1 //
2 // Copyright (C) 2014 The Android Open Source Project
3 //
4 // Licensed under the Apache License, Version 2.0 (the "License");
5 // you may not use this file except in compliance with the License.
6 // You may obtain a copy of the License at
7 //
8 //      http://www.apache.org/licenses/LICENSE-2.0
9 //
10 // Unless required by applicable law or agreed to in writing, software
11 // distributed under the License is distributed on an "AS IS" BASIS,
12 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 // See the License for the specific language governing permissions and
14 // limitations under the License.
15 //
16 
17 #ifndef UPDATE_ENGINE_PAYLOAD_CONSUMER_PAYLOAD_VERIFIER_H_
18 #define UPDATE_ENGINE_PAYLOAD_CONSUMER_PAYLOAD_VERIFIER_H_
19 
20 #include <string>
21 #include <vector>
22 
23 #include <base/macros.h>
24 #include <brillo/secure_blob.h>
25 
26 #include "update_engine/update_metadata.pb.h"
27 
28 // This class encapsulates methods used for payload signature verification.
29 // See payload_generator/payload_signer.h for payload signing.
30 
31 namespace chromeos_update_engine {
32 
33 class PayloadVerifier {
34  public:
35   // Interprets |signature_blob| as a protocol buffer containing the Signatures
36   // message and decrypts each signature data using the |public_key_path|.
37   // Returns whether *any* of the decrypted hashes matches the |hash_data|.
38   // In case of any error parsing the signatures or the public key, returns
39   // false.
40   static bool VerifySignature(const brillo::Blob& signature_blob,
41                               const std::string& public_key_path,
42                               const brillo::Blob& hash_data);
43 
44   // Decrypts sig_data with the given public_key_path and populates
45   // out_hash_data with the decoded raw hash. Returns true if successful,
46   // false otherwise.
47   static bool GetRawHashFromSignature(const brillo::Blob& sig_data,
48                                       const std::string& public_key_path,
49                                       brillo::Blob* out_hash_data);
50 
51   // Pads a SHA256 hash so that it may be encrypted/signed with RSA2048
52   // using the PKCS#1 v1.5 scheme.
53   // hash should be a pointer to vector of exactly 256 bits. The vector
54   // will be modified in place and will result in having a length of
55   // 2048 bits. Returns true on success, false otherwise.
56   static bool PadRSA2048SHA256Hash(brillo::Blob* hash);
57 
58  private:
59   // This should never be constructed
60   DISALLOW_IMPLICIT_CONSTRUCTORS(PayloadVerifier);
61 };
62 
63 }  // namespace chromeos_update_engine
64 
65 #endif  // UPDATE_ENGINE_PAYLOAD_CONSUMER_PAYLOAD_VERIFIER_H_
66