10a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden/* 20a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * Copyright 2014 The Android Open Source Project 30a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * 40a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * Licensed under the Apache License, Version 2.0 (the "License"); 50a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * you may not use this file except in compliance with the License. 60a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * You may obtain a copy of the License at 70a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * 80a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * http://www.apache.org/licenses/LICENSE-2.0 90a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * 100a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * Unless required by applicable law or agreed to in writing, software 110a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * distributed under the License is distributed on an "AS IS" BASIS, 120a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 130a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * See the License for the specific language governing permissions and 140a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * limitations under the License. 150a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden */ 160a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 170a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden#include <openssl/rsa.h> 180a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden#include <openssl/evp.h> 190a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 200a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden#include "rsa_operation.h" 210a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden#include "openssl_utils.h" 220a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 230a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willdennamespace keymaster { 240a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 250a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willdenstruct RSA_Delete { 260a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden void operator()(RSA* p) const { RSA_free(p); } 270a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden}; 280a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 290a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn WilldenRsaOperation::~RsaOperation() { 300a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if (rsa_key_ != NULL) 310a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden RSA_free(rsa_key_); 320a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} 330a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 340a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willdenkeymaster_error_t RsaOperation::Update(const Buffer& input, Buffer* /* output */) { 350a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden switch (purpose()) { 360a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden default: 370a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_UNIMPLEMENTED; 380a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden case KM_PURPOSE_SIGN: 390a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden case KM_PURPOSE_VERIFY: 400a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return StoreData(input); 410a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden } 420a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} 430a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 440a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willdenkeymaster_error_t RsaOperation::StoreData(const Buffer& input) { 450a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if (!data_.reserve(data_.available_read() + input.available_read()) || 460a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden !data_.write(input.peek_read(), input.available_read())) 470a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_MEMORY_ALLOCATION_FAILED; 480a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_OK; 490a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} 500a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 510a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willdenkeymaster_error_t RsaSignOperation::Finish(const Buffer& /* signature */, Buffer* output) { 520a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden output->Reinitialize(RSA_size(rsa_key_)); 530a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden int bytes_encrypted = RSA_private_encrypt(data_.available_read(), data_.peek_read(), 540a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden output->peek_write(), rsa_key_, RSA_NO_PADDING); 550a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if (bytes_encrypted < 0) 560a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_UNKNOWN_ERROR; 570a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden assert(bytes_encrypted == RSA_size(rsa_key_)); 580a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden output->advance_write(bytes_encrypted); 590a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_OK; 600a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} 610a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 620a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willdenkeymaster_error_t RsaVerifyOperation::Finish(const Buffer& signature, Buffer* /* output */) { 630a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 640a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if ((int)data_.available_read() != RSA_size(rsa_key_)) 650a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_INVALID_INPUT_LENGTH; 660a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if (data_.available_read() != signature.available_read()) 670a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_VERIFICATION_FAILED; 680a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 690a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden UniquePtr<uint8_t[]> decrypted_data(new uint8_t[RSA_size(rsa_key_)]); 700a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden int bytes_decrypted = RSA_public_decrypt(signature.available_read(), signature.peek_read(), 710a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden decrypted_data.get(), rsa_key_, RSA_NO_PADDING); 720a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if (bytes_decrypted < 0) 730a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_UNKNOWN_ERROR; 740a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden assert(bytes_decrypted == RSA_size(rsa_key_)); 750a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 760a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if (memcmp_s(decrypted_data.get(), data_.peek_read(), data_.available_read()) == 0) 770a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_OK; 780a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_VERIFICATION_FAILED; 790a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} 800a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 810a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} // namespace keymaster 82