mirror of
https://github.com/polhenarejos/pico-hsm.git
synced 2026-02-07 19:18:23 +00:00
118 lines
4 KiB
C
118 lines
4 KiB
C
/*
|
|
* This file is part of the Pico HSM distribution (https://github.com/polhenarejos/pico-hsm).
|
|
* Copyright (c) 2022 Pol Henarejos.
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, version 3.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "crypto_utils.h"
|
|
#include "sc_hsm.h"
|
|
#include "asn1.h"
|
|
#include "kek.h"
|
|
#include "files.h"
|
|
|
|
extern uint8_t get_key_domain(file_t *fkey);
|
|
|
|
int cmd_key_wrap() {
|
|
int key_id = P1(apdu), r = 0;
|
|
if (P2(apdu) != 0x92) {
|
|
return SW_WRONG_P1P2();
|
|
}
|
|
if (!isUserAuthenticated) {
|
|
return SW_SECURITY_STATUS_NOT_SATISFIED();
|
|
}
|
|
file_t *ef = search_dynamic_file((KEY_PREFIX << 8) | key_id);
|
|
if (!ef) {
|
|
return SW_FILE_NOT_FOUND();
|
|
}
|
|
uint8_t kdom = get_key_domain(ef);
|
|
if (kdom == 0xff) {
|
|
return SW_REFERENCE_NOT_FOUND();
|
|
}
|
|
file_t *tf_kd = search_by_fid(EF_KEY_DOMAIN, NULL, SPECIFY_EF);
|
|
uint8_t *kdata = file_get_data(tf_kd), dkeks = kdata ? kdata[2 * kdom] : 0,
|
|
current_dkeks = kdata ? kdata[2 * kdom + 1] : 0;
|
|
if (dkeks != current_dkeks || dkeks == 0 || dkeks == 0xff) {
|
|
return SW_REFERENCE_NOT_FOUND();
|
|
}
|
|
if (key_has_purpose(ef, ALGO_WRAP) == false) {
|
|
return SW_CONDITIONS_NOT_SATISFIED();
|
|
}
|
|
file_t *prkd = search_dynamic_file((PRKD_PREFIX << 8) | key_id);
|
|
if (!prkd) {
|
|
return SW_FILE_NOT_FOUND();
|
|
}
|
|
const uint8_t *dprkd = file_get_data(prkd);
|
|
size_t wrap_len = MAX_DKEK_ENCODE_KEY_BUFFER;
|
|
size_t tag_len = 0;
|
|
const uint8_t *meta_tag = get_meta_tag(ef, 0x91, &tag_len);
|
|
if (*dprkd == P15_KEYTYPE_RSA) {
|
|
mbedtls_rsa_context ctx;
|
|
mbedtls_rsa_init(&ctx);
|
|
r = load_private_key_rsa(&ctx, ef);
|
|
if (r != CCID_OK) {
|
|
mbedtls_rsa_free(&ctx);
|
|
if (r == CCID_VERIFICATION_FAILED) {
|
|
return SW_SECURE_MESSAGE_EXEC_ERROR();
|
|
}
|
|
return SW_EXEC_ERROR();
|
|
}
|
|
r = dkek_encode_key(kdom, &ctx, HSM_KEY_RSA, res_APDU, &wrap_len, meta_tag, tag_len);
|
|
mbedtls_rsa_free(&ctx);
|
|
}
|
|
else if (*dprkd == P15_KEYTYPE_ECC) {
|
|
mbedtls_ecp_keypair ctx;
|
|
mbedtls_ecp_keypair_init(&ctx);
|
|
r = load_private_key_ec(&ctx, ef);
|
|
if (r != CCID_OK) {
|
|
mbedtls_ecp_keypair_free(&ctx);
|
|
if (r == CCID_VERIFICATION_FAILED) {
|
|
return SW_SECURE_MESSAGE_EXEC_ERROR();
|
|
}
|
|
return SW_EXEC_ERROR();
|
|
}
|
|
r = dkek_encode_key(kdom, &ctx, HSM_KEY_EC, res_APDU, &wrap_len, meta_tag, tag_len);
|
|
mbedtls_ecp_keypair_free(&ctx);
|
|
}
|
|
else if (*dprkd == P15_KEYTYPE_AES) {
|
|
uint8_t kdata[64]; //maximum AES key size
|
|
if (wait_button_pressed() == true) { //timeout
|
|
return SW_SECURE_MESSAGE_EXEC_ERROR();
|
|
}
|
|
|
|
int key_size = file_get_size(ef), aes_type = HSM_KEY_AES;
|
|
memcpy(kdata, file_get_data(ef), key_size);
|
|
if (mkek_decrypt(kdata, key_size) != 0) {
|
|
return SW_EXEC_ERROR();
|
|
}
|
|
if (key_size == 64) {
|
|
aes_type = HSM_KEY_AES_512;
|
|
}
|
|
else if (key_size == 32) {
|
|
aes_type = HSM_KEY_AES_256;
|
|
}
|
|
else if (key_size == 24) {
|
|
aes_type = HSM_KEY_AES_192;
|
|
}
|
|
else if (key_size == 16) {
|
|
aes_type = HSM_KEY_AES_128;
|
|
}
|
|
r = dkek_encode_key(kdom, kdata, aes_type, res_APDU, &wrap_len, meta_tag, tag_len);
|
|
mbedtls_platform_zeroize(kdata, sizeof(kdata));
|
|
}
|
|
if (r != CCID_OK) {
|
|
return SW_EXEC_ERROR();
|
|
}
|
|
res_APDU_size = wrap_len;
|
|
return SW_OK();
|
|
}
|