1 /*
2  * Copyright (C) 2008 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #ifndef _RECOVERY_VERIFIER_H
18 #define _RECOVERY_VERIFIER_H
19 
20 #include <functional>
21 #include <memory>
22 #include <vector>
23 
24 #include <openssl/ec_key.h>
25 #include <openssl/rsa.h>
26 #include <openssl/sha.h>
27 
28 struct RSADeleter {
operatorRSADeleter29   void operator()(RSA* rsa) const {
30     RSA_free(rsa);
31   }
32 };
33 
34 struct ECKEYDeleter {
operatorECKEYDeleter35   void operator()(EC_KEY* ec_key) const {
36     EC_KEY_free(ec_key);
37   }
38 };
39 
40 struct Certificate {
41     typedef enum {
42         KEY_TYPE_RSA,
43         KEY_TYPE_EC,
44     } KeyType;
45 
CertificateCertificate46     Certificate(int hash_len_,
47                 KeyType key_type_,
48                 std::unique_ptr<RSA, RSADeleter>&& rsa_,
49                 std::unique_ptr<EC_KEY, ECKEYDeleter>&& ec_)
50         : hash_len(hash_len_),
51           key_type(key_type_),
52           rsa(std::move(rsa_)),
53           ec(std::move(ec_)) {}
54 
55     // SHA_DIGEST_LENGTH (SHA-1) or SHA256_DIGEST_LENGTH (SHA-256)
56     int hash_len;
57     KeyType key_type;
58     std::unique_ptr<RSA, RSADeleter> rsa;
59     std::unique_ptr<EC_KEY, ECKEYDeleter> ec;
60 };
61 
62 /*
63  * 'addr' and 'length' define an update package file that has been loaded (or mmap'ed, or
64  * whatever) into memory. Verifies that the file is signed and the signature matches one of the
65  * given keys. It optionally accepts a callback function for posting the progress to. Returns one
66  * of the constants of VERIFY_SUCCESS and VERIFY_FAILURE.
67  */
68 int verify_file(const unsigned char* addr, size_t length, const std::vector<Certificate>& keys,
69                 const std::function<void(float)>& set_progress = nullptr);
70 
71 bool load_keys(const char* filename, std::vector<Certificate>& certs);
72 
73 #define VERIFY_SUCCESS        0
74 #define VERIFY_FAILURE        1
75 
76 #endif  /* _RECOVERY_VERIFIER_H */
77