1 /*
2  * Copyright 2014 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #include <keymaster/km_openssl/rsa_key.h>
18 
19 #include <keymaster/keymaster_context.h>
20 #include <keymaster/km_openssl/openssl_err.h>
21 #include <keymaster/km_openssl/openssl_utils.h>
22 #include <keymaster/km_openssl/rsa_operation.h>
23 
24 namespace keymaster {
25 
EvpToInternal(const EVP_PKEY * pkey)26 bool RsaKey::EvpToInternal(const EVP_PKEY* pkey) {
27     rsa_key_.reset(EVP_PKEY_get1_RSA(const_cast<EVP_PKEY*>(pkey)));
28     return rsa_key_.get() != nullptr;
29 }
30 
InternalToEvp(EVP_PKEY * pkey) const31 bool RsaKey::InternalToEvp(EVP_PKEY* pkey) const {
32     return EVP_PKEY_set1_RSA(pkey, rsa_key_.get()) == 1;
33 }
34 
SupportedMode(keymaster_purpose_t purpose,keymaster_padding_t padding)35 bool RsaKey::SupportedMode(keymaster_purpose_t purpose, keymaster_padding_t padding) {
36     switch (purpose) {
37     case KM_PURPOSE_SIGN:
38     case KM_PURPOSE_VERIFY:
39         return padding == KM_PAD_NONE || padding == KM_PAD_RSA_PSS ||
40                padding == KM_PAD_RSA_PKCS1_1_5_SIGN;
41 
42     case KM_PURPOSE_ENCRYPT:
43     case KM_PURPOSE_DECRYPT:
44     case KM_PURPOSE_WRAP:
45         return padding == KM_PAD_RSA_OAEP || padding == KM_PAD_RSA_PKCS1_1_5_ENCRYPT;
46 
47     case KM_PURPOSE_DERIVE_KEY:
48         return false;
49     };
50     return false;
51 }
52 
SupportedMode(keymaster_purpose_t purpose,keymaster_digest_t digest)53 bool RsaKey::SupportedMode(keymaster_purpose_t purpose, keymaster_digest_t digest) {
54     switch (purpose) {
55     case KM_PURPOSE_SIGN:
56     case KM_PURPOSE_VERIFY:
57         return digest == KM_DIGEST_NONE || digest == KM_DIGEST_SHA_2_256;
58 
59     case KM_PURPOSE_ENCRYPT:
60     case KM_PURPOSE_DECRYPT:
61     case KM_PURPOSE_WRAP:
62         /* Don't care */
63         break;
64 
65     case KM_PURPOSE_DERIVE_KEY:
66         return false;
67     };
68     return true;
69 }
70 
71 }  // namespace keymaster
72