UDIF: Universal Digital Identification Framework 1.1.0.0a (A1)
A quantum-secure cryptographic identification
policy.h
Go to the documentation of this file.
1/* 2025-2026 Quantum Resistant Cryptographic Solutions Corporation
2 * All Rights Reserved.
3 *
4 * NOTICE:
5 * This software and all accompanying materials are the exclusive property of
6 * Quantum Resistant Cryptographic Solutions Corporation (QRCS). The intellectual
7 * and technical concepts contained herein are proprietary to QRCS and are
8 * protected under applicable Canadian, U.S., and international copyright,
9 * patent, and trade secret laws.
10 *
11 * CRYPTOGRAPHIC ALGORITHMS AND IMPLEMENTATIONS:
12 * - This software includes implementations of cryptographic primitives and
13 * algorithms that are standardized or in the public domain, such as AES
14 * and SHA-3, which are not proprietary to QRCS.
15 * - This software also includes cryptographic primitives, constructions, and
16 * algorithms designed by QRCS, including but not limited to RCS, SCB, CSX, QMAC, and
17 * related components, which are proprietary to QRCS.
18 * - All source code, implementations, protocol compositions, optimizations,
19 * parameter selections, and engineering work contained in this software are
20 * original works of QRCS and are protected under this license.
21 *
22 * LICENSE AND USE RESTRICTIONS:
23 * - This software is licensed under the Quantum Resistant Cryptographic Solutions
24 * Public Research and Evaluation License (QRCS-PREL), 2025-2026.
25 * - Permission is granted solely for non-commercial evaluation, academic research,
26 * cryptographic analysis, interoperability testing, and feasibility assessment.
27 * - Commercial use, production deployment, commercial redistribution, or
28 * integration into products or services is strictly prohibited without a
29 * separate written license agreement executed with QRCS.
30 * - Licensing and authorized distribution are solely at the discretion of QRCS.
31 *
32 * EXPERIMENTAL CRYPTOGRAPHY NOTICE:
33 * Portions of this software may include experimental, novel, or evolving
34 * cryptographic designs. Use of this software is entirely at the user's risk.
35 *
36 * DISCLAIMER:
37 * THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
38 * IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS
39 * FOR A PARTICULAR PURPOSE, SECURITY, OR NON-INFRINGEMENT. QRCS DISCLAIMS ALL
40 * LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES
41 * ARISING FROM THE USE OR MISUSE OF THIS SOFTWARE.
42 *
43 * FULL LICENSE:
44 * This software is subject to the Quantum Resistant Cryptographic Solutions
45 * Public Research and Evaluation License (QRCS-PREL), 2025-2026. The complete license terms
46 * are provided in the accompanying LICENSE file or at https://www.qrcscorp.ca.
47 *
48 * Written by: John G. Underhill
49 * Contact: contact@qrcscorp.ca
50 */
51
52#ifndef UDIF_POLICY_H
53#define UDIF_POLICY_H
54
55#include "udif.h"
56#include "capability.h"
57#include "certificate.h"
58#include "query.h"
59
64
73UDIF_EXPORT_API bool udif_policy_query_verb(uint8_t querytype, uint32_t* verb);
74
83UDIF_EXPORT_API bool udif_policy_certificate_allows(const udif_certificate* certificate, uint32_t verb);
84
102 uint32_t verb, uint32_t scope, uint64_t ctime);
103
116 const udif_capability* capability, uint32_t scope, uint64_t ctime);
117
118#endif
UDIF certificate operations.
UDIF capability token management.
UDIF_EXPORT_API bool udif_policy_certificate_allows(const udif_certificate *certificate, uint32_t verb)
Check whether a certificate embeds a required capability verb.
Definition policy.c:51
UDIF_EXPORT_API udif_policy_decision udif_policy_authorize(const udif_certificate *caller, const udif_capability *capability, uint32_t verb, uint32_t scope, uint64_t ctime)
Authorize an operation against certificate and token permissions.
Definition policy.c:67
UDIF_EXPORT_API udif_policy_decision udif_policy_authorize_query(const udif_query *query, const udif_certificate *caller, const udif_capability *capability, uint32_t scope, uint64_t ctime)
Authorize a query using its capability reference.
Definition policy.c:100
UDIF_EXPORT_API bool udif_policy_query_verb(uint8_t querytype, uint32_t *verb)
Map a query type to the required capability verb.
Definition policy.c:4
UDIF query operations.
Capability token.
Definition capability.h:574
UDIF entity certificate.
Definition certificate.h:341
Query request.
Definition query.h:171
UDIF Common Definitions and Protocol Configuration.
udif_policy_decision
Policy evaluation outcome.
Definition udif.h:1351
#define UDIF_EXPORT_API
The api export prefix.
Definition udifcommon.h:101