1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
|
/*
* gnome-keyring
*
* Copyright (C) 2009 Stefan Walter
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU Lesser General Public License as
* published by the Free Software Foundation; either version 2.1 of
* the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
* 02111-1307, USA.
*/
#include "config.h"
#include "gkm-null-key.h"
#include "gkm-null-mechanism.h"
#include "gkm-session.h"
#include "gkm-transaction.h"
#include "gkm-util.h"
#include "egg/egg-libgcrypt.h"
#include "egg/egg-secure-memory.h"
EGG_SECURE_DECLARE (null_mechanism);
static CK_RV
retrieve_length (GkmSession *session, GkmObject *wrapped, gsize *length)
{
CK_ATTRIBUTE attr;
CK_RV rv;
attr.type = CKA_VALUE;
attr.pValue = NULL;
attr.ulValueLen = 0;
rv = gkm_object_get_attribute (wrapped, session, &attr);
if (rv == CKR_OK)
*length = attr.ulValueLen;
return rv;
}
static CK_RV
retrieve_value (GkmSession *session, GkmObject *wrapped,
gpointer *value, gsize *n_value)
{
CK_ATTRIBUTE attr;
CK_RV rv;
rv = retrieve_length (session, wrapped, n_value);
if (rv != CKR_OK)
return rv;
attr.type = CKA_VALUE;
attr.pValue = egg_secure_alloc (*n_value);
attr.ulValueLen = *n_value;
rv = gkm_object_get_attribute (wrapped, session, &attr);
if (rv == CKR_OK)
*value = attr.pValue;
else
egg_secure_free (attr.pValue);
return rv;
}
CK_RV
gkm_null_mechanism_wrap (GkmSession *session, CK_MECHANISM_PTR mech,
GkmObject *wrapper, GkmObject *wrapped,
CK_BYTE_PTR output, CK_ULONG_PTR n_output)
{
gpointer value;
gsize n_value;
CK_RV rv;
g_return_val_if_fail (GKM_IS_SESSION (session), CKR_GENERAL_ERROR);
g_return_val_if_fail (mech, CKR_GENERAL_ERROR);
g_return_val_if_fail (mech->mechanism == CKM_G_NULL, CKR_GENERAL_ERROR);
g_return_val_if_fail (GKM_IS_OBJECT (wrapped), CKR_GENERAL_ERROR);
g_return_val_if_fail (n_output, CKR_GENERAL_ERROR);
if (!GKM_IS_NULL_KEY (wrapper))
return CKR_WRAPPING_KEY_TYPE_INCONSISTENT;
/* They just want the length */
if (!output) {
rv = retrieve_length (session, wrapped, &n_value);
if (rv == CKR_OK)
*n_output = n_value;
return rv;
}
if (mech->ulParameterLen)
return CKR_MECHANISM_PARAM_INVALID;
rv = retrieve_value (session, wrapped, &value, &n_value);
if (rv != CKR_OK)
return rv;
rv = gkm_util_return_data (output, n_output, value, n_value);
egg_secure_free (value);
return rv;
}
CK_RV
gkm_null_mechanism_unwrap (GkmSession *session, CK_MECHANISM_PTR mech,
GkmObject *wrapper, CK_VOID_PTR input, CK_ULONG n_input,
CK_ATTRIBUTE_PTR attrs, CK_ULONG n_attrs,
GkmObject **unwrapped)
{
CK_ATTRIBUTE attr;
GArray *array;
GkmTransaction *transaction;
g_return_val_if_fail (GKM_IS_SESSION (session), CKR_GENERAL_ERROR);
g_return_val_if_fail (mech, CKR_GENERAL_ERROR);
g_return_val_if_fail (mech->mechanism == CKM_G_NULL, CKR_GENERAL_ERROR);
g_return_val_if_fail (GKM_IS_OBJECT (wrapper), CKR_GENERAL_ERROR);
if (!GKM_IS_NULL_KEY (wrapper))
return CKR_WRAPPING_KEY_TYPE_INCONSISTENT;
if (mech->ulParameterLen)
return CKR_MECHANISM_PARAM_INVALID;
/* Now setup the attributes with our new value */
array = g_array_new (FALSE, FALSE, sizeof (CK_ATTRIBUTE));
/* Prepend the value */
attr.type = CKA_VALUE;
attr.pValue = input;
attr.ulValueLen = n_input;
g_array_append_val (array, attr);
/* Add the remainder of the attributes */
g_array_append_vals (array, attrs, n_attrs);
transaction = gkm_transaction_new ();
/* Now create an object with these attributes */
*unwrapped = gkm_session_create_object_for_attributes (session, transaction,
(CK_ATTRIBUTE_PTR)array->data, array->len);
g_array_free (array, TRUE);
return gkm_transaction_complete_and_unref (transaction);
}
|
