1 files changed, 129 insertions, 0 deletions
diff --git a/ready_se/google/keymint/KM200/Applet/src/com/android/javacard/keymaster/KMVerificationToken.java b/ready_se/google/keymint/KM200/Applet/src/com/android/javacard/keymaster/KMVerificationToken.java
new file mode 100644
index 0000000..590e73a
--- /dev/null
+++ b/ready_se/google/keymint/KM200/Applet/src/com/android/javacard/keymaster/KMVerificationToken.java
@@ -0,0 +1,129 @@
+/*
+ * Copyright(C) 2020 The Android Open Source Project
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.android.javacard.keymaster;
+
+import javacard.framework.ISO7816;
+import javacard.framework.ISOException;
+import javacard.framework.Util;
+
+/**
+ * KMVerificationToken represents VerificationToken structure from android keymaster hal
+ * specifications. It corresponds to CBOR array type. struct{byte type=VERIFICATION_TOKEN_TYPE;
+ * short length=2; short arrayPtr} where arrayPtr is a pointer to ordered array with following
+ * elements: {KMInteger Challenge; KMInteger Timestamp; KMByteBlob PARAMETERS_VERIFIED;
+ * SecurityLevel level; KMByteBlob Mac}.
+ */
+public class KMVerificationToken extends KMType {
+
+  public static final byte CHALLENGE = 0x00;
+  public static final byte TIMESTAMP = 0x01;
+  public static final byte MAC = 0x02;
+
+  private static KMVerificationToken prototype;
+
+  private KMVerificationToken() {}
+
+  public static short exp() {
+    short arrPtr = KMArray.instance((short) 3);
+    KMArray arr = KMArray.cast(arrPtr);
+    arr.add(CHALLENGE, KMInteger.exp());
+    arr.add(TIMESTAMP, KMInteger.exp());
+    arr.add(MAC, KMByteBlob.exp());
+    return instance(arrPtr);
+  }
+
+  private static KMVerificationToken proto(short ptr) {
+    if (prototype == null) {
+      prototype = new KMVerificationToken();
+    }
+    KMType.instanceTable[KM_VERIFICATION_TOKEN_OFFSET] = ptr;
+    return prototype;
+  }
+
+  public static short instance() {
+    short arrPtr = KMArray.instance((short) 3);
+    KMArray arr = KMArray.cast(arrPtr);
+    arr.add(CHALLENGE, KMInteger.uint_16((short) 0));
+    arr.add(TIMESTAMP, KMInteger.uint_16((short) 0));
+    arr.add(MAC, KMByteBlob.instance((short) 0));
+    return instance(arrPtr);
+  }
+
+  public static short instance(short vals) {
+    KMArray arr = KMArray.cast(vals);
+    if (arr.length() != 3) {
+      ISOException.throwIt(ISO7816.SW_WRONG_LENGTH);
+    }
+    short ptr = KMType.instance(VERIFICATION_TOKEN_TYPE, (short) 2);
+    Util.setShort(heap, (short) (ptr + TLV_HEADER_SIZE), vals);
+    return ptr;
+  }
+
+  public static KMVerificationToken cast(short ptr) {
+    if (heap[ptr] != VERIFICATION_TOKEN_TYPE) {
+      ISOException.throwIt(ISO7816.SW_CONDITIONS_NOT_SATISFIED);
+    }
+    short arrPtr = Util.getShort(heap, (short) (ptr + TLV_HEADER_SIZE));
+    if (heap[arrPtr] != ARRAY_TYPE) {
+      ISOException.throwIt(ISO7816.SW_CONDITIONS_NOT_SATISFIED);
+    }
+    return proto(ptr);
+  }
+
+  public short getVals() {
+    return Util.getShort(
+        heap, (short) (KMType.instanceTable[KM_VERIFICATION_TOKEN_OFFSET] + TLV_HEADER_SIZE));
+  }
+
+  public short length() {
+    short arrPtr = getVals();
+    return KMArray.cast(arrPtr).length();
+  }
+
+  public short getChallenge() {
+    short arrPtr = getVals();
+    return KMArray.cast(arrPtr).get(CHALLENGE);
+  }
+
+  public void setChallenge(short vals) {
+    KMInteger.cast(vals);
+    short arrPtr = getVals();
+    KMArray.cast(arrPtr).add(CHALLENGE, vals);
+  }
+
+  public short getTimestamp() {
+    short arrPtr = getVals();
+    return KMArray.cast(arrPtr).get(TIMESTAMP);
+  }
+
+  public void setTimestamp(short vals) {
+    KMInteger.cast(vals);
+    short arrPtr = getVals();
+    KMArray.cast(arrPtr).add(TIMESTAMP, vals);
+  }
+
+  public short getMac() {
+    short arrPtr = getVals();
+    return KMArray.cast(arrPtr).get(MAC);
+  }
+
+  public void setMac(short vals) {
+    KMByteBlob.cast(vals);
+    short arrPtr = getVals();
+    KMArray.cast(arrPtr).add(MAC, vals);
+  }
+}