Home | History | Annotate | Download | only in keymaster 
      1 /*
      2  * Copyright 2015 The Android Open Source Project
      3  *
      4  * Licensed under the Apache License, Version 2.0 (the "License");
      5  * you may not use this file except in compliance with the License.
      6  * You may obtain a copy of the License at
      7  *
      8  *      http://www.apache.org/licenses/LICENSE-2.0
      9  *
     10  * Unless required by applicable law or agreed to in writing, software
     11  * distributed under the License is distributed on an "AS IS" BASIS,
     12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     13  * See the License for the specific language governing permissions and
     14  * limitations under the License.
     15  */
     16 
     17 #ifndef SYSTEM_KEYMASTER_EC_KEYMASTER1_KEY_H_
     18 #define SYSTEM_KEYMASTER_EC_KEYMASTER1_KEY_H_
     19 
     20 #include <openssl/ecdsa.h>
     21 
     22 #include <hardware/keymaster1.h>
     23 #include <keymaster/android_keymaster_utils.h>
     24 #include <keymaster/logger.h>
     25 #include <keymaster/ec_key_factory.h>
     26 #include <keymaster/soft_keymaster_context.h>
     27 
     28 #include "ec_key.h"
     29 #include "keymaster1_engine.h"
     30 
     31 namespace keymaster {
     32 
     33 class SoftKeymasterContext;
     34 
     35 /**
     36  * EcdsaKeymaster1KeyFactory is a KeyFactory that creates and loads keys which are actually backed
     37  * by a hardware keymaster1 module, but which does not support all keymaster1 digests.  During
     38  * generation or import any unsupported digests in the key description are silently replaced with
     39  * KM_DIGEST_NONE.
     40  */
     41 class EcdsaKeymaster1KeyFactory : public EcKeyFactory {
     42   public:
     43     EcdsaKeymaster1KeyFactory(const SoftKeymasterContext* context, const Keymaster1Engine* engine);
     44 
     45     keymaster_error_t GenerateKey(const AuthorizationSet& key_description,
     46                                   KeymasterKeyBlob* key_blob, AuthorizationSet* hw_enforced,
     47                                   AuthorizationSet* sw_enforced) const override;
     48 
     49     keymaster_error_t ImportKey(const AuthorizationSet& key_description,
     50                                 keymaster_key_format_t input_key_material_format,
     51                                 const KeymasterKeyBlob& input_key_material,
     52                                 KeymasterKeyBlob* output_key_blob, AuthorizationSet* hw_enforced,
     53                                 AuthorizationSet* sw_enforced) const override;
     54 
     55     keymaster_error_t LoadKey(const KeymasterKeyBlob& key_material,
     56                               const AuthorizationSet& additional_params,
     57                               const AuthorizationSet& hw_enforced,
     58                               const AuthorizationSet& sw_enforced,
     59                               UniquePtr<Key>* key) const override;
     60 
     61     OperationFactory* GetOperationFactory(keymaster_purpose_t purpose) const override;
     62 
     63   private:
     64     const Keymaster1Engine* engine_;
     65 
     66     std::unique_ptr<OperationFactory> sign_factory_;
     67     std::unique_ptr<OperationFactory> verify_factory_;
     68 };
     69 
     70 class EcdsaKeymaster1Key : public EcKey {
     71   public:
     72     EcdsaKeymaster1Key(EC_KEY* ecdsa_key, const AuthorizationSet& hw_enforced,
     73                        const AuthorizationSet& sw_enforced, keymaster_error_t* error)
     74         : EcKey(ecdsa_key, hw_enforced, sw_enforced, error) {}
     75 };
     76 
     77 }  // namespace keymaster
     78 
     79 #endif  // SYSTEM_KEYMASTER_ECDSA_KEYMASTER1_KEY_H_
     80