Add new module `ffi` which provides a plain C interface, plus a new

ctypes Python wrapper that uses it. The API is intentionally designed
to have a very simple ABI (extern "C", all structs are opaque, no
memory ownership passing the FFI boundary, limited set of simple types
as args) so the ctypes wrapper is quite simple.

Currently ffi provides ciphers, hashes, MACs, RNGs, PBKDF, KDF,
bcrypt, and most public key operations.

Remove the old boost.python wrapper and all the build code for it.

1 files changed, 51 insertions, 0 deletions

diff --git a/src/lib/kdf/hkdf/hkdf.h b/src/lib/kdf/hkdf/hkdf.h
new file mode 100644
index 000000000..f1ae61453
--- /dev/null
+++ b/src/lib/kdf/hkdf/hkdf.h
@@ -0,0 +1,51 @@
+/*
+* HKDF
+* (C) 2013 Jack Lloyd
+*
+* Botan is released under the Simplified BSD License (see license.txt)
+*/
+
+#ifndef BOTAN_HKDF_H__
+#define BOTAN_HKDF_H__
+
+#include <botan/mac.h>
+#include <botan/hash.h>
+#include <botan/kdf.h>
+
+namespace Botan {
+
+/**
+* HKDF, see @rfc 5869 for details
+*/
+class BOTAN_DLL HKDF
+   {
+   public:
+      HKDF(MessageAuthenticationCode* extractor,
+           MessageAuthenticationCode* prf) :
+         m_extractor(extractor), m_prf(prf) {}
+
+      HKDF(MessageAuthenticationCode* prf) :
+         m_extractor(prf), m_prf(m_extractor->clone()) {}
+
+      void start_extract(const byte salt[], size_t salt_len);
+      void extract(const byte input[], size_t input_len);
+      void finish_extract();
+
+      /**
+      * Only call after extract
+      * @param output_len must be less than 256*hashlen
+      */
+      void expand(byte output[], size_t output_len,
+                  const byte info[], size_t info_len);
+
+      std::string name() const;
+
+      void clear();
+   private:
+      std::unique_ptr<MessageAuthenticationCode> m_extractor;
+      std::unique_ptr<MessageAuthenticationCode> m_prf;
+   };
+
+}
+
+#endif