                      
    BYTE    pbKeyPart1Checksum[DES_BLOCK];                  
    BYTE    pbKeyPart2[3 * DES_BLOCK];                      
    BYTE    pbKeyPart2Checksum[DES_BLOCK];                  
    BYTE    pbKeyPart3[3 * DES_BLOCK];                      
    BYTE    pbKeyPart3Checksum[DES_BLOCK];                  
    BYTE    pbMKCheckSum[DES_BLOCK];                        
}EFT_FULL_CKS_KEY_PARTS;

typedef struct tag_DN_CALC_ARPC_EMV_METHOD_1
{
    char    szIssuerMK[MAX_OBJ_ID_BIN_LEN]; 
    char    szPAN[MAX_PAN_LEN];             
    BYTE    pbSEQ[EFT_EMV_SDA_SEQ_LEN];     
    BYTE    pbARQC[DES_BLOCK];              
    BYTE    pbARC[EFT_EMV_ARC_LEN];         
    BYTE    pbNONCE[DES_BLOCK];             
    BYTE    bOP;                            
}DN_CALC_ARPC_EMV_METHOD_1;

typedef struct tag_DN_CALC_ARPC_EMV_METHOD_2
{
    char    szIssuerMK[MAX_OBJ_ID_BIN_LEN]; 
    char    szPAN[MAX_PAN_LEN];             
    BYTE    pbSEQ[EFT_EMV_SDA_SEQ_LEN];     
    BYTE    pbNONCE[DES_BLOCK];             
    BYTE    bOP;                            
    BYTE    pbARQC[DES_BLOCK];              
    BYTE    pbCSU[EFT_EMV_CSU_LEN];         
    DWORD   dwCSULen;                       
    BYTE    pbPAD[EFT_EMV_PAD_LEN];         
    DWORD   dwPADLen;                       
}DN_CALC_ARPC_EMV_METHOD_2;


typedef struct GEN_ECDH_X9_63_ {
    char szTargetKeyName[MAX_OBJ_ID_FQN_LEN]; 
    DWORD dwTargetKeyAlg; 
    DWORD dwTargetKeyAttributes; 
    DBLOB dbPubKey; 
    DBLOB dbKDFData; 
}GEN_ECDH_X9_63;



#ifdef _WIN32
    #pragma pack(pop)
#else
    #pragma pack()
#endif

/* Library exported functions */

#ifdef __cplusplus
  extern "C" {
#endif  /* __cplusplus */

/* Error codes */

int AAP_API DGetErrorString (
    int nErrorValue,
    char *szErrorCode,
    char *szErrorDesc
);
int AAP_API DInitialize(
    DWORD dwReserved
);




int AAP_API DSetLBList( DWORD dwParam,
                        void *pvList,
                        DWORD dwListCount,
                        DWORD dwReserved);

int AAP_API DGetLBList(DWORD dwParam,
                        void *pvList,
                        DWORD *pdwListCount,
                        DWORD dwReserved);


int AAP_API DOpenSession(
    HSESSIONCTX * phSession,
    DWORD dwParam,
    BYTE * pbData,
    DWORD dwDataLen,
    DWORD dwFlags
);

int AAP_API DSetSessionParam(
    HSESSIONCTX hSession,
    DWORD dwParam,
    BYTE * pbData,
    DWORD dwDataLen,
    DWORD dwFlags
);

int AAP_API DGetSessionParam(
    HSESSIONCTX hSession,
    DWORD dwParam,
    BYTE* pbData,
    DWORD* pdwDataLen,
    DWORD dwFlags
);

int AAP_API DCloseSession(
    HSESSIONCTX * phSession,
    DWORD dwFlags
);

int AAP_API DFinalize();

typedef int (AAP_API * funcListKeyCallback)(char *szKeyName, void *pParam, BOOL bFinal);

int AAP_API DListObjs(
    HSESSIONCTX hSession,               
    funcListKeyCallback fncallback,     
    void *pParam                       
);

int AAP_API DBackupData(
    HSESSIONCTX hSession,
    char * szBackupFile,
    char * szPin,
    int nDirection
);

int AAP_API DBackupObject(  HSESSIONCTX hSession,
                            DWORD dwOP,
                            char *szObjectId,
                            char *szPin,
                            BYTE *pbData,
                            DWORD *pdwDataLen,
                            DWORD dwReserved );

typedef int (AAP_API * funcLogEventCallback)(char *szEvent, void *pParam, BOOL bFinal);

int AAP_API DGetLogEvents(
    HSESSIONCTX hSession,
    funcLogEventCallback fncallback,
    void *pParam
);

int AAP_API DAdmOperation(
    HSESSIONCTX hSession,
    DWORD dwParam,
    BYTE * pbData,
    DWORD dwDataLen,
    DWORD dwFlags
);

int AAP_API DGetHSMTLSCert(char *szAddress,
                            int nPort,
                            DWORD dwOutFormat,
                            BYTE **ppbOutCert,
                            DWORD *pdwOutCertLen,
                            DWORD dwFlags);

typedef int (AAP_API * funcReadLocalFileCallback)(BYTE *pbData, DWORD * pdwDataLen, void *pParam, BOOL *pbFinal);

int AAP_API DWriteFile(
    HSESSIONCTX hSession,
    char * szFileId,
    DWORD dwFileSize,
    funcReadLocalFileCallback fncallback,
    void *pParam
);

typedef int (AAP_API * funcWriteLocalFileCallback)(BYTE *pbData, DWORD dwDataLen, void *pParam, BOOL bFinal);

int AAP_API DReadFile(
    HSESSIONCTX hSession,
    char * szFileId,
    funcWriteLocalFileCallback fncallback,
    void *pParam
);

int AAP_API DRemoveObj(
    HSESSIONCTX hSession,
    char *szObjId
);

int AAP_API DGetStatLog (
    HSESSIONCTX hSession,
    DWORD dwStart,
    DWORD dwOffset,
    DWORD *pdwLogSize,
    BYTE **ppbLog
);

int AAP_API DTruncateLog (
    HSESSIONCTX hSession
);

int AAP_API DFindHSM(   DWORD dwServiceType,
                        DWORD dwFilter,
                        void **ppvOutputData,
                        DWORD *pdwOutputDataLen,
                        DWORD dwFlags );

typedef int (AAP_API * funcListAKeysCallback)(void *pvToken, void *pParam, BOOL bFinal);


int AAP_API DManageAToken(  HSESSIONCTX hSession,
                            BYTE bOP,
                            DN_A_TOKEN_FULL *pstATokenFull,
                            funcListAKeysCallback fnCallBack,
                            void *pvCallbackParam,
                            DWORD dwParam);

#define DN_ATOKEN_CACHE_GET_COUNT (0)
#define DN_ATOKEN_CACHE_GC        (1)

int AAP_API DManageATokenCache(HSESSIONCTX hSession,
                               DWORD dwOP,
                               void *pOutData,
                               DWORD dwParam);


#define DN_LB_LIST  (1)

int AAP_API DSetLBList( DWORD dwParam,
                        void *pvList,
                        DWORD dwListCount,
                        DWORD dwReserved);

int AAP_API DGetLBList(DWORD dwParam,
                        void *pvList,
                        DWORD *pdwListCount,
                        DWORD dwReserved);


int DIPFilterOperation(    HSESSIONCTX hSession,
                        BYTE    bOP,
                        char *szUser,
                        char *szIP,
                        int (AAP_API * ListIpFilterCallback)( void *pInData, DWORD dwInDataLen, void *pParam, BOOL bFinal),
                        void *pParam,
                        DWORD *pdwStatus,
                        DWORD dwReserved );

int AAP_API DRenameObj(    HSESSIONCTX hSession,
                        char *szOldObjName,
                        char *szNewObjName,
                        DWORD dwFlags );

int AAP_API DUPackPush ( HSESSIONCTX hSession, DWORD dwPackSize,
                        BYTE *pbPack );

int AAP_API DUPackInfo ( DWORD dwPackSize, BYTE *pbPack,
                        DWORD *pdwUPackVersion, BYTE **ppbUPackDescr,
                        BYTE **ppbUPackSignature );

int AAP_API DGetObjInfo( const HSESSIONCTX hSession, const char *szObjId,
                            const int nAlgId, const BYTE *pbData,
                            DWORD *pdwDataLen);

int AAP_API DGenerateMapObj( const HSESSIONCTX hSession, const char *szMapId,
                                const char *szObj1Id, const int nObj1AlgId,
                                const char *szObj2Id, const int nObj2AlgId);

int AAP_API DRemoveMapObj( const HSESSIONCTX hSession, const char *szMapObjId );

int AAP_API DListUserSessions(    HSESSIONCTX hSession,
                                int (AAP_API * ListUserSessionsCallback)( DWORD dwStartTime, char *szInfo, void *pParam, BOOL bFinal),
                                void *pParam);

int AAP_API DListObjsFilter(    HSESSIONCTX hSession,
                                DWORD    dwFilterType,
                                void *pvFilter,
                                int (AAP_API * ListObjCallback)(void *pvIN, void *pParam, BOOL bFinal),
                                void *pParam );

int AAP_API DListLoadedModules(HSESSIONCTX hSession,
                            int (AAP_API * ListLoadedModulesCallback)(char *szModuleInfo,
                                                            void *pParam,
                                                            BOOL bFinal),
                             void *pParam);

int AAP_API DCreateUser(
    HSESSIONCTX hSession,
    struct USER_INFO userInfo
);

int AAP_API DRemoveUser(
    HSESSIONCTX hSession,
    char * szUserId
);

int AAP_API DSetUserParam(
    HSESSIONCTX hSession,
    DWORD dwParam,
    BYTE * pbData,
    DWORD dwDataLen,
    DWORD dwFlags
);

int AAP_API DGetUserParam(
    HSESSIONCTX hSession,
    DWORD dwParam,
    BYTE * pbData,
    DWORD * pdwDataLen,
    DWORD dwFlags
);

typedef int (AAP_API * funcListUsersCallback)(char *szUserName, void *pParam, BOOL bFinal);

int AAP_API DListUsers(
    HSESSIONCTX hSession,
    funcListUsersCallback fncallback,
    void *pParam
);

//OATH SA



int AAP_API DAssignToken(const HSESSIONCTX hSession,
                        const char * szUserId,
                        const DWORD dwParam,
                        BYTE * pbData,
                        const DWORD dwDataLen);

int AAP_API DUnassignToken(const HSESSIONCTX hSession,
                            const DWORD dwParam,
                            const char *szUserId);



int AAP_API DOATHResync(const HSESSIONCTX hSession,
                        char *szUser,
                        char *szOTP1,
                        char *szOTP2,
                        DWORD dwParam);


/* PKCS#11 */

int AAP_API DGeneratePkcs11Map(HSESSIONCTX hSession, char *szP11MapId,
                                BYTE bTemporary, DWORD dwBlobType,
                                DWORD dwFlags, BYTE * pbData,
                                DWORD dwDataLen);

int AAP_API DUpdatePkcs11Map(HSESSIONCTX hSession, char *szP11MapId,
                                DWORD dwBlobType, DWORD dwFlags,
                                DWORD dwUpdateMask, BYTE * pbData,
                                DWORD dwDataLen);

int AAP_API DGetPkcs11Map(HSESSIONCTX hSession, char *szP11MapId,
                          DWORD dwBlobType, DWORD dwFlags,
                          BYTE ** ppbData, DWORD * pdwDataLen);


int AAP_API DListPkcs11Maps(HSESSIONCTX hSession,
                            int (AAP_API * ListKeyCallback)(char *szKeyName,
                                                            void *pParam,
                                                            BOOL bFinal),
                            void *pParam);


#define MNG_OBJ_META_A_KEY_TYPE                 (1)
#define MNG_OBJ_META_A_CLASS                    (2)
#define MNG_OBJ_META_A_EXTRACTABLE              (3)
#define MNG_OBJ_META_A_SENSITIVE                (4)
#define MNG_OBJ_META_A_N_EXTRACTABLE            (5)
#define MNG_OBJ_META_A_LOCAL                    (6)
#define MNG_OBJ_META_A_CERT_TYPE                (7)
#define MNG_OBJ_META_A_RSA_MODULUS              (8)
#define MNG_OBJ_META_A_RSA_PUB_EXP              (9)
#define MNG_OBJ_META_A_PUB_KEY_INFO             (10)
#define MNG_OBJ_META_A_EC_PARAMS                (11)
#define MNG_OBJ_META_A_SUBJECT                  (12)
#define MNG_OBJ_META_A_ISSUER                   (13)
#define MNG_OBJ_META_A_SN                       (14)
#define MNG_OBJ_META_A_TOKEN                    (15)
#define MNG_OBJ_META_A_MODIFIABLE               (16)
#define MNG_OBJ_META_A_DERIVE                   (17)
#define MNG_OBJ_META_A_WRAP                     (18)
#define MNG_OBJ_META_A_UNWRAP                   (19)
#define MNG_OBJ_META_A_SIGN                     (20)
#define MNG_OBJ_META_A_VERIFY                   (21)
#define MNG_OBJ_META_A_ENCRYPT                  (22)
#define MNG_OBJ_META_A_DECRYPT                  (23)
#define MNG_OBJ_META_A_OBJ_ID                   (24)
#define MNG_OBJ_META_A_MODULUS_BITS             (25)
#define MNG_OBJ_META_A_PRIVATE                  (26)
#define MNG_OBJ_META_A_LABEL                    (27)
#define MNG_OBJ_META_A_ID                       (28)
#define MNG_OBJ_META_A_APPLICATION              (29)
#define MNG_OBJ_META_A_TRUSTED                  (30)
#define MNG_OBJ_META_A_JMIDP_SEC_DOMAIN         (31)
#define MNG_OBJ_META_A_CERT_CATEGORY            (32)
#define MNG_OBJ_META_A_KEY_GEN_MECHANISM        (33)
#define MNG_OBJ_META_A_WRAP_WITH_TRUSTED        (34)
#define MNG_OBJ_META_A_HSM_ASSOCIATE            (35)
#define MNG_OBJ_META_A_SIGN_RECOVER             (36)
#define MNG_OBJ_META_A_VERIFY_RECOVER           (37)

#define MNG_OBJ_META_A_HSM_OBJ_VERSION          (502)
#define MNG_OBJ_META_A_HSM_OBJ_TYPE             (503)
#define MNG_OBJ_META_A_HSM_OBJ_ATTR             (504)
#define MNG_OBJ_META_A_HSM_OBJ_LEN              (505)
#define MNG_OBJ_META_A_HSM_OBJ_ID               (506)
#define MNG_OBJ_META_A_HSM_OBJ_PVALUE           (507)




#define MNG_OBJ_META_READ_ONLY_ATTR(a)  (   (MNG_OBJ_META_A_KEY_TYPE == (a)) || \
                                            (MNG_OBJ_META_A_CLASS == (a)) || \
                                            (MNG_OBJ_META_A_EXTRACTABLE == (a)) || \
                                            (MNG_OBJ_META_A_SENSITIVE == (a)) || \
                                            (MNG_OBJ_META_A_N_EXTRACTABLE == (a)) || \
                                            (MNG_OBJ_META_A_LOCAL == (a)) || \
                                            (MNG_OBJ_META_A_CERT_TYPE == (a)) || \
                                            (MNG_OBJ_META_A_RSA_MODULUS == (a)) || \
                                            (MNG_OBJ_META_A_RSA_PUB_EXP == (a)) || \
                                            (MNG_OBJ_META_A_PUB_KEY_INFO == (a)) || \
                                            (MNG_OBJ_META_A_EC_PARAMS == (a)) || \
                                            (MNG_OBJ_META_A_ISSUER == (a)) || \
                                            (MNG_OBJ_META_A_SN == (a)) || \
                                            (MNG_OBJ_META_A_TOKEN == (a)) || \
                                            (MNG_OBJ_META_A_MODIFIABLE == (a)) || \
                                            (MNG_OBJ_META_A_MODULUS_BITS == (a)) || \
                                            (MNG_OBJ_META_A_PRIVATE == (a)) || \
                                            (MNG_OBJ_META_A_HSM_OBJ_VERSION == (a)) || \
                                            (MNG_OBJ_META_A_HSM_OBJ_TYPE == (a)) || \
                                            (MNG_OBJ_META_A_HSM_OBJ_ATTR == (a)) || \
                                            (MNG_OBJ_META_A_HSM_OBJ_LEN == (a)) || \
                                            (MNG_OBJ_META_A_HSM_OBJ_ID == (a)) || \
                                            (MNG_OBJ_META_A_HSM_OBJ_PVALUE == (a)) )


/* DManageObjMetadata */

#define MNG_OBJ_META_GET     (1)
#define MNG_OBJ_META_UPDATE  (3)
#define MNG_OBJ_META_DEL     (4)


int AAP_API DCreateObjMetadata( HOBJMETACTX *phOutMeta,
                                    DWORD dwParam );

int AAP_API DDestroyObjMetadata(    HOBJMETACTX *phMeta,
                                    DWORD dwParam );

int AAP_API DSetObjMetadata(    HOBJMETACTX hInMeta,
                                DWORD dwOption,
                                void *pvOptionData,
                                DWORD dwOptionDataLen,
                                DWORD dwParam );

int AAP_API DUnsetObjMetadata(  HOBJMETACTX hInMeta,
                                DWORD dwOption,
                                DWORD dwParam );

int AAP_API DGetObjMetadata(    HOBJMETACTX hInMeta,
                                DWORD dwOption,
                                void *pvOptionData,
                                DWORD *pdwOptionDataLen,
                                DWORD dwParam );

int AAP_API DSetObjMetadataJson(HOBJMETACTX hInMeta,
                                char *szData,
                                DWORD dwDataLen,
                                DWORD dwParam);

int AAP_API DGetObjMetadataJson(HOBJMETACTX hInMeta,
                                char *szData,
                                DWORD *pdwDataLen,
                                DWORD dwParam);

int AAP_API DManageObjMetadata( HSESSIONCTX hSession,
                                BYTE bOP,
                                char *szObjName,
                                HOBJMETACTX hInMeta,
                                HOBJMETACTX *phOutMeta,
                                DWORD dwParam );

int AAP_API DFindObjMetadataInit(   HSESSIONCTX hSession,
                                    HOBJMETACTX hInMeta,
                                    HOBJMETASEARCHCTX *phMetaSearchCtx,
                                    DWORD dwParam );

int AAP_API DFindObjMetadataCont(   HOBJMETASEARCHCTX hMetaSearchCtx,
                                    HOBJMETACTX *phOutMeta,
                                    DWORD dwOutMetaMaxCount,
                                    DWORD *pdwOutMetaDataCount,
                                    DWORD dwParam );

int AAP_API DFindObjMetadataEnd(    HOBJMETASEARCHCTX *phMetaSearchCtx,
                                    DWORD dwParam );

#define MNG_OBJ_META_TYPE_ULONG     (1)
#define MNG_OBJ_META_TYPE_STR       (2)
#define MNG_OBJ_META_TYPE_BOOL      (3)
#define MNG_OBJ_META_TYPE_INT_BOOL  (4)

typedef struct tag_OBJ_MET_ATTR
{
    DWORD       dwId;
    const char  *pszString;
    DWORD       dwType;
}OBJ_MET_ATTR;

int DGetObjMetadataTypeInfo(    DWORD dwOption,
                                void *pvData,
                                DWORD *pdwDataLen,
                                DWORD dwReserved );

const OBJ_MET_ATTR * DGetObjMetadataTypeInfoList(int *pnOutLen);


/* P11 HSM Info */

int AAP_API DGetHSMP11Info( HSESSIONCTX hSession,
                            HP11ATTRCTX *phOutMeta,
                            DWORD dwParam );

#define MNG_HSM_P11_INFO_SLOT_DESC                  (1)
#define MNG_HSM_P11_INFO_MANUFACTURER_ID            (2)
#define MNG_HSM_P11_INFO_SLOT_FLAGS                 (3)
#define MNG_HSM_P11_INFO_HDW_VERSION                (4)
#define MNG_HSM_P11_INFO_FMW_VERSION                (5)
#define MNG_HSM_P11_INFO_LABEL                      (6)
#define MNG_HSM_P11_INFO_MODEL                      (7)
#define MNG_HSM_P11_INFO_SERIAL_NUMBER              (8)
#define MNG_HSM_P11_INFO_TOKEN_FLAGS                (9)
#define MNG_HSM_P11_INFO_UTC_TIME                   (10)
#define MNG_HSM_P11_INFO_MAX_SESSION_COUNT          (11)
#define MNG_HSM_P11_INFO_SESSION_COUNT              (12)
#define MNG_HSM_P11_INFO_MAX_RW_SESS_COUNT          (13)
#define MNG_HSM_P11_INFO_RW_SESS_COUNT              (14)
#define MNG_HSM_P11_INFO_MAX_PIN_LEN                (15)
#define MNG_HSM_P11_INFO_MIN_PIN_LEN                (16)
#define MNG_HSM_P11_INFO_TOTAL_PUB_MEMORY           (17)
#define MNG_HSM_P11_INFO_FREE_PUB_MEMORY            (18)
#define MNG_HSM_P11_INFO_TOTAL_PRIV_MEMORY          (19)
#define MNG_HSM_P11_INFO_FREE_PRIV_MEMORY           (20)
#define MNG_HSM_P11_INFO_SVMK_FINGERPRINT           (21)

int AAP_API DGetHSMP11InfoAttr( HP11ATTRCTX hInMeta,
                                DWORD dwOption,
                                void *pvOptionData,
                                DWORD *pdwOptionDataLen,
                                DWORD dwParam );

int AAP_API DDestroyHSMP11Info( HP11ATTRCTX *phMeta,
                                DWORD dwParam );

const OBJ_MET_ATTR * DGetHSMP11TypeInfoList(int *pnOutLen);



/* Users */


int AAP_API DGetUserAcl ( HSESSIONCTX hSession, char *szUser,
                         DWORD *pdwUserAcl );

int AAP_API DListUserTrusts(HSESSIONCTX hSession, char *szUserId,
                            BYTE bType,
                            int (AAP_API * ListUserTrustCallback)(char *szUserName,
                                                                    DWORD dwACL,
                                                                    void *pParam,
                                                                    BOOL bFinal),
                            void *pParam);


/* Statistics */

int AAP_API DGetHsmInfo(HSESSIONCTX hSession, BOOL *pbFinal,
                        DWORD dwParam, BYTE * pbData,
                        DWORD* pdwDataLen, DWORD dwFlags);


/* Local operations */

int AAP_API DSetLogParam(HSESSIONCTX hSession, DWORD dwParam,
                         BYTE * pbData, DWORD dwDataLen,
                         DWORD dwFlags);

int AAP_API DGetLogParam(HSESSIONCTX hSession, DWORD dwParam,
                         BYTE * pbData, DWORD *pdwDataLen,
                         DWORD dwFlags);

int AAP_API DGetLibVersion(HSESSIONCTX hSession, char * szVersion,
                           DWORD *pdwVersionLen, DWORD dwFlags);


/* Key management */

int AAP_API DECParam2AlgId(BYTE *pbECParam, DWORD dwECParamLen,
                            int *pnAlgId, DWORD dwFlags);

int AAP_API DECPubKeyDER2AlgId(    BYTE *pbECPubKeyDER,
                                DWORD dwECPubKeyDERLen,
                                int *pnAlgId,
                                DWORD dwFlags );

int AAP_API DGenerateKey(
    HSESSIONCTX hSession,
    char *szKeyId,
    int nAlgId,
    DWORD dwFlags,
    HKEYCTX * phKey
);

int AAP_API DGenerateKeyMaterial(HSESSIONCTX hSession, 
                                 int nAlgId,
                                 BYTE *pbData,
                                 DWORD *pdwDataLen,
                                 DWORD dwReserved);

int AAP_API DGetUserKey(
    HSESSIONCTX hSession,
    char *szKeyId,
    DWORD dwFlags,
    HKEYCTX * phKey
);



#define D_IMPORT_ALG_PRIV_KEY_RSA  (0xFFFFFFE1)
#define D_IMPORT_ALG_PRIV_KEY_ECC  (0xFFFFFFE0) //Não implementado

int AAP_API DImportKey(
    HSESSIONCTX hSession,
    char *szKeyId,
    HKEYCTX hKEKey,
    DWORD dwBlobType,
    int nAlgId,
    DWORD dwFlags,
    BYTE * pbData,
    DWORD dwDataLen,
    HKEYCTX * phKey
);

int AAP_API DExportKey(
    HKEYCTX hKey,
    HKEYCTX hKEKey,
    DWORD dwBlobType,
    DWORD dwFlags,
    BYTE * pbData,
    DWORD * pdwDataLen
);

int AAP_API DPKCS8ImportKey(
    HSESSIONCTX hSession,
    char *szKeyId,
    char *szSecret,
    DWORD dwKeyAlg,
    DWORD dwAttrib,
    BYTE *pbKeyEnvelope,
    DWORD dwKeyEnvelopeLen
);

int AAP_API DPKCS8ExportKey(
    HSESSIONCTX hSession,
    char *szKeyId,
    char *szSecret,
    BYTE **ppbKeyEnvelope,
    DWORD *pdwKeyEnvelopeLen
);

int AAP_API DSetKeyParam(
    HKEYCTX hKey,
    DWORD dwParam,
    BYTE * pbData,
    DWORD dwDataLen,
    DWORD dwFlags
);

int AAP_API DGetKeyParam(
    HKEYCTX hKey,
    DWORD dwParam,
    BYTE * pbData,
    DWORD *pdwDataLen,
    DWORD dwFlags
);

int AAP_API DDeriveKey(
    HHASHCTX hHash,
    char * szKeyId,
    int nAlgId,
    DWORD dwFlags,
    HKEYCTX * phKey
);

int AAP_API DDuplicateKey(
    HKEYCTX hKey,
    DWORD dwFlags,
    HKEYCTX * phKey
);

int AAP_API DHashSessionKey(
    HKEYCTX hKey,
    HHASHCTX hHash,
    DWORD dwFlags
);

int AAP_API DDestroyKey(
    HKEYCTX * phKey,
    DWORD dwFlags
);


int AAP_API DAssociatePKCS11Key(HSESSIONCTX hSession,
                                char *szPriKey,
                                char *szPubKey,
                                char *szCert,
                                void *pvReserved,
                                DWORD dwReserved);

int AAP_API DExportPKCS12(  const HSESSIONCTX hSession,
                            const char *szPkcs12Pwd,
                            const char *szKeyId,
                            const char *szCertId,
                            const char *szReserved,
                            BYTE **ppbPkcs12,
                            DWORD *pdwPkcs12Len,
                            DWORD dwReserved);



int AAP_API DRemoveKey(HSESSIONCTX hSession, char *szKeyId);



int AAP_API DImportPKCS12( const HSESSIONCTX hSession, const char *szPkcs12File,
                          const char *szPkcs12Pwd, const char *szKeyId,
                          const DWORD dwKeyAttr, const char *szCertId);






int AAP_API DCert2CertInfo(    BYTE *pbCert,
                            DWORD dwCertLen,
                            DWORD dwOutType,
                            void *pvCertInfo,
                            DWORD dwFlags );

/* Symmetric/Asymmetric operations */

int AAP_API DEncrypt(
    HKEYCTX hKey,
    HHASHCTX hHash,
    BOOL bFinal,
    DWORD dwFlags,
    BYTE* pbData,
    DWORD* pdwDataLen,
    DWORD dwBufLen
);

int AAP_API DDecrypt(
    HKEYCTX hKey,
    HHASHCTX hHash,
    BOOL bFinal,
    DWORD dwFlags,
    BYTE* pbData,
    DWORD* pdwDataLen
);

int AAP_API DCreateHash(
    HSESSIONCTX hSession,
    int nAlgId,
    HKEYCTX hKey,
    DWORD dwFlags,
    HHASHCTX *hHash
);

int AAP_API DHashData(
    HHASHCTX hHash,
    BYTE* pbData,
    DWORD dwDataLen,
    DWORD dwFlags
);

int AAP_API DSetHashParam(
    HHASHCTX hHash,
    DWORD dwParam,
    BYTE * pbData,
    DWORD dwDataLen,
    DWORD dwFlags
);

int AAP_API DGetHashParam(
    HHASHCTX hHash,
    DWORD dwParam,
    BYTE* pbData,
    DWORD* pdwDataLen,
    DWORD dwFlags
);

int AAP_API DSignHash(
    HHASHCTX hHash,
    HKEYCTX hKey,
    DWORD dwFlags,
    BYTE* pbSignature,
    DWORD* pdwSigLen
);


int AAP_API DDestroyHash(
    HHASHCTX * phHash
);

int AAP_API DVerifySignature(
    HHASHCTX hHash,
    BYTE* pbSignature,
    DWORD dwSigLen,
    HKEYCTX hPubKey,
    DWORD dwFlags
);

int AAP_API DDuplicateHash(
    HHASHCTX  hHash,
    DWORD dwFlag,
    HHASHCTX * phHash
);

int AAP_API DGetRandom(
    HSESSIONCTX hSession,
    BYTE *pbData,
    DWORD dwDataLen
);

int AAP_API DGenEcdhKey(
    HSESSIONCTX hSession,
    DWORD dwOP,
    char *szPriKey,
    void *pvInData,
    DWORD dwInDataLen,
    BYTE *pbOutData,
    DWORD *pdwOutDataLen,
    DWORD dwFlags
);

int AAP_API DCRLCertCheck(  HSESSIONCTX hSession,
                            char *szCRL,
                            char *szCertId,
                            char *szVerifyInfo);

/* PIN - CVV */

int AAP_API DPINBlockTranslate (
    HSESSIONCTX hSession,
    char *szSrcPEK,
    char *szDstPEK,
    BYTE bTransBlockType,
    char *szPAN,
    BYTE *pbInPinBlock,
    BYTE *pbOutPinBlock,
    DWORD dwParam
);

int AAP_API DGenerateCVV (
    HSESSIONCTX hSession,
    char *szKeyId,
    char *szPAN,
    char *szExpirationDate,
    char *szServiceCode,
    char *szCVV,
    DWORD dwParam
);

int AAP_API DVerifyCVV (
    HSESSIONCTX hSession,
    char *szKeyId,
    char *szPAN,
    char *szExpirationDate,
    char *szServiceCode,
    char *szCVV,
    DWORD dwParam
);

int AAP_API DGeneratePIN (
    HSESSIONCTX hSession,
    char *szPGK,
    char *szPAN,
    DWORD dwOperation,
    int nPinLen,
    char *szInPin,
    char *szOffset,
    char *szOutPin,
    DWORD dwParam
);

int AAP_API DVerifyPINBlock (
    HSESSIONCTX hSession,
    char *szPTK,
    char *szPGK,
    char *szPAN,
    char *szOffset,
    BYTE *pbInPinBlock,
    DWORD dwParam
);

int AAP_API DEFTCheckKeyParts (
    int nKeyAlgId,
    EFT_VISA_KEY_PARTS *pstKeyParts,
    DWORD dwParam
);

int AAP_API DGenerateDUKPT (
    HSESSIONCTX hSession,
    BYTE *pbKSI,
    BYTE *pbDID_CTR,
    char *szDUKPT,
    DWORD dwParam
);

void AAP_API DGenerateBDKName (
    BYTE *pbKSI,
    char *szBDKName,
    DWORD dwParam
);

void AAP_API DGenerateDUKPTName (
    BYTE *pbKSI,
    BYTE *pbDID_CTR,
    char *szDUKPTName,
    DWORD dwParam
);

int AAP_API DGeneratePVV (
    HSESSIONCTX hSession,
    char *szPGK,
    BYTE bPVKI,
    char *szPAN,
    char *szPIN,
    char *szPVV,
    DWORD dwParam
);

/* EMV */
int AAP_API DGenerateDAC (
    HSESSIONCTX hSession,
    char *szIMKDAC,
    char *szPAN,
    BYTE *pbSEQ,
    BYTE *pbDAC,
    DWORD dwParam
);

int AAP_API DVerifyDAC (
    HSESSIONCTX hSession,
    char *szIMKDAC,
    char *szPAN,
    BYTE *pbSEQ,
    BYTE *pbDAC,
    DWORD dwParam
);

int AAP_API DSignSDA (
    HSESSIONCTX hSession,
    char *szIK,
    BYTE *pbDAC,
    DWORD dwSDA_DATALen,
    BYTE *pbSDA_DATA,
    DWORD *pdwSigLen,
    BYTE *pbSig,
    DWORD dwParam
);

int AAP_API DGenerateDDA_ICCCert (
    HSESSIONCTX hSession,
    BYTE bOP,
    char *szIK,
    char *szPAN,
    DWORD dwDDA_DATALen,
    BYTE *pbDDA_DATA,
    DWORD *pdwSigLen,
    BYTE *pbSig,
    DWORD dwParam
);

int AAP_API DGenerateICCMK (
    HSESSIONCTX hSession,
    BYTE bOP,
    char *szIK,
    char *szKeK,
    char *szPAN,
    BYTE *pbSEQ,
    DWORD *pdwEnvelopeLen,
    BYTE *pbEnvelope,
    DWORD dwParam
);

int AAP_API DGenerateEMV_HMAC (
    HSESSIONCTX hSession,
    BYTE bOP,
    char *szIK,
    char *szPAN,
    BYTE *pbSEQ,
    BYTE *pbNONCE,
    DWORD dwDataLen,
    BYTE *pbData,
    BYTE *pbMAC,
    DWORD dwParam
);

int AAP_API DGenerateEMV_MAC (
    HSESSIONCTX hSession,
    BYTE bOP,
    char *szIK,
    char *szPAN,
    BYTE *pbSEQ,
    BYTE *pbNONCE,
    DWORD dwDataLen,
    BYTE *pbData,
    BYTE *pbMAC,
    DWORD dwParam
);

int AAP_API DCheckIDN (
    HSESSIONCTX hSession,
    char *szIK,
    char *szPAN,
    BYTE *pbSEQ,
    BYTE *pbATC,
    BYTE *pbUN,
    BYTE *pbIDN,
    DWORD dwParam
);

int AAP_API DEncryptEMV (
    HSESSIONCTX hSession,
    BYTE bEncOP,
    char *szEncIK,
    BYTE *pbEncNONCE,
    BYTE bMacOP,
    char *szMacIK,
    BYTE *pbMacNONCE,
    char *szPAN,
    BYTE *pbSEQ,
    DWORD dwDataLen,
    BYTE *pbData,
    DWORD *pdwEncDataLen,
    BYTE *pbEncData,
    BYTE *pbMAC,
    DWORD dwParam
);

int AAP_API DGenerateEMV_CSR (
    HSESSIONCTX hSession,
    BYTE bOP,
    char *szIK,
    BYTE *pbTrackNum,
    BYTE *pbServiceID,
    BYTE *pbIssuerID,
    BYTE *pbExpDate,
    DWORD *pdwCSRLen,
    BYTE *pbCSR,
    DWORD dwParam
);

int AAP_API DGenerateEMV_CSREx (
    HSESSIONCTX hSession,
    BYTE bOP,
    char *szIK,
    BYTE *pbTrackNum,
    BYTE *pbServiceID,
    BYTE *pbIssuerID,
    BYTE *pbExpDate,
    DBLOB *pdbCSR,
    BYTE *pbHash,
    DWORD dwParam
);

int AAP_API DGenerateEMV_PinBlock (
    HSESSIONCTX hSession,
    BYTE bOP,
    BYTE *pbNONCE,
    char *szTransportKey,
    char *szISSUER_MK,
    char *szISSUER_SMC_MK,
    char *szPAN,
    BYTE *pbSEQ,
    BYTE *pbOLD_PB,
    BYTE *pbNEW_PB,
    BYTE *pbOutBlock,
    DWORD *pdwOutBlockLen,
    DWORD dwParam
);

int AAP_API DDeriveEMV_Key (
    HSESSIONCTX hSession,
    char *szSrcKey,
    WORD wBufferLen,
    BYTE *pbBuffer,
    BYTE bOP,
    DWORD dwAttrib,
    char *szDstKey,
    HKEYCTX *phKey,
    DWORD dwParam
);

int AAP_API DCalculateARPC (
    HSESSIONCTX hSession,
    char *szIssuerMK,
    char *szPAN,
    BYTE *pbSEQ,
    BYTE *pbARQC,
    BYTE *pbARC,
    BYTE *pbARPC,
    DWORD dwParam
);


#define DN_CALC_ARPC_EMV_4_2_M1_ICC     (1)
#define DN_CALC_ARPC_EMV_4_2_M1_SK      (2)
#define DN_CALC_ARPC_EMV_4_2_M2         (3)

int AAP_API DCalculateARPC_Ex ( HSESSIONCTX hSession,
                                DWORD dwOp,
                                void *pvInData,
                                BYTE *pbARPC,
                                DWORD dwParam );

int AAP_API DMAC_ISO9797_1_Met2(
    DWORD dwType,
    BYTE *pbKey,
    DWORD dwAlg,
    const BYTE *pbMsg,
    DWORD dwMsgLen,
    BYTE *pbMAC
);

int AAP_API DEFTImportKey(    HSESSIONCTX hSession, char *szKeyId,
                            int nKeyAlgId, EFT_VISA_KEY_PARTS *pstKeyParts,
                            DWORD dwParam);


int AAP_API DEFTExportKey(    HSESSIONCTX hSession, BYTE bExportMode,
                            char *szKEKId, char *szKeyId,
                            BYTE *pbEncryptedBlock, DWORD *pdwEncryptedBlockLen,
                            BYTE *pbKeyCheckValue, DWORD dwParam);

int AAP_API DEFTKeKImport(    HSESSIONCTX hSession, BYTE bOP, DWORD dwAlgId,
                            char *szKeKName, char *szKeyName, DWORD dwAttr,
                            BYTE *pbKCV1, BYTE *pbKCV2, BYTE *pbKCV3,
                            BYTE *pbKCVFinal, BYTE *pbBlob, DWORD dwFlags );

/* DEFTExportZPK */

#define DN_EXP_ZPK_FLAG_FULL_CKS        (1)

int AAP_API DEFTExportZPK(    HSESSIONCTX hSession, char *szKeyId,
                            int *pnKeyAlg, int *pnKeySize,
                            EFT_VISA_KEY_PARTS *pstKeyParts, DWORD dwParam);

/* Digital signature */

int AAP_API DPowerSignHash ( HSESSIONCTX hSession, char *szKeyId,
                            int nHashAlgId, DWORD dwDataLen,
                            BYTE *pbDataBuffer, DWORD *pdwSignLen,
                            BYTE **ppbSignData );


int AAP_API DPKCS7Sign (
    HSESSIONCTX hSession,
    char *szKeyName,
    char *szKeyCert,
    char *szCerts,
    DWORD dwAttrib,
    BYTE *pbContent,
    DWORD dwContentLen,
    DWORD *pdwSignatureLen,
    BYTE **ppbSignature,
    DWORD dwParam
);

/* (CNS) Social Connectivity */
int AAP_API DGenerateCNSCert (    HSESSIONCTX hSession,
                                char *szKeyID, char *szUsrID, char *szUsrName,
                                WORD wModulusLen, BYTE *pbModulus,
                                BYTE bExponentLen, BYTE *pbExponent,
                                DWORD *pdwCertLen, BYTE *pbCert, DWORD dwParam );

/* Hash */
int AAP_API DSignHashedData(    HKEYCTX hKey, BYTE *pbData, DWORD dwDataLen,
                                int nHashId, DWORD dwFlags, BYTE* pbSignature,
                                DWORD* pdwSigLen );

BOOL DDoRSAPadding( HSESSIONCTX hSession,
                    DWORD dwPadding,
                    BYTE*pbBlock,
                    BYTE *pbData,
                    DWORD* pdwDataLen,
                    DWORD dwBlockSize,
                    DWORD dwFlag );

int AAP_API DBatchSign( HKEYCTX hKey,
                        BYTE *pbBlock,
                        DWORD dwBlockCount,
                        DWORD dwFlags );

/* Base64 */

char * AAP_API DByteArray2Base64(   BYTE *pbData,
                                    DWORD dwDataLen,
                                    char *szBase64,
                                    DWORD *pdwBase64Len,
                                    BOOL bNoNewLines );

BYTE * AAP_API DBase642ByteArray(   char *szBase64,
                                    DWORD dwBase64Len,
                                    BYTE *pbData,
                                    DWORD *pdwDataLen);


int AAP_API DSignXml(
    HKEYCTX hKey,
    HHASHCTX hHash,
    char *szCertId,
    DWORD dwSizeUnsignedXml,
    BYTE *pbUnsignedXml,
    DWORD dwFilterLen,
    BYTE *pbFilter,
    DWORD *pdwSizeSignedXml,
    BYTE **ppbSignedXml
);

int AAP_API DVerifySignedXml ( HSESSIONCTX hSession, char *szCertsId,
                              DWORD dwSizeSignedXml, BYTE *pbSignedXml,
                              DWORD dwFilterLen, BYTE *pbFilter);

int AAP_API DVerifySignedXmlEx (
    HSESSIONCTX hSession,
    char *szCertsId,
    DWORD dwSizeSignedXml,
    BYTE *pbSignedXml,
    DWORD dwFilterLen,
    BYTE *pbFilter,
    char *szCRL
);

/* Library version */

int AAP_API DVersion ( DWORD dwType, DWORD *pdwMajor,
                      DWORD *pdwMinor, DWORD *pdwRevision,
                      DWORD *pdwBuild );

void * AAP_API DAlloc (
    DWORD dwsize
);

void AAP_API DFree (
    void *p
);

//Free and clean CERT_X509_INFO structure members
void AAP_API DCleanCERT_X509_INFO ( CERT_X509_INFO *pstCert );


/* Logs and monitoring */

int AAP_API DLogLineFormat ( char *szIn, char *szOut );

int AAP_API DGetStatLogSize (
    HSESSIONCTX hSession,
    DWORD *pdwLogLen
);

int AAP_API DGetHSMLogInit (    HSESSIONCTX hSession,
                                DWORD dwStart,
                                DWORD dwOffset,
                                HLOGCTX *phLogCtx,
                                DWORD dwParam );

int AAP_API DGetHSMLogCont (    HLOGCTX hLogCtx,
                                BYTE *pbLog,
                                DWORD *pdwLogSize );

int AAP_API DGetHSMLogEnd (    HLOGCTX *phLogCtx );


int AAP_API DGetStatInfo ( HSESSIONCTX hSession, DWORD *pdwSessions,
                          DWORD *pdwCPU, DWORD *pdwUnit,
                          DWORD *pdwMemTotal, DWORD *pdwMemUsed,
                          DWORD *pdwSwapTotal, DWORD *pdwSwapUsed );

int AAP_API DGetNetInfo ( HSESSIONCTX hSession, BYTE **ppbNetInfo, DWORD *pdwNetInfoCount, DWORD dwFlags );


/* Digital certificate */



int AAP_API DGeneratePKCS10CSR (    HSESSIONCTX hSession, char *szKeyName,
                                    BYTE bVersion, char *szDN, DWORD dwOutType,
                                    DWORD *pdwCSRLen, BYTE **ppbCSR, DWORD dwParam );

int AAP_API DCertEncodingConvert (    BYTE *pbCert,
                                    DWORD dwCertLen,
                                    DWORD dwOutFormat,
                                    BYTE **ppbOutCert,
                                    DWORD *pdwOutCertLen,
                                    DWORD dwReserved );


int AAP_API DECPrivateKey2Info( BYTE *pbEC,
                                DWORD dwECLen,
                                DWORD dwInForm,
                                void *pvPrivKeyInfo,
                                DWORD dwOutForm,
                                DWORD dwReserved );


int AAP_API DECPublicKey2Info(  BYTE *pbEC,
                                DWORD dwECLen,
                                DWORD dwInForm,
                                void *pvPubKeyInfo,
                                DWORD dwOutForm,
                                DWORD dwReserved );

int AAP_API DOATHIssueBlob(
    HSESSIONCTX hSession,
    char *szMasterKeyId,
    DWORD dwParamBlobType,
    void *pvParamBlob,
    DWORD dwParamBlobLen,
    BYTE *pbOTPBlob,
    DWORD *pdwOTPBlobLen,
    DWORD dwFlags
);

int AAP_API DOATHCheckOTP(
    HSESSIONCTX hSession,
    char *szMasterKeyId,
    char *szOTP,
    BYTE *pbOATHBlob,
    DWORD *pdwOATHBlobLen,
    DWORD dwFlags
);

int AAP_API DOATHGetNextOTP(
    HSESSIONCTX hSession,
    char *szMasterKeyId,
    BYTE bOTPLen,
    BYTE *pbOATHBlob,
    DWORD dwOATHBlobLen,
    char *szOTP,
    DWORD dwFlags
);

int AAP_API DOATHGetBlobInfo(
    const HSESSIONCTX hSession,
    char *szMasterKey,
    BYTE *pbInBlob,
    DWORD dwInBlobLen,
    DWORD dwOutBlobType,
    BYTE *pbOutInfo,
    DWORD *pdwOutInfoLen,
    DWORD dwParam
);

int AAP_API DOATHBlobResync(
    HSESSIONCTX hSession,
    char *szMasterKeyId,
    char *szOTP1,
    char *szOTP2,
    BYTE *pbOATHBlob,
    DWORD *pdwOATHBlobLen,
    DWORD dwFlags
);

int AAP_API DOATHPskcTranslate(
    HSESSIONCTX hSession,
    char *szMasterKey,
    BYTE *pbPSK,
    BYTE bPSKLen,
    BYTE *pbPSKC,
    DWORD dwPSKCLen,
    void **pvBlobList,
    DWORD *pdwBlobListQuantity,
    DWORD dwParam
);

//DOATHIssueHOTPBlob is DEPRECATED. Use DOATHIssueBlob instead.
int AAP_API DOATHIssueHOTPBlob(
    HSESSIONCTX hSession,
    char *szMasterKeyId,
    DWORD dwParamBlobType,
    void *pvParamBlob,
    DWORD dwParamBlobLen,
    BYTE *pbOTPBlob,
    DWORD *pdwOTPBlobLen,
    DWORD dwFlags
);

//DOATHCheckHOTP is DEPRECATED. Use DOATHCheckOTP instead.
int AAP_API DOATHCheckHOTP( HSESSIONCTX hSession,
                            char *szMasterKeyId,
                            char *szOTP,
                            BYTE *pbOATHBlob,
                            DWORD *pdwOATHBlobLen,
                            DWORD dwFlags );

//Users
void AAP_API DGenerateHOTPOffline(BYTE *pbSecret,
                                    DWORD dwSecretLen,
                                    ND_OATH_uint64_t nuiMovingFactor,
                                    int nCodeDigits,
                                    BOOL bAddChecksum,
                                    int nTruncOff,
                                    char *szResult);


int AAP_API DSPBEncodeInit (
    HSESSIONCTX hSession,
    char *szSrcISPB,
    char *szDstISPB,
    DWORD dwTotalDataLen,
    BYTE bErrorCode,
    BYTE bSpecialTreatment,
    HSPBCTX *hSPBCtx,
    DWORD dwFlags
);

int AAP_API DSPBEncodeCont (
    HSPBCTX hSPBCtx,
    BYTE *pbDataIn,
    DWORD dwDataInLen,
    BYTE *pbDataOut,
    DWORD *pdwDataOutLen
);

int AAP_API DSPBEncodeEnd (
    HSPBCTX *hSPBCtx,
    BYTE *pbSPBHeader,
    DWORD *pdwSPBHeaderLen
);

int AAP_API DSPBDecodeInit (
    HSESSIONCTX hSession,
    char *szSrcISPB,
    char *szDstISPB,
    BYTE *pbHeader,
    DWORD dwHeaderLen,
    BYTE bAcceptExpiredCert,
    BYTE bAutoUpdateCert,
    DWORD dwMessageDataLen,
    HSPBCTX *hSPBCtx,
    DWORD dwFlags
);

int AAP_API DSPBDecodeCont (
    HSPBCTX hSPBCtx,
    BYTE *pbDataIn,
    DWORD dwDataInLen,
    BYTE **ppbDataOut,
    DWORD *pdwDataOutLen
);

int AAP_API DSPBDecodeEnd(
  HSPBCTX *hSPBCtx
);

int AAP_API DSPBGenerateKey (
    HSESSIONCTX hSession,
    char *szID,
    char *szPrivateKeyName,
    DWORD dwKeyParam,
    DWORD dwParam
);

int AAP_API DSPBGenerateCSR(
    HSESSIONCTX hSession,
    char *szPrivateKeyName,
    BYTE bVersion,
    char *szSPBSubject,
    DWORD dwOutType,
    DWORD *pdwCSRLen,
    BYTE **ppbCSR,
    DWORD dwParam
);

int AAP_API DSPBImportCertificate(
    HSESSIONCTX hSession,
    BYTE bActivate,
    char *szUser,
    BYTE *pbCertificate,
    DWORD dwCertificateLen,
    char *szDomain,
    DWORD dwParam
);

int AAP_API DSPBImportPKCS12(   HSESSIONCTX hSession,
                                BYTE bActivate,
                                char *szUser,
                                char *szPkcs12File,
                                char *szPkcs12Pwd,
                                char *szDomain,
                                DWORD dwKeyAttr);

int AAP_API DSPBExportPKCS12(   const HSESSIONCTX hSession,
                                const char *szPkcs12Pwd,
                                const char *szISPB,
                                const char *szReserved,
                                BYTE **ppbPkcs12,
                                DWORD *pdwPkcs12Len,
                                DWORD dwReserved);

int AAP_API DSPBActivateCertificate (
    HSESSIONCTX hSession,
    char *szIdCert,
    char *szDomain,
    DWORD dwParam
);

int AAP_API DSPBGetCertificate (
    HSESSIONCTX hSession,
    char *szIdCert,
    BYTE **ppbCertificate,
    DWORD *pdwCertificateLen,
    DWORD dwParam
);

int AAP_API DSPBCalculateObjectId (
    char *szISPB,
    char *szDomain,
    DWORD dwKeyType,
    char *szOutObjName,
    DWORD dwParam
);

int AAP_API DSPBMapInfo (
    HSESSIONCTX hSession,
    char *szIdCert,
    EXT_MAP_2_OBJ_INFO *pstExtMap,
    DWORD dwParam
);

int AAP_API DSPBSetISPBMap (
    HSESSIONCTX hSession,
    char *szISPB,
    char *szKeyId,
    char *szCertId,
    DWORD dwParam
);

/* Esta API pertence ao grupo SPB, mas precisa da documentacao*/
int AAP_API DSPBGetCertificateList (
    HSESSIONCTX hSession,
    char *szDomain,
    BOOL bActive,
    DBLOB **pdbList,
    DWORD *pdwListLen,
    DWORD dwParam
);

#ifdef __cplusplus
  }
#endif

#endif /* #ifndef NETDFENCE_H_INCLUDED */