10a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden/* 20a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * Copyright 2014 The Android Open Source Project 30a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * 40a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * Licensed under the Apache License, Version 2.0 (the "License"); 50a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * you may not use this file except in compliance with the License. 60a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * You may obtain a copy of the License at 70a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * 80a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * http://www.apache.org/licenses/LICENSE-2.0 90a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * 100a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * Unless required by applicable law or agreed to in writing, software 110a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * distributed under the License is distributed on an "AS IS" BASIS, 120a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 130a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * See the License for the specific language governing permissions and 140a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden * limitations under the License. 150a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden */ 160a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 170a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden#include <openssl/bn.h> 180a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 190a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden#include "dsa_operation.h" 200a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden#include "openssl_utils.h" 210a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 220a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willdennamespace keymaster { 230a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 240a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn WilldenDsaOperation::~DsaOperation() { 250a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if (dsa_key_ != NULL) 260a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden DSA_free(dsa_key_); 270a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} 280a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 290a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willdenkeymaster_error_t DsaOperation::Update(const Buffer& input, Buffer* /* output */) { 300a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden switch (purpose()) { 310a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden default: 320a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_UNIMPLEMENTED; 330a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden case KM_PURPOSE_SIGN: 340a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden case KM_PURPOSE_VERIFY: 350a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return StoreData(input); 360a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden } 370a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} 380a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 390a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willdenkeymaster_error_t DsaOperation::StoreData(const Buffer& input) { 400a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if (!data_.reserve(data_.available_read() + input.available_read()) || 410a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden !data_.write(input.peek_read(), input.available_read())) 420a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_INVALID_INPUT_LENGTH; 430a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_OK; 440a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} 450a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 460a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willdenkeymaster_error_t DsaSignOperation::Finish(const Buffer& /* signature */, Buffer* output) { 470a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden output->Reinitialize(DSA_size(dsa_key_)); 480a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden unsigned int siglen; 490a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if (!DSA_sign(0 /* type -- ignored */, data_.peek_read(), data_.available_read(), 500a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden output->peek_write(), &siglen, dsa_key_)) 510a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_UNKNOWN_ERROR; 520a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden output->advance_write(siglen); 530a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_OK; 540a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} 550a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 560a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willdenkeymaster_error_t DsaVerifyOperation::Finish(const Buffer& signature, Buffer* /* output */) { 570a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if ((int)data_.available_read() != DSA_size(dsa_key_)) 580a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_INVALID_INPUT_LENGTH; 590a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 600a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden int result = DSA_verify(0 /* type -- ignored */, data_.peek_read(), data_.available_read(), 610a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden signature.peek_read(), signature.available_read(), dsa_key_); 620a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden if (result < 0) 630a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_UNKNOWN_ERROR; 640a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden else if (result == 0) 650a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_VERIFICATION_FAILED; 660a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden else 670a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden return KM_ERROR_OK; 680a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} 690a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden 700a4df7e3a83a59e4a5abc3f605d7d7e9f636c682Shawn Willden} // namespace keymaster 71