forked from google/OpenSK
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
10 changed files
with
232 additions
and
165 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,110 @@ | ||
| use alloc::string::String; | ||
| use alloc::vec::Vec; | ||
| use persistent_store::{StoreError, StoreUpdate}; | ||
|
|
||
| use crate::env::Env; | ||
|
|
||
| /// Identifies an attestation. | ||
| pub enum Id { | ||
| Batch, | ||
| Enterprise { rp_id: String }, | ||
| } | ||
|
|
||
| #[cfg_attr(feature = "std", derive(Debug, PartialEq, Eq))] | ||
| pub struct Attestation { | ||
| /// ECDSA private key (big-endian). | ||
| pub private_key: [u8; 32], | ||
| pub certificate: Vec<u8>, | ||
| } | ||
|
|
||
| /// Stores enterprise or batch attestations. | ||
| /// | ||
| /// Implementations don't need to distinguish different attestations. In particular, setting one | ||
| /// attestation may set other ones. | ||
| pub trait AttestationStore { | ||
| /// Returns an attestation given its id, if it exists. | ||
| /// | ||
| /// This should always return the attestation. Checking whether it is ok to use the attestation | ||
| /// is done in the CTAP library. | ||
| fn get(&mut self, id: &Id) -> Result<Option<Attestation>, Error>; | ||
|
|
||
| /// Sets the attestation for a given id. | ||
| /// | ||
| /// This function may not be supported. | ||
| fn set(&mut self, id: &Id, attestation: Option<&Attestation>) -> Result<(), Error>; | ||
| } | ||
|
|
||
| /// Attestation store errors. | ||
| #[derive(Copy, Clone, Debug, PartialEq, Eq)] | ||
| #[non_exhaustive] | ||
| pub enum Error { | ||
| Storage, | ||
| Internal, | ||
| NoSupport, | ||
| } | ||
|
|
||
| /// Keys of the environment store reserved for the attestation store. | ||
| pub const STORAGE_KEYS: &[usize] = &[1, 2]; | ||
|
|
||
| /// Implements a default attestation store using the environment store. | ||
| /// | ||
| /// The same attestation is used for batch and enterprise. | ||
| pub trait Helper: Env {} | ||
|
|
||
| impl<T: Helper> AttestationStore for T { | ||
| fn get(&mut self, _: &Id) -> Result<Option<Attestation>, Error> { | ||
| let private_key = self.store().find(PRIVATE_KEY_STORAGE_KEY)?; | ||
| let certificate = self.store().find(CERTIFICATE_STORAGE_KEY)?; | ||
| let (private_key, certificate) = match (private_key, certificate) { | ||
| (Some(x), Some(y)) => (x, y), | ||
| (None, None) => return Ok(None), | ||
| _ => return Err(Error::Internal), | ||
| }; | ||
| if private_key.len() != 32 { | ||
| return Err(Error::Internal); | ||
| } | ||
| Ok(Some(Attestation { | ||
| private_key: *array_ref![private_key, 0, 32], | ||
| certificate, | ||
| })) | ||
| } | ||
|
|
||
| fn set(&mut self, _: &Id, attestation: Option<&Attestation>) -> Result<(), Error> { | ||
| let updates = match attestation { | ||
| None => [ | ||
| StoreUpdate::Remove { | ||
| key: PRIVATE_KEY_STORAGE_KEY, | ||
| }, | ||
| StoreUpdate::Remove { | ||
| key: CERTIFICATE_STORAGE_KEY, | ||
| }, | ||
| ], | ||
| Some(attestation) => [ | ||
| StoreUpdate::Insert { | ||
| key: PRIVATE_KEY_STORAGE_KEY, | ||
| value: &attestation.private_key[..], | ||
| }, | ||
| StoreUpdate::Insert { | ||
| key: CERTIFICATE_STORAGE_KEY, | ||
| value: &attestation.certificate[..], | ||
| }, | ||
| ], | ||
| }; | ||
| Ok(self.store().transaction(&updates)?) | ||
| } | ||
| } | ||
|
|
||
| const PRIVATE_KEY_STORAGE_KEY: usize = STORAGE_KEYS[0]; | ||
| const CERTIFICATE_STORAGE_KEY: usize = STORAGE_KEYS[1]; | ||
|
|
||
| impl From<StoreError> for Error { | ||
| fn from(error: StoreError) -> Self { | ||
| match error { | ||
| StoreError::InvalidArgument | ||
| | StoreError::NoCapacity | ||
| | StoreError::NoLifetime | ||
| | StoreError::InvalidStorage => Error::Internal, | ||
| StoreError::StorageError => Error::Storage, | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.