83 lines
2.7 KiB
C
83 lines
2.7 KiB
C
|
/*
|
||
|
|
** Copyright 2009, The Android Open Source Project
|
||
|
|
**
|
||
|
|
** Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
|
** you may not use this file except in compliance with the License.
|
||
|
|
** You may obtain a copy of the License at
|
||
|
|
**
|
||
|
|
** http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
**
|
||
|
|
** Unless required by applicable law or agreed to in writing, software
|
||
|
|
** distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
** See the License for the specific language governing permissions and
|
||
|
|
** limitations under the License.
|
||
|
|
*/
|
||
|
|
|
||
|
|
#ifndef __KEYMGMT_H__
|
||
|
|
#define __KEYMGMT_H__
|
||
|
|
|
||
|
|
#define MASTER_KEY_TAG "master_key"
|
||
|
|
#define MASTER_KEY ".keymaster"
|
||
|
|
#define MAX_PATH_LEN 128
|
||
|
|
#define SALT "Android Keystore 0.1"
|
||
|
|
#define NAME_DELIMITER "_"
|
||
|
|
#define KEYFILE_NAME "%s"NAME_DELIMITER"%s"
|
||
|
|
#define KEYGEN_ITER 1024
|
||
|
|
#define AES_KEY_LEN 128
|
||
|
|
#define USER_KEY_LEN (AES_KEY_LEN/8)
|
||
|
|
#define IV_LEN USER_KEY_LEN
|
||
|
|
#define MAX_RETRY_COUNT 6
|
||
|
|
#define MIN_PASSWD_LENGTH 8
|
||
|
|
|
||
|
|
#define gen_key(passwd, key, len) \
|
||
|
|
PKCS5_PBKDF2_HMAC_SHA1(passwd, strlen(passwd), \
|
||
|
|
(unsigned char*)SALT, \
|
||
|
|
strlen(SALT), KEYGEN_ITER, \
|
||
|
|
len, key)
|
||
|
|
|
||
|
|
#define KEYFILE_LEN MAX_NAMESPACE_LENGTH + MAX_KEY_NAME_LENGTH + 6
|
||
|
|
|
||
|
|
#define get_blob_size(blob) \
|
||
|
|
(((blob->value_size + sizeof(uint32_t) + MAX_KEY_NAME_LENGTH \
|
||
|
|
+ USER_KEY_LEN - 1) / USER_KEY_LEN) * USER_KEY_LEN)
|
||
|
|
|
||
|
|
#define MAX_BLOB_LEN ((MAX_KEY_VALUE_LENGTH + MAX_KEY_NAME_LENGTH + \
|
||
|
|
sizeof(uint32_t) + USER_KEY_LEN - 1) / USER_KEY_LEN)\
|
||
|
|
* USER_KEY_LEN
|
||
|
|
|
||
|
|
#define data_blob_size(blob) USER_KEY_LEN + sizeof(uint32_t) + blob->blob_size
|
||
|
|
|
||
|
|
typedef struct {
|
||
|
|
unsigned char iv[USER_KEY_LEN];
|
||
|
|
uint32_t blob_size;
|
||
|
|
union {
|
||
|
|
unsigned char blob[1];
|
||
|
|
struct {
|
||
|
|
uint32_t value_size;
|
||
|
|
char keyname[MAX_KEY_NAME_LENGTH];
|
||
|
|
unsigned char value[MAX_KEY_VALUE_LENGTH];
|
||
|
|
} __attribute__((packed));
|
||
|
|
};
|
||
|
|
} DATA_BLOB;
|
||
|
|
|
||
|
|
typedef struct {
|
||
|
|
char tag[USER_KEY_LEN];
|
||
|
|
unsigned char master_key[USER_KEY_LEN];
|
||
|
|
} MASTER_BLOB;
|
||
|
|
|
||
|
|
int put_key(const char *namespace, const char *keyname,
|
||
|
|
unsigned char *data, int size);
|
||
|
|
int get_key(const char *namespace, const char *keyname,
|
||
|
|
unsigned char *data, int *size);
|
||
|
|
int remove_key(const char *namespace, const char *keyname);
|
||
|
|
int list_keys(const char *namespace, char reply[BUFFER_MAX]);
|
||
|
|
int passwd(char *data);
|
||
|
|
int lock();
|
||
|
|
int unlock(char *passwd);
|
||
|
|
KEYSTORE_STATE get_state();
|
||
|
|
int reset_keystore();
|
||
|
|
int init_keystore(const char *dir);
|
||
|
|
|
||
|
|
#endif
|