| c3ac84f04c4d6d74fa36abfd1cc2e5ac763a8af3 |
|
24-Jun-2015 |
Shawn Willden <swillden@google.com> |
Rename keymaster tag types to clarify that integers are unsigned.
Bug: 22008538
Change-Id: I096cd977b34e9767845aaeece2da5f04c7fc86fe
/system/keymaster/include/keymaster/authorization_set.h
|
| b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7 |
|
18-Jun-2015 |
Shawn Willden <swillden@google.com> |
Update KeymasterEnforcement.
This brings KeymasterEnforcement up to date and cleans it up, making the
code more consistent with the rest of keymaster. It also makes it
possible to use from Trusty, by virtualizing some time-related functions
that don't work the same in Trusty-land.
Bug: 19511945
Change-Id: I1141c953f227f3ef8a78751d9f04bf4e4922d1f5
/system/keymaster/include/keymaster/authorization_set.h
|
| bf0679a97499f92abc664179ddb8c1e3974f5c85 |
|
01-Jun-2015 |
Shawn Willden <swillden@google.com> |
Make AuthorizationSet interoperate with keymaster_key_param_set_t
Change-Id: Ia9586684f8abd5678f8fb07daf262dc9696f665e
/system/keymaster/include/keymaster/authorization_set.h
|
| 226746bfb5f79857145d5f3ebdfd6f49b6c114ac |
|
08-May-2015 |
Shawn Willden <swillden@google.com> |
Enforce digest specifications.
Bug: 20917242, 19509156
Change-Id: I5b3509bea78754192f0d5e2a76de24621fc43621
/system/keymaster/include/keymaster/authorization_set.h
|
| edb7994f7d5764fcf06188dc005743f4209deb0f |
|
08-May-2015 |
Shawn Willden <swillden@google.com> |
Enforce purpose checking on keymaster operations.
Bug: 20917242
Change-Id: Ifd1d64e67f85ee42caae768c4512804bbbe20ad0
/system/keymaster/include/keymaster/authorization_set.h
|
| af533990df2265e48d01b187a8e86eefa04d1be3 |
|
15-Apr-2015 |
Shawn Willden <swillden@google.com> |
Change AuthorizationSetBuilder methods to separate padding, etc.
Padding and digest are now repeatable, so it doesn't make sense to have
builders that take only one. MAC length is also no longer a key
characteristic, so it doesn't belong in the key builders.
Bug: 19509156
Change-Id: Ie4d524ef2c46a0dd62a628d95bed456bcf85a4f3
/system/keymaster/include/keymaster/authorization_set.h
|
| d9d7acff7c43f52ebd038eb77afd67d597844b35 |
|
26-Feb-2015 |
Shawn Willden <swillden@google.com> |
Make several crypto parameters repeatable.
This is only part of the required change. This just keeps things
building. The other part is to allow specification of the particular
parameter desired in begin().
Bug: 19509156
Change-Id: Ic584d8a6bf5601f9754563b67b3cc6b3ca6b5ff9
/system/keymaster/include/keymaster/authorization_set.h
|
| c47c88f1a9ec3fce5e8116b9b5572b58783f56d0 |
|
08-Apr-2015 |
Shawn Willden <swillden@google.com> |
Remove OCB Mode.
Change-Id: I8f804978208e2c8701bd52dc79b5597a307b7e7a
/system/keymaster/include/keymaster/authorization_set.h
|
| 9c65b2bd1978a918b52a459596dafc7dde992416 |
|
08-Apr-2015 |
Shawn Willden <swillden@google.com> |
Remove reference to DSA and rename KM_ALGORITHM_ECDSA.
Change-Id: Ibffddc5c3a5c728182f5ca7f6a76381413fc8645
/system/keymaster/include/keymaster/authorization_set.h
|
| 3e35dbcecbc5ae9de32be2c437c08a9faa940d5b |
|
17-Mar-2015 |
Shawn Willden <swillden@google.com> |
Enhancements to keymaster utilities, for keystore auth table.
Bug: 19511945
Change-Id: I39a8ed09ecc62703d980dfe017b0f3b04140b886
/system/keymaster/include/keymaster/authorization_set.h
|
| eb63b9799eadcaa6ef206f8b804d7432e0dab14a |
|
14-Mar-2015 |
Shawn Willden <swillden@google.com> |
Add support for KM_TAG_USER_SECURE_ID.
Bug: 19511945
Change-Id: I629ab2c47ee6d42de20a963ef283e330364c8ee7
/system/keymaster/include/keymaster/authorization_set.h
|
| 056ec1531752b6e8491269661581036a95c5d3e5 |
|
02-Mar-2015 |
Shawn Willden <swillden@google.com> |
Fix erroneous doc comment on AuthorizationSet.CopyToParamSet.
Change-Id: I7422f9264e6a769098d1e1e06ae2fe3a61fd3767
/system/keymaster/include/keymaster/authorization_set.h
|
| 84b8da52a242c42d9a6a8cc8f128fb4c8baa6f8f |
|
11-Mar-2015 |
Shawn Willden <swillden@google.com> |
Modify ECDSA to require specified digest.
Bug: 19427294
Change-Id: Ia65bfd0152fa1ee46b981dc7718128dd33422743
/system/keymaster/include/keymaster/authorization_set.h
|
| 2c242009007a38b5c8003137fb8ba5a1fdb73b70 |
|
27-Feb-2015 |
Shawn Willden <swillden@google.com> |
Add AuthorizationSetBuilder.
Actually move it from google_keymaster_test, where it was called
ParamBuilder. This is a generally-useful tool.
Change-Id: I07200cdf2e5628289d9e544af02efe519ca124d3
/system/keymaster/include/keymaster/authorization_set.h
|
| 1fa5d591fe6807665092753a5628d8d470888da4 |
|
14-Jan-2015 |
Shawn Willden <swillden@google.com> |
Add an AuthorizationSet method to count tag instances.
Change-Id: Ibaf05fd8061db9155cd5ecc7318c6031990d290e
/system/keymaster/include/keymaster/authorization_set.h
|
| dfa1c030e941cba4e66b362854d84b19298353c9 |
|
07-Feb-2015 |
Shawn Willden <swillden@google.com> |
Add AAD support to AES OCB.
Also add OCB test vectors.
Change-Id: I33074bfea142aab334916c4567f92a6645fcab9f
/system/keymaster/include/keymaster/authorization_set.h
|
| be4a2a3e70ada1ee026eaffb7163211161396215 |
|
15-Dec-2014 |
Shawn Willden <swillden@google.com> |
Defer AES OCB parameter checking to usage time, not generation.
It would be nice to thoroughly validate that a key is fully functional
and usable as specified during generation, but this introduces a lot
of additional complexity to generation, and will likely never be
complete.
Change-Id: I15938d1e507dc8d373ec9098d6afa5cacbcd141b
/system/keymaster/include/keymaster/authorization_set.h
|
| cb0d64b02d0df2b9eb692c5b0ea5c36db1000e9a |
|
22-Jan-2015 |
Shawn Willden <swillden@google.com> |
Small enhancements to AuthorizationSet, to support softkeymaster
Change-Id: I09105b52c3542c11d2333c7788402c707373b028
/system/keymaster/include/keymaster/authorization_set.h
|
| 941d1c4ad4422a796d90010191c11aef0580295e |
|
11-Dec-2014 |
Shawn Willden <swillden@google.com> |
Prevent GenerateKeyResponse from adding tags to created keys.
This change was already reviewed, merged and reverted, so I'm skipping
the review step this time.
Change-Id: I85ef23050ee0beb0eb8ab7d4db4e3b9c40d1fe81
/system/keymaster/include/keymaster/authorization_set.h
|
| b9d584d3dacc8041e5502cd0d036e21895eb6dc6 |
|
23-Jan-2015 |
Shawn Willden <swillden@google.com> |
Switch to using keymaster_defs.h from libhardware.
In the past it was convenient to have a local copy of this file
(for reasons which no longer apply).
Change-Id: Ie4a6f80abd16c77c0252f64ec65f2beeeef9a7a3
/system/keymaster/include/keymaster/authorization_set.h
|
| 1f286a1072092f256b89fc2fa55504a1f53dd961 |
|
20-Jan-2015 |
Shawn Willden <swillden@google.com> |
Revert "Prevent GenerateKeyResponse from adding tags to created keys."
This reverts commit 7093570a8c71b9ffb350c6aab0dbafb59c419189.
/system/keymaster/include/keymaster/authorization_set.h
|
| 7093570a8c71b9ffb350c6aab0dbafb59c419189 |
|
11-Dec-2014 |
Shawn Willden <swillden@google.com> |
Prevent GenerateKeyResponse from adding tags to created keys.
Change-Id: I1ae9f4ed8b01c3fff1a525b89c82ba58eb67f487
/system/keymaster/include/keymaster/authorization_set.h
|
| 98d9b92547a9a7553b99e3e941a4175926f95b62 |
|
26-Aug-2014 |
Shawn Willden <swillden@google.com> |
Reorganize system/keymaster.
This CL moves the includes that should be exported to include/ and
removes the trusty-specific code (some of which is moving to
hardware/google and some of which is moving to the trusty tree.)
Change-Id: Ie4fabf6b5c5f36b50c2f5ff356548ca2e9140fcb
/system/keymaster/include/keymaster/authorization_set.h
|