openharmony/security_huks
1
0
Fork 0
mirror of https://gitee.com/openharmony/security_huks synced 2025-03-05 00:47:28 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

add key attestation

Browse Source 
Signed-off-by: Vincentchenhao <chenhao286@huawei.com>
This commit is contained in:
Vincentchenhao 2021-10-28 14:39:43 +08:00
parent b11a3eafa8
commit 8e100cedc7
3 changed files with 79 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
services/huks_standard/huks_service/main/core/src/hks_client_check.c
View File

@ -165,3 +165,18 @@ int32_t HksCheckGenerateRandomParams(const struct HksBlob *processName, const st
return HKS_SUCCESS;
}
#ifdef HKS_SUPPORT_API_ATTEST_KEY
int32_t HksCheckAttestKeyParams(const struct HksBlob *processName, const struct HksBlob *keyAlias,
const struct HksParamSet *paramSet, struct HksBlob *certChain)
{
return HksCheckGenAndImportKeyParams(processName, keyAlias, paramSet, certChain);
}
#endif
#ifdef HKS_SUPPORT_API_GET_CERTIFICATE_CHAIN
int32_t HksCheckGetCertificateChainParams(const struct HksBlob *processName, const struct HksBlob *keyAlias,
const struct HksParamSet *paramSet, struct HksBlob *certChain)
{
return HksCheckGenAndImportKeyParams(processName, keyAlias, paramSet, certChain);
}
#endif

58
services/huks_standard/huks_service/main/core/src/hks_client_service.c
View File

@ -1220,13 +1220,67 @@ int32_t HksServiceSignWithDeviceKey(const struct HksBlob *processName, uint32_t
int32_t HksServiceAttestKey(const struct HksBlob *processName, const struct HksBlob *keyAlias,
const struct HksParamSet *paramSet, struct HksBlob *certChain)
{
return 0;
#ifdef HKS_SUPPORT_API_ATTEST_KEY
int32_t ret = HksCheckAttestKeyParams(processName, keyAlias, paramSet, certChain);
if (ret != HKS_SUCCESS) {
HKS_LOG_E(check attest key param fail);
return ret;
}
struct HksParamSet *newParamSet = NULL;
struct HksBlob keyFromFile = { 0, NULL };
ret = GetKeyAndNewParamSet(processName, keyAlias, paramSet, &keyFromFile, &newParamSet);
if (ret != HKS_SUCCESS) {
HKS_LOG_E("GetKeyAndNewParamSet failed, ret = %d.", ret);
return ret;
}
do {
ret = HksAccessAttestKey(&keyFromFile, newParamSet, certChain);
if (ret != HKS_SUCCESS) {
HKS_LOG_E("HksAccessAttestKey fail, ret = %d.", ret);
break;
}
ret = HksStoreKeyBlob(processName, keyAlias, HKS_STORAGE_TYPE_CERTCHAIN, certChain);
if (ret != HKS_SUCCESS) {
HKS_LOG_E("store attest cert chain failed");
}
} while (0);
HKS_FREE_BLOB(keyFromFile);
HksFreeParamSet(&newParamSet)
return ret;
#else
return HKS_ERROR_NOT_SUPPORTED;
#endif
}
int32_t HksServiceGetCertificateChain(const struct HksBlob *processName, const struct HksBlob *keyAlias,
const struct HksParamSet *paramSet, struct HksBlob *certChain)
{
return 0;
#ifdef HKS_SUPPORT_API_GET_CERTIFICATE_CHAIN
int32_t ret = HksCheckGetCertificateChainParams(processName, keyAlias, paramSet, certChain);
if (ret != HKS_SUCCESS) {
return ret;
}
struct HksBlob certFromFile = { 0, NULL };
ret = GetKeyData(processName, keyAlias, &certFromFile, HKS_STORAGE_TYPE_CERTCHAIN);
if (ret != HKS_SUCCESS) {
HKS_LOG_E("HksGetKeyData fail, ret = %d.", ret);
return ret;
}
if (memcpy_s(certChain->data, certChain->size, certFromFile.data, certFromFile.size) != EOK) {
HKS_LOG_E("memcpy certChain fail.");
ret = HKS_ERROR_INSUFFICIENT_MEMORY;
}
certChain->size = certFromFile.size;
HKS_FREE_BLOB(certFromFile);
return ret;
#else
return HKS_ERROR_NOT_SUPPORTED;
#endif
}
int32_t HksServiceWrapKey(const struct HksBlob *processName, const struct HksBlob *keyAlias,

9
services/huks_standard/huks_service/main/os_dependency/idl/passthrough/hks_passthrough_access.c
View File

@ -136,4 +136,11 @@ int32_t HksAccessUpgradeKeyInfo(const struct HksBlob *keyAlias, const struct Hks
int32_t HksAccessGenerateRandom(const struct HksParamSet *paramSet, struct HksBlob *random)
{
return HksCoreGenerateRandom(paramSet, random);
}
}
#ifdef HKS_SUPPORT_API_ATTEST_KEY
int32_t HksAccessAttestKey(const struct HksBlob *key, const struct HksParamSet *paramSet, struct HksBlob *certChain)
{
return HKS_ERROR_NOT_SUPPORTED;
}
#endif