blob: c5cf9a249b7773c019cf6ace75f9372e5c7a3095 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
#define LOG_TAG "javacard.strongbox.keymint.operation-impl"
#include "JavacardSharedSecret.h"
#include <android-base/logging.h>
#include <KeyMintUtils.h>
namespace aidl::android::hardware::security::sharedsecret {
using ::keymint::javacard::Instruction;
ScopedAStatus JavacardSharedSecret::getSharedSecretParameters(SharedSecretParameters* params) {
auto error = card_->initializeJavacard();
if (error != KM_ERROR_OK) {
LOG(ERROR) << "Error in initializing javacard.";
return keymint::km_utils::kmError2ScopedAStatus(error);
}
auto [item, err] = card_->sendRequest(Instruction::INS_GET_SHARED_SECRET_PARAM_CMD);
if (err != KM_ERROR_OK) {
LOG(ERROR) << "Error in sending in getSharedSecretParameters.";
return keymint::km_utils::kmError2ScopedAStatus(err);
}
auto optSSParams = cbor_.getSharedSecretParameters(item, 1);
if (!optSSParams) {
LOG(ERROR) << "Error in sending in getSharedSecretParameters.";
return keymint::km_utils::kmError2ScopedAStatus(KM_ERROR_UNKNOWN_ERROR);
}
*params = std::move(optSSParams.value());
return ScopedAStatus::ok();
}
ScopedAStatus
JavacardSharedSecret::computeSharedSecret(const std::vector<SharedSecretParameters>& params,
std::vector<uint8_t>* secret) {
auto error = card_->sendEarlyBootEndedEvent(false);
if (error != KM_ERROR_OK) {
LOG(ERROR) << "Error in sending earlyBoot event javacard.";
return keymint::km_utils::kmError2ScopedAStatus(error);
}
error = card_->initializeJavacard();
if (error != KM_ERROR_OK) {
LOG(ERROR) << "Error in initializing javacard.";
return keymint::km_utils::kmError2ScopedAStatus(error);
}
cppbor::Array request;
cbor_.addSharedSecretParameters(request, params);
auto [item, err] = card_->sendRequest(Instruction::INS_COMPUTE_SHARED_SECRET_CMD, request);
if (err != KM_ERROR_OK) {
LOG(ERROR) << "Error in sending in computeSharedSecret.";
return keymint::km_utils::kmError2ScopedAStatus(err);
}
auto optSecret = cbor_.getByteArrayVec(item, 1);
if (!optSecret) {
LOG(ERROR) << "Error in decoding the response in computeSharedSecret.";
return keymint::km_utils::kmError2ScopedAStatus(KM_ERROR_UNKNOWN_ERROR);
}
*secret = std::move(optSecret.value());
return ScopedAStatus::ok();
}
} // namespace aidl::android::hardware::security::sharedsecret
|
