1 files changed, 1357 insertions, 0 deletions

diff --git a/pkcs11.h b/pkcs11.h
new file mode 100644
index 000000000..2cde5b3f4
--- /dev/null
+++ b/pkcs11.h
@@ -0,0 +1,1357 @@
+/* $OpenBSD: pkcs11.h,v 1.2 2010/02/24 06:12:53 djm Exp $ */
+/* pkcs11.h
+   Copyright 2006, 2007 g10 Code GmbH
+   Copyright 2006 Andreas Jellinghaus
+
+   This file is free software; as a special exception the author gives
+   unlimited permission to copy and/or distribute it, with or without
+   modifications, as long as this notice is preserved.
+
+   This file is distributed in the hope that it will be useful, but
+   WITHOUT ANY WARRANTY, to the extent permitted by law; without even
+   the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
+   PURPOSE.  */
+
+/* Please submit changes back to the Scute project at
+   http://www.scute.org/ (or send them to marcus@g10code.com), so that
+   they can be picked up by other projects from there as well.  */
+
+/* This file is a modified implementation of the PKCS #11 standard by
+   RSA Security Inc.  It is mostly a drop-in replacement, with the
+   following change:
+
+   This header file does not require any macro definitions by the user
+   (like CK_DEFINE_FUNCTION etc).  In fact, it defines those macros
+   for you (if useful, some are missing, let me know if you need
+   more).
+
+   There is an additional API available that does comply better to the
+   GNU coding standard.  It can be switched on by defining
+   CRYPTOKI_GNU before including this header file.  For this, the
+   following changes are made to the specification:
+
+   All structure types are changed to a "struct ck_foo" where CK_FOO
+   is the type name in PKCS #11.
+
+   All non-structure types are changed to ck_foo_t where CK_FOO is the
+   lowercase version of the type name in PKCS #11.  The basic types
+   (CK_ULONG et al.) are removed without substitute.
+
+   All members of structures are modified in the following way: Type
+   indication prefixes are removed, and underscore characters are
+   inserted before words.  Then the result is lowercased.
+
+   Note that function names are still in the original case, as they
+   need for ABI compatibility.
+
+   CK_FALSE, CK_TRUE and NULL_PTR are removed without substitute.  Use
+   <stdbool.h>.
+
+   If CRYPTOKI_COMPAT is defined before including this header file,
+   then none of the API changes above take place, and the API is the
+   one defined by the PKCS #11 standard.  */
+
+#ifndef PKCS11_H
+#define PKCS11_H 1
+
+#if defined(__cplusplus)
+extern "C" {
+#endif
+
+
+/* The version of cryptoki we implement.  The revision is changed with
+   each modification of this file.  If you do not use the "official"
+   version of this file, please consider deleting the revision macro
+   (you may use a macro with a different name to keep track of your
+   versions).  */
+#define CRYPTOKI_VERSION_MAJOR          2
+#define CRYPTOKI_VERSION_MINOR          20
+#define CRYPTOKI_VERSION_REVISION       6
+
+
+/* Compatibility interface is default, unless CRYPTOKI_GNU is
+   given.  */
+#ifndef CRYPTOKI_GNU
+#ifndef CRYPTOKI_COMPAT
+#define CRYPTOKI_COMPAT 1
+#endif
+#endif
+
+/* System dependencies.  */
+
+#if defined(_WIN32) || defined(CRYPTOKI_FORCE_WIN32)
+
+/* There is a matching pop below.  */
+#pragma pack(push, cryptoki, 1)
+
+#ifdef CRYPTOKI_EXPORTS
+#define CK_SPEC __declspec(dllexport)
+#else
+#define CK_SPEC __declspec(dllimport)
+#endif
+
+#else
+
+#define CK_SPEC
+
+#endif
+
+
+#ifdef CRYPTOKI_COMPAT
+  /* If we are in compatibility mode, switch all exposed names to the
+     PKCS #11 variant.  There are corresponding #undefs below.  */
+
+#define ck_flags_t CK_FLAGS
+#define ck_version _CK_VERSION
+
+#define ck_info _CK_INFO
+#define cryptoki_version cryptokiVersion
+#define manufacturer_id manufacturerID
+#define library_description libraryDescription
+#define library_version libraryVersion
+
+#define ck_notification_t CK_NOTIFICATION
+#define ck_slot_id_t CK_SLOT_ID
+
+#define ck_slot_info _CK_SLOT_INFO
+#define slot_description slotDescription
+#define hardware_version hardwareVersion
+#define firmware_version firmwareVersion
+
+#define ck_token_info _CK_TOKEN_INFO
+#define serial_number serialNumber
+#define max_session_count ulMaxSessionCount
+#define session_count ulSessionCount
+#define max_rw_session_count ulMaxRwSessionCount
+#define rw_session_count ulRwSessionCount
+#define max_pin_len ulMaxPinLen
+#define min_pin_len ulMinPinLen
+#define total_public_memory ulTotalPublicMemory
+#define free_public_memory ulFreePublicMemory
+#define total_private_memory ulTotalPrivateMemory
+#define free_private_memory ulFreePrivateMemory
+#define utc_time utcTime
+
+#define ck_session_handle_t CK_SESSION_HANDLE
+#define ck_user_type_t CK_USER_TYPE
+#define ck_state_t CK_STATE
+
+#define ck_session_info _CK_SESSION_INFO
+#define slot_id slotID
+#define device_error ulDeviceError
+
+#define ck_object_handle_t CK_OBJECT_HANDLE
+#define ck_object_class_t CK_OBJECT_CLASS
+#define ck_hw_feature_type_t CK_HW_FEATURE_TYPE
+#define ck_key_type_t CK_KEY_TYPE
+#define ck_certificate_type_t CK_CERTIFICATE_TYPE
+#define ck_attribute_type_t CK_ATTRIBUTE_TYPE
+
+#define ck_attribute _CK_ATTRIBUTE
+#define value pValue
+#define value_len ulValueLen
+
+#define ck_date _CK_DATE
+
+#define ck_mechanism_type_t CK_MECHANISM_TYPE
+
+#define ck_mechanism _CK_MECHANISM
+#define parameter pParameter
+#define parameter_len ulParameterLen
+
+#define ck_mechanism_info _CK_MECHANISM_INFO
+#define min_key_size ulMinKeySize
+#define max_key_size ulMaxKeySize
+
+#define ck_rv_t CK_RV
+#define ck_notify_t CK_NOTIFY
+
+#define ck_function_list _CK_FUNCTION_LIST
+
+#define ck_createmutex_t CK_CREATEMUTEX
+#define ck_destroymutex_t CK_DESTROYMUTEX
+#define ck_lockmutex_t CK_LOCKMUTEX
+#define ck_unlockmutex_t CK_UNLOCKMUTEX
+
+#define ck_c_initialize_args _CK_C_INITIALIZE_ARGS
+#define create_mutex CreateMutex
+#define destroy_mutex DestroyMutex
+#define lock_mutex LockMutex
+#define unlock_mutex UnlockMutex
+#define reserved pReserved
+
+#endif  /* CRYPTOKI_COMPAT */
+
+
+
+typedef unsigned long ck_flags_t;
+
+struct ck_version
+{
+  unsigned char major;
+  unsigned char minor;
+};
+
+
+struct ck_info
+{
+  struct ck_version cryptoki_version;
+  unsigned char manufacturer_id[32];
+  ck_flags_t flags;
+  unsigned char library_description[32];
+  struct ck_version library_version;
+};
+
+
+typedef unsigned long ck_notification_t;
+
+#define CKN_SURRENDER   (0)
+
+
+typedef unsigned long ck_slot_id_t;
+
+
+struct ck_slot_info
+{
+  unsigned char slot_description[64];
+  unsigned char manufacturer_id[32];
+  ck_flags_t flags;
+  struct ck_version hardware_version;
+  struct ck_version firmware_version;
+};
+
+
+#define CKF_TOKEN_PRESENT       (1 << 0)
+#define CKF_REMOVABLE_DEVICE    (1 << 1)
+#define CKF_HW_SLOT             (1 << 2)
+#define CKF_ARRAY_ATTRIBUTE     (1 << 30)
+
+
+struct ck_token_info
+{
+  unsigned char label[32];
+  unsigned char manufacturer_id[32];
+  unsigned char model[16];
+  unsigned char serial_number[16];
+  ck_flags_t flags;
+  unsigned long max_session_count;
+  unsigned long session_count;
+  unsigned long max_rw_session_count;
+  unsigned long rw_session_count;
+  unsigned long max_pin_len;
+  unsigned long min_pin_len;
+  unsigned long total_public_memory;
+  unsigned long free_public_memory;
+  unsigned long total_private_memory;
+  unsigned long free_private_memory;
+  struct ck_version hardware_version;
+  struct ck_version firmware_version;
+  unsigned char utc_time[16];
+};
+
+
+#define CKF_RNG                                 (1 << 0)
+#define CKF_WRITE_PROTECTED                     (1 << 1)
+#define CKF_LOGIN_REQUIRED                      (1 << 2)
+#define CKF_USER_PIN_INITIALIZED                (1 << 3)
+#define CKF_RESTORE_KEY_NOT_NEEDED              (1 << 5)
+#define CKF_CLOCK_ON_TOKEN                      (1 << 6)
+#define CKF_PROTECTED_AUTHENTICATION_PATH       (1 << 8)
+#define CKF_DUAL_CRYPTO_OPERATIONS              (1 << 9)
+#define CKF_TOKEN_INITIALIZED                   (1 << 10)
+#define CKF_SECONDARY_AUTHENTICATION            (1 << 11)
+#define CKF_USER_PIN_COUNT_LOW                  (1 << 16)
+#define CKF_USER_PIN_FINAL_TRY                  (1 << 17)
+#define CKF_USER_PIN_LOCKED                     (1 << 18)
+#define CKF_USER_PIN_TO_BE_CHANGED              (1 << 19)
+#define CKF_SO_PIN_COUNT_LOW                    (1 << 20)
+#define CKF_SO_PIN_FINAL_TRY                    (1 << 21)
+#define CKF_SO_PIN_LOCKED                       (1 << 22)
+#define CKF_SO_PIN_TO_BE_CHANGED                (1 << 23)
+
+#define CK_UNAVAILABLE_INFORMATION      ((unsigned long) -1)
+#define CK_EFFECTIVELY_INFINITE         (0)
+
+
+typedef unsigned long ck_session_handle_t;
+
+#define CK_INVALID_HANDLE       (0)
+
+
+typedef unsigned long ck_user_type_t;
+
+#define CKU_SO                  (0)
+#define CKU_USER                (1)
+#define CKU_CONTEXT_SPECIFIC    (2)
+
+
+typedef unsigned long ck_state_t;
+
+#define CKS_RO_PUBLIC_SESSION   (0)
+#define CKS_RO_USER_FUNCTIONS   (1)
+#define CKS_RW_PUBLIC_SESSION   (2)
+#define CKS_RW_USER_FUNCTIONS   (3)
+#define CKS_RW_SO_FUNCTIONS     (4)
+
+
+struct ck_session_info
+{
+  ck_slot_id_t slot_id;
+  ck_state_t state;
+  ck_flags_t flags;
+  unsigned long device_error;
+};
+
+#define CKF_RW_SESSION          (1 << 1)
+#define CKF_SERIAL_SESSION      (1 << 2)
+
+
+typedef unsigned long ck_object_handle_t;
+
+
+typedef unsigned long ck_object_class_t;
+
+#define CKO_DATA                (0)
+#define CKO_CERTIFICATE         (1)
+#define CKO_PUBLIC_KEY          (2)
+#define CKO_PRIVATE_KEY         (3)
+#define CKO_SECRET_KEY          (4)
+#define CKO_HW_FEATURE          (5)
+#define CKO_DOMAIN_PARAMETERS   (6)
+#define CKO_MECHANISM           (7)
+#define CKO_VENDOR_DEFINED      ((unsigned long) (1 << 31))
+
+
+typedef unsigned long ck_hw_feature_type_t;
+
+#define CKH_MONOTONIC_COUNTER   (1)
+#define CKH_CLOCK               (2)
+#define CKH_USER_INTERFACE      (3)
+#define CKH_VENDOR_DEFINED      ((unsigned long) (1 << 31))
+
+
+typedef unsigned long ck_key_type_t;
+
+#define CKK_RSA                 (0)
+#define CKK_DSA                 (1)
+#define CKK_DH                  (2)
+#define CKK_ECDSA               (3)
+#define CKK_EC                  (3)
+#define CKK_X9_42_DH            (4)
+#define CKK_KEA                 (5)
+#define CKK_GENERIC_SECRET      (0x10)
+#define CKK_RC2                 (0x11)
+#define CKK_RC4                 (0x12)
+#define CKK_DES                 (0x13)
+#define CKK_DES2                (0x14)
+#define CKK_DES3                (0x15)
+#define CKK_CAST                (0x16)
+#define CKK_CAST3               (0x17)
+#define CKK_CAST128             (0x18)
+#define CKK_RC5                 (0x19)
+#define CKK_IDEA                (0x1a)
+#define CKK_SKIPJACK            (0x1b)
+#define CKK_BATON               (0x1c)
+#define CKK_JUNIPER             (0x1d)
+#define CKK_CDMF                (0x1e)
+#define CKK_AES                 (0x1f)
+#define CKK_BLOWFISH            (0x20)
+#define CKK_TWOFISH             (0x21)
+#define CKK_VENDOR_DEFINED      ((unsigned long) (1 << 31))
+
+typedef unsigned long ck_certificate_type_t;
+
+#define CKC_X_509               (0)
+#define CKC_X_509_ATTR_CERT     (1)
+#define CKC_WTLS                (2)
+#define CKC_VENDOR_DEFINED      ((unsigned long) (1 << 31))
+
+
+typedef unsigned long ck_attribute_type_t;
+
+#define CKA_CLASS                       (0)
+#define CKA_TOKEN                       (1)
+#define CKA_PRIVATE                     (2)
+#define CKA_LABEL                       (3)
+#define CKA_APPLICATION                 (0x10)
+#define CKA_VALUE                       (0x11)
+#define CKA_OBJECT_ID                   (0x12)
+#define CKA_CERTIFICATE_TYPE            (0x80)
+#define CKA_ISSUER                      (0x81)
+#define CKA_SERIAL_NUMBER               (0x82)
+#define CKA_AC_ISSUER                   (0x83)
+#define CKA_OWNER                       (0x84)
+#define CKA_ATTR_TYPES                  (0x85)
+#define CKA_TRUSTED                     (0x86)
+#define CKA_CERTIFICATE_CATEGORY        (0x87)
+#define CKA_JAVA_MIDP_SECURITY_DOMAIN   (0x88)
+#define CKA_URL                         (0x89)
+#define CKA_HASH_OF_SUBJECT_PUBLIC_KEY  (0x8a)
+#define CKA_HASH_OF_ISSUER_PUBLIC_KEY   (0x8b)
+#define CKA_CHECK_VALUE                 (0x90)
+#define CKA_KEY_TYPE                    (0x100)
+#define CKA_SUBJECT                     (0x101)
+#define CKA_ID                          (0x102)
+#define CKA_SENSITIVE                   (0x103)
+#define CKA_ENCRYPT                     (0x104)
+#define CKA_DECRYPT                     (0x105)
+#define CKA_WRAP                        (0x106)
+#define CKA_UNWRAP                      (0x107)
+#define CKA_SIGN                        (0x108)
+#define CKA_SIGN_RECOVER                (0x109)
+#define CKA_VERIFY                      (0x10a)
+#define CKA_VERIFY_RECOVER              (0x10b)
+#define CKA_DERIVE                      (0x10c)
+#define CKA_START_DATE                  (0x110)
+#define CKA_END_DATE                    (0x111)
+#define CKA_MODULUS                     (0x120)
+#define CKA_MODULUS_BITS                (0x121)
+#define CKA_PUBLIC_EXPONENT             (0x122)
+#define CKA_PRIVATE_EXPONENT            (0x123)
+#define CKA_PRIME_1                     (0x124)
+#define CKA_PRIME_2                     (0x125)
+#define CKA_EXPONENT_1                  (0x126)
+#define CKA_EXPONENT_2                  (0x127)
+#define CKA_COEFFICIENT                 (0x128)
+#define CKA_PRIME                       (0x130)
+#define CKA_SUBPRIME                    (0x131)
+#define CKA_BASE                        (0x132)
+#define CKA_PRIME_BITS                  (0x133)
+#define CKA_SUB_PRIME_BITS              (0x134)
+#define CKA_VALUE_BITS                  (0x160)
+#define CKA_VALUE_LEN                   (0x161)
+#define CKA_EXTRACTABLE                 (0x162)
+#define CKA_LOCAL                       (0x163)
+#define CKA_NEVER_EXTRACTABLE           (0x164)
+#define CKA_ALWAYS_SENSITIVE            (0x165)
+#define CKA_KEY_GEN_MECHANISM           (0x166)
+#define CKA_MODIFIABLE                  (0x170)
+#define CKA_ECDSA_PARAMS                (0x180)
+#define CKA_EC_PARAMS                   (0x180)
+#define CKA_EC_POINT                    (0x181)
+#define CKA_SECONDARY_AUTH              (0x200)
+#define CKA_AUTH_PIN_FLAGS              (0x201)
+#define CKA_ALWAYS_AUTHENTICATE         (0x202)
+#define CKA_WRAP_WITH_TRUSTED           (0x210)
+#define CKA_HW_FEATURE_TYPE             (0x300)
+#define CKA_RESET_ON_INIT               (0x301)
+#define CKA_HAS_RESET                   (0x302)
+#define CKA_PIXEL_X                     (0x400)
+#define CKA_PIXEL_Y                     (0x401)
+#define CKA_RESOLUTION                  (0x402)
+#define CKA_CHAR_ROWS                   (0x403)
+#define CKA_CHAR_COLUMNS                (0x404)
+#define CKA_COLOR                       (0x405)
+#define CKA_BITS_PER_PIXEL              (0x406)
+#define CKA_CHAR_SETS                   (0x480)
+#define CKA_ENCODING_METHODS            (0x481)
+#define CKA_MIME_TYPES                  (0x482)
+#define CKA_MECHANISM_TYPE              (0x500)
+#define CKA_REQUIRED_CMS_ATTRIBUTES     (0x501)
+#define CKA_DEFAULT_CMS_ATTRIBUTES      (0x502)
+#define CKA_SUPPORTED_CMS_ATTRIBUTES    (0x503)
+#define CKA_WRAP_TEMPLATE               (CKF_ARRAY_ATTRIBUTE | 0x211)
+#define CKA_UNWRAP_TEMPLATE             (CKF_ARRAY_ATTRIBUTE | 0x212)
+#define CKA_ALLOWED_MECHANISMS          (CKF_ARRAY_ATTRIBUTE | 0x600)
+#define CKA_VENDOR_DEFINED              ((unsigned long) (1 << 31))
+
+
+struct ck_attribute
+{
+  ck_attribute_type_t type;
+  void *value;
+  unsigned long value_len;
+};
+
+
+struct ck_date
+{
+  unsigned char year[4];
+  unsigned char month[2];
+  unsigned char day[2];
+};
+
+
+typedef unsigned long ck_mechanism_type_t;
+
+#define CKM_RSA_PKCS_KEY_PAIR_GEN       (0)
+#define CKM_RSA_PKCS                    (1)
+#define CKM_RSA_9796                    (2)
+#define CKM_RSA_X_509                   (3)
+#define CKM_MD2_RSA_PKCS                (4)
+#define CKM_MD5_RSA_PKCS                (5)
+#define CKM_SHA1_RSA_PKCS               (6)
+#define CKM_RIPEMD128_RSA_PKCS          (7)
+#define CKM_RIPEMD160_RSA_PKCS          (8)
+#define CKM_RSA_PKCS_OAEP               (9)
+#define CKM_RSA_X9_31_KEY_PAIR_GEN      (0xa)
+#define CKM_RSA_X9_31                   (0xb)
+#define CKM_SHA1_RSA_X9_31              (0xc)
+#define CKM_RSA_PKCS_PSS                (0xd)
+#define CKM_SHA1_RSA_PKCS_PSS           (0xe)
+#define CKM_DSA_KEY_PAIR_GEN            (0x10)
+#define CKM_DSA                         (0x11)
+#define CKM_DSA_SHA1                    (0x12)
+#define CKM_DH_PKCS_KEY_PAIR_GEN        (0x20)
+#define CKM_DH_PKCS_DERIVE              (0x21)
+#define CKM_X9_42_DH_KEY_PAIR_GEN       (0x30)
+#define CKM_X9_42_DH_DERIVE             (0x31)
+#define CKM_X9_42_DH_HYBRID_DERIVE      (0x32)
+#define CKM_X9_42_MQV_DERIVE            (0x33)
+#define CKM_SHA256_RSA_PKCS             (0x40)
+#define CKM_SHA384_RSA_PKCS             (0x41)
+#define CKM_SHA512_RSA_PKCS             (0x42)
+#define CKM_SHA256_RSA_PKCS_PSS         (0x43)
+#define CKM_SHA384_RSA_PKCS_PSS         (0x44)
+#define CKM_SHA512_RSA_PKCS_PSS         (0x45)
+#define CKM_RC2_KEY_GEN                 (0x100)
+#define CKM_RC2_ECB                     (0x101)
+#define CKM_RC2_CBC                     (0x102)
+#define CKM_RC2_MAC                     (0x103)
+#define CKM_RC2_MAC_GENERAL             (0x104)
+#define CKM_RC2_CBC_PAD                 (0x105)
+#define CKM_RC4_KEY_GEN                 (0x110)
+#define CKM_RC4                         (0x111)
+#define CKM_DES_KEY_GEN                 (0x120)
+#define CKM_DES_ECB                     (0x121)
+#define CKM_DES_CBC                     (0x122)
+#define CKM_DES_MAC                     (0x123)
+#define CKM_DES_MAC_GENERAL             (0x124)
+#define CKM_DES_CBC_PAD                 (0x125)
+#define CKM_DES2_KEY_GEN                (0x130)
+#define CKM_DES3_KEY_GEN                (0x131)
+#define CKM_DES3_ECB                    (0x132)
+#define CKM_DES3_CBC                    (0x133)
+#define CKM_DES3_MAC                    (0x134)
+#define CKM_DES3_MAC_GENERAL            (0x135)
+#define CKM_DES3_CBC_PAD                (0x136)
+#define CKM_CDMF_KEY_GEN                (0x140)
+#define CKM_CDMF_ECB                    (0x141)
+#define CKM_CDMF_CBC                    (0x142)
+#define CKM_CDMF_MAC                    (0x143)
+#define CKM_CDMF_MAC_GENERAL            (0x144)
+#define CKM_CDMF_CBC_PAD                (0x145)
+#define CKM_MD2                         (0x200)
+#define CKM_MD2_HMAC                    (0x201)
+#define CKM_MD2_HMAC_GENERAL            (0x202)
+#define CKM_MD5                         (0x210)
+#define CKM_MD5_HMAC                    (0x211)
+#define CKM_MD5_HMAC_GENERAL            (0x212)
+#define CKM_SHA_1                       (0x220)
+#define CKM_SHA_1_HMAC                  (0x221)
+#define CKM_SHA_1_HMAC_GENERAL          (0x222)
+#define CKM_RIPEMD128                   (0x230)
+#define CKM_RIPEMD128_HMAC              (0x231)
+#define CKM_RIPEMD128_HMAC_GENERAL      (0x232)
+#define CKM_RIPEMD160                   (0x240)
+#define CKM_RIPEMD160_HMAC              (0x241)
+#define CKM_RIPEMD160_HMAC_GENERAL      (0x242)
+#define CKM_SHA256                      (0x250)
+#define CKM_SHA256_HMAC                 (0x251)
+#define CKM_SHA256_HMAC_GENERAL         (0x252)
+#define CKM_SHA384                      (0x260)
+#define CKM_SHA384_HMAC                 (0x261)
+#define CKM_SHA384_HMAC_GENERAL         (0x262)
+#define CKM_SHA512                      (0x270)
+#define CKM_SHA512_HMAC                 (0x271)
+#define CKM_SHA512_HMAC_GENERAL         (0x272)
+#define CKM_CAST_KEY_GEN                (0x300)
+#define CKM_CAST_ECB                    (0x301)
+#define CKM_CAST_CBC                    (0x302)
+#define CKM_CAST_MAC                    (0x303)
+#define CKM_CAST_MAC_GENERAL            (0x304)
+#define CKM_CAST_CBC_PAD                (0x305)
+#define CKM_CAST3_KEY_GEN               (0x310)
+#define CKM_CAST3_ECB                   (0x311)
+#define CKM_CAST3_CBC                   (0x312)
+#define CKM_CAST3_MAC                   (0x313)
+#define CKM_CAST3_MAC_GENERAL           (0x314)
+#define CKM_CAST3_CBC_PAD               (0x315)
+#define CKM_CAST5_KEY_GEN               (0x320)
+#define CKM_CAST128_KEY_GEN             (0x320)
+#define CKM_CAST5_ECB                   (0x321)
+#define CKM_CAST128_ECB                 (0x321)
+#define CKM_CAST5_CBC                   (0x322)
+#define CKM_CAST128_CBC                 (0x322)
+#define CKM_CAST5_MAC                   (0x323)
+#define CKM_CAST128_MAC                 (0x323)
+#define CKM_CAST5_MAC_GENERAL           (0x324)
+#define CKM_CAST128_MAC_GENERAL         (0x324)
+#define CKM_CAST5_CBC_PAD               (0x325)
+#define CKM_CAST128_CBC_PAD             (0x325)
+#define CKM_RC5_KEY_GEN                 (0x330)
+#define CKM_RC5_ECB                     (0x331)
+#define CKM_RC5_CBC                     (0x332)
+#define CKM_RC5_MAC                     (0x333)
+#define CKM_RC5_MAC_GENERAL             (0x334)
+#define CKM_RC5_CBC_PAD                 (0x335)
+#define CKM_IDEA_KEY_GEN                (0x340)
+#define CKM_IDEA_ECB                    (0x341)
+#define CKM_IDEA_CBC                    (0x342)
+#define CKM_IDEA_MAC                    (0x343)
+#define CKM_IDEA_MAC_GENERAL            (0x344)
+#define CKM_IDEA_CBC_PAD                (0x345)
+#define CKM_GENERIC_SECRET_KEY_GEN      (0x350)
+#define CKM_CONCATENATE_BASE_AND_KEY    (0x360)
+#define CKM_CONCATENATE_BASE_AND_DATA   (0x362)
+#define CKM_CONCATENATE_DATA_AND_BASE   (0x363)
+#define CKM_XOR_BASE_AND_DATA           (0x364)
+#define CKM_EXTRACT_KEY_FROM_KEY        (0x365)
+#define CKM_SSL3_PRE_MASTER_KEY_GEN     (0x370)
+#define CKM_SSL3_MASTER_KEY_DERIVE      (0x371)
+#define CKM_SSL3_KEY_AND_MAC_DERIVE     (0x372)
+#define CKM_SSL3_MASTER_KEY_DERIVE_DH   (0x373)
+#define CKM_TLS_PRE_MASTER_KEY_GEN      (0x374)
+#define CKM_TLS_MASTER_KEY_DERIVE       (0x375)
+#define CKM_TLS_KEY_AND_MAC_DERIVE      (0x376)
+#define CKM_TLS_MASTER_KEY_DERIVE_DH    (0x377)
+#define CKM_SSL3_MD5_MAC                (0x380)
+#define CKM_SSL3_SHA1_MAC               (0x381)
+#define CKM_MD5_KEY_DERIVATION          (0x390)
+#define CKM_MD2_KEY_DERIVATION          (0x391)
+#define CKM_SHA1_KEY_DERIVATION         (0x392)
+#define CKM_PBE_MD2_DES_CBC             (0x3a0)
+#define CKM_PBE_MD5_DES_CBC             (0x3a1)
+#define CKM_PBE_MD5_CAST_CBC            (0x3a2)
+#define CKM_PBE_MD5_CAST3_CBC           (0x3a3)
+#define CKM_PBE_MD5_CAST5_CBC           (0x3a4)
+#define CKM_PBE_MD5_CAST128_CBC         (0x3a4)
+#define CKM_PBE_SHA1_CAST5_CBC          (0x3a5)
+#define CKM_PBE_SHA1_CAST128_CBC        (0x3a5)
+#define CKM_PBE_SHA1_RC4_128            (0x3a6)
+#define CKM_PBE_SHA1_RC4_40             (0x3a7)
+#define CKM_PBE_SHA1_DES3_EDE_CBC       (0x3a8)
+#define CKM_PBE_SHA1_DES2_EDE_CBC       (0x3a9)
+#define CKM_PBE_SHA1_RC2_128_CBC        (0x3aa)
+#define CKM_PBE_SHA1_RC2_40_CBC         (0x3ab)
+#define CKM_PKCS5_PBKD2                 (0x3b0)
+#define CKM_PBA_SHA1_WITH_SHA1_HMAC     (0x3c0)
+#define CKM_KEY_WRAP_LYNKS              (0x400)
+#define CKM_KEY_WRAP_SET_OAEP           (0x401)
+#define CKM_SKIPJACK_KEY_GEN            (0x1000)
+#define CKM_SKIPJACK_ECB64              (0x1001)
+#define CKM_SKIPJACK_CBC64              (0x1002)
+#define CKM_SKIPJACK_OFB64              (0x1003)
+#define CKM_SKIPJACK_CFB64              (0x1004)
+#define CKM_SKIPJACK_CFB32              (0x1005)
+#define CKM_SKIPJACK_CFB16              (0x1006)
+#define CKM_SKIPJACK_CFB8               (0x1007)
+#define CKM_SKIPJACK_WRAP               (0x1008)
+#define CKM_SKIPJACK_PRIVATE_WRAP       (0x1009)
+#define CKM_SKIPJACK_RELAYX             (0x100a)
+#define CKM_KEA_KEY_PAIR_GEN            (0x1010)
+#define CKM_KEA_KEY_DERIVE              (0x1011)
+#define CKM_FORTEZZA_TIMESTAMP          (0x1020)
+#define CKM_BATON_KEY_GEN               (0x1030)
+#define CKM_BATON_ECB128                (0x1031)
+#define CKM_BATON_ECB96                 (0x1032)
+#define CKM_BATON_CBC128                (0x1033)
+#define CKM_BATON_COUNTER               (0x1034)
+#define CKM_BATON_SHUFFLE               (0x1035)
+#define CKM_BATON_WRAP                  (0x1036)
+#define CKM_ECDSA_KEY_PAIR_GEN          (0x1040)
+#define CKM_EC_KEY_PAIR_GEN             (0x1040)
+#define CKM_ECDSA                       (0x1041)
+#define CKM_ECDSA_SHA1                  (0x1042)
+#define CKM_ECDH1_DERIVE                (0x1050)
+#define CKM_ECDH1_COFACTOR_DERIVE       (0x1051)
+#define CKM_ECMQV_DERIVE                (0x1052)
+#define CKM_JUNIPER_KEY_GEN             (0x1060)
+#define CKM_JUNIPER_ECB128              (0x1061)
+#define CKM_JUNIPER_CBC128              (0x1062)
+#define CKM_JUNIPER_COUNTER             (0x1063)
+#define CKM_JUNIPER_SHUFFLE             (0x1064)
+#define CKM_JUNIPER_WRAP                (0x1065)
+#define CKM_FASTHASH                    (0x1070)
+#define CKM_AES_KEY_GEN                 (0x1080)
+#define CKM_AES_ECB                     (0x1081)
+#define CKM_AES_CBC                     (0x1082)
+#define CKM_AES_MAC                     (0x1083)
+#define CKM_AES_MAC_GENERAL             (0x1084)
+#define CKM_AES_CBC_PAD                 (0x1085)
+#define CKM_DSA_PARAMETER_GEN           (0x2000)
+#define CKM_DH_PKCS_PARAMETER_GEN       (0x2001)
+#define CKM_X9_42_DH_PARAMETER_GEN      (0x2002)
+#define CKM_VENDOR_DEFINED              ((unsigned long) (1 << 31))
+
+
+struct ck_mechanism
+{
+  ck_mechanism_type_t mechanism;
+  void *parameter;
+  unsigned long parameter_len;
+};
+
+
+struct ck_mechanism_info
+{
+  unsigned long min_key_size;
+  unsigned long max_key_size;
+  ck_flags_t flags;
+};
+
+#define CKF_HW                  (1 << 0)
+#define CKF_ENCRYPT             (1 << 8)
+#define CKF_DECRYPT             (1 << 9)
+#define CKF_DIGEST              (1 << 10)
+#define CKF_SIGN                (1 << 11)
+#define CKF_SIGN_RECOVER        (1 << 12)
+#define CKF_VERIFY              (1 << 13)
+#define CKF_VERIFY_RECOVER      (1 << 14)
+#define CKF_GENERATE            (1 << 15)
+#define CKF_GENERATE_KEY_PAIR   (1 << 16)
+#define CKF_WRAP                (1 << 17)
+#define CKF_UNWRAP              (1 << 18)
+#define CKF_DERIVE              (1 << 19)
+#define CKF_EXTENSION           ((unsigned long) (1 << 31))
+
+
+/* Flags for C_WaitForSlotEvent.  */
+#define CKF_DONT_BLOCK                          (1)
+
+
+typedef unsigned long ck_rv_t;
+
+
+typedef ck_rv_t (*ck_notify_t) (ck_session_handle_t session,
+                                ck_notification_t event, void *application);
+
+/* Forward reference.  */
+struct ck_function_list;
+
+#define _CK_DECLARE_FUNCTION(name, args)        \
+typedef ck_rv_t (*CK_ ## name) args;            \
+ck_rv_t CK_SPEC name args
+
+_CK_DECLARE_FUNCTION (C_Initialize, (void *init_args));
+_CK_DECLARE_FUNCTION (C_Finalize, (void *reserved));
+_CK_DECLARE_FUNCTION (C_GetInfo, (struct ck_info *info));
+_CK_DECLARE_FUNCTION (C_GetFunctionList,
+                      (struct ck_function_list **function_list));
+
+_CK_DECLARE_FUNCTION (C_GetSlotList,
+                      (unsigned char token_present, ck_slot_id_t *slot_list,
+                       unsigned long *count));
+_CK_DECLARE_FUNCTION (C_GetSlotInfo,
+                      (ck_slot_id_t slot_id, struct ck_slot_info *info));
+_CK_DECLARE_FUNCTION (C_GetTokenInfo,
+                      (ck_slot_id_t slot_id, struct ck_token_info *info));
+_CK_DECLARE_FUNCTION (C_WaitForSlotEvent,
+                      (ck_flags_t flags, ck_slot_id_t *slot, void *reserved));
+_CK_DECLARE_FUNCTION (C_GetMechanismList,
+                      (ck_slot_id_t slot_id,
+                       ck_mechanism_type_t *mechanism_list,
+                       unsigned long *count));
+_CK_DECLARE_FUNCTION (C_GetMechanismInfo,
+                      (ck_slot_id_t slot_id, ck_mechanism_type_t type,
+                       struct ck_mechanism_info *info));
+_CK_DECLARE_FUNCTION (C_InitToken,
+                      (ck_slot_id_t slot_id, unsigned char *pin,
+                       unsigned long pin_len, unsigned char *label));
+_CK_DECLARE_FUNCTION (C_InitPIN,
+                      (ck_session_handle_t session, unsigned char *pin,
+                       unsigned long pin_len));
+_CK_DECLARE_FUNCTION (C_SetPIN,
+                      (ck_session_handle_t session, unsigned char *old_pin,
+                       unsigned long old_len, unsigned char *new_pin,
+                       unsigned long new_len));
+
+_CK_DECLARE_FUNCTION (C_OpenSession,
+                      (ck_slot_id_t slot_id, ck_flags_t flags,
+                       void *application, ck_notify_t notify,
+                       ck_session_handle_t *session));
+_CK_DECLARE_FUNCTION (C_CloseSession, (ck_session_handle_t session));
+_CK_DECLARE_FUNCTION (C_CloseAllSessions, (ck_slot_id_t slot_id));
+_CK_DECLARE_FUNCTION (C_GetSessionInfo,
+                      (ck_session_handle_t session,
+                       struct ck_session_info *info));
+_CK_DECLARE_FUNCTION (C_GetOperationState,
+                      (ck_session_handle_t session,
+                       unsigned char *operation_state,
+                       unsigned long *operation_state_len));
+_CK_DECLARE_FUNCTION (C_SetOperationState,
+                      (ck_session_handle_t session,
+                       unsigned char *operation_state,
+                       unsigned long operation_state_len,
+                       ck_object_handle_t encryption_key,
+                       ck_object_handle_t authentiation_key));
+_CK_DECLARE_FUNCTION (C_Login,
+                      (ck_session_handle_t session, ck_user_type_t user_type,
+                       unsigned char *pin, unsigned long pin_len));
+_CK_DECLARE_FUNCTION (C_Logout, (ck_session_handle_t session));
+
+_CK_DECLARE_FUNCTION (C_CreateObject,
+                      (ck_session_handle_t session,
+                       struct ck_attribute *templ,
+                       unsigned long count, ck_object_handle_t *object));
+_CK_DECLARE_FUNCTION (C_CopyObject,
+                      (ck_session_handle_t session, ck_object_handle_t object,
+                       struct ck_attribute *templ, unsigned long count,
+                       ck_object_handle_t *new_object));
+_CK_DECLARE_FUNCTION (C_DestroyObject,
+                      (ck_session_handle_t session,
+                       ck_object_handle_t object));
+_CK_DECLARE_FUNCTION (C_GetObjectSize,
+                      (ck_session_handle_t session,
+                       ck_object_handle_t object,
+                       unsigned long *size));
+_CK_DECLARE_FUNCTION (C_GetAttributeValue,
+                      (ck_session_handle_t session,
+                       ck_object_handle_t object,
+                       struct ck_attribute *templ,
+                       unsigned long count));
+_CK_DECLARE_FUNCTION (C_SetAttributeValue,
+                      (ck_session_handle_t session,
+                       ck_object_handle_t object,
+                       struct ck_attribute *templ,
+                       unsigned long count));
+_CK_DECLARE_FUNCTION (C_FindObjectsInit,
+                      (ck_session_handle_t session,
+                       struct ck_attribute *templ,
+                       unsigned long count));
+_CK_DECLARE_FUNCTION (C_FindObjects,
+                      (ck_session_handle_t session,
+                       ck_object_handle_t *object,
+                       unsigned long max_object_count,
+                       unsigned long *object_count));
+_CK_DECLARE_FUNCTION (C_FindObjectsFinal,
+                      (ck_session_handle_t session));
+
+_CK_DECLARE_FUNCTION (C_EncryptInit,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism,
+                       ck_object_handle_t key));
+_CK_DECLARE_FUNCTION (C_Encrypt,
+                      (ck_session_handle_t session,
+                       unsigned char *data, unsigned long data_len,
+                       unsigned char *encrypted_data,
+                       unsigned long *encrypted_data_len));
+_CK_DECLARE_FUNCTION (C_EncryptUpdate,
+                      (ck_session_handle_t session,
+                       unsigned char *part, unsigned long part_len,
+                       unsigned char *encrypted_part,
+                       unsigned long *encrypted_part_len));
+_CK_DECLARE_FUNCTION (C_EncryptFinal,
+                      (ck_session_handle_t session,
+                       unsigned char *last_encrypted_part,
+                       unsigned long *last_encrypted_part_len));
+
+_CK_DECLARE_FUNCTION (C_DecryptInit,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism,
+                       ck_object_handle_t key));
+_CK_DECLARE_FUNCTION (C_Decrypt,
+                      (ck_session_handle_t session,
+                       unsigned char *encrypted_data,
+                       unsigned long encrypted_data_len,
+                       unsigned char *data, unsigned long *data_len));
+_CK_DECLARE_FUNCTION (C_DecryptUpdate,
+                      (ck_session_handle_t session,
+                       unsigned char *encrypted_part,
+                       unsigned long encrypted_part_len,
+                       unsigned char *part, unsigned long *part_len));
+_CK_DECLARE_FUNCTION (C_DecryptFinal,
+                      (ck_session_handle_t session,
+                       unsigned char *last_part,
+                       unsigned long *last_part_len));
+
+_CK_DECLARE_FUNCTION (C_DigestInit,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism));
+_CK_DECLARE_FUNCTION (C_Digest,
+                      (ck_session_handle_t session,
+                       unsigned char *data, unsigned long data_len,
+                       unsigned char *digest,
+                       unsigned long *digest_len));
+_CK_DECLARE_FUNCTION (C_DigestUpdate,
+                      (ck_session_handle_t session,
+                       unsigned char *part, unsigned long part_len));
+_CK_DECLARE_FUNCTION (C_DigestKey,
+                      (ck_session_handle_t session, ck_object_handle_t key));
+_CK_DECLARE_FUNCTION (C_DigestFinal,
+                      (ck_session_handle_t session,
+                       unsigned char *digest,
+                       unsigned long *digest_len));
+
+_CK_DECLARE_FUNCTION (C_SignInit,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism,
+                       ck_object_handle_t key));
+_CK_DECLARE_FUNCTION (C_Sign,
+                      (ck_session_handle_t session,
+                       unsigned char *data, unsigned long data_len,
+                       unsigned char *signature,
+                       unsigned long *signature_len));
+_CK_DECLARE_FUNCTION (C_SignUpdate,
+                      (ck_session_handle_t session,
+                       unsigned char *part, unsigned long part_len));
+_CK_DECLARE_FUNCTION (C_SignFinal,
+                      (ck_session_handle_t session,
+                       unsigned char *signature,
+                       unsigned long *signature_len));
+_CK_DECLARE_FUNCTION (C_SignRecoverInit,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism,
+                       ck_object_handle_t key));
+_CK_DECLARE_FUNCTION (C_SignRecover,
+                      (ck_session_handle_t session,
+                       unsigned char *data, unsigned long data_len,
+                       unsigned char *signature,
+                       unsigned long *signature_len));
+
+_CK_DECLARE_FUNCTION (C_VerifyInit,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism,
+                       ck_object_handle_t key));
+_CK_DECLARE_FUNCTION (C_Verify,
+                      (ck_session_handle_t session,
+                       unsigned char *data, unsigned long data_len,
+                       unsigned char *signature,
+                       unsigned long signature_len));
+_CK_DECLARE_FUNCTION (C_VerifyUpdate,
+                      (ck_session_handle_t session,
+                       unsigned char *part, unsigned long part_len));
+_CK_DECLARE_FUNCTION (C_VerifyFinal,
+                      (ck_session_handle_t session,
+                       unsigned char *signature,
+                       unsigned long signature_len));
+_CK_DECLARE_FUNCTION (C_VerifyRecoverInit,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism,
+                       ck_object_handle_t key));
+_CK_DECLARE_FUNCTION (C_VerifyRecover,
+                      (ck_session_handle_t session,
+                       unsigned char *signature,
+                       unsigned long signature_len,
+                       unsigned char *data,
+                       unsigned long *data_len));
+
+_CK_DECLARE_FUNCTION (C_DigestEncryptUpdate,
+                      (ck_session_handle_t session,
+                       unsigned char *part, unsigned long part_len,
+                       unsigned char *encrypted_part,
+                       unsigned long *encrypted_part_len));
+_CK_DECLARE_FUNCTION (C_DecryptDigestUpdate,
+                      (ck_session_handle_t session,
+                       unsigned char *encrypted_part,
+                       unsigned long encrypted_part_len,
+                       unsigned char *part,
+                       unsigned long *part_len));
+_CK_DECLARE_FUNCTION (C_SignEncryptUpdate,
+                      (ck_session_handle_t session,
+                       unsigned char *part, unsigned long part_len,
+                       unsigned char *encrypted_part,
+                       unsigned long *encrypted_part_len));
+_CK_DECLARE_FUNCTION (C_DecryptVerifyUpdate,
+                      (ck_session_handle_t session,
+                       unsigned char *encrypted_part,
+                       unsigned long encrypted_part_len,
+                       unsigned char *part,
+                       unsigned long *part_len));
+
+_CK_DECLARE_FUNCTION (C_GenerateKey,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism,
+                       struct ck_attribute *templ,
+                       unsigned long count,
+                       ck_object_handle_t *key));
+_CK_DECLARE_FUNCTION (C_GenerateKeyPair,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism,
+                       struct ck_attribute *public_key_template,
+                       unsigned long public_key_attribute_count,
+                       struct ck_attribute *private_key_template,
+                       unsigned long private_key_attribute_count,
+                       ck_object_handle_t *public_key,
+                       ck_object_handle_t *private_key));
+_CK_DECLARE_FUNCTION (C_WrapKey,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism,
+                       ck_object_handle_t wrapping_key,
+                       ck_object_handle_t key,
+                       unsigned char *wrapped_key,
+                       unsigned long *wrapped_key_len));
+_CK_DECLARE_FUNCTION (C_UnwrapKey,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism,
+                       ck_object_handle_t unwrapping_key,
+                       unsigned char *wrapped_key,
+                       unsigned long wrapped_key_len,
+                       struct ck_attribute *templ,
+                       unsigned long attribute_count,
+                       ck_object_handle_t *key));
+_CK_DECLARE_FUNCTION (C_DeriveKey,
+                      (ck_session_handle_t session,
+                       struct ck_mechanism *mechanism,
+                       ck_object_handle_t base_key,
+                       struct ck_attribute *templ,
+                       unsigned long attribute_count,
+                       ck_object_handle_t *key));
+
+_CK_DECLARE_FUNCTION (C_SeedRandom,
+                      (ck_session_handle_t session, unsigned char *seed,
+                       unsigned long seed_len));
+_CK_DECLARE_FUNCTION (C_GenerateRandom,
+                      (ck_session_handle_t session,
+                       unsigned char *random_data,
+                       unsigned long random_len));
+
+_CK_DECLARE_FUNCTION (C_GetFunctionStatus, (ck_session_handle_t session));
+_CK_DECLARE_FUNCTION (C_CancelFunction, (ck_session_handle_t session));
+
+
+struct ck_function_list
+{
+  struct ck_version version;
+  CK_C_Initialize C_Initialize;
+  CK_C_Finalize C_Finalize;
+  CK_C_GetInfo C_GetInfo;
+  CK_C_GetFunctionList C_GetFunctionList;
+  CK_C_GetSlotList C_GetSlotList;
+  CK_C_GetSlotInfo C_GetSlotInfo;
+  CK_C_GetTokenInfo C_GetTokenInfo;
+  CK_C_GetMechanismList C_GetMechanismList;
+  CK_C_GetMechanismInfo C_GetMechanismInfo;
+  CK_C_InitToken C_InitToken;
+  CK_C_InitPIN C_InitPIN;
+  CK_C_SetPIN C_SetPIN;
+  CK_C_OpenSession C_OpenSession;
+  CK_C_CloseSession C_CloseSession;
+  CK_C_CloseAllSessions C_CloseAllSessions;
+  CK_C_GetSessionInfo C_GetSessionInfo;
+  CK_C_GetOperationState C_GetOperationState;
+  CK_C_SetOperationState C_SetOperationState;
+  CK_C_Login C_Login;
+  CK_C_Logout C_Logout;
+  CK_C_CreateObject C_CreateObject;
+  CK_C_CopyObject C_CopyObject;
+  CK_C_DestroyObject C_DestroyObject;
+  CK_C_GetObjectSize C_GetObjectSize;
+  CK_C_GetAttributeValue C_GetAttributeValue;
+  CK_C_SetAttributeValue C_SetAttributeValue;
+  CK_C_FindObjectsInit C_FindObjectsInit;
+  CK_C_FindObjects C_FindObjects;
+  CK_C_FindObjectsFinal C_FindObjectsFinal;
+  CK_C_EncryptInit C_EncryptInit;
+  CK_C_Encrypt C_Encrypt;
+  CK_C_EncryptUpdate C_EncryptUpdate;
+  CK_C_EncryptFinal C_EncryptFinal;
+  CK_C_DecryptInit C_DecryptInit;
+  CK_C_Decrypt C_Decrypt;
+  CK_C_DecryptUpdate C_DecryptUpdate;
+  CK_C_DecryptFinal C_DecryptFinal;
+  CK_C_DigestInit C_DigestInit;
+  CK_C_Digest C_Digest;
+  CK_C_DigestUpdate C_DigestUpdate;
+  CK_C_DigestKey C_DigestKey;
+  CK_C_DigestFinal C_DigestFinal;
+  CK_C_SignInit C_SignInit;
+  CK_C_Sign C_Sign;
+  CK_C_SignUpdate C_SignUpdate;
+  CK_C_SignFinal C_SignFinal;
+  CK_C_SignRecoverInit C_SignRecoverInit;
+  CK_C_SignRecover C_SignRecover;
+  CK_C_VerifyInit C_VerifyInit;
+  CK_C_Verify C_Verify;
+  CK_C_VerifyUpdate C_VerifyUpdate;
+  CK_C_VerifyFinal C_VerifyFinal;
+  CK_C_VerifyRecoverInit C_VerifyRecoverInit;
+  CK_C_VerifyRecover C_VerifyRecover;
+  CK_C_DigestEncryptUpdate C_DigestEncryptUpdate;
+  CK_C_DecryptDigestUpdate C_DecryptDigestUpdate;
+  CK_C_SignEncryptUpdate C_SignEncryptUpdate;
+  CK_C_DecryptVerifyUpdate C_DecryptVerifyUpdate;
+  CK_C_GenerateKey C_GenerateKey;
+  CK_C_GenerateKeyPair C_GenerateKeyPair;
+  CK_C_WrapKey C_WrapKey;
+  CK_C_UnwrapKey C_UnwrapKey;
+  CK_C_DeriveKey C_DeriveKey;
+  CK_C_SeedRandom C_SeedRandom;
+  CK_C_GenerateRandom C_GenerateRandom;
+  CK_C_GetFunctionStatus C_GetFunctionStatus;
+  CK_C_CancelFunction C_CancelFunction;
+  CK_C_WaitForSlotEvent C_WaitForSlotEvent;
+};
+
+
+typedef ck_rv_t (*ck_createmutex_t) (void **mutex);
+typedef ck_rv_t (*ck_destroymutex_t) (void *mutex);
+typedef ck_rv_t (*ck_lockmutex_t) (void *mutex);
+typedef ck_rv_t (*ck_unlockmutex_t) (void *mutex);
+
+
+struct ck_c_initialize_args
+{
+  ck_createmutex_t create_mutex;
+  ck_destroymutex_t destroy_mutex;
+  ck_lockmutex_t lock_mutex;
+  ck_unlockmutex_t unlock_mutex;
+  ck_flags_t flags;
+  void *reserved;
+};
+
+
+#define CKF_LIBRARY_CANT_CREATE_OS_THREADS      (1 << 0)
+#define CKF_OS_LOCKING_OK                       (1 << 1)
+
+#define CKR_OK                                  (0)
+#define CKR_CANCEL                              (1)
+#define CKR_HOST_MEMORY                         (2)
+#define CKR_SLOT_ID_INVALID                     (3)
+#define CKR_GENERAL_ERROR                       (5)
+#define CKR_FUNCTION_FAILED                     (6)
+#define CKR_ARGUMENTS_BAD                       (7)
+#define CKR_NO_EVENT                            (8)
+#define CKR_NEED_TO_CREATE_THREADS              (9)
+#define CKR_CANT_LOCK                           (0xa)
+#define CKR_ATTRIBUTE_READ_ONLY                 (0x10)
+#define CKR_ATTRIBUTE_SENSITIVE                 (0x11)
+#define CKR_ATTRIBUTE_TYPE_INVALID              (0x12)
+#define CKR_ATTRIBUTE_VALUE_INVALID             (0x13)
+#define CKR_DATA_INVALID                        (0x20)
+#define CKR_DATA_LEN_RANGE                      (0x21)
+#define CKR_DEVICE_ERROR                        (0x30)
+#define CKR_DEVICE_MEMORY                       (0x31)
+#define CKR_DEVICE_REMOVED                      (0x32)
+#define CKR_ENCRYPTED_DATA_INVALID              (0x40)
+#define CKR_ENCRYPTED_DATA_LEN_RANGE            (0x41)
+#define CKR_FUNCTION_CANCELED                   (0x50)
+#define CKR_FUNCTION_NOT_PARALLEL               (0x51)
+#define CKR_FUNCTION_NOT_SUPPORTED              (0x54)
+#define CKR_KEY_HANDLE_INVALID                  (0x60)
+#define CKR_KEY_SIZE_RANGE                      (0x62)
+#define CKR_KEY_TYPE_INCONSISTENT               (0x63)
+#define CKR_KEY_NOT_NEEDED                      (0x64)
+#define CKR_KEY_CHANGED                         (0x65)
+#define CKR_KEY_NEEDED                          (0x66)
+#define CKR_KEY_INDIGESTIBLE                    (0x67)
+#define CKR_KEY_FUNCTION_NOT_PERMITTED          (0x68)
+#define CKR_KEY_NOT_WRAPPABLE                   (0x69)
+#define CKR_KEY_UNEXTRACTABLE                   (0x6a)
+#define CKR_MECHANISM_INVALID                   (0x70)
+#define CKR_MECHANISM_PARAM_INVALID             (0x71)
+#define CKR_OBJECT_HANDLE_INVALID               (0x82)
+#define CKR_OPERATION_ACTIVE                    (0x90)
+#define CKR_OPERATION_NOT_INITIALIZED           (0x91)
+#define CKR_PIN_INCORRECT                       (0xa0)
+#define CKR_PIN_INVALID                         (0xa1)
+#define CKR_PIN_LEN_RANGE                       (0xa2)
+#define CKR_PIN_EXPIRED                         (0xa3)
+#define CKR_PIN_LOCKED                          (0xa4)
+#define CKR_SESSION_CLOSED                      (0xb0)
+#define CKR_SESSION_COUNT                       (0xb1)
+#define CKR_SESSION_HANDLE_INVALID              (0xb3)
+#define CKR_SESSION_PARALLEL_NOT_SUPPORTED      (0xb4)
+#define CKR_SESSION_READ_ONLY                   (0xb5)
+#define CKR_SESSION_EXISTS                      (0xb6)
+#define CKR_SESSION_READ_ONLY_EXISTS            (0xb7)
+#define CKR_SESSION_READ_WRITE_SO_EXISTS        (0xb8)
+#define CKR_SIGNATURE_INVALID                   (0xc0)
+#define CKR_SIGNATURE_LEN_RANGE                 (0xc1)
+#define CKR_TEMPLATE_INCOMPLETE                 (0xd0)
+#define CKR_TEMPLATE_INCONSISTENT               (0xd1)
+#define CKR_TOKEN_NOT_PRESENT                   (0xe0)
+#define CKR_TOKEN_NOT_RECOGNIZED                (0xe1)
+#define CKR_TOKEN_WRITE_PROTECTED               (0xe2)
+#define CKR_UNWRAPPING_KEY_HANDLE_INVALID       (0xf0)
+#define CKR_UNWRAPPING_KEY_SIZE_RANGE           (0xf1)
+#define CKR_UNWRAPPING_KEY_TYPE_INCONSISTENT    (0xf2)
+#define CKR_USER_ALREADY_LOGGED_IN              (0x100)
+#define CKR_USER_NOT_LOGGED_IN                  (0x101)
+#define CKR_USER_PIN_NOT_INITIALIZED            (0x102)
+#define CKR_USER_TYPE_INVALID                   (0x103)
+#define CKR_USER_ANOTHER_ALREADY_LOGGED_IN      (0x104)
+#define CKR_USER_TOO_MANY_TYPES                 (0x105)
+#define CKR_WRAPPED_KEY_INVALID                 (0x110)
+#define CKR_WRAPPED_KEY_LEN_RANGE               (0x112)
+#define CKR_WRAPPING_KEY_HANDLE_INVALID         (0x113)
+#define CKR_WRAPPING_KEY_SIZE_RANGE             (0x114)
+#define CKR_WRAPPING_KEY_TYPE_INCONSISTENT      (0x115)
+#define CKR_RANDOM_SEED_NOT_SUPPORTED           (0x120)
+#define CKR_RANDOM_NO_RNG                       (0x121)
+#define CKR_DOMAIN_PARAMS_INVALID               (0x130)
+#define CKR_BUFFER_TOO_SMALL                    (0x150)
+#define CKR_SAVED_STATE_INVALID                 (0x160)
+#define CKR_INFORMATION_SENSITIVE               (0x170)
+#define CKR_STATE_UNSAVEABLE                    (0x180)
+#define CKR_CRYPTOKI_NOT_INITIALIZED            (0x190)
+#define CKR_CRYPTOKI_ALREADY_INITIALIZED        (0x191)
+#define CKR_MUTEX_BAD                           (0x1a0)
+#define CKR_MUTEX_NOT_LOCKED                    (0x1a1)
+#define CKR_FUNCTION_REJECTED                   (0x200)
+#define CKR_VENDOR_DEFINED                      ((unsigned long) (1 << 31))
+
+
+
+/* Compatibility layer.  */
+
+#ifdef CRYPTOKI_COMPAT
+
+#undef CK_DEFINE_FUNCTION
+#define CK_DEFINE_FUNCTION(retval, name) retval CK_SPEC name
+
+/* For NULL.  */
+#include <stddef.h>
+
+typedef unsigned char CK_BYTE;
+typedef unsigned char CK_CHAR;
+typedef unsigned char CK_UTF8CHAR;
+typedef unsigned char CK_BBOOL;
+typedef unsigned long int CK_ULONG;
+typedef long int CK_LONG;
+typedef CK_BYTE *CK_BYTE_PTR;
+typedef CK_CHAR *CK_CHAR_PTR;
+typedef CK_UTF8CHAR *CK_UTF8CHAR_PTR;
+typedef CK_ULONG *CK_ULONG_PTR;
+typedef void *CK_VOID_PTR;
+typedef void **CK_VOID_PTR_PTR;
+#define CK_FALSE 0
+#define CK_TRUE 1
+#ifndef CK_DISABLE_TRUE_FALSE
+#ifndef FALSE
+#define FALSE 0
+#endif
+#ifndef TRUE
+#define TRUE 1
+#endif
+#endif
+
+typedef struct ck_version CK_VERSION;
+typedef struct ck_version *CK_VERSION_PTR;
+
+typedef struct ck_info CK_INFO;
+typedef struct ck_info *CK_INFO_PTR;
+
+typedef ck_slot_id_t *CK_SLOT_ID_PTR;
+
+typedef struct ck_slot_info CK_SLOT_INFO;
+typedef struct ck_slot_info *CK_SLOT_INFO_PTR;
+
+typedef struct ck_token_info CK_TOKEN_INFO;
+typedef struct ck_token_info *CK_TOKEN_INFO_PTR;
+
+typedef ck_session_handle_t *CK_SESSION_HANDLE_PTR;
+
+typedef struct ck_session_info CK_SESSION_INFO;
+typedef struct ck_session_info *CK_SESSION_INFO_PTR;
+
+typedef ck_object_handle_t *CK_OBJECT_HANDLE_PTR;
+
+typedef ck_object_class_t *CK_OBJECT_CLASS_PTR;
+
+typedef struct ck_attribute CK_ATTRIBUTE;
+typedef struct ck_attribute *CK_ATTRIBUTE_PTR;
+
+typedef struct ck_date CK_DATE;
+typedef struct ck_date *CK_DATE_PTR;
+
+typedef ck_mechanism_type_t *CK_MECHANISM_TYPE_PTR;
+
+typedef struct ck_mechanism CK_MECHANISM;
+typedef struct ck_mechanism *CK_MECHANISM_PTR;
+
+typedef struct ck_mechanism_info CK_MECHANISM_INFO;
+typedef struct ck_mechanism_info *CK_MECHANISM_INFO_PTR;
+
+typedef struct ck_function_list CK_FUNCTION_LIST;
+typedef struct ck_function_list *CK_FUNCTION_LIST_PTR;
+typedef struct ck_function_list **CK_FUNCTION_LIST_PTR_PTR;
+
+typedef struct ck_c_initialize_args CK_C_INITIALIZE_ARGS;
+typedef struct ck_c_initialize_args *CK_C_INITIALIZE_ARGS_PTR;
+
+#define NULL_PTR NULL
+
+/* Delete the helper macros defined at the top of the file.  */
+#undef ck_flags_t
+#undef ck_version
+
+#undef ck_info
+#undef cryptoki_version
+#undef manufacturer_id
+#undef library_description
+#undef library_version
+
+#undef ck_notification_t
+#undef ck_slot_id_t
+
+#undef ck_slot_info
+#undef slot_description
+#undef hardware_version
+#undef firmware_version
+
+#undef ck_token_info
+#undef serial_number
+#undef max_session_count
+#undef session_count
+#undef max_rw_session_count
+#undef rw_session_count
+#undef max_pin_len
+#undef min_pin_len
+#undef total_public_memory
+#undef free_public_memory
+#undef total_private_memory
+#undef free_private_memory
+#undef utc_time
+
+#undef ck_session_handle_t
+#undef ck_user_type_t
+#undef ck_state_t
+
+#undef ck_session_info
+#undef slot_id
+#undef device_error
+
+#undef ck_object_handle_t
+#undef ck_object_class_t
+#undef ck_hw_feature_type_t
+#undef ck_key_type_t
+#undef ck_certificate_type_t
+#undef ck_attribute_type_t
+
+#undef ck_attribute
+#undef value
+#undef value_len
+
+#undef ck_date
+
+#undef ck_mechanism_type_t
+
+#undef ck_mechanism
+#undef parameter
+#undef parameter_len
+
+#undef ck_mechanism_info
+#undef min_key_size
+#undef max_key_size
+
+#undef ck_rv_t
+#undef ck_notify_t
+
+#undef ck_function_list
+
+#undef ck_createmutex_t
+#undef ck_destroymutex_t
+#undef ck_lockmutex_t
+#undef ck_unlockmutex_t
+
+#undef ck_c_initialize_args
+#undef create_mutex
+#undef destroy_mutex
+#undef lock_mutex
+#undef unlock_mutex
+#undef reserved
+
+#endif  /* CRYPTOKI_COMPAT */
+
+
+/* System dependencies.  */
+#if defined(_WIN32) || defined(CRYPTOKI_FORCE_WIN32)
+#pragma pack(pop, cryptoki)
+#endif
+
+#if defined(__cplusplus)
+}
+#endif
+
+#endif  /* PKCS11_H */