1 /*
2 * Copyright (C) 2016 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17 #define LOG_TAG "keystore"
18
19 #include "keystore_utils.h"
20
21 #include <errno.h>
22 #include <string.h>
23 #include <unistd.h>
24
25 #include <cutils/log.h>
26 #include <private/android_filesystem_config.h>
27
28 #include <keymaster/android_keymaster_utils.h>
29 #include <keystore/authorization_set.h>
30 #include <keystore/keystore_client.h>
31 #include <keystore/IKeystoreService.h>
32
readFully(int fd,uint8_t * data,size_t size)33 size_t readFully(int fd, uint8_t* data, size_t size) {
34 size_t remaining = size;
35 while (remaining > 0) {
36 ssize_t n = TEMP_FAILURE_RETRY(read(fd, data, remaining));
37 if (n <= 0) {
38 return size - remaining;
39 }
40 data += n;
41 remaining -= n;
42 }
43 return size;
44 }
45
writeFully(int fd,uint8_t * data,size_t size)46 size_t writeFully(int fd, uint8_t* data, size_t size) {
47 size_t remaining = size;
48 while (remaining > 0) {
49 ssize_t n = TEMP_FAILURE_RETRY(write(fd, data, remaining));
50 if (n < 0) {
51 ALOGW("write failed: %s", strerror(errno));
52 return size - remaining;
53 }
54 data += n;
55 remaining -= n;
56 }
57 if (TEMP_FAILURE_RETRY(fsync(fd)) == -1) {
58 ALOGW("fsync failed: %s", strerror(errno));
59 return -1;
60 }
61 return size;
62 }
63
add_legacy_key_authorizations(int keyType,keystore::AuthorizationSet * params)64 void add_legacy_key_authorizations(int keyType, keystore::AuthorizationSet* params) {
65 using namespace keystore;
66 params->push_back(TAG_PURPOSE, KeyPurpose::SIGN);
67 params->push_back(TAG_PURPOSE, KeyPurpose::VERIFY);
68 params->push_back(TAG_PURPOSE, KeyPurpose::ENCRYPT);
69 params->push_back(TAG_PURPOSE, KeyPurpose::DECRYPT);
70 params->push_back(TAG_PADDING, PaddingMode::NONE);
71 if (keyType == EVP_PKEY_RSA) {
72 params->push_back(TAG_PADDING, PaddingMode::RSA_PKCS1_1_5_SIGN);
73 params->push_back(TAG_PADDING, PaddingMode::RSA_PKCS1_1_5_ENCRYPT);
74 params->push_back(TAG_PADDING, PaddingMode::RSA_PSS);
75 params->push_back(TAG_PADDING, PaddingMode::RSA_OAEP);
76 }
77 params->push_back(TAG_DIGEST, Digest::NONE);
78 params->push_back(TAG_DIGEST, Digest::MD5);
79 params->push_back(TAG_DIGEST, Digest::SHA1);
80 params->push_back(TAG_DIGEST, Digest::SHA_2_224);
81 params->push_back(TAG_DIGEST, Digest::SHA_2_256);
82 params->push_back(TAG_DIGEST, Digest::SHA_2_384);
83 params->push_back(TAG_DIGEST, Digest::SHA_2_512);
84 params->push_back(TAG_ALL_USERS);
85 params->push_back(TAG_NO_AUTH_REQUIRED);
86 params->push_back(TAG_ORIGINATION_EXPIRE_DATETIME, LLONG_MAX);
87 params->push_back(TAG_USAGE_EXPIRE_DATETIME, LLONG_MAX);
88 params->push_back(TAG_ACTIVE_DATETIME, 0);
89 }
90
get_app_id(uid_t uid)91 uid_t get_app_id(uid_t uid) {
92 return uid % AID_USER;
93 }
94
get_user_id(uid_t uid)95 uid_t get_user_id(uid_t uid) {
96 return uid / AID_USER;
97 }
98