1c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/* 2c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Copyright (C) 2016 The Android Open Source Project 3c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * 4c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Licensed under the Apache License, Version 2.0 (the "License"); 5c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * you may not use this file except in compliance with the License. 6c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * You may obtain a copy of the License at 7c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * 8c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * http://www.apache.org/licenses/LICENSE-2.0 9c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * 10c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Unless required by applicable law or agreed to in writing, software 11c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * distributed under the License is distributed on an "AS IS" BASIS, 12c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * See the License for the specific language governing permissions and 14c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * limitations under the License. 15c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 16c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 17c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden#include "key_store_service.h" 18c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 19c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden#include <fcntl.h> 20c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden#include <sys/stat.h> 21c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 22c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden#include <sstream> 23c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 24c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden#include <binder/IPCThreadState.h> 25c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 26c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden#include <private/android_filesystem_config.h> 27c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 28c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden#include <hardware/keymaster_defs.h> 29c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 30c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden#include "defaults.h" 31c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden#include "keystore_utils.h" 32c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 3398c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willdenusing keymaster::AuthorizationSet; 3498c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willdenusing keymaster::AuthorizationSetBuilder; 3598c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willdenusing keymaster::TAG_APPLICATION_DATA; 3698c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willdenusing keymaster::TAG_APPLICATION_ID; 3798c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden 38c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdennamespace android { 39c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 40c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenconst size_t MAX_OPERATIONS = 15; 41c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 42c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenstruct BIGNUM_Delete { 43c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden void operator()(BIGNUM* p) const { BN_free(p); } 44c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden}; 45c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdentypedef UniquePtr<BIGNUM, BIGNUM_Delete> Unique_BIGNUM; 46c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 4798c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willdenstruct Malloc_Delete { 4898c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden void operator()(uint8_t* p) const { free(p); } 4998c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden}; 5098c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden 51c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenvoid KeyStoreService::binderDied(const wp<IBinder>& who) { 52c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden auto operations = mOperationMap.getOperationsForToken(who.unsafe_get()); 53c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden for (auto token : operations) { 54c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden abort(token); 55c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 56c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 57c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 58c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::getState(int32_t userId) { 59c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_GET_STATE)) { 60c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 61c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 62c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 63c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->getState(userId); 64c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 65c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 66c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::get(const String16& name, int32_t uid, uint8_t** item, 67c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden size_t* itemLength) { 68c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t targetUid = getEffectiveUid(uid); 69c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_GET, targetUid)) { 70c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 71c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 72c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 73c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 74c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Blob keyBlob; 75c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 76c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ResponseCode responseCode = mKeyStore->getKeyForName(&keyBlob, name8, targetUid, TYPE_GENERIC); 77c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (responseCode != ::NO_ERROR) { 78c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden *item = NULL; 79c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden *itemLength = 0; 80c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return responseCode; 81c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 82c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 83c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden *item = (uint8_t*)malloc(keyBlob.getLength()); 84c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden memcpy(*item, keyBlob.getValue(), keyBlob.getLength()); 85c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden *itemLength = keyBlob.getLength(); 86c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 87c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 88c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 89c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 90c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::insert(const String16& name, const uint8_t* item, size_t itemLength, 91c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int targetUid, int32_t flags) { 92c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden targetUid = getEffectiveUid(targetUid); 93c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t result = 94c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden checkBinderPermissionAndKeystoreState(P_INSERT, targetUid, flags & KEYSTORE_FLAG_ENCRYPTED); 95c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result != ::NO_ERROR) { 96c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return result; 97c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 98c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 99c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 100c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 filename(mKeyStore->getKeyNameForUidWithDir(name8, targetUid)); 101c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 102c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Blob keyBlob(item, itemLength, NULL, 0, ::TYPE_GENERIC); 103c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keyBlob.setEncrypted(flags & KEYSTORE_FLAG_ENCRYPTED); 104c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 105c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->put(filename.string(), &keyBlob, get_user_id(targetUid)); 106c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 107c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 108c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::del(const String16& name, int targetUid) { 109c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden targetUid = getEffectiveUid(targetUid); 110c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_DELETE, targetUid)) { 111c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 112c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 113c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 114c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 filename(mKeyStore->getKeyNameForUidWithDir(name8, targetUid)); 115c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->del(filename.string(), ::TYPE_ANY, get_user_id(targetUid)); 116c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 117c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 118c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::exist(const String16& name, int targetUid) { 119c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden targetUid = getEffectiveUid(targetUid); 120c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_EXIST, targetUid)) { 121c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 122c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 123c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 124c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 125c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 filename(mKeyStore->getKeyNameForUidWithDir(name8, targetUid)); 126c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 127c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (access(filename.string(), R_OK) == -1) { 128c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return (errno != ENOENT) ? ::SYSTEM_ERROR : ::KEY_NOT_FOUND; 129c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 130c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 131c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 132c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 133c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::list(const String16& prefix, int targetUid, Vector<String16>* matches) { 134c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden targetUid = getEffectiveUid(targetUid); 135c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_LIST, targetUid)) { 136c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 137c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 138c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const String8 prefix8(prefix); 139c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 filename(mKeyStore->getKeyNameForUid(prefix8, targetUid)); 140c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 141c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (mKeyStore->list(filename, matches, get_user_id(targetUid)) != ::NO_ERROR) { 142c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 143c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 144c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 145c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 146c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 147c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::reset() { 148c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_RESET)) { 149c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 150c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 151c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 152c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t callingUid = IPCThreadState::self()->getCallingUid(); 153c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->resetUser(get_user_id(callingUid), false); 154c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 155c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 156c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 157c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::onUserPasswordChanged(int32_t userId, const String16& password) { 158c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_PASSWORD)) { 159c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 160c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 161c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 162c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const String8 password8(password); 163c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // Flush the auth token table to prevent stale tokens from sticking 164c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // around. 165c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mAuthTokenTable.Clear(); 166c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 167c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (password.size() == 0) { 168c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGI("Secure lockscreen for user %d removed, deleting encrypted entries", userId); 169c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->resetUser(userId, true); 170c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 171c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else { 172c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden switch (mKeyStore->getState(userId)) { 173c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case ::STATE_UNINITIALIZED: { 174c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // generate master key, encrypt with password, write to file, 175c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // initialize mMasterKey*. 176c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->initializeUser(password8, userId); 177c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 178c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case ::STATE_NO_ERROR: { 179c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // rewrite master key with new password. 180c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->writeMasterKey(password8, userId); 181c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 182c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case ::STATE_LOCKED: { 183c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGE("Changing user %d's password while locked, clearing old encryption", userId); 184c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->resetUser(userId, true); 185c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->initializeUser(password8, userId); 186c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 187c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 188c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 189c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 190c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 191c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 192c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::onUserAdded(int32_t userId, int32_t parentId) { 193c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_USER_CHANGED)) { 194c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 195c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 196c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 197c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // Sanity check that the new user has an empty keystore. 198c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!mKeyStore->isEmpty(userId)) { 199c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("New user %d's keystore not empty. Clearing old entries.", userId); 200c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 201c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // Unconditionally clear the keystore, just to be safe. 202c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->resetUser(userId, false); 203c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (parentId != -1) { 204c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // This profile must share the same master key password as the parent profile. Because the 205c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // password of the parent profile is not known here, the best we can do is copy the parent's 206c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // master key and master key file. This makes this profile use the same master key as the 207c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // parent profile, forever. 208c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->copyMasterKey(parentId, userId); 209c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else { 210c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 211c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 212c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 213c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 214c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::onUserRemoved(int32_t userId) { 215c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_USER_CHANGED)) { 216c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 217c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 218c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 219c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->resetUser(userId, false); 220c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 221c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 222c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 223c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::lock(int32_t userId) { 224c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_LOCK)) { 225c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 226c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 227c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 228c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden State state = mKeyStore->getState(userId); 229c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (state != ::STATE_NO_ERROR) { 230c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGD("calling lock in state: %d", state); 231c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return state; 232c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 233c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 234c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->lock(userId); 235c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 236c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 237c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 238c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::unlock(int32_t userId, const String16& pw) { 239c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_UNLOCK)) { 240c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 241c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 242c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 243c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden State state = mKeyStore->getState(userId); 244c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (state != ::STATE_LOCKED) { 245c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden switch (state) { 246c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case ::STATE_NO_ERROR: 247c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGI("calling unlock when already unlocked, ignoring."); 248c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden break; 249c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case ::STATE_UNINITIALIZED: 250c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGE("unlock called on uninitialized keystore."); 251c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden break; 252c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden default: 253c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGE("unlock called on keystore in unknown state: %d", state); 254c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden break; 255c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 256c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return state; 257c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 258c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 259c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const String8 password8(pw); 260c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // read master key, decrypt with password, initialize mMasterKey*. 261c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->readMasterKey(password8, userId); 262c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 263c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 264c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenbool KeyStoreService::isEmpty(int32_t userId) { 265c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_IS_EMPTY)) { 266c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return false; 267c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 268c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 269c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->isEmpty(userId); 270c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 271c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 272c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::generate(const String16& name, int32_t targetUid, int32_t keyType, 273c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t keySize, int32_t flags, Vector<sp<KeystoreArg>>* args) { 274c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden targetUid = getEffectiveUid(targetUid); 275c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t result = 276c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden checkBinderPermissionAndKeystoreState(P_INSERT, targetUid, flags & KEYSTORE_FLAG_ENCRYPTED); 277c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result != ::NO_ERROR) { 278c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return result; 279c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 280c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 281c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden KeymasterArguments params; 282c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden add_legacy_key_authorizations(keyType, ¶ms.params); 283c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 284c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden switch (keyType) { 285c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case EVP_PKEY_EC: { 286c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden params.params.push_back(keymaster_param_enum(KM_TAG_ALGORITHM, KM_ALGORITHM_EC)); 287c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (keySize == -1) { 288c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keySize = EC_DEFAULT_KEY_SIZE; 289c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else if (keySize < EC_MIN_KEY_SIZE || keySize > EC_MAX_KEY_SIZE) { 290c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGI("invalid key size %d", keySize); 291c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 292c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 293c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden params.params.push_back(keymaster_param_int(KM_TAG_KEY_SIZE, keySize)); 294c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden break; 295c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 296c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case EVP_PKEY_RSA: { 297c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden params.params.push_back(keymaster_param_enum(KM_TAG_ALGORITHM, KM_ALGORITHM_RSA)); 298c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (keySize == -1) { 299c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keySize = RSA_DEFAULT_KEY_SIZE; 300c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else if (keySize < RSA_MIN_KEY_SIZE || keySize > RSA_MAX_KEY_SIZE) { 301c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGI("invalid key size %d", keySize); 302c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 303c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 304c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden params.params.push_back(keymaster_param_int(KM_TAG_KEY_SIZE, keySize)); 305c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden unsigned long exponent = RSA_DEFAULT_EXPONENT; 306c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (args->size() > 1) { 307c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGI("invalid number of arguments: %zu", args->size()); 308c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 309c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else if (args->size() == 1) { 310c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden sp<KeystoreArg> expArg = args->itemAt(0); 311c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (expArg != NULL) { 312c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Unique_BIGNUM pubExpBn(BN_bin2bn( 313c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden reinterpret_cast<const unsigned char*>(expArg->data()), expArg->size(), NULL)); 314c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (pubExpBn.get() == NULL) { 315c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGI("Could not convert public exponent to BN"); 316c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 317c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 318c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden exponent = BN_get_word(pubExpBn.get()); 319c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (exponent == 0xFFFFFFFFL) { 320c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("cannot represent public exponent as a long value"); 321c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 322c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 323c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else { 324c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("public exponent not read"); 325c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 326c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 327c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 328c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden params.params.push_back(keymaster_param_long(KM_TAG_RSA_PUBLIC_EXPONENT, exponent)); 329c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden break; 330c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 331c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden default: { 332c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("Unsupported key type %d", keyType); 333c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 334c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 335c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 336c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 337c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t rc = generateKey(name, params, NULL, 0, targetUid, flags, 338c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden /*outCharacteristics*/ NULL); 339c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc != ::NO_ERROR) { 340c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("generate failed: %d", rc); 341c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 342c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return translateResultToLegacyResult(rc); 343c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 344c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 345c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::import(const String16& name, const uint8_t* data, size_t length, 346c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int targetUid, int32_t flags) { 347c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const uint8_t* ptr = data; 348c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 349c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Unique_PKCS8_PRIV_KEY_INFO pkcs8(d2i_PKCS8_PRIV_KEY_INFO(NULL, &ptr, length)); 350c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!pkcs8.get()) { 351c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 352c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 353c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Unique_EVP_PKEY pkey(EVP_PKCS82PKEY(pkcs8.get())); 354c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!pkey.get()) { 355c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 356c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 357c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int type = EVP_PKEY_type(pkey->type); 358c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden KeymasterArguments params; 359c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden add_legacy_key_authorizations(type, ¶ms.params); 360c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden switch (type) { 361c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case EVP_PKEY_RSA: 362c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden params.params.push_back(keymaster_param_enum(KM_TAG_ALGORITHM, KM_ALGORITHM_RSA)); 363c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden break; 364c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case EVP_PKEY_EC: 365c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden params.params.push_back(keymaster_param_enum(KM_TAG_ALGORITHM, KM_ALGORITHM_EC)); 366c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden break; 367c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden default: 368c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("Unsupported key type %d", type); 369c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 370c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 371c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t rc = importKey(name, params, KM_KEY_FORMAT_PKCS8, data, length, targetUid, flags, 372c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden /*outCharacteristics*/ NULL); 373c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc != ::NO_ERROR) { 374c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("importKey failed: %d", rc); 375c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 376c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return translateResultToLegacyResult(rc); 377c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 378c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 379c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::sign(const String16& name, const uint8_t* data, size_t length, 380c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uint8_t** out, size_t* outLength) { 381c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_SIGN)) { 382c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 383c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 384c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return doLegacySignVerify(name, data, length, out, outLength, NULL, 0, KM_PURPOSE_SIGN); 385c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 386c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 387c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::verify(const String16& name, const uint8_t* data, size_t dataLength, 388c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const uint8_t* signature, size_t signatureLength) { 389c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_VERIFY)) { 390c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 391c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 392c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return doLegacySignVerify(name, data, dataLength, NULL, NULL, signature, signatureLength, 393c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden KM_PURPOSE_VERIFY); 394c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 395c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 396c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/* 397c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * TODO: The abstraction between things stored in hardware and regular blobs 398c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * of data stored on the filesystem should be moved down to keystore itself. 399c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Unfortunately the Java code that calls this has naming conventions that it 400c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * knows about. Ideally keystore shouldn't be used to store random blobs of 401c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * data. 402c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * 403c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Until that happens, it's necessary to have a separate "get_pubkey" and 404c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * "del_key" since the Java code doesn't really communicate what it's 405c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * intentions are. 406c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 407c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::get_pubkey(const String16& name, uint8_t** pubkey, size_t* pubkeyLength) { 408c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ExportResult result; 409c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden exportKey(name, KM_KEY_FORMAT_X509, NULL, NULL, UID_SELF, &result); 410c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result.resultCode != ::NO_ERROR) { 411c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("export failed: %d", result.resultCode); 412c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return translateResultToLegacyResult(result.resultCode); 413c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 414c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 415c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden *pubkey = result.exportData.release(); 416c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden *pubkeyLength = result.dataLength; 417c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 418c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 419c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 420c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::grant(const String16& name, int32_t granteeUid) { 421c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t callingUid = IPCThreadState::self()->getCallingUid(); 422c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t result = checkBinderPermissionAndKeystoreState(P_GRANT); 423c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result != ::NO_ERROR) { 424c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return result; 425c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 426c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 427c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 428c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 filename(mKeyStore->getKeyNameForUidWithDir(name8, callingUid)); 429c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 430c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (access(filename.string(), R_OK) == -1) { 431c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return (errno != ENOENT) ? ::SYSTEM_ERROR : ::KEY_NOT_FOUND; 432c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 433c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 434c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->addGrant(filename.string(), granteeUid); 435c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 436c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 437c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 438c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::ungrant(const String16& name, int32_t granteeUid) { 439c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t callingUid = IPCThreadState::self()->getCallingUid(); 440c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t result = checkBinderPermissionAndKeystoreState(P_GRANT); 441c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result != ::NO_ERROR) { 442c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return result; 443c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 444c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 445c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 446c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 filename(mKeyStore->getKeyNameForUidWithDir(name8, callingUid)); 447c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 448c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (access(filename.string(), R_OK) == -1) { 449c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return (errno != ENOENT) ? ::SYSTEM_ERROR : ::KEY_NOT_FOUND; 450c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 451c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 452c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->removeGrant(filename.string(), granteeUid) ? ::NO_ERROR : ::KEY_NOT_FOUND; 453c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 454c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 455c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint64_t KeyStoreService::getmtime(const String16& name, int32_t uid) { 456c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t targetUid = getEffectiveUid(uid); 457c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_GET, targetUid)) { 458c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("permission denied for %d: getmtime", targetUid); 459c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return -1L; 460c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 461c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 462c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 463c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 filename(mKeyStore->getKeyNameForUidWithDir(name8, targetUid)); 464c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 465c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (access(filename.string(), R_OK) == -1) { 466c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("could not access %s for getmtime", filename.string()); 467c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return -1L; 468c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 469c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 470c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int fd = TEMP_FAILURE_RETRY(open(filename.string(), O_NOFOLLOW, O_RDONLY)); 471c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (fd < 0) { 472c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("could not open %s for getmtime", filename.string()); 473c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return -1L; 474c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 475c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 476c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden struct stat s; 477c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int ret = fstat(fd, &s); 478c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden close(fd); 479c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (ret == -1) { 480c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("could not stat %s for getmtime", filename.string()); 481c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return -1L; 482c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 483c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 484c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return static_cast<int64_t>(s.st_mtime); 485c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 486c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 487c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::duplicate(const String16& srcKey, int32_t srcUid, const String16& destKey, 488c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t destUid) { 489c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t callingUid = IPCThreadState::self()->getCallingUid(); 490c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden pid_t spid = IPCThreadState::self()->getCallingPid(); 491c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!has_permission(callingUid, P_DUPLICATE, spid)) { 492c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("permission denied for %d: duplicate", callingUid); 493c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return -1L; 494c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 495c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 496c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden State state = mKeyStore->getState(get_user_id(callingUid)); 497c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!isKeystoreUnlocked(state)) { 498c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGD("calling duplicate in state: %d", state); 499c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return state; 500c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 501c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 502c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (srcUid == -1 || static_cast<uid_t>(srcUid) == callingUid) { 503c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden srcUid = callingUid; 504c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else if (!is_granted_to(callingUid, srcUid)) { 505c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGD("migrate not granted from source: %d -> %d", callingUid, srcUid); 506c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 507c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 508c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 509c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (destUid == -1) { 510c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden destUid = callingUid; 511c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 512c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 513c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (srcUid != destUid) { 514c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (static_cast<uid_t>(srcUid) != callingUid) { 515c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGD("can only duplicate from caller to other or to same uid: " 516c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden "calling=%d, srcUid=%d, destUid=%d", 517c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden callingUid, srcUid, destUid); 518c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 519c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 520c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 521c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!is_granted_to(callingUid, destUid)) { 522c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGD("duplicate not granted to dest: %d -> %d", callingUid, destUid); 523c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 524c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 525c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 526c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 527c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 source8(srcKey); 528c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 sourceFile(mKeyStore->getKeyNameForUidWithDir(source8, srcUid)); 529c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 530c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 target8(destKey); 531c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 targetFile(mKeyStore->getKeyNameForUidWithDir(target8, destUid)); 532c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 533c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (access(targetFile.string(), W_OK) != -1 || errno != ENOENT) { 534c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGD("destination already exists: %s", targetFile.string()); 535c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 536c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 537c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 538c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Blob keyBlob; 539c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ResponseCode responseCode = 540c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->get(sourceFile.string(), &keyBlob, TYPE_ANY, get_user_id(srcUid)); 541c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (responseCode != ::NO_ERROR) { 542c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return responseCode; 543c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 544c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 545c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->put(targetFile.string(), &keyBlob, get_user_id(destUid)); 546c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 547c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 548c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::is_hardware_backed(const String16& keyType) { 549c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->isHardwareBacked(keyType) ? 1 : 0; 550c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 551c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 552c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::clear_uid(int64_t targetUid64) { 553c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t targetUid = getEffectiveUid(targetUid64); 554c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermissionSelfOrSystem(P_CLEAR_UID, targetUid)) { 555c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 556c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 557c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 558c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 prefix = String8::format("%u_", targetUid); 559c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Vector<String16> aliases; 560c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (mKeyStore->list(prefix, &aliases, get_user_id(targetUid)) != ::NO_ERROR) { 561c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 562c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 563c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 564c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden for (uint32_t i = 0; i < aliases.size(); i++) { 565c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(aliases[i]); 566c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 filename(mKeyStore->getKeyNameForUidWithDir(name8, targetUid)); 567c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->del(filename.string(), ::TYPE_ANY, get_user_id(targetUid)); 568c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 569c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 570c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 571c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 572c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::addRngEntropy(const uint8_t* data, size_t dataLength) { 573715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const auto* device = mKeyStore->getDevice(); 574715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const auto* fallback = mKeyStore->getFallbackDevice(); 575c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t devResult = KM_ERROR_UNIMPLEMENTED; 576c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t fallbackResult = KM_ERROR_UNIMPLEMENTED; 577c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (device->common.module->module_api_version >= KEYMASTER_MODULE_API_VERSION_1_0 && 578c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden device->add_rng_entropy != NULL) { 579c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden devResult = device->add_rng_entropy(device, data, dataLength); 580c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 581c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (fallback->add_rng_entropy) { 582c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden fallbackResult = fallback->add_rng_entropy(fallback, data, dataLength); 583c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 584c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (devResult) { 585c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return devResult; 586c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 587c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (fallbackResult) { 588c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return fallbackResult; 589c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 590c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 591c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 592c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 593c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::generateKey(const String16& name, const KeymasterArguments& params, 594c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const uint8_t* entropy, size_t entropyLength, int uid, 595c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int flags, KeyCharacteristics* outCharacteristics) { 596c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid = getEffectiveUid(uid); 597c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int rc = checkBinderPermissionAndKeystoreState(P_INSERT, uid, flags & KEYSTORE_FLAG_ENCRYPTED); 598c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc != ::NO_ERROR) { 599c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return rc; 600c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 601c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 602c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = KM_ERROR_UNIMPLEMENTED; 603c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden bool isFallback = false; 604c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_key_blob_t blob; 605715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden keymaster_key_characteristics_t out = {{nullptr, 0}, {nullptr, 0}}; 606c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 607715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const auto* device = mKeyStore->getDevice(); 608715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const auto* fallback = mKeyStore->getFallbackDevice(); 609c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden std::vector<keymaster_key_param_t> opParams(params.params); 610c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const keymaster_key_param_set_t inParams = {opParams.data(), opParams.size()}; 611c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (device == NULL) { 612c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 613c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 614c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // TODO: Seed from Linux RNG before this. 615c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (device->common.module->module_api_version >= KEYMASTER_MODULE_API_VERSION_1_0 && 616c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden device->generate_key != NULL) { 617c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!entropy) { 618c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = KM_ERROR_OK; 619c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else if (device->add_rng_entropy) { 620c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = device->add_rng_entropy(device, entropy, entropyLength); 621c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else { 622c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = KM_ERROR_UNIMPLEMENTED; 623c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 624c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc == KM_ERROR_OK) { 625715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden rc = 626715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden device->generate_key(device, &inParams, &blob, outCharacteristics ? &out : nullptr); 627c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 628c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 629c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // If the HW device didn't support generate_key or generate_key failed 630c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // fall back to the software implementation. 631c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc && fallback->generate_key != NULL) { 632c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("Primary keymaster device failed to generate key, falling back to SW."); 633c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden isFallback = true; 634c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!entropy) { 635c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = KM_ERROR_OK; 636c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else if (fallback->add_rng_entropy) { 637c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = fallback->add_rng_entropy(fallback, entropy, entropyLength); 638c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else { 639c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = KM_ERROR_UNIMPLEMENTED; 640c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 641c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc == KM_ERROR_OK) { 642715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden rc = fallback->generate_key(fallback, &inParams, &blob, 643715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden outCharacteristics ? &out : nullptr); 644c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 645c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 646c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 647715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden if (outCharacteristics) { 648715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden outCharacteristics->characteristics = out; 649c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 650c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 651c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc) { 652c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return rc; 653c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 654c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 655c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 656c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 filename(mKeyStore->getKeyNameForUidWithDir(name8, uid)); 657c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 658c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Blob keyBlob(blob.key_material, blob.key_material_size, NULL, 0, ::TYPE_KEYMASTER_10); 659c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keyBlob.setFallback(isFallback); 660c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keyBlob.setEncrypted(flags & KEYSTORE_FLAG_ENCRYPTED); 661c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 662c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden free(const_cast<uint8_t*>(blob.key_material)); 663c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 664c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->put(filename.string(), &keyBlob, get_user_id(uid)); 665c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 666c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 667c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::getKeyCharacteristics(const String16& name, 668c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const keymaster_blob_t* clientId, 669c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const keymaster_blob_t* appData, int32_t uid, 670c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden KeyCharacteristics* outCharacteristics) { 671c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!outCharacteristics) { 672c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return KM_ERROR_UNEXPECTED_NULL_POINTER; 673c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 674c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 675c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t targetUid = getEffectiveUid(uid); 676c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t callingUid = IPCThreadState::self()->getCallingUid(); 677c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!is_granted_to(callingUid, targetUid)) { 678c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("uid %d not permitted to act for uid %d in getKeyCharacteristics", callingUid, 679c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden targetUid); 680c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 681c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 682c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 683c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Blob keyBlob; 684c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 685c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int rc; 686c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 687c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ResponseCode responseCode = 688c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->getKeyForName(&keyBlob, name8, targetUid, TYPE_KEYMASTER_10); 689c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (responseCode != ::NO_ERROR) { 690c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return responseCode; 691c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 69298c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden keymaster_key_blob_t key = {keyBlob.getValue(), static_cast<size_t>(keyBlob.getLength())}; 693715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden auto* dev = mKeyStore->getDeviceForBlob(keyBlob); 69498c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden keymaster_key_characteristics_t out = {}; 695c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!dev->get_key_characteristics) { 696715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden ALOGE("device does not implement get_key_characteristics"); 697c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return KM_ERROR_UNIMPLEMENTED; 698c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 699c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = dev->get_key_characteristics(dev, &key, clientId, appData, &out); 70098c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden if (rc == KM_ERROR_KEY_REQUIRES_UPGRADE) { 70198c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden AuthorizationSet upgradeParams; 70298c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden if (clientId && clientId->data && clientId->data_length) { 70398c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden upgradeParams.push_back(TAG_APPLICATION_ID, *clientId); 70498c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden } 70598c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden if (appData && appData->data && appData->data_length) { 70698c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden upgradeParams.push_back(TAG_APPLICATION_DATA, *appData); 70798c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden } 70898c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden rc = upgradeKeyBlob(name, targetUid, upgradeParams, &keyBlob); 70998c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden if (rc != ::NO_ERROR) { 71098c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden return rc; 71198c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden } 71298c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden key = {keyBlob.getValue(), static_cast<size_t>(keyBlob.getLength())}; 71398c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden rc = dev->get_key_characteristics(dev, &key, clientId, appData, &out); 71498c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden } 715715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden if (rc != KM_ERROR_OK) { 716715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden return rc; 717c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 718715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden 719715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden outCharacteristics->characteristics = out; 720715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden return ::NO_ERROR; 721c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 722c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 723c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::importKey(const String16& name, const KeymasterArguments& params, 724c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_key_format_t format, const uint8_t* keyData, 725c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden size_t keyLength, int uid, int flags, 726c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden KeyCharacteristics* outCharacteristics) { 727c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid = getEffectiveUid(uid); 728c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int rc = checkBinderPermissionAndKeystoreState(P_INSERT, uid, flags & KEYSTORE_FLAG_ENCRYPTED); 729c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc != ::NO_ERROR) { 730c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return rc; 731c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 732c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 733c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = KM_ERROR_UNIMPLEMENTED; 734c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden bool isFallback = false; 735c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_key_blob_t blob; 736715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden keymaster_key_characteristics_t out = {{nullptr, 0}, {nullptr, 0}}; 737c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 738715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const auto* device = mKeyStore->getDevice(); 739715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const auto* fallback = mKeyStore->getFallbackDevice(); 740c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden std::vector<keymaster_key_param_t> opParams(params.params); 741c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const keymaster_key_param_set_t inParams = {opParams.data(), opParams.size()}; 742c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const keymaster_blob_t input = {keyData, keyLength}; 743c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (device == NULL) { 744c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 745c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 746c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (device->common.module->module_api_version >= KEYMASTER_MODULE_API_VERSION_1_0 && 747c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden device->import_key != NULL) { 748715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden rc = device->import_key(device, &inParams, format, &input, &blob, 749715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden outCharacteristics ? &out : nullptr); 750c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 751c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc && fallback->import_key != NULL) { 752c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("Primary keymaster device failed to import key, falling back to SW."); 753c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden isFallback = true; 754715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden rc = fallback->import_key(fallback, &inParams, format, &input, &blob, 755715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden outCharacteristics ? &out : nullptr); 756c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 757715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden if (outCharacteristics) { 758715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden outCharacteristics->characteristics = out; 759c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 760715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden 761c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc) { 762c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return rc; 763c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 764c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 765c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 766c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 filename(mKeyStore->getKeyNameForUidWithDir(name8, uid)); 767c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 768c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Blob keyBlob(blob.key_material, blob.key_material_size, NULL, 0, ::TYPE_KEYMASTER_10); 769c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keyBlob.setFallback(isFallback); 770c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keyBlob.setEncrypted(flags & KEYSTORE_FLAG_ENCRYPTED); 771c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 772715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden free(const_cast<uint8_t*>(blob.key_material)); 773c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 774c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return mKeyStore->put(filename.string(), &keyBlob, get_user_id(uid)); 775c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 776c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 777c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenvoid KeyStoreService::exportKey(const String16& name, keymaster_key_format_t format, 778c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const keymaster_blob_t* clientId, const keymaster_blob_t* appData, 779c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t uid, ExportResult* result) { 780c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 781c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t targetUid = getEffectiveUid(uid); 782c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t callingUid = IPCThreadState::self()->getCallingUid(); 783c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!is_granted_to(callingUid, targetUid)) { 784c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("uid %d not permitted to act for uid %d in exportKey", callingUid, targetUid); 785c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = ::PERMISSION_DENIED; 786c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 787c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 788c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 789c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Blob keyBlob; 790c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 791c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int rc; 792c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 793c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ResponseCode responseCode = 794c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->getKeyForName(&keyBlob, name8, targetUid, TYPE_KEYMASTER_10); 795c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (responseCode != ::NO_ERROR) { 796c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = responseCode; 797c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 798c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 799c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_key_blob_t key; 800c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden key.key_material_size = keyBlob.getLength(); 801c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden key.key_material = keyBlob.getValue(); 802715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden auto* dev = mKeyStore->getDeviceForBlob(keyBlob); 803c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!dev->export_key) { 804c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = KM_ERROR_UNIMPLEMENTED; 805c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 806c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 807c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_blob_t output = {NULL, 0}; 808c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = dev->export_key(dev, format, &key, clientId, appData, &output); 809c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->exportData.reset(const_cast<uint8_t*>(output.data)); 810c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->dataLength = output.data_length; 811c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = rc ? rc : ::NO_ERROR; 812c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 813c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 814c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenvoid KeyStoreService::begin(const sp<IBinder>& appToken, const String16& name, 815c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_purpose_t purpose, bool pruneable, 816c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const KeymasterArguments& params, const uint8_t* entropy, 817c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden size_t entropyLength, int32_t uid, OperationResult* result) { 818c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t callingUid = IPCThreadState::self()->getCallingUid(); 819c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t targetUid = getEffectiveUid(uid); 820c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!is_granted_to(callingUid, targetUid)) { 821c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("uid %d not permitted to act for uid %d in begin", callingUid, targetUid); 822c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = ::PERMISSION_DENIED; 823c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 824c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 825c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!pruneable && get_app_id(callingUid) != AID_SYSTEM) { 826c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGE("Non-system uid %d trying to start non-pruneable operation", callingUid); 827c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = ::PERMISSION_DENIED; 828c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 829c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 830c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkAllowedOperationParams(params.params)) { 831c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = KM_ERROR_INVALID_ARGUMENT; 832c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 833c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 834c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Blob keyBlob; 835c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden String8 name8(name); 836c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ResponseCode responseCode = 837c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mKeyStore->getKeyForName(&keyBlob, name8, targetUid, TYPE_KEYMASTER_10); 838c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (responseCode != ::NO_ERROR) { 839c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = responseCode; 840c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 841c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 842c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_key_blob_t key; 843c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden key.key_material_size = keyBlob.getLength(); 844c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden key.key_material = keyBlob.getValue(); 845c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_operation_handle_t handle; 846715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden auto* dev = mKeyStore->getDeviceForBlob(keyBlob); 847c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_error_t err = KM_ERROR_UNIMPLEMENTED; 848c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden std::vector<keymaster_key_param_t> opParams(params.params); 849c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden Unique_keymaster_key_characteristics characteristics; 850c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden characteristics.reset(new keymaster_key_characteristics_t); 851c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden err = getOperationCharacteristics(key, dev, opParams, characteristics.get()); 85298c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden if (err == KM_ERROR_KEY_REQUIRES_UPGRADE) { 85398c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden int32_t rc = upgradeKeyBlob(name, targetUid, 85498c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden AuthorizationSet(opParams.data(), opParams.size()), &keyBlob); 85598c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden if (rc != ::NO_ERROR) { 85698c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden result->resultCode = rc; 85798c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden return; 85898c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden } 85998c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden key = {keyBlob.getValue(), static_cast<size_t>(keyBlob.getLength())}; 86098c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden err = getOperationCharacteristics(key, dev, opParams, characteristics.get()); 86198c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden } 862c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (err) { 863c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = err; 864c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 865c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 866c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const hw_auth_token_t* authToken = NULL; 867c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t authResult = getAuthToken(characteristics.get(), 0, purpose, &authToken, 868c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden /*failOnTokenMissing*/ false); 869c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // If per-operation auth is needed we need to begin the operation and 870c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // the client will need to authorize that operation before calling 871c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // update. Any other auth issues stop here. 872c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (authResult != ::NO_ERROR && authResult != ::OP_AUTH_NEEDED) { 873c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = authResult; 874c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 875c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 876c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden addAuthToParams(&opParams, authToken); 877c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // Add entropy to the device first. 878c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (entropy) { 879c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (dev->add_rng_entropy) { 880c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden err = dev->add_rng_entropy(dev, entropy, entropyLength); 881c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else { 882c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden err = KM_ERROR_UNIMPLEMENTED; 883c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 884c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (err) { 885c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = err; 886c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 887c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 888c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 889c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_key_param_set_t inParams = {opParams.data(), opParams.size()}; 890c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 891c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // Create a keyid for this key. 892c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::km_id_t keyid; 893c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!enforcement_policy.CreateKeyId(key, &keyid)) { 894c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGE("Failed to create a key ID for authorization checking."); 895c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = KM_ERROR_UNKNOWN_ERROR; 896c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 897c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 898c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 899c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // Check that all key authorization policy requirements are met. 900c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::AuthorizationSet key_auths(characteristics->hw_enforced); 901c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden key_auths.push_back(characteristics->sw_enforced); 902c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::AuthorizationSet operation_params(inParams); 903c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden err = enforcement_policy.AuthorizeOperation(purpose, keyid, key_auths, operation_params, 904c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 0 /* op_handle */, true /* is_begin_operation */); 905c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (err) { 906c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = err; 907c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 908c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 909c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 910c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_key_param_set_t outParams = {NULL, 0}; 911c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 912c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // If there are more than MAX_OPERATIONS, abort the oldest operation that was started as 913c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // pruneable. 914c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden while (mOperationMap.getOperationCount() >= MAX_OPERATIONS) { 915c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGD("Reached or exceeded concurrent operations limit"); 916c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!pruneOperation()) { 917c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden break; 918c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 919c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 920c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 921c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden err = dev->begin(dev, purpose, &key, &inParams, &outParams, &handle); 922c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (err != KM_ERROR_OK) { 923c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGE("Got error %d from begin()", err); 924c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 925c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 926c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // If there are too many operations abort the oldest operation that was 927c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // started as pruneable and try again. 928c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden while (err == KM_ERROR_TOO_MANY_OPERATIONS && mOperationMap.hasPruneableOperation()) { 929c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGE("Ran out of operation handles"); 930c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!pruneOperation()) { 931c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden break; 932c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 933c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden err = dev->begin(dev, purpose, &key, &inParams, &outParams, &handle); 934c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 935c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (err) { 936c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = err; 937c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 938c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 939c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 940c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden sp<IBinder> operationToken = mOperationMap.addOperation(handle, keyid, purpose, dev, appToken, 941c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden characteristics.release(), pruneable); 942c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (authToken) { 943c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mOperationMap.setOperationAuthToken(operationToken, authToken); 944c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 945c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // Return the authentication lookup result. If this is a per operation 946c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // auth'd key then the resultCode will be ::OP_AUTH_NEEDED and the 947c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // application should get an auth token using the handle before the 948c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // first call to update, which will fail if keystore hasn't received the 949c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // auth token. 950c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = authResult; 951c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->token = operationToken; 952c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->handle = handle; 953c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (outParams.params) { 954c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->outParams.params.assign(outParams.params, outParams.params + outParams.length); 955c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden free(outParams.params); 956c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 957c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 958c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 959c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenvoid KeyStoreService::update(const sp<IBinder>& token, const KeymasterArguments& params, 960c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const uint8_t* data, size_t dataLength, OperationResult* result) { 961c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkAllowedOperationParams(params.params)) { 962c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = KM_ERROR_INVALID_ARGUMENT; 963c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 964c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 965715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const keymaster2_device_t* dev; 966c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_operation_handle_t handle; 967c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_purpose_t purpose; 968c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::km_id_t keyid; 969c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const keymaster_key_characteristics_t* characteristics; 970c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!mOperationMap.getOperation(token, &handle, &keyid, &purpose, &dev, &characteristics)) { 971c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = KM_ERROR_INVALID_OPERATION_HANDLE; 972c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 973c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 974c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden std::vector<keymaster_key_param_t> opParams(params.params); 975c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t authResult = addOperationAuthTokenIfNeeded(token, &opParams); 976c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (authResult != ::NO_ERROR) { 977c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = authResult; 978c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 979c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 980c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_key_param_set_t inParams = {opParams.data(), opParams.size()}; 981c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_blob_t input = {data, dataLength}; 982c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden size_t consumed = 0; 983c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_blob_t output = {NULL, 0}; 984c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_key_param_set_t outParams = {NULL, 0}; 985c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 986c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // Check that all key authorization policy requirements are met. 987c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::AuthorizationSet key_auths(characteristics->hw_enforced); 988c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden key_auths.push_back(characteristics->sw_enforced); 989c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::AuthorizationSet operation_params(inParams); 990c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = enforcement_policy.AuthorizeOperation( 991c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden purpose, keyid, key_auths, operation_params, handle, false /* is_begin_operation */); 992c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result->resultCode) { 993c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 994c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 995c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 996c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_error_t err = 997c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden dev->update(dev, handle, &inParams, &input, &consumed, &outParams, &output); 998c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->data.reset(const_cast<uint8_t*>(output.data)); 999c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->dataLength = output.data_length; 1000c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->inputConsumed = consumed; 1001c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = err ? (int32_t)err : ::NO_ERROR; 1002c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (outParams.params) { 1003c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->outParams.params.assign(outParams.params, outParams.params + outParams.length); 1004c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden free(outParams.params); 1005c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1006c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1007c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1008c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenvoid KeyStoreService::finish(const sp<IBinder>& token, const KeymasterArguments& params, 1009c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const uint8_t* signature, size_t signatureLength, 1010c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const uint8_t* entropy, size_t entropyLength, 1011c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden OperationResult* result) { 1012c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkAllowedOperationParams(params.params)) { 1013c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = KM_ERROR_INVALID_ARGUMENT; 1014c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 1015c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1016715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const keymaster2_device_t* dev; 1017c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_operation_handle_t handle; 1018c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_purpose_t purpose; 1019c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::km_id_t keyid; 1020c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const keymaster_key_characteristics_t* characteristics; 1021c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!mOperationMap.getOperation(token, &handle, &keyid, &purpose, &dev, &characteristics)) { 1022c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = KM_ERROR_INVALID_OPERATION_HANDLE; 1023c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 1024c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1025c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden std::vector<keymaster_key_param_t> opParams(params.params); 1026c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t authResult = addOperationAuthTokenIfNeeded(token, &opParams); 1027c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (authResult != ::NO_ERROR) { 1028c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = authResult; 1029c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 1030c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1031c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_error_t err; 1032c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (entropy) { 1033c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (dev->add_rng_entropy) { 1034c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden err = dev->add_rng_entropy(dev, entropy, entropyLength); 1035c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else { 1036c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden err = KM_ERROR_UNIMPLEMENTED; 1037c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1038c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (err) { 1039c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = err; 1040c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 1041c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1042c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1043c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1044c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_key_param_set_t inParams = {opParams.data(), opParams.size()}; 1045715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden keymaster_blob_t input = {nullptr, 0}; 1046715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden keymaster_blob_t sig = {signature, signatureLength}; 1047715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden keymaster_blob_t output = {nullptr, 0}; 1048715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden keymaster_key_param_set_t outParams = {nullptr, 0}; 1049c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1050c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // Check that all key authorization policy requirements are met. 1051c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::AuthorizationSet key_auths(characteristics->hw_enforced); 1052c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden key_auths.push_back(characteristics->sw_enforced); 1053c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::AuthorizationSet operation_params(inParams); 1054c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden err = enforcement_policy.AuthorizeOperation(purpose, keyid, key_auths, operation_params, handle, 1055c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden false /* is_begin_operation */); 1056c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (err) { 1057c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = err; 1058c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 1059c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1060c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1061715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden err = 1062715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden dev->finish(dev, handle, &inParams, &input /* TODO(swillden): wire up input to finish() */, 1063715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden &sig, &outParams, &output); 1064c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // Remove the operation regardless of the result 1065c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mOperationMap.removeOperation(token); 1066c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mAuthTokenTable.MarkCompleted(handle); 1067c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1068c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->data.reset(const_cast<uint8_t*>(output.data)); 1069c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->dataLength = output.data_length; 1070c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->resultCode = err ? (int32_t)err : ::NO_ERROR; 1071c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (outParams.params) { 1072c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden result->outParams.params.assign(outParams.params, outParams.params + outParams.length); 1073c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden free(outParams.params); 1074c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1075c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1076c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1077c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::abort(const sp<IBinder>& token) { 1078715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const keymaster2_device_t* dev; 1079c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_operation_handle_t handle; 1080c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_purpose_t purpose; 1081c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::km_id_t keyid; 1082c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!mOperationMap.getOperation(token, &handle, &keyid, &purpose, &dev, NULL)) { 1083c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return KM_ERROR_INVALID_OPERATION_HANDLE; 1084c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1085c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mOperationMap.removeOperation(token); 1086c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t rc; 1087c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!dev->abort) { 1088c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = KM_ERROR_UNIMPLEMENTED; 1089c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else { 1090c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden rc = dev->abort(dev, handle); 1091c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1092c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mAuthTokenTable.MarkCompleted(handle); 1093c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc) { 1094c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return rc; 1095c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1096c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 1097c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1098c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1099c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenbool KeyStoreService::isOperationAuthorized(const sp<IBinder>& token) { 1100715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const keymaster2_device_t* dev; 1101c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_operation_handle_t handle; 1102c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const keymaster_key_characteristics_t* characteristics; 1103c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_purpose_t purpose; 1104c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::km_id_t keyid; 1105c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!mOperationMap.getOperation(token, &handle, &keyid, &purpose, &dev, &characteristics)) { 1106c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return false; 1107c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1108c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const hw_auth_token_t* authToken = NULL; 1109c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mOperationMap.getOperationAuthToken(token, &authToken); 1110c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden std::vector<keymaster_key_param_t> ignored; 1111c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t authResult = addOperationAuthTokenIfNeeded(token, &ignored); 1112c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return authResult == ::NO_ERROR; 1113c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1114c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1115c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::addAuthToken(const uint8_t* token, size_t length) { 1116c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(P_ADD_AUTH)) { 1117c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("addAuthToken: permission denied for %d", IPCThreadState::self()->getCallingUid()); 1118c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 1119c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1120c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (length != sizeof(hw_auth_token_t)) { 1121c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return KM_ERROR_INVALID_ARGUMENT; 1122c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1123c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden hw_auth_token_t* authToken = new hw_auth_token_t; 1124c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden memcpy(reinterpret_cast<void*>(authToken), token, sizeof(hw_auth_token_t)); 1125c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // The table takes ownership of authToken. 1126c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mAuthTokenTable.AddAuthenticationToken(authToken); 1127c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 1128c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1129c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 113050eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willdenint32_t KeyStoreService::attestKey(const String16& name, const KeymasterArguments& params, 113150eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden KeymasterCertificateChain* outChain) { 113250eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden if (!outChain) 113350eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden return KM_ERROR_OUTPUT_PARAMETER_NULL; 113450eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden 113550eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden if (!checkAllowedOperationParams(params.params)) { 113650eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden return KM_ERROR_INVALID_ARGUMENT; 113750eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden } 113850eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden 113950eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden uid_t callingUid = IPCThreadState::self()->getCallingUid(); 114050eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden 114150eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden Blob keyBlob; 114250eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden String8 name8(name); 114350eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden ResponseCode responseCode = 114450eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden mKeyStore->getKeyForName(&keyBlob, name8, callingUid, TYPE_KEYMASTER_10); 114550eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden if (responseCode != ::NO_ERROR) { 114650eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden return responseCode; 114750eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden } 114850eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden 114950eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden keymaster_key_blob_t key = {keyBlob.getValue(), 115050eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden static_cast<size_t>(std::max(0, keyBlob.getLength()))}; 115150eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden auto* dev = mKeyStore->getDeviceForBlob(keyBlob); 115250eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden if (!dev->attest_key) 115350eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden return KM_ERROR_UNIMPLEMENTED; 115450eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden 115550eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden const keymaster_key_param_set_t in_params = { 115650eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden const_cast<keymaster_key_param_t*>(params.params.data()), params.params.size()}; 115750eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden outChain->chain = {nullptr, 0}; 115850eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden int32_t rc = dev->attest_key(dev, &key, &in_params, &outChain->chain); 115950eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden if (rc) 116050eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden return rc; 116150eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden return ::NO_ERROR; 116250eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden} 116350eb1b2f89ca455b2e9caa635bfe0b5ed94b416aShawn Willden 1164c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/** 1165c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Prune the oldest pruneable operation. 1166c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 1167c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenbool KeyStoreService::pruneOperation() { 1168c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden sp<IBinder> oldest = mOperationMap.getOldestPruneableOperation(); 1169c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGD("Trying to prune operation %p", oldest.get()); 1170c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden size_t op_count_before_abort = mOperationMap.getOperationCount(); 1171c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // We mostly ignore errors from abort() because all we care about is whether at least 1172c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // one operation has been removed. 1173c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int abort_error = abort(oldest); 1174c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (mOperationMap.getOperationCount() >= op_count_before_abort) { 1175c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGE("Failed to abort pruneable operation %p, error: %d", oldest.get(), abort_error); 1176c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return false; 1177c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1178c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return true; 1179c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1180c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1181c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/** 1182c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Get the effective target uid for a binder operation that takes an 1183c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * optional uid as the target. 1184c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 1185c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenuid_t KeyStoreService::getEffectiveUid(int32_t targetUid) { 1186c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (targetUid == UID_SELF) { 1187c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return IPCThreadState::self()->getCallingUid(); 1188c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1189c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return static_cast<uid_t>(targetUid); 1190c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1191c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1192c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/** 1193c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Check if the caller of the current binder method has the required 1194c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * permission and if acting on other uids the grants to do so. 1195c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 1196c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenbool KeyStoreService::checkBinderPermission(perm_t permission, int32_t targetUid) { 1197c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t callingUid = IPCThreadState::self()->getCallingUid(); 1198c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden pid_t spid = IPCThreadState::self()->getCallingPid(); 1199c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!has_permission(callingUid, permission, spid)) { 1200c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("permission %s denied for %d", get_perm_label(permission), callingUid); 1201c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return false; 1202c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1203c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!is_granted_to(callingUid, getEffectiveUid(targetUid))) { 1204c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("uid %d not granted to act for %d", callingUid, targetUid); 1205c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return false; 1206c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1207c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return true; 1208c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1209c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1210c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/** 1211c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Check if the caller of the current binder method has the required 1212c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * permission and the target uid is the caller or the caller is system. 1213c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 1214c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenbool KeyStoreService::checkBinderPermissionSelfOrSystem(perm_t permission, int32_t targetUid) { 1215c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t callingUid = IPCThreadState::self()->getCallingUid(); 1216c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden pid_t spid = IPCThreadState::self()->getCallingPid(); 1217c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!has_permission(callingUid, permission, spid)) { 1218c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("permission %s denied for %d", get_perm_label(permission), callingUid); 1219c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return false; 1220c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1221c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return getEffectiveUid(targetUid) == callingUid || callingUid == AID_SYSTEM; 1222c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1223c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1224c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/** 1225c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Check if the caller of the current binder method has the required 1226c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * permission or the target of the operation is the caller's uid. This is 1227c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * for operation where the permission is only for cross-uid activity and all 1228c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * uids are allowed to act on their own (ie: clearing all entries for a 1229c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * given uid). 1230c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 1231c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenbool KeyStoreService::checkBinderPermissionOrSelfTarget(perm_t permission, int32_t targetUid) { 1232c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden uid_t callingUid = IPCThreadState::self()->getCallingUid(); 1233c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (getEffectiveUid(targetUid) == callingUid) { 1234c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return true; 1235c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else { 1236c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return checkBinderPermission(permission, targetUid); 1237c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1238c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1239c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1240c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/** 1241c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Helper method to check that the caller has the required permission as 1242c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * well as the keystore is in the unlocked state if checkUnlocked is true. 1243c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * 1244c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Returns NO_ERROR on success, PERMISSION_DENIED on a permission error and 1245c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * otherwise the state of keystore when not unlocked and checkUnlocked is 1246c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * true. 1247c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 1248c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::checkBinderPermissionAndKeystoreState(perm_t permission, int32_t targetUid, 1249c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden bool checkUnlocked) { 1250c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!checkBinderPermission(permission, targetUid)) { 1251c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::PERMISSION_DENIED; 1252c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1253c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden State state = mKeyStore->getState(get_user_id(getEffectiveUid(targetUid))); 1254c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (checkUnlocked && !isKeystoreUnlocked(state)) { 1255c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return state; 1256c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1257c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1258c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 1259c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1260c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1261c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenbool KeyStoreService::isKeystoreUnlocked(State state) { 1262c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden switch (state) { 1263c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case ::STATE_NO_ERROR: 1264c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return true; 1265c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case ::STATE_UNINITIALIZED: 1266c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case ::STATE_LOCKED: 1267c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return false; 1268c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1269c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return false; 1270c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1271c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1272715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willdenbool KeyStoreService::isKeyTypeSupported(const keymaster2_device_t* device, 1273c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_keypair_t keyType) { 1274c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const int32_t device_api = device->common.module->module_api_version; 1275c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (device_api == KEYMASTER_MODULE_API_VERSION_0_2) { 1276c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden switch (keyType) { 1277c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case TYPE_RSA: 1278c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case TYPE_DSA: 1279c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case TYPE_EC: 1280c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return true; 1281c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden default: 1282c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return false; 1283c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1284c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else if (device_api >= KEYMASTER_MODULE_API_VERSION_0_3) { 1285c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden switch (keyType) { 1286c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case TYPE_RSA: 1287c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return true; 1288c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case TYPE_DSA: 1289c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return device->flags & KEYMASTER_SUPPORTS_DSA; 1290c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case TYPE_EC: 1291c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return device->flags & KEYMASTER_SUPPORTS_EC; 1292c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden default: 1293c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return false; 1294c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1295c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else { 1296c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return keyType == TYPE_RSA; 1297c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1298c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1299c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1300c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/** 1301c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Check that all keymaster_key_param_t's provided by the application are 1302c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * allowed. Any parameter that keystore adds itself should be disallowed here. 1303c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 1304c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenbool KeyStoreService::checkAllowedOperationParams( 1305c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const std::vector<keymaster_key_param_t>& params) { 1306c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden for (auto param : params) { 1307c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden switch (param.tag) { 1308c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case KM_TAG_AUTH_TOKEN: 1309c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return false; 1310c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden default: 1311c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden break; 1312c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1313c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1314c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return true; 1315c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1316c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1317c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenkeymaster_error_t KeyStoreService::getOperationCharacteristics( 1318715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const keymaster_key_blob_t& key, const keymaster2_device_t* dev, 1319c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const std::vector<keymaster_key_param_t>& params, keymaster_key_characteristics_t* out) { 1320c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden UniquePtr<keymaster_blob_t> appId; 1321c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden UniquePtr<keymaster_blob_t> appData; 1322c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden for (auto param : params) { 1323c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (param.tag == KM_TAG_APPLICATION_ID) { 1324c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden appId.reset(new keymaster_blob_t); 1325c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden appId->data = param.blob.data; 1326c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden appId->data_length = param.blob.data_length; 1327c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else if (param.tag == KM_TAG_APPLICATION_DATA) { 1328c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden appData.reset(new keymaster_blob_t); 1329c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden appData->data = param.blob.data; 1330c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden appData->data_length = param.blob.data_length; 1331c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1332c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1333715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden keymaster_key_characteristics_t result = {{nullptr, 0}, {nullptr, 0}}; 1334c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!dev->get_key_characteristics) { 1335c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return KM_ERROR_UNIMPLEMENTED; 1336c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1337c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_error_t error = 1338c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden dev->get_key_characteristics(dev, &key, appId.get(), appData.get(), &result); 1339715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden if (error == KM_ERROR_OK) { 1340715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden *out = result; 1341c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1342c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return error; 1343c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1344c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1345c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/** 1346c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Get the auth token for this operation from the auth token table. 1347c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * 1348c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Returns ::NO_ERROR if the auth token was set or none was required. 1349c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * ::OP_AUTH_NEEDED if it is a per op authorization, no 1350c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * authorization token exists for that operation and 1351c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * failOnTokenMissing is false. 1352c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * KM_ERROR_KEY_USER_NOT_AUTHENTICATED if there is no valid auth 1353c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * token for the operation 1354c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 1355c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::getAuthToken(const keymaster_key_characteristics_t* characteristics, 1356c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_operation_handle_t handle, 1357c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_purpose_t purpose, 1358c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const hw_auth_token_t** authToken, bool failOnTokenMissing) { 1359c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1360c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden std::vector<keymaster_key_param_t> allCharacteristics; 1361c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden for (size_t i = 0; i < characteristics->sw_enforced.length; i++) { 1362c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden allCharacteristics.push_back(characteristics->sw_enforced.params[i]); 1363c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1364c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden for (size_t i = 0; i < characteristics->hw_enforced.length; i++) { 1365c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden allCharacteristics.push_back(characteristics->hw_enforced.params[i]); 1366c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1367c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::AuthTokenTable::Error err = mAuthTokenTable.FindAuthorization( 1368c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden allCharacteristics.data(), allCharacteristics.size(), purpose, handle, authToken); 1369c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden switch (err) { 1370c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case keymaster::AuthTokenTable::OK: 1371c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case keymaster::AuthTokenTable::AUTH_NOT_REQUIRED: 1372c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 1373c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case keymaster::AuthTokenTable::AUTH_TOKEN_NOT_FOUND: 1374c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case keymaster::AuthTokenTable::AUTH_TOKEN_EXPIRED: 1375c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case keymaster::AuthTokenTable::AUTH_TOKEN_WRONG_SID: 1376c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return KM_ERROR_KEY_USER_NOT_AUTHENTICATED; 1377c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden case keymaster::AuthTokenTable::OP_HANDLE_REQUIRED: 1378c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return failOnTokenMissing ? (int32_t)KM_ERROR_KEY_USER_NOT_AUTHENTICATED 1379c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden : (int32_t)::OP_AUTH_NEEDED; 1380c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden default: 1381c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGE("Unexpected FindAuthorization return value %d", err); 1382c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return KM_ERROR_INVALID_ARGUMENT; 1383c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1384c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1385c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1386c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdeninline void KeyStoreService::addAuthToParams(std::vector<keymaster_key_param_t>* params, 1387c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const hw_auth_token_t* token) { 1388c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (token) { 1389c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden params->push_back(keymaster_param_blob( 1390c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden KM_TAG_AUTH_TOKEN, reinterpret_cast<const uint8_t*>(token), sizeof(hw_auth_token_t))); 1391c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1392c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1393c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1394c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/** 1395c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Add the auth token for the operation to the param list if the operation 1396c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * requires authorization. Uses the cached result in the OperationMap if available 1397c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * otherwise gets the token from the AuthTokenTable and caches the result. 1398c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * 1399c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Returns ::NO_ERROR if the auth token was added or not needed. 1400c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * KM_ERROR_KEY_USER_NOT_AUTHENTICATED if the operation is not 1401c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * authenticated. 1402c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * KM_ERROR_INVALID_OPERATION_HANDLE if token is not a valid 1403c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * operation token. 1404c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 1405c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::addOperationAuthTokenIfNeeded(sp<IBinder> token, 1406c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden std::vector<keymaster_key_param_t>* params) { 1407c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const hw_auth_token_t* authToken = NULL; 1408c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mOperationMap.getOperationAuthToken(token, &authToken); 1409c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!authToken) { 1410715d023c9294cf4860f73c8d83e82c5aa699add6Shawn Willden const keymaster2_device_t* dev; 1411c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_operation_handle_t handle; 1412c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const keymaster_key_characteristics_t* characteristics = NULL; 1413c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_purpose_t purpose; 1414c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster::km_id_t keyid; 1415c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!mOperationMap.getOperation(token, &handle, &keyid, &purpose, &dev, &characteristics)) { 1416c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return KM_ERROR_INVALID_OPERATION_HANDLE; 1417c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1418c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t result = getAuthToken(characteristics, handle, purpose, &authToken); 1419c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result != ::NO_ERROR) { 1420c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return result; 1421c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1422c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (authToken) { 1423c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden mOperationMap.setOperationAuthToken(token, authToken); 1424c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1425c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1426c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden addAuthToParams(params, authToken); 1427c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 1428c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1429c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1430c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden/** 1431c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * Translate a result value to a legacy return value. All keystore errors are 1432c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden * preserved and keymaster errors become SYSTEM_ERRORs 1433c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden */ 1434c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::translateResultToLegacyResult(int32_t result) { 1435c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result > 0) { 1436c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return result; 1437c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1438c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 1439c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1440c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1441c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenkeymaster_key_param_t* 1442c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn WilldenKeyStoreService::getKeyAlgorithm(keymaster_key_characteristics_t* characteristics) { 1443c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden for (size_t i = 0; i < characteristics->hw_enforced.length; i++) { 1444c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (characteristics->hw_enforced.params[i].tag == KM_TAG_ALGORITHM) { 1445c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return &characteristics->hw_enforced.params[i]; 1446c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1447c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1448c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden for (size_t i = 0; i < characteristics->sw_enforced.length; i++) { 1449c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (characteristics->sw_enforced.params[i].tag == KM_TAG_ALGORITHM) { 1450c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return &characteristics->sw_enforced.params[i]; 1451c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1452c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1453c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return NULL; 1454c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1455c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1456c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenvoid KeyStoreService::addLegacyBeginParams(const String16& name, 1457c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden std::vector<keymaster_key_param_t>& params) { 1458c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // All legacy keys are DIGEST_NONE/PAD_NONE. 1459c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden params.push_back(keymaster_param_enum(KM_TAG_DIGEST, KM_DIGEST_NONE)); 1460c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden params.push_back(keymaster_param_enum(KM_TAG_PADDING, KM_PAD_NONE)); 1461c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1462c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden // Look up the algorithm of the key. 1463c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden KeyCharacteristics characteristics; 1464c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden int32_t rc = getKeyCharacteristics(name, NULL, NULL, UID_SELF, &characteristics); 1465c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (rc != ::NO_ERROR) { 1466c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGE("Failed to get key characteristics"); 1467c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 1468c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1469c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_key_param_t* algorithm = getKeyAlgorithm(&characteristics.characteristics); 1470c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (!algorithm) { 1471c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGE("getKeyCharacteristics did not include KM_TAG_ALGORITHM"); 1472c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return; 1473c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1474c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden params.push_back(*algorithm); 1475c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1476c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1477c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willdenint32_t KeyStoreService::doLegacySignVerify(const String16& name, const uint8_t* data, 1478c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden size_t length, uint8_t** out, size_t* outLength, 1479c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden const uint8_t* signature, size_t signatureLength, 1480c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden keymaster_purpose_t purpose) { 1481c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1482c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden std::basic_stringstream<uint8_t> outBuffer; 1483c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden OperationResult result; 1484c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden KeymasterArguments inArgs; 1485c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden addLegacyBeginParams(name, inArgs.params); 1486c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden sp<IBinder> appToken(new BBinder); 1487c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden sp<IBinder> token; 1488c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1489c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden begin(appToken, name, purpose, true, inArgs, NULL, 0, UID_SELF, &result); 1490c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result.resultCode != ResponseCode::NO_ERROR) { 1491c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result.resultCode == ::KEY_NOT_FOUND) { 1492c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("Key not found"); 1493c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } else { 1494c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("Error in begin: %d", result.resultCode); 1495c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1496c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return translateResultToLegacyResult(result.resultCode); 1497c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1498c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden inArgs.params.clear(); 1499c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden token = result.token; 1500c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden size_t consumed = 0; 1501c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden size_t lastConsumed = 0; 1502c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden do { 1503c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden update(token, inArgs, data + consumed, length - consumed, &result); 1504c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result.resultCode != ResponseCode::NO_ERROR) { 1505c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("Error in update: %d", result.resultCode); 1506c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return translateResultToLegacyResult(result.resultCode); 1507c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1508c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (out) { 1509c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden outBuffer.write(result.data.get(), result.dataLength); 1510c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1511c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden lastConsumed = result.inputConsumed; 1512c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden consumed += lastConsumed; 1513c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } while (consumed < length && lastConsumed > 0); 1514c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1515c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (consumed != length) { 1516c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("Not all data consumed. Consumed %zu of %zu", consumed, length); 1517c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::SYSTEM_ERROR; 1518c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1519c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1520c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden finish(token, inArgs, signature, signatureLength, NULL, 0, &result); 1521c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (result.resultCode != ResponseCode::NO_ERROR) { 1522c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden ALOGW("Error in finish: %d", result.resultCode); 1523c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return translateResultToLegacyResult(result.resultCode); 1524c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1525c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (out) { 1526c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden outBuffer.write(result.data.get(), result.dataLength); 1527c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1528c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1529c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden if (out) { 1530c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden auto buf = outBuffer.str(); 1531c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden *out = new uint8_t[buf.size()]; 1532c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden memcpy(*out, buf.c_str(), buf.size()); 1533c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden *outLength = buf.size(); 1534c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden } 1535c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 1536c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden return ::NO_ERROR; 1537c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} 1538c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden 153998c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willdenint32_t KeyStoreService::upgradeKeyBlob(const String16& name, uid_t uid, 154098c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden const AuthorizationSet& params, Blob* blob) { 154198c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden // Read the blob rather than assuming the caller provided the right name/uid/blob triplet. 154298c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden String8 name8(name); 154398c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden ResponseCode responseCode = mKeyStore->getKeyForName(blob, name8, uid, TYPE_KEYMASTER_10); 154498c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden if (responseCode != ::NO_ERROR) { 154598c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden return responseCode; 154698c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden } 154798c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden 154898c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden keymaster_key_blob_t key = {blob->getValue(), static_cast<size_t>(blob->getLength())}; 154998c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden auto* dev = mKeyStore->getDeviceForBlob(*blob); 155098c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden keymaster_key_blob_t upgraded_key; 155198c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden int32_t rc = dev->upgrade_key(dev, &key, ¶ms, &upgraded_key); 155298c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden if (rc != KM_ERROR_OK) { 155398c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden return rc; 155498c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden } 155598c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden UniquePtr<uint8_t, Malloc_Delete> upgraded_key_deleter( 155698c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden const_cast<uint8_t*>(upgraded_key.key_material)); 155798c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden 155898c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden rc = del(name, uid); 155998c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden if (rc != ::NO_ERROR) { 156098c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden return rc; 156198c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden } 156298c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden 156398c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden String8 filename(mKeyStore->getKeyNameForUidWithDir(name8, uid)); 156498c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden Blob newBlob(upgraded_key.key_material, upgraded_key.key_material_size, nullptr /* info */, 156598c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden 0 /* infoLength */, ::TYPE_KEYMASTER_10); 156698c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden newBlob.setFallback(blob->isFallback()); 156798c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden newBlob.setEncrypted(blob->isEncrypted()); 156898c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden 156998c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden rc = mKeyStore->put(filename.string(), &newBlob, get_user_id(uid)); 157098c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden 157198c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden // Re-read blob for caller. We can't use newBlob because writing it modified it. 157298c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden responseCode = mKeyStore->getKeyForName(blob, name8, uid, TYPE_KEYMASTER_10); 157398c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden if (responseCode != ::NO_ERROR) { 157498c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden return responseCode; 157598c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden } 157698c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden 157798c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden return rc; 157898c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden} 157998c5916d4a807614fad5fdfb63aa10d724b9ef0aShawn Willden 1580c1d1feee514e6138e1ed8ff924f5453ba8e1408aShawn Willden} // namespace android 1581