New configurations specific to SGX technology. You may see the configurations for the project by clicking to the down arrow of button 
usually found at the top of the Eclipse window:
New configurations specific to Intel(R) SGX technology. You may see the configurations for the project by clicking to the down arrow of button usually found at the top of the Eclipse window:
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/1_81_2types_8h.html b/external/epid-sdk-3.0.0/doc/html/1_81_2types_8h.html
new file mode 100644
index 00000000..c5d3fb23
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/1_81_2types_8h.html
@@ -0,0 +1,151 @@
+
+
+
+
+
+
+
+
+
+
+
+
+file_parser.h File Reference
+
+
+
+
+
+
+
+
+Epid 1.1 issuer material parsing utilities. +More...
+#include <stddef.h>+
#include "epid/common/1.1/types.h"+
#include "epid/common/errors.h"+
#include "epid/common/file_parser.h"+
+Functions | |
| EpidStatus | Epid11ParseGroupPubKeyFile (void const *buf, size_t len, EpidCaCertificate const *cert, Epid11GroupPubKey *pubkey) |
| Extracts group public key from buffer in issuer binary format. More... | |
| EpidStatus | Epid11ParsePrivRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, Epid11PrivRl *rl, size_t *rl_len) |
| Extracts private key revocation list from buffer in issuer binary format. More... | |
| EpidStatus | Epid11ParseSigRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, Epid11SigRl *rl, size_t *rl_len) |
| Extracts signature revocation list from buffer in issuer binary format. More... | |
| EpidStatus | Epid11ParseGroupRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, Epid11GroupRl *rl, size_t *rl_len) |
| Extracts group revocation list from buffer in issuer binary format. More... | |
Detailed Description
+Epid 1.1 issuer material parsing utilities.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/Basenames.html b/external/epid-sdk-3.0.0/doc/html/Basenames.html
new file mode 100644
index 00000000..91d749da
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/Basenames.html
@@ -0,0 +1,93 @@
+
+
+
+
+
+
+
+
+
+
+
+
+types.h File Reference
+
+
+
+
+
+SDK data types for Intel(R) EPID 1.1. +More...
++Data Structures | |
| struct | OctStr80 |
| 80 bit octet string More... | |
| struct | OctStr600 |
| 600 bit octet string More... | |
| struct | OctStr768 |
| 768 bit octet string More... | |
| struct | Fq3ElemStr |
| Serialized Fq3 element. More... | |
| struct | Epid11G2ElemStr |
| Serialized Intel(R) EPID 1.1 G2 element. More... | |
| struct | Epid11GtElemStr |
| Serialized Intel(R) EPID 1.1 GT element. More... | |
| struct | Epid11Params |
| Intel(R) EPID 1.1 Parameters. More... | |
| struct | Epid11GroupPubKey |
| Intel(R) EPID 1.1 group public key. More... | |
| struct | Epid11BasicSignature |
| Intel(R) EPID 1.1 basic signature. More... | |
| struct | Epid11NrProof |
| Intel(R) EPID 1.1 non-revoked Proof. More... | |
| struct | Epid11Signature |
| Intel(R) EPID 1.1 Signature. More... | |
| struct | Epid11PrivRl |
| Intel(R) EPID 1.1 private-key based revocation list. More... | |
| struct | Epid11SigRlEntry |
| Intel(R) EPID 1.1 entry in SigRL (B,K) More... | |
| struct | Epid11SigRl |
| Intel(R) EPID 1.1 signature based revocation list. More... | |
| struct | Epid11GroupRl |
| Intel(R) EPID 1.1 group revocation list. More... | |
+Typedefs | |
| +typedef G1ElemStr | Epid11G1ElemStr |
| Serialized Intel(R) EPID 1.1 G1 element. | |
| +typedef G1ElemStr | Epid11G3ElemStr |
| Serialized Intel(R) EPID 1.1 G3 element. | |
| +typedef OctStr32 | Epid11GroupId |
| Intel(R) EPID 1.1 group ID. | |
Detailed Description
+SDK data types for Intel(R) EPID 1.1.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/BuildToolsInstallation.html b/external/epid-sdk-3.0.0/doc/html/BuildToolsInstallation.html
new file mode 100644
index 00000000..aa4a4772
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/BuildToolsInstallation.html
@@ -0,0 +1,128 @@
+
+
+
+
+
+
+
+
+
+
+
+In-Depth Explanation of Basenames
+
+This in-depth explanation covers the use of basenames in the Intel® EPID scheme. It provides detail on name based signatures, random base signatures and how and when they are used.
+
+
+Random Base Signatures
+By default, members sign using a random basename that is not shared with the verifier. This signing method is also referred to as signing using random base. Signing using random base provides the strongest privacy properties for the signer. If a member signs using random base, the signature generated by the member is anonymous.
+When the signer and verifier agree to use random base, the basename is chosen at random for each signature. Two signatures using a random base cannot be linked to the same signer.
++Name Based Signatures
+A name based signature is a type of signature that gives the verifier the ability to link Intel® EPID signatures from the same member, reducing the member's privacy. When using name based signatures, the signer and verifier agree on an explicit basename.
+The verifier can ask the member to sign a message with a basename that the verifier chooses. If the member agrees to use a name based signature, then all the signatures created by the member using the same basename are linkable by the verifier, reducing the member's privacy.
+Reasons why a verifier might require members to use a basename when signing include the following:
+-
+
- Profiling for Advertising Widget-Mart wants to show targeted advertising to privacy-conscious customers. Widget-Mart requests that all customers use a specific basename so that Widget-Mart can build an individualized profile for each anonymous user, while Intel® EPID technology ensures that the retailer does not have the ability to aggregate that information with other retailers to build a more extensive profile of the consumer. +
- Voting A voting machine is designed so that each anonymous authorized voter can only vote once per race. A basename per office being contested allows the verifier to confirm that the voter has not already voted for that office, without revealing their identity or correlating their voting patterns across multiple races. +
- Warning
- The use of a name-based signature creates a platform unique pseudonymous identifier. Because it reduces the member's privacy, the user should be notified when it is used and should have control over its use.
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/BuildingSdk.html b/external/epid-sdk-3.0.0/doc/html/BuildingSdk.html
new file mode 100644
index 00000000..fcb2c1ec
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/BuildingSdk.html
@@ -0,0 +1,179 @@
+
+
+
+
+
+
+
+
+
+
+
+Guide to Installing Build Tools
+
+
+
+
+Table of Contents
+ +Building SDK code out of the box requires a number of tools. This section explains how to install the following tools:
+| Prerequisite | Download Link |
|---|---|
| Python | python 2.7.12 installers |
| SCons | scons-2.4.1.zip |
| Parts | parts-0.11.0.zip |
+
+Installing Python
+-
+
- Download and install Python according to the installation procedure for your platform. +
- Make sure that the Python directory and the Python scripts directory are in the path. +
To verify that Python installed correctly, run:
> python --version +
+
+Installing SCons
+After Python is installed, install SCons.
+-
+
- Download and extract the files from the SCons archive. +
- To install SCons, go to the directory with the extracted files and run:
> python setup.py install +
+
- Note
- You may need administrative privileges to execute this command.
+ To verify that SCons installed correctly, run:
> scons --version +
+
+Installing Parts
+After SCons is installed, install Parts.
+-
+
- Download and extract the files from the Parts archive. +
- To install Parts, go to the directory with the extracted files and run:
> python setup.py install +
+
- Note
- You may need administrative privileges to execute this command.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/ChangeLog.html b/external/epid-sdk-3.0.0/doc/html/ChangeLog.html
new file mode 100644
index 00000000..0e48d4f7
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/ChangeLog.html
@@ -0,0 +1,134 @@
+
+
+
+
+
+
+
+
+
+
+
+Building from Source
+
+
+
+
+
+
+
+
+Table of Contents
+ +To use the SDK in a project, the code from the SDK must be included in that project. The easiest way to do this is to link to static libraries. The SDK comes with build scripts to build static libraries for common environments.
++Prerequisites
+Building SDK code out of the box requires a number of tools. This section lists the tools used to build the SDK.
+For more information on how to install these tools, refer to Guide to Installing Build Tools.
+| Prerequisite | Notes |
|---|---|
| A C/C++ compiler | Core code in C. Unit tests need C++11 support. |
| Python | Validated with v2.7.10 |
| SCons | Validated with v2.4.1 |
| Parts | 0.10.9.2 or later |
+Building SDK with SCons
+To use the SDK, you need to build it to generate libraries compatible with your build environment.
+To build based on the default SConstruct file in the root directory of the SDK, invoke scons with no arguments.
cd <path/to/sdk-root> +scons +
By default, this performs a 64 bit release build.
+Potentially useful command line options:
+| Option | Action |
|---|---|
--cfg=debug | Build in debug mode |
--cfg=release | Build in release mode |
--target=x86 | Target x86 |
--target=x86_64 | Target x86_64 |
--tc=cl | Use MSVC to compile (Microsoft®* C/C++ Optimizing Compiler) |
--tc=gcc | Use GCC to compile (GNU* Compiler Collection) |
--tc=icl,mstools | Use Intel® C++ compiler |
build:: | Build the SDK (does not build unit tests) |
utest:: | Build unit tests |
run_utest:: | Run unit tests (builds tests if needed) |
-c | Clean the build |
Built components appear in the _install directory of the SDK root.
+Alternate Makefile/Autoconf Based Build Approach
+You can build with the make command on platforms that support Make/Autoconf.
In the root directory of the SDK, run:
./configure +make all +make check +make install +
./configure sets up the default settings:
-
+
- The default compilers are GCC/G++. You can specify compilers via the CC and CXX variables. For example,
./configure CC=/opt/intel/bin/icc CXX=/opt/intel/bin/icpc
+ - The default installation directory is
./_install. You can specify the installation directory by using./configure --prefix=/usr/local/epid_install
+ - To change OS bit version, use CFLAGS parameter
-m32and-m64. For example,./configure CFLAGS=-m32
+
make check is optional. It builds and runs the unit tests.
Alternatively, you can use make build as a shortcut to replace make all, make check, and make install.
To clean the build, run make clean.
To remove the install directory, run make uninstall.
+Improving Performance with Commercial IPP
+For higher performance, you can use the commercial version of Cryptography for Intel® Integrated Performance Primitives, available at https://software.intel.com/articles/download-ipp-cryptography-libraries.
+- Note
- The SDK has been validated with v9.0.3 of the cryptography library.
To build the SDK using a commercial Intel® IPP installation, the IPPROOT environment variable must be properly configured to point to the IPP installation directory, as described in Setting Environment Variables* in the Intel® IPP User's Guide (PDF link).
Once the environment is configured, you can build using commercial IPP by specifying --use-commercial-ipp as a command line option.
+Example Programs
+The SDK includes several examples that show you different aspects of how the Intel® EPID scheme works. In the SDK build, these examples are located in _install/epid-sdk/example.
| Name | Description |
|---|---|
signmsg | Create Intel® EPID signature of message |
verifysig | Verify signature is from a group member in good standing |
+Building with Other Build Systems
+It is relatively straightforward to port the SDK to your build system of choice. The following dependency diagram shows the relationship between components and the sources used to build them.
+
+
+
+
+
+
Other names and brands may be claimed as the property of others.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/ChoosingiKGF.html b/external/epid-sdk-3.0.0/doc/html/ChoosingiKGF.html
new file mode 100644
index 00000000..42c9de9a
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/ChoosingiKGF.html
@@ -0,0 +1,231 @@
+
+
+
+
+
+
+
+
+
+
+
+What's New
+
+[3.0.0]
+New in This Release
+-
+
- Support for verification of EPID 1.1 members. +
- Make-based build system support. +
- Sample material includes compressed keys. +
- Enhanced documentation, including step-by-step walkthroughs of example applications. +
- Validated on additional IoT platforms.
-
+
- Ostro Linux +
- Snappy Ubuntu Core +
+
Changes
+-
+
- A new verifier API has been added to set the basename to be used for verification. Verifier APIs that used to accept basenames now use the basename set via EpidVerifierSetBasename. +
- The verifier pre-computation structure has been changed to include the group ID to allow detection of errors that result from providing a pre-computation blob from a different group to EpidVerifierCreate. +
Fixes
+-
+
- The kEpidxxxRevoked enums have been renamed to be consistent with other result return values. +
Known Issues
+-
+
- SHA-512/256 hash algorithm is not supported. +
[2.0.0] - 2016-07-20
+New in This Release
+-
+
- Signed binary issuer material support.
-
+
- Binary issuer material validation APIs. +
- Updated sample issuer material. +
- Updated samples that parse signed binary issuer material. +
+ - Compressed member private key support. +
- Validated on additional IoT platforms.
-
+
- Windows 10 IoT Core +
- WindRiver IDP +
+
Changes
+-
+
- The default hash algorithm has changed. It is now SHA-512. +
- Functions that returned
EpidNullPtrErrnow returnEpidBadArgErrinstead.
+
Fixes
+-
+
- Updated build flags to work around GCC 4.8.5 defect. +
[1.0.0] - 2016-03-03
+New in This Release
+-
+
- Basic sign and verify functionality +
- Dynamic join support for member +
- Apache 2.0 License +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/EpidOverview.html b/external/epid-sdk-3.0.0/doc/html/EpidOverview.html
new file mode 100644
index 00000000..f7209054
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/EpidOverview.html
@@ -0,0 +1,173 @@
+
+
+
+
+
+
+
+
+
+
+
+If You Choose iKGF as Your Issuer
+
+
+
+
+
+
+Table of Contents
+ +To use the Intel® EPID APIs, you need to use the following items that are created by the issuer:
+-
+
- Group public key, which corresponds to the issuing private key kept by the issuer +
- Member private keys +
- Signature based revocation list (SigRL) +
- Private key based revocation list (PrivRL) +
- Group based revocation list (GroupRL) +
If you want to use the Intel Key Generation Facility (iKGF) as the issuer, contact info@digital-cp.com to get started.
+If you choose to use iKGF as the issuer, you can take advantage of tools included in the SDK that are designed to make it easier for you to interact with iKGF by creating requests to update revocation lists and by extracting member private keys and group public keys from iKGF files.
++Tools for Creating Revocation Requests
+The Intel® EPID SDK includes tools to help you request additions to revocation lists managed by iKGF if you are using iKGF as the issuer.
+These tools are designed to create a revocation request in the format required by iKGF. In order to update a revocation list, the requests generated by these tools must be submitted to the issuer.
+To access the tools, go to _install/epid-sdk/tools in the SDK directory.
You need to build the SDK before you can use these tools. For more information, refer to Building from Source.
+The following tools are available:
+| Tool | Purpose |
|---|---|
revokegrp | Create group revocation request |
revokekey | Create member private key revocation request |
revokesig | Create signature revocation request |
+Requesting Group Revocation
+The revokegrp tool adds a group to the revocation request file.
Usage: revokegrp [OPTION]... +Revoke Intel(R) EPID group + +Options: + --gpubkey=FILE + load group public key from FILE (default: pubkey.bin) + + --capubkey=FILE + load IoT Issuing CA public key from FILE + + --reason=NUM + revocation reason (default: 0) + + --req=FILE + append group revocation request to FILE (default: grprlreq.dat) + + -h, --help + display this help and exit + + -v, --verbose + print status messages to stdout +
+Requesting Private Key Revocation
+The revokekey tool adds a member private key to the revocation request file.
Usage: revokekey [OPTION] +Revoke Intel(R) EPID private key + +Options: + --mprivkey=FILE + load private key to revoke from FILE (default: mprivkey.dat) + + --req=FILE + append private key revocation request to FILE (default: privreq.dat) + + -h, --help + display this help and exit + + -v,--verbose + print status messages to stdout + +The following options are only needed for compressed keys: + + --gpubkey=FILE + load group public key from FILE (default: pubkey.bin) + + --capubkey=FILE + load IoT Issuing CA public key from FILE +
+Requesting Signature Revocation
+The revokesig tool creates a request to add a signature to the revocation request file.
revokesig only accepts valid signatures for addition to the revocation request.
Usage: revokesig [OPTION]... +Revoke Intel(R) EPID signature + +Options: + --sig=FILE + load signature to revoke from FILE (default: sig.dat) + + --msg=MESSAGE + MESSAGE used to generate signature to revoke + + --msgfile=FILE + FILE containing message used to generate signature to revoke + + --gpubkey=FILE + load group public key from FILE (default: pubkey.bin) + + --capubkey=FILE + load IoT Issuing CA public key from FILE + + --req=FILE + append signature revocation request to FILE (default: sigrlreq.dat) + + -h, --help + display this help and exit + + -v, --verbose + print status messages to stdout +
+Tools for Extracting Keys from iKGF Files
+The Intel® EPID SDK includes tools to help you extract individual keys from files provided by the Intel Key Generation Facility (iKGF) if you are using iKGF as the issuer.
+To access the tools, go to _install/epid-sdk/tools in the SDK directory.
You need to build the SDK before you can use these tools. For more information, refer to Building from Source.
+The following tools are available:
+| Tool | Purpose |
|---|---|
extractgrps | Extracts group public keys |
extractkeys | Extracts member private keys |
+Extracting Group Public Keys
+The extractgrps tool extracts group public keys from the input file to the current directory.
Usage: extractgrps [OPTION]... [FILE] [NUM] +Extract the first NUM group certs from FILE to current directory + +Options: + -h, --help + display this help and exit + + -v, --verbose + print status messages to stdout +
+Extracting Member Private Keys
+The extractkeys tool extracts member private keys from the input file to the current directory.
Usage: extractkeys [OPTION]... [FILE] [NUM] +Extract the first NUM private keys from FILE to current directory. + +Options: + -c, --compressed + extract compressed keys + + -h, --help + display this help and exit + + -v, --verbose + print status messages to stdout
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/Examples.html b/external/epid-sdk-3.0.0/doc/html/Examples.html
new file mode 100644
index 00000000..a69755f9
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/Examples.html
@@ -0,0 +1,85 @@
+
+
+
+
+
+
+
+
+
+
+
+Introduction to the Intel® EPID Scheme
+
+
+Table of Contents
+ +Intel® EPID is a cryptographic protocol which enables the remote authentication of a trusted platform whilst preserving the user's privacy.
++Roles
+In the Intel® EPID scheme, there are three roles: issuers, members, and verifiers.
+The entities in these roles interact with each other in such a way that a member can prove to a verifier that it is a trusted member of a group without disclosing the identity of the member. Groups are created and managed by the issuer.
+
+
+
+
++Issuers
+The issuer is responsible for managing group membership. Issuer functionality is not included in the SDK.
+The issuer manages groups by doing the following:
+-
+
- Creates groups by generating one issuing private key and one group certificate for each group. The group certificate contains the group public key. +
- Creates group members by generating unique Intel® EPID member private keys through bulk provisioning. Member private keys are created from the issuing private key for the group. +
- Manages requests from prospective members to join existing groups by using the join protocol. +
- Creates and maintains signature based revocation lists and private key based revocation lists. These lists of members no longer in good standing allow members to be dropped from a group. +
- Creates and maintains group revocation lists. +
- Makes group public keys and revocation lists available to verifiers. +
+
+
+
++Members
+The member is the entity that attempts to anonymously prove its group membership to the verifier.
+-
+
- Members are authorized by the issuer as part of a group. +
- Each group member has a unique Intel® EPID private key, which corresponds to the group. +
- The member uses its member private key to sign a message to prove group membership to the verifier without revealing the identity of the member. +
+
+
+
++Verifiers
+The verifier checks an Intel(R) EPID signature to establish whether it was signed by an entity or device that is a member in good standing.
+The verifier acts on behalf of a party that needs to know it is communicating with a trusted device. Verifiers obtain group certificates and revocation lists from issuers and negotiate details of signature protocol with members.
+A verifier can do the following:
+-
+
- Confirm a member is in fact a member of a given group in good standing. +
- Obtain group certificates and revocation lists from issuers. +
- Negotiate details of signature protocol with members. +
- Manage a private list of revoked members, also called the verifier blacklist. +
+
+
+
++Groups
+An Intel® EPID group represents a set of trusted entities called members. Issuers create groups and manage group membership. For each group, the issuer creates a group public key simultaneously with the corresponding issuing private key. The issuer uses the issuing private key to create unique member private keys for each group member, and makes the group public key available to verifiers.
+All groups have the following:
+-
+
- Group public key, which corresponds to the issuing private key kept by the issuer +
- Signature based revocation list +
- Private key based revocation list +
- Member private keys, generated from the issuing private key +
If a signature based revocation list or private key based revocation list does not exist, it is assumed to be empty.
++Keys
+The Intel® EPID scheme works with three types of keys: the group public key, the issuing private key, and the member private key. A group public key corresponds to the unique member private keys that are part of the group. Member private keys are generated from the issuing private key.
+Additionally, in the Intel® EPID scheme, a private key can be revoked given a signature created by that key, even if the key itself is still unknown. Group membership can be revoked and entire groups can be revoked. For more information on revocation, refer to In-Depth Explanation of Revocation.
++Group Public Key
+The group public key is the key used by the verifier to confirm that a member belongs to a group in good standing. Each member private key in a group is associated with the group's public key.
+When a group is created, the group public key and the issuing private key are simultaneously generated by the issuer. The verifier obtains the group public key from the issuer.
++Issuing Private Key
+The issuing private key is the key used by the issuer to generate unique private keys for each member of a given group. For every group public key, there is a corresponding issuing private key. The issuing private key remains with the issuer and is kept private.
++Member Private Key
+The member private key is the key used by the member to digitally sign a message when attempting to prove to the verifier that the member belongs to the group and is in good standing.
+Unique member private keys are generated by the issuer for each member of a given group. The same group public key corresponds to each member private key in the group.
++Member and Verifier Interaction
+Each Intel® EPID member uses its Intel® EPID private key to digitally sign a message. The resulting signature is called an Intel® EPID signature.
+The Intel® EPID verifier uses the group public key to verify the correctness of an Intel® EPID signature, i.e., to verify that the signature was indeed created by a member with a valid Intel® EPID private key.
+However, the Intel® EPID signature does not convey any information about which unique private key was used to create the signature.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/Examples.js b/external/epid-sdk-3.0.0/doc/html/Examples.js
new file mode 100644
index 00000000..35ebbda6
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/Examples.js
@@ -0,0 +1,5 @@
+var Examples =
+[
+ [ "Generating an Intel® EPID Signature", "SignmsgWalkthru.html", null ],
+ [ "Verifying an Intel® EPID Signature", "VerifysigWalkthru.html", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/Glossary.html b/external/epid-sdk-3.0.0/doc/html/Glossary.html
new file mode 100644
index 00000000..f4c563ba
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/Glossary.html
@@ -0,0 +1,174 @@
+
+
+
+
+
+
+
+
+
+
+
+Walkthroughs of Examples Showing API Usage
+
+
+
+Several example applications are included that demonstrate how to use the SDK APIs.
+| Example Application | Concept Demonstrated |
|---|---|
signmsg | Generating an Intel® EPID Signature |
verifysig | Verifying an Intel® EPID Signature |
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/ImplementationNotes.html b/external/epid-sdk-3.0.0/doc/html/ImplementationNotes.html
new file mode 100644
index 00000000..6aa26d78
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/ImplementationNotes.html
@@ -0,0 +1,110 @@
+
+
+
+
+
+
+
+
+
+
+
+Glossary
+
+
+Table of Contents
+ ++CA public key
+The CA (Certificate Authority) public key contains the ECDSA public key of the issuing CA. The verifier uses this key to authenticate that information provided by the issuer is genuine.
++DAA
+Direct Anonymous Attestation (DAA) is a digital signature algorithm that supports anonymity by providing a group public verification key associated with many unique private signing keys. Intel® EPID enhances DAA by enabling a private key to be revoked given a signature created by that key, even if the key itself is still unknown.
++Elliptic curve
+In elliptic curve cryptography, an elliptic curve is an algebraic structure used to create a function whose output is easy to compute, but whose input is difficult to compute given the output. Elliptic curve cryptography requires smaller keys compared to non-elliptic curve cryptography (based on Galois fields) to provide equivalent security.
++Elliptic curve point
+An elliptic curve point is a point along an elliptic curve. The security of elliptic curve cryptography depends on the ability to compute a point multiplication and the inability to compute the multiplicand given the original and product points.
++Group
+An Intel® EPID group represents a set of trusted entities called members.
+Issuers create groups and manage group membership. For each group, the issuer creates a group public key simultaneously with the corresponding issuing private key. The issuer uses the issuing private key to create unique member private keys for each group member, and makes the group public key available to verifiers.
+All groups have the following:
+-
+
- Group public key, which corresponds to the issuing private key kept by the issuer +
- Signature based revocation list +
- Private key based revocation list +
- Member private keys, generated from the issuing private key +
If a signature based revocation list or private key based revocation list does not exist, it is assumed to be empty.
++Group certificate
+The group certificate contains the group public key. The group certificate is created by the issuer and obtained by the verifier. When the issuer creates groups, it generates one issuing private key and one group certificate for each group.
++Group public key
+The group public key is the key used by the verifier to confirm that a member belongs to a group in good standing. Each member private key in a group is associated with the group's public key.
+When a group is created, the group public key and the issuing private key are simultaneously generated by the issuer. The verifier obtains the group public key from the issuer.
++Intel® EPID
+Enhanced Privacy ID (Intel® EPID) is a cryptographic protocol for attestation of a trusted platform while preserving the user's privacy. Intel® EPID can be used as a foundational building block for a multitude of security solutions.
++Intel® EPID signature
+An Intel® EPID signature is a type of digital signature that preserves anonymity of the signer, while still proving the signer is a member of a trusted group.
++Issuer
+The issuer is the entity in the Intel® EPID scheme that is responsible for managing group membership. Issuer APIs are not included in the SDK. An example of an issuer is the Intel Key Generation Facility. For sample issuer material, refer to Sample Issuer Material. For tools that can help you if you choose to use iKGF as your issuer, refer to If You Choose iKGF as Your Issuer.
+The issuer manages groups by doing the following:
+-
+
- Creates groups by generating one issuing private key and one group certificate for each group. The group certificate contains the group public key. +
- Creates group members by generating unique Intel® EPID member private keys through bulk provisioning. Member private keys are created from the issuing private key for the group. +
- Manages requests from prospective members to join existing groups by using the join protocol. +
- Creates and maintains signature based revocation lists and private key based revocation lists. These lists of members no longer in good standing allow members to be dropped from a group. +
- Creates and maintains group revocation lists. +
- Makes group public keys and revocation lists available to verifiers. +
+Issuing private key
+The issuing private key is the key used by the issuer to generate unique private keys for each member of a given group. For every group public key, there is a corresponding issuing private key. The issuing private key remains with the issuer and is kept private.
++Member
+The member is the entity that attempts to prove its group membership to the verifier. Members are authorized by the issuer as part of a group and each group member has a unique Intel® EPID private key. The member uses its member private key to sign a message to prove group membership without revealing its identity. An example of a member is a PC with an embedded Intel® EPID member private key.
++Name-based signature
+A name-based signature is a type of signature that gives the verifier the ability to link Intel® EPID signatures from the same member, reducing the member's privacy.
+A name-based signature is created using the additional parameter of a basename. If a basename is not specified, a random number is chosen as the basename. If the member uses the same basename, the verifier can mathematically link signatures generated by the member, showing that the signatures are from the same member.
++Member private key
+The member private key is the key used by the member to digitally sign a message when attempting to prove to the verifier that the member belongs to the group and is in good standing.
+Unique member private keys are generated by the issuer for each member of a given group. The same group public key corresponds to each member private key in the group.
++Non-revoked proof
+A non-revoked proof is part of an Intel® EPID signature that proves that the member is not a specific revoked entity in the signature based revocation list. The member provides the signature with a number of non-revoked proofs, one per revocation list entry, to prove to the verifier that the member does not correspond to any entry in the revocation list.
++Pairing
+Pairing is a mathematical operation that maps two elliptic curve groups to a third multiplicative group.
++Revocation, revocation lists
+Revocation lists are data structures used by the verifier to identify members that are no longer approved members of the group.
+The verifier obtains the member private key based revocation list (PrivRL), signature based revocation list (SigRL), and group based revocation list (GroupRL) from the issuer. The verifier can also maintain its own verifier blacklist (VerifierRL). Verifier blacklist revocation only works with name based signatures.
++Verifier
+The verifier is the entity that checks an Intel® EPID signature to establish whether it was signed by an entity or device that is a member in good standing.
+The verifier acts on behalf of a party that needs to know it is communicating with a trusted device. Verifiers obtain group certificates and revocation lists from issuers and negotiate details of signature protocol with members.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/IssuerMaterial.html b/external/epid-sdk-3.0.0/doc/html/IssuerMaterial.html
new file mode 100644
index 00000000..8a9012a0
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/IssuerMaterial.html
@@ -0,0 +1,293 @@
+
+
+
+
+
+
+
+
+
+
+
+Implementation Notes
+
+
+Table of Contents
+ ++Random Number Generation
+Some SDK APIs require a random number data source. A BitSupplier provides a source of random data. This function should be a cryptographically secure random number generator.
+- Warning
- The pseudo-random number generator provided with the examples is for sample use only and is not suitable for cryptographically secure applications.
+Protecting Secrets
+Member code works with private keys, so member code must be run in a trusted environment.
+- Warning
- If member memory is available to an untrusted source, the member private key could be exposed.
The EpidZeroMemory function is used by the memory allocation routines EpidAlloc, EpidRealloc and EpidFree to wipe the memory as memory is freed.
- Warning
- The
EpidZeroMemoryfunction may be optimized away by some compilers. If it is, you should consider using a compiler or operating system specific memory sanitization function (e.g.memcpy_sorSecureZeroMemory).
+Replacing Math Primitives
+SDK math primitives are designed to be replaced with your own implementation if you need to rely on custom hardware for performance. The SDK is designed to simplify this process by isolating implementation details behind a clearly defined interface, defined by the non-internal headers in the epid/common/math directory. Math functionality has detailed tests to ease validation.
+Octstring/Buffer Types
+Serialized information in the SDK is passed in fixed size buffer types whenever possible. Collectively these fixed size buffer types are called Octstrings.
+In epid/common/types.h, there are a large number of packed structs that contain other packed structs, which eventually contain OctStr* types. Normally these are named *Str and are refered to as Str types.
+OctStr* types are buffers that hold N bits, where N is the number at the end of the type name. These types usually represent numbers in a Big Endian format (buffer[0] is the most significant value).
+Str types generally represent fixed size groups of numbers such as a point or vector.
+OctStr* and Str types are usually populated by reading a buffer from a file or other storage, or by calling a serialize function. OctStr* and Str types must be packed so that the compiler does not insert padding. In the current code, this is done using pragmas.
+#pragma pack(1)
// OctStr* type holding 256 bits
} OctStr256;
// Str type consisting of a single 256 bit number
} FqElemStr;
// Str type consisting of a two other Str types
FqElemStr x;
FqElemStr y;
} G1ElemStr;
Many APIs use void* parameters where OctStr* types are expected. If more than one size is allowed, a size parameter is usually also required.
++Flexible Arrays
+A common idiom in the SDK is the use of flexible array types. These types are structs with the last element being an array of size 1 of some type. Flexible array types always have a size value embedded in the struct. The name of the count and array fields differs between flexible array types.
+Flexible array types are expected to be in a buffer of size sizeof(FA) + ((N-1) * sizeof(E)) where FA is the flexible array type, N is the number of elements in the array and E is the type of each element. Note that this may be smaller than sizeof(FA) if N is 0, in which case referencing any element is an error.
Sample* AllocSample(size_t count) {
return (Sample*)malloc(sizeof(Sample)
+ (count * sizeof(G1ElemStr))
- sizeof(G1ElemStr));
}
In many cases, functions that accept flexible array types will also expect a buffer size that is compared against the computed size of the array as a sanity check.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/LegalInformation.html b/external/epid-sdk-3.0.0/doc/html/LegalInformation.html
new file mode 100644
index 00000000..e86d60f5
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/LegalInformation.html
@@ -0,0 +1,84 @@
+
+
+
+
+
+
+
+
+
+
+
+Sample Issuer Material
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Table of Contents
+ +The Intel® EPID SDK does not include issuer APIs. That means you cannot generate the following items for validation:
+-
+
- Group public key, which corresponds to the issuing private key kept by the issuer +
- Member private keys +
- Signature based revocation list (SigRL) +
- Private key based revocation list (PrivRL) +
- Group based revocation list (GroupRL) +
For validation purposes, you can use pre-generated sample data. This sample issuer material includes sample groups and revocation lists.
+Sample compressed key material is not included in the package.
++Sample Groups
++Sample Group A
+Group A (groupa) contains eight group members and sample revocation lists:
+
Members in Group A
+| Group Member | Revocation Status |
|---|---|
| groupa/member0 | Non-revoked |
| groupa/member1 | Non-revoked |
| groupa/privrevokedmember0 | Revoked in PrivRL |
| groupa/privrevokedmember1 | Revoked in PrivRL |
| groupa/privrevokedmember2 | Revoked in PrivRL |
| groupa/sigrevokedmember0 | Revoked in SigRL |
| groupa/sigrevokedmember1 | Revoked in SigRL |
| groupa/sigrevokedmember2 | Revoked in SigRL |
+
Revocation Lists for Group A
+| Description | Directory Location | Revoked Members |
|---|---|---|
| Private key based revocation list | groupa/privrl.bin | privrevokedmember0, + privrevokedmember1, + privrevokedmember2 |
| Signature based revocation list | groupa/sigrl.bin | sigrevokedmember0, + sigrevokedmember1, + sigrevokedmember2 |
| Empty private key based revocation list | groupa/privrl_empty.bin | None |
| Empty signature based revocation list | groupa/sigrl_empty.bin | None |
+
+Sample Group B
+Group B (groupb) contains four group members and sample revocation lists:
+
Members in Group B
+| Group Member | Revocation Status |
|---|---|
| groupb/member0 | Non-revoked |
| groupb/member1 | Non-revoked |
| groupb/privrevokedmember0 | Revoked in PrivRL |
| groupb/sigrevokedmember0 | Revoked in SigRL |
+
Revocation Lists for Group B
+| Description | Directory Location | Revoked Members |
|---|---|---|
| Private key based revocation list | groupb/privrl.bin | privrevokedmember0 |
| Signature based revocation list | groupb/sigrl.bin | sigrevokedmember0 |
| Empty private key based revocation list | groupb/privrl_empty.bin | None |
| Empty signature based revocation list | groupb/sigrl_empty.bin | None |
+Group Based Revocation Lists
+If an entire group is no longer valid, the issuer can revoke it using the group based revocation list. Two sample group based revocation lists are provided with the SDK.
+
+
Sample GrpRLs
+| Group Based Revocation List | Description |
|---|---|
grprl_empty.bin | No entries |
grprl.bin | One entry in which groupb is revoked |
+Compressed Member Private Key
+Sample Groups
+Intel® EPID SDK supports use of compressed member private keys. The groups described here use compressed compressed member private keys but structuarlly corospond to groups described above.
++Compressed Sample Group A
+Group A (groupa) contains eight group members and sample revocation lists:
+
Members in Group A
+| Group Member | Revocation Status |
|---|---|
| groupa/member0 | Non-revoked |
| groupa/member1 | Non-revoked |
| groupa/privrevokedmember0 | Revoked in PrivRL |
| groupa/privrevokedmember1 | Revoked in PrivRL |
| groupa/privrevokedmember2 | Revoked in PrivRL |
| groupa/sigrevokedmember0 | Revoked in SigRL |
| groupa/sigrevokedmember1 | Revoked in SigRL |
| groupa/sigrevokedmember2 | Revoked in SigRL |
+
Revocation Lists for Group A
+| Description | Directory Location | Revoked Members |
|---|---|---|
| Private key based revocation list | groupa/privrl.bin | privrevokedmember0, + privrevokedmember1, + privrevokedmember2 |
| Signature based revocation list | groupa/sigrl.bin | sigrevokedmember0, + sigrevokedmember1, + sigrevokedmember2 |
| Empty private key based revocation list | groupa/privrl_empty.bin | None |
| Empty signature based revocation list | groupa/sigrl_empty.bin | None |
+
+Compressed Sample Group B
+Group B (groupb) contains four group members and sample revocation lists:
+
Members in Group B
+| Group Member | Revocation Status |
|---|---|
| groupb/member0 | Non-revoked |
| groupb/member1 | Non-revoked |
| groupb/privrevokedmember0 | Revoked in PrivRL |
| groupb/sigrevokedmember0 | Revoked in SigRL |
+
Revocation Lists for Group B
+| Description | Directory Location | Revoked Members |
|---|---|---|
| Private key based revocation list | groupb/privrl.bin | privrevokedmember0 |
| Signature based revocation list | groupb/sigrl.bin | sigrevokedmember0 |
| Empty private key based revocation list | groupb/privrl_empty.bin | None |
| Empty signature based revocation list | groupb/sigrl_empty.bin | None |
+Compressed Group Based Revocation Lists
+If an entire group is no longer valid, the issuer can revoke it using the group based revocation list. Two sample group based revocation lists are provided with the SDK.
+
+
Sample GrpRLs
+| Group Based Revocation List | Description |
|---|---|
grprl_empty.bin | No entries |
grprl.bin | One entry in which groupb is revoked |
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/Revocation.html b/external/epid-sdk-3.0.0/doc/html/Revocation.html
new file mode 100644
index 00000000..7191f2d8
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/Revocation.html
@@ -0,0 +1,142 @@
+
+
+
+
+
+
+
+
+
+
+
+Legal Information
+
+INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL® PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT. EXCEPT AS PROVIDED IN INTEL'S TERMS AND CONDITIONS OF SALE FOR SUCH PRODUCTS, INTEL ASSUMES NO LIABILITY WHATSOEVER, AND INTEL DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY, RELATING TO SALE AND/OR USE OF INTEL PRODUCTS INCLUDING LIABILITY OR WARRANTIES RELATING TO FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, OR INFRINGEMENT OF ANY PATENT, COPYRIGHT OR OTHER INTELLECTUAL PROPERTY RIGHT.
+UNLESS OTHERWISE AGREED IN WRITING BY INTEL, THE INTEL PRODUCTS ARE NOT DESIGNED NOR INTENDED FOR ANY APPLICATION IN WHICH THE FAILURE OF THE INTEL PRODUCT COULD CREATE A SITUATION WHERE PERSONAL INJURY OR DEATH MAY OCCUR.
+Intel may make changes to specifications and product descriptions at any time, without notice. Designers must not rely on the absence or characteristics of any features or instructions marked "reserved" or "undefined." Intel reserves these for future definition and shall have no responsibility whatsoever for conflicts or incompatibilities arising from future changes to them. The information here is subject to change without notice. Do not finalize a design with this information.
+The products described in this document may contain design defects or errors known as errata which may cause the product to deviate from published specifications. Current characterized errata are available on request.
+Contact your local Intel sales office or your distributor to obtain the latest specifications and before placing your product order.
+Copies of documents which have an order number and are referenced in this document, or other Intel literature, may be obtained by calling 1-800-548-4725, or by visiting Intel's web site http://www.intel.com.
+Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and other countries.
+*Other names and brands may be claimed as the property of others.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/SdkOverview.html b/external/epid-sdk-3.0.0/doc/html/SdkOverview.html
new file mode 100644
index 00000000..0cc61242
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/SdkOverview.html
@@ -0,0 +1,203 @@
+
+
+
+
+
+
+
+
+
+
+
+In-Depth Explanation of Revocation
+
+This in-depth explanation covers the available options to revoke members in the Intel® EPID scheme. It also provides details on how and why each type of revocation is used.
+
+
+Revocation Hierarchy
+The verifier only checks the revocation lists if the message was signed with a member private key that corresponds with the correct group public key.
+After concluding that the signer is a member of a group, the verifier proceeds to check for group based revocation, then member private key based revocation, then signature based revocation, then verifier blacklist revocation.
+If the group is revoked, the verifier stops and reports it.
+If the member private key is revoked, the verifier does not check the signature based revocation list.
++Revocation List Versions
+The verifier should periodically download the revocation lists (GroupRL, PrivRL, and SigRL) from the issuer and should use the latest revocation list during signature verification. The verifier should make sure that it gets the newest version of the revocation list during the update by checking RLver, the revocation list version number.
++Group Based Revocation
+The group based revocation list, also called the GroupRL, has a list of revoked groups.
+The issuer revokes the entire Intel® EPID group by revoking the group public key. This results in the revocation of all members of a group.
++Reasons the Issuer Might Revoke a Group
+Group revocation is expected to be a rare event and would only happen under limited criteria.
+Reasons to revoke a group might include:
+-
+
- A manufacturing defect causes the devices in the group to malfunction. +
- A subscriber terminates or violates the service agreement. +
- The Intel® EPID issuing private key is exposed. +
- A critical vulnerability in a member implementation is identified. +
- Performance problems arise due to the expensive calculation of non-revoked proofs in signature based revocation, and a replacement group needs to be provisioned. +
+Private Key Based Revocation
+Private key based revocation is used to revoke a compromised member. For example, the issuer can revoke a member if the member private key is exposed. When a compromised member private key is identified, it needs to be communicated to the issuer so that the issuer can revoke the member private key.
+The issuer manages and publishes the member private key revocation list, also called the PrivRL, which contains member private keys that can no longer be used.
++Reasons the Issuer Might Revoke a Member Private Key
+Depending on the use case, these member private keys could belong to members whose identity was compromised. For example, if a member private key is exposed online, allowing group members to be impersonated, then the compromised member private key is known, and the issuer revokes the member private key.
++Signature Based Revocation
+In signature based revocation, the issuer revokes a member based on the signature generated by the member. This revocation method is used when a member becomes subject to revocation criteria, but the issuer does not know the member's member private key.
+The issuer manages and publishes the signature based revocation list, also called SigRL.
+Entries in the SigRL cause signing to take longer for all members of the group. Therefore, when an issuer receives a signature revocation request, it first checks the signature against all entries in the private key based revocation list. If the signature was generated by a revoked private key, then it is not placed in the SigRL.
+For the same reason, if the issuer were requested to revoke a private key, and the current SigRL had entries that corresponded to that private key, then the issuer would remove those entries from the SigRL.
++Signing with Non-Revoked Proofs
+The verifier and the member both use the SigRL managed by the issuer (the method of obtaining the SigRL is outside the scope of the SDK). The member sends the verifier an Intel® EPID signature that includes a number of non-revoked proofs that correspond to each revoked member in the SigRL.
+In other words, the member mathematically proves that it is not any of the members who created the entries on the SigRL. One proof of non-revocation is generated by the member per entry in the SigRL. A single proof indicates the member in question cannot be the one who generated that signature in the SigRL.
+For privacy, Intel® EPID signatures that are generated by the same member are unlinkable by default. This means that the verifier cannot recognize if two Intel® EPID signatures are from the same device. Therefore, multiple Intel® EPID signatures on the SigRL could be from the same member.
++Reasons the Issuer Might Revoke an Intel® EPID Signature
+Reasons for revoking a signature might include the following:
+-
+
- A member's signature is connected to an aspect of its behavior that indicates that the member is compromised. +
- A member repeatedly generates a constant signature for the same message. Per the Intel® EPID algorithm, multiple signatures generated for the same challenge must be different. +
+Verifier Blacklist Revocation
+Verifier blacklist revocation is similar to signature based revocation in that it can be used to revoke a member using only a signature from a compromised member. Unlike the procedure for the signature based revocation list, members do not have to create non-revoked proofs for each entry on the verifier blacklist. Instead, the verifier relies on the member to use a basename when creating the signature (in other words, to use a name based signature) in order to determine if the same member created any of the signatures on the verifier blacklist.
+For the verifier to determine that a member created an entry on the verifier blacklist, the member and verifier must use the same basename. The mechanism that allows them to agree on a basename is outside the scope of the SDK.
+For more information on basenames, refer to Name Based Signatures.
+The verifier adds a signature to a blacklist when the verifier does not want to trust the signer, but the verifier does not have enough reason to send a request to the issuer to revoke the member's signature.
+When the verifier tracks a member using a basename, and decides the member is not trustworthy, the verifier can add the member's signature to the verifier blacklist.
++Reasons the Verifier Might Revoke an Intel® EPID Signature
+Reasons a verifier might revoke a member based on its tracked signatures include the following:
+-
+
- A service provider receives a complaint about a customer. In this case, even though the verifier no longer trusts that customer to use the service, the verifier does not have a case to petition the issuer to revoke the member. +
- A service provider detects suspicious behavior that might indicate illegal activity or another violation of the service provider's policy. +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/SignVerifyTutorial.html b/external/epid-sdk-3.0.0/doc/html/SignVerifyTutorial.html
new file mode 100644
index 00000000..5fc86a4a
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/SignVerifyTutorial.html
@@ -0,0 +1,239 @@
+
+
+
+
+
+
+
+
+
+
+
+What's Included in the SDK
+
+
+
+
+
+
+
+
+
+
+Table of Contents
+ ++SDK Components
+The SDK is divided into logical components to separate responsibilities and create interfaces that you can re-implement using custom tools such as hardware accelerators.
+
+
+
+
+
+ The Intel® EPID SDK is divided into the following components:
Components in the SDK Core implement the features of Intel® EPID.
+| Component | Description |
|---|---|
| member | Library containing APIs needed to implement a member |
| verifier | Library containing APIs needed to implement a verifier |
| common | Library containing common types and functions |
| math | Math primitives used by member and verifier |
| IPP | A C-only non-optimized subset of Intel® IPP |
Examples show how to use the SDK APIs in working code.
+| Component | Description |
|---|---|
| signmsg | A sample program showing how to sign messages |
| verfifysig | A sample program showing how to verify signatures |
| util | Common utilities used by samples |
| Sample Issuer Material | Sample keys and revocation lists |
Tools implement utility code to interact with Intel® EPID related services such as the Intel® Key GenerationFacility (iKGF)".
+| Component | Description |
|---|---|
| extractgrps | A tool to extract groups from a bulk group file |
| extractkeys | A tool to extract member keys from a bulk key file |
| revokegrp | A tool to create a revocation request for a group |
| revokekey | A tool to create a revocation request for a member key |
| revokesig | A tool to create a revocation request from a signature |
The SDK comes with a number of other components that support building and validating the code.
+| Component | Description |
|---|---|
| gtest | gtest unit test framework |
| Build Scripts | Scripts to configure and build the SDK |
Math primitives are implemented in the math sub-component of common. The reference math primitive implementation is based on a non-optimized Vanilla C subset of the Intel® Performance Primitives. Math is designed so that you can replace its implementation to call custom hardware IP blocks or optimized libraries.
+Intel® EPID 1.1 Compatibility
+In addition to the default Intel® EPID 2.0 APIs, the verifier component also includes APIs that allow verification of Intel® EPID 1.1 signatures.
+Billions of existing devices, including most Intel platforms manufactured since 2008, create signatures that need Intel® EPID 1.1 verification.
+For details on verifying Intel® EPID 1.1 signatures see EPID 1.1 support in the API Reference.
++Filesystem Layout
+The Intel® EPID SDK has two filesystem layouts: the Source Layout and the Install Layout.
+The Source Layout is what you find when you download the SDK and extract it to disk. This layout contains all of the files that you need to build the libraries, samples, tests, and data generated by the SDK.
+The Install Layout is the layout of files under the _install folder after you build the SDK.
+Source Layout
+The Source Layout is used by the build scripts in the Intel® EPID SDK to find components and files needed to create libraries and executables.
epid-sdk/ +|__ LICENSE.txt Distribution license +|__ NOTICE.txt Legal notices +|__ README.md Readme +|__ CHANGELOG.md Change log +|__ SConstruct Main build configuration +| +|__ doc/ +| |__ html/ HTML format documentation +| |__ index.html Entry point for HTML format documentation +| +|__ epid/ +| |__ common/ Source for Common +| |__ common-testhelper/ Source for unit test helper common helpers +| |__ member/ Source for Member +| |__ verifier/ Source for Verifier +| +|__ example/ +| |__ data/ Binary data used for testing and tutorials +| |__ compressed_data/ Compressed Member Key Binary data used for testing and tutorials +| |__ signmsg/ Source for message signing example +| |__ util/ Common utilities for examples +| |__ verifysig/ Source for signature validation signing example +| +|__ ext/ +| |__ gtest/ Third party gtest library +| |__ ipp/ IPP library +| +|__ parts-site/ Parts platform config scripts +| +|__ tools/ + |__ extractgrps/ Tool to extract groups + |__ extractkeys/ Tool to extract keys + |__ revokegrp/ Tool to create group revocation request + |__ revokekey/ Tool to create a member key revocation request + |__ revokesig/ Tool to create a signature based revocation + request +
+Install Layout
+The Install Layout contains the data developers need to develop and build their applications using the Intel® EPID SDK. Once built, the Install Layout has no dependency on the Source Layout, allowing developers to build the SDK once and reuse the built files in other locations or on other computers.
_install/ +|__ epid-sdk/ + |__ include/ C include header files for the SDK + |__ lib/ + | |__ <platform> Target specific static libraries for the SDK + | + |__example/ Sample applications and data + |__test/ Unit test executables (if unit tests built) + |__tools/ Tools
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/SignmsgWalkthru.html b/external/epid-sdk-3.0.0/doc/html/SignmsgWalkthru.html
new file mode 100644
index 00000000..f41b6bd9
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/SignmsgWalkthru.html
@@ -0,0 +1,170 @@
+
+
+
+
+
+
+
+
+
+
+
+Signing and Verification Tutorial
+
+
+Table of Contents
+ +The Intel® EPID SDK provides example tools to show you how to use the Intel® EPID SDK APIs. These examples are called signmsg and verifysig.
+You can build these examples using the instructions in Building from Source. The tutorial assumes _install/epid-sdk/example is the current directory.
All command lines in this tutorial use posix command line conventions; for other systems, adjust accordingly.
+For the code used in this tutorial, refer to Walkthroughs of Examples Showing API Usage.
+- Note
- The data for running this tutorial is pre-generated. Once the samples are built, the data is in the
_install/epid-sdk/example/datadirectory. See Sample Issuer Material.
+Creating an Intel® EPID Signature of a Given Message
+The example application signmsg shows you how to create an Intel® EPID signature of a given message.
$ ./signmsg -h
+Usage: signmsg [OPTION]...
+Create Intel(R) EPID signature of message
+
+Options:
+ --sig=FILE
+ write signature to FILE (default: sig.dat)
+
+ --msg=MESSAGE
+ MESSAGE to sign
+
+ --bsn=BASENAME
+ BASENAME to sign with (default: random)
+
+ --sigrl=FILE
+ load signature based revocation list from FILE
+
+ --gpubkey=FILE
+ load group public key from FILE (default: pubkey.bin)
+
+ --mprivkey=FILE
+ load member private key from FILE (default: mprivkey.dat)
+
+ --mprecmpi=FILE
+ load pre-computed member data from FILE
+
+ --mprecmpo=FILE
+ write pre-computed member data to FILE
+
+ --capubkey=FILE
+ load IoT Issuing CA public key from FILE (default: cacert.bin)
+
+ --hashalg={SHA-256 | SHA-384 | SHA-512}
+ use specified hash algorithm (default: SHA-512)
+
+ -h, --help
+ display this help and exit
+
+ -v, --verbose
+ print status messages to stdout
+To sign a message, a group member in good standing uses the following command:
$ ./signmsg --msg="test0" +
The above command signs a message "test0". signmsg uses default options for the group public key, member private key, hash algorithm and IoT Issuing CA public key. All other parameters that are not given are ignored. The command produces a signature file: sig.dat
+Verifying an Intel® EPID Signature
+The example application verifysig shows you how to verify that a given Intel® EPID signature is produced by a member in good standing.
$ ./verifysig -h
+Usage: verifysig [OPTION]...
+Verify signature was created by group member in good standing
+
+Options:
+ --sig=FILE
+ load signature from FILE (default: sig.dat)
+
+ --msg=MESSAGE
+ MESSAGE that was signed (default: empty)
+
+ --bsn=BASENAME
+ BASENAME used in signature (default: random)
+
+ --privrl=FILE
+ load private key revocation list from FILE
+
+ --sigrl=FILE
+ load signature based revocation list from FILE
+
+ --grprl=FILE
+ load group revocation list from FILE
+ (default: grprl.bin)
+
+ --verifierrl=FILE
+ load verifier revocation list from FILE
+
+ --gpubkey=FILE
+ load group public key from FILE (default: pubkey.bin)
+
+ --vprecmpi=FILE
+ load pre-computed verifier data from FILE
+
+ --vprecmpo=FILE
+ write pre-computed verifier data to FILE
+
+ --capubkey=FILE
+ load IoT Issuing CA public key from FILE
+ (default: cacert.bin)
+
+ --hashalg={SHA-256 | SHA-384 | SHA-512}
+ use specified hash algorithm for 2.0 groups (default: SHA-512)
+
+ -h, --help
+ display this help and exit
+
+ -v, --verbose
+ print status messages to stdout
+To verify that a signature is from a member in good standing, the verifier uses the following command:
$ ./verifysig --msg="test0" +signature verified successfully +
This verifies that the default signature file sig.dat is generated for the message "test0" by a member in good standing. verifysig uses default inputs for group public key, hash algorithm and IoT Issuing CA public key. All other parameters are ignored. The output verifysig: signature verified successfully denotes that the verification is successful.
+Linking Intel® EPID Signatures from the Same Member
+A name based signature is created using the additional parameter of a basename. If the member uses the same basename, the verifier can mathematically link signatures generated by the member, showing that the signatures are from the same member.
+To validate a signature with a basename, you need to use the same basename for signing and verification. The mechanism for ensuring that the member and verifier use the same basename is outside the scope of the SDK.
+If a basename is not provided, then the member uses a random basename and the signature generated by the member is anonymous.
+For more general information on why you might want to use a basename, refer to Name Based Signatures.
+- Warning
- The use of a name-based signature creates a platform unique pseudonymous identifier. Because it reduces the member's privacy, the user should be notified when it is used and should have control over its use.
To sign message "test0" with a basename "base0":
$ ./signmsg --msg="test0" --bsn="base0" +
To verify the signature:
$ ./verifysig --msg="test0" --bsn="base0" +verifysig: signature verified successfully +
To validate a signature, you need to use the same message for signing and verification. The mechanism for ensuring that the member and verifier use the same message is outside the scope of the SDK.
+Member and verifier must also use the same hash algorithm and basename, if applicable.
++Expected Failures
+The signature verification process fails if there is a parameter mismatch between sign and verify operations. Here are some examples.
+Verification fails if there is a mismatch in the message:
$ ./signmsg --msg="test0" +$ ./verifysig --msg="test1" +verifysig: signature verification failed: invalid signature +
Verification fails if there is a mismatch in the basename:
$ ./signmsg --msg="test0" --bsn="base0" +$ ./verifysig --msg="test0" --bsn="base1" +verifysig: signature verification failed: invalid signature +
The Intel® EPID SDK supports the following hash algorithms: SHA-256, SHA-384, SHA-512. The selected hash algorithm must be the same for both sign and verify. Mismatch in hash algorithm results in verification failure:
$ ./signmsg --msg="test0" --hashalg=SHA-256 +$ ./verifysig --msg="test0" --hashalg=SHA-384 +verifysig: signature verification failed: invalid signature +
+Revocation
+Revocation lists are data structures used by the verifier to identify members that are no longer approved members of the group.
+The verifier obtains the member private key based revocation list (PrivRL), signature based revocation list (SigRL), and group based revocation list (GroupRL) from the issuer. The verifier can also maintain its own verifier blacklist (VerifierRL).
++Detecting Revoked Group from Group Revocation List
+Verification of a signature fails if it is generated by a member of a group that is revoked in the group revocation list.
+For example,
$ ./signmsg --msg="test0" --gpubkey=data/groupb/pubkey.bin --mprivkey=data/groupb/member0/mprivkey.dat +$ ./verifysig --msg="test0" --grprl=data/grprl.bin --gpubkey=data/groupb/pubkey.bin +verifysig: signature verification failed: signature revoked in GroupRl +
The verification fails because groupb is revoked and is an entry in the group revocation list (grprl.bin).
+Detecting Revoked Member from Private Key Based Revocation List
+Verification of a signature fails if it is generated by a member whose private key is revoked in a private-key based revocation list.
+For example,
$ ./signmsg --msg=test0 --gpubkey=data/groupa/pubkey.bin --mprivkey=data/groupa/privrevokedmember0/mprivkey.dat +$ ./verifysig --msg=test0 --privrl=data/groupa/privrl.bin --gpubkey=data/groupa/pubkey.bin +verifysig: signature verification failed: signature revoked in PrivRl +
The verification fails because the private key of privrevokedmember0 is revoked and is an entry in the private key based revocation list of groupa (privrl.bin).
+Detecting Revoked Member from Signature Based Revocation List
+Verification of a signature fails if it is generated by a member whose signature is revoked in a signature based revocation list.
$ ./signmsg --msg="test1" --sigrl=data/groupa/sigrl.bin --gpubkey=data/groupa/pubkey.bin --mprivkey=data/groupa/sigrevokedmember0/mprivkey.dat +signmsg: signature revoked in SigRL +$ ./verifysig --msg="test1" --sigrl=data/groupa/sigrl.bin --gpubkey=data/groupa/pubkey.bin +verifysig: signature verification failed: signature revoked in SigRl +
The message "test1" is signed by signmsg with a warning signmsg: signature revoked in SigRL. This means that the signature of sigrevokedmember0 is revoked in the signature based revocation list. The verification fails because the signature was generated by sigrevokedmember0, which is revoked and is an entry in the signature based revocation list of groupa (sigrl.bin).
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/VerifysigWalkthru.html b/external/epid-sdk-3.0.0/doc/html/VerifysigWalkthru.html
new file mode 100644
index 00000000..c66ada5d
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/VerifysigWalkthru.html
@@ -0,0 +1,190 @@
+
+
+
+
+
+
+
+
+
+
+
+Generating an Intel® EPID Signature
+
+
+
+
+
+
+
+
+
+
+
+
+This walkthrough of the signmsg example shows you how to use SDK APIs to generate an Intel® EPID signature. Signmsg is built during the SDK build.
+
+
First, we include headers so we have access to needed declarations.
+#include <stdlib.h>
#include <string.h>
#include "src/signmsg.h"
#include "src/prng.h"
#include "util/envutil.h"
#include "util/stdtypes.h"
#include "util/buffutil.h"
#include "epid/member/api.h"
#include "epid/common/file_parser.h"
The prng.h header provides access to a pseudo-random number generator needed for signing, while the utility headers are used by signmsg for logging and buffer management. The epid/member/api.h header provides access to the core member APIs. The epid/common/file_parser.h header provides an API for parsing buffers formatted according to the various IoT Intel® EPID binary file formats.
+
We define a stub function responsible for checking that the CA certificate is authorized by the root CA.
+bool IsCaCertAuthorizedByRootCa(void const* data, size_t size) {
(void)data;
(void)size;
return true;
}
IsCaCertAuthorizedByRootCa is called from main.c to validate the CA certificate before calling SignMsg. In an actual implementation, you need to provide an implementation to validate the issuing CA certificate with the CA root certificate before using it in parse functions.
+
The core signing functionality is contained in SignMsg.
size_t basename_len, unsigned char const* signed_sig_rl,
size_t signed_sig_rl_size,
unsigned char const* signed_pubkey,
size_t signed_pubkey_size, unsigned char const* priv_key_ptr,
size_t privkey_size, HashAlg hash_alg,
MemberPrecomp* member_precomp, bool member_precomp_is_input,
EpidSignature** sig, size_t* sig_len,
EpidCaCertificate const* cacert) {
The SignMsg parameters are either received by the member, or they are part of the member's configuration. The exceptions are the sig and sig_len parameters, which are used to output the signature.
The verifier might send the message to the member or there may be another mechanism to choose the message, but the way the message is communicated is outside the scope of the Intel® EPID scheme.
+We use the parameters member_precomp and member_precomp_is_input to pass in a pre-computation blob if provided. We can use the pre-computation blob to increase performance when verifying signatures repeatedly with the same group public key.
The member knows the group public key and the member private key.
+The member and the verifier agree on the message, basename, hash algorithm, and SigRL that the member uses for signing.
+
+
Next we do basic variable setup and argument checking.
+ EpidStatus sts = kEpidErr;
void* prng = NULL;
MemberCtx* member = NULL;
SigRl* sig_rl = NULL;
do {
GroupPubKey pub_key = {0};
PrivKey priv_key = {0};
size_t sig_rl_size = 0;
if (!sig) {
sts = kEpidBadArgErr;
break;
}
We create pointers to resources to be allocated and use the do {} while(0) idiom so that we can reliably free resources on return from SignMsg.
We create variables on the stack to hold the group public key and member private key.
+Finally we check to make sure that sig is a vaild pointer.
+
Next, we authenticate and extract the group public key using EpidParseGroupPubKeyFile.
+ sts = EpidParseGroupPubKeyFile(signed_pubkey, signed_pubkey_size, cacert,
&pub_key);
if (kEpidNoErr != sts) {
break;
}
EpidParseGroupPubKeyFile takes a buffer containing a group public key in issuer binary format and validates that the public key is signed by the private key that corresponds to the provided CA certificate, extracting the key in the process.
+
+
We authenticate and extract the signed SigRL using EpidParseSigRlFile.
+ if (signed_sig_rl) {
// authenticate and determine space needed for SigRl
sts = EpidParseSigRlFile(signed_sig_rl, signed_sig_rl_size, cacert, NULL,
&sig_rl_size);
if (kEpidSigInvalid == sts) {
// authentication failure
break;
}
if (kEpidNoErr != sts) {
break;
}
sig_rl = AllocBuffer(sig_rl_size);
if (!sig_rl) {
sts = kEpidMemAllocErr;
break;
}
// fill the SigRl
sts = EpidParseSigRlFile(signed_sig_rl, signed_sig_rl_size, cacert,
sig_rl, &sig_rl_size);
if (kEpidSigInvalid == sts) {
// authentication failure
break;
}
if (kEpidNoErr != sts) {
break;
}
} // if (signed_sig_rl)
We use EpidParseSigRlFile to:
+-
+
- extract the signature based revocation list +
- validate that the revocation list was signed by the private key corresponding to the provided CA certificate +
- validate that the size of the input buffer is correct +
- determine the required size of the revocation list output buffer +
To determine the required sig_rl output buffer size, we provide a null pointer for the output buffer when calling EpidParseSigRlFile. This updates sig_rl_size with the required size of the output buffer.
After we find out the required size of the sig_rl, we allocate a buffer for the sig_rl. Then we fill the buffer using EpidParseSigRlFile.
+
Next, we fill the member private key.
+ priv_key = *(PrivKey*)priv_key_ptr;
sts = EpidDecompressPrivKey(&pub_key, (CompressedPrivKey*)priv_key_ptr,
&priv_key);
if (kEpidNoErr != sts) {
break;
}
} else {
sts = kEpidErr;
break;
} // if (privkey_size == sizeof(PrivKey))
If the member private key is compressed, then we decompress it using EpidDecompressPrivKey before it can be passed to the member APIs. To determine if the member private key is compressed, we check if it is the known size of a compressed key.
+If the key size is not the size of a known format, we return an error.
+
+
Next, we create a pseudo-random number generator.
+ +- Warning
- This pseudo-random number generator is included only for demonstration, and should not be used in production code as a source of secure random data. For security,
prngshould be a cryptographically secure random number generator.
+
Now that the inputs have been prepared, we create a member context using EpidMemberCreate.
+ sts = EpidMemberCreate(&pub_key, &priv_key,
member_precomp_is_input ? member_precomp : NULL,
PrngGen, prng, &member);
if (kEpidNoErr != sts) {
break;
}
If a pre-computation blob is provided to the top level application, we use it. Otherwise, we pass in NULL.
+
We serialize pre-computed member data using EpidMemberWritePrecomp.
+ +The serialized member pre-computation blob can be used to greatly increase performance of EpidMemberCreate in future sessions if the same member private key is used.
+
+
Next, if a basename is specified, we register it with EpidRegisterBaseName so that the member can use it.
+ if (0 != basename_len) {
sts = EpidRegisterBaseName(member, basename, basename_len);
if (kEpidNoErr != sts) {
break;
}
}
In a typical use case, to prevent loss of privacy, the member keeps a list of basenames that correspond to authorized verifiers. The member signs a message with a basename only if the basename is in the member's basename list.
+- Warning
- The use of a name-based signature creates a platform unique pseudonymous identifier. Because it reduces the member's privacy, the user should be notified when it is used and should have control over its use.
+
Then we set the hash algorithm to be used by the member using EpidMemberSetHashAlg.
+ +After the hash algorithm is set, future calls to EpidSign will use the same algorithm.
+
Next, we sign the message, generating an Intel® EPID signature.
+ *sig_len = EpidGetSigSize(sig_rl);
*sig = AllocBuffer(*sig_len);
if (!*sig) {
sts = kEpidMemAllocErr;
break;
}
// sign message
sts = EpidSign(member, msg, msg_len, basename, basename_len, sig_rl,
sig_rl_size, *sig, *sig_len);
if (kEpidNoErr != sts) {
break;
}
To create a signature, first we find out the required size of the signature using EpidGetSigSize. Then we allocate a buffer for the signature and fill the buffer using EpidSign.
+It is important to compute signature size after loading sig_rl because the signature size varies with the size of the SigRL.
+
Finally, we clean up and exit.
+ sts = kEpidNoErr;
} while (0);
PrngDelete(&prng);
EpidMemberDelete(&member);
if (sig_rl) free(sig_rl);
return sts;
}
If we made it past signing without an error, we set the return code appropriately and fall out of the do-while loop. If there was an error earlier, all breaks in the do-while loop bring us to this point with an error status.
+Next, we free the allocated resources. EpidMemberDelete deletes an existing member context.
+We return from SignMsg with the success or error status.
+
+
This concludes the signmsg walkthrough. Now you should be able to generate an Intel® EPID signature that proves a member's group membership to a verifier without revealing the member's identity.
To learn more about the SDK APIs see the API Reference. To learn more about the Intel® EPID scheme see Introduction to the Intel® EPID Scheme in the documentation.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/annotated.html b/external/epid-sdk-3.0.0/doc/html/annotated.html
new file mode 100644
index 00000000..e60838c8
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/annotated.html
@@ -0,0 +1,136 @@
+
+
+
+
+
+
+
+
+
+
+
+Verifying an Intel® EPID Signature
+
+
+
+
+
+
+
+
+
+
+
+ +
+
+This walkthrough of the verifysig example shows you how to use SDK APIs to verify an Intel® EPID 2.0 signature. Verifysig is built during the SDK build.
To verify an Intel® EPID 1.1 signature see the example code in verifysig11.c. For information on Intel® EPID 1.1 speciifc APIs see EPID 1.1 support.
+
First, we include headers so we have access to needed declarations.
+#include "src/verifysig.h"
#include <stdlib.h>
#include "util/buffutil.h"
#include "util/envutil.h"
#include "epid/verifier/api.h"
#include "epid/common/file_parser.h"
The utility headers are used by verifysig for logging and buffer management. The epid/verifier/api.h header provides access to the core verifier APIs, and the epid/common/file_parser.h header provides an API for parsing buffers formatted according to the various IoT Intel® EPID binary file formats.
+
We define a stub function responsible for checking that the CA certificate is authorized by the root CA.
+bool IsCaCertAuthorizedByRootCa(void const* data, size_t size) {
(void)data;
(void)size;
return true;
}
IsCaCertAuthorizedByRootCa is called from main.c to validate the CA certificate before calling Verify. In an actual implementation, you need to provide an implementation to validate the issuing CA certificate with the CA root certificate before using it in parse functions.
+
We use Verify to verify an Intel® EPID signature. Verify is a wrapper function that isolates SDK API functionality for the purpose of this walkthrough.
size_t msg_len, void const* basename, size_t basename_len,
void const* signed_priv_rl, size_t signed_priv_rl_size,
void const* signed_sig_rl, size_t signed_sig_rl_size,
void const* signed_grp_rl, size_t signed_grp_rl_size,
void const* signed_pub_key, size_t signed_pub_key_size,
VerifierPrecomp* verifier_precomp,
bool verifier_precomp_is_input) {
The Verify parameters were either sent by the verifier to the member, or they were part of the member's configuration. The exceptions are the sig and sig_len parameters, which we use to input the signature to be verified.
The verifier might send the message to the member or there may be another mechanism to choose the message, but the way the message is communicated is outside the scope of the Intel® EPID scheme.
+We use the parameters verifier_precomp and verifier_precomp_is_input to pass in a pre-computation blob if provided. We can use the pre-computation blob to increase performance when verifying signatures repeatedly with the same group public key.
The member and the verifier agree on the message, basename, hash algorithm, and SigRL that the verifier uses for verification.
+- Warning
- The use of a name-based signature creates a platform unique pseudonymous identifier. Because it reduces the member's privacy, the user should be notified when it is used and should have control over its use.
+
Next we do basic variable setup.
+ EpidStatus result = kEpidErr;
VerifierCtx* ctx = NULL;
PrivRl* priv_rl = NULL;
SigRl* sig_rl = NULL;
GroupRl* grp_rl = NULL;
do {
GroupPubKey pub_key = {0};
We create pointers to resources to be allocated and we use the do {} while(0) idiom so that we can reliably free resources on return from Verify. We also allocate the group public key on the stack.
+
Next, we authenticate and extract the group public key using EpidParseGroupPubKeyFile.
+ result = EpidParseGroupPubKeyFile(signed_pub_key, signed_pub_key_size,
cacert, &pub_key);
if (kEpidNoErr != result) {
break;
}
EpidParseGroupPubKeyFile takes a buffer containing a group public key in issuer binary format and validates that the public key is signed by the private key that corresponds to the provided CA certificate, reading the key into pub_key in the process.
+
Next, we create a verifier context using EpidVerifierCreate.
+ result = EpidVerifierCreate(
&pub_key, verifier_precomp_is_input ? verifier_precomp : NULL, &ctx);
if (kEpidNoErr != result) {
break;
}
If a pre-computation blob is provided to the top level application, we use it. Otherwise, we pass in NULL.
+
Then we serialize pre-computed verifier data using EpidVerifierWritePrecomp.
+ +The serialized verifier pre-computation blob can be used to greatly increase performance of EpidVerifierCreate in future sessions if the same group public key is used.
+
+
We use EpidVerifierSetHashAlg to indicate the hash algorithm used for verification, which should be the same algorithm that the member used when signing.
+ +After the hash algorithm is set, future calls to EpidVerify will use the same algorithm.
+
+
We use EpidVerifierSetBasename to indicate the basename used for verification, which should be the same one that the member used when signing.
+ +After the basename is set, future calls to EpidVerify will use the same basename.
+
+
Before we verify a signature, we have to configure revocation lists so that we can check to see if a signer's group membership has been revoked.
+- Note
- Configured revocation lists are referenced directly by the verifier until a new revocation list is set or the verifier is destroyed. Until the verifier is destroyed, we do not modify the revocation lists.
+
We set the private key based revocation list using EpidVerifierSetPrivRl.
+ if (signed_priv_rl) {
// authenticate and determine space needed for RL
size_t priv_rl_size = 0;
result = EpidParsePrivRlFile(signed_priv_rl, signed_priv_rl_size, cacert,
NULL, &priv_rl_size);
if (kEpidSigInvalid == result) {
// authentication failure
break;
}
if (kEpidNoErr != result) {
break;
}
priv_rl = AllocBuffer(priv_rl_size);
if (!priv_rl) {
result = kEpidMemAllocErr;
break;
}
// fill the rl
result = EpidParsePrivRlFile(signed_priv_rl, signed_priv_rl_size, cacert,
priv_rl, &priv_rl_size);
if (kEpidNoErr != result) {
break;
}
// set private key based revocation list
result = EpidVerifierSetPrivRl(ctx, priv_rl, priv_rl_size);
if (kEpidNoErr != result) {
break;
}
} // if (signed_priv_rl)
We use EpidParsePrivRlFile to:
+-
+
- extract the private key based revocation list +
- validate that the revocation list was signed by the private key corresponding to the provided CA certificate +
- validate that the size of the input buffer is correct +
- determine the required size of the revocation list output buffer +
To determine the required priv_rl buffer size, we provide a null pointer for the output buffer when calling EpidParsePrivRlFile.
After we find out the required size of the priv_rl buffer, we allocate memory for it. Then we fill the buffer using EpidParsePrivRlFile.
+
Next, we set the signature based revocation list using EpidVerifierSetSigRl.
+ if (signed_sig_rl) {
// authenticate and determine space needed for RL
size_t sig_rl_size = 0;
result = EpidParseSigRlFile(signed_sig_rl, signed_sig_rl_size, cacert,
NULL, &sig_rl_size);
if (kEpidSigInvalid == result) {
// authentication failure
break;
}
if (kEpidNoErr != result) {
break;
}
sig_rl = AllocBuffer(sig_rl_size);
if (!sig_rl) {
result = kEpidMemAllocErr;
break;
}
// fill the rl
result = EpidParseSigRlFile(signed_sig_rl, signed_sig_rl_size, cacert,
sig_rl, &sig_rl_size);
if (kEpidNoErr != result) {
break;
}
// set signature based revocation list
result = EpidVerifierSetSigRl(ctx, sig_rl, sig_rl_size);
if (kEpidNoErr != result) {
break;
}
} // if (signed_sig_rl)
We use EpidParseSigRlFile to:
+-
+
- extract the signature based revocation list +
- validate that the revocation list was signed by the private key corresponding to the provided CA certificate +
- validate that the size of the input buffer is correct +
- determine the required size of the revocation list output buffer +
To determine the required sig_rl buffer size, we provide a null pointer for the output buffer when calling EpidParseSigRlFile.
After we find out the required size of the sig_rl buffer, we allocate memory for it. Then we fill the buffer using EpidParseSigRlFile.
+
Next, we set the group based revocation list using EpidVerifierSetGroupRl.
+ if (signed_grp_rl) {
// authenticate and determine space needed for RL
size_t grp_rl_size = 0;
result = EpidParseGroupRlFile(signed_grp_rl, signed_grp_rl_size, cacert,
NULL, &grp_rl_size);
if (kEpidSigInvalid == result) {
// authentication failure
break;
}
if (kEpidNoErr != result) {
break;
}
grp_rl = AllocBuffer(grp_rl_size);
if (!grp_rl) {
result = kEpidMemAllocErr;
break;
}
// fill the rl
result = EpidParseGroupRlFile(signed_grp_rl, signed_grp_rl_size, cacert,
grp_rl, &grp_rl_size);
if (kEpidNoErr != result) {
break;
}
// set group revocation list
result = EpidVerifierSetGroupRl(ctx, grp_rl, grp_rl_size);
if (kEpidNoErr != result) {
break;
}
} // if (signed_grp_rl)
We use EpidParseGroupRlFile to:
+-
+
- extract the group based revocation list +
- validate that the revocation list was signed by the private key corresponding to the provided CA certificate +
- validate that the size of the input buffer is correct +
- determine the required size of the revocation list output buffer +
To determine the required grp_rl buffer size, we provide a null pointer for the output buffer when calling EpidParseGroupRlFile.
After we find out the required size of the grp_rl buffer, we allocate memory for it. Then we fill the buffer using EpidParseGroupRlFile.
+
Next, we set the verifier blacklist using EpidVerifierSetVerifierRl.
+ if (ver_rl) {
// set verifier based revocation list
result = EpidVerifierSetVerifierRl(ctx, ver_rl, ver_rl_size);
if (kEpidNoErr != result) {
break;
}
}
The verifier is responsible for ensuring that the verifier revocation list is authorized. Validating it is outside the scope of this example.
+
+
Next, we use EpidVerify to verify that the Intel® EPID signature was created by a valid member of a group in good standing.
++ +
Finally, we clean up and exit.
+ } while (0);
// delete verifier
EpidVerifierDelete(&ctx);
if (priv_rl) free(priv_rl);
if (sig_rl) free(sig_rl);
if (grp_rl) free(grp_rl);
return result;
}
If we made it past verification without an error, we set the return code appropriately and fall out of the do-while loop. If there was an error earlier, all breaks in the do-while loop bring us to this point with an error status.
Then we free the allocated resources. EpidVerifierDelete deletes the verifier context.
+After deleting the verifier context, we can also delete the revocation lists.
+We return from Verify with the success or error status.
+
This concludes the verifysig walkthrough. Now you should be able to verify an Intel® EPID signature using the SDK APIs.
To learn more about the SDK APIs see the API Reference. To learn more about the Intel® EPID Scheme see Introduction to the Intel® EPID Scheme in the documentation.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/arrowdown.png b/external/epid-sdk-3.0.0/doc/html/arrowdown.png
new file mode 100644
index 00000000..0b63f6d3
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/arrowdown.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/arrowright.png b/external/epid-sdk-3.0.0/doc/html/arrowright.png
new file mode 100644
index 00000000..c6ee22f9
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/arrowright.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/basenames_8dox.html b/external/epid-sdk-3.0.0/doc/html/basenames_8dox.html
new file mode 100644
index 00000000..459857a2
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/basenames_8dox.html
@@ -0,0 +1,82 @@
+
+
+
+
+
+
+
+
+
+
+
+Data Structures
+
+Here are the data structures with brief descriptions:
+
+
+
+| CBasicSignature | Intel(R) EPID 2.0 basic signature |
| CBigNumStr | Serialized BigNum |
| CCompressedPrivKey | Compressed private key |
| CEcdsaPrivateKey | ECDSA Private Key |
| CEcdsaPublicKey | ECDSA Public Key |
| CEcdsaSignature | ECDSA Signature using NIST 256-bit curve secp256r1 |
| CEpid11BasicSignature | Intel(R) EPID 1.1 basic signature |
| CEpid11G2ElemStr | Serialized Intel(R) EPID 1.1 G2 element |
| CEpid11GroupPubKey | Intel(R) EPID 1.1 group public key |
| CEpid11GroupRl | Intel(R) EPID 1.1 group revocation list |
| CEpid11GtElemStr | Serialized Intel(R) EPID 1.1 GT element |
| CEpid11NrProof | Intel(R) EPID 1.1 non-revoked Proof |
| CEpid11Params | Intel(R) EPID 1.1 Parameters |
| CEpid11PrivRl | Intel(R) EPID 1.1 private-key based revocation list |
| CEpid11Signature | Intel(R) EPID 1.1 Signature |
| CEpid11SigRl | Intel(R) EPID 1.1 signature based revocation list |
| CEpid11SigRlEntry | Intel(R) EPID 1.1 entry in SigRL (B,K) |
| CEpid11VerifierPrecomp | Intel(R) EPID 1.1 Pre-computed verifier settings |
| CEpid2Params | Intel(R) EPID 2.0 Parameters |
| CEpidCaCertificate | IoT CA Certificate binary format |
| CEpidFileHeader | Intel(R) EPID binary file header |
| CEpidSignature | Intel(R) EPID 2.0 Signature |
| CFpElemStr | Number in [0, p-1] |
| CFq12ElemStr | Serialized Fq2^3^2 element |
| CFq2ElemStr | Serialized Fq2 element |
| CFq3ElemStr | Serialized Fq3 element |
| CFq6ElemStr | Serialized Fq2^3 element |
| CFqElemStr | Number in [0, q-1] |
| CG1ElemStr | Serialized G1 element |
| CG2ElemStr | Serialized G2 element |
| CGroupPubKey | Intel(R) EPID 2.0 group public key |
| CGroupRl | Group revocation list |
| CGtElemStr | Serialized GT element |
| CIPrivKey | Intel(R) EPID 2.0 issuing private key |
| CJoinRequest | Join request |
| CMemberPrecomp | Pre-computed member settings |
| CMembershipCredential | Membership credential |
| CNrProof | Non-revoked Proof |
| COctStr128 | 128 bit octet string |
| COctStr16 | 16 bit octet string |
| COctStr256 | 256 bit octet string |
| COctStr32 | 32 bit octet string |
| COctStr512 | 512 bit octet string |
| COctStr600 | 600 bit octet string |
| COctStr64 | 64 bit octet string |
| COctStr768 | 768 bit octet string |
| COctStr8 | 8 bit octet string |
| COctStr80 | 80 bit octet string |
| CPreComputedSignature | Pre-computed signature |
| CPrivKey | Intel(R) EPID 2.0 private key |
| CPrivRl | Private-key based revocation list |
| CSha256Digest | SHA256 digest |
| CSigRl | Signature based revocation list |
| CSigRlEntry | Entry in SigRL (B,K) |
| CVerifierPrecomp | Pre-computed verifier settings |
| CVerifierRl |
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/basicdoc.png b/external/epid-sdk-3.0.0/doc/html/basicdoc.png
new file mode 100644
index 00000000..e092eb64
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/basicdoc.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/bc_s.png b/external/epid-sdk-3.0.0/doc/html/bc_s.png
new file mode 100644
index 00000000..224b29aa
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/bc_s.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/bdwn.png b/external/epid-sdk-3.0.0/doc/html/bdwn.png
new file mode 100644
index 00000000..940a0b95
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/bdwn.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/bignum_8h.html b/external/epid-sdk-3.0.0/doc/html/bignum_8h.html
new file mode 100644
index 00000000..da255933
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/bignum_8h.html
@@ -0,0 +1,137 @@
+
+
+
+
+
+
+
+
+
+
+
+doc/docsrc/basenames.dox File Reference
+
+
+This file is used by Doxygen to generate documentation. +More...
+Detailed Description
+This file is used by Doxygen to generate documentation.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/bitsupplier_8h.html b/external/epid-sdk-3.0.0/doc/html/bitsupplier_8h.html
new file mode 100644
index 00000000..24d64447
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/bitsupplier_8h.html
@@ -0,0 +1,92 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Big number interface. +More...
+#include <stddef.h>+
#include <stdint.h>+
#include "epid/common/stdtypes.h"+
#include "epid/common/errors.h"+
#include "epid/common/types.h"+
+Typedefs | |
| +typedef struct BigNum | BigNum |
| Internal representation of large numbers. | |
+Functions | |
| EpidStatus | NewBigNum (size_t data_size_bytes, BigNum **bignum) |
| Constructs a new BigNum. More... | |
| void | DeleteBigNum (BigNum **bignum) |
| Deletes a previously allocated BigNum. More... | |
| EpidStatus | ReadBigNum (void const *bn_str, size_t strlen, BigNum *bn) |
| Deserializes a BigNum from a string. More... | |
| EpidStatus | WriteBigNum (BigNum const *bn, size_t strlen, void *bn_str) |
| Serializes a BigNum to a string. More... | |
| EpidStatus | BigNumAdd (BigNum const *a, BigNum const *b, BigNum *r) |
| Adds two BigNum values. More... | |
| EpidStatus | BigNumSub (BigNum const *a, BigNum const *b, BigNum *r) |
| Subtracts two BigNum values. More... | |
| EpidStatus | BigNumMul (BigNum const *a, BigNum const *b, BigNum *r) |
| Multiplies two BigNum values. More... | |
| EpidStatus | BigNumDiv (BigNum const *a, BigNum const *b, BigNum *q, BigNum *r) |
| Divides two BigNum values. More... | |
| EpidStatus | BigNumMod (BigNum const *a, BigNum const *b, BigNum *r) |
| Computes modular reduction for BigNum value by specified modulus. More... | |
| EpidStatus | BigNumIsEven (BigNum const *a, bool *is_even) |
| Checks if a BigNum is even. More... | |
| EpidStatus | BigNumIsZero (BigNum const *a, bool *is_zero) |
| Checks if a BigNum is zero. More... | |
| EpidStatus | BigNumPow2N (unsigned int n, BigNum *r) |
| Raises 2 to the given power. More... | |
Detailed Description
+Big number interface.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/build__tools__installation_8dox.html b/external/epid-sdk-3.0.0/doc/html/build__tools__installation_8dox.html
new file mode 100644
index 00000000..52c1f0b3
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/build__tools__installation_8dox.html
@@ -0,0 +1,82 @@
+
+
+
+
+
+
+
+
+
+
+
+
+Random data supplier interface. +More...
++Typedefs | |
| typedef int(__STDCALL * | BitSupplier) (unsigned int *rand_data, int num_bits, void *user_data) |
| Generates random data. More... | |
Detailed Description
+Random data supplier interface.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/building__sdk_8dox.html b/external/epid-sdk-3.0.0/doc/html/building__sdk_8dox.html
new file mode 100644
index 00000000..0b63f2c9
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/building__sdk_8dox.html
@@ -0,0 +1,82 @@
+
+
+
+
+
+
+
+
+
+
+
+doc/docsrc/build_tools_installation.dox File Reference
+
+
+This file is used by Doxygen to generate documentation. +More...
+Detailed Description
+This file is used by Doxygen to generate documentation.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/choosing__ikgf_8dox.html b/external/epid-sdk-3.0.0/doc/html/choosing__ikgf_8dox.html
new file mode 100644
index 00000000..d63d34a0
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/choosing__ikgf_8dox.html
@@ -0,0 +1,82 @@
+
+
+
+
+
+
+
+
+
+
+
+doc/docsrc/building_sdk.dox File Reference
+
+
+This file is used by Doxygen to generate documentation. +More...
+Detailed Description
+This file is used by Doxygen to generate documentation.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/classes.html b/external/epid-sdk-3.0.0/doc/html/classes.html
new file mode 100644
index 00000000..6329f929
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/classes.html
@@ -0,0 +1,113 @@
+
+
+
+
+
+
+
+
+
+
+
+doc/docsrc/choosing_ikgf.dox File Reference
+
+
+This file is used by Doxygen to generate documentation. +More...
+Detailed Description
+This file is used by Doxygen to generate documentation.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/closed.png b/external/epid-sdk-3.0.0/doc/html/closed.png
new file mode 100644
index 00000000..98cc2c90
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/closed.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/dir_02c945662023679b89476bd7126bc985.html b/external/epid-sdk-3.0.0/doc/html/dir_02c945662023679b89476bd7126bc985.html
new file mode 100644
index 00000000..2da52538
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/dir_02c945662023679b89476bd7126bc985.html
@@ -0,0 +1,93 @@
+
+
+
+
+
+
+
+
+
+
+
+Data Structure Index
+
+
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/dir_12b90d9c027aaf878a834df729679a56.html b/external/epid-sdk-3.0.0/doc/html/dir_12b90d9c027aaf878a834df729679a56.html
new file mode 100644
index 00000000..3b6b9389
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/dir_12b90d9c027aaf878a834df729679a56.html
@@ -0,0 +1,96 @@
+
+
+
+
+
+
+
+
+
+
+
+
+verifier Directory Reference
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/dir_512d3e62841a8535b716ec4cf8b9e950.html b/external/epid-sdk-3.0.0/doc/html/dir_512d3e62841a8535b716ec4cf8b9e950.html
new file mode 100644
index 00000000..c2d5b413
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/dir_512d3e62841a8535b716ec4cf8b9e950.html
@@ -0,0 +1,90 @@
+
+
+
+
+
+
+
+
+
+
+
+
+epid Directory Reference
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/dir_a32be19bc88f3d7aac6b7249da379f26.html b/external/epid-sdk-3.0.0/doc/html/dir_a32be19bc88f3d7aac6b7249da379f26.html
new file mode 100644
index 00000000..446b40ef
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/dir_a32be19bc88f3d7aac6b7249da379f26.html
@@ -0,0 +1,87 @@
+
+
+
+
+
+
+
+
+
+
+
+
+member Directory Reference
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/dir_ef364879bae02db2684040178ed9b186.html b/external/epid-sdk-3.0.0/doc/html/dir_ef364879bae02db2684040178ed9b186.html
new file mode 100644
index 00000000..5a8f5eb3
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/dir_ef364879bae02db2684040178ed9b186.html
@@ -0,0 +1,84 @@
+
+
+
+
+
+
+
+
+
+
+
+1.1 Directory Reference
+
+
+
++Files | |
| file | file_parser.h |
| Epid 1.1 issuer material parsing utilities. | |
| file | types.h |
| SDK data types for Intel(R) EPID 1.1. | |
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/dir_f169ebf8da29290a918fa4b3f7151050.html b/external/epid-sdk-3.0.0/doc/html/dir_f169ebf8da29290a918fa4b3f7151050.html
new file mode 100644
index 00000000..3a07fce1
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/dir_f169ebf8da29290a918fa4b3f7151050.html
@@ -0,0 +1,111 @@
+
+
+
+
+
+
+
+
+
+
+
+1.1 Directory Reference
+
+
+
++Files | |
| file | api.h |
| Intel(R) EPID SDK verifier Intel(R) EPID 1.1 API. | |
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/dir_f6bef457d5f671b6e774bfccc16651f6.html b/external/epid-sdk-3.0.0/doc/html/dir_f6bef457d5f671b6e774bfccc16651f6.html
new file mode 100644
index 00000000..b4547802
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/dir_f6bef457d5f671b6e774bfccc16651f6.html
@@ -0,0 +1,108 @@
+
+
+
+
+
+
+
+
+
+
+
+math Directory Reference
+
+
+
+
+Math primitives.
+ +More... ++Files | |
| file | bignum.h |
| Big number interface. | |
| file | ecdsa.h |
| Ecdsa interface. | |
| file | ecgroup.h |
| Elliptic curve group interface. | |
| file | finitefield.h |
| Finite field interface. | |
| file | hash.h |
| Hash primitives. | |
| file | pairing.h |
| Pairing interface. | |
| file | printutils.h |
| Print helper interface. | |
| file | tatepairing.h |
| Intel(R) EPID 1.1 Pairing interface. | |
Detailed Description
+Math primitives.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/doc.png b/external/epid-sdk-3.0.0/doc/html/doc.png
new file mode 100644
index 00000000..17edabff
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/doc.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/doxygen.css b/external/epid-sdk-3.0.0/doc/html/doxygen.css
new file mode 100644
index 00000000..1425ec53
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/doxygen.css
@@ -0,0 +1,1475 @@
+/* The standard CSS for doxygen 1.8.11 */
+
+body, table, div, p, dl {
+ font: 400 14px/22px Roboto,sans-serif;
+}
+
+/* @group Heading Levels */
+
+h1.groupheader {
+ font-size: 150%;
+}
+
+.title {
+ font: 400 14px/28px Roboto,sans-serif;
+ font-size: 150%;
+ font-weight: bold;
+ margin: 10px 2px;
+}
+
+h2.groupheader {
+ border-bottom: 1px solid #879ECB;
+ color: #354C7B;
+ font-size: 150%;
+ font-weight: normal;
+ margin-top: 1.75em;
+ padding-top: 8px;
+ padding-bottom: 4px;
+ width: 100%;
+}
+
+h3.groupheader {
+ font-size: 100%;
+}
+
+h1, h2, h3, h4, h5, h6 {
+ -webkit-transition: text-shadow 0.5s linear;
+ -moz-transition: text-shadow 0.5s linear;
+ -ms-transition: text-shadow 0.5s linear;
+ -o-transition: text-shadow 0.5s linear;
+ transition: text-shadow 0.5s linear;
+ margin-right: 15px;
+}
+
+h1.glow, h2.glow, h3.glow, h4.glow, h5.glow, h6.glow {
+ text-shadow: 0 0 15px cyan;
+}
+
+dt {
+ font-weight: bold;
+}
+
+div.multicol {
+ -moz-column-gap: 1em;
+ -webkit-column-gap: 1em;
+ -moz-column-count: 3;
+ -webkit-column-count: 3;
+}
+
+p.startli, p.startdd {
+ margin-top: 2px;
+}
+
+p.starttd {
+ margin-top: 0px;
+}
+
+p.endli {
+ margin-bottom: 0px;
+}
+
+p.enddd {
+ margin-bottom: 4px;
+}
+
+p.endtd {
+ margin-bottom: 2px;
+}
+
+/* @end */
+
+caption {
+ font-weight: bold;
+}
+
+span.legend {
+ font-size: 70%;
+ text-align: center;
+}
+
+h3.version {
+ font-size: 90%;
+ text-align: center;
+}
+
+div.qindex, div.navtab{
+ background-color: #EBEFF6;
+ border: 1px solid #A3B4D7;
+ text-align: center;
+}
+
+div.qindex, div.navpath {
+ width: 100%;
+ line-height: 140%;
+}
+
+div.navtab {
+ margin-right: 15px;
+}
+
+/* @group Link Styling */
+
+a {
+ color: #3D578C;
+ font-weight: normal;
+ text-decoration: none;
+}
+
+.contents a:visited {
+ color: #4665A2;
+}
+
+a:hover {
+ text-decoration: underline;
+}
+
+a.qindex {
+ font-weight: bold;
+}
+
+a.qindexHL {
+ font-weight: bold;
+ background-color: #9CAFD4;
+ color: #ffffff;
+ border: 1px double #869DCA;
+}
+
+.contents a.qindexHL:visited {
+ color: #ffffff;
+}
+
+a.el {
+ font-weight: bold;
+}
+
+a.elRef {
+}
+
+a.code, a.code:visited, a.line, a.line:visited {
+ color: #4665A2;
+}
+
+a.codeRef, a.codeRef:visited, a.lineRef, a.lineRef:visited {
+ color: #4665A2;
+}
+
+/* @end */
+
+dl.el {
+ margin-left: -1cm;
+}
+
+pre.fragment {
+ border: 1px solid #C4CFE5;
+ background-color: #FBFCFD;
+ padding: 4px 6px;
+ margin: 4px 8px 4px 2px;
+ overflow: auto;
+ word-wrap: break-word;
+ font-size: 9pt;
+ line-height: 125%;
+ font-family: monospace, fixed;
+ font-size: 105%;
+}
+
+div.fragment {
+ padding: 4px 6px;
+ margin: 4px 8px 4px 2px;
+ background-color: #FBFCFD;
+ border: 1px solid #C4CFE5;
+}
+
+div.line {
+ font-family: monospace, fixed;
+ font-size: 13px;
+ min-height: 13px;
+ line-height: 1.0;
+ text-wrap: unrestricted;
+ white-space: -moz-pre-wrap; /* Moz */
+ white-space: -pre-wrap; /* Opera 4-6 */
+ white-space: -o-pre-wrap; /* Opera 7 */
+ white-space: pre-wrap; /* CSS3 */
+ word-wrap: break-word; /* IE 5.5+ */
+ text-indent: -53px;
+ padding-left: 53px;
+ padding-bottom: 0px;
+ margin: 0px;
+ -webkit-transition-property: background-color, box-shadow;
+ -webkit-transition-duration: 0.5s;
+ -moz-transition-property: background-color, box-shadow;
+ -moz-transition-duration: 0.5s;
+ -ms-transition-property: background-color, box-shadow;
+ -ms-transition-duration: 0.5s;
+ -o-transition-property: background-color, box-shadow;
+ -o-transition-duration: 0.5s;
+ transition-property: background-color, box-shadow;
+ transition-duration: 0.5s;
+}
+
+div.line:after {
+ content:"\000A";
+ white-space: pre;
+}
+
+div.line.glow {
+ background-color: cyan;
+ box-shadow: 0 0 10px cyan;
+}
+
+
+span.lineno {
+ padding-right: 4px;
+ text-align: right;
+ border-right: 2px solid #0F0;
+ background-color: #E8E8E8;
+ white-space: pre;
+}
+span.lineno a {
+ background-color: #D8D8D8;
+}
+
+span.lineno a:hover {
+ background-color: #C8C8C8;
+}
+
+div.ah, span.ah {
+ background-color: black;
+ font-weight: bold;
+ color: #ffffff;
+ margin-bottom: 3px;
+ margin-top: 3px;
+ padding: 0.2em;
+ border: solid thin #333;
+ border-radius: 0.5em;
+ -webkit-border-radius: .5em;
+ -moz-border-radius: .5em;
+ box-shadow: 2px 2px 3px #999;
+ -webkit-box-shadow: 2px 2px 3px #999;
+ -moz-box-shadow: rgba(0, 0, 0, 0.15) 2px 2px 2px;
+ background-image: -webkit-gradient(linear, left top, left bottom, from(#eee), to(#000),color-stop(0.3, #444));
+ background-image: -moz-linear-gradient(center top, #eee 0%, #444 40%, #000 110%);
+}
+
+div.classindex ul {
+ list-style: none;
+ padding-left: 0;
+}
+
+div.classindex span.ai {
+ display: inline-block;
+}
+
+div.groupHeader {
+ margin-left: 16px;
+ margin-top: 12px;
+ font-weight: bold;
+}
+
+div.groupText {
+ margin-left: 16px;
+ font-style: italic;
+}
+
+body {
+ background-color: white;
+ color: black;
+ margin: 0;
+}
+
+div.contents {
+ margin-top: 10px;
+ margin-left: 12px;
+ margin-right: 8px;
+}
+
+td.indexkey {
+ background-color: #EBEFF6;
+ font-weight: bold;
+ border: 1px solid #C4CFE5;
+ margin: 2px 0px 2px 0;
+ padding: 2px 10px;
+ white-space: nowrap;
+ vertical-align: top;
+}
+
+td.indexvalue {
+ background-color: #EBEFF6;
+ border: 1px solid #C4CFE5;
+ padding: 2px 10px;
+ margin: 2px 0px;
+}
+
+tr.memlist {
+ background-color: #EEF1F7;
+}
+
+p.formulaDsp {
+ text-align: center;
+}
+
+img.formulaDsp {
+
+}
+
+img.formulaInl {
+ vertical-align: middle;
+}
+
+div.center {
+ text-align: center;
+ margin-top: 0px;
+ margin-bottom: 0px;
+ padding: 0px;
+}
+
+div.center img {
+ border: 0px;
+}
+
+address.footer {
+ text-align: right;
+ padding-right: 12px;
+}
+
+img.footer {
+ border: 0px;
+ vertical-align: middle;
+}
+
+/* @group Code Colorization */
+
+span.keyword {
+ color: #008000
+}
+
+span.keywordtype {
+ color: #604020
+}
+
+span.keywordflow {
+ color: #e08000
+}
+
+span.comment {
+ color: #800000
+}
+
+span.preprocessor {
+ color: #806020
+}
+
+span.stringliteral {
+ color: #002080
+}
+
+span.charliteral {
+ color: #008080
+}
+
+span.vhdldigit {
+ color: #ff00ff
+}
+
+span.vhdlchar {
+ color: #000000
+}
+
+span.vhdlkeyword {
+ color: #700070
+}
+
+span.vhdllogic {
+ color: #ff0000
+}
+
+blockquote {
+ background-color: #F7F8FB;
+ border-left: 2px solid #9CAFD4;
+ margin: 0 24px 0 4px;
+ padding: 0 12px 0 16px;
+}
+
+/* @end */
+
+/*
+.search {
+ color: #003399;
+ font-weight: bold;
+}
+
+form.search {
+ margin-bottom: 0px;
+ margin-top: 0px;
+}
+
+input.search {
+ font-size: 75%;
+ color: #000080;
+ font-weight: normal;
+ background-color: #e8eef2;
+}
+*/
+
+td.tiny {
+ font-size: 75%;
+}
+
+.dirtab {
+ padding: 4px;
+ border-collapse: collapse;
+ border: 1px solid #A3B4D7;
+}
+
+th.dirtab {
+ background: #EBEFF6;
+ font-weight: bold;
+}
+
+hr {
+ height: 0px;
+ border: none;
+ border-top: 1px solid #4A6AAA;
+}
+
+hr.footer {
+ height: 1px;
+}
+
+/* @group Member Descriptions */
+
+table.memberdecls {
+ border-spacing: 0px;
+ padding: 0px;
+}
+
+.memberdecls td, .fieldtable tr {
+ -webkit-transition-property: background-color, box-shadow;
+ -webkit-transition-duration: 0.5s;
+ -moz-transition-property: background-color, box-shadow;
+ -moz-transition-duration: 0.5s;
+ -ms-transition-property: background-color, box-shadow;
+ -ms-transition-duration: 0.5s;
+ -o-transition-property: background-color, box-shadow;
+ -o-transition-duration: 0.5s;
+ transition-property: background-color, box-shadow;
+ transition-duration: 0.5s;
+}
+
+.memberdecls td.glow, .fieldtable tr.glow {
+ background-color: cyan;
+ box-shadow: 0 0 15px cyan;
+}
+
+.mdescLeft, .mdescRight,
+.memItemLeft, .memItemRight,
+.memTemplItemLeft, .memTemplItemRight, .memTemplParams {
+ background-color: #F9FAFC;
+ border: none;
+ margin: 4px;
+ padding: 1px 0 0 8px;
+}
+
+.mdescLeft, .mdescRight {
+ padding: 0px 8px 4px 8px;
+ color: #555;
+}
+
+.memSeparator {
+ border-bottom: 1px solid #DEE4F0;
+ line-height: 1px;
+ margin: 0px;
+ padding: 0px;
+}
+
+.memItemLeft, .memTemplItemLeft {
+ white-space: nowrap;
+}
+
+.memItemRight {
+ width: 100%;
+}
+
+.memTemplParams {
+ color: #4665A2;
+ white-space: nowrap;
+ font-size: 80%;
+}
+
+/* @end */
+
+/* @group Member Details */
+
+/* Styles for detailed member documentation */
+
+.memtemplate {
+ font-size: 80%;
+ color: #4665A2;
+ font-weight: normal;
+ margin-left: 9px;
+}
+
+.memnav {
+ background-color: #EBEFF6;
+ border: 1px solid #A3B4D7;
+ text-align: center;
+ margin: 2px;
+ margin-right: 15px;
+ padding: 2px;
+}
+
+.mempage {
+ width: 100%;
+}
+
+.memitem {
+ padding: 0;
+ margin-bottom: 10px;
+ margin-right: 5px;
+ -webkit-transition: box-shadow 0.5s linear;
+ -moz-transition: box-shadow 0.5s linear;
+ -ms-transition: box-shadow 0.5s linear;
+ -o-transition: box-shadow 0.5s linear;
+ transition: box-shadow 0.5s linear;
+ display: table !important;
+ width: 100%;
+}
+
+.memitem.glow {
+ box-shadow: 0 0 15px cyan;
+}
+
+.memname {
+ font-weight: bold;
+ margin-left: 6px;
+}
+
+.memname td {
+ vertical-align: bottom;
+}
+
+.memproto, dl.reflist dt {
+ border-top: 1px solid #A8B8D9;
+ border-left: 1px solid #A8B8D9;
+ border-right: 1px solid #A8B8D9;
+ padding: 6px 0px 6px 0px;
+ color: #253555;
+ font-weight: bold;
+ text-shadow: 0px 1px 1px rgba(255, 255, 255, 0.9);
+ background-image:url('nav_f.png');
+ background-repeat:repeat-x;
+ background-color: #E2E8F2;
+ /* opera specific markup */
+ box-shadow: 5px 5px 5px rgba(0, 0, 0, 0.15);
+ border-top-right-radius: 4px;
+ border-top-left-radius: 4px;
+ /* firefox specific markup */
+ -moz-box-shadow: rgba(0, 0, 0, 0.15) 5px 5px 5px;
+ -moz-border-radius-topright: 4px;
+ -moz-border-radius-topleft: 4px;
+ /* webkit specific markup */
+ -webkit-box-shadow: 5px 5px 5px rgba(0, 0, 0, 0.15);
+ -webkit-border-top-right-radius: 4px;
+ -webkit-border-top-left-radius: 4px;
+
+}
+
+.memdoc, dl.reflist dd {
+ border-bottom: 1px solid #A8B8D9;
+ border-left: 1px solid #A8B8D9;
+ border-right: 1px solid #A8B8D9;
+ padding: 6px 10px 2px 10px;
+ background-color: #FBFCFD;
+ border-top-width: 0;
+ background-image:url('nav_g.png');
+ background-repeat:repeat-x;
+ background-color: #FFFFFF;
+ /* opera specific markup */
+ border-bottom-left-radius: 4px;
+ border-bottom-right-radius: 4px;
+ box-shadow: 5px 5px 5px rgba(0, 0, 0, 0.15);
+ /* firefox specific markup */
+ -moz-border-radius-bottomleft: 4px;
+ -moz-border-radius-bottomright: 4px;
+ -moz-box-shadow: rgba(0, 0, 0, 0.15) 5px 5px 5px;
+ /* webkit specific markup */
+ -webkit-border-bottom-left-radius: 4px;
+ -webkit-border-bottom-right-radius: 4px;
+ -webkit-box-shadow: 5px 5px 5px rgba(0, 0, 0, 0.15);
+}
+
+dl.reflist dt {
+ padding: 5px;
+}
+
+dl.reflist dd {
+ margin: 0px 0px 10px 0px;
+ padding: 5px;
+}
+
+.paramkey {
+ text-align: right;
+}
+
+.paramtype {
+ white-space: nowrap;
+}
+
+.paramname {
+ color: #602020;
+ white-space: nowrap;
+}
+.paramname em {
+ font-style: normal;
+}
+.paramname code {
+ line-height: 14px;
+}
+
+.params, .retval, .exception, .tparams {
+ margin-left: 0px;
+ padding-left: 0px;
+}
+
+.params .paramname, .retval .paramname {
+ font-weight: bold;
+ vertical-align: top;
+}
+
+.params .paramtype {
+ font-style: italic;
+ vertical-align: top;
+}
+
+.params .paramdir {
+ font-family: "courier new",courier,monospace;
+ vertical-align: top;
+}
+
+table.mlabels {
+ border-spacing: 0px;
+}
+
+td.mlabels-left {
+ width: 100%;
+ padding: 0px;
+}
+
+td.mlabels-right {
+ vertical-align: bottom;
+ padding: 0px;
+ white-space: nowrap;
+}
+
+span.mlabels {
+ margin-left: 8px;
+}
+
+span.mlabel {
+ background-color: #728DC1;
+ border-top:1px solid #5373B4;
+ border-left:1px solid #5373B4;
+ border-right:1px solid #C4CFE5;
+ border-bottom:1px solid #C4CFE5;
+ text-shadow: none;
+ color: white;
+ margin-right: 4px;
+ padding: 2px 3px;
+ border-radius: 3px;
+ font-size: 7pt;
+ white-space: nowrap;
+ vertical-align: middle;
+}
+
+
+
+/* @end */
+
+/* these are for tree view inside a (index) page */
+
+div.directory {
+ margin: 10px 0px;
+ border-top: 1px solid #9CAFD4;
+ border-bottom: 1px solid #9CAFD4;
+ width: 100%;
+}
+
+.directory table {
+ border-collapse:collapse;
+}
+
+.directory td {
+ margin: 0px;
+ padding: 0px;
+ vertical-align: top;
+}
+
+.directory td.entry {
+ white-space: nowrap;
+ padding-right: 6px;
+ padding-top: 3px;
+}
+
+.directory td.entry a {
+ outline:none;
+}
+
+.directory td.entry a img {
+ border: none;
+}
+
+.directory td.desc {
+ width: 100%;
+ padding-left: 6px;
+ padding-right: 6px;
+ padding-top: 3px;
+ border-left: 1px solid rgba(0,0,0,0.05);
+}
+
+.directory tr.even {
+ padding-left: 6px;
+ background-color: #F7F8FB;
+}
+
+.directory img {
+ vertical-align: -30%;
+}
+
+.directory .levels {
+ white-space: nowrap;
+ width: 100%;
+ text-align: right;
+ font-size: 9pt;
+}
+
+.directory .levels span {
+ cursor: pointer;
+ padding-left: 2px;
+ padding-right: 2px;
+ color: #3D578C;
+}
+
+.arrow {
+ color: #9CAFD4;
+ -webkit-user-select: none;
+ -khtml-user-select: none;
+ -moz-user-select: none;
+ -ms-user-select: none;
+ user-select: none;
+ cursor: pointer;
+ font-size: 80%;
+ display: inline-block;
+ width: 16px;
+ height: 22px;
+}
+
+.icon {
+ font-family: Arial, Helvetica;
+ font-weight: bold;
+ font-size: 12px;
+ height: 14px;
+ width: 16px;
+ display: inline-block;
+ background-color: #728DC1;
+ color: white;
+ text-align: center;
+ border-radius: 4px;
+ margin-left: 2px;
+ margin-right: 2px;
+}
+
+.icona {
+ width: 24px;
+ height: 22px;
+ display: inline-block;
+}
+
+.iconfopen {
+ width: 24px;
+ height: 18px;
+ margin-bottom: 4px;
+ background-image:url('folderopen.png');
+ background-position: 0px -4px;
+ background-repeat: repeat-y;
+ vertical-align:top;
+ display: inline-block;
+}
+
+.iconfclosed {
+ width: 24px;
+ height: 18px;
+ margin-bottom: 4px;
+ background-image:url('folderclosed.png');
+ background-position: 0px -4px;
+ background-repeat: repeat-y;
+ vertical-align:top;
+ display: inline-block;
+}
+
+.icondoc {
+ width: 24px;
+ height: 18px;
+ margin-bottom: 4px;
+ background-image:url('doc.png');
+ background-position: 0px -4px;
+ background-repeat: repeat-y;
+ vertical-align:top;
+ display: inline-block;
+}
+
+table.directory {
+ font: 400 14px Roboto,sans-serif;
+}
+
+/* @end */
+
+div.dynheader {
+ margin-top: 8px;
+ -webkit-touch-callout: none;
+ -webkit-user-select: none;
+ -khtml-user-select: none;
+ -moz-user-select: none;
+ -ms-user-select: none;
+ user-select: none;
+}
+
+address {
+ font-style: normal;
+ color: #2A3D61;
+}
+
+table.doxtable caption {
+ caption-side: top;
+}
+
+table.doxtable {
+ border-collapse:collapse;
+ margin-top: 4px;
+ margin-bottom: 4px;
+}
+
+table.doxtable td, table.doxtable th {
+ border: 1px solid #2D4068;
+ padding: 3px 7px 2px;
+}
+
+table.doxtable th {
+ background-color: #374F7F;
+ color: #FFFFFF;
+ font-size: 110%;
+ padding-bottom: 4px;
+ padding-top: 5px;
+}
+
+table.fieldtable {
+ /*width: 100%;*/
+ margin-bottom: 10px;
+ border: 1px solid #A8B8D9;
+ border-spacing: 0px;
+ -moz-border-radius: 4px;
+ -webkit-border-radius: 4px;
+ border-radius: 4px;
+ -moz-box-shadow: rgba(0, 0, 0, 0.15) 2px 2px 2px;
+ -webkit-box-shadow: 2px 2px 2px rgba(0, 0, 0, 0.15);
+ box-shadow: 2px 2px 2px rgba(0, 0, 0, 0.15);
+}
+
+.fieldtable td, .fieldtable th {
+ padding: 3px 7px 2px;
+}
+
+.fieldtable td.fieldtype, .fieldtable td.fieldname {
+ white-space: nowrap;
+ border-right: 1px solid #A8B8D9;
+ border-bottom: 1px solid #A8B8D9;
+ vertical-align: top;
+}
+
+.fieldtable td.fieldname {
+ padding-top: 3px;
+}
+
+.fieldtable td.fielddoc {
+ border-bottom: 1px solid #A8B8D9;
+ /*width: 100%;*/
+}
+
+.fieldtable td.fielddoc p:first-child {
+ margin-top: 0px;
+}
+
+.fieldtable td.fielddoc p:last-child {
+ margin-bottom: 2px;
+}
+
+.fieldtable tr:last-child td {
+ border-bottom: none;
+}
+
+.fieldtable th {
+ background-image:url('nav_f.png');
+ background-repeat:repeat-x;
+ background-color: #E2E8F2;
+ font-size: 90%;
+ color: #253555;
+ padding-bottom: 4px;
+ padding-top: 5px;
+ text-align:left;
+ -moz-border-radius-topleft: 4px;
+ -moz-border-radius-topright: 4px;
+ -webkit-border-top-left-radius: 4px;
+ -webkit-border-top-right-radius: 4px;
+ border-top-left-radius: 4px;
+ border-top-right-radius: 4px;
+ border-bottom: 1px solid #A8B8D9;
+}
+
+
+.tabsearch {
+ top: 0px;
+ left: 10px;
+ height: 36px;
+ background-image: url('tab_b.png');
+ z-index: 101;
+ overflow: hidden;
+ font-size: 13px;
+}
+
+.navpath ul
+{
+ font-size: 11px;
+ background-image:url('tab_b.png');
+ background-repeat:repeat-x;
+ background-position: 0 -5px;
+ height:30px;
+ line-height:30px;
+ color:#8AA0CC;
+ border:solid 1px #C2CDE4;
+ overflow:hidden;
+ margin:0px;
+ padding:0px;
+}
+
+.navpath li
+{
+ list-style-type:none;
+ float:left;
+ padding-left:10px;
+ padding-right:15px;
+ background-image:url('bc_s.png');
+ background-repeat:no-repeat;
+ background-position:right;
+ color:#364D7C;
+}
+
+.navpath li.navelem a
+{
+ height:32px;
+ display:block;
+ text-decoration: none;
+ outline: none;
+ color: #283A5D;
+ font-family: 'Lucida Grande',Geneva,Helvetica,Arial,sans-serif;
+ text-shadow: 0px 1px 1px rgba(255, 255, 255, 0.9);
+ text-decoration: none;
+}
+
+.navpath li.navelem a:hover
+{
+ color:#6884BD;
+}
+
+.navpath li.footer
+{
+ list-style-type:none;
+ float:right;
+ padding-left:10px;
+ padding-right:15px;
+ background-image:none;
+ background-repeat:no-repeat;
+ background-position:right;
+ color:#364D7C;
+ font-size: 8pt;
+}
+
+
+div.summary
+{
+ float: right;
+ font-size: 8pt;
+ padding-right: 5px;
+ width: 50%;
+ text-align: right;
+}
+
+div.summary a
+{
+ white-space: nowrap;
+}
+
+table.classindex
+{
+ margin: 10px;
+ white-space: nowrap;
+ margin-left: 3%;
+ margin-right: 3%;
+ width: 94%;
+ border: 0;
+ border-spacing: 0;
+ padding: 0;
+}
+
+div.ingroups
+{
+ font-size: 8pt;
+ width: 50%;
+ text-align: left;
+}
+
+div.ingroups a
+{
+ white-space: nowrap;
+}
+
+div.header
+{
+ background-image:url('nav_h.png');
+ background-repeat:repeat-x;
+ background-color: #F9FAFC;
+ margin: 0px;
+ border-bottom: 1px solid #C4CFE5;
+}
+
+div.headertitle
+{
+ padding: 5px 5px 5px 10px;
+}
+
+dl
+{
+ padding: 0 0 0 10px;
+}
+
+/* dl.note, dl.warning, dl.attention, dl.pre, dl.post, dl.invariant, dl.deprecated, dl.todo, dl.test, dl.bug */
+dl.section
+{
+ margin-left: 0px;
+ padding-left: 0px;
+}
+
+dl.note
+{
+ margin-left:-7px;
+ padding-left: 3px;
+ border-left:4px solid;
+ border-color: #D0C000;
+}
+
+dl.warning, dl.attention
+{
+ margin-left:-7px;
+ padding-left: 3px;
+ border-left:4px solid;
+ border-color: #FF0000;
+}
+
+dl.pre, dl.post, dl.invariant
+{
+ margin-left:-7px;
+ padding-left: 3px;
+ border-left:4px solid;
+ border-color: #00D000;
+}
+
+dl.deprecated
+{
+ margin-left:-7px;
+ padding-left: 3px;
+ border-left:4px solid;
+ border-color: #505050;
+}
+
+dl.todo
+{
+ margin-left:-7px;
+ padding-left: 3px;
+ border-left:4px solid;
+ border-color: #00C0E0;
+}
+
+dl.test
+{
+ margin-left:-7px;
+ padding-left: 3px;
+ border-left:4px solid;
+ border-color: #3030E0;
+}
+
+dl.bug
+{
+ margin-left:-7px;
+ padding-left: 3px;
+ border-left:4px solid;
+ border-color: #C08050;
+}
+
+dl.section dd {
+ margin-bottom: 6px;
+}
+
+
+#projectlogo
+{
+ text-align: center;
+ vertical-align: bottom;
+ border-collapse: separate;
+}
+
+#projectlogo img
+{
+ border: 0px none;
+}
+
+#projectalign
+{
+ vertical-align: middle;
+}
+
+#projectname
+{
+ font: 300% Tahoma, Arial,sans-serif;
+ margin: 0px;
+ padding: 2px 0px;
+}
+
+#projectbrief
+{
+ font: 120% Tahoma, Arial,sans-serif;
+ margin: 0px;
+ padding: 0px;
+}
+
+#projectnumber
+{
+ font: 50% Tahoma, Arial,sans-serif;
+ margin: 0px;
+ padding: 0px;
+}
+
+#titlearea
+{
+ padding: 0px;
+ margin: 0px;
+ width: 100%;
+ border-bottom: 1px solid #5373B4;
+}
+
+.image
+{
+ text-align: center;
+}
+
+.dotgraph
+{
+ text-align: center;
+}
+
+.mscgraph
+{
+ text-align: center;
+}
+
+.diagraph
+{
+ text-align: center;
+}
+
+.caption
+{
+ font-weight: bold;
+}
+
+div.zoom
+{
+ border: 1px solid #90A5CE;
+}
+
+dl.citelist {
+ margin-bottom:50px;
+}
+
+dl.citelist dt {
+ color:#334975;
+ float:left;
+ font-weight:bold;
+ margin-right:10px;
+ padding:5px;
+}
+
+dl.citelist dd {
+ margin:2px 0;
+ padding:5px 0;
+}
+
+div.toc {
+ padding: 14px 25px;
+ background-color: #F4F6FA;
+ border: 1px solid #D8DFEE;
+ border-radius: 7px 7px 7px 7px;
+ float: right;
+ height: auto;
+ margin: 0 8px 10px 10px;
+ width: 200px;
+}
+
+div.toc li {
+ background: url("bdwn.png") no-repeat scroll 0 5px transparent;
+ font: 10px/1.2 Verdana,DejaVu Sans,Geneva,sans-serif;
+ margin-top: 5px;
+ padding-left: 10px;
+ padding-top: 2px;
+}
+
+div.toc h3 {
+ font: bold 12px/1.2 Arial,FreeSans,sans-serif;
+ color: #4665A2;
+ border-bottom: 0 none;
+ margin: 0;
+}
+
+div.toc ul {
+ list-style: none outside none;
+ border: medium none;
+ padding: 0px;
+}
+
+div.toc li.level1 {
+ margin-left: 0px;
+}
+
+div.toc li.level2 {
+ margin-left: 15px;
+}
+
+div.toc li.level3 {
+ margin-left: 30px;
+}
+
+div.toc li.level4 {
+ margin-left: 45px;
+}
+
+.inherit_header {
+ font-weight: bold;
+ color: gray;
+ cursor: pointer;
+ -webkit-touch-callout: none;
+ -webkit-user-select: none;
+ -khtml-user-select: none;
+ -moz-user-select: none;
+ -ms-user-select: none;
+ user-select: none;
+}
+
+.inherit_header td {
+ padding: 6px 0px 2px 5px;
+}
+
+.inherit {
+ display: none;
+}
+
+tr.heading h2 {
+ margin-top: 12px;
+ margin-bottom: 4px;
+}
+
+/* tooltip related style info */
+
+.ttc {
+ position: absolute;
+ display: none;
+}
+
+#powerTip {
+ cursor: default;
+ white-space: nowrap;
+ background-color: white;
+ border: 1px solid gray;
+ border-radius: 4px 4px 4px 4px;
+ box-shadow: 1px 1px 7px gray;
+ display: none;
+ font-size: smaller;
+ max-width: 80%;
+ opacity: 0.9;
+ padding: 1ex 1em 1em;
+ position: absolute;
+ z-index: 2147483647;
+}
+
+#powerTip div.ttdoc {
+ color: grey;
+ font-style: italic;
+}
+
+#powerTip div.ttname a {
+ font-weight: bold;
+}
+
+#powerTip div.ttname {
+ font-weight: bold;
+}
+
+#powerTip div.ttdeci {
+ color: #006318;
+}
+
+#powerTip div {
+ margin: 0px;
+ padding: 0px;
+ font: 12px/16px Roboto,sans-serif;
+}
+
+#powerTip:before, #powerTip:after {
+ content: "";
+ position: absolute;
+ margin: 0px;
+}
+
+#powerTip.n:after, #powerTip.n:before,
+#powerTip.s:after, #powerTip.s:before,
+#powerTip.w:after, #powerTip.w:before,
+#powerTip.e:after, #powerTip.e:before,
+#powerTip.ne:after, #powerTip.ne:before,
+#powerTip.se:after, #powerTip.se:before,
+#powerTip.nw:after, #powerTip.nw:before,
+#powerTip.sw:after, #powerTip.sw:before {
+ border: solid transparent;
+ content: " ";
+ height: 0;
+ width: 0;
+ position: absolute;
+}
+
+#powerTip.n:after, #powerTip.s:after,
+#powerTip.w:after, #powerTip.e:after,
+#powerTip.nw:after, #powerTip.ne:after,
+#powerTip.sw:after, #powerTip.se:after {
+ border-color: rgba(255, 255, 255, 0);
+}
+
+#powerTip.n:before, #powerTip.s:before,
+#powerTip.w:before, #powerTip.e:before,
+#powerTip.nw:before, #powerTip.ne:before,
+#powerTip.sw:before, #powerTip.se:before {
+ border-color: rgba(128, 128, 128, 0);
+}
+
+#powerTip.n:after, #powerTip.n:before,
+#powerTip.ne:after, #powerTip.ne:before,
+#powerTip.nw:after, #powerTip.nw:before {
+ top: 100%;
+}
+
+#powerTip.n:after, #powerTip.ne:after, #powerTip.nw:after {
+ border-top-color: #ffffff;
+ border-width: 10px;
+ margin: 0px -10px;
+}
+#powerTip.n:before {
+ border-top-color: #808080;
+ border-width: 11px;
+ margin: 0px -11px;
+}
+#powerTip.n:after, #powerTip.n:before {
+ left: 50%;
+}
+
+#powerTip.nw:after, #powerTip.nw:before {
+ right: 14px;
+}
+
+#powerTip.ne:after, #powerTip.ne:before {
+ left: 14px;
+}
+
+#powerTip.s:after, #powerTip.s:before,
+#powerTip.se:after, #powerTip.se:before,
+#powerTip.sw:after, #powerTip.sw:before {
+ bottom: 100%;
+}
+
+#powerTip.s:after, #powerTip.se:after, #powerTip.sw:after {
+ border-bottom-color: #ffffff;
+ border-width: 10px;
+ margin: 0px -10px;
+}
+
+#powerTip.s:before, #powerTip.se:before, #powerTip.sw:before {
+ border-bottom-color: #808080;
+ border-width: 11px;
+ margin: 0px -11px;
+}
+
+#powerTip.s:after, #powerTip.s:before {
+ left: 50%;
+}
+
+#powerTip.sw:after, #powerTip.sw:before {
+ right: 14px;
+}
+
+#powerTip.se:after, #powerTip.se:before {
+ left: 14px;
+}
+
+#powerTip.e:after, #powerTip.e:before {
+ left: 100%;
+}
+#powerTip.e:after {
+ border-left-color: #ffffff;
+ border-width: 10px;
+ top: 50%;
+ margin-top: -10px;
+}
+#powerTip.e:before {
+ border-left-color: #808080;
+ border-width: 11px;
+ top: 50%;
+ margin-top: -11px;
+}
+
+#powerTip.w:after, #powerTip.w:before {
+ right: 100%;
+}
+#powerTip.w:after {
+ border-right-color: #ffffff;
+ border-width: 10px;
+ top: 50%;
+ margin-top: -10px;
+}
+#powerTip.w:before {
+ border-right-color: #808080;
+ border-width: 11px;
+ top: 50%;
+ margin-top: -11px;
+}
+
+@media print
+{
+ #top { display: none; }
+ #side-nav { display: none; }
+ #nav-path { display: none; }
+ body { overflow:visible; }
+ h1, h2, h3, h4, h5, h6 { page-break-after: avoid; }
+ .summary { display: none; }
+ .memitem { page-break-inside: avoid; }
+ #doc-content
+ {
+ margin-left:0 !important;
+ height:auto !important;
+ width:auto !important;
+ overflow:inherit;
+ display:inline;
+ }
+}
+
diff --git a/external/epid-sdk-3.0.0/doc/html/doxygen.png b/external/epid-sdk-3.0.0/doc/html/doxygen.png
new file mode 100644
index 00000000..3ff17d80
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/doxygen.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/dynsections.js b/external/epid-sdk-3.0.0/doc/html/dynsections.js
new file mode 100644
index 00000000..85e18369
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/dynsections.js
@@ -0,0 +1,97 @@
+function toggleVisibility(linkObj)
+{
+ var base = $(linkObj).attr('id');
+ var summary = $('#'+base+'-summary');
+ var content = $('#'+base+'-content');
+ var trigger = $('#'+base+'-trigger');
+ var src=$(trigger).attr('src');
+ if (content.is(':visible')===true) {
+ content.hide();
+ summary.show();
+ $(linkObj).addClass('closed').removeClass('opened');
+ $(trigger).attr('src',src.substring(0,src.length-8)+'closed.png');
+ } else {
+ content.show();
+ summary.hide();
+ $(linkObj).removeClass('closed').addClass('opened');
+ $(trigger).attr('src',src.substring(0,src.length-10)+'open.png');
+ }
+ return false;
+}
+
+function updateStripes()
+{
+ $('table.directory tr').
+ removeClass('even').filter(':visible:even').addClass('even');
+}
+
+function toggleLevel(level)
+{
+ $('table.directory tr').each(function() {
+ var l = this.id.split('_').length-1;
+ var i = $('#img'+this.id.substring(3));
+ var a = $('#arr'+this.id.substring(3));
+ if (l
+
+
+
+common Directory Reference
+
+
+
+
+
+Common code shared between core sub-components.
+ +More... ++Directories | |
| directory | math |
| Math primitives. | |
+Files | |
| file | bitsupplier.h |
| Random data supplier interface. | |
| file | errors.h |
| Error reporting. | |
| file | file_parser.h |
| Epid issuer material parsing utilities. | |
| file | stdtypes.h |
| C99 standard data types. | |
| file | types.h |
| SDK data types. | |
Detailed Description
+Common code shared between core sub-components.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/ecgroup_8h.html b/external/epid-sdk-3.0.0/doc/html/ecgroup_8h.html
new file mode 100644
index 00000000..adf8f29e
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/ecgroup_8h.html
@@ -0,0 +1,165 @@
+
+
+
+
+
+
+
+
+
+
+
+
+ecdsa.h File Reference
+
+
+
+
+
+
+
+
+Ecdsa interface. +More...
+#include <stddef.h>+
#include "epid/common/errors.h"+
#include "epid/common/types.h"+
#include "epid/common/bitsupplier.h"+
+Functions | |
| EpidStatus | EcdsaVerifyBuffer (void const *buf, size_t buf_len, EcdsaPublicKey const *pubkey, EcdsaSignature const *sig) |
| Verifies authenticity of a digital signature over a buffer. More... | |
| EpidStatus | EcdsaSignBuffer (void const *buf, size_t buf_len, EcdsaPrivateKey const *privkey, BitSupplier rnd_func, void *rnd_param, EcdsaSignature *sig) |
| Creates ECDSA signature of buffer. More... | |
Detailed Description
+Ecdsa interface.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/epid__overview_8dox.html b/external/epid-sdk-3.0.0/doc/html/epid__overview_8dox.html
new file mode 100644
index 00000000..1aae71e9
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/epid__overview_8dox.html
@@ -0,0 +1,82 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Elliptic curve group interface. +More...
+#include "epid/common/stdtypes.h"+
#include "epid/common/errors.h"+
#include "epid/common/math/bignum.h"+
#include "epid/common/math/finitefield.h"+
#include "epid/common/types.h"+
+Typedefs | |
| +typedef struct EcGroup | EcGroup |
| Elliptic curve group over finite field. | |
| +typedef struct EcPoint | EcPoint |
| Point on elliptic curve over finite field. | |
+Functions | |
| EpidStatus | NewEcGroup (FiniteField const *ff, FfElement const *a, FfElement const *b, FfElement const *x, FfElement const *y, BigNum const *order, BigNum const *cofactor, EcGroup **g) |
| Constructs a new EcGroup. More... | |
| void | DeleteEcGroup (EcGroup **g) |
| Deletes a previously allocated EcGroup. More... | |
| EpidStatus | NewEcPoint (EcGroup const *g, EcPoint **p) |
| Creates a new EcPoint. More... | |
| void | DeleteEcPoint (EcPoint **p) |
| Deletes a previously allocated EcPoint. More... | |
| EpidStatus | ReadEcPoint (EcGroup *g, void const *p_str, size_t strlen, EcPoint *p) |
| Deserializes an EcPoint from a string. More... | |
| EpidStatus | WriteEcPoint (EcGroup *g, EcPoint const *p, void *p_str, size_t strlen) |
| Serializes an EcPoint to a string. More... | |
| EpidStatus | EcMul (EcGroup *g, EcPoint const *a, EcPoint const *b, EcPoint *r) |
| Multiplies two elements in an elliptic curve group. More... | |
| EpidStatus | EcExp (EcGroup *g, EcPoint const *a, BigNumStr const *b, EcPoint *r) |
| Raises a point in an elliptic curve group to a power. More... | |
| EpidStatus | EcSscmExp (EcGroup *g, EcPoint const *a, BigNumStr const *b, EcPoint *r) |
| Software side-channel mitigated implementation of EcExp. More... | |
| EpidStatus | EcMultiExp (EcGroup *g, EcPoint const **a, BigNumStr const **b, size_t m, EcPoint *r) |
| Multi-exponentiates elements in elliptic curve group. More... | |
| EpidStatus | EcMultiExpBn (EcGroup *g, EcPoint const **a, BigNum const **b, size_t m, EcPoint *r) |
| Multi-exponentiates elements in elliptic curve group. More... | |
| EpidStatus | EcSscmMultiExp (EcGroup *g, EcPoint const **a, BigNumStr const **b, size_t m, EcPoint *r) |
| Software side-channel mitigated implementation of EcMultiExp. More... | |
| EpidStatus | EcGetRandom (EcGroup *g, BitSupplier rnd_func, void *rnd_func_param, EcPoint *r) |
| Generates a random element from an elliptic curve group. More... | |
| EpidStatus | EcInGroup (EcGroup *g, void const *p_str, size_t strlen, bool *in_group) |
| Checks if a point is in an elliptic curve group. More... | |
| EpidStatus | Epid11EcHash (EcGroup *g, void const *msg, size_t msg_len, EcPoint *r) |
| Hashes an arbitrary message to an Intel(R) EPID 1.1 element in an elliptic curve group. More... | |
| EpidStatus | EcHash (EcGroup *g, void const *msg, size_t msg_len, HashAlg hash_alg, EcPoint *r) |
| Hashes an arbitrary message to an element in an elliptic curve group. More... | |
| EpidStatus | EcMakePoint (EcGroup *g, FfElement const *x, EcPoint *r) |
| Sets an EcPoint variable to a point on a curve. More... | |
| EpidStatus | EcInverse (EcGroup *g, EcPoint const *p, EcPoint *r) |
| Computes the additive inverse of an EcPoint. More... | |
| EpidStatus | EcIsEqual (EcGroup *g, EcPoint const *a, EcPoint const *b, bool *is_equal) |
| Checks if two EcPoints are equal. More... | |
| EpidStatus | EcIsIdentity (EcGroup *g, EcPoint const *p, bool *is_identity) |
| Checks if an EcPoint is the identity element. More... | |
Detailed Description
+Elliptic curve group interface.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/epid_diagram_high_level_interaction.png b/external/epid-sdk-3.0.0/doc/html/epid_diagram_high_level_interaction.png
new file mode 100644
index 00000000..1013eb05
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/epid_diagram_high_level_interaction.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/epid_diagram_high_level_use_case.png b/external/epid-sdk-3.0.0/doc/html/epid_diagram_high_level_use_case.png
new file mode 100644
index 00000000..acc63747
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/epid_diagram_high_level_use_case.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/epid_diagram_issuer_high_level.png b/external/epid-sdk-3.0.0/doc/html/epid_diagram_issuer_high_level.png
new file mode 100644
index 00000000..d03d6b9f
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/epid_diagram_issuer_high_level.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/epid_diagram_member_high_level.png b/external/epid-sdk-3.0.0/doc/html/epid_diagram_member_high_level.png
new file mode 100644
index 00000000..58d784f4
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/epid_diagram_member_high_level.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/epid_diagram_verifier_high_level.png b/external/epid-sdk-3.0.0/doc/html/epid_diagram_verifier_high_level.png
new file mode 100644
index 00000000..bb92560c
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/epid_diagram_verifier_high_level.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/epidstyle.css b/external/epid-sdk-3.0.0/doc/html/epidstyle.css
new file mode 100644
index 00000000..0ad7ff86
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/epidstyle.css
@@ -0,0 +1,325 @@
+.image {
+ text-align: left;
+}
+body {
+ color: #333333;
+ background-color: #ffffff;
+ font-family: Verdana, Arial, sans-serif;
+ font-size: 10pt;
+ margin-left: 0px;
+}
+h1 {
+ color: #0860a8;
+ font-size: 15pt;
+ padding-bottom: 1px;
+ margin-left: 0pt;
+ margin-bottom: 0px;
+ border-bottom: 1px solid #0860A8;
+ font-weight: normal;
+}
+h1.title {
+ border-bottom: 0 none;
+ margin-left: 0;
+ font-weight: normal;
+}
+h2 {
+ color: #0860a8;
+ font-weight: lighter;
+ margin-top: 5pt;
+ margin-bottom: 0;
+ font-size: 13pt;
+}
+h3 {
+ color: #333333;
+ font-weight: bold;
+ margin-top: 5pt;
+ margin-bottom: 0;
+ font-size: 11pt;
+}
+a:link {
+ color: #0860a8;
+ text-decoration: none;
+}
+a:visited {
+ color: #0860a8;
+ text-decoration: none;
+}
+a:active {
+ color: #0860a8;
+ text-decoration: underline;
+}
+a:hover {
+ color: #0860a8;
+ text-decoration: underline;
+}
+p {
+ font-size: inherit;
+ line-height: 120%;
+ margin-top: 0;
+ margin-bottom: 5pt;
+ font-family: Verdana, Arial, sans-serif;
+ font-size: 10pt;
+}
+blockquote {
+ margin-top: 0;
+ margin-bottom: 0;
+}
+HR {
+ color: #555555;
+ border: 0;
+ background: #555555;
+ height: 1px;
+ margin-left: 0;
+}
+p.Note {
+ margin-top: 0;
+ margin-left: 25px;
+ margin-bottom: 10pt;
+}
+h3.NoteTipHead {
+ color: #006699;
+ margin-top: 11pt;
+ padding-bottom: 0;
+ line-height: 18px;
+ text-transform: uppercase;
+}
+LI.h3-NoteTipHead {
+ color: #006699;
+ line-height: 18px;
+ text-transform: uppercase;
+}
+h3.NoteTipHead img {
+ vertical-align: middle;
+}
+/*
+table {
+ margin-bottom: 5pt;
+ border-collapse: collapse;
+ margin-top: 0.3em;
+ font-size: 10pt;
+}
+tr {
+ vertical-align: top;
+}
+th {
+ padding: 4px;
+ text-align: left;
+ background-color: #555555;
+ font-weight: bold;
+ margin-top: 0;
+ margin-bottom: 0;
+ color: #ffffff;
+ font-size: 11pt;
+ border: 1px #bababa solid;
+}
+td {
+ border: 1px #bababa solid;
+ vertical-align: top;
+ font-size: 9pt;
+ margin-bottom: 0px;
+ margin-top: 0;
+ margin-left: 0;
+ padding: 0px;
+ text-align: left;
+}
+P.TableCell {
+ margin-top: 0;
+ margin-left: 4px;
+ padding: 0px;
+ margin-bottom: 0;
+ font-size: 9pt;
+ line-height: 120%;
+}
+td p {
+ margin-top: 0;
+ margin-left: 4;
+ padding: 0;
+ margin-bottom: 0;
+ text-align: left;
+ font-size: 9pt;
+ line-height: 120%;
+}
+td h3 {
+ margin-top: 0;
+ margin-left: 0;
+ padding: 0;
+ text-align: left;
+ font-size: inherit;
+ line-height: 120%;
+}
+td ul {
+ font-size: inherit;
+}
+td ol {
+ font-size: inherit;
+}
+td.noBorder {
+ border: 0px none;
+}
+h3.TableHead {
+ padding: 4px;
+ text-align: left;
+ background-color: #555555;
+ font-weight: bold;
+ margin-top: 0;
+ margin-bottom: 0;
+ color: #ffffff;
+ font-size: 11pt;
+}
+td table {
+ margin-left: 0;
+}
+*/
+ol {
+ margin-bottom: 1em;
+ font-size: inherit;
+ margin-top: 0px;
+ line-height: 100%;
+ list-style-type: decimal;
+}
+ol ol {
+ list-style: lower-alpha;
+ margin-bottom: 0em;
+ font-size: inherit;
+}
+ol ul {
+ margin-bottom: 0px;
+ font-size: inherit;
+}
+ol p {
+ margin-bottom: 0.2em;
+ margin-top: 0.2em;
+ margin-left: 0;
+ padding-left: 0;
+ font-size: inherit;
+}
+ol.Note {
+ margin-left: 25px;
+}
+ul {
+ margin-bottom: 1em;
+ font-size: inherit;
+ margin-top: 0px;
+ line-height: 100%;
+}
+ul p {
+ margin-bottom: 0.2em;
+ margin-top: 0.2em;
+ margin-left: 0;
+ padding-left: 0;
+ font-size: inherit;
+}
+ul ol {
+ margin-bottom: 0em;
+ font-size: inherit;
+ list-style-type: decimal;
+}
+ul ul {
+ margin-bottom: 0px;
+ font-size: inherit;
+}
+ul.Note {
+ margin-left: 25px;
+}
+li {
+ font-size: inherit;
+ margin-top: 0px;
+ line-height: 130%;
+}
+li p {
+ margin-bottom: 0.2em;
+ margin-top: 0.2em;
+ margin-left: 0;
+ padding-left: 0;
+ font-size: inherit;
+}
+p.twoColumnListHead {
+ color: #000000;
+ margin-top: 0;
+ margin-bottom: 0;
+ font-weight: bold;
+}
+dl {
+ margin-bottom: 1em;
+ font-size: inherit;
+ margin-top: 0px;
+}
+dt {
+ font-weight: bold;
+ margin-top: 1em;
+}
+dd {
+ font-size: inherit;
+ margin-top: 0;
+}
+dd p {
+ margin-bottom: 0.2em;
+ margin-top: 0.2em;
+ font-size: inherit;
+}
+p.pRelatedLink {
+ margin-top: 0px;
+ margin-bottom: 0px;
+}
+SPAN.Code {
+ font-family: "Courier New", Courier, monospace;
+}
+span.Variable {
+ font-family: Courier, monospace;
+ font-style: italic;
+}
+SPAN.Superscript {
+ vertical-align: top;
+ font-size: 80%;
+}
+SPAN.Color {
+ color: #6C9A65;
+}
+SPAN.Color2 {
+ color: #0860a8;
+}
+SPAN.Color3 {
+ color: #fd0b01;
+}
+SPAN.Color4 {
+ color: #f8aa06;
+}
+.Code {
+ font-family: "Courier New", Courier, monospace;
+ background-color: #eeeeee;
+}
+.link_buttons {
+ background-color: #EEEEEE;
+ border-color: #EEEEEE;
+ border-width: 1px;
+ padding: 4px;
+}
+.Color {
+ color: #6C9A65;
+}
+.Preformatted {
+ x-text-tab-stops: repeat 1in;
+ margin-top: 0;
+ margin-bottom: 0;
+ font-size: 10pt;
+ font-family: "Courier New", Courier, monospace;
+ background-color: #eeeeee;
+}
+
+/* Hide top level nav-tree node */
+#nav-tree-contents > ul > li > div {
+ display: none;
+}
+
+/* Shift remaining nav-tree nodes left */
+#nav-tree-contents > ul {
+ margin: 0;
+ padding: 0;
+ margin-left: -16px;
+ margin-top: -2em; /* nav-tree hack*/
+}
+
+#projectlink {
+ color:inherit;
+ text-decoration:none;
+}
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/errors_8h.html b/external/epid-sdk-3.0.0/doc/html/errors_8h.html
new file mode 100644
index 00000000..ecda4e4c
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/errors_8h.html
@@ -0,0 +1,124 @@
+
+
+
+
+
+
+
+
+
+
+
+doc/docsrc/epid_overview.dox File Reference
+
+
+This file is used by Doxygen to generate documentation. +More...
+Detailed Description
+This file is used by Doxygen to generate documentation.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/examples_8dox.html b/external/epid-sdk-3.0.0/doc/html/examples_8dox.html
new file mode 100644
index 00000000..0114afb9
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/examples_8dox.html
@@ -0,0 +1,82 @@
+
+
+
+
+
+
+
+
+
+
+
+
+errors.h File Reference
+
+
+
+
+
+Error reporting. +More...
++Enumerations | |
| enum | EpidStatus { + kEpidNoErr = 0, +kEpidSigValid = 0, +kEpidSigInvalid = 1, +kEpidSigRevokedInGroupRl = 2, + + kEpidSigRevokedInPrivRl = 3, +kEpidSigRevokedInSigRl = 4, +kEpidSigRevokedInVerifierRl = 5, +kEpidErr = -999, + + kEpidNotImpl, +kEpidBadArgErr, +kEpidNoMemErr, +kEpidMemAllocErr, + + kEpidMathErr, +kEpidDivByZeroErr, +kEpidUnderflowErr, +kEpidHashAlgorithmNotSupported, + + kEpidRandMaxIterErr, +kEpidDuplicateErr, +kEpidInconsistentBasenameSetErr, +kEpidMathQuadraticNonResidueError + + } |
| Return status for SDK functions. More... | |
+Functions | |
| char const * | EpidStatusToString (EpidStatus e) |
| Returns string representation of error code. More... | |
Detailed Description
+Error reporting.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/file__parser_8h.html b/external/epid-sdk-3.0.0/doc/html/file__parser_8h.html
new file mode 100644
index 00000000..5b29071b
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/file__parser_8h.html
@@ -0,0 +1,154 @@
+
+
+
+
+
+
+
+
+
+
+
+doc/docsrc/examples.dox File Reference
+
+
+This file is used by Doxygen to generate documentation. +More...
+Detailed Description
+This file is used by Doxygen to generate documentation.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/files.html b/external/epid-sdk-3.0.0/doc/html/files.html
new file mode 100644
index 00000000..ab34f5b2
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/files.html
@@ -0,0 +1,105 @@
+
+
+
+
+
+
+
+
+
+
+
+
+file_parser.h File Reference
+
+
+
+
+
+
+
+Epid issuer material parsing utilities. +More...
++Data Structures | |
| struct | EpidFileHeader |
| Intel(R) EPID binary file header. More... | |
| struct | EpidCaCertificate |
| IoT CA Certificate binary format. More... | |
+Enumerations | |
| enum | EpidVersion { kEpid1x, +kEpid2x, +kNumEpidVersions + } |
| Recognized Intel(R) EPID versions. More... | |
| enum | EpidFileType { + kIssuingCaPubKeyFile, +kGroupPubKeyFile, +kPrivRlFile, +kSigRlFile, + + kGroupRlFile, +kPrivRlRequestFile, +kSigRlRequestFile, +kGroupRlRequestFile, + + kNumFileTypes + + } |
| Recognized Intel(R) EPID file types. More... | |
+Functions | |
| EpidStatus | EpidParseFileHeader (void const *buf, size_t len, EpidVersion *epid_version, EpidFileType *file_type) |
| Extracts Intel(R) EPID Binary Output File header information. More... | |
| EpidStatus | EpidParseGroupPubKeyFile (void const *buf, size_t len, EpidCaCertificate const *cert, GroupPubKey *pubkey) |
| Extracts group public key from buffer in issuer binary format. More... | |
| EpidStatus | EpidParsePrivRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, PrivRl *rl, size_t *rl_len) |
| Extracts private key revocation list from buffer in issuer binary format. More... | |
| EpidStatus | EpidParseSigRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, SigRl *rl, size_t *rl_len) |
| Extracts signature revocation list from buffer in issuer binary format. More... | |
| EpidStatus | EpidParseGroupRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, GroupRl *rl, size_t *rl_len) |
| Extracts group revocation list from buffer in issuer binary format. More... | |
+Variables | |
| +const OctStr16 | kEpidVersionCode [kNumEpidVersions] |
| Encoding of issuer material Intel(R) EPID versions. | |
| +const OctStr16 | kEpidFileTypeCode [kNumFileTypes] |
| Encoding of issuer material file types. | |
Detailed Description
+Epid issuer material parsing utilities.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/finitefield_8h.html b/external/epid-sdk-3.0.0/doc/html/finitefield_8h.html
new file mode 100644
index 00000000..ca7b07f7
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/finitefield_8h.html
@@ -0,0 +1,174 @@
+
+
+
+
+
+
+
+
+
+
+
+File List
+
+Here is a list of all documented files with brief descriptions:
+
+
+
+[detail level 1234]
| ▼ epid | Core Intel® EPID functionality |
| ▼ common | Common code shared between core sub-components |
| ▼ 1.1 | |
| file_parser.h | Epid 1.1 issuer material parsing utilities |
| types.h | SDK data types for Intel(R) EPID 1.1 |
| ▼ math | Math primitives |
| bignum.h | Big number interface |
| ecdsa.h | Ecdsa interface |
| ecgroup.h | Elliptic curve group interface |
| finitefield.h | Finite field interface |
| hash.h | Hash primitives |
| pairing.h | Pairing interface |
| printutils.h | Print helper interface |
| tatepairing.h | Intel(R) EPID 1.1 Pairing interface |
| bitsupplier.h | Random data supplier interface |
| errors.h | Error reporting |
| file_parser.h | Epid issuer material parsing utilities |
| stdtypes.h | C99 standard data types |
| types.h | SDK data types |
| ▼ member | Member functionality |
| api.h | Intel(R) EPID SDK member API |
| ▼ verifier | Verifier functionality |
| ▼ 1.1 | |
| api.h | Intel(R) EPID SDK verifier Intel(R) EPID 1.1 API |
| api.h | Intel(R) EPID SDK verifier API |
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/folderclosed.png b/external/epid-sdk-3.0.0/doc/html/folderclosed.png
new file mode 100644
index 00000000..bb8ab35e
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/folderclosed.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/folderopen.png b/external/epid-sdk-3.0.0/doc/html/folderopen.png
new file mode 100644
index 00000000..d6c7f676
Binary files /dev/null and b/external/epid-sdk-3.0.0/doc/html/folderopen.png differ
diff --git a/external/epid-sdk-3.0.0/doc/html/functions.html b/external/epid-sdk-3.0.0/doc/html/functions.html
new file mode 100644
index 00000000..ee04435e
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/functions.html
@@ -0,0 +1,510 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Finite field interface. +More...
+#include "epid/common/stdtypes.h"+
#include "epid/common/bitsupplier.h"+
#include "epid/common/errors.h"+
#include "epid/common/math/bignum.h"+
#include "epid/common/types.h"+
+Typedefs | |
| +typedef struct FiniteField | FiniteField |
| A finite field. | |
| +typedef struct FfElement | FfElement |
| An element in a finite field. | |
+Functions | |
| EpidStatus | NewFiniteField (BigNumStr const *prime, FiniteField **ff) |
| Creates new finite field. More... | |
| EpidStatus | NewFiniteFieldViaBinomalExtension (FiniteField const *ground_field, FfElement const *ground_element, int degree, FiniteField **ff) |
| Creates a new finite field using binomial extension. More... | |
| EpidStatus | NewFiniteFieldViaPolynomialExtension (FiniteField const *ground_field, BigNumStr const *irr_polynomial, int degree, FiniteField **ff) |
| Creates a new finite field using polynomial extension. More... | |
| void | DeleteFiniteField (FiniteField **ff) |
| Frees a previously allocated FiniteField. More... | |
| EpidStatus | NewFfElement (FiniteField const *ff, FfElement **new_ff_elem) |
| Creates a new finite field element. More... | |
| void | DeleteFfElement (FfElement **ff_elem) |
| Frees a previously allocated FfElement. More... | |
| EpidStatus | ReadFfElement (FiniteField *ff, void const *ff_elem_str, size_t strlen, FfElement *ff_elem) |
| Deserializes a FfElement from a string. More... | |
| EpidStatus | InitFfElementFromBn (FiniteField *ff, BigNum *bn, FfElement *ff_elem) |
| Initializes an existing FfElement from a BigNum. More... | |
| EpidStatus | WriteFfElement (FiniteField *ff, FfElement const *ff_elem, void *ff_elem_str, size_t strlen) |
| Serializes a finite field element to a string. More... | |
| EpidStatus | FfNeg (FiniteField *ff, FfElement const *a, FfElement *r) |
| Calculates the additive inverse of a finite field element. More... | |
| EpidStatus | FfInv (FiniteField *ff, FfElement const *a, FfElement *r) |
| Calculates the multiplicative inverse of a finite field element. More... | |
| EpidStatus | FfAdd (FiniteField *ff, FfElement const *a, FfElement const *b, FfElement *r) |
| Adds two finite field elements. More... | |
| EpidStatus | FfSub (FiniteField *ff, FfElement const *a, FfElement const *b, FfElement *r) |
| Subtracts two finite field elements. More... | |
| EpidStatus | FfMul (FiniteField *ff, FfElement const *a, FfElement const *b, FfElement *r) |
| Multiplies two finite field elements. More... | |
| EpidStatus | FfIsZero (FiniteField *ff, FfElement const *a, bool *is_zero) |
| Checks if given finite field element is the additive identity (zero). More... | |
| EpidStatus | FfExp (FiniteField *ff, FfElement const *a, BigNum const *b, FfElement *r) |
| Raises an element of a finite field to a power. More... | |
| EpidStatus | FfMultiExp (FiniteField *ff, FfElement const **a, BigNumStr const **b, size_t m, FfElement *r) |
| Multi-exponentiates finite field elements. More... | |
| EpidStatus | FfMultiExpBn (FiniteField *ff, FfElement const **a, BigNum const **b, size_t m, FfElement *r) |
| Multi-exponentiates finite field elements. More... | |
| EpidStatus | FfSscmMultiExp (FiniteField *ff, FfElement const **a, BigNumStr const **b, size_t m, FfElement *r) |
| Software side-channel mitigated implementation of FfMultiExp. More... | |
| EpidStatus | FfIsEqual (FiniteField *ff, FfElement const *a, FfElement const *b, bool *is_equal) |
| Checks if two finite field elements are equal. More... | |
| EpidStatus | FfHash (FiniteField *ff, void const *msg, size_t msg_len, HashAlg hash_alg, FfElement *r) |
| Hashes an arbitrary message to an element in a finite field. More... | |
| EpidStatus | FfGetRandom (FiniteField *ff, BigNumStr const *low_bound, BitSupplier rnd_func, void *rnd_param, FfElement *r) |
| Generate random finite field element. More... | |
| EpidStatus | FfSqrt (FiniteField *ff, FfElement const *a, FfElement *r) |
| Finds a square root of a finite field element. More... | |
Detailed Description
+Finite field interface.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/functions_vars.html b/external/epid-sdk-3.0.0/doc/html/functions_vars.html
new file mode 100644
index 00000000..056b9bc5
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/functions_vars.html
@@ -0,0 +1,510 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented struct and union fields with links to the struct/union documentation for each field:
+
+- a -
-
+
- a +: Epid11GtElemStr +, Epid11Params +, EpidCaCertificate +, Fq12ElemStr +, Fq2ElemStr +, Fq3ElemStr +, Fq6ElemStr + +
- A +: MembershipCredential + +
- a +: PreComputedSignature + +
- A +: PrivKey + +
- a_tick +: Epid11Params + +
- ax +: CompressedPrivKey + +
- b -
-
+
- B +: BasicSignature +, Epid11BasicSignature + +
- b +: Epid11Params +, Epid11SigRlEntry +, Epid2Params +, EpidCaCertificate +, PreComputedSignature + +
- B +: PreComputedSignature + +
- b +: SigRlEntry + +
- B +: VerifierRl + +
- b_tick +: Epid11Params + +
- beta +: Epid2Params + +
- bk +: Epid11SigRl +, SigRl + +
- c -
-
+
- c +: BasicSignature +, Epid11BasicSignature +, Epid11NrProof +, JoinRequest +, NrProof + +
- coeff +: Epid11Params + +
- d -
-
+
- data +: BigNumStr +, EcdsaPrivateKey +, FpElemStr +, FqElemStr +, OctStr128 +, OctStr16 +, OctStr256 +, OctStr32 +, OctStr512 +, OctStr600 +, OctStr64 +, OctStr768 +, OctStr80 +, OctStr8 +, Sha256Digest + +
- e -
-
+
- e12 +: Epid11VerifierPrecomp +, MemberPrecomp +, VerifierPrecomp + +
- e22 +: Epid11VerifierPrecomp +, MemberPrecomp +, VerifierPrecomp + +
- e2w +: Epid11VerifierPrecomp +, MemberPrecomp +, VerifierPrecomp + +
- ea2 +: MemberPrecomp + +
- eg12 +: VerifierPrecomp + +
- epid_version +: EpidFileHeader + +
- f -
-
+
- f +: Epid11PrivRl + +
- F +: JoinRequest + +
- f +: PrivKey +, PrivRl + +
- file_type +: EpidFileHeader + +
- g -
-
+
- g1 +: Epid11Params +, Epid2Params + +
- g2 +: Epid11Params +, Epid2Params + +
- g3 +: Epid11Params + +
- gamma +: IPrivKey + +
- gid +: CompressedPrivKey +, Epid11GroupPubKey +, Epid11GroupRl +, Epid11PrivRl +, Epid11SigRl +, Epid11VerifierPrecomp +, GroupPubKey +, GroupRl +, IPrivKey +, MembershipCredential +, PrivKey +, PrivRl +, SigRl +, VerifierPrecomp +, VerifierRl + +
- h -
-
+
- h +: Epid11Params + +
- h1 +: Epid11GroupPubKey +, GroupPubKey + +
- h2 +: Epid11GroupPubKey +, GroupPubKey + +
- h_tick +: Epid11Params + +
- header +: EpidCaCertificate + +
- k -
-
+
- K +: BasicSignature +, Epid11BasicSignature + +
- k +: Epid11SigRlEntry + +
- K +: PreComputedSignature + +
- k +: SigRlEntry + +
- K +: VerifierRl + +
- n -
-
+
- n1 +: Epid11PrivRl +, PrivRl + +
- n2 +: Epid11Signature +, Epid11SigRl +, EpidSignature +, SigRl + +
- n3 +: Epid11GroupRl +, GroupRl + +
- n4 +: VerifierRl + +
- nd +: Epid11BasicSignature + +
- neg +: Epid2Params + +
- o -
-
+
- orderG2 +: Epid11Params + +
- p -
-
+
- p +: Epid11Params +, Epid2Params + +
- p_tick +: Epid11Params + +
- prime +: EpidCaCertificate + +
- pubkey +: EpidCaCertificate + +
- q -
-
+
- q +: Epid11Params +, Epid2Params + +
- q_tick +: Epid11Params + +
- qnr +: Epid11Params + +
- r -
-
+
- r +: EpidCaCertificate + +
- R1 +: PreComputedSignature + +
- R2 +: PreComputedSignature + +
- ra +: PreComputedSignature + +
- rb +: PreComputedSignature + +
- rf +: PreComputedSignature + +
- rl_ver +: Epid11Signature +, EpidSignature + +
- rx +: PreComputedSignature + +
- s -
-
+
- s +: JoinRequest + +
- sa +: BasicSignature +, Epid11BasicSignature + +
- salpha +: Epid11BasicSignature + +
- sb +: BasicSignature +, Epid11BasicSignature + +
- sbeta +: Epid11BasicSignature + +
- seed +: CompressedPrivKey + +
- sf +: BasicSignature +, Epid11BasicSignature + +
- sigma +: Epid11Signature +, EpidSignature + +
- sigma0 +: Epid11Signature +, EpidSignature + +
- signature +: EpidCaCertificate + +
- smu +: Epid11NrProof +, NrProof + +
- snu +: Epid11NrProof +, NrProof + +
- sx +: BasicSignature +, Epid11BasicSignature + +
- sy +: Epid11BasicSignature + +
- t -
-
+
- T +: BasicSignature +, Epid11NrProof + +
- t +: Epid2Params + +
- T +: NrProof +, PreComputedSignature + +
- T1 +: Epid11BasicSignature + +
- T2 +: Epid11BasicSignature + +
- v -
-
+
- version +: Epid11GroupRl +, Epid11PrivRl +, Epid11SigRl +, GroupRl +, PrivRl +, SigRl +, VerifierRl + +
- w -
-
+
- w +: Epid11GroupPubKey +, GroupPubKey + +
- x -
-
+
- x +: EcdsaPublicKey +, EcdsaSignature +, Epid11G2ElemStr +, EpidCaCertificate +, G1ElemStr +, G2ElemStr +, GtElemStr +, MembershipCredential +, PrivKey + +
- xi +: Epid2Params + +
- y -
-
+
- y +: EcdsaPublicKey +, EcdsaSignature +, Epid11G2ElemStr +, EpidCaCertificate +, G1ElemStr +, G2ElemStr + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals.html b/external/epid-sdk-3.0.0/doc/html/globals.html
new file mode 100644
index 00000000..bc81e4fc
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals.html
@@ -0,0 +1,79 @@
+
+
+
+
+
+
+
+
+
+
+
+- a -
-
+
- a +: Epid11GtElemStr +, Epid11Params +, EpidCaCertificate +, Fq12ElemStr +, Fq2ElemStr +, Fq3ElemStr +, Fq6ElemStr + +
- A +: MembershipCredential + +
- a +: PreComputedSignature + +
- A +: PrivKey + +
- a_tick +: Epid11Params + +
- ax +: CompressedPrivKey + +
- b -
-
+
- B +: BasicSignature +, Epid11BasicSignature + +
- b +: Epid11Params +, Epid11SigRlEntry +, Epid2Params +, EpidCaCertificate +, PreComputedSignature + +
- B +: PreComputedSignature + +
- b +: SigRlEntry + +
- B +: VerifierRl + +
- b_tick +: Epid11Params + +
- beta +: Epid2Params + +
- bk +: Epid11SigRl +, SigRl + +
- c -
-
+
- c +: BasicSignature +, Epid11BasicSignature +, Epid11NrProof +, JoinRequest +, NrProof + +
- coeff +: Epid11Params + +
- d -
-
+
- data +: BigNumStr +, EcdsaPrivateKey +, FpElemStr +, FqElemStr +, OctStr128 +, OctStr16 +, OctStr256 +, OctStr32 +, OctStr512 +, OctStr600 +, OctStr64 +, OctStr768 +, OctStr80 +, OctStr8 +, Sha256Digest + +
- e -
-
+
- e12 +: Epid11VerifierPrecomp +, MemberPrecomp +, VerifierPrecomp + +
- e22 +: Epid11VerifierPrecomp +, MemberPrecomp +, VerifierPrecomp + +
- e2w +: Epid11VerifierPrecomp +, MemberPrecomp +, VerifierPrecomp + +
- ea2 +: MemberPrecomp + +
- eg12 +: VerifierPrecomp + +
- epid_version +: EpidFileHeader + +
- f -
-
+
- f +: Epid11PrivRl + +
- F +: JoinRequest + +
- f +: PrivKey +, PrivRl + +
- file_type +: EpidFileHeader + +
- g -
-
+
- g1 +: Epid11Params +, Epid2Params + +
- g2 +: Epid11Params +, Epid2Params + +
- g3 +: Epid11Params + +
- gamma +: IPrivKey + +
- gid +: CompressedPrivKey +, Epid11GroupPubKey +, Epid11GroupRl +, Epid11PrivRl +, Epid11SigRl +, Epid11VerifierPrecomp +, GroupPubKey +, GroupRl +, IPrivKey +, MembershipCredential +, PrivKey +, PrivRl +, SigRl +, VerifierPrecomp +, VerifierRl + +
- h -
-
+
- h +: Epid11Params + +
- h1 +: Epid11GroupPubKey +, GroupPubKey + +
- h2 +: Epid11GroupPubKey +, GroupPubKey + +
- h_tick +: Epid11Params + +
- header +: EpidCaCertificate + +
- k -
-
+
- K +: BasicSignature +, Epid11BasicSignature + +
- k +: Epid11SigRlEntry + +
- K +: PreComputedSignature + +
- k +: SigRlEntry + +
- K +: VerifierRl + +
- n -
-
+
- n1 +: Epid11PrivRl +, PrivRl + +
- n2 +: Epid11Signature +, Epid11SigRl +, EpidSignature +, SigRl + +
- n3 +: Epid11GroupRl +, GroupRl + +
- n4 +: VerifierRl + +
- nd +: Epid11BasicSignature + +
- neg +: Epid2Params + +
- o -
-
+
- orderG2 +: Epid11Params + +
- p -
-
+
- p +: Epid11Params +, Epid2Params + +
- p_tick +: Epid11Params + +
- prime +: EpidCaCertificate + +
- pubkey +: EpidCaCertificate + +
- q -
-
+
- q +: Epid11Params +, Epid2Params + +
- q_tick +: Epid11Params + +
- qnr +: Epid11Params + +
- r -
-
+
- r +: EpidCaCertificate + +
- R1 +: PreComputedSignature + +
- R2 +: PreComputedSignature + +
- ra +: PreComputedSignature + +
- rb +: PreComputedSignature + +
- rf +: PreComputedSignature + +
- rl_ver +: Epid11Signature +, EpidSignature + +
- rx +: PreComputedSignature + +
- s -
-
+
- s +: JoinRequest + +
- sa +: BasicSignature +, Epid11BasicSignature + +
- salpha +: Epid11BasicSignature + +
- sb +: BasicSignature +, Epid11BasicSignature + +
- sbeta +: Epid11BasicSignature + +
- seed +: CompressedPrivKey + +
- sf +: BasicSignature +, Epid11BasicSignature + +
- sigma +: Epid11Signature +, EpidSignature + +
- sigma0 +: Epid11Signature +, EpidSignature + +
- signature +: EpidCaCertificate + +
- smu +: Epid11NrProof +, NrProof + +
- snu +: Epid11NrProof +, NrProof + +
- sx +: BasicSignature +, Epid11BasicSignature + +
- sy +: Epid11BasicSignature + +
- t -
-
+
- T +: BasicSignature +, Epid11NrProof + +
- t +: Epid2Params + +
- T +: NrProof +, PreComputedSignature + +
- T1 +: Epid11BasicSignature + +
- T2 +: Epid11BasicSignature + +
- v -
-
+
- version +: Epid11GroupRl +, Epid11PrivRl +, Epid11SigRl +, GroupRl +, PrivRl +, SigRl +, VerifierRl + +
- w -
-
+
- w +: Epid11GroupPubKey +, GroupPubKey + +
- x -
-
+
- x +: EcdsaPublicKey +, EcdsaSignature +, Epid11G2ElemStr +, EpidCaCertificate +, G1ElemStr +, G2ElemStr +, GtElemStr +, MembershipCredential +, PrivKey + +
- xi +: Epid2Params + +
- y -
-
+
- y +: EcdsaPublicKey +, EcdsaSignature +, Epid11G2ElemStr +, EpidCaCertificate +, G1ElemStr +, G2ElemStr + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_b.html b/external/epid-sdk-3.0.0/doc/html/globals_b.html
new file mode 100644
index 00000000..32e65967
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_b.html
@@ -0,0 +1,109 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- _ -
-
+
- _Bool +: stdtypes.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_d.html b/external/epid-sdk-3.0.0/doc/html/globals_d.html
new file mode 100644
index 00000000..5a581ac5
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_d.html
@@ -0,0 +1,97 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- b -
-
+
- BigNum +: bignum.h + +
- BigNumAdd() +: bignum.h + +
- BigNumDiv() +: bignum.h + +
- BigNumIsEven() +: bignum.h + +
- BigNumIsZero() +: bignum.h + +
- BigNumMod() +: bignum.h + +
- BigNumMul() +: bignum.h + +
- BigNumPow2N() +: bignum.h + +
- BigNumSub() +: bignum.h + +
- BitSupplier +: bitsupplier.h + +
- bool +: stdtypes.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_defs.html b/external/epid-sdk-3.0.0/doc/html/globals_defs.html
new file mode 100644
index 00000000..32be0f52
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_defs.html
@@ -0,0 +1,83 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- d -
-
+
- DeleteBigNum() +: bignum.h + +
- DeleteEcGroup() +: ecgroup.h + +
- DeleteEcPoint() +: ecgroup.h + +
- DeleteEpid11PairingState() +: tatepairing.h + +
- DeleteFfElement() +: finitefield.h + +
- DeleteFiniteField() +: finitefield.h + +
- DeletePairingState() +: pairing.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_e.html b/external/epid-sdk-3.0.0/doc/html/globals_e.html
new file mode 100644
index 00000000..4d01760d
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_e.html
@@ -0,0 +1,319 @@
+
+
+
+
+
+
+
+
+
+-
+
- _Bool +: stdtypes.h + +
- false +: stdtypes.h + +
- true +: stdtypes.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_enum.html b/external/epid-sdk-3.0.0/doc/html/globals_enum.html
new file mode 100644
index 00000000..e5d8f319
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_enum.html
@@ -0,0 +1,89 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- e -
-
+
- EcdsaSignBuffer() +: ecdsa.h + +
- EcdsaVerifyBuffer() +: ecdsa.h + +
- EcExp() +: ecgroup.h + +
- EcGetRandom() +: ecgroup.h + +
- EcGroup +: ecgroup.h + +
- EcHash() +: ecgroup.h + +
- EcInGroup() +: ecgroup.h + +
- EcInverse() +: ecgroup.h + +
- EcIsEqual() +: ecgroup.h + +
- EcIsIdentity() +: ecgroup.h + +
- EcMakePoint() +: ecgroup.h + +
- EcMul() +: ecgroup.h + +
- EcMultiExp() +: ecgroup.h + +
- EcMultiExpBn() +: ecgroup.h + +
- EcPoint +: ecgroup.h + +
- EcSscmExp() +: ecgroup.h + +
- EcSscmMultiExp() +: ecgroup.h + +
- Epid11AreSigsLinked() +: api.h + +
- Epid11CheckPrivRlEntry() +: api.h + +
- Epid11EcHash() +: ecgroup.h + +
- Epid11G1ElemStr +: types.h + +
- Epid11G3ElemStr +: types.h + +
- Epid11GroupId +: types.h + +
- Epid11NrVerify() +: api.h + +
- Epid11Pairing() +: tatepairing.h + +
- Epid11PairingState +: tatepairing.h + +
- Epid11ParseGroupPubKeyFile() +: file_parser.h + +
- Epid11ParseGroupRlFile() +: file_parser.h + +
- Epid11ParsePrivRlFile() +: file_parser.h + +
- Epid11ParseSigRlFile() +: file_parser.h + +
- Epid11VerifierCreate() +: api.h + +
- Epid11VerifierCtx +: api.h + +
- Epid11VerifierDelete() +: api.h + +
- Epid11VerifierSetBasename() +: api.h + +
- Epid11VerifierSetGroupRl() +: api.h + +
- Epid11VerifierSetPrivRl() +: api.h + +
- Epid11VerifierSetSigRl() +: api.h + +
- Epid11VerifierWritePrecomp() +: api.h + +
- Epid11Verify() +: api.h + +
- Epid11VerifyBasicSig() +: api.h + +
- EpidAddPreSigs() +: api.h + +
- EpidAreSigsLinked() +: api.h + +
- EpidBlacklistSig() +: api.h + +
- EpidCheckPrivRlEntry() +: api.h + +
- EpidDecompressPrivKey() +: api.h + +
- EpidFileType +: file_parser.h + +
- EpidGetNumPreSigs() +: api.h + +
- EpidGetSigSize() +: api.h + +
- EpidGetVerifierRlSize() +: api.h + +
- EpidIsPrivKeyInGroup() +: api.h + +
- EpidMemberCreate() +: api.h + +
- EpidMemberDelete() +: api.h + +
- EpidMemberSetHashAlg() +: api.h + +
- EpidMemberWritePrecomp() +: api.h + +
- EpidNrProve() +: api.h + +
- EpidNrVerify() +: api.h + +
- EpidParseFileHeader() +: file_parser.h + +
- EpidParseGroupPubKeyFile() +: file_parser.h + +
- EpidParseGroupRlFile() +: file_parser.h + +
- EpidParsePrivRlFile() +: file_parser.h + +
- EpidParseSigRlFile() +: file_parser.h + +
- EpidRegisterBaseName() +: api.h + +
- EpidRequestJoin() +: api.h + +
- EpidSign() +: api.h + +
- EpidSignBasic() +: api.h + +
- EpidStatus +: errors.h + +
- EpidStatusToString() +: errors.h + +
- EpidVerifierCreate() +: api.h + +
- EpidVerifierDelete() +: api.h + +
- EpidVerifierSetBasename() +: api.h + +
- EpidVerifierSetGroupRl() +: api.h + +
- EpidVerifierSetHashAlg() +: api.h + +
- EpidVerifierSetPrivRl() +: api.h + +
- EpidVerifierSetSigRl() +: api.h + +
- EpidVerifierSetVerifierRl() +: api.h + +
- EpidVerifierWritePrecomp() +: api.h + +
- EpidVerify() +: api.h + +
- EpidVerifyBasicSig() +: api.h + +
- EpidVersion +: file_parser.h + +
- EpidWritePreSigs() +: api.h + +
- EpidWriteVerifierRl() +: api.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_eval.html b/external/epid-sdk-3.0.0/doc/html/globals_eval.html
new file mode 100644
index 00000000..d509456e
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_eval.html
@@ -0,0 +1,205 @@
+
+
+
+
+
+
+
+
+
+-
+
- EpidFileType +: file_parser.h + +
- EpidStatus +: errors.h + +
- EpidVersion +: file_parser.h + +
- HashAlg +: types.h + +
- PrintUtilFormat +: printutils.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_f.html b/external/epid-sdk-3.0.0/doc/html/globals_f.html
new file mode 100644
index 00000000..a7623e41
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_f.html
@@ -0,0 +1,127 @@
+
+
+
+
+
+
+
+
+
+
+
+- k -
-
+
- kEpid1x +: file_parser.h + +
- kEpid2x +: file_parser.h + +
- kEpidBadArgErr +: errors.h + +
- kEpidDivByZeroErr +: errors.h + +
- kEpidDuplicateErr +: errors.h + +
- kEpidErr +: errors.h + +
- kEpidHashAlgorithmNotSupported +: errors.h + +
- kEpidInconsistentBasenameSetErr +: errors.h + +
- kEpidMathErr +: errors.h + +
- kEpidMathQuadraticNonResidueError +: errors.h + +
- kEpidMemAllocErr +: errors.h + +
- kEpidNoErr +: errors.h + +
- kEpidNoMemErr +: errors.h + +
- kEpidNotImpl +: errors.h + +
- kEpidRandMaxIterErr +: errors.h + +
- kEpidSigInvalid +: errors.h + +
- kEpidSigRevokedInGroupRl +: errors.h + +
- kEpidSigRevokedInPrivRl +: errors.h + +
- kEpidSigRevokedInSigRl +: errors.h + +
- kEpidSigRevokedInVerifierRl +: errors.h + +
- kEpidSigValid +: errors.h + +
- kEpidUnderflowErr +: errors.h + +
- kGroupPubKeyFile +: file_parser.h + +
- kGroupRlFile +: file_parser.h + +
- kGroupRlRequestFile +: file_parser.h + +
- kInvalidHashAlg +: types.h + +
- kIssuingCaPubKeyFile +: file_parser.h + +
- kNumEpidVersions +: file_parser.h + +
- kNumFileTypes +: file_parser.h + +
- kPrintUtilAnnotated +: printutils.h + +
- kPrintUtilFormatCount +: printutils.h + +
- kPrintUtilUnannotated +: printutils.h + +
- kPrivRlFile +: file_parser.h + +
- kPrivRlRequestFile +: file_parser.h + +
- kSha256 +: types.h + +
- kSha384 +: types.h + +
- kSha3_256 +: types.h + +
- kSha3_384 +: types.h + +
- kSha3_512 +: types.h + +
- kSha512 +: types.h + +
- kSha512_256 +: types.h + +
- kSigRlFile +: file_parser.h + +
- kSigRlRequestFile +: file_parser.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_func.html b/external/epid-sdk-3.0.0/doc/html/globals_func.html
new file mode 100644
index 00000000..e1724354
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_func.html
@@ -0,0 +1,502 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- f -
-
+
- false +: stdtypes.h + +
- FfAdd() +: finitefield.h + +
- FfElement +: finitefield.h + +
- FfExp() +: finitefield.h + +
- FfGetRandom() +: finitefield.h + +
- FfHash() +: finitefield.h + +
- FfInv() +: finitefield.h + +
- FfIsEqual() +: finitefield.h + +
- FfIsZero() +: finitefield.h + +
- FfMul() +: finitefield.h + +
- FfMultiExp() +: finitefield.h + +
- FfMultiExpBn() +: finitefield.h + +
- FfNeg() +: finitefield.h + +
- FfSqrt() +: finitefield.h + +
- FfSscmMultiExp() +: finitefield.h + +
- FfSub() +: finitefield.h + +
- FiniteField +: finitefield.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_g.html b/external/epid-sdk-3.0.0/doc/html/globals_g.html
new file mode 100644
index 00000000..73f98a59
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_g.html
@@ -0,0 +1,79 @@
+
+
+
+
+
+
+
+
+
+
+
+- b -
-
+
- BigNumAdd() +: bignum.h + +
- BigNumDiv() +: bignum.h + +
- BigNumIsEven() +: bignum.h + +
- BigNumIsZero() +: bignum.h + +
- BigNumMod() +: bignum.h + +
- BigNumMul() +: bignum.h + +
- BigNumPow2N() +: bignum.h + +
- BigNumSub() +: bignum.h + +
- d -
-
+
- DeleteBigNum() +: bignum.h + +
- DeleteEcGroup() +: ecgroup.h + +
- DeleteEcPoint() +: ecgroup.h + +
- DeleteEpid11PairingState() +: tatepairing.h + +
- DeleteFfElement() +: finitefield.h + +
- DeleteFiniteField() +: finitefield.h + +
- DeletePairingState() +: pairing.h + +
- e -
-
+
- EcdsaSignBuffer() +: ecdsa.h + +
- EcdsaVerifyBuffer() +: ecdsa.h + +
- EcExp() +: ecgroup.h + +
- EcGetRandom() +: ecgroup.h + +
- EcHash() +: ecgroup.h + +
- EcInGroup() +: ecgroup.h + +
- EcInverse() +: ecgroup.h + +
- EcIsEqual() +: ecgroup.h + +
- EcIsIdentity() +: ecgroup.h + +
- EcMakePoint() +: ecgroup.h + +
- EcMul() +: ecgroup.h + +
- EcMultiExp() +: ecgroup.h + +
- EcMultiExpBn() +: ecgroup.h + +
- EcSscmExp() +: ecgroup.h + +
- EcSscmMultiExp() +: ecgroup.h + +
- Epid11AreSigsLinked() +: api.h + +
- Epid11CheckPrivRlEntry() +: api.h + +
- Epid11EcHash() +: ecgroup.h + +
- Epid11NrVerify() +: api.h + +
- Epid11Pairing() +: tatepairing.h + +
- Epid11ParseGroupPubKeyFile() +: file_parser.h + +
- Epid11ParseGroupRlFile() +: file_parser.h + +
- Epid11ParsePrivRlFile() +: file_parser.h + +
- Epid11ParseSigRlFile() +: file_parser.h + +
- Epid11VerifierCreate() +: api.h + +
- Epid11VerifierDelete() +: api.h + +
- Epid11VerifierSetBasename() +: api.h + +
- Epid11VerifierSetGroupRl() +: api.h + +
- Epid11VerifierSetPrivRl() +: api.h + +
- Epid11VerifierSetSigRl() +: api.h + +
- Epid11VerifierWritePrecomp() +: api.h + +
- Epid11Verify() +: api.h + +
- Epid11VerifyBasicSig() +: api.h + +
- EpidAddPreSigs() +: api.h + +
- EpidAreSigsLinked() +: api.h + +
- EpidBlacklistSig() +: api.h + +
- EpidCheckPrivRlEntry() +: api.h + +
- EpidDecompressPrivKey() +: api.h + +
- EpidGetNumPreSigs() +: api.h + +
- EpidGetSigSize() +: api.h + +
- EpidGetVerifierRlSize() +: api.h + +
- EpidIsPrivKeyInGroup() +: api.h + +
- EpidMemberCreate() +: api.h + +
- EpidMemberDelete() +: api.h + +
- EpidMemberSetHashAlg() +: api.h + +
- EpidMemberWritePrecomp() +: api.h + +
- EpidNrProve() +: api.h + +
- EpidNrVerify() +: api.h + +
- EpidParseFileHeader() +: file_parser.h + +
- EpidParseGroupPubKeyFile() +: file_parser.h + +
- EpidParseGroupRlFile() +: file_parser.h + +
- EpidParsePrivRlFile() +: file_parser.h + +
- EpidParseSigRlFile() +: file_parser.h + +
- EpidRegisterBaseName() +: api.h + +
- EpidRequestJoin() +: api.h + +
- EpidSign() +: api.h + +
- EpidSignBasic() +: api.h + +
- EpidStatusToString() +: errors.h + +
- EpidVerifierCreate() +: api.h + +
- EpidVerifierDelete() +: api.h + +
- EpidVerifierSetBasename() +: api.h + +
- EpidVerifierSetGroupRl() +: api.h + +
- EpidVerifierSetHashAlg() +: api.h + +
- EpidVerifierSetPrivRl() +: api.h + +
- EpidVerifierSetSigRl() +: api.h + +
- EpidVerifierSetVerifierRl() +: api.h + +
- EpidVerifierWritePrecomp() +: api.h + +
- EpidVerify() +: api.h + +
- EpidVerifyBasicSig() +: api.h + +
- EpidWritePreSigs() +: api.h + +
- EpidWriteVerifierRl() +: api.h + +
- f -
-
+
- FfAdd() +: finitefield.h + +
- FfExp() +: finitefield.h + +
- FfGetRandom() +: finitefield.h + +
- FfHash() +: finitefield.h + +
- FfInv() +: finitefield.h + +
- FfIsEqual() +: finitefield.h + +
- FfIsZero() +: finitefield.h + +
- FfMul() +: finitefield.h + +
- FfMultiExp() +: finitefield.h + +
- FfMultiExpBn() +: finitefield.h + +
- FfNeg() +: finitefield.h + +
- FfSqrt() +: finitefield.h + +
- FfSscmMultiExp() +: finitefield.h + +
- FfSub() +: finitefield.h + +
- i -
-
+
- InitFfElementFromBn() +: finitefield.h + +
- n -
-
+
- NewBigNum() +: bignum.h + +
- NewEcGroup() +: ecgroup.h + +
- NewEcPoint() +: ecgroup.h + +
- NewEpid11PairingState() +: tatepairing.h + +
- NewFfElement() +: finitefield.h + +
- NewFiniteField() +: finitefield.h + +
- NewFiniteFieldViaBinomalExtension() +: finitefield.h + +
- NewFiniteFieldViaPolynomialExtension() +: finitefield.h + +
- NewPairingState() +: pairing.h + +
- p -
-
+
- Pairing() +: pairing.h + +
- PrintBigNum() +: printutils.h + +
- PrintBigNumStr() +: printutils.h + +
- PrintEcPoint() +: printutils.h + +
- PrintFfElement() +: printutils.h + +
- PrintFpElemStr() +: printutils.h + +
- PrintFq12ElemStr() +: printutils.h + +
- PrintFq2ElemStr() +: printutils.h + +
- PrintFq6ElemStr() +: printutils.h + +
- PrintFqElemStr() +: printutils.h + +
- PrintG1ElemStr() +: printutils.h + +
- PrintG2ElemStr() +: printutils.h + +
- PrintGtElemStr() +: printutils.h + +
- r -
-
+
- ReadBigNum() +: bignum.h + +
- ReadEcPoint() +: ecgroup.h + +
- ReadFfElement() +: finitefield.h + +
- s -
-
+
- Sha256MessageDigest() +: hash.h + +
- w -
-
+
- WriteBigNum() +: bignum.h + +
- WriteEcPoint() +: ecgroup.h + +
- WriteFfElement() +: finitefield.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_h.html b/external/epid-sdk-3.0.0/doc/html/globals_h.html
new file mode 100644
index 00000000..227a488b
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_h.html
@@ -0,0 +1,79 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- g -
-
+
- GroupId +: types.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_i.html b/external/epid-sdk-3.0.0/doc/html/globals_i.html
new file mode 100644
index 00000000..cd8c032e
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_i.html
@@ -0,0 +1,82 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- h -
-
+
- HashAlg +: types.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_k.html b/external/epid-sdk-3.0.0/doc/html/globals_k.html
new file mode 100644
index 00000000..b403cac4
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_k.html
@@ -0,0 +1,211 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- i -
-
+
- InitFfElementFromBn() +: finitefield.h + +
- IssuerNonce +: types.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_m.html b/external/epid-sdk-3.0.0/doc/html/globals_m.html
new file mode 100644
index 00000000..4e74e83a
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_m.html
@@ -0,0 +1,79 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- k -
-
+
- kEpid1x +: file_parser.h + +
- kEpid2x +: file_parser.h + +
- kEpidBadArgErr +: errors.h + +
- kEpidDivByZeroErr +: errors.h + +
- kEpidDuplicateErr +: errors.h + +
- kEpidErr +: errors.h + +
- kEpidFileTypeCode +: file_parser.h + +
- kEpidHashAlgorithmNotSupported +: errors.h + +
- kEpidInconsistentBasenameSetErr +: errors.h + +
- kEpidMathErr +: errors.h + +
- kEpidMathQuadraticNonResidueError +: errors.h + +
- kEpidMemAllocErr +: errors.h + +
- kEpidNoErr +: errors.h + +
- kEpidNoMemErr +: errors.h + +
- kEpidNotImpl +: errors.h + +
- kEpidRandMaxIterErr +: errors.h + +
- kEpidSigInvalid +: errors.h + +
- kEpidSigRevokedInGroupRl +: errors.h + +
- kEpidSigRevokedInPrivRl +: errors.h + +
- kEpidSigRevokedInSigRl +: errors.h + +
- kEpidSigRevokedInVerifierRl +: errors.h + +
- kEpidSigValid +: errors.h + +
- kEpidUnderflowErr +: errors.h + +
- kEpidVersionCode +: file_parser.h + +
- kGroupPubKeyFile +: file_parser.h + +
- kGroupRlFile +: file_parser.h + +
- kGroupRlRequestFile +: file_parser.h + +
- kInvalidHashAlg +: types.h + +
- kIssuingCaPubKeyFile +: file_parser.h + +
- kNumEpidVersions +: file_parser.h + +
- kNumFileTypes +: file_parser.h + +
- kPrintUtilAnnotated +: printutils.h + +
- kPrintUtilFormatCount +: printutils.h + +
- kPrintUtilUnannotated +: printutils.h + +
- kPrivRlFile +: file_parser.h + +
- kPrivRlRequestFile +: file_parser.h + +
- kSha256 +: types.h + +
- kSha384 +: types.h + +
- kSha3_256 +: types.h + +
- kSha3_384 +: types.h + +
- kSha3_512 +: types.h + +
- kSha512 +: types.h + +
- kSha512_256 +: types.h + +
- kSigRlFile +: file_parser.h + +
- kSigRlRequestFile +: file_parser.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_n.html b/external/epid-sdk-3.0.0/doc/html/globals_n.html
new file mode 100644
index 00000000..2edd5a5f
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_n.html
@@ -0,0 +1,103 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- m -
-
+
- MemberCtx +: api.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_p.html b/external/epid-sdk-3.0.0/doc/html/globals_p.html
new file mode 100644
index 00000000..45b4ea43
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_p.html
@@ -0,0 +1,121 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- n -
-
+
- NewBigNum() +: bignum.h + +
- NewEcGroup() +: ecgroup.h + +
- NewEcPoint() +: ecgroup.h + +
- NewEpid11PairingState() +: tatepairing.h + +
- NewFfElement() +: finitefield.h + +
- NewFiniteField() +: finitefield.h + +
- NewFiniteFieldViaBinomalExtension() +: finitefield.h + +
- NewFiniteFieldViaPolynomialExtension() +: finitefield.h + +
- NewPairingState() +: pairing.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_r.html b/external/epid-sdk-3.0.0/doc/html/globals_r.html
new file mode 100644
index 00000000..9d6af060
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_r.html
@@ -0,0 +1,88 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- p -
-
+
- Pairing() +: pairing.h + +
- PairingState +: pairing.h + +
- PrintBigNum() +: printutils.h + +
- PrintBigNumStr() +: printutils.h + +
- PrintEcPoint() +: printutils.h + +
- PrintFfElement() +: printutils.h + +
- PrintFpElemStr() +: printutils.h + +
- PrintFq12ElemStr() +: printutils.h + +
- PrintFq2ElemStr() +: printutils.h + +
- PrintFq6ElemStr() +: printutils.h + +
- PrintFqElemStr() +: printutils.h + +
- PrintG1ElemStr() +: printutils.h + +
- PrintG2ElemStr() +: printutils.h + +
- PrintGtElemStr() +: printutils.h + +
- PrintUtilFormat +: printutils.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_s.html b/external/epid-sdk-3.0.0/doc/html/globals_s.html
new file mode 100644
index 00000000..ffba267a
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_s.html
@@ -0,0 +1,82 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- r -
-
+
- ReadBigNum() +: bignum.h + +
- ReadEcPoint() +: ecgroup.h + +
- ReadFfElement() +: finitefield.h + +
- ReKeySeed +: types.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_t.html b/external/epid-sdk-3.0.0/doc/html/globals_t.html
new file mode 100644
index 00000000..7e7f3e8c
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_t.html
@@ -0,0 +1,79 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_type.html b/external/epid-sdk-3.0.0/doc/html/globals_type.html
new file mode 100644
index 00000000..1dfada33
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_type.html
@@ -0,0 +1,131 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- t -
-
+
- true +: stdtypes.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_v.html b/external/epid-sdk-3.0.0/doc/html/globals_v.html
new file mode 100644
index 00000000..dfd30988
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_v.html
@@ -0,0 +1,79 @@
+
+
+
+
+
+
+
+
+
+-
+
- BigNum +: bignum.h + +
- BitSupplier +: bitsupplier.h + +
- bool +: stdtypes.h + +
- EcGroup +: ecgroup.h + +
- EcPoint +: ecgroup.h + +
- Epid11G1ElemStr +: types.h + +
- Epid11G3ElemStr +: types.h + +
- Epid11GroupId +: types.h + +
- Epid11PairingState +: tatepairing.h + +
- Epid11VerifierCtx +: api.h + +
- FfElement +: finitefield.h + +
- FiniteField +: finitefield.h + +
- GroupId +: types.h + +
- IssuerNonce +: types.h + +
- MemberCtx +: api.h + +
- PairingState +: pairing.h + +
- ReKeySeed +: types.h + +
- Seed +: types.h + +
- VerifierCtx +: api.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_vars.html b/external/epid-sdk-3.0.0/doc/html/globals_vars.html
new file mode 100644
index 00000000..ea821a9f
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_vars.html
@@ -0,0 +1,80 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- v -
-
+
- VerifierCtx +: api.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/globals_w.html b/external/epid-sdk-3.0.0/doc/html/globals_w.html
new file mode 100644
index 00000000..49073427
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/globals_w.html
@@ -0,0 +1,85 @@
+
+
+
+
+
+
+
+
+
+-
+
- kEpidFileTypeCode +: file_parser.h + +
- kEpidVersionCode +: file_parser.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/glossary_8dox.html b/external/epid-sdk-3.0.0/doc/html/glossary_8dox.html
new file mode 100644
index 00000000..e8cf60a4
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/glossary_8dox.html
@@ -0,0 +1,82 @@
+
+
+
+
+
+
+
+
+
+Here is a list of all documented functions, variables, defines, enums, and typedefs with links to the documentation:
+
+- w -
-
+
- WriteBigNum() +: bignum.h + +
- WriteEcPoint() +: ecgroup.h + +
- WriteFfElement() +: finitefield.h + +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___big_num_primitives.html b/external/epid-sdk-3.0.0/doc/html/group___big_num_primitives.html
new file mode 100644
index 00000000..b71ca763
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___big_num_primitives.html
@@ -0,0 +1,616 @@
+
+
+
+
+
+
+
+
+
+
+
+doc/docsrc/glossary.dox File Reference
+
+
+This file is used by Doxygen to generate documentation. +More...
+Detailed Description
+This file is used by Doxygen to generate documentation.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___big_num_primitives.js b/external/epid-sdk-3.0.0/doc/html/group___big_num_primitives.js
new file mode 100644
index 00000000..ccdcec2b
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___big_num_primitives.js
@@ -0,0 +1,16 @@
+var group___big_num_primitives =
+[
+ [ "BigNum", "group___big_num_primitives.html#ga2bf153e27be2683f0fb26f0f7ff1f718", null ],
+ [ "BigNumAdd", "group___big_num_primitives.html#gae70fd9b3026f0ab3c7e9601d0a3186b8", null ],
+ [ "BigNumDiv", "group___big_num_primitives.html#ga166134085464b0df2c8efcfccf8ec573", null ],
+ [ "BigNumIsEven", "group___big_num_primitives.html#gaf0366e47226563b17fcbc8e3ed766084", null ],
+ [ "BigNumIsZero", "group___big_num_primitives.html#gacde6564a814617a96985b379be0dfabb", null ],
+ [ "BigNumMod", "group___big_num_primitives.html#ga7dd6038987210d10bf843602fef0c929", null ],
+ [ "BigNumMul", "group___big_num_primitives.html#ga03c89b8b8dd87de2c0f4b5822145d317", null ],
+ [ "BigNumPow2N", "group___big_num_primitives.html#gafd64b66fc85dab0005f4a1bb67bdf7b4", null ],
+ [ "BigNumSub", "group___big_num_primitives.html#gacbec9669ab0fe768e2be74dcaca397ea", null ],
+ [ "DeleteBigNum", "group___big_num_primitives.html#ga2d17600068b1d94000635c6644258a03", null ],
+ [ "NewBigNum", "group___big_num_primitives.html#gad5f6f262bfd780fed3678bcee16f0aed", null ],
+ [ "ReadBigNum", "group___big_num_primitives.html#ga808cf477b70ed06358b11756bfe36024", null ],
+ [ "WriteBigNum", "group___big_num_primitives.html#ga79d86c872fe8da0f217e3ba069f98d38", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___ec_group_primitives.html b/external/epid-sdk-3.0.0/doc/html/group___ec_group_primitives.html
new file mode 100644
index 00000000..8c143ca0
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___ec_group_primitives.html
@@ -0,0 +1,1198 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+Big number operations. +More...
++Typedefs | |
| +typedef struct BigNum | BigNum |
| Internal representation of large numbers. | |
+Functions | |
| EpidStatus | NewBigNum (size_t data_size_bytes, BigNum **bignum) |
| Constructs a new BigNum. More... | |
| void | DeleteBigNum (BigNum **bignum) |
| Deletes a previously allocated BigNum. More... | |
| EpidStatus | ReadBigNum (void const *bn_str, size_t strlen, BigNum *bn) |
| Deserializes a BigNum from a string. More... | |
| EpidStatus | WriteBigNum (BigNum const *bn, size_t strlen, void *bn_str) |
| Serializes a BigNum to a string. More... | |
| EpidStatus | BigNumAdd (BigNum const *a, BigNum const *b, BigNum *r) |
| Adds two BigNum values. More... | |
| EpidStatus | BigNumSub (BigNum const *a, BigNum const *b, BigNum *r) |
| Subtracts two BigNum values. More... | |
| EpidStatus | BigNumMul (BigNum const *a, BigNum const *b, BigNum *r) |
| Multiplies two BigNum values. More... | |
| EpidStatus | BigNumDiv (BigNum const *a, BigNum const *b, BigNum *q, BigNum *r) |
| Divides two BigNum values. More... | |
| EpidStatus | BigNumMod (BigNum const *a, BigNum const *b, BigNum *r) |
| Computes modular reduction for BigNum value by specified modulus. More... | |
| EpidStatus | BigNumIsEven (BigNum const *a, bool *is_even) |
| Checks if a BigNum is even. More... | |
| EpidStatus | BigNumIsZero (BigNum const *a, bool *is_zero) |
| Checks if a BigNum is zero. More... | |
| EpidStatus | BigNumPow2N (unsigned int n, BigNum *r) |
| Raises 2 to the given power. More... | |
Detailed Description
+Big number operations.
+This module provides an API for working with large numbers. BigNums represent non-negative integers.
+Each BigNum variable represents a number of a byte-size set when the variable was created. BigNum variables cannot be re-sized after they are created.
+Function Documentation
+ +
+
+
+
+
+
+
| EpidStatus BigNumAdd | +( | +BigNum const * | +a, | +
| + | + | BigNum const * | +b, | +
| + | + | BigNum * | +r | +
| + | ) | ++ |
+
+
+Adds two BigNum values.
+- Parameters
-
+
+
+[in] a The first operand to be added. [in] b The second operand to be added. [out] r The result of adding a and b.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| EpidStatus BigNumDiv | +( | +BigNum const * | +a, | +
| + | + | BigNum const * | +b, | +
| + | + | BigNum * | +q, | +
| + | + | BigNum * | +r | +
| + | ) | ++ |
+
+
+Divides two BigNum values.
+- Note
- Only needed for Intel(R) EPID 1.1 verification.
- Parameters
-
+
+
+[in] a Dividend parameter. [in] b Divisor parameter. [out] q Quotient of result. [out] r Remainder of result.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| EpidStatus BigNumIsEven | +( | +BigNum const * | +a, | +
| + | + | bool * | +is_even | +
| + | ) | ++ |
+
+
+Checks if a BigNum is even.
+- Parameters
-
+
+
+[in] a The BigNum to check. [out] is_even The result of the check.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| EpidStatus BigNumIsZero | +( | +BigNum const * | +a, | +
| + | + | bool * | +is_zero | +
| + | ) | ++ |
+
+
+Checks if a BigNum is zero.
+- Parameters
-
+
+
+[in] a The BigNum to check. [out] is_zero The result of the check.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| EpidStatus BigNumMod | +( | +BigNum const * | +a, | +
| + | + | BigNum const * | +b, | +
| + | + | BigNum * | +r | +
| + | ) | ++ |
+
+
+Computes modular reduction for BigNum value by specified modulus.
+- Parameters
-
+
+
+[in] a The BigNum value. [in] b The modulus. [out] r Modular reduction result.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| EpidStatus BigNumMul | +( | +BigNum const * | +a, | +
| + | + | BigNum const * | +b, | +
| + | + | BigNum * | +r | +
| + | ) | ++ |
+
+
+Multiplies two BigNum values.
+- Parameters
-
+
+
+[in] a The first operand to be multiplied. [in] b The second operand to be multiplied. [out] r The result of multiplying a and b.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| EpidStatus BigNumPow2N | +( | +unsigned int | +n, | +
| + | + | BigNum * | +r | +
| + | ) | ++ |
+
+
+Raises 2 to the given power.
+- Parameters
-
+
+
+[in] n The power. [out] r The result of 2^n.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| EpidStatus BigNumSub | +( | +BigNum const * | +a, | +
| + | + | BigNum const * | +b, | +
| + | + | BigNum * | +r | +
| + | ) | ++ |
+
+
+Subtracts two BigNum values.
+- Parameters
-
+
+
+[in] a The first operand to use in subtraction. [in] b The second operand to use in subtraction. [out] r The result of subtracting a and b.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| void DeleteBigNum | +( | +BigNum ** | +bignum | ) | ++ |
+
+
+Deletes a previously allocated BigNum.
+Frees memory pointed to by bignum. Nulls the pointer.
+- Parameters
-
+
+
+[in] bignum The BigNum. Can be NULL.
+
- See also
- NewBigNum
+
+
+
+
+
+
| EpidStatus NewBigNum | +( | +size_t | +data_size_bytes, | +
| + | + | BigNum ** | +bignum | +
| + | ) | ++ |
+
+
+Constructs a new BigNum.
+Allocates memory and creates a new BigNum.
+Use DeleteBigNum() to free memory.
+- Parameters
-
+
+
+[in] data_size_bytes The size in bytes of the new number. [out] bignum The BigNum.
+
- Returns
- EpidStatus
- See also
- DeleteBigNum
+
+
+
+
+
+
| EpidStatus ReadBigNum | +( | +void const * | +bn_str, | +
| + | + | size_t | +strlen, | +
| + | + | BigNum * | +bn | +
| + | ) | ++ |
+
+
+Deserializes a BigNum from a string.
+- Parameters
-
+
+
+[in] bn_str The serialized value. [in] strlen The size of bn_str in bytes. [out] bn The target BigNum.
+
- Returns
- EpidStatus
+
+
+
+
+
| EpidStatus WriteBigNum | +( | +BigNum const * | +bn, | +
| + | + | size_t | +strlen, | +
| + | + | void * | +bn_str | +
| + | ) | ++ |
+
+
+Serializes a BigNum to a string.
+- Parameters
-
+
+
+[in] bn The BigNum to be serialized. [in] strlen The size of bn_str in bytes. [out] bn_str The target string.
+
- Returns
- EpidStatus
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___ec_group_primitives.js b/external/epid-sdk-3.0.0/doc/html/group___ec_group_primitives.js
new file mode 100644
index 00000000..af74b1c5
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___ec_group_primitives.js
@@ -0,0 +1,25 @@
+var group___ec_group_primitives =
+[
+ [ "EcGroup", "group___ec_group_primitives.html#gac91c5a7623c17a868dd15b2e9aaf7159", null ],
+ [ "EcPoint", "group___ec_group_primitives.html#ga85c1d5e106031b385a6e23e598ac98fa", null ],
+ [ "DeleteEcGroup", "group___ec_group_primitives.html#gab7af276256c27610eda85ff432b846ea", null ],
+ [ "DeleteEcPoint", "group___ec_group_primitives.html#ga8cb086d792bffb79b3ca07e6ca4ce0e7", null ],
+ [ "EcExp", "group___ec_group_primitives.html#ga01bf8d6fa60a2e445490966b3a06c270", null ],
+ [ "EcGetRandom", "group___ec_group_primitives.html#ga3f96c43d14d24de0f7a5e214aef64196", null ],
+ [ "EcHash", "group___ec_group_primitives.html#gadc22ee07864a7ee681a881029b69d76a", null ],
+ [ "EcInGroup", "group___ec_group_primitives.html#ga4d0f32aede3066eae500241b387bd970", null ],
+ [ "EcInverse", "group___ec_group_primitives.html#ga0b6d7a3398251e9352fb29ef4abef466", null ],
+ [ "EcIsEqual", "group___ec_group_primitives.html#gad3b3c63c48fa24e8dea07837b05bc061", null ],
+ [ "EcIsIdentity", "group___ec_group_primitives.html#ga9cf15b34bc4ff12e58b169dd989d8210", null ],
+ [ "EcMakePoint", "group___ec_group_primitives.html#ga8a6114a48214a327d4ec04fd25e5940e", null ],
+ [ "EcMul", "group___ec_group_primitives.html#ga25c9013cc76907d73765eb7a96aa8c96", null ],
+ [ "EcMultiExp", "group___ec_group_primitives.html#gae96c38e004ccd2211290ad6e66415ec4", null ],
+ [ "EcMultiExpBn", "group___ec_group_primitives.html#ga76d24378455eb96a3257fe8045c0993a", null ],
+ [ "EcSscmExp", "group___ec_group_primitives.html#gaf3b6a548aa6f0d4f028a14feca251f57", null ],
+ [ "EcSscmMultiExp", "group___ec_group_primitives.html#ga40e3431d3dbe8cf7a65ada7b7811cba4", null ],
+ [ "Epid11EcHash", "group___ec_group_primitives.html#gadf83fa559585375faad9a8b1559249bc", null ],
+ [ "NewEcGroup", "group___ec_group_primitives.html#gaf4e23677dd378ef2e0cf55df79cbdb62", null ],
+ [ "NewEcPoint", "group___ec_group_primitives.html#ga6417b0ce72ba96de00c329e322fec7fb", null ],
+ [ "ReadEcPoint", "group___ec_group_primitives.html#ga2d433f567fa2419465a49604f4da21ad", null ],
+ [ "WriteEcPoint", "group___ec_group_primitives.html#ga4bb7d6691ffbb6e947c1068453e27fbd", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___ecdsa_primitives.html b/external/epid-sdk-3.0.0/doc/html/group___ecdsa_primitives.html
new file mode 100644
index 00000000..50d135d9
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___ecdsa_primitives.html
@@ -0,0 +1,229 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+Elliptic curve group operations. +More...
++Typedefs | |
| +typedef struct EcGroup | EcGroup |
| Elliptic curve group over finite field. | |
| +typedef struct EcPoint | EcPoint |
| Point on elliptic curve over finite field. | |
+Functions | |
| EpidStatus | NewEcGroup (FiniteField const *ff, FfElement const *a, FfElement const *b, FfElement const *x, FfElement const *y, BigNum const *order, BigNum const *cofactor, EcGroup **g) |
| Constructs a new EcGroup. More... | |
| void | DeleteEcGroup (EcGroup **g) |
| Deletes a previously allocated EcGroup. More... | |
| EpidStatus | NewEcPoint (EcGroup const *g, EcPoint **p) |
| Creates a new EcPoint. More... | |
| void | DeleteEcPoint (EcPoint **p) |
| Deletes a previously allocated EcPoint. More... | |
| EpidStatus | ReadEcPoint (EcGroup *g, void const *p_str, size_t strlen, EcPoint *p) |
| Deserializes an EcPoint from a string. More... | |
| EpidStatus | WriteEcPoint (EcGroup *g, EcPoint const *p, void *p_str, size_t strlen) |
| Serializes an EcPoint to a string. More... | |
| EpidStatus | EcMul (EcGroup *g, EcPoint const *a, EcPoint const *b, EcPoint *r) |
| Multiplies two elements in an elliptic curve group. More... | |
| EpidStatus | EcExp (EcGroup *g, EcPoint const *a, BigNumStr const *b, EcPoint *r) |
| Raises a point in an elliptic curve group to a power. More... | |
| EpidStatus | EcSscmExp (EcGroup *g, EcPoint const *a, BigNumStr const *b, EcPoint *r) |
| Software side-channel mitigated implementation of EcExp. More... | |
| EpidStatus | EcMultiExp (EcGroup *g, EcPoint const **a, BigNumStr const **b, size_t m, EcPoint *r) |
| Multi-exponentiates elements in elliptic curve group. More... | |
| EpidStatus | EcMultiExpBn (EcGroup *g, EcPoint const **a, BigNum const **b, size_t m, EcPoint *r) |
| Multi-exponentiates elements in elliptic curve group. More... | |
| EpidStatus | EcSscmMultiExp (EcGroup *g, EcPoint const **a, BigNumStr const **b, size_t m, EcPoint *r) |
| Software side-channel mitigated implementation of EcMultiExp. More... | |
| EpidStatus | EcGetRandom (EcGroup *g, BitSupplier rnd_func, void *rnd_func_param, EcPoint *r) |
| Generates a random element from an elliptic curve group. More... | |
| EpidStatus | EcInGroup (EcGroup *g, void const *p_str, size_t strlen, bool *in_group) |
| Checks if a point is in an elliptic curve group. More... | |
| EpidStatus | Epid11EcHash (EcGroup *g, void const *msg, size_t msg_len, EcPoint *r) |
| Hashes an arbitrary message to an Intel(R) EPID 1.1 element in an elliptic curve group. More... | |
| EpidStatus | EcHash (EcGroup *g, void const *msg, size_t msg_len, HashAlg hash_alg, EcPoint *r) |
| Hashes an arbitrary message to an element in an elliptic curve group. More... | |
| EpidStatus | EcMakePoint (EcGroup *g, FfElement const *x, EcPoint *r) |
| Sets an EcPoint variable to a point on a curve. More... | |
| EpidStatus | EcInverse (EcGroup *g, EcPoint const *p, EcPoint *r) |
| Computes the additive inverse of an EcPoint. More... | |
| EpidStatus | EcIsEqual (EcGroup *g, EcPoint const *a, EcPoint const *b, bool *is_equal) |
| Checks if two EcPoints are equal. More... | |
| EpidStatus | EcIsIdentity (EcGroup *g, EcPoint const *p, bool *is_identity) |
| Checks if an EcPoint is the identity element. More... | |
Detailed Description
+Elliptic curve group operations.
+Provides APIs for working with Elliptic curve groups. Elliptic curve groups allow simple mathematical operations based on points that lie on a defined elliptic curve. The results of these operations also lie on the same curve.
+Curves themselves are defined based on elements (FfElement) of a finite field (FiniteField).
+Function Documentation
+ +
+
+
+
+
+
+
| void DeleteEcGroup | +( | +EcGroup ** | +g | ) | ++ |
+
+
+Deletes a previously allocated EcGroup.
+Frees memory pointed to by elliptic curve group. Nulls the pointer.
+- Parameters
-
+
+
+[in] g The elliptic curve group. Can be NULL.
+
- See also
- NewEcGroup
+
+
+
+
+
+
| void DeleteEcPoint | +( | +EcPoint ** | +p | ) | ++ |
+
+
+Deletes a previously allocated EcPoint.
+Frees memory used by a point on elliptic curve group. Nulls the pointer.
+- Parameters
-
+
+
+[in] p The EcPoint. Can be NULL.
+
- See also
- NewEcPoint
+
+
+
+
+
+
| EpidStatus EcExp | +( | +EcGroup * | +g, | +
| + | + | EcPoint const * | +a, | +
| + | + | BigNumStr const * | +b, | +
| + | + | EcPoint * | +r | +
| + | ) | ++ |
+
+
+Raises a point in an elliptic curve group to a power.
+This exponentiation operation is also known as element multiplication for elliptic curve groups.
- Parameters
-
+
+
+[in] g The elliptic curve group. [in] a The base. [in] b The power. Power must be less than the order of the elliptic curve group. [out] r The result of raising a to the power b.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus EcGetRandom | +( | +EcGroup * | +g, | +
| + | + | BitSupplier | +rnd_func, | +
| + | + | void * | +rnd_func_param, | +
| + | + | EcPoint * | +r | +
| + | ) | ++ |
+
+
+Generates a random element from an elliptic curve group.
+This function is only available for G1 and GT.
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] rnd_func Random number generator. [in] rnd_func_param Pass through context data for rnd_func. [in,out] r Output random elliptic curve element.
+
- Returns
- EpidStatus
- See also
- NewEcPoint +
- +BitSupplier
+
+
+
+
+
+
| EpidStatus EcHash | +( | +EcGroup * | +g, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len, | +
| + | + | HashAlg | +hash_alg, | +
| + | + | EcPoint * | +r | +
| + | ) | ++ |
+
+
+Hashes an arbitrary message to an element in an elliptic curve group.
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] msg The message. [in] msg_len The size of msg in bytes. [in] hash_alg The hash algorithm. [out] r The hashed value.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus EcInGroup | +( | +EcGroup * | +g, | +
| + | + | void const * | +p_str, | +
| + | + | size_t | +strlen, | +
| + | + | bool * | +in_group | +
| + | ) | ++ |
+
+
+Checks if a point is in an elliptic curve group.
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] p_str A serialized point. Must be a G1ElemStr or G2ElemStr. [in] strlen The size of p_str in bytes. [out] in_group The result of the check.
+
- Returns
- EpidStatus
- See also
- NewEcPoint
+
+
+
+
+
+
| EpidStatus EcInverse | +( | +EcGroup * | +g, | +
| + | + | EcPoint const * | +p, | +
| + | + | EcPoint * | +r | +
| + | ) | ++ |
+
+
+Computes the additive inverse of an EcPoint.
+This inverse operation is also known as element negation for elliptic curve groups.
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] p The point. [out] r The inverted point.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus EcIsEqual | +( | +EcGroup * | +g, | +
| + | + | EcPoint const * | +a, | +
| + | + | EcPoint const * | +b, | +
| + | + | bool * | +is_equal | +
| + | ) | ++ |
+
+
+Checks if two EcPoints are equal.
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] a A point to check. [in] b Another point to check. [out] is_equal The result of the check.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus EcIsIdentity | +( | +EcGroup * | +g, | +
| + | + | EcPoint const * | +p, | +
| + | + | bool * | +is_identity | +
| + | ) | ++ |
+
+
+Checks if an EcPoint is the identity element.
+Takes a group element P as input. It outputs true if P is the identity element of G. Otherwise, it outputs false.
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] p The point to check. [out] is_identity The result of the check.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus EcMakePoint | +( | +EcGroup * | +g, | +
| + | + | FfElement const * | +x, | +
| + | + | EcPoint * | +r | +
| + | ) | ++ |
+
+
+Sets an EcPoint variable to a point on a curve.
+This function is only available for G1.
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] x The x coordinate. [out] r The point.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint +
- +NewFfElement
+
+
+
+
+
+
| EpidStatus EcMul | +( | +EcGroup * | +g, | +
| + | + | EcPoint const * | +a, | +
| + | + | EcPoint const * | +b, | +
| + | + | EcPoint * | +r | +
| + | ) | ++ |
+
+
+Multiplies two elements in an elliptic curve group.
+This multiplication operation is also known as element addition for elliptic curve groups.
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] a The first operand to be multiplied. [in] b The second operand to be multiplied. [out] r The result of multiplying a and b.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus EcMultiExp | +( | +EcGroup * | +g, | +
| + | + | EcPoint const ** | +a, | +
| + | + | BigNumStr const ** | +b, | +
| + | + | size_t | +m, | +
| + | + | EcPoint * | +r | +
| + | ) | ++ |
+
+
+Multi-exponentiates elements in elliptic curve group.
+Takes a group elements a[0], ... , a[m-1] in G and positive integers b[0], ..., b[m-1], where m is a small positive integer. Outputs r (in G) = EcExp(a[0],b[0]) * ... * EcExp(a[m-1],b[m-1]).
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] a The bases. [in] b The powers. Power must be less than the order of the elliptic curve group. [in] m Number of entries in a and b. [out] r The result of raising each a to the corresponding power b and multiplying the results.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus EcMultiExpBn | +( | +EcGroup * | +g, | +
| + | + | EcPoint const ** | +a, | +
| + | + | BigNum const ** | +b, | +
| + | + | size_t | +m, | +
| + | + | EcPoint * | +r | +
| + | ) | ++ |
+
+
+Multi-exponentiates elements in elliptic curve group.
+Takes a group elements a[0], ... , a[m-1] in G and positive integers b[0], ..., b[m-1], where m is a small positive integer. Outputs r (in G) = EcExp(a[0],b[0]) * ... * EcExp(a[m-1],b[m-1]).
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] a The bases. [in] b The powers. Power must be less than the order of the elliptic curve group. [in] m Number of entries in a and b. [out] r The result of raising each a to the corresponding power b and multiplying the results.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus EcSscmExp | +( | +EcGroup * | +g, | +
| + | + | EcPoint const * | +a, | +
| + | + | BigNumStr const * | +b, | +
| + | + | EcPoint * | +r | +
| + | ) | ++ |
+
+
+Software side-channel mitigated implementation of EcExp.
+This exponentiation operation is also known as element multiplication for elliptic curve groups.
+- Attention
- The reference implementation of EcSscmExp calls EcExp directly because the implementation of EcExp is already side channel mitigated. Implementers providing their own versions of this function are responsible for ensuring that EcSscmExp is side channel mitigated per section 8 of the Intel(R) EPID 2.0 spec.
- Parameters
-
+
+
+[in] g The elliptic curve group. [in] a The base. [in] b The power. Power must be less than the order of the elliptic curve group. [out] r The result of raising a to the power b.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus EcSscmMultiExp | +( | +EcGroup * | +g, | +
| + | + | EcPoint const ** | +a, | +
| + | + | BigNumStr const ** | +b, | +
| + | + | size_t | +m, | +
| + | + | EcPoint * | +r | +
| + | ) | ++ |
+
+
+Software side-channel mitigated implementation of EcMultiExp.
+Takes a group elements a[0], ... , a[m-1] in G and positive integers b[0], ..., b[m-1], where m is a small positive integer. Outputs r (in G) = EcExp(a[0],b[0]) * ... * EcExp(a[m-1],b[m-1]).
+- Attention
- The reference implementation of EcSscmMultiExp calls EcMultiExp directly because the implementation of EcMultiExp is already side channel mitigated. Implementers providing their own versions of this function are responsible for ensuring that EcSscmMultiExp is side channel mitigated per section 8 of the Intel(R) EPID 2.0 spec.
- Parameters
-
+
+
+[in] g The elliptic curve group. [in] a The bases. [in] b The powers. Power must be less than the order of the elliptic curve group. [in] m Number of entries in a and b. [out] r The result of raising each a to the corresponding power b and multiplying the results.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus Epid11EcHash | +( | +EcGroup * | +g, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len, | +
| + | + | EcPoint * | +r | +
| + | ) | ++ |
+
+
+Hashes an arbitrary message to an Intel(R) EPID 1.1 element in an elliptic curve group.
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] msg The message. [in] msg_len The size of msg in bytes. [out] r The hashed value.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus NewEcGroup | +( | +FiniteField const * | +ff, | +
| + | + | FfElement const * | +a, | +
| + | + | FfElement const * | +b, | +
| + | + | FfElement const * | +x, | +
| + | + | FfElement const * | +y, | +
| + | + | BigNum const * | +order, | +
| + | + | BigNum const * | +cofactor, | +
| + | + | EcGroup ** | +g | +
| + | ) | ++ |
+
+
+Constructs a new EcGroup.
+Allocates memory and creates a new elliptic curve group.
+Use DeleteFiniteField() to free memory.
+- Parameters
-
+
+
+[in] ff The finite field on which the curve is based. [in] a The A value of the elliptic curve. [in] b The B value of the elliptic curve. [in] x The X-coordinate of the base point of the elliptic curve. [in] y The Y-coordinate of the base point of the elliptic curve. [in] order The order of the elliptic curve group. [in] cofactor The co-factor of the elliptic curve. [out] g The newly constructed elliptic curve group.
+
- Returns
- EpidStatus
- See also
- DeleteEcGroup
+
+
+
+
+
+
| EpidStatus NewEcPoint | +( | +EcGroup const * | +g, | +
| + | + | EcPoint ** | +p | +
| + | ) | ++ |
+
+
+Creates a new EcPoint.
+Allocates memory and creates a new point on elliptic curve group.
+Use DeleteEcPoint() to free memory.
+- Parameters
-
+
+
+[in] g Elliptic curve group. [out] p Newly constructed point on the elliptic curve group g.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +DeleteEcPoint
+
+
+
+
+
+
| EpidStatus ReadEcPoint | +( | +EcGroup * | +g, | +
| + | + | void const * | +p_str, | +
| + | + | size_t | +strlen, | +
| + | + | EcPoint * | +p | +
| + | ) | ++ |
+
+
+Deserializes an EcPoint from a string.
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] p_str The serialized value. [in] strlen The size of p_str in bytes. [out] p The target EcPoint.
+
- Returns
- EpidStatus
- See also
- NewEcPoint
+
+
+
+
+
| EpidStatus WriteEcPoint | +( | +EcGroup * | +g, | +
| + | + | EcPoint const * | +p, | +
| + | + | void * | +p_str, | +
| + | + | size_t | +strlen | +
| + | ) | ++ |
+
+
+Serializes an EcPoint to a string.
+- Parameters
-
+
+
+[in] g The elliptic curve group. [in] p The EcPoint to be serialized. [out] p_str The target string. [in] strlen the size of p_str in bytes.
+
- Returns
- EpidStatus
- See also
- NewEcPoint
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___ecdsa_primitives.js b/external/epid-sdk-3.0.0/doc/html/group___ecdsa_primitives.js
new file mode 100644
index 00000000..37f85bf0
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___ecdsa_primitives.js
@@ -0,0 +1,5 @@
+var group___ecdsa_primitives =
+[
+ [ "EcdsaSignBuffer", "group___ecdsa_primitives.html#ga67091ecae643c1b8a0b0a4946eda7afe", null ],
+ [ "EcdsaVerifyBuffer", "group___ecdsa_primitives.html#gaab68de7291db6e42a01e99c2fa40057f", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid11_file_parser_module.html b/external/epid-sdk-3.0.0/doc/html/group___epid11_file_parser_module.html
new file mode 100644
index 00000000..4f3dc04d
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid11_file_parser_module.html
@@ -0,0 +1,362 @@
+
+
+
+
+
+
+
+
+
+
+
+
+Elliptic Curve Digital Signature Algorithm Primitives. +More...
++Functions | |
| EpidStatus | EcdsaVerifyBuffer (void const *buf, size_t buf_len, EcdsaPublicKey const *pubkey, EcdsaSignature const *sig) |
| Verifies authenticity of a digital signature over a buffer. More... | |
| EpidStatus | EcdsaSignBuffer (void const *buf, size_t buf_len, EcdsaPrivateKey const *privkey, BitSupplier rnd_func, void *rnd_param, EcdsaSignature *sig) |
| Creates ECDSA signature of buffer. More... | |
Detailed Description
+Elliptic Curve Digital Signature Algorithm Primitives.
+Provides APIs for computing and checking buffer signatures using the Elliptic Curve Digital Signature Algorithm.
+Function Documentation
+ +
+
+
+
+
+
+
| EpidStatus EcdsaSignBuffer | +( | +void const * | +buf, | +
| + | + | size_t | +buf_len, | +
| + | + | EcdsaPrivateKey const * | +privkey, | +
| + | + | BitSupplier | +rnd_func, | +
| + | + | void * | +rnd_param, | +
| + | + | EcdsaSignature * | +sig | +
| + | ) | ++ |
+
+
+Creates ECDSA signature of buffer.
+Uses Elliptic Curve Digital Signature Algorithm (ECDSA) to generate a signature of the SHA-256 hash of the input buffer with the provided private key.
+The operation is over the standard secp256r1 curve.
+- Parameters
-
+
+
+[in] buf Pointer to buffer containing message to sign. [in] buf_len The size of buf in bytes. [in] privkey The ECDSA private key on secp256r1 curve. [in] rnd_func Random number generator. [in] rnd_param Pass through context data for rnd_func. [out] sig The resulting ECDSA signature.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidRandMaxIterErr Failed to sign after maximum number of iterations due to bad luck in random number generation.
+
- See also
- EcdsaSignBuffer
+
+
+
+
+
| EpidStatus EcdsaVerifyBuffer | +( | +void const * | +buf, | +
| + | + | size_t | +buf_len, | +
| + | + | EcdsaPublicKey const * | +pubkey, | +
| + | + | EcdsaSignature const * | +sig | +
| + | ) | ++ |
+
+
+Verifies authenticity of a digital signature over a buffer.
+Uses Elliptic Curve Digital Signature Algorithm (ECDSA) to verify that the SHA-256 hash of the input buffer was signed with the private key corresponding to the provided public key.
+The operation is over the standard secp256r1 curve.
+- Warning
- It is the responsibility of the caller to verify the identity of the public key.
- Parameters
-
+
+
+[in] buf Pointer to buffer containing message to verify. [in] buf_len The size of buf in bytes. [in] pubkey The ECDSA public key on secp256r1 curve. [in] sig The ECDSA signature to be verified.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidSigValid EcdsaSignature is valid for the given buffer. kEpidSigInvalid EcdsaSignature is invalid for the given buffer.
+
- See also
- EcdsaSignBuffer
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid11_file_parser_module.js b/external/epid-sdk-3.0.0/doc/html/group___epid11_file_parser_module.js
new file mode 100644
index 00000000..aacd2908
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid11_file_parser_module.js
@@ -0,0 +1,7 @@
+var group___epid11_file_parser_module =
+[
+ [ "Epid11ParseGroupPubKeyFile", "group___epid11_file_parser_module.html#ga1f92d1cb6bd7d9815711fde515b40a4c", null ],
+ [ "Epid11ParseGroupRlFile", "group___epid11_file_parser_module.html#gae28a844eb68828480b2a76fcb7d252a3", null ],
+ [ "Epid11ParsePrivRlFile", "group___epid11_file_parser_module.html#gae682077d315c39ed298ef198fd738546", null ],
+ [ "Epid11ParseSigRlFile", "group___epid11_file_parser_module.html#gac3f6daaa5333627d4efe5438c1fe8868", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid11_pairing_primitives.html b/external/epid-sdk-3.0.0/doc/html/group___epid11_pairing_primitives.html
new file mode 100644
index 00000000..0d60502f
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid11_pairing_primitives.html
@@ -0,0 +1,245 @@
+
+
+
+
+
+
+
+
+
+
+
+
+EPID 1.1 support
+
+
+
+
+Parser for 1.1 issuer material. +More...
++Functions | |
| EpidStatus | Epid11ParseGroupPubKeyFile (void const *buf, size_t len, EpidCaCertificate const *cert, Epid11GroupPubKey *pubkey) |
| Extracts group public key from buffer in issuer binary format. More... | |
| EpidStatus | Epid11ParsePrivRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, Epid11PrivRl *rl, size_t *rl_len) |
| Extracts private key revocation list from buffer in issuer binary format. More... | |
| EpidStatus | Epid11ParseSigRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, Epid11SigRl *rl, size_t *rl_len) |
| Extracts signature revocation list from buffer in issuer binary format. More... | |
| EpidStatus | Epid11ParseGroupRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, Epid11GroupRl *rl, size_t *rl_len) |
| Extracts group revocation list from buffer in issuer binary format. More... | |
Detailed Description
+Parser for 1.1 issuer material.
+Defines the APIs needed to parse Intel(R) EPID 1.1 issuer material.
+- See also
- EPID 1.1 support
Function Documentation
+ +
+
+
+
+
+
+
| EpidStatus Epid11ParseGroupPubKeyFile | +( | +void const * | +buf, | +
| + | + | size_t | +len, | +
| + | + | EpidCaCertificate const * | +cert, | +
| + | + | Epid11GroupPubKey * | +pubkey | +
| + | ) | ++ |
+
+
+Extracts group public key from buffer in issuer binary format.
+Extracts the first group public key from a buffer with format of Intel(R) EPID 1.1 Group Public Key Certificate Binary File. The function validates that the first public key was signed by the private key corresponding to the provided CA certificate and the size of the input buffer is correct.
+- Warning
- It is the responsibility of the caller to authenticate the EpidCaCertificate.
- Parameters
-
+
+
+[in] buf Pointer to buffer containing public key to extract. [in] len The size of buf in bytes. [in] cert The issuing CA public key certificate. [out] pubkey The extracted group public key.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidSigInvalid Parsing failed due to data authentication failure.
+
- See also
- EPID 1.1 support
+
+
+
+
+
+
| EpidStatus Epid11ParseGroupRlFile | +( | +void const * | +buf, | +
| + | + | size_t | +len, | +
| + | + | EpidCaCertificate const * | +cert, | +
| + | + | Epid11GroupRl * | +rl, | +
| + | + | size_t * | +rl_len | +
| + | ) | ++ |
+
+
+Extracts group revocation list from buffer in issuer binary format.
+Extracts the group revocation list from a buffer with format of Intel(R) EPID 1.1 Binary Group Certificate Revocation List File. The function validates that the revocation list was signed by the private key corresponding to the provided CA certificate and the size of the input buffer is correct.
+To determine the required size of the revocation list output buffer, provide a null pointer for the output buffer.
+- Warning
- It is the responsibility of the caller to authenticate the EpidCaCertificate.
- Parameters
-
+
+
+[in] buf Pointer to buffer containing the revocation list to extract. [in] len The size of buf in bytes. [in] cert The issuing CA public key certificate. [out] rl The extracted revocation list. If Null, rl_len is filled with the required output buffer size. [in,out] rl_len The size of rl in bytes.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidSigInvalid Parsing failed due to data authentication failure.
+
- See also
- EPID 1.1 support
+
+
+
+
+
+
| EpidStatus Epid11ParsePrivRlFile | +( | +void const * | +buf, | +
| + | + | size_t | +len, | +
| + | + | EpidCaCertificate const * | +cert, | +
| + | + | Epid11PrivRl * | +rl, | +
| + | + | size_t * | +rl_len | +
| + | ) | ++ |
+
+
+Extracts private key revocation list from buffer in issuer binary format.
+Extracts the private key revocation list from a buffer with format of Intel(R) EPID 1.1 Binary Private Key Revocation List File. The function validates that the revocation list was signed by the private key corresponding to the provided CA certificate and the size of the input buffer is correct.
+To determine the required size of the revocation list output buffer, provide a null pointer for the output buffer.
+- Warning
- It is the responsibility of the caller to authenticate the EpidCaCertificate.
- Parameters
-
+
+
+[in] buf Pointer to buffer containing the revocation list to extract. [in] len The size of buf in bytes. [in] cert The issuing CA public key certificate. [out] rl The extracted revocation list. If Null, rl_len is filled with the required output buffer size. [in,out] rl_len The size of rl in bytes.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidSigInvalid Parsing failed due to data authentication failure.
+
- See also
- EPID 1.1 support
+
+
+
+
+
| EpidStatus Epid11ParseSigRlFile | +( | +void const * | +buf, | +
| + | + | size_t | +len, | +
| + | + | EpidCaCertificate const * | +cert, | +
| + | + | Epid11SigRl * | +rl, | +
| + | + | size_t * | +rl_len | +
| + | ) | ++ |
+
+
+Extracts signature revocation list from buffer in issuer binary format.
+Extracts the signature based revocation list from a buffer with format of Intel(R) EPID 1.1 Binary Signature Revocation List File. The function validates that the revocation list was signed by the private key corresponding to the provided CA certificate and the size of the input buffer is correct.
+To determine the required size of the revocation list output buffer, provide a null pointer for the output buffer.
+- Warning
- It is the responsibility of the caller to authenticate the EpidCaCertificate.
- Parameters
-
+
+
+[in] buf Pointer to buffer containing the revocation list to extract. [in] len The size of buf in bytes. [in] cert The issuing CA public key certificate. [out] rl The extracted revocation list. If Null, rl_len is filled with the required output buffer size. [in,out] rl_len The size of rl in bytes.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidSigInvalid Parsing failed due to data authentication failure.
+
- See also
- EPID 1.1 support
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid11_pairing_primitives.js b/external/epid-sdk-3.0.0/doc/html/group___epid11_pairing_primitives.js
new file mode 100644
index 00000000..53b346ae
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid11_pairing_primitives.js
@@ -0,0 +1,7 @@
+var group___epid11_pairing_primitives =
+[
+ [ "Epid11PairingState", "group___epid11_pairing_primitives.html#ga74236e8ebbfc30a7daa7fa1cf1df148b", null ],
+ [ "DeleteEpid11PairingState", "group___epid11_pairing_primitives.html#gaa3457d6f85889bc714910252fd21c758", null ],
+ [ "Epid11Pairing", "group___epid11_pairing_primitives.html#gaa4076dfe25e8e61ac6753333a322c059", null ],
+ [ "NewEpid11PairingState", "group___epid11_pairing_primitives.html#ga0ee658e26e9f933ba2ffbf2504dfae7e", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid11_types.html b/external/epid-sdk-3.0.0/doc/html/group___epid11_types.html
new file mode 100644
index 00000000..8b4241f6
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid11_types.html
@@ -0,0 +1,150 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+EPID 1.1 pairing operations. +More...
++Typedefs | |
| +typedef struct Epid11PairingState | Epid11PairingState |
| A pairing. | |
+Functions | |
| EpidStatus | NewEpid11PairingState (EcGroup const *ga, EcGroup const *gb, FiniteField const *ff, Epid11PairingState **ps) |
| Constructs a new Tate pairing state. More... | |
| void | DeleteEpid11PairingState (Epid11PairingState **ps) |
| Frees a previously allocated by Epid11PairingState. More... | |
| EpidStatus | Epid11Pairing (Epid11PairingState *ps, EcPoint const *a, EcPoint const *b, FfElement *d) |
| Computes a Tate Pairing for two parameters. More... | |
Detailed Description
+EPID 1.1 pairing operations.
+Provides APIs for defining and using a pairing relationship between two Elliptic curve groups.
+These pairing operations are intended to support Intel(R) EPID 1.1 verification.
+- See also
- EPID 1.1 support
Function Documentation
+ +
+
+
+
+
+
+
| void DeleteEpid11PairingState | +( | +Epid11PairingState ** | +ps | ) | ++ |
+
+
+Frees a previously allocated by Epid11PairingState.
+Frees memory pointed to by pairing state. Nulls the pointer.
+This pairing operation is intended to support Intel(R) EPID 1.1 verification.
+- Parameters
-
+
+
+[in] ps The pairing state. Can be NULL.
+
- See also
- NewEpid11PairingState +
- +EPID 1.1 support
+
+
+
+
+
+
| EpidStatus Epid11Pairing | +( | +Epid11PairingState * | +ps, | +
| + | + | EcPoint const * | +a, | +
| + | + | EcPoint const * | +b, | +
| + | + | FfElement * | +d | +
| + | ) | ++ |
+
+
+Computes a Tate Pairing for two parameters.
+This pairing operation is intended to support Intel(R) EPID 1.1 verification. It frees memory pointed to by an Intel(R) EPID 1.1 pairing state.
+- Parameters
-
+
+
+[in] ps The pairing state. [in] a The first value to pair. Must be in ga. [in] b The second value to pair. Must be in gb. [out] d The result of the pairing. Must be in ff.
+
- Returns
- EpidStatus
- See also
- EPID 1.1 support
+
+
+
+
+
| EpidStatus NewEpid11PairingState | +( | +EcGroup const * | +ga, | +
| + | + | EcGroup const * | +gb, | +
| + | + | FiniteField const * | +ff, | +
| + | + | Epid11PairingState ** | +ps | +
| + | ) | ++ |
+
+
+Constructs a new Tate pairing state.
+Allocates memory and creates a new pairing state for Tate pairing.
+Use DeleteEpid11PairingState() to free memory.
+This pairing operation is intended to support Intel(R) EPID 1.1 verification.
+- Parameters
-
+
+
+[in] ga The EcGroup from which the first parameter of the pairing will be taken. [in] gb The EcGroup from which the second parameter of the pairing will be taken. [in] ff The result finite field. Must be a Fq12 field. [out] ps Newly constructed pairing state.
+
- Returns
- EpidStatus
- See also
- DeleteEpid11PairingState +
- +EPID 1.1 support
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid11_types.js b/external/epid-sdk-3.0.0/doc/html/group___epid11_types.js
new file mode 100644
index 00000000..4d71606d
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid11_types.js
@@ -0,0 +1,97 @@
+var group___epid11_types =
+[
+ [ "OctStr80", "struct_oct_str80.html", [
+ [ "data", "struct_oct_str80.html#af80e2b81554109d9a41c5e771aceb8c9", null ]
+ ] ],
+ [ "OctStr600", "struct_oct_str600.html", [
+ [ "data", "struct_oct_str600.html#a06d53af92a06e1decc6062fd16c43a59", null ]
+ ] ],
+ [ "OctStr768", "struct_oct_str768.html", [
+ [ "data", "struct_oct_str768.html#ae45eea89259bd22e60a8d960063921cc", null ]
+ ] ],
+ [ "Fq3ElemStr", "struct_fq3_elem_str.html", [
+ [ "a", "struct_fq3_elem_str.html#af1be0a4d5c9c674d75bec34f95e3c731", null ]
+ ] ],
+ [ "Epid11G2ElemStr", "struct_epid11_g2_elem_str.html", [
+ [ "x", "struct_epid11_g2_elem_str.html#af28558484298f4f56377ededf57a4a04", null ],
+ [ "y", "struct_epid11_g2_elem_str.html#a9e8984e479bcbe8bd36c65e80c340032", null ]
+ ] ],
+ [ "Epid11GtElemStr", "struct_epid11_gt_elem_str.html", [
+ [ "a", "struct_epid11_gt_elem_str.html#aed8dd86f1696c2f3537154fc904bf2b0", null ]
+ ] ],
+ [ "Epid11Params", "struct_epid11_params.html", [
+ [ "a", "struct_epid11_params.html#a01381f84b2d747b6273e21c71c58a1b0", null ],
+ [ "a_tick", "struct_epid11_params.html#ae8770bb921aac9214ff8c45c41dbb228", null ],
+ [ "b", "struct_epid11_params.html#a27b45ed7771a3024d1d059b4b4ff6eae", null ],
+ [ "b_tick", "struct_epid11_params.html#ade3f88ce73d7de656ec67d9fdb0719d7", null ],
+ [ "coeff", "struct_epid11_params.html#aacc39ebe0cc625321039ffb6be0b0e87", null ],
+ [ "g1", "struct_epid11_params.html#a835e70da717cd5b0c94e242a6418a287", null ],
+ [ "g2", "struct_epid11_params.html#a1c6bbc4e066449d9c329f88cb653ef7c", null ],
+ [ "g3", "struct_epid11_params.html#a7eb9a1371d7187ae81bccfa8d5595033", null ],
+ [ "h", "struct_epid11_params.html#ae2d1dc635d9d7cba496c3d64fb6f9d5b", null ],
+ [ "h_tick", "struct_epid11_params.html#a0fe238db4ebc0225899dc2dac97d11c0", null ],
+ [ "orderG2", "struct_epid11_params.html#a02bd6fa2ab256e3a07533e947ab0101e", null ],
+ [ "p", "struct_epid11_params.html#a2aa4d8a2ebe0dfeb6d930fd7b39f9d1a", null ],
+ [ "p_tick", "struct_epid11_params.html#a77a8350b97a7afb584a46eb5b32f03bf", null ],
+ [ "q", "struct_epid11_params.html#aad03fd1cc3955bb8879535fa7298123f", null ],
+ [ "q_tick", "struct_epid11_params.html#a49462f35596d07a456a731d0690fdd83", null ],
+ [ "qnr", "struct_epid11_params.html#af22cfcd6c7ec0e7e7369b79554b963bd", null ]
+ ] ],
+ [ "Epid11GroupPubKey", "struct_epid11_group_pub_key.html", [
+ [ "gid", "struct_epid11_group_pub_key.html#a964344b3c595bdd585bb9b5d9d0ea762", null ],
+ [ "h1", "struct_epid11_group_pub_key.html#a36f688472e2655052d485eac67d8c362", null ],
+ [ "h2", "struct_epid11_group_pub_key.html#aa724e9d2f0cb6019c05547d76a13b72a", null ],
+ [ "w", "struct_epid11_group_pub_key.html#a056c7138246e2bdcd47eaad501b756bb", null ]
+ ] ],
+ [ "Epid11BasicSignature", "struct_epid11_basic_signature.html", [
+ [ "B", "struct_epid11_basic_signature.html#a27fd7ae99d1ada652e21e7508a467c0b", null ],
+ [ "c", "struct_epid11_basic_signature.html#a9cc6efcd3d7270022779bd16776168ed", null ],
+ [ "K", "struct_epid11_basic_signature.html#a5882fcbfd272774e12e50a2d77f0b139", null ],
+ [ "nd", "struct_epid11_basic_signature.html#af18200712d2cf3ed3ccaee328e8a4e0f", null ],
+ [ "sa", "struct_epid11_basic_signature.html#aeb221cf52bc2b1a9bf6e0a9779bfd20f", null ],
+ [ "salpha", "struct_epid11_basic_signature.html#a1a73fc922f69e2499643dd4c53d0d42d", null ],
+ [ "sb", "struct_epid11_basic_signature.html#a29a700f3bec251600e18b2292081df4b", null ],
+ [ "sbeta", "struct_epid11_basic_signature.html#afe28bad6328f81e6f7af011cc96ac2e5", null ],
+ [ "sf", "struct_epid11_basic_signature.html#ae17b45194997a6fa13c6014a51ec711c", null ],
+ [ "sx", "struct_epid11_basic_signature.html#a2718346665210b7e26521bf4a15cb3bd", null ],
+ [ "sy", "struct_epid11_basic_signature.html#a911441845fc9b82d514133371b5ba87c", null ],
+ [ "T1", "struct_epid11_basic_signature.html#a58b058a9c5119a240177acfade328b3b", null ],
+ [ "T2", "struct_epid11_basic_signature.html#a267cf4e17d10584736b0c38f3668d822", null ]
+ ] ],
+ [ "Epid11NrProof", "struct_epid11_nr_proof.html", [
+ [ "c", "struct_epid11_nr_proof.html#a2e5ee8dc25d296538dce935397a93d68", null ],
+ [ "smu", "struct_epid11_nr_proof.html#a1ad7fe6b32c09f2504ee49731c0ad145", null ],
+ [ "snu", "struct_epid11_nr_proof.html#aa8406e938b2f87bded9e374e93a8ee5d", null ],
+ [ "T", "struct_epid11_nr_proof.html#a5ad9ba3bfac4eac37fd4a4e33ea65ddc", null ]
+ ] ],
+ [ "Epid11Signature", "struct_epid11_signature.html", [
+ [ "n2", "struct_epid11_signature.html#ad25c277223a5210063163ea554d08ad4", null ],
+ [ "rl_ver", "struct_epid11_signature.html#a43cb3ed13c862ff05a9292623ad57c5e", null ],
+ [ "sigma", "struct_epid11_signature.html#abf24a8df563ba3f535486d8dad7384f4", null ],
+ [ "sigma0", "struct_epid11_signature.html#a48526e73f02ad3f1544c4c71c481f153", null ]
+ ] ],
+ [ "Epid11PrivRl", "struct_epid11_priv_rl.html", [
+ [ "f", "struct_epid11_priv_rl.html#abbb75fee81aecb2dde7e2daab895ad3b", null ],
+ [ "gid", "struct_epid11_priv_rl.html#aa8945d81e30674b52a6d0900b64feb3c", null ],
+ [ "n1", "struct_epid11_priv_rl.html#ad95f880f40e2f40c723f5bdbd22ecfa2", null ],
+ [ "version", "struct_epid11_priv_rl.html#a2b3899f5a35bf64f860d6d91bccb03c8", null ]
+ ] ],
+ [ "Epid11SigRlEntry", "struct_epid11_sig_rl_entry.html", [
+ [ "b", "struct_epid11_sig_rl_entry.html#abe47cfbd00684941f93a211417bedf0c", null ],
+ [ "k", "struct_epid11_sig_rl_entry.html#a5de66e1352eafe95774a0d76bac8f01a", null ]
+ ] ],
+ [ "Epid11SigRl", "struct_epid11_sig_rl.html", [
+ [ "bk", "struct_epid11_sig_rl.html#a6473f8a98f76c9f82183041ea5ae17e3", null ],
+ [ "gid", "struct_epid11_sig_rl.html#ad45b0e3e1be59649150dd34c104000ac", null ],
+ [ "n2", "struct_epid11_sig_rl.html#a8c654d43df132db7874f4c84c177dc12", null ],
+ [ "version", "struct_epid11_sig_rl.html#aa38674729293f4879ff94328dd3c59b1", null ]
+ ] ],
+ [ "Epid11GroupRl", "struct_epid11_group_rl.html", [
+ [ "gid", "struct_epid11_group_rl.html#a97f165c59bc447e3ca3c2148a096710f", null ],
+ [ "n3", "struct_epid11_group_rl.html#a35cb954f598d4006b0f047cde77010a5", null ],
+ [ "version", "struct_epid11_group_rl.html#a63afa9863e8dcb63ff884e6e4093c481", null ]
+ ] ],
+ [ "Epid11G1ElemStr", "group___epid11_types.html#gadff9c05d5b7751024152b40dda545545", null ],
+ [ "Epid11G3ElemStr", "group___epid11_types.html#gaf1f4f1d6f001895abe548cfb33611c23", null ],
+ [ "Epid11GroupId", "group___epid11_types.html#ga7293cec8f937d6f5da42084403f978f1", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid11_verifier_module.html b/external/epid-sdk-3.0.0/doc/html/group___epid11_verifier_module.html
new file mode 100644
index 00000000..8b383c38
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid11_verifier_module.html
@@ -0,0 +1,780 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Intel(R) EPID 1.1 specific data types. +More...
++Data Structures | |
| struct | OctStr80 |
| 80 bit octet string More... | |
| struct | OctStr600 |
| 600 bit octet string More... | |
| struct | OctStr768 |
| 768 bit octet string More... | |
| struct | Fq3ElemStr |
| Serialized Fq3 element. More... | |
| struct | Epid11G2ElemStr |
| Serialized Intel(R) EPID 1.1 G2 element. More... | |
| struct | Epid11GtElemStr |
| Serialized Intel(R) EPID 1.1 GT element. More... | |
| struct | Epid11Params |
| Intel(R) EPID 1.1 Parameters. More... | |
| struct | Epid11GroupPubKey |
| Intel(R) EPID 1.1 group public key. More... | |
| struct | Epid11BasicSignature |
| Intel(R) EPID 1.1 basic signature. More... | |
| struct | Epid11NrProof |
| Intel(R) EPID 1.1 non-revoked Proof. More... | |
| struct | Epid11Signature |
| Intel(R) EPID 1.1 Signature. More... | |
| struct | Epid11PrivRl |
| Intel(R) EPID 1.1 private-key based revocation list. More... | |
| struct | Epid11SigRlEntry |
| Intel(R) EPID 1.1 entry in SigRL (B,K) More... | |
| struct | Epid11SigRl |
| Intel(R) EPID 1.1 signature based revocation list. More... | |
| struct | Epid11GroupRl |
| Intel(R) EPID 1.1 group revocation list. More... | |
+Typedefs | |
| +typedef G1ElemStr | Epid11G1ElemStr |
| Serialized Intel(R) EPID 1.1 G1 element. | |
| +typedef G1ElemStr | Epid11G3ElemStr |
| Serialized Intel(R) EPID 1.1 G3 element. | |
| +typedef OctStr32 | Epid11GroupId |
| Intel(R) EPID 1.1 group ID. | |
Detailed Description
+Intel(R) EPID 1.1 specific data types.
+Defines serialized data types used by the SDK. These data types are only used by components that need to do Intel(R) EPID 1.1 verification.
+- See also
- EPID 1.1 support
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid11_verifier_module.js b/external/epid-sdk-3.0.0/doc/html/group___epid11_verifier_module.js
new file mode 100644
index 00000000..b6867654
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid11_verifier_module.js
@@ -0,0 +1,22 @@
+var group___epid11_verifier_module =
+[
+ [ "Epid11VerifierPrecomp", "struct_epid11_verifier_precomp.html", [
+ [ "e12", "struct_epid11_verifier_precomp.html#a0a980adb039089263ec59a995600ee91", null ],
+ [ "e22", "struct_epid11_verifier_precomp.html#ad0ff2a13c2c87460296900dde72a2f30", null ],
+ [ "e2w", "struct_epid11_verifier_precomp.html#a14ebadf105aff085edb9a817a2d1db89", null ],
+ [ "gid", "struct_epid11_verifier_precomp.html#a03138e937f4488bdbc52ed473dc313da", null ]
+ ] ],
+ [ "Epid11VerifierCtx", "group___epid11_verifier_module.html#gabe6a864a06322205ae7536ffea34c702", null ],
+ [ "Epid11AreSigsLinked", "group___epid11_verifier_module.html#gab0b6560b226a37321f5ca5d4fb55eba7", null ],
+ [ "Epid11CheckPrivRlEntry", "group___epid11_verifier_module.html#ga0b79c79d09e3551158e1c38c7c335929", null ],
+ [ "Epid11NrVerify", "group___epid11_verifier_module.html#ga3a2e320d7de6156b2ce9d73e9cdce813", null ],
+ [ "Epid11VerifierCreate", "group___epid11_verifier_module.html#gac5a8f8d7624063ea428d81dbdbf61fa8", null ],
+ [ "Epid11VerifierDelete", "group___epid11_verifier_module.html#ga63cae8d5abcf4d7e3af4157de18998f1", null ],
+ [ "Epid11VerifierSetBasename", "group___epid11_verifier_module.html#ga0cb6d30df527ee0d8f0a1b68d2b7c0c0", null ],
+ [ "Epid11VerifierSetGroupRl", "group___epid11_verifier_module.html#ga809c777908b2f9d029062d9424cb5f65", null ],
+ [ "Epid11VerifierSetPrivRl", "group___epid11_verifier_module.html#gaffbe6ac2bc7236ad65126a17ebdceb14", null ],
+ [ "Epid11VerifierSetSigRl", "group___epid11_verifier_module.html#gaff5a014b0334be7e8583f0f99cb5e9b8", null ],
+ [ "Epid11VerifierWritePrecomp", "group___epid11_verifier_module.html#ga241520cb925e5be89893a2037451cf1c", null ],
+ [ "Epid11Verify", "group___epid11_verifier_module.html#gafe5ad6bde38ad0c3e0a9960975fd5216", null ],
+ [ "Epid11VerifyBasicSig", "group___epid11_verifier_module.html#ga7b5d19277da043c2b79721975d7bd070", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_common.html b/external/epid-sdk-3.0.0/doc/html/group___epid_common.html
new file mode 100644
index 00000000..83665db3
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_common.html
@@ -0,0 +1,135 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Intel(R) EPID 1.1 Verifier functionality. +More...
++Data Structures | |
| struct | Epid11VerifierPrecomp |
| Intel(R) EPID 1.1 Pre-computed verifier settings. More... | |
+Typedefs | |
| +typedef struct Epid11VerifierCtx | Epid11VerifierCtx |
| Internal context of Intel(R) EPID 1.1 verifier. | |
+Functions | |
| EpidStatus | Epid11VerifierCreate (Epid11GroupPubKey const *pub_key, Epid11VerifierPrecomp const *precomp, Epid11VerifierCtx **ctx) |
| Creates a new Intel(R) EPID 1.1 verifier context. More... | |
| void | Epid11VerifierDelete (Epid11VerifierCtx **ctx) |
| Deletes an existing Intel(R) EPID 1.1 verifier context. More... | |
| EpidStatus | Epid11VerifierWritePrecomp (Epid11VerifierCtx const *ctx, Epid11VerifierPrecomp *precomp) |
| Serializes the pre-computed Intel(R) EPID 1.1 verifier settings. More... | |
| EpidStatus | Epid11VerifierSetPrivRl (Epid11VerifierCtx *ctx, Epid11PrivRl const *priv_rl, size_t priv_rl_size) |
| Sets the Intel(R) EPID 1.1 private key based revocation list. More... | |
| EpidStatus | Epid11VerifierSetSigRl (Epid11VerifierCtx *ctx, Epid11SigRl const *sig_rl, size_t sig_rl_size) |
| Sets the Intel(R) EPID 1.1 signature based revocation list. More... | |
| EpidStatus | Epid11VerifierSetGroupRl (Epid11VerifierCtx *ctx, Epid11GroupRl const *grp_rl, size_t grp_rl_size) |
| Sets the Intel(R) EPID 1.1 group based revocation list. More... | |
| EpidStatus | Epid11VerifierSetBasename (Epid11VerifierCtx *ctx, void const *basename, size_t basename_len) |
| Sets the basename to be used by a verifier. More... | |
| EpidStatus | Epid11Verify (Epid11VerifierCtx const *ctx, Epid11Signature const *sig, size_t sig_len, void const *msg, size_t msg_len) |
| Verifies an Intel(R) EPID 1.1 signature and checks revocation status. More... | |
| bool | Epid11AreSigsLinked (Epid11BasicSignature const *sig1, Epid11BasicSignature const *sig2) |
| Determines if two Intel(R) EPID 1.1 signatures are linked. More... | |
| EpidStatus | Epid11VerifyBasicSig (Epid11VerifierCtx const *ctx, Epid11BasicSignature const *sig, void const *msg, size_t msg_len) |
| Verifies an Intel(R) EPID 1.1 member signature without revocation checks. More... | |
| EpidStatus | Epid11NrVerify (Epid11VerifierCtx const *ctx, Epid11BasicSignature const *sig, void const *msg, size_t msg_len, Epid11SigRlEntry const *sigrl_entry, Epid11NrProof const *proof) |
| Verifies the non-revoked proof for a single Intel(R) EPID 1.1 signature based revocation list entry. More... | |
| EpidStatus | Epid11CheckPrivRlEntry (Epid11VerifierCtx const *ctx, Epid11BasicSignature const *sig, FpElemStr const *f) |
| Verifies an Intel(R) EPID 1.1 signature has not been revoked in the private key based revocation list. More... | |
Detailed Description
+Intel(R) EPID 1.1 Verifier functionality.
+To verify signatures coming from member devices that belong to an Intel® EPID 1.1 group, you need to use Intel® EPID 1.1 verifier APIs.
+If you are acting as a verifier for both Intel® EPID 1.1 and 2.0 members, you can determine if you need version 1.1 or 2.0 verification by checking the Intel® EPID version field in the group public key file (see EpidParseFileHeader). You can also check the version in other binary issuer material, such as the GroupRL and SigRL.
+The 1.1 verifier APIs take a verifier context as input. Each verifier context (Epid11VerifierCtx) represents a verifier for a single group.
+The Intel® EPID 1.1 specification does not provide hash algorithm selection and verifier blacklist revocation. Therefore, APIs such as EpidVerifierSetHashAlg and EpidVerifierSetVerifierRl are not available.
+You can find the Intel® EPID 1.1 API headers in the 1.1 directories, for example, epid/verifier/1.1/api.h.
Intel® EPID 1.1 APIs and data structures are indicated with the "Epid11" prefix. For example, the Intel® EPID 1.1 version of EpidParseGroupPubKeyFile is called Epid11ParseGroupPubKeyFile, and the Intel® EPID 1.1 version of GroupRl is Epid11GroupRl.
Function Documentation
+ +
+
+
+
+
+
+
| bool Epid11AreSigsLinked | +( | +Epid11BasicSignature const * | +sig1, | +
| + | + | Epid11BasicSignature const * | +sig2 | +
| + | ) | ++ |
+
+
+Determines if two Intel(R) EPID 1.1 signatures are linked.
+The Intel(R) EPID scheme allows signatures to be linked. If basename option is specified when signing signatures with the same basename will be linkable. This linking capability allows the verifier, or anyone, to know whether two Intel(R) EPID signatures are generated by the same member.
+This API supports Intel(R) EPID 1.1 verification.
+- Parameters
-
+
+
+[in] sig1 A basic signature. [in] sig2 A basic signature.
+
- Returns
- bool
- Return values
-
+
+
+true if the signatures were generated by the same member false if it couldn't be determined if the signatures were generated by the same member
+
- Note
- The input signatures should be verified using Epid11VerifyBasicSig() before invocation. Behavior is undefined if either of the signatures cannot be verified.
- See also
- Epid11VerifyBasicSig +
- +EPID 1.1 support
+
+
+
+
+
+
| EpidStatus Epid11CheckPrivRlEntry | +( | +Epid11VerifierCtx const * | +ctx, | +
| + | + | Epid11BasicSignature const * | +sig, | +
| + | + | FpElemStr const * | +f | +
| + | ) | ++ |
+
+
+Verifies an Intel(R) EPID 1.1 signature has not been revoked in the private key based revocation list.
+Used in constrained environments where, due to limited memory, it may not be possible to process through a large and potentially unbounded revocation list.
+This API supports Intel(R) EPID 1.1 verification.
+- Parameters
-
+
+
+[in] ctx The verifier context. [in] sig The basic signature. [in] f The private key based revocation list entry.
+
- Note
- Sig should be verified using Epid11VerifyBasicSig() before invocation. Behavior is undefined if sig cannot be verified. +
- +This function should be used in conjunction with Epid11NrVerify() and Epid11VerifyBasicSig(). +
- +If the result is not kEpidNoErr the verify should de considered to have failed.
- Returns
- EpidStatus
- See also
- Epid11VerifierCreate +
- +Epid11NrVerify +
- +Epid11VerifyBasicSig +
- +EPID 1.1 support
+
+
+
+
+
+
| EpidStatus Epid11NrVerify | +( | +Epid11VerifierCtx const * | +ctx, | +
| + | + | Epid11BasicSignature const * | +sig, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len, | +
| + | + | Epid11SigRlEntry const * | +sigrl_entry, | +
| + | + | Epid11NrProof const * | +proof | +
| + | ) | ++ |
+
+
+Verifies the non-revoked proof for a single Intel(R) EPID 1.1 signature based revocation list entry.
+Used in constrained environments where, due to limited memory, it may not be possible to process through a large and potentially unbounded revocation list.
+This API supports Intel(R) EPID 1.1 verification.
+- Parameters
-
+
+
+[in] ctx The verifier context. [in] sig The basic signature. [in] msg The message that was signed. [in] msg_len The size of msg in bytes. [in] sigrl_entry The signature based revocation list entry. [in] proof The non-revoked proof.
+
- Returns
- EpidStatus
- Note
- Sig should be verified using Epid11VerifyBasicSig() before invocation. Behavior is undefined if sig cannot be verified. +
- +This function should be used in conjunction with Epid11VerifyBasicSig() and Epid11CheckPrivRlEntry(). +
- +If the result is not kEpidNoErr the verify should de considered to have failed.
- See also
- Epid11VerifierCreate +
- +Epid11VerifyBasicSig +
- +Epid11CheckPrivRlEntry +
- +EPID 1.1 support
+
+
+
+
+
+
| EpidStatus Epid11VerifierCreate | +( | +Epid11GroupPubKey const * | +pub_key, | +
| + | + | Epid11VerifierPrecomp const * | +precomp, | +
| + | + | Epid11VerifierCtx ** | +ctx | +
| + | ) | ++ |
+
+
+Creates a new Intel(R) EPID 1.1 verifier context.
+Must be called to create the verifier context that is used by other "Verifier" APIs.
+Allocates memory for the context, then initialize it.
+Epid11VerifierDelete() must be called to safely release the member context.
+- Parameters
-
+
+
+[in] pub_key The group certificate. [in] precomp Optional pre-computed data. If NULL the value is computed internally and is readable using Epid11VerifierWritePrecomp(). [out] ctx Newly constructed verifier context.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the content of ctx is undefined.
- See also
- Epid11VerifierDelete +
- +Epid11VerifierWritePrecomp +
- +EPID 1.1 support
+
+
+
+
+
+
| void Epid11VerifierDelete | +( | +Epid11VerifierCtx ** | +ctx | ) | ++ |
+
+
+Deletes an existing Intel(R) EPID 1.1 verifier context.
+Must be called to safely release a verifier context created using Epid11VerifierCreate().
+De-initializes the context, frees memory used by the context, and sets the context pointer to NULL.
+- Parameters
-
+
+
+[in,out] ctx The verifier context. Can be NULL.
+
- See also
- Epid11VerifierCreate +
- +EPID 1.1 support
+
+
+
+
+
+
| EpidStatus Epid11VerifierSetBasename | +( | +Epid11VerifierCtx * | +ctx, | +
| + | + | void const * | +basename, | +
| + | + | size_t | +basename_len | +
| + | ) | ++ |
+
+
+Sets the basename to be used by a verifier.
+This API allows setting a zero length base name.
+- Warning
- Not all members in the Intel(R) EPID 1.1 ecosystem may support zero length basenames. They may interpret a zero length basename as random base.
- Parameters
-
+
+
+[in,out] ctx The verifier context. [in] basename The basename. Pass NULL for random base. [in] basename_len Number of bytes in basename buffer. Must be 0 if basename is NULL.
+
- Returns
- EpidStatus
- See also
- Epid11VerifierCreate
+
+
+
+
+
+
| EpidStatus Epid11VerifierSetGroupRl | +( | +Epid11VerifierCtx * | +ctx, | +
| + | + | Epid11GroupRl const * | +grp_rl, | +
| + | + | size_t | +grp_rl_size | +
| + | ) | ++ |
+
+
+Sets the Intel(R) EPID 1.1 group based revocation list.
+The caller is responsible to for ensuring the revocation list is authorized, e.g signed by the issuer. The caller is also responsible checking the version of the revocation list. The call will fail if trying to set an older version of the revocation list than was last set.
+This API supports Intel(R) EPID 1.1 verification.
+- Attention
- The memory pointed to by grp_rl will be accessed directly by the verifier until a new list is set or the verifier is destroyed. Do not modify the contents of this memory. The behavior of subsequent operations that rely on the revocation list will be undefined if the memory is modified. +
- +It is the responsibility of the caller to free the memory pointed to by grp_rl after the verifier is no longer using it.
- Parameters
-
+
+
+[in,out] ctx The verifier context. [in] grp_rl The group based revocation list. [in] grp_rl_size The size of the group based revocation list in bytes.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the group based revocation list pointed to by the verifier is undefined.
- See also
- Epid11VerifierCreate +
- +EPID 1.1 support
+
+
+
+
+
+
| EpidStatus Epid11VerifierSetPrivRl | +( | +Epid11VerifierCtx * | +ctx, | +
| + | + | Epid11PrivRl const * | +priv_rl, | +
| + | + | size_t | +priv_rl_size | +
| + | ) | ++ |
+
+
+Sets the Intel(R) EPID 1.1 private key based revocation list.
+The caller is responsible to for ensuring the revocation list is authorized, e.g signed by the issuer. The caller is also responsible checking the version of the revocation list. The call will fail if trying to set an older version of the revocation list than was last set.
+This API supports Intel(R) EPID 1.1 verification.
+- Attention
- The memory pointed to by priv_rl will be accessed directly by the verifier until a new list is set or the verifier is destroyed. Do not modify the contents of this memory. The behavior of subsequent operations that rely on the revocation list will be undefined if the memory is modified. +
- +It is the responsibility of the caller to free the memory pointed to by priv_rl after the verifier is no longer using it.
- Parameters
-
+
+
+[in,out] ctx The verifier context. [in] priv_rl The private key based revocation list. [in] priv_rl_size The size of the private key based revocation list in bytes.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the private key based revocation list pointed to by the verifier is undefined.
- See also
- Epid11VerifierCreate +
- +EPID 1.1 support
+
+
+
+
+
+
| EpidStatus Epid11VerifierSetSigRl | +( | +Epid11VerifierCtx * | +ctx, | +
| + | + | Epid11SigRl const * | +sig_rl, | +
| + | + | size_t | +sig_rl_size | +
| + | ) | ++ |
+
+
+Sets the Intel(R) EPID 1.1 signature based revocation list.
+The caller is responsible to for ensuring the revocation list is authorized, e.g signed by the issuer. The caller is also responsible checking the version of the revocation list. The call will fail if trying to set an older version of the revocation list than was last set.
+This API supports Intel(R) EPID 1.1 verification.
+- Attention
- The memory pointed to by sig_rl will be accessed directly by the verifier until a new list is set or the verifier is destroyed. Do not modify the contents of this memory. The behavior of subsequent operations that rely on the revocation list will be undefined if the memory is modified. +
- +It is the responsibility of the caller to free the memory pointed to by sig_rl after the verifier is no longer using it.
- Parameters
-
+
+
+[in,out] ctx The verifier context. [in] sig_rl The signature based revocation list. [in] sig_rl_size The size of the signature based revocation list in bytes.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the signature based revocation list pointed to by the verifier is undefined.
- See also
- Epid11VerifierCreate +
- +SdkOverview_11Verifier +
- +EPID 1.1 support
+
+
+
+
+
+
| EpidStatus Epid11VerifierWritePrecomp | +( | +Epid11VerifierCtx const * | +ctx, | +
| + | + | Epid11VerifierPrecomp * | +precomp | +
| + | ) | ++ |
+
+
+Serializes the pre-computed Intel(R) EPID 1.1 verifier settings.
+- Parameters
-
+
+
+[in] ctx The verifier context. [out] precomp The Serialized pre-computed verifier settings.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the content of precomp is undefined.
- See also
- EPID 1.1 support
+
+
+
+
+
+
| EpidStatus Epid11Verify | +( | +Epid11VerifierCtx const * | +ctx, | +
| + | + | Epid11Signature const * | +sig, | +
| + | + | size_t | +sig_len, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len | +
| + | ) | ++ |
+
+
+Verifies an Intel(R) EPID 1.1 signature and checks revocation status.
+- Parameters
-
+
+
+[in] ctx The verifier context. [in] sig The signature. [in] sig_len The size of sig in bytes. [in] msg The message that was signed. [in] msg_len The size of msg in bytes.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidSigValid Signature validated successfully kEpidSigInvalid Signature is invalid kEpidSigRevokedInGroupRl Signature revoked in GroupRl kEpidSigRevokedInPrivRl Signature revoked in PrivRl kEpidSigRevokedInSigRl Signature revoked in SigRl
+
- Note
- If the result is not kEpidNoErr or one of the values listed above the verify should de considered to have failed.
- See also
- Epid11VerifierCreate +
- +EPID 1.1 support
+
+
+
+
+
| EpidStatus Epid11VerifyBasicSig | +( | +Epid11VerifierCtx const * | +ctx, | +
| + | + | Epid11BasicSignature const * | +sig, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len | +
| + | ) | ++ |
+
+
+Verifies an Intel(R) EPID 1.1 member signature without revocation checks.
+Used in constrained environments where, due to limited memory, it may not be possible to process through a large and potentially unbounded revocation list.
+- Parameters
-
+
+
+[in] ctx The verifier context. [in] sig The basic signature. [in] msg The message that was signed. [in] msg_len The size of msg in bytes.
+
- Returns
- EpidStatus
- Note
- This function should be used in conjunction with Epid11NrVerify() and Epid11CheckPrivRlEntry(). +
- +If the result is not kEpidNoErr the verify should be considered to have failed.
- See also
- Epid11VerifierCreate +
- +EPID 1.1 support
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_common.js b/external/epid-sdk-3.0.0/doc/html/group___epid_common.js
new file mode 100644
index 00000000..70dc2de3
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_common.js
@@ -0,0 +1,9 @@
+var group___epid_common =
+[
+ [ "math", "group___epid_math.html", "group___epid_math" ],
+ [ "errors", "group___error_codes.html", "group___error_codes" ],
+ [ "fileparser", "group___file_parser.html", "group___file_parser" ],
+ [ "print_utils", "group___epid_print.html", "group___epid_print" ],
+ [ "types", "group___epid_types.html", "group___epid_types" ],
+ [ "BitSupplier", "group___epid_common.html#ga6119a2c0323a3fca9e502b24bc378c2c", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_math.html b/external/epid-sdk-3.0.0/doc/html/group___epid_math.html
new file mode 100644
index 00000000..8ced37ba
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_math.html
@@ -0,0 +1,106 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+Common code shared between core sub-components. +More...
++Modules | |
| math | |
| Math Primitives and Group Operations. | |
| errors | |
| Error reporting interface. | |
| fileparser | |
| Parser for issuer material. | |
| print_utils | |
| Debug print routines. | |
| types | |
| SDK data types. | |
+Typedefs | |
| typedef int(__STDCALL * | BitSupplier) (unsigned int *rand_data, int num_bits, void *user_data) |
| Generates random data. More... | |
Detailed Description
+Common code shared between core sub-components.
+Constants, utility functions, and libraries that are used widely in the implementation or definition of APIs and samples.
+Typedef Documentation
+ +
+
+
+
+
+
| typedef int(__STDCALL* BitSupplier) (unsigned int *rand_data, int num_bits, void *user_data) | +
+
+
+Generates random data.
+It is the responsibility of the caller of the SDK interfaces to implement a function of this prototype and to then pass a pointer to this function into methods that require it.
+- Parameters
-
+
+
+[out] rand_data destination buffer [in] num_bits size of rand_data in bits [in] user_data user data passed through from api call.
+
- Returns
- zero on success and non-zero value on error.
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_math.js b/external/epid-sdk-3.0.0/doc/html/group___epid_math.js
new file mode 100644
index 00000000..c416f544
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_math.js
@@ -0,0 +1,9 @@
+var group___epid_math =
+[
+ [ "bignum", "group___big_num_primitives.html", "group___big_num_primitives" ],
+ [ "ecdsa", "group___ecdsa_primitives.html", "group___ecdsa_primitives" ],
+ [ "ecgroup", "group___ec_group_primitives.html", "group___ec_group_primitives" ],
+ [ "finitefield", "group___finite_field_primitives.html", "group___finite_field_primitives" ],
+ [ "hash", "group___hash_primitives.html", "group___hash_primitives" ],
+ [ "pairing", "group___pairing_primitives.html", "group___pairing_primitives" ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_member_module.html b/external/epid-sdk-3.0.0/doc/html/group___epid_member_module.html
new file mode 100644
index 00000000..156ea0bb
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_member_module.html
@@ -0,0 +1,933 @@
+
+
+
+
+
+
+
+
+
+
+
+
+Math Primitives and Group Operations. +More...
++Modules | |
| bignum | |
| Big number operations. | |
| ecdsa | |
| Elliptic Curve Digital Signature Algorithm Primitives. | |
| ecgroup | |
| Elliptic curve group operations. | |
| finitefield | |
| Finite field operations. | |
| hash | |
| Hash primitives. | |
| pairing | |
| Pairing operations. | |
Detailed Description
+Math Primitives and Group Operations.
+Provides abstracted math primitives that are designed to be overridden by implementers porting to environments with specialized hardware. This module is defined and tested to hide implementation details from users of the API
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_member_module.js b/external/epid-sdk-3.0.0/doc/html/group___epid_member_module.js
new file mode 100644
index 00000000..cb9d1c77
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_member_module.js
@@ -0,0 +1,38 @@
+var group___epid_member_module =
+[
+ [ "MemberPrecomp", "struct_member_precomp.html", [
+ [ "e12", "struct_member_precomp.html#a55e5c4b25c8f0f426969a8d745260fe5", null ],
+ [ "e22", "struct_member_precomp.html#a4e7412969bed3964f813b093b948e7b4", null ],
+ [ "e2w", "struct_member_precomp.html#a879d5a7b0c30088b23f6e5c5fc62f834", null ],
+ [ "ea2", "struct_member_precomp.html#a573551f6494e372f44fd3bdf5b02aeda", null ]
+ ] ],
+ [ "PreComputedSignature", "struct_pre_computed_signature.html", [
+ [ "a", "struct_pre_computed_signature.html#af23f3f9693857a33fe8564644612ea37", null ],
+ [ "B", "struct_pre_computed_signature.html#a9cc2eb61572a1aca9e6bc3d5e6f4c1fe", null ],
+ [ "b", "struct_pre_computed_signature.html#a666710432d9d54ca896647a976892c4f", null ],
+ [ "K", "struct_pre_computed_signature.html#a2a4eaffe2717bd9c8c360599612adbe6", null ],
+ [ "R1", "struct_pre_computed_signature.html#a72be597624957e3d668c95ff6f445f94", null ],
+ [ "R2", "struct_pre_computed_signature.html#a79f06fb57842597372e00dd34c1a804a", null ],
+ [ "ra", "struct_pre_computed_signature.html#a54462643b8a2b4f2741bf8d2e6909d11", null ],
+ [ "rb", "struct_pre_computed_signature.html#a6a1db672c609943fe7af84320dc68ba3", null ],
+ [ "rf", "struct_pre_computed_signature.html#ac244bd559a96812bcee7671abc299b66", null ],
+ [ "rx", "struct_pre_computed_signature.html#acd0674d5b5e96244645e9abef7bdbddc", null ],
+ [ "T", "struct_pre_computed_signature.html#a73471643dc757115701833ca2e831a72", null ]
+ ] ],
+ [ "MemberCtx", "group___epid_member_module.html#gadfb10d5dfdadb0694792c7b06718e817", null ],
+ [ "EpidAddPreSigs", "group___epid_member_module.html#gad2e3de5c6ce641a318f8a46b61e75236", null ],
+ [ "EpidDecompressPrivKey", "group___epid_member_module.html#gaf8cd05388f017486f14da2ee48d067ef", null ],
+ [ "EpidGetNumPreSigs", "group___epid_member_module.html#gad78ca056dfea2565bbacd5734d9dc075", null ],
+ [ "EpidGetSigSize", "group___epid_member_module.html#ga76e535722467af7c16809b5b521e0000", null ],
+ [ "EpidIsPrivKeyInGroup", "group___epid_member_module.html#ga8e3f201d1e9dc668659e08a3bdf543b6", null ],
+ [ "EpidMemberCreate", "group___epid_member_module.html#ga561c4d544a78ee1bf59c3f4f919aa7bb", null ],
+ [ "EpidMemberDelete", "group___epid_member_module.html#ga3824589c683c5e0e59d483462fce65d6", null ],
+ [ "EpidMemberSetHashAlg", "group___epid_member_module.html#ga9998eb454838ff5d232ff22ecbab31bf", null ],
+ [ "EpidMemberWritePrecomp", "group___epid_member_module.html#ga5c35798d62cf81c4ca62b22c38809721", null ],
+ [ "EpidNrProve", "group___epid_member_module.html#gac8e2c6c1fead8030785a40427905a2cc", null ],
+ [ "EpidRegisterBaseName", "group___epid_member_module.html#gad92d3c3266ae1833ffb1dba9ad76035d", null ],
+ [ "EpidRequestJoin", "group___epid_member_module.html#ga13dd0d72be9babf8194d472d7712a361", null ],
+ [ "EpidSign", "group___epid_member_module.html#ga759155a719254f734157722716dac640", null ],
+ [ "EpidSignBasic", "group___epid_member_module.html#gae04a250d5981fcf9bd6f9f57e0468faa", null ],
+ [ "EpidWritePreSigs", "group___epid_member_module.html#ga9e12c7cec8d0c4e07b12c0e26a278c9d", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_module.html b/external/epid-sdk-3.0.0/doc/html/group___epid_module.html
new file mode 100644
index 00000000..300aed1a
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_module.html
@@ -0,0 +1,97 @@
+
+
+
+
+
+
+
+
+
+
+
+
+member
+
+
+
+
+
+
+Member functionality. +More...
++Data Structures | |
| struct | MemberPrecomp |
| Pre-computed member settings. More... | |
| struct | PreComputedSignature |
| Pre-computed signature. More... | |
+Typedefs | |
| +typedef struct MemberCtx | MemberCtx |
| Internal context of member. | |
+Functions | |
| EpidStatus | EpidMemberCreate (GroupPubKey const *pub_key, PrivKey const *priv_key, MemberPrecomp const *precomp, BitSupplier rnd_func, void *rnd_param, MemberCtx **ctx) |
| Creates a new member context. More... | |
| void | EpidMemberDelete (MemberCtx **ctx) |
| Deletes an existing member context. More... | |
| EpidStatus | EpidMemberWritePrecomp (MemberCtx const *ctx, MemberPrecomp *precomp) |
| Serializes the pre-computed member settings. More... | |
| EpidStatus | EpidMemberSetHashAlg (MemberCtx *ctx, HashAlg hash_alg) |
| Sets the hash algorithm to be used by a member. More... | |
| size_t | EpidGetSigSize (SigRl const *sig_rl) |
| Computes the size in bytes required for an Intel(R) EPID signature. More... | |
| EpidStatus | EpidSign (MemberCtx const *ctx, void const *msg, size_t msg_len, void const *basename, size_t basename_len, SigRl const *sig_rl, size_t sig_rl_size, EpidSignature *sig, size_t sig_len) |
| Writes an Intel(R) EPID signature. More... | |
| EpidStatus | EpidRegisterBaseName (MemberCtx *ctx, void const *basename, size_t basename_len) |
| Registers a basename with a member. More... | |
| EpidStatus | EpidAddPreSigs (MemberCtx *ctx, size_t number_presigs, PreComputedSignature *presigs) |
| Extends the member's pool of pre-computed signatures. More... | |
| size_t | EpidGetNumPreSigs (MemberCtx const *ctx) |
| Gets the number of pre-computed signatures in the member's pool. More... | |
| EpidStatus | EpidWritePreSigs (MemberCtx *ctx, PreComputedSignature *presigs, size_t number_presigs) |
| Serializes pre-computed signatures from the member's pool. More... | |
| EpidStatus | EpidRequestJoin (GroupPubKey const *pub_key, IssuerNonce const *ni, FpElemStr const *f, BitSupplier rnd_func, void *rnd_param, HashAlg hash_alg, JoinRequest *join_request) |
| Creates a request to join a group. More... | |
| EpidStatus | EpidSignBasic (MemberCtx const *ctx, void const *msg, size_t msg_len, void const *basename, size_t basename_len, BasicSignature *sig) |
| Creates a basic signature for use in constrained environment. More... | |
| EpidStatus | EpidNrProve (MemberCtx const *ctx, void const *msg, size_t msg_len, BasicSignature const *sig, SigRlEntry const *sigrl_entry, NrProof *proof) |
| Calculates a non-revoked proof for a single signature based revocation list entry. More... | |
| bool | EpidIsPrivKeyInGroup (GroupPubKey const *pub_key, PrivKey const *priv_key) |
| Tests if a member private key is valid without checking revocation. More... | |
| EpidStatus | EpidDecompressPrivKey (GroupPubKey const *pub_key, CompressedPrivKey const *compressed_privkey, PrivKey *priv_key) |
| Decompresses compressed member private key. More... | |
Detailed Description
+Member functionality.
+Defines the APIs needed by Intel(R) EPID members. Each member context (MemberCtx) represents membership in a single group.
+Function Documentation
+ +
+
+
+
+
+
+
| EpidStatus EpidAddPreSigs | +( | +MemberCtx * | +ctx, | +
| + | + | size_t | +number_presigs, | +
| + | + | PreComputedSignature * | +presigs | +
| + | ) | ++ |
+
+
+Extends the member's pool of pre-computed signatures.
+Can either generate new pre-computed signatures or import existing ones. EpidWritePreSigs can be used to export pre-computed signatures.
+- Parameters
-
+
+
+[in] ctx The member context. [in] number_presigs The number of pre-computed signatures to add to the internal pool. [in,out] presigs Optional array of valid pre-computed signatures to import. If presigs is not NULL it most contain at least number_presigs pre-computed signatures.
+
- Returns
- EpidStatus
- Note
- presigs buffer is zeroed out before return to prevent pre-computed signatures from being reused. +
- +If the result is not kEpidNoErr the state of the pre-computed signature pool, and of presigs, is undefined.
- See also
- EpidMemberCreate +
- +EpidWritePreSigs
+
+
+
+
+
+
| EpidStatus EpidDecompressPrivKey | +( | +GroupPubKey const * | +pub_key, | +
| + | + | CompressedPrivKey const * | +compressed_privkey, | +
| + | + | PrivKey * | +priv_key | +
| + | ) | ++ |
+
+
+Decompresses compressed member private key.
+Converts a compressed member private key into a member private key for use by other member APIs.
+- Parameters
-
+
+
+[in] pub_key The public key of the group. [in] compressed_privkey The compressed member private key to be decompressed. [out] priv_key The member private key.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| size_t EpidGetNumPreSigs | +( | +MemberCtx const * | +ctx | ) | ++ |
+
+
+Gets the number of pre-computed signatures in the member's pool.
+- Parameters
-
+
+
+[in] ctx The member context.
+
- Returns
- Number of remaining pre-computed signatures. Returns 0 if ctx is NULL.
- See also
- EpidMemberCreate +
- +EpidWritePreSigs
+
+
+
+
+
+
| size_t EpidGetSigSize | +( | +SigRl const * | +sig_rl | ) | ++ |
+
+
+Computes the size in bytes required for an Intel(R) EPID signature.
+- Parameters
-
+
+
+[in] sig_rl The signature based revocation list that is used. NULL is treated as a zero length list.
+
- Returns
- Size in bytes of an Intel(R) EPID signature including proofs for each entry in the signature based revocation list.
- See also
- SigRl
+
+
+
+
+
+
| bool EpidIsPrivKeyInGroup | +( | +GroupPubKey const * | +pub_key, | +
| + | + | PrivKey const * | +priv_key | +
| + | ) | ++ |
+
+
+Tests if a member private key is valid without checking revocation.
+Used to check that a member private key is a valid key for a group. This is useful as a cross check when creating a new member private key as part of the join process
+- Parameters
-
+
+
+[in] pub_key The public key of the group. [in] priv_key The private key to check.
+
- Returns
- bool
- Return values
-
+
+
+true if the private key is valid for the group of the public key false if the private key is not valid for the group of the public key
+
- See also
- EpidRequestJoin
+
+
+
+
+
+
| EpidStatus EpidMemberCreate | +( | +GroupPubKey const * | +pub_key, | +
| + | + | PrivKey const * | +priv_key, | +
| + | + | MemberPrecomp const * | +precomp, | +
| + | + | BitSupplier | +rnd_func, | +
| + | + | void * | +rnd_param, | +
| + | + | MemberCtx ** | +ctx | +
| + | ) | ++ |
+
+
+Creates a new member context.
+Must be called to create the member context that is used by other "Member" APIs.
+Allocates memory for the context, then initializes it.
+EpidMemberDelete() must be called to safely release the member context.
+- Parameters
-
+
+
+[in] pub_key The group certificate. [in] priv_key The member private key. [in] precomp Optional pre-computed data. If NULL the value is computed internally and is readable using EpidMemberWritePrecomp(). [in] rnd_func Random number generator. [in] rnd_param Pass through context data for rnd_func. [out] ctx Newly constructed member context.
+
- Returns
- EpidStatus
- Warning
- For security rnd_func should be a cryptographically secure random number generator.
- Note
- If the result is not kEpidNoErr the content of ctx is undefined.
- See also
- EpidMemberDelete +
- +EpidMemberWritePrecomp
+
+
+
+
+
+
| void EpidMemberDelete | +( | +MemberCtx ** | +ctx | ) | ++ |
+
+
+Deletes an existing member context.
+Must be called to safely release a member context created using EpidMemberCreate().
+De-initializes the context, frees memory used by the context, and sets the context pointer to NULL.
+- Parameters
-
+
+
+[in,out] ctx The member context. Can be NULL.
+
- See also
- EpidMemberCreate
+
+
+
+
+
+
| EpidStatus EpidMemberSetHashAlg | +( | +MemberCtx * | +ctx, | +
| + | + | HashAlg | +hash_alg | +
| + | ) | ++ |
+
+
+Sets the hash algorithm to be used by a member.
+- Parameters
-
+
+
+[in] ctx The member context. [in] hash_alg The hash algorithm to use.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr, the hash algorithm used by the member is undefined.
- See also
- EpidMemberCreate +
- +HashAlg
+
+
+
+
+
+
| EpidStatus EpidMemberWritePrecomp | +( | +MemberCtx const * | +ctx, | +
| + | + | MemberPrecomp * | +precomp | +
| + | ) | ++ |
+
+
+Serializes the pre-computed member settings.
+- Parameters
-
+
+
+[in] ctx The member context. [out] precomp The Serialized pre-computed member settings.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr, the content of precomp is undefined.
+
+
+
+
+
+
| EpidStatus EpidNrProve | +( | +MemberCtx const * | +ctx, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len, | +
| + | + | BasicSignature const * | +sig, | +
| + | + | SigRlEntry const * | +sigrl_entry, | +
| + | + | NrProof * | +proof | +
| + | ) | ++ |
+
+
+Calculates a non-revoked proof for a single signature based revocation list entry.
+Used in constrained environments where, due to limited memory, it may not be possible to process through a large and potentially unbounded revocation list.
+- Parameters
-
+
+
+[in] ctx The member context. [in] msg The message. [in] msg_len The length of message in bytes. [in] sig The basic signature. [in] sigrl_entry The signature based revocation list entry. [out] proof The generated non-revoked proof.
+
- Returns
- EpidStatus
- Note
- This function should be used in conjunction with EpidSignBasic(). +
- +If the result is not kEpidNoErr, the content of proof is undefined.
- See also
- EpidMemberCreate +
- +EpidSignBasic
+
+
+
+
+
+
| EpidStatus EpidRegisterBaseName | +( | +MemberCtx * | +ctx, | +
| + | + | void const * | +basename, | +
| + | + | size_t | +basename_len | +
| + | ) | ++ |
+
+
+Registers a basename with a member.
+To prevent loss of privacy, the member keeps a list of basenames (corresponding to authorized verifiers). The member signs a message with a basename only if the basename is in the member's basename list.
+- Warning
- The use of a name-based signature creates a platform unique pseudonymous identifier. Because it reduces the member's privacy, the user should be notified when it is used and should have control over its use.
- Parameters
-
+
+
+[in] ctx The member context. [in] basename The basename. [in] basename_len Length of the basename.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidDuplicateErr The basename was already registered.
+
- Note
- If the result is not kEpidNoErr or kEpidDuplicateErr it is undefined if the basename is registered.
+
+
+
+
+
+
| EpidStatus EpidRequestJoin | +( | +GroupPubKey const * | +pub_key, | +
| + | + | IssuerNonce const * | +ni, | +
| + | + | FpElemStr const * | +f, | +
| + | + | BitSupplier | +rnd_func, | +
| + | + | void * | +rnd_param, | +
| + | + | HashAlg | +hash_alg, | +
| + | + | JoinRequest * | +join_request | +
| + | ) | ++ |
+
+
+Creates a request to join a group.
+The created request is part of the interaction with an issuer needed to join a group. This interaction with the issuer is outside the scope of this API.
+- Parameters
-
+
+
+[in] pub_key The group certificate of group to join. [in] ni The nonce chosen by issuer as part of join protocol. [in] f A randomly selected integer in [1, p-1]. [in] rnd_func Random number generator. [in] rnd_param Pass through context data for rnd_func. [in] hash_alg The hash algorithm to be used. [out] join_request The join request.
+
- Returns
- EpidStatus
- Warning
- For security rnd_func should be a cryptographically secure random number generator.
- Note
- The default hash algorithm in Member is SHA-512. This is the recommended option if you do not override the hash algorithm elsewhere. +
- +If the result is not kEpidNoErr, the content of join_request is undefined.
- See also
- HashAlg
+
+
+
+
+
+
| EpidStatus EpidSign | +( | +MemberCtx const * | +ctx, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len, | +
| + | + | void const * | +basename, | +
| + | + | size_t | +basename_len, | +
| + | + | SigRl const * | +sig_rl, | +
| + | + | size_t | +sig_rl_size, | +
| + | + | EpidSignature * | +sig, | +
| + | + | size_t | +sig_len | +
| + | ) | ++ |
+
+
+Writes an Intel(R) EPID signature.
+- Parameters
-
+
+
+[in] ctx The member context. [in] msg The message to sign. [in] msg_len The length in bytes of message. [in] basename Optional basename. If basename is NULL a random basename is used. Signatures generated using random basenames are anonymous. Signatures generated using the same basename are linkable by the verifier. If a basename is provided, it must already be registered, or kEpidBadArgErr is returned. [in] basename_len The size of basename in bytes. Must be 0 basename is NULL. [in] sig_rl The signature based revocation list. [in] sig_rl_size The size in bytes of the signature based revocation list. [out] sig The generated signature [in] sig_len The size of signature in bytes. Must be equal to value returned by EpidGetSigSize().
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the content of sig is undefined.
- See also
- EpidMemberCreate +
- +EpidMemberSetHashAlg +
- +EpidGetSigSize
+
+
+
+
+
+
| EpidStatus EpidSignBasic | +( | +MemberCtx const * | +ctx, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len, | +
| + | + | void const * | +basename, | +
| + | + | size_t | +basename_len, | +
| + | + | BasicSignature * | +sig | +
| + | ) | ++ |
+
+
+Creates a basic signature for use in constrained environment.
+Used in constrained environments where, due to limited memory, it may not be possible to process through a large and potentially unbounded revocation list.
+- Parameters
-
+
+
+[in] ctx The member context. [in] msg The message. [in] msg_len The length of message in bytes. [in] basename Optional basename. If basename is NULL a random basename is used. Signatures generated using random basenames are anonymous. Signatures generated using the same basename are linkable by the verifier. If a basename is provided it must already be registered or kEpidBadArgErr is returned. [in] basename_len The size of basename in bytes. Must be 0 basename is NULL. [out] sig The generated basic signature
+
- Returns
- EpidStatus
- Note
- This function should be used in conjunction with EpidNrProve() +
- +If the result is not kEpidNoErr the content of sig, is undefined.
- See also
- EpidMemberCreate +
- +EpidNrProve
+
+
+
+
+
| EpidStatus EpidWritePreSigs | +( | +MemberCtx * | +ctx, | +
| + | + | PreComputedSignature * | +presigs, | +
| + | + | size_t | +number_presigs | +
| + | ) | ++ |
+
+
+Serializes pre-computed signatures from the member's pool.
+Removes requested number of pre-computed signatures from member's pool and stores them in presigs array. Use EpidAddPreSigs to add pre-computed signatures to the pool.
+- Parameters
-
+
+
+[in] ctx The member context. [out] presigs An existing buffer of pre-computed signatures. [in] number_presigs Number of pre-computed signatures to read. Number_presigs must not be greater than the value returned by EpidGetNumPreSigs.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the state of the pre-computed signature pool, and of presigs, is undefined.
- See also
- EpidMemberCreate +
- +EpidGetNumPreSigs +
- +EpidAddPreSigs
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_module.js b/external/epid-sdk-3.0.0/doc/html/group___epid_module.js
new file mode 100644
index 00000000..892eddf4
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_module.js
@@ -0,0 +1,6 @@
+var group___epid_module =
+[
+ [ "common", "group___epid_common.html", "group___epid_common" ],
+ [ "member", "group___epid_member_module.html", "group___epid_member_module" ],
+ [ "verifier", "group___epid_verifier_module.html", "group___epid_verifier_module" ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_print.html b/external/epid-sdk-3.0.0/doc/html/group___epid_print.html
new file mode 100644
index 00000000..0e1a1b33
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_print.html
@@ -0,0 +1,664 @@
+
+
+
+
+
+
+
+
+
+
+
+
+epid
+
+
+
+
+Core Intel® EPID functionality. +More...
++Modules | |
| common | |
| Common code shared between core sub-components. | |
| member | |
| Member functionality. | |
| verifier | |
| Verifier functionality. | |
Detailed Description
+Core Intel® EPID functionality.
+Contains core functionality used to provide or implement APIs in the Intel(R) EPID SDK.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_print.js b/external/epid-sdk-3.0.0/doc/html/group___epid_print.js
new file mode 100644
index 00000000..d1b92d4b
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_print.js
@@ -0,0 +1,20 @@
+var group___epid_print =
+[
+ [ "PrintUtilFormat", "group___epid_print.html#ga3e215d157eb205ad596bb84bce694a83", [
+ [ "kPrintUtilUnannotated", "group___epid_print.html#gga3e215d157eb205ad596bb84bce694a83aeb475b793d8d357087d7fcc74702ffae", null ],
+ [ "kPrintUtilAnnotated", "group___epid_print.html#gga3e215d157eb205ad596bb84bce694a83ae2d5345c14f57fc992a613003c3c443d", null ],
+ [ "kPrintUtilFormatCount", "group___epid_print.html#gga3e215d157eb205ad596bb84bce694a83ade23610605d0ba7dd48db5060e28995a", null ]
+ ] ],
+ [ "PrintBigNum", "group___epid_print.html#ga45a933b44fc1dfe926e3af89c198070a", null ],
+ [ "PrintBigNumStr", "group___epid_print.html#ga5f249c594ed12e4a9b11b7bc101da85d", null ],
+ [ "PrintEcPoint", "group___epid_print.html#ga0d6377d9c1651d0101ec6b61feaa78ca", null ],
+ [ "PrintFfElement", "group___epid_print.html#gaa3b1cbbfc6f78562658953113e5798cf", null ],
+ [ "PrintFpElemStr", "group___epid_print.html#gae553c3a156a0e4968b89635ab0757580", null ],
+ [ "PrintFq12ElemStr", "group___epid_print.html#gaf185fe3df270cd8b4a2969bf3cfc5d5f", null ],
+ [ "PrintFq2ElemStr", "group___epid_print.html#ga883a834ab1703365bb0bca4abd3104de", null ],
+ [ "PrintFq6ElemStr", "group___epid_print.html#ga3f2961ef6b4c44a6205d422d8a293476", null ],
+ [ "PrintFqElemStr", "group___epid_print.html#ga6c9fea48fa0477f4a98abb50f891a5e4", null ],
+ [ "PrintG1ElemStr", "group___epid_print.html#ga87168a3ce5306f9839b8e8d6c9a5f84f", null ],
+ [ "PrintG2ElemStr", "group___epid_print.html#gab76a4cf0385dc4a76bb56ee9f0e3e87a", null ],
+ [ "PrintGtElemStr", "group___epid_print.html#ga138cd388247a58680d4701d59d6976d2", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_types.html b/external/epid-sdk-3.0.0/doc/html/group___epid_types.html
new file mode 100644
index 00000000..6a65d8e1
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_types.html
@@ -0,0 +1,277 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Debug print routines. +More...
++Enumerations | |
| enum | PrintUtilFormat { kPrintUtilUnannotated = 0, +kPrintUtilAnnotated = 1, +kPrintUtilFormatCount = 2 + } |
| Print format. More... | |
+Functions | |
| void | PrintBigNum (BigNum const *big_num, char const *var_name) |
| Prints BigNum. More... | |
| void | PrintFfElement (FiniteField const *ff, FfElement const *ff_element, char const *var_name, PrintUtilFormat format) |
| Prints finite field element. More... | |
| void | PrintEcPoint (EcGroup const *g, EcPoint const *ec_point, char const *var_name, PrintUtilFormat format) |
| Prints elliptic curve group element. More... | |
| void | PrintBigNumStr (BigNumStr const *big_num_str, char const *var_name) |
| Prints serialized BigNum. More... | |
| void | PrintFpElemStr (FpElemStr const *fp_elem_str, char const *var_name) |
| Prints serialized Fp element. More... | |
| void | PrintFqElemStr (FqElemStr const *fq_elem_str, char const *var_name) |
| Prints serialized Fq element. More... | |
| void | PrintFq2ElemStr (Fq2ElemStr const *fq2_elem_str, char const *var_name, PrintUtilFormat format) |
| Prints serialized Fq2 element. More... | |
| void | PrintFq6ElemStr (Fq6ElemStr const *fq6_elem_str, char const *var_name, PrintUtilFormat format) |
| Prints serialized Fq6 element. More... | |
| void | PrintFq12ElemStr (Fq12ElemStr const *fq12_elem_str, char const *var_name, PrintUtilFormat format) |
| Prints serialized Fq12 element. More... | |
| void | PrintG1ElemStr (G1ElemStr const *g1_elem_str, char const *var_name, PrintUtilFormat format) |
| Prints serialized G1 element. More... | |
| void | PrintG2ElemStr (G2ElemStr const *g2_elem_str, char const *var_name, PrintUtilFormat format) |
| Prints serialized G2 element. More... | |
| void | PrintGtElemStr (GtElemStr const *gt_elem_str, char const *var_name, PrintUtilFormat format) |
| Prints serialized Gt element. More... | |
Detailed Description
+Debug print routines.
+Defines an API to print formatted versions of the types used for mathematical operations.
+If the symbol EPID_ENABLE_DEBUG_PRINT is not defined, all calls to the functions in this module are ignored.
+Enumeration Type Documentation
+ +
+
+
+
+
+
+| enum PrintUtilFormat | +
Function Documentation
+ +
+
+
+
+
+
+
| void PrintBigNum | +( | +BigNum const * | +big_num, | +
| + | + | char const * | +var_name | +
| + | ) | ++ |
+
+
+Prints BigNum.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] big_num BigNum to be printed [in] var_name Result variable name
+
+
+
+
+
+
+
| void PrintBigNumStr | +( | +BigNumStr const * | +big_num_str, | +
| + | + | char const * | +var_name | +
| + | ) | ++ |
+
+
+Prints serialized BigNum.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] big_num_str Serialized BigNum to be printed [in] var_name Result variable name
+
+
+
+
+
+
+
| void PrintEcPoint | +( | +EcGroup const * | +g, | +
| + | + | EcPoint const * | +ec_point, | +
| + | + | char const * | +var_name, | +
| + | + | PrintUtilFormat | +format | +
| + | ) | ++ |
+
+
+Prints elliptic curve group element.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] g Elliptic curve group that element to be printed belongs to [in] ec_point Elliptic curve group element to be printed [in] var_name Result variable name [in] format Output format
+
+
+
+
+
+
+
| void PrintFfElement | +( | +FiniteField const * | +ff, | +
| + | + | FfElement const * | +ff_element, | +
| + | + | char const * | +var_name, | +
| + | + | PrintUtilFormat | +format | +
| + | ) | ++ |
+
+
+Prints finite field element.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] ff Finite field that element to be printed belongs to [in] ff_element Finite field element to be printed [in] var_name Result variable name [in] format Output format
+
+
+
+
+
+
+
| void PrintFpElemStr | +( | +FpElemStr const * | +fp_elem_str, | +
| + | + | char const * | +var_name | +
| + | ) | ++ |
+
+
+Prints serialized Fp element.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] fp_elem_str Serialized Fp element to be printed [in] var_name Result variable name
+
+
+
+
+
+
+
| void PrintFq12ElemStr | +( | +Fq12ElemStr const * | +fq12_elem_str, | +
| + | + | char const * | +var_name, | +
| + | + | PrintUtilFormat | +format | +
| + | ) | ++ |
+
+
+Prints serialized Fq12 element.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] fq12_elem_str Serialized Intel(R) EPID Fq12 element to be printed [in] var_name Result variable name [in] format Output format
+
+
+
+
+
+
+
| void PrintFq2ElemStr | +( | +Fq2ElemStr const * | +fq2_elem_str, | +
| + | + | char const * | +var_name, | +
| + | + | PrintUtilFormat | +format | +
| + | ) | ++ |
+
+
+Prints serialized Fq2 element.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] fq2_elem_str Serialized Fq2 element to be printed [in] var_name Result variable name [in] format Output format
+
+
+
+
+
+
+
| void PrintFq6ElemStr | +( | +Fq6ElemStr const * | +fq6_elem_str, | +
| + | + | char const * | +var_name, | +
| + | + | PrintUtilFormat | +format | +
| + | ) | ++ |
+
+
+Prints serialized Fq6 element.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] fq6_elem_str Serialized Fq6 element to be printed [in] var_name Result variable name [in] format Output format
+
+
+
+
+
+
+
| void PrintFqElemStr | +( | +FqElemStr const * | +fq_elem_str, | +
| + | + | char const * | +var_name | +
| + | ) | ++ |
+
+
+Prints serialized Fq element.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] fq_elem_str Serialized Fq element to be printed [in] var_name Result variable name
+
+
+
+
+
+
+
| void PrintG1ElemStr | +( | +G1ElemStr const * | +g1_elem_str, | +
| + | + | char const * | +var_name, | +
| + | + | PrintUtilFormat | +format | +
| + | ) | ++ |
+
+
+Prints serialized G1 element.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] g1_elem_str Serialized G1 element to be printed [in] var_name Result variable name [in] format Output format
+
+
+
+
+
+
+
| void PrintG2ElemStr | +( | +G2ElemStr const * | +g2_elem_str, | +
| + | + | char const * | +var_name, | +
| + | + | PrintUtilFormat | +format | +
| + | ) | ++ |
+
+
+Prints serialized G2 element.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] g2_elem_str Serialized G2 element to be printed [in] var_name Result variable name [in] format Output format
+
+
+
+
+
+
| void PrintGtElemStr | +( | +GtElemStr const * | +gt_elem_str, | +
| + | + | char const * | +var_name, | +
| + | + | PrintUtilFormat | +format | +
| + | ) | ++ |
+
+
+Prints serialized Gt element.
+Macro EPID_ENABLE_DEBUG_PRINT needs to be defined in order to activate this routine; otherwise, it prints nothing.
+- Parameters
-
+
+
+[in] gt_elem_str Serialized G2 element to be printed [in] var_name Result variable name [in] format Output format
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_types.js b/external/epid-sdk-3.0.0/doc/html/group___epid_types.js
new file mode 100644
index 00000000..e83078b2
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_types.js
@@ -0,0 +1,171 @@
+var group___epid_types =
+[
+ [ "EPID 1.1 specific types", "group___epid11_types.html", "group___epid11_types" ],
+ [ "OctStr8", "struct_oct_str8.html", [
+ [ "data", "struct_oct_str8.html#a5e6c56fda48c88b419e621b464b03bef", null ]
+ ] ],
+ [ "OctStr16", "struct_oct_str16.html", [
+ [ "data", "struct_oct_str16.html#a86ed6671693a3f60ec4ff7de2c1206c3", null ]
+ ] ],
+ [ "OctStr32", "struct_oct_str32.html", [
+ [ "data", "struct_oct_str32.html#a5588a7e70f3d73f6ce58b567a9f5c5c8", null ]
+ ] ],
+ [ "OctStr64", "struct_oct_str64.html", [
+ [ "data", "struct_oct_str64.html#a0e107d78192a5ae0b48ed9e5c4eab0fc", null ]
+ ] ],
+ [ "OctStr128", "struct_oct_str128.html", [
+ [ "data", "struct_oct_str128.html#a7482aa9b0b580fdd50bd65419d52d4b9", null ]
+ ] ],
+ [ "OctStr256", "struct_oct_str256.html", [
+ [ "data", "struct_oct_str256.html#a359781bb84f5717a16094583a00ef14e", null ]
+ ] ],
+ [ "OctStr512", "struct_oct_str512.html", [
+ [ "data", "struct_oct_str512.html#abd4d1b97fe49321571da86de1aeac653", null ]
+ ] ],
+ [ "BigNumStr", "struct_big_num_str.html", [
+ [ "data", "struct_big_num_str.html#a442dcf33889b4f85c5b1228d2c8e6838", null ]
+ ] ],
+ [ "FpElemStr", "struct_fp_elem_str.html", [
+ [ "data", "struct_fp_elem_str.html#a5ddb96a5567750f2834335851c906c45", null ]
+ ] ],
+ [ "FqElemStr", "struct_fq_elem_str.html", [
+ [ "data", "struct_fq_elem_str.html#aac1a876b51a8d2c6d1510e4df2fd3f14", null ]
+ ] ],
+ [ "G1ElemStr", "struct_g1_elem_str.html", [
+ [ "x", "struct_g1_elem_str.html#a3b0e658d6e5697763ad9c633c11d4ec4", null ],
+ [ "y", "struct_g1_elem_str.html#a8f2455ca314e885ea180dadf84bf27c3", null ]
+ ] ],
+ [ "G2ElemStr", "struct_g2_elem_str.html", [
+ [ "x", "struct_g2_elem_str.html#a145ec5b20a6f4f00b080e11c8680afc3", null ],
+ [ "y", "struct_g2_elem_str.html#a43141b2458aecceed8ee2748270f7908", null ]
+ ] ],
+ [ "GtElemStr", "struct_gt_elem_str.html", [
+ [ "x", "struct_gt_elem_str.html#aeaeb0e9e1c6efd378a475eb9a6c42132", null ]
+ ] ],
+ [ "Epid2Params", "struct_epid2_params.html", [
+ [ "b", "struct_epid2_params.html#a2f868edb49be49f645101ef5ebbbc551", null ],
+ [ "beta", "struct_epid2_params.html#ac2d7507c6f58c3451beacacb91b52695", null ],
+ [ "g1", "struct_epid2_params.html#a4c5195b4fa9393a07a121336202531ad", null ],
+ [ "g2", "struct_epid2_params.html#a609b0aac17fca34fe39bee29676a9618", null ],
+ [ "neg", "struct_epid2_params.html#af23f07fb0e1745c0ad14aceeaa946928", null ],
+ [ "p", "struct_epid2_params.html#ac0e0dad45b10927860cd5fa4f8101f08", null ],
+ [ "q", "struct_epid2_params.html#a023603228fed2854ddae2e228938940f", null ],
+ [ "t", "struct_epid2_params.html#a200a0cba1c9e4ad512bece23f2461a5f", null ],
+ [ "xi", "struct_epid2_params.html#ae1d8f5d6036a82064e91bc137b278e74", null ]
+ ] ],
+ [ "GroupPubKey", "struct_group_pub_key.html", [
+ [ "gid", "struct_group_pub_key.html#ae8e77ab4d5eb3c8e566c24a64cce56ee", null ],
+ [ "h1", "struct_group_pub_key.html#a8c22c758ea186f95e3bf4b2ef8451da5", null ],
+ [ "h2", "struct_group_pub_key.html#a2a4320ec99fd1a15df412fbf2a8d49f1", null ],
+ [ "w", "struct_group_pub_key.html#a86be439104fb60b324784baf24a943f9", null ]
+ ] ],
+ [ "IPrivKey", "struct_i_priv_key.html", [
+ [ "gamma", "struct_i_priv_key.html#a6d484175317aef09fb959c3ca55fc70a", null ],
+ [ "gid", "struct_i_priv_key.html#ad400a4237b6d50855538fd40580eb1bb", null ]
+ ] ],
+ [ "PrivKey", "struct_priv_key.html", [
+ [ "A", "struct_priv_key.html#a266c7e369b8b868ef5755e9cd3c0c849", null ],
+ [ "f", "struct_priv_key.html#ad7ee0392a583edd2e287cf8c1f9066ba", null ],
+ [ "gid", "struct_priv_key.html#ab416dcb4366427c24b44c2a02e4ae7c8", null ],
+ [ "x", "struct_priv_key.html#aa805f9e124f05bdb733c85cb93614cbd", null ]
+ ] ],
+ [ "CompressedPrivKey", "struct_compressed_priv_key.html", [
+ [ "ax", "struct_compressed_priv_key.html#a0b0535f0567eb0e48f799d27991d0f66", null ],
+ [ "gid", "struct_compressed_priv_key.html#ac6689899f1d9a6a8c5e4915563679840", null ],
+ [ "seed", "struct_compressed_priv_key.html#a54b9af7699f517bbaef3d52d03e3fed8", null ]
+ ] ],
+ [ "MembershipCredential", "struct_membership_credential.html", [
+ [ "A", "struct_membership_credential.html#a6d38ac3a9c5417833b8adb9b22bc9dc8", null ],
+ [ "gid", "struct_membership_credential.html#afbff64ec55888c7e2a658eabb5e16671", null ],
+ [ "x", "struct_membership_credential.html#a2c5c0d22999d6917fea5ad6618883bcf", null ]
+ ] ],
+ [ "JoinRequest", "struct_join_request.html", [
+ [ "c", "struct_join_request.html#a55e30a274e83b808db6fbab5ae6c6cb8", null ],
+ [ "F", "struct_join_request.html#a005651506fd4511e8a3537f6c3634532", null ],
+ [ "s", "struct_join_request.html#a73bf8989df5f90eb3d06e7a42ad74d1d", null ]
+ ] ],
+ [ "BasicSignature", "struct_basic_signature.html", [
+ [ "B", "struct_basic_signature.html#ae90cb6af66b010ae39913f033c1e65ac", null ],
+ [ "c", "struct_basic_signature.html#a4daa94db5068db3f10960f3dd178d603", null ],
+ [ "K", "struct_basic_signature.html#a0078cc83ecf6c7e31f96b7d44aa60e21", null ],
+ [ "sa", "struct_basic_signature.html#a69115a4776d15b48411dd6c3a76d0f3d", null ],
+ [ "sb", "struct_basic_signature.html#a91daebc5b577688afeed2a7ee7913245", null ],
+ [ "sf", "struct_basic_signature.html#a79d8dec8c5da176e497abf22e4c43adb", null ],
+ [ "sx", "struct_basic_signature.html#a0e8ea6a2cd3af10e9b59d96d7d06bc69", null ],
+ [ "T", "struct_basic_signature.html#a730f74d85cfb4fa4089d43c87b97a624", null ]
+ ] ],
+ [ "NrProof", "struct_nr_proof.html", [
+ [ "c", "struct_nr_proof.html#a0de1aa69acf3d93da34cf4a613b359a1", null ],
+ [ "smu", "struct_nr_proof.html#a717ec36a6c91acd01d9b642bb20fc178", null ],
+ [ "snu", "struct_nr_proof.html#ae2e9f22089793a4d44a0f7f5cdb78a0c", null ],
+ [ "T", "struct_nr_proof.html#ace535065bbf96502b893ac677dc8dcd3", null ]
+ ] ],
+ [ "EpidSignature", "struct_epid_signature.html", [
+ [ "n2", "struct_epid_signature.html#a62a6b0ffcd5f68dd3d2786a58fe43017", null ],
+ [ "rl_ver", "struct_epid_signature.html#a4155f3f4f1223fc4ae50c94f5305def1", null ],
+ [ "sigma", "struct_epid_signature.html#a89d2e38223944310b6eeeadf6061a2dd", null ],
+ [ "sigma0", "struct_epid_signature.html#ab0fe5f98bff737fcfbfe0b4d658e83f2", null ]
+ ] ],
+ [ "PrivRl", "struct_priv_rl.html", [
+ [ "f", "struct_priv_rl.html#a60d73f9ef5fc81f117b3abadf8c18466", null ],
+ [ "gid", "struct_priv_rl.html#af7317529b8e55476bd06b66ed8131d64", null ],
+ [ "n1", "struct_priv_rl.html#a6da9639ec4061689d1c30a58e0befd14", null ],
+ [ "version", "struct_priv_rl.html#a4c6b51cec760f7e81ca8635422ac6a50", null ]
+ ] ],
+ [ "SigRlEntry", "struct_sig_rl_entry.html", [
+ [ "b", "struct_sig_rl_entry.html#ac6a47ff0d1b8ea1512e0ff14983ac5ce", null ],
+ [ "k", "struct_sig_rl_entry.html#a0dfeb058614e81878bfbf86ae3edac3c", null ]
+ ] ],
+ [ "SigRl", "struct_sig_rl.html", [
+ [ "bk", "struct_sig_rl.html#ac23a919993d99d24a5150302f1778102", null ],
+ [ "gid", "struct_sig_rl.html#a12757d30fcccd310716433948e0b603e", null ],
+ [ "n2", "struct_sig_rl.html#a9dfb6b508db9051f4dc480a51d702af2", null ],
+ [ "version", "struct_sig_rl.html#ac9d4c343c539dba799e1f42eb38b351f", null ]
+ ] ],
+ [ "GroupRl", "struct_group_rl.html", [
+ [ "gid", "struct_group_rl.html#a51022e172ab8b945efc69f1e63170107", null ],
+ [ "n3", "struct_group_rl.html#a9067f01c63cdefbc8e23c3cf67a10172", null ],
+ [ "version", "struct_group_rl.html#a69c41d99cdfc5b6ece7442f466f7ec3f", null ]
+ ] ],
+ [ "VerifierRl", "struct_verifier_rl.html", [
+ [ "B", "struct_verifier_rl.html#a5d9a9265fffa96fd5f9260543eb08c68", null ],
+ [ "gid", "struct_verifier_rl.html#ab85c4666d16145ff16443e84468d2d7d", null ],
+ [ "K", "struct_verifier_rl.html#ac7d3dceab4772096bbbeb3fa735d18a9", null ],
+ [ "n4", "struct_verifier_rl.html#a1e3f84b873bccc0c882aa6432c42d2f7", null ],
+ [ "version", "struct_verifier_rl.html#afa44ab69ffff5a3508366aeb2131fdaa", null ]
+ ] ],
+ [ "Fq2ElemStr", "struct_fq2_elem_str.html", [
+ [ "a", "struct_fq2_elem_str.html#ab1d253eb24ba30eaf516ac429daab915", null ]
+ ] ],
+ [ "Fq6ElemStr", "struct_fq6_elem_str.html", [
+ [ "a", "struct_fq6_elem_str.html#a89d656e5c815b4a2382d11ef6932a7d2", null ]
+ ] ],
+ [ "Fq12ElemStr", "struct_fq12_elem_str.html", [
+ [ "a", "struct_fq12_elem_str.html#a0520947335aaf52de90af1dec5bdd112", null ]
+ ] ],
+ [ "EcdsaSignature", "struct_ecdsa_signature.html", [
+ [ "x", "struct_ecdsa_signature.html#a64b623605a55a267a36df18f29142d0d", null ],
+ [ "y", "struct_ecdsa_signature.html#a2efd6bf37b12f35135bf325fa491b029", null ]
+ ] ],
+ [ "EcdsaPublicKey", "struct_ecdsa_public_key.html", [
+ [ "x", "struct_ecdsa_public_key.html#a37c51614faf022eec491b4de8f3a13e1", null ],
+ [ "y", "struct_ecdsa_public_key.html#a4503c4613386cbc78add1dc245c99284", null ]
+ ] ],
+ [ "EcdsaPrivateKey", "struct_ecdsa_private_key.html", [
+ [ "data", "struct_ecdsa_private_key.html#a97efee9b4079f95d94a104f9a6d8c96d", null ]
+ ] ],
+ [ "GroupId", "group___epid_types.html#gada666b48d0cbc301985405fde896f1de", null ],
+ [ "IssuerNonce", "group___epid_types.html#ga55eb2193045bde31af3f551565126042", null ],
+ [ "ReKeySeed", "group___epid_types.html#ga54bd22670f2e348593db7ab631131d10", null ],
+ [ "Seed", "group___epid_types.html#ga888541b8148df69c634a92c64ed51317", null ],
+ [ "HashAlg", "group___epid_types.html#ga5e450438f6f9a5eacd0cf5ce354ec890", [
+ [ "kInvalidHashAlg", "group___epid_types.html#gga5e450438f6f9a5eacd0cf5ce354ec890a68b2137c7946583a99f0dac2286523eb", null ],
+ [ "kSha256", "group___epid_types.html#gga5e450438f6f9a5eacd0cf5ce354ec890aefb89989305b5c34120b0f18ee8e2c5d", null ],
+ [ "kSha384", "group___epid_types.html#gga5e450438f6f9a5eacd0cf5ce354ec890a0f4dde6e82b84f5769873f6704fcd290", null ],
+ [ "kSha512", "group___epid_types.html#gga5e450438f6f9a5eacd0cf5ce354ec890afb78d98f37fecc53dd1637d94c5c0055", null ],
+ [ "kSha512_256", "group___epid_types.html#gga5e450438f6f9a5eacd0cf5ce354ec890a9746b5049a62bca2f7b844925e6136ba", null ],
+ [ "kSha3_256", "group___epid_types.html#gga5e450438f6f9a5eacd0cf5ce354ec890a4fa16d3867498f5e2f8ae5c94b0fab85", null ],
+ [ "kSha3_384", "group___epid_types.html#gga5e450438f6f9a5eacd0cf5ce354ec890a90d21c8885ab138f7cf91f253dd6ef86", null ],
+ [ "kSha3_512", "group___epid_types.html#gga5e450438f6f9a5eacd0cf5ce354ec890ade8e74cf7910b3a71fe902a40abf7eee", null ]
+ ] ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_verifier_module.html b/external/epid-sdk-3.0.0/doc/html/group___epid_verifier_module.html
new file mode 100644
index 00000000..2e07e219
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_verifier_module.html
@@ -0,0 +1,1019 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+SDK data types. +More...
++Modules | |
| EPID 1.1 specific types | |
| Intel(R) EPID 1.1 specific data types. | |
+Data Structures | |
| struct | OctStr8 |
| 8 bit octet string More... | |
| struct | OctStr16 |
| 16 bit octet string More... | |
| struct | OctStr32 |
| 32 bit octet string More... | |
| struct | OctStr64 |
| 64 bit octet string More... | |
| struct | OctStr128 |
| 128 bit octet string More... | |
| struct | OctStr256 |
| 256 bit octet string More... | |
| struct | OctStr512 |
| 512 bit octet string More... | |
| struct | BigNumStr |
| Serialized BigNum. More... | |
| struct | FpElemStr |
| a number in [0, p-1] More... | |
| struct | FqElemStr |
| a number in [0, q-1] More... | |
| struct | G1ElemStr |
| Serialized G1 element. More... | |
| struct | G2ElemStr |
| Serialized G2 element. More... | |
| struct | GtElemStr |
| Serialized GT element. More... | |
| struct | Epid2Params |
| Intel(R) EPID 2.0 Parameters. More... | |
| struct | GroupPubKey |
| Intel(R) EPID 2.0 group public key. More... | |
| struct | IPrivKey |
| Intel(R) EPID 2.0 issuing private key. More... | |
| struct | PrivKey |
| Intel(R) EPID 2.0 private key. More... | |
| struct | CompressedPrivKey |
| Compressed private key. More... | |
| struct | MembershipCredential |
| Membership credential. More... | |
| struct | JoinRequest |
| Join request. More... | |
| struct | BasicSignature |
| Intel(R) EPID 2.0 basic signature. More... | |
| struct | NrProof |
| non-revoked Proof. More... | |
| struct | EpidSignature |
| Intel(R) EPID 2.0 Signature. More... | |
| struct | PrivRl |
| private-key based revocation list. More... | |
| struct | SigRlEntry |
| entry in SigRL (B,K) More... | |
| struct | SigRl |
| signature based revocation list More... | |
| struct | GroupRl |
| group revocation list More... | |
| struct | VerifierRl |
| struct | Fq2ElemStr |
| Serialized Fq2 element. More... | |
| struct | Fq6ElemStr |
| Serialized Fq2^3 element. More... | |
| struct | Fq12ElemStr |
| Serialized Fq2^3^2 element. More... | |
| struct | EcdsaSignature |
| ECDSA Signature using NIST 256-bit curve secp256r1. More... | |
| struct | EcdsaPublicKey |
| ECDSA Public Key. More... | |
| struct | EcdsaPrivateKey |
| ECDSA Private Key. More... | |
+Typedefs | |
| +typedef OctStr128 | GroupId |
| group ID | |
| +typedef OctStr256 | Seed |
| 256 bit seed derived from fuse key | |
| +typedef OctStr256 | IssuerNonce |
| 256 bit nonce chosen by issuer | |
| +typedef G1ElemStr | ReKeySeed |
| element to store seed values for later rekey | |
+Enumerations | |
| enum | HashAlg { + kInvalidHashAlg = -1, +kSha256 = 0, +kSha384 = 1, +kSha512 = 2, + + kSha512_256 = 3, +kSha3_256 = 4, +kSha3_384 = 5, +kSha3_512 = 6 + + } |
| Recognized hash algorithms. More... | |
Detailed Description
+SDK data types.
+Defines serialized data types used by the SDK.
+Most of the types defined here are fixed size binary buffers of various sizes that are semantically mapped to the types of various inputs to the Intel(R) EPID APIs.
+For example GtElemStr is a 384 byte buffer that represents a serialized value that is compatible with a FfElement belonging to the FiniteField GT.
+Enumeration Type Documentation
+ +
+
+
+
+
+
+| enum HashAlg | +
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___epid_verifier_module.js b/external/epid-sdk-3.0.0/doc/html/group___epid_verifier_module.js
new file mode 100644
index 00000000..b93f8229
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___epid_verifier_module.js
@@ -0,0 +1,29 @@
+var group___epid_verifier_module =
+[
+ [ "EPID 1.1 support", "group___epid11_verifier_module.html", "group___epid11_verifier_module" ],
+ [ "VerifierPrecomp", "struct_verifier_precomp.html", [
+ [ "e12", "struct_verifier_precomp.html#ad1106376f12772942af0331eb74de6e5", null ],
+ [ "e22", "struct_verifier_precomp.html#af8fd90f3a5a2be932a97dcd86099d5b2", null ],
+ [ "e2w", "struct_verifier_precomp.html#a8caf79578e3c0baf91921460391103ca", null ],
+ [ "eg12", "struct_verifier_precomp.html#ab061d6cc07d1467eeb5bf25f3ea7e306", null ],
+ [ "gid", "struct_verifier_precomp.html#afc3e29a325c95c62bb192d5f8cdd5c1c", null ]
+ ] ],
+ [ "VerifierCtx", "group___epid_verifier_module.html#gaf172a5f8f7f069d38c5838b723a1a85c", null ],
+ [ "EpidAreSigsLinked", "group___epid_verifier_module.html#gae44bd8acbc1e7205aeedff0c7e2632a8", null ],
+ [ "EpidBlacklistSig", "group___epid_verifier_module.html#ga8eaeb9f4a34e9e37ccdf342919f38c69", null ],
+ [ "EpidCheckPrivRlEntry", "group___epid_verifier_module.html#gaeb05e6faea6f09c0665b13adc6e7ddea", null ],
+ [ "EpidGetVerifierRlSize", "group___epid_verifier_module.html#ga2a75c7d5775e852a7b6e24178dd4054f", null ],
+ [ "EpidNrVerify", "group___epid_verifier_module.html#gac6e2fab59e3af8a33a74a5b201642700", null ],
+ [ "EpidVerifierCreate", "group___epid_verifier_module.html#ga1d116daaee5466a1485d26ebc4e3ab70", null ],
+ [ "EpidVerifierDelete", "group___epid_verifier_module.html#ga6707e691f4b3916f9c684d5bbd463d12", null ],
+ [ "EpidVerifierSetBasename", "group___epid_verifier_module.html#ga1c3810ef361da678a1f77823bd9c37a6", null ],
+ [ "EpidVerifierSetGroupRl", "group___epid_verifier_module.html#ga1d41d6ef4dabbc30ec28452edd6baffb", null ],
+ [ "EpidVerifierSetHashAlg", "group___epid_verifier_module.html#ga97b58b2382f24756b66a357f1e825c92", null ],
+ [ "EpidVerifierSetPrivRl", "group___epid_verifier_module.html#gafab08180a43b58ce2e1d56c4b070bb0e", null ],
+ [ "EpidVerifierSetSigRl", "group___epid_verifier_module.html#ga4c7c9820409ee06f30bb8dc75fdd5dcf", null ],
+ [ "EpidVerifierSetVerifierRl", "group___epid_verifier_module.html#ga0909703a0a4dfe080374d0d99077465a", null ],
+ [ "EpidVerifierWritePrecomp", "group___epid_verifier_module.html#ga92df4d00ea4ee59d7bfd35b23da03392", null ],
+ [ "EpidVerify", "group___epid_verifier_module.html#gae3f9c37628e18b880d8bbee3e7f55064", null ],
+ [ "EpidVerifyBasicSig", "group___epid_verifier_module.html#gac3b1f1a2bdba8eeeebbf1e0c8c00862e", null ],
+ [ "EpidWriteVerifierRl", "group___epid_verifier_module.html#gac857bff47e7d80363eac15285471fe81", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___error_codes.html b/external/epid-sdk-3.0.0/doc/html/group___error_codes.html
new file mode 100644
index 00000000..74b35b31
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___error_codes.html
@@ -0,0 +1,232 @@
+
+
+
+
+
+
+
+
+
+
+
+
+verifier
+
+
+
+
+
+
+
+Verifier functionality. +More...
++Modules | |
| EPID 1.1 support | |
| Intel(R) EPID 1.1 Verifier functionality. | |
+Data Structures | |
| struct | VerifierPrecomp |
| Pre-computed verifier settings. More... | |
+Typedefs | |
| +typedef struct VerifierCtx | VerifierCtx |
| Internal context of verifier. | |
+Functions | |
| EpidStatus | EpidVerifierCreate (GroupPubKey const *pub_key, VerifierPrecomp const *precomp, VerifierCtx **ctx) |
| Creates a new verifier context. More... | |
| void | EpidVerifierDelete (VerifierCtx **ctx) |
| Deletes an existing verifier context. More... | |
| EpidStatus | EpidVerifierWritePrecomp (VerifierCtx const *ctx, VerifierPrecomp *precomp) |
| Serializes the pre-computed verifier settings. More... | |
| EpidStatus | EpidVerifierSetPrivRl (VerifierCtx *ctx, PrivRl const *priv_rl, size_t priv_rl_size) |
| Sets the private key based revocation list. More... | |
| EpidStatus | EpidVerifierSetSigRl (VerifierCtx *ctx, SigRl const *sig_rl, size_t sig_rl_size) |
| Sets the signature based revocation list. More... | |
| EpidStatus | EpidVerifierSetGroupRl (VerifierCtx *ctx, GroupRl const *grp_rl, size_t grp_rl_size) |
| Sets the group based revocation list. More... | |
| EpidStatus | EpidVerifierSetVerifierRl (VerifierCtx *ctx, VerifierRl const *ver_rl, size_t ver_rl_size) |
| Sets the verifier revocation list. More... | |
| EpidStatus | EpidVerifierSetHashAlg (VerifierCtx *ctx, HashAlg hash_alg) |
| Sets the hash algorithm to be used by a verifier. More... | |
| EpidStatus | EpidVerifierSetBasename (VerifierCtx *ctx, void const *basename, size_t basename_len) |
| Sets the basename to be used by a verifier. More... | |
| EpidStatus | EpidVerify (VerifierCtx const *ctx, EpidSignature const *sig, size_t sig_len, void const *msg, size_t msg_len) |
| Verifies a signature and checks revocation status. More... | |
| bool | EpidAreSigsLinked (BasicSignature const *sig1, BasicSignature const *sig2) |
| Determines if two signatures are linked. More... | |
| EpidStatus | EpidVerifyBasicSig (VerifierCtx const *ctx, BasicSignature const *sig, void const *msg, size_t msg_len) |
| Verifies a member signature without revocation checks. More... | |
| EpidStatus | EpidNrVerify (VerifierCtx const *ctx, BasicSignature const *sig, void const *msg, size_t msg_len, SigRlEntry const *sigrl_entry, NrProof const *proof) |
| Verifies the non-revoked proof for a single signature based revocation list entry. More... | |
| EpidStatus | EpidCheckPrivRlEntry (VerifierCtx const *ctx, BasicSignature const *sig, FpElemStr const *f) |
| Verifies a signature has not been revoked in the private key based revocation list. More... | |
| size_t | EpidGetVerifierRlSize (VerifierCtx const *ctx) |
| Returns the number of bytes required to serialize the verifier blacklist. More... | |
| EpidStatus | EpidWriteVerifierRl (VerifierCtx const *ctx, VerifierRl *ver_rl, size_t ver_rl_size) |
| Serializes the verifier blacklist to a buffer. More... | |
| EpidStatus | EpidBlacklistSig (VerifierCtx *ctx, EpidSignature const *sig, size_t sig_len, void const *msg, size_t msg_len) |
| Adds a valid name-based signature to the verifier blacklist. More... | |
Detailed Description
+Verifier functionality.
+Defines the APIs needed by Intel(R) EPID verifiers. Each verifier context (VerifierCtx) represents a verifier for a single group.
+Function Documentation
+ +
+
+
+
+
+
+
| bool EpidAreSigsLinked | +( | +BasicSignature const * | +sig1, | +
| + | + | BasicSignature const * | +sig2 | +
| + | ) | ++ |
+
+
+Determines if two signatures are linked.
+The Intel(R) EPID scheme allows signatures to be linked. If basename option is specified when signing, signatures with the same basename are linkable. This linking capability allows the verifier, or anyone, to know whether two Intel(R) EPID signatures are generated by the same member.
+- Parameters
-
+
+
+[in] sig1 A basic signature. [in] sig2 A basic signature.
+
- Returns
- bool
- Return values
-
+
+
+true if the signatures were generated by the same member false if it couldn't be determined if the signatures were generated by the same member
+
- Note
- The input signatures should be verified using EpidVerifyBasicSig() before invocation. Behavior is undefined if either of the signatures cannot be verified.
- See also
- EpidVerifyBasicSig +
- +EpidSignBasic +
- +EpidSign
+
+
+
+
+
+
| EpidStatus EpidBlacklistSig | +( | +VerifierCtx * | +ctx, | +
| + | + | EpidSignature const * | +sig, | +
| + | + | size_t | +sig_len, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len | +
| + | ) | ++ |
+
+
+Adds a valid name-based signature to the verifier blacklist.
+If the signature is not valid it will not be added to the blacklist.
+- Parameters
-
+
+
+[in] ctx The verifier context. [in] sig The name-based signature to revoke. [in] sig_len The size of sig in bytes. [in] msg The message that was signed. [in] msg_len The size of msg in bytes.
+
- Returns
- EpidStatus
- See also
- EpidVerifierCreate +
- +EpidVerifierSetVerifierRl +
- +EpidWriteVerifierRl
+
+
+
+
+
+
| EpidStatus EpidCheckPrivRlEntry | +( | +VerifierCtx const * | +ctx, | +
| + | + | BasicSignature const * | +sig, | +
| + | + | FpElemStr const * | +f | +
| + | ) | ++ |
+
+
+Verifies a signature has not been revoked in the private key based revocation list.
+Used in constrained environments where, due to limited memory, it may not be possible to process through a large and potentially unbounded revocation list.
+- Parameters
-
+
+
+[in] ctx The verifier context. [in] sig The basic signature. [in] f The private key based revocation list entry.
+
- Note
- Sig should be verified using EpidVerifyBasicSig() before invocation. Behavior is undefined if sig cannot be verified. +
- +This function should be used in conjunction with EpidNrVerify() and EpidVerifyBasicSig(). +
- +If the result is not kEpidNoErr the verify should be considered to have failed.
- Returns
- EpidStatus
- See also
- EpidVerifierCreate +
- +EpidNrVerify +
- +EpidVerifyBasicSig
+
+
+
+
+
+
| size_t EpidGetVerifierRlSize | +( | +VerifierCtx const * | +ctx | ) | ++ |
+
+
+Returns the number of bytes required to serialize the verifier blacklist.
+Use this function to determine the buffer size required by EpidWriteVerifierRl.
+- Parameters
-
+
+
+[in] ctx The verifier context.
+
- Returns
- Size in bytes required to serialize the verifier blacklist
- See also
- EpidVerifierCreate +
- +EpidVerifierSetVerifierRl +
- +EpidBlacklistSig +
- +EpidWriteVerifierRl
+
+
+
+
+
+
| EpidStatus EpidNrVerify | +( | +VerifierCtx const * | +ctx, | +
| + | + | BasicSignature const * | +sig, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len, | +
| + | + | SigRlEntry const * | +sigrl_entry, | +
| + | + | NrProof const * | +proof | +
| + | ) | ++ |
+
+
+Verifies the non-revoked proof for a single signature based revocation list entry.
+Used in constrained environments where, due to limited memory, it may not be possible to process through a large and potentially unbounded revocation list.
+- Parameters
-
+
+
+[in] ctx The verifier context. [in] sig The basic signature. [in] msg The message that was signed. [in] msg_len The size of msg in bytes. [in] sigrl_entry The signature based revocation list entry. [in] proof The non-revoked proof.
+
- Returns
- EpidStatus
- Note
- Sig should be verified using EpidVerifyBasicSig() before invocation. Behavior is undefined if sig cannot be verified. +
- +This function should be used in conjunction with EpidVerifyBasicSig() and EpidCheckPrivRlEntry(). +
- +If the result is not kEpidNoErr, the verification should be considered to have failed.
- See also
- EpidVerifierCreate +
- +EpidVerifyBasicSig +
- +EpidCheckPrivRlEntry
+
+
+
+
+
+
| EpidStatus EpidVerifierCreate | +( | +GroupPubKey const * | +pub_key, | +
| + | + | VerifierPrecomp const * | +precomp, | +
| + | + | VerifierCtx ** | +ctx | +
| + | ) | ++ |
+
+
+Creates a new verifier context.
+Must be called to create the verifier context that is used by other "Verifier" APIs.
+Allocates memory for the context, then initializes it.
+EpidVerifierDelete() must be called to safely release the member context.
+- Parameters
-
+
+
+[in] pub_key The group certificate. [in] precomp Optional pre-computed data. If NULL the value is computed internally and is readable using EpidVerifierWritePrecomp(). [out] ctx Newly constructed verifier context.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the content of ctx is undefined.
- See also
- EpidVerifierDelete +
- +EpidVerifierWritePrecomp
+
+
+
+
+
+
| void EpidVerifierDelete | +( | +VerifierCtx ** | +ctx | ) | ++ |
+
+
+Deletes an existing verifier context.
+Must be called to safely release a verifier context created using EpidVerifierCreate().
+De-initializes the context, frees memory used by the context, and sets the context pointer to NULL.
+- Parameters
-
+
+
+[in,out] ctx The verifier context. Can be NULL.
+
- See also
- EpidVerifierCreate
+
+
+
+
+
+
| EpidStatus EpidVerifierSetBasename | +( | +VerifierCtx * | +ctx, | +
| + | + | void const * | +basename, | +
| + | + | size_t | +basename_len | +
| + | ) | ++ |
+
+
+Sets the basename to be used by a verifier.
+- Note
- A successful call to this function will clear the current verifier blacklist.
- Parameters
-
+
+
+[in,out] ctx The verifier context. [in] basename The basename. Pass NULL for random base. [in] basename_len Number of bytes in basename buffer. Must be 0 if basename is NULL.
+
- Returns
- EpidStatus
- See also
- EpidVerifierCreate
+
+
+
+
+
+
| EpidStatus EpidVerifierSetGroupRl | +( | +VerifierCtx * | +ctx, | +
| + | + | GroupRl const * | +grp_rl, | +
| + | + | size_t | +grp_rl_size | +
| + | ) | ++ |
+
+
+Sets the group based revocation list.
+The caller is responsible for ensuring the revocation list is authorized, e.g signed by the issuer. The caller is also responsible checking the version of the revocation list. The call fails if trying to set an older version of the revocation list than was last set.
+- Attention
- The memory pointed to by grp_rl is accessed directly by the verifier until a new list is set or the verifier is destroyed. Do not modify the contents of this memory. The behavior of subsequent operations that rely on the revocation list is undefined if the memory is modified. +
- +It is the responsibility of the caller to free the memory pointed to by grp_rl after the verifier is no longer using it.
- Parameters
-
+
+
+[in,out] ctx The verifier context. [in] grp_rl The group based revocation list. [in] grp_rl_size The size of the group based revocation list in bytes.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the group based revocation list pointed to by the verifier is undefined.
- See also
- EpidVerifierCreate
+
+
+
+
+
+
| EpidStatus EpidVerifierSetHashAlg | +( | +VerifierCtx * | +ctx, | +
| + | + | HashAlg | +hash_alg | +
| + | ) | ++ |
+
+
+Sets the hash algorithm to be used by a verifier.
+- Parameters
-
+
+
+[in] ctx The verifier context. [in] hash_alg The hash algorithm to use.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr, the hash algorithm used by the verifier is undefined.
- See also
- EpidVerifierCreate +
- +HashAlg
+
+
+
+
+
+
| EpidStatus EpidVerifierSetPrivRl | +( | +VerifierCtx * | +ctx, | +
| + | + | PrivRl const * | +priv_rl, | +
| + | + | size_t | +priv_rl_size | +
| + | ) | ++ |
+
+
+Sets the private key based revocation list.
+The caller is responsible for ensuring the revocation list is authorized, e.g signed by the issuer. The caller is also responsible checking the version of the revocation list. The call fails if trying to set an older version of the revocation list than was last set.
+- Attention
- The memory pointed to by priv_rl is accessed directly by the verifier until a new list is set or the verifier is destroyed. Do not modify the contents of this memory. The behavior of subsequent operations that rely on the revocation list is undefined if the memory is modified. +
- +It is the responsibility of the caller to free the memory pointed to by priv_rl after the verifier is no longer using it.
- Parameters
-
+
+
+[in,out] ctx The verifier context. [in] priv_rl The private key based revocation list. [in] priv_rl_size The size of the private key based revocation list in bytes.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the private key based revocation list pointed to by the verifier is undefined.
- See also
- EpidVerifierCreate
+
+
+
+
+
+
| EpidStatus EpidVerifierSetSigRl | +( | +VerifierCtx * | +ctx, | +
| + | + | SigRl const * | +sig_rl, | +
| + | + | size_t | +sig_rl_size | +
| + | ) | ++ |
+
+
+Sets the signature based revocation list.
+The caller is responsible for ensuring the revocation list is authorized, e.g signed by the issuer. The caller is also responsible checking the version of the revocation list. The call fails if trying to set an older version of the revocation list than was last set.
+- Attention
- The memory pointed to by sig_rl is accessed directly by the verifier until a new list is set or the verifier is destroyed. Do not modify the contents of this memory. The behavior of subsequent operations that rely on the revocation list is undefined if the memory is modified. +
- +It is the responsibility of the caller to free the memory pointed to by sig_rl after the verifier is no longer using it.
- Parameters
-
+
+
+[in,out] ctx The verifier context. [in] sig_rl The signature based revocation list. [in] sig_rl_size The size of the signature based revocation list in bytes.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the signature based revocation list pointed to by the verifier is undefined.
- See also
- EpidVerifierCreate
+
+
+
+
+
+
| EpidStatus EpidVerifierSetVerifierRl | +( | +VerifierCtx * | +ctx, | +
| + | + | VerifierRl const * | +ver_rl, | +
| + | + | size_t | +ver_rl_size | +
| + | ) | ++ |
+
+
+Sets the verifier revocation list.
+The caller is responsible for ensuring the revocation list is authorized. The caller is also responsible for checking the version of the revocation list. The call fails if trying to set an older version of the same revocation list than was last set.
+Once EpidVerifierSetVerifierRl returns, callers are free to release the memory pointed to by ver_rl.
+- Parameters
-
+
+
+[in,out] ctx The verifier context. [in] ver_rl The verifier revocation list. [in] ver_rl_size The size of the verifier revocation list in bytes.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the verifier revocation list pointed to by the verifier is undefined.
- See also
- EpidVerifierCreate +
- +EpidBlacklistSig +
- +EpidWriteVerifierRl
+
+
+
+
+
+
| EpidStatus EpidVerifierWritePrecomp | +( | +VerifierCtx const * | +ctx, | +
| + | + | VerifierPrecomp * | +precomp | +
| + | ) | ++ |
+
+
+Serializes the pre-computed verifier settings.
+- Parameters
-
+
+
+[in] ctx The verifier context. [out] precomp The Serialized pre-computed verifier settings.
+
- Returns
- EpidStatus
- Note
- If the result is not kEpidNoErr the content of precomp is undefined.
+
+
+
+
+
+
| EpidStatus EpidVerify | +( | +VerifierCtx const * | +ctx, | +
| + | + | EpidSignature const * | +sig, | +
| + | + | size_t | +sig_len, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len | +
| + | ) | ++ |
+
+
+Verifies a signature and checks revocation status.
+- Parameters
-
+
+
+[in] ctx The verifier context. [in] sig The signature. [in] sig_len The size of sig in bytes. [in] msg The message that was signed. [in] msg_len The size of msg in bytes.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidSigValid Signature validated successfully kEpidSigInvalid Signature is invalid kEpidSigRevokedInGroupRl Signature revoked in GroupRl kEpidSigRevokedInPrivRl Signature revoked in PrivRl kEpidSigRevokedInSigRl Signature revoked in SigRl kEpidSigRevokedInVerifierRl Signature revoked in VerifierRl
+
- Note
- If the result is not kEpidNoErr or one of the values listed above the verify should be considered to have failed.
- See also
- EpidVerifierCreate +
- +EpidSignBasic +
- +EpidSign
+
+
+
+
+
+
| EpidStatus EpidVerifyBasicSig | +( | +VerifierCtx const * | +ctx, | +
| + | + | BasicSignature const * | +sig, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len | +
| + | ) | ++ |
+
+
+Verifies a member signature without revocation checks.
+Used in constrained environments where, due to limited memory, it may not be possible to process through a large and potentially unbounded revocation list.
+- Parameters
-
+
+
+[in] ctx The verifier context. [in] sig The basic signature. [in] msg The message that was signed. [in] msg_len The size of msg in bytes.
+
- Returns
- EpidStatus
- Note
- This function should be used in conjunction with EpidNrVerify() and EpidCheckPrivRlEntry(). +
- +If the result is not kEpidNoErr the verify should be considered to have failed.
- See also
- EpidVerifierCreate +
- +EpidSignBasic +
- +EpidSign
+
+
+
+
+
| EpidStatus EpidWriteVerifierRl | +( | +VerifierCtx const * | +ctx, | +
| + | + | VerifierRl * | +ver_rl, | +
| + | + | size_t | +ver_rl_size | +
| + | ) | ++ |
+
+
+Serializes the verifier blacklist to a buffer.
+If the current blacklist is empty or not set a valid empty verifier blacklist will be serialized.
+Use EpidGetVerifierRlSize to determine the buffer size required to serialize the verifier blacklist.
+- Parameters
-
+
+
+[in] ctx The verifier context. [out] ver_rl An existing buffer in which to write the verifier revocation list. [in] ver_rl_size The size of the caller allocated output buffer in bytes.
+
- Returns
- EpidStatus
- See also
- EpidVerifierCreate +
- +EpidVerifierSetVerifierRl +
- +EpidBlacklistSig +
- +EpidGetVerifierRlSize
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___error_codes.js b/external/epid-sdk-3.0.0/doc/html/group___error_codes.js
new file mode 100644
index 00000000..5f024635
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___error_codes.js
@@ -0,0 +1,26 @@
+var group___error_codes =
+[
+ [ "EpidStatus", "group___error_codes.html#gafdb27c77c2c4b32c807e326a8a0da360", [
+ [ "kEpidNoErr", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a8a6861e14322ca9193498ffc955537f9", null ],
+ [ "kEpidSigValid", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360ab45ad60085d03c03ea30b40a0519897e", null ],
+ [ "kEpidSigInvalid", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360aeedd19b8a1cbdecf963f90b4860e02b8", null ],
+ [ "kEpidSigRevokedInGroupRl", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360aedd43fb4043bef3b515fc23f1d9a5fe5", null ],
+ [ "kEpidSigRevokedInPrivRl", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a1dc7b7e6ff97c7ed9ff4191d76ebd6e1", null ],
+ [ "kEpidSigRevokedInSigRl", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a43c658cbf0d156850d71ce3f8efd461c", null ],
+ [ "kEpidSigRevokedInVerifierRl", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a486e052baa99c6c25ae5d5cc710de298", null ],
+ [ "kEpidErr", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360aa08f0d2e394b37694117a6a32bc71e6e", null ],
+ [ "kEpidNotImpl", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a5252da1ff519a098446723e9edd30cc7", null ],
+ [ "kEpidBadArgErr", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360ad134d6cc95a9dcb1b1a9f9c358047cbf", null ],
+ [ "kEpidNoMemErr", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360ab7dfec784192a827a91a4b8a6054d01c", null ],
+ [ "kEpidMemAllocErr", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a11a4d2f1c37064eb663de08dc57bcda8", null ],
+ [ "kEpidMathErr", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a1739ecb620f4bede2e1b84e52a96cee6", null ],
+ [ "kEpidDivByZeroErr", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a893cd0d417b139bb376d09c93695c3f3", null ],
+ [ "kEpidUnderflowErr", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a83a867b4f71ee13edbfca2f1b72abbec", null ],
+ [ "kEpidHashAlgorithmNotSupported", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360ad4d4ff24a7ef2cd7a50b8082265e9ff4", null ],
+ [ "kEpidRandMaxIterErr", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a61234ad9610406da6bf7977afd72a357", null ],
+ [ "kEpidDuplicateErr", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a3706f895a660260033b5b91890516c0f", null ],
+ [ "kEpidInconsistentBasenameSetErr", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360a94ae9c9b9337afd2fefd3b4f9c3160df", null ],
+ [ "kEpidMathQuadraticNonResidueError", "group___error_codes.html#ggafdb27c77c2c4b32c807e326a8a0da360ab2768a1a5c4374cb1ac6175c09c73129", null ]
+ ] ],
+ [ "EpidStatusToString", "group___error_codes.html#ga59e8680ce52509302fd58a987e45004d", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___file_parser.html b/external/epid-sdk-3.0.0/doc/html/group___file_parser.html
new file mode 100644
index 00000000..e6445ef1
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___file_parser.html
@@ -0,0 +1,534 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Error reporting interface. +More...
++Enumerations | |
| enum | EpidStatus { + kEpidNoErr = 0, +kEpidSigValid = 0, +kEpidSigInvalid = 1, +kEpidSigRevokedInGroupRl = 2, + + kEpidSigRevokedInPrivRl = 3, +kEpidSigRevokedInSigRl = 4, +kEpidSigRevokedInVerifierRl = 5, +kEpidErr = -999, + + kEpidNotImpl, +kEpidBadArgErr, +kEpidNoMemErr, +kEpidMemAllocErr, + + kEpidMathErr, +kEpidDivByZeroErr, +kEpidUnderflowErr, +kEpidHashAlgorithmNotSupported, + + kEpidRandMaxIterErr, +kEpidDuplicateErr, +kEpidInconsistentBasenameSetErr, +kEpidMathQuadraticNonResidueError + + } |
| Return status for SDK functions. More... | |
+Functions | |
| char const * | EpidStatusToString (EpidStatus e) |
| Returns string representation of error code. More... | |
Detailed Description
+Error reporting interface.
+This module defines the return status type. It also provides tools for interactions with status values, such as converting them to a string.
+Enumeration Type Documentation
+ +
+
+
+
+
+
| enum EpidStatus | +
+
+
+
+
+
+Return status for SDK functions.
+Convention for status values is as follows:
-
+
- Zero indicates "success" +
- Any positive number indicates "success with status" +
- Any negative number indicates "failure" +
| Enumerator | |
|---|---|
| kEpidNoErr |
+ no error + |
| kEpidSigValid |
+ Signature is valid. + |
| kEpidSigInvalid |
+ Signature is invalid. + |
| kEpidSigRevokedInGroupRl |
+ Signature revoked in GroupRl. + |
| kEpidSigRevokedInPrivRl |
+ Signature revoked in PrivRl. + |
| kEpidSigRevokedInSigRl |
+ Signature revoked in SigRl. + |
| kEpidSigRevokedInVerifierRl |
+ Signature revoked in VerifierRl. + |
| kEpidErr |
+ unspecified error + |
| kEpidNotImpl |
+ not implemented error + |
| kEpidBadArgErr |
+ incorrect arg to function + |
| kEpidNoMemErr |
+ not enough memory for the operation + |
| kEpidMemAllocErr |
+ insufficient memory allocated for operation + |
| kEpidMathErr |
+ internal math error + |
| kEpidDivByZeroErr |
+ an attempt to divide by zero + |
| kEpidUnderflowErr |
+ a value became less than minimum supported level + |
| kEpidHashAlgorithmNotSupported |
+ unsupported hash algorithm type + |
| kEpidRandMaxIterErr |
+ reached max iteration for random number generation + |
| kEpidDuplicateErr |
+ argument would add duplicate entry + |
| kEpidInconsistentBasenameSetErr |
+ set basename conflicts with arguments + |
| kEpidMathQuadraticNonResidueError |
+ quadratic Non-Residue Error + |
Function Documentation
+ +
+
+
+
+
+
| char const* EpidStatusToString | +( | +EpidStatus | +e | ) | ++ |
+
+
+Returns string representation of error code.
+- Parameters
-
+
+
+e The status value.
+
- Returns
- The string describing the status.
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___file_parser.js b/external/epid-sdk-3.0.0/doc/html/group___file_parser.js
new file mode 100644
index 00000000..3694cba6
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___file_parser.js
@@ -0,0 +1,42 @@
+var group___file_parser =
+[
+ [ "EPID 1.1 support", "group___epid11_file_parser_module.html", "group___epid11_file_parser_module" ],
+ [ "EpidFileHeader", "struct_epid_file_header.html", [
+ [ "epid_version", "struct_epid_file_header.html#a35d43c51c1739940381e4898ca87b824", null ],
+ [ "file_type", "struct_epid_file_header.html#af5d48c739cc6c00c6e1ce35abf4f1473", null ]
+ ] ],
+ [ "EpidCaCertificate", "struct_epid_ca_certificate.html", [
+ [ "a", "struct_epid_ca_certificate.html#a2811c1914ffae913820f13da914c8f01", null ],
+ [ "b", "struct_epid_ca_certificate.html#a280e0b0238cf45834c21849ab8a7e124", null ],
+ [ "header", "struct_epid_ca_certificate.html#ac03cf7257c52ad14e3dd3201b930dd50", null ],
+ [ "prime", "struct_epid_ca_certificate.html#a3a44e8050ca2f5085652b2b4e15b779c", null ],
+ [ "pubkey", "struct_epid_ca_certificate.html#a9d2fc21f46cf9fc96e2ea557b70e5356", null ],
+ [ "r", "struct_epid_ca_certificate.html#ab9d4c318b1fc8d38d3ce53b29f2dfee2", null ],
+ [ "signature", "struct_epid_ca_certificate.html#a2f8f09ae02919c379c38386668b47418", null ],
+ [ "x", "struct_epid_ca_certificate.html#a4f77996f90ed7da1d0503c4236b2c9d1", null ],
+ [ "y", "struct_epid_ca_certificate.html#abd69cce8d5e3940787ee0d17f72184ab", null ]
+ ] ],
+ [ "EpidFileType", "group___file_parser.html#ga9a33be7edc6b4c7a867fb07bd2bddecb", [
+ [ "kIssuingCaPubKeyFile", "group___file_parser.html#gga9a33be7edc6b4c7a867fb07bd2bddecbac24554caafe2db01e2daed413188cd92", null ],
+ [ "kGroupPubKeyFile", "group___file_parser.html#gga9a33be7edc6b4c7a867fb07bd2bddecba1f8d8c4b253403a35c51e05d34a7ca1e", null ],
+ [ "kPrivRlFile", "group___file_parser.html#gga9a33be7edc6b4c7a867fb07bd2bddecba692b4141bff8225bee6000750b0da322", null ],
+ [ "kSigRlFile", "group___file_parser.html#gga9a33be7edc6b4c7a867fb07bd2bddecba8aead4b6aab87a1efb2d7e8c77a9b710", null ],
+ [ "kGroupRlFile", "group___file_parser.html#gga9a33be7edc6b4c7a867fb07bd2bddecba8e5247daee3999540e6cb24d4c2b3770", null ],
+ [ "kPrivRlRequestFile", "group___file_parser.html#gga9a33be7edc6b4c7a867fb07bd2bddecbac708ba9e56eaeac0f1256457cbd45911", null ],
+ [ "kSigRlRequestFile", "group___file_parser.html#gga9a33be7edc6b4c7a867fb07bd2bddecbac52e5fe24a12424316f655b9b7c62600", null ],
+ [ "kGroupRlRequestFile", "group___file_parser.html#gga9a33be7edc6b4c7a867fb07bd2bddecbab772fa1e3f221af125ffb34b86b3f24c", null ],
+ [ "kNumFileTypes", "group___file_parser.html#gga9a33be7edc6b4c7a867fb07bd2bddecbac6d742ea3dd3b17f6d763970ac84b811", null ]
+ ] ],
+ [ "EpidVersion", "group___file_parser.html#ga1562efc7c1891875d6b2b9180d65de9d", [
+ [ "kEpid1x", "group___file_parser.html#gga1562efc7c1891875d6b2b9180d65de9da5f270e2e8c2412bc07de293023f425cc", null ],
+ [ "kEpid2x", "group___file_parser.html#gga1562efc7c1891875d6b2b9180d65de9da6af0ee9d9689f1d4325bdd0beb8a89e2", null ],
+ [ "kNumEpidVersions", "group___file_parser.html#gga1562efc7c1891875d6b2b9180d65de9da8bbd27765997dd10f1c0378dbecef01d", null ]
+ ] ],
+ [ "EpidParseFileHeader", "group___file_parser.html#ga8e38d1102eb1dd9b5af2e2f79236da55", null ],
+ [ "EpidParseGroupPubKeyFile", "group___file_parser.html#ga43fdbc1bf2edd3695d21cb457365afbb", null ],
+ [ "EpidParseGroupRlFile", "group___file_parser.html#gad767f72dc55307b872a8b5600da3fd6f", null ],
+ [ "EpidParsePrivRlFile", "group___file_parser.html#gadc033fb23e3cbda56aa7e3d412060b7e", null ],
+ [ "EpidParseSigRlFile", "group___file_parser.html#ga237ef5a43076aa6fc6eb18829a93da3f", null ],
+ [ "kEpidFileTypeCode", "group___file_parser.html#ga3770c39a0546c79447c9d4159d794c33", null ],
+ [ "kEpidVersionCode", "group___file_parser.html#gaae808987ce82188dff42baa4e43cab82", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___finite_field_primitives.html b/external/epid-sdk-3.0.0/doc/html/group___finite_field_primitives.html
new file mode 100644
index 00000000..4d20c6ca
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___finite_field_primitives.html
@@ -0,0 +1,1328 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Parser for issuer material. +More...
++Modules | |
| EPID 1.1 support | |
| Parser for 1.1 issuer material. | |
+Data Structures | |
| struct | EpidFileHeader |
| Intel(R) EPID binary file header. More... | |
| struct | EpidCaCertificate |
| IoT CA Certificate binary format. More... | |
+Enumerations | |
| enum | EpidVersion { kEpid1x, +kEpid2x, +kNumEpidVersions + } |
| Recognized Intel(R) EPID versions. More... | |
| enum | EpidFileType { + kIssuingCaPubKeyFile, +kGroupPubKeyFile, +kPrivRlFile, +kSigRlFile, + + kGroupRlFile, +kPrivRlRequestFile, +kSigRlRequestFile, +kGroupRlRequestFile, + + kNumFileTypes + + } |
| Recognized Intel(R) EPID file types. More... | |
+Functions | |
| EpidStatus | EpidParseFileHeader (void const *buf, size_t len, EpidVersion *epid_version, EpidFileType *file_type) |
| Extracts Intel(R) EPID Binary Output File header information. More... | |
| EpidStatus | EpidParseGroupPubKeyFile (void const *buf, size_t len, EpidCaCertificate const *cert, GroupPubKey *pubkey) |
| Extracts group public key from buffer in issuer binary format. More... | |
| EpidStatus | EpidParsePrivRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, PrivRl *rl, size_t *rl_len) |
| Extracts private key revocation list from buffer in issuer binary format. More... | |
| EpidStatus | EpidParseSigRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, SigRl *rl, size_t *rl_len) |
| Extracts signature revocation list from buffer in issuer binary format. More... | |
| EpidStatus | EpidParseGroupRlFile (void const *buf, size_t len, EpidCaCertificate const *cert, GroupRl *rl, size_t *rl_len) |
| Extracts group revocation list from buffer in issuer binary format. More... | |
+Variables | |
| +const OctStr16 | kEpidVersionCode [kNumEpidVersions] |
| Encoding of issuer material Intel(R) EPID versions. | |
| +const OctStr16 | kEpidFileTypeCode [kNumFileTypes] |
| Encoding of issuer material file types. | |
Detailed Description
+Parser for issuer material.
+Provides an API for parsing buffers formatted according to the various IoT Intel(R) EPID binary file formats.
+Enumeration Type Documentation
+ +
+
+
+
+
+
+
| enum EpidFileType | +
+
+
+
+
+
+Recognized Intel(R) EPID file types.
+| Enumerator | |
|---|---|
| kIssuingCaPubKeyFile |
+ IoT Issuing CA public key file. + |
| kGroupPubKeyFile |
+ Group Public Key Output File Format. + |
| kPrivRlFile |
+ Binary Private Key Revocation List. + |
| kSigRlFile |
+ Binary Signature Revocation List. + |
| kGroupRlFile |
+ Binary Group Revocation List. + |
| kPrivRlRequestFile |
+ Binary Private Key Revocation Request. + |
| kSigRlRequestFile |
+ Binary Signature Revocation Request. + |
| kGroupRlRequestFile |
+ Binary Group Revocation Request. + |
| kNumFileTypes |
+ Maximum number of file types. + |
+
+
+
+
+
+| enum EpidVersion | +
Function Documentation
+ +
+
+
+
+
+
+
| EpidStatus EpidParseFileHeader | +( | +void const * | +buf, | +
| + | + | size_t | +len, | +
| + | + | EpidVersion * | +epid_version, | +
| + | + | EpidFileType * | +file_type | +
| + | ) | ++ |
+
+
+Extracts Intel(R) EPID Binary Output File header information.
+- Parameters
-
+
+
+[in] buf Pointer to buffer containing Intel(R) EPID Binary Output File to parse. [in] len The size of buf in bytes. [out] epid_version The extracted EPID version or kNumEpidVersions if EPID version is unknown. Pass NULL to not extract. [out] file_type The extracted EPID file type or kNumFileTypes if file type is unknown. Pass NULL to not extract.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| EpidStatus EpidParseGroupPubKeyFile | +( | +void const * | +buf, | +
| + | + | size_t | +len, | +
| + | + | EpidCaCertificate const * | +cert, | +
| + | + | GroupPubKey * | +pubkey | +
| + | ) | ++ |
+
+
+Extracts group public key from buffer in issuer binary format.
+Extracts the first group public key from a buffer with format of Intel(R) EPID 2.0 Group Public Key Certificate Binary File. The function validates that the first public key was signed by the private key corresponding to the provided CA certificate and the size of the input buffer is correct.
+- Warning
- It is the responsibility of the caller to authenticate the EpidCaCertificate.
- Parameters
-
+
+
+[in] buf Pointer to buffer containing public key to extract. [in] len The size of buf in bytes. [in] cert The issuing CA public key certificate. [out] pubkey The extracted group public key.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidSigInvalid Parsing failed due to data authentication failure.
+
+
+
+
+
+
+
| EpidStatus EpidParseGroupRlFile | +( | +void const * | +buf, | +
| + | + | size_t | +len, | +
| + | + | EpidCaCertificate const * | +cert, | +
| + | + | GroupRl * | +rl, | +
| + | + | size_t * | +rl_len | +
| + | ) | ++ |
+
+
+Extracts group revocation list from buffer in issuer binary format.
+Extracts the group revocation list from a buffer with format of Binary Group Certificate Revocation List File. The function validates that the revocation list was signed by the private key corresponding to the provided CA certificate and the size of the input buffer is correct.
+To determine the required size of the revocation list output buffer, provide a null pointer for the output buffer.
+- Warning
- It is the responsibility of the caller to authenticate the EpidCaCertificate.
- Parameters
-
+
+
+[in] buf Pointer to buffer containing the revocation list to extract. [in] len The size of buf in bytes. [in] cert The issuing CA public key certificate. [out] rl The extracted revocation list. If Null, rl_len is filled with the required output buffer size. [in,out] rl_len The size of rl in bytes.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidSigInvalid Parsing failed due to data authentication failure.
+
+
+
+
+
+
+
| EpidStatus EpidParsePrivRlFile | +( | +void const * | +buf, | +
| + | + | size_t | +len, | +
| + | + | EpidCaCertificate const * | +cert, | +
| + | + | PrivRl * | +rl, | +
| + | + | size_t * | +rl_len | +
| + | ) | ++ |
+
+
+Extracts private key revocation list from buffer in issuer binary format.
+Extracts the private key revocation list from a buffer with format of Binary Private Key Revocation List File. The function validates that the revocation list was signed by the private key corresponding to the provided CA certificate and the size of the input buffer is correct.
+To determine the required size of the revocation list output buffer, provide a null pointer for the output buffer.
+- Warning
- It is the responsibility of the caller to authenticate the EpidCaCertificate.
- Parameters
-
+
+
+[in] buf Pointer to buffer containing the revocation list to extract. [in] len The size of buf in bytes. [in] cert The issuing CA public key certificate. [out] rl The extracted revocation list. If Null, rl_len is filled with the required output buffer size. [in,out] rl_len The size of rl in bytes.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidSigInvalid Parsing failed due to data authentication failure.
+
+
+
+
+
+
| EpidStatus EpidParseSigRlFile | +( | +void const * | +buf, | +
| + | + | size_t | +len, | +
| + | + | EpidCaCertificate const * | +cert, | +
| + | + | SigRl * | +rl, | +
| + | + | size_t * | +rl_len | +
| + | ) | ++ |
+
+
+Extracts signature revocation list from buffer in issuer binary format.
+Extracts the signature based revocation list from a buffer with format of Binary Signature Revocation List File. The function validates that the revocation list was signed by the private key corresponding to the provided CA certificate and the size of the input buffer is correct.
+To determine the required size of the revocation list output buffer, provide a null pointer for the output buffer.
+- Warning
- It is the responsibility of the caller to authenticate the EpidCaCertificate.
- Parameters
-
+
+
+[in] buf Pointer to buffer containing the revocation list to extract. [in] len The size of buf in bytes. [in] cert The issuing CA public key certificate. [out] rl The extracted revocation list. If Null, rl_len is filled with the required output buffer size. [in,out] rl_len The size of rl in bytes.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidSigInvalid Parsing failed due to data authentication failure.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___finite_field_primitives.js b/external/epid-sdk-3.0.0/doc/html/group___finite_field_primitives.js
new file mode 100644
index 00000000..5d2ad45e
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___finite_field_primitives.js
@@ -0,0 +1,28 @@
+var group___finite_field_primitives =
+[
+ [ "FfElement", "group___finite_field_primitives.html#ga6cff5c7c06b07a87442b810ccc0a86fa", null ],
+ [ "FiniteField", "group___finite_field_primitives.html#gab281b24e336a8b3d7d90079d862d969e", null ],
+ [ "DeleteFfElement", "group___finite_field_primitives.html#ga1bad3c6945d1d709fceb07a1dd03000e", null ],
+ [ "DeleteFiniteField", "group___finite_field_primitives.html#gacbdd2871ecf93dadaac9d2c5b16e1e5f", null ],
+ [ "FfAdd", "group___finite_field_primitives.html#ga1a6e6d3c2319bb24eae8670b021e223b", null ],
+ [ "FfExp", "group___finite_field_primitives.html#gaf0ddbc1bad048d67771cba119eb44a6c", null ],
+ [ "FfGetRandom", "group___finite_field_primitives.html#ga6622db072782fd9e53b4d59dd3dbd8e8", null ],
+ [ "FfHash", "group___finite_field_primitives.html#ga18a952cebb4a1274c73e6cb0c19e8aea", null ],
+ [ "FfInv", "group___finite_field_primitives.html#ga26069d035d0f6ade33af2b5d5c14949a", null ],
+ [ "FfIsEqual", "group___finite_field_primitives.html#gaed2acb8583e9c9f6b49fdb660c672625", null ],
+ [ "FfIsZero", "group___finite_field_primitives.html#ga20d9140e5670d679ef8183d9b5115f53", null ],
+ [ "FfMul", "group___finite_field_primitives.html#ga4613a75bd001a974b3e3e494c3a112a5", null ],
+ [ "FfMultiExp", "group___finite_field_primitives.html#ga84d21decc1c957bcf6e98e1492eb2ac3", null ],
+ [ "FfMultiExpBn", "group___finite_field_primitives.html#ga1ef46fc83f9c11263a2aa1ec906c9144", null ],
+ [ "FfNeg", "group___finite_field_primitives.html#gae7a8c7503b6fc7a41bcaab4d45ca37b2", null ],
+ [ "FfSqrt", "group___finite_field_primitives.html#ga39892fe2ab431e166dbbcf57756660f6", null ],
+ [ "FfSscmMultiExp", "group___finite_field_primitives.html#ga0d0c31a22bbfb665a16b2d25b0cd2634", null ],
+ [ "FfSub", "group___finite_field_primitives.html#ga59d20610f245ff4bc3a17b7bfe289991", null ],
+ [ "InitFfElementFromBn", "group___finite_field_primitives.html#ga90b2c192708973b54b7a3e82b34536ed", null ],
+ [ "NewFfElement", "group___finite_field_primitives.html#gacc54f315ede2dbeb8c5990c024a0de6c", null ],
+ [ "NewFiniteField", "group___finite_field_primitives.html#ga7d99fdc5e4573668a5744e49df7ab67c", null ],
+ [ "NewFiniteFieldViaBinomalExtension", "group___finite_field_primitives.html#ga83041e3be9984a4bd8f1021934bfa3a2", null ],
+ [ "NewFiniteFieldViaPolynomialExtension", "group___finite_field_primitives.html#gae69af62a03179718cac81b004549c598", null ],
+ [ "ReadFfElement", "group___finite_field_primitives.html#ga884d9e1baadf29a410244a735853e3c7", null ],
+ [ "WriteFfElement", "group___finite_field_primitives.html#ga678694636708463b078d842d5c58a900", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___hash_primitives.html b/external/epid-sdk-3.0.0/doc/html/group___hash_primitives.html
new file mode 100644
index 00000000..4a31fcbb
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___hash_primitives.html
@@ -0,0 +1,142 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+Finite field operations. +More...
++Typedefs | |
| +typedef struct FiniteField | FiniteField |
| A finite field. | |
| +typedef struct FfElement | FfElement |
| An element in a finite field. | |
+Functions | |
| EpidStatus | NewFiniteField (BigNumStr const *prime, FiniteField **ff) |
| Creates new finite field. More... | |
| EpidStatus | NewFiniteFieldViaBinomalExtension (FiniteField const *ground_field, FfElement const *ground_element, int degree, FiniteField **ff) |
| Creates a new finite field using binomial extension. More... | |
| EpidStatus | NewFiniteFieldViaPolynomialExtension (FiniteField const *ground_field, BigNumStr const *irr_polynomial, int degree, FiniteField **ff) |
| Creates a new finite field using polynomial extension. More... | |
| void | DeleteFiniteField (FiniteField **ff) |
| Frees a previously allocated FiniteField. More... | |
| EpidStatus | NewFfElement (FiniteField const *ff, FfElement **new_ff_elem) |
| Creates a new finite field element. More... | |
| void | DeleteFfElement (FfElement **ff_elem) |
| Frees a previously allocated FfElement. More... | |
| EpidStatus | ReadFfElement (FiniteField *ff, void const *ff_elem_str, size_t strlen, FfElement *ff_elem) |
| Deserializes a FfElement from a string. More... | |
| EpidStatus | InitFfElementFromBn (FiniteField *ff, BigNum *bn, FfElement *ff_elem) |
| Initializes an existing FfElement from a BigNum. More... | |
| EpidStatus | WriteFfElement (FiniteField *ff, FfElement const *ff_elem, void *ff_elem_str, size_t strlen) |
| Serializes a finite field element to a string. More... | |
| EpidStatus | FfNeg (FiniteField *ff, FfElement const *a, FfElement *r) |
| Calculates the additive inverse of a finite field element. More... | |
| EpidStatus | FfInv (FiniteField *ff, FfElement const *a, FfElement *r) |
| Calculates the multiplicative inverse of a finite field element. More... | |
| EpidStatus | FfAdd (FiniteField *ff, FfElement const *a, FfElement const *b, FfElement *r) |
| Adds two finite field elements. More... | |
| EpidStatus | FfSub (FiniteField *ff, FfElement const *a, FfElement const *b, FfElement *r) |
| Subtracts two finite field elements. More... | |
| EpidStatus | FfMul (FiniteField *ff, FfElement const *a, FfElement const *b, FfElement *r) |
| Multiplies two finite field elements. More... | |
| EpidStatus | FfIsZero (FiniteField *ff, FfElement const *a, bool *is_zero) |
| Checks if given finite field element is the additive identity (zero). More... | |
| EpidStatus | FfExp (FiniteField *ff, FfElement const *a, BigNum const *b, FfElement *r) |
| Raises an element of a finite field to a power. More... | |
| EpidStatus | FfMultiExp (FiniteField *ff, FfElement const **a, BigNumStr const **b, size_t m, FfElement *r) |
| Multi-exponentiates finite field elements. More... | |
| EpidStatus | FfMultiExpBn (FiniteField *ff, FfElement const **a, BigNum const **b, size_t m, FfElement *r) |
| Multi-exponentiates finite field elements. More... | |
| EpidStatus | FfSscmMultiExp (FiniteField *ff, FfElement const **a, BigNumStr const **b, size_t m, FfElement *r) |
| Software side-channel mitigated implementation of FfMultiExp. More... | |
| EpidStatus | FfIsEqual (FiniteField *ff, FfElement const *a, FfElement const *b, bool *is_equal) |
| Checks if two finite field elements are equal. More... | |
| EpidStatus | FfHash (FiniteField *ff, void const *msg, size_t msg_len, HashAlg hash_alg, FfElement *r) |
| Hashes an arbitrary message to an element in a finite field. More... | |
| EpidStatus | FfGetRandom (FiniteField *ff, BigNumStr const *low_bound, BitSupplier rnd_func, void *rnd_param, FfElement *r) |
| Generate random finite field element. More... | |
| EpidStatus | FfSqrt (FiniteField *ff, FfElement const *a, FfElement *r) |
| Finds a square root of a finite field element. More... | |
Detailed Description
+Finite field operations.
+provides APIs for working with finite fields. Finite fields allow simple mathematical operations based on a finite set of discrete values. The results of these operations are also contained in the same set.
+A simple example of a finite field is all integers from zero that are less than a given value.
+The elements (FfElement) of a finite field can be used in a variety of simple mathematical operations that result in elements of the same field.
+Function Documentation
+ +
+
+
+
+
+
+
| void DeleteFfElement | +( | +FfElement ** | +ff_elem | ) | ++ |
+
+
+Frees a previously allocated FfElement.
+Frees memory pointed to by ff_elem. Nulls the pointer.
+- Parameters
-
+
+
+[in] ff_elem The finite field element. Can be NULL.
+
- See also
- NewFfElement
+
+
+
+
+
+
| void DeleteFiniteField | +( | +FiniteField ** | +ff | ) | ++ |
+
+
+Frees a previously allocated FiniteField.
+Frees memory pointed to by finite field. Nulls the pointer.
+- Parameters
-
+
+
+[in] ff The Finite field. Can be NULL.
+
- See also
- NewFiniteField
+
+
+
+
+
+
| EpidStatus FfAdd | +( | +FiniteField * | +ff, | +
| + | + | FfElement const * | +a, | +
| + | + | FfElement const * | +b, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Adds two finite field elements.
+- Parameters
-
+
+
+[in] ff The finite field. [out] a The first operand to be added. [out] b The second operand to be added. [out] r The result of adding a and b.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| EpidStatus FfExp | +( | +FiniteField * | +ff, | +
| + | + | FfElement const * | +a, | +
| + | + | BigNum const * | +b, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Raises an element of a finite field to a power.
+- Parameters
-
+
+
+[in] ff The finite field in which to perform the operation [in] a The base. [in] b The power. [out] r The result of raising a to the power b.
+
- Returns
- EpidStatus
- See also
- NewFiniteField +
- +NewFfElement
+
+
+
+
+
+
| EpidStatus FfGetRandom | +( | +FiniteField * | +ff, | +
| + | + | BigNumStr const * | +low_bound, | +
| + | + | BitSupplier | +rnd_func, | +
| + | + | void * | +rnd_param, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Generate random finite field element.
+- Parameters
-
+
+
+[in] ff The finite field associated with the random finite field element. [in] low_bound Lower bound of the random finite field to be generated. [in] rnd_func Random number generator. [in] rnd_param Pass through context data for rnd_func. [in,out] r The random finite field element.
+
- Returns
- EpidStatus
- Return values
-
+
+
+kEpidRandMaxIterErr the function should be called again with different random data.
+
- See also
- NewFfElement +
- +BitSupplier
+
+
+
+
+
+
| EpidStatus FfHash | +( | +FiniteField * | +ff, | +
| + | + | void const * | +msg, | +
| + | + | size_t | +msg_len, | +
| + | + | HashAlg | +hash_alg, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Hashes an arbitrary message to an element in a finite field.
+- Parameters
-
+
+
+[in] ff The finite field. [in] msg The message. [in] msg_len The size of msg in bytes. [in] hash_alg The hash algorithm. [out] r The hashed value.
+
- Returns
- EpidStatus
- See also
- NewFiniteField +
- +NewFfElement
+
+
+
+
+
+
| EpidStatus FfInv | +( | +FiniteField * | +ff, | +
| + | + | FfElement const * | +a, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Calculates the multiplicative inverse of a finite field element.
+- Parameters
-
+
+
+[in] ff The finite field. [in] a The element. [out] r The inverted element.
+
- Returns
- EpidStatus
- See also
- NewFiniteField +
- +NewFfElement
+
+
+
+
+
+
| EpidStatus FfIsEqual | +( | +FiniteField * | +ff, | +
| + | + | FfElement const * | +a, | +
| + | + | FfElement const * | +b, | +
| + | + | bool * | +is_equal | +
| + | ) | ++ |
+
+
+Checks if two finite field elements are equal.
+- Parameters
-
+
+
+[in] ff The finite field. [in] a An element to check. [in] b Another element to check. [out] is_equal The result of the check.
+
- Returns
- EpidStatus
- See also
- NewEcGroup +
- +NewEcPoint
+
+
+
+
+
+
| EpidStatus FfIsZero | +( | +FiniteField * | +ff, | +
| + | + | FfElement const * | +a, | +
| + | + | bool * | +is_zero | +
| + | ) | ++ |
+
+
+Checks if given finite field element is the additive identity (zero).
+- Parameters
-
+
+
+[in] ff The finite field. [out] a The element. [out] is_zero The result of the check.
+
- Returns
- EpidStatus
- See also
- NewFiniteField +
- +NewFfElement
+
+
+
+
+
+
| EpidStatus FfMul | +( | +FiniteField * | +ff, | +
| + | + | FfElement const * | +a, | +
| + | + | FfElement const * | +b, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Multiplies two finite field elements.
+- Parameters
-
+
+
+[in] ff The finite field. [out] a The first operand to be multplied. [out] b The second operand to be multiplied. If ff is an extension field of a field F then this parameter may be an element of either ff or F. [out] r The result of multiplying a and b.
+
- Returns
- EpidStatus
- See also
- NewFiniteField +
- +NewFfElement
+
+
+
+
+
+
| EpidStatus FfMultiExp | +( | +FiniteField * | +ff, | +
| + | + | FfElement const ** | +a, | +
| + | + | BigNumStr const ** | +b, | +
| + | + | size_t | +m, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Multi-exponentiates finite field elements.
+Calculates FfExp(p[0],b[0]) * ... * FfExp(p[m-1],b[m-1]) for m > 1
+- Parameters
-
+
+
+[in] ff The finite field in which to perform the operation [in] a The bases. [in] b The powers. [in] m Number of entries in a and b. [out] r The result of raising each a to the corresponding power b and multiplying the results.
+
- Returns
- EpidStatus
- See also
- NewFiniteField +
- +NewFfElement
+
+
+
+
+
+
| EpidStatus FfMultiExpBn | +( | +FiniteField * | +ff, | +
| + | + | FfElement const ** | +a, | +
| + | + | BigNum const ** | +b, | +
| + | + | size_t | +m, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Multi-exponentiates finite field elements.
+Calculates FfExp(p[0],b[0]) * ... * FfExp(p[m-1],b[m-1]) for m > 1
+- Parameters
-
+
+
+[in] ff The finite field in which to perform the operation [in] a The bases. [in] b The powers. [in] m Number of entries in a and b. [out] r The result of raising each a to the corresponding power b and multiplying the results.
+
- Returns
- EpidStatus
- See also
- NewFiniteField +
- +NewFfElement
+
+
+
+
+
+
| EpidStatus FfNeg | +( | +FiniteField * | +ff, | +
| + | + | FfElement const * | +a, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Calculates the additive inverse of a finite field element.
+- Parameters
-
+
+
+[in] ff The finite field. [in] a The element. [out] r The inverted element.
+
- Returns
- EpidStatus
- See also
- NewFiniteField +
- +NewFfElement
+
+
+
+
+
+
| EpidStatus FfSqrt | +( | +FiniteField * | +ff, | +
| + | + | FfElement const * | +a, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Finds a square root of a finite field element.
+This function calculates the square root by the method of false position.
+- Parameters
-
+
+
+[in] ff The finite field in which to perform the operation [in] a The bases. [out] r The result of raising each a to the corresponding power b and multiplying the results.
+
- Return values
-
+
+
+kEpidMathQuadraticNonResidueError No square root could be found.
+
- Returns
- EpidStatus
- See also
- NewFiniteField +
- +NewFfElement
+
+
+
+
+
+
| EpidStatus FfSscmMultiExp | +( | +FiniteField * | +ff, | +
| + | + | FfElement const ** | +a, | +
| + | + | BigNumStr const ** | +b, | +
| + | + | size_t | +m, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Software side-channel mitigated implementation of FfMultiExp.
+Calculates FfExp(p[0],b[0]) * ... * FfExp(p[m-1],b[m-1]) for m > 1
+- Attention
- The reference implementation of FfSscmMultiExp calls FfMultiExp directly because the implementation of FfMultiExp is already side channel mitigated. Implementers providing their own versions of this function are responsible for ensuring that FfSscmMultiExp is side channel mitigated per section 8 of the Intel(R) EPID 2.0 spec.
- Parameters
-
+
+
+[in] ff The finite field in which to perform the operation. [in] a The bases. [in] b The powers. [in] m Number of entries in a and b. [out] r The result of raising each a to the corresponding power b and multiplying the results.
+
- Returns
- EpidStatus
- See also
- NewFiniteField +
- +NewFfElement
+
+
+
+
+
+
| EpidStatus FfSub | +( | +FiniteField * | +ff, | +
| + | + | FfElement const * | +a, | +
| + | + | FfElement const * | +b, | +
| + | + | FfElement * | +r | +
| + | ) | ++ |
+
+
+Subtracts two finite field elements.
+- Note
- Only needed for Intel(R) EPID 1.1 verification.
- Parameters
-
+
+
+[in] ff The finite field. [out] a The first operand to use in subtraction. [out] b The second operand to use in subtraction. [out] r The result of subtracting a and b.
+
- Returns
- EpidStatus
+
+
+
+
+
+
| EpidStatus InitFfElementFromBn | +( | +FiniteField * | +ff, | +
| + | + | BigNum * | +bn, | +
| + | + | FfElement * | +ff_elem | +
| + | ) | ++ |
+
+
+Initializes an existing FfElement from a BigNum.
+- Parameters
-
+
+
+[in] ff The finite field. Must be a Prime Field. [in] bn The value to read. [out] ff_elem The target FfElement.
+
- Returns
- EpidStatus
- See also
- NewFfElement +
- +WriteFfElement
+
+
+
+
+
+
| EpidStatus NewFfElement | +( | +FiniteField const * | +ff, | +
| + | + | FfElement ** | +new_ff_elem | +
| + | ) | ++ |
+
+
+Creates a new finite field element.
+Allocates memory and creates a new finite field element.
+Use DeleteFfElement() to free memory.
+- Parameters
-
+
+
+[in] ff The finite field. [out] new_ff_elem The Newly constructed finite field element.
+
- Returns
- EpidStatus
- See also
- NewFiniteField +
- +DeleteFfElement
+
+
+
+
+
+
| EpidStatus NewFiniteField | +( | +BigNumStr const * | +prime, | +
| + | + | FiniteField ** | +ff | +
| + | ) | ++ |
+
+
+Creates new finite field.
+Allocates memory and creates a new finite field GF(prime).
+Use DeleteFiniteField() to free memory.
+- Parameters
-
+
+
+[in] prime The order of the finite field. [out] ff The newly constructed finite field.
+
- Returns
- EpidStatus
- See also
- DeleteFiniteField
+
+
+
+
+
+
| EpidStatus NewFiniteFieldViaBinomalExtension | +( | +FiniteField const * | +ground_field, | +
| + | + | FfElement const * | +ground_element, | +
| + | + | int | +degree, | +
| + | + | FiniteField ** | +ff | +
| + | ) | ++ |
+
+
+Creates a new finite field using binomial extension.
+Allocates memory and creates a finite field using binomial extension.
+Use DeleteFiniteField() to free memory.
+- Parameters
-
+
+
+[in] ground_field The ground field. [in] ground_element The low-order term of the extension. [in] degree The degree of the extension. [out] ff The newly constructed finite field.
+
- Returns
- EpidStatus
- See also
- DeleteFiniteField
+
+
+
+
+
+
| EpidStatus NewFiniteFieldViaPolynomialExtension | +( | +FiniteField const * | +ground_field, | +
| + | + | BigNumStr const * | +irr_polynomial, | +
| + | + | int | +degree, | +
| + | + | FiniteField ** | +ff | +
| + | ) | ++ |
+
+
+Creates a new finite field using polynomial extension.
+Allocates memory and creates a finite field using polynomial extension.
+Use DeleteFiniteField() to free memory.
+- Note
- Only needed for Intel(R) EPID 1.1 verification.
- Parameters
-
+
+
+[in] ground_field The ground field. [in] irr_polynomial Array with coefficients of the irreducible polynomial. Number of elements must be equal to the degree of the extension. [in] degree The degree of the extension. [out] ff The newly constructed finite field.
+
- Returns
- EpidStatus
- See also
- DeleteFiniteField
+
+
+
+
+
+
| EpidStatus ReadFfElement | +( | +FiniteField * | +ff, | +
| + | + | void const * | +ff_elem_str, | +
| + | + | size_t | +strlen, | +
| + | + | FfElement * | +ff_elem | +
| + | ) | ++ |
+
+
+Deserializes a FfElement from a string.
+- Parameters
-
+
+
+[in] ff The finite field. [in] ff_elem_str The serialized value. [in] strlen The size of ff_elem_str in bytes. [out] ff_elem The target FfElement.
+
- Returns
- EpidStatus
- See also
- NewFfElement +
- +WriteFfElement
+
+
+
+
+
| EpidStatus WriteFfElement | +( | +FiniteField * | +ff, | +
| + | + | FfElement const * | +ff_elem, | +
| + | + | void * | +ff_elem_str, | +
| + | + | size_t | +strlen | +
| + | ) | ++ |
+
+
+Serializes a finite field element to a string.
+- Parameters
-
+
+
+[in] ff The finite field. [in] ff_elem The FfElement to be serialized. [out] ff_elem_str The target string. [in] strlen The size of ff_elem_str in bytes.
+
- Returns
- EpidStatus
- See also
- NewFfElement +
- +FpElemStr +
- +FqElemStr +
- +GtElemStr
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___hash_primitives.js b/external/epid-sdk-3.0.0/doc/html/group___hash_primitives.js
new file mode 100644
index 00000000..14b92829
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___hash_primitives.js
@@ -0,0 +1,7 @@
+var group___hash_primitives =
+[
+ [ "Sha256Digest", "struct_sha256_digest.html", [
+ [ "data", "struct_sha256_digest.html#a4b6462ddd3f89e4c40220ceb6b1c7f28", null ]
+ ] ],
+ [ "Sha256MessageDigest", "group___hash_primitives.html#ga86d62aac9efd7445acee311b41846c6c", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/group___pairing_primitives.html b/external/epid-sdk-3.0.0/doc/html/group___pairing_primitives.html
new file mode 100644
index 00000000..0ca3e2a5
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___pairing_primitives.html
@@ -0,0 +1,256 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Hash primitives. +More...
++Data Structures | |
| struct | Sha256Digest |
| SHA256 digest. More... | |
+Functions | |
| EpidStatus | Sha256MessageDigest (void const *msg, size_t len, Sha256Digest *digest) |
| Computes SHA256 digest of a message. More... | |
Detailed Description
+Hash primitives.
+Provides APIs for computing digests of messages.
+Function Documentation
+ +
+
+
+
+
+
| EpidStatus Sha256MessageDigest | +( | +void const * | +msg, | +
| + | + | size_t | +len, | +
| + | + | Sha256Digest * | +digest | +
| + | ) | ++ |
+
+
+Computes SHA256 digest of a message.
+- Parameters
-
+
+
+[in] msg Message to compute digest for. [in] len The size of msg in bytes. [out] digest The resulting message digest.
+
- Returns
- EpidStatus
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/group___pairing_primitives.js b/external/epid-sdk-3.0.0/doc/html/group___pairing_primitives.js
new file mode 100644
index 00000000..a594ea74
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/group___pairing_primitives.js
@@ -0,0 +1,8 @@
+var group___pairing_primitives =
+[
+ [ "EPID 1.1 specific pairing", "group___epid11_pairing_primitives.html", "group___epid11_pairing_primitives" ],
+ [ "PairingState", "group___pairing_primitives.html#ga3f1fa61d25487f96dfb0ffef4ad35607", null ],
+ [ "DeletePairingState", "group___pairing_primitives.html#gad54aebdc331d39b73000fdca9e04f94d", null ],
+ [ "NewPairingState", "group___pairing_primitives.html#ga29f79a645871830754d396b9b4a2a0cc", null ],
+ [ "Pairing", "group___pairing_primitives.html#ga5dd07d13536e27c37eaeee285297066c", null ]
+];
\ No newline at end of file
diff --git a/external/epid-sdk-3.0.0/doc/html/hash_8h.html b/external/epid-sdk-3.0.0/doc/html/hash_8h.html
new file mode 100644
index 00000000..1e6252ab
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/hash_8h.html
@@ -0,0 +1,102 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Pairing operations. +More...
++Modules | |
| EPID 1.1 specific pairing | |
| EPID 1.1 pairing operations. | |
+Typedefs | |
| +typedef struct PairingState | PairingState |
| A pairing. | |
+Functions | |
| EpidStatus | NewPairingState (EcGroup const *ga, EcGroup const *gb, FiniteField *ff, BigNumStr const *t, bool neg, PairingState **ps) |
| Constructs a new pairing state. More... | |
| void | DeletePairingState (PairingState **ps) |
| Frees a previously allocated by PairingState. More... | |
| EpidStatus | Pairing (PairingState *ps, FfElement *d, EcPoint const *a, EcPoint const *b) |
| Computes an Optimal Ate Pairing for two parameters. More... | |
Detailed Description
+Pairing operations.
+Provides APIs for defining and using a pairing relationship between two elliptic curve groups.
+Function Documentation
+ +
+
+
+
+
+
+
| void DeletePairingState | +( | +PairingState ** | +ps | ) | ++ |
+
+
+Frees a previously allocated by PairingState.
+Frees memory pointed to by pairing state. Nulls the pointer.
+- Parameters
-
+
+
+[in] ps The pairing state. Can be NULL.
+
- See also
- NewPairingState
+
+
+
+
+
+
| EpidStatus NewPairingState | +( | +EcGroup const * | +ga, | +
| + | + | EcGroup const * | +gb, | +
| + | + | FiniteField * | +ff, | +
| + | + | BigNumStr const * | +t, | +
| + | + | bool | +neg, | +
| + | + | PairingState ** | +ps | +
| + | ) | ++ |
+
+
+Constructs a new pairing state.
+Allocates memory and creates a new pairing state for Optimal Ate Pairing.
+Use DeletePairingState() to free memory.
+- Parameters
-
+
+
+[in] ga The EcGroup from which the first parameter of the pairing is taken. [in] gb The EcGroup from which the second parameter of the pairing is taken. [in] ff The result finite field. Must be a Fq12 field. [in] t A positive integer such that 6(t^2) == q - p, where p and q are parameters of G1. [in] neg Select the alternate "negate" processing path for Optimal Ate Pairing. [out] ps Newly constructed pairing state.
+
- Returns
- EpidStatus
- See also
- DeletePairingState
+
+
+
+
+
| EpidStatus Pairing | +( | +PairingState * | +ps, | +
| + | + | FfElement * | +d, | +
| + | + | EcPoint const * | +a, | +
| + | + | EcPoint const * | +b | +
| + | ) | ++ |
+
+
+Computes an Optimal Ate Pairing for two parameters.
+- Parameters
-
+
+
+[in] ps The pairing state. [out] d The result of the pairing. Will be in ff used to create the pairing state. [in] a The first value to pair. Must be in ga used to create ps. [in] b The second value to pair. Must be in gb used to create ps
+
- Returns
- EpidStatus
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/implementation__notes_8dox.html b/external/epid-sdk-3.0.0/doc/html/implementation__notes_8dox.html
new file mode 100644
index 00000000..a07d4bc7
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/implementation__notes_8dox.html
@@ -0,0 +1,82 @@
+
+
+
+
+
+
+
+
+
+
+
+
+hash.h File Reference
+
+
+
+
+
+Hash primitives. +More...
++Data Structures | |
| struct | Sha256Digest |
| SHA256 digest. More... | |
+Functions | |
| EpidStatus | Sha256MessageDigest (void const *msg, size_t len, Sha256Digest *digest) |
| Computes SHA256 digest of a message. More... | |
Detailed Description
+Hash primitives.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/index.html b/external/epid-sdk-3.0.0/doc/html/index.html
new file mode 100644
index 00000000..7b34b803
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/index.html
@@ -0,0 +1,78 @@
+
+
+
+
+
+
+
+
+
+
+
+doc/docsrc/implementation_notes.dox File Reference
+
+
+This file is used by Doxygen to generate documentation. +More...
+Detailed Description
+This file is used by Doxygen to generate documentation.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/issuer__material_8dox.html b/external/epid-sdk-3.0.0/doc/html/issuer__material_8dox.html
new file mode 100644
index 00000000..5a3a47e8
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/issuer__material_8dox.html
@@ -0,0 +1,82 @@
+
+
+
+
+
+
+
+
+
+
+
+Introducing the Intel® EPID SDK
+
+Intel® EPID is a cryptographic protocol which enables the remote authentication of a trusted platform whilst preserving the user's privacy.
+The Intel® EPID Software Development Kit provides an implementation of the Intel® EPID specification that developers can use when developing their own applications using Intel® EPID technology.
+
+
+
+
+
+
+
+
+
+
+
+|
+ Intel® Enhanced Privacy ID SDK
+ 3.0.0
+
+ |
+
+
+
+
+
+
+
diff --git a/external/epid-sdk-3.0.0/doc/html/jquery.js b/external/epid-sdk-3.0.0/doc/html/jquery.js
new file mode 100644
index 00000000..1f4d0b47
--- /dev/null
+++ b/external/epid-sdk-3.0.0/doc/html/jquery.js
@@ -0,0 +1,68 @@
+/*!
+ * jQuery JavaScript Library v1.7.1
+ * http://jquery.com/
+ *
+ * Copyright 2011, John Resig
+ * Dual licensed under the MIT or GPL Version 2 licenses.
+ * http://jquery.org/license
+ *
+ * Includes Sizzle.js
+ * http://sizzlejs.com/
+ * Copyright 2011, The Dojo Foundation
+ * Released under the MIT, BSD, and GPL Licenses.
+ *
+ * Date: Mon Nov 21 21:11:03 2011 -0500
+ */
+(function(bb,L){var av=bb.document,bu=bb.navigator,bl=bb.location;var b=(function(){var bF=function(b0,b1){return new bF.fn.init(b0,b1,bD)},bU=bb.jQuery,bH=bb.$,bD,bY=/^(?:[^#<]*(<[\w\W]+>)[^>]*$|#([\w\-]*)$)/,bM=/\S/,bI=/^\s+/,bE=/\s+$/,bA=/^<(\w+)\s*\/?>(?:<\/\1>)?$/,bN=/^[\],:{}\s]*$/,bW=/\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g,bP=/"[^"\\\n\r]*"|true|false|null|-?\d+(?:\.\d*)?(?:[eE][+\-]?\d+)?/g,bJ=/(?:^|:|,)(?:\s*\[)+/g,by=/(webkit)[ \/]([\w.]+)/,bR=/(opera)(?:.*version)?[ \/]([\w.]+)/,bQ=/(msie) ([\w.]+)/,bS=/(mozilla)(?:.*? rv:([\w.]+))?/,bB=/-([a-z]|[0-9])/ig,bZ=/^-ms-/,bT=function(b0,b1){return(b1+"").toUpperCase()},bX=bu.userAgent,bV,bC,e,bL=Object.prototype.toString,bG=Object.prototype.hasOwnProperty,bz=Array.prototype.push,bK=Array.prototype.slice,bO=String.prototype.trim,bv=Array.prototype.indexOf,bx={};bF.fn=bF.prototype={constructor:bF,init:function(b0,b4,b3){var b2,b5,b1,b6;if(!b0){return this}if(b0.nodeType){this.context=this[0]=b0;this.length=1;return this}if(b0==="body"&&!b4&&av.body){this.context=av;this[0]=av.body;this.selector=b0;this.length=1;return this}if(typeof b0==="string"){if(b0.charAt(0)==="<"&&b0.charAt(b0.length-1)===">"&&b0.length>=3){b2=[null,b0,null]}else{b2=bY.exec(b0)}if(b2&&(b2[1]||!b4)){if(b2[1]){b4=b4 instanceof bF?b4[0]:b4;b6=(b4?b4.ownerDocument||b4:av);b1=bA.exec(b0);if(b1){if(bF.isPlainObject(b4)){b0=[av.createElement(b1[1])];bF.fn.attr.call(b0,b4,true)}else{b0=[b6.createElement(b1[1])]}}else{b1=bF.buildFragment([b2[1]],[b6]);b0=(b1.cacheable?bF.clone(b1.fragment):b1.fragment).childNodes}return bF.merge(this,b0)}else{b5=av.getElementById(b2[2]);if(b5&&b5.parentNode){if(b5.id!==b2[2]){return b3.find(b0)}this.length=1;this[0]=b5}this.context=av;this.selector=b0;return this}}else{if(!b4||b4.jquery){return(b4||b3).find(b0)}else{return this.constructor(b4).find(b0)}}}else{if(bF.isFunction(b0)){return b3.ready(b0)}}if(b0.selector!==L){this.selector=b0.selector;this.context=b0.context}return bF.makeArray(b0,this)},selector:"",jquery:"1.7.1",length:0,size:function(){return this.length},toArray:function(){return bK.call(this,0)},get:function(b0){return b0==null?this.toArray():(b0<0?this[this.length+b0]:this[b0])},pushStack:function(b1,b3,b0){var b2=this.constructor();if(bF.isArray(b1)){bz.apply(b2,b1)}else{bF.merge(b2,b1)}b2.prevObject=this;b2.context=this.context;if(b3==="find"){b2.selector=this.selector+(this.selector?" ":"")+b0}else{if(b3){b2.selector=this.selector+"."+b3+"("+b0+")"}}return b2},each:function(b1,b0){return bF.each(this,b1,b0)},ready:function(b0){bF.bindReady();bC.add(b0);return this},eq:function(b0){b0=+b0;return b0===-1?this.slice(b0):this.slice(b0,b0+1)},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},slice:function(){return this.pushStack(bK.apply(this,arguments),"slice",bK.call(arguments).join(","))},map:function(b0){return this.pushStack(bF.map(this,function(b2,b1){return b0.call(b2,b1,b2)}))},end:function(){return this.prevObject||this.constructor(null)},push:bz,sort:[].sort,splice:[].splice};bF.fn.init.prototype=bF.fn;bF.extend=bF.fn.extend=function(){var b9,b2,b0,b1,b6,b7,b5=arguments[0]||{},b4=1,b3=arguments.length,b8=false;if(typeof b5==="boolean"){b8=b5;b5=arguments[1]||{};b4=2}if(typeof b5!=="object"&&!bF.isFunction(b5)){b5={}}if(b3===b4){b5=this;--b4}for(;b4
+
+
+
+doc/docsrc/issuer_material.dox File Reference
+
+
+This file is used by Doxygen to generate documentation. +More...
+Detailed Description
+This file is used by Doxygen to generate documentation.
+| t |
","
"]}b.fn.extend({text:function(e){if(b.isFunction(e)){return this.each(function(bw){var bv=b(this);bv.text(e.call(this,bw,bv.text()))})}if(typeof e!=="object"&&e!==L){return this.empty().append((this[0]&&this[0].ownerDocument||av).createTextNode(e))}return b.text(this)},wrapAll:function(e){if(b.isFunction(e)){return this.each(function(bw){b(this).wrapAll(e.call(this,bw))})}if(this[0]){var bv=b(e,this[0].ownerDocument).eq(0).clone(true);if(this[0].parentNode){bv.insertBefore(this[0])}bv.map(function(){var bw=this;while(bw.firstChild&&bw.firstChild.nodeType===1){bw=bw.firstChild}return bw}).append(this)}return this},wrapInner:function(e){if(b.isFunction(e)){return this.each(function(bv){b(this).wrapInner(e.call(this,bv))})}return this.each(function(){var bv=b(this),bw=bv.contents();if(bw.length){bw.wrapAll(e)}else{bv.append(e)}})},wrap:function(e){var bv=b.isFunction(e);return this.each(function(bw){b(this).wrapAll(bv?e.call(this,bw):e)})},unwrap:function(){return this.parent().each(function(){if(!b.nodeName(this,"body")){b(this).replaceWith(this.childNodes)}}).end()},append:function(){return this.domManip(arguments,true,function(e){if(this.nodeType===1){this.appendChild(e)}})},prepend:function(){return this.domManip(arguments,true,function(e){if(this.nodeType===1){this.insertBefore(e,this.firstChild)}})},before:function(){if(this[0]&&this[0].parentNode){return this.domManip(arguments,false,function(bv){this.parentNode.insertBefore(bv,this)})}else{if(arguments.length){var e=b.clean(arguments);e.push.apply(e,this.toArray());return this.pushStack(e,"before",arguments)}}},after:function(){if(this[0]&&this[0].parentNode){return this.domManip(arguments,false,function(bv){this.parentNode.insertBefore(bv,this.nextSibling)})}else{if(arguments.length){var e=this.pushStack(this,"after",arguments);e.push.apply(e,b.clean(arguments));return e}}},remove:function(e,bx){for(var bv=0,bw;(bw=this[bv])!=null;bv++){if(!e||b.filter(e,[bw]).length){if(!bx&&bw.nodeType===1){b.cleanData(bw.getElementsByTagName("*"));b.cleanData([bw])}if(bw.parentNode){bw.parentNode.removeChild(bw)}}}return this},empty:function(){for(var e=0,bv;(bv=this[e])!=null;e++){if(bv.nodeType===1){b.cleanData(bv.getElementsByTagName("*"))}while(bv.firstChild){bv.removeChild(bv.firstChild)}}return this},clone:function(bv,e){bv=bv==null?false:bv;e=e==null?bv:e;return this.map(function(){return b.clone(this,bv,e)})},html:function(bx){if(bx===L){return this[0]&&this[0].nodeType===1?this[0].innerHTML.replace(ag,""):null}else{if(typeof bx==="string"&&!ae.test(bx)&&(b.support.leadingWhitespace||!ar.test(bx))&&!ax[(d.exec(bx)||["",""])[1].toLowerCase()]){bx=bx.replace(R,"<$1>");try{for(var bw=0,bv=this.length;bw
');
+}
+
+function showSyncOn(n,relpath)
+{
+ n.html('
');
+}
+
+function toggleSyncButton(relpath)
+{
+ var navSync = $('#nav-sync');
+ if (navSync.hasClass('sync')) {
+ navSync.removeClass('sync');
+ showSyncOff(navSync,relpath);
+ storeLink(stripPath2(pathName())+hashUrl());
+ } else {
+ navSync.addClass('sync');
+ showSyncOn(navSync,relpath);
+ deleteLink();
+ }
+}
+
+function initNavTree(toroot,relpath)
+{
+ var o = new Object();
+ o.toroot = toroot;
+ o.node = new Object();
+ o.node.li = document.getElementById("nav-tree-contents");
+ o.node.childrenData = NAVTREE;
+ o.node.children = new Array();
+ o.node.childrenUL = document.createElement("ul");
+ o.node.getChildrenUL = function() { return o.node.childrenUL; };
+ o.node.li.appendChild(o.node.childrenUL);
+ o.node.depth = 0;
+ o.node.relpath = relpath;
+ o.node.expanded = false;
+ o.node.isLast = true;
+ o.node.plus_img = document.createElement("img");
+ o.node.plus_img.src = relpath+"arrowright.png";
+ o.node.plus_img.width = 16;
+ o.node.plus_img.height = 22;
+
+ if (localStorageSupported()) {
+ var navSync = $('#nav-sync');
+ if (cachedLink()) {
+ showSyncOff(navSync,relpath);
+ navSync.removeClass('sync');
+ } else {
+ showSyncOn(navSync,relpath);
+ }
+ navSync.click(function(){ toggleSyncButton(relpath); });
+ }
+
+ $(window).load(function(){
+ navTo(o,toroot,hashUrl(),relpath);
+ showRoot();
+ });
+
+ $(window).bind('hashchange', function(){
+ if (window.location.hash && window.location.hash.length>1){
+ var a;
+ if ($(location).attr('hash')){
+ var clslink=stripPath(pathName())+':'+hashValue();
+ a=$('.item a[class$="'+clslink.replace(/
+
+
+
+
+
+
+