14dc536694c5044a624d112f69627856b91d3f82eShawn Willden/* 24dc536694c5044a624d112f69627856b91d3f82eShawn Willden * Copyright (C) 2014 The Android Open Source Project 34dc536694c5044a624d112f69627856b91d3f82eShawn Willden * 44dc536694c5044a624d112f69627856b91d3f82eShawn Willden * Licensed under the Apache License, Version 2.0 (the "License"); 54dc536694c5044a624d112f69627856b91d3f82eShawn Willden * you may not use this file except in compliance with the License. 64dc536694c5044a624d112f69627856b91d3f82eShawn Willden * You may obtain a copy of the License at 74dc536694c5044a624d112f69627856b91d3f82eShawn Willden * 84dc536694c5044a624d112f69627856b91d3f82eShawn Willden * http://www.apache.org/licenses/LICENSE-2.0 94dc536694c5044a624d112f69627856b91d3f82eShawn Willden * 104dc536694c5044a624d112f69627856b91d3f82eShawn Willden * Unless required by applicable law or agreed to in writing, software 114dc536694c5044a624d112f69627856b91d3f82eShawn Willden * distributed under the License is distributed on an "AS IS" BASIS, 124dc536694c5044a624d112f69627856b91d3f82eShawn Willden * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 134dc536694c5044a624d112f69627856b91d3f82eShawn Willden * See the License for the specific language governing permissions and 144dc536694c5044a624d112f69627856b91d3f82eShawn Willden * limitations under the License. 154dc536694c5044a624d112f69627856b91d3f82eShawn Willden */ 164dc536694c5044a624d112f69627856b91d3f82eShawn Willden 17b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden#include <keymaster/keymaster_enforcement.h> 18b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 19b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden#include <assert.h> 20ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden#include <limits.h> 214dc536694c5044a624d112f69627856b91d3f82eShawn Willden#include <string.h> 224dc536694c5044a624d112f69627856b91d3f82eShawn Willden 23b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden#include <openssl/evp.h> 24b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 25b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden#include <hardware/hw_auth_token.h> 26b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden#include <keymaster/android_keymaster_utils.h> 27b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden#include <keymaster/logger.h> 28b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 29ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden#include "List.h" 30ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 31b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willdenusing android::List; 324dc536694c5044a624d112f69627856b91d3f82eShawn Willden 334dc536694c5044a624d112f69627856b91d3f82eShawn Willdennamespace keymaster { 344dc536694c5044a624d112f69627856b91d3f82eShawn Willden 35ada4850659d484dd5ece26dde73072bef16c1517Shawn Willdenclass AccessTimeMap { 36ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden public: 3703d4b6d531eb8c2ebcb4d572a3bf118c70a83ff6Chih-Hung Hsieh explicit AccessTimeMap(uint32_t max_size) : max_size_(max_size) {} 38ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 39ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden /* If the key is found, returns true and fills \p last_access_time. If not found returns 40ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden * false. */ 41ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden bool LastKeyAccessTime(km_id_t keyid, uint32_t* last_access_time) const; 42ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 43ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden /* Updates the last key access time with the currentTime parameter. Adds the key if 44ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden * needed, returning false if key cannot be added because list is full. */ 45ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden bool UpdateKeyAccessTime(km_id_t keyid, uint32_t current_time, uint32_t timeout); 46ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 47ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden private: 48ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden struct AccessTime { 49ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden km_id_t keyid; 50ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden uint32_t access_time; 51ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden uint32_t timeout; 52ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden }; 53ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden android::List<AccessTime> last_access_list_; 54ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden const uint32_t max_size_; 55ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden}; 56ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 57ada4850659d484dd5ece26dde73072bef16c1517Shawn Willdenclass AccessCountMap { 58ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden public: 5903d4b6d531eb8c2ebcb4d572a3bf118c70a83ff6Chih-Hung Hsieh explicit AccessCountMap(uint32_t max_size) : max_size_(max_size) {} 60ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 61ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden /* If the key is found, returns true and fills \p count. If not found returns 62ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden * false. */ 63ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden bool KeyAccessCount(km_id_t keyid, uint32_t* count) const; 64ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 65ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden /* Increments key access count, adding an entry if the key has never been used. Returns 66ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden * false if the list has reached maximum size. */ 67ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden bool IncrementKeyAccessCount(km_id_t keyid); 68ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 69ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden private: 70ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden struct AccessCount { 71ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden km_id_t keyid; 72ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden uint64_t access_count; 73ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden }; 74ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden android::List<AccessCount> access_count_list_; 75ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden const uint32_t max_size_; 76ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden}; 77ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 78b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willdenbool is_public_key_algorithm(const AuthorizationSet& auth_set) { 79b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden keymaster_algorithm_t algorithm; 80b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return auth_set.GetTagValue(TAG_ALGORITHM, &algorithm) && 81b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden (algorithm == KM_ALGORITHM_RSA || algorithm == KM_ALGORITHM_EC); 824dc536694c5044a624d112f69627856b91d3f82eShawn Willden} 834dc536694c5044a624d112f69627856b91d3f82eShawn Willden 84b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willdenstatic keymaster_error_t authorized_purpose(const keymaster_purpose_t purpose, 85b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden const AuthorizationSet& auth_set) { 86b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden switch (purpose) { 87b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_PURPOSE_VERIFY: 88b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_PURPOSE_ENCRYPT: 89b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_PURPOSE_SIGN: 90b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_PURPOSE_DECRYPT: 91b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (auth_set.Contains(TAG_PURPOSE, purpose)) 92b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_OK; 93b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_INCOMPATIBLE_PURPOSE; 944dc536694c5044a624d112f69627856b91d3f82eShawn Willden 95b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden default: 96b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_UNSUPPORTED_PURPOSE; 97b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden } 98b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden} 994dc536694c5044a624d112f69627856b91d3f82eShawn Willden 100b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willdeninline bool is_origination_purpose(keymaster_purpose_t purpose) { 101b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return purpose == KM_PURPOSE_ENCRYPT || purpose == KM_PURPOSE_SIGN; 102b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden} 1034dc536694c5044a624d112f69627856b91d3f82eShawn Willden 104b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willdeninline bool is_usage_purpose(keymaster_purpose_t purpose) { 105b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return purpose == KM_PURPOSE_DECRYPT || purpose == KM_PURPOSE_VERIFY; 106b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden} 1074dc536694c5044a624d112f69627856b91d3f82eShawn Willden 108ada4850659d484dd5ece26dde73072bef16c1517Shawn WilldenKeymasterEnforcement::KeymasterEnforcement(uint32_t max_access_time_map_size, 109ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden uint32_t max_access_count_map_size) 110ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden : access_time_map_(new (std::nothrow) AccessTimeMap(max_access_time_map_size)), 111ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden access_count_map_(new (std::nothrow) AccessCountMap(max_access_count_map_size)) {} 112ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 113ada4850659d484dd5ece26dde73072bef16c1517Shawn WilldenKeymasterEnforcement::~KeymasterEnforcement() { 114ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden delete access_time_map_; 115ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden delete access_count_map_; 116ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden} 117ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 118b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willdenkeymaster_error_t KeymasterEnforcement::AuthorizeOperation(const keymaster_purpose_t purpose, 119b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden const km_id_t keyid, 120b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden const AuthorizationSet& auth_set, 121b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden const AuthorizationSet& operation_params, 122b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden keymaster_operation_handle_t op_handle, 123b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden bool is_begin_operation) { 124fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden if (is_public_key_algorithm(auth_set)) { 125fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden switch (purpose) { 126fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden case KM_PURPOSE_ENCRYPT: 127fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden case KM_PURPOSE_VERIFY: 128fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden /* Public key operations are always authorized. */ 129fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden return KM_ERROR_OK; 1305ab8b0d1c88812cdf1062e98ec641471268fa8f9Frank Salim 131fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden case KM_PURPOSE_DECRYPT: 132fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden case KM_PURPOSE_SIGN: 133d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden case KM_PURPOSE_DERIVE_KEY: 134fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden break; 135fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden }; 136fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden }; 137fafb4442bfc20df315c8427d60724623d1c525d5Shawn Willden 138bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden if (is_begin_operation) 139bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden return AuthorizeBegin(purpose, keyid, auth_set, operation_params); 140bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden else 141bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden return AuthorizeUpdateOrFinish(auth_set, operation_params, op_handle); 142bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden} 143bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden 144bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden// For update and finish the only thing to check is user authentication, and then only if it's not 145bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden// timeout-based. 146bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willdenkeymaster_error_t 147bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn WilldenKeymasterEnforcement::AuthorizeUpdateOrFinish(const AuthorizationSet& auth_set, 148bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden const AuthorizationSet& operation_params, 149bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden keymaster_operation_handle_t op_handle) { 150bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden int auth_type_index = -1; 151bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden for (size_t pos = 0; pos < auth_set.size(); ++pos) { 152bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden switch (auth_set[pos].tag) { 153bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden case KM_TAG_NO_AUTH_REQUIRED: 154bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden case KM_TAG_AUTH_TIMEOUT: 155bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden // If no auth is required or if auth is timeout-based, we have nothing to check. 156bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden return KM_ERROR_OK; 157bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden 158bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden case KM_TAG_USER_AUTH_TYPE: 159bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden auth_type_index = pos; 160bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden break; 161bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden 162bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden default: 163bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden break; 164bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden } 165bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden } 166bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden 167bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden // Note that at this point we should be able to assume that authentication is required, because 168bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden // authentication is required if KM_TAG_NO_AUTH_REQUIRED is absent. However, there are legacy 169bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden // keys which have no authentication-related tags, so we assume that absence is equivalent to 170bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden // presence of KM_TAG_NO_AUTH_REQUIRED. 171bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden // 172bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden // So, if we found KM_TAG_USER_AUTH_TYPE or if we find KM_TAG_USER_SECURE_ID then authentication 173bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden // is required. If we find neither, then we assume authentication is not required and return 174bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden // success. 175bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden bool authentication_required = (auth_type_index != -1); 176bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden for (auto& param : auth_set) { 177bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden if (param.tag == KM_TAG_USER_SECURE_ID) { 178bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden authentication_required = true; 179bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden int auth_timeout_index = -1; 180bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden if (AuthTokenMatches(auth_set, operation_params, param.long_integer, auth_type_index, 181bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden auth_timeout_index, op_handle, false /* is_begin_operation */)) 182bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden return KM_ERROR_OK; 183bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden } 184bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden } 185bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden 186bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden if (authentication_required) 187bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden return KM_ERROR_KEY_USER_NOT_AUTHENTICATED; 188bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden 189bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden return KM_ERROR_OK; 190bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden} 191bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden 192bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willdenkeymaster_error_t KeymasterEnforcement::AuthorizeBegin(const keymaster_purpose_t purpose, 193bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden const km_id_t keyid, 194bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden const AuthorizationSet& auth_set, 195bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden const AuthorizationSet& operation_params) { 196b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden // Find some entries that may be needed to handle KM_TAG_USER_SECURE_ID 197b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden int auth_timeout_index = -1; 198b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden int auth_type_index = -1; 199b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden int no_auth_required_index = -1; 200b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden for (size_t pos = 0; pos < auth_set.size(); ++pos) { 201b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden switch (auth_set[pos].tag) { 202b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_AUTH_TIMEOUT: 203b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden auth_timeout_index = pos; 204b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden break; 205b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_USER_AUTH_TYPE: 206b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden auth_type_index = pos; 207b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden break; 208b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_NO_AUTH_REQUIRED: 209b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden no_auth_required_index = pos; 210b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden break; 211b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden default: 212b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden break; 213b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden } 2144dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 2154dc536694c5044a624d112f69627856b91d3f82eShawn Willden 216b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden keymaster_error_t error = authorized_purpose(purpose, auth_set); 217b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (error != KM_ERROR_OK) 218b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return error; 219b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 220b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden // If successful, and if key has a min time between ops, this will be set to the time limit 221b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden uint32_t min_ops_timeout = UINT32_MAX; 2224dc536694c5044a624d112f69627856b91d3f82eShawn Willden 223b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden bool update_access_count = false; 22473e71591b28ac4615d03ca08ecab7f6358751bf4Shawn Willden bool caller_nonce_authorized_by_key = false; 225b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden bool authentication_required = false; 226b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden bool auth_token_matched = false; 227b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 228b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden for (auto& param : auth_set) { 229d9d7acff7c43f52ebd038eb77afd67d597844b35Shawn Willden 230d9d7acff7c43f52ebd038eb77afd67d597844b35Shawn Willden // KM_TAG_PADDING_OLD and KM_TAG_DIGEST_OLD aren't actually members of the enum, so we can't 231d9d7acff7c43f52ebd038eb77afd67d597844b35Shawn Willden // switch on them. There's nothing to validate for them, though, so just ignore them. 232d9d7acff7c43f52ebd038eb77afd67d597844b35Shawn Willden if (param.tag == KM_TAG_PADDING_OLD || param.tag == KM_TAG_DIGEST_OLD) 233d9d7acff7c43f52ebd038eb77afd67d597844b35Shawn Willden continue; 234d9d7acff7c43f52ebd038eb77afd67d597844b35Shawn Willden 2354dc536694c5044a624d112f69627856b91d3f82eShawn Willden switch (param.tag) { 236b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 2374dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_ACTIVE_DATETIME: 238b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (!activation_date_valid(param.date_time)) 239b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_KEY_NOT_YET_VALID; 2404dc536694c5044a624d112f69627856b91d3f82eShawn Willden break; 241b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 2424dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_ORIGINATION_EXPIRE_DATETIME: 243b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (is_origination_purpose(purpose) && expiration_date_passed(param.date_time)) 244b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_KEY_EXPIRED; 2454dc536694c5044a624d112f69627856b91d3f82eShawn Willden break; 246b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 2474dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_USAGE_EXPIRE_DATETIME: 248b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (is_usage_purpose(purpose) && expiration_date_passed(param.date_time)) 249b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_KEY_EXPIRED; 2504dc536694c5044a624d112f69627856b91d3f82eShawn Willden break; 251b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 2524dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_MIN_SECONDS_BETWEEN_OPS: 253b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden min_ops_timeout = param.integer; 254b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (!MinTimeBetweenOpsPassed(min_ops_timeout, keyid)) 255b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_KEY_RATE_LIMIT_EXCEEDED; 2564dc536694c5044a624d112f69627856b91d3f82eShawn Willden break; 257b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 2584dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_MAX_USES_PER_BOOT: 259b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden update_access_count = true; 260b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (!MaxUsesPerBootNotExceeded(keyid, param.integer)) 261b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_KEY_MAX_OPS_EXCEEDED; 2624dc536694c5044a624d112f69627856b91d3f82eShawn Willden break; 263b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 264eb63b9799eadcaa6ef206f8b804d7432e0dab14aShawn Willden case KM_TAG_USER_SECURE_ID: 265b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (no_auth_required_index != -1) { 266b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden // Key has both KM_TAG_USER_SECURE_ID and KM_TAG_NO_AUTH_REQUIRED 267b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_INVALID_KEY_BLOB; 268bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden } 269bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden 270bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden if (auth_timeout_index != -1) { 271b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden authentication_required = true; 272b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (AuthTokenMatches(auth_set, operation_params, param.long_integer, 273bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden auth_type_index, auth_timeout_index, 0 /* op_handle */, 274bf9fa99611e64aa797c10d5458624ed93cc4f50bShawn Willden true /* is_begin_operation */)) 275b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden auth_token_matched = true; 276b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden } 2774dc536694c5044a624d112f69627856b91d3f82eShawn Willden break; 278b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 2794dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_CALLER_NONCE: 28073e71591b28ac4615d03ca08ecab7f6358751bf4Shawn Willden caller_nonce_authorized_by_key = true; 2814dc536694c5044a624d112f69627856b91d3f82eShawn Willden break; 2824dc536694c5044a624d112f69627856b91d3f82eShawn Willden 283b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden /* Tags should never be in key auths. */ 2844dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_INVALID: 285b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_AUTH_TOKEN: 286b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_ROOT_OF_TRUST: 287b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_APPLICATION_DATA: 28822dcdb75fc2d1aa9a25b9aadb65d4dcb31e8c647Shawn Willden case KM_TAG_ATTESTATION_CHALLENGE: 289019db0d32168a2e9cf98ec8595aee52120cf8604Janis Danisevskis case KM_TAG_ATTESTATION_APPLICATION_ID: 290bc918339e43e26cf162e38858ee9fa673bfdb668Bartosz Fabianowski case KM_TAG_ATTESTATION_ID_BRAND: 291bc918339e43e26cf162e38858ee9fa673bfdb668Bartosz Fabianowski case KM_TAG_ATTESTATION_ID_DEVICE: 292bc918339e43e26cf162e38858ee9fa673bfdb668Bartosz Fabianowski case KM_TAG_ATTESTATION_ID_PRODUCT: 293bc918339e43e26cf162e38858ee9fa673bfdb668Bartosz Fabianowski case KM_TAG_ATTESTATION_ID_SERIAL: 294bc918339e43e26cf162e38858ee9fa673bfdb668Bartosz Fabianowski case KM_TAG_ATTESTATION_ID_IMEI: 295bc918339e43e26cf162e38858ee9fa673bfdb668Bartosz Fabianowski case KM_TAG_ATTESTATION_ID_MEID: 296f9cb9651ed99c1c6177c761efdfe453cd31a8eb8Bartosz Fabianowski case KM_TAG_ATTESTATION_ID_MANUFACTURER: 297f9cb9651ed99c1c6177c761efdfe453cd31a8eb8Bartosz Fabianowski case KM_TAG_ATTESTATION_ID_MODEL: 298b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_INVALID_KEY_BLOB; 2994dc536694c5044a624d112f69627856b91d3f82eShawn Willden 30033ab0389e908b98702806c746e7babc0d46eb452Shawn Willden /* Tags used for cryptographic parameters in keygen. Nothing to enforce. */ 3014dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_PURPOSE: 3024dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_ALGORITHM: 3034dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_KEY_SIZE: 3044dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_BLOCK_MODE: 3054dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_DIGEST: 3064dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_MAC_LENGTH: 3074dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_PADDING: 3084dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_NONCE: 30933ab0389e908b98702806c746e7babc0d46eb452Shawn Willden case KM_TAG_MIN_MAC_LENGTH: 310fabacaf3e6019804cc8a98a2b8296be1d0125519Thai Duong case KM_TAG_KDF: 311fabacaf3e6019804cc8a98a2b8296be1d0125519Thai Duong case KM_TAG_EC_CURVE: 3124dc536694c5044a624d112f69627856b91d3f82eShawn Willden 313125e4866f98eb1b5ad65a563afd34aca215d983dShawn Willden /* Tags not used for operations. */ 3144dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_BLOB_USAGE_REQUIREMENTS: 315d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden case KM_TAG_EXPORTABLE: 3164dc536694c5044a624d112f69627856b91d3f82eShawn Willden 3174dc536694c5044a624d112f69627856b91d3f82eShawn Willden /* Algorithm specific parameters not used for access control. */ 3184dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_RSA_PUBLIC_EXPONENT: 319fabacaf3e6019804cc8a98a2b8296be1d0125519Thai Duong case KM_TAG_ECIES_SINGLE_HASH_MODE: 3204dc536694c5044a624d112f69627856b91d3f82eShawn Willden 3214dc536694c5044a624d112f69627856b91d3f82eShawn Willden /* Informational tags. */ 3224dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_CREATION_DATETIME: 3234dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_ORIGIN: 3244dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_ROLLBACK_RESISTANT: 325b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 326b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden /* Tags handled when KM_TAG_USER_SECURE_ID is handled */ 327b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_NO_AUTH_REQUIRED: 328b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_USER_AUTH_TYPE: 329b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_AUTH_TIMEOUT: 3304dc536694c5044a624d112f69627856b91d3f82eShawn Willden 3314dc536694c5044a624d112f69627856b91d3f82eShawn Willden /* Tag to provide data to operations. */ 3324dc536694c5044a624d112f69627856b91d3f82eShawn Willden case KM_TAG_ASSOCIATED_DATA: 333b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 334d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden /* Tags that are implicitly verified by secure side */ 335b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_ALL_APPLICATIONS: 336b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_APPLICATION_ID: 337d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden case KM_TAG_OS_VERSION: 338d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden case KM_TAG_OS_PATCHLEVEL: 339d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden 340d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden /* Ignored pending removal */ 341b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_USER_ID: 342b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_ALL_USERS: 343d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden 344d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden /* TODO(swillden): Handle these */ 345d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden case KM_TAG_INCLUDE_UNIQUE_ID: 346d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden case KM_TAG_UNIQUE_ID: 347d4c83db6b3bbb83985715fa88fcec580594c1c9cShawn Willden case KM_TAG_RESET_SINCE_ID_ROTATION: 348b1e6758e2ff9ae632dfe327027e201326831538fShawn Willden case KM_TAG_ALLOW_WHILE_ON_BODY: 349bcd6b99ad5eb0e010f611facb55358e52cbde071Shawn Willden break; 3504dc536694c5044a624d112f69627856b91d3f82eShawn Willden 351b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden case KM_TAG_BOOTLOADER_ONLY: 352b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_INVALID_KEY_BLOB; 3534dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 3544dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 3554dc536694c5044a624d112f69627856b91d3f82eShawn Willden 356b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (authentication_required && !auth_token_matched) { 357b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden LOG_E("Auth required but no matching auth token found", 0); 358b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_KEY_USER_NOT_AUTHENTICATED; 3594dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 3604dc536694c5044a624d112f69627856b91d3f82eShawn Willden 36173e71591b28ac4615d03ca08ecab7f6358751bf4Shawn Willden if (!caller_nonce_authorized_by_key && is_origination_purpose(purpose) && 36273e71591b28ac4615d03ca08ecab7f6358751bf4Shawn Willden operation_params.find(KM_TAG_NONCE) != -1) 363b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return KM_ERROR_CALLER_NONCE_PROHIBITED; 3644dc536694c5044a624d112f69627856b91d3f82eShawn Willden 365ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden if (min_ops_timeout != UINT32_MAX) { 366ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden if (!access_time_map_) { 367ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden LOG_S("Rate-limited keys table not allocated. Rate-limited keys disabled", 0); 368ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden return KM_ERROR_MEMORY_ALLOCATION_FAILED; 369ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden } 370ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 371ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden if (!access_time_map_->UpdateKeyAccessTime(keyid, get_current_time(), min_ops_timeout)) { 372ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden LOG_E("Rate-limited keys table full. Entries will time out.", 0); 373ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden return KM_ERROR_TOO_MANY_OPERATIONS; 374ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden } 3754dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 3764dc536694c5044a624d112f69627856b91d3f82eShawn Willden 377ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden if (update_access_count) { 378ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden if (!access_count_map_) { 379ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden LOG_S("Usage-count limited keys tabel not allocated. Count-limited keys disabled", 0); 380ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden return KM_ERROR_MEMORY_ALLOCATION_FAILED; 381ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden } 382ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 383ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden if (!access_count_map_->IncrementKeyAccessCount(keyid)) { 384ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden LOG_E("Usage count-limited keys table full, until reboot.", 0); 385ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden return KM_ERROR_TOO_MANY_OPERATIONS; 386ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden } 3874dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 388b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 3894dc536694c5044a624d112f69627856b91d3f82eShawn Willden return KM_ERROR_OK; 3904dc536694c5044a624d112f69627856b91d3f82eShawn Willden} 3914dc536694c5044a624d112f69627856b91d3f82eShawn Willden 392b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willdenclass EvpMdCtx { 393b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden public: 394b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden EvpMdCtx() { EVP_MD_CTX_init(&ctx_); } 395b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden ~EvpMdCtx() { EVP_MD_CTX_cleanup(&ctx_); } 3964dc536694c5044a624d112f69627856b91d3f82eShawn Willden 397b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden EVP_MD_CTX* get() { return &ctx_; } 3984dc536694c5044a624d112f69627856b91d3f82eShawn Willden 399b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden private: 400b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden EVP_MD_CTX ctx_; 401b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden}; 4024dc536694c5044a624d112f69627856b91d3f82eShawn Willden 403b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden/* static */ 404b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willdenbool KeymasterEnforcement::CreateKeyId(const keymaster_key_blob_t& key_blob, km_id_t* keyid) { 405b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden EvpMdCtx ctx; 4064dc536694c5044a624d112f69627856b91d3f82eShawn Willden 407b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden uint8_t hash[EVP_MAX_MD_SIZE]; 408b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden unsigned int hash_len; 409b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (EVP_DigestInit_ex(ctx.get(), EVP_sha256(), nullptr /* ENGINE */) && 410b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden EVP_DigestUpdate(ctx.get(), key_blob.key_material, key_blob.key_material_size) && 411b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden EVP_DigestFinal_ex(ctx.get(), hash, &hash_len)) { 412b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden assert(hash_len >= sizeof(*keyid)); 413b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden memcpy(keyid, hash, sizeof(*keyid)); 414b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return true; 4154dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 416b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 417b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 4184dc536694c5044a624d112f69627856b91d3f82eShawn Willden} 4194dc536694c5044a624d112f69627856b91d3f82eShawn Willden 420b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willdenbool KeymasterEnforcement::MinTimeBetweenOpsPassed(uint32_t min_time_between, const km_id_t keyid) { 421ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden if (!access_time_map_) 422ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden return false; 423ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 424b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden uint32_t last_access_time; 425ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden if (!access_time_map_->LastKeyAccessTime(keyid, &last_access_time)) 426b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return true; 427b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return min_time_between <= static_cast<int64_t>(get_current_time()) - last_access_time; 4284dc536694c5044a624d112f69627856b91d3f82eShawn Willden} 4294dc536694c5044a624d112f69627856b91d3f82eShawn Willden 430b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willdenbool KeymasterEnforcement::MaxUsesPerBootNotExceeded(const km_id_t keyid, uint32_t max_uses) { 431ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden if (!access_count_map_) 432ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden return false; 433ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden 434b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden uint32_t key_access_count; 435ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden if (!access_count_map_->KeyAccessCount(keyid, &key_access_count)) 436b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return true; 437b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return key_access_count < max_uses; 438b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden} 4394dc536694c5044a624d112f69627856b91d3f82eShawn Willden 440b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willdenbool KeymasterEnforcement::AuthTokenMatches(const AuthorizationSet& auth_set, 441b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden const AuthorizationSet& operation_params, 442b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden const uint64_t user_secure_id, 443b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden const int auth_type_index, const int auth_timeout_index, 444b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden const keymaster_operation_handle_t op_handle, 445b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden bool is_begin_operation) const { 446b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden assert(auth_type_index < static_cast<int>(auth_set.size())); 447b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden assert(auth_timeout_index < static_cast<int>(auth_set.size())); 448b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 449b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden keymaster_blob_t auth_token_blob; 450b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (!operation_params.GetTagValue(TAG_AUTH_TOKEN, &auth_token_blob)) { 451b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden LOG_E("Authentication required, but auth token not provided", 0); 452b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 4534dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 4544dc536694c5044a624d112f69627856b91d3f82eShawn Willden 455b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (auth_token_blob.data_length != sizeof(hw_auth_token_t)) { 456b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden LOG_E("Bug: Auth token is the wrong size (%d expected, %d found)", sizeof(hw_auth_token_t), 457b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden auth_token_blob.data_length); 458b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 4594dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 4604dc536694c5044a624d112f69627856b91d3f82eShawn Willden 461b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden hw_auth_token_t auth_token; 462b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden memcpy(&auth_token, auth_token_blob.data, sizeof(hw_auth_token_t)); 463b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (auth_token.version != HW_AUTH_TOKEN_VERSION) { 464b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden LOG_E("Bug: Auth token is the version %d (or is not an auth token). Expected %d", 465b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden auth_token.version, HW_AUTH_TOKEN_VERSION); 466b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 467b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden } 4684dc536694c5044a624d112f69627856b91d3f82eShawn Willden 469b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (!ValidateTokenSignature(auth_token)) { 470b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden LOG_E("Auth token signature invalid", 0); 471b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 472b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden } 4734dc536694c5044a624d112f69627856b91d3f82eShawn Willden 474b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (auth_timeout_index == -1 && op_handle && op_handle != auth_token.challenge) { 475b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden LOG_E("Auth token has the challenge %llu, need %llu", auth_token.challenge, op_handle); 476b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 477b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden } 4784dc536694c5044a624d112f69627856b91d3f82eShawn Willden 479b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (user_secure_id != auth_token.user_id && user_secure_id != auth_token.authenticator_id) { 480b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden LOG_I("Auth token SIDs %llu and %llu do not match key SID %llu", auth_token.user_id, 481b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden auth_token.authenticator_id, user_secure_id); 482b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 483b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden } 4844dc536694c5044a624d112f69627856b91d3f82eShawn Willden 485b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (auth_type_index < 0 || auth_type_index > static_cast<int>(auth_set.size())) { 486b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden LOG_E("Auth required but no auth type found", 0); 487b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 488b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden } 4894dc536694c5044a624d112f69627856b91d3f82eShawn Willden 490b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden assert(auth_set[auth_type_index].tag == KM_TAG_USER_AUTH_TYPE); 491b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (auth_set[auth_type_index].tag != KM_TAG_USER_AUTH_TYPE) 492b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 4934dc536694c5044a624d112f69627856b91d3f82eShawn Willden 494b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden uint32_t key_auth_type_mask = auth_set[auth_type_index].integer; 495b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden uint32_t token_auth_type = ntoh(auth_token.authenticator_type); 496b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if ((key_auth_type_mask & token_auth_type) == 0) { 497b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden LOG_E("Key requires match of auth type mask 0%uo, but token contained 0%uo", 498b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden key_auth_type_mask, token_auth_type); 499b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 5004dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 5014dc536694c5044a624d112f69627856b91d3f82eShawn Willden 502b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (auth_timeout_index != -1 && is_begin_operation) { 503b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden assert(auth_set[auth_timeout_index].tag == KM_TAG_AUTH_TIMEOUT); 504b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (auth_set[auth_timeout_index].tag != KM_TAG_AUTH_TIMEOUT) 505b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 5064dc536694c5044a624d112f69627856b91d3f82eShawn Willden 507b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (auth_token_timed_out(auth_token, auth_set[auth_timeout_index].integer)) { 508b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden LOG_E("Auth token has timed out", 0); 5094dc536694c5044a624d112f69627856b91d3f82eShawn Willden return false; 5104dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 5114dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 5124dc536694c5044a624d112f69627856b91d3f82eShawn Willden 513b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden // Survived the whole gauntlet. We have authentage! 5144dc536694c5044a624d112f69627856b91d3f82eShawn Willden return true; 5154dc536694c5044a624d112f69627856b91d3f82eShawn Willden} 5164dc536694c5044a624d112f69627856b91d3f82eShawn Willden 517ada4850659d484dd5ece26dde73072bef16c1517Shawn Willdenbool AccessTimeMap::LastKeyAccessTime(km_id_t keyid, uint32_t* last_access_time) const { 518b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden for (auto& entry : last_access_list_) 519b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (entry.keyid == keyid) { 520b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden *last_access_time = entry.access_time; 521b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return true; 522b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden } 523b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 524b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden} 5254dc536694c5044a624d112f69627856b91d3f82eShawn Willden 526ada4850659d484dd5ece26dde73072bef16c1517Shawn Willdenbool AccessTimeMap::UpdateKeyAccessTime(km_id_t keyid, uint32_t current_time, uint32_t timeout) { 527b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden List<AccessTime>::iterator iter; 528b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden for (iter = last_access_list_.begin(); iter != last_access_list_.end();) { 529b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (iter->keyid == keyid) { 530b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden iter->access_time = current_time; 531b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return true; 5324dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 533b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden 534b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden // Expire entry if possible. 535b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden assert(current_time >= iter->access_time); 536b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (current_time - iter->access_time >= iter->timeout) 537b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden iter = last_access_list_.erase(iter); 538b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden else 539b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden ++iter; 5404dc536694c5044a624d112f69627856b91d3f82eShawn Willden } 5414dc536694c5044a624d112f69627856b91d3f82eShawn Willden 542b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (last_access_list_.size() >= max_size_) 543b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 5444dc536694c5044a624d112f69627856b91d3f82eShawn Willden 545b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden AccessTime new_entry; 546b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden new_entry.keyid = keyid; 547b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden new_entry.access_time = current_time; 548b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden new_entry.timeout = timeout; 549b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden last_access_list_.push_front(new_entry); 550b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return true; 5514dc536694c5044a624d112f69627856b91d3f82eShawn Willden} 5524dc536694c5044a624d112f69627856b91d3f82eShawn Willden 553ada4850659d484dd5ece26dde73072bef16c1517Shawn Willdenbool AccessCountMap::KeyAccessCount(km_id_t keyid, uint32_t* count) const { 554b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden for (auto& entry : access_count_list_) 555b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (entry.keyid == keyid) { 556b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden *count = entry.access_count; 557b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return true; 558b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden } 559b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 5604dc536694c5044a624d112f69627856b91d3f82eShawn Willden} 5614dc536694c5044a624d112f69627856b91d3f82eShawn Willden 562ada4850659d484dd5ece26dde73072bef16c1517Shawn Willdenbool AccessCountMap::IncrementKeyAccessCount(km_id_t keyid) { 563b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden for (auto& entry : access_count_list_) 564b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (entry.keyid == keyid) { 565ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden // Note that the 'if' below will always be true because KM_TAG_MAX_USES_PER_BOOT is a 566ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden // uint32_t, and as soon as entry.access_count reaches the specified maximum value 567ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden // operation requests will be rejected and access_count won't be incremented any more. 568ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden // And, besides, UINT64_MAX is huge. But we ensure that it doesn't wrap anyway, out of 569ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden // an abundance of caution. 570ada4850659d484dd5ece26dde73072bef16c1517Shawn Willden if (entry.access_count < UINT64_MAX) 571b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden ++entry.access_count; 572b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return true; 573b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden } 5744dc536694c5044a624d112f69627856b91d3f82eShawn Willden 575b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden if (access_count_list_.size() >= max_size_) 576b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return false; 5774dc536694c5044a624d112f69627856b91d3f82eShawn Willden 578b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden AccessCount new_entry; 579b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden new_entry.keyid = keyid; 580b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden new_entry.access_count = 1; 581b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden access_count_list_.push_front(new_entry); 582b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden return true; 583b5508298cdb1d42eaf8c81aa8a6ac2cbfdeef3c7Shawn Willden} 5844dc536694c5044a624d112f69627856b91d3f82eShawn Willden}; /* namespace keymaster */ 585