mirror of
https://github.com/dsprenkels/sss.git
synced 2026-01-08 21:27:54 -05:00
5ad67a192b
This change is introduced, because this makes it a lot easier to expose the API the other languages that do not support C structs. This is a break in the API contract for the `hazmat.h` module. No API changes have been introduced in the `sss.c` module so all current language bindings should be okay.
71 lines
1.7 KiB
C
71 lines
1.7 KiB
C
/*
|
|
* Intermediate level API for Daan Sprenkels' Shamir secret sharing library
|
|
* Copyright (c) 2017 Daan Sprenkels <hello@dsprenkels.com>
|
|
*/
|
|
|
|
|
|
#ifndef sss_SSS_H_
|
|
#define sss_SSS_H_
|
|
|
|
#include "hazmat.h"
|
|
#include "tweetnacl.h"
|
|
#include <inttypes.h>
|
|
|
|
|
|
#ifndef sss_MLEN
|
|
/*
|
|
Length of the message (must be known at compile-time)
|
|
*/
|
|
#define sss_MLEN sizeof(uint8_t[64])
|
|
#endif
|
|
|
|
|
|
/*
|
|
* Length of the ciphertext, including the message authentication code
|
|
*/
|
|
#define sss_CLEN (sss_MLEN + 16)
|
|
|
|
|
|
/*
|
|
* Length of a SSS share
|
|
*/
|
|
#define sss_SHARE_LEN (sss_CLEN + sss_KEYSHARE_LEN)
|
|
|
|
|
|
/*
|
|
* One share of a secret which is shared using Shamir's
|
|
* the `sss_create_shares` function.
|
|
*/
|
|
typedef uint8_t sss_Share[sss_SHARE_LEN];
|
|
|
|
|
|
/*
|
|
* Create `n` shares of the secret data `data`. Share such that `k` or more
|
|
* shares will be able to restore the secret.
|
|
*
|
|
* This function will put the resulting shares in the array pointed to by
|
|
* `out`. The caller has to guarantee that this array will fit at least `n`
|
|
* instances of `sss_Share`.
|
|
*/
|
|
void sss_create_shares(sss_Share *out,
|
|
const uint8_t *data,
|
|
uint8_t n,
|
|
uint8_t k);
|
|
|
|
|
|
/*
|
|
* Combine the `k` shares pointed to by `shares` and put the resulting secret
|
|
* data in `data`. The caller has to ensure that the `data` array will fit
|
|
* at least `sss_MLEN` (default: 64) bytes.
|
|
*
|
|
* On success, this function will return 0. If combining the secret fails,
|
|
* this function will return a nonzero return code. On failure, the value
|
|
* in `data` may have been altered, but must still be considered secret.
|
|
*/
|
|
int sss_combine_shares(uint8_t *data,
|
|
const sss_Share *shares,
|
|
uint8_t k);
|
|
|
|
|
|
#endif /* sss_SSS_H_ */
|