Encrypted Initial Values: decrypting items from XML files.

[platform/core/security/key-manager.git] / src / manager / crypto / platform / decider.cpp

diff --git a/src/manager/crypto/platform/decider.cpp b/src/manager/crypto/platform/decider.cpp
index b3e4413..2f73b1f 100644 (file)
--- a/src/manager/crypto/platform/decider.cpp
+++ b/src/manager/crypto/platform/decider.cpp
@@ -1,19 +1,90 @@
+/*
+ *  Copyright (c) 2015 Samsung Electronics Co., Ltd All Rights Reserved
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License
+ */
+/*
+ * @file       decider.cpp
+ * @author     Bartłomiej Grzelewski (b.grzelewski@samsung.com)
+ * @version    1.0
+ */
+#include <dpl/log/log.h>
+
+#include <crypto-backend.h>
+
 #include <platform/decider.h>
 
+#include <generic-backend/exception.h>
 #include <sw-backend/store.h>
+#include <tz-backend/store.h>
 
 namespace CKM {
 namespace Crypto {
 
+namespace {
+CryptoBackend chooseCryptoBackend(DataType dataType, bool exportable, bool encrypted) {
+// Only software backend supports device encyption key
+    if (encrypted)
+        return CryptoBackend::OpenSSL;
+
+// The list of items that MUST be support by OpenSSL
+    if (dataType.isCertificate())
+        return CryptoBackend::OpenSSL;
+
+    if (dataType.isBinaryData())
+        return CryptoBackend::OpenSSL;
+
+    if (exportable)
+        return CryptoBackend::OpenSSL;
+
+//  This is the place where we can use trust zone backend
+//  Examples:
+//
+//  if (dataType.isKeyPrivate())
+//      return CryptoBackend::TrustZone;
+
+// This item does not met Trust Zone requirements. Let's use software backend
+    return CryptoBackend::OpenSSL;
+}
+} // namespace
+
 Decider::Decider()
-  : m_store(new SW::Store(CryptoBackend::OpenSSL))
+  : m_swStore(new SW::Store(CryptoBackend::OpenSSL))
+  , m_tzStore(new TZ::Store(CryptoBackend::TrustZone))
 {}
 
-GStoreShPtr Decider::getStore(const Token &) {
-    // This the place where we should choose backend bases on token information.
-    return m_store;
+GStore& Decider::getStore(const Token &token) const {
+    return getStore(token.backendId);
 };
 
+GStore& Decider::getStore(CryptoBackend cryptoBackend) const {
+    GStore *gStore = NULL;
+    if (cryptoBackend == CryptoBackend::OpenSSL)
+        gStore = m_swStore.get();
+    if (cryptoBackend == CryptoBackend::TrustZone)
+        gStore = m_tzStore.get();
+
+    if (gStore)
+        return *gStore;
+
+    ThrowErr(Exc::Crypto::InternalError,
+             "Backend not available. BackendId: ", (int)cryptoBackend);
+}
+
+GStore& Decider::getStore(DataType data, bool exportable, bool encrypted) const {
+    return getStore(chooseCryptoBackend(data, exportable, encrypted));
+}
+
 } // namespace Crypto
 } // namespace CKM