You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
139 lines
5.5 KiB
139 lines
5.5 KiB
/*
|
|
**
|
|
** Copyright 2017, The Android Open Source Project
|
|
**
|
|
** Licensed under the Apache License, Version 2.0 (the "License");
|
|
** you may not use this file except in compliance with the License.
|
|
** You may obtain a copy of the License at
|
|
**
|
|
** http://www.apache.org/licenses/LICENSE-2.0
|
|
**
|
|
** Unless required by applicable law or agreed to in writing, software
|
|
** distributed under the License is distributed on an "AS IS" BASIS,
|
|
** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
** See the License for the specific language governing permissions and
|
|
** limitations under the License.
|
|
*/
|
|
|
|
#ifndef SYSTEM_KEYMASTER_KEYMASTER_PASSTHROUGH_OPERATION_H_
|
|
#define SYSTEM_KEYMASTER_KEYMASTER_PASSTHROUGH_OPERATION_H_
|
|
|
|
#include <hardware/keymaster1.h>
|
|
#include <hardware/keymaster2.h>
|
|
|
|
#include <keymaster/legacy_support/keymaster_passthrough_key.h>
|
|
#include <keymaster/operation.h>
|
|
|
|
namespace keymaster {
|
|
|
|
class AuthorizationSet;
|
|
class Key;
|
|
class Operation;
|
|
|
|
/**
|
|
* Template implementation for KM1 and KM2 operations
|
|
*/
|
|
template <typename KeymasterDeviceType> class KeymasterPassthroughOperation : public Operation {
|
|
public:
|
|
explicit KeymasterPassthroughOperation(keymaster_purpose_t purpose,
|
|
const KeymasterDeviceType* km_device, Key&& key)
|
|
: Operation(purpose, key.hw_enforced_move(), key.sw_enforced_move()),
|
|
key_blob_(key.key_material_move()), km_device_(km_device) {
|
|
operation_handle_ = 0;
|
|
}
|
|
virtual ~KeymasterPassthroughOperation() {}
|
|
|
|
keymaster_error_t Begin(const AuthorizationSet& input_params,
|
|
AuthorizationSet* output_params) override {
|
|
keymaster_key_param_set_t out_params = {};
|
|
keymaster_error_t rc;
|
|
rc = km_device_->begin(km_device_, purpose(), &key_blob_, &input_params, &out_params,
|
|
&operation_handle_);
|
|
if (rc == KM_ERROR_OK && output_params) output_params->Reinitialize(out_params);
|
|
keymaster_free_param_set(&out_params);
|
|
return rc;
|
|
}
|
|
keymaster_error_t Update(const AuthorizationSet& input_params, const Buffer& input,
|
|
AuthorizationSet* output_params, Buffer* output,
|
|
size_t* input_consumed) override {
|
|
keymaster_key_param_set_t out_params = {};
|
|
keymaster_blob_t in{input.peek_read(), input.available_read()};
|
|
keymaster_blob_t out = {};
|
|
keymaster_error_t rc;
|
|
rc = km_device_->update(km_device_, operation_handle_, &input_params, &in, input_consumed,
|
|
&out_params, &out);
|
|
if (rc == KM_ERROR_OK) {
|
|
if (output) output->Reinitialize(out.data, out.data_length);
|
|
if (output_params) output_params->Reinitialize(out_params);
|
|
}
|
|
keymaster_free_param_set(&out_params);
|
|
free(const_cast<uint8_t*>(out.data));
|
|
return rc;
|
|
}
|
|
keymaster_error_t Finish(const AuthorizationSet& input_params, const Buffer& input,
|
|
const Buffer& signature, AuthorizationSet* output_params,
|
|
Buffer* output) override;
|
|
keymaster_error_t Abort() { return km_device_->abort(km_device_, operation_handle_); }
|
|
|
|
private:
|
|
KeymasterKeyBlob key_blob_;
|
|
const KeymasterDeviceType* km_device_;
|
|
};
|
|
|
|
template <>
|
|
keymaster_error_t KeymasterPassthroughOperation<keymaster1_device_t>::Finish(
|
|
const AuthorizationSet& input_params, const Buffer& input, const Buffer& signature,
|
|
AuthorizationSet* output_params, Buffer* output);
|
|
template <>
|
|
keymaster_error_t KeymasterPassthroughOperation<keymaster2_device_t>::Finish(
|
|
const AuthorizationSet& input_params, const Buffer& input, const Buffer& signature,
|
|
AuthorizationSet* output_params, Buffer* output);
|
|
|
|
template <typename KeymasterDeviceType>
|
|
class KeymasterPassthroughOperationFactory : public OperationFactory {
|
|
public:
|
|
KeymasterPassthroughOperationFactory(keymaster_algorithm_t algorithm,
|
|
keymaster_purpose_t purpose,
|
|
const KeymasterDeviceType* km_device)
|
|
: key_type_(algorithm, purpose), km_device_(km_device) {}
|
|
virtual ~KeymasterPassthroughOperationFactory() {}
|
|
|
|
KeyType registry_key() const override { return key_type_; }
|
|
|
|
// Factory methods
|
|
OperationPtr CreateOperation(Key&& key, const AuthorizationSet& /*begin_params*/,
|
|
keymaster_error_t* error) override {
|
|
if (!error) return nullptr;
|
|
*error = KM_ERROR_OK;
|
|
OperationPtr op(new (std::nothrow) KeymasterPassthroughOperation<KeymasterDeviceType>(
|
|
key_type_.purpose, km_device_, std::move(key)));
|
|
if (!op) {
|
|
*error = KM_ERROR_MEMORY_ALLOCATION_FAILED;
|
|
}
|
|
return op;
|
|
}
|
|
|
|
// Informational methods. The returned arrays reference static memory and must not be
|
|
// deallocated or modified.
|
|
const keymaster_padding_t* SupportedPaddingModes(size_t* padding_count) const override {
|
|
*padding_count = 0;
|
|
return nullptr;
|
|
}
|
|
const keymaster_block_mode_t* SupportedBlockModes(size_t* block_mode_count) const override {
|
|
*block_mode_count = 0;
|
|
return nullptr;
|
|
}
|
|
const keymaster_digest_t* SupportedDigests(size_t* digest_count) const override {
|
|
*digest_count = 0;
|
|
return nullptr;
|
|
}
|
|
|
|
private:
|
|
KeyType key_type_;
|
|
const KeymasterDeviceType* km_device_;
|
|
};
|
|
|
|
} // namespace keymaster
|
|
|
|
#endif // SYSTEM_KEYMASTER_KEYMASTER_PASSTHROUGH_OPERATION_H_
|