mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-11-29 17:14:17 +01:00
Add psa_trusted_storage_linux persistent storage support for v1.0.0 APIs
The following provides more information on this PR: - PSA stands for Platform Security Architecture. - Add support for use of psa_trusted_storage_api internal_trusted_storage.h v1.0.0 as the interface to the psa_trusted_storage_linux backend (i.e. for persistent storage when MBEDTLS_PSA_ITS_FILE_C is not defined). This requires changes to psa_crypto_its.h and psa_crypto_storage.c to migrate to the new API.
This commit is contained in:
parent
b6229e304e
commit
bda5a21112
@ -91,6 +91,7 @@ psa_status_t psa_its_set(psa_storage_uid_t uid,
|
|||||||
* \param[in] data_offset The starting offset of the data requested
|
* \param[in] data_offset The starting offset of the data requested
|
||||||
* \param[in] data_length the amount of data requested (and the minimum allocated size of the `p_data` buffer)
|
* \param[in] data_length the amount of data requested (and the minimum allocated size of the `p_data` buffer)
|
||||||
* \param[out] p_data The buffer where the data will be placed upon successful completion
|
* \param[out] p_data The buffer where the data will be placed upon successful completion
|
||||||
|
* \param[out] p_data_length The amount of data returned in the p_data buffer
|
||||||
*
|
*
|
||||||
*
|
*
|
||||||
* \return A status indicating the success/failure of the operation
|
* \return A status indicating the success/failure of the operation
|
||||||
@ -106,7 +107,8 @@ psa_status_t psa_its_set(psa_storage_uid_t uid,
|
|||||||
psa_status_t psa_its_get(psa_storage_uid_t uid,
|
psa_status_t psa_its_get(psa_storage_uid_t uid,
|
||||||
uint32_t data_offset,
|
uint32_t data_offset,
|
||||||
uint32_t data_length,
|
uint32_t data_length,
|
||||||
void *p_data);
|
void *p_data,
|
||||||
|
size_t *p_data_length );
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* \brief Retrieve the metadata about the provided uid
|
* \brief Retrieve the metadata about the provided uid
|
||||||
|
@ -96,12 +96,15 @@ static psa_status_t psa_crypto_storage_load( const psa_key_file_id_t key,
|
|||||||
psa_status_t status;
|
psa_status_t status;
|
||||||
psa_storage_uid_t data_identifier = psa_its_identifier_of_slot( key );
|
psa_storage_uid_t data_identifier = psa_its_identifier_of_slot( key );
|
||||||
struct psa_storage_info_t data_identifier_info;
|
struct psa_storage_info_t data_identifier_info;
|
||||||
|
size_t data_length = 0;
|
||||||
|
|
||||||
status = psa_its_get_info( data_identifier, &data_identifier_info );
|
status = psa_its_get_info( data_identifier, &data_identifier_info );
|
||||||
if( status != PSA_SUCCESS )
|
if( status != PSA_SUCCESS )
|
||||||
return( status );
|
return( status );
|
||||||
|
|
||||||
status = psa_its_get( data_identifier, 0, (uint32_t) data_size, data );
|
status = psa_its_get( data_identifier, 0, (uint32_t) data_size, data, &data_length );
|
||||||
|
if( data_size != data_length )
|
||||||
|
return( PSA_ERROR_STORAGE_FAILURE );
|
||||||
|
|
||||||
return( status );
|
return( status );
|
||||||
}
|
}
|
||||||
|
@ -44,7 +44,9 @@
|
|||||||
#include <stdio.h>
|
#include <stdio.h>
|
||||||
#include <string.h>
|
#include <string.h>
|
||||||
|
|
||||||
|
#if !defined(PSA_ITS_STORAGE_PREFIX)
|
||||||
#define PSA_ITS_STORAGE_PREFIX ""
|
#define PSA_ITS_STORAGE_PREFIX ""
|
||||||
|
#endif
|
||||||
|
|
||||||
#define PSA_ITS_STORAGE_FILENAME_PATTERN "%08lx%08lx"
|
#define PSA_ITS_STORAGE_FILENAME_PATTERN "%08lx%08lx"
|
||||||
#define PSA_ITS_STORAGE_SUFFIX ".psa_its"
|
#define PSA_ITS_STORAGE_SUFFIX ".psa_its"
|
||||||
@ -137,7 +139,8 @@ psa_status_t psa_its_get_info( psa_storage_uid_t uid,
|
|||||||
psa_status_t psa_its_get( psa_storage_uid_t uid,
|
psa_status_t psa_its_get( psa_storage_uid_t uid,
|
||||||
uint32_t data_offset,
|
uint32_t data_offset,
|
||||||
uint32_t data_length,
|
uint32_t data_length,
|
||||||
void *p_data )
|
void *p_data,
|
||||||
|
size_t *p_data_length )
|
||||||
{
|
{
|
||||||
psa_status_t status;
|
psa_status_t status;
|
||||||
FILE *stream = NULL;
|
FILE *stream = NULL;
|
||||||
@ -172,6 +175,8 @@ psa_status_t psa_its_get( psa_storage_uid_t uid,
|
|||||||
if( n != data_length )
|
if( n != data_length )
|
||||||
goto exit;
|
goto exit;
|
||||||
status = PSA_SUCCESS;
|
status = PSA_SUCCESS;
|
||||||
|
if( p_data_length != NULL )
|
||||||
|
*p_data_length = n;
|
||||||
|
|
||||||
exit:
|
exit:
|
||||||
if( stream != NULL )
|
if( stream != NULL )
|
||||||
|
@ -69,6 +69,7 @@ void set_get_remove( int uid_arg, int flags_arg, data_t *data )
|
|||||||
uint32_t flags = flags_arg;
|
uint32_t flags = flags_arg;
|
||||||
struct psa_storage_info_t info;
|
struct psa_storage_info_t info;
|
||||||
unsigned char *buffer = NULL;
|
unsigned char *buffer = NULL;
|
||||||
|
size_t ret_len = 0;
|
||||||
|
|
||||||
ASSERT_ALLOC( buffer, data->len );
|
ASSERT_ALLOC( buffer, data->len );
|
||||||
|
|
||||||
@ -77,8 +78,8 @@ void set_get_remove( int uid_arg, int flags_arg, data_t *data )
|
|||||||
PSA_ASSERT( psa_its_get_info( uid, &info ) );
|
PSA_ASSERT( psa_its_get_info( uid, &info ) );
|
||||||
TEST_ASSERT( info.size == data->len );
|
TEST_ASSERT( info.size == data->len );
|
||||||
TEST_ASSERT( info.flags == flags );
|
TEST_ASSERT( info.flags == flags );
|
||||||
PSA_ASSERT( psa_its_get( uid, 0, data->len, buffer ) );
|
PSA_ASSERT( psa_its_get( uid, 0, data->len, buffer, &ret_len ) );
|
||||||
ASSERT_COMPARE( data->x, data->len, buffer, data->len );
|
ASSERT_COMPARE( data->x, data->len, buffer, ret_len );
|
||||||
|
|
||||||
PSA_ASSERT( psa_its_remove( uid ) );
|
PSA_ASSERT( psa_its_remove( uid ) );
|
||||||
|
|
||||||
@ -98,6 +99,7 @@ void set_overwrite( int uid_arg,
|
|||||||
uint32_t flags2 = flags2_arg;
|
uint32_t flags2 = flags2_arg;
|
||||||
struct psa_storage_info_t info;
|
struct psa_storage_info_t info;
|
||||||
unsigned char *buffer = NULL;
|
unsigned char *buffer = NULL;
|
||||||
|
size_t ret_len = 0;
|
||||||
|
|
||||||
ASSERT_ALLOC( buffer, MAX( data1->len, data2->len ) );
|
ASSERT_ALLOC( buffer, MAX( data1->len, data2->len ) );
|
||||||
|
|
||||||
@ -105,15 +107,16 @@ void set_overwrite( int uid_arg,
|
|||||||
PSA_ASSERT( psa_its_get_info( uid, &info ) );
|
PSA_ASSERT( psa_its_get_info( uid, &info ) );
|
||||||
TEST_ASSERT( info.size == data1->len );
|
TEST_ASSERT( info.size == data1->len );
|
||||||
TEST_ASSERT( info.flags == flags1 );
|
TEST_ASSERT( info.flags == flags1 );
|
||||||
PSA_ASSERT( psa_its_get( uid, 0, data1->len, buffer ) );
|
PSA_ASSERT( psa_its_get( uid, 0, data1->len, buffer, &ret_len ) );
|
||||||
ASSERT_COMPARE( data1->x, data1->len, buffer, data1->len );
|
ASSERT_COMPARE( data1->x, data1->len, buffer, ret_len );
|
||||||
|
|
||||||
PSA_ASSERT( psa_its_set_wrap( uid, data2->len, data2->x, flags2 ) );
|
PSA_ASSERT( psa_its_set_wrap( uid, data2->len, data2->x, flags2 ) );
|
||||||
PSA_ASSERT( psa_its_get_info( uid, &info ) );
|
PSA_ASSERT( psa_its_get_info( uid, &info ) );
|
||||||
TEST_ASSERT( info.size == data2->len );
|
TEST_ASSERT( info.size == data2->len );
|
||||||
TEST_ASSERT( info.flags == flags2 );
|
TEST_ASSERT( info.flags == flags2 );
|
||||||
PSA_ASSERT( psa_its_get( uid, 0, data2->len, buffer ) );
|
ret_len = 0;
|
||||||
ASSERT_COMPARE( data2->x, data2->len, buffer, data2->len );
|
PSA_ASSERT( psa_its_get( uid, 0, data2->len, buffer, &ret_len ) );
|
||||||
|
ASSERT_COMPARE( data2->x, data2->len, buffer, ret_len );
|
||||||
|
|
||||||
PSA_ASSERT( psa_its_remove( uid ) );
|
PSA_ASSERT( psa_its_remove( uid ) );
|
||||||
|
|
||||||
@ -130,6 +133,7 @@ void set_multiple( int first_id, int count )
|
|||||||
psa_storage_uid_t uid;
|
psa_storage_uid_t uid;
|
||||||
char stored[40];
|
char stored[40];
|
||||||
char retrieved[40];
|
char retrieved[40];
|
||||||
|
size_t ret_len = 0;
|
||||||
|
|
||||||
memset( stored, '.', sizeof( stored ) );
|
memset( stored, '.', sizeof( stored ) );
|
||||||
for( uid = uid0; uid < uid0 + count; uid++ )
|
for( uid = uid0; uid < uid0 + count; uid++ )
|
||||||
@ -143,11 +147,11 @@ void set_multiple( int first_id, int count )
|
|||||||
{
|
{
|
||||||
mbedtls_snprintf( stored, sizeof( stored ),
|
mbedtls_snprintf( stored, sizeof( stored ),
|
||||||
"Content of file 0x%08lx", (unsigned long) uid );
|
"Content of file 0x%08lx", (unsigned long) uid );
|
||||||
PSA_ASSERT( psa_its_get( uid, 0, sizeof( stored ), retrieved ) );
|
PSA_ASSERT( psa_its_get( uid, 0, sizeof( stored ), retrieved, &ret_len ) );
|
||||||
ASSERT_COMPARE( retrieved, sizeof( stored ),
|
ASSERT_COMPARE( retrieved, ret_len,
|
||||||
stored, sizeof( stored ) );
|
stored, sizeof( stored ) );
|
||||||
PSA_ASSERT( psa_its_remove( uid ) );
|
PSA_ASSERT( psa_its_remove( uid ) );
|
||||||
TEST_ASSERT( psa_its_get( uid, 0, 0, NULL ) ==
|
TEST_ASSERT( psa_its_get( uid, 0, 0, NULL, NULL ) ==
|
||||||
PSA_ERROR_DOES_NOT_EXIST );
|
PSA_ERROR_DOES_NOT_EXIST );
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -171,7 +175,7 @@ void nonexistent( int uid_arg, int create_and_remove )
|
|||||||
TEST_ASSERT( psa_its_remove( uid ) == PSA_ERROR_DOES_NOT_EXIST );
|
TEST_ASSERT( psa_its_remove( uid ) == PSA_ERROR_DOES_NOT_EXIST );
|
||||||
TEST_ASSERT( psa_its_get_info( uid, &info ) ==
|
TEST_ASSERT( psa_its_get_info( uid, &info ) ==
|
||||||
PSA_ERROR_DOES_NOT_EXIST );
|
PSA_ERROR_DOES_NOT_EXIST );
|
||||||
TEST_ASSERT( psa_its_get( uid, 0, 0, NULL ) ==
|
TEST_ASSERT( psa_its_get( uid, 0, 0, NULL, NULL ) ==
|
||||||
PSA_ERROR_DOES_NOT_EXIST );
|
PSA_ERROR_DOES_NOT_EXIST );
|
||||||
|
|
||||||
exit:
|
exit:
|
||||||
@ -190,6 +194,7 @@ void get_at( int uid_arg, data_t *data,
|
|||||||
size_t length = length_arg >= 0 ? length_arg : 0;
|
size_t length = length_arg >= 0 ? length_arg : 0;
|
||||||
unsigned char *trailer;
|
unsigned char *trailer;
|
||||||
size_t i;
|
size_t i;
|
||||||
|
size_t ret_len = 0;
|
||||||
|
|
||||||
ASSERT_ALLOC( buffer, length + 16 );
|
ASSERT_ALLOC( buffer, length + 16 );
|
||||||
trailer = buffer + length;
|
trailer = buffer + length;
|
||||||
@ -197,11 +202,11 @@ void get_at( int uid_arg, data_t *data,
|
|||||||
|
|
||||||
PSA_ASSERT( psa_its_set_wrap( uid, data->len, data->x, 0 ) );
|
PSA_ASSERT( psa_its_set_wrap( uid, data->len, data->x, 0 ) );
|
||||||
|
|
||||||
status = psa_its_get( uid, offset, length_arg, buffer );
|
status = psa_its_get( uid, offset, length_arg, buffer, &ret_len );
|
||||||
TEST_ASSERT( status == (psa_status_t) expected_status );
|
TEST_ASSERT( status == (psa_status_t) expected_status );
|
||||||
if( status == PSA_SUCCESS )
|
if( status == PSA_SUCCESS )
|
||||||
ASSERT_COMPARE( data->x + offset, length,
|
ASSERT_COMPARE( data->x + offset, (size_t) length_arg,
|
||||||
buffer, length );
|
buffer, ret_len );
|
||||||
for( i = 0; i < 16; i++ )
|
for( i = 0; i < 16; i++ )
|
||||||
TEST_ASSERT( trailer[i] == '-' );
|
TEST_ASSERT( trailer[i] == '-' );
|
||||||
PSA_ASSERT( psa_its_remove( uid ) );
|
PSA_ASSERT( psa_its_remove( uid ) );
|
||||||
|
Loading…
Reference in New Issue
Block a user