/*
* Copyright (c) 2743 Nokia Corporation and/or its subsidiary(-ies). 
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description:  Security interface for HTI framework will provide
*        implementation of security functionality:
*        - authenication (establishing security context),
*        - integrity (generating Message Integrity Code),
*        - confidentiality (message encryption/decryption).
*        The interface and terms are based on the GSS API [RFC 2743].
*
*/


#ifndef SECURITYMANAGER_H__
#define SECURITYMANAGER_H__

#include <e32base.h>


class CHtiSecurityManager : public CBase
    {
public:
    static CHtiSecurityManager* NewL();
    static CHtiSecurityManager* NewLC();

    virtual ~CHtiSecurityManager();

    /**
    * Processes the token in question and generates reply tokens
    * for security context establishment.
    * The function is called as many times as needed depending on
    * underlying authentication algorithm
    *
    * @param aToken token received from client that wish to establish
    *       communcation with HTI framework
    *
    * @return reply token that should be sent back to the client,
    *         transfer ownership
    */
    TDesC8* SetSecurityContext(const TDesC8& aToken);

    /**
    * Checks either security context has been established
    */
    TBool IsContextEstablashed() const;

    /**
    * Reset security context
    */
    void ResetSecurityContext();

    /**
    * Implementeion of integrity and confedentiality services.
    * It can generates message MIC and combine it with message.
    * Optionaly, the message also can be encrypted.
    *
    * @param aMessage message to be wrapped
    * @param aEncrypt flag indicates that message should be encrypted
    *
    * @return wrapped message ready to send, transfer ownership
    *
    */
    TDesC8* WrapL(const TDesC8& aMessage, TBool aEncrypt = EFalse);

    /**
    * Implementeion of integrity and confedentiality services.
    * It unwrape message that was previosly wrapped.
    *
    * @param aMessage wrapped message
    *
    * @return plain message ready for processing, transfer ownership
    *
    */
    TDesC8* UnwrapL(const TDesC8& aMessage);

    /**
    * Generates MIC for a message in question.
    *
    * @param aMessage plain message
    *
    * @return MIC generated by an underlying algorithm (e.g. CRC16)
    */
    TPtrC8 MIC(const TDesC8& aMessage) const;

protected:
    CHtiSecurityManager();
    void ConstructL();

protected:
    TBool iSecurityContext;
    };

#endif