X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/5dd5f9ec28f304ca377c42fd7f711d6cf12b90e1..5c19dc3ae3bd8e40a9c028b0deddd50ff337692c:/OSX/libsecurity_cdsa_client/lib/wrapkey.cpp

diff --git a/OSX/libsecurity_cdsa_client/lib/wrapkey.cpp b/OSX/libsecurity_cdsa_client/lib/wrapkey.cpp
new file mode 100644
index 00000000..541b7748
--- /dev/null
+++ b/OSX/libsecurity_cdsa_client/lib/wrapkey.cpp
@@ -0,0 +1,193 @@
+/*
+ * Copyright (c) 2000-2001,2011,2013-2014 Apple Inc. All Rights Reserved.
+ * 
+ * The contents of this file constitute Original Code as defined in and are
+ * subject to the Apple Public Source License Version 1.2 (the 'License').
+ * You may not use this file except in compliance with the License. Please obtain
+ * a copy of the License at http://www.apple.com/publicsource and read it before
+ * using this file.
+ * 
+ * This Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
+ * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
+ * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+ * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
+ * specific language governing rights and limitations under the License.
+ */
+
+
+//
+// wrapkey - client interface for wrapping and unwrapping keys
+//
+#include <security_cdsa_client/wrapkey.h>
+
+namespace Security {
+namespace CssmClient {
+
+
+Key
+WrapKey::operator () (Key &keyToBeWrapped, const CssmData *descriptiveData)
+{
+	Key wrappedKey;
+
+	check(CSSM_WrapKey(handle(), neededCred(), keyToBeWrapped, descriptiveData,
+					   wrappedKey.makeNewKey(attachment())));
+	wrappedKey->activate();
+
+	return wrappedKey;
+}
+
+void
+WrapKey::operator () (const CssmKey &keyToBeWrapped, CssmKey &wrappedKey,
+					  const CssmData *descriptiveData)
+{
+	check(CSSM_WrapKey(handle(), neededCred(), &keyToBeWrapped,
+		descriptiveData, &wrappedKey));
+}
+
+void
+WrapKey::activate()
+{
+	if (!mActive)
+	{
+		Crypt::activate();
+		if (mWrappedKeyFormat != CSSM_KEYBLOB_WRAPPED_FORMAT_NONE)
+			set(CSSM_ATTRIBUTE_WRAPPED_KEY_FORMAT, mWrappedKeyFormat);
+	}
+}
+
+Key
+UnwrapKey::operator () (const CssmKey &keyToBeUnwrapped, const KeySpec &spec)
+{
+	CssmData data(reinterpret_cast<uint8 *>(1), 0);
+	Key unwrappedKey;
+	check(CSSM_UnwrapKey(handle(), NULL,
+						 &keyToBeUnwrapped, spec.usage, spec.attributes,
+						 spec.label, &compositeRcc(),
+						 unwrappedKey.makeNewKey(attachment()), &data));
+	unwrappedKey->activate();
+
+	return unwrappedKey;
+}
+
+void
+UnwrapKey::operator () (const CssmKey &keyToBeUnwrapped, const KeySpec &spec,
+						CssmKey &unwrappedKey)
+{
+	CssmData data(reinterpret_cast<uint8 *>(1), 0);
+	check(CSSM_UnwrapKey(handle(), NULL, &keyToBeUnwrapped, spec.usage,
+						 spec.attributes, spec.label, &compositeRcc(),
+						 &unwrappedKey, &data));
+}
+
+Key
+UnwrapKey::operator () (const CssmKey &keyToBeUnwrapped, const KeySpec &spec,
+						Key &optionalPublicKey)
+{
+	CssmData data(reinterpret_cast<uint8 *>(1), 0);
+	Key unwrappedKey;
+	check(CSSM_UnwrapKey(handle(), optionalPublicKey,
+						 &keyToBeUnwrapped, spec.usage, spec.attributes,
+						 spec.label, &compositeRcc(),
+						 unwrappedKey.makeNewKey(attachment()), &data));
+
+	unwrappedKey->activate();
+
+	return unwrappedKey;
+}
+
+void
+UnwrapKey::operator () (const CssmKey &keyToBeUnwrapped, const KeySpec &spec,
+						CssmKey &unwrappedKey,
+						const CssmKey *optionalPublicKey)
+{
+	CssmData data(reinterpret_cast<uint8 *>(1), 0);
+	check(CSSM_UnwrapKey(handle(), optionalPublicKey, &keyToBeUnwrapped,
+						 spec.usage, spec.attributes, spec.label,
+						 &compositeRcc(), &unwrappedKey, &data));
+}
+
+
+Key
+UnwrapKey::operator () (const CssmKey &keyToBeUnwrapped, const KeySpec &spec,
+						CssmData *descriptiveData)
+{
+	Key unwrappedKey;
+	check(CSSM_UnwrapKey(handle(), NULL, &keyToBeUnwrapped, spec.usage,
+						 spec.attributes, spec.label, &compositeRcc(),
+						 unwrappedKey.makeNewKey(attachment()),
+						 descriptiveData));
+	unwrappedKey->activate();
+
+	return unwrappedKey;
+}
+
+void
+UnwrapKey::operator () (const CssmKey &keyToBeUnwrapped, const KeySpec &spec,
+						CssmKey &unwrappedKey, CssmData *descriptiveData)
+{
+	check(CSSM_UnwrapKey(handle(), NULL, &keyToBeUnwrapped, spec.usage,
+						 spec.attributes, spec.label, &compositeRcc(),
+						 &unwrappedKey, descriptiveData));
+}
+
+Key
+UnwrapKey::operator () (const CssmKey &keyToBeUnwrapped, const KeySpec &spec,
+						const Key &optionalPublicKey, CssmData *descriptiveData)
+{
+	Key unwrappedKey;
+	check(CSSM_UnwrapKey(handle(), optionalPublicKey, &keyToBeUnwrapped,
+						 spec.usage, spec.attributes, spec.label,
+						 &compositeRcc(),
+						 unwrappedKey.makeNewKey(attachment()),
+						 descriptiveData));
+	unwrappedKey->activate();
+
+	return unwrappedKey;
+}
+
+void
+UnwrapKey::operator () (const CssmKey &keyToBeUnwrapped, const KeySpec &spec,
+						CssmKey &unwrappedKey, CssmData *descriptiveData,
+						const CssmKey *optionalPublicKey)
+{
+	check(CSSM_UnwrapKey(handle(), optionalPublicKey, &keyToBeUnwrapped,
+						 spec.usage, spec.attributes, spec.label,
+						 &compositeRcc(), &unwrappedKey,
+						 descriptiveData));
+}
+
+
+void DeriveKey::activate()
+{
+	if (!mActive)
+	{
+        check(CSSM_CSP_CreateDeriveKeyContext(attachment()->handle(), mAlgorithm,
+            mTargetType, mKeySize, mCred, mKey, mIterationCount, mSalt, mSeed, &mHandle));
+		mActive = true;
+    }
+}
+
+
+Key
+DeriveKey::operator () (CssmData *param, const KeySpec &spec)
+{
+	Key derivedKey;
+	check(CSSM_DeriveKey(handle(), param, spec.usage, spec.attributes,
+						 spec.label, &compositeRcc(),
+						 derivedKey.makeNewKey(attachment())));
+	derivedKey->activate();
+
+	return derivedKey;
+}
+
+void
+DeriveKey::operator () (CssmData *param, const KeySpec &spec,
+						CssmKey &derivedKey)
+{
+	check(CSSM_DeriveKey(handle(), param, spec.usage, spec.attributes,
+						 spec.label, &compositeRcc(), &derivedKey));
+}
+
+} // end namespace CssmClient
+} // end namespace Security