propagate from branch 'net.randombit.botan.1_8' (head 6e8c18515725a70923b34118951252723dd4c29a)

            to branch 'net.randombit.botan' (head 77ba4ea5a4be36d6d029bcc852b2271edff0d679)

21 files changed, 2673 insertions, 0 deletions

diff --git a/src/wrap/perl-xs/Botan.pm b/src/wrap/perl-xs/Botan.pm
new file mode 100644
index 000000000..ac4ad91fb
--- /dev/null
+++ b/src/wrap/perl-xs/Botan.pm
@@ -0,0 +1,117 @@
+package Botan;
+
+use strict;
+use vars qw($VERSION @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS $AUTOLOAD);
+
+require DynaLoader;
+require AutoLoader;
+use Carp;
+
+@ISA = qw(DynaLoader);
+$VERSION = '0.01';
+
+@EXPORT_OK = qw(
+	NONE
+	IGNORE_WS
+	FULL_CHECK
+);
+
+%EXPORT_TAGS = (
+	'all'	=> [ @EXPORT_OK ],
+	'decoder_checking'	=> [ qw(
+	    NONE
+	    IGNORE_WS
+	    FULL_CHECK
+	)],
+
+);
+
+
+sub AUTOLOAD
+{
+    # This AUTOLOAD is used to 'autoload' constants from the constant()
+    # XS function.  If a constant is not found then control is passed
+    # to the AUTOLOAD in AutoLoader.
+
+    my $constname = $AUTOLOAD;
+    $constname =~ s/.*:://;
+    croak '& not defined' if $constname eq 'constant';
+#    my $val = constant($constname, @_ ? $_[0] : 0);
+    my $val = constant($constname);
+    if ($! != 0) {
+        if ( $! =~ /Invalid/ )
+	{
+            $AutoLoader::AUTOLOAD = $AUTOLOAD;
+            goto &AutoLoader::AUTOLOAD;
+        }
+        else
+	{
+	    croak "Your vendor has not defined Botan symbol $constname";
+        }
+    }
+    no strict 'refs';
+    *$AUTOLOAD = sub { $val };
+    goto &$AUTOLOAD;
+}
+
+
+bootstrap Botan $VERSION;
+
+# to setup inheritance...
+
+package Botan::Filter;
+use vars qw(@ISA);
+@ISA = qw();
+
+package Botan::Chain;
+use vars qw(@ISA);
+@ISA = qw( Botan::Filter );
+
+package Botan::Fork;
+use vars qw(@ISA);
+@ISA = qw( Botan::Filter );
+
+package Botan::Hex_Encoder;
+use vars qw(@ISA);
+@ISA = qw( Botan::Filter );
+
+package Botan::Hex_Decoder;
+use vars qw(@ISA);
+@ISA = qw( Botan::Filter );
+
+package Botan::Base64_Decoder;
+use vars qw(@ISA);
+@ISA = qw( Botan::Filter );
+
+package Botan::Base64_Encoder;
+use vars qw(@ISA);
+@ISA = qw( Botan::Filter );
+
+
+package Botan;
+
+1;
+__END__
+
+=head1 NAME
+
+Botan - Perl extension for access to Botan ...
+
+=head1 SYNOPSIS
+
+  use Botan;
+  blah blah blah
+
+=head1 DESCRIPTION
+
+Blah blah blah.
+
+=head1 AUTHOR
+
+Vaclav Ovsik <[email protected]>
+
+=head1 SEE ALSO
+
+Bla
+
+=cut
diff --git a/src/wrap/perl-xs/Botan.xs b/src/wrap/perl-xs/Botan.xs
new file mode 100644
index 000000000..ded129d2e
--- /dev/null
+++ b/src/wrap/perl-xs/Botan.xs
@@ -0,0 +1,829 @@
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#include "EXTERN.h"
+#include "perl.h"
+#include "XSUB.h"
+
+#ifdef __cplusplus
+}
+#endif
+
+#include <botan/asn1_obj.h>
+#include <botan/asn1_oid.h>
+#include <botan/base64.h>
+#include <botan/basefilt.h>
+#include <botan/hex.h>
+#include <botan/init.h>
+#include <botan/oids.h>
+#include <botan/x509cert.h>
+#include <botan/x509_ext.h>
+
+
+/* xsubpp converts ':' to '_' in typemap. We create our types without ':' */
+ 
+typedef Botan::ASN1_String		Botan__ASN1_String;
+typedef Botan::AlgorithmIdentifier	Botan__AlgorithmIdentifier;
+typedef Botan::AlternativeName		Botan__AlternativeName;
+typedef Botan::Attribute		Botan__Attribute;
+typedef Botan::Base64_Decoder		Botan__Base64_Decoder;
+typedef Botan::Base64_Encoder		Botan__Base64_Encoder;
+typedef Botan::Chain			Botan__Chain;
+typedef Botan::Certificate_Extension	Botan__Extension;
+typedef Botan::Filter			Botan__Filter;
+typedef Botan::Fork			Botan__Fork;
+typedef Botan::Hex_Decoder		Botan__Hex_Decoder;
+typedef Botan::Hex_Encoder		Botan__Hex_Encoder;
+typedef Botan::OID			Botan__OID;
+typedef Botan::Pipe			Botan__Pipe;
+typedef Botan::X509_Certificate		Botan__X509_Certificate;
+typedef Botan::X509_DN			Botan__X509_DN;
+typedef Botan::X509_Time		Botan__X509_Time;
+typedef Botan::u32bit			Botan__u32bit;
+
+
+/* Types to keep track of destruction C++ objects passed
+ * into other objects...
+ * An Botan object is deleted by his parent object into which is passed,
+ * e.g. some Filter is deleted when his Pipe is destructed. We must
+ * track this and not to delete object again in Perls destructor.
+ */
+
+class ObjectInfo
+{
+private:
+    I32	    d_signature;
+    bool    d_del;
+public:
+    static I32 const SIGNVAL = 0x696a626f;
+    ObjectInfo() : d_signature(SIGNVAL),
+		    d_del(true)		    {};
+    ~ObjectInfo()			    {};
+    void    set_delete(bool del = true)	    { d_del = del; };
+    void    set_delete_no()		    { set_delete(false); };
+    void    set_delete_yes()		    { set_delete(true); };
+    bool    should_delete() const	    { return d_del; };
+};
+
+/* Constant object in initial state - template */
+
+ObjectInfo const oi_init;
+
+
+/* Botan library initializer ... */
+
+Botan::LibraryInitializer botan_init;
+
+
+
+/*============================================================================*/
+
+MODULE = Botan				    PACKAGE = Botan
+
+PROTOTYPES: ENABLE
+
+void
+constant(char *name)
+    CODE:
+	using namespace Botan;
+	errno = 0;
+	switch (name[0])
+	{
+	    case 'F':
+	        if ( strEQ(name, "FULL_CHECK") )
+		    XSRETURN_IV( FULL_CHECK );	    // Decoder_Checking enum
+		break;
+	    case 'I':
+	        if ( strEQ(name, "IGNORE_WS") )
+		    XSRETURN_IV( IGNORE_WS );	    // Decoder_Checking enum
+		break;
+	    case 'N':
+	        if ( strEQ(name, "NONE") )
+		    XSRETURN_IV( NONE );	    // Decoder_Checking enum
+		break;
+	}
+	errno = EINVAL;
+	XSRETURN_UNDEF;
+
+
+# =========================== Botan::Chain ==========================
+
+MODULE = Botan				    PACKAGE = Botan::Chain
+
+Botan__Chain *
+Botan__Chain::new(f1 = 0, f2 = 0, f3 = 0, f4 = 0)
+	Botan__Filter	*f1;
+	Botan__Filter	*f2;
+	Botan__Filter	*f3;
+	Botan__Filter	*f4;
+    PREINIT:
+	ObjectInfo	*f1_oi;
+	ObjectInfo	*f2_oi;
+	ObjectInfo	*f3_oi;
+	ObjectInfo	*f4_oi;
+    CODE:
+	try {
+	    RETVAL = new Botan__Chain(f1, f2, f3, f4);
+	    if ( f1 ) f1_oi->set_delete_no();
+	    if ( f2 ) f2_oi->set_delete_no();
+	    if ( f3 ) f3_oi->set_delete_no();
+	    if ( f4 ) f4_oi->set_delete_no();
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__Chain::DESTROY()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	if ( THIS_oi->should_delete() )
+	    try {
+		delete THIS;
+	    }
+	    catch (const std::exception &e) {
+		croak(e.what());
+	    }
+
+
+# =========================== Botan::Fork ==========================
+
+MODULE = Botan				    PACKAGE = Botan::Fork
+
+Botan__Fork *
+Botan__Fork::new(f1 = 0, f2 = 0, f3 = 0, f4 = 0)
+	Botan__Filter	*f1;
+	Botan__Filter	*f2;
+	Botan__Filter	*f3;
+	Botan__Filter	*f4;
+    PREINIT:
+	ObjectInfo	*f1_oi;
+	ObjectInfo	*f2_oi;
+	ObjectInfo	*f3_oi;
+	ObjectInfo	*f4_oi;
+    CODE:
+	try {
+	    RETVAL = new Botan__Fork(f1, f2, f3, f4);
+	    if ( f1 ) f1_oi->set_delete_no();
+	    if ( f2 ) f2_oi->set_delete_no();
+	    if ( f3 ) f3_oi->set_delete_no();
+	    if ( f4 ) f4_oi->set_delete_no();
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__Fork::DESTROY()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	if ( THIS_oi->should_delete() )
+	    try {
+		delete THIS;
+	    }
+	    catch (const std::exception &e) {
+		croak(e.what());
+	    }
+
+
+# ============================ Botan::Base64_Decoder ============================
+
+MODULE = Botan				    PACKAGE = Botan::Base64_Decoder
+
+Botan__Base64_Decoder *
+Botan__Base64_Decoder::new(checking = Botan::NONE)
+	int	checking;
+    CODE:
+	try {
+	    using namespace Botan;
+	    RETVAL = new Base64_Decoder((Decoder_Checking)checking);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__Base64_Decoder::DESTROY()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	if ( THIS_oi->should_delete() )
+	    try {
+		delete THIS;
+	    }
+	    catch (const std::exception &e) {
+		croak(e.what());
+	    }
+
+
+# =========================== Botan::Base64_Encoder ==========================
+
+MODULE = Botan				    PACKAGE = Botan::Base64_Encoder
+
+Botan__Base64_Encoder *
+Botan__Base64_Encoder::new(breaks = false, length = 72)
+	bool		breaks;
+       	Botan__u32bit	length;
+    CODE:
+	try {
+	    RETVAL = new Botan__Base64_Encoder(breaks, length);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__Base64_Encoder::DESTROY()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	if ( THIS_oi->should_delete() )
+	    try {
+		delete THIS;
+	    }
+	    catch (const std::exception &e) {
+		croak(e.what());
+	    }
+
+
+# ============================ Botan::Hex_Decoder ============================
+
+MODULE = Botan				    PACKAGE = Botan::Hex_Decoder
+
+Botan__Hex_Decoder *
+Botan__Hex_Decoder::new(checking = Botan::NONE)
+	int	checking;
+    CODE:
+	try {
+	    using namespace Botan;
+	    RETVAL = new Hex_Decoder((Decoder_Checking)checking);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__Hex_Decoder::DESTROY()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	if ( THIS_oi->should_delete() )
+	    try {
+		delete THIS;
+	    }
+	    catch (const std::exception &e) {
+		croak(e.what());
+	    }
+
+
+# ============================ Botan::Hex_Encoder ============================
+
+MODULE = Botan				    PACKAGE = Botan::Hex_Encoder
+
+Botan__Hex_Encoder *
+Botan__Hex_Encoder::new(breaks = false, length = 72, lcase = false)
+	bool		breaks;
+       	Botan__u32bit	length;
+	bool		lcase;
+    CODE:
+	try {
+	    using Botan::Hex_Encoder;
+	    RETVAL = new Hex_Encoder(breaks, length,
+		    lcase ? Hex_Encoder::Lowercase : Hex_Encoder::Uppercase);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__Hex_Encoder::DESTROY()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	if ( THIS_oi->should_delete() )
+	    try {
+		delete THIS;
+	    }
+	    catch (const std::exception &e) {
+		croak(e.what());
+	    }
+
+
+# ================================ Botan::OID ================================
+
+MODULE = Botan				    PACKAGE = Botan::OID
+
+Botan__OID *
+Botan__OID::new(s)
+	char *s;
+    CODE:
+	try {
+	    RETVAL = new Botan__OID(s);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__OID::DESTROY()
+    CODE:
+	try {
+	    delete THIS;
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+
+char *
+Botan__OID::as_string()
+    CODE:
+	try {
+	    RETVAL = const_cast<char *>(THIS->as_string().c_str());
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+
+# ================================ Botan::OIDS ================================
+
+MODULE = Botan				    PACKAGE = Botan::OIDS
+
+void
+add_oid(oid, name)
+	Botan__OID  *oid;
+       	char	    *name;
+    CODE:
+	try {
+	    Botan::OIDS::add_oid(*oid, name);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+
+char *
+lookup_by_oid(oid)
+	Botan__OID *oid;
+    CODE:
+	try {
+	    RETVAL = const_cast<char *>(Botan::OIDS::lookup(*oid).c_str());
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+Botan__OID *
+lookup_by_name(name)
+	char *name;
+    CODE:
+	try {
+	    RETVAL = new Botan__OID(Botan::OIDS::lookup(name));
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+	char const * CLASS = "Botan::OID";
+    OUTPUT:
+	RETVAL
+
+int
+have_oid(name)
+	char *name;
+    CODE:
+	try {
+	    RETVAL = Botan::OIDS::have_oid(name);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+
+# ================================ Botan::Pipe ================================
+
+MODULE = Botan				    PACKAGE = Botan::Pipe
+
+Botan__Pipe *
+Botan__Pipe::new(...)
+    CODE:
+	for (I32 i = 1; i < items; i++)
+	{
+	    if ( !sv_isobject(ST(i)) || (SvTYPE(SvRV(ST(i))) != SVt_PVMG) )
+		croak("Botan::Pipe::new() -- arg %u is not "
+			"a blessed SV reference", i +1);
+	    if ( !sv_derived_from(ST(i), "Botan::Filter") )
+		croak("Botan::Pipe::new() -- arg %u is not "
+			"an object derived from Botan::Filter", i +1);
+	    MAGIC *mg = mg_find(SvRV(ST(i)), '~');
+	    if ( mg == 0
+		    || mg->mg_len != sizeof(ObjectInfo)
+		    || *(I32 *)(mg->mg_ptr) != ObjectInfo::SIGNVAL )
+		croak("Botan::Pipe::new() -- arg %u has no "
+			"valid private magic data (ObjectInfo)", i +1);
+	}
+	try {
+	    RETVAL = new Botan__Pipe();
+	    for (I32 i = 1; i < items; i++)
+	    {
+		SV *osv = (SV *)SvRV(ST(i));
+		ObjectInfo *oi = (ObjectInfo *)(mg_find(osv, '~')->mg_ptr);
+		RETVAL->append((Botan__Filter *)(SvIV(osv)));
+		oi->set_delete_no();
+	    }
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__Pipe::DESTROY()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	try {
+	    delete THIS;
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+
+void
+Botan__Pipe::write(s)
+	SV *s;
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	STRLEN len;
+	char *ptr = SvPV(s, len);
+	try {
+	    THIS->write((unsigned char *)ptr, len);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+
+void
+Botan__Pipe::process_msg(s)
+	SV *s;
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	STRLEN len;
+	char *ptr = SvPV(s, len);
+	try {
+	    THIS->process_msg((unsigned char *)ptr, len);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+
+Botan__u32bit
+Botan__Pipe::remaining(msgno = Botan::Pipe::DEFAULT_MESSAGE)
+	Botan__u32bit msgno;
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	try {
+	    RETVAL = THIS->remaining(msgno);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+SV *
+Botan__Pipe::read(len = 0xFFFFFFFF, msgno = Botan::Pipe::DEFAULT_MESSAGE)
+	Botan__u32bit len;
+	Botan__u32bit msgno;
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	try {
+	    if ( len > THIS->remaining(msgno) )
+		len = THIS->remaining(msgno);
+	    RETVAL = NEWSV(0, len);
+	    SvPOK_on(RETVAL);
+	    if ( len > 0 )
+		SvCUR_set(RETVAL, THIS->read((unsigned char *)SvPVX(RETVAL),
+			    len, msgno));
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+SV *
+Botan__Pipe::peek(len = 0xFFFFFFFF, offset = 0, \
+		msgno = Botan::Pipe::DEFAULT_MESSAGE)
+	Botan__u32bit len;
+	Botan__u32bit offset;
+	Botan__u32bit msgno;
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	try {
+	    if ( len > THIS->remaining(msgno) )
+		len = THIS->remaining(msgno);
+	    RETVAL = NEWSV(0, len);
+	    SvPOK_on(RETVAL);
+	    if ( len > 0 )
+		SvCUR_set(RETVAL, THIS->peek((unsigned char *)SvPVX(RETVAL),
+			    len, offset, msgno));
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+Botan__u32bit
+Botan__Pipe::default_msg()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	try {
+	    RETVAL = THIS->default_msg();
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__Pipe::set_default_msg(msgno)
+	Botan__u32bit msgno;
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	try {
+	    THIS->set_default_msg(msgno);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+
+Botan__u32bit
+Botan__Pipe::message_count()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	try {
+	    RETVAL = THIS->message_count();
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+bool
+Botan__Pipe::end_of_data()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	try {
+	    RETVAL = THIS->end_of_data();
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__Pipe::start_msg()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	try {
+	    THIS->start_msg();
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+
+void
+Botan__Pipe::end_msg()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	try {
+	    THIS->end_msg();
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+
+void
+Botan__Pipe::reset()
+    PREINIT:
+	ObjectInfo	*THIS_oi;
+    CODE:
+	try {
+	    THIS->reset();
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+
+
+# ========================== Botan::X509_Certificate ==========================
+
+MODULE = Botan				    PACKAGE = Botan::X509_Certificate
+
+Botan__X509_Certificate *
+Botan__X509_Certificate::new(char *fn)
+    CODE:
+	try {
+	    RETVAL = new Botan__X509_Certificate(fn);
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__X509_Certificate::DESTROY()
+    CODE:
+	try {
+	    delete THIS;
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+
+unsigned int
+Botan__X509_Certificate::x509_version()
+    CODE:
+	try {
+	    RETVAL = THIS->x509_version();
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+char *
+Botan__X509_Certificate::start_time()
+    CODE:
+	try {
+	    RETVAL = const_cast<char *>(THIS->start_time().c_str());
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+char *
+Botan__X509_Certificate::end_time()
+    CODE:
+	try {
+	    RETVAL = const_cast<char *>(THIS->end_time().c_str());
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+char *
+Botan__X509_Certificate::subject_info(char *info)
+    CODE:
+	try {
+            std::vector<std::string> s = THIS->subject_info(info);
+
+            if(s.size() > 0)
+                RETVAL = const_cast<char *>(s[0].c_str());
+            else
+                RETVAL = "err";
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+char *
+Botan__X509_Certificate::issuer_info(char *info)
+    CODE:
+	try {
+            std::vector<std::string> s = THIS->subject_info(info);
+
+            if(s.size() > 0)
+                RETVAL = const_cast<char *>(s[0].c_str());
+            else
+                RETVAL = "err";
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+Botan__X509_DN *
+Botan__X509_Certificate::subject_dn()
+    CODE:
+	try {
+	    RETVAL = new Botan__X509_DN(THIS->subject_dn());
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+	char const * CLASS = "Botan::X509_DN";
+    OUTPUT:
+	RETVAL
+
+Botan__X509_DN *
+Botan__X509_Certificate::issuer_dn()
+    CODE:
+	try {
+	    RETVAL = new Botan__X509_DN(THIS->issuer_dn());
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+	char const * CLASS = "Botan::X509_DN";
+    OUTPUT:
+	RETVAL
+
+
+# ============================== Botan::X509_DN ==============================
+
+MODULE = Botan				    PACKAGE = Botan::X509_DN
+
+Botan__X509_DN *
+Botan__X509_DN::new()
+    CODE:
+	try {
+	    RETVAL = new Botan__X509_DN();
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
+
+void
+Botan__X509_DN::DESTROY()
+    CODE:
+	try {
+	    delete THIS;
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+
+AV *
+Botan__X509_DN::get_attributes()
+    CODE:
+	try {
+	    using namespace std;
+	    using namespace Botan;
+
+	    typedef multimap<OID, string>::const_iterator rdn_iter;
+
+	    multimap<OID, string> const &atrmmap = THIS->get_attributes();
+	    RETVAL = newAV();
+	    for(rdn_iter i = atrmmap.begin(); i != atrmmap.end(); i++)
+	    {
+		string const &atr = i->first.as_string();
+		string const &val = i->second;
+		av_push(RETVAL, newSVpvn(atr.c_str(), atr.length()));
+		av_push(RETVAL, newSVpvn(val.c_str(), val.length()));
+	    }
+	}
+	catch (const std::exception &e) {
+	    croak(e.what());
+	}
+    OUTPUT:
+	RETVAL
diff --git a/src/wrap/perl-xs/Changes b/src/wrap/perl-xs/Changes
new file mode 100644
index 000000000..5f32b0c63
--- /dev/null
+++ b/src/wrap/perl-xs/Changes
@@ -0,0 +1,4 @@
+Revision history for Perl extension to Botan.
+
+0.01	Fri, 20 Feb 2004 15:10:50 +0100
+	- first version
diff --git a/src/wrap/perl-xs/MANIFEST b/src/wrap/perl-xs/MANIFEST
new file mode 100644
index 000000000..b9d8454d6
--- /dev/null
+++ b/src/wrap/perl-xs/MANIFEST
@@ -0,0 +1,15 @@
+Botan.pm
+Botan.xs
+Changes
+MANIFEST
+Makefile.PL
+data/ca.cert.der
+data/ca.cert.pem
+t/base64.t
+t/filt.t
+t/hex.t
+t/oid.t
+t/pipe.t
+t/testutl.pl
+t/x509cert.t
+typemap
diff --git a/src/wrap/perl-xs/Makefile.PL b/src/wrap/perl-xs/Makefile.PL
new file mode 100644
index 000000000..46317e72b
--- /dev/null
+++ b/src/wrap/perl-xs/Makefile.PL
@@ -0,0 +1,29 @@
+use ExtUtils::MakeMaker;
+
+my ($cc, $cflags, $lids);
+if ( $^O eq 'MSWin32' )
+{
+#    $cflags = '';
+#    $libs = ':nosearch -lgdi32 -llibeay32';
+}
+else
+{
+    $cc = 'g++';
+    $cflags = '-Wno-write-strings -fexceptions ' . qx( botan-config --cflags );
+    $libs = qx( botan-config --libs );
+}
+
+WriteMakefile(
+    'NAME'		=> 'Botan',
+    'DISTNAME'		=> 'Botan-XS',
+    'VERSION_FROM'	=> 'Botan.pm',		# finds $VERSION
+    'XSOPT'		=> '-C++',
+    'CC'                => $cc,
+    'LD'                => '$(CC)',
+    'CCFLAGS'		=> $cflags,
+    'LIBS'		=> [ $libs ],
+    'OPTIMIZE'		=> '-g',
+#    'clean'		=> {
+#	    'FILES'	=> 'neco.p12 rnd',
+#	},
+);
diff --git a/src/wrap/perl-xs/data/ca.cert.der b/src/wrap/perl-xs/data/ca.cert.der
new file mode 100644
index 000000000..d6ed8aeaf
--- /dev/null
+++ b/src/wrap/perl-xs/data/ca.cert.der
diff --git a/src/wrap/perl-xs/data/ca.cert.pem b/src/wrap/perl-xs/data/ca.cert.pem
new file mode 100644
index 000000000..012913b26
--- /dev/null
+++ b/src/wrap/perl-xs/data/ca.cert.pem
@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----
+MIICxDCCAi2gAwIBAgIBEjANBgkqhkiG9w0BAQUFADBSMQswCQYDVQQGEwJDWjER
+MA8GA1UEChMISUNaIGEucy4xGDAWBgNVBAMTD1Rlc3QgcHJpbWFyeSBDQTEWMBQG
+CSqGSIb3DQEJARYHY2FAaS5jejAeFw0wMDA4MjAyMTQ4MDBaFw0wMjA4MTAyMTQ4
+MDBaME8xCzAJBgNVBAYTAkNaMREwDwYDVQQKEwhJQ1ogYS5zLjEVMBMGA1UEAxMM
+VGVzdCBzaWduIENBMRYwFAYJKoZIhvcNAQkBFgdjYUBpLmN6MIGfMA0GCSqGSIb3
+DQEBAQUAA4GNADCBiQKBgQCo2GReNqwU0/8bZZua5hgYaVHvD9QAmfILNXD25jRk
+C8lqe5m/GzbmftSUso5HyUy1t+qzvRDTmxK8uRn0P00Mqj9gjwF8PGQvZE/FrDF7
+rta9GCcH4n2GfQ0iexlhRZW44AfOD4HCgq38Z0bzBclsvUslBWe1AT+S5+chZ5Wb
+UwIDAQABo4GsMIGpMAwGA1UdEwQFMAMBAf8wHQYDVR0OBBYEFLXqc1b1DOfGehii
+k4Z+/ih9BYZmMHoGA1UdIwRzMHGAFL7x2ToS4RDAbDJu4fHnzzGjfGmgoVakVDBS
+MQswCQYDVQQGEwJDWjERMA8GA1UEChMISUNaIGEucy4xGDAWBgNVBAMTD1Rlc3Qg
+cHJpbWFyeSBDQTEWMBQGCSqGSIb3DQEJARYHY2FAaS5jeoIBADANBgkqhkiG9w0B
+AQUFAAOBgQAKD9ku9kKXUGhSw8KuWJXTnEsIUzDtgmREBEUOtEvGfU45vogWN7ZL
+9fQZ1deywN4RJ4T5ZTTcCTPodOdG+IXLJ+uPn/m9iQ/D86c3GKS3yx4JNAn5PH1m
+qLsMYVjbFD2uREZQsqbg3RT6L1D8+oK0pN379u3bD6oJx/qa7+F4Jg==
+-----END CERTIFICATE-----
diff --git a/src/wrap/perl-xs/t/base64.t b/src/wrap/perl-xs/t/base64.t
new file mode 100644
index 000000000..f0973e13e
--- /dev/null
+++ b/src/wrap/perl-xs/t/base64.t
@@ -0,0 +1,273 @@
+# vim: set ft=perl:
+# Before `make install' is performed this script should be runnable with
+# `make test'. After `make install' it should work as `perl test.pl'
+
+######################### We start with some black magic to print on failure.
+
+# Change 1..1 below to 1..last_test_to_print .
+# (It may become useful if the test is moved to ./t subdirectory.)
+
+BEGIN { $| = 1; print "1..24\n"; }
+END { print "not ok 1\n" unless $loaded; }
+
+require 't/testutl.pl';
+use Botan;
+
+$loaded = 1;
+print "ok 1\n";
+
+######################### End of black magic.
+
+# Insert your test code below (better if it prints "ok 13"
+# (correspondingly "not ok 13") depending on the success of chunk 13
+# of the test code):
+
+use strict;
+
+# Data prep
+
+my $botan_lic_b64_garbage = <<'EOF';
+Q29weXJpZ2h0IChDKSAxOTk5LTIwMDQgVGhlIEJvdGFuIFByb2plY3QuIEFsbCBy__�
+aWdodHMgcmVzZXJ2ZWQuCgpSZWRpc3RyaWJ1dGlvbiBhbmQgdXNlIGluIHNvdXJj$$*:
+ZSBhbmQgYmluYXJ5IGZvcm1zLCBmb3IgYW55IHVzZSwgd2l0aCBvciB3aXRob3V0!@#$%^&*(
+Cm1vZGlmaWNhdGlvbiwgaXMgcGVybWl0dGVkIHByb3ZpZGVkIHRoYXQgdGhlIGZv[\]
+bGxvd2luZyBjb25kaXRpb25zIGFyZSBtZXQ6CgoxLiBSZWRpc3RyaWJ1dGlvbnMg'~`
+b2Ygc291cmNlIGNvZGUgbXVzdCByZXRhaW4gdGhlIGFib3ZlIGNvcHlyaWdodCBu()
+b3RpY2UsIHRoaXMKbGlzdCBvZiBjb25kaXRpb25zLCBhbmQgdGhlIGZvbGxvd2lu
+ZyBkaXNjbGFpbWVyLgoKMi4gUmVkaXN0cmlidXRpb25zIGluIGJpbmFyeSBmb3Jt
+IG11c3QgcmVwcm9kdWNlIHRoZSBhYm92ZSBjb3B5cmlnaHQgbm90aWNlLAp0aGlz
+IGxpc3Qgb2YgY29uZGl0aW9ucywgYW5kIHRoZSBmb2xsb3dpbmcgZGlzY2xhaW1l
+ciBpbiB0aGUgZG9jdW1lbnRhdGlvbgphbmQvb3Igb3RoZXIgbWF0ZXJpYWxzIHBy_,^
+b3ZpZGVkIHdpdGggdGhlIGRpc3RyaWJ1dGlvbi4KClRISVMgU09GVFdBUkUgSVMg{|}~~~~~
+UFJPVklERUQgQlkgVEhFIEFVVEhPUihTKSAiQVMgSVMiIEFORCBBTlkgRVhQUkVT~~~~~~~~
+UyBPUiBJTVBMSUVECldBUlJBTlRJRVMsIElOQ0xVRElORywgQlVUIE5PVCBMSU1J__:;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+EOF
+
+my $botan_lic_b64_ws = $botan_lic_b64_garbage;
+$botan_lic_b64_ws =~ s/[^A-Za-z0-9+\/= \n]//g;
+
+my $botan_lic_b64 = $botan_lic_b64_ws;
+$botan_lic_b64 =~ s/[ \n]//g;
+
+
+my $botan_lic = <<'EOF';
+Copyright (C) 1999-2004 The Botan Project. All rights reserved.
+
+Redistribution and use in source and binary forms, for any use, with or without
+modification, is permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+list of conditions, and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+this list of conditions, and the following disclaimer in the documentation
+and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE AUTHOR(S) "AS IS" AND ANY EXPRESS OR IMPLIED
+WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ARE DISCLAIMED.
+
+IN NO EVENT SHALL THE AUTHOR(S) OR CONTRIBUTOR(S) BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
+ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+EOF
+
+
+# Decoder...
+
+my $f;
+
+eval { $f = Botan::Base64_Decoder->new(&Botan::NONE); };
+print "not " if $@ || !defined $f;
+print "ok 2\n";
+
+my $dec;
+eval { $dec = Botan::Pipe->new($f); };
+print "not " if $@ || !defined $dec;
+print "ok 3\n";
+
+eval { $f = Botan::Base64_Decoder->new(&Botan::IGNORE_WS); };
+print "not " if $@ || !defined $f;
+print "ok 4\n";
+
+my $dec_is;
+eval { $dec_is = Botan::Pipe->new($f); };
+print "not " if $@ || !defined $dec_is;
+print "ok 5\n";
+
+eval { $f = Botan::Base64_Decoder->new(&Botan::FULL_CHECK); };
+print "not " if $@ || !defined $f;
+print "ok 6\n";
+
+my $dec_fc;
+eval { $dec_fc = Botan::Pipe->new($f); };
+print "not " if $@ || !defined $dec_fc;
+print "ok 7\n";
+
+
+# Testing clean base64 input
+
+my $data;
+
+undef $data;
+eval {
+    $dec->process_msg($botan_lic_b64);
+    $data = $dec->read();
+};
+
+print "not " if $@ || $data ne $botan_lic;
+print "ok 8\n";
+
+undef $data;
+eval {
+    $dec_is->process_msg($botan_lic_b64);
+    $data = $dec_is->read();
+};
+
+print "not " if $@ || $data ne $botan_lic;
+print "ok 9\n";
+
+undef $data;
+eval {
+    $dec_fc->process_msg($botan_lic_b64);
+    $data = $dec_fc->read();
+};
+
+print "not " if $@ || $data ne $botan_lic;
+print "ok 10\n";
+
+
+# Testing base64 input with whitespaces
+
+undef $data;
+eval {
+    $dec->process_msg($botan_lic_b64_ws);
+    $dec->set_default_msg(1);
+    $data = $dec->read();
+};
+
+print "not " if $@ || $data ne $botan_lic;
+print "ok 11\n";
+
+undef $data;
+eval {
+    $dec_is->process_msg($botan_lic_b64_ws);
+    $dec_is->set_default_msg(1);
+    $data = $dec_is->read();
+};
+
+print "not " if $@ || $data ne $botan_lic;
+print "ok 12\n";
+
+undef $data;
+eval {
+    $dec_fc->process_msg($botan_lic_b64_ws);
+    $dec_fc->set_default_msg(1);
+    $data = $dec_fc->read();
+};
+
+print "not " unless $@ && !defined $data;
+print "ok 13\n";
+
+
+# Testing base64 input with garbage
+
+undef $data;
+eval {
+    $dec->process_msg($botan_lic_b64_garbage);
+    $dec->set_default_msg(2);
+    $data = $dec->read();
+};
+
+print "not " if $@ || $data ne $botan_lic;
+print "ok 14\n";
+
+undef $data;
+eval {
+    $dec_is->process_msg($botan_lic_b64_garbage);
+    $dec_is->set_default_msg(2);
+    $data = $dec_is->read();
+};
+
+print "not " unless $@ && !defined $data;
+print "ok 15\n";
+
+undef $data;
+eval {
+    $dec_fc->process_msg($botan_lic_b64_garbage);
+    $dec_fc->set_default_msg(2);
+    $data = $dec_fc->read();
+};
+
+print "not " unless $@ && !defined $data;
+print "ok 16\n";
+
+
+# Encoder...
+
+eval { $f = Botan::Base64_Encoder->new(); };
+print "not " if $@ || !defined $f;
+print "ok 17\n";
+
+my $enc;
+eval { $enc = Botan::Pipe->new($f); };
+print "not " if $@ || !defined $enc;
+print "ok 18\n";
+
+eval { $f = Botan::Base64_Encoder->new(1, 5); };
+print "not " if $@ || !defined $f;
+print "ok 19\n";
+
+my $enc2;
+eval { $enc2 = Botan::Pipe->new($f); };
+print "not " if $@ || !defined $enc2;
+print "ok 20\n";
+
+undef $data;
+eval {
+    $enc->process_msg("Hello\n");
+    $data = $enc->read();
+};
+print "not " if $@ || $data ne "SGVsbG8K";
+print "ok 21\n";
+
+undef $data;
+eval {
+    $enc2->process_msg("Hello\n");
+    $data = $enc2->read();
+};
+print "not " if $@ || $data ne "SGVsb\nG8K\n";
+print "ok 22\n";
+
+
+# Encoder with decoder...
+
+my $p;
+eval {
+    $p = Botan::Pipe->new(
+	    Botan::Base64_Encoder->new(),
+	    Botan::Base64_Decoder->new(),
+	);
+};
+print "not " if $@ || !defined $p;
+print "ok 23\n";
+
+print "not " unless random_message_ok($p);
+print "ok 24\n";
diff --git a/src/wrap/perl-xs/t/filt.t b/src/wrap/perl-xs/t/filt.t
new file mode 100644
index 000000000..2a7b4c8ba
--- /dev/null
+++ b/src/wrap/perl-xs/t/filt.t
@@ -0,0 +1,56 @@
+# vim: set ft=perl:
+# Before `make install' is performed this script should be runnable with
+# `make test'. After `make install' it should work as `perl test.pl'
+
+######################### We start with some black magic to print on failure.
+
+# Change 1..1 below to 1..last_test_to_print .
+# (It may become useful if the test is moved to ./t subdirectory.)
+
+BEGIN { $| = 1; print "1..5\n"; }
+END { print "not ok 1\n" unless $loaded; }
+
+use Botan;
+
+$loaded = 1;
+print "ok 1\n";
+
+######################### End of black magic.
+
+# Insert your test code below (better if it prints "ok 13"
+# (correspondingly "not ok 13") depending on the success of chunk 13
+# of the test code):
+
+use strict;
+
+my $pipe = Botan::Pipe->new(Botan::Hex_Encoder->new());
+
+print "not " unless $pipe;
+print "ok 2\n";
+
+$pipe->process_msg('FOO');
+
+print "not " if $pipe->read() ne '464F4F';
+print "ok 3\n";
+
+$pipe = Botan::Pipe->new(Botan::Hex_Encoder->new(0, 0, 1));
+
+print "not " unless $pipe;
+print "ok 4\n";
+
+$pipe->process_msg('FOO');
+
+print "not " if $pipe->read() ne '464f4f';
+print "ok 5\n";
+
+
+
+
+
+
+#my $pipe = Botan::Pipe->new(Botan::Base64_Encoder->new());
+#$pipe->process_msg('FOO');
+#
+#print "not " if $pipe->read() ne 'Rk9P';
+#print "ok 4\n";
+
diff --git a/src/wrap/perl-xs/t/hex.t b/src/wrap/perl-xs/t/hex.t
new file mode 100644
index 000000000..6f447b25c
--- /dev/null
+++ b/src/wrap/perl-xs/t/hex.t
@@ -0,0 +1,256 @@
+# vim: set ft=perl:
+# Before `make install' is performed this script should be runnable with
+# `make test'. After `make install' it should work as `perl test.pl'
+
+######################### We start with some black magic to print on failure.
+
+# Change 1..1 below to 1..last_test_to_print .
+# (It may become useful if the test is moved to ./t subdirectory.)
+
+BEGIN { $| = 1; print "1..24\n"; }
+END { print "not ok 1\n" unless $loaded; }
+
+require 't/testutl.pl';
+use Botan;
+
+$loaded = 1;
+print "ok 1\n";
+
+######################### End of black magic.
+
+# Insert your test code below (better if it prints "ok 13"
+# (correspondingly "not ok 13") depending on the success of chunk 13
+# of the test code):
+
+use strict;
+
+# Data prep
+
+my ($hex, $hex_ws, $hex_garbage);
+while ( $_ = <DATA> )
+{
+    $hex_garbage .= $_;
+    s/[^[:xdigit:][:space:]]//g;
+    $hex_ws .= $_;
+    s/[^[:xdigit:]]//g;
+    $hex .= $_;
+}
+my $data_test = pack("H*", $hex);
+
+# Decoder...
+
+my $f;
+
+eval { $f = Botan::Hex_Decoder->new(&Botan::NONE); };
+print "not " if $@ || !defined $f;
+print "ok 2\n";
+
+my $dec;
+eval { $dec = Botan::Pipe->new($f); };
+print "not " if $@ || !defined $dec;
+print "ok 3\n";
+
+eval { $f = Botan::Hex_Decoder->new(&Botan::IGNORE_WS); };
+print "not " if $@ || !defined $f;
+print "ok 4\n";
+
+my $dec_is;
+eval { $dec_is = Botan::Pipe->new($f); };
+print "not " if $@ || !defined $dec_is;
+print "ok 5\n";
+
+eval { $f = Botan::Hex_Decoder->new(&Botan::FULL_CHECK); };
+print "not " if $@ || !defined $f;
+print "ok 6\n";
+
+my $dec_fc;
+eval { $dec_fc = Botan::Pipe->new($f); };
+print "not " if $@ || !defined $dec_fc;
+print "ok 7\n";
+
+
+# Testing clean hexadecimal input
+
+my $data;
+
+undef $data;
+eval {
+    $dec->process_msg($hex);
+    $data = $dec->read();
+};
+
+print "not " if $@ || $data ne $data_test;
+print "ok 8\n";
+
+undef $data;
+eval {
+    $dec_is->process_msg($hex);
+    $data = $dec_is->read();
+};
+
+print "not " if $@ || $data ne $data_test;
+print "ok 9\n";
+
+undef $data;
+eval {
+    $dec_fc->process_msg($hex);
+    $data = $dec_fc->read();
+};
+
+print "not " if $@ || $data ne $data_test;
+print "ok 10\n";
+
+
+# Testing hexadecimal input with whitespaces
+
+undef $data;
+eval {
+    $dec->process_msg($hex_ws);
+    $dec->set_default_msg(1);
+    $data = $dec->read();
+};
+
+print "not " if $@ || $data ne $data_test;
+print "ok 11\n";
+
+undef $data;
+eval {
+    $dec_is->process_msg($hex_ws);
+    $dec_is->set_default_msg(1);
+    $data = $dec_is->read();
+};
+
+print "not " if $@ || $data ne $data_test;
+print "ok 12\n";
+
+undef $data;
+eval {
+    $dec_fc->process_msg($hex_ws);
+    $dec_fc->set_default_msg(1);
+    $data = $dec_fc->read();
+};
+
+print "not " unless $@ && !defined $data;
+print "ok 13\n";
+
+
+# Testing hexadecimal input with garbage
+
+undef $data;
+eval {
+    $dec->process_msg($hex_garbage);
+    $dec->set_default_msg(2);
+    $data = $dec->read();
+};
+
+print "not " if $@ || $data ne $data_test;
+print "ok 14\n";
+
+undef $data;
+eval {
+    $dec_is->process_msg($hex_garbage);
+    $dec_is->set_default_msg(2);
+    $data = $dec_is->read();
+};
+
+print "not " unless $@ && !defined $data;
+print "ok 15\n";
+
+undef $data;
+eval {
+    $dec_fc->process_msg($hex_garbage);
+    $dec_fc->set_default_msg(2);
+    $data = $dec_fc->read();
+};
+
+print "not " unless $@ && !defined $data;
+print "ok 16\n";
+
+
+# Encoder...
+
+eval { $f = Botan::Hex_Encoder->new(); };
+print "not " if $@ || !defined $f;
+print "ok 17\n";
+
+my $enc;
+eval { $enc = Botan::Pipe->new($f); };
+print "not " if $@ || !defined $enc;
+print "ok 18\n";
+
+eval { $f = Botan::Hex_Encoder->new(1, 5, 1); };
+print "not " if $@ || !defined $f;
+print "ok 19\n";
+
+my $enc2;
+eval { $enc2 = Botan::Pipe->new($f); };
+print "not " if $@ || !defined $enc2;
+print "ok 20\n";
+
+undef $data;
+eval {
+    $enc->process_msg("Hello\n");
+    $data = $enc->read();
+};
+print "not " if $@ || $data ne "48656C6C6F0A";
+print "ok 21\n";
+
+undef $data;
+eval {
+    $enc2->process_msg("Hello\n");
+    $data = $enc2->read();
+};
+print "not " if $@ || $data ne "48656\nc6c6f\n0a\n";
+print "ok 22\n";
+
+
+# Encoder with decoder...
+
+my $p;
+eval {
+    $p = Botan::Pipe->new(
+	    Botan::Hex_Encoder->new(),
+	    Botan::Hex_Decoder->new(),
+	);
+};
+print "not " if $@ || !defined $p;
+print "ok 23\n";
+
+print "not " unless random_message_ok($p);
+print "ok 24\n";
+
+
+
+__DATA__
+cb13 4a4d 7522 1fd3 c6f6 7786 d04b 3043  ..JMu"....w..K..
+4552 4bcf 4d2b 9d71 0cfe 4d6a 1caf bcfd  .RK.M+.q..Mj....
+8f91 6151 ff85 e900 7e6a bafc 15e9 ae51  ...Q....~j.....Q
+b14b 7210 bb40 5958 2b82 d49e b808 68a5  .Kr..@YX+.....h.
+7945 9dec f686 9b98 989e 826d 8088 6ee7  y..........m..n.
+d066 1eac 8c34 c461 bb54 7726 87ab d681  .........Tw&....
+a0be 52e5 1128 0cf2 759e cb2d e690 4ed9  ..R..(..u..-..N.
+7e88 bda7 2523 4a0f 185a 02b1 f898 fc41  ~...%#J..Z......
+dd48 fa87 945d 7611 b8c9 a50a 2de2 b670  .H...]v.....-..p
+0056 c8be 2cbb e7d0 1e70 4a3d 79f0 dce9  .V..,....pJ=y...
+b57f 154b 2b3a db73 f086 de11 9f3e 1641  ...K+:.s.....>..
+3a28 8b9b bb0f 682b 80db b791 89e0 62c0  :(....h+........
+7204 db97 5432 2eb0 a04e f38e 809f 7223  r...T....N....r#
+912e e552 1452 6dd2 e09f dd06 c715 7c1a  ...R.Rm.......|.
+fe3d d6cc b6d0 a17a 27d7 4327 4e43 8af3  .=.....z'..'N...
+6eb5 e9f8 bfe9 34c3 6636 8243 358f 966d  n..............m
+7d87 d17b 5c37 6acb 4972 f4ec 6806 bbde  }..{\.j.Ir..h...
+2689 a019 a9e2 4101 7fe2 de72 bc03 eb5e  &..........r...^
+b699 2d6b f8cd a08e 6e01 edfc a81a 94b6  ..-k....n.......
+9073 15fb efb2 c8d9 9f85 6633 85f1 e9d0  .s..............
+20ce 578b ab9d 2e51 b947 69bf fba5 82c6   .W....Q.Gi.....
+2ed0 dd36 d679 a399 7db3 8a0d cdef 0eda  .....y..}.......
+e761 e7f1 5b17 3f67 0c83 215a eddf 9d2a  ....[.?g..!Z...*
+5e70 0a77 c92e 94e1 a82b fd7c f10a 894f  ^p.w.....+.|...O
+2955 f0e8 7398 f409 2040 b797 da03 a5a6  )U..s... @......
+7ba4 c3c9 2659 b9f7 6a56 e17a b481 983f  {...&Y..jV.z...?
+00ed 3cc8 5a22 ad5c b6e0 3566 d717 35a6  ..<.Z".\........
+1523 4104 de63 477e fd24 68e5 e816 98df  .#....G~.$h.....
+1747 417e db72 a76a be5b b9dc 3dfb 2d05  .G.~.r.j.[..=.-.
+d27f e597 eafc 9a29 15c5 792d 9c88 9aea  .......)..y-....
+485e e431 96c3 7723 da6d 28b2 477a fd12  H^....w#.m(.Gz..
+e645 5dcd 7d5a d8b4 7acc 10b2 b41a e11d  ..].}Z..z.......
diff --git a/src/wrap/perl-xs/t/oid.t b/src/wrap/perl-xs/t/oid.t
new file mode 100644
index 000000000..66204541f
--- /dev/null
+++ b/src/wrap/perl-xs/t/oid.t
@@ -0,0 +1,45 @@
+# vim: set ft=perl:
+# Before `make install' is performed this script should be runnable with
+# `make test'. After `make install' it should work as `perl test.pl'
+
+######################### We start with some black magic to print on failure.
+
+# Change 1..1 below to 1..last_test_to_print .
+# (It may become useful if the test is moved to ./t subdirectory.)
+
+BEGIN { $| = 1; print "1..6\n"; }
+END { print "not ok 1\n" unless $loaded; }
+
+use Botan;
+
+$loaded = 1;
+print "ok 1\n";
+
+######################### End of black magic.
+
+# Insert your test code below (better if it prints "ok 13"
+# (correspondingly "not ok 13") depending on the success of chunk 13
+# of the test code):
+
+use strict;
+
+print "not " unless Botan::OIDS::have_oid('X520.CommonName');
+print "ok 2\n";
+
+my $oid_c = Botan::OID->new('2.5.4.3');
+print "not " if Botan::OIDS::lookup_by_oid($oid_c) ne 'X520.CommonName';
+print "ok 3\n";
+
+my $oid_x = Botan::OIDS::lookup_by_name('X520.CommonName');
+print "not " if $oid_x->as_string() ne '2.5.4.3';
+print "ok 4\n";
+
+my $oid_foo_num = '1.2.3.4.5.6.7.8.9.10.11.12.13.14.15';
+my $oid_foo = Botan::OID->new($oid_foo_num);
+print "not " if Botan::OIDS::lookup_by_oid($oid_foo) ne $oid_foo_num;
+print "ok 5\n";
+
+Botan::OIDS::add_oid($oid_foo, 'Zito.Foo');
+
+print "not " if Botan::OIDS::lookup_by_oid($oid_foo) ne 'Zito.Foo';
+print "ok 6\n";
diff --git a/src/wrap/perl-xs/t/pipe.t b/src/wrap/perl-xs/t/pipe.t
new file mode 100644
index 000000000..f850d8519
--- /dev/null
+++ b/src/wrap/perl-xs/t/pipe.t
@@ -0,0 +1,98 @@
+# vim: set ft=perl:
+# Before `make install' is performed this script should be runnable with
+# `make test'. After `make install' it should work as `perl test.pl'
+
+######################### We start with some black magic to print on failure.
+
+# Change 1..1 below to 1..last_test_to_print .
+# (It may become useful if the test is moved to ./t subdirectory.)
+
+BEGIN { $| = 1; print "1..20\n"; }
+END { print "not ok 1\n" unless $loaded; }
+
+use Botan;
+
+$loaded = 1;
+print "ok 1\n";
+
+######################### End of black magic.
+
+# Insert your test code below (better if it prints "ok 13"
+# (correspondingly "not ok 13") depending on the success of chunk 13
+# of the test code):
+
+use strict;
+
+my $pipe = Botan::Pipe->new();
+
+print "not " unless $pipe;
+print "ok 2\n";
+
+$pipe->start_msg();
+$pipe->write('Hello world');
+$pipe->end_msg();
+
+print "not " if $pipe->message_count() != 1;
+print "ok 3\n";
+
+print "not " if $pipe->remaining() != 11;
+print "ok 4\n";
+
+print "not " if $pipe->end_of_data();
+print "ok 5\n";
+
+print "not " if $pipe->read() ne 'Hello world';
+print "ok 6\n";
+
+print "not " if $pipe->remaining() != 0;
+print "ok 7\n";
+
+print "not " unless $pipe->end_of_data();
+print "ok 8\n";
+
+$pipe->process_msg('Hello world');
+
+print "not " if $pipe->message_count() != 2;
+print "ok 9\n";
+
+my $msg_num = $pipe->message_count() -1;
+
+print "not " if $pipe->read(5, $msg_num) ne 'Hello';
+print "ok 10\n";
+
+print "not " if $pipe->read(6, $msg_num) ne ' world';
+print "ok 11\n";
+
+print "not " if $pipe->remaining() != 0;
+print "ok 12\n";
+
+print "not " unless $pipe->end_of_data();
+print "ok 13\n";
+
+$pipe->process_msg("The\0string\0with\0null\0chars\0");
+$msg_num = $pipe->message_count() -1;
+
+print "not " if $pipe->read(80, $msg_num) ne "The\0string\0with\0null\0chars\0";
+print "ok 14\n";
+
+$pipe->process_msg('FOO BAR');
+$pipe->set_default_msg($pipe->message_count() -1);
+
+print "not " if $pipe->peek(3) ne 'FOO';
+print "ok 15\n";
+
+print "not " if $pipe->peek(3, 4) ne 'BAR';
+print "ok 16\n";
+
+print "not " if $pipe->peek() ne 'FOO BAR';
+print "ok 17\n";
+
+print "not " if $pipe->read() ne 'FOO BAR';
+print "ok 18\n";
+
+print "not " if $pipe->remaining() != 0;
+print "ok 19\n";
+
+print "not " unless $pipe->end_of_data();
+print "ok 20\n";
+
diff --git a/src/wrap/perl-xs/t/testutl.pl b/src/wrap/perl-xs/t/testutl.pl
new file mode 100644
index 000000000..add6f6a45
--- /dev/null
+++ b/src/wrap/perl-xs/t/testutl.pl
@@ -0,0 +1,26 @@
+#!/usr/bin/perl 
+
+sub random_message_ok
+{
+    my ($pipe, $iter, $chunkmax) = @_;
+    $iter = 100 unless defined $iter;
+    $chunkmax = 300 unless defined $chunkmax;
+    eval {
+	my $input = '';
+	$pipe->start_msg();
+	for(my $i = 0; $i < $iter; $i++)
+	{
+	    my $chunk = '';
+	    my $chunklen = int(rand($chunkmax));
+	    $chunk .= pack("C", int(rand(256))) while $chunklen--;
+	    $input .= $chunk;
+	    $pipe->write($chunk);
+	}
+	$pipe->end_msg();
+	my $msg_num = $pipe->message_count() -1;
+	my $output = $pipe->read(0xFFFFFFFF, $msg_num);
+	return $input eq $output;
+    };
+}
+
+1;
diff --git a/src/wrap/perl-xs/t/x509cert.t b/src/wrap/perl-xs/t/x509cert.t
new file mode 100644
index 000000000..2a943aeac
--- /dev/null
+++ b/src/wrap/perl-xs/t/x509cert.t
@@ -0,0 +1,42 @@
+# vim: set ft=perl:
+# Before `make install' is performed this script should be runnable with
+# `make test'. After `make install' it should work as `perl test.pl'
+
+######################### We start with some black magic to print on failure.
+
+# Change 1..1 below to 1..last_test_to_print .
+# (It may become useful if the test is moved to ./t subdirectory.)
+
+BEGIN { $| = 1; print "1..4\n"; }
+END { print "not ok 1\n" unless $loaded; }
+
+use Botan;
+
+$loaded = 1;
+print "ok 1\n";
+
+######################### End of black magic.
+
+# Insert your test code below (better if it prints "ok 13"
+# (correspondingly "not ok 13") depending on the success of chunk 13
+# of the test code):
+
+use strict;
+
+my $cert = Botan::X509_Certificate->new('data/ca.cert.der');
+
+print "not " if $cert->x509_version() != 3;
+print "ok 2\n";
+
+print "not " if $cert->start_time() ne '2000/8/20 21:48:00 UTC';
+print "ok 3\n";
+
+print "not " if $cert->end_time() ne '2002/8/10 21:48:00 UTC';
+print "ok 4\n";
+
+#my $subject = $cert->subject_dn()->get_attributes();
+#print STDERR "subject=", join(',', @{$subject}), "\n";
+#
+#my $issuer = $cert->issuer_dn()->get_attributes();
+#print STDERR "issuer=", join(',', @{$issuer}), "\n";
+#
diff --git a/src/wrap/perl-xs/typemap b/src/wrap/perl-xs/typemap
new file mode 100644
index 000000000..d7403d40d
--- /dev/null
+++ b/src/wrap/perl-xs/typemap
@@ -0,0 +1,62 @@
+TYPEMAP
+
+Botan__ASN1_String *		O_OBJECT
+Botan__AlgorithmIdentifier *	O_OBJECT
+Botan__AlternativeName *	O_OBJECT
+Botan__Attribute *		O_OBJECT
+Botan__Base64_Decoder *		O_EXTOBJECT
+Botan__Base64_Encoder *		O_EXTOBJECT
+Botan__Chain *			O_EXTOBJECT
+Botan__Extension *		O_OBJECT
+Botan__Filter *			O_EXTOBJECT
+Botan__Fork *	    		O_EXTOBJECT
+Botan__Hex_Decoder *		O_EXTOBJECT
+Botan__Hex_Encoder *		O_EXTOBJECT
+Botan__OID *			O_OBJECT
+Botan__Pipe *			O_OBJECT
+Botan__X509_Certificate *	O_OBJECT
+Botan__X509_DN *		O_OBJECT
+Botan__X509_Time *		O_OBJECT
+Botan__u32bit			T_UV
+
+
+######################################################################
+OUTPUT
+
+# The Perl object is blessed into 'CLASS', which should be a
+# char* having the name of the package for the blessing.
+O_OBJECT
+	sv_setref_pv($arg, CLASS, (void*)$var);
+
+O_EXTOBJECT
+	sv_setref_pv($arg, CLASS, (void*)$var);
+	sv_magic(SvRV($arg), 0, '~', (char *)&oi_init, sizeof(oi_init));
+
+
+######################################################################
+INPUT
+
+O_OBJECT
+	if ( sv_isobject($arg) && (SvTYPE(SvRV($arg)) == SVt_PVMG) )
+	    $var = ($type)SvIV((SV*)SvRV( $arg ));
+	else
+	    croak(\"${Package}::$func_name() -- \"
+		    \"$var is not a blessed SV reference\");
+
+# The pointer variable "ObjectInfo *${var}_oi;" must be declared
+# in PREINIT section. I don't know how to emit this declaration safely here.
+O_EXTOBJECT
+	if ( sv_isobject($arg) && (SvTYPE(SvRV($arg)) == SVt_PVMG) )
+	    $var = ($type)SvIV((SV*)SvRV($arg));
+	else
+	    croak(\"${Package}::$func_name() -- \"
+		    \"$var is not a blessed SV reference\");
+	{
+	    MAGIC *mg = mg_find(SvRV($arg), '~');
+	    if ( mg == 0
+		    || mg->mg_len != sizeof(ObjectInfo)
+		    || *(I32 *)(mg->mg_ptr) != ObjectInfo::SIGNVAL )
+		croak(\"${Package}::$func_name() -- \"
+			\"private magic data for $var invalid\");
+	    ${var}_oi = (ObjectInfo *)(mg->mg_ptr);
+	}
diff --git a/src/wrap/python/__init__.py b/src/wrap/python/__init__.py
new file mode 100644
index 000000000..2df9a456f
--- /dev/null
+++ b/src/wrap/python/__init__.py
@@ -0,0 +1,4 @@
+from _botan import *
+
+# Initialize the library when the module is imported
+init = LibraryInitializer()
diff --git a/src/wrap/python/core.cpp b/src/wrap/python/core.cpp
new file mode 100644
index 000000000..fe26e16ee
--- /dev/null
+++ b/src/wrap/python/core.cpp
@@ -0,0 +1,216 @@
+/*
+* Boost.Python module definition
+* (C) 1999-2007 Jack Lloyd
+*/
+
+#include <botan/init.h>
+#include <botan/pipe.h>
+#include <botan/lookup.h>
+#include <botan/cryptobox.h>
+#include <botan/pbkdf2.h>
+#include <botan/hmac.h>
+using namespace Botan;
+
+#include "python_botan.h"
+
+class Py_Cipher
+   {
+   public:
+      Py_Cipher(std::string algo_name, std::string direction,
+                std::string key);
+
+      std::string cipher_noiv(const std::string& text);
+
+      std::string cipher(const std::string& text,
+                         const std::string& iv);
+
+      std::string name() const { return algo_name; }
+   private:
+      std::string algo_name;
+      Keyed_Filter* filter;
+      Pipe pipe;
+   };
+
+std::string Py_Cipher::cipher(const std::string& input,
+                              const std::string& iv_str)
+   {
+   if(iv_str.size())
+      {
+      const byte* iv_bytes = reinterpret_cast<const byte*>(iv_str.data());
+      u32bit iv_len = iv_str.size();
+      filter->set_iv(InitializationVector(iv_bytes, iv_len));
+      }
+
+   pipe.process_msg(input);
+   return pipe.read_all_as_string(Pipe::LAST_MESSAGE);
+   }
+
+// For IV-less algorithms
+std::string Py_Cipher::cipher_noiv(const std::string& input)
+   {
+   pipe.process_msg(input);
+   return pipe.read_all_as_string(Pipe::LAST_MESSAGE);
+   }
+
+Py_Cipher::Py_Cipher(std::string algo_name,
+                     std::string direction,
+                     std::string key_str)
+   {
+   const byte* key_bytes = reinterpret_cast<const byte*>(key_str.data());
+   u32bit key_len = key_str.size();
+
+   Cipher_Dir dir;
+
+   if(direction == "encrypt")
+      dir = ENCRYPTION;
+   else if(direction == "decrypt")
+      dir = DECRYPTION;
+   else
+      throw std::invalid_argument("Bad cipher direction " + direction);
+
+   filter = get_cipher(algo_name, dir);
+   filter->set_key(SymmetricKey(key_bytes, key_len));
+   pipe.append(filter);
+   }
+
+class Py_HashFunction
+   {
+   public:
+      Py_HashFunction(const std::string& algo_name)
+         {
+         hash = get_hash(algo_name);
+         }
+
+      ~Py_HashFunction() { delete hash; }
+
+      void update(const std::string& input)
+         {
+         hash->update(input);
+         }
+
+      std::string final()
+         {
+         std::string out(output_length(), 0);
+         hash->final(reinterpret_cast<byte*>(&out[0]));
+         return out;
+         }
+
+      std::string name() const
+         {
+         return hash->name();
+         }
+
+      u32bit output_length() const
+         {
+         return hash->OUTPUT_LENGTH;
+         }
+
+   private:
+      HashFunction* hash;
+   };
+
+class Py_MAC
+   {
+   public:
+
+      Py_MAC(const std::string& name, const std::string& key_str)
+         {
+         mac = get_mac(name);
+
+         mac->set_key(reinterpret_cast<const byte*>(key_str.data()),
+                      key_str.size());
+         }
+
+      ~Py_MAC() { delete mac; }
+
+      u32bit output_length() const { return mac->OUTPUT_LENGTH; }
+
+      std::string name() const { return mac->name(); }
+
+      void update(const std::string& in) { mac->update(in); }
+
+      std::string final()
+         {
+         std::string out(output_length(), 0);
+         mac->final(reinterpret_cast<byte*>(&out[0]));
+         return out;
+         }
+   private:
+      MessageAuthenticationCode* mac;
+   };
+
+std::string cryptobox_encrypt(const std::string& in,
+                              const std::string& passphrase,
+                              Python_RandomNumberGenerator& rng)
+   {
+   const byte* in_bytes = reinterpret_cast<const byte*>(in.data());
+
+   return CryptoBox::encrypt(in_bytes, in.size(),
+                             passphrase, rng.get_underlying_rng());
+   }
+
+std::string cryptobox_decrypt(const std::string& in,
+                              const std::string& passphrase)
+   {
+   const byte* in_bytes = reinterpret_cast<const byte*>(in.data());
+
+   return CryptoBox::decrypt(in_bytes, in.size(),
+                             passphrase);
+   }
+
+std::string python_pbkdf2(const std::string& passphrase,
+                          const std::string& salt,
+                          u32bit iterations,
+                          u32bit output_size,
+                          const std::string& hash_fn)
+   {
+   PKCS5_PBKDF2 pbkdf2(new HMAC(get_hash(hash_fn)));
+
+   pbkdf2.set_iterations(iterations);
+   pbkdf2.change_salt(reinterpret_cast<const byte*>(salt.data()), salt.size());
+
+   return make_string(pbkdf2.derive_key(output_size, passphrase).bits_of());
+   }
+
+BOOST_PYTHON_MODULE(_botan)
+   {
+   python::class_<LibraryInitializer>("LibraryInitializer")
+      .def(python::init< python::optional<std::string> >());
+
+   python::class_<Python_RandomNumberGenerator>("RandomNumberGenerator")
+      .def(python::init<>())
+      .def("__str__", &Python_RandomNumberGenerator::name)
+      .def("name", &Python_RandomNumberGenerator::name)
+      .def("reseed", &Python_RandomNumberGenerator::reseed)
+      .def("add_entropy", &Python_RandomNumberGenerator::add_entropy)
+      .def("gen_random_byte", &Python_RandomNumberGenerator::gen_random_byte)
+      .def("gen_random", &Python_RandomNumberGenerator::gen_random);
+
+   python::class_<Py_Cipher, boost::noncopyable>
+      ("Cipher", python::init<std::string, std::string, std::string>())
+      .def("name", &Py_Cipher::name)
+      .def("cipher", &Py_Cipher::cipher)
+      .def("cipher", &Py_Cipher::cipher_noiv);
+
+   python::class_<Py_HashFunction, boost::noncopyable>
+      ("HashFunction", python::init<std::string>())
+      .def("update", &Py_HashFunction::update)
+      .def("final", &Py_HashFunction::final)
+      .def("name", &Py_HashFunction::name)
+      .def("output_length", &Py_HashFunction::output_length);
+
+   python::class_<Py_MAC, boost::noncopyable>
+      ("MAC", python::init<std::string, std::string>())
+      .def("update", &Py_MAC::update)
+      .def("final", &Py_MAC::final)
+      .def("name", &Py_MAC::name)
+      .def("output_length", &Py_MAC::output_length);
+
+   python::def("cryptobox_encrypt", cryptobox_encrypt);
+   python::def("cryptobox_decrypt", cryptobox_decrypt);
+   python::def("pbkdf2", python_pbkdf2);
+
+   export_filters();
+   export_rsa();
+   export_x509();
+   }
diff --git a/src/wrap/python/filter.cpp b/src/wrap/python/filter.cpp
new file mode 100644
index 000000000..a678af9e5
--- /dev/null
+++ b/src/wrap/python/filter.cpp
@@ -0,0 +1,178 @@
+/*************************************************
+* Boost.Python module definition                 *
+* (C) 1999-2007 Jack Lloyd                       *
+*************************************************/
+
+#include <boost/python.hpp>
+using namespace boost::python;
+
+#include <botan/pipe.h>
+#include <botan/lookup.h>
+using namespace Botan;
+
+class Py_Filter : public Filter
+   {
+   public:
+      virtual void write_str(const std::string&) = 0;
+
+      void write(const byte data[], u32bit length)
+         {
+         write_str(std::string((const char*)data, length));
+         }
+
+      void send_str(const std::string& str)
+         {
+         printf("Py_Filter::send_str\n");
+         send((const byte*)str.data(), str.length());
+         }
+   };
+
+class FilterWrapper : public Py_Filter, public wrapper<Py_Filter>
+   {
+   public:
+      void start_msg()
+         {
+         printf("wrapper start_msg\n");
+         if(override start_msg = this->get_override("start_msg"))
+            start_msg();
+         }
+
+      void end_msg()
+         {
+         printf("wrapper end_msg\n");
+         if(override end_msg = this->get_override("end_msg"))
+            end_msg();
+         }
+
+      void default_start_msg() {}
+      void default_end_msg() {}
+
+      virtual void write_str(const std::string& str)
+         {
+         printf("wrapper write\n");
+         this->get_override("write")(str);
+         }
+   };
+
+Filter* return_or_raise(Filter* filter, const std::string& name)
+   {
+   if(filter)
+      return filter;
+   throw Invalid_Argument("Filter " + name + " could not be found");
+   }
+
+Filter* make_filter1(const std::string& name)
+   {
+   Filter* filter = 0;
+
+   if(have_hash(name))               filter = new Hash_Filter(name);
+   else if(name == "Hex_Encoder")    filter = new Hex_Encoder;
+   else if(name == "Hex_Decoder")    filter = new Hex_Decoder;
+   else if(name == "Base64_Encoder") filter = new Base64_Encoder;
+   else if(name == "Base64_Decoder") filter = new Base64_Decoder;
+
+   return return_or_raise(filter, name);
+   }
+
+Filter* make_filter2(const std::string& name,
+                     const SymmetricKey& key)
+   {
+   Filter* filter = 0;
+
+   if(have_mac(name))
+      filter = new MAC_Filter(name, key);
+   else if(have_stream_cipher(name))
+      filter = new StreamCipher_Filter(name, key);
+
+   return return_or_raise(filter, name);
+   }
+
+// FIXME: add new wrapper for Keyed_Filter here
+Filter* make_filter3(const std::string& name,
+                     const SymmetricKey& key,
+                     Cipher_Dir direction)
+   {
+   return return_or_raise(
+      get_cipher(name, key, direction),
+      name);
+   }
+
+Filter* make_filter4(const std::string& name,
+                     const SymmetricKey& key,
+                     const InitializationVector& iv,
+                     Cipher_Dir direction)
+   {
+   return return_or_raise(
+      get_cipher(name, key, iv, direction),
+      name);
+   }
+
+void append_filter(Pipe& pipe, std::auto_ptr<Filter> filter)
+   {
+   pipe.append(filter.get());
+   filter.release();
+   }
+
+void prepend_filter(Pipe& pipe, std::auto_ptr<Filter> filter)
+   {
+   pipe.prepend(filter.get());
+   filter.release();
+   }
+
+void do_send(std::auto_ptr<FilterWrapper> filter, const std::string& data)
+   {
+   printf("Sending %s to %p\n", data.c_str(), filter.get());
+   filter->send_str(data);
+   }
+
+BOOST_PYTHON_MEMBER_FUNCTION_OVERLOADS(rallas_ovls, read_all_as_string, 0, 1)
+
+void export_filters()
+   {
+   class_<Filter, std::auto_ptr<Filter>, boost::noncopyable>
+      ("__Internal_FilterObj", no_init);
+
+   def("make_filter", make_filter1,
+       return_value_policy<manage_new_object>());
+   def("make_filter", make_filter2,
+       return_value_policy<manage_new_object>());
+   def("make_filter", make_filter3,
+       return_value_policy<manage_new_object>());
+   def("make_filter", make_filter4,
+       return_value_policy<manage_new_object>());
+
+   // This might not work - Pipe will delete the filter, but Python
+   // might have allocated the space with malloc() or who-knows-what -> bad
+   class_<FilterWrapper, std::auto_ptr<FilterWrapper>,
+          bases<Filter>, boost::noncopyable>
+      ("FilterObj")
+      .def("write", pure_virtual(&Py_Filter::write_str))
+      .def("send", &do_send)
+      .def("start_msg", &Filter::start_msg, &FilterWrapper::default_start_msg)
+      .def("end_msg", &Filter::end_msg, &FilterWrapper::default_end_msg);
+
+   implicitly_convertible<std::auto_ptr<FilterWrapper>,
+                          std::auto_ptr<Filter> >();
+
+   void (Pipe::*pipe_write_str)(const std::string&) = &Pipe::write;
+   void (Pipe::*pipe_process_str)(const std::string&) = &Pipe::process_msg;
+
+   class_<Pipe, boost::noncopyable>("PipeObj")
+      .def(init<>())
+      /*
+      .def_readonly("LAST_MESSAGE", &Pipe::LAST_MESSAGE)
+      .def_readonly("DEFAULT_MESSAGE", &Pipe::DEFAULT_MESSAGE)
+      */
+      .add_property("default_msg", &Pipe::default_msg, &Pipe::set_default_msg)
+      .add_property("msg_count", &Pipe::message_count)
+      .def("append", append_filter)
+      .def("prepend", prepend_filter)
+      .def("reset", &Pipe::reset)
+      .def("pop", &Pipe::pop)
+      .def("end_of_data", &Pipe::end_of_data)
+      .def("start_msg", &Pipe::start_msg)
+      .def("end_msg", &Pipe::end_msg)
+      .def("write", pipe_write_str)
+      .def("process_msg", pipe_process_str)
+      .def("read_all", &Pipe::read_all_as_string, rallas_ovls());
+   }
diff --git a/src/wrap/python/python_botan.h b/src/wrap/python/python_botan.h
new file mode 100644
index 000000000..646c2e2c1
--- /dev/null
+++ b/src/wrap/python/python_botan.h
@@ -0,0 +1,79 @@
+
+#ifndef BOTAN_BOOST_PYTHON_COMMON_H__
+#define BOTAN_BOOST_PYTHON_COMMON_H__
+
+#include <botan/exceptn.h>
+#include <botan/parsing.h>
+#include <botan/secmem.h>
+using namespace Botan;
+
+#include <boost/python.hpp>
+namespace python = boost::python;
+
+extern void export_filters();
+extern void export_rsa();
+extern void export_x509();
+
+class Bad_Size : public Exception
+   {
+   public:
+      Bad_Size(u32bit got, u32bit expected) :
+         Exception("Bad size detected in Python/C++ conversion layer: got " +
+                   to_string(got) + " bytes, expected " + to_string(expected))
+         {}
+   };
+
+inline std::string make_string(const byte input[], u32bit length)
+   {
+   return std::string((const char*)input, length);
+   }
+
+inline std::string make_string(const MemoryRegion<byte>& in)
+   {
+   return make_string(in.begin(), in.size());
+   }
+
+inline void string2binary(const std::string& from, byte to[], u32bit expected)
+   {
+   if(from.size() != expected)
+      throw Bad_Size(from.size(), expected);
+   std::memcpy(to, from.data(), expected);
+   }
+
+template<typename T>
+inline python::object get_owner(T* me)
+   {
+   return python::object(
+      python::handle<>(
+         python::borrowed(python::detail::wrapper_base_::get_owner(*me))));
+   }
+
+class Python_RandomNumberGenerator
+   {
+   public:
+      Python_RandomNumberGenerator()
+         { rng = RandomNumberGenerator::make_rng(); }
+      ~Python_RandomNumberGenerator() { delete rng; }
+
+      std::string name() const { return rng->name(); }
+
+      void reseed() { rng->reseed(192); }
+
+      int gen_random_byte() { return rng->next_byte(); }
+
+      std::string gen_random(int n)
+         {
+         std::string s(n, 0);
+         rng->randomize(reinterpret_cast<byte*>(&s[0]), n);
+         return s;
+         }
+
+      void add_entropy(const std::string& in)
+         { rng->add_entropy(reinterpret_cast<const byte*>(in.c_str()), in.length()); }
+
+      RandomNumberGenerator& get_underlying_rng() { return *rng; }
+   private:
+      RandomNumberGenerator* rng;
+   };
+
+#endif
diff --git a/src/wrap/python/rsa.cpp b/src/wrap/python/rsa.cpp
new file mode 100644
index 000000000..900c3f93d
--- /dev/null
+++ b/src/wrap/python/rsa.cpp
@@ -0,0 +1,187 @@
+/*
+* Boost.Python module definition
+* (C) 1999-2007 Jack Lloyd
+*
+* Distributed under the terms of the Botan license
+*/
+
+#include <botan/rsa.h>
+#include <botan/look_pk.h>
+#include <botan/pubkey.h>
+#include <botan/x509_key.h>
+using namespace Botan;
+
+#include "python_botan.h"
+#include <sstream>
+
+std::string bigint2str(const BigInt& n)
+   {
+   std::ostringstream out;
+   out << n;
+   return out.str();
+   }
+
+class Py_RSA_PrivateKey
+   {
+   public:
+      Py_RSA_PrivateKey(std::string pem_str,
+                        Python_RandomNumberGenerator& rng,
+                        std::string pass);
+
+      Py_RSA_PrivateKey(u32bit bits, Python_RandomNumberGenerator& rng);
+      ~Py_RSA_PrivateKey() { delete rsa_key; }
+
+      std::string to_string() const
+         {
+         return PKCS8::PEM_encode(*rsa_key);
+         }
+
+      std::string get_N() const { return bigint2str(get_bigint_N()); }
+      std::string get_E() const { return bigint2str(get_bigint_E()); }
+
+      const BigInt& get_bigint_N() const { return rsa_key->get_n(); }
+      const BigInt& get_bigint_E() const { return rsa_key->get_e(); }
+
+      std::string decrypt(const std::string& in,
+                          const std::string& padding);
+
+      std::string sign(const std::string& in,
+                       const std::string& padding,
+                       Python_RandomNumberGenerator& rng);
+   private:
+      RSA_PrivateKey* rsa_key;
+   };
+
+std::string Py_RSA_PrivateKey::decrypt(const std::string& in,
+                                       const std::string& padding)
+   {
+   std::auto_ptr<PK_Decryptor> enc(get_pk_decryptor(*rsa_key, padding));
+
+   const byte* in_bytes = reinterpret_cast<const byte*>(in.data());
+
+   return make_string(enc->decrypt(in_bytes, in.size()));
+   }
+
+std::string Py_RSA_PrivateKey::sign(const std::string& in,
+                                    const std::string& padding,
+                                    Python_RandomNumberGenerator& rng)
+   {
+   std::auto_ptr<PK_Signer> sign(get_pk_signer(*rsa_key, padding));
+   const byte* in_bytes = reinterpret_cast<const byte*>(in.data());
+   sign->update(in_bytes, in.size());
+   return make_string(sign->signature(rng.get_underlying_rng()));
+   }
+
+Py_RSA_PrivateKey::Py_RSA_PrivateKey(u32bit bits,
+                                     Python_RandomNumberGenerator& rng)
+   {
+   rsa_key = new RSA_PrivateKey(rng.get_underlying_rng(), bits);
+   }
+
+Py_RSA_PrivateKey::Py_RSA_PrivateKey(std::string pem_str,
+                                     Python_RandomNumberGenerator& rng,
+                                     std::string passphrase)
+   {
+   DataSource_Memory in(pem_str);
+
+   Private_Key* pkcs8_key =
+      PKCS8::load_key(in,
+                      rng.get_underlying_rng(),
+                      passphrase);
+
+   rsa_key = dynamic_cast<RSA_PrivateKey*>(pkcs8_key);
+
+   if(!rsa_key)
+      throw std::invalid_argument("Key is not an RSA key");
+   }
+
+class Py_RSA_PublicKey
+   {
+   public:
+      Py_RSA_PublicKey(std::string pem_str);
+      Py_RSA_PublicKey(const Py_RSA_PrivateKey&);
+      ~Py_RSA_PublicKey() { delete rsa_key; }
+
+      std::string get_N() const { return bigint2str(get_bigint_N()); }
+      std::string get_E() const { return bigint2str(get_bigint_E()); }
+
+      const BigInt& get_bigint_N() const { return rsa_key->get_n(); }
+      const BigInt& get_bigint_E() const { return rsa_key->get_e(); }
+
+      std::string to_string() const
+         {
+         return X509::PEM_encode(*rsa_key);
+         }
+
+      std::string encrypt(const std::string& in,
+                          const std::string& padding,
+                          Python_RandomNumberGenerator& rng);
+
+      bool verify(const std::string& in,
+                  const std::string& padding,
+                  const std::string& signature);
+   private:
+      RSA_PublicKey* rsa_key;
+   };
+
+Py_RSA_PublicKey::Py_RSA_PublicKey(const Py_RSA_PrivateKey& priv)
+   {
+   rsa_key = new RSA_PublicKey(priv.get_bigint_N(), priv.get_bigint_E());
+   }
+
+Py_RSA_PublicKey::Py_RSA_PublicKey(std::string pem_str)
+   {
+   DataSource_Memory in(pem_str);
+   Public_Key* x509_key = X509::load_key(in);
+
+   rsa_key = dynamic_cast<RSA_PublicKey*>(x509_key);
+
+   if(!rsa_key)
+      throw std::invalid_argument("Key is not an RSA key");
+   }
+
+std::string Py_RSA_PublicKey::encrypt(const std::string& in,
+                                      const std::string& padding,
+                                      Python_RandomNumberGenerator& rng)
+   {
+   std::auto_ptr<PK_Encryptor> enc(get_pk_encryptor(*rsa_key, padding));
+
+   const byte* in_bytes = reinterpret_cast<const byte*>(in.data());
+
+   return make_string(enc->encrypt(in_bytes, in.size(),
+                                  rng.get_underlying_rng()));
+   }
+
+bool Py_RSA_PublicKey::verify(const std::string& in,
+                              const std::string& signature,
+                              const std::string& padding)
+   {
+   std::auto_ptr<PK_Verifier> ver(get_pk_verifier(*rsa_key, padding));
+
+   const byte* in_bytes = reinterpret_cast<const byte*>(in.data());
+   const byte* sig_bytes = reinterpret_cast<const byte*>(signature.data());
+
+   ver->update(in_bytes, in.size());
+   return ver->check_signature(sig_bytes, signature.size());
+   }
+
+void export_rsa()
+   {
+   python::class_<Py_RSA_PublicKey>
+      ("RSA_PublicKey", python::init<std::string>())
+      .def(python::init<const Py_RSA_PrivateKey&>())
+      .def("to_string", &Py_RSA_PublicKey::to_string)
+      .def("encrypt", &Py_RSA_PublicKey::encrypt)
+      .def("verify", &Py_RSA_PublicKey::verify)
+      .def("get_N", &Py_RSA_PublicKey::get_N)
+      .def("get_E", &Py_RSA_PublicKey::get_E);
+
+   python::class_<Py_RSA_PrivateKey>
+      ("RSA_PrivateKey", python::init<std::string, Python_RandomNumberGenerator&, std::string>())
+       .def(python::init<u32bit, Python_RandomNumberGenerator&>())
+       .def("to_string", &Py_RSA_PrivateKey::to_string)
+       .def("decrypt", &Py_RSA_PrivateKey::decrypt)
+       .def("sign", &Py_RSA_PrivateKey::sign)
+       .def("get_N", &Py_RSA_PrivateKey::get_N)
+       .def("get_E", &Py_RSA_PrivateKey::get_E);
+   }
diff --git a/src/wrap/python/x509.cpp b/src/wrap/python/x509.cpp
new file mode 100644
index 000000000..90c2bba1c
--- /dev/null
+++ b/src/wrap/python/x509.cpp
@@ -0,0 +1,140 @@
+/*************************************************
+* Boost.Python module definition                 *
+* (C) 1999-2007 Jack Lloyd                       *
+*************************************************/
+
+#include <botan/oids.h>
+#include <botan/pipe.h>
+#include <botan/filters.h>
+#include <botan/x509cert.h>
+#include <botan/x509_crl.h>
+#include <botan/x509stor.h>
+using namespace Botan;
+
+#include <boost/python.hpp>
+namespace python = boost::python;
+
+template<typename T>
+class vector_to_list
+   {
+   public:
+      static PyObject* convert(const std::vector<T>& in)
+         {
+         python::list out;
+         typename std::vector<T>::const_iterator i = in.begin();
+         while(i != in.end())
+            {
+            out.append(*i);
+            ++i;
+            }
+         return python::incref(out.ptr());
+         }
+
+      vector_to_list()
+         {
+         python::to_python_converter<std::vector<T>, vector_to_list<T> >();
+         }
+   };
+
+template<typename T>
+class memvec_to_hexstr
+   {
+   public:
+      static PyObject* convert(const T& in)
+         {
+         Pipe pipe(new Hex_Encoder);
+         pipe.process_msg(in);
+         std::string result = pipe.read_all_as_string();
+         return python::incref(python::str(result).ptr());
+         }
+
+      memvec_to_hexstr()
+         {
+         python::to_python_converter<T, memvec_to_hexstr<T> >();
+         }
+   };
+
+class X509_Store_Search_Wrap : public X509_Store::Search_Func,
+                               public python::wrapper<X509_Store::Search_Func>
+   {
+   public:
+      bool match(const X509_Certificate& cert) const
+         {
+         return this->get_override("match")(cert);
+         }
+   };
+
+BOOST_PYTHON_MEMBER_FUNCTION_OVERLOADS(add_cert_ols, add_cert, 1, 2)
+BOOST_PYTHON_MEMBER_FUNCTION_OVERLOADS(validate_cert_ols, validate_cert, 1, 2)
+
+void export_x509()
+   {
+   vector_to_list<std::string>();
+   vector_to_list<X509_Certificate>();
+   memvec_to_hexstr<MemoryVector<byte> >();
+
+   python::class_<X509_Certificate>
+      ("X509_Certificate", python::init<std::string>())
+      .def(python::self == python::self)
+      .def(python::self != python::self)
+      .add_property("version", &X509_Certificate::x509_version)
+      .add_property("is_CA", &X509_Certificate::is_CA_cert)
+      .add_property("self_signed", &X509_Certificate::is_self_signed)
+      .add_property("pathlimit", &X509_Certificate::path_limit)
+      .add_property("as_pem", &X509_Object::PEM_encode)
+      .def("start_time", &X509_Certificate::start_time)
+      .def("end_time", &X509_Certificate::end_time)
+      .def("subject_info", &X509_Certificate::subject_info)
+      .def("issuer_info", &X509_Certificate::issuer_info)
+      .def("ex_constraints", &X509_Certificate::ex_constraints)
+      .def("policies", &X509_Certificate::policies)
+      .def("subject_key_id", &X509_Certificate::subject_key_id)
+      .def("authority_key_id", &X509_Certificate::authority_key_id);
+
+   python::class_<X509_CRL>
+      ("X509_CRL", python::init<std::string>())
+      .add_property("as_pem", &X509_Object::PEM_encode);
+
+   python::enum_<X509_Code>("verify_result")
+      .value("verified", VERIFIED)
+      .value("unknown_x509_error", UNKNOWN_X509_ERROR)
+      .value("cannot_establish_trust", CANNOT_ESTABLISH_TRUST)
+      .value("cert_chain_too_long", CERT_CHAIN_TOO_LONG)
+      .value("signature_error", SIGNATURE_ERROR)
+      .value("policy_error", POLICY_ERROR)
+      .value("invalid_usage", INVALID_USAGE)
+      .value("cert_format_error", CERT_FORMAT_ERROR)
+      .value("cert_issuer_not_found", CERT_ISSUER_NOT_FOUND)
+      .value("cert_not_yet_valid", CERT_NOT_YET_VALID)
+      .value("cert_has_expired", CERT_HAS_EXPIRED)
+      .value("cert_is_revoked", CERT_IS_REVOKED)
+      .value("crl_format_error", CRL_FORMAT_ERROR)
+      .value("crl_issuer_not_found", CRL_ISSUER_NOT_FOUND)
+      .value("crl_not_yet_valid", CRL_NOT_YET_VALID)
+      .value("crl_has_expired", CRL_HAS_EXPIRED)
+      .value("ca_cert_cannot_sign", CA_CERT_CANNOT_SIGN)
+      .value("ca_cert_not_for_cert_issuer", CA_CERT_NOT_FOR_CERT_ISSUER)
+      .value("ca_cert_not_for_crl_issuer", CA_CERT_NOT_FOR_CRL_ISSUER);
+
+   python::enum_<X509_Store::Cert_Usage>("cert_usage")
+      .value("any", X509_Store::ANY)
+      .value("tls_server", X509_Store::TLS_SERVER)
+      .value("tls_client", X509_Store::TLS_CLIENT)
+      .value("code_signing", X509_Store::CODE_SIGNING)
+      .value("email_protection", X509_Store::EMAIL_PROTECTION)
+      .value("time_stamping", X509_Store::TIME_STAMPING)
+      .value("crl_signing", X509_Store::CRL_SIGNING);
+
+      {
+      python::scope in_class = 
+         python::class_<X509_Store>("X509_Store")
+         .def("add_cert", &X509_Store::add_cert, add_cert_ols())
+         .def("validate", &X509_Store::validate_cert, validate_cert_ols())
+         .def("get_certs", &X509_Store::get_certs)
+         .def("add_crl", &X509_Store::add_crl);
+
+      python::class_<X509_Store_Search_Wrap, boost::noncopyable>
+              ("Search_Func")
+         .def("match", python::pure_virtual(&X509_Store::Search_Func::match));
+      }
+   }