File oid.h

Object Identifier (OID) values.

Defines

MBEDTLS_OID_ISO_MEMBER_BODIES
MBEDTLS_OID_ISO_IDENTIFIED_ORG
MBEDTLS_OID_ISO_CCITT_DS
MBEDTLS_OID_ISO_ITU_COUNTRY
MBEDTLS_OID_COUNTRY_US
MBEDTLS_OID_ORG_RSA_DATA_SECURITY
MBEDTLS_OID_RSA_COMPANY
MBEDTLS_OID_ORG_ANSI_X9_62
MBEDTLS_OID_ANSI_X9_62
MBEDTLS_OID_ORG_DOD
MBEDTLS_OID_ORG_OIW
MBEDTLS_OID_OIW_SECSIG
MBEDTLS_OID_OIW_SECSIG_ALG
MBEDTLS_OID_OIW_SECSIG_SHA1
MBEDTLS_OID_ORG_THAWTE
MBEDTLS_OID_THAWTE
MBEDTLS_OID_ORG_CERTICOM
MBEDTLS_OID_CERTICOM
MBEDTLS_OID_ORG_TELETRUST
MBEDTLS_OID_TELETRUST
MBEDTLS_OID_ORGANIZATION
MBEDTLS_OID_ISO_ITU_US_ORG
MBEDTLS_OID_ORG_GOV
MBEDTLS_OID_GOV
MBEDTLS_OID_ORG_NETSCAPE
MBEDTLS_OID_NETSCAPE
MBEDTLS_OID_ID_CE

id-ce OBJECT IDENTIFIER ::= {joint-iso-ccitt(2) ds(5) 29}

MBEDTLS_OID_NIST_ALG
MBEDTLS_OID_INTERNET

Private Internet Extensions { iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) }

MBEDTLS_OID_PKIX
MBEDTLS_OID_AT

id-at OBJECT IDENTIFIER ::= {joint-iso-ccitt(2) ds(5) 4}

MBEDTLS_OID_AT_CN

id-at-commonName AttributeType:= {id-at 3}

MBEDTLS_OID_AT_SUR_NAME

id-at-surName AttributeType:= {id-at 4}

MBEDTLS_OID_AT_SERIAL_NUMBER

id-at-serialNumber AttributeType:= {id-at 5}

MBEDTLS_OID_AT_COUNTRY

id-at-countryName AttributeType:= {id-at 6}

MBEDTLS_OID_AT_LOCALITY

id-at-locality AttributeType:= {id-at 7}

MBEDTLS_OID_AT_STATE

id-at-state AttributeType:= {id-at 8}

MBEDTLS_OID_AT_ORGANIZATION

id-at-organizationName AttributeType:= {id-at 10}

MBEDTLS_OID_AT_ORG_UNIT

id-at-organizationalUnitName AttributeType:= {id-at 11}

MBEDTLS_OID_AT_TITLE

id-at-title AttributeType:= {id-at 12}

MBEDTLS_OID_AT_POSTAL_ADDRESS

id-at-postalAddress AttributeType:= {id-at 16}

MBEDTLS_OID_AT_POSTAL_CODE

id-at-postalCode AttributeType:= {id-at 17}

MBEDTLS_OID_AT_GIVEN_NAME

id-at-givenName AttributeType:= {id-at 42}

MBEDTLS_OID_AT_INITIALS

id-at-initials AttributeType:= {id-at 43}

MBEDTLS_OID_AT_GENERATION_QUALIFIER

id-at-generationQualifier AttributeType:= {id-at 44}

MBEDTLS_OID_AT_UNIQUE_IDENTIFIER

id-at-uniqueIdentifier AttributeType:= {id-at 45}

MBEDTLS_OID_AT_DN_QUALIFIER

id-at-dnQualifier AttributeType:= {id-at 46}

MBEDTLS_OID_AT_PSEUDONYM

id-at-pseudonym AttributeType:= {id-at 65}

MBEDTLS_OID_UID
MBEDTLS_OID_DOMAIN_COMPONENT
MBEDTLS_OID_AUTHORITY_KEY_IDENTIFIER

id-ce-authorityKeyIdentifier OBJECT IDENTIFIER ::= { id-ce 35 }

MBEDTLS_OID_SUBJECT_KEY_IDENTIFIER

id-ce-subjectKeyIdentifier OBJECT IDENTIFIER ::= { id-ce 14 }

MBEDTLS_OID_KEY_USAGE

id-ce-keyUsage OBJECT IDENTIFIER ::= { id-ce 15 }

MBEDTLS_OID_CERTIFICATE_POLICIES

id-ce-certificatePolicies OBJECT IDENTIFIER ::= { id-ce 32 }

MBEDTLS_OID_POLICY_MAPPINGS

id-ce-policyMappings OBJECT IDENTIFIER ::= { id-ce 33 }

MBEDTLS_OID_SUBJECT_ALT_NAME

id-ce-subjectAltName OBJECT IDENTIFIER ::= { id-ce 17 }

MBEDTLS_OID_ISSUER_ALT_NAME

id-ce-issuerAltName OBJECT IDENTIFIER ::= { id-ce 18 }

MBEDTLS_OID_SUBJECT_DIRECTORY_ATTRS

id-ce-subjectDirectoryAttributes OBJECT IDENTIFIER ::= { id-ce 9 }

MBEDTLS_OID_BASIC_CONSTRAINTS

id-ce-basicConstraints OBJECT IDENTIFIER ::= { id-ce 19 }

MBEDTLS_OID_NAME_CONSTRAINTS

id-ce-nameConstraints OBJECT IDENTIFIER ::= { id-ce 30 }

MBEDTLS_OID_POLICY_CONSTRAINTS

id-ce-policyConstraints OBJECT IDENTIFIER ::= { id-ce 36 }

MBEDTLS_OID_EXTENDED_KEY_USAGE

id-ce-extKeyUsage OBJECT IDENTIFIER ::= { id-ce 37 }

MBEDTLS_OID_CRL_DISTRIBUTION_POINTS

id-ce-cRLDistributionPoints OBJECT IDENTIFIER ::= { id-ce 31 }

MBEDTLS_OID_INIHIBIT_ANYPOLICY

id-ce-inhibitAnyPolicy OBJECT IDENTIFIER ::= { id-ce 54 }

MBEDTLS_OID_FRESHEST_CRL

id-ce-freshestCRL OBJECT IDENTIFIER ::= { id-ce 46 }

MBEDTLS_OID_ANY_POLICY

anyPolicy OBJECT IDENTIFIER ::= { id-ce-certificatePolicies 0 }

MBEDTLS_OID_NS_CERT
MBEDTLS_OID_NS_CERT_TYPE
MBEDTLS_OID_NS_BASE_URL
MBEDTLS_OID_NS_REVOCATION_URL
MBEDTLS_OID_NS_CA_REVOCATION_URL
MBEDTLS_OID_NS_RENEWAL_URL
MBEDTLS_OID_NS_CA_POLICY_URL
MBEDTLS_OID_NS_SSL_SERVER_NAME
MBEDTLS_OID_NS_COMMENT
MBEDTLS_OID_NS_DATA_TYPE
MBEDTLS_OID_NS_CERT_SEQUENCE
MBEDTLS_OID_PRIVATE_KEY_USAGE_PERIOD
MBEDTLS_OID_CRL_NUMBER

id-ce-cRLNumber OBJECT IDENTIFIER ::= { id-ce 20 }

MBEDTLS_OID_ANY_EXTENDED_KEY_USAGE

anyExtendedKeyUsage OBJECT IDENTIFIER ::= { id-ce-extKeyUsage 0 }

MBEDTLS_OID_KP

id-kp OBJECT IDENTIFIER ::= { id-pkix 3 }

MBEDTLS_OID_SERVER_AUTH

id-kp-serverAuth OBJECT IDENTIFIER ::= { id-kp 1 }

MBEDTLS_OID_CLIENT_AUTH

id-kp-clientAuth OBJECT IDENTIFIER ::= { id-kp 2 }

MBEDTLS_OID_CODE_SIGNING

id-kp-codeSigning OBJECT IDENTIFIER ::= { id-kp 3 }

MBEDTLS_OID_EMAIL_PROTECTION

id-kp-emailProtection OBJECT IDENTIFIER ::= { id-kp 4 }

MBEDTLS_OID_TIME_STAMPING

id-kp-timeStamping OBJECT IDENTIFIER ::= { id-kp 8 }

MBEDTLS_OID_OCSP_SIGNING

id-kp-OCSPSigning OBJECT IDENTIFIER ::= { id-kp 9 }

MBEDTLS_OID_WISUN_FAN

Wi-SUN Alliance Field Area Network { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) WiSUN(45605) FieldAreaNetwork(1) }

MBEDTLS_OID_ON

id-on OBJECT IDENTIFIER ::= { id-pkix 8 }

MBEDTLS_OID_ON_HW_MODULE_NAME

id-on-hardwareModuleName OBJECT IDENTIFIER ::= { id-on 4 }

MBEDTLS_OID_PKCS

pkcs OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) 1 }

MBEDTLS_OID_PKCS1

pkcs-1 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 1 }

MBEDTLS_OID_PKCS5

pkcs-5 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 5 }

MBEDTLS_OID_PKCS7

pkcs-7 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 7 }

MBEDTLS_OID_PKCS9

pkcs-9 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 9 }

MBEDTLS_OID_PKCS12

pkcs-12 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 12 }

MBEDTLS_OID_PKCS1_MD5

md5WithRSAEncryption ::= { pkcs-1 4 }

MBEDTLS_OID_PKCS1_SHA1

sha1WithRSAEncryption ::= { pkcs-1 5 }

MBEDTLS_OID_PKCS1_SHA224

sha224WithRSAEncryption ::= { pkcs-1 14 }

MBEDTLS_OID_PKCS1_SHA256

sha256WithRSAEncryption ::= { pkcs-1 11 }

MBEDTLS_OID_PKCS1_SHA384

sha384WithRSAEncryption ::= { pkcs-1 12 }

MBEDTLS_OID_PKCS1_SHA512

sha512WithRSAEncryption ::= { pkcs-1 13 }

MBEDTLS_OID_RSA_SHA_OBS
MBEDTLS_OID_PKCS9_EMAIL

emailAddress AttributeType ::= { pkcs-9 1 }

MBEDTLS_OID_RSASSA_PSS

id-RSASSA-PSS ::= { pkcs-1 10 }

MBEDTLS_OID_MGF1

id-mgf1 ::= { pkcs-1 8 }

MBEDTLS_OID_DIGEST_ALG_MD5

id-mbedtls_md5 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) digestAlgorithm(2) 5 }

MBEDTLS_OID_DIGEST_ALG_SHA1

id-mbedtls_sha1 OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) oiw(14) secsig(3) algorithms(2) 26 }

MBEDTLS_OID_DIGEST_ALG_SHA224

id-sha224 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 4 }

MBEDTLS_OID_DIGEST_ALG_SHA256

id-mbedtls_sha256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 1 }

MBEDTLS_OID_DIGEST_ALG_SHA384

id-sha384 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 2 }

MBEDTLS_OID_DIGEST_ALG_SHA512

id-mbedtls_sha512 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 3 }

MBEDTLS_OID_DIGEST_ALG_RIPEMD160

id-ripemd160 OBJECT IDENTIFIER :: { iso(1) identified-organization(3) teletrust(36) algorithm(3) hashAlgorithm(2) ripemd160(1) }

MBEDTLS_OID_DIGEST_ALG_SHA3_224

id-sha3-224 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithms(4) hashalgs(2) sha3-224(7) }

MBEDTLS_OID_DIGEST_ALG_SHA3_256

id-sha3-256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithms(4) hashalgs(2) sha3-256(8) }

MBEDTLS_OID_DIGEST_ALG_SHA3_384

id-sha3-384 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithms(4) hashalgs(2) sha3-384(9) }

MBEDTLS_OID_DIGEST_ALG_SHA3_512

id-sha3-512 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithms(4) hashalgs(2) sha3-512(10) }

MBEDTLS_OID_PKCS7_DATA

Content type is Data OBJECT IDENTIFIER ::= {pkcs-7 1}

MBEDTLS_OID_PKCS7_SIGNED_DATA

Content type is Signed Data OBJECT IDENTIFIER ::= {pkcs-7 2}

MBEDTLS_OID_PKCS7_ENVELOPED_DATA

Content type is Enveloped Data OBJECT IDENTIFIER ::= {pkcs-7 3}

MBEDTLS_OID_PKCS7_SIGNED_AND_ENVELOPED_DATA

Content type is Signed and Enveloped Data OBJECT IDENTIFIER ::= {pkcs-7 4}

MBEDTLS_OID_PKCS7_DIGESTED_DATA

Content type is Digested Data OBJECT IDENTIFIER ::= {pkcs-7 5}

MBEDTLS_OID_PKCS7_ENCRYPTED_DATA

Content type is Encrypted Data OBJECT IDENTIFIER ::= {pkcs-7 6}

MBEDTLS_OID_PKCS9_CSR_EXT_REQ

extensionRequest OBJECT IDENTIFIER ::= {pkcs-9 14}

MBEDTLS_OID_ANSI_X9_62_SIG
MBEDTLS_OID_ANSI_X9_62_SIG_SHA2
MBEDTLS_OID_ECDSA_SHA1
MBEDTLS_OID_ECDSA_SHA224
MBEDTLS_OID_ECDSA_SHA256
MBEDTLS_OID_ECDSA_SHA384
MBEDTLS_OID_ECDSA_SHA512

Functions

int mbedtls_oid_get_numeric_string(char *buf, size_t size, const mbedtls_asn1_buf *oid)

Translate an ASN.1 OID into its numeric representation (e.g. “\x2A\x86\x48\x86\xF7\x0D” into “1.2.840.113549”).

Parameters:
  • buf – buffer to put representation in

  • size – size of the buffer

  • oid – OID to translate

Returns:

Length of the string written (excluding final NULL) or PSA_ERROR_BUFFER_TOO_SMALL in case of error

int mbedtls_oid_from_numeric_string(mbedtls_asn1_buf *oid, const char *oid_str, size_t size)

Translate a string containing a dotted-decimal representation of an ASN.1 OID into its encoded form (e.g. “1.2.840.113549” into “\x2A\x86\x48\x86\xF7\x0D”). On success, this function allocates oid->buf from the heap. It must be freed by the caller using mbedtls_free().

Parameters:
  • oidmbedtls_asn1_buf to populate with the DER-encoded OID

  • oid_str – string representation of the OID to parse

  • size – length of the OID string, not including any null terminator

Returns:

0 if successful

Returns:

MBEDTLS_ERR_ASN1_INVALID_DATA if oid_str does not represent a valid OID

Returns:

MBEDTLS_ERR_ASN1_ALLOC_FAILED if the function fails to allocate oid->buf