include/keymaster/km_openssl/soft_keymaster_enforcement.h

/*
**
** Copyright 2017, The Android Open Source Project
**
** Licensed under the Apache License, Version 2.0 (the "License");
** you may not use this file except in compliance with the License.
** You may obtain a copy of the License at
**
**     http://www.apache.org/licenses/LICENSE-2.0
**
** Unless required by applicable law or agreed to in writing, software
** distributed under the License is distributed on an "AS IS" BASIS,
** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
** See the License for the specific language governing permissions and
** limitations under the License.
*/

#ifndef INCLUDE_KEYMASTER_SOFT_KEYMASTER_ENFORCEMENT_H_
#define INCLUDE_KEYMASTER_SOFT_KEYMASTER_ENFORCEMENT_H_

#include <keymaster/android_keymaster_messages.h>
#include <keymaster/keymaster_enforcement.h>

namespace keymaster {

class SoftKeymasterEnforcement : public KeymasterEnforcement {
  public:
    SoftKeymasterEnforcement(uint32_t max_access_time_map_size, uint32_t max_access_count_map_size)
        : KeymasterEnforcement(max_access_time_map_size, max_access_count_map_size) {}
    virtual ~SoftKeymasterEnforcement() {}
    bool activation_date_valid(uint64_t /*activation_date*/) const override { return true; }
    bool expiration_date_passed(uint64_t /*expiration_date*/) const override { return false; }
    bool auth_token_timed_out(const hw_auth_token_t& /*token*/,
                              uint32_t /*timeout*/) const override {
        return false;
    }
    uint64_t get_current_time_ms() const override;
    keymaster_security_level_t SecurityLevel() const override { return KM_SECURITY_LEVEL_SOFTWARE; }
    bool ValidateTokenSignature(const hw_auth_token_t& /*token*/) const override { return true; }
    bool CreateKeyId(const keymaster_key_blob_t& key_blob, km_id_t* keyid) const override;

    keymaster_error_t GetHmacSharingParameters(HmacSharingParameters* params) override;
    keymaster_error_t ComputeSharedHmac(const HmacSharingParametersArray& params_array,
                                        KeymasterBlob* sharingCheck) override;
    VerifyAuthorizationResponse
    VerifyAuthorization(const VerifyAuthorizationRequest& request) override;

  private:
    bool have_saved_params_ = false;
    HmacSharingParameters saved_params_;
    KeymasterKeyBlob hmac_key_;
};

}  // namespace keymaster

#endif  // INCLUDE_KEYMASTER_SOFT_KEYMASTER_ENFORCEMENT_H_