71 lines
2.9 KiB
C++
71 lines
2.9 KiB
C++
/*
|
|
* Copyright 2019, The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#ifndef ANDROID_HARDWARE_IDENTITY_IDENTITYCREDENTIALSTORE_H
|
|
#define ANDROID_HARDWARE_IDENTITY_IDENTITYCREDENTIALSTORE_H
|
|
|
|
#include <aidl/android/hardware/identity/BnIdentityCredentialStore.h>
|
|
#include <aidl/android/hardware/security/keymint/IRemotelyProvisionedComponent.h>
|
|
|
|
#include "SecureHardwareProxy.h"
|
|
|
|
namespace aidl::android::hardware::identity {
|
|
|
|
using ::android::sp;
|
|
using ::android::hardware::identity::SecureHardwareProxyFactory;
|
|
using ::std::optional;
|
|
using ::std::shared_ptr;
|
|
using ::std::string;
|
|
using ::std::vector;
|
|
|
|
class IdentityCredentialStore : public BnIdentityCredentialStore {
|
|
public:
|
|
// If remote key provisioning is supported, pass the service name for the correct
|
|
// IRemotelyProvisionedComponent to the remotelyProvisionedComponent parameter. Else
|
|
// pass std::nullopt to indicate remote key provisioning is not supported.
|
|
IdentityCredentialStore(sp<SecureHardwareProxyFactory> hwProxyFactory,
|
|
optional<string> remotelyProvisionedComponent);
|
|
|
|
// The GCM chunk size used by this implementation is 64 KiB.
|
|
static constexpr size_t kGcmChunkSize = 64 * 1024;
|
|
|
|
// Methods from IIdentityCredentialStore follow.
|
|
ndk::ScopedAStatus getHardwareInformation(HardwareInformation* hardwareInformation) override;
|
|
|
|
ndk::ScopedAStatus createCredential(
|
|
const string& docType, bool testCredential,
|
|
shared_ptr<IWritableIdentityCredential>* outWritableCredential) override;
|
|
|
|
ndk::ScopedAStatus getCredential(CipherSuite cipherSuite, const vector<uint8_t>& credentialData,
|
|
shared_ptr<IIdentityCredential>* outCredential) override;
|
|
|
|
ndk::ScopedAStatus createPresentationSession(
|
|
CipherSuite cipherSuite, shared_ptr<IPresentationSession>* outSession) override;
|
|
|
|
ndk::ScopedAStatus getRemotelyProvisionedComponent(
|
|
shared_ptr<::aidl::android::hardware::security::keymint::IRemotelyProvisionedComponent>*
|
|
outRemotelyProvisionedComponent) override;
|
|
|
|
private:
|
|
sp<SecureHardwareProxyFactory> hwProxyFactory_;
|
|
optional<string> remotelyProvisionedComponentName_;
|
|
HardwareInformation hardwareInformation_;
|
|
};
|
|
|
|
} // namespace aidl::android::hardware::identity
|
|
|
|
#endif // ANDROID_HARDWARE_IDENTITY_IDENTITYCREDENTIALSTORE_H
|