1 /* 2 * Copyright (C) 2008 The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 17 #ifndef _RECOVERY_VERIFIER_H 18 #define _RECOVERY_VERIFIER_H 19 20 #include <memory> 21 #include <vector> 22 23 #include <openssl/ec_key.h> 24 #include <openssl/rsa.h> 25 #include <openssl/sha.h> 26 27 struct RSADeleter { 28 void operator()(RSA* rsa) { 29 RSA_free(rsa); 30 } 31 }; 32 33 struct ECKEYDeleter { 34 void operator()(EC_KEY* ec_key) { 35 EC_KEY_free(ec_key); 36 } 37 }; 38 39 struct Certificate { 40 typedef enum { 41 KEY_TYPE_RSA, 42 KEY_TYPE_EC, 43 } KeyType; 44 45 Certificate(int hash_len_, 46 KeyType key_type_, 47 std::unique_ptr<RSA, RSADeleter>&& rsa_, 48 std::unique_ptr<EC_KEY, ECKEYDeleter>&& ec_) 49 : hash_len(hash_len_), 50 key_type(key_type_), 51 rsa(std::move(rsa_)), 52 ec(std::move(ec_)) {} 53 54 // SHA_DIGEST_LENGTH (SHA-1) or SHA256_DIGEST_LENGTH (SHA-256) 55 int hash_len; 56 KeyType key_type; 57 std::unique_ptr<RSA, RSADeleter> rsa; 58 std::unique_ptr<EC_KEY, ECKEYDeleter> ec; 59 }; 60 61 /* addr and length define a an update package file that has been 62 * loaded (or mmap'ed, or whatever) into memory. Verify that the file 63 * is signed and the signature matches one of the given keys. Return 64 * one of the constants below. 65 */ 66 int verify_file(unsigned char* addr, size_t length, 67 const std::vector<Certificate>& keys); 68 69 bool load_keys(const char* filename, std::vector<Certificate>& certs); 70 71 #define VERIFY_SUCCESS 0 72 #define VERIFY_FAILURE 1 73 74 #endif /* _RECOVERY_VERIFIER_H */ 75
