Home | History | Annotate | Download | only in recovery 
      1 /*
      2  * Copyright (C) 2008 The Android Open Source Project
      3  *
      4  * Licensed under the Apache License, Version 2.0 (the "License");
      5  * you may not use this file except in compliance with the License.
      6  * You may obtain a copy of the License at
      7  *
      8  *      http://www.apache.org/licenses/LICENSE-2.0
      9  *
     10  * Unless required by applicable law or agreed to in writing, software
     11  * distributed under the License is distributed on an "AS IS" BASIS,
     12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     13  * See the License for the specific language governing permissions and
     14  * limitations under the License.
     15  */
     16 
     17 #ifndef _RECOVERY_VERIFIER_H
     18 #define _RECOVERY_VERIFIER_H
     19 
     20 #include <functional>
     21 #include <memory>
     22 #include <vector>
     23 
     24 #include <openssl/ec_key.h>
     25 #include <openssl/rsa.h>
     26 #include <openssl/sha.h>
     27 
     28 struct RSADeleter {
     29   void operator()(RSA* rsa) const {
     30     RSA_free(rsa);
     31   }
     32 };
     33 
     34 struct ECKEYDeleter {
     35   void operator()(EC_KEY* ec_key) const {
     36     EC_KEY_free(ec_key);
     37   }
     38 };
     39 
     40 struct Certificate {
     41     typedef enum {
     42         KEY_TYPE_RSA,
     43         KEY_TYPE_EC,
     44     } KeyType;
     45 
     46     Certificate(int hash_len_,
     47                 KeyType key_type_,
     48                 std::unique_ptr<RSA, RSADeleter>&& rsa_,
     49                 std::unique_ptr<EC_KEY, ECKEYDeleter>&& ec_)
     50         : hash_len(hash_len_),
     51           key_type(key_type_),
     52           rsa(std::move(rsa_)),
     53           ec(std::move(ec_)) {}
     54 
     55     // SHA_DIGEST_LENGTH (SHA-1) or SHA256_DIGEST_LENGTH (SHA-256)
     56     int hash_len;
     57     KeyType key_type;
     58     std::unique_ptr<RSA, RSADeleter> rsa;
     59     std::unique_ptr<EC_KEY, ECKEYDeleter> ec;
     60 };
     61 
     62 /*
     63  * 'addr' and 'length' define an update package file that has been loaded (or mmap'ed, or
     64  * whatever) into memory. Verifies that the file is signed and the signature matches one of the
     65  * given keys. It optionally accepts a callback function for posting the progress to. Returns one
     66  * of the constants of VERIFY_SUCCESS and VERIFY_FAILURE.
     67  */
     68 int verify_file(const unsigned char* addr, size_t length, const std::vector<Certificate>& keys,
     69                 const std::function<void(float)>& set_progress = nullptr);
     70 
     71 bool load_keys(const char* filename, std::vector<Certificate>& certs);
     72 
     73 #define VERIFY_SUCCESS        0
     74 #define VERIFY_FAILURE        1
     75 
     76 #endif  /* _RECOVERY_VERIFIER_H */
     77