OrgACRN
/
acrn-hypervisor
mirror of https://github.com/projectacrn/acrn-hypervisor.git
1
0
Fork 0
Code Issues Releases Wiki Activity

DM: generate random virtual RPMB key 

The virtual rpmb key transfer path is ready now, so replace
previous temporary fixed key solution with random key
solution.

Tracked-On: #1636
Signed-off-by: Qi Yadong <yadong.qi@intel.com>
Acked-by: Zhu Bing <bing.zhu@intel.com>
This commit is contained in:
Qi Yadong 2018-08-23 10:24:44 +08:00 committed by lijinxia
parent dff441a0d5
commit f4f139bf8b
1 changed files with 22 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
devicemodel/core/vrpmb.c
View File

@ -29,19 +29,28 @@
#include <stdio.h> #include <stdio.h>
#include <string.h> #include <string.h>
#include <assert.h> #include <assert.h>
#include <openssl/rand.h>
#include "types.h" #include "types.h"
#include "vrpmb.h" #include "vrpmb.h"
#define DRNG_MAX_RETRIES 5U
struct key_material { struct key_material {
uint8_t key[RPMB_KEY_LEN]; uint8_t key[RPMB_KEY_LEN];
bool initialized; bool initialized;
}; };
static struct key_material vrkey = { .initialized = false }; static struct key_material vrkey = {
.key = {0},
.initialized = false
};
int get_vrpmb_key(uint8_t *out, size_t size) int get_vrpmb_key(uint8_t *out, size_t size)
{ {
int ret;
int i;
if (!out) { if (!out) {
fprintf(stderr, "%s: Invalid output pointer\n", __func__); fprintf(stderr, "%s: Invalid output pointer\n", __func__);
return 0; return 0;
@ -50,10 +59,18 @@ int get_vrpmb_key(uint8_t *out, size_t size)
assert(size == RPMB_KEY_LEN); assert(size == RPMB_KEY_LEN);
if ( vrkey.initialized == false ) { if ( vrkey.initialized == false ) {
/* FIXME: Currently the transport path is not ready, so for (i = 0; i < DRNG_MAX_RETRIES; i++) {
* use fixed key(all 0) for temporary solution. ret = RAND_bytes(vrkey.key, RPMB_KEY_LEN);
*/ if (ret == 1) {
memset(vrkey.key, 0, RPMB_KEY_LEN); vrkey.initialized = true;
break;
}
}
if (vrkey.initialized != true) {
fprintf(stderr, "%s: unable to generate random key!\n", __func__);
return 0;
}
} }
memcpy(out, vrkey.key, size); memcpy(out, vrkey.key, size);