Security-59306.11.20.tar.gz

[apple/security.git] / keychain / SecureObjectSync / SOSECWrapUnwrap.c

diff --git a/keychain/SecureObjectSync/SOSECWrapUnwrap.c b/keychain/SecureObjectSync/SOSECWrapUnwrap.c
new file mode 100644 (file)
index 0000000..7aea444
--- /dev/null
+++ b/keychain/SecureObjectSync/SOSECWrapUnwrap.c
@@ -0,0 +1,112 @@
+//
+//  cc_CFData.c
+//  ProtectedCloudStorage
+//
+//  Copyright (c) 2014 Apple Inc. All rights reserved.
+//
+
+#include "keychain/SecureObjectSync/SOSInternal.h"
+
+#include <AssertMacros.h>
+
+#include <CommonCrypto/CommonRandomSPI.h>
+#include <utilities/SecCFWrappers.h>
+#include <utilities/SecCFError.h>
+#include <utilities/SecBuffer.h>
+#include <corecrypto/ccec.h>
+
+
+#if 0 && defined(CCEC_RFC6637_DEBUG_KEYS)
+#define DEBUGKEYS CCEC_RFC6637_DEBUG_KEYS
+#else
+#define DEBUGKEYS 0
+#endif
+
+const char fingerprint[20] = "fingerprint";
+
+const uint8_t kAlgorithmID = 1;
+
+CFMutableDataRef
+SOSCopyECWrappedData(ccec_pub_ctx_t ec_ctx, CFDataRef data, CFErrorRef *error)
+{
+    CFMutableDataRef result = NULL;
+    CFMutableDataRef output = NULL;
+    size_t outputLength;
+    int res;
+
+    require_quiet(SecRequirementError(data != NULL, error, CFSTR("data required for wrapping")), exit);
+    require_quiet(SecRequirementError(ec_ctx != NULL, error, CFSTR("ec pub key required for wrapping")), exit);
+    require_quiet(ec_ctx != NULL, exit);
+
+    outputLength = ccec_rfc6637_wrap_key_size(ec_ctx, CCEC_RFC6637_COMPACT_KEYS | DEBUGKEYS, CFDataGetLength(data));
+
+    output = CFDataCreateMutableWithScratch(NULL, outputLength);
+    require_quiet(SecAllocationError(output, error, CFSTR("%s CFData allocation failed"), __FUNCTION__), exit);
+
+    res = ccec_rfc6637_wrap_key(ec_ctx, CFDataGetMutableBytePtr(output), CCEC_RFC6637_COMPACT_KEYS | DEBUGKEYS, kAlgorithmID,
+                                CFDataGetLength(data), CFDataGetBytePtr(data), &ccec_rfc6637_dh_curve_p256,
+                                &ccec_rfc6637_wrap_sha256_kek_aes128, (const uint8_t *)fingerprint,
+                                ccDevRandomGetRngState());
+    require_noerr_action(res, exit, SOSErrorCreate(kSOSErrorProcessingFailure, error, NULL, CFSTR("Wrap failed with %d"), res));
+
+    CFTransferRetained(result, output);
+
+exit:
+    CFReleaseNull(output);
+    return result;
+}
+
+bool SOSPerformWithUnwrappedData(ccec_full_ctx_t ec_ctx, CFDataRef data, CFErrorRef *error,
+                                 void (^operation)(size_t size, uint8_t *buffer))
+{
+    __block bool result = false;
+
+    PerformWithBufferAndClear(CFDataGetLength(data), ^(size_t size, uint8_t *buffer) {
+        size_t outputLength = size;
+        int ec_result;
+        uint8_t alg;
+        ec_result = ccec_rfc6637_unwrap_key(ec_ctx, &outputLength, buffer,
+                                            CCEC_RFC6637_COMPACT_KEYS | DEBUGKEYS, &alg, &ccec_rfc6637_dh_curve_p256,
+                                            &ccec_rfc6637_unwrap_sha256_kek_aes128, (const uint8_t *)fingerprint,
+                                            CFDataGetLength(data), CFDataGetBytePtr(data));
+
+        require_noerr_action(ec_result, exit, SOSErrorCreate(kSOSErrorProcessingFailure, error, NULL, CFSTR("ccec_rfc6637_unwrap_key failed with %d"), ec_result));
+        require_quiet(SecRequirementError(alg == kAlgorithmID, error, CFSTR("Unexpected algorithm: %d"), (int)alg), exit);
+
+        operation(outputLength, buffer);
+
+        result = true;
+    exit:
+        ;
+    });
+
+    return result;
+}
+
+CFMutableDataRef
+SOSCopyECUnwrappedData(ccec_full_ctx_t ec_ctx, CFDataRef data, CFErrorRef *error)
+{
+    uint8_t alg;
+    CFMutableDataRef result = NULL;
+    CFMutableDataRef output = NULL;
+    size_t outputLength = CFDataGetLength(data);
+    int res;
+
+    output = CFDataCreateMutableWithScratch(NULL, outputLength);
+    require_quiet(SecAllocationError(output, error, CFSTR("%s CFData allocation failed"), __FUNCTION__), exit);
+
+    res = ccec_rfc6637_unwrap_key(ec_ctx, &outputLength, CFDataGetMutableBytePtr(output),
+                                  CCEC_RFC6637_COMPACT_KEYS | DEBUGKEYS, &alg, &ccec_rfc6637_dh_curve_p256,
+                                  &ccec_rfc6637_unwrap_sha256_kek_aes128, (const uint8_t *)fingerprint,
+                                  CFDataGetLength(data), CFDataGetBytePtr(data));
+    require_noerr_action(res, exit, SOSErrorCreate(kSOSErrorProcessingFailure, error, NULL, CFSTR("Unwrap failed with %d"), res));
+    require_quiet(SecRequirementError(alg == kAlgorithmID, error, CFSTR("Unexpected algorithm: %d"), (int)alg), exit);
+
+    CFDataSetLength(output, outputLength);
+
+    CFTransferRetained(result, output);
+
+exit:
+    CFReleaseNull(output);
+    return result;
+}