derive_key.go

package certex

/*
#include <stdlib.h>
#include <dlfcn.h>
#include <unistd.h>
#include <stdio.h>

#include "./headers/cryptoki.h"
#include "./headers/pkcs11def.h"
#include "./headers/pkcs11t.h"
#include "./headers/PKICertexHSM.h"

CK_RV derive_key(CK_FUNCTION_LIST_PTR fl, CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanism, CK_OBJECT_HANDLE hBaseKey,
	CK_ATTRIBUTE_PTR pTemplate, CK_ULONG ulAttributeCount, CK_OBJECT_HANDLE_PTR phKey) {
	return (*fl->C_DeriveKey)(hSession, pMechanism, hBaseKey, pTemplate, ulAttributeCount, phKey);
}
*/
import "C"
import "fmt"

// Derives a key from a base key, creating a new key object.
func (o *Object) DeriveKey(m *Mechanism, a []*Attribute) (Object, error) {
	var newKey C.CK_OBJECT_HANDLE
	attrArena, caa, caalen := cAttribute(a)
	defer attrArena.Free()
	mechArena, mech := cMechanism(m)
	defer mechArena.Free()
	if rv := C.derive_key(o.fl, o.h, mech, o.o, caa, caalen, &newKey); rv != C.CKR_OK {
		return Object{}, fmt.Errorf("derive_key: 0x%08x : %s", rv, returnValues[rv])
	}
	obj, err := o.newObject(newKey)
	if err != nil {
		return Object{}, fmt.Errorf("newObject: %s", err)
	}
	return obj, nil
}