xref: /aosp_15_r20/system/keymaster/android_keymaster/android_keymaster_utils.cpp (revision 789431f29546679ab5188a97751fb38e3018d44d)
1*789431f2SAndroid Build Coastguard Worker /*
2*789431f2SAndroid Build Coastguard Worker  * Copyright 2014 The Android Open Source Project
3*789431f2SAndroid Build Coastguard Worker  *
4*789431f2SAndroid Build Coastguard Worker  * Licensed under the Apache License, Version 2.0 (the "License");
5*789431f2SAndroid Build Coastguard Worker  * you may not use this file except in compliance with the License.
6*789431f2SAndroid Build Coastguard Worker  * You may obtain a copy of the License at
7*789431f2SAndroid Build Coastguard Worker  *
8*789431f2SAndroid Build Coastguard Worker  *      http://www.apache.org/licenses/LICENSE-2.0
9*789431f2SAndroid Build Coastguard Worker  *
10*789431f2SAndroid Build Coastguard Worker  * Unless required by applicable law or agreed to in writing, software
11*789431f2SAndroid Build Coastguard Worker  * distributed under the License is distributed on an "AS IS" BASIS,
12*789431f2SAndroid Build Coastguard Worker  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13*789431f2SAndroid Build Coastguard Worker  * See the License for the specific language governing permissions and
14*789431f2SAndroid Build Coastguard Worker  * limitations under the License.
15*789431f2SAndroid Build Coastguard Worker  */
16*789431f2SAndroid Build Coastguard Worker 
17*789431f2SAndroid Build Coastguard Worker #include <new>
18*789431f2SAndroid Build Coastguard Worker 
19*789431f2SAndroid Build Coastguard Worker #include <keymaster/android_keymaster_utils.h>
20*789431f2SAndroid Build Coastguard Worker 
21*789431f2SAndroid Build Coastguard Worker namespace keymaster {
22*789431f2SAndroid Build Coastguard Worker 
23*789431f2SAndroid Build Coastguard Worker // Keymaster never manages enormous buffers, so anything particularly large is bad data or the
24*789431f2SAndroid Build Coastguard Worker // result of a bug.  We arbitrarily set a 16 MiB limit.
25*789431f2SAndroid Build Coastguard Worker const size_t kMaxDupBufferSize = 16 * 1024 * 1024;
26*789431f2SAndroid Build Coastguard Worker 
dup_buffer(const void * buf,size_t size)27*789431f2SAndroid Build Coastguard Worker uint8_t* dup_buffer(const void* buf, size_t size) {
28*789431f2SAndroid Build Coastguard Worker     if (size >= kMaxDupBufferSize) return nullptr;
29*789431f2SAndroid Build Coastguard Worker     uint8_t* retval = new (std::nothrow) uint8_t[size];
30*789431f2SAndroid Build Coastguard Worker     if (retval) memcpy(retval, buf, size);
31*789431f2SAndroid Build Coastguard Worker     return retval;
32*789431f2SAndroid Build Coastguard Worker }
33*789431f2SAndroid Build Coastguard Worker 
memcmp_s(const void * p1,const void * p2,size_t length)34*789431f2SAndroid Build Coastguard Worker int memcmp_s(const void* p1, const void* p2, size_t length) {
35*789431f2SAndroid Build Coastguard Worker     const uint8_t* s1 = static_cast<const uint8_t*>(p1);
36*789431f2SAndroid Build Coastguard Worker     const uint8_t* s2 = static_cast<const uint8_t*>(p2);
37*789431f2SAndroid Build Coastguard Worker     uint8_t result = 0;
38*789431f2SAndroid Build Coastguard Worker     for (; length > 0; length--)
39*789431f2SAndroid Build Coastguard Worker         result |= *s1++ ^ *s2++;
40*789431f2SAndroid Build Coastguard Worker     return result == 0 ? 0 : 1;
41*789431f2SAndroid Build Coastguard Worker }
42*789431f2SAndroid Build Coastguard Worker 
EllipticKeySizeToCurve(uint32_t key_size_bits,keymaster_ec_curve_t * curve)43*789431f2SAndroid Build Coastguard Worker keymaster_error_t EllipticKeySizeToCurve(uint32_t key_size_bits, keymaster_ec_curve_t* curve) {
44*789431f2SAndroid Build Coastguard Worker     switch (key_size_bits) {
45*789431f2SAndroid Build Coastguard Worker     default:
46*789431f2SAndroid Build Coastguard Worker         return KM_ERROR_UNSUPPORTED_KEY_SIZE;
47*789431f2SAndroid Build Coastguard Worker 
48*789431f2SAndroid Build Coastguard Worker     case 224:
49*789431f2SAndroid Build Coastguard Worker         *curve = KM_EC_CURVE_P_224;
50*789431f2SAndroid Build Coastguard Worker         break;
51*789431f2SAndroid Build Coastguard Worker 
52*789431f2SAndroid Build Coastguard Worker     case 256:
53*789431f2SAndroid Build Coastguard Worker         // 256 bits could be P-256 or Curve25519
54*789431f2SAndroid Build Coastguard Worker         return KM_ERROR_UNSUPPORTED_KEY_SIZE;
55*789431f2SAndroid Build Coastguard Worker 
56*789431f2SAndroid Build Coastguard Worker     case 384:
57*789431f2SAndroid Build Coastguard Worker         *curve = KM_EC_CURVE_P_384;
58*789431f2SAndroid Build Coastguard Worker         break;
59*789431f2SAndroid Build Coastguard Worker 
60*789431f2SAndroid Build Coastguard Worker     case 521:
61*789431f2SAndroid Build Coastguard Worker         *curve = KM_EC_CURVE_P_521;
62*789431f2SAndroid Build Coastguard Worker         break;
63*789431f2SAndroid Build Coastguard Worker     }
64*789431f2SAndroid Build Coastguard Worker 
65*789431f2SAndroid Build Coastguard Worker     return KM_ERROR_OK;
66*789431f2SAndroid Build Coastguard Worker }
67*789431f2SAndroid Build Coastguard Worker 
EcKeySizeToCurve(uint32_t key_size_bits,keymaster_ec_curve_t * curve)68*789431f2SAndroid Build Coastguard Worker keymaster_error_t EcKeySizeToCurve(uint32_t key_size_bits, keymaster_ec_curve_t* curve) {
69*789431f2SAndroid Build Coastguard Worker     switch (key_size_bits) {
70*789431f2SAndroid Build Coastguard Worker     default:
71*789431f2SAndroid Build Coastguard Worker         return KM_ERROR_UNSUPPORTED_KEY_SIZE;
72*789431f2SAndroid Build Coastguard Worker 
73*789431f2SAndroid Build Coastguard Worker     case 224:
74*789431f2SAndroid Build Coastguard Worker         *curve = KM_EC_CURVE_P_224;
75*789431f2SAndroid Build Coastguard Worker         break;
76*789431f2SAndroid Build Coastguard Worker 
77*789431f2SAndroid Build Coastguard Worker     case 256:
78*789431f2SAndroid Build Coastguard Worker         *curve = KM_EC_CURVE_P_256;
79*789431f2SAndroid Build Coastguard Worker         break;
80*789431f2SAndroid Build Coastguard Worker 
81*789431f2SAndroid Build Coastguard Worker     case 384:
82*789431f2SAndroid Build Coastguard Worker         *curve = KM_EC_CURVE_P_384;
83*789431f2SAndroid Build Coastguard Worker         break;
84*789431f2SAndroid Build Coastguard Worker 
85*789431f2SAndroid Build Coastguard Worker     case 521:
86*789431f2SAndroid Build Coastguard Worker         *curve = KM_EC_CURVE_P_521;
87*789431f2SAndroid Build Coastguard Worker         break;
88*789431f2SAndroid Build Coastguard Worker     }
89*789431f2SAndroid Build Coastguard Worker 
90*789431f2SAndroid Build Coastguard Worker     return KM_ERROR_OK;
91*789431f2SAndroid Build Coastguard Worker }
92*789431f2SAndroid Build Coastguard Worker 
EcCurveToKeySize(keymaster_ec_curve_t curve,uint32_t * key_size_bits)93*789431f2SAndroid Build Coastguard Worker keymaster_error_t EcCurveToKeySize(keymaster_ec_curve_t curve, uint32_t* key_size_bits) {
94*789431f2SAndroid Build Coastguard Worker     switch (curve) {
95*789431f2SAndroid Build Coastguard Worker     default:
96*789431f2SAndroid Build Coastguard Worker         return KM_ERROR_UNSUPPORTED_EC_CURVE;
97*789431f2SAndroid Build Coastguard Worker 
98*789431f2SAndroid Build Coastguard Worker     case KM_EC_CURVE_P_224:
99*789431f2SAndroid Build Coastguard Worker         *key_size_bits = 224;
100*789431f2SAndroid Build Coastguard Worker         break;
101*789431f2SAndroid Build Coastguard Worker 
102*789431f2SAndroid Build Coastguard Worker     case KM_EC_CURVE_P_256:
103*789431f2SAndroid Build Coastguard Worker         *key_size_bits = 256;
104*789431f2SAndroid Build Coastguard Worker         break;
105*789431f2SAndroid Build Coastguard Worker 
106*789431f2SAndroid Build Coastguard Worker     case KM_EC_CURVE_P_384:
107*789431f2SAndroid Build Coastguard Worker         *key_size_bits = 384;
108*789431f2SAndroid Build Coastguard Worker         break;
109*789431f2SAndroid Build Coastguard Worker 
110*789431f2SAndroid Build Coastguard Worker     case KM_EC_CURVE_P_521:
111*789431f2SAndroid Build Coastguard Worker         *key_size_bits = 521;
112*789431f2SAndroid Build Coastguard Worker         break;
113*789431f2SAndroid Build Coastguard Worker 
114*789431f2SAndroid Build Coastguard Worker     case KM_EC_CURVE_CURVE_25519:
115*789431f2SAndroid Build Coastguard Worker         *key_size_bits = 256;
116*789431f2SAndroid Build Coastguard Worker         break;
117*789431f2SAndroid Build Coastguard Worker     }
118*789431f2SAndroid Build Coastguard Worker 
119*789431f2SAndroid Build Coastguard Worker     return KM_ERROR_OK;
120*789431f2SAndroid Build Coastguard Worker }
121*789431f2SAndroid Build Coastguard Worker 
122*789431f2SAndroid Build Coastguard Worker }  // namespace keymaster
123