gss_unwrap.3 (2010 09)

g
gss_unwrap(3) gss_unwrap(3)
NAME
gss_unwrap - verify a message with attached message integrity code (MIC) and decrypt message content
if necessary
SYNOPSIS
#include <gssapi.h>
OM_uint32 gss_unwrap (
OM_uint32 *minor_status,
gss_ctx_id_t context_handle,
gss_buffer_t input_message_buffer,
gss_buffer_t output_message_buffer,
int *conf_state,
gss_qop_t *qop_state)
DESCRIPTION
The gss_unwrap() routine converts a protected message to a usable form and verifies the embedded
message integrity code (MIC). The conf_state parameter indicates whether the message was encrypted.
The qop_state parameter indicates the quality of protection that was used to provide the confidentiality
and integrity services.
Input Parameters
context_handle Specifies the context on which the message arrived.
input_message_buffer Specifies the protected message.
output_message_buffer Specifies the buffer to receive the unwrapped message.
Output Parameters
conf_state Returns the requested level of confidentiality and integrity services, as follows:
Non-zero Both confidentiality and integrity services were used.
zero Only integrity services was used.
qop_state Returns the cryptographic algorithm, or quality of protection.
minor_status Returns a status code from the security mechanism.
STATUS CODES
The following status codes can be returned:
GSS_S_COMPLETE The routine was completed successfully.
GSS_S_BAD_SIG The signature was incorrect.
GSS_S_CONTEXT_EXPIRED
The context has already expired.
GSS_S_CREDENTIALS_EXPIRED
The context is recognized but the associated credentials have expired.
GSS_S_DEFECTIVE_TOKEN
The token failed consistency checks.
GSS_S_DUPLICATE_TOKEN
The token was valid and contained the correct signature but it had already
been processed.
GSS_S_FAILURE The routine failed. The context specified in the context_handle parameter was
not valid.
GSS_S_NO_CONTEXT The context identified in the context_handle parameter was not valid.
GSS_S_OLD_TOKEN The token was valid and contained the correct signature but it is too old.
GSS_S_UNSEQ_TOKEN The token was valid, and contained a correct MIC for the message, but has
been verified out of sequence; a later token has already been received.
GSS_S_GAP_TOKEN The token was valid, and contained a correct MIC for the message, but has
been verified out of sequence; an earlier expected token has not yet been
received.
HP-UX 11i Version 3: September 2010 − 1 − Hewlett-Packard Company 1