1 /* 2 * Copyright 2014 The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 17 #include <keymaster/km_openssl/rsa_key.h> 18 19 #include <keymaster/keymaster_context.h> 20 #include <keymaster/km_openssl/openssl_err.h> 21 #include <keymaster/km_openssl/openssl_utils.h> 22 #include <keymaster/km_openssl/rsa_operation.h> 23 24 namespace keymaster { 25 26 bool RsaKey::EvpToInternal(const EVP_PKEY* pkey) { 27 rsa_key_.reset(EVP_PKEY_get1_RSA(const_cast<EVP_PKEY*>(pkey))); 28 return rsa_key_.get() != NULL; 29 } 30 31 bool RsaKey::InternalToEvp(EVP_PKEY* pkey) const { 32 return EVP_PKEY_set1_RSA(pkey, rsa_key_.get()) == 1; 33 } 34 35 bool RsaKey::SupportedMode(keymaster_purpose_t purpose, keymaster_padding_t padding) { 36 switch (purpose) { 37 case KM_PURPOSE_SIGN: 38 case KM_PURPOSE_VERIFY: 39 return padding == KM_PAD_NONE || padding == KM_PAD_RSA_PSS || 40 padding == KM_PAD_RSA_PKCS1_1_5_SIGN; 41 42 case KM_PURPOSE_ENCRYPT: 43 case KM_PURPOSE_DECRYPT: 44 case KM_PURPOSE_WRAP: 45 return padding == KM_PAD_RSA_OAEP || padding == KM_PAD_RSA_PKCS1_1_5_ENCRYPT; 46 47 case KM_PURPOSE_DERIVE_KEY: 48 return false; 49 }; 50 return false; 51 } 52 53 bool RsaKey::SupportedMode(keymaster_purpose_t purpose, keymaster_digest_t digest) { 54 switch (purpose) { 55 case KM_PURPOSE_SIGN: 56 case KM_PURPOSE_VERIFY: 57 return digest == KM_DIGEST_NONE || digest == KM_DIGEST_SHA_2_256; 58 59 case KM_PURPOSE_ENCRYPT: 60 case KM_PURPOSE_DECRYPT: 61 case KM_PURPOSE_WRAP: 62 /* Don't care */ 63 break; 64 65 case KM_PURPOSE_DERIVE_KEY: 66 return false; 67 }; 68 return true; 69 } 70 71 } // namespace keymaster 72
