1 /*
2 * Copyright 2014 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17 #include <openssl/x509.h>
18
19 #include <keymaster/key_blob.h>
20
21 #include "asymmetric_key.h"
22 #include "openssl_utils.h"
23
24 #include "key.h"
25
26 namespace keymaster {
27
28 struct PKCS8_PRIV_KEY_INFO_Delete {
operator ()keymaster::PKCS8_PRIV_KEY_INFO_Delete29 void operator()(PKCS8_PRIV_KEY_INFO* p) const { PKCS8_PRIV_KEY_INFO_free(p); }
30 };
31
Key(const KeyBlob & blob,const Logger & logger)32 Key::Key(const KeyBlob& blob, const Logger& logger) : logger_(logger) {
33 authorizations_.push_back(blob.unenforced());
34 authorizations_.push_back(blob.enforced());
35 }
36
37 /* static */
CreateKey(const KeyBlob & blob,const Logger & logger,keymaster_error_t * error)38 Key* Key::CreateKey(const KeyBlob& blob, const Logger& logger, keymaster_error_t* error) {
39 switch (blob.algorithm()) {
40 case KM_ALGORITHM_RSA:
41 return new RsaKey(blob, logger, error);
42 case KM_ALGORITHM_DSA:
43 return new DsaKey(blob, logger, error);
44 case KM_ALGORITHM_ECDSA:
45 return new EcdsaKey(blob, logger, error);
46 default:
47 *error = KM_ERROR_UNSUPPORTED_ALGORITHM;
48 return NULL;
49 }
50 }
51
52 /* static */
GenerateKey(const AuthorizationSet & key_description,const Logger & logger,keymaster_error_t * error)53 Key* Key::GenerateKey(const AuthorizationSet& key_description, const Logger& logger,
54 keymaster_error_t* error) {
55 keymaster_algorithm_t algorithm;
56 if (!key_description.GetTagValue(TAG_ALGORITHM, &algorithm)) {
57 *error = KM_ERROR_UNSUPPORTED_ALGORITHM;
58 return NULL;
59 }
60
61 switch (algorithm) {
62 case KM_ALGORITHM_RSA:
63 return RsaKey::GenerateKey(key_description, logger, error);
64 case KM_ALGORITHM_DSA:
65 return DsaKey::GenerateKey(key_description, logger, error);
66 case KM_ALGORITHM_ECDSA:
67 return EcdsaKey::GenerateKey(key_description, logger, error);
68 default:
69 *error = KM_ERROR_UNSUPPORTED_ALGORITHM;
70 return NULL;
71 }
72 }
73
74 /* static */
ImportKey(const AuthorizationSet & key_description,keymaster_key_format_t key_format,const uint8_t * key_data,size_t key_data_length,const Logger & logger,keymaster_error_t * error)75 Key* Key::ImportKey(const AuthorizationSet& key_description, keymaster_key_format_t key_format,
76 const uint8_t* key_data, size_t key_data_length, const Logger& logger,
77 keymaster_error_t* error) {
78 *error = KM_ERROR_OK;
79
80 if (key_data == NULL || key_data_length <= 0) {
81 *error = KM_ERROR_INVALID_KEY_BLOB;
82 return NULL;
83 }
84
85 if (key_format != KM_KEY_FORMAT_PKCS8) {
86 *error = KM_ERROR_UNSUPPORTED_KEY_FORMAT;
87 return NULL;
88 }
89
90 UniquePtr<PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO_Delete> pkcs8(
91 d2i_PKCS8_PRIV_KEY_INFO(NULL, &key_data, key_data_length));
92 if (pkcs8.get() == NULL) {
93 *error = KM_ERROR_MEMORY_ALLOCATION_FAILED;
94 return NULL;
95 }
96
97 UniquePtr<EVP_PKEY, EVP_PKEY_Delete> pkey(EVP_PKCS82PKEY(pkcs8.get()));
98 if (pkey.get() == NULL) {
99 *error = KM_ERROR_INVALID_KEY_BLOB;
100 return NULL;
101 }
102
103 UniquePtr<Key> key;
104 switch (EVP_PKEY_type(pkey->type)) {
105 case EVP_PKEY_RSA:
106 return RsaKey::ImportKey(key_description, pkey.get(), logger, error);
107 case EVP_PKEY_DSA:
108 return DsaKey::ImportKey(key_description, pkey.get(), logger, error);
109 case EVP_PKEY_EC:
110 return EcdsaKey::ImportKey(key_description, pkey.get(), logger, error);
111 default:
112 *error = KM_ERROR_UNSUPPORTED_ALGORITHM;
113 return NULL;
114 }
115
116 *error = KM_ERROR_UNIMPLEMENTED;
117 return NULL;
118 }
119
120 } // namespace keymaster
121