*
*/
-#include "SecCryptoSvc.h"
-//#include "SecKmBase64.h"
-//#include "CryptoSvc-debug.h"
+#include <fcntl.h>
+#include <unistd.h>
#include <string.h>
-#include <stdio.h>
+
#include <openssl/evp.h>
#include <openssl/err.h>
#include <openssl/rand.h>
#include <openssl/sha.h>
+
#include <dlog.h>
-#include <fcntl.h>
-#include <unistd.h>
+
+#include "SecCryptoSvc.h"
#define SYS_SECBOOT_DEV_ID_LEN 16
#define NAND_CID_NAME "/sys/block/mmcblk0/device/cid"
#define NAND_CID_SIZE 32
+#ifdef CRYPTOSVC_TARGET
static int __AsciiToHex(const char AsciiHexUpper,const char AsciiHexLower)
{
- char hexReturn=0;
-
- //First convert upper hex ascii value
- if(AsciiHexUpper >= '0' && AsciiHexUpper <= '9')
- hexReturn= (AsciiHexUpper - '0')*16;
- else if(AsciiHexUpper >= 'A' && AsciiHexUpper <= 'F')
- hexReturn= ((AsciiHexUpper - 'A')+10)*16;
- else if(AsciiHexUpper >= 'a' && AsciiHexUpper <= 'f')
- hexReturn= ((AsciiHexUpper - 'a')+10)*16;
-
- //Convert lower hex ascii value
- if(AsciiHexLower >= '0' && AsciiHexLower <= '9')
- hexReturn= hexReturn + (AsciiHexLower - '0');
- else if(AsciiHexLower >= 'A' && AsciiHexLower <= 'F')
- hexReturn= hexReturn + (AsciiHexLower - 'A')+10;
- else if(AsciiHexLower >= 'a' && AsciiHexLower <= 'f')
- hexReturn= hexReturn + (AsciiHexLower - 'a')+10;
-
- return hexReturn;
+ char hexReturn=0;
+
+ //First convert upper hex ascii value
+ if (AsciiHexUpper >= '0' && AsciiHexUpper <= '9')
+ hexReturn = (AsciiHexUpper - '0') * 16;
+ else if (AsciiHexUpper >= 'A' && AsciiHexUpper <= 'F')
+ hexReturn = ((AsciiHexUpper - 'A') + 10) * 16;
+ else if (AsciiHexUpper >= 'a' && AsciiHexUpper <= 'f')
+ hexReturn = ((AsciiHexUpper - 'a') + 10) * 16;
+
+ //Convert lower hex ascii value
+ if (AsciiHexLower >= '0' && AsciiHexLower <= '9')
+ hexReturn = hexReturn + (AsciiHexLower - '0');
+ else if (AsciiHexLower >= 'A' && AsciiHexLower <= 'F')
+ hexReturn = hexReturn + (AsciiHexLower - 'A') + 10;
+ else if (AsciiHexLower >= 'a' && AsciiHexLower <= 'f')
+ hexReturn = hexReturn + (AsciiHexLower - 'a') + 10;
+
+ return hexReturn;
}
-bool
-OemNandInfoUID(unsigned char* pUID, int nBufferSize)
+bool OemNandInfoUID(unsigned char *pUID, int nBufferSize)
{
int fd = 0;
- char szCID[NAND_CID_SIZE+1] = {0,};
+ char szCID[NAND_CID_SIZE + 1] = {0,};
- memset(pUID, 0x0, nBufferSize);
+ memset(pUID, 0x00, nBufferSize);
fd = open(NAND_CID_NAME, O_RDONLY);
- if (fd < 0)
- {
- printf("cid open error!\n");
+ if (fd < 0) {
+ SLOGE("cid open error!");
return false;
}
- if(read(fd, szCID, NAND_CID_SIZE) == -1)
- {
- printf("cid read fail!!\n");
+ if (read(fd, szCID, NAND_CID_SIZE) == -1) {
+ SLOGE("cid read fail!!");
close(fd);
return false;
}
//manufacturer_id
- pUID[0] = __AsciiToHex((const char)szCID[0],(const char)szCID[1]);
+ pUID[0] = __AsciiToHex((const char)szCID[0], (const char)szCID[1]);
//oem_id
- pUID[4] = __AsciiToHex((const char)szCID[4],(const char)szCID[5]);
+ pUID[4] = __AsciiToHex((const char)szCID[4], (const char)szCID[5]);
//prod_rev
- pUID[8] = __AsciiToHex((const char)szCID[18],(const char)szCID[19]);
+ pUID[8] = __AsciiToHex((const char)szCID[18], (const char)szCID[19]);
//serial
- pUID[15] = __AsciiToHex((const char)szCID[20],(const char)szCID[21]);
- pUID[14] = __AsciiToHex((const char)szCID[22],(const char)szCID[23]);
- pUID[13] = __AsciiToHex((const char)szCID[24],(const char)szCID[25]);
- pUID[12] = __AsciiToHex((const char)szCID[26],(const char)szCID[27]);
+ pUID[15] = __AsciiToHex((const char)szCID[20], (const char)szCID[21]);
+ pUID[14] = __AsciiToHex((const char)szCID[22], (const char)szCID[23]);
+ pUID[13] = __AsciiToHex((const char)szCID[24], (const char)szCID[25]);
+ pUID[12] = __AsciiToHex((const char)szCID[26], (const char)szCID[27]);
// random permutation
- pUID[1] = __AsciiToHex((const char)szCID[2],(const char)szCID[3]);
- pUID[2] = __AsciiToHex((const char)szCID[6],(const char)szCID[7]);
- pUID[3] = __AsciiToHex((const char)szCID[8],(const char)szCID[9]);
+ pUID[1] = __AsciiToHex((const char)szCID[2], (const char)szCID[3]);
+ pUID[2] = __AsciiToHex((const char)szCID[6], (const char)szCID[7]);
+ pUID[3] = __AsciiToHex((const char)szCID[8], (const char)szCID[9]);
+
+ pUID[5] = __AsciiToHex((const char)szCID[10], (const char)szCID[11]);
+ pUID[6] = __AsciiToHex((const char)szCID[12], (const char)szCID[13]);
+ pUID[7] = __AsciiToHex((const char)szCID[14], (const char)szCID[15]);
- pUID[5] = __AsciiToHex((const char)szCID[10],(const char)szCID[11]);
- pUID[6] = __AsciiToHex((const char)szCID[12],(const char)szCID[13]);
- pUID[7] = __AsciiToHex((const char)szCID[14],(const char)szCID[15]);
+ pUID[9] = __AsciiToHex((const char)szCID[16], (const char)szCID[17]);
+ pUID[10] = __AsciiToHex((const char)szCID[28], (const char)szCID[29]);
+ pUID[11] = __AsciiToHex((const char)szCID[30], (const char)szCID[31]);
- pUID[9] = __AsciiToHex((const char)szCID[16],(const char)szCID[17]);
- pUID[10] = __AsciiToHex((const char)szCID[28],(const char)szCID[29]);
- pUID[11] = __AsciiToHex((const char)szCID[30],(const char)szCID[31]);
- //printf(" UID : %8X %8X %8X %8X\n", *(int*)pUID, *(int*)(pUID+4), *(int*)(pUID+8), *(int*)(pUID+12));
+ SLOGD(" UID : %8X %8X %8X %8X",
+ *(int *)pUID,
+ *(int *)(pUID + 4),
+ *(int *)(pUID + 8),
+ *(int *)(pUID + 12));
close(fd);
return true;
}
-void SysSecBootGetDeviceUniqueKey(unsigned char* pUniquekey)
+void SysSecBootGetDeviceUniqueKey(unsigned char *pUniquekey)
{
- bool result = OemNandInfoUID(pUniquekey, SYS_SECBOOT_DEV_ID_LEN);
- if(result != true){
- printf("SysSecBootGetDeviceUniqueKey is failed");
- memcpy(pUniquekey, 0x00, SYS_SECBOOT_DEV_ID_LEN);
- }
+ if (!OemNandInfoUID(pUniquekey, SYS_SECBOOT_DEV_ID_LEN))
+ memset(pUniquekey, 0x00, SYS_SECBOOT_DEV_ID_LEN);
}
+#endif
+
-bool SecFrameGeneratePlatformUniqueKey(IN UINT32 uLen, IN OUT UINT8 *pCek)
+bool SecFrameGeneratePlatformUniqueKey(unsigned int uLen, unsigned char *pCek)
{
- bool bResult = true;
- unsigned int i = 0;
- unsigned char Key[73] = {0};
- unsigned char hashedValue[HASH_LEN] = {0};
- int nTempLen = SEC_DUK_SIZE;
- int nHashLen = 0;
- int remain = 0;
- unsigned char *result = NULL;
-
- SLOGD("[LOG][%s:L%d] Enter \n", __func__,__LINE__);
+ bool bResult = true;
+ unsigned int i = 0;
+ unsigned char Key[73] = {0};
+ unsigned char hashedValue[HASH_LEN] = {0};
+ int nTempLen = SEC_DUK_SIZE;
+ int nHashLen = 0;
+ int remain = 0;
+ unsigned char *result = NULL;
+
#ifdef CRYPTOSVC_TARGET
SysSecBootGetDeviceUniqueKey(Key);
#else
memset(Key, 0xFF, nTempLen);
#endif
- /* for debugging */
- SLOGD("Device Unique Key Information \n");
-
memcpy(Key+nTempLen, SEC_FRAME_OSP_KEY, 9);
nTempLen += 9;
remain = uLen;
- for( i = 0 ; i < uLen ; i += HASH_LEN )
- {
+ for (i = 0; i < uLen; i += HASH_LEN) {
result = SHA1(Key, nTempLen, hashedValue);
nHashLen = HASH_LEN;
- if( result == NULL)
- {
- SLOGE("SecCryptoHash fail \n");
+ if (!result) {
+ SLOGE("SecCryptoHash fail");
bResult = false;
goto ERR;
}
nTempLen = nHashLen;
- if( remain < HASH_LEN )
- {
- memcpy(pCek+i, hashedValue, remain);
- }
+ if (remain < HASH_LEN)
+ memcpy(pCek + i, hashedValue, remain);
else
- {
- memcpy(pCek+i, hashedValue, nHashLen);
- }
+ memcpy(pCek + i, hashedValue, nHashLen);
remain -= HASH_LEN;
memset(Key, 0, sizeof(Key));
memcpy(Key, hashedValue, nHashLen);
}
- SLOGD("[LOG][%s:L%d] End \n", __func__,__LINE__);
+
+ SLOGD("SecFrameGeneratePlatformUniqueKey Success.");
+
ERR:
- SLOGD("[LOG][%s:L%d] End with ERROR \n", __func__,__LINE__);
return bResult;
}
-char* Base64Encoding(char* pData, int size)
+char *Base64Encoding(char *pData, int size)
{
- char* pEncodedBuf = NULL;
- char* pPointer = NULL;
- char* pLength = NULL;
+ char *pEncodedBuf = NULL;
+ char *pPointer = NULL;
+ char *pLength = pData + size - 1;
unsigned char pInput[3] = {0,0,0};
unsigned char poutput[4] = {0,0,0,0};
int index = 0;
int loopCnt = 0;
int stringCnt = 0;
- int sizeEncodedString = 0;
+ int sizeEncodedString = (4 * (size / 3)) + (size % 3 ? 4 : 0) + 1;
- pLength = pData + size - 1;
- sizeEncodedString = (4 * (size / 3)) + (size % 3? 4 : 0) + 1;
- pEncodedBuf = (char*)calloc(sizeEncodedString, sizeof(char));
+ if (!(pEncodedBuf = (char *)calloc(sizeEncodedString, sizeof(char)))) {
+ SLOGE("Failed to allocate memory");
+ return NULL;
+ }
- for (loopCnt = 0, pPointer = pData; pPointer <= pLength; loopCnt++, pPointer++) {
+ for (loopCnt = 0, pPointer = pData; pPointer <= pLength; loopCnt++, pPointer++) {
index = loopCnt % 3;
pInput[index] = *pPointer;
pEncodedBuf[stringCnt++] = Base64EncodingTable[poutput[0]];
pEncodedBuf[stringCnt++] = Base64EncodingTable[poutput[1]];
- pEncodedBuf[stringCnt++] = index == 0? '=' : Base64EncodingTable[poutput[2]];
- pEncodedBuf[stringCnt++] = index < 2? '=' : Base64EncodingTable[poutput[3]];
+ pEncodedBuf[stringCnt++] = index == 0 ? '=' : Base64EncodingTable[poutput[2]];
+ pEncodedBuf[stringCnt++] = index < 2 ? '=' : Base64EncodingTable[poutput[3]];
pInput[0] = pInput[1] = pInput[2] = 0;
}
return pEncodedBuf;
}
+
+char *GetDuid(int idSize)
+{
+ const char *version = "1.0#";
+ char info[] = {0xca, 0xfe, 0xbe, 0xbe, 0x78, 0x07, 0x02, 0x03};
+
+ unsigned char *pKey = NULL;
+ unsigned char *pDuid = NULL;
+ char *pId = NULL;
+ char *pKeyVersion = NULL;
+
+ if (idSize <= 0) {
+ SLOGE("Invalid Input [%d]", idSize);
+ return NULL;
+ }
+
+ if (!(pKey = (unsigned char *)malloc(idSize))) {
+ SLOGE("Failed to allocate memory for key");
+ return NULL;
+ }
+
+ if (!SecFrameGeneratePlatformUniqueKey(idSize, pKey)) {
+ SLOGE("Failed to get duid");
+ goto exit;
+ }
+
+ if (!(pDuid = (unsigned char *)malloc(idSize))) {
+ SLOGE("Failed to allocate memory");
+ goto exit;
+ }
+
+ PKCS5_PBKDF2_HMAC_SHA1(info, 8, pKey, idSize, 1, idSize, pDuid);
+
+ if (!(pId = Base64Encoding((char *)pDuid, idSize))) {
+ SLOGE("Failed to convert to base64 string");
+ goto exit;
+ }
+
+ if (!(pKeyVersion = (char *)calloc(strlen(pId) + strlen(version) + 1, sizeof(char)))) {
+ SLOGE("Failed to allocate memory");
+ goto exit;
+ }
+ strncpy(pKeyVersion, version, strlen(version));
+ strncat(pKeyVersion, pId, strlen(pId));
+
+exit:
+ free(pKey);
+ free(pDuid);
+ free(pId);
+
+ return pKeyVersion;
+}
+
projects / platform / core / security / libcryptsvc.git / commitdiff