43 static ErrorCode authorized_purpose(const KeyPurpose purpose, const AuthorizationSet& auth_set) {  in authorized_purpose()
49         if (auth_set.Contains(TAG_PURPOSE, purpose)) return ErrorCode::OK;  in authorized_purpose()
50         return ErrorCode::INCOMPATIBLE_PURPOSE;  in authorized_purpose()
53         return ErrorCode::UNSUPPORTED_PURPOSE;  in authorized_purpose()
72 ErrorCode KeymasterEnforcement::AuthorizeOperation(const KeyPurpose purpose, const km_id_t keyid,  in AuthorizeOperation()
82             return ErrorCode::OK;  in AuthorizeOperation()
89             return ErrorCode::INCOMPATIBLE_PURPOSE;  in AuthorizeOperation()
101 ErrorCode KeymasterEnforcement::AuthorizeUpdateOrFinish(const AuthorizationSet& auth_set,  in AuthorizeUpdateOrFinish()
110             return ErrorCode::OK;  in AuthorizeUpdateOrFinish()
138                 return ErrorCode::OK;  in AuthorizeUpdateOrFinish()
142     if (authentication_required) return ErrorCode::KEY_USER_NOT_AUTHENTICATED;  in AuthorizeUpdateOrFinish()
144     return ErrorCode::OK;  in AuthorizeUpdateOrFinish()
147 ErrorCode KeymasterEnforcement::AuthorizeBegin(const KeyPurpose purpose, const km_id_t keyid,  in AuthorizeBegin()
171     ErrorCode error = authorized_purpose(purpose, auth_set);  in AuthorizeBegin()
172     if (error != ErrorCode::OK) return error;  in AuthorizeBegin()
196                 return ErrorCode::KEY_NOT_YET_VALID;  in AuthorizeBegin()
203                 return ErrorCode::KEY_EXPIRED;  in AuthorizeBegin()
209                 return ErrorCode::KEY_EXPIRED;  in AuthorizeBegin()
215                 return ErrorCode::KEY_RATE_LIMIT_EXCEEDED;  in AuthorizeBegin()
222                 return ErrorCode::KEY_MAX_OPS_EXCEEDED;  in AuthorizeBegin()
228                 return ErrorCode::INVALID_KEY_BLOB;  in AuthorizeBegin()
268             return ErrorCode::INVALID_KEY_BLOB;  in AuthorizeBegin()
320             return ErrorCode::INVALID_KEY_BLOB;  in AuthorizeBegin()
333             return ErrorCode::DEVICE_LOCKED;  in AuthorizeBegin()
339         return ErrorCode::KEY_USER_NOT_AUTHENTICATED;  in AuthorizeBegin()
344         return ErrorCode::CALLER_NONCE_PROHIBITED;  in AuthorizeBegin()
349             return ErrorCode::TOO_MANY_OPERATIONS;  in AuthorizeBegin()
356             return ErrorCode::TOO_MANY_OPERATIONS;  in AuthorizeBegin()
360     return ErrorCode::OK;  in AuthorizeBegin()