/* * Copyright 2014 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "rsa_key.h" #include #include "openssl_err.h" #include "openssl_utils.h" #include "rsa_operation.h" namespace keymaster { bool RsaKey::EvpToInternal(const EVP_PKEY* pkey) { rsa_key_.reset(EVP_PKEY_get1_RSA(const_cast(pkey))); return rsa_key_.get() != NULL; } bool RsaKey::InternalToEvp(EVP_PKEY* pkey) const { return EVP_PKEY_set1_RSA(pkey, rsa_key_.get()) == 1; } bool RsaKey::SupportedMode(keymaster_purpose_t purpose, keymaster_padding_t padding) { switch (purpose) { case KM_PURPOSE_SIGN: case KM_PURPOSE_VERIFY: return padding == KM_PAD_NONE || padding == KM_PAD_RSA_PSS || padding == KM_PAD_RSA_PKCS1_1_5_SIGN; case KM_PURPOSE_ENCRYPT: case KM_PURPOSE_DECRYPT: return padding == KM_PAD_RSA_OAEP || padding == KM_PAD_RSA_PKCS1_1_5_ENCRYPT; case KM_PURPOSE_DERIVE_KEY: return false; }; return false; } bool RsaKey::SupportedMode(keymaster_purpose_t purpose, keymaster_digest_t digest) { switch (purpose) { case KM_PURPOSE_SIGN: case KM_PURPOSE_VERIFY: return digest == KM_DIGEST_NONE || digest == KM_DIGEST_SHA_2_256; case KM_PURPOSE_ENCRYPT: case KM_PURPOSE_DECRYPT: /* Don't care */ break; case KM_PURPOSE_DERIVE_KEY: return false; }; return true; } } // namespace keymaster