1 /* 2 * Copyright 2022 The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 17 #include <aidl/android/hardware/security/keymint/IRemotelyProvisionedComponent.h> 18 #include <android/binder_manager.h> 19 #include <cppbor.h> 20 #include <keymaster/cppcose/cppcose.h> 21 22 #include <cstdint> 23 #include <memory> 24 #include <string> 25 #include <string_view> 26 #include <unordered_set> 27 #include <vector> 28 29 // Parse a comma-delimited string. 30 // Ignores any empty strings. 31 std::unordered_set<std::string> parseCommaDelimited(const std::string& input); 32 33 // Challenge size must be between 32 and 64 bytes inclusive. 34 constexpr size_t kChallengeSize = 64; 35 36 // Contains a the result of an operation that should return cborData on success. 37 // Returns an an error message and null cborData on error. 38 template <typename T> struct CborResult { 39 std::unique_ptr<T> cborData; 40 std::string errMsg; 41 }; 42 43 // Generate a random challenge containing `kChallengeSize` bytes. 44 std::vector<uint8_t> generateChallenge(); 45 46 // Get a certificate signing request for the given IRemotelyProvisionedComponent. 47 // On error, the csr Array is null, and the string field contains a description of 48 // what went wrong. 49 CborResult<cppbor::Array> 50 getCsr(std::string_view componentName, 51 aidl::android::hardware::security::keymint::IRemotelyProvisionedComponent* irpc, 52 bool selfTest, bool allowDegenerate, bool requireUdsCerts);