diff options
| -rw-r--r-- | crypto/Kconfig | 6 | ||||
| -rw-r--r-- | crypto/Makefile | 1 | ||||
| -rw-r--r-- | crypto/keystore.c | 80 | ||||
| -rw-r--r-- | include/crypto/keystore.h | 26 |
4 files changed, 113 insertions, 0 deletions
diff --git a/crypto/Kconfig b/crypto/Kconfig index 27047889a6..41145a312d 100644 --- a/crypto/Kconfig +++ b/crypto/Kconfig @@ -87,4 +87,10 @@ config CRYPTO_PBKDF2 select DIGEST_SHA1_GENERIC bool +config CRYPTO_KEYSTORE + bool "Keystore" + help + This is a simple keystore, which can be used to pass keys + between several components via simple interface. + endmenu diff --git a/crypto/Makefile b/crypto/Makefile index f39de718e5..c6d17787ca 100644 --- a/crypto/Makefile +++ b/crypto/Makefile @@ -11,3 +11,4 @@ obj-$(CONFIG_DIGEST_SHA384_GENERIC) += sha4.o obj-$(CONFIG_DIGEST_SHA512_GENERIC) += sha4.o obj-$(CONFIG_CRYPTO_PBKDF2) += pbkdf2.o +obj-$(CONFIG_CRYPTO_KEYSTORE) += keystore.o diff --git a/crypto/keystore.c b/crypto/keystore.c new file mode 100644 index 0000000000..90b470fe67 --- /dev/null +++ b/crypto/keystore.c @@ -0,0 +1,80 @@ +/* + * Copyright (C) 2015 Pengutronix, Marc Kleine-Budde <kernel@pengutronix.de> + * + * This program is free software; you can redistribute it and/or modify it under + * the terms of the GNU General Public License version 2 as published by the + * Free Software Foundation. + */ + +#include <common.h> +#include <linux/kernel.h> +#include <linux/list.h> + +static LIST_HEAD(keystore_list); + +#define for_each_key(key) list_for_each_entry(key, &keystore_list, list) + +struct keystore_key { + struct list_head list; + const char *name; + const u8 *secret; + int secret_len; +}; + +static int keystore_compare(struct list_head *a, struct list_head *b) +{ + const char *na = list_entry(a, struct keystore_key, list)->name; + const char *nb = list_entry(b, struct keystore_key, list)->name; + + return strcmp(na, nb); +} + +/** + * @param[in] name Name of the secret to get + * @param[out] secret Double pointer to memory representing the secret, do _not_ free() after use + * @param[out] secret_len Pointer to length of the secret + */ +int keystore_get_secret(const char *name, const u8 **secret, int *secret_len) +{ + struct keystore_key *key; + + for_each_key(key) { + if (!strcmp(name, key->name)) { + if (!secret || !secret_len) + return 0; + + *secret = key->secret; + *secret_len = key->secret_len; + + return 0; + } + } + + return -ENOENT; +} + +/** + * @param[in] name Name of the secret to set + * @param[in] secret Pointer to memory holding the secret + * @param[in] secret_len Length of the secret + */ +int keystore_set_secret(const char *name, const u8 *secret, int secret_len) +{ + struct keystore_key *key; + int ret; + + /* check if key is already in store */ + ret = keystore_get_secret(name, NULL, NULL); + if (!ret) + return -EBUSY; + + key = xzalloc(sizeof(*key)); + INIT_LIST_HEAD(&key->list); + key->name = xstrdup(name); + key->secret = xmemdup(secret, secret_len); + key->secret_len = secret_len; + + list_add_sort(&key->list, &keystore_list, keystore_compare); + + return 0; +} diff --git a/include/crypto/keystore.h b/include/crypto/keystore.h new file mode 100644 index 0000000000..29915854b8 --- /dev/null +++ b/include/crypto/keystore.h @@ -0,0 +1,26 @@ +/* + * Copyright (C) 2015 Pengutronix, Marc Kleine-Budde <kernel@pengutronix.de> + * + * This program is free software; you can redistribute it and/or modify it under + * the terms of the GNU General Public License version 2 as published by the + * Free Software Foundation. + */ + +#ifndef __CRYPTO_KEYSTORE_H +#define __CRYPTO_KEYSTORE_H + +#ifdef CONFIG_CRYPTO_KEYSTORE +int keystore_get_secret(const char *name, const u8 **secret, int *secret_len); +int keystore_set_secret(const char *name, const u8 *secret, int secret_len); +#else +static inline int keystore_get_secret(const char *name, const u8 **secret, int *secret_len) +{ + return -EINVAL; +} +static inline int keystore_set_secret(const char *name, const u8 *secret, int secret_len) +{ + return 0; +} +#endif + +#endif |