wincrypt.h

最後變更在這個檔案是 53206,由 vboxsync 提交於 10 年前
Devices/vmsvga: header fixes
屬性 svn:eol-style 設為 `native` 屬性 svn:keywords 設為 `Author Date Id Revision`
檔案大小: 193.8 KB

行
1	/*
2	* Copyright (C) 2002 Travis Michielsen
3	* Copyright (C) 2004-2005 Juan Lang
4	* Copyright (C) 2007 Vijay Kiran Kamuju
5	*
6	* This library is free software; you can redistribute it and/or
7	* modify it under the terms of the GNU Lesser General Public
8	* License as published by the Free Software Foundation; either
9	* version 2.1 of the License, or (at your option) any later version.
10	*
11	* This library is distributed in the hope that it will be useful,
12	* but WITHOUT ANY WARRANTY; without even the implied warranty of
13	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14	* Lesser General Public License for more details.
15	*
16	* You should have received a copy of the GNU Lesser General Public
17	* License along with this library; if not, write to the Free Software
18	* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
19	*/
20
21	/*
22	* Oracle LGPL Disclaimer: For the avoidance of doubt, except that if any license choice
23	* other than GPL or LGPL is available it will apply instead, Oracle elects to use only
24	* the Lesser General Public License version 2.1 (LGPLv2) at this time for any software where
25	* a choice of LGPL license versions is made available with the language indicating
26	* that LGPLv2 or any later version may be used, or where a choice of which version
27	* of the LGPL is applied is otherwise unspecified.
28	*/
29
30	#ifndef __WINE_WINCRYPT_H
31	#define __WINE_WINCRYPT_H
32
33	#ifdef __cplusplus
34	extern "C" {
35	#endif
36
37	#include <bcrypt.h>
38	/* FIXME: #include <ncrypt.h> */
39
40	#ifdef _ADVAPI32_
41	# define WINADVAPI
42	#else
43	# define WINADVAPI DECLSPEC_IMPORT
44	#endif
45
46	/* some typedefs for function parameters */
47	typedef unsigned int ALG_ID;
48	typedef ULONG_PTR HCRYPTPROV;
49	typedef ULONG_PTR HCRYPTPROV_OR_NCRYPT_KEY_HANDLE;
50	typedef ULONG_PTR HCRYPTPROV_LEGACY;
51	typedef ULONG_PTR HCRYPTKEY;
52	typedef ULONG_PTR HCRYPTHASH;
53	typedef void *HCERTSTORE;
54	typedef void *HCRYPTMSG;
55	typedef void *HCERTSTOREPROV;
56	typedef void *HCRYPTOIDFUNCSET;
57	typedef void *HCRYPTOIDFUNCADDR;
58	typedef void *HCRYPTDEFAULTCONTEXT;
59
60	/* CSP Structs */
61
62	typedef struct _PROV_ENUMALGS {
63	ALG_ID aiAlgid;
64	DWORD dwBitLen;
65	DWORD dwNameLen;
66	CHAR szName[20];
67	} PROV_ENUMALGS;
68
69	typedef struct _PROV_ENUMALGS_EX {
70	ALG_ID aiAlgid;
71	DWORD dwDefaultLen;
72	DWORD dwMinLen;
73	DWORD dwMaxLen;
74	DWORD dwProtocols;
75	DWORD dwNameLen;
76	CHAR szName[20];
77	DWORD dwLongNameLen;
78	CHAR szLongName[40];
79	} PROV_ENUMALGS_EX;
80
81	#define SCHANNEL_MAC_KEY 0
82	#define SCHANNEL_ENC_KEY 1
83
84	typedef struct _SCHANNEL_ALG {
85	DWORD dwUse;
86	ALG_ID Algid;
87	DWORD cBits;
88	DWORD dwFlags;
89	DWORD dwReserved;
90	} SCHANNEL_ALG, *PSCHANNEL_ALG;
91
92
93	#define CRYPT_IPSEC_HMAC_KEY 0x0100
94
95	typedef struct _HMAC_INFO {
96	ALG_ID HashAlgid;
97	BYTE* pbInnerString;
98	DWORD cbInnerString;
99	BYTE* pbOuterString;
100	DWORD cbOuterString;
101	} HMAC_INFO, *PHMAC_INFO;
102
103	typedef struct _CRYPTOAPI_BLOB {
104	DWORD cbData;
105	BYTE* pbData;
106	} CRYPT_INTEGER_BLOB, *PCRYPT_INTEGER_BLOB,
107	CRYPT_UINT_BLOB, *PCRYPT_UINT_BLOB,
108	CRYPT_OBJID_BLOB, *PCRYPT_OBJID_BLOB,
109	CERT_NAME_BLOB, *PCERT_NAME_BLOB,
110	CERT_RDN_VALUE_BLOB, *PCERT_RDN_VALUE_BLOB,
111	CERT_BLOB, *PCERT_BLOB,
112	CRL_BLOB, *PCRL_BLOB,
113	DATA_BLOB, *PDATA_BLOB,
114	CRYPT_DATA_BLOB, *PCRYPT_DATA_BLOB,
115	CRYPT_HASH_BLOB, *PCRYPT_HASH_BLOB,
116	CRYPT_DIGEST_BLOB, *PCRYPT_DIGEST_BLOB,
117	CRYPT_DER_BLOB, *PCRYPT_DER_BLOB,
118	CRYPT_ATTR_BLOB, *PCRYPT_ATTR_BLOB;
119
120	typedef struct _CRYPTPROTECT_PROMPTSTRUCT{
121	DWORD cbSize;
122	DWORD dwPromptFlags;
123	HWND hwndApp;
124	LPCWSTR szPrompt;
125	} CRYPTPROTECT_PROMPTSTRUCT, *PCRYPTPROTECT_PROMPTSTRUCT;
126
127	typedef struct _CRYPT_ALGORITHM_IDENTIFIER {
128	LPSTR pszObjId;
129	CRYPT_OBJID_BLOB Parameters;
130	} CRYPT_ALGORITHM_IDENTIFIER, *PCRYPT_ALGORITHM_IDENTIFIER;
131
132	typedef struct _CRYPT_ATTRIBUTE_TYPE_VALUE {
133	LPSTR pszObjId;
134	CRYPT_OBJID_BLOB Value;
135	} CRYPT_ATTRIBUTE_TYPE_VALUE, *PCRYPT_ATTRIBUTE_TYPE_VALUE;
136
137	typedef struct _PUBLICKEYSTRUC {
138	BYTE bType;
139	BYTE bVersion;
140	WORD reserved;
141	ALG_ID aiKeyAlg;
142	} BLOBHEADER, PUBLICKEYSTRUC;
143
144	typedef struct _RSAPUBKEY {
145	DWORD magic;
146	DWORD bitlen;
147	DWORD pubexp;
148	} RSAPUBKEY;
149
150	typedef struct _PUBKEY {
151	DWORD magic;
152	DWORD bitlen;
153	} DHPUBKEY, DSSPUBKEY, KEAPUBKEY, TEKPUBKEY;
154
155	typedef struct _DSSSEED {
156	DWORD counter;
157	BYTE seed[20];
158	} DSSSEED;
159
160	typedef struct _PUBKEYVER3 {
161	DWORD magic;
162	DWORD bitlenP;
163	DWORD bitlenQ;
164	DWORD bitlenJ;
165	DSSSEED DSSSeed;
166	} DHPUBKEY_VER3, DSSPUBKEY_VER3;
167
168	typedef struct _PRIVKEYVER3 {
169	DWORD magic;
170	DWORD bitlenP;
171	DWORD bitlenQ;
172	DWORD bitlenJ;
173	DWORD bitlenX;
174	DSSSEED DSSSeed;
175	} DHPRIVKEY_VER3, DSSPRIVKEY_VER3;
176
177	typedef struct _KEY_TYPE_SUBTYPE {
178	DWORD dwKeySpec;
179	GUID Type;
180	GUID SubType;
181	} KEY_TYPE_SUBTYPE, *PKEY_TYPE_SUBTYPE;
182
183	typedef struct _CERT_FORTEZZA_DATA_PROP {
184	unsigned char SerialNumber[8];
185	int CertIndex;
186	unsigned char CertLabel[36];
187	} CERT_FORTEZZA_DATA_PROP;
188
189	typedef struct _CMS_DH_KEY_INFO {
190	DWORD dwVersion;
191	ALG_ID Algid;
192	LPSTR pszContentEncObjId;
193	CRYPT_DATA_BLOB PubInfo;
194	void *pReserved;
195	} CMS_DH_KEY_INFO, *PCMS_DH_KEY_INFO;
196
197	typedef struct _CRYPT_BIT_BLOB {
198	DWORD cbData;
199	BYTE *pbData;
200	DWORD cUnusedBits;
201	} CRYPT_BIT_BLOB, *PCRYPT_BIT_BLOB;
202
203	typedef struct _CRYPT_KEY_PROV_PARAM {
204	DWORD dwParam;
205	BYTE *pbData;
206	DWORD cbData;
207	DWORD dwFlags;
208	} CRYPT_KEY_PROV_PARAM, *PCRYPT_KEY_PROV_PARAM;
209
210	typedef struct _CRYPT_KEY_PROV_INFO {
211	LPWSTR pwszContainerName;
212	LPWSTR pwszProvName;
213	DWORD dwProvType;
214	DWORD dwFlags;
215	DWORD cProvParam;
216	PCRYPT_KEY_PROV_PARAM rgProvParam;
217	DWORD dwKeySpec;
218	} CRYPT_KEY_PROV_INFO, *PCRYPT_KEY_PROV_INFO;
219
220	typedef struct _CERT_KEY_CONTEXT {
221	DWORD cbSize;
222	HCRYPTPROV hCryptProv;
223	DWORD dwKeySpec;
224	} CERT_KEY_CONTEXT, *PCERT_KEY_CONTEXT;
225
226	typedef struct _CERT_PUBLIC_KEY_INFO {
227	CRYPT_ALGORITHM_IDENTIFIER Algorithm;
228	CRYPT_BIT_BLOB PublicKey;
229	} CERT_PUBLIC_KEY_INFO, *PCERT_PUBLIC_KEY_INFO;
230
231	typedef struct _CERT_EXTENSION {
232	LPSTR pszObjId;
233	BOOL fCritical;
234	CRYPT_OBJID_BLOB Value;
235	} CERT_EXTENSION, *PCERT_EXTENSION;
236
237	typedef struct _CERT_EXTENSIONS {
238	DWORD cExtension;
239	PCERT_EXTENSION rgExtension;
240	} CERT_EXTENSIONS, *PCERT_EXTENSIONS;
241
242	typedef struct _CERT_INFO {
243	DWORD dwVersion;
244	CRYPT_INTEGER_BLOB SerialNumber;
245	CRYPT_ALGORITHM_IDENTIFIER SignatureAlgorithm;
246	CERT_NAME_BLOB Issuer;
247	FILETIME NotBefore;
248	FILETIME NotAfter;
249	CERT_NAME_BLOB Subject;
250	CERT_PUBLIC_KEY_INFO SubjectPublicKeyInfo;
251	CRYPT_BIT_BLOB IssuerUniqueId;
252	CRYPT_BIT_BLOB SubjectUniqueId;
253	DWORD cExtension;
254	PCERT_EXTENSION rgExtension;
255	} CERT_INFO, *PCERT_INFO;
256
257	typedef struct _CERT_RDN_ATTR {
258	LPSTR pszObjId;
259	DWORD dwValueType;
260	CERT_RDN_VALUE_BLOB Value;
261	} CERT_RDN_ATTR, *PCERT_RDN_ATTR;
262
263	typedef struct _CERT_RDN {
264	DWORD cRDNAttr;
265	PCERT_RDN_ATTR rgRDNAttr;
266	} CERT_RDN, *PCERT_RDN;
267
268	typedef struct _CERT_NAME_INFO {
269	DWORD cRDN;
270	PCERT_RDN rgRDN;
271	} CERT_NAME_INFO, *PCERT_NAME_INFO;
272
273	typedef struct _CERT_NAME_VALUE {
274	DWORD dwValueType;
275	CERT_RDN_VALUE_BLOB Value;
276	} CERT_NAME_VALUE, *PCERT_NAME_VALUE;
277
278	typedef struct _CERT_ENCRYPTED_PRIVATE_KEY_INFO {
279	CRYPT_ALGORITHM_IDENTIFIER EncryptionAlgorithm;
280	CRYPT_DATA_BLOB EncryptedPrivateKey;
281	} CERT_ENCRYPTED_PRIVATE_KEY_INFO, *PCERT_ENCRYPTED_PRIVATE_KEY_INFO;
282
283	typedef struct _CERT_AUTHORITY_KEY_ID_INFO {
284	CRYPT_DATA_BLOB KeyId;
285	CERT_NAME_BLOB CertIssuer;
286	CRYPT_INTEGER_BLOB CertSerialNumber;
287	} CERT_AUTHORITY_KEY_ID_INFO, *PCERT_AUTHORITY_KEY_ID_INFO;
288
289	typedef struct _CERT_PRIVATE_KEY_VALIDITY {
290	FILETIME NotBefore;
291	FILETIME NotAfter;
292	} CERT_PRIVATE_KEY_VALIDITY, *PCERT_PRIVATE_KEY_VALIDITY;
293
294	typedef struct _CERT_KEY_ATTRIBUTES_INFO {
295	CRYPT_DATA_BLOB KeyId;
296	CRYPT_BIT_BLOB IntendedKeyUsage;
297	PCERT_PRIVATE_KEY_VALIDITY pPrivateKeyUsagePeriod;
298	} CERT_KEY_ATTRIBUTES_INFO, *PCERT_KEY_ATTRIBUTES_INFO;
299
300	/* byte 0 */
301	#define CERT_DIGITAL_SIGNATURE_KEY_USAGE 0x80
302	#define CERT_NON_REPUDIATION_KEY_USAGE 0x40
303	#define CERT_KEY_ENCIPHERMENT_KEY_USAGE 0x20
304	#define CERT_DATA_ENCIPHERMENT_KEY_USAGE 0x10
305	#define CERT_KEY_AGREEMENT_KEY_USAGE 0x08
306	#define CERT_KEY_CERT_SIGN_KEY_USAGE 0x04
307	#define CERT_OFFLINE_CRL_SIGN_KEY_USAGE 0x02
308	#define CERT_CRL_SIGN_KEY_USAGE 0x02
309	#define CERT_ENCIPHER_ONLY_KEY_USAGE 0x01
310	/* byte 1 */
311	#define CERT_DECIPHER_ONLY_KEY_USAGE 0x80
312
313	typedef struct _CERT_POLICY_ID {
314	DWORD cCertPolicyElementId;
315	LPSTR *rgbszCertPolicyElementId;
316	} CERT_POLICY_ID, *PCERT_POLICY_ID;
317
318	typedef struct _CERT_KEY_USAGE_RESTRICTION_INFO {
319	DWORD cCertPolicyId;
320	PCERT_POLICY_ID rgCertPolicyId;
321	CRYPT_BIT_BLOB RestrictedKeyUsage;
322	} CERT_KEY_USAGE_RESTRICTION_INFO, *PCERT_KEY_USAGE_RESTRICTION_INFO;
323
324	typedef struct _CERT_OTHER_NAME {
325	LPSTR pszObjId;
326	CRYPT_OBJID_BLOB Value;
327	} CERT_OTHER_NAME, *PCERT_OTHER_NAME;
328
329	typedef struct _CERT_ALT_NAME_ENTRY {
330	DWORD dwAltNameChoice;
331	union {
332	PCERT_OTHER_NAME pOtherName;
333	LPWSTR pwszRfc822Name;
334	LPWSTR pwszDNSName;
335	CERT_NAME_BLOB DirectoryName;
336	LPWSTR pwszURL;
337	CRYPT_DATA_BLOB IPAddress;
338	LPSTR pszRegisteredID;
339	} DUMMYUNIONNAME;
340	} CERT_ALT_NAME_ENTRY, *PCERT_ALT_NAME_ENTRY;
341
342	#define CERT_ALT_NAME_OTHER_NAME 1
343	#define CERT_ALT_NAME_RFC822_NAME 2
344	#define CERT_ALT_NAME_DNS_NAME 3
345	#define CERT_ALT_NAME_X400_ADDRESS 4
346	#define CERT_ALT_NAME_DIRECTORY_NAME 5
347	#define CERT_ALT_NAME_EDI_PARTY_NAME 6
348	#define CERT_ALT_NAME_URL 7
349	#define CERT_ALT_NAME_IP_ADDRESS 8
350	#define CERT_ALT_NAME_REGISTERED_ID 9
351
352	typedef struct _CERT_ALT_NAME_INFO {
353	DWORD cAltEntry;
354	PCERT_ALT_NAME_ENTRY rgAltEntry;
355	} CERT_ALT_NAME_INFO, *PCERT_ALT_NAME_INFO;
356
357	#define CERT_ALT_NAME_ENTRY_ERR_INDEX_MASK 0xff
358	#define CERT_ALT_NAME_ENTRY_ERR_INDEX_SHIFT 16
359	#define CERT_ALT_NAME_VALUE_ERR_INDEX_MASK 0x0000ffff
360	#define CERT_ALT_NAME_VALUE_ERR_INDEX_SHIFT 0
361	#define GET_CERT_ALT_NAME_ENTRY_ERR_INDEX(x) \
362	(((x) >> CERT_ALT_NAME_ENTRY_ERR_INDEX_SHIFT) & \
363	CERT_ALT_NAME_ENTRY_ERR_INDEX_MASK)
364	#define GET_CERT_ALT_NAME_VALUE_ERR_INDEX(x) \
365	((x) & CERT_ALT_NAME_VALUE_ERR_INDEX_MASK)
366
367	typedef struct _CERT_BASIC_CONSTRAINTS_INFO {
368	CRYPT_BIT_BLOB SubjectType;
369	BOOL fPathLenConstraint;
370	DWORD dwPathLenConstraint;
371	DWORD cSubtreesConstraint;
372	CERT_NAME_BLOB *rgSubtreesConstraint;
373	} CERT_BASIC_CONSTRAINTS_INFO, *PCERT_BASIC_CONSTRAINTS_INFO;
374
375	#define CERT_CA_SUBJECT_FLAG 0x80
376	#define CERT_END_ENTITY_SUBJECT_FLAG 0x40
377
378	typedef struct _CERT_BASIC_CONSTRAINTS2_INFO {
379	BOOL fCA;
380	BOOL fPathLenConstraint;
381	DWORD dwPathLenConstraint;
382	} CERT_BASIC_CONSTRAINTS2_INFO, *PCERT_BASIC_CONSTRAINTS2_INFO;
383
384	typedef struct _CERT_POLICY_QUALIFIER_INFO {
385	LPSTR pszPolicyQualifierId;
386	CRYPT_OBJID_BLOB Qualifier;
387	} CERT_POLICY_QUALIFIER_INFO, *PCERT_POLICY_QUALIFIER_INFO;
388
389	typedef struct _CERT_POLICY_INFO {
390	LPSTR pszPolicyIdentifier;
391	DWORD cPolicyQualifier;
392	CERT_POLICY_QUALIFIER_INFO *rgPolicyQualifier;
393	} CERT_POLICY_INFO, *PCERT_POLICY_INFO;
394
395	typedef struct _CERT_POLICIES_INFO {
396	DWORD cPolicyInfo;
397	CERT_POLICY_INFO *rgPolicyInfo;
398	} CERT_POLICIES_INFO, *PCERT_POLICIES_INFO;
399
400	typedef struct _CERT_POLICY_QUALIFIER_NOTICE_REFERENCE {
401	LPSTR pszOrganization;
402	DWORD cNoticeNumbers;
403	int *rgNoticeNumbers;
404	} CERT_POLICY_QUALIFIER_NOTICE_REFERENCE,
405	*PCERT_POLICY_QUALIFIER_NOTICE_REFERENCE;
406
407	typedef struct _CERT_POLICY_QUALIFIER_USER_NOTICE {
408	CERT_POLICY_QUALIFIER_NOTICE_REFERENCE *pNoticeReference;
409	LPWSTR pszDisplayText;
410	} CERT_POLICY_QUALIFIER_USER_NOTICE, *PCERT_POLICY_QUALIFIER_USER_NOTICE;
411
412	typedef struct _CPS_URLS {
413	LPWSTR pszURL;
414	CRYPT_ALGORITHM_IDENTIFIER *pAlgorithm;
415	CRYPT_DATA_BLOB *pDigest;
416	} CPS_URLS, *PCPS_URLS;
417
418	typedef struct _CERT_POLICY95_QUALIFIER1 {
419	LPWSTR pszPracticesReference;
420	LPSTR pszNoticeIdentifier;
421	LPSTR pszNSINoticeIdentifier;
422	DWORD cCPSURLs;
423	CPS_URLS *rgCPSURLs;
424	} CERT_POLICY95_QUALIFIER1, *PCERT_POLICY95_QUALIFIER1;
425
426	typedef struct _CERT_POLICY_MAPPING {
427	LPSTR pszIssuerDomainPolicy;
428	LPSTR pszSubjectDomainPolicy;
429	} CERT_POLICY_MAPPING, *PCERT_POLICY_MAPPING;
430
431	typedef struct _CERT_POLICY_MAPPINGS_INFO {
432	DWORD cPolicyMapping;
433	PCERT_POLICY_MAPPING rgPolicyMapping;
434	} CERT_POLICY_MAPPINGS_INFO, *PCERT_POLICY_MAPPINGS_INFO;
435
436	typedef struct _CERT_POLICY_CONSTRAINTS_INFO {
437	BOOL fRequireExplicitPolicy;
438	DWORD dwRequireExplicitPolicySkipCerts;
439	BOOL fInhibitPolicyMapping;
440	DWORD dwInhibitPolicyMappingSkipCerts;
441	} CERT_POLICY_CONSTRAINTS_INFO, *PCERT_POLICY_CONSTRAINTS_INFO;
442
443	typedef struct _CRYPT_CONTENT_INFO_SEQUENCE_OF_ANY {
444	LPSTR pszObjId;
445	DWORD cValue;
446	PCRYPT_DER_BLOB rgValue;
447	} CRYPT_CONTENT_INFO_SEQUENCE_OF_ANY, *PCRYPT_CONTENT_INFO_SEQUENCE_OF_ANY;
448
449	typedef struct _CRYPT_CONTENT_INFO {
450	LPSTR pszObjId;
451	CRYPT_DER_BLOB Content;
452	} CRYPT_CONTENT_INFO, *PCRYPT_CONTENT_INFO;
453
454	typedef struct _CRYPT_SEQUENCE_OF_ANY {
455	DWORD cValue;
456	PCRYPT_DER_BLOB rgValue;
457	} CRYPT_SEQUENCE_OF_ANY, *PCRYPT_SEQUENCE_OF_ANY;
458
459	typedef struct _CERT_AUTHORITY_KEY_ID2_INFO {
460	CRYPT_DATA_BLOB KeyId;
461	CERT_ALT_NAME_INFO AuthorityCertIssuer;
462	CRYPT_INTEGER_BLOB AuthorityCertSerialNumber;
463	} CERT_AUTHORITY_KEY_ID2_INFO, *PCERT_AUTHORITY_KEY_ID2_INFO;
464
465	typedef struct _CERT_ACCESS_DESCRIPTION {
466	LPSTR pszAccessMethod;
467	CERT_ALT_NAME_ENTRY AccessLocation;
468	} CERT_ACCESS_DESCRIPTION, *PCERT_ACCESS_DESCRIPTION;
469
470	typedef struct _CERT_AUTHORITY_INFO_ACCESS {
471	DWORD cAccDescr;
472	PCERT_ACCESS_DESCRIPTION rgAccDescr;
473	} CERT_AUTHORITY_INFO_ACCESS, *PCERT_AUTHORITY_INFO_ACCESS;
474
475	typedef struct _CERT_CONTEXT {
476	DWORD dwCertEncodingType;
477	BYTE *pbCertEncoded;
478	DWORD cbCertEncoded;
479	PCERT_INFO pCertInfo;
480	HCERTSTORE hCertStore;
481	} CERT_CONTEXT, *PCERT_CONTEXT;
482	typedef const CERT_CONTEXT *PCCERT_CONTEXT;
483
484	typedef struct _CRL_ENTRY {
485	CRYPT_INTEGER_BLOB SerialNumber;
486	FILETIME RevocationDate;
487	DWORD cExtension;
488	PCERT_EXTENSION rgExtension;
489	} CRL_ENTRY, *PCRL_ENTRY;
490
491	typedef struct _CRL_INFO {
492	DWORD dwVersion;
493	CRYPT_ALGORITHM_IDENTIFIER SignatureAlgorithm;
494	CERT_NAME_BLOB Issuer;
495	FILETIME ThisUpdate;
496	FILETIME NextUpdate;
497	DWORD cCRLEntry;
498	PCRL_ENTRY rgCRLEntry;
499	DWORD cExtension;
500	PCERT_EXTENSION rgExtension;
501	} CRL_INFO, *PCRL_INFO;
502
503	typedef struct _CRL_DIST_POINT_NAME {
504	DWORD dwDistPointNameChoice;
505	union {
506	CERT_ALT_NAME_INFO FullName;
507	} DUMMYUNIONNAME;
508	} CRL_DIST_POINT_NAME, *PCRL_DIST_POINT_NAME;
509
510	#define CRL_DIST_POINT_NO_NAME 0
511	#define CRL_DIST_POINT_FULL_NAME 1
512	#define CRL_DIST_POINT_ISSUER_RDN_NAME 2
513
514	typedef struct _CRL_DIST_POINT {
515	CRL_DIST_POINT_NAME DistPointName;
516	CRYPT_BIT_BLOB ReasonFlags;
517	CERT_ALT_NAME_INFO CRLIssuer;
518	} CRL_DIST_POINT, *PCRL_DIST_POINT;
519
520	#define CRL_REASON_UNUSED_FLAG 0x80
521	#define CRL_REASON_KEY_COMPROMISE_FLAG 0x40
522	#define CRL_REASON_CA_COMPROMISE_FLAG 0x20
523	#define CRL_REASON_AFFILIATION_CHANGED_FLAG 0x10
524	#define CRL_REASON_SUPERSEDED_FLAG 0x08
525	#define CRL_REASON_CESSATION_OF_OPERATION_FLAG 0x04
526	#define CRL_REASON_CERTIFICATE_HOLD_FLAG 0x02
527
528	typedef struct _CRL_DIST_POINTS_INFO {
529	DWORD cDistPoint;
530	PCRL_DIST_POINT rgDistPoint;
531	} CRL_DIST_POINTS_INFO, *PCRL_DIST_POINTS_INFO;
532
533	#define CRL_DIST_POINT_ERR_INDEX_MASK 0x7f
534	#define CRL_DIST_POINT_ERR_INDEX_SHIFT 24
535	#define GET_CRL_DIST_POINT_ERR_INDEX(x) \
536	(((x) >> CRL_DIST_POINT_ERR_INDEX_SHIFT) & CRL_DIST_POINT_ERR_INDEX_MASK)
537
538	#define CRL_DIST_POINT_ERR_CRL_ISSUER_BIT __MSABI_LONG(0x80000000)
539	#define IS_CRL_DIST_POINT_ERR_CRL_ISSUER(x) \
540	((x) & CRL_DIST_POINT_ERR_CRL_ISSUER_BIT)
541
542	typedef struct _CROSS_CERT_DIST_POINTS_INFO {
543	DWORD dwSyncDeltaTime;
544	DWORD cDistPoint;
545	PCERT_ALT_NAME_INFO rgDistPoint;
546	} CROSS_CERT_DIST_POINTS_INFO, *PCROSS_CERT_DIST_POINTS_INFO;
547
548	#define CROSS_CERT_DIST_POINT_ERR_INDEX_MASK 0xff
549	#define CROSS_CERT_DIST_POINT_ERR_INDEX_SHIFT 24
550	#define GET_CROSS_CERT_DIST_POINT_ERR_INDEX(x) \
551	(((x) >> CROSS_CERT_DIST_POINT_ERR_INDEX_SHIFT) & \
552	CROSS_CERT_DIST_POINT_ERR_INDEX_MASK)
553
554	typedef struct _CERT_PAIR {
555	CERT_BLOB Forward;
556	CERT_BLOB Reverse;
557	} CERT_PAIR, *PCERT_PAIR;
558
559	typedef struct _CRL_ISSUING_DIST_POINT {
560	CRL_DIST_POINT_NAME DistPointName;
561	BOOL fOnlyContainsUserCerts;
562	BOOL fOnlyContainsCACerts;
563	CRYPT_BIT_BLOB OnlySomeReasonFlags;
564	BOOL fIndirectCRL;
565	} CRL_ISSUING_DIST_POINT, *PCRL_ISSUING_DIST_POINT;
566
567	typedef struct _CERT_GENERAL_SUBTREE {
568	CERT_ALT_NAME_ENTRY Base;
569	DWORD dwMinimum;
570	BOOL fMaximum;
571	DWORD dwMaximum;
572	} CERT_GENERAL_SUBTREE, *PCERT_GENERAL_SUBTREE;
573
574	typedef struct _CERT_NAME_CONSTRAINTS_INFO {
575	DWORD cPermittedSubtree;
576	PCERT_GENERAL_SUBTREE rgPermittedSubtree;
577	DWORD cExcludedSubtree;
578	PCERT_GENERAL_SUBTREE rgExcludedSubtree;
579	} CERT_NAME_CONSTRAINTS_INFO, *PCERT_NAME_CONSTRAINTS_INFO;
580
581	#define CERT_EXCLUDED_SUBTREE_BIT __MSABI_LONG(0x80000000)
582	#define IS_CERT_EXCLUDED_SUBTREE(x) ((x) & CERT_EXCLUDED_SUBTREE_BIT)
583
584	typedef struct _CRYPT_ATTRIBUTE {
585	LPSTR pszObjId;
586	DWORD cValue;
587	PCRYPT_DATA_BLOB rgValue;
588	} CRYPT_ATTRIBUTE, *PCRYPT_ATTRIBUTE;
589
590	typedef struct _CRYPT_ATTRIBUTES {
591	DWORD cAttr;
592	PCRYPT_ATTRIBUTE rgAttr;
593	} CRYPT_ATTRIBUTES, *PCRYPT_ATTRIBUTES;
594
595	typedef struct _CERT_REQUEST_INFO {
596	DWORD dwVersion;
597	CERT_NAME_BLOB Subject;
598	CERT_PUBLIC_KEY_INFO SubjectPublicKeyInfo;
599	DWORD cAttribute;
600	PCRYPT_ATTRIBUTE rgAttribute;
601	} CERT_REQUEST_INFO, *PCERT_REQUEST_INFO;
602
603	typedef struct _CERT_KEYGEN_REQUEST_INFO {
604	DWORD dwVersion;
605	CERT_PUBLIC_KEY_INFO SubjectPublicKeyInfo;
606	LPWSTR pwszChallengeString;
607	} CERT_KEYGEN_REQUEST_INFO, *PCERT_KEYGEN_REQUEST_INFO;
608
609	typedef struct _CERT_SIGNED_CONTENT_INFO {
610	CRYPT_DER_BLOB ToBeSigned;
611	CRYPT_ALGORITHM_IDENTIFIER SignatureAlgorithm;
612	CRYPT_BIT_BLOB Signature;
613	} CERT_SIGNED_CONTENT_INFO, *PCERT_SIGNED_CONTENT_INFO;
614
615	typedef struct _CRL_CONTEXT {
616	DWORD dwCertEncodingType;
617	BYTE *pbCrlEncoded;
618	DWORD cbCrlEncoded;
619	PCRL_INFO pCrlInfo;
620	HCERTSTORE hCertStore;
621	} CRL_CONTEXT, *PCRL_CONTEXT;
622	typedef const CRL_CONTEXT *PCCRL_CONTEXT;
623
624	#define SORTED_CTL_EXT_FLAGS_OFFSET (0*4)
625	#define SORTED_CTL_EXT_COUNT_OFFSET (1*4)
626	#define SORTED_CTL_EXT_MAX_COLLISION_OFFSET (2*4)
627	#define SORTED_CTL_EXT_HASH_BUCKET_OFFSET (3*4)
628
629	#define SORTED_CTL_EXT_HASHED_SUBJECT_IDENTIFIER_FLAG 0x1
630
631	typedef struct _CERT_DSS_PARAMETERS {
632	CRYPT_UINT_BLOB p;
633	CRYPT_UINT_BLOB q;
634	CRYPT_UINT_BLOB g;
635	} CERT_DSS_PARAMETERS, *PCERT_DSS_PARAMETERS;
636
637	#define CERT_DSS_R_LEN 20
638	#define CERT_DSS_S_LEN 20
639	#define CERT_DSS_SIGNATURE_LEN (CERT_DSS_R_LEN + CERT_DSS_S_LEN)
640
641	#define CERT_MAX_ENCODED_DSS_SIGNATURE_LEN (2 + 2*(2 + 20 +1))
642
643	typedef struct _CERT_DH_PARAMETERS {
644	CRYPT_UINT_BLOB p;
645	CRYPT_UINT_BLOB g;
646	} CERT_DH_PARAMETERS, *PCERT_DH_PARAMETERS;
647
648	typedef struct _CERT_X942_DH_VALIDATION_PARAMS {
649	CRYPT_BIT_BLOB seed;
650	DWORD pgenCounter;
651	} CERT_X942_DH_VALIDATION_PARAMS, *PCERT_X942_DH_VALIDATION_PARAMS;
652
653	typedef struct _CERT_X942_DH_PARAMETERS {
654	CRYPT_UINT_BLOB p;
655	CRYPT_UINT_BLOB g;
656	CRYPT_UINT_BLOB q;
657	CRYPT_UINT_BLOB j;
658	PCERT_X942_DH_VALIDATION_PARAMS pValidationParams;
659	} CERT_X942_DH_PARAMETERS, *PCERT_X942_DH_PARAMETERS;
660
661	#define CRYPT_X942_COUNTER_BYTE_LENGTH 4
662	#define CRYPT_X942_KEY_LENGTH_BYTE_LENGTH 4
663	#define CRYPT_X942_PUB_INFO_BYTE_LENGTH (512/8)
664
665	typedef struct _CRYPT_X942_OTHER_INFO {
666	LPSTR pszContentEncryptionObjId;
667	BYTE rgbCounter[CRYPT_X942_COUNTER_BYTE_LENGTH];
668	BYTE rgbKeyLength[CRYPT_X942_KEY_LENGTH_BYTE_LENGTH];
669	CRYPT_DATA_BLOB PubInfo;
670	} CRYPT_X942_OTHER_INFO, *PCRYPT_X942_OTHER_INFO;
671
672	typedef struct _CRYPT_RC2_CBC_PARAMETERS {
673	DWORD dwVersion;
674	BOOL fIV;
675	BYTE rgbIV[4];
676	} CRYPT_RC2_CBC_PARAMETERS, *PCRYPT_RC2_CBC_PARAMETERS;
677
678	#define CRYPT_RC2_40BIT_VERSION 160
679	#define CRYPT_RC2_56BIT_VERSION 52
680	#define CRYPT_RC2_64BIT_VERSION 120
681	#define CRYPT_RC2_128BIT_VERSION 58
682
683	typedef struct _CRYPT_SMIME_CAPABILITY {
684	LPSTR pszObjId;
685	CRYPT_OBJID_BLOB Parameters;
686	} CRYPT_SMIME_CAPABILITY, *PCRYPT_SMIME_CAPABILITY;
687
688	typedef struct _CRYPT_SMIME_CAPABILITIES {
689	DWORD cCapability;
690	PCRYPT_SMIME_CAPABILITY rgCapability;
691	} CRYPT_SMIME_CAPABILITIES, *PCRYPT_SMIME_CAPABILITIES;
692
693	typedef struct _VTableProvStruc {
694	DWORD Version;
695	#ifdef WINE_STRICT_PROTOTYPES
696	BOOL (WINAPI FuncVerifyImage)(LPCSTR,BYTE);
697	void (WINAPI FuncReturnhWnd)(HWND);
698	#else
699	FARPROC FuncVerifyImage;
700	FARPROC FuncReturnhWnd;
701	#endif
702	DWORD dwProvType;
703	BYTE *pbContextInfo;
704	DWORD cbContextInfo;
705	LPSTR pszProvName;
706	} VTableProvStruc, *PVTableProvStruc;
707
708	typedef struct _CERT_PRIVATE_KEY_INFO {
709	DWORD Version;
710	CRYPT_ALGORITHM_IDENTIFIER Algorithm;
711	CRYPT_DER_BLOB PrivateKey;
712	PCRYPT_ATTRIBUTES pAttributes;
713	} CERT_PRIVATE_KEY_INFO, *PCERT_PRIVATE_KEY_INFO;
714
715	typedef struct _CTL_USAGE {
716	DWORD cUsageIdentifier;
717	LPSTR *rgpszUsageIdentifier;
718	} CTL_USAGE, PCTL_USAGE, CERT_ENHKEY_USAGE, PCERT_ENHKEY_USAGE;
719
720	typedef struct _CTL_ENTRY {
721	CRYPT_DATA_BLOB SubjectIdentifier;
722	DWORD cAttribute;
723	PCRYPT_ATTRIBUTE rgAttribute;
724	} CTL_ENTRY, *PCTL_ENTRY;
725
726	typedef struct _CTL_INFO {
727	DWORD dwVersion;
728	CTL_USAGE SubjectUsage;
729	CRYPT_DATA_BLOB ListIdentifier;
730	CRYPT_INTEGER_BLOB SequenceNumber;
731	FILETIME ThisUpdate;
732	FILETIME NextUpdate;
733	CRYPT_ALGORITHM_IDENTIFIER SubjectAlgorithm;
734	DWORD cCTLEntry;
735	PCTL_ENTRY rgCTLEntry;
736	DWORD cExtension;
737	PCERT_EXTENSION rgExtension;
738	} CTL_INFO, *PCTL_INFO;
739
740	typedef struct _CTL_CONTEXT {
741	DWORD dwMsgAndCertEncodingType;
742	BYTE *pbCtlEncoded;
743	DWORD cbCtlEncoded;
744	PCTL_INFO pCtlInfo;
745	HCERTSTORE hCertStore;
746	HCRYPTMSG hCryptMsg;
747	BYTE *pbCtlContext;
748	DWORD cbCtlContext;
749	} CTL_CONTEXT, *PCTL_CONTEXT;
750	typedef const CTL_CONTEXT *PCCTL_CONTEXT;
751
752	typedef struct _CRYPT_TIME_STAMP_REQUEST_INFO {
753	LPSTR pszTimeStampAlgorithm;
754	LPSTR pszContentType;
755	CRYPT_OBJID_BLOB Content;
756	DWORD cAttribute;
757	PCRYPT_ATTRIBUTE rgAttribute;
758	} CRYPT_TIME_STAMP_REQUEST_INFO, *PCRYPT_TIME_STAMP_REQUEST_INFO;
759
760	typedef struct _CRYPT_ENROLLMENT_NAME_VALUE_PAIR {
761	LPWSTR pwszName;
762	LPWSTR pwszValue;
763	} CRYPT_ENROLLMENT_NAME_VALUE_PAIR, *PCRYPT_ENROLLMENT_NAME_VALUE_PAIR;
764
765	typedef struct _CMSG_SIGNER_INFO {
766	DWORD dwVersion;
767	CERT_NAME_BLOB Issuer;
768	CRYPT_INTEGER_BLOB SerialNumber;
769	CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm;
770	CRYPT_ALGORITHM_IDENTIFIER HashEncryptionAlgorithm;
771	CRYPT_DATA_BLOB EncryptedHash;
772	CRYPT_ATTRIBUTES AuthAttrs;
773	CRYPT_ATTRIBUTES UnauthAttrs;
774	} CMSG_SIGNER_INFO, *PCMSG_SIGNER_INFO;
775
776	#define CMSG_VERIFY_SIGNER_PUBKEY 1
777	#define CMSG_VERIFY_SIGNER_CERT 2
778	#define CMSG_VERIFY_SIGNER_CHAIN 3
779	#define CMSG_VERIFY_SIGNER_NULL 4
780
781	typedef struct _CERT_REVOCATION_CRL_INFO {
782	DWORD cbSize;
783	PCCRL_CONTEXT pBaseCrlContext;
784	PCCRL_CONTEXT pDeltaCrlContext;
785	PCRL_ENTRY pCrlEntry;
786	BOOL fDeltaCrlEntry;
787	} CERT_REVOCATION_CRL_INFO, *PCERT_REVOCATION_CRL_INFO;
788
789	typedef struct _CERT_REVOCATION_INFO {
790	DWORD cbSize;
791	DWORD dwRevocationResult;
792	LPCSTR pszRevocationOid;
793	LPVOID pvOidSpecificInfo;
794	BOOL fHasFreshnessTime;
795	DWORD dwFreshnessTime;
796	PCERT_REVOCATION_CRL_INFO pCrlInfo;
797	} CERT_REVOCATION_INFO, *PCERT_REVOCATION_INFO;
798
799	typedef struct _CERT_REVOCATION_PARA {
800	DWORD cbSize;
801	PCCERT_CONTEXT pIssuerCert;
802	DWORD cCertStore;
803	HCERTSTORE *rgCertStore;
804	HCERTSTORE hCrlStore;
805	LPFILETIME pftTimeToUse;
806	#ifdef CERT_REVOCATION_PARA_HAS_EXTRA_FIELDS
807	DWORD dwUrlRetrievalTimeout;
808	BOOL fCheckFreshnessTime;
809	DWORD dwFreshnessTime;
810	LPFILETIME pftCurrentTime;
811	PCERT_REVOCATION_CRL_INFO pCrlInfo;
812	#endif
813	} CERT_REVOCATION_PARA, *PCERT_REVOCATION_PARA;
814
815	#define CERT_CONTEXT_REVOCATION_TYPE 1
816	#define CERT_VERIFY_REV_CHAIN_FLAG 0x00000001
817	#define CERT_VERIFY_CACHE_ONLY_BASED_REVOCATION 0x00000002
818	#define CERT_VERIFY_REV_ACCUMULATIVE_TIMEOUT_FLAG 0x00000004
819
820	typedef struct _CTL_VERIFY_USAGE_PARA {
821	DWORD cbSize;
822	CRYPT_DATA_BLOB ListIdentifier;
823	DWORD cCtlStore;
824	HCERTSTORE *rghCtlStore;
825	DWORD cSignerStore;
826	HCERTSTORE *rghSignerStore;
827	} CTL_VERIFY_USAGE_PARA, *PCTL_VERIFY_USAGE_PARA;
828
829	typedef struct _CTL_VERIFY_USAGE_STATUS {
830	DWORD cbSize;
831	DWORD dwError;
832	DWORD dwFlags;
833	PCCTL_CONTEXT *ppCtl;
834	DWORD dwCtlEntryIndex;
835	PCCERT_CONTEXT *ppSigner;
836	DWORD dwSignerIndex;
837	} CTL_VERIFY_USAGE_STATUS, *PCTL_VERIFY_USAGE_STATUS;
838
839	#define CERT_VERIFY_INHIBIT_CTL_UPDATE_FLAG 0x1
840	#define CERT_VERIFY_TRUSTED_SIGNERS_FLAG 0x2
841	#define CERT_VERIFY_NO_TIME_CHECK_FLAG 0x4
842	#define CERT_VERIFY_ALLOW_MORE_USAGE_FLAG 0x8
843	#define CERT_VERIFY_UPDATED_CTL_FLAG 0x1
844
845	typedef struct _CERT_CHAIN {
846	DWORD cCerts;
847	PCERT_BLOB certs;
848	CRYPT_KEY_PROV_INFO keyLocatorInfo;
849	} CERT_CHAIN, *PCERT_CHAIN;
850
851	typedef struct _CERT_REVOCATION_STATUS {
852	DWORD cbSize;
853	DWORD dwIndex;
854	DWORD dwError;
855	DWORD dwReason;
856	BOOL fHasFreshnessTime;
857	DWORD dwFreshnessTime;
858	} CERT_REVOCATION_STATUS, *PCERT_REVOCATION_STATUS;
859
860	typedef struct _CERT_TRUST_LIST_INFO {
861	DWORD cbSize;
862	PCTL_ENTRY pCtlEntry;
863	PCCTL_CONTEXT pCtlContext;
864	} CERT_TRUST_LIST_INFO, *PCERT_TRUST_LIST_INFO;
865
866	#define CERT_TRUST_NO_ERROR 0x00000000
867	#define CERT_TRUST_IS_NOT_TIME_VALID 0x00000001
868	#define CERT_TRUST_IS_NOT_TIME_NESTED 0x00000002
869	#define CERT_TRUST_IS_REVOKED 0x00000004
870	#define CERT_TRUST_IS_NOT_SIGNATURE_VALID 0x00000008
871	#define CERT_TRUST_IS_NOT_VALID_FOR_USAGE 0x00000010
872	#define CERT_TRUST_IS_UNTRUSTED_ROOT 0x00000020
873	#define CERT_TRUST_REVOCATION_STATUS_UNKNOWN 0x00000040
874	#define CERT_TRUST_IS_CYCLIC 0x00000080
875	#define CERT_TRUST_INVALID_EXTENSION 0x00000100
876	#define CERT_TRUST_INVALID_POLICY_CONSTRAINTS 0x00000200
877	#define CERT_TRUST_INVALID_BASIC_CONSTRAINTS 0x00000400
878	#define CERT_TRUST_INVALID_NAME_CONSTRAINTS 0x00000800
879	#define CERT_TRUST_HAS_NOT_SUPPORTED_NAME_CONSTRAINT 0x00001000
880	#define CERT_TRUST_HAS_NOT_DEFINED_NAME_CONSTRAINT 0x00002000
881	#define CERT_TRUST_HAS_NOT_PERMITTED_NAME_CONSTRAINT 0x00004000
882	#define CERT_TRUST_HAS_EXCLUDED_NAME_CONSTRAINT 0x00008000
883	#define CERT_TRUST_IS_OFFLINE_REVOCATION 0x01000000
884	#define CERT_TRUST_NO_ISSUANCE_CHAIN_POLICY 0x02000000
885	#define CERT_TRUST_IS_EXPLICIT_DISTRUST 0x04000000
886	#define CERT_TRUST_HAS_NOT_SUPPORTED_CRITICAL_EXT 0x08000000
887
888	#define CERT_TRUST_IS_PARTIAL_CHAIN 0x00010000
889	#define CERT_TRUST_CTL_IS_NOT_TIME_VALID 0x00020000
890	#define CERT_TRUST_CTL_IS_NOT_SIGNATURE_VALID 0x00040000
891	#define CERT_TRUST_CTL_IS_NOT_VALID_FOR_USAGE 0x00080000
892
893	#define CERT_TRUST_HAS_EXACT_MATCH_ISSUER 0x00000001
894	#define CERT_TRUST_HAS_KEY_MATCH_ISSUER 0x00000002
895	#define CERT_TRUST_HAS_NAME_MATCH_ISSUER 0x00000004
896	#define CERT_TRUST_IS_SELF_SIGNED 0x00000008
897
898	#define CERT_TRUST_HAS_PREFERRED_ISSUER 0x00000100
899	#define CERT_TRUST_HAS_ISSUANCE_CHAIN_POLICY 0x00000200
900	#define CERT_TRUST_HAS_VALID_NAME_CONSTRAINTS 0x00000400
901	#define CERT_TRUST_IS_PEER_TRUSTED 0x00000800
902	#define CERT_TRUST_HAS_CRL_VALIDITY_EXTENDED 0x00001000
903
904	#define CERT_TRUST_IS_COMPLEX_CHAIN 0x00010000
905
906	typedef struct _CERT_TRUST_STATUS {
907	DWORD dwErrorStatus;
908	DWORD dwInfoStatus;
909	} CERT_TRUST_STATUS, *PCERT_TRUST_STATUS;
910
911	typedef struct _CERT_CHAIN_ELEMENT {
912	DWORD cbSize;
913	PCCERT_CONTEXT pCertContext;
914	CERT_TRUST_STATUS TrustStatus;
915	PCERT_REVOCATION_INFO pRevocationInfo;
916	PCERT_ENHKEY_USAGE pIssuanceUsage;
917	PCERT_ENHKEY_USAGE pApplicationUsage;
918	LPCWSTR pwszExtendedErrorInfo;
919	} CERT_CHAIN_ELEMENT, *PCERT_CHAIN_ELEMENT;
920
921	typedef struct _CERT_SIMPLE_CHAIN {
922	DWORD cbSize;
923	CERT_TRUST_STATUS TrustStatus;
924	DWORD cElement;
925	PCERT_CHAIN_ELEMENT *rgpElement;
926	PCERT_TRUST_LIST_INFO pTrustListInfo;
927	BOOL fHasRevocationFreshnessTime;
928	DWORD dwRevocationFreshnessTime;
929	} CERT_SIMPLE_CHAIN, *PCERT_SIMPLE_CHAIN;
930
931	typedef struct _CERT_CHAIN_CONTEXT CERT_CHAIN_CONTEXT, *PCERT_CHAIN_CONTEXT;
932	typedef const CERT_CHAIN_CONTEXT *PCCERT_CHAIN_CONTEXT;
933
934	struct _CERT_CHAIN_CONTEXT {
935	DWORD cbSize;
936	CERT_TRUST_STATUS TrustStatus;
937	DWORD cChain;
938	PCERT_SIMPLE_CHAIN *rgpChain;
939	DWORD cLowerQualityChainContext;
940	PCCERT_CHAIN_CONTEXT *rgpLowerQualityChainContext;
941	BOOL fHasRevocationFreshnessTime;
942	DWORD dwRevocationFreshnessTime;
943	};
944
945	typedef struct _CERT_CHAIN_POLICY_PARA {
946	DWORD cbSize;
947	DWORD dwFlags;
948	void *pvExtraPolicyPara;
949	} CERT_CHAIN_POLICY_PARA, *PCERT_CHAIN_POLICY_PARA;
950
951	typedef struct _CERT_CHAIN_POLICY_STATUS {
952	DWORD cbSize;
953	DWORD dwError;
954	LONG lChainIndex;
955	LONG lElementIndex;
956	void *pvExtraPolicyStatus;
957	} CERT_CHAIN_POLICY_STATUS, *PCERT_CHAIN_POLICY_STATUS;
958
959	#define CERT_CHAIN_POLICY_BASE ((LPCSTR)1)
960	#define CERT_CHAIN_POLICY_AUTHENTICODE ((LPCSTR)2)
961	#define CERT_CHAIN_POLICY_AUTHENTICODE_TS ((LPCSTR)3)
962	#define CERT_CHAIN_POLICY_SSL ((LPCSTR)4)
963	#define CERT_CHAIN_POLICY_BASIC_CONSTRAINTS ((LPCSTR)5)
964	#define CERT_CHAIN_POLICY_NT_AUTH ((LPCSTR)6)
965	#define CERT_CHAIN_POLICY_MICROSOFT_ROOT ((LPCSTR)7)
966
967	#define CERT_CHAIN_POLICY_IGNORE_NOT_TIME_VALID_FLAG 0x00000001
968	#define CERT_CHAIN_POLICY_IGNORE_CTL_NOT_TIME_VALID_FLAG 0x00000002
969	#define CERT_CHAIN_POLICY_IGNORE_NOT_TIME_NESTED_FLAG 0x00000004
970	#define CERT_CHAIN_POLICY_IGNORE_INVALID_BASIC_CONSTRAINTS_FLAG 0x00000008
971
972	#define CERT_CHAIN_POLICY_IGNORE_ALL_NOT_TIME_VALID_FLAGS ( \
973	CERT_CHAIN_POLICY_IGNORE_NOT_TIME_VALID_FLAG \
974	CERT_CHAIN_POLICY_IGNORE_CTL_NOT_TIME_VALID_FLAG \
975	CERT_CHAIN_POLICY_IGNORE_NOT_TIME_NESTED_FLAG )
976
977	#define CERT_CHAIN_POLICY_ALLOW_UNKNOWN_CA_FLAG 0x00000010
978	#define CERT_CHAIN_POLICY_IGNORE_WRONG_USAGE_FLAG 0x00000020
979	#define CERT_CHAIN_POLICY_IGNORE_INVALID_NAME_FLAG 0x00000040
980	#define CERT_CHAIN_POLICY_IGNORE_INVALID_POLICY_FLAG 0x00000080
981
982	#define CERT_CHAIN_POLICY_IGNORE_END_REV_UNKNOWN_FLAG 0x00000100
983	#define CERT_CHAIN_POLICY_IGNORE_CTL_SIGNER_REV_UNKNOWN_FLAG 0x00000200
984	#define CERT_CHAIN_POLICY_IGNORE_CA_REV_UNKNOWN_FLAG 0x00000400
985	#define CERT_CHAIN_POLICY_IGNORE_ROOT_REV_UNKNOWN_FLAG 0x00000800
986
987	#define CERT_CHAIN_POLICY_IGNORE_ALL_REV_UNKNOWN_FLAGS ( \
988	CERT_CHAIN_POLICY_IGNORE_END_REV_UNKNOWN_FLAG \
989	CERT_CHAIN_POLICY_IGNORE_CTL_SIGNER_REV_UNKNOWN_FLAG \
990	CERT_CHAIN_POLICY_IGNORE_CA_REV_UNKNOWN_FLAG \
991	CERT_CHAIN_POLICY_IGNORE_ROOT_REV_UNKNOWN_FLAG )
992
993	#define CERT_CHAIN_POLICY_IGNORE_PEER_TRUST_FLAG 0x00001000
994	#define CERT_CHAIN_POLICY_IGNORE_NOT_SUPPORTED_CRITICAL_EXT_FLAG 0x00002000
995	#define CERT_CHAIN_POLICY_TRUST_TESTROOT_FLAG 0x00004000
996	#define CERT_CHAIN_POLICY_ALLOW_TESTROOT_FLAG 0x00008000
997	#define MICROSOFT_ROOT_CERT_CHAIN_POLICY_ENABLE_TEST_ROOT_FLAG 0x00010000
998
999	typedef struct _AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_PARA {
1000	DWORD cbSize;
1001	DWORD dwRegPolicySettings;
1002	PCMSG_SIGNER_INFO pSignerInfo;
1003	} AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_PARA,
1004	*PAUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_PARA;
1005
1006	typedef struct _AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_STATUS {
1007	DWORD cbSize;
1008	BOOL fCommercial;
1009	} AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_STATUS,
1010	*PAUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_STATUS;
1011
1012	typedef struct _AUTHENTICODE_TS_EXTRA_CERT_CHAIN_POLICY_PARA {
1013	DWORD cbSize;
1014	DWORD dwRegPolicySettings;
1015	BOOL fCommercial;
1016	} AUTHENTICODE_TS_EXTRA_CERT_CHAIN_POLICY_PARA,
1017	*PAUTHENTICODE_TS_EXTRA_CERT_CHAIN_POLICY_PARA;
1018
1019	typedef struct _HTTPSPolicyCallbackData {
1020	union {
1021	DWORD cbStruct;
1022	DWORD cbSize;
1023	} DUMMYUNIONNAME;
1024	DWORD dwAuthType;
1025	DWORD fdwChecks;
1026	WCHAR *pwszServerName;
1027	} HTTPSPolicyCallbackData, *PHTTPSPolicyCallbackData,
1028	SSL_EXTRA_CERT_CHAIN_POLICY_PARA, *PSSL_EXTRA_CERT_CHAIN_POLICY_PARA;
1029
1030	/* Values for HTTPSPolicyCallbackData's dwAuthType */
1031	#define AUTHTYPE_CLIENT 1
1032	#define AUTHTYPE_SERVER 2
1033	/* Values for HTTPSPolicyCallbackData's fdwChecks are defined in wininet.h */
1034
1035	#define BASIC_CONSTRAINTS_CERT_CHAIN_POLICY_CA_FLAG 0x80000000
1036	#define BASIC_CONSTRAINTS_CERT_CHAIN_POLICY_END_ENTITY_FLAG 0x40000000
1037
1038	#define MICROSOFT_ROOT_CERT_CHAIN_POLICY_ENABLE_TEST_ROOT_FLAG 0x00010000
1039
1040	#define USAGE_MATCH_TYPE_AND 0x00000000
1041	#define USAGE_MATCH_TYPE_OR 0x00000001
1042
1043	typedef struct _CERT_USAGE_MATCH {
1044	DWORD dwType;
1045	CERT_ENHKEY_USAGE Usage;
1046	} CERT_USAGE_MATCH, *PCERT_USAGE_MATCH;
1047
1048	typedef struct _CTL_USAGE_MATCH {
1049	DWORD dwType;
1050	CTL_USAGE Usage;
1051	} CTL_USAGE_MATCH, *PCTL_USAGE_MATCH;
1052
1053	#define CERT_CHAIN_REVOCATION_CHECK_END_CERT 0x10000000
1054	#define CERT_CHAIN_REVOCATION_CHECK_CHAIN 0x20000000
1055	#define CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT 0x40000000
1056	#define CERT_CHAIN_REVOCATION_CHECK_CACHE_ONLY 0x80000000
1057
1058	#define CERT_CHAIN_REVOCATION_ACCUMULATIVE_TIMEOUT 0x08000000
1059
1060	#define CERT_CHAIN_DISABLE_PASS1_QUALITY_FILTERING 0x00000040
1061	#define CERT_CHAIN_RETURN_LOWER_QUALITY_CONTEXTS 0x00000080
1062	#define CERT_CHAIN_DISABLE_AUTH_ROOT_AUTO_UPDATE 0x00000100
1063	#define CERT_CHAIN_TIMESTAMP_TIME 0x00000200
1064
1065	typedef struct _CERT_CHAIN_PARA {
1066	DWORD cbSize;
1067	CERT_USAGE_MATCH RequestedUsage;
1068	#ifdef CERT_CHAIN_PARA_HAS_EXTRA_FIELDS
1069	CERT_USAGE_MATCH RequestedIssuancePolicy;
1070	DWORD dwUrlRetrievalTimeout;
1071	BOOL fCheckRevocationFreshnessTime;
1072	DWORD dwRevocationFreshnessTime;
1073	LPFILETIME pftCacheResync;
1074	#endif
1075	} CERT_CHAIN_PARA, *PCERT_CHAIN_PARA;
1076
1077	typedef struct _CERT_SYSTEM_STORE_INFO {
1078	DWORD cbSize;
1079	} CERT_SYSTEM_STORE_INFO, *PCERT_SYSTEM_STORE_INFO;
1080
1081	typedef struct _CERT_PHYSICAL_STORE_INFO {
1082	DWORD cbSize;
1083	LPSTR pszOpenStoreProvider;
1084	DWORD dwOpenEncodingType;
1085	DWORD dwOpenFlags;
1086	CRYPT_DATA_BLOB OpenParameters;
1087	DWORD dwFlags;
1088	DWORD dwPriority;
1089	} CERT_PHYSICAL_STORE_INFO, *PCERT_PHYSICAL_STORE_INFO;
1090
1091	typedef struct _CERT_SYSTEM_STORE_RELOCATE_PARA {
1092	union {
1093	HKEY hKeyBase;
1094	VOID *pvBase;
1095	} DUMMYUNIONNAME;
1096	union {
1097	void *pvSystemStore;
1098	LPCSTR pszSystemStore;
1099	LPCWSTR pwszSystemStore;
1100	} DUMMYUNIONNAME2;
1101	} CERT_SYSTEM_STORE_RELOCATE_PARA, *PCERT_SYSTEM_STORE_RELOCATE_PARA;
1102
1103	typedef BOOL (WINAPI *PFN_CERT_ENUM_SYSTEM_STORE_LOCATION)(
1104	LPCWSTR pwszStoreLocation, DWORD dwFlags, void pvReserved, void pvArg);
1105
1106	typedef BOOL (WINAPI PFN_CERT_ENUM_SYSTEM_STORE)(const void pvSystemStore,
1107	DWORD dwFlags, PCERT_SYSTEM_STORE_INFO pStoreInfo, void *pvReserved,
1108	void *pvArg);
1109
1110	typedef BOOL (WINAPI PFN_CERT_ENUM_PHYSICAL_STORE)(const void pvSystemStore,
1111	DWORD dwFlags, LPCWSTR pwszStoreName, PCERT_PHYSICAL_STORE_INFO pStoreInfo,
1112	void pvReserved, void pvArg);
1113
1114	/* Encode/decode object */
1115	typedef LPVOID (__WINE_ALLOC_SIZE(1) WINAPI *PFN_CRYPT_ALLOC)(size_t cbsize);
1116	typedef VOID (WINAPI *PFN_CRYPT_FREE)(LPVOID pv);
1117
1118	typedef struct _CRYPT_ENCODE_PARA {
1119	DWORD cbSize;
1120	PFN_CRYPT_ALLOC pfnAlloc;
1121	PFN_CRYPT_FREE pfnFree;
1122	} CRYPT_ENCODE_PARA, *PCRYPT_ENCODE_PARA;
1123
1124	typedef struct _CRYPT_DECODE_PARA {
1125	DWORD cbSize;
1126	PFN_CRYPT_ALLOC pfnAlloc;
1127	PFN_CRYPT_FREE pfnFree;
1128	} CRYPT_DECODE_PARA, *PCRYPT_DECODE_PARA;
1129
1130	typedef struct _CERT_STORE_PROV_INFO {
1131	DWORD cbSize;
1132	DWORD cStoreProvFunc;
1133	void **rgpvStoreProvFunc;
1134	HCERTSTOREPROV hStoreProv;
1135	DWORD dwStoreProvFlags;
1136	HCRYPTOIDFUNCADDR hStoreProvFuncAddr2;
1137	} CERT_STORE_PROV_INFO, *PCERT_STORE_PROV_INFO;
1138
1139	typedef BOOL (WINAPI *PFN_CERT_DLL_OPEN_STORE_PROV_FUNC)(
1140	LPCSTR lpszStoreProvider, DWORD dwEncodingType, HCRYPTPROV_LEGACY hCryptProv,
1141	DWORD dwFlags, const void *pvPara, HCERTSTORE hCertStore,
1142	PCERT_STORE_PROV_INFO pStoreProvInfo);
1143
1144	typedef void (WINAPI *PFN_CERT_STORE_PROV_CLOSE)(HCERTSTOREPROV hStoreProv,
1145	DWORD dwFlags);
1146
1147	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_READ_CERT)(HCERTSTOREPROV hStoreProv,
1148	PCCERT_CONTEXT pStoreCertContext, DWORD dwFlags,
1149	PCCERT_CONTEXT *ppProvCertContext);
1150
1151	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_WRITE_CERT)(HCERTSTOREPROV hStoreProv,
1152	PCCERT_CONTEXT pCertContext, DWORD dwFlags);
1153
1154	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_DELETE_CERT)(
1155	HCERTSTOREPROV hStoreProv, PCCERT_CONTEXT pCertContext, DWORD dwFlags);
1156
1157	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_SET_CERT_PROPERTY)(
1158	HCERTSTOREPROV hStoreProv, PCCERT_CONTEXT pCertContext, DWORD dwPropId,
1159	DWORD dwFlags, const void *pvData);
1160
1161	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_READ_CRL)(HCERTSTOREPROV hStoreProv,
1162	PCCRL_CONTEXT pStoreCrlContext, DWORD dwFlags,
1163	PCCRL_CONTEXT *ppProvCrlContext);
1164
1165	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_WRITE_CRL)(HCERTSTOREPROV hStoreProv,
1166	PCCRL_CONTEXT pCrlContext, DWORD dwFlags);
1167
1168	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_DELETE_CRL)(HCERTSTOREPROV hStoreProv,
1169	PCCRL_CONTEXT pCrlContext, DWORD dwFlags);
1170
1171	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_SET_CRL_PROPERTY)(
1172	HCERTSTOREPROV hStoreProv, PCCRL_CONTEXT pCrlContext, DWORD dwPropId,
1173	DWORD dwFlags, const void *pvData);
1174
1175	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_READ_CTL)(HCERTSTOREPROV hStoreProv,
1176	PCCTL_CONTEXT pStoreCtlContext, DWORD dwFlags,
1177	PCCTL_CONTEXT *ppProvCtlContext);
1178
1179	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_WRITE_CTL)(HCERTSTOREPROV hStoreProv,
1180	PCCTL_CONTEXT pCtlContext, DWORD dwFlags);
1181
1182	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_DELETE_CTL)(
1183	HCERTSTOREPROV hStoreProv, PCCTL_CONTEXT pCtlContext, DWORD dwFlags);
1184
1185	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_SET_CTL_PROPERTY)(
1186	HCERTSTOREPROV hStoreProv, PCCTL_CONTEXT pCtlContext, DWORD dwPropId,
1187	DWORD dwFlags, const void *pvData);
1188
1189	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_CONTROL)(HCERTSTOREPROV hStoreProv,
1190	DWORD dwFlags, DWORD dwCtrlType, void const *pvCtrlPara);
1191
1192	typedef struct _CERT_STORE_PROV_FIND_INFO {
1193	DWORD cbSize;
1194	DWORD dwMsgAndCertEncodingType;
1195	DWORD dwFindFlags;
1196	DWORD dwFindType;
1197	const void *pvFindPara;
1198	} CERT_STORE_PROV_FIND_INFO, *PCERT_STORE_PROV_FIND_INFO;
1199	typedef const CERT_STORE_PROV_FIND_INFO CCERT_STORE_PROV_FIND_INFO,
1200	*PCCERT_STORE_PROV_FIND_INFO;
1201
1202	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_FIND_CERT)(HCERTSTOREPROV hStoreProv,
1203	PCCERT_STORE_PROV_FIND_INFO pFindInfo, PCCERT_CONTEXT pPrevCertContext,
1204	DWORD dwFlags, void *ppvStoreProvFindInfo, PCCERT_CONTEXT ppProvCertContext);
1205
1206	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_FREE_FIND_CERT)(
1207	HCERTSTOREPROV hStoreProv, PCCERT_CONTEXT pCertContext,
1208	void *pvStoreProvFindInfo, DWORD dwFlags);
1209
1210	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_GET_CERT_PROPERTY)(
1211	HCERTSTOREPROV hStoreProv, PCCERT_CONTEXT pCertContext, DWORD dwPropId,
1212	DWORD dwFlags, void pvData, DWORD pcbData);
1213
1214	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_FIND_CRL)(HCERTSTOREPROV hStoreProv,
1215	PCCERT_STORE_PROV_FIND_INFO pFindInfo, PCCRL_CONTEXT pPrevCrlContext,
1216	DWORD dwFlags, void *ppvStoreProvFindInfo, PCCRL_CONTEXT ppProvCrlContext);
1217
1218	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_FREE_FIND_CRL)(
1219	HCERTSTOREPROV hStoreProv, PCCRL_CONTEXT pCrlContext,
1220	void *pvStoreProvFindInfo, DWORD dwFlags);
1221
1222	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_GET_CRL_PROPERTY)(
1223	HCERTSTOREPROV hStoreProv, PCCRL_CONTEXT pCrlContext, DWORD dwPropId,
1224	DWORD dwFlags, void pvData, DWORD pcbData);
1225
1226	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_FIND_CTL)(HCERTSTOREPROV hStoreProv,
1227	PCCTL_CONTEXT pCtlContext, void *pvStoreProvFindInfo, DWORD dwFlags);
1228
1229	typedef BOOL (WINAPI *PFN_CERT_STORE_PROV_GET_CTL_PROPERTY)(
1230	HCERTSTOREPROV hStoreProv, PCCTL_CONTEXT pCtlContext, DWORD dwPropId,
1231	DWORD dwFlags, void *pvData);
1232
1233	typedef struct _CERT_CREATE_CONTEXT_PARA {
1234	DWORD cbSize;
1235	PFN_CRYPT_FREE pfnFree;
1236	void *pvFree;
1237	} CERT_CREATE_CONTEXT_PARA, *PCERT_CREATE_CONTEXT_PARA;
1238
1239	typedef struct _CRYPT_OID_FUNC_ENTRY {
1240	LPCSTR pszOID;
1241	void *pvFuncAddr;
1242	} CRYPT_OID_FUNC_ENTRY, *PCRYPT_OID_FUNC_ENTRY;
1243
1244	typedef BOOL (WINAPI *PFN_CRYPT_ENUM_OID_FUNC)(DWORD dwEncodingType,
1245	LPCSTR pszFuncName, LPCSTR pszOID, DWORD cValue, const DWORD rgdwValueType[],
1246	LPCWSTR const rgpwszValueName[], const BYTE * const rgpbValueData[],
1247	const DWORD rgcbValueData[], void *pvArg);
1248
1249	#define CRYPT_MATCH_ANY_ENCODING_TYPE 0xffffffff
1250
1251	typedef struct _CRYPT_OID_INFO {
1252	DWORD cbSize;
1253	LPCSTR pszOID;
1254	LPCWSTR pwszName;
1255	DWORD dwGroupId;
1256	union {
1257	DWORD dwValue;
1258	ALG_ID Algid;
1259	DWORD dwLength;
1260	} DUMMYUNIONNAME;
1261	CRYPT_DATA_BLOB ExtraInfo;
1262	} CRYPT_OID_INFO, *PCRYPT_OID_INFO;
1263	typedef const CRYPT_OID_INFO CCRYPT_OID_INFO, *PCCRYPT_OID_INFO;
1264
1265	typedef BOOL (WINAPI *PFN_CRYPT_ENUM_OID_INFO)(PCCRYPT_OID_INFO pInfo,
1266	void *pvArg);
1267
1268	typedef struct _CRYPT_SIGN_MESSAGE_PARA {
1269	DWORD cbSize;
1270	DWORD dwMsgEncodingType;
1271	PCCERT_CONTEXT pSigningCert;
1272	CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm;
1273	void * pvHashAuxInfo;
1274	DWORD cMsgCert;
1275	PCCERT_CONTEXT *rgpMsgCert;
1276	DWORD cMsgCrl;
1277	PCCRL_CONTEXT *rgpMsgCrl;
1278	DWORD cAuthAttr;
1279	PCRYPT_ATTRIBUTE rgAuthAttr;
1280	DWORD cUnauthAttr;
1281	PCRYPT_ATTRIBUTE rgUnauthAttr;
1282	DWORD dwFlags;
1283	DWORD dwInnerContentType;
1284	#ifdef CRYPT_SIGN_MESSAGE_PARA_HAS_CMS_FIELDS
1285	CRYPT_ALGORITHM_IDENTIFIER HashEncryptionAlgorithm;
1286	void * pvHashEncryptionAuxInfo;
1287	#endif
1288	} CRYPT_SIGN_MESSAGE_PARA, *PCRYPT_SIGN_MESSAGE_PARA;
1289
1290	#define CRYPT_MESSAGE_BARE_CONTENT_OUT_FLAG 0x00000001
1291	#define CRYPT_MESSAGE_ENCAPSULATED_CONTENT_OUT_FLAG 0x00000002
1292	#define CRYPT_MESSAGE_KEYID_SIGNER_FLAG 0x00000004
1293	#define CRYPT_MESSAGE_SILENT_KEYSET_FLAG 0x00000008
1294
1295	typedef PCCERT_CONTEXT (WINAPI PFN_CRYPT_GET_SIGNER_CERTIFICATE)(void pvArg,
1296	DWORD dwCertEncodingType, PCERT_INFO pSignerId, HCERTSTORE hMsgCertStore);
1297
1298	typedef struct _CRYPT_VERIFY_MESSAGE_PARA {
1299	DWORD cbSize;
1300	DWORD dwMsgAndCertEncodingType;
1301	HCRYPTPROV_LEGACY hCryptProv;
1302	PFN_CRYPT_GET_SIGNER_CERTIFICATE pfnGetSignerCertificate;
1303	void * pvGetArg;
1304	} CRYPT_VERIFY_MESSAGE_PARA, *PCRYPT_VERIFY_MESSAGE_PARA;
1305
1306	typedef struct _CRYPT_ENCRYPT_MESSAGE_PARA {
1307	DWORD cbSize;
1308	DWORD dwMsgEncodingType;
1309	HCRYPTPROV_LEGACY hCryptProv;
1310	CRYPT_ALGORITHM_IDENTIFIER ContentEncryptionAlgorithm;
1311	void * pvEncryptionAuxInfo;
1312	DWORD dwFlags;
1313	DWORD dwInnerContentType;
1314	} CRYPT_ENCRYPT_MESSAGE_PARA, *PCRYPT_ENCRYPT_MESSAGE_PARA;
1315
1316	#define CRYPT_MESSAGE_KEYID_RECIPIENT_FLAG 0x00000004
1317
1318	typedef struct _CRYPT_DECRYPT_MESSAGE_PARA {
1319	DWORD cbSize;
1320	DWORD dwMsgAndCertEncodingType;
1321	DWORD cCertStore;
1322	HCERTSTORE *rghCertStore;
1323	#ifdef CRYPT_DECRYPT_MESSAGE_PARA_HAS_EXTRA_FIELDS
1324	DWORD dwFlags;
1325	#endif
1326	} CRYPT_DECRYPT_MESSAGE_PARA, *PCRYPT_DECRYPT_MESSAGE_PARA;
1327
1328	typedef struct _CRYPT_HASH_MESSAGE_PARA {
1329	DWORD cbSize;
1330	DWORD dwMsgEncodingType;
1331	HCRYPTPROV_LEGACY hCryptProv;
1332	CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm;
1333	void * pvHashAuxInfo;
1334	} CRYPT_HASH_MESSAGE_PARA, *PCRYPT_HASH_MESSAGE_PARA;
1335
1336	typedef struct _CRYPT_KEY_SIGN_MESSAGE_PARA {
1337	DWORD cbSize;
1338	DWORD dwMsgAndCertEncodingType;
1339	HCRYPTPROV hCryptProv;
1340	DWORD dwKeySpec;
1341	CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm;
1342	void * pvHashAuxInfo;
1343	} CRYPT_KEY_SIGN_MESSAGE_PARA, *PCRYPT_KEY_SIGN_MESSAGE_PARA;
1344
1345	typedef struct _CRYPT_KEY_VERIFY_MESSAGE_PARA {
1346	DWORD cbSize;
1347	DWORD dwMsgEncodingType;
1348	HCRYPTPROV_LEGACY hCryptProv;
1349	} CRYPT_KEY_VERIFY_MESSAGE_PARA, *PCRYPT_KEY_VERIFY_MESSAGE_PARA;
1350
1351	typedef struct _CRYPT_URL_ARRAY {
1352	DWORD cUrl;
1353	LPWSTR *rgwszUrl;
1354	} CRYPT_URL_ARRAY, *PCRYPT_URL_ARRAY;
1355
1356	typedef struct _CRYPT_URL_INFO {
1357	DWORD cbSize;
1358	DWORD dwSyncDeltaTime;
1359	DWORD cGroup;
1360	DWORD *rgcGroupEntry;
1361	} CRYPT_URL_INFO, *PCRYPT_URL_INFO;
1362
1363	#define URL_OID_CERTIFICATE_ISSUER ((LPCSTR)1)
1364	#define URL_OID_CERTIFICATE_CRL_DIST_POINT ((LPCSTR)2)
1365	#define URL_OID_CTL_ISSUER ((LPCSTR)3)
1366	#define URL_OID_CTL_NEXT_UPDATE ((LPCSTR)4)
1367	#define URL_OID_CRL_ISSUER ((LPCSTR)5)
1368	#define URL_OID_CERTIFICATE_FRESHEST_CRL ((LPCSTR)6)
1369	#define URL_OID_CRL_FRESHEST_CRL ((LPCSTR)7)
1370	#define URL_OID_CROSS_CERT_DIST_POINT ((LPCSTR)8)
1371	#define URL_OID_CERTIFICATE_OCSP ((LPCSTR)9)
1372	#define URL_OID_CERTIFICATE_OCSP_AND_CRL_DIST_POINT ((LPCSTR)10)
1373	#define URL_OID_CERTIFICATE_CRL_DIST_POINT_AND_OCSP ((LPCSTR)11)
1374	#define URL_OID_CROSS_CERT_SUBJECT_INFO_ACCESS ((LPCSTR)12)
1375
1376	#define URL_OID_GET_OBJECT_URL_FUNC "UrlDllGetObjectUrl"
1377
1378	typedef HANDLE HCRYPTASYNC, *PHCRYPTASYNC;
1379
1380	typedef void (WINAPI *PFN_CRYPT_ASYNC_PARAM_FREE_FUNC)(LPSTR pszParamOid,
1381	LPVOID pvParam);
1382
1383	#define CRYPT_PARAM_ASYNC_RETRIEVAL_COMPLETION ((LPCSTR)1)
1384	#define CRYPT_PARAM_CANCEL_ASYNC_RETRIEVAL ((LPCSTR)2)
1385
1386	typedef void (WINAPI *PFN_CRYPT_ASYNC_RETRIEVAL_COMPLETION_FUNC)(
1387	void *pvCompletion, DWORD dwCompletionCode, LPCSTR pszURL, LPSTR pszObjectOid,
1388	void *pvObject);
1389
1390	typedef struct _CRYPT_ASYNC_RETRIEVAL_COMPLETION
1391	{
1392	PFN_CRYPT_ASYNC_RETRIEVAL_COMPLETION_FUNC pfnCompletion;
1393	void *pvCompletion;
1394	} CRYPT_ASYNC_RETRIEVAL_COMPLETION, *PCRYPT_ASYNC_RETRIEVAL_COMPLETION;
1395
1396	typedef BOOL (WINAPI *PFN_CANCEL_ASYNC_RETRIEVAL_FUNC)(
1397	HCRYPTASYNC hAsyncRetrieve);
1398
1399	typedef struct _CRYPT_BLOB_ARRAY
1400	{
1401	DWORD cBlob;
1402	PCRYPT_DATA_BLOB rgBlob;
1403	} CRYPT_BLOB_ARRAY, *PCRYPT_BLOB_ARRAY;
1404
1405	typedef struct _CRYPT_CREDENTIALS {
1406	DWORD cbSize;
1407	LPCSTR pszCredentialsOid;
1408	LPVOID pvCredentials;
1409	} CRYPT_CREDENTIALS, *PCRYPT_CREDENTIALS;
1410
1411	#define CREDENTIAL_OID_PASSWORD_CREDENTIALS_A ((LPCSTR)1)
1412	#define CREDENTIAL_OID_PASSWORD_CREDENTIALS_W ((LPCSTR)2)
1413	#define CREDENTIAL_OID_PASSWORD_CREDENTIALS \
1414	WINELIB_NAME_AW(CREDENTIAL_OID_PASSWORD_CREDENTIALS_)
1415
1416	typedef struct _CRYPT_PASSWORD_CREDENTIALSA {
1417	DWORD cbSize;
1418	LPSTR pszUsername;
1419	LPSTR pszPassword;
1420	} CRYPT_PASSWORD_CREDENTIALSA, *PCRYPT_PASSWORD_CREDENTIALSA;
1421
1422	typedef struct _CRYPT_PASSWORD_CREDENTIALSW {
1423	DWORD cbSize;
1424	LPWSTR pszUsername;
1425	LPWSTR pszPassword;
1426	} CRYPT_PASSWORD_CREDENTIALSW, *PCRYPT_PASSWORD_CREDENTIALSW;
1427	#define CRYPT_PASSWORD_CREDENTIALS WINELIB_NAME_AW(CRYPT_PASSWORD_CREDENTIALS)
1428	#define PCRYPT_PASSWORD_CREDENTIALS WINELIB_NAME_AW(PCRYPT_PASSWORD_CREDENTIALS)
1429
1430	typedef struct _CRYPT_RETRIEVE_AUX_INFO {
1431	DWORD cbSize;
1432	FILETIME *pLastSyncTime;
1433	DWORD dwMaxUrlRetrievalByteCount;
1434	} CRYPT_RETRIEVE_AUX_INFO, *PCRYPT_RETRIEVE_AUX_INFO;
1435
1436	typedef void (WINAPI *PFN_FREE_ENCODED_OBJECT_FUNC)(LPCSTR pszObjectOid,
1437	PCRYPT_BLOB_ARRAY pObject, void *pvFreeContext);
1438
1439	#define SCHEME_OID_RETRIEVE_ENCODED_OBJECT_FUNC \
1440	"SchemeDllRetrieveEncodedObject"
1441	#define SCHEME_OID_RETRIEVE_ENCODED_OBJECTW_FUNC \
1442	"SchemeDllRetrieveEncodedObjectW"
1443	/* The signature of SchemeDllRetrieveEncodedObjectW is:
1444	BOOL WINAPI SchemeDllRetrieveEncodedObjectW(LPCWSTR pwszUrl,
1445	LPCSTR pszObjectOid, DWORD dwRetrievalFlags, DWORD dwTimeout,
1446	PCRYPT_BLOB_ARRAY pObject, PFN_FREE_ENCODED_OBJECT_FUNC *ppfnFreeObject,
1447	void **ppvFreeContext, HCRYPTASYNC hAsyncRetrieve,
1448	PCRYPT_CREDENTIALS pCredentials, PCRYPT_RETRIEVE_AUX_INFO pAuxInfo);
1449	*/
1450
1451	#define CONTEXT_OID_CREATE_OBJECT_CONTEXT_FUNC "ContextDllCreateObjectContext"
1452	/* The signature of ContextDllCreateObjectContext is:
1453	BOOL WINAPI ContextDllCreateObjectContext(LPCSTR pszObjectOid,
1454	DWORD dwRetrievalFlags, PCRYPT_BLOB_ARRAY pObject, void **ppvContxt);
1455	*/
1456
1457	#define CONTEXT_OID_CERTIFICATE ((LPCSTR)1)
1458	#define CONTEXT_OID_CRL ((LPCSTR)2)
1459	#define CONTEXT_OID_CTL ((LPCSTR)3)
1460	#define CONTEXT_OID_PKCS7 ((LPCSTR)4)
1461	#define CONTEXT_OID_CAPI2_ANY ((LPCSTR)5)
1462
1463	#define CRYPT_RETRIEVE_MULTIPLE_OBJECTS 0x00000001
1464	#define CRYPT_CACHE_ONLY_RETRIEVAL 0x00000002
1465	#define CRYPT_WIRE_ONLY_RETRIEVAL 0x00000004
1466	#define CRYPT_DONT_CACHE_RESULT 0x00000008
1467	#define CRYPT_ASYNC_RETRIEVAL 0x00000010
1468	#define CRYPT_STICKY_CACHE_RETRIEVAL 0x00001000
1469	#define CRYPT_LDAP_SCOPE_BASE_ONLY_RETRIEVAL 0x00002000
1470	#define CRYPT_OFFLINE_CHECK_RETRIEVAL 0x00004000
1471	#define CRYPT_LDAP_INSERT_ENTRY_ATTRIBUTE 0x00008000
1472	#define CRYPT_LDAP_SIGN_RETRIEVAL 0x00010000
1473	#define CRYPT_NO_AUTH_RETRIEVAL 0x00020000
1474	#define CRYPT_LDAP_AREC_EXCLUSIVE_RETRIEVAL 0x00040000
1475	#define CRYPT_AIA_RETRIEVAL 0x00080000
1476
1477	#define CRYPT_VERIFY_CONTEXT_SIGNATURE 0x00000020
1478	#define CRYPT_VERIFY_DATA_HASH 0x00000040
1479	#define CRYPT_KEEP_TIME_VALID 0x00000080
1480	#define CRYPT_DONT_VERIFY_SIGNATURE 0x00000100
1481	#define CRYPT_DONT_CHECK_TIME_VALIDITY 0x00000200
1482	#define CRYPT_CHECK_FRESHNESS_TIME_VALIDITY 0x00000400
1483	#define CRYPT_ACCUMULATIVE_TIMEOUT 0x00000800
1484
1485	typedef BOOL (WINAPI PFN_CRYPT_CANCEL_RETRIEVAL)(DWORD dwFlags, void pvArg);
1486
1487	typedef struct _CERT_CRL_CONTEXT_PAIR
1488	{
1489	PCCERT_CONTEXT pCertContext;
1490	PCCRL_CONTEXT pCrlContext;
1491	} CERT_CRL_CONTEXT_PAIR, *PCERT_CRL_CONTEXT_PAIR;
1492	typedef const CERT_CRL_CONTEXT_PAIR *PCCERT_CRL_CONTEXT_PAIR;
1493
1494	#define TIME_VALID_OID_GET_OBJECT_FUNC "TimeValidDllGetObject"
1495
1496	#define TIME_VALID_OID_GET_CTL ((LPCSTR)1)
1497	#define TIME_VALID_OID_GET_CRL ((LPCSTR)2)
1498	#define TIME_VALID_OID_GET_CRL_FROM_CERT ((LPCSTR)3)
1499	#define TIME_VALID_OID_GET_FRESHEST_CRL_FROM_CERT ((LPCSTR)4)
1500	#define TIME_VALID_OID_GET_FRESHEST_CRL_FROM_CRL ((LPCSTR)5)
1501
1502	#define TIME_VALID_OID_FLUSH_OBJECT_FUNC "TimeValidDllFlushObject"
1503
1504	#define TIME_VALID_OID_FLUSH_CTL ((LPCSTR)1)
1505	#define TIME_VALID_OID_FLUSH_CRL ((LPCSTR)2)
1506	#define TIME_VALID_OID_FLUSH_CRL_FROM_CERT ((LPCSTR)3)
1507	#define TIME_VALID_OID_FLUSH_FRESHEST_CRL_FROM_CERT ((LPCSTR)4)
1508	#define TIME_VALID_OID_FLUSH_FRESHEST_CRL_FROM_CRL ((LPCSTR)5)
1509
1510	/* OID group IDs */
1511	#define CRYPT_HASH_ALG_OID_GROUP_ID 1
1512	#define CRYPT_ENCRYPT_ALG_OID_GROUP_ID 2
1513	#define CRYPT_PUBKEY_ALG_OID_GROUP_ID 3
1514	#define CRYPT_SIGN_ALG_OID_GROUP_ID 4
1515	#define CRYPT_RDN_ATTR_OID_GROUP_ID 5
1516	#define CRYPT_EXT_OR_ATTR_OID_GROUP_ID 6
1517	#define CRYPT_ENHKEY_USAGE_OID_GROUP_ID 7
1518	#define CRYPT_POLICY_OID_GROUP_ID 8
1519	#define CRYPT_TEMPLATE_OID_GROUP_ID 9
1520	#define CRYPT_LAST_OID_GROUP_ID 9
1521
1522	#define CRYPT_FIRST_ALG_OID_GROUP_ID CRYPT_HASH_ALG_OID_GROUP_ID
1523	#define CRYPT_LAST_ALG_OID_GROUP_ID CRYPT_SIGN_ALG_OID_GROUP_ID
1524
1525	#define CRYPT_OID_INHIBIT_SIGNATURE_FORMAT_FLAG 0x1
1526	#define CRYPT_OID_USE_PUBKEY_PARA_FOR_PKCS7_FLAG 0x2
1527	#define CRYPT_OID_NO_NULL_ALGORITHM_PARA_FLAG 0x4
1528
1529	#define CRYPT_OID_INFO_OID_KEY 1
1530	#define CRYPT_OID_INFO_NAME_KEY 2
1531	#define CRYPT_OID_INFO_ALGID_KEY 3
1532	#define CRYPT_OID_INFO_SIGN_KEY 4
1533
1534	/* Algorithm IDs */
1535
1536	#define GET_ALG_CLASS(x) (x & (7 << 13))
1537	#define GET_ALG_TYPE(x) (x & (15 << 9))
1538	#define GET_ALG_SID(x) (x & (511))
1539
1540	/* Algorithm Classes */
1541	#define ALG_CLASS_ANY (0)
1542	#define ALG_CLASS_SIGNATURE (1 << 13)
1543	#define ALG_CLASS_MSG_ENCRYPT (2 << 13)
1544	#define ALG_CLASS_DATA_ENCRYPT (3 << 13)
1545	#define ALG_CLASS_HASH (4 << 13)
1546	#define ALG_CLASS_KEY_EXCHANGE (5 << 13)
1547	#define ALG_CLASS_ALL (7 << 13)
1548	/* Algorithm types */
1549	#define ALG_TYPE_ANY (0)
1550	#define ALG_TYPE_DSS (1 << 9)
1551	#define ALG_TYPE_RSA (2 << 9)
1552	#define ALG_TYPE_BLOCK (3 << 9)
1553	#define ALG_TYPE_STREAM (4 << 9)
1554	#define ALG_TYPE_DH (5 << 9)
1555	#define ALG_TYPE_SECURECHANNEL (6 << 9)
1556
1557	/* SIDs */
1558	#define ALG_SID_ANY (0)
1559	/* RSA SIDs */
1560	#define ALG_SID_RSA_ANY 0
1561	#define ALG_SID_RSA_PKCS 1
1562	#define ALG_SID_RSA_MSATWORK 2
1563	#define ALG_SID_RSA_ENTRUST 3
1564	#define ALG_SID_RSA_PGP 4
1565	/* DSS SIDs */
1566	#define ALG_SID_DSS_ANY 0
1567	#define ALG_SID_DSS_PKCS 1
1568	#define ALG_SID_DSS_DMS 2
1569
1570	/* DES SIDs */
1571	#define ALG_SID_DES 1
1572	#define ALG_SID_3DES 3
1573	#define ALG_SID_DESX 4
1574	#define ALG_SID_IDEA 5
1575	#define ALG_SID_CAST 6
1576	#define ALG_SID_SAFERSK64 7
1577	#define ALG_SID_SAFERSK128 8
1578	#define ALG_SID_3DES_112 9
1579	#define ALG_SID_CYLINK_MEK 12
1580	#define ALG_SID_RC5 13
1581	#define ALG_SID_AES_128 14
1582	#define ALG_SID_AES_192 15
1583	#define ALG_SID_AES_256 16
1584	#define ALG_SID_AES 17
1585	/* Diffie-Hellmans SIDs */
1586	#define ALG_SID_DH_SANDF 1
1587	#define ALG_SID_DH_EPHEM 2
1588	#define ALG_SID_AGREED_KEY_ANY 3
1589	#define ALG_SID_KEA 4
1590	#define ALG_SID_ECDH 5
1591	/* RC2 SIDs */
1592	#define ALG_SID_RC4 1
1593	#define ALG_SID_RC2 2
1594	#define ALG_SID_SEAL 2
1595	/* Hash SIDs */
1596	#define ALG_SID_MD2 1
1597	#define ALG_SID_MD4 2
1598	#define ALG_SID_MD5 3
1599	#define ALG_SID_SHA 4
1600	#define ALG_SID_SHA1 ALG_SID_SHA
1601	#define ALG_SID_MAC 5
1602	#define ALG_SID_RIPEMD 6
1603	#define ALG_SID_RIPEMD160 7
1604	#define ALG_SID_SSL3SHAMD5 8
1605	#define ALG_SID_HMAC 9
1606	#define ALG_SID_TLS1PRF 10
1607	#define ALG_SID_HASH_REPLACE_OWF 11
1608	#define ALG_SID_SHA_256 12
1609	#define ALG_SID_SHA_384 13
1610	#define ALG_SID_SHA_512 14
1611	/* SCHANNEL SIDs */
1612	#define ALG_SID_SSL3_MASTER 1
1613	#define ALG_SID_SCHANNEL_MASTER_HASH 2
1614	#define ALG_SID_SCHANNEL_MAC_KEY 3
1615	#define ALG_SID_PCT1_MASTER 4
1616	#define ALG_SID_SSL2_MASTER 5
1617	#define ALG_SID_TLS1_MASTER 6
1618	#define ALG_SID_SCHANNEL_ENC_KEY 7
1619	#define ALG_SID_EXAMPLE 80
1620
1621	/* Algorithm Definitions */
1622	#define CALG_MD2 (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_MD2)
1623	#define CALG_MD4 (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_MD4)
1624	#define CALG_MD5 (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_MD5)
1625	#define CALG_SHA (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_SHA)
1626	#define CALG_SHA1 CALG_SHA
1627	#define CALG_MAC (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_MAC)
1628	#define CALG_SSL3_SHAMD5 (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_SSL3SHAMD5)
1629	#define CALG_HMAC (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_HMAC)
1630	#define CALG_TLS1PRF (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_TLS1PRF)
1631	#define CALG_HASH_REPLACE_OWF (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_HASH_REPLACE_OWF)
1632	#define CALG_SHA_256 (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_SHA_256)
1633	#define CALG_SHA_384 (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_SHA_384)
1634	#define CALG_SHA_512 (ALG_CLASS_HASH \| ALG_TYPE_ANY \| ALG_SID_SHA_512)
1635	#define CALG_RSA_SIGN (ALG_CLASS_SIGNATURE \| ALG_TYPE_RSA \| ALG_SID_RSA_ANY)
1636	#define CALG_DSS_SIGN (ALG_CLASS_SIGNATURE \| ALG_TYPE_DSS \| ALG_SID_DSS_ANY)
1637	#define CALG_NO_SIGN (ALG_CLASS_SIGNATURE \| ALG_TYPE_ANY \| ALG_SID_ANY)
1638	#define CALG_DH_SF (ALG_CLASS_KEY_EXCHANGE \| ALG_TYPE_DH \| ALG_SID_DH_SANDF)
1639	#define CALG_DH_EPHEM (ALG_CLASS_KEY_EXCHANGE \| ALG_TYPE_DH \| ALG_SID_DH_EPHEM)
1640	#define CALG_ECDH (ALG_CLASS_KEY_EXCHANGE \| ALG_TYPE_DH \| ALG_SID_ECDH)
1641	#define CALG_RSA_KEYX (ALG_CLASS_KEY_EXCHANGE \| ALG_TYPE_RSA \| ALG_SID_RSA_ANY)
1642	#define CALG_DES (ALG_CLASS_DATA_ENCRYPT \| ALG_TYPE_BLOCK \| ALG_SID_DES)
1643	#define CALG_RC2 (ALG_CLASS_DATA_ENCRYPT \| ALG_TYPE_BLOCK \| ALG_SID_RC2)
1644	#define CALG_3DES (ALG_CLASS_DATA_ENCRYPT \| ALG_TYPE_BLOCK \| ALG_SID_3DES)
1645	#define CALG_3DES_112 (ALG_CLASS_DATA_ENCRYPT \| ALG_TYPE_BLOCK \| ALG_SID_3DES_112)
1646	#define CALG_AES_128 (ALG_CLASS_DATA_ENCRYPT \| ALG_TYPE_BLOCK \| ALG_SID_AES_128)
1647	#define CALG_AES_192 (ALG_CLASS_DATA_ENCRYPT \| ALG_TYPE_BLOCK \| ALG_SID_AES_192)
1648	#define CALG_AES_256 (ALG_CLASS_DATA_ENCRYPT \| ALG_TYPE_BLOCK \| ALG_SID_AES_256)
1649	#define CALG_AES (ALG_CLASS_DATA_ENCRYPT \| ALG_TYPE_BLOCK \| ALG_SID_AES)
1650	#define CALG_RC4 (ALG_CLASS_DATA_ENCRYPT \| ALG_TYPE_STREAM \| ALG_SID_RC4)
1651	#define CALG_SEAL (ALG_CLASS_DATA_ENCRYPT \| ALG_TYPE_STREAM \| ALG_SID_SEAL)
1652	#define CALG_RC5 (ALG_CLASS_DATA_ENCRYPT \| ALG_TYPE_STREAM \| ALG_SID_RC5)
1653	#define CALG_SSL3_MASTER (ALG_CLASS_MSG_ENCRYPT \| ALG_TYPE_SECURECHANNEL \| ALG_SID_SSL3_MASTER)
1654	#define CALG_SCHANNEL_MASTER_HASH (ALG_CLASS_MSG_ENCRYPT \| ALG_TYPE_SECURECHANNEL \| ALG_SID_SCHANNEL_MASTER_HASH)
1655	#define CALG_SCHANNEL_MAC_KEY (ALG_CLASS_MSG_ENCRYPT \| ALG_TYPE_SECURECHANNEL \| ALG_SID_SCHANNEL_MAC_KEY)
1656	#define CALG_SCHANNEL_ENC_KEY (ALG_CLASS_MSG_ENCRYPT \| ALG_TYPE_SECURECHANNEL \| ALG_SID_SCHANNEL_ENC_KEY)
1657	#define CALG_PCT1_MASTER (ALG_CLASS_MSG_ENCRYPT \| ALG_TYPE_SECURECHANNEL \| ALG_SID_PCT1_MASTER)
1658	#define CALG_SSL2_MASTER (ALG_CLASS_MSG_ENCRYPT \| ALG_TYPE_SECURECHANNEL \| ALG_SID_SSL2_MASTER)
1659	#define CALG_TLS1_MASTER (ALG_CLASS_MSG_ENCRYPT \| ALG_TYPE_SECURECHANNEL \| ALG_SID_TLS1_MASTER)
1660
1661
1662	/* Protocol Flags */
1663	#define CRYPT_FLAG_PCT1 0x0001
1664	#define CRYPT_FLAG_SSL2 0x0002
1665	#define CRYPT_FLAG_SSL3 0x0004
1666	#define CRYPT_FLAG_TLS1 0x0008
1667	#define CRYPT_FLAG_IPSEC 0x0010
1668	#define CRYPT_FLAG_SIGNING 0x0020
1669
1670	/* Provider names */
1671	#define MS_DEF_PROV_A "Microsoft Base Cryptographic Provider v1.0"
1672	#if defined(__GNUC__)
1673	# define MS_DEF_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1674	'B','a','s','e',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ', \
1675	'P','r','o','v','i','d','e','r',' ','v','1','.','0',0 }
1676	#elif defined(_MSC_VER)
1677	# define MS_DEF_PROV_W L"Microsoft Base Cryptographic Provider v1.0"
1678	#else
1679	static const WCHAR MS_DEF_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1680	'B','a','s','e',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ',
1681	'P','r','o','v','i','d','e','r',' ','v','1','.','0',0 };
1682	#endif
1683	#define MS_DEF_PROV WINELIB_NAME_AW(MS_DEF_PROV_)
1684
1685	#define MS_ENHANCED_PROV_A "Microsoft Enhanced Cryptographic Provider v1.0"
1686	#if defined(__GNUC__)
1687	# define MS_ENHANCED_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1688	'E','n','h','a','n','c','e','d',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ', \
1689	'P','r','o','v','i','d','e','r',' ','v','1','.','0',0 }
1690	#elif defined(_MSC_VER)
1691	# define MS_ENHANCED_PROV_W L"Microsoft Enhanced Cryptographic Provider v1.0"
1692	#else
1693	static const WCHAR MS_ENHANCED_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1694	'E','n','h','a','n','c','e','d',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ',
1695	'P','r','o','v','i','d','e','r',' ','v','1','.','0',0 };
1696	#endif
1697	#define MS_ENHANCED_PROV WINELIB_NAME_AW(MS_ENHANCED_PROV_)
1698
1699	#define MS_STRONG_PROV_A "Microsoft Strong Cryptographic Provider"
1700	#if defined(__GNUC__)
1701	# define MS_STRONG_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1702	'S','t','r','o','n','g',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ', \
1703	'P','r','o','v','i','d','e','r',0 }
1704	#elif defined(_MSC_VER)
1705	# define MS_STRONG_PROV_W L"Microsoft Strong Cryptographic Provider"
1706	#else
1707	static const WCHAR MS_STRONG_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1708	'S','t','r','o','n','g',' ','C','r','y','p','t','o','g','r','a','p','h','i','c',' ',
1709	'P','r','o','v','i','d','e','r',0 };
1710	#endif
1711	#define MS_STRONG_PROV WINELIB_NAME_AW(MS_STRONG_PROV_)
1712
1713	#define MS_DEF_RSA_SIG_PROV_A "Microsoft RSA Signature Cryptographic Provider"
1714	#if defined(__GNUC__)
1715	# define MS_DEF_RSA_SIG_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1716	'R','S','A',' ','S','i','g','n','a','t','u','r','e',' ', \
1717	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
1718	#elif defined(_MSC_VER)
1719	# define MS_DEF_RSA_SIG_PROV_W L"Microsoft RSA Signature Cryptographic Provider"
1720	#else
1721	static const WCHAR MS_DEF_RSA_SIG_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1722	'R','S','A',' ','S','i','g','n','a','t','u','r','e',' ',
1723	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
1724	#endif
1725	#define MS_DEF_RSA_SIG_PROV WINELIB_NAME_AW(MS_DEF_RSA_SIG_PROV_)
1726
1727	#define MS_DEF_RSA_SCHANNEL_PROV_A "Microsoft RSA SChannel Cryptographic Provider"
1728	#if defined(__GNUC__)
1729	# define MS_DEF_RSA_SCHANNEL_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1730	'R','S','A',' ','S','C','h','a','n','n','e','l',' ', \
1731	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
1732	#elif defined(_MSC_VER)
1733	# define MS_DEF_RSA_SCHANNEL_PROV_W L"Microsoft RSA SChannel Cryptographic Provider"
1734	#else
1735	static const WCHAR MS_DEF_RSA_SCHANNEL_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1736	'R','S','A',' ','S','C','h','a','n','n','e','l',' ',
1737	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
1738	#endif
1739	#define MS_DEF_RSA_SCHANNEL_PROV WINELIB_NAME_AW(MS_DEF_RSA_SCHANNEL_PROV_)
1740
1741	#define MS_DEF_DSS_PROV_A "Microsoft Base DSS Cryptographic Provider"
1742	#if defined(__GNUC__)
1743	# define MS_DEF_DSS_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1744	'B','a','s','e',' ','D','S','S',' ', \
1745	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
1746	#elif defined(_MSC_VER)
1747	# define MS_DEF_DSS_PROV_W L"Microsoft Base DSS Cryptographic Provider"
1748	#else
1749	static const WCHAR MS_DEF_DSS_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1750	'B','a','s','e',' ','D','S','S',' ',
1751	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
1752	#endif
1753	#define MS_DEF_DSS_PROV WINELIB_NAME_AW(MS_DEF_DSS_PROV_)
1754
1755	#define MS_DEF_DSS_DH_PROV_A "Microsoft Base DSS and Diffie-Hellman Cryptographic Provider"
1756	#if defined(__GNUC__)
1757	# define MS_DEF_DSS_DH_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1758	'B','a','s','e',' ','D','S','S',' ','a','n','d',' ', \
1759	'D','i','f','f','i','e','-','H','e','l','l','m','a','n',' ', \
1760	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
1761	#elif defined(_MSC_VER)
1762	# define MS_DEF_DSS_DH_PROV_W L"Microsoft Base DSS and Diffie-Hellman Cryptographic Provider"
1763	#else
1764	static const WCHAR MS_DEF_DSS_DH_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1765	'B','a','s','e',' ','D','S','S',' ','a','n','d',' ',
1766	'D','i','f','f','i','e','-','H','e','l','l','m','a','n',' ',
1767	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
1768	#endif
1769	#define MS_DEF_DSS_DH_PROV WINELIB_NAME_AW(MS_DEF_DSS_DH_PROV_)
1770
1771	#define MS_ENH_DSS_DH_PROV_A "Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider"
1772	#if defined(__GNUC__)
1773	# define MS_ENH_DSS_DH_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1774	'E','n','h','a','n','c','e','d',' ','D','S','S',' ','a','n','d',' ', \
1775	'D','i','f','f','i','e','-','H','e','l','l','m','a','n',' ', \
1776	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
1777	#elif defined(_MSC_VER)
1778	# define MS_ENH_DSS_DH_PROV_W L"Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider"
1779	#else
1780	static const WCHAR MS_ENH_DSS_DH_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1781	'E','n','h','a','n','c','e','d',' ','D','S','S',' ','a','n','d',' ',
1782	'D','i','f','f','i','e','-','H','e','l','l','m','a','n',' ',
1783	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
1784	#endif
1785	#define MS_ENH_DSS_DH_PROV WINELIB_NAME_AW(MS_ENH_DSS_DH_PROV_)
1786
1787	#define MS_DEF_DH_SCHANNEL_PROV_A "Microsoft DH SChannel Cryptographic Provider"
1788	#if defined(__GNUC__)
1789	# define MS_DEF_DH_SCHANNEL_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1790	'D','H',' ','S','C','h','a','n','n','e','l',' ', \
1791	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
1792	#elif defined(_MSC_VER)
1793	# define MS_DEF_DH_SCHANNEL_PROV_W L"Microsoft DH SChannel Cryptographic Provider"
1794	#else
1795	static const WCHAR MS_DEF_DH_SCHANNEL_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1796	'D','H',' ','S','C','h','a','n','n','e','l',' ',
1797	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
1798	#endif
1799	#define MS_DEF_DH_SCHANNEL_PROV WINELIB_NAME_AW(MS_DEF_DH_SCHANNEL_PROV_)
1800
1801	#define MS_SCARD_PROV_A "Microsoft Base Smart Card Cryptographic Provider"
1802	#if defined(__GNUC__)
1803	# define MS_SCARD_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1804	'B','a','s','e',' ','S','m','a','r','t',' ','C','a','r','d',' ', \
1805	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
1806	#elif defined(_MSC_VER)
1807	# define MS_SCARD_PROV_W L"Microsoft Base Smart Card Cryptographic Provider"
1808	#else
1809	static const WCHAR MS_SCARD_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1810	'B','a','s','e',' ','S','m','a','r','t',' ','C','a','r','d',' ',
1811	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
1812	#endif
1813	#define MS_SCARD_PROV WINELIB_NAME_AW(MS_SCARD_PROV_)
1814
1815	#define MS_ENH_RSA_AES_PROV_A "Microsoft Enhanced RSA and AES Cryptographic Provider"
1816	#if defined(__GNUC__)
1817	# define MS_ENH_RSA_AES_PROV_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1818	'E','n','h','a','n','c','e','d',' ','R','S','A',' ','a','n','d',' ','A','E','S',' ',\
1819	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 }
1820	#elif defined(_MSC_VER)
1821	# define MS_ENH_RSA_AES_PROV_W L"Microsoft Enhanced RSA and AES Cryptographic Provider"
1822	#else
1823	static const WCHAR MS_ENH_RSA_AES_PROV_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1824	'E','n','h','a','n','c','e','d',' ','R','S','A',' ','a','n','d',' ','A','E','S',' ',
1825	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',0 };
1826	#endif
1827	#define MS_ENH_RSA_AES_PROV WINELIB_NAME_AW(MS_ENH_RSA_AES_PROV_)
1828
1829	#define MS_ENH_RSA_AES_PROV_XP_A "Microsoft Enhanced RSA and AES Cryptographic Provider (Prototype)"
1830	#if defined(__GNUC__)
1831	# define MS_ENH_RSA_AES_PROV_XP_W (const WCHAR []){ 'M','i','c','r','o','s','o','f','t',' ', \
1832	'E','n','h','a','n','c','e','d',' ','R','S','A',' ','a','n','d',' ','A','E','S',' ',\
1833	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',' ',\
1834	'(','P','r','o','t','o','t','y','p','e',')',0 }
1835	#elif defined(_MSC_VER)
1836	# define MS_ENH_RSA_AES_PROV_XP_W L"Microsoft Enhanced RSA and AES Cryptographic Provider (Prototype)"
1837	#else
1838	static const WCHAR MS_ENH_RSA_AES_PROV_XP_W[] = { 'M','i','c','r','o','s','o','f','t',' ',
1839	'E','n','h','a','n','c','e','d',' ','R','S','A',' ','a','n','d',' ','A','E','S',' ',
1840	'C','r','y','p','t','o','g','r','a','p','h','i','c',' ','P','r','o','v','i','d','e','r',' ',
1841	'(','P','r','o','t','o','t','y','p','e',')',0 };
1842	#endif
1843	#define MS_ENH_RSA_AES_PROV_XP WINELIB_NAME_AW(MS_ENH_RSA_AES_PROV_XP_)
1844
1845	/* Key Specs*/
1846	#define AT_KEYEXCHANGE 1
1847	#define AT_SIGNATURE 2
1848
1849	/* Provider Types */
1850	#define PROV_RSA_FULL 1
1851	#define PROV_RSA_SIG 2
1852	#define PROV_DSS 3
1853	#define PROV_FORTEZZA 4
1854	#define PROV_MS_EXCHANGE 5
1855	#define PROV_SSL 6
1856	#define PROV_RSA_SCHANNEL 12
1857	#define PROV_DSS_DH 13
1858	#define PROV_EC_ECDSA_SIG 14
1859	#define PROV_EC_ECNRA_SIG 15
1860	#define PROV_EC_ECDSA_FULL 16
1861	#define PROV_EC_ECNRA_FULL 17
1862	#define PROV_DH_SCHANNEL 18
1863	#define PROV_SPYRUS_LYNKS 20
1864	#define PROV_RNG 21
1865	#define PROV_INTEL_SEC 22
1866	#define PROV_REPLACE_OWF 23
1867	#define PROV_RSA_AES 24
1868
1869	/* FLAGS Section */
1870
1871	#define CRYPT_FIRST 1
1872	#define CRYPT_NEXT 2
1873
1874	#define CRYPT_IMPL_HARDWARE 1
1875	#define CRYPT_IMPL_SOFTWARE 2
1876	#define CRYPT_IMPL_MIXED 3
1877	#define CRYPT_IMPL_UNKNOWN 4
1878
1879	/* CryptAcquireContext */
1880	#define CRYPT_VERIFYCONTEXT 0xF0000000
1881	#define CRYPT_NEWKEYSET 0x00000008
1882	#define CRYPT_DELETEKEYSET 0x00000010
1883	#define CRYPT_MACHINE_KEYSET 0x00000020
1884	#define CRYPT_SILENT 0x00000040
1885
1886	/* Crypt{Get\|Set}Provider */
1887	#define CRYPT_MACHINE_DEFAULT 0x00000001
1888	#define CRYPT_USER_DEFAULT 0x00000002
1889	#define CRYPT_DELETE_DEFAULT 0x00000004
1890
1891	/* Crypt{Get/Set}ProvParam */
1892	#define PP_CLIENT_HWND 1
1893	#define PP_ENUMALGS 1
1894	#define PP_ENUMCONTAINERS 2
1895	#define PP_IMPTYPE 3
1896	#define PP_NAME 4
1897	#define PP_VERSION 5
1898	#define PP_CONTAINER 6
1899	#define PP_CHANGE_PASSWORD 7
1900	#define PP_KEYSET_SEC_DESCR 8
1901	#define PP_KEY_TYPE_SUBTYPE 10
1902	#define PP_CONTEXT_INFO 11
1903	#define PP_KEYEXCHANGE_KEYSIZE 12
1904	#define PP_SIGNATURE_KEYSIZE 13
1905	#define PP_KEYEXCHANGE_ALG 14
1906	#define PP_SIGNATURE_ALG 15
1907	#define PP_PROVTYPE 16
1908	#define PP_KEYSTORAGE 17
1909	#define PP_SYM_KEYSIZE 19
1910	#define PP_SESSION_KEYSIZE 20
1911	#define PP_UI_PROMPT 21
1912	#define PP_ENUMALGS_EX 22
1913	#define PP_DELETEKEY 24
1914	#define PP_ENUMMANDROOTS 25
1915	#define PP_ENUMELECTROOTS 26
1916	#define PP_KEYSET_TYPE 27
1917	#define PP_ADMIN_PIN 31
1918	#define PP_KEYEXCHANGE_PIN 32
1919	#define PP_SIGNATURE_PIN 33
1920	#define PP_SIG_KEYSIZE_INC 34
1921	#define PP_KEYX_KEYSIZE_INC 35
1922	#define PP_UNIQUE_CONTAINER 36
1923	#define PP_SGC_INFO 37
1924	#define PP_USE_HARDWARE_RNG 38
1925	#define PP_KEYSPEC 39
1926	#define PP_ENUMEX_SIGNING_PROT 40
1927	#define PP_CRYPT_COUNT_KEY_USE 41
1928	#define PP_USER_CERTSTORE 42
1929	#define PP_SMARTCARD_READER 43
1930	#define PP_SMARTCARD_GUID 45
1931	#define PP_ROOT_CERTSTORE 46
1932
1933	/* Values returned by CryptGetProvParam of PP_KEYSTORAGE */
1934	#define CRYPT_SEC_DESCR 0x00000001
1935	#define CRYPT_PSTORE 0x00000002
1936	#define CRYPT_UI_PROMPT 0x00000004
1937
1938	/* Crypt{Get/Set}KeyParam */
1939	#define KP_IV 1
1940	#define KP_SALT 2
1941	#define KP_PADDING 3
1942	#define KP_MODE 4
1943	#define KP_MODE_BITS 5
1944	#define KP_PERMISSIONS 6
1945	#define KP_ALGID 7
1946	#define KP_BLOCKLEN 8
1947	#define KP_KEYLEN 9
1948	#define KP_SALT_EX 10
1949	#define KP_P 11
1950	#define KP_G 12
1951	#define KP_Q 13
1952	#define KP_X 14
1953	#define KP_Y 15
1954	#define KP_RA 16
1955	#define KP_RB 17
1956	#define KP_INFO 18
1957	#define KP_EFFECTIVE_KEYLEN 19
1958	#define KP_SCHANNEL_ALG 20
1959	#define KP_CLIENT_RANDOM 21
1960	#define KP_SERVER_RANDOM 22
1961	#define KP_RP 23
1962	#define KP_PRECOMP_MD5 24
1963	#define KP_PRECOMP_SHA 25
1964	#define KP_CERTIFICATE 26
1965	#define KP_CLEAR_KEY 27
1966	#define KP_PUB_EX_LEN 28
1967	#define KP_PUB_EX_VAL 29
1968	#define KP_KEYVAL 30
1969	#define KP_ADMIN_PIN 31
1970	#define KP_KEYEXCHANGE_PIN 32
1971	#define KP_SIGNATURE_PIN 33
1972	#define KP_PREHASH 34
1973	#define KP_ROUNDS 35
1974	#define KP_OAEP_PARAMS 36
1975	#define KP_CMS_KEY_INFO 37
1976	#define KP_CMS_DH_KEY_INFO 38
1977	#define KP_PUB_PARAMS 39
1978	#define KP_VERIFY_PARAMS 40
1979	#define KP_HIGHEST_VERSION 41
1980	#define KP_GET_USE_COUNT 42
1981
1982	/* Values for KP_PADDING */
1983	#define PKCS5_PADDING 1
1984	#define RANDOM_PADDING 2
1985	#define ZERO_PADDING 3
1986
1987	/* CryptSignHash/CryptVerifySignature */
1988	#define CRYPT_NOHASHOID 0x00000001
1989	#define CRYPT_TYPE2_FORMAT 0x00000002
1990	#define CRYPT_X931_FORMAT 0x00000004
1991
1992	/* Crypt{Get,Set}HashParam */
1993	#define HP_ALGID 0x0001
1994	#define HP_HASHVAL 0x0002
1995	#define HP_HASHSIZE 0x0004
1996	#define HP_HMAC_INFO 0x0005
1997	#define HP_TLS1PRF_LABEL 0x0006
1998	#define HP_TLS1PRF_SEED 0x0007
1999
2000	/* Crypt{Get,Set}KeyParam */
2001	#define CRYPT_MODE_CBC 1
2002	#define CRYPT_MODE_ECB 2
2003	#define CRYPT_MODE_OFB 3
2004	#define CRYPT_MODE_CFB 4
2005
2006	#define CRYPT_ENCRYPT 0x0001
2007	#define CRYPT_DECRYPT 0x0002
2008	#define CRYPT_EXPORT 0x0004
2009	#define CRYPT_READ 0x0008
2010	#define CRYPT_WRITE 0x0010
2011	#define CRYPT_MAC 0x0020
2012	#define CRYPT_EXPORT_KEY 0x0040
2013	#define CRYPT_IMPORT_KEY 0x0080
2014	#define CRYPT_ARCHIVE 0x0100
2015
2016	/* CryptKey /
2017	#define CRYPT_EXPORTABLE 0x00000001
2018	#define CRYPT_USER_PROTECTED 0x00000002
2019	#define CRYPT_CREATE_SALT 0x00000004
2020	#define CRYPT_UPDATE_KEY 0x00000008
2021	#define CRYPT_NO_SALT 0x00000010
2022	#define CRYPT_PREGEN 0x00000040
2023	#define CRYPT_SERVER 0x00000400
2024	#define CRYPT_ARCHIVABLE 0x00004000
2025
2026	/* CryptExportKey */
2027	#define CRYPT_SSL2_FALLBACK 0x00000002
2028	#define CRYPT_DESTROYKEY 0x00000004
2029	#define CRYPT_OAEP 0x00000040
2030
2031	/* CryptHashSessionKey */
2032	#define CRYPT_LITTLE_ENDIAN 0x00000001
2033
2034	/* Crypt{Protect,Unprotect}Data PROMPTSTRUCT flags */
2035	#define CRYPTPROTECT_PROMPT_ON_PROTECT 0x0001
2036	#define CRYPTPROTECT_PROMPT_ON_UNPROTECT 0x0002
2037	/* Crypt{Protect,Unprotect}Data flags */
2038	#define CRYPTPROTECT_UI_FORBIDDEN 0x0001
2039	#define CRYPTPROTECT_LOCAL_MACHINE 0x0004
2040	#define CRYPTPROTECT_AUDIT 0x0010
2041	#define CRYPTPROTECT_VERIFY_PROTECTION 0x0040
2042
2043	/* Blob Types */
2044	#define SIMPLEBLOB 0x1
2045	#define PUBLICKEYBLOB 0x6
2046	#define PRIVATEKEYBLOB 0x7
2047	#define PLAINTEXTKEYBLOB 0x8
2048	#define OPAQUEKEYBLOB 0x9
2049	#define PUBLICKEYBLOBEX 0xA
2050	#define SYMMETRICWRAPKEYBLOB 0xB
2051
2052	#define CUR_BLOB_VERSION 2
2053
2054	/* cert store provider types */
2055	#define CERT_STORE_PROV_MSG ((LPCSTR)1)
2056	#define CERT_STORE_PROV_MEMORY ((LPCSTR)2)
2057	#define CERT_STORE_PROV_FILE ((LPCSTR)3)
2058	#define CERT_STORE_PROV_REG ((LPCSTR)4)
2059	#define CERT_STORE_PROV_PKCS7 ((LPCSTR)5)
2060	#define CERT_STORE_PROV_SERIALIZED ((LPCSTR)6)
2061	#define CERT_STORE_PROV_FILENAME_A ((LPCSTR)7)
2062	#define CERT_STORE_PROV_FILENAME_W ((LPCSTR)8)
2063	#define CERT_STORE_PROV_SYSTEM_A ((LPCSTR)9)
2064	#define CERT_STORE_PROV_SYSTEM_W ((LPCSTR)10)
2065	#define CERT_STORE_PROV_SYSTEM CERT_STORE_PROV_SYSTEM_W
2066	#define CERT_STORE_PROV_COLLECTION ((LPCSTR)11)
2067	#define CERT_STORE_PROV_SYSTEM_REGISTRY_A ((LPCSTR)12)
2068	#define CERT_STORE_PROV_SYSTEM_REGISTRY_W ((LPCSTR)13)
2069	#define CERT_STORE_PROV_SYSTEM_REGISTRY CERT_STORE_PROV_SYSTEM_REGISTRY_W
2070	#define CERT_STORE_PROV_PHYSICAL_W ((LPCSTR)14)
2071	#define CERT_STORE_PROV_PHYSICAL CERT_STORE_PROV_PHYSICAL_W
2072	#define CERT_STORE_PROV_SMART_CARD_W ((LPCSTR)15)
2073	#define CERT_STORE_PROV_SMART_CARD CERT_STORE_PROV_SMART_CARD_W
2074	#define CERT_STORE_PROV_LDAP_W ((LPCSTR)16)
2075	#define CERT_STORE_PROV_LDAP CERT_STORE_PROV_LDAP_W
2076
2077	#define sz_CERT_STORE_PROV_MEMORY "Memory"
2078	#define sz_CERT_STORE_PROV_FILENAME_W "File"
2079	#define sz_CERT_STORE_PROV_FILENAME sz_CERT_STORE_PROV_FILENAME_W
2080	#define sz_CERT_STORE_PROV_SYSTEM_W "System"
2081	#define sz_CERT_STORE_PROV_SYSTEM sz_CERT_STORE_PROV_SYSTEM_W
2082	#define sz_CERT_STORE_PROV_PKCS7 "PKCS7"
2083	#define sz_CERT_STORE_PROV_SERIALIZED "Serialized"
2084	#define sz_CERT_STORE_PROV_COLLECTION "Collection"
2085	#define sz_CERT_STORE_PROV_SYSTEM_REGISTRY_W "SystemRegistry"
2086	#define sz_CERT_STORE_PROV_SYSTEM_REGISTRY sz_CERT_STORE_PROV_SYSTEM_REGISTRY_W
2087	#define sz_CERT_STORE_PROV_PHYSICAL_W "Physical"
2088	#define sz_CERT_STORE_PROV_PHYSICAL sz_CERT_STORE_PROV_PHYSICAL_W
2089	#define sz_CERT_STORE_PROV_SMART_CARD_W "SmartCard"
2090	#define sz_CERT_STORE_PROV_SMART_CARD sz_CERT_STORE_PROV_SMART_CARD_W
2091	#define sz_CERT_STORE_PROV_LDAP_W "Ldap"
2092	#define sz_CERT_STORE_PROV_LDAP sz_CERT_STORE_PROV_LDAP_W
2093
2094	/* types for CertOpenStore dwEncodingType */
2095	#define CERT_ENCODING_TYPE_MASK 0x0000ffff
2096	#define CMSG_ENCODING_TYPE_MASK 0xffff0000
2097	#define GET_CERT_ENCODING_TYPE(x) ((x) & CERT_ENCODING_TYPE_MASK)
2098	#define GET_CMSG_ENCODING_TYPE(x) ((x) & CMSG_ENCODING_TYPE_MASK)
2099
2100	#define CRYPT_ASN_ENCODING 0x00000001
2101	#define CRYPT_NDR_ENCODING 0x00000002
2102	#define X509_ASN_ENCODING 0x00000001
2103	#define X509_NDR_ENCODING 0x00000002
2104	#define PKCS_7_ASN_ENCODING 0x00010000
2105	#define PKCS_7_NDR_ENCODING 0x00020000
2106
2107	/* system store locations */
2108	#define CERT_SYSTEM_STORE_LOCATION_MASK 0x00ff0000
2109	#define CERT_SYSTEM_STORE_LOCATION_SHIFT 16
2110
2111	/* system store location ids */
2112	/* hkcu */
2113	#define CERT_SYSTEM_STORE_CURRENT_USER_ID 1
2114	/* hklm */
2115	#define CERT_SYSTEM_STORE_LOCAL_MACHINE_ID 2
2116	/* hklm\Software\Microsoft\Cryptography\Services */
2117	#define CERT_SYSTEM_STORE_CURRENT_SERVICE_ID 4
2118	#define CERT_SYSTEM_STORE_SERVICES_ID 5
2119	/* HKEY_USERS */
2120	#define CERT_SYSTEM_STORE_USERS_ID 6
2121	/* hkcu\Software\Policies\Microsoft\SystemCertificates */
2122	#define CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY_ID 7
2123	/* hklm\Software\Policies\Microsoft\SystemCertificates */
2124	#define CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY_ID 8
2125	/* hklm\Software\Microsoft\EnterpriseCertificates */
2126	#define CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE_ID 9
2127
2128	/* system store location values */
2129	#define CERT_SYSTEM_STORE_CURRENT_USER \
2130	(CERT_SYSTEM_STORE_CURRENT_USER_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
2131	#define CERT_SYSTEM_STORE_LOCAL_MACHINE \
2132	(CERT_SYSTEM_STORE_LOCAL_MACHINE_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
2133	#define CERT_SYSTEM_STORE_CURRENT_SERVICE \
2134	(CERT_SYSTEM_STORE_CURRENT_SERVICE_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
2135	#define CERT_SYSTEM_STORE_SERVICES \
2136	(CERT_SYSTEM_STORE_SERVICES_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
2137	#define CERT_SYSTEM_STORE_USERS \
2138	(CERT_SYSTEM_STORE_USERS_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
2139	#define CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY \
2140	(CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
2141	#define CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY \
2142	(CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
2143	#define CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE \
2144	(CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE_ID << CERT_SYSTEM_STORE_LOCATION_SHIFT)
2145
2146	#if defined(__GNUC__)
2147	#define CERT_LOCAL_MACHINE_SYSTEM_STORE_REGPATH (const WCHAR[])\
2148	{'S','o','f','t','w','a','r','e','\\','M','i','c','r','o','s','o','f','t',\
2149	'\\','S','y','s','t','e','m','C','e','r','t','i','f','i','c','a','t','e','s',\
2150	0 }
2151	#define CERT_GROUP_POLICY_SYSTEM_STORE_REGPATH (const WCHAR[])\
2152	{'S','o','f','t','w','a','r','e','\\','P','o','l','i','c','i','e','s','\\',\
2153	'M','i','c','r','o','s','o','f','t','\\','S','y','s','t','e','m','C','e','r',\
2154	't','i','f','i','c','a','t','e','s',0 }
2155	#elif defined(_MSC_VER)
2156	#define CERT_LOCAL_MACHINE_SYSTEM_STORE_REGPATH \
2157	L"Software\\Microsoft\\SystemCertificates"
2158	#define CERT_GROUP_POLICY_SYSTEM_STORE_REGPATH \
2159	L"Software\\Policies\\Microsoft\\SystemCertificates"
2160	#else
2161	static const WCHAR CERT_LOCAL_MACHINE_SYSTEM_STORE_REGPATH[] =
2162	{'S','o','f','t','w','a','r','e','\\','M','i','c','r','o','s','o','f','t','\\',
2163	'S','y','s','t','e','m','C','e','r','t','i','f','i','c','a','t','e','s',0 };
2164	static const WCHAR CERT_GROUP_POLICY_SYSTEM_STORE_REGPATH[] =
2165	{'S','o','f','t','w','a','r','e','\\','P','o','l','i','c','i','e','s','\\',
2166	'M','i','c','r','o','s','o','f','t','\\','S','y','s','t','e','m','C','e','r',
2167	't','i','f','i','c','a','t','e','s',0 };
2168	#endif
2169
2170	#if defined(__GNUC__)
2171	#define CERT_EFSBLOB_REGPATH (const WCHAR[])\
2172	{'S','o','f','t','w','a','r','e','\\','P','o','l','i','c','i','e','s','\\',\
2173	'M','i','c','r','o','s','o','f','t','\\','S','y','s','t','e','m','C','e','r',\
2174	't','i','f','i','c','a','t','e','s','\\','E','F','S',0 }
2175	#define CERT_EFSBLOB_VALUE_NAME (const WCHAR[]) {'E','F','S','B','l','o','b',0 }
2176	#elif defined(_MSC_VER)
2177	#define CERT_EFSBLOB_REGPATH CERT_GROUP_POLICY_SYSTEM_STORE_REGPATH L"\\EFS"
2178	#define CERT_EFSBLOB_VALUE_NAME L"EFSBlob"
2179	#else
2180	static const WCHAR CERT_EFSBLOB_REGPATH[] =
2181	{'S','o','f','t','w','a','r','e','\\','P','o','l','i','c','i','e','s','\\',
2182	'M','i','c','r','o','s','o','f','t','\\','S','y','s','t','e','m','C','e','r',
2183	't','i','f','i','c','a','t','e','s','\\','E','F','S',0 };
2184	static const CERT_EFSBLOB_VALUE_NAME[] = { 'E','F','S','B','l','o','b',0 };
2185	#endif
2186
2187	#if defined(__GNUC__)
2188	#define CERT_PROT_ROOT_FLAGS_REGPATH (const WCHAR[])\
2189	{'\\','R','o','o','t','\\','P','r','o','t','e','c','t','e','d','R','o','o','t',\
2190	's',0 }
2191	#define CERT_PROT_ROOT_FLAGS_VALUE_NAME (const WCHAR[])\
2192	{'F','l','a','g','s',0 }
2193	#elif defined(_MSC_VER)
2194	#define CERT_PROT_ROOT_FLAGS_REGPATH L"\\Root\\ProtectedRoots"
2195	#define CERT_PROT_ROOT_FLAGS_VALUE_NAME L"Flags"
2196	#else
2197	static const WCHAR CERT_PROT_ROOT_FLAGS_REGPATH[] =
2198	{ '\\','R','o','o','t','\\','P','r','o','t','e','c','t','e','d','R','o','o',
2199	't','s',0 };
2200	static const WCHAR CERT_PROT_ROOT_FLAGS_VALUE_NAME[] = {'F','l','a','g','s',0 };
2201	#endif
2202
2203	#define CERT_PROT_ROOT_DISABLE_CURRENT_USER_FLAG 0x01
2204	#define CERT_PROT_ROOT_INHIBIT_ADD_AT_INIT_FLAG 0x02
2205	#define CERT_PROT_ROOT_INHIBIT_PURGE_LM_FLAG 0x04
2206	#define CERT_PROT_ROOT_DISABLE_LM_AUTH_FLAG 0x08
2207	#define CERT_PROT_ROOT_DISABLE_NT_AUTH_REQUIRED_FLAG 0x10
2208	#define CERT_PROT_ROOT_DISABLE_NOT_DEFINED_NAME_CONSTRAINT_FLAG 0x20
2209
2210	#if defined(__GNUC__)
2211	#define CERT_TRUST_PUB_SAFER_GROUP_POLICY_REGPATH (const WCHAR[])\
2212	{'S','o','f','t','w','a','r','e','\\','P','o','l','i','c','i','e','s','\\',\
2213	'M','i','c','r','o','s','o','f','t','\\','S','y','s','t','e','m','C','e','r',\
2214	't','i','f','i','c','a','t','e','s','\\','T','r','u','s','t','e','d',\
2215	'P','u','b','l','i','s','h','e','r','\\','S','a','f','e','r',0 }
2216	#elif defined(_MSC_VER)
2217	#define CERT_TRUST_PUB_SAFER_GROUP_POLICY_REGPATH \
2218	CERT_GROUP_POLICY_SYSTEM_STORE_REGPATH L"\\TrustedPublisher\\Safer"
2219	#else
2220	static const WCHAR CERT_TRUST_PUB_SAFER_GROUP_POLICY_REGPATH[] =
2221	{'S','o','f','t','w','a','r','e','\\','P','o','l','i','c','i','e','s','\\',
2222	'M','i','c','r','o','s','o','f','t','\\','S','y','s','t','e','m','C','e','r',
2223	't','i','f','i','c','a','t','e','s','\\','T','r','u','s','t','e','d',
2224	'P','u','b','l','i','s','h','e','r','\\','S','a','f','e','r',0 };
2225	#endif
2226
2227	#if defined(__GNUC__)
2228	#define CERT_TRUST_PUB_SAFER_LOCAL_MACHINE_REGPATH (const WCHAR[])\
2229	{'S','o','f','t','w','a','r','e','\\','M','i','c','r','o','s','o','f','t','\\',\
2230	'S','y','s','t','e','m','C','e','r','t','i','f','i','c','a','t','e','s','\\',\
2231	'T','r','u','s','t','e','d','P','u','b','l','i','s','h','e','r','\\',\
2232	'S','a','f','e','r',0 }
2233	#define CERT_TRUST_PUB_AUTHENTICODE_FLAGS_VALUE_NAME (const WCHAR[])\
2234	{'A','u','t','h','e','n','t','i','c','o','d','e','F','l','a','g','s',0 };
2235	#elif defined(_MSC_VER)
2236	#define CERT_TRUST_PUB_SAFER_LOCAL_MACHINE_REGPATH \
2237	CERT_LOCAL_MACHINE_SYSTEM_STORE_REGPATH L"\\TrustedPublisher\\Safer"
2238	#define CERT_TRUST_PUB_AUTHENTICODE_FLAGS_VALUE_NAME L"AuthenticodeFlags"
2239	#else
2240	static const WCHAR CERT_TRUST_PUB_SAFER_LOCAL_MACHINE_REGPATH[] =
2241	{'S','o','f','t','w','a','r','e','\\','M','i','c','r','o','s','o','f','t','\\',
2242	'S','y','s','t','e','m','C','e','r','t','i','f','i','c','a','t','e','s','\\',
2243	'T','r','u','s','t','e','d','P','u','b','l','i','s','h','e','r','\\',
2244	'S','a','f','e','r',0 };
2245	static const WCHAR CERT_TRUST_PUB_AUTHENTICODE_FLAGS_VALUE_NAME[] =
2246	{ 'A','u','t','h','e','n','t','i','c','o','d','e','F','l','a','g','s',0 };
2247	#endif
2248
2249	#define CERT_TRUST_PUB_ALLOW_END_USER_TRUST 0x00000000
2250	#define CERT_TRUST_PUB_ALLOW_MACHINE_ADMIN_TRUST 0x00000001
2251	#define CERT_TRUST_PUB_ALLOW_ENTERPRISE_ADMIN_TRUST 0x00000002
2252	#define CERT_TRUST_PUB_ALLOW_TRUST_MASK 0x00000003
2253	#define CERT_TRUST_PUB_CHECK_PUBLISHER_REV_FLAG 0x00000100
2254	#define CERT_TRUST_PUB_CHECK_TIMESTAMP_REV_FLAG 0x00000200
2255
2256	/* flags for CertOpenStore dwFlags */
2257	#define CERT_STORE_NO_CRYPT_RELEASE_FLAG 0x00000001
2258	#define CERT_STORE_SET_LOCALIZED_NAME_FLAG 0x00000002
2259	#define CERT_STORE_DEFER_CLOSE_UNTIL_LAST_FREE_FLAG 0x00000004
2260	#define CERT_STORE_DELETE_FLAG 0x00000010
2261	#define CERT_STORE_UNSAFE_PHYSICAL_FLAG 0x00000020
2262	#define CERT_STORE_SHARE_STORE_FLAG 0x00000040
2263	#define CERT_STORE_SHARE_CONTEXT_FLAG 0x00000080
2264	#define CERT_STORE_MANIFOLD_FLAG 0x00000100
2265	#define CERT_STORE_ENUM_ARCHIVED_FLAG 0x00000200
2266	#define CERT_STORE_UPDATE_KEYID_FLAG 0x00000400
2267	#define CERT_STORE_BACKUP_RESTORE_FLAG 0x00000800
2268	#define CERT_STORE_MAXIMUM_ALLOWED_FLAG 0x00001000
2269	#define CERT_STORE_CREATE_NEW_FLAG 0x00002000
2270	#define CERT_STORE_OPEN_EXISTING_FLAG 0x00004000
2271	#define CERT_STORE_READONLY_FLAG 0x00008000
2272
2273	#define CERT_REGISTRY_STORE_REMOTE_FLAG 0x00010000
2274	#define CERT_REGISTRY_STORE_SERIALIZED_FLAG 0x00020000
2275	#define CERT_REGISTRY_STORE_ROAMING_FLAG 0x00040000
2276	#define CERT_REGISTRY_STORE_MY_IE_DIRTY_FLAG 0x00080000
2277	#define CERT_REGISTRY_STORE_LM_GPT_FLAG 0x01000000
2278	#define CERT_REGISTRY_STORE_CLIENT_GPT_FLAG 0x80000000
2279
2280	#define CERT_FILE_STORE_COMMIT_ENABLE_FLAG 0x00010000
2281
2282	/* CertCloseStore dwFlags */
2283	#define CERT_CLOSE_STORE_FORCE_FLAG 0x00000001
2284	#define CERT_CLOSE_STORE_CHECK_FLAG 0x00000002
2285
2286	/* dwAddDisposition */
2287	#define CERT_STORE_ADD_NEW 1
2288	#define CERT_STORE_ADD_USE_EXISTING 2
2289	#define CERT_STORE_ADD_REPLACE_EXISTING 3
2290	#define CERT_STORE_ADD_ALWAYS 4
2291	#define CERT_STORE_ADD_REPLACE_EXISTING_INHERIT_PROPERTIES 5
2292	#define CERT_STORE_ADD_NEWER 6
2293	#define CERT_STORE_ADD_NEWER_INHERIT_PROPERTIES 7
2294
2295	/* Installable OID function defs */
2296	#define CRYPT_OID_OPEN_STORE_PROV_FUNC "CertDllOpenStoreProv"
2297	#define CRYPT_OID_ENCODE_OBJECT_FUNC "CryptDllEncodeObject"
2298	#define CRYPT_OID_DECODE_OBJECT_FUNC "CryptDllDecodeObject"
2299	#define CRYPT_OID_ENCODE_OBJECT_EX_FUNC "CryptDllEncodeObjectEx"
2300	#define CRYPT_OID_DECODE_OBJECT_EX_FUNC "CryptDllDecodeObjectEx"
2301	#define CRYPT_OID_CREATE_COM_OBJECT_FUNC "CryptDllCreateComObject"
2302	#define CRYPT_OID_VERIFY_REVOCATION_FUNC "CertDllVerifyRevocation"
2303	#define CRYPT_OID_VERIFY_CTL_USAGE_FUNC "CertDllVerifyCTLUsage"
2304	#define CRYPT_OID_FORMAT_OBJECT_FUNC "CryptDllFormatObject"
2305	#define CRYPT_OID_FIND_OID_INFO_FUNC "CryptDllFindOIDInfo"
2306	#define CRYPT_OID_FIND_LOCALIZED_NAME_FUNC "CryptDllFindLocalizedName"
2307	#define CRYPT_OID_EXPORT_PUBLIC_KEY_INFO_FUNC "CryptDllExportPublicKeyInfoEx"
2308	#define CRYPT_OID_IMPORT_PUBLIC_KEY_INFO_FUNC "CryptDllImportPublicKeyInfoEx"
2309	#define CRYPT_OID_EXPORT_PRIVATE_KEY_INFO_FUNC "CryptDllExportPrivateKeyInfoEx"
2310	#define CRYPT_OID_IMPORT_PRIVATE_KEY_INFO_FUNC "CryptDllImportPrivateKeyInfoEx"
2311	#define CRYPT_OID_VERIFY_CERTIFICATE_CHAIN_POLICY_FUNC \
2312	"CertDllVerifyCertificateChainPolicy"
2313	#define URL_OID_GET_OBJECT_URL_FUNC "UrlDllGetObjectUrl"
2314	#define TIME_VALID_OID_GET_OBJECT_FUNC "TimeValidDllGetObject"
2315	#define CMSG_OID_GEN_CONTENT_ENCRYPT_KEY_FUNC "CryptMsgDllGenContentEncryptKey"
2316	#define CMSG_OID_EXPORT_KEY_TRANS_FUNC "CryptMsgDllExportKeyTrans"
2317	#define CMSG_OID_IMPORT_KEY_TRANS_FUNC "CryptMsgDllImportKeyTrans"
2318
2319	#define CRYPT_OID_REGPATH "Software\\Microsoft\\Cryptography\\OID"
2320	#define CRYPT_OID_REG_ENCODING_TYPE_PREFIX "EncodingType "
2321	#if defined(__GNUC__)
2322	# define CRYPT_OID_REG_DLL_VALUE_NAME (const WCHAR []){ 'D','l','l',0 }
2323	# define CRYPT_OID_REG_FUNC_NAME_VALUE_NAME \
2324	(const WCHAR []){ 'F','u','n','c','N','a','m','e',0 }
2325	# define CRYPT_OID_REG_FLAGS_VALUE_NAME \
2326	(const WCHAR []){ 'C','r','y','p','t','F','l','a','g','s',0 }
2327	#elif defined(_MSC_VER)
2328	# define CRYPT_OID_REG_DLL_VALUE_NAME L"Dll"
2329	# define CRYPT_OID_REG_FUNC_NAME_VALUE_NAME L"FuncName"
2330	# define CRYPT_OID_REG_FLAGS_VALUE_NAME L"CryptFlags"
2331	#else
2332	static const WCHAR CRYPT_OID_REG_DLL_VALUE_NAME[] = { 'D','l','l',0 };
2333	static const WCHAR CRYPT_OID_REG_FUNC_NAME_VALUE_NAME[] =
2334	{ 'F','u','n','c','N','a','m','e',0 };
2335	static const WCHAR CRYPT_OID_REG_FLAGS_VALUE_NAME[] =
2336	{ 'C','r','y','p','t','F','l','a','g','s',0 };
2337	#endif
2338	#define CRYPT_OID_REG_FUNC_NAME_VALUE_NAME_A "FuncName"
2339	#define CRYPT_DEFAULT_OID "DEFAULT"
2340
2341	#define CRYPT_INSTALL_OID_FUNC_BEFORE_FLAG 1
2342
2343	#define CRYPT_GET_INSTALLED_OID_FUNC_FLAG 0x1
2344
2345	#define CRYPT_REGISTER_FIRST_INDEX 0
2346	#define CRYPT_REGISTER_LAST_INDEX 0xffffffff
2347
2348	/* values for CERT_STORE_PROV_INFO's dwStoreProvFlags */
2349	#define CERT_STORE_PROV_EXTERNAL_FLAG 0x1
2350	#define CERT_STORE_PROV_DELETED_FLAG 0x2
2351	#define CERT_STORE_PROV_NO_PERSIST_FLAG 0x4
2352	#define CERT_STORE_PROV_SYSTEM_STORE_FLAG 0x8
2353	#define CERT_STORE_PROV_LM_SYSTEM_STORE_FLAG 0x10
2354
2355	/* function indices */
2356	#define CERT_STORE_PROV_CLOSE_FUNC 0
2357	#define CERT_STORE_PROV_READ_CERT_FUNC 1
2358	#define CERT_STORE_PROV_WRITE_CERT_FUNC 2
2359	#define CERT_STORE_PROV_DELETE_CERT_FUNC 3
2360	#define CERT_STORE_PROV_SET_CERT_PROPERTY_FUNC 4
2361	#define CERT_STORE_PROV_READ_CRL_FUNC 5
2362	#define CERT_STORE_PROV_WRITE_CRL_FUNC 6
2363	#define CERT_STORE_PROV_DELETE_CRL_FUNC 7
2364	#define CERT_STORE_PROV_SET_CRL_PROPERTY_FUNC 8
2365	#define CERT_STORE_PROV_READ_CTL_FUNC 9
2366	#define CERT_STORE_PROV_WRITE_CTL_FUNC 10
2367	#define CERT_STORE_PROV_DELETE_CTL_FUNC 11
2368	#define CERT_STORE_PROV_SET_CTL_PROPERTY_FUNC 12
2369	#define CERT_STORE_PROV_CONTROL_FUNC 13
2370	#define CERT_STORE_PROV_FIND_CERT_FUNC 14
2371	#define CERT_STORE_PROV_FREE_FIND_CERT_FUNC 15
2372	#define CERT_STORE_PROV_GET_CERT_PROPERTY_FUNC 16
2373	#define CERT_STORE_PROV_FIND_CRL_FUNC 17
2374	#define CERT_STORE_PROV_FREE_FIND_CRL_FUNC 18
2375	#define CERT_STORE_PROV_GET_CRL_PROPERTY_FUNC 19
2376	#define CERT_STORE_PROV_FIND_CTL_FUNC 20
2377	#define CERT_STORE_PROV_FREE_FIND_CTL_FUNC 21
2378	#define CERT_STORE_PROV_GET_CTL_PROPERTY_FUNC 22
2379
2380	/* physical store dwFlags, also used by CertAddStoreToCollection as
2381	* dwUpdateFlags
2382	*/
2383	#define CERT_PHYSICAL_STORE_ADD_ENABLE_FLAG 0x1
2384	#define CERT_PHYSICAL_STORE_OPEN_DISABLE_FLAG 0x2
2385	#define CERT_PHYSICAL_STORE_REMOVE_OPEN_DISABLE_FLAG 0x4
2386	#define CERT_PHYSICAL_STORE_INSERT_COMPUTER_NAME_ENABLE_FLAG 0x8
2387
2388	/* dwFlag values for CertEnumPhysicalStore callback */
2389	#define CERT_PHYSICAL_STORE_PREDEFINED_ENUM_FLAG 0x1
2390
2391	/* predefined store names */
2392	#if defined(__GNUC__)
2393	# define CERT_PHYSICAL_STORE_DEFAULT_NAME (const WCHAR[])\
2394	{'.','D','e','f','a','u','l','t','0'}
2395	# define CERT_PHYSICAL_STORE_GROUP_POLICY_NAME (const WCHAR[])\
2396	{'.','G','r','o','u','p','P','o','l','i','c','y',0}
2397	# define CERT_PHYSICAL_STORE_LOCAL_MACHINE_NAME (const WCHAR[])\
2398	{'.','L','o','c','a','l','M','a','c','h','i','n','e',0}
2399	# define CERT_PHYSICAL_STORE_DS_USER_CERTIFICATE_NAME (const WCHAR[])\
2400	{'.','U','s','e','r','C','e','r','t','i','f','i','c','a','t','e',0}
2401	# define CERT_PHYSICAL_STORE_LOCAL_MACHINE_GROUP_POLICY_NAME (const WCHAR[])\
2402	{'.','L','o','c','a','l','M','a','c','h','i','n','e','G','r','o','u','p',\
2403	'P','o','l','i','c','y',0}
2404	# define CERT_PHYSICAL_STORE_ENTERPRISE_NAME (const WCHAR[])\
2405	{'.','E','n','t','e','r','p','r','i','s','e',0}
2406	# define CERT_PHYSICAL_STORE_AUTH_ROOT_NAME (const WCHAR[])\
2407	{'.','A','u','t','h','R','o','o','t',0}
2408	#elif defined(_MSC_VER)
2409	# define CERT_PHYSICAL_STORE_DEFAULT_NAME \
2410	L".Default"
2411	# define CERT_PHYSICAL_STORE_GROUP_POLICY_NAME \
2412	L".GroupPolicy"
2413	# define CERT_PHYSICAL_STORE_LOCAL_MACHINE_NAME \
2414	L".LocalMachine"
2415	# define CERT_PHYSICAL_STORE_DS_USER_CERTIFICATE_NAME \
2416	L".UserCertificate"
2417	# define CERT_PHYSICAL_STORE_LOCAL_MACHINE_GROUP_POLICY_NAME \
2418	L".LocalMachineGroupPolicy"
2419	# define CERT_PHYSICAL_STORE_ENTERPRISE_NAME \
2420	L".Enterprise"
2421	# define CERT_PHYSICAL_STORE_AUTH_ROOT_NAME \
2422	L".AuthRoot"
2423	#else
2424	static const WCHAR CERT_PHYSICAL_STORE_DEFAULT_NAME[] =
2425	{'.','D','e','f','a','u','l','t','0'};
2426	static const WCHAR CERT_PHYSICAL_STORE_GROUP_POLICY_NAME[] =
2427	{'.','G','r','o','u','p','P','o','l','i','c','y',0};
2428	static const WCHAR CERT_PHYSICAL_STORE_LOCAL_MACHINE_NAME[] =
2429	{'.','L','o','c','a','l','M','a','c','h','i','n','e',0};
2430	static const WCHAR CERT_PHYSICAL_STORE_DS_USER_CERTIFICATE_NAME[] =
2431	{'.','U','s','e','r','C','e','r','t','i','f','i','c','a','t','e',0};
2432	static const WCHAR CERT_PHYSICAL_STORE_LOCAL_MACHINE_GROUP_POLICY_NAME[] =
2433	{'.','L','o','c','a','l','M','a','c','h','i','n','e','G','r','o','u','p',
2434	'P','o','l','i','c','y',0};
2435	static const WCHAR CERT_PHYSICAL_STORE_ENTERPRISE_NAME[] =
2436	{'.','E','n','t','e','r','p','r','i','s','e',0};
2437	static const WCHAR CERT_PHYSICAL_STORE_AUTH_ROOT_NAME[] =
2438	{'.','A','u','t','h','R','o','o','t',0};
2439	#endif
2440
2441	/* cert system store flags */
2442	#define CERT_SYSTEM_STORE_MASK 0xffff0000
2443	#define CERT_SYSTEM_STORE_RELOCATE_FLAG 0x80000000
2444
2445	/* CertFindChainInStore dwFindType types */
2446	#define CERT_CHAIN_FIND_BY_ISSUER 1
2447
2448	/* CertSaveStore dwSaveAs values */
2449	#define CERT_STORE_SAVE_AS_STORE 1
2450	#define CERT_STORE_SAVE_AS_PKCS7 2
2451	/* CertSaveStore dwSaveTo values */
2452	#define CERT_STORE_SAVE_TO_FILE 1
2453	#define CERT_STORE_SAVE_TO_MEMORY 2
2454	#define CERT_STORE_SAVE_TO_FILENAME_A 3
2455	#define CERT_STORE_SAVE_TO_FILENAME_W 4
2456	#define CERT_STORE_SAVE_TO_FILENAME CERT_STORE_SAVE_TO_FILENAME_W
2457
2458	/* CERT_INFO versions/flags */
2459	#define CERT_V1 0
2460	#define CERT_V2 1
2461	#define CERT_V3 2
2462	#define CERT_INFO_VERSION_FLAG 1
2463	#define CERT_INFO_SERIAL_NUMBER_FLAG 2
2464	#define CERT_INFO_SIGNATURE_ALGORITHM_FLAG 3
2465	#define CERT_INFO_ISSUER_FLAG 4
2466	#define CERT_INFO_NOT_BEFORE_FLAG 5
2467	#define CERT_INFO_NOT_AFTER_FLAG 6
2468	#define CERT_INFO_SUBJECT_FLAG 7
2469	#define CERT_INFO_SUBJECT_PUBLIC_KEY_INFO_FLAG 8
2470	#define CERT_INFO_ISSUER_UNIQUE_ID_FLAG 9
2471	#define CERT_INFO_SUBJECT_UNIQUE_ID_FLAG 10
2472	#define CERT_INFO_EXTENSION_FLAG 11
2473
2474	/* CERT_REQUEST_INFO versions */
2475	#define CERT_REQUEST_V1 0
2476
2477	/* CERT_KEYGEN_REQUEST_INFO versions */
2478	#define CERT_KEYGEN_REQUEST_V1 0
2479
2480	/* CRL versions */
2481	#define CRL_V1 0
2482	#define CRL_V2 1
2483
2484	/* CTL versions */
2485	#define CTL_V1 0
2486
2487	/* Certificate, CRL, CTL property IDs */
2488	#define CERT_KEY_PROV_HANDLE_PROP_ID 1
2489	#define CERT_KEY_PROV_INFO_PROP_ID 2
2490	#define CERT_SHA1_HASH_PROP_ID 3
2491	#define CERT_HASH_PROP_ID CERT_SHA1_HASH_PROP_ID
2492	#define CERT_MD5_HASH_PROP_ID 4
2493	#define CERT_KEY_CONTEXT_PROP_ID 5
2494	#define CERT_KEY_SPEC_PROP_ID 6
2495	#define CERT_IE30_RESERVED_PROP_ID 7
2496	#define CERT_PUBKEY_HASH_RESERVED_PROP_ID 8
2497	#define CERT_ENHKEY_USAGE_PROP_ID 9
2498	#define CERT_CTL_USAGE_PROP_ID CERT_ENHKEY_USAGE_PROP_ID
2499	#define CERT_NEXT_UPDATE_LOCATION_PROP_ID 10
2500	#define CERT_FRIENDLY_NAME_PROP_ID 11
2501	#define CERT_PVK_FILE_PROP_ID 12
2502	#define CERT_DESCRIPTION_PROP_ID 13
2503	#define CERT_ACCESS_STATE_PROP_ID 14
2504	#define CERT_SIGNATURE_HASH_PROP_ID 15
2505	#define CERT_SMART_CARD_DATA_PROP_ID 16
2506	#define CERT_EFS_PROP_ID 17
2507	#define CERT_FORTEZZA_DATA_PROP 18
2508	#define CERT_ARCHIVED_PROP_ID 19
2509	#define CERT_KEY_IDENTIFIER_PROP_ID 20
2510	#define CERT_AUTO_ENROLL_PROP_ID 21
2511	#define CERT_PUBKEY_ALG_PARA_PROP_ID 22
2512	#define CERT_CROSS_CERT_DIST_POINTS_PROP_ID 23
2513	#define CERT_ISSUER_PUBLIC_KEY_MD5_HASH_PROP_ID 24
2514	#define CERT_SUBJECT_PUBLIC_KEY_MD5_HASH_PROP_ID 25
2515	#define CERT_ENROLLMENT_PROP_ID 26
2516	#define CERT_DATE_STAMP_PROP_ID 27
2517	#define CERT_ISSUER_SERIAL_NUMBER_MD5_HASH_PROP_ID 28
2518	#define CERT_SUBJECT_NAME_MD5_HASH_PROP_ID 29
2519	#define CERT_EXTENDED_ERROR_INFO_PROP_ID 30
2520	/* 31 -- unused?
2521	32 -- cert prop id
2522	33 -- CRL prop id
2523	34 -- CTL prop id
2524	35 -- KeyId prop id
2525	36-63 -- reserved
2526	*/
2527	#define CERT_RENEWAL_PROP_ID 64
2528	#define CERT_ARCHIVED_KEY_HASH_PROP_ID 65
2529	#define CERT_AUTO_ENROLL_RETRY_PROP_ID 66
2530	#define CERT_AIA_URL_RETRIEVED_PROP_ID 67
2531	#define CERT_AUTHORITY_INFO_ACCESS_PROP_ID 68
2532	#define CERT_BACKED_UP_PROP_ID 69
2533	#define CERT_OCSP_RESPONSE_PROP_ID 70
2534	#define CERT_REQUEST_ORIGINATOR_PROP_ID 71
2535	#define CERT_SOURCE_LOCATION_PROP_ID 72
2536	#define CERT_SOURCE_URL_PROP_ID 73
2537	#define CERT_NEW_KEY_PROP_ID 74
2538	#define CERT_OCSP_CACHE_PREFIX_PROP_ID 75
2539	#define CERT_SMART_CARD_ROOT_INFO_PROP_ID 76
2540	#define CERT_NO_AUTO_EXPIRE_CHECK_PROP_ID 77
2541	#define CERT_NCRYPT_KEY_HANDLE_PROP_ID 78
2542	#define CERT_HCRYPTPROV_OR_NCRYPT_KEY_HANDLE_PROP_ID 79
2543	#define CERT_SUBJECT_INFO_ACCESS_PROP_ID 80
2544	#define CERT_CA_OCSP_AUTHORITY_INFO_ACCESS_PROP_ID 81
2545	#define CERT_CA_DISABLE_CRL_PROP_ID 82
2546	#define CERT_ROOT_PROGRAM_CERT_POLICIES_PROP_ID 83
2547	#define CERT_ROOT_PROGRAM_NAME_CONSTRAINTS_PROP_ID 84
2548
2549	#define CERT_FIRST_RESERVED_PROP_ID 85
2550	#define CERT_LAST_RESERVED_PROP_ID 0x00007fff
2551	#define CERT_FIRST_USER_PROP_ID 0x00008000
2552	#define CERT_LAST_USER_PROP_ID 0x0000ffff
2553
2554	#define IS_CERT_HASH_PROP_ID(x) \
2555	((x) == CERT_SHA1_HASH_PROP_ID \|\| (x) == CERT_MD5_HASH_PROP_ID \|\| \
2556	(x) == CERT_SIGNATURE_HASH_PROP_ID)
2557
2558	#define IS_PUBKEY_HASH_PROP_ID(x) \
2559	((x) == CERT_ISSUER_PUBLIC_KEY_MD5_HASH_PROP_ID \|\| \
2560	(x) == CERT_SUBJECT_PUBLIC_KEY_MD5_HASH_PROP_ID)
2561
2562	#define IS_CHAIN_HASH_PROP_ID(x) \
2563	((x) == CERT_ISSUER_PUBLIC_KEY_MD5_HASH_PROP_ID \|\| \
2564	(x) == CERT_SUBJECT_PUBLIC_KEY_MD5_HASH_PROP_ID \|\| \
2565	(x) == CERT_ISSUER_SERIAL_NUMBER_MD5_HASH_PROP_ID \|\| \
2566	(x) == CERT_SUBJECT_NAME_MD5_HASH_PROP_ID)
2567
2568	/* access state flags */
2569	#define CERT_ACCESS_STATE_WRITE_PERSIST_FLAG 0x1
2570	#define CERT_ACCESS_STATE_SYSTEM_STORE_FLAG 0x2
2571	#define CERT_ACCESS_STATE_LM_SYSTEM_STORE_FLAG 0x4
2572
2573	/* CertSetCertificateContextProperty flags */
2574	#define CERT_SET_PROPERTY_INHIBIT_PERSIST_FLAG 0x40000000
2575	#define CERT_SET_PROPERTY_IGNORE_PERSIST_ERROR_FLAG 0x80000000
2576
2577	/* CERT_RDN attribute dwValueType types */
2578	#define CERT_RDN_TYPE_MASK 0x000000ff
2579	#define CERT_RDN_ANY_TYPE 0
2580	#define CERT_RDN_ENCODED_BLOB 1
2581	#define CERT_RDN_OCTET_STRING 2
2582	#define CERT_RDN_NUMERIC_STRING 3
2583	#define CERT_RDN_PRINTABLE_STRING 4
2584	#define CERT_RDN_TELETEX_STRING 5
2585	#define CERT_RDN_T61_STRING 5
2586	#define CERT_RDN_VIDEOTEX_STRING 6
2587	#define CERT_RDN_IA5_STRING 7
2588	#define CERT_RDN_GRAPHIC_STRING 8
2589	#define CERT_RDN_VISIBLE_STRING 9
2590	#define CERT_RDN_ISO646_STRING 9
2591	#define CERT_RDN_GENERAL_STRING 10
2592	#define CERT_RDN_UNIVERSAL_STRING 11
2593	#define CERT_RDN_INT4_STRING 11
2594	#define CERT_RDN_BMP_STRING 12
2595	#define CERT_RDN_UNICODE_STRING 12
2596	#define CERT_RDN_UTF8_STRING 13
2597
2598	/* CERT_RDN attribute dwValueType flags */
2599	#define CERT_RDN_FLAGS_MASK 0xff000000
2600	#define CERT_RDN_ENABLE_T61_UNICODE_FLAG 0x80000000
2601	#define CERT_RDN_DISABLE_CHECK_TYPE_FLAG 0x4000000
2602	#define CERT_RDN_ENABLE_UTF8_UNICODE_FLAG 0x2000000
2603	#define CERT_RDN_DISABLE_IE4_UTF8_FLAG 0x0100000
2604
2605	#define IS_CERT_RDN_CHAR_STRING(x) \
2606	(((x) & CERT_RDN_TYPE_MASK) >= CERT_RDN_NUMERIC_STRING)
2607
2608	/* CertIsRDNAttrsInCertificateName flags */
2609	#define CERT_UNICODE_IS_RDN_ATTRS_FLAG 0x1
2610	#define CERT_CASE_INSENSITIVE_IS_RDN_ATTRS_FLAG 0x2
2611
2612	/* CRL reason codes */
2613	#define CRL_REASON_UNSPECIFIED 0
2614	#define CRL_REASON_KEY_COMPROMISE 1
2615	#define CRL_REASON_CA_COMPROMISE 2
2616	#define CRL_REASON_AFFILIATION_CHANGED 3
2617	#define CRL_REASON_SUPERSEDED 4
2618	#define CRL_REASON_CESSATION_OF_OPERATION 5
2619	#define CRL_REASON_CERTIFICATE_HOLD 6
2620	#define CRL_REASON_REMOVE_FROM_CRL 8
2621
2622	/* CertControlStore control types */
2623	#define CERT_STORE_CTRL_RESYNC 1
2624	#define CERT_STORE_CTRL_NOTIFY_CHANGE 2
2625	#define CERT_STORE_CTRL_COMMIT 3
2626	#define CERT_STORE_CTRL_AUTO_RESYNC 4
2627	#define CERT_STORE_CTRL_CANCEL_NOTIFY 5
2628
2629	#define CERT_STORE_CTRL_COMMIT_FORCE_FLAG 0x1
2630	#define CERT_STORE_CTRL_COMMIT_CLEAR_FLAG 0x2
2631
2632	/* cert store properties */
2633	#define CERT_STORE_LOCALIZED_NAME_PROP_ID 0x1000
2634
2635	/* CertCreateContext flags */
2636	#define CERT_CREATE_CONTEXT_NOCOPY_FLAG 0x1
2637	#define CERT_CREATE_CONTEXT_SORTED_FLAG 0x2
2638	#define CERT_CREATE_CONTEXT_NO_HCRYPTMSG_FLAG 0x4
2639	#define CERT_CREATE_CONTEXT_NO_ENTRY_FLAG 0x8
2640
2641	#define CERT_COMPARE_MASK 0xffff
2642	#define CERT_COMPARE_SHIFT 16
2643	#define CERT_COMPARE_ANY 0
2644	#define CERT_COMPARE_SHA1_HASH 1
2645	#define CERT_COMPARE_HASH CERT_COMPARE_SHA1_HASH
2646	#define CERT_COMPARE_NAME 2
2647	#define CERT_COMPARE_ATTR 3
2648	#define CERT_COMPARE_MD5_HASH 4
2649	#define CERT_COMPARE_PROPERTY 5
2650	#define CERT_COMPARE_PUBLIC_KEY 6
2651	#define CERT_COMPARE_NAME_STR_A 7
2652	#define CERT_COMPARE_NAME_STR_W 8
2653	#define CERT_COMPARE_KEY_SPEC 9
2654	#define CERT_COMPARE_ENHKEY_USAGE 10
2655	#define CERT_COMPARE_CTL_USAGE CERT_COMPARE_ENHKEY_USAGE
2656	#define CERT_COMPARE_SUBJECT_CERT 11
2657	#define CERT_COMPARE_ISSUER_OF 12
2658	#define CERT_COMPARE_EXISTING 13
2659	#define CERT_COMPARE_SIGNATURE_HASH 14
2660	#define CERT_COMPARE_KEY_IDENTIFIER 15
2661	#define CERT_COMPARE_CERT_ID 16
2662	#define CERT_COMPARE_CROSS_CERT_DIST_POINTS 17
2663	#define CERT_COMPARE_PUBKEY_MD5_HASH 18
2664
2665	/* values of dwFindType for CertFindInStore /
2666	#define CERT_FIND_ANY \
2667	(CERT_COMPARE_ANY << CERT_COMPARE_SHIFT)
2668	#define CERT_FIND_SHA1_HASH \
2669	(CERT_COMPARE_SHA1_HASH << CERT_COMPARE_SHIFT)
2670	#define CERT_FIND_MD5_HASH \
2671	(CERT_COMPARE_MD5_HASH << CERT_COMPARE_SHIFT)
2672	#define CERT_FIND_SIGNATURE_HASH \
2673	(CERT_COMPARE_SIGNATURE_HASH << CERT_COMPARE_SHIFT)
2674	#define CERT_FIND_KEY_IDENTIFIER \
2675	(CERT_COMPARE_KEY_IDENTIFIER << CERT_COMPARE_SHIFT)
2676	#define CERT_FIND_HASH CERT_FIND_SHA1_HASH
2677	#define CERT_FIND_PROPERTY \
2678	(CERT_COMPARE_PROPERTY << CERT_COMPARE_SHIFT)
2679	#define CERT_FIND_PUBLIC_KEY \
2680	(CERT_COMPARE_PUBLIC_KEY << CERT_COMPARE_SHIFT)
2681	#define CERT_FIND_SUBJECT_NAME \
2682	(CERT_COMPARE_NAME << CERT_COMPARE_SHIFT \| CERT_INFO_SUBJECT_FLAG)
2683	#define CERT_FIND_SUBJECT_ATTR \
2684	(CERT_COMPARE_ATTR << CERT_COMPARE_SHIFT \| CERT_INFO_SUBJECT_FLAG)
2685	#define CERT_FIND_ISSUER_NAME \
2686	(CERT_COMPARE_NAME << CERT_COMPARE_SHIFT \| CERT_INFO_ISSUER_FLAG)
2687	#define CERT_FIND_ISSUER_ATTR \
2688	(CERT_COMPARE_ATTR << CERT_COMPARE_SHIFT \| CERT_INFO_ISSUER_FLAG)
2689	#define CERT_FIND_SUBJECT_STR_A \
2690	(CERT_COMPARE_NAME_STR_A << CERT_COMPARE_SHIFT \| CERT_INFO_SUBJECT_FLAG)
2691	#define CERT_FIND_SUBJECT_STR_W \
2692	(CERT_COMPARE_NAME_STR_W << CERT_COMPARE_SHIFT \| CERT_INFO_SUBJECT_FLAG)
2693	#define CERT_FIND_SUBJECT_STR CERT_FIND_SUBJECT_STR_W
2694	#define CERT_FIND_ISSUER_STR_A \
2695	(CERT_COMPARE_NAME_STR_A << CERT_COMPARE_SHIFT \| CERT_INFO_ISSUER_FLAG)
2696	#define CERT_FIND_ISSUER_STR_W \
2697	(CERT_COMPARE_NAME_STR_W << CERT_COMPARE_SHIFT \| CERT_INFO_ISSUER_FLAG)
2698	#define CERT_FIND_ISSUER_STR CERT_FIND_ISSUER_STR_W
2699	#define CERT_FIND_KEY_SPEC \
2700	(CERT_COMPARE_KEY_SPEC << CERT_COMPARE_SHIFT)
2701	#define CERT_FIND_ENHKEY_USAGE \
2702	(CERT_COMPARE_ENHKEY_USAGE << CERT_COMPARE_SHIFT)
2703	#define CERT_FIND_CTL_USAGE CERT_FIND_ENHKEY_USAGE
2704	#define CERT_FIND_SUBJECT_CERT \
2705	(CERT_COMPARE_SUBJECT_CERT << CERT_COMPARE_SHIFT)
2706	#define CERT_FIND_ISSUER_OF \
2707	(CERT_COMPARE_ISSUER_OF << CERT_COMPARE_SHIFT)
2708	#define CERT_FIND_EXISTING \
2709	(CERT_COMPARE_EXISTING << CERT_COMPARE_SHIFT)
2710	#define CERT_FIND_CERT_ID \
2711	(CERT_COMPARE_CERT_ID << CERT_COMPARE_SHIFT)
2712	#define CERT_FIND_CROSS_CERT_DIST_POINTS \
2713	(CERT_COMPARE_CROSS_CERT_DIST_POINTS << CERT_COMPARE_SHIFT)
2714	#define CERT_FIND_PUBKEY_MD5_HASH \
2715	(CERT_COMPARE_PUBKEY_MD5_HASH << CERT_COMPARE_SHIFT)
2716
2717	#define CERT_FIND_OPTIONAL_ENHKEY_USAGE_FLAG 0x1
2718	#define CERT_FIND_OPTIONAL_CTL_USAGE_FLAG 0x1
2719	#define CERT_FIND_EXT_ONLY_ENHKEY_USAGE_FLAG 0x2
2720	#define CERT_FIND_EXT_ONLY_CTL_USAGE_FLAG 0x2
2721	#define CERT_FIND_PROP_ONLY_ENHKEY_USAGE_FLAG 0x4
2722	#define CERT_FIND_PROP_ONLY_CTL_USAGE_FLAG 0x4
2723	#define CERT_FIND_NO_ENHKEY_USAGE_FLAG 0x8
2724	#define CERT_FIND_NO_CTL_USAGE_FLAG 0x8
2725	#define CERT_FIND_OR_ENHKEY_USAGE_FLAG 0x10
2726	#define CERT_FIND_OR_CTL_USAGE_FLAG 0x10
2727	#define CERT_FIND_VALID_ENHKEY_USAGE_FLAG 0x20
2728	#define CERT_FIND_VALID_CTL_USAGE_FLAG 0x20
2729
2730	#define CRL_FIND_ANY 0
2731	#define CRL_FIND_ISSUED_BY 1
2732	#define CRL_FIND_EXISTING 2
2733	#define CRL_FIND_ISSUED_FOR 3
2734
2735	#define CRL_FIND_ISSUED_BY_AKI_FLAG 0x1
2736	#define CRL_FIND_ISSUED_BY_SIGNATURE_FLAG 0x2
2737	#define CRL_FIND_ISSUED_BY_DELTA_FLAG 0x4
2738	#define CRL_FIND_ISSUED_BY_BASE_FLAG 0x8
2739
2740	typedef struct _CRL_FIND_ISSUED_FOR_PARA
2741	{
2742	PCCERT_CONTEXT pSubjectCert;
2743	PCCERT_CONTEXT pIssuerCert;
2744	} CRL_FIND_ISSUED_FOR_PARA, *PCRL_FIND_ISSUED_FOR_PARA;
2745
2746	#define CTL_FIND_ANY 0
2747	#define CTL_FIND_SHA1_HASH 1
2748	#define CTL_FIND_MD5_HASH 2
2749	#define CTL_FIND_USAGE 3
2750	#define CTL_FIND_SUBJECT 4
2751	#define CTL_FIND_EXISTING 5
2752
2753	typedef struct _CTL_FIND_USAGE_PARA
2754	{
2755	DWORD cbSize;
2756	CTL_USAGE SubjectUsage;
2757	CRYPT_DATA_BLOB ListIdentifier;
2758	PCERT_INFO pSigner;
2759	} CTL_FIND_USAGE_PARA, *PCTL_FIND_USAGE_PARA;
2760
2761	#define CTL_FIND_NO_LIST_ID_CBDATA 0xffffffff
2762	#define CTL_FIND_NO_SIGNER_PTR ((PCERT_INFO)-1)
2763	#define CTL_FIND_SAME_USAGE_FLAG 0x00000001
2764
2765	typedef struct _CTL_FIND_SUBJECT_PARA
2766	{
2767	DWORD cbSize;
2768	PCTL_FIND_USAGE_PARA pUsagePara;
2769	DWORD dwSubjectType;
2770	void *pvSubject;
2771	} CTL_FIND_SUBJECT_PARA, *PCTL_FIND_SUBJECT_PARA;
2772
2773	/* PFN_CERT_STORE_PROV_WRITE_CERT dwFlags values */
2774	#define CERT_STORE_PROV_WRITE_ADD_FLAG 0x1
2775
2776	/* CertAddSerializedElementToStore context types */
2777	#define CERT_STORE_CERTIFICATE_CONTEXT 1
2778	#define CERT_STORE_CRL_CONTEXT 2
2779	#define CERT_STORE_CTL_CONTEXT 3
2780	#define CERT_STORE_ALL_CONTEXT_FLAG ~0U
2781	#define CERT_STORE_CERTIFICATE_CONTEXT_FLAG \
2782	(1 << CERT_STORE_CERTIFICATE_CONTEXT)
2783	#define CERT_STORE_CRL_CONTEXT_FLAG (1 << CERT_STORE_CRL_CONTEXT)
2784	#define CERT_STORE_CTL_CONTEXT_FLAG (1 << CERT_STORE_CTL_CONTEXT)
2785
2786	/* CryptBinaryToString/CryptStringToBinary flags */
2787	#define CRYPT_STRING_BASE64HEADER 0x00000000
2788	#define CRYPT_STRING_BASE64 0x00000001
2789	#define CRYPT_STRING_BINARY 0x00000002
2790	#define CRYPT_STRING_BASE64REQUESTHEADER 0x00000003
2791	#define CRYPT_STRING_HEX 0x00000004
2792	#define CRYPT_STRING_HEXASCII 0x00000005
2793	#define CRYPT_STRING_BASE64_ANY 0x00000006
2794	#define CRYPT_STRING_ANY 0x00000007
2795	#define CRYPT_STRING_HEX_ANY 0x00000008
2796	#define CRYPT_STRING_BASE64X509CRLHEADER 0x00000009
2797	#define CRYPT_STRING_HEXADDR 0x0000000a
2798	#define CRYPT_STRING_HEXASCIIADDR 0x0000000b
2799	#define CRYPT_STRING_NOCRLF 0x40000000
2800	#define CRYPT_STRING_NOCR 0x80000000
2801
2802	/* OIDs */
2803	#define szOID_RSA "1.2.840.113549"
2804	#define szOID_PKCS "1.2.840.113549.1"
2805	#define szOID_RSA_HASH "1.2.840.113549.2"
2806	#define szOID_RSA_ENCRYPT "1.2.840.113549.3"
2807	#define szOID_PKCS_1 "1.2.840.113549.1.1"
2808	#define szOID_PKCS_2 "1.2.840.113549.1.2"
2809	#define szOID_PKCS_3 "1.2.840.113549.1.3"
2810	#define szOID_PKCS_4 "1.2.840.113549.1.4"
2811	#define szOID_PKCS_5 "1.2.840.113549.1.5"
2812	#define szOID_PKCS_6 "1.2.840.113549.1.6"
2813	#define szOID_PKCS_7 "1.2.840.113549.1.7"
2814	#define szOID_PKCS_8 "1.2.840.113549.1.8"
2815	#define szOID_PKCS_9 "1.2.840.113549.1.9"
2816	#define szOID_PKCS_10 "1.2.840.113549.1.10"
2817	#define szOID_PKCS_11 "1.2.840.113549.1.12"
2818	#define szOID_RSA_RSA "1.2.840.113549.1.1.1"
2819	#define CERT_RSA_PUBLIC_KEY_OBJID szOID_RSA_RSA
2820	#define CERT_DEFAULT_OID_PUBLIC_KEY_SIGN szOID_RSA_RSA
2821	#define CERT_DEFAULT_OID_PUBLIC_KEY_XCHG szOID_RSA_RSA
2822	#define szOID_RSA_MD2RSA "1.2.840.113549.1.1.2"
2823	#define szOID_RSA_MD4RSA "1.2.840.113549.1.1.3"
2824	#define szOID_RSA_MD5RSA "1.2.840.113549.1.1.4"
2825	#define szOID_RSA_SHA1RSA "1.2.840.113549.1.1.5"
2826	#define szOID_RSA_SET0AEP_RSA "1.2.840.113549.1.1.6"
2827	#define szOID_RSA_SHA256RSA "1.2.840.113549.1.1.11"
2828	#define szOID_RSA_SHA384RSA "1.2.840.113549.1.1.12"
2829	#define szOID_RSA_SHA512RSA "1.2.840.113549.1.1.13"
2830	#define szOID_RSA_DH "1.2.840.113549.1.3.1"
2831	#define szOID_RSA_data "1.2.840.113549.1.7.1"
2832	#define szOID_RSA_signedData "1.2.840.113549.1.7.2"
2833	#define szOID_RSA_envelopedData "1.2.840.113549.1.7.3"
2834	#define szOID_RSA_signEnvData "1.2.840.113549.1.7.4"
2835	#define szOID_RSA_digestedData "1.2.840.113549.1.7.5"
2836	#define szOID_RSA_hashedData "1.2.840.113549.1.7.5"
2837	#define szOID_RSA_encryptedData "1.2.840.113549.1.7.6"
2838	#define szOID_RSA_emailAddr "1.2.840.113549.1.9.1"
2839	#define szOID_RSA_unstructName "1.2.840.113549.1.9.2"
2840	#define szOID_RSA_contentType "1.2.840.113549.1.9.3"
2841	#define szOID_RSA_messageDigest "1.2.840.113549.1.9.4"
2842	#define szOID_RSA_signingTime "1.2.840.113549.1.9.5"
2843	#define szOID_RSA_counterSign "1.2.840.113549.1.9.6"
2844	#define szOID_RSA_challengePwd "1.2.840.113549.1.9.7"
2845	#define szOID_RSA_unstructAddr "1.2.840.113549.1.9.9"
2846	#define szOID_RSA_extCertAttrs "1.2.840.113549.1.9.9"
2847	#define szOID_RSA_certExtensions "1.2.840.113549.1.9.14"
2848	#define szOID_RSA_SMIMECapabilities "1.2.840.113549.1.9.15"
2849	#define szOID_RSA_preferSignedData "1.2.840.113549.1.9.15.1"
2850	#define szOID_RSA_SMIMEalg "1.2.840.113549.1.9.16.3"
2851	#define szOID_RSA_SMIMEalgESDH "1.2.840.113549.1.9.16.3.5"
2852	#define szOID_RSA_SMIMEalgCMS3DESwrap "1.2.840.113549.1.9.16.3.6"
2853	#define szOID_RSA_SMIMEalgCMSRC2wrap "1.2.840.113549.1.9.16.3.7"
2854	#define szOID_RSA_MD2 "1.2.840.113549.2.2"
2855	#define szOID_RSA_MD4 "1.2.840.113549.2.4"
2856	#define szOID_RSA_MD5 "1.2.840.113549.2.5"
2857	#define szOID_RSA_RC2CBC "1.2.840.113549.3.2"
2858	#define szOID_RSA_RC4 "1.2.840.113549.3.4"
2859	#define szOID_RSA_DES_EDE3_CBC "1.2.840.113549.3.7"
2860	#define szOID_RSA_RC5_CBCPad "1.2.840.113549.3.9"
2861	#define szOID_ANSI_X942 "1.2.840.10046"
2862	#define szOID_ANSI_X942_DH "1.2.840.10046.2.1"
2863	#define szOID_X957 "1.2.840.10040"
2864	#define szOID_X957_DSA "1.2.840.10040.4.1"
2865	#define szOID_X957_SHA1DSA "1.2.840.10040.4.3"
2866	#define szOID_DS "2.5"
2867	#define szOID_DSALG "2.5.8"
2868	#define szOID_DSALG_CRPT "2.5.8.1"
2869	#define szOID_DSALG_HASH "2.5.8.2"
2870	#define szOID_DSALG_SIGN "2.5.8.3"
2871	#define szOID_DSALG_RSA "2.5.8.1.1"
2872	#define szOID_OIW "1.3.14"
2873	#define szOID_OIWSEC "1.3.14.3.2"
2874	#define szOID_OIWSEC_md4RSA "1.3.14.3.2.2"
2875	#define szOID_OIWSEC_md5RSA "1.3.14.3.2.3"
2876	#define szOID_OIWSEC_md4RSA2 "1.3.14.3.2.4"
2877	#define szOID_OIWSEC_desECB "1.3.14.3.2.6"
2878	#define szOID_OIWSEC_desCBC "1.3.14.3.2.7"
2879	#define szOID_OIWSEC_desOFB "1.3.14.3.2.8"
2880	#define szOID_OIWSEC_desCFB "1.3.14.3.2.9"
2881	#define szOID_OIWSEC_desMAC "1.3.14.3.2.10"
2882	#define szOID_OIWSEC_rsaSign "1.3.14.3.2.11"
2883	#define szOID_OIWSEC_dsa "1.3.14.3.2.12"
2884	#define szOID_OIWSEC_shaDSA "1.3.14.3.2.13"
2885	#define szOID_OIWSEC_mdc2RSA "1.3.14.3.2.14"
2886	#define szOID_OIWSEC_shaRSA "1.3.14.3.2.15"
2887	#define szOID_OIWSEC_dhCommMod "1.3.14.3.2.16"
2888	#define szOID_OIWSEC_desEDE "1.3.14.3.2.17"
2889	#define szOID_OIWSEC_sha "1.3.14.3.2.18"
2890	#define szOID_OIWSEC_mdc2 "1.3.14.3.2.19"
2891	#define szOID_OIWSEC_dsaComm "1.3.14.3.2.20"
2892	#define szOID_OIWSEC_dsaCommSHA "1.3.14.3.2.21"
2893	#define szOID_OIWSEC_rsaXchg "1.3.14.3.2.22"
2894	#define szOID_OIWSEC_keyHashSeal "1.3.14.3.2.23"
2895	#define szOID_OIWSEC_md2RSASign "1.3.14.3.2.24"
2896	#define szOID_OIWSEC_md5RSASign "1.3.14.3.2.25"
2897	#define szOID_OIWSEC_sha1 "1.3.14.3.2.26"
2898	#define szOID_OIWSEC_dsaSHA1 "1.3.14.3.2.27"
2899	#define szOID_OIWSEC_dsaCommSHA1 "1.3.14.3.2.28"
2900	#define szOID_OIWSEC_sha1RSASign "1.3.14.3.2.29"
2901	#define szOID_OIWDIR "1.3.14.7.2"
2902	#define szOID_OIWDIR_CRPT "1.3.14.7.2.1"
2903	#define szOID_OIWDIR_HASH "1.3.14.7.2.2"
2904	#define szOID_OIWDIR_SIGN "1.3.14.7.2.3"
2905	#define szOID_OIWDIR_md2 "1.3.14.7.2.2.1"
2906	#define szOID_OIWDIR_md2RSA "1.3.14.7.2.3.1"
2907	#define szOID_INFOSEC "2.16.840.1.101.2.1"
2908	#define szOID_INFOSEC_sdnsSignature "2.16.840.1.101.2.1.1.1"
2909	#define szOID_INFOSEC_mosaicSignature "2.16.840.1.101.2.1.1.2"
2910	#define szOID_INFOSEC_sdnsConfidentiality "2.16.840.1.101.2.1.1.3"
2911	#define szOID_INFOSEC_mosaicConfidentiality "2.16.840.1.101.2.1.1.4"
2912	#define szOID_INFOSEC_sdnsIntegrity "2.16.840.1.101.2.1.1.5"
2913	#define szOID_INFOSEC_mosaicIntegrity "2.16.840.1.101.2.1.1.6"
2914	#define szOID_INFOSEC_sdnsTokenProtection "2.16.840.1.101.2.1.1.7"
2915	#define szOID_INFOSEC_mosaicTokenProtection "2.16.840.1.101.2.1.1.8"
2916	#define szOID_INFOSEC_sdnsKeyManagement "2.16.840.1.101.2.1.1.9"
2917	#define szOID_INFOSEC_mosaicKeyManagement "2.16.840.1.101.2.1.1.10"
2918	#define szOID_INFOSEC_sdnsKMandSig "2.16.840.1.101.2.1.1.11"
2919	#define szOID_INFOSEC_mosaicKMandSig "2.16.840.1.101.2.1.1.12"
2920	#define szOID_INFOSEC_SuiteASignature "2.16.840.1.101.2.1.1.13"
2921	#define szOID_INFOSEC_SuiteAConfidentiality "2.16.840.1.101.2.1.1.14"
2922	#define szOID_INFOSEC_SuiteAIntegrity "2.16.840.1.101.2.1.1.15"
2923	#define szOID_INFOSEC_SuiteATokenProtection "2.16.840.1.101.2.1.1.16"
2924	#define szOID_INFOSEC_SuiteAKeyManagement "2.16.840.1.101.2.1.1.17"
2925	#define szOID_INFOSEC_SuiteAKMandSig "2.16.840.1.101.2.1.1.18"
2926	#define szOID_INFOSEC_mosaicUpdatedSig "2.16.840.1.101.2.1.1.19"
2927	#define szOID_INFOSEC_mosaicKMandUpdSig "2.16.840.1.101.2.1.1.20"
2928	#define szOID_INFOSEC_mosaicUpdateInteg "2.16.840.1.101.2.1.1.21"
2929	#define szOID_COMMON_NAME "2.5.4.3"
2930	#define szOID_SUR_NAME "2.5.4.4"
2931	#define szOID_DEVICE_SERIAL_NUMBER "2.5.4.5"
2932	#define szOID_COUNTRY_NAME "2.5.4.6"
2933	#define szOID_LOCALITY_NAME "2.5.4.7"
2934	#define szOID_STATE_OR_PROVINCE_NAME "2.5.4.8"
2935	#define szOID_STREET_ADDRESS "2.5.4.9"
2936	#define szOID_ORGANIZATION_NAME "2.5.4.10"
2937	#define szOID_ORGANIZATIONAL_UNIT_NAME "2.5.4.11"
2938	#define szOID_TITLE "2.5.4.12"
2939	#define szOID_DESCRIPTION "2.5.4.13"
2940	#define szOID_SEARCH_GUIDE "2.5.4.14"
2941	#define szOID_BUSINESS_CATEGORY "2.5.4.15"
2942	#define szOID_POSTAL_ADDRESS "2.5.4.16"
2943	#define szOID_POSTAL_CODE "2.5.4.17"
2944	#define szOID_POST_OFFICE_BOX "2.5.4.18"
2945	#define szOID_PHYSICAL_DELIVERY_OFFICE_NAME "2.5.4.19"
2946	#define szOID_TELEPHONE_NUMBER "2.5.4.20"
2947	#define szOID_TELEX_NUMBER "2.5.4.21"
2948	#define szOID_TELETEXT_TERMINAL_IDENTIFIER "2.5.4.22"
2949	#define szOID_FACSIMILE_TELEPHONE_NUMBER "2.5.4.23"
2950	#define szOID_X21_ADDRESS "2.5.4.24"
2951	#define szOID_INTERNATIONAL_ISDN_NUMBER "2.5.4.25"
2952	#define szOID_REGISTERED_ADDRESS "2.5.4.26"
2953	#define szOID_DESTINATION_INDICATOR "2.5.4.27"
2954	#define szOID_PREFERRED_DELIVERY_METHOD "2.5.4.28"
2955	#define szOID_PRESENTATION_ADDRESS "2.5.4.29"
2956	#define szOID_SUPPORTED_APPLICATION_CONTEXT "2.5.4.30"
2957	#define szOID_MEMBER "2.5.4.31"
2958	#define szOID_OWNER "2.5.4.32"
2959	#define szOID_ROLE_OCCUPANT "2.5.4.33"
2960	#define szOID_SEE_ALSO "2.5.4.34"
2961	#define szOID_USER_PASSWORD "2.5.4.35"
2962	#define szOID_USER_CERTIFICATE "2.5.4.36"
2963	#define szOID_CA_CERTIFICATE "2.5.4.37"
2964	#define szOID_AUTHORITY_REVOCATION_LIST "2.5.4.38"
2965	#define szOID_CERTIFICATE_REVOCATION_LIST "2.5.4.39"
2966	#define szOID_CROSS_CERTIFICATE_PAIR "2.5.4.40"
2967	#define szOID_GIVEN_NAME "2.5.4.42"
2968	#define szOID_INITIALS "2.5.4.43"
2969	#define szOID_DN_QUALIFIER "2.5.4.46"
2970	#define szOID_AUTHORITY_KEY_IDENTIFIER "2.5.29.1"
2971	#define szOID_KEY_ATTRIBUTES "2.5.29.2"
2972	#define szOID_CERT_POLICIES_95 "2.5.29.3"
2973	#define szOID_KEY_USAGE_RESTRICTION "2.5.29.4"
2974	#define szOID_LEGACY_POLICY_MAPPINGS "2.5.29.5"
2975	#define szOID_SUBJECT_ALT_NAME "2.5.29.7"
2976	#define szOID_ISSUER_ALT_NAME "2.5.29.8"
2977	#define szOID_SUBJECT_DIR_ATTRS "2.5.29.9"
2978	#define szOID_BASIC_CONSTRAINTS "2.5.29.10"
2979	#define szOID_SUBJECT_KEY_IDENTIFIER "2.5.29.14"
2980	#define szOID_KEY_USAGE "2.5.29.15"
2981	#define szOID_PRIVATEKEY_USAGE_PERIOD "2.5.29.16"
2982	#define szOID_SUBJECT_ALT_NAME2 "2.5.29.17"
2983	#define szOID_ISSUER_ALT_NAME2 "2.5.29.18"
2984	#define szOID_BASIC_CONSTRAINTS2 "2.5.29.19"
2985	#define szOID_CRL_NUMBER "2.5.29.20"
2986	#define szOID_CRL_REASON_CODE "2.5.29.21"
2987	#define szOID_REASON_CODE_HOLD "2.5.29.23"
2988	#define szOID_DELTA_CRL_INDICATOR "2.5.29.27"
2989	#define szOID_ISSUING_DIST_POINT "2.5.29.28"
2990	#define szOID_NAME_CONSTRAINTS "2.5.29.30"
2991	#define szOID_CRL_DIST_POINTS "2.5.29.31"
2992	#define szOID_CERT_POLICIES "2.5.29.32"
2993	#define szOID_ANY_CERT_POLICY "2.5.29.32.0"
2994	#define szOID_POLICY_MAPPINGS "2.5.29.33"
2995	#define szOID_AUTHORITY_KEY_IDENTIFIER2 "2.5.29.35"
2996	#define szOID_POLICY_CONSTRAINTS "2.5.29.36"
2997	#define szOID_ENHANCED_KEY_USAGE "2.5.29.37"
2998	#define szOID_FRESHEST_CRL "2.5.29.46"
2999	#define szOID_INHIBIT_ANY_POLICY "2.5.29.54"
3000	#define szOID_DOMAIN_COMPONENT "0.9.2342.19200300.100.1.25"
3001	#define szOID_PKCS_12_FRIENDLY_NAME_ATTR "1.2.840.113549.1.9.20"
3002	#define szOID_PKCS_12_LOCAL_KEY_ID "1.2.840.113549.1.9.21"
3003	#define szOID_CERT_EXTENSIONS "1.3.6.1.4.1.311.2.1.14"
3004	#define szOID_NEXT_UPDATE_LOCATION "1.3.6.1.4.1.311.10.2"
3005	#define szOID_KP_CTL_USAGE_SIGNING "1.3.6.1.4.1.311.10.3.1"
3006	#define szOID_KP_TIME_STAMP_SIGNING "1.3.6.1.4.1.311.10.3.2"
3007	#ifndef szOID_SERVER_GATED_CRYPTO
3008	#define szOID_SERVER_GATED_CRYPTO "1.3.6.1.4.1.311.10.3.3"
3009	#endif
3010	#ifndef szOID_SGC_NETSCAPE
3011	#define szOID_SGC_NETSCAPE "2.16.840.1.113730.4.1"
3012	#endif
3013	#define szOID_KP_EFS "1.3.6.1.4.1.311.10.3.4"
3014	#define szOID_EFS_RECOVERY "1.3.6.1.4.1.311.10.3.4.1"
3015	#define szOID_WHQL_CRYPTO "1.3.6.1.4.1.311.10.3.5"
3016	#define szOID_NT5_CRYPTO "1.3.6.1.4.1.311.10.3.6"
3017	#define szOID_OEM_WHQL_CRYPTO "1.3.6.1.4.1.311.10.3.7"
3018	#define szOID_EMBEDDED_NT_CRYPTO "1.3.6.1.4.1.311.10.3.8"
3019	#define szOID_ROOT_LIST_SIGNER "1.3.6.1.4.1.311.10.3.9"
3020	#define szOID_KP_QUALIFIED_SUBORDINATION "1.3.6.1.4.1.311.10.3.10"
3021	#define szOID_KP_KEY_RECOVERY "1.3.6.1.4.1.311.10.3.11"
3022	#define szOID_KP_DOCUMENT_SIGNING "1.3.6.1.4.1.311.10.3.12"
3023	#define szOID_KP_LIFETIME_SIGNING "1.3.6.1.4.1.311.10.3.13"
3024	#define szOID_KP_MOBILE_DEVICE_SOFTWARE "1.3.6.1.4.1.311.10.3.14"
3025	#define szOID_YESNO_TRUST_ATTR "1.3.6.1.4.1.311.10.4.1"
3026	#ifndef szOID_DRM
3027	#define szOID_DRM "1.3.6.1.4.1.311.10.5.1"
3028	#endif
3029	#ifndef szOID_DRM_INDIVIDUALIZATION
3030	#define szOID_DRM_INDIVIDUALIZATION "1.3.6.1.4.1.311.10.5.2"
3031	#endif
3032	#ifndef szOID_LICENSES
3033	#define szOID_LICENSES "1.3.6.1.4.1.311.10.6.1"
3034	#endif
3035	#ifndef szOID_LICENSE_SERVER
3036	#define szOID_LICENSE_SERVER "1.3.6.1.4.1.311.10.6.2"
3037	#endif
3038	#define szOID_REMOVE_CERTIFICATE "1.3.6.1.4.1.311.10.8.1"
3039	#define szOID_CROSS_CERT_DIST_POINTS "1.3.6.1.4.1.311.10.9.1"
3040	#define szOID_CTL "1.3.6.1.4.1.311.10.1"
3041	#define szOID_SORTED_CTL "1.3.6.1.4.1.311.10.1.1"
3042	#define szOID_ANY_APPLICATION_POLICY "1.3.6.1.4.1.311.10.12.1"
3043	#define szOID_RENEWAL_CERTIFICATE "1.3.6.1.4.1.311.13.1"
3044	#define szOID_ENROLLMENT_NAME_VALUE_PAIR "1.3.6.1.4.1.311.13.2.1"
3045	#define szOID_ENROLLMENT_CSP_PROVIDER "1.3.6.1.4.1.311.13.2.2"
3046	#define szOID_OS_VERSION "1.3.6.1.4.1.311.13.2.3"
3047	#define szOID_PKCS_12_KEY_PROVIDER_NAME_ATTR "1.3.6.1.4.1.311.17.1"
3048	#define szOID_LOCAL_MACHINE_KEYSET "1.3.6.1.4.1.311.17.2"
3049	#define szOID_AUTO_ENROLL_CTL_USAGE "1.3.6.1.4.1.311.20.1"
3050	#define szOID_ENROLL_CERTTYPE_EXTENSION "1.3.6.1.4.1.311.20.2"
3051	#define szOID_ENROLLMENT_AGENT "1.3.6.1.4.1.311.20.2.1"
3052	#ifndef szOID_KP_SMARTCARD_LOGON
3053	#define szOID_KP_SMARTCARD_LOGON "1.3.6.1.4.1.311.20.2.2"
3054	#endif
3055	#ifndef szOID_NT_PRINCIPAL_NAME
3056	#define szOID_NT_PRINCIPAL_NAME "1.3.6.1.4.1.311.20.2.3"
3057	#endif
3058	#define szOID_CERT_MANIFOLD "1.3.6.1.4.1.311.20.3"
3059	#ifndef szOID_CERTSRV_CA_VERSION
3060	#define szOID_CERTSRV_CA_VERSION "1.3.6.1.4.1.311.21.1"
3061	#endif
3062	#define szOID_CERTSRV_PREVIOUS_CERT_HASH "1.3.6.1.4.1.311.21.2"
3063	#define szOID_CRL_VIRTUAL_BASE "1.3.6.1.4.1.311.21.3"
3064	#define szOID_CRL_NEXT_PUBLISH "1.3.6.1.4.1.311.21.4"
3065	#define szOID_KP_CA_EXCHANGE "1.3.6.1.4.1.311.21.5"
3066	#define szOID_KP_KEY_RECOVERY_AGENT "1.3.6.1.4.1.311.21.6"
3067	#define szOID_CERTIFICATE_TEMPLATE "1.3.6.1.4.1.311.21.7"
3068	#define szOID_ENTERPRISE_OID_ROOT "1.3.6.1.4.1.311.21.8"
3069	#define szOID_RDN_DUMMY_SIGNER "1.3.6.1.4.1.311.21.9"
3070	#define szOID_APPLICATION_CERT_POLICIES "1.3.6.1.4.1.311.21.10"
3071	#define szOID_APPLICATION_POLICY_MAPPINGS "1.3.6.1.4.1.311.21.11"
3072	#define szOID_APPLICATION_POLICY_CONSTRAINTS "1.3.6.1.4.1.311.21.12"
3073	#define szOID_ARCHIVED_KEY_ATTR "1.3.6.1.4.1.311.21.13"
3074	#define szOID_CRL_SELF_CDP "1.3.6.1.4.1.311.21.14"
3075	#define szOID_REQUIRE_CERT_CHAIN_POLICY "1.3.6.1.4.1.311.21.15"
3076	#define szOID_ARCHIVED_KEY_CERT_HASH "1.3.6.1.4.1.311.21.16"
3077	#define szOID_ISSUED_CERT_HASH "1.3.6.1.4.1.311.21.17"
3078	#define szOID_DS_EMAIL_REPLICATION "1.3.6.1.4.1.311.21.19"
3079	#define szOID_REQUEST_CLIENT_INFO "1.3.6.1.4.1.311.21.20"
3080	#define szOID_ENCRYPTED_KEY_HASH "1.3.6.1.4.1.311.21.21"
3081	#define szOID_CERTSRV_CROSSCA_VERSION "1.3.6.1.4.1.311.21.22"
3082	#define szOID_KEYID_RDN "1.3.6.1.4.1.311.10.7.1"
3083	#define szOID_PKIX "1.3.6.1.5.5.7"
3084	#define szOID_PKIX_PE "1.3.6.1.5.5.7.1"
3085	#define szOID_AUTHORITY_INFO_ACCESS "1.3.6.1.5.5.7.1.1"
3086	#define szOID_PKIX_POLICY_QUALIFIER_CPS "1.3.6.1.5.5.7.2.1"
3087	#define szOID_PKIX_POLICY_QUALIFIER_USERNOTICE "1.3.6.1.5.5.7.2.2"
3088	#define szOID_PKIX_KP "1.3.6.1.5.5.7.3"
3089	#define szOID_PKIX_KP_SERVER_AUTH "1.3.6.1.5.5.7.3.1"
3090	#define szOID_PKIX_KP_CLIENT_AUTH "1.3.6.1.5.5.7.3.2"
3091	#define szOID_PKIX_KP_CODE_SIGNING "1.3.6.1.5.5.7.3.3"
3092	#define szOID_PKIX_KP_EMAIL_PROTECTION "1.3.6.1.5.5.7.3.4"
3093	#define szOID_PKIX_KP_IPSEC_END_SYSTEM "1.3.6.1.5.5.7.3.5"
3094	#define szOID_PKIX_KP_IPSEC_TUNNEL "1.3.6.1.5.5.7.3.6"
3095	#define szOID_PKIX_KP_IPSEC_USER "1.3.6.1.5.5.7.3.7"
3096	#define szOID_PKIX_KP_TIMESTAMP_SIGNING "1.3.6.1.5.5.7.3.8"
3097	#define szOID_PKIX_NO_SIGNATURE "1.3.6.1.5.5.7.6.2"
3098	#define szOID_CMC "1.3.6.1.5.5.7.7"
3099	#define szOID_CMC_STATUS_INFO "1.3.6.1.5.5.7.7.1"
3100	#define szOID_CMC_IDENTIFICATION "1.3.6.1.5.5.7.7.2"
3101	#define szOID_CMC_IDENTITY_PROOF "1.3.6.1.5.5.7.7.3"
3102	#define szOID_CMC_DATA_RETURN "1.3.6.1.5.5.7.7.4"
3103	#define szOID_CMC_TRANSACTION_ID "1.3.6.1.5.5.7.7.5"
3104	#define szOID_CMC_SENDER_NONCE "1.3.6.1.5.5.7.7.6"
3105	#define szOID_CMC_RECIPIENT_NONCE "1.3.6.1.5.5.7.7.7"
3106	#define szOID_CMC_ADD_EXTENSIONS "1.3.6.1.5.5.7.7.8"
3107	#define szOID_CMC_ENCRYPTED_POP "1.3.6.1.5.5.7.7.9"
3108	#define szOID_CMC_DECRYPTED_POP "1.3.6.1.5.5.7.7.10"
3109	#define szOID_CMC_LRA_POP_WITNESS "1.3.6.1.5.5.7.7.11"
3110	#define szOID_CMC_GET_CERT "1.3.6.1.5.5.7.7.15"
3111	#define szOID_CMC_GET_CRL "1.3.6.1.5.5.7.7.16"
3112	#define szOID_CMC_REVOKE_REQUEST "1.3.6.1.5.5.7.7.17"
3113	#define szOID_CMC_REG_INFO "1.3.6.1.5.5.7.7.18"
3114	#define szOID_CMC_RESPONSE_INFO "1.3.6.1.5.5.7.7.19"
3115	#define szOID_CMC_QUERY_PENDING "1.3.6.1.5.5.7.7.21"
3116	#define szOID_CMC_ID_POP_LINK_RANDOM "1.3.6.1.5.5.7.7.22"
3117	#define szOID_CMC_ID_POP_LINK_WITNESS "1.3.6.1.5.5.7.7.23"
3118	#define szOID_CT_PKI_DATA "1.3.6.1.5.5.7.12.2"
3119	#define szOID_CT_PKI_RESPONSE "1.3.6.1.5.5.7.12.3"
3120	#define szOID_PKIX_ACC_DESCR "1.3.6.1.5.5.7.48"
3121	#define szOID_PKIX_OCSP "1.3.6.1.5.5.7.48.1"
3122	#define szOID_PKIX_CA_ISSUERS "1.3.6.1.5.5.7.48.2"
3123	#define szOID_IPSEC_KP_IKE_INTERMEDIATE "1.3.6.1.5.5.8.2.2"
3124
3125	#ifndef szOID_SERIALIZED
3126	#define szOID_SERIALIZED "1.3.6.1.4.1.311.10.3.3.1"
3127	#endif
3128
3129	#ifndef szOID_PRODUCT_UPDATE
3130	#define szOID_PRODUCT_UPDATE "1.3.6.1.4.1.311.31.1"
3131	#endif
3132
3133	#define szOID_NETSCAPE "2.16.840.1.113730"
3134	#define szOID_NETSCAPE_CERT_EXTENSION "2.16.840.1.113730.1"
3135	#define szOID_NETSCAPE_CERT_TYPE "2.16.840.1.113730.1.1"
3136	#define szOID_NETSCAPE_BASE_URL "2.16.840.1.113730.1.2"
3137	#define szOID_NETSCAPE_REVOCATION_URL "2.16.840.1.113730.1.3"
3138	#define szOID_NETSCAPE_CA_REVOCATION_URL "2.16.840.1.113730.1.4"
3139	#define szOID_NETSCAPE_CERT_RENEWAL_URL "2.16.840.1.113730.1.7"
3140	#define szOID_NETSCAPE_CA_POLICY_URL "2.16.840.1.113730.1.8"
3141	#define szOID_NETSCAPE_SSL_SERVER_NAME "2.16.840.1.113730.1.12"
3142	#define szOID_NETSCAPE_COMMENT "2.16.840.1.113730.1.13"
3143	#define szOID_NETSCAPE_DATA_TYPE "2.16.840.1.113730.2"
3144	#define szOID_NETSCAPE_CERT_SEQUENCE "2.16.840.1.113730.2.5"
3145
3146	/* Bits for szOID_NETSCAPE_CERT_TYPE */
3147	#define NETSCAPE_SSL_CLIENT_AUTH_CERT_TYPE 0x80
3148	#define NETSCAPE_SSL_SERVER_AUTH_CERT_TYPE 0x40
3149	#define NETSCAPE_SMIME_CERT_TYPE 0x20
3150	#define NETSCAPE_SIGN_CERT_TYPE 0x10
3151	#define NETSCAPE_SSL_CA_CERT_TYPE 0x04
3152	#define NETSCAPE_SMIME_CA_CERT_TYPE 0x02
3153	#define NETSCAPE_SIGN_CA_CERT_TYPE 0x01
3154
3155	#define CRYPT_ENCODE_DECODE_NONE 0
3156	#define X509_CERT ((LPCSTR)1)
3157	#define X509_CERT_TO_BE_SIGNED ((LPCSTR)2)
3158	#define X509_CERT_CRL_TO_BE_SIGNED ((LPCSTR)3)
3159	#define X509_CERT_REQUEST_TO_BE_SIGNED ((LPCSTR)4)
3160	#define X509_EXTENSIONS ((LPCSTR)5)
3161	#define X509_NAME_VALUE ((LPCSTR)6)
3162	#define X509_ANY_STRING X509_NAME_VALUE
3163	#define X509_NAME ((LPCSTR)7)
3164	#define X509_PUBLIC_KEY_INFO ((LPCSTR)8)
3165	#define X509_AUTHORITY_KEY_ID ((LPCSTR)9)
3166	#define X509_KEY_ATTRIBUTES ((LPCSTR)10)
3167	#define X509_KEY_USAGE_RESTRICTION ((LPCSTR)11)
3168	#define X509_ALTERNATE_NAME ((LPCSTR)12)
3169	#define X509_BASIC_CONSTRAINTS ((LPCSTR)13)
3170	#define X509_KEY_USAGE ((LPCSTR)14)
3171	#define X509_BASIC_CONSTRAINTS2 ((LPCSTR)15)
3172	#define X509_CERT_POLICIES ((LPCSTR)16)
3173	#define PKCS_UTC_TIME ((LPCSTR)17)
3174	#define PKCS_TIME_REQUEST ((LPCSTR)18)
3175	#define RSA_CSP_PUBLICKEYBLOB ((LPCSTR)19)
3176	#define X509_UNICODE_NAME ((LPCSTR)20)
3177	#define X509_KEYGEN_REQUEST_TO_BE_SIGNED ((LPCSTR)21)
3178	#define PKCS_ATTRIBUTE ((LPCSTR)22)
3179	#define PKCS_CONTENT_INFO_SEQUENCE_OF_ANY ((LPCSTR)23)
3180	#define X509_UNICODE_NAME_VALUE ((LPCSTR)24)
3181	#define X509_UNICODE_ANY_STRING X509_UNICODE_NAME_VALUE
3182	#define X509_OCTET_STRING ((LPCSTR)25)
3183	#define X509_BITS ((LPCSTR)26)
3184	#define X509_INTEGER ((LPCSTR)27)
3185	#define X509_MULTI_BYTE_INTEGER ((LPCSTR)28)
3186	#define X509_ENUMERATED ((LPCSTR)29)
3187	#define X509_CRL_REASON_CODE X509_ENUMERATED
3188	#define X509_CHOICE_OF_TIME ((LPCSTR)30)
3189	#define X509_AUTHORITY_KEY_ID2 ((LPCSTR)31)
3190	#define X509_AUTHORITY_INFO_ACCESS ((LPCSTR)32)
3191	#define PKCS_CONTENT_INFO ((LPCSTR)33)
3192	#define X509_SEQUENCE_OF_ANY ((LPCSTR)34)
3193	#define X509_CRL_DIST_POINTS ((LPCSTR)35)
3194	#define X509_ENHANCED_KEY_USAGE ((LPCSTR)36)
3195	#define PKCS_CTL ((LPCSTR)37)
3196	#define X509_MULTI_BYTE_UINT ((LPCSTR)38)
3197	#define X509_DSS_PUBLICKEY X509_MULTI_BYTE_UINT
3198	#define X509_DSS_PARAMETERS ((LPCSTR)39)
3199	#define X509_DSS_SIGNATURE ((LPCSTR)40)
3200	#define PKCS_RC2_CBC_PARAMETERS ((LPCSTR)41)
3201	#define PKCS_SMIME_CAPABILITIES ((LPCSTR)42)
3202	#define PKCS_RSA_PRIVATE_KEY ((LPCSTR)43)
3203	#define PKCS_PRIVATE_KEY_INFO ((LPCSTR)44)
3204	#define PKCS_ENCRYPTED_PRIVATE_KEY_INFO ((LPCSTR)45)
3205	#define X509_PKIX_POLICY_QUALIFIER_USERNOTICE ((LPCSTR)46)
3206	#define X509_DH_PUBLICKEY X509_MULTI_BYTE_UINT
3207	#define X509_DH_PARAMETERS ((LPCSTR)47)
3208	#define PKCS_ATTRIBUTES ((LPCSTR)48)
3209	#define PKCS_SORTED_CTL ((LPCSTR)49)
3210	#define X942_DH_PARAMETERS ((LPCSTR)50)
3211	#define X509_BITS_WITHOUT_TRAILING_ZEROES ((LPCSTR)51)
3212	#define X942_OTHER_INFO ((LPCSTR)52)
3213	#define X509_CERT_PAIR ((LPCSTR)53)
3214	#define X509_ISSUING_DIST_POINT ((LPCSTR)54)
3215	#define X509_NAME_CONSTRAINTS ((LPCSTR)55)
3216	#define X509_POLICY_MAPPINGS ((LPCSTR)56)
3217	#define X509_POLICY_CONSTRAINTS ((LPCSTR)57)
3218	#define X509_CROSS_CERT_DIST_POINTS ((LPCSTR)58)
3219	#define CMC_DATA ((LPCSTR)59)
3220	#define CMC_RESPONSE ((LPCSTR)60)
3221	#define CMC_STATUS ((LPCSTR)61)
3222	#define CMC_ADD_EXTENSIONS ((LPCSTR)62)
3223	#define CMC_ADD_ATTRIBUTES ((LPCSTR)63)
3224	#define X509_CERTIFICATE_TEMPLATE ((LPCSTR)64)
3225	#define PKCS7_SIGNER_INFO ((LPCSTR)500)
3226	#define CMS_SIGNER_INFO ((LPCSTR)501)
3227
3228	/* encode/decode flags */
3229	#define CRYPT_ENCODE_NO_SIGNATURE_BYTE_REVERSAL_FLAG 0x00008
3230	#define CRYPT_ENCODE_ALLOC_FLAG 0x08000
3231	#define CRYPT_SORTED_CTL_ENCODE_HASHED_SUBJECT_IDENTIFIER_FLAG 0x10000
3232	#define CRYPT_UNICODE_NAME_ENCODE_ENABLE_T61_UNICODE_FLAG \
3233	CERT_RDN_ENABLE_T61_UNICODE_FLAG
3234	#define CRYPT_UNICODE_NAME_ENCODE_ENABLE_UTF8_UNICODE_FLAG \
3235	CERT_RDN_ENABLE_UTF8_UNICODE_FLAG
3236	#define CRYPT_UNICODE_NAME_ENCODE_DISABLE_CHECK_TYPE_FLAG \
3237	CERT_RDN_DISABLE_CHECK_TYPE_FLAG
3238
3239	#define CRYPT_DECODE_NOCOPY_FLAG 0x00001
3240	#define CRYPT_DECODE_TO_BE_SIGNED_FLAG 0x00002
3241	#define CRYPT_DECODE_SHARE_OID_STRING_FLAG 0x00004
3242	#define CRYPT_DECODE_NO_SIGNATURE_BYTE_REVERSAL_FLAG 0x00008
3243	#define CRYPT_DECODE_ALLOC_FLAG 0x08000
3244	#define CRYPT_UNICODE_NAME_DECODE_DISABLE_IE4_UTF8_FLAG \
3245	CERT_RDN_DISABLE_IE4_UTF8_FLAG
3246
3247	#define CERT_STORE_SIGNATURE_FLAG 0x00000001
3248	#define CERT_STORE_TIME_VALIDITY_FLAG 0x00000002
3249	#define CERT_STORE_REVOCATION_FLAG 0x00000004
3250	#define CERT_STORE_NO_CRL_FLAG 0x00010000
3251	#define CERT_STORE_NO_ISSUER_FLAG 0x00020000
3252
3253	#define CERT_STORE_BASE_CRL_FLAG 0x00000100
3254	#define CERT_STORE_DELTA_CRL_FLAG 0x00000200
3255
3256	/* subject types for CryptVerifyCertificateSignatureEx */
3257	#define CRYPT_VERIFY_CERT_SIGN_SUBJECT_BLOB 1
3258	#define CRYPT_VERIFY_CERT_SIGN_SUBJECT_CERT 2
3259	#define CRYPT_VERIFY_CERT_SIGN_SUBJECT_CRL 3
3260
3261	/* issuer types for CryptVerifyCertificateSignatureEx */
3262	#define CRYPT_VERIFY_CERT_SIGN_ISSUER_PUBKEY 1
3263	#define CRYPT_VERIFY_CERT_SIGN_ISSUER_CERT 2
3264	#define CRYPT_VERIFY_CERT_SIGN_ISSUER_CHAIN 3
3265	#define CRYPT_VERIFY_CERT_SIGN_ISSUER_NULL 4
3266
3267	#define CRYPT_GET_URL_FROM_PROPERTY 0x00000001
3268	#define CRYPT_GET_URL_FROM_EXTENSION 0x00000002
3269	#define CRYPT_GET_URL_FROM_UNAUTH_ATTRIBUTE 0x00000004
3270	#define CRYPT_GET_URL_FROM_AUTH_ATTRIBUTE 0x00000008
3271
3272	/* Certificate name string types and flags */
3273	#define CERT_SIMPLE_NAME_STR 1
3274	#define CERT_OID_NAME_STR 2
3275	#define CERT_X500_NAME_STR 3
3276	#define CERT_NAME_STR_SEMICOLON_FLAG 0x40000000
3277	#define CERT_NAME_STR_NO_PLUS_FLAG 0x20000000
3278	#define CERT_NAME_STR_NO_QUOTING_FLAG 0x10000000
3279	#define CERT_NAME_STR_CRLF_FLAG 0x08000000
3280	#define CERT_NAME_STR_COMMA_FLAG 0x04000000
3281	#define CERT_NAME_STR_REVERSE_FLAG 0x02000000
3282	#define CERT_NAME_STR_ENABLE_UTF8_UNICODE_FLAG 0x00040000
3283	#define CERT_NAME_STR_ENABLE_T61_UNICODE_FLAG 0x00020000
3284	#define CERT_NAME_STR_DISABLE_IE4_UTF8_FLAG 0x00010000
3285
3286	#define CERT_NAME_EMAIL_TYPE 1
3287	#define CERT_NAME_RDN_TYPE 2
3288	#define CERT_NAME_ATTR_TYPE 3
3289	#define CERT_NAME_SIMPLE_DISPLAY_TYPE 4
3290	#define CERT_NAME_FRIENDLY_DISPLAY_TYPE 5
3291	#define CERT_NAME_DNS_TYPE 6
3292	#define CERT_NAME_URL_TYPE 7
3293	#define CERT_NAME_UPN_TYPE 8
3294
3295	#define CERT_NAME_ISSUER_FLAG 0x00000001
3296	#define CERT_NAME_DISABLE_IE4_UTF8_FLAG 0x00010000
3297
3298	/* CryptFormatObject flags */
3299	#define CRYPT_FORMAT_STR_MULTI_LINE 0x0001
3300	#define CRYPT_FORMAT_STR_NO_HEX 0x0010
3301
3302	#define CRYPT_FORMAT_SIMPLE 0x0001
3303	#define CRYPT_FORMAT_X509 0x0002
3304	#define CRYPT_FORMAT_OID 0x0004
3305	#define CRYPT_FORMAT_RDN_SEMICOLON 0x0100
3306	#define CRYPT_FORMAT_RDN_CRLF 0x0200
3307	#define CRYPT_FORMAT_RDN_UNQUOTE 0x0400
3308	#define CRYPT_FORMAT_RDN_REVERSE 0x0800
3309
3310	#define CRYPT_FORMAT_COMMA 0x1000
3311	#define CRYPT_FORMAT_SEMICOLON CRYPT_FORMAT_RDN_SEMICOLON
3312	#define CRYPT_FORMAT_CRLF CRYPT_FORMAT_RDN_CRLF
3313
3314	/* CryptQueryObject types and flags */
3315	#define CERT_QUERY_OBJECT_FILE 1
3316	#define CERT_QUERY_OBJECT_BLOB 2
3317
3318	#define CERT_QUERY_CONTENT_CERT 1
3319	#define CERT_QUERY_CONTENT_CTL 2
3320	#define CERT_QUERY_CONTENT_CRL 3
3321	#define CERT_QUERY_CONTENT_SERIALIZED_STORE 4
3322	#define CERT_QUERY_CONTENT_SERIALIZED_CERT 5
3323	#define CERT_QUERY_CONTENT_SERIALIZED_CTL 6
3324	#define CERT_QUERY_CONTENT_SERIALIZED_CRL 7
3325	#define CERT_QUERY_CONTENT_PKCS7_SIGNED 8
3326	#define CERT_QUERY_CONTENT_PKCS7_UNSIGNED 9
3327	#define CERT_QUERY_CONTENT_PKCS7_SIGNED_EMBED 10
3328	#define CERT_QUERY_CONTENT_PKCS10 11
3329	#define CERT_QUERY_CONTENT_PFX 12
3330	#define CERT_QUERY_CONTENT_CERT_PAIR 13
3331
3332	#define CERT_QUERY_CONTENT_FLAG_CERT (1 << CERT_QUERY_CONTENT_CERT)
3333	#define CERT_QUERY_CONTENT_FLAG_CTL (1 << CERT_QUERY_CONTENT_CTL)
3334	#define CERT_QUERY_CONTENT_FLAG_CRL (1 << CERT_QUERY_CONTENT_CRL)
3335	#define CERT_QUERY_CONTENT_FLAG_SERIALIZED_STORE \
3336	(1 << CERT_QUERY_CONTENT_SERIALIZED_STORE)
3337	#define CERT_QUERY_CONTENT_FLAG_SERIALIZED_CERT \
3338	(1 << CERT_QUERY_CONTENT_SERIALIZED_CERT)
3339	#define CERT_QUERY_CONTENT_FLAG_SERIALIZED_CTL \
3340	(1 << CERT_QUERY_CONTENT_SERIALIZED_CTL)
3341	#define CERT_QUERY_CONTENT_FLAG_SERIALIZED_CRL \
3342	(1 << CERT_QUERY_CONTENT_SERIALIZED_CRL)
3343	#define CERT_QUERY_CONTENT_FLAG_PKCS7_SIGNED \
3344	(1 << CERT_QUERY_CONTENT_PKCS7_SIGNED)
3345	#define CERT_QUERY_CONTENT_FLAG_PKCS7_UNSIGNED \
3346	(1 << CERT_QUERY_CONTENT_PKCS7_UNSIGNED)
3347	#define CERT_QUERY_CONTENT_FLAG_PKCS7_SIGNED_EMBED \
3348	(1 << CERT_QUERY_CONTENT_PKCS7_SIGNED_EMBED)
3349	#define CERT_QUERY_CONTENT_FLAG_PKCS10 (1 << CERT_QUERY_CONTENT_PKCS10)
3350	#define CERT_QUERY_CONTENT_FLAG_PFX (1 << CERT_QUERY_CONTENT_PFX)
3351	#define CERT_QUERY_CONTENT_FLAG_CERT_PAIR (1 << CERT_QUERY_CONTENT_CERT_PAIR)
3352
3353	#define CERT_QUERY_CONTENT_FLAG_ALL \
3354	CERT_QUERY_CONTENT_FLAG_CERT \| \
3355	CERT_QUERY_CONTENT_FLAG_CTL \| \
3356	CERT_QUERY_CONTENT_FLAG_CRL \| \
3357	CERT_QUERY_CONTENT_FLAG_SERIALIZED_STORE \| \
3358	CERT_QUERY_CONTENT_FLAG_SERIALIZED_CERT \| \
3359	CERT_QUERY_CONTENT_FLAG_SERIALIZED_CTL \| \
3360	CERT_QUERY_CONTENT_FLAG_SERIALIZED_CRL \| \
3361	CERT_QUERY_CONTENT_FLAG_PKCS7_SIGNED \| \
3362	CERT_QUERY_CONTENT_FLAG_PKCS7_UNSIGNED \| \
3363	CERT_QUERY_CONTENT_FLAG_PKCS7_SIGNED_EMBED \| \
3364	CERT_QUERY_CONTENT_FLAG_PKCS10 \| \
3365	CERT_QUERY_CONTENT_FLAG_PFX \| \
3366	CERT_QUERY_CONTENT_FLAG_CERT_PAIR
3367
3368	#define CERT_QUERY_FORMAT_BINARY 1
3369	#define CERT_QUERY_FORMAT_BASE64_ENCODED 2
3370	#define CERT_QUERY_FORMAT_ASN_ASCII_HEX_ENCODED 3
3371
3372	#define CERT_QUERY_FORMAT_FLAG_BINARY (1 << CERT_QUERY_FORMAT_BINARY)
3373	#define CERT_QUERY_FORMAT_FLAG_BASE64_ENCODED \
3374	(1 << CERT_QUERY_FORMAT_BASE64_ENCODED)
3375	#define CERT_QUERY_FORMAT_FLAG_ASN_ASCII_HEX_ENCODED \
3376	(1 << CERT_QUERY_FORMAT_ASN_ASCII_HEX_ENCODED)
3377
3378	#define CERT_QUERY_FORMAT_FLAG_ALL \
3379	CERT_QUERY_FORMAT_FLAG_BINARY \| \
3380	CERT_QUERY_FORMAT_FLAG_BASE64_ENCODED \| \
3381	CERT_QUERY_FORMAT_FLAG_ASN_ASCII_HEX_ENCODED \
3382
3383	#define CERT_SET_KEY_PROV_HANDLE_PROP_ID 0x00000001
3384	#define CERT_SET_KEY_CONTEXT_PROP_ID 0x00000001
3385
3386	#define CERT_CREATE_SELFSIGN_NO_SIGN 1
3387	#define CERT_CREATE_SELFSIGN_NO_KEY_INFO 2
3388
3389	/* flags for CryptAcquireCertificatePrivateKey */
3390	#define CRYPT_ACQUIRE_CACHE_FLAG 0x00000001
3391	#define CRYPT_ACQUIRE_USE_PROV_INFO_FLAG 0x00000002
3392	#define CRYPT_ACQUIRE_COMPARE_KEY_FLAG 0x00000004
3393	#define CRYPT_ACQUIRE_SILENT_FLAG 0x00000040
3394
3395	/* flags for CryptFindCertificateKeyProvInfo */
3396	#define CRYPT_FIND_USER_KEYSET_FLAG 0x00000001
3397	#define CRYPT_FIND_MACHINE_KEYSET_FLAG 0x00000002
3398	#define CRYPT_FIND_SILENT_KEYSET_FLAG 0x00000040
3399
3400	/* Chain engines and chains */
3401	typedef HANDLE HCERTCHAINENGINE;
3402	#define HCCE_CURRENT_USER ((HCERTCHAINENGINE)NULL)
3403	#define HCCE_LOCAL_MACHINE ((HCERTCHAINENGINE)1)
3404
3405	#define CERT_CHAIN_CACHE_END_CERT 0x00000001
3406	#define CERT_CHAIN_THREAD_STORE_SYNC 0x00000002
3407	#define CERT_CHAIN_CACHE_ONLY_URL_RETRIEVAL 0x00000004
3408	#define CERT_CHAIN_USE_LOCAL_MACHINE_STORE 0x00000008
3409	#define CERT_CHAIN_ENABLE_CACHE_AUTO_UPDATE 0x00000010
3410	#define CERT_CHAIN_ENABLE_SHARE_STORE 0x00000020
3411
3412	typedef struct _CERT_CHAIN_ENGINE_CONFIG
3413	{
3414	DWORD cbSize;
3415	HCERTSTORE hRestrictedRoot;
3416	HCERTSTORE hRestrictedTrust;
3417	HCERTSTORE hRestrictedOther;
3418	DWORD cAdditionalStore;
3419	HCERTSTORE *rghAdditionalStore;
3420	DWORD dwFlags;
3421	DWORD dwUrlRetrievalTimeout;
3422	DWORD MaximumCachedCertificates;
3423	DWORD CycleDetectionModulus;
3424	HCERTSTORE hExclusiveRoot;
3425	HCERTSTORE hExclusiveRootTrustedPeople;
3426	} CERT_CHAIN_ENGINE_CONFIG, *PCERT_CHAIN_ENGINE_CONFIG;
3427
3428	/* message-related definitions */
3429
3430	typedef BOOL (WINAPI PFN_CMSG_STREAM_OUTPUT)(const void pvArg, BYTE *pbData,
3431	DWORD cbData, BOOL fFinal);
3432
3433	#define CMSG_INDEFINITE_LENGTH 0xffffffff
3434
3435	typedef struct _CMSG_STREAM_INFO
3436	{
3437	DWORD cbContent;
3438	PFN_CMSG_STREAM_OUTPUT pfnStreamOutput;
3439	void *pvArg;
3440	} CMSG_STREAM_INFO, *PCMSG_STREAM_INFO;
3441
3442	typedef struct _CERT_ISSUER_SERIAL_NUMBER
3443	{
3444	CERT_NAME_BLOB Issuer;
3445	CRYPT_INTEGER_BLOB SerialNumber;
3446	} CERT_ISSUER_SERIAL_NUMBER, *PCERT_ISSUER_SERIAL_NUMBER;
3447
3448	typedef struct _CERT_ID
3449	{
3450	DWORD dwIdChoice;
3451	union {
3452	CERT_ISSUER_SERIAL_NUMBER IssuerSerialNumber;
3453	CRYPT_HASH_BLOB KeyId;
3454	CRYPT_HASH_BLOB HashId;
3455	} DUMMYUNIONNAME;
3456	} CERT_ID, *PCERT_ID;
3457
3458	#define CERT_ID_ISSUER_SERIAL_NUMBER 1
3459	#define CERT_ID_KEY_IDENTIFIER 2
3460	#define CERT_ID_SHA1_HASH 3
3461
3462	#ifndef USE_WC_PREFIX
3463	#undef CMSG_DATA /* may be defined by sys/socket.h */
3464	#define CMSG_DATA 1
3465	#define CMSG_SIGNED 2
3466	#define CMSG_ENVELOPED 3
3467	#define CMSG_SIGNED_AND_ENVELOPED 4
3468	#define CMSG_HASHED 5
3469	#define CMSG_ENCRYPTED 6
3470
3471	#define CMSG_ALL_FLAGS ~0U
3472	#define CMSG_DATA_FLAG (1 << CMSG_DATA)
3473	#define CMSG_SIGNED_FLAG (1 << CMSG_SIGNED)
3474	#define CMSG_ENVELOPED_FLAG (1 << CMSG_ENVELOPED)
3475	#define CMSG_SIGNED_AND_ENVELOPED_FLAG (1 << CMSG_SIGNED_AND_ENVELOPED)
3476	#define CMSG_ENCRYPTED_FLAG (1 << CMSG_ENCRYPTED)
3477	#else
3478	#define WC_CMSG_DATA 1
3479	#define WC_CMSG_SIGNED 2
3480	#define WC_CMSG_ENVELOPED 3
3481	#define WC_CMSG_SIGNED_AND_ENVELOPED 4
3482	#define WC_CMSG_HASHED 5
3483	#define WC_CMSG_ENCRYPTED 6
3484
3485	#define WC_CMSG_ALL_FLAGS ~0U
3486	#define WC_CMSG_DATA_FLAG (1 << WC_CMSG_DATA)
3487	#define WC_CMSG_SIGNED_FLAG (1 << WC_CMSG_SIGNED)
3488	#define WC_CMSG_ENVELOPED_FLAG (1 << WC_CMSG_ENVELOPED)
3489	#define WC_CMSG_SIGNED_AND_ENVELOPED_FLAG (1 << WC_CMSG_SIGNED_AND_ENVELOPED)
3490	#define WC_CMSG_ENCRYPTED_FLAG (1 << WC_CMSG_ENCRYPTED)
3491	#endif
3492
3493	typedef struct _CMSG_SIGNER_ENCODE_INFO
3494	{
3495	DWORD cbSize;
3496	PCERT_INFO pCertInfo;
3497	HCRYPTPROV hCryptProv;
3498	DWORD dwKeySpec;
3499	CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm;
3500	void *pvHashAuxInfo;
3501	DWORD cAuthAttr;
3502	PCRYPT_ATTRIBUTE rgAuthAttr;
3503	DWORD cUnauthAttr;
3504	PCRYPT_ATTRIBUTE rgUnauthAttr;
3505	#ifdef CMSG_SIGNER_ENCODE_INFO_HAS_CMS_FIELDS
3506	CERT_ID SignerId;
3507	CRYPT_ALGORITHM_IDENTIFIER HashEncryptionAlgorithm;
3508	void *pvHashEncryptionAuxInfo;
3509	#endif
3510	} CMSG_SIGNER_ENCODE_INFO, *PCMSG_SIGNER_ENCODE_INFO;
3511
3512	typedef struct _CMSG_SIGNED_ENCODE_INFO
3513	{
3514	DWORD cbSize;
3515	DWORD cSigners;
3516	PCMSG_SIGNER_ENCODE_INFO rgSigners;
3517	DWORD cCertEncoded;
3518	PCERT_BLOB rgCertEncoded;
3519	DWORD cCrlEncoded;
3520	PCRL_BLOB rgCrlEncoded;
3521	#ifdef CMSG_SIGNED_ENCODE_INFO_HAS_CMS_FIELDS
3522	DWORD cAttrCertEncoded;
3523	PCERT_BLOB rgAttrCertEncoded;
3524	#endif
3525	} CMSG_SIGNED_ENCODE_INFO, *PCMSG_SIGNED_ENCODE_INFO;
3526
3527	typedef struct _CMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO
3528	{
3529	DWORD cbSize;
3530	CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm;
3531	void *pvKeyEncryptionAuxInfo;
3532	HCRYPTPROV_LEGACY hCryptProv;
3533	CRYPT_BIT_BLOB RecipientPublicKey;
3534	CERT_ID RecipientId;
3535	} CMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO, *PCMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO;
3536
3537	typedef struct _CMSG_RECIPIENT_ENCRYPTED_KEY_ENCODE_INFO
3538	{
3539	DWORD cbSize;
3540	CRYPT_BIT_BLOB RecipientPublicKey;
3541	CERT_ID RecipientId;
3542	FILETIME Date;
3543	PCRYPT_ATTRIBUTE_TYPE_VALUE pOtherAttr;
3544	} CMSG_RECIPIENT_ENCRYPTED_KEY_ENCODE_INFO,
3545	*PCMSG_RECIPIENT_ENCRYPTED_KEY_ENCODE_INFO;
3546
3547	typedef struct _CMSG_KEY_AGREE_RECIPIENT_ENCODE_INFO
3548	{
3549	DWORD cbSize;
3550	CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm;
3551	void *pvKeyEncryptionAuxInfo;
3552	CRYPT_ALGORITHM_IDENTIFIER KeyWrapAlgorithm;
3553	void *pvKeyWrapAuxInfo;
3554	HCRYPTPROV_LEGACY hCryptProv;
3555	DWORD dwKeySpec;
3556	DWORD dwKeyChoice;
3557	union {
3558	PCRYPT_ALGORITHM_IDENTIFIER pEphemeralAlgorithm;
3559	PCERT_ID pSenderId;
3560	} DUMMYUNIONNAME;
3561	CRYPT_DATA_BLOB UserKeyingMaterial;
3562	DWORD cRecipientEncryptedKeys;
3563	PCMSG_RECIPIENT_ENCRYPTED_KEY_ENCODE_INFO *rgpRecipientEncryptedKeys;
3564	} CMSG_KEY_AGREE_RECIPIENT_ENCODE_INFO, *PCMSG_KEY_AGREE_RECIPIENT_ENCODE_INFO;
3565
3566	#define CMSG_KEY_AGREE_EPHEMERAL_KEY_CHOICE 1
3567	#define CMSG_KEY_AGREE_STATIC_KEY_CHOICE 2
3568
3569	typedef struct _CMSG_MAIL_LIST_RECIPIENT_ENCODE_INFO
3570	{
3571	DWORD cbSize;
3572	CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm;
3573	void *pvKeyEncryptionAuxInfo;
3574	HCRYPTPROV hCryptProv;
3575	DWORD dwKeyChoice;
3576	union {
3577	HCRYPTKEY hKeyEncryptionKey;
3578	void *pvKeyEncryptionKey;
3579	} DUMMYUNIONNAME;
3580	CRYPT_DATA_BLOB KeyId;
3581	FILETIME Date;
3582	PCRYPT_ATTRIBUTE_TYPE_VALUE pOtherAttr;
3583	} CMSG_MAIL_LIST_RECIPIENT_ENCODE_INFO, *PCMSG_MAIL_LIST_RECIPIENT_ENCODE_INFO;
3584
3585	#define CMSG_MAIL_LIST_HANDLE_KEY_CHOICE 1
3586
3587	typedef struct _CMSG_RECIPIENT_ENCODE_INFO
3588	{
3589	DWORD dwRecipientChoice;
3590	union {
3591	PCMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO pKeyTrans;
3592	PCMSG_KEY_AGREE_RECIPIENT_ENCODE_INFO pKeyAgree;
3593	PCMSG_MAIL_LIST_RECIPIENT_ENCODE_INFO pMailList;
3594	} DUMMYUNIONNAME;
3595	} CMSG_RECIPIENT_ENCODE_INFO, *PCMSG_RECIPIENT_ENCODE_INFO;
3596
3597	#define CMSG_KEY_TRANS_RECIPIENT 1
3598	#define CMSG_KEY_AGREE_RECIPIENT 2
3599	#define CMSG_MAIL_LIST_RECIPIENT 3
3600
3601	typedef struct _CMSG_ENVELOPED_ENCODE_INFO
3602	{
3603	DWORD cbSize;
3604	HCRYPTPROV_LEGACY hCryptProv;
3605	CRYPT_ALGORITHM_IDENTIFIER ContentEncryptionAlgorithm;
3606	void *pvEncryptionAuxInfo;
3607	DWORD cRecipients;
3608	PCERT_INFO *rgpRecipientCert;
3609	#ifdef CMSG_ENVELOPED_ENCODE_INFO_HAS_CMS_FIELDS
3610	PCMSG_RECIPIENT_ENCODE_INFO rgCmsRecipients;
3611	DWORD cCertEncoded;
3612	PCERT_BLOB rgCertEncoded;
3613	DWORD cCrlEncoded;
3614	PCRL_BLOB rgCrlEncoded;
3615	DWORD cAttrCertEncoded;
3616	PCERT_BLOB rgAttrCertEncoded;
3617	DWORD cUnprotectedAttr;
3618	PCRYPT_ATTRIBUTE rgUnprotectedAttr;
3619	#endif
3620	} CMSG_ENVELOPED_ENCODE_INFO, *PCMSG_ENVELOPED_ENCODE_INFO;
3621
3622	typedef struct _CMSG_SIGNED_AND_ENVELOPED_ENCODE_INFO
3623	{
3624	DWORD cbSize;
3625	CMSG_SIGNED_ENCODE_INFO SignedInfo;
3626	CMSG_ENVELOPED_ENCODE_INFO EnvelopedInfo;
3627	} CMSG_SIGNED_AND_ENVELOPED_ENCODE_INFO,
3628	*PCMSG_SIGNED_AND_ENVELOPED_ENCODE_INFO;
3629
3630	typedef struct _CMSG_HASHED_ENCODE_INFO
3631	{
3632	DWORD cbSize;
3633	HCRYPTPROV_LEGACY hCryptProv;
3634	CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm;
3635	void *pvHashAuxInfo;
3636	} CMSG_HASHED_ENCODE_INFO, *PCMSG_HASHED_ENCODE_INFO;
3637
3638	typedef struct _CMSG_ENCRYPTED_ENCODE_INFO
3639	{
3640	DWORD cbSize;
3641	CRYPT_ALGORITHM_IDENTIFIER ContentEncryptionAlgorithm;
3642	void *pvEncryptionAuxInfo;
3643	} CMSG_ENCRYPTED_ENCODE_INFO, *PCMSG_ENCRYPTED_ENCODE_INFO;
3644
3645	#define CMSG_BARE_CONTENT_FLAG 0x00000001
3646	#define CMSG_LENGTH_ONLY_FLAG 0x00000002
3647	#define CMSG_DETACHED_FLAG 0x00000004
3648	#define CMSG_AUTHENTICATED_ATTRIBUTES_FLAG 0x00000008
3649	#define CMSG_CONTENTS_OCTETS_FLAG 0x00000010
3650	#define CMSG_MAX_LENGTH_FLAG 0x00000020
3651	#define CMSG_CMS_ENCAPSULATED_CONTENT_FLAG 0x00000040
3652	#define CMSG_CRYPT_RELEASE_CONTEXT_FLAG 0x00008000
3653
3654	#define CMSG_CTRL_VERIFY_SIGNATURE 1
3655	#define CMSG_CTRL_DECRYPT 2
3656	#define CMSG_CTRL_VERIFY_HASH 5
3657	#define CMSG_CTRL_ADD_SIGNER 6
3658	#define CMSG_CTRL_DEL_SIGNER 7
3659	#define CMSG_CTRL_ADD_SIGNER_UNAUTH_ATTR 8
3660	#define CMSG_CTRL_DEL_SIGNER_UNAUTH_ATTR 9
3661	#define CMSG_CTRL_ADD_CERT 10
3662	#define CMSG_CTRL_DEL_CERT 11
3663	#define CMSG_CTRL_ADD_CRL 12
3664	#define CMSG_CTRL_DEL_CRL 13
3665	#define CMSG_CTRL_ADD_ATTR_CERT 14
3666	#define CMSG_CTRL_DEL_ATTR_CERT 15
3667	#define CMSG_CTRL_KEY_TRANS_DECRYPT 16
3668	#define CMSG_CTRL_KEY_AGREE_DECRYPT 17
3669	#define CMSG_CTRL_MAIL_LIST_DECRYPT 18
3670	#define CMSG_CTRL_VERIFY_SIGNATURE_EX 19
3671	#define CMSG_CTRL_ADD_CMS_SIGNER_INFO 20
3672
3673	typedef struct _CMSG_CTRL_DECRYPT_PARA
3674	{
3675	DWORD cbSize;
3676	HCRYPTPROV hCryptProv;
3677	DWORD dwKeySpec;
3678	DWORD dwRecipientIndex;
3679	} CMSG_CTRL_DECRYPT_PARA, *PCMSG_CTRL_DECRYPT_PARA;
3680
3681	typedef struct _CMSG_CTRL_ADD_SIGNER_UNAUTH_ATTR_PARA
3682	{
3683	DWORD cbSize;
3684	DWORD dwSignerIndex;
3685	CRYPT_DATA_BLOB blob;
3686	} CMSG_CTRL_ADD_SIGNER_UNAUTH_ATTR_PARA,
3687	*PCMSG_CTRL_ADD_SIGNER_UNAUTH_ATTR_PARA;
3688
3689	typedef struct _CMSG_CTRL_DEL_SIGNER_UNAUTH_ATTR_PARA
3690	{
3691	DWORD cbSize;
3692	DWORD dwSignerIndex;
3693	DWORD dwUnauthAttrIndex;
3694	} CMSG_CTRL_DEL_SIGNER_UNAUTH_ATTR_PARA,
3695	*PCMSG_CTRL_DEL_SIGNER_UNAUTH_ATTR_PARA;
3696
3697	typedef struct _CMSG_CTRL_VERIFY_SIGNATURE_EX_PARA {
3698	DWORD cbSize;
3699	HCRYPTPROV hCryptProv;
3700	DWORD dwSignerIndex;
3701	DWORD dwSignerType;
3702	void *pvSigner;
3703	} CMSG_CTRL_VERIFY_SIGNATURE_EX_PARA, *PCMSG_CTRL_VERIFY_SIGNATURE_EX_PARA;
3704
3705	#define CMSG_VERIFY_SIGNER_PUBKEY 1
3706	#define CMSG_VERIFY_SIGNER_CERT 2
3707	#define CMSG_VERIFY_SIGNER_CHAIN 3
3708	#define CMSG_VERIFY_SIGNER_NULL 4
3709
3710	#define CMSG_TYPE_PARAM 1
3711	#define CMSG_CONTENT_PARAM 2
3712	#define CMSG_BARE_CONTENT_PARAM 3
3713	#define CMSG_INNER_CONTENT_TYPE_PARAM 4
3714	#define CMSG_SIGNER_COUNT_PARAM 5
3715	#define CMSG_SIGNER_INFO_PARAM 6
3716	#define CMSG_SIGNER_CERT_INFO_PARAM 7
3717	#define CMSG_SIGNER_HASH_ALGORITHM_PARAM 8
3718	#define CMSG_SIGNER_AUTH_ATTR_PARAM 9
3719	#define CMSG_SIGNER_UNAUTH_ATTR_PARAM 10
3720	#define CMSG_CERT_COUNT_PARAM 11
3721	#define CMSG_CERT_PARAM 12
3722	#define CMSG_CRL_COUNT_PARAM 13
3723	#define CMSG_CRL_PARAM 14
3724	#define CMSG_ENVELOPE_ALGORITHM_PARAM 15
3725	#define CMSG_RECIPIENT_COUNT_PARAM 17
3726	#define CMSG_RECIPIENT_INDEX_PARAM 18
3727	#define CMSG_RECIPIENT_INFO_PARAM 19
3728	#define CMSG_HASH_ALGORITHM_PARAM 20
3729	#define CMSG_HASH_DATA_PARAM 21
3730	#define CMSG_COMPUTED_HASH_PARAM 22
3731	#define CMSG_ENCRYPT_PARAM 26
3732	#define CMSG_ENCRYPTED_DIGEST 27
3733	#define CMSG_ENCODED_SIGNER 28
3734	#define CMSG_ENCODED_MESSAGE 29
3735	#define CMSG_VERSION_PARAM 30
3736	#define CMSG_ATTR_CERT_COUNT_PARAM 31
3737	#define CMSG_ATTR_CERT_PARAM 32
3738	#define CMSG_CMS_RECIPIENT_COUNT_PARAM 33
3739	#define CMSG_CMS_RECIPIENT_INDEX_PARAM 34
3740	#define CMSG_CMS_RECIPIENT_ENCRYPTED_KEY_INDEX_PARAM 35
3741	#define CMSG_CMS_RECIPIENT_INFO_PARAM 36
3742	#define CMSG_UNPROTECTED_ATTR_PARAM 37
3743	#define CMSG_SIGNER_CERT_ID_PARAM 38
3744	#define CMSG_CMS_SIGNER_INFO_PARAM 39
3745
3746	typedef struct _CMSG_CMS_SIGNER_INFO {
3747	DWORD dwVersion;
3748	CERT_ID SignerId;
3749	CRYPT_ALGORITHM_IDENTIFIER HashAlgorithm;
3750	CRYPT_ALGORITHM_IDENTIFIER HashEncryptionAlgorithm;
3751	CRYPT_DATA_BLOB EncryptedHash;
3752	CRYPT_ATTRIBUTES AuthAttrs;
3753	CRYPT_ATTRIBUTES UnauthAttrs;
3754	} CMSG_CMS_SIGNER_INFO, *PCMSG_CMS_SIGNER_INFO;
3755
3756	typedef CRYPT_ATTRIBUTES CMSG_ATTR, *PCMSG_ATTR;
3757
3758	#define CMSG_SIGNED_DATA_V1 1
3759	#define CMSG_SIGNED_DATA_V3 3
3760	#define CMSG_SIGNED_DATA_PKCS_1_5_VERSION CMSG_SIGNED_DATA_V1
3761	#define CMSG_SIGNED_DATA_CMS_VERSION CMSG_SIGNED_DATA_V3
3762
3763	#define CMSG_SIGNER_INFO_V1 1
3764	#define CMSG_SIGNER_INFO_V3 3
3765	#define CMSG_SIGNER_INFO_PKCS_1_5_VERSION CMSG_SIGNER_INFO_V1
3766	#define CMSG_SIGNER_INFO_CMS_VERSION CMSG_SIGNER_INFO_V3
3767
3768	#define CMSG_HASHED_DATA_V0 0
3769	#define CMSG_HASHED_DATA_V2 2
3770	#define CMSG_HASHED_DATA_PKCS_1_5_VERSION CMSG_HASHED_DATA_V0
3771	#define CMSG_HASHED_DATA_CMS_VERSION CMSG_HASHED_DATA_V2
3772
3773	#define CMSG_ENVELOPED_DATA_V0 0
3774	#define CMSG_ENVELOPED_DATA_V2 2
3775	#define CMSG_ENVELOPED_DATA_PKCS_1_5_VERSION CMSG_ENVELOPED_DATA_V0
3776	#define CMSG_ENVELOPED_DATA_CMS_VERSION CMSG_ENVELOPED_DATA_V2
3777
3778	typedef struct _CMSG_KEY_TRANS_RECIPIENT_INFO {
3779	DWORD dwVersion;
3780	CERT_ID RecipientId;
3781	CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm;
3782	CRYPT_DATA_BLOB EncryptedKey;
3783	} CMSG_KEY_TRANS_RECIPIENT_INFO, *PCMSG_KEY_TRANS_RECIPIENT_INFO;
3784
3785	typedef struct _CMSG_RECIPIENT_ENCRYPTED_KEY_INFO {
3786	CERT_ID RecipientId;
3787	CRYPT_DATA_BLOB EncryptedKey;
3788	PCRYPT_ATTRIBUTE_TYPE_VALUE pOtherAttr;
3789	} CMSG_RECIPIENT_ENCRYPTED_KEY_INFO, *PCMSG_RECIPIENT_ENCRYPTED_KEY_INFO;
3790
3791	typedef struct _CMSG_KEY_AGREE_RECIPIENT_INFO {
3792	DWORD dwVersion;
3793	DWORD dwOriginatorChoice;
3794	union {
3795	CERT_ID OriginatorCertId;
3796	CERT_PUBLIC_KEY_INFO OriginatorPublicKeyInfo;
3797	} DUMMYUNIONNAME;
3798	CRYPT_ALGORITHM_IDENTIFIER UserKeyingMaterial;
3799	DWORD cRecipientEncryptedKeys;
3800	PCMSG_RECIPIENT_ENCRYPTED_KEY_INFO *rgpRecipientEncryptedKeys;
3801	} CMSG_KEY_AGREE_RECIPIENT_INFO, *PCMSG_KEY_AGREE_RECIPIENT_INFO;
3802
3803	#define CMSG_KEY_AGREE_ORIGINATOR_CERT 1
3804	#define CMSG_KEY_AGREE_ORIGINATOR_PUBLIC_KEY 2
3805
3806	typedef struct _CMSG_MAIL_LIST_RECIPIENT_INFO {
3807	DWORD dwVersion;
3808	CRYPT_DATA_BLOB KeyId;
3809	CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm;
3810	CRYPT_DATA_BLOB EncryptedKey;
3811	FILETIME Date;
3812	PCRYPT_ATTRIBUTE_TYPE_VALUE pOtherAttr;
3813	} CMSG_MAIL_LIST_RECIPIENT_INFO, *PCMSG_MAIL_LIST_RECIPIENT_INFO;
3814
3815	typedef struct _CMSG_CMS_RECIPIENT_INFO {
3816	DWORD dwRecipientChoice;
3817	union {
3818	PCMSG_KEY_TRANS_RECIPIENT_INFO pKeyTrans;
3819	PCMSG_KEY_AGREE_RECIPIENT_INFO pKeyAgree;
3820	PCMSG_MAIL_LIST_RECIPIENT_INFO pMailList;
3821	} DUMMYUNIONNAME;
3822	} CMSG_CMS_RECIPIENT_INFO, *PCMSG_CMS_RECIPIENT_INFO;
3823
3824	#define CMSG_ENVELOPED_RECIPIENT_V0 0
3825	#define CMSG_ENVELOPED_RECIPIENT_V2 2
3826	#define CMSG_ENVELOPED_RECIPIENT_V3 3
3827	#define CMSG_ENVELOPED_RECIPIENT_V4 4
3828	#define CMSG_KEY_TRANS_PKCS_1_5_VERSION CMSG_ENVELOPED_RECIPIENT_V0
3829	#define CMSG_KEY_TRANS_CMS_VERSION CMSG_ENVELOPED_RECIPIENT_V2
3830	#define CMSG_KEY_AGREE_VERSION CMSG_ENVELOPED_RECIPIENT_V3
3831	#define CMSG_MAIL_LIST_VERSION CMSG_ENVELOPED_RECIPIENT_V4
3832
3833	typedef void * (WINAPI *PFN_CMSG_ALLOC)(size_t cb);
3834	typedef void (WINAPI PFN_CMSG_FREE)(void pv);
3835
3836	typedef struct _CMSG_CONTENT_ENCRYPT_INFO {
3837	DWORD cbSize;
3838	HCRYPTPROV hCryptProv;
3839	CRYPT_ALGORITHM_IDENTIFIER ContentEncryptionAlgorithm;
3840	void *pvEncryptionAuxInfo;
3841	DWORD cRecipients;
3842	PCMSG_RECIPIENT_ENCODE_INFO rgCmsRecipients;
3843	PFN_CMSG_ALLOC pfnAlloc;
3844	PFN_CMSG_FREE pfnFree;
3845	DWORD dwEncryptFlags;
3846	HCRYPTKEY hContentEncryptKey;
3847	DWORD dwFlags;
3848	} CMSG_CONTENT_ENCRYPT_INFO, *PCMSG_CONTENT_ENCRYPT_INFO;
3849
3850	typedef struct _CMSG_KEY_TRANS_ENCRYPT_INFO {
3851	DWORD cbSize;
3852	DWORD dwRecipientIndex;
3853	CRYPT_ALGORITHM_IDENTIFIER KeyEncryptionAlgorithm;
3854	CRYPT_DATA_BLOB EncryptedKey;
3855	DWORD dwFlags;
3856	} CMSG_KEY_TRANS_ENCRYPT_INFO, *PCMSG_KEY_TRANS_ENCRYPT_INFO;
3857
3858	typedef struct _CMSG_CTRL_KEY_TRANS_DECRYPT_PARA {
3859	DWORD cbSize;
3860	HCRYPTPROV hCryptProv;
3861	DWORD dwKeySpec;
3862	PCMSG_KEY_TRANS_RECIPIENT_INFO pKeyTrans;
3863	DWORD dwRecipientIndex;
3864	} CMSG_CTRL_KEY_TRANS_DECRYPT_PARA, *PCMSG_CTRL_KEY_TRANS_DECRYPT_PARA;
3865
3866	typedef BOOL (WINAPI *PFN_CMSG_GEN_CONTENT_ENCRYPT_KEY)(
3867	PCMSG_CONTENT_ENCRYPT_INFO pContentEncryptInfo, DWORD dwFlags,
3868	void *pvReserved);
3869
3870	typedef BOOL (WINAPI *PFN_CMSG_EXPORT_KEY_TRANS)(
3871	PCMSG_CONTENT_ENCRYPT_INFO pContentEncryptInfo,
3872	PCMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO pKeyTransEncodeInfo,
3873	PCMSG_KEY_TRANS_ENCRYPT_INFO pKeyTransEncryptInfo,
3874	DWORD dwFlags, void *pvReserved);
3875
3876	typedef BOOL (WINAPI *PFN_CMSG_IMPORT_KEY_TRANS)(
3877	PCRYPT_ALGORITHM_IDENTIFIER pContentEncryptionAlgorithm,
3878	PCMSG_CTRL_KEY_TRANS_DECRYPT_PARA pKeyTransDecryptPara, DWORD dwFlags,
3879	void pvReserved, HCRYPTKEY phContentEncryptKey);
3880
3881	/* CryptMsgGetAndVerifySigner flags */
3882	#define CMSG_TRUSTED_SIGNER_FLAG 0x1
3883	#define CMSG_SIGNER_ONLY_FLAG 0x2
3884	#define CMSG_USE_SIGNER_INDEX_FLAG 0x4
3885
3886	/* CryptMsgSignCTL flags */
3887	#define CMSG_CMS_ENCAPSULATED_CTL_FLAG 0x00008000
3888
3889	/* CryptMsgEncodeAndSignCTL flags */
3890	#define CMSG_ENCODED_SORTED_CTL_FLAG 0x1
3891	#define CMSG_ENCODE_HASHED_SUBJECT_IDENTIFIER_FLAG 0x2
3892
3893	/* PFXImportCertStore flags */
3894	#define CRYPT_USER_KEYSET 0x00001000
3895	#define PKCS12_IMPORT_RESERVED_MASK 0xffff0000
3896	/* PFXExportCertStore flags */
3897	#define REPORT_NO_PRIVATE_KEY 0x00000001
3898	#define REPORT_NOT_ABLE_TO_EXPORT_PRIVATE_KEY 0x00000002
3899	#define EXPORT_PRIVATE_KEYS 0x00000004
3900	#define PKCS12_EXPORT_RESERVED_MASK 0xffff0000
3901
3902	/* function declarations */
3903	/* advapi32.dll */
3904	WINADVAPI BOOL WINAPI CryptAcquireContextA(HCRYPTPROV *, LPCSTR, LPCSTR, DWORD, DWORD);
3905	WINADVAPI BOOL WINAPI CryptAcquireContextW (HCRYPTPROV *, LPCWSTR, LPCWSTR, DWORD, DWORD);
3906	#define CryptAcquireContext WINELIB_NAME_AW(CryptAcquireContext)
3907	WINADVAPI BOOL WINAPI CryptGenRandom (HCRYPTPROV, DWORD, BYTE *);
3908	WINADVAPI BOOL WINAPI CryptContextAddRef (HCRYPTPROV, DWORD *, DWORD);
3909	WINADVAPI BOOL WINAPI CryptCreateHash (HCRYPTPROV, ALG_ID, HCRYPTKEY, DWORD, HCRYPTHASH *);
3910	WINADVAPI BOOL WINAPI CryptDecrypt (HCRYPTKEY, HCRYPTHASH, BOOL, DWORD, BYTE , DWORD );
3911	WINADVAPI BOOL WINAPI CryptDeriveKey (HCRYPTPROV, ALG_ID, HCRYPTHASH, DWORD, HCRYPTKEY *);
3912	WINADVAPI BOOL WINAPI CryptDestroyHash (HCRYPTHASH);
3913	WINADVAPI BOOL WINAPI CryptDestroyKey (HCRYPTKEY);
3914	WINADVAPI BOOL WINAPI CryptDuplicateKey (HCRYPTKEY, DWORD , DWORD, HCRYPTKEY );
3915	WINADVAPI BOOL WINAPI CryptDuplicateHash (HCRYPTHASH, DWORD , DWORD, HCRYPTHASH );
3916	WINADVAPI BOOL WINAPI CryptEncrypt (HCRYPTKEY, HCRYPTHASH, BOOL, DWORD, BYTE , DWORD , DWORD);
3917	WINADVAPI BOOL WINAPI CryptEnumProvidersA (DWORD, DWORD , DWORD, DWORD , LPSTR, DWORD *);
3918	WINADVAPI BOOL WINAPI CryptEnumProvidersW (DWORD, DWORD , DWORD, DWORD , LPWSTR, DWORD *);
3919	#define CryptEnumProviders WINELIB_NAME_AW(CryptEnumProviders)
3920	WINADVAPI BOOL WINAPI CryptEnumProviderTypesA (DWORD, DWORD , DWORD, DWORD , LPSTR, DWORD *);
3921	WINADVAPI BOOL WINAPI CryptEnumProviderTypesW (DWORD, DWORD , DWORD, DWORD , LPWSTR, DWORD *);
3922	#define CryptEnumProviderTypes WINELIB_NAME_AW(CryptEnumProviderTypes)
3923	WINADVAPI BOOL WINAPI CryptExportKey (HCRYPTKEY, HCRYPTKEY, DWORD, DWORD, BYTE , DWORD );
3924	WINADVAPI BOOL WINAPI CryptGenKey (HCRYPTPROV, ALG_ID, DWORD, HCRYPTKEY *);
3925	WINADVAPI BOOL WINAPI CryptGetKeyParam (HCRYPTKEY, DWORD, BYTE , DWORD , DWORD);
3926	WINADVAPI BOOL WINAPI CryptGetHashParam (HCRYPTHASH, DWORD, BYTE , DWORD , DWORD);
3927	WINADVAPI BOOL WINAPI CryptGetProvParam (HCRYPTPROV, DWORD, BYTE , DWORD , DWORD);
3928	WINADVAPI BOOL WINAPI CryptGetDefaultProviderA (DWORD, DWORD , DWORD, LPSTR, DWORD );
3929	WINADVAPI BOOL WINAPI CryptGetDefaultProviderW (DWORD, DWORD , DWORD, LPWSTR, DWORD );
3930	#define CryptGetDefaultProvider WINELIB_NAME_AW(CryptGetDefaultProvider)
3931	WINADVAPI BOOL WINAPI CryptGetUserKey (HCRYPTPROV, DWORD, HCRYPTKEY *);
3932	WINADVAPI BOOL WINAPI CryptHashData (HCRYPTHASH, const BYTE *, DWORD, DWORD);
3933	WINADVAPI BOOL WINAPI CryptHashSessionKey (HCRYPTHASH, HCRYPTKEY, DWORD);
3934	WINADVAPI BOOL WINAPI CryptImportKey (HCRYPTPROV, const BYTE , DWORD, HCRYPTKEY, DWORD, HCRYPTKEY );
3935	WINADVAPI BOOL WINAPI CryptReleaseContext (HCRYPTPROV, ULONG_PTR);
3936	WINADVAPI BOOL WINAPI CryptSetHashParam (HCRYPTHASH, DWORD, const BYTE *, DWORD);
3937	WINADVAPI BOOL WINAPI CryptSetKeyParam (HCRYPTKEY, DWORD, const BYTE *, DWORD);
3938	WINADVAPI BOOL WINAPI CryptSetProviderA (LPCSTR, DWORD);
3939	WINADVAPI BOOL WINAPI CryptSetProviderW (LPCWSTR, DWORD);
3940	#define CryptSetProvider WINELIB_NAME_AW(CryptSetProvider)
3941	WINADVAPI BOOL WINAPI CryptSetProviderExA (LPCSTR, DWORD, DWORD *, DWORD);
3942	WINADVAPI BOOL WINAPI CryptSetProviderExW (LPCWSTR, DWORD, DWORD *, DWORD);
3943	#define CryptSetProviderEx WINELIB_NAME_AW(CryptSetProviderEx)
3944	WINADVAPI BOOL WINAPI CryptSetProvParam (HCRYPTPROV, DWORD, const BYTE *, DWORD);
3945	WINADVAPI BOOL WINAPI CryptSignHashA (HCRYPTHASH, DWORD, LPCSTR, DWORD, BYTE , DWORD );
3946	WINADVAPI BOOL WINAPI CryptSignHashW (HCRYPTHASH, DWORD, LPCWSTR, DWORD, BYTE , DWORD );
3947	#define CryptSignHash WINELIB_NAME_AW(CryptSignHash)
3948	WINADVAPI BOOL WINAPI CryptVerifySignatureA (HCRYPTHASH, const BYTE *, DWORD, HCRYPTKEY, LPCSTR, DWORD);
3949	WINADVAPI BOOL WINAPI CryptVerifySignatureW (HCRYPTHASH, const BYTE *, DWORD, HCRYPTKEY, LPCWSTR, DWORD);
3950	#define CryptVerifySignature WINELIB_NAME_AW(CryptVerifySignature)
3951
3952	/* crypt32.dll functions */
3953	LPVOID WINAPI CryptMemAlloc(ULONG cbSize) __WINE_ALLOC_SIZE(1);
3954	LPVOID WINAPI CryptMemRealloc(LPVOID pv, ULONG cbSize) __WINE_ALLOC_SIZE(2);
3955	VOID WINAPI CryptMemFree(LPVOID pv);
3956
3957	BOOL WINAPI CryptBinaryToStringA(const BYTE *pbBinary,
3958	DWORD cbBinary, DWORD dwFlags, LPSTR pszString, DWORD *pcchString);
3959	BOOL WINAPI CryptBinaryToStringW(const BYTE *pbBinary,
3960	DWORD cbBinary, DWORD dwFlags, LPWSTR pszString, DWORD *pcchString);
3961	#define CryptBinaryToString WINELIB_NAME_AW(CryptBinaryToString)
3962
3963	BOOL WINAPI CryptStringToBinaryA(LPCSTR pszString,
3964	DWORD cchString, DWORD dwFlags, BYTE pbBinary, DWORD pcbBinary,
3965	DWORD pdwSkip, DWORD pdwFlags);
3966	BOOL WINAPI CryptStringToBinaryW(LPCWSTR pszString,
3967	DWORD cchString, DWORD dwFlags, BYTE pbBinary, DWORD pcbBinary,
3968	DWORD pdwSkip, DWORD pdwFlags);
3969	#define CryptStringToBinary WINELIB_NAME_AW(CryptStringToBinary)
3970
3971	BOOL WINAPI CryptCreateAsyncHandle(DWORD dwFlags, PHCRYPTASYNC phAsync);
3972	BOOL WINAPI CryptSetAsyncParam(HCRYPTASYNC hAsync, LPSTR pszParamOid,
3973	LPVOID pvParam, PFN_CRYPT_ASYNC_PARAM_FREE_FUNC pfnFree);
3974	BOOL WINAPI CryptGetAsyncParam(HCRYPTASYNC hAsync, LPSTR pszParamOid,
3975	LPVOID ppvParam, PFN_CRYPT_ASYNC_PARAM_FREE_FUNC ppfnFree);
3976	BOOL WINAPI CryptCloseAsyncHandle(HCRYPTASYNC hAsync);
3977
3978	BOOL WINAPI CryptRegisterDefaultOIDFunction(DWORD,LPCSTR,DWORD,LPCWSTR);
3979	BOOL WINAPI CryptRegisterOIDFunction(DWORD,LPCSTR,LPCSTR,LPCWSTR,LPCSTR);
3980	BOOL WINAPI CryptGetOIDFunctionValue(DWORD dwEncodingType, LPCSTR pszFuncName,
3981	LPCSTR pszOID, LPCWSTR szValueName, DWORD *pdwValueType,
3982	BYTE pbValueData, DWORD pcbValueData);
3983	BOOL WINAPI CryptSetOIDFunctionValue(DWORD dwEncodingType, LPCSTR pszFuncName,
3984	LPCSTR pszOID, LPCWSTR pwszValueName, DWORD dwValueType,
3985	const BYTE *pbValueData, DWORD cbValueData);
3986	BOOL WINAPI CryptUnregisterDefaultOIDFunction(DWORD,LPCSTR,LPCWSTR);
3987	BOOL WINAPI CryptUnregisterOIDFunction(DWORD,LPCSTR,LPCSTR);
3988	BOOL WINAPI CryptEnumOIDFunction(DWORD dwEncodingType, LPCSTR pszFuncName,
3989	LPCSTR pszOID, DWORD dwFlags, void *pvArg,
3990	PFN_CRYPT_ENUM_OID_FUNC pfnEnumOIDFunc);
3991	HCRYPTOIDFUNCSET WINAPI CryptInitOIDFunctionSet(LPCSTR,DWORD);
3992	BOOL WINAPI CryptGetDefaultOIDDllList(HCRYPTOIDFUNCSET hFuncSet,
3993	DWORD dwEncodingType, LPWSTR pwszDllList, DWORD *pcchDllList);
3994	BOOL WINAPI CryptGetDefaultOIDFunctionAddress(HCRYPTOIDFUNCSET hFuncSet,
3995	DWORD dwEncodingType, LPCWSTR pwszDll, DWORD dwFlags, void **ppvFuncAddr,
3996	HCRYPTOIDFUNCADDR *phFuncAddr);
3997	BOOL WINAPI CryptGetOIDFunctionAddress(HCRYPTOIDFUNCSET hFuncSet,
3998	DWORD dwEncodingType, LPCSTR pszOID, DWORD dwFlags, void **ppvFuncAddr,
3999	HCRYPTOIDFUNCADDR *phFuncAddr);
4000	BOOL WINAPI CryptFreeOIDFunctionAddress(HCRYPTOIDFUNCADDR hFuncAddr,
4001	DWORD dwFlags);
4002	BOOL WINAPI CryptInstallOIDFunctionAddress(HMODULE hModule,
4003	DWORD dwEncodingType, LPCSTR pszFuncName, DWORD cFuncEntry,
4004	const CRYPT_OID_FUNC_ENTRY rgFuncEntry[], DWORD dwFlags);
4005	BOOL WINAPI CryptInstallDefaultContext(HCRYPTPROV hCryptProv,
4006	DWORD dwDefaultType, const void *pvDefaultPara, DWORD dwFlags,
4007	void pvReserved, HCRYPTDEFAULTCONTEXT phDefaultContext);
4008	BOOL WINAPI CryptUninstallDefaultContext(HCRYPTDEFAULTCONTEXT hDefaultContext,
4009	DWORD dwFlags, void *pvReserved);
4010
4011	BOOL WINAPI CryptEnumOIDInfo(DWORD dwGroupId, DWORD dwFlags, void *pvArg,
4012	PFN_CRYPT_ENUM_OID_INFO pfnEnumOIDInfo);
4013	PCCRYPT_OID_INFO WINAPI CryptFindOIDInfo(DWORD dwKeyType, void *pvKey,
4014	DWORD dwGroupId);
4015	BOOL WINAPI CryptRegisterOIDInfo(PCCRYPT_OID_INFO pInfo, DWORD dwFlags);
4016	BOOL WINAPI CryptUnregisterOIDInfo(PCCRYPT_OID_INFO pInfo);
4017
4018	LPCWSTR WINAPI CryptFindLocalizedName(LPCWSTR pwszCryptName);
4019
4020	LPCSTR WINAPI CertAlgIdToOID(DWORD dwAlgId);
4021	DWORD WINAPI CertOIDToAlgId(LPCSTR pszObjId);
4022
4023	/* cert store functions */
4024	HCERTSTORE WINAPI CertOpenStore(LPCSTR lpszStoreProvider, DWORD dwEncodingType,
4025	HCRYPTPROV_LEGACY hCryptProv, DWORD dwFlags, const void *pvPara);
4026
4027	HCERTSTORE WINAPI CertOpenSystemStoreA(HCRYPTPROV_LEGACY hProv,
4028	LPCSTR szSubSystemProtocol);
4029	HCERTSTORE WINAPI CertOpenSystemStoreW(HCRYPTPROV_LEGACY hProv,
4030	LPCWSTR szSubSystemProtocol);
4031	#define CertOpenSystemStore WINELIB_NAME_AW(CertOpenSystemStore)
4032
4033	PCCERT_CONTEXT WINAPI CertEnumCertificatesInStore(HCERTSTORE hCertStore,
4034	PCCERT_CONTEXT pPrev);
4035
4036	PCCRL_CONTEXT WINAPI CertEnumCRLsInStore(HCERTSTORE hCertStore,
4037	PCCRL_CONTEXT pPrev);
4038
4039	PCCTL_CONTEXT WINAPI CertEnumCTLsInStore(HCERTSTORE hCertStore,
4040	PCCTL_CONTEXT pPrev);
4041
4042	BOOL WINAPI CertEnumSystemStoreLocation(DWORD dwFlags, void *pvArg,
4043	PFN_CERT_ENUM_SYSTEM_STORE_LOCATION pfnEnum);
4044
4045	BOOL WINAPI CertEnumSystemStore(DWORD dwFlags, void *pvSystemStoreLocationPara,
4046	void *pvArg, PFN_CERT_ENUM_SYSTEM_STORE pfnEnum);
4047
4048	BOOL WINAPI CertEnumPhysicalStore(const void *pvSystemStore, DWORD dwFlags,
4049	void *pvArg, PFN_CERT_ENUM_PHYSICAL_STORE pfnEnum);
4050
4051	BOOL WINAPI CertRegisterPhysicalStore(const void *pvSystemStore, DWORD dwFlags,
4052	LPCWSTR pwszStoreName, PCERT_PHYSICAL_STORE_INFO pStoreInfo, void *pvReserved);
4053
4054	BOOL WINAPI CertSaveStore(HCERTSTORE hCertStore, DWORD dwMsgAndCertEncodingType,
4055	DWORD dwSaveAs, DWORD dwSaveTo, void* pvSaveToPara, DWORD dwFlags);
4056
4057	BOOL WINAPI CertAddStoreToCollection(HCERTSTORE hCollectionStore,
4058	HCERTSTORE hSiblingStore, DWORD dwUpdateFlags, DWORD dwPriority);
4059
4060	void WINAPI CertRemoveStoreFromCollection(HCERTSTORE hCollectionStore,
4061	HCERTSTORE hSiblingStore);
4062
4063	BOOL WINAPI CertCreateCertificateChainEngine(PCERT_CHAIN_ENGINE_CONFIG pConfig,
4064	HCERTCHAINENGINE *phChainEngine);
4065
4066	BOOL WINAPI CertResyncCertificateChainEngine(HCERTCHAINENGINE hChainEngine);
4067
4068	VOID WINAPI CertFreeCertificateChainEngine(HCERTCHAINENGINE hChainEngine);
4069
4070	BOOL WINAPI CertGetCertificateChain(HCERTCHAINENGINE hChainEngine,
4071	PCCERT_CONTEXT pCertContext, LPFILETIME pTime, HCERTSTORE hAdditionalStore,
4072	PCERT_CHAIN_PARA pChainPara, DWORD dwFlags, LPVOID pvReserved,
4073	PCCERT_CHAIN_CONTEXT *ppChainContext);
4074
4075	PCCERT_CHAIN_CONTEXT WINAPI CertDuplicateCertificateChain(
4076	PCCERT_CHAIN_CONTEXT pChainContext);
4077
4078	VOID WINAPI CertFreeCertificateChain(PCCERT_CHAIN_CONTEXT pChainContext);
4079
4080	PCCERT_CHAIN_CONTEXT WINAPI CertFindChainInStore(HCERTSTORE hCertStore,
4081	DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType,
4082	const void *pvFindPara, PCCERT_CHAIN_CONTEXT pPrevChainContext);
4083
4084	BOOL WINAPI CertVerifyCertificateChainPolicy(LPCSTR szPolicyOID,
4085	PCCERT_CHAIN_CONTEXT pChainContext, PCERT_CHAIN_POLICY_PARA pPolicyPara,
4086	PCERT_CHAIN_POLICY_STATUS pPolicyStatus);
4087
4088	DWORD WINAPI CertEnumCertificateContextProperties(PCCERT_CONTEXT pCertContext,
4089	DWORD dwPropId);
4090
4091	BOOL WINAPI CertGetCertificateContextProperty(PCCERT_CONTEXT pCertContext,
4092	DWORD dwPropId, void pvData, DWORD pcbData);
4093
4094	BOOL WINAPI CertSetCertificateContextProperty(PCCERT_CONTEXT pCertContext,
4095	DWORD dwPropId, DWORD dwFlags, const void *pvData);
4096
4097	DWORD WINAPI CertEnumCRLContextProperties(PCCRL_CONTEXT pCRLContext,
4098	DWORD dwPropId);
4099
4100	BOOL WINAPI CertGetCRLContextProperty(PCCRL_CONTEXT pCRLContext,
4101	DWORD dwPropId, void pvData, DWORD pcbData);
4102
4103	BOOL WINAPI CertSetCRLContextProperty(PCCRL_CONTEXT pCRLContext,
4104	DWORD dwPropId, DWORD dwFlags, const void *pvData);
4105
4106	DWORD WINAPI CertEnumCTLContextProperties(PCCTL_CONTEXT pCTLContext,
4107	DWORD dwPropId);
4108
4109	BOOL WINAPI CertEnumSubjectInSortedCTL(PCCTL_CONTEXT pCTLContext,
4110	void **ppvNextSubject, PCRYPT_DER_BLOB pSubjectIdentifier,
4111	PCRYPT_DER_BLOB pEncodedAttributes);
4112
4113	BOOL WINAPI CertGetCTLContextProperty(PCCTL_CONTEXT pCTLContext,
4114	DWORD dwPropId, void pvData, DWORD pcbData);
4115
4116	BOOL WINAPI CertSetCTLContextProperty(PCCTL_CONTEXT pCTLContext,
4117	DWORD dwPropId, DWORD dwFlags, const void *pvData);
4118
4119	BOOL WINAPI CertGetStoreProperty(HCERTSTORE hCertStore, DWORD dwPropId,
4120	void pvData, DWORD pcbData);
4121
4122	BOOL WINAPI CertSetStoreProperty(HCERTSTORE hCertStore, DWORD dwPropId,
4123	DWORD dwFlags, const void *pvData);
4124
4125	BOOL WINAPI CertControlStore(HCERTSTORE hCertStore, DWORD dwFlags,
4126	DWORD dwCtrlType, void const *pvCtrlPara);
4127
4128	HCERTSTORE WINAPI CertDuplicateStore(HCERTSTORE hCertStore);
4129
4130	BOOL WINAPI CertCloseStore( HCERTSTORE hCertStore, DWORD dwFlags );
4131
4132	BOOL WINAPI CertFreeCertificateContext( PCCERT_CONTEXT pCertContext );
4133
4134	BOOL WINAPI CertFreeCRLContext( PCCRL_CONTEXT pCrlContext );
4135
4136	BOOL WINAPI CertFreeCTLContext( PCCTL_CONTEXT pCtlContext );
4137
4138	BOOL WINAPI CertAddCertificateContextToStore(HCERTSTORE hCertStore,
4139	PCCERT_CONTEXT pCertContext, DWORD dwAddDisposition,
4140	PCCERT_CONTEXT *ppStoreContext);
4141
4142	BOOL WINAPI CertAddCRLContextToStore( HCERTSTORE hCertStore,
4143	PCCRL_CONTEXT pCrlContext, DWORD dwAddDisposition,
4144	PCCRL_CONTEXT *ppStoreContext );
4145
4146	BOOL WINAPI CertAddCTLContextToStore( HCERTSTORE hCertStore,
4147	PCCTL_CONTEXT pCtlContext, DWORD dwAddDisposition,
4148	PCCTL_CONTEXT *ppStoreContext );
4149
4150	BOOL WINAPI CertAddCertificateLinkToStore(HCERTSTORE hCertStore,
4151	PCCERT_CONTEXT pCertContext, DWORD dwAddDisposition,
4152	PCCERT_CONTEXT *ppStoreContext);
4153
4154	BOOL WINAPI CertAddCRLLinkToStore(HCERTSTORE hCertStore,
4155	PCCRL_CONTEXT pCrlContext, DWORD dwAddDisposition,
4156	PCCRL_CONTEXT *ppStoreContext);
4157
4158	BOOL WINAPI CertAddCTLLinkToStore(HCERTSTORE hCertStore,
4159	PCCTL_CONTEXT pCtlContext, DWORD dwAddDisposition,
4160	PCCTL_CONTEXT *ppStoreContext);
4161
4162	BOOL WINAPI CertAddEncodedCertificateToStore(HCERTSTORE hCertStore,
4163	DWORD dwCertEncodingType, const BYTE *pbCertEncoded, DWORD cbCertEncoded,
4164	DWORD dwAddDisposition, PCCERT_CONTEXT *ppCertContext);
4165
4166	BOOL WINAPI CertAddEncodedCertificateToSystemStoreA(LPCSTR pszCertStoreName,
4167	const BYTE *pbCertEncoded, DWORD cbCertEncoded);
4168	BOOL WINAPI CertAddEncodedCertificateToSystemStoreW(LPCWSTR pszCertStoreName,
4169	const BYTE *pbCertEncoded, DWORD cbCertEncoded);
4170	#define CertAddEncodedCertificateToSystemStore \
4171	WINELIB_NAME_AW(CertAddEncodedCertificateToSystemStore)
4172
4173	BOOL WINAPI CertAddEncodedCRLToStore(HCERTSTORE hCertStore,
4174	DWORD dwCertEncodingType, const BYTE *pbCrlEncoded, DWORD cbCrlEncoded,
4175	DWORD dwAddDisposition, PCCRL_CONTEXT *ppCrlContext);
4176
4177	BOOL WINAPI CertAddEncodedCTLToStore(HCERTSTORE hCertStore,
4178	DWORD dwMsgAndCertEncodingType, const BYTE *pbCtlEncoded, DWORD cbCtlEncoded,
4179	DWORD dwAddDisposition, PCCTL_CONTEXT *ppCtlContext);
4180
4181	BOOL WINAPI CertAddSerializedElementToStore(HCERTSTORE hCertStore,
4182	const BYTE *pbElement, DWORD cbElement, DWORD dwAddDisposition, DWORD dwFlags,
4183	DWORD dwContextTypeFlags, DWORD pdwContentType, const void *ppvContext);
4184
4185	BOOL WINAPI CertCompareCertificate(DWORD dwCertEncodingType,
4186	PCERT_INFO pCertId1, PCERT_INFO pCertId2);
4187	BOOL WINAPI CertCompareCertificateName(DWORD dwCertEncodingType,
4188	PCERT_NAME_BLOB pCertName1, PCERT_NAME_BLOB pCertName2);
4189	BOOL WINAPI CertCompareIntegerBlob(PCRYPT_INTEGER_BLOB pInt1,
4190	PCRYPT_INTEGER_BLOB pInt2);
4191	BOOL WINAPI CertComparePublicKeyInfo(DWORD dwCertEncodingType,
4192	PCERT_PUBLIC_KEY_INFO pPublicKey1, PCERT_PUBLIC_KEY_INFO pPublicKey2);
4193	DWORD WINAPI CertGetPublicKeyLength(DWORD dwCertEncodingType,
4194	PCERT_PUBLIC_KEY_INFO pPublicKey);
4195
4196	const void * WINAPI CertCreateContext(DWORD dwContextType, DWORD dwEncodingType,
4197	const BYTE *pbEncoded, DWORD cbEncoded, DWORD dwFlags,
4198	PCERT_CREATE_CONTEXT_PARA pCreatePara);
4199
4200	PCCERT_CONTEXT WINAPI CertCreateCertificateContext(DWORD dwCertEncodingType,
4201	const BYTE *pbCertEncoded, DWORD cbCertEncoded);
4202
4203	PCCRL_CONTEXT WINAPI CertCreateCRLContext( DWORD dwCertEncodingType,
4204	const BYTE* pbCrlEncoded, DWORD cbCrlEncoded);
4205
4206	PCCTL_CONTEXT WINAPI CertCreateCTLContext(DWORD dwMsgAndCertEncodingType,
4207	const BYTE *pbCtlEncoded, DWORD cbCtlEncoded);
4208
4209	PCCERT_CONTEXT WINAPI CertCreateSelfSignCertificate(HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hProv,
4210	PCERT_NAME_BLOB pSubjectIssuerBlob, DWORD dwFlags,
4211	PCRYPT_KEY_PROV_INFO pKeyProvInfo,
4212	PCRYPT_ALGORITHM_IDENTIFIER pSignatureAlgorithm, PSYSTEMTIME pStartTime,
4213	PSYSTEMTIME pEndTime, PCERT_EXTENSIONS pExtensions);
4214
4215	BOOL WINAPI CertDeleteCertificateFromStore(PCCERT_CONTEXT pCertContext);
4216
4217	BOOL WINAPI CertDeleteCRLFromStore(PCCRL_CONTEXT pCrlContext);
4218
4219	BOOL WINAPI CertDeleteCTLFromStore(PCCTL_CONTEXT pCtlContext);
4220
4221	PCCERT_CONTEXT WINAPI CertDuplicateCertificateContext(
4222	PCCERT_CONTEXT pCertContext);
4223
4224	PCCRL_CONTEXT WINAPI CertDuplicateCRLContext(PCCRL_CONTEXT pCrlContext);
4225
4226	PCCTL_CONTEXT WINAPI CertDuplicateCTLContext(PCCTL_CONTEXT pCtlContext);
4227
4228	PCCERT_CONTEXT WINAPI CertFindCertificateInStore( HCERTSTORE hCertStore,
4229	DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType,
4230	const void *pvFindPara, PCCERT_CONTEXT pPrevCertContext );
4231
4232	PCCRL_CONTEXT WINAPI CertFindCRLInStore(HCERTSTORE hCertStore,
4233	DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType,
4234	const void *pvFindPara, PCCRL_CONTEXT pPrevCrlContext);
4235
4236	PCCTL_CONTEXT WINAPI CertFindCTLInStore(HCERTSTORE hCertStore,
4237	DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType,
4238	const void *pvFindPara, PCCTL_CONTEXT pPrevCtlContext);
4239
4240	PCCERT_CONTEXT WINAPI CertGetIssuerCertificateFromStore(HCERTSTORE hCertStore,
4241	PCCERT_CONTEXT pSubjectContext, PCCERT_CONTEXT pPrevIssuerContext,
4242	DWORD *pdwFlags);
4243
4244	PCCERT_CONTEXT WINAPI CertGetSubjectCertificateFromStore(HCERTSTORE hCertStore,
4245	DWORD dwCertEncodingType, PCERT_INFO pCertId);
4246
4247	PCCRL_CONTEXT WINAPI CertGetCRLFromStore(HCERTSTORE hCertStore,
4248	PCCERT_CONTEXT pIssuerContext, PCCRL_CONTEXT pPrevCrlContext, DWORD *pdwFlags);
4249
4250	BOOL WINAPI CertSerializeCertificateStoreElement(PCCERT_CONTEXT pCertContext,
4251	DWORD dwFlags, BYTE pbElement, DWORD pcbElement);
4252
4253	BOOL WINAPI CertSerializeCRLStoreElement(PCCRL_CONTEXT pCrlContext,
4254	DWORD dwFlags, BYTE pbElement, DWORD pcbElement);
4255
4256	BOOL WINAPI CertSerializeCTLStoreElement(PCCTL_CONTEXT pCtlContext,
4257	DWORD dwFlags, BYTE pbElement, DWORD pcbElement);
4258
4259	BOOL WINAPI CertGetIntendedKeyUsage(DWORD dwCertEncodingType,
4260	PCERT_INFO pCertInfo, BYTE *pbKeyUsage, DWORD cbKeyUsage);
4261
4262	BOOL WINAPI CertGetEnhancedKeyUsage(PCCERT_CONTEXT pCertContext, DWORD dwFlags,
4263	PCERT_ENHKEY_USAGE pUsage, DWORD *pcbUsage);
4264	BOOL WINAPI CertSetEnhancedKeyUsage(PCCERT_CONTEXT pCertContext,
4265	PCERT_ENHKEY_USAGE pUsage);
4266	BOOL WINAPI CertAddEnhancedKeyUsageIdentifier(PCCERT_CONTEXT pCertContext,
4267	LPCSTR pszUsageIdentifier);
4268	BOOL WINAPI CertRemoveEnhancedKeyUsageIdentifier(PCCERT_CONTEXT pCertContext,
4269	LPCSTR pszUsageIdentifier);
4270	BOOL WINAPI CertGetValidUsages(DWORD cCerts, PCCERT_CONTEXT *rghCerts,
4271	int cNumOIDs, LPSTR rghOIDs, DWORD *pcbOIDs);
4272
4273	BOOL WINAPI CryptEncodeObject(DWORD dwCertEncodingType, LPCSTR lpszStructType,
4274	const void pvStructInfo, BYTE pbEncoded, DWORD *pcbEncoded);
4275	BOOL WINAPI CryptEncodeObjectEx(DWORD dwCertEncodingType, LPCSTR lpszStructType,
4276	const void *pvStructInfo, DWORD dwFlags, PCRYPT_ENCODE_PARA pEncodePara,
4277	void pvEncoded, DWORD pcbEncoded);
4278
4279	BOOL WINAPI CryptDecodeObject(DWORD dwCertEncodingType, LPCSTR lpszStructType,
4280	const BYTE pbEncoded, DWORD cbEncoded, DWORD dwFlags, void pvStructInfo,
4281	DWORD *pcbStructInfo);
4282	BOOL WINAPI CryptDecodeObjectEx(DWORD dwCertEncodingType, LPCSTR lpszStructType,
4283	const BYTE *pbEncoded, DWORD cbEncoded, DWORD dwFlags,
4284	PCRYPT_DECODE_PARA pDecodePara, void pvStructInfo, DWORD pcbStructInfo);
4285
4286	BOOL WINAPI CryptFormatObject(DWORD dwCertEncodingType, DWORD dwFormatType,
4287	DWORD dwFormatStrType, void *pFormatStruct, LPCSTR lpszStructType,
4288	const BYTE pbEncoded, DWORD cbEncoded, void pbFormat, DWORD *pcbFormat);
4289
4290	BOOL WINAPI CryptHashCertificate(HCRYPTPROV_LEGACY hCryptProv, ALG_ID Algid,
4291	DWORD dwFlags, const BYTE pbEncoded, DWORD cbEncoded, BYTE pbComputedHash,
4292	DWORD *pcbComputedHash);
4293
4294	BOOL WINAPI CryptHashPublicKeyInfo(HCRYPTPROV_LEGACY hCryptProv, ALG_ID Algid,
4295	DWORD dwFlags, DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo,
4296	BYTE pbComputedHash, DWORD pcbComputedHash);
4297
4298	BOOL WINAPI CryptHashToBeSigned(HCRYPTPROV_LEGACY hCryptProv, DWORD dwCertEncodingType,
4299	const BYTE pbEncoded, DWORD cbEncoded, BYTE pbComputedHash,
4300	DWORD *pcbComputedHash);
4301
4302	BOOL WINAPI CryptQueryObject(DWORD dwObjectType, const void* pvObject,
4303	DWORD dwExpectedContentTypeFlags, DWORD dwExpectedFormatTypeFlags,
4304	DWORD dwFlags, DWORD* pdwMsgAndCertEncodingType, DWORD* pdwContentType,
4305	DWORD* pdwFormatType, HCERTSTORE* phCertStore, HCRYPTMSG* phMsg,
4306	const void** ppvContext);
4307
4308	BOOL WINAPI CryptSignCertificate(HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProv, DWORD dwKeySpec,
4309	DWORD dwCertEncodingType, const BYTE *pbEncodedToBeSigned,
4310	DWORD cbEncodedToBeSigned, PCRYPT_ALGORITHM_IDENTIFIER pSignatureAlgorithm,
4311	const void pvHashAuxInfo, BYTE pbSignature, DWORD *pcbSignature);
4312
4313	BOOL WINAPI CryptSignAndEncodeCertificate(HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProv,
4314	DWORD dwKeySpec, DWORD dwCertEncodingType, LPCSTR lpszStructType,
4315	const void *pvStructInfo, PCRYPT_ALGORITHM_IDENTIFIER pSignatureAlgorithm,
4316	const void pvHashAuxInfo, BYTE pbEncoded, DWORD *pcbEncoded);
4317
4318	BOOL WINAPI CryptVerifyCertificateSignature(HCRYPTPROV_LEGACY hCryptProv,
4319	DWORD dwCertEncodingType, const BYTE *pbEncoded, DWORD cbEncoded,
4320	PCERT_PUBLIC_KEY_INFO pPublicKey);
4321
4322	BOOL WINAPI CryptVerifyCertificateSignatureEx(HCRYPTPROV_LEGACY hCryptProv,
4323	DWORD dwCertEncodingType, DWORD dwSubjectType, void *pvSubject,
4324	DWORD dwIssuerType, void pvIssuer, DWORD dwFlags, void pvReserved);
4325
4326	PCRYPT_ATTRIBUTE WINAPI CertFindAttribute(LPCSTR pszObjId, DWORD cAttr,
4327	CRYPT_ATTRIBUTE rgAttr[]);
4328	PCERT_EXTENSION WINAPI CertFindExtension(LPCSTR pszObjId, DWORD cExtensions,
4329	CERT_EXTENSION rgExtensions[]);
4330	PCERT_RDN_ATTR WINAPI CertFindRDNAttr(LPCSTR pszObjId, PCERT_NAME_INFO pName);
4331
4332	BOOL WINAPI CertFindSubjectInSortedCTL(PCRYPT_DATA_BLOB pSubjectIdentifier,
4333	PCCTL_CONTEXT pCtlContext, DWORD dwFlags, void *pvReserved,
4334	PCRYPT_DER_BLOB pEncodedAttributes);
4335
4336	BOOL WINAPI CertIsRDNAttrsInCertificateName(DWORD dwCertEncodingType,
4337	DWORD dwFlags, PCERT_NAME_BLOB pCertName, PCERT_RDN pRDN);
4338
4339	BOOL WINAPI CertIsValidCRLForCertificate(PCCERT_CONTEXT pCert,
4340	PCCRL_CONTEXT pCrl, DWORD dwFlags, void *pvReserved);
4341	BOOL WINAPI CertFindCertificateInCRL(PCCERT_CONTEXT pCert,
4342	PCCRL_CONTEXT pCrlContext, DWORD dwFlags, void *pvReserved,
4343	PCRL_ENTRY *ppCrlEntry);
4344	BOOL WINAPI CertVerifyCRLRevocation(DWORD dwCertEncodingType,
4345	PCERT_INFO pCertId, DWORD cCrlInfo, PCRL_INFO rgpCrlInfo[]);
4346
4347	BOOL WINAPI CertVerifySubjectCertificateContext(PCCERT_CONTEXT pSubject,
4348	PCCERT_CONTEXT pIssuer, DWORD *pdwFlags);
4349
4350	LONG WINAPI CertVerifyCRLTimeValidity(LPFILETIME pTimeToVerify,
4351	PCRL_INFO pCrlInfo);
4352	LONG WINAPI CertVerifyTimeValidity(LPFILETIME pTimeToVerify,
4353	PCERT_INFO pCertInfo);
4354	BOOL WINAPI CertVerifyValidityNesting(PCERT_INFO pSubjectInfo,
4355	PCERT_INFO pIssuerInfo);
4356
4357	BOOL WINAPI CertVerifyCTLUsage(DWORD dwEncodingType, DWORD dwSubjectType,
4358	void *pvSubject, PCTL_USAGE pSubjectUsage, DWORD dwFlags,
4359	PCTL_VERIFY_USAGE_PARA pVerifyUsagePara,
4360	PCTL_VERIFY_USAGE_STATUS pVerifyUsageStatus);
4361
4362	BOOL WINAPI CertVerifyRevocation(DWORD dwEncodingType, DWORD dwRevType,
4363	DWORD cContext, PVOID rgpvContext[], DWORD dwFlags,
4364	PCERT_REVOCATION_PARA pRevPara, PCERT_REVOCATION_STATUS pRevStatus);
4365
4366	BOOL WINAPI CryptExportPublicKeyInfo(HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProv, DWORD dwKeySpec,
4367	DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, DWORD *pcbInfo);
4368	BOOL WINAPI CryptExportPublicKeyInfoEx(HCRYPTPROV_OR_NCRYPT_KEY_HANDLE hCryptProv, DWORD dwKeySpec,
4369	DWORD dwCertEncodingType, LPSTR pszPublicKeyObjId, DWORD dwFlags,
4370	void pvAuxInfo, PCERT_PUBLIC_KEY_INFO pInfo, DWORD pcbInfo);
4371	BOOL WINAPI CryptImportPublicKeyInfo(HCRYPTPROV hCryptProv,
4372	DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, HCRYPTKEY *phKey);
4373	BOOL WINAPI CryptImportPublicKeyInfoEx(HCRYPTPROV hCryptProv,
4374	DWORD dwCertEncodingType, PCERT_PUBLIC_KEY_INFO pInfo, ALG_ID aiKeyAlg,
4375	DWORD dwFlags, void pvAuxInfo, HCRYPTKEY phKey);
4376
4377	BOOL WINAPI CryptAcquireCertificatePrivateKey(PCCERT_CONTEXT pCert,
4378	DWORD dwFlags, void pvReserved, HCRYPTPROV_OR_NCRYPT_KEY_HANDLE phCryptProv, DWORD *pdwKeySpec,
4379	BOOL *pfCallerFreeProv);
4380
4381	BOOL WINAPI CryptFindCertificateKeyProvInfo(PCCERT_CONTEXT pCert,
4382	DWORD dwFlags, void *pvReserved);
4383
4384	BOOL WINAPI CryptProtectData( DATA_BLOB* pDataIn, LPCWSTR szDataDescr,
4385	DATA_BLOB* pOptionalEntropy, PVOID pvReserved,
4386	CRYPTPROTECT_PROMPTSTRUCT* pPromptStruct, DWORD dwFlags, DATA_BLOB* pDataOut );
4387
4388	BOOL WINAPI CryptUnprotectData( DATA_BLOB* pDataIn, LPWSTR* ppszDataDescr,
4389	DATA_BLOB* pOptionalEntropy, PVOID pvReserved,
4390	CRYPTPROTECT_PROMPTSTRUCT* pPromptStruct, DWORD dwFlags, DATA_BLOB* pDataOut );
4391
4392	DWORD WINAPI CertGetNameStringA(PCCERT_CONTEXT pCertContext, DWORD dwType,
4393	DWORD dwFlags, void *pvTypePara, LPSTR pszNameString, DWORD cchNameString);
4394	DWORD WINAPI CertGetNameStringW(PCCERT_CONTEXT pCertContext, DWORD dwType,
4395	DWORD dwFlags, void *pvTypePara, LPWSTR pszNameString, DWORD cchNameString);
4396	#define CertGetNameString WINELIB_NAME_AW(CertGetNameString)
4397
4398	DWORD WINAPI CertRDNValueToStrA(DWORD dwValueType, PCERT_RDN_VALUE_BLOB pValue,
4399	LPSTR psz, DWORD csz);
4400	DWORD WINAPI CertRDNValueToStrW(DWORD dwValueType, PCERT_RDN_VALUE_BLOB pValue,
4401	LPWSTR psz, DWORD csz);
4402	#define CertRDNValueToStr WINELIB_NAME_AW(CertRDNValueToStr)
4403
4404	DWORD WINAPI CertNameToStrA(DWORD dwCertEncodingType, PCERT_NAME_BLOB pName,
4405	DWORD dwStrType, LPSTR psz, DWORD csz);
4406	DWORD WINAPI CertNameToStrW(DWORD dwCertEncodingType, PCERT_NAME_BLOB pName,
4407	DWORD dwStrType, LPWSTR psz, DWORD csz);
4408	#define CertNameToStr WINELIB_NAME_AW(CertNameToStr)
4409
4410	BOOL WINAPI CertStrToNameA(DWORD dwCertEncodingType, LPCSTR pszX500,
4411	DWORD dwStrType, void pvReserved, BYTE pbEncoded, DWORD *pcbEncoded,
4412	LPCSTR *ppszError);
4413	BOOL WINAPI CertStrToNameW(DWORD dwCertEncodingType, LPCWSTR pszX500,
4414	DWORD dwStrType, void pvReserved, BYTE pbEncoded, DWORD *pcbEncoded,
4415	LPCWSTR *ppszError);
4416	#define CertStrToName WINELIB_NAME_AW(CertStrToName)
4417
4418	DWORD WINAPI CryptMsgCalculateEncodedLength(DWORD dwMsgEncodingType,
4419	DWORD dwFlags, DWORD dwMsgType, const void *pvMsgEncodeInfo,
4420	LPSTR pszInnerContentObjID, DWORD cbData);
4421
4422	BOOL WINAPI CryptMsgClose(HCRYPTMSG hCryptMsg);
4423
4424	BOOL WINAPI CryptMsgControl(HCRYPTMSG hCryptMsg, DWORD dwFlags,
4425	DWORD dwCtrlType, const void *pvCtrlPara);
4426
4427	BOOL WINAPI CryptMsgCountersign(HCRYPTMSG hCryptMsg, DWORD dwIndex,
4428	DWORD dwCountersigners, PCMSG_SIGNER_ENCODE_INFO rgCountersigners);
4429
4430	BOOL WINAPI CryptMsgCountersignEncoded(DWORD dwEncodingType, PBYTE pbSignerInfo,
4431	DWORD cbSignerInfo, DWORD cCountersigners,
4432	PCMSG_SIGNER_ENCODE_INFO rgCountersigners, PBYTE pbCountersignature,
4433	PDWORD pcbCountersignature);
4434
4435	HCRYPTMSG WINAPI CryptMsgDuplicate(HCRYPTMSG hCryptMsg);
4436
4437	BOOL WINAPI CryptMsgEncodeAndSignCTL(DWORD dwMsgEncodingType,
4438	PCTL_INFO pCtlInfo, PCMSG_SIGNED_ENCODE_INFO pSignInfo, DWORD dwFlags,
4439	BYTE pbEncoded, DWORD pcbEncoded);
4440
4441	BOOL WINAPI CryptMsgGetAndVerifySigner(HCRYPTMSG hCryptMsg, DWORD cSignerStore,
4442	HCERTSTORE rghSignerStore, DWORD dwFlags, PCCERT_CONTEXT ppSigner,
4443	DWORD *pdwSignerIndex);
4444
4445	BOOL WINAPI CryptMsgGetParam(HCRYPTMSG hCryptMsg, DWORD dwParamType,
4446	DWORD dwIndex, void pvData, DWORD pcbData);
4447
4448	HCRYPTMSG WINAPI CryptMsgOpenToDecode(DWORD dwMsgEncodingType, DWORD dwFlags,
4449	DWORD dwMsgType, HCRYPTPROV_LEGACY hCryptProv, PCERT_INFO pRecipientInfo,
4450	PCMSG_STREAM_INFO pStreamInfo);
4451
4452	HCRYPTMSG WINAPI CryptMsgOpenToEncode(DWORD dwMsgEncodingType, DWORD dwFlags,
4453	DWORD dwMsgType, const void *pvMsgEncodeInfo, LPSTR pszInnerContentObjID,
4454	PCMSG_STREAM_INFO pStreamInfo);
4455
4456	BOOL WINAPI CryptMsgSignCTL(DWORD dwMsgEncodingType, BYTE *pbCtlContent,
4457	DWORD cbCtlContent, PCMSG_SIGNED_ENCODE_INFO pSignInfo, DWORD dwFlags,
4458	BYTE pbEncoded, DWORD pcbEncoded);
4459
4460	BOOL WINAPI CryptMsgUpdate(HCRYPTMSG hCryptMsg, const BYTE *pbData,
4461	DWORD cbData, BOOL fFinal);
4462
4463	BOOL WINAPI CryptMsgVerifyCountersignatureEncoded(HCRYPTPROV_LEGACY hCryptProv,
4464	DWORD dwEncodingType, PBYTE pbSignerInfo, DWORD cbSignerInfo,
4465	PBYTE pbSignerInfoCountersignature, DWORD cbSignerInfoCountersignature,
4466	PCERT_INFO pciCountersigner);
4467
4468	BOOL WINAPI CryptMsgVerifyCountersignatureEncodedEx(HCRYPTPROV_LEGACY hCryptProv,
4469	DWORD dwEncodingType, PBYTE pbSignerInfo, DWORD cbSignerInfo,
4470	PBYTE pbSignerInfoCountersignature, DWORD cbSignerInfoCountersignature,
4471	DWORD dwSignerType, void pvSigner, DWORD dwFlags, void pvReserved);
4472
4473	BOOL WINAPI CryptSignMessage(PCRYPT_SIGN_MESSAGE_PARA pSignPara,
4474	BOOL fDetachedSignature, DWORD cToBeSigned, const BYTE *rgpbToBeSigned[],
4475	DWORD rgcbToBeSigned[], BYTE pbSignedBlob, DWORD pcbSignedBlob);
4476	BOOL WINAPI CryptSignMessageWithKey(PCRYPT_KEY_SIGN_MESSAGE_PARA pSignPara,
4477	const BYTE pbToBeSigned, DWORD cbToBeSigned, BYTE pbSignedBlob,
4478	DWORD *pcbSignedBlob);
4479
4480	BOOL WINAPI CryptVerifyMessageSignature(PCRYPT_VERIFY_MESSAGE_PARA pVerifyPara,
4481	DWORD dwSignerIndex, const BYTE* pbSignedBlob, DWORD cbSignedBlob,
4482	BYTE* pbDecoded, DWORD* pcbDecoded, PCCERT_CONTEXT* ppSignerCert);
4483	BOOL WINAPI CryptVerifyMessageSignatureWithKey(
4484	PCRYPT_KEY_VERIFY_MESSAGE_PARA pVerifyPara,
4485	PCERT_PUBLIC_KEY_INFO pPublicKeyInfo, const BYTE *pbSignedBlob,
4486	DWORD cbSignedBlob, BYTE pbDecoded, DWORD pcbDecoded);
4487
4488	BOOL WINAPI CryptVerifyDetachedMessageSignature(
4489	PCRYPT_VERIFY_MESSAGE_PARA pVerifyPara, DWORD dwSignerIndex,
4490	const BYTE *pbDetachedSignBlob, DWORD cbDetachedSignBlob, DWORD cToBeSigned,
4491	const BYTE *rgpbToBeSigned[], DWORD rgcbToBeSigned[],
4492	PCCERT_CONTEXT *ppSignerCert);
4493	LONG WINAPI CryptGetMessageSignerCount(DWORD dwMsgEncodingType,
4494	const BYTE *pbSignedBlob, DWORD cbSignedBlob);
4495
4496	BOOL WINAPI CryptEncryptMessage(PCRYPT_ENCRYPT_MESSAGE_PARA pEncryptPara,
4497	DWORD cRecipientCert, PCCERT_CONTEXT rgpRecipientCert[],
4498	const BYTE pbToBeEncrypted, DWORD cbToBeEncrypted, BYTE pbEncryptedBlob,
4499	DWORD *pcbEncryptedBlob);
4500	BOOL WINAPI CryptDecryptMessage(PCRYPT_DECRYPT_MESSAGE_PARA pDecryptPara,
4501	const BYTE pbEncryptedBlob, DWORD cbEncryptedBlob, BYTE pbDecrypted,
4502	DWORD pcbDecrypted, PCCERT_CONTEXT ppXchgCert);
4503
4504	BOOL WINAPI CryptSignAndEncryptMessage(PCRYPT_SIGN_MESSAGE_PARA pSignPara,
4505	PCRYPT_ENCRYPT_MESSAGE_PARA pEncryptPara, DWORD cRecipientCert,
4506	PCCERT_CONTEXT rgpRecipientCert[], const BYTE *pbToBeSignedAndEncrypted,
4507	DWORD cbToBeSignedAndEncrypted, BYTE *pbSignedAndEncryptedBlob,
4508	DWORD *pcbSignedAndEncryptedBlob);
4509	BOOL WINAPI CryptDecryptAndVerifyMessageSignature(
4510	PCRYPT_DECRYPT_MESSAGE_PARA pDecryptPara,
4511	PCRYPT_VERIFY_MESSAGE_PARA pVerifyPara, DWORD dwSignerIndex,
4512	const BYTE pbEncryptedBlob, DWORD cbEncryptedBlob, BYTE pbDecrypted,
4513	DWORD pcbDecrypted, PCCERT_CONTEXT ppXchgCert, PCCERT_CONTEXT *ppSignerCert);
4514
4515	HCERTSTORE WINAPI CryptGetMessageCertificates(DWORD dwMsgAndCertEncodingType,
4516	HCRYPTPROV_LEGACY hCryptProv, DWORD dwFlags, const BYTE *pbSignedBlob,
4517	DWORD cbSignedBlob);
4518
4519	BOOL WINAPI CryptDecodeMessage(DWORD dwMsgTypeFlags,
4520	PCRYPT_DECRYPT_MESSAGE_PARA pDecryptPara,
4521	PCRYPT_VERIFY_MESSAGE_PARA pVerifyPara, DWORD dwSignerIndex,
4522	const BYTE *pbEncodedBlob, DWORD cbEncodedBlob, DWORD dwPrevInnerContentType,
4523	DWORD pdwMsgType, DWORD pdwInnerContentType, BYTE *pbDecoded,
4524	DWORD pcbDecoded, PCCERT_CONTEXT ppXchgCert, PCCERT_CONTEXT *ppSignerCert);
4525
4526	BOOL WINAPI CryptHashMessage(PCRYPT_HASH_MESSAGE_PARA pHashPara,
4527	BOOL fDetachedHash, DWORD cToBeHashed, const BYTE *rgpbToBeHashed[],
4528	DWORD rgcbToBeHashed[], BYTE pbHashedBlob, DWORD pcbHashedBlob,
4529	BYTE pbComputedHash, DWORD pcbComputedHash);
4530	BOOL WINAPI CryptVerifyMessageHash(PCRYPT_HASH_MESSAGE_PARA pHashPara,
4531	BYTE pbHashedBlob, DWORD cbHashedBlob, BYTE pbToBeHashed,
4532	DWORD pcbToBeHashed, BYTE pbComputedHash, DWORD *pcbComputedHash);
4533	BOOL WINAPI CryptVerifyDetachedMessageHash(PCRYPT_HASH_MESSAGE_PARA pHashPara,
4534	BYTE *pbDetachedHashBlob, DWORD cbDetachedHashBlob, DWORD cToBeHashed,
4535	const BYTE rgpbToBeHashed[], DWORD rgcbToBeHashed[], BYTE pbComputedHash,
4536	DWORD *pcbComputedHash);
4537
4538	/* PFX functions */
4539	HCERTSTORE WINAPI PFXImportCertStore(CRYPT_DATA_BLOB *pPFX, LPCWSTR szPassword,
4540	DWORD dwFlags);
4541	BOOL WINAPI PFXIsPFXBlob(CRYPT_DATA_BLOB *pPFX);
4542	BOOL WINAPI PFXVerifyPassword(CRYPT_DATA_BLOB *pPFX, LPCWSTR szPassword,
4543	DWORD dwFlags);
4544	BOOL WINAPI PFXExportCertStoreEx(HCERTSTORE hStore, CRYPT_DATA_BLOB *pPFX,
4545	LPCWSTR szPassword, void *pvReserved, DWORD dwFlags);
4546	BOOL WINAPI PFXExportCertStore(HCERTSTORE hStore, CRYPT_DATA_BLOB *pPFX,
4547	LPCWSTR szPassword, DWORD dwFlags);
4548	BOOL WINAPI PFXVerifyPassword(CRYPT_DATA_BLOB *pPFX, LPCWSTR szPassword,
4549	DWORD dwFlags);
4550
4551	/* cryptnet.dll functions */
4552	BOOL WINAPI CryptCancelAsyncRetrieval(HCRYPTASYNC hAsyncRetrieval);
4553
4554	BOOL WINAPI CryptGetObjectUrl(LPCSTR pszUrlOid, LPVOID pvPara, DWORD dwFlags,
4555	PCRYPT_URL_ARRAY pUrlArray, DWORD *pcbUrlArray, PCRYPT_URL_INFO pUrlInfo,
4556	DWORD *pcbUrlInfo, LPVOID pvReserved);
4557
4558	BOOL WINAPI CryptGetTimeValidObject(LPCSTR pszTimeValidOid, void *pvPara,
4559	PCCERT_CONTEXT pIssuer, LPFILETIME pftValidFor, DWORD dwFlags, DWORD dwTimeout,
4560	void *ppvObject, PCRYPT_CREDENTIALS pCredentials, void pvReserved);
4561
4562	BOOL WINAPI CryptFlushTimeValidObject(LPCSTR pszFlushTimeValidOid, void *pvPara,
4563	PCCERT_CONTEXT pIssuer, DWORD dwFlags, void *pvReserved);
4564
4565	BOOL WINAPI CryptInstallCancelRetrieval(PFN_CRYPT_CANCEL_RETRIEVAL pfnCancel,
4566	const void pvArg, DWORD dwFlags, void pvReserved);
4567
4568	BOOL WINAPI CryptUninstallCancelRetrieval(DWORD dwFlags, void *pvReserved);
4569
4570	BOOL WINAPI CryptRetrieveObjectByUrlA(LPCSTR pszURL, LPCSTR pszObjectOid,
4571	DWORD dwRetrievalFlags, DWORD dwTimeout, LPVOID *ppvObject,
4572	HCRYPTASYNC hAsyncRetrieve, PCRYPT_CREDENTIALS pCredentials, LPVOID pvVerify,
4573	PCRYPT_RETRIEVE_AUX_INFO pAuxInfo);
4574	BOOL WINAPI CryptRetrieveObjectByUrlW(LPCWSTR pszURL, LPCSTR pszObjectOid,
4575	DWORD dwRetrievalFlags, DWORD dwTimeout, LPVOID *ppvObject,
4576	HCRYPTASYNC hAsyncRetrieve, PCRYPT_CREDENTIALS pCredentials, LPVOID pvVerify,
4577	PCRYPT_RETRIEVE_AUX_INFO pAuxInfo);
4578	#define CryptRetrieveObjectByUrl WINELIB_NAME_AW(CryptRetrieveObjectByUrl)
4579
4580	/* Not found in crypt32.dll but in softpub.dll */
4581	HRESULT WINAPI FindCertsByIssuer(PCERT_CHAIN pCertChains, DWORD *pcbCertChains,
4582	DWORD pcCertChains, BYTE pbEncodedIssuerName, DWORD cbEncodedIssuerName,
4583	LPCWSTR pwszPurpose, DWORD dwKeySpec);
4584
4585	#ifdef __cplusplus
4586	}
4587	#endif
4588
4589	#endif

注意: 瀏覽 TracBrowser 來幫助您使用儲存庫瀏覽器

source: vbox/trunk/src/VBox/Devices/Graphics/shaderlib/wine/include/wincrypt.h

以其他格式下載: