1 /*
2  * Copyright (C) 2012 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #pragma once
18 
19 // clang-format off
20 
21 #define KEYMASTER_PORT "com.android.trusty.keymaster"
22 #define KEYMASTER_MAX_BUFFER_LENGTH 4096
23 
24 // Commands
25 enum keymaster_command : uint32_t {
26     KEYMASTER_RESP_BIT              = 1,
27     KEYMASTER_STOP_BIT              = 2,
28     KEYMASTER_REQ_SHIFT             = 2,
29 
30     KM_GENERATE_KEY                 = (0 << KEYMASTER_REQ_SHIFT),
31     KM_BEGIN_OPERATION              = (1 << KEYMASTER_REQ_SHIFT),
32     KM_UPDATE_OPERATION             = (2 << KEYMASTER_REQ_SHIFT),
33     KM_FINISH_OPERATION             = (3 << KEYMASTER_REQ_SHIFT),
34     KM_ABORT_OPERATION              = (4 << KEYMASTER_REQ_SHIFT),
35     KM_IMPORT_KEY                   = (5 << KEYMASTER_REQ_SHIFT),
36     KM_EXPORT_KEY                   = (6 << KEYMASTER_REQ_SHIFT),
37     KM_GET_VERSION                  = (7 << KEYMASTER_REQ_SHIFT),
38     KM_ADD_RNG_ENTROPY              = (8 << KEYMASTER_REQ_SHIFT),
39     KM_GET_SUPPORTED_ALGORITHMS     = (9 << KEYMASTER_REQ_SHIFT),
40     KM_GET_SUPPORTED_BLOCK_MODES    = (10 << KEYMASTER_REQ_SHIFT),
41     KM_GET_SUPPORTED_PADDING_MODES  = (11 << KEYMASTER_REQ_SHIFT),
42     KM_GET_SUPPORTED_DIGESTS        = (12 << KEYMASTER_REQ_SHIFT),
43     KM_GET_SUPPORTED_IMPORT_FORMATS = (13 << KEYMASTER_REQ_SHIFT),
44     KM_GET_SUPPORTED_EXPORT_FORMATS = (14 << KEYMASTER_REQ_SHIFT),
45     KM_GET_KEY_CHARACTERISTICS      = (15 << KEYMASTER_REQ_SHIFT),
46     KM_ATTEST_KEY                   = (16 << KEYMASTER_REQ_SHIFT),
47     KM_UPGRADE_KEY                  = (17 << KEYMASTER_REQ_SHIFT),
48     KM_CONFIGURE                    = (18 << KEYMASTER_REQ_SHIFT),
49     KM_GET_HMAC_SHARING_PARAMETERS  = (19 << KEYMASTER_REQ_SHIFT),
50     KM_COMPUTE_SHARED_HMAC          = (20 << KEYMASTER_REQ_SHIFT),
51     KM_VERIFY_AUTHORIZATION         = (21 << KEYMASTER_REQ_SHIFT),
52     KM_DELETE_KEY                   = (22 << KEYMASTER_REQ_SHIFT),
53     KM_DELETE_ALL_KEYS              = (23 << KEYMASTER_REQ_SHIFT),
54     KM_DESTROY_ATTESTATION_IDS      = (24 << KEYMASTER_REQ_SHIFT),
55     KM_IMPORT_WRAPPED_KEY           = (25 << KEYMASTER_REQ_SHIFT),
56 };
57 
58 #ifdef __ANDROID__
59 
60 /**
61  * keymaster_message - Serial header for communicating with KM server
62  * @cmd: the command, one of keymaster_command.
63  * @payload: start of the serialized command specific payload
64  */
65 struct keymaster_message {
66     uint32_t cmd;
67     uint8_t payload[0];
68 };
69 
70 #endif
71