ホーム › Security.Cryptography › SslExpandTrafficKeys

SslExpandTrafficKeys

関数

TLS1.3でクライアントとサーバーのトラフィック鍵を展開する。

DLLncrypt.dll呼出規約winapi

シグネチャ

// ncrypt.dll
#include <windows.h>

HRESULT SslExpandTrafficKeys(
    NCRYPT_PROV_HANDLE hSslProvider,
    NCRYPT_KEY_HANDLE hBaseKey,
    NCRYPT_HASH_HANDLE hHashValue,
    NCRYPT_KEY_HANDLE* phClientTrafficKey,   // optional
    NCRYPT_KEY_HANDLE* phServerTrafficKey,   // optional
    BCryptBufferDesc* pParameterList,   // optional
    DWORD dwFlags
);

パラメーター

名前	型	方向
hSslProvider	NCRYPT_PROV_HANDLE	in
hBaseKey	NCRYPT_KEY_HANDLE	in
hHashValue	NCRYPT_HASH_HANDLE	in
phClientTrafficKey	NCRYPT_KEY_HANDLE*	outoptional
phServerTrafficKey	NCRYPT_KEY_HANDLE*	outoptional
pParameterList	BCryptBufferDesc*	inoptional
dwFlags	DWORD	in

戻り値の型: HRESULT

各言語での呼び出し定義

// ncrypt.dll
#include <windows.h>

HRESULT SslExpandTrafficKeys(
    NCRYPT_PROV_HANDLE hSslProvider,
    NCRYPT_KEY_HANDLE hBaseKey,
    NCRYPT_HASH_HANDLE hHashValue,
    NCRYPT_KEY_HANDLE* phClientTrafficKey,   // optional
    NCRYPT_KEY_HANDLE* phServerTrafficKey,   // optional
    BCryptBufferDesc* pParameterList,   // optional
    DWORD dwFlags
);

[DllImport("ncrypt.dll", ExactSpelling = true)]
static extern int SslExpandTrafficKeys(
    UIntPtr hSslProvider,   // NCRYPT_PROV_HANDLE
    UIntPtr hBaseKey,   // NCRYPT_KEY_HANDLE
    UIntPtr hHashValue,   // NCRYPT_HASH_HANDLE
    IntPtr phClientTrafficKey,   // NCRYPT_KEY_HANDLE* optional, out
    IntPtr phServerTrafficKey,   // NCRYPT_KEY_HANDLE* optional, out
    IntPtr pParameterList,   // BCryptBufferDesc* optional
    uint dwFlags   // DWORD
);

<DllImport("ncrypt.dll", ExactSpelling:=True)>
Public Shared Function SslExpandTrafficKeys(
    hSslProvider As UIntPtr,   ' NCRYPT_PROV_HANDLE
    hBaseKey As UIntPtr,   ' NCRYPT_KEY_HANDLE
    hHashValue As UIntPtr,   ' NCRYPT_HASH_HANDLE
    phClientTrafficKey As IntPtr,   ' NCRYPT_KEY_HANDLE* optional, out
    phServerTrafficKey As IntPtr,   ' NCRYPT_KEY_HANDLE* optional, out
    pParameterList As IntPtr,   ' BCryptBufferDesc* optional
    dwFlags As UInteger   ' DWORD
) As Integer
End Function

' hSslProvider : NCRYPT_PROV_HANDLE
' hBaseKey : NCRYPT_KEY_HANDLE
' hHashValue : NCRYPT_HASH_HANDLE
' phClientTrafficKey : NCRYPT_KEY_HANDLE* optional, out
' phServerTrafficKey : NCRYPT_KEY_HANDLE* optional, out
' pParameterList : BCryptBufferDesc* optional
' dwFlags : DWORD
Declare PtrSafe Function SslExpandTrafficKeys Lib "ncrypt" ( _
    ByVal hSslProvider As LongPtr, _
    ByVal hBaseKey As LongPtr, _
    ByVal hHashValue As LongPtr, _
    ByVal phClientTrafficKey As LongPtr, _
    ByVal phServerTrafficKey As LongPtr, _
    ByVal pParameterList As LongPtr, _
    ByVal dwFlags As Long) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。

import ctypes
from ctypes import wintypes

SslExpandTrafficKeys = ctypes.windll.ncrypt.SslExpandTrafficKeys
SslExpandTrafficKeys.restype = ctypes.c_int
SslExpandTrafficKeys.argtypes = [
    ctypes.c_size_t,  # hSslProvider : NCRYPT_PROV_HANDLE
    ctypes.c_size_t,  # hBaseKey : NCRYPT_KEY_HANDLE
    ctypes.c_size_t,  # hHashValue : NCRYPT_HASH_HANDLE
    ctypes.c_void_p,  # phClientTrafficKey : NCRYPT_KEY_HANDLE* optional, out
    ctypes.c_void_p,  # phServerTrafficKey : NCRYPT_KEY_HANDLE* optional, out
    ctypes.c_void_p,  # pParameterList : BCryptBufferDesc* optional
    wintypes.DWORD,  # dwFlags : DWORD
]

require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('ncrypt.dll')
SslExpandTrafficKeys = Fiddle::Function.new(
  lib['SslExpandTrafficKeys'],
  [
    Fiddle::TYPE_UINTPTR_T,  # hSslProvider : NCRYPT_PROV_HANDLE
    Fiddle::TYPE_UINTPTR_T,  # hBaseKey : NCRYPT_KEY_HANDLE
    Fiddle::TYPE_UINTPTR_T,  # hHashValue : NCRYPT_HASH_HANDLE
    Fiddle::TYPE_VOIDP,  # phClientTrafficKey : NCRYPT_KEY_HANDLE* optional, out
    Fiddle::TYPE_VOIDP,  # phServerTrafficKey : NCRYPT_KEY_HANDLE* optional, out
    Fiddle::TYPE_VOIDP,  # pParameterList : BCryptBufferDesc* optional
    -Fiddle::TYPE_INT,  # dwFlags : DWORD
  ],
  Fiddle::TYPE_INT)

#[link(name = "ncrypt")]
extern "system" {
    fn SslExpandTrafficKeys(
        hSslProvider: usize,  // NCRYPT_PROV_HANDLE
        hBaseKey: usize,  // NCRYPT_KEY_HANDLE
        hHashValue: usize,  // NCRYPT_HASH_HANDLE
        phClientTrafficKey: *mut usize,  // NCRYPT_KEY_HANDLE* optional, out
        phServerTrafficKey: *mut usize,  // NCRYPT_KEY_HANDLE* optional, out
        pParameterList: *mut BCryptBufferDesc,  // BCryptBufferDesc* optional
        dwFlags: u32  // DWORD
    ) -> i32;
}
// crates: windows-sys provides ready-made bindings for this API.

$sig = @"
[DllImport("ncrypt.dll")]
public static extern int SslExpandTrafficKeys(UIntPtr hSslProvider, UIntPtr hBaseKey, UIntPtr hHashValue, IntPtr phClientTrafficKey, IntPtr phServerTrafficKey, IntPtr pParameterList, uint dwFlags);
"@
$api = Add-Type -MemberDefinition $sig -Name 'ncrypt_SslExpandTrafficKeys' -Namespace Win32 -PassThru
# $api::SslExpandTrafficKeys(hSslProvider, hBaseKey, hHashValue, phClientTrafficKey, phServerTrafficKey, pParameterList, dwFlags)

#uselib "ncrypt.dll"
#func global SslExpandTrafficKeys "SslExpandTrafficKeys" sptr, sptr, sptr, sptr, sptr, sptr, sptr
; SslExpandTrafficKeys hSslProvider, hBaseKey, hHashValue, phClientTrafficKey, phServerTrafficKey, varptr(pParameterList), dwFlags   ; 戻り値は stat
; hSslProvider : NCRYPT_PROV_HANDLE -> "sptr"
; hBaseKey : NCRYPT_KEY_HANDLE -> "sptr"
; hHashValue : NCRYPT_HASH_HANDLE -> "sptr"
; phClientTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "sptr"
; phServerTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "sptr"
; pParameterList : BCryptBufferDesc* optional -> "sptr"
; dwFlags : DWORD -> "sptr"
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。

出力引数:

#uselib "ncrypt.dll"
#cfunc global SslExpandTrafficKeys "SslExpandTrafficKeys" sptr, sptr, sptr, int, int, var, int
; res = SslExpandTrafficKeys(hSslProvider, hBaseKey, hHashValue, phClientTrafficKey, phServerTrafficKey, pParameterList, dwFlags)
; hSslProvider : NCRYPT_PROV_HANDLE -> "sptr"
; hBaseKey : NCRYPT_KEY_HANDLE -> "sptr"
; hHashValue : NCRYPT_HASH_HANDLE -> "sptr"
; phClientTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "int"
; phServerTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "int"
; pParameterList : BCryptBufferDesc* optional -> "var"
; dwFlags : DWORD -> "int"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。#uselib "ncrypt.dll"
#cfunc global SslExpandTrafficKeys "SslExpandTrafficKeys" sptr, sptr, sptr, int, int, sptr, int
; res = SslExpandTrafficKeys(hSslProvider, hBaseKey, hHashValue, phClientTrafficKey, phServerTrafficKey, varptr(pParameterList), dwFlags)
; hSslProvider : NCRYPT_PROV_HANDLE -> "sptr"
; hBaseKey : NCRYPT_KEY_HANDLE -> "sptr"
; hHashValue : NCRYPT_HASH_HANDLE -> "sptr"
; phClientTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "int"
; phServerTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "int"
; pParameterList : BCryptBufferDesc* optional -> "sptr"
; dwFlags : DWORD -> "int"
; ※出力/バッファ引数はポインタ方式(token=sptr / 呼び出しは varptr(変数))。

出力引数:

; HRESULT SslExpandTrafficKeys(NCRYPT_PROV_HANDLE hSslProvider, NCRYPT_KEY_HANDLE hBaseKey, NCRYPT_HASH_HANDLE hHashValue, NCRYPT_KEY_HANDLE* phClientTrafficKey, NCRYPT_KEY_HANDLE* phServerTrafficKey, BCryptBufferDesc* pParameterList, DWORD dwFlags)
#uselib "ncrypt.dll"
#cfunc global SslExpandTrafficKeys "SslExpandTrafficKeys" intptr, intptr, intptr, int, int, var, int
; res = SslExpandTrafficKeys(hSslProvider, hBaseKey, hHashValue, phClientTrafficKey, phServerTrafficKey, pParameterList, dwFlags)
; hSslProvider : NCRYPT_PROV_HANDLE -> "intptr"
; hBaseKey : NCRYPT_KEY_HANDLE -> "intptr"
; hHashValue : NCRYPT_HASH_HANDLE -> "intptr"
; phClientTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "int"
; phServerTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "int"
; pParameterList : BCryptBufferDesc* optional -> "var"
; dwFlags : DWORD -> "int"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。; HRESULT SslExpandTrafficKeys(NCRYPT_PROV_HANDLE hSslProvider, NCRYPT_KEY_HANDLE hBaseKey, NCRYPT_HASH_HANDLE hHashValue, NCRYPT_KEY_HANDLE* phClientTrafficKey, NCRYPT_KEY_HANDLE* phServerTrafficKey, BCryptBufferDesc* pParameterList, DWORD dwFlags)
#uselib "ncrypt.dll"
#cfunc global SslExpandTrafficKeys "SslExpandTrafficKeys" intptr, intptr, intptr, int, int, intptr, int
; res = SslExpandTrafficKeys(hSslProvider, hBaseKey, hHashValue, phClientTrafficKey, phServerTrafficKey, varptr(pParameterList), dwFlags)
; hSslProvider : NCRYPT_PROV_HANDLE -> "intptr"
; hBaseKey : NCRYPT_KEY_HANDLE -> "intptr"
; hHashValue : NCRYPT_HASH_HANDLE -> "intptr"
; phClientTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "int"
; phServerTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "int"
; pParameterList : BCryptBufferDesc* optional -> "intptr"
; dwFlags : DWORD -> "int"
; ※出力/バッファ引数はポインタ方式(token=intptr / 呼び出しは varptr(変数))。

import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	ncrypt = windows.NewLazySystemDLL("ncrypt.dll")
	procSslExpandTrafficKeys = ncrypt.NewProc("SslExpandTrafficKeys")
)

// hSslProvider (NCRYPT_PROV_HANDLE), hBaseKey (NCRYPT_KEY_HANDLE), hHashValue (NCRYPT_HASH_HANDLE), phClientTrafficKey (NCRYPT_KEY_HANDLE* optional, out), phServerTrafficKey (NCRYPT_KEY_HANDLE* optional, out), pParameterList (BCryptBufferDesc* optional), dwFlags (DWORD)
r1, _, err := procSslExpandTrafficKeys.Call(
	uintptr(hSslProvider),
	uintptr(hBaseKey),
	uintptr(hHashValue),
	uintptr(phClientTrafficKey),
	uintptr(phServerTrafficKey),
	uintptr(pParameterList),
	uintptr(dwFlags),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // HRESULT

function SslExpandTrafficKeys(
  hSslProvider: NativeUInt;   // NCRYPT_PROV_HANDLE
  hBaseKey: NativeUInt;   // NCRYPT_KEY_HANDLE
  hHashValue: NativeUInt;   // NCRYPT_HASH_HANDLE
  phClientTrafficKey: Pointer;   // NCRYPT_KEY_HANDLE* optional, out
  phServerTrafficKey: Pointer;   // NCRYPT_KEY_HANDLE* optional, out
  pParameterList: Pointer;   // BCryptBufferDesc* optional
  dwFlags: DWORD   // DWORD
): Integer; stdcall;
  external 'ncrypt.dll' name 'SslExpandTrafficKeys';

result := DllCall("ncrypt\SslExpandTrafficKeys"
    , "UPtr", hSslProvider   ; NCRYPT_PROV_HANDLE
    , "UPtr", hBaseKey   ; NCRYPT_KEY_HANDLE
    , "UPtr", hHashValue   ; NCRYPT_HASH_HANDLE
    , "Ptr", phClientTrafficKey   ; NCRYPT_KEY_HANDLE* optional, out
    , "Ptr", phServerTrafficKey   ; NCRYPT_KEY_HANDLE* optional, out
    , "Ptr", pParameterList   ; BCryptBufferDesc* optional
    , "UInt", dwFlags   ; DWORD
    , "Int")   ; return: HRESULT

●SslExpandTrafficKeys(hSslProvider, hBaseKey, hHashValue, phClientTrafficKey, phServerTrafficKey, pParameterList, dwFlags) = DLL("ncrypt.dll", "int SslExpandTrafficKeys(int, int, int, void*, void*, void*, dword)")
# 呼び出し: SslExpandTrafficKeys(hSslProvider, hBaseKey, hHashValue, phClientTrafficKey, phServerTrafficKey, pParameterList, dwFlags)
# hSslProvider : NCRYPT_PROV_HANDLE -> "int"
# hBaseKey : NCRYPT_KEY_HANDLE -> "int"
# hHashValue : NCRYPT_HASH_HANDLE -> "int"
# phClientTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "void*"
# phServerTrafficKey : NCRYPT_KEY_HANDLE* optional, out -> "void*"
# pParameterList : BCryptBufferDesc* optional -> "void*"
# dwFlags : DWORD -> "dword"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。