| /system/keymaster/tests/ |
| D | keymaster_enforcement_test.cpp | 36 const AuthProxy& auth_set) { in AuthorizeOperation() argument
39 purpose, keyid, auth_set, empty_set, 0 /* op_handle */, true /* is_begin_operation */); in AuthorizeOperation()
114 AuthorizationSet auth_set(params, array_length(params)); in TEST_F() local
117 kmen.AuthorizeOperation(KM_PURPOSE_SIGN, key_id, AuthProxy(auth_set, empty))); in TEST_F()
121 kmen.AuthorizeOperation(KM_PURPOSE_VERIFY, key_id, AuthProxy(auth_set, empty))); in TEST_F()
129 AuthorizationSet auth_set(params, array_length(params)); in TEST_F() local
132 kmen.AuthorizeOperation(KM_PURPOSE_SIGN, key_id, AuthProxy(auth_set, empty)); in TEST_F()
142 AuthorizationSet auth_set(params, array_length(params)); in TEST_F() local
145 kmen.AuthorizeOperation(KM_PURPOSE_SIGN, key_id, AuthProxy(auth_set, empty))); in TEST_F()
149 kmen.AuthorizeOperation(KM_PURPOSE_VERIFY, key_id, AuthProxy(auth_set, empty))); in TEST_F()
[all …]
|
| /system/keymaster/android_keymaster/ |
| D | keymaster_enforcement.cpp | 75 bool is_public_key_algorithm(const AuthProxy& auth_set) { in is_public_key_algorithm() argument
77 return auth_set.GetTagValue(TAG_ALGORITHM, &algorithm) && in is_public_key_algorithm()
82 const AuthProxy& auth_set) { in authorized_purpose() argument
89 if (auth_set.Contains(TAG_PURPOSE, purpose)) in authorized_purpose()
118 const AuthProxy& auth_set, in AuthorizeOperation() argument
122 if (is_public_key_algorithm(auth_set)) { in AuthorizeOperation()
138 return AuthorizeBegin(purpose, keyid, auth_set, operation_params); in AuthorizeOperation()
140 return AuthorizeUpdateOrFinish(auth_set, operation_params, op_handle); in AuthorizeOperation()
146 KeymasterEnforcement::AuthorizeUpdateOrFinish(const AuthProxy& auth_set, in AuthorizeUpdateOrFinish() argument
151 for (size_t pos = 0; pos < auth_set.size(); ++pos) { in AuthorizeUpdateOrFinish()
[all …]
|
| /system/keymaster/include/keymaster/ |
| D | keymaster_enforcement.h | 56 const AuthProxy& auth_set,
67 const AuthProxy& auth_set,
75 keymaster_error_t AuthorizeUpdate(const AuthProxy& auth_set, in AuthorizeUpdate() argument
78 return AuthorizeUpdateOrFinish(auth_set, operation_params, op_handle); in AuthorizeUpdate()
86 keymaster_error_t AuthorizeFinish(const AuthProxy& auth_set, in AuthorizeFinish() argument
89 return AuthorizeUpdateOrFinish(auth_set, operation_params, op_handle); in AuthorizeFinish()
183 keymaster_error_t AuthorizeUpdateOrFinish(const AuthProxy& auth_set,
189 bool AuthTokenMatches(const AuthProxy& auth_set, const AuthorizationSet& operation_params,
|
| D | soft_keymaster_device.h | 97 AuthorizationSet* auth_set);
|
| /system/security/keystore/ |
| D | keymaster_enforcement.cpp | 37 bool is_public_key_algorithm(const AuthorizationSet& auth_set) { in is_public_key_algorithm() argument
38 auto algorithm = auth_set.GetTagValue(TAG_ALGORITHM); in is_public_key_algorithm()
43 static ErrorCode authorized_purpose(const KeyPurpose purpose, const AuthorizationSet& auth_set) { in authorized_purpose() argument
49 if (auth_set.Contains(TAG_PURPOSE, purpose)) return ErrorCode::OK; in authorized_purpose()
73 const AuthorizationSet& auth_set, in AuthorizeOperation() argument
77 if (is_public_key_algorithm(auth_set)) { in AuthorizeOperation()
94 return AuthorizeBegin(purpose, keyid, auth_set, operation_params, auth_token); in AuthorizeOperation()
96 return AuthorizeUpdateOrFinish(auth_set, auth_token, op_handle); in AuthorizeOperation()
101 ErrorCode KeymasterEnforcement::AuthorizeUpdateOrFinish(const AuthorizationSet& auth_set, in AuthorizeUpdateOrFinish() argument
105 for (size_t pos = 0; pos < auth_set.size(); ++pos) { in AuthorizeUpdateOrFinish()
[all …]
|
| D | keymaster_enforcement.h | 99 const AuthorizationSet& auth_set,
110 const AuthorizationSet& auth_set,
119 ErrorCode AuthorizeUpdate(const AuthorizationSet& auth_set, const HardwareAuthToken& auth_token, in AuthorizeUpdate() argument
121 return AuthorizeUpdateOrFinish(auth_set, auth_token, op_handle); in AuthorizeUpdate()
129 ErrorCode AuthorizeFinish(const AuthorizationSet& auth_set, const HardwareAuthToken& auth_token, in AuthorizeFinish() argument
131 return AuthorizeUpdateOrFinish(auth_set, auth_token, op_handle); in AuthorizeFinish()
197 ErrorCode AuthorizeUpdateOrFinish(const AuthorizationSet& auth_set,
202 bool AuthTokenMatches(const AuthorizationSet& auth_set, const HardwareAuthToken& auth_token,
|
| /system/keymaster/contexts/ |
| D | soft_keymaster_device.cpp | 1621 AuthorizationSet* auth_set) { in StoreDefaultNewKeyParams() argument
1622 auth_set->push_back(TAG_PURPOSE, KM_PURPOSE_SIGN); in StoreDefaultNewKeyParams()
1623 auth_set->push_back(TAG_PURPOSE, KM_PURPOSE_VERIFY); in StoreDefaultNewKeyParams()
1624 auth_set->push_back(TAG_ALL_USERS); in StoreDefaultNewKeyParams()
1625 auth_set->push_back(TAG_NO_AUTH_REQUIRED); in StoreDefaultNewKeyParams()
1628 auth_set->push_back(TAG_DIGEST, KM_DIGEST_NONE); in StoreDefaultNewKeyParams()
1629 auth_set->push_back(TAG_DIGEST, KM_DIGEST_MD5); in StoreDefaultNewKeyParams()
1630 auth_set->push_back(TAG_DIGEST, KM_DIGEST_SHA1); in StoreDefaultNewKeyParams()
1631 auth_set->push_back(TAG_DIGEST, KM_DIGEST_SHA_2_224); in StoreDefaultNewKeyParams()
1632 auth_set->push_back(TAG_DIGEST, KM_DIGEST_SHA_2_256); in StoreDefaultNewKeyParams()
[all …]
|
| /system/keymaster/km_openssl/ |
| D | wrapped_key.cpp | 44 const AuthorizationSet& auth_set, in build_wrapped_key() argument
59 auto err = build_auth_list(auth_set, wrapped_key->wrapped_key_description->auth_list); in build_wrapped_key()
|