1 /*
2  * Copyright 2014 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #include <keymaster/km_openssl/rsa_key.h>
18 
19 #include <keymaster/keymaster_context.h>
20 #include <keymaster/km_openssl/openssl_err.h>
21 #include <keymaster/km_openssl/openssl_utils.h>
22 #include <keymaster/km_openssl/rsa_operation.h>
23 
24 namespace keymaster {
25 
EvpToInternal(const EVP_PKEY * pkey)26 bool RsaKey::EvpToInternal(const EVP_PKEY* pkey) {
27     rsa_key_.reset(EVP_PKEY_get1_RSA(const_cast<EVP_PKEY*>(pkey)));
28     return rsa_key_.get() != nullptr;
29 }
30 
InternalToEvp(EVP_PKEY * pkey) const31 bool RsaKey::InternalToEvp(EVP_PKEY* pkey) const {
32     return EVP_PKEY_set1_RSA(pkey, rsa_key_.get()) == 1;
33 }
34 
SupportedMode(keymaster_purpose_t purpose,keymaster_padding_t padding)35 bool RsaKey::SupportedMode(keymaster_purpose_t purpose, keymaster_padding_t padding) {
36     switch (purpose) {
37     case KM_PURPOSE_ATTEST_KEY:
38         return true;
39 
40     case KM_PURPOSE_SIGN:
41     case KM_PURPOSE_VERIFY:
42         return padding == KM_PAD_NONE || padding == KM_PAD_RSA_PSS ||
43                padding == KM_PAD_RSA_PKCS1_1_5_SIGN;
44 
45     case KM_PURPOSE_ENCRYPT:
46     case KM_PURPOSE_DECRYPT:
47     case KM_PURPOSE_WRAP:
48         return padding == KM_PAD_RSA_OAEP || padding == KM_PAD_RSA_PKCS1_1_5_ENCRYPT;
49 
50     case KM_PURPOSE_DERIVE_KEY:
51     case KM_PURPOSE_AGREE_KEY:
52         return false;
53     };
54     return false;
55 }
56 
SupportedMode(keymaster_purpose_t purpose,keymaster_digest_t digest)57 bool RsaKey::SupportedMode(keymaster_purpose_t purpose, keymaster_digest_t digest) {
58     switch (purpose) {
59     case KM_PURPOSE_ATTEST_KEY:
60         return true;
61 
62     case KM_PURPOSE_SIGN:
63     case KM_PURPOSE_VERIFY:
64         return digest == KM_DIGEST_NONE || digest == KM_DIGEST_SHA_2_256;
65 
66     case KM_PURPOSE_ENCRYPT:
67     case KM_PURPOSE_DECRYPT:
68     case KM_PURPOSE_WRAP:
69         /* Don't care */
70         break;
71 
72     case KM_PURPOSE_DERIVE_KEY:
73     case KM_PURPOSE_AGREE_KEY:
74         return false;
75     };
76     return true;
77 }
78 
79 }  // namespace keymaster
80