| 26cfc08add3966eca5892e3387cf5ed6dc3068fb |
|
11-Sep-2013 |
Kenny Root <kroot@google.com> |
Use canonical UniquePtr.h header
Change-Id: Iab1dc428c2330a07a5944a1cfbb25c8134b11950
/system/security/keystore-engine/eng_keystore.cpp
|
| 77acaa0d42a616d40951651d0cbc2f97411f807d |
|
07-Sep-2013 |
Kenny Root <kroot@google.com> |
Revert to old-style API for EC_KEY handling
Nothing using the EVP_PKEY correctly, so we should revert to the EC_KEY
and ECDSA interfaces. Unfortunately, the SSL client certificate library
uses EC_KEY directly, so just having the EVP_PKEY interface doesn't
work.
Remove the EVP_PKEY interface entirely because it just adds complexity
since the EC_KEY path will do the same thing.
(cherry picked from commit 47041552bd545846a1b7787823af4b5ca9e36dea)
Bug: 10655329
Change-Id: Ibf8c36780fe93284b88e91b7860baf1b951b4266
/system/security/keystore-engine/eng_keystore.cpp
|
| 6071179a371fcd4c238375068ffd7d3cedea615d |
|
16-Aug-2013 |
Kenny Root <kroot@google.com> |
Add support for DSA and ECDSA key types
Change-Id: Ibee8d172eeb36f1a2e2ce62f275aea55ada5bcbf
/system/security/keystore-engine/eng_keystore.cpp
|
| 9d422a535cb4170acf46ec9fcb26cd3f428a2dc7 |
|
27-Jun-2013 |
Kenny Root <kroot@google.com> |
Revert "Revert "Split up main engine from methods""
Added missing Android.mk change in this commit.
This reverts commit 1fcabcd3279635e66ceffc42443c5bf0dae69d44.
Change-Id: I71e7fbc8f80a35b4666af985cffb4e7a2eb5634f
/system/security/keystore-engine/eng_keystore.cpp
|
| 1fcabcd3279635e66ceffc42443c5bf0dae69d44 |
|
27-Jun-2013 |
Kenny Root <kroot@android.com> |
Revert "Split up main engine from methods"
This reverts commit 2715806b1716baaeff7362d9aa897fbcb535de8c.
Change-Id: I7dfaf2cd97a17913710432007a66fc7df6fcad5d
/system/security/keystore-engine/eng_keystore.cpp
|
| 2715806b1716baaeff7362d9aa897fbcb535de8c |
|
27-Jun-2013 |
Kenny Root <kroot@google.com> |
Split up main engine from methods
We need to add more methods to the keystore engine, so split out RSA so
it doesn't become too unwieldy.
This doesn't affect the size of the symbol table since the default
visibility for this module is "hidden."
Change-Id: I806553a8d1a01ff0ffd7b67054932ddf783bb502
/system/security/keystore-engine/eng_keystore.cpp
|
| b51c47df67e67982dc3bff1efdf87fa048f7923f |
|
01-Feb-2013 |
Kenny Root <kroot@google.com> |
Add wrapping capability to keystore engine
Change-Id: Ie71722747b6f0c5f53a8f333e838a54057eb9ab5
/system/security/keystore-engine/eng_keystore.cpp
|
| 07438c8d7256d3788dac323b4d0055f201e0bec9 |
|
02-Nov-2012 |
Kenny Root <kroot@google.com> |
Switch keystore to binder
Change-Id: I6dacdc43bcc1a56e47655e37e825ee6a205eb56b
/system/security/keystore-engine/eng_keystore.cpp
|
| 938a991106a9bd064eb2ede1fb46d9c2ef94c1be |
|
16-Aug-2012 |
Kenny Root <kroot@google.com> |
Clear out ENGINE flags when initializing
We don't need our engine to be copied when initialized with
ENGINE_by_id, so just make sure our flags are cleared when we
initialize.
Change-Id: Ie75fad37c2f78a769c425889c1d0661b468cd0c7
/system/security/keystore-engine/eng_keystore.cpp
|
| a8c703d9fdd98e3caefb6e74cd03c2878cecd0a1 |
|
17-Jul-2012 |
Brian Carlstrom <bdc@google.com> |
Handle keynames with special characters such as - and .
Bug: http://code.google.com/p/android/issues/detail?id=34577
Bug: 6837950
(cherry-picked from 0114bd9f9bbc2458ca77bf3508e7c15992a432b1)
Change-Id: I0c265fe73c1b2c430ffd196a21691264f8f3b555
/system/security/keystore-engine/eng_keystore.cpp
|
| bef8083783df4b06972f33b468eccf941e335864 |
|
03-May-2012 |
Kenny Root <kroot@google.com> |
Only initialize ex_data if not already
ENGINE_by_id will load up multiple copies of the engine which will
create a new ex_data index each time it's called. This change makes sure
the ex_data index is only initialized once.
Change-Id: I5e197faf6273ec3b3cafcbeadf7da8ec04a4f50b
/system/security/keystore-engine/eng_keystore.cpp
|
| 98c2f8fcc1263a9d94adac66994fffc96c0df699 |
|
28-Mar-2012 |
Colin Cross <ccross@android.com> |
use UniquePtr.h from frameworks/native
Use the UniquePtr.h include from frameworks/native/include/utils
to fix the pdk build.
Change-Id: Ic415b43d2eb8c0b7ef54b6f3f75b7fa0d5f7a058
/system/security/keystore-engine/eng_keystore.cpp
|
| 70e3a86abd2c412d602a018967c01c177eb6cf4e |
|
16-Feb-2012 |
Kenny Root <kroot@google.com> |
Add keymaster to keystore with soft implementation
Add hardware crypto capabilities to keystore. This allows hardware
escrow of private key material.
There is also an OpenSSL engine that connects to keystore to allow use
of the keystore keys from native code built into the platform.
This includes a software implementation of keymaster using OpenSSL
as the backend. This is just as insecure as the previous solution,
but it's needed so devices without hardware support can continue
to operate in the new scheme without a lot of compatibility code.
Change-Id: I2bc67766e1f633ef1cbbd2874a65962074e84f4f
/system/security/keystore-engine/eng_keystore.cpp
|