pkcs11

type ContextLogFunc func(ctx context.Context, level LogLevel, message string, err error)

type LogFunc func(level LogLevel, message string, err error)

type LogLevel string

type Pkcs11 interface {
	GetPkcs11Context() *pkcs11.Ctx
	GetCurrentSlot() (slotID uint, exist bool)
	Initialize(ctx context.Context) error
	Finalize(ctx context.Context)

	// OpenSession creates a session and login an user.
	OpenSession(
		ctx context.Context,
		pin string,
	) (session pkcs11.SessionHandle, err error)
	// OpenSessionWithPartition creates a session for a partition, and login an user.
	OpenSessionWithSlot(
		ctx context.Context,
		slotID uint,
		pin string,
	) (session pkcs11.SessionHandle, err error)
	OpenSessionWithPartitionAndSlot(
		ctx context.Context,
		slotID uint,
		partitionID uint,
		pin string,
	) (session pkcs11.SessionHandle, err error)
	// CloseSession deletes a session and logout an user.
	CloseSession(ctx context.Context, session pkcs11.SessionHandle)
	// CloseSessionAll deletes all sessions.
	CloseSessionAll(ctx context.Context, slotID uint)
	// ReLogin does logout and re-login.
	ReLogin(ctx context.Context, session pkcs11.SessionHandle, pin string) error

	FindKeyByLabel(
		ctx context.Context,
		session pkcs11.SessionHandle,
		label string,
	) (key pkcs11.ObjectHandle, err error)
	GenerateSeed(
		ctx context.Context,
		session pkcs11.SessionHandle,
		label string,
		length uint,
	) (seedHandle pkcs11.ObjectHandle, err error)
	GenerateKeyPairWithCurve(
		ctx context.Context,
		session pkcs11.SessionHandle,
		mechanism *pkcs11.Mechanism,
		namedCurveOid []byte,
		keyType int,
		pubkeyLabel,
		privkeyLabel string,
		canExport bool,
	) (pubkeyHandle pkcs11.ObjectHandle, privkeyHandle pkcs11.ObjectHandle, err error)
	DestroyKey(
		ctx context.Context,
		session pkcs11.SessionHandle,
		keyHandle pkcs11.ObjectHandle,
	) error

	CreateXprivFromSeed(
		ctx context.Context,
		session pkcs11.SessionHandle,
		seedHandle pkcs11.ObjectHandle,
		xpubLabel,
		xprivLabel string,
		canExport bool,
	) (pubkeyHandle pkcs11.ObjectHandle, privkeyHandle pkcs11.ObjectHandle, err error)
	DeriveKeyPairWithBIP32(
		ctx context.Context,
		session pkcs11.SessionHandle,
		masterXprivHandle pkcs11.ObjectHandle,
		path []uint32,
		skLabel string,
	) (pubkeyHandle pkcs11.ObjectHandle, privkeyHandle pkcs11.ObjectHandle, err error)
	DeriveEcKey(
		ctx context.Context,
		session pkcs11.SessionHandle,
		basePrivkeyHandle pkcs11.ObjectHandle,
		data []byte,
		valueLen int,
	) (privkey []byte, err error)
	ImportEcKey(
		ctx context.Context,
		session pkcs11.SessionHandle,
		privkey []byte,
		label string,
		canExport bool,
	) (privkeyHandle pkcs11.ObjectHandle, err error)
	GenerateSignature(
		ctx context.Context,
		session pkcs11.SessionHandle,
		privkeyHandle pkcs11.ObjectHandle,
		mechanismType uint,
		message []byte,
	) (signature SignatureBytes, err error)

	GetPublicKey(
		ctx context.Context,
		session pkcs11.SessionHandle,
		pubkeyHandle pkcs11.ObjectHandle,
	) (pubkey PublicKeyBytes, err error)

	Verify(
		ctx context.Context,
		session pkcs11.SessionHandle,
		pubkeyHandle pkcs11.ObjectHandle,
		data []byte,
		signature []byte,
	) (err error)

	ImportSeed(
		ctx context.Context,
		session pkcs11.SessionHandle,
		seedBytes []byte,
		label string,
	) (seedHandle pkcs11.ObjectHandle, err error)
	ImportXpriv(
		ctx context.Context,
		session pkcs11.SessionHandle,
		xpriv,
		label string,
		canExport bool,
	) (xprivHandle pkcs11.ObjectHandle, err error)
	ExportXpriv(
		ctx context.Context,
		session pkcs11.SessionHandle,
		xprivHandle pkcs11.ObjectHandle,
	) (xpriv string, err error)
}

type PublicKeyBytes []byte

type SignatureBytes [64]byte