1 // Copyright 2021, The Android Open Source Project
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License");
4 // you may not use this file except in compliance with the License.
5 // You may obtain a copy of the License at
6 //
7 // http://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS,
11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 // See the License for the specific language governing permissions and
13 // limitations under the License.
14
15 //! This module provides a set of sample input values for a DICE chain, a sample UDS,
16 //! as well as tuple of CDIs and BCC derived thereof.
17
18 use android_hardware_security_dice::aidl::android::hardware::security::dice::{
19 Config::Config as BinderConfig, InputValues::InputValues as BinderInputValues, Mode::Mode,
20 };
21 use anyhow::{Context, Result};
22 use dice::ContextImpl;
23 use diced_open_dice_cbor as dice;
24 use diced_utils::cbor;
25 use diced_utils::InputValues;
26 use keystore2_crypto::ZVec;
27 use std::convert::{TryFrom, TryInto};
28 use std::io::Write;
29
30 /// Sample UDS used to perform the root dice flow by `make_sample_bcc_and_cdis`.
31 pub static UDS: &[u8; dice::CDI_SIZE] = &[
32 0x65, 0x4f, 0xab, 0xa9, 0xa5, 0xad, 0x0f, 0x5e, 0x15, 0xc3, 0x12, 0xf7, 0x77, 0x45, 0xfa, 0x55,
33 0x18, 0x6a, 0xa6, 0x34, 0xb6, 0x7c, 0x82, 0x7b, 0x89, 0x4c, 0xc5, 0x52, 0xd3, 0x27, 0x35, 0x8e,
34 ];
35
encode_pub_key_ed25519(pub_key: &[u8], stream: &mut dyn Write) -> Result<()>36 fn encode_pub_key_ed25519(pub_key: &[u8], stream: &mut dyn Write) -> Result<()> {
37 cbor::encode_header(5 /* CBOR MAP */, 5, stream)
38 .context("In encode_pub_key_ed25519: Trying to encode map header.")?;
39 cbor::encode_number(1, stream)
40 .context("In encode_pub_key_ed25519: Trying to encode Key type tag.")?;
41 cbor::encode_number(1, stream)
42 .context("In encode_pub_key_ed25519: Trying to encode Key type.")?;
43 cbor::encode_number(3, stream)
44 .context("In encode_pub_key_ed25519: Trying to encode algorithm tag.")?;
45 // Encoding a -8 for AlgorithmEdDSA. The encoded number is -1 - <header argument>,
46 // the an argument of 7 below.
47 cbor::encode_header(1 /* CBOR NEGATIVE INT */, 7 /* -1 -7 = -8*/, stream)
48 .context("In encode_pub_key_ed25519: Trying to encode algorithm.")?;
49 cbor::encode_number(4, stream)
50 .context("In encode_pub_key_ed25519: Trying to encode ops tag.")?;
51 // Ops 2 for verify.
52 cbor::encode_number(2, stream).context("In encode_pub_key_ed25519: Trying to encode ops.")?;
53 cbor::encode_header(1 /* CBOR NEGATIVE INT */, 0 /* -1 -0 = -1*/, stream)
54 .context("In encode_pub_key_ed25519: Trying to encode curve tag.")?;
55 // Curve 6 for Ed25519
56 cbor::encode_number(6, stream).context("In encode_pub_key_ed25519: Trying to encode curve.")?;
57 cbor::encode_header(1 /* CBOR NEGATIVE INT */, 1 /* -1 -1 = -2*/, stream)
58 .context("In encode_pub_key_ed25519: Trying to encode X coordinate tag.")?;
59 cbor::encode_bstr(pub_key, stream)
60 .context("In encode_pub_key_ed25519: Trying to encode X coordinate.")?;
61 Ok(())
62 }
63
64 /// Derives a tuple of (CDI_ATTEST, CDI_SEAL, BCC) derived of the vector of input values returned
65 /// by `get_input_values_vector`.
make_sample_bcc_and_cdis() -> Result<(ZVec, ZVec, Vec<u8>)>66 pub fn make_sample_bcc_and_cdis() -> Result<(ZVec, ZVec, Vec<u8>)> {
67 let mut dice_ctx = dice::OpenDiceCborContext::new();
68 let private_key_seed = dice_ctx
69 .derive_cdi_private_key_seed(UDS)
70 .context("In make_sample_bcc_and_cdis: Trying to derive private key seed.")?;
71
72 let (public_key, _) =
73 dice_ctx
74 .keypair_from_seed(&private_key_seed[..].try_into().context(
75 "In make_sample_bcc_and_cids: Failed to convert seed to array reference.",
76 )?)
77 .context("In make_sample_bcc_and_cids: Failed to generate key pair.")?;
78
79 let input_values_vector = get_input_values_vector();
80
81 let (cdi_attest, cdi_seal, mut cert) = dice_ctx
82 .main_flow(
83 UDS,
84 UDS,
85 &InputValues::try_from(&input_values_vector[0])
86 .context("In make_sample_bcc_and_cdis: Trying to convert input values. (0)")?,
87 )
88 .context("In make_sample_bcc_and_cdis: Trying to run first main flow.")?;
89
90 let mut bcc: Vec<u8> = vec![];
91
92 cbor::encode_header(4 /* CBOR ARRAY */, 2, &mut bcc)
93 .context("In make_sample_bcc_and_cdis: Trying to encode array header.")?;
94 encode_pub_key_ed25519(&public_key, &mut bcc)
95 .context("In make_sample_bcc_and_cdis: Trying encode pub_key.")?;
96
97 bcc.append(&mut cert);
98
99 let (cdi_attest, cdi_seal, bcc) = dice_ctx
100 .bcc_main_flow(
101 &cdi_attest[..].try_into().context(
102 "In make_sample_bcc_and_cdis: Failed to convert cdi_attest to array reference. (1)",
103 )?,
104 &cdi_seal[..].try_into().context(
105 "In make_sample_bcc_and_cdis: Failed to convert cdi_seal to array reference. (1)",
106 )?,
107 &bcc,
108 &InputValues::try_from(&input_values_vector[1])
109 .context("In make_sample_bcc_and_cdis: Trying to convert input values. (1)")?,
110 )
111 .context("In make_sample_bcc_and_cdis: Trying to run first bcc main flow.")?;
112 dice_ctx
113 .bcc_main_flow(
114 &cdi_attest[..].try_into().context(
115 "In make_sample_bcc_and_cdis: Failed to convert cdi_attest to array reference. (2)",
116 )?,
117 &cdi_seal[..].try_into().context(
118 "In make_sample_bcc_and_cdis: Failed to convert cdi_seal to array reference. (2)",
119 )?,
120 &bcc,
121 &InputValues::try_from(&input_values_vector[2])
122 .context("In make_sample_bcc_and_cdis: Trying to convert input values. (2)")?,
123 )
124 .context("In make_sample_bcc_and_cdis: Trying to run second bcc main flow.")
125 }
126
make_input_values( code_hash: &[u8; dice::HASH_SIZE], authority_hash: &[u8; dice::HASH_SIZE], config_name: &str, config_version: u64, config_resettable: bool, mode: Mode, hidden: &[u8; dice::HIDDEN_SIZE], ) -> Result<BinderInputValues>127 fn make_input_values(
128 code_hash: &[u8; dice::HASH_SIZE],
129 authority_hash: &[u8; dice::HASH_SIZE],
130 config_name: &str,
131 config_version: u64,
132 config_resettable: bool,
133 mode: Mode,
134 hidden: &[u8; dice::HIDDEN_SIZE],
135 ) -> Result<BinderInputValues> {
136 Ok(BinderInputValues {
137 codeHash: *code_hash,
138 config: BinderConfig {
139 desc: dice::bcc::format_config_descriptor(
140 Some(config_name),
141 Some(config_version),
142 config_resettable,
143 )
144 .context("In make_input_values: Failed to format config descriptor.")?,
145 },
146 authorityHash: *authority_hash,
147 authorityDescriptor: None,
148 hidden: *hidden,
149 mode,
150 })
151 }
152
153 /// Returns a set of sample input for a dice chain comprising the android boot loader ABL,
154 /// the verified boot information AVB, and Android S.
get_input_values_vector() -> Vec<BinderInputValues>155 pub fn get_input_values_vector() -> Vec<BinderInputValues> {
156 vec![
157 make_input_values(
158 &[
159 // code hash
160 0x16, 0x48, 0xf2, 0x55, 0x53, 0x23, 0xdd, 0x15, 0x2e, 0x83, 0x38, 0xc3, 0x64, 0x38,
161 0x63, 0x26, 0x0f, 0xcf, 0x5b, 0xd1, 0x3a, 0xd3, 0x40, 0x3e, 0x23, 0xf8, 0x34, 0x4c,
162 0x6d, 0xa2, 0xbe, 0x25, 0x1c, 0xb0, 0x29, 0xe8, 0xc3, 0xfb, 0xb8, 0x80, 0xdc, 0xb1,
163 0xd2, 0xb3, 0x91, 0x4d, 0xd3, 0xfb, 0x01, 0x0f, 0xe4, 0xe9, 0x46, 0xa2, 0xc0, 0x26,
164 0x57, 0x5a, 0xba, 0x30, 0xf7, 0x15, 0x98, 0x14,
165 ],
166 &[
167 // authority hash
168 0xf9, 0x00, 0x9d, 0xc2, 0x59, 0x09, 0xe0, 0xb6, 0x98, 0xbd, 0xe3, 0x97, 0x4a, 0xcb,
169 0x3c, 0xe7, 0x6b, 0x24, 0xc3, 0xe4, 0x98, 0xdd, 0xa9, 0x6a, 0x41, 0x59, 0x15, 0xb1,
170 0x23, 0xe6, 0xc8, 0xdf, 0xfb, 0x52, 0xb4, 0x52, 0xc1, 0xb9, 0x61, 0xdd, 0xbc, 0x5b,
171 0x37, 0x0e, 0x12, 0x12, 0xb2, 0xfd, 0xc1, 0x09, 0xb0, 0xcf, 0x33, 0x81, 0x4c, 0xc6,
172 0x29, 0x1b, 0x99, 0xea, 0xae, 0xfd, 0xaa, 0x0d,
173 ],
174 "ABL", // config name
175 1, // config version
176 true, // resettable
177 Mode::NORMAL,
178 &[
179 // hidden
180 0xa2, 0x01, 0xd0, 0xc0, 0xaa, 0x75, 0x3c, 0x06, 0x43, 0x98, 0x6c, 0xc3, 0x5a, 0xb5,
181 0x5f, 0x1f, 0x0f, 0x92, 0x44, 0x3b, 0x0e, 0xd4, 0x29, 0x75, 0xe3, 0xdb, 0x36, 0xda,
182 0xc8, 0x07, 0x97, 0x4d, 0xff, 0xbc, 0x6a, 0xa4, 0x8a, 0xef, 0xc4, 0x7f, 0xf8, 0x61,
183 0x7d, 0x51, 0x4d, 0x2f, 0xdf, 0x7e, 0x8c, 0x3d, 0xa3, 0xfc, 0x63, 0xd4, 0xd4, 0x74,
184 0x8a, 0xc4, 0x14, 0x45, 0x83, 0x6b, 0x12, 0x7e,
185 ],
186 )
187 .unwrap(),
188 make_input_values(
189 &[
190 // code hash
191 0xa4, 0x0c, 0xcb, 0xc1, 0xbf, 0xfa, 0xcc, 0xfd, 0xeb, 0xf4, 0xfc, 0x43, 0x83, 0x7f,
192 0x46, 0x8d, 0xd8, 0xd8, 0x14, 0xc1, 0x96, 0x14, 0x1f, 0x6e, 0xb3, 0xa0, 0xd9, 0x56,
193 0xb3, 0xbf, 0x2f, 0xfa, 0x88, 0x70, 0x11, 0x07, 0x39, 0xa4, 0xd2, 0xa9, 0x6b, 0x18,
194 0x28, 0xe8, 0x29, 0x20, 0x49, 0x0f, 0xbb, 0x8d, 0x08, 0x8c, 0xc6, 0x54, 0xe9, 0x71,
195 0xd2, 0x7e, 0xa4, 0xfe, 0x58, 0x7f, 0xd3, 0xc7,
196 ],
197 &[
198 // authority hash
199 0xb2, 0x69, 0x05, 0x48, 0x56, 0xb5, 0xfa, 0x55, 0x6f, 0xac, 0x56, 0xd9, 0x02, 0x35,
200 0x2b, 0xaa, 0x4c, 0xba, 0x28, 0xdd, 0x82, 0x3a, 0x86, 0xf5, 0xd4, 0xc2, 0xf1, 0xf9,
201 0x35, 0x7d, 0xe4, 0x43, 0x13, 0xbf, 0xfe, 0xd3, 0x36, 0xd8, 0x1c, 0x12, 0x78, 0x5c,
202 0x9c, 0x3e, 0xf6, 0x66, 0xef, 0xab, 0x3d, 0x0f, 0x89, 0xa4, 0x6f, 0xc9, 0x72, 0xee,
203 0x73, 0x43, 0x02, 0x8a, 0xef, 0xbc, 0x05, 0x98,
204 ],
205 "AVB", // config name
206 1, // config version
207 true, // resettable
208 Mode::NORMAL,
209 &[
210 // hidden
211 0x5b, 0x3f, 0xc9, 0x6b, 0xe3, 0x95, 0x59, 0x40, 0x5e, 0x64, 0xe5, 0x64, 0x3f, 0xfd,
212 0x21, 0x09, 0x9d, 0xf3, 0xcd, 0xc7, 0xa4, 0x2a, 0xe2, 0x97, 0xdd, 0xe2, 0x4f, 0xb0,
213 0x7d, 0x7e, 0xf5, 0x8e, 0xd6, 0x4d, 0x84, 0x25, 0x54, 0x41, 0x3f, 0x8f, 0x78, 0x64,
214 0x1a, 0x51, 0x27, 0x9d, 0x55, 0x8a, 0xe9, 0x90, 0x35, 0xab, 0x39, 0x80, 0x4b, 0x94,
215 0x40, 0x84, 0xa2, 0xfd, 0x73, 0xeb, 0x35, 0x7a,
216 ],
217 )
218 .unwrap(),
219 make_input_values(
220 &[
221 // code hash
222 0; dice::HASH_SIZE
223 ],
224 &[
225 // authority hash
226 0x04, 0x25, 0x5d, 0x60, 0x5f, 0x5c, 0x45, 0x0d, 0xf2, 0x9a, 0x6e, 0x99, 0x30, 0x03,
227 0xb8, 0xd6, 0xe1, 0x99, 0x71, 0x1b, 0xf8, 0x44, 0xfa, 0xb5, 0x31, 0x79, 0x1c, 0x37,
228 0x68, 0x4e, 0x1d, 0xc0, 0x24, 0x74, 0x68, 0xf8, 0x80, 0x20, 0x3e, 0x44, 0xb1, 0x43,
229 0xd2, 0x9c, 0xfc, 0x12, 0x9e, 0x77, 0x0a, 0xde, 0x29, 0x24, 0xff, 0x2e, 0xfa, 0xc7,
230 0x10, 0xd5, 0x73, 0xd4, 0xc6, 0xdf, 0x62, 0x9f,
231 ],
232 "Android", // config name
233 12, // config version
234 true, // resettable
235 Mode::NORMAL,
236 &[
237 // hidden
238 0; dice::HIDDEN_SIZE
239 ],
240 )
241 .unwrap(),
242 ]
243 }
244
245 #[cfg(test)]
246 mod test {
247 use super::*;
248
249 // This simple test checks if the invocation succeeds, essentially it tests
250 // if the initial bcc is accepted by `DiceContext::bcc_main_flow`.
251 #[test]
make_sample_bcc_and_cdis_test()252 fn make_sample_bcc_and_cdis_test() {
253 make_sample_bcc_and_cdis().unwrap();
254 }
255 }
256