1 /*
2  * Copyright 2014 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #pragma once
18 
19 #include "ae.h"
20 
21 #include <hardware/keymaster_defs.h>
22 
23 #include <keymaster/serializable.h>
24 
25 namespace keymaster {
26 
27 class AuthorizationSet;
28 template <typename BlobType> struct TKeymasterBlob;
29 typedef TKeymasterBlob<keymaster_key_blob_t> KeymasterKeyBlob;
30 
31 static const int OCB_NONCE_LENGTH = 12;
32 static const int OCB_TAG_LENGTH = 16;
33 
34 keymaster_error_t OcbEncryptKey(const AuthorizationSet& hw_enforced,
35                                 const AuthorizationSet& sw_enforced, const AuthorizationSet& hidden,
36                                 const KeymasterKeyBlob& master_key,
37                                 const KeymasterKeyBlob& plaintext, const Buffer& nonce,
38                                 KeymasterKeyBlob* ciphertext, Buffer* tag);
39 
40 keymaster_error_t OcbDecryptKey(const AuthorizationSet& hw_enforced,
41                                 const AuthorizationSet& sw_enforced, const AuthorizationSet& hidden,
42                                 const KeymasterKeyBlob& master_key,
43                                 const KeymasterKeyBlob& ciphertext, const Buffer& nonce,
44                                 const Buffer& tag, KeymasterKeyBlob* plaintext);
45 
46 }  // namespace keymaster
47