replicant-frameworks_native/cmds/keystore/keymgmt.h

83 lines
2.7 KiB
C
Raw Normal View History

/*
** Copyright 2009, The Android Open Source Project
**
** Licensed under the Apache License, Version 2.0 (the "License");
** you may not use this file except in compliance with the License.
** You may obtain a copy of the License at
**
** http://www.apache.org/licenses/LICENSE-2.0
**
** Unless required by applicable law or agreed to in writing, software
** distributed under the License is distributed on an "AS IS" BASIS,
** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
** See the License for the specific language governing permissions and
** limitations under the License.
*/
#ifndef __KEYMGMT_H__
#define __KEYMGMT_H__
#define MASTER_KEY_TAG "master_key"
#define MASTER_KEY ".keymaster"
#define MAX_PATH_LEN 128
#define SALT "Android Keystore 0.1"
#define NAME_DELIMITER "_"
#define KEYFILE_NAME "%s"NAME_DELIMITER"%s"
#define KEYGEN_ITER 1024
#define AES_KEY_LEN 128
#define USER_KEY_LEN (AES_KEY_LEN/8)
#define IV_LEN USER_KEY_LEN
#define MAX_RETRY_COUNT 6
#define MIN_PASSWD_LENGTH 8
#define gen_key(passwd, key, len) \
PKCS5_PBKDF2_HMAC_SHA1(passwd, strlen(passwd), \
(unsigned char*)SALT, \
strlen(SALT), KEYGEN_ITER, \
len, key)
#define KEYFILE_LEN MAX_NAMESPACE_LENGTH + MAX_KEY_NAME_LENGTH + 6
#define get_blob_size(blob) \
(((blob->value_size + sizeof(uint32_t) + MAX_KEY_NAME_LENGTH \
+ USER_KEY_LEN - 1) / USER_KEY_LEN) * USER_KEY_LEN)
#define MAX_BLOB_LEN ((MAX_KEY_VALUE_LENGTH + MAX_KEY_NAME_LENGTH + \
sizeof(uint32_t) + USER_KEY_LEN - 1) / USER_KEY_LEN)\
* USER_KEY_LEN
#define data_blob_size(blob) USER_KEY_LEN + sizeof(uint32_t) + blob->blob_size
typedef struct {
unsigned char iv[USER_KEY_LEN];
uint32_t blob_size;
union {
unsigned char blob[1];
struct {
uint32_t value_size;
char keyname[MAX_KEY_NAME_LENGTH];
unsigned char value[MAX_KEY_VALUE_LENGTH];
} __attribute__((packed));
};
} DATA_BLOB;
typedef struct {
char tag[USER_KEY_LEN];
unsigned char master_key[USER_KEY_LEN];
} MASTER_BLOB;
int put_key(const char *namespace, const char *keyname,
unsigned char *data, int size);
int get_key(const char *namespace, const char *keyname,
unsigned char *data, int *size);
int remove_key(const char *namespace, const char *keyname);
int list_keys(const char *namespace, char reply[BUFFER_MAX]);
int passwd(char *data);
int lock();
int unlock(char *passwd);
KEYSTORE_STATE get_state();
int reset_keystore();
int init_keystore(const char *dir);
#endif