12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903290429052906290729082909291029112912291329142915291629172918291929202921292229232924292529262927292829292930293129322933293429352936293729382939294029412942294329442945294629472948294929502951295229532954295529562957295829592960296129622963296429652966296729682969297029712972297329742975 |
- #include <stdint.h>
- #include "optiga/common/Util.h"
- #include "optiga/cmd/CommandLib.h"
- #include "optiga/common/MemoryMgmt.h"
- #ifdef USE_CMDLIB_WITH_RTOS
- #include "optiga/pal/pal_os_timer.h"
- #endif
- static optiga_comms_t* p_optiga_comms;
- #define MAX_APDU_BUFF_LEN 1558
- #define PARAM_GET_DATA 0x00
- #define PARAM_GET_METADATA 0x01
- #define PARAM_SET_DATA 0x00
- #define PARAM_SET_METADATA 0x01
- #define PARAM_SET_DATA_ERASE 0x40
- #define PARAM_SET_AUTH_MSG 0x01
- #define PARAM_GET_AUTH_MSG 0x02
- #define PARAM_ENC_DATA 0x61
- #define PARAM_DEC_DATA 0x51
- #define BYTES_CMD 0x01
- #define BYTES_PARAM 0x01
- #define BYTES_LENGTH 0x02
- #define BYTES_SEQ 0x01
- #define BYTES_OID 0x02
- #define BYTES_OFFSET 0x02
- #define OFFSET_RESP_STATUS 0x00
- #define OFFSET_CMD (0x00)
- #define OFFSET_PARAM (OFFSET_CMD + BYTES_CMD)
- #define OFFSET_LENGTH (OFFSET_PARAM + BYTES_PARAM)
- #define OFFSET_PAYLOAD (OFFSET_LENGTH + BYTES_LENGTH)
- #define TAG_LENGTH_OFFSET 0x01
- #define TAG_VALUE_OFFSET 0x03
- #define CMD_GETDATA 0x01
- #define CMD_SETDATA 0x02
- #define CMD_SETAUTH_SCM 0x10
- #define CMD_SETAUTH_MSG 0x19
- #define CMD_GETAUTH_MSG 0x18
- #define CMD_GET_RND 0x0C
- #define CMD_OPEN_APP 0x70
- #define CMD_GETMSG 0x1A
- #define CMD_PUTMSG 0x1B
- #define CMD_ENCDATA CMD_GETMSG
- #define CMD_DECDATA CMD_PUTMSG
- #define CMD_CALCHASH 0x30
- #define CMD_VERIFYSIGN 0x32
- #define CMD_GENERATE_KEY_PAIR 0x38
- #define CMD_CALC_SIGN 0x31
- #define CMD_CALC_SHARED_SEC 0x33
- #define CMD_DERIVE_KEY 0x34
- #define LEN_PL_OIDDATA 0x06
- #define LEN_PL_OID 0x02
- #define OID_ERROR 0xF1C2
- #define CMD_CODE_MSB_SET 0x80
- #define UNIQUE_APP_IDENTIFIER 0xD2, 0x76, 0x00, 0x00, 0x04, 0x47, 0x65, 0x6E, 0x41, 0x75, 0x74, 0x68, 0x41, 0x70, 0x70, 0x6C
- #define SESSION_ID_LOWER_VALUE 0xE100
- #define SESSION_ID_HIGHER_VALUE 0xE103
- #define TAG_UNPROTECTED 0x60
- #define TAG_PROTECTED 0x50
- #define MASK_HIGHER_NIBBLE 0xF0
- #define MASK_LOWER_NIBBLE 0x0F
- #define OFFSET_TAG (OFFSET_PAYLOAD + BYTES_SESSIONID)
- #define OFFSET_TAG_LEN (OFFSET_TAG + 1)
- #define OFFSET_TAG_DATA (OFFSET_TAG_LEN + BYTES_LENGTH)
- #define TAG_GMTUNIX_TIME 0x31
- #define BYTES_GMT_TIME 0x04
- #define TAG_CERTIFICATE_OID 0x32
- #define INVALID_MAX_COMMS_BUFF_SIZE 0xFFFF
- #define TAG_DIGEST 0x01
- #define TAG_SIGNATURE 0x02
- #define TAG_PUB_KEY_OID 0x04
- #define TAG_ALGO_IDENTIFIER 0x05
- #define TAG_OID 0x01
- #define TAG_KEY_USAGE_IDENTIFIER 0x02
- #define TAG_OID_SIG_KEY 0x03
- #define TAG_SEED 0x02
- #define LEN_OID_SIG_KEY 0x0002
- #define LEN_KEY_USAGE_IDENTIFIER 0x0001
- #define TAG_EXPORT_KEY_PAIR 0x07
- #define LEN_PRI_KEY 0x0002
- #define LEN_SHARED_SECRET_OID 0x0002
- #define LEN_EXPORT_KEY_PAIR 0x0000
- #define TAG_PUB_KEY 0x06
- #define LEN_PUB_KEY 0x0002
- #define LEN_ALGO_IDENTIFIER 0x0001
- #define ERR_DATA_OUT_OF_BOUND 0x00000008
- uint16_t wMaxCommsBuffer = INVALID_MAX_COMMS_BUFF_SIZE;
- #ifndef MIN
- #define MIN(a,b) ((a<b)?a:b)
- #endif
- #define SHA256_HASH_LEN 32
- #define ECC_NIST_P_256_KEY_LEN 32
- #define ECC_NIST_P_384_KEY_LEN 48
- #define INIT_STACK_APDUBUFFER(pbBuffer,wLen) \
- { \
- \
- uint8_t rgbAPDUBuffer[wLen]; \
- pbBuffer = rgbAPDUBuffer; \
- }
- #define INIT_HEAP_APDUBUFFER(pbBuffer,wLen) \
- { \
- if(INVALID_MAX_COMMS_BUFF_SIZE == wMaxCommsBuffer) \
- { \
- i4Status = (int32_t)CMD_DEV_EXEC_ERROR; \
- break; \
- } \
- pbBuffer = (uint8_t*)OCP_MALLOC(wLen); \
- if(NULL == pbBuffer) \
- { \
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY; \
- break; \
- } \
- }
- #define FREE_HEAP_APDUBUFFER(pbBuffer) \
- { \
- if(NULL != pbBuffer) \
- { \
- OCP_FREE(pbBuffer); \
- pbBuffer = NULL; \
- } \
- }
- sHashinfo_d sHashInfo[1]={
- {eSHA256, SHA256_HASH_LEN, CALC_HASH_SHA256_CONTEXT_SIZE}
- };
- typedef struct sAlgoinfo
- {
-
- eAlgId_d eAlgKeyId;
-
- uint8_t bKeyLen;
- }sAlgoInfo_d;
- sAlgoInfo_d sAlgoInfo[2]={
- {eECC_NIST_P256, ECC_NIST_P_256_KEY_LEN},
- {eECC_NIST_P384, ECC_NIST_P_384_KEY_LEN}
- };
- typedef struct sApduData_d
- {
-
- uint8_t bCmd;
-
- uint8_t bParam;
-
- uint16_t wPayloadLength;
-
- uint8_t* prgbAPDUBuffer;
-
- uint8_t* prgbRespBuffer;
-
- uint16_t wResponseLength;
- }sApduData_d;
- typedef enum eFragSeq_d
- {
-
- eStart = 0x00,
-
- eFinal = 0x01,
-
- eContinue = 0x02
- }eFragSeq_d;
- volatile static host_lib_status_t optiga_comms_status;
- static void optiga_comms_event_handler(void* upper_layer_ctx, host_lib_status_t event)
- {
- optiga_comms_status = event;
- }
- _STATIC_H int32_t CmdLib_GetDeviceError(void)
- {
- int32_t i4Status = (int32_t)CMD_DEV_ERROR;
- uint8_t rgbErrorCmd[] = {CMD_GETDATA,0x00,0x00,0x02,(uint8_t)(OID_ERROR>>8),(uint8_t)OID_ERROR};
- uint16_t wBufferLength = sizeof(rgbErrorCmd);
- do
- {
- p_optiga_comms->upper_layer_handler = optiga_comms_event_handler;
- optiga_comms_status = OPTIGA_COMMS_BUSY;
- i4Status = optiga_comms_transceive(p_optiga_comms,rgbErrorCmd,&wBufferLength,
- rgbErrorCmd,&wBufferLength);
- if(OPTIGA_COMMS_SUCCESS != i4Status)
- {
- i4Status = (int32_t)CMD_DEV_EXEC_ERROR;
- break;
- }
-
- while(optiga_comms_status == OPTIGA_COMMS_BUSY){
- #ifdef USE_CMDLIB_WITH_RTOS
- pal_os_timer_delay_in_milliseconds(1);
- #endif
- };
- if(optiga_comms_status != OPTIGA_COMMS_SUCCESS)
- {
- i4Status = (int32_t)CMD_DEV_EXEC_ERROR;
- break;
- }
- if(0 == rgbErrorCmd[OFFSET_RESP_STATUS])
- {
- i4Status = (int32_t)(CMD_DEV_ERROR | rgbErrorCmd[OFFSET_PAYLOAD]);
- }
- else
- {
-
- i4Status = (int32_t)CMD_DEV_EXEC_ERROR;
- }
- }while(FALSE);
- return i4Status;
- }
- _STATIC_H int32_t TransceiveAPDU(sApduData_d *PpsApduData,uint8_t bGetError)
- {
-
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- uint16_t wTotalLength;
- do
- {
- if(NULL == PpsApduData || NULL == p_optiga_comms)
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- PpsApduData->prgbAPDUBuffer[OFFSET_CMD] = PpsApduData->bCmd;
- PpsApduData->prgbAPDUBuffer[OFFSET_PARAM] = PpsApduData->bParam;
-
- PpsApduData->prgbAPDUBuffer[OFFSET_LENGTH] = (uint8_t)(PpsApduData->wPayloadLength >> BITS_PER_BYTE);
- PpsApduData->prgbAPDUBuffer[OFFSET_LENGTH+1] = (uint8_t)PpsApduData->wPayloadLength;
-
- wTotalLength = PpsApduData->wPayloadLength + LEN_APDUHEADER;
- p_optiga_comms->upper_layer_handler = optiga_comms_event_handler;
- optiga_comms_status = OPTIGA_COMMS_BUSY;
- i4Status = optiga_comms_transceive(p_optiga_comms,PpsApduData->prgbAPDUBuffer,&wTotalLength,
- PpsApduData->prgbRespBuffer,&PpsApduData->wResponseLength);
- if(OPTIGA_COMMS_SUCCESS != i4Status)
- {
- i4Status = (int32_t)CMD_DEV_EXEC_ERROR;
- break;
- }
-
- do
- {
- #ifdef USE_CMDLIB_WITH_RTOS
- pal_os_timer_delay_in_milliseconds(1);
- #endif
- }while(optiga_comms_status == OPTIGA_COMMS_BUSY);
- if(optiga_comms_status != OPTIGA_COMMS_SUCCESS)
- {
- i4Status = (int32_t)CMD_DEV_EXEC_ERROR;
- break;
- }
-
- if(0 != PpsApduData->prgbRespBuffer[OFFSET_RESP_STATUS])
- {
- if(TRUE == bGetError)
- {
- i4Status = CmdLib_GetDeviceError();
- }
- else
- {
- i4Status = (int32_t)CMD_LIB_ERROR;
- }
- break;
- }
- i4Status = CMD_LIB_OK;
- }while(FALSE);
- return i4Status;
- }
- _STATIC_H int32_t GetMaxCommsBuffer()
- {
- #define GETDATA_MAX_COMMS_SIZE 10
- #define OID_MAX_COMMS_SIZE 0xE0C6
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- sApduData_d sApduData;
- do
- {
- INIT_STACK_APDUBUFFER(sApduData.prgbAPDUBuffer,GETDATA_MAX_COMMS_SIZE);
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
-
- sApduData.bCmd = CMD_GETDATA;
- sApduData.bParam = PARAM_GET_DATA;
- sApduData.wPayloadLength = LEN_PL_OID;
- sApduData.wResponseLength = GETDATA_MAX_COMMS_SIZE;
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD] = (uint8_t)(OID_MAX_COMMS_SIZE >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD +1] = (uint8_t)OID_MAX_COMMS_SIZE;
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
-
- wMaxCommsBuffer = (uint16_t )((sApduData.prgbRespBuffer[LEN_APDUHEADER] << 8) | (sApduData.prgbRespBuffer[LEN_APDUHEADER+1]));
- }while(FALSE);
- #undef GETDATA_MAX_COMMS_SIZE
- #undef OID_MAX_COMMS_SIZE
- return i4Status;
- }
- #ifdef MODULE_ENABLE_DTLS_MUTUAL_AUTH
- _STATIC_H int32_t CmdLib_EncDecHelper(sProcCryptoData_d *PpsCryptoVector, uint8_t PbCmd, uint8_t PbParam);
- _STATIC_H int32_t CmdLib_EncDecHelper(sProcCryptoData_d *PpsCryptoVector, uint8_t PbCmd, uint8_t PbParam)
- {
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- uint16_t wRespLen;
- uint16_t wDataRemaining;
- uint16_t wMaxDataLen;
- uint16_t wTotalEncDecLen =0;
- uint16_t wOffset = ADDITIONALBYTES_ENCDEC;
- uint16_t wMaxPlaintText;
- uint8_t bFragSeq ;
- uint8_t bSendTag,bRecvTag;
- uint8_t *pbResponse;
- uint8_t bGetError = TRUE;
- sApduData_d sApduData;
- do
- {
-
- if((NULL == PpsCryptoVector) || (NULL == PpsCryptoVector->sInData.prgbStream) ||
- (NULL == PpsCryptoVector->sOutData.prgbBuffer))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
-
- if((SESSION_ID_LOWER_VALUE > PpsCryptoVector->wSessionKeyOID) ||
- (SESSION_ID_HIGHER_VALUE < PpsCryptoVector->wSessionKeyOID))
- {
- i4Status = (int32_t)CMD_LIB_INVALID_SESSIONID;
- break;
- }
- if((0 == PpsCryptoVector->wInDataLength) ||
- (PpsCryptoVector->sInData.wLen < (PpsCryptoVector->wInDataLength + OVERHEAD_UPDOWNLINK)))
- {
- i4Status = (int32_t)CMD_LIB_INVALID_LEN;
- break;
- }
-
- if(PpsCryptoVector->wInDataLength > PpsCryptoVector->sOutData.wBufferLength)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
- PpsCryptoVector->sOutData.wRespLength = 0;
-
- sApduData.bCmd = PbCmd;
- sApduData.bParam = PbParam;
- wMaxPlaintText = wMaxCommsBuffer - OVERHEAD_UPDOWNLINK;
-
- wDataRemaining = PpsCryptoVector->wInDataLength;
-
- bFragSeq = (wDataRemaining>wMaxPlaintText)?(uint8_t)eStart:(uint8_t)eFinal;
-
- if(PARAM_ENC_DATA == PbParam)
- {
- bSendTag = TAG_UNPROTECTED;
- bRecvTag = TAG_PROTECTED;
- }
- else
- {
- bSendTag= TAG_PROTECTED;
- bRecvTag = TAG_UNPROTECTED;
- bGetError = FALSE;
- }
- pbResponse = PpsCryptoVector->sOutData.prgbBuffer;
- while(wDataRemaining !=0)
- {
-
- wMaxDataLen = (wDataRemaining>wMaxPlaintText)?wMaxPlaintText:wDataRemaining;
-
- sApduData.prgbAPDUBuffer = PpsCryptoVector->sInData.prgbStream + wOffset;
-
-
- sApduData.wPayloadLength = BYTES_SESSIONID + LEN_TAG_ENCODING + wMaxDataLen;
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD] = (uint8_t)(PpsCryptoVector->wSessionKeyOID >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + 1] = (uint8_t)PpsCryptoVector->wSessionKeyOID;
-
- sApduData.prgbAPDUBuffer[OFFSET_TAG] = (bSendTag | bFragSeq);
- sApduData.prgbAPDUBuffer[OFFSET_TAG_LEN] = (uint8_t)(wMaxDataLen >> 8);
- sApduData.prgbAPDUBuffer[OFFSET_TAG_LEN + 1] = (uint8_t)wMaxDataLen;
-
- sApduData.prgbRespBuffer = pbResponse;
- sApduData.wResponseLength = PpsCryptoVector->sOutData.wBufferLength - wTotalEncDecLen;
-
- i4Status = TransceiveAPDU(&sApduData,bGetError);
- if(CMD_LIB_OK != i4Status)
- {
- if(PARAM_DEC_DATA == PbParam)
- {
- i4Status = (int32_t)CMD_LIB_DECRYPT_FAILURE;
- }
- break;
- }
-
- sApduData.wResponseLength -= OVERHEAD_ENCDEC_RESPONSE;
-
- if((bRecvTag|bFragSeq) != (*(sApduData.prgbRespBuffer + LEN_APDUHEADER)))
- {
- i4Status = (int32_t)CMD_LIB_INVALID_TAG;
- break;
- }
-
- wRespLen = Utility_GetUint16(sApduData.prgbRespBuffer + LEN_APDUHEADER + 1);
-
- if(sApduData.wResponseLength != wRespLen)
- {
- i4Status = (int32_t)CMD_LIB_INVALID_TAGLEN;
- break;
- }
-
- Utility_Memmove(pbResponse,sApduData.prgbRespBuffer+(LEN_APDUHEADER + LEN_TAG_ENCODING),wRespLen);
- wTotalEncDecLen += wRespLen;
- pbResponse += wRespLen;
-
- wDataRemaining -= wMaxDataLen;
-
- wOffset += wMaxDataLen;
-
- bFragSeq = (wDataRemaining>wMaxPlaintText)?(uint8_t)eContinue:(uint8_t)eFinal;
- }
-
- if(CMD_LIB_OK == i4Status)
- {
- PpsCryptoVector->sOutData.wRespLength = wTotalEncDecLen;
- }
- }while(FALSE);
- return i4Status;
- }
- #endif
- #ifdef MODULE_ENABLE_TOOLBOX
- _STATIC_H int32_t Get_HashInfo(eHashAlg_d PeHashAlgo,sHashinfo_d** PppsHashinfo )
- {
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- uint8_t bCount;
-
- for(bCount= 0;bCount<(sizeof(sHashInfo)/sizeof(sHashinfo_d));bCount++)
- {
- if(PeHashAlgo == sHashInfo[bCount].eHashAlgo)
- {
- *PppsHashinfo = &sHashInfo[bCount];
- i4Status = (int32_t) CMD_LIB_OK;
- break;
- }
- }
- return i4Status;
- }
- _STATIC_H int32_t Get_KeySize(eAlgId_d PeAlgoIden,uint8_t* pbKeySize )
- {
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- uint8_t bCount;
-
- for(bCount= 0;bCount<(sizeof(sAlgoInfo)/sizeof(sAlgoInfo_d));bCount++)
- {
- if(PeAlgoIden == sAlgoInfo[bCount].eAlgKeyId)
- {
- *pbKeySize = sAlgoInfo[bCount].bKeyLen;
- i4Status = (int32_t) CMD_LIB_OK;
- break;
- }
- }
- return i4Status;
- }
- #endif
- void CmdLib_SetOptigaCommsContext(const optiga_comms_t *p_input_optiga_comms)
- {
- p_optiga_comms = (optiga_comms_t*)p_input_optiga_comms;
- }
- int32_t CmdLib_OpenApplication(const sOpenApp_d* PpsOpenApp)
- {
- #define OPEN_APDU_BUF_LEN 25
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- uint8_t rgbUID[] = {UNIQUE_APP_IDENTIFIER};
- sApduData_d sApduData;
- do
- {
- INIT_STACK_APDUBUFFER(sApduData.prgbAPDUBuffer,OPEN_APDU_BUF_LEN);
- if(NULL == PpsOpenApp)
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
-
- if(eInit != PpsOpenApp->eOpenType)
- {
- i4Status = (int32_t)CMD_LIB_INVALID_PARAM;
- break;
- }
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
-
- sApduData.bCmd = CMD_OPEN_APP | CMD_CODE_MSB_SET ;
- sApduData.bParam = (uint8_t)PpsOpenApp->eOpenType;
- sApduData.wPayloadLength = sizeof(rgbUID);
- sApduData.wResponseLength = OPEN_APDU_BUF_LEN;
- OCP_MEMCPY(sApduData.prgbAPDUBuffer+OFFSET_PAYLOAD, rgbUID, sizeof(rgbUID));
- i4Status = TransceiveAPDU(&sApduData,FALSE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
-
- if(INVALID_MAX_COMMS_BUFF_SIZE == wMaxCommsBuffer)
- {
-
- i4Status = GetMaxCommsBuffer();
- }
- }while(FALSE);
- #undef OPEN_APDU_BUF_LEN
- return i4Status;
- }
- #ifdef MODULE_ENABLE_READ_WRITE
- int32_t CmdLib_GetDataObject(const sGetData_d *PpsGDVector, sCmdResponse_d *PpsResponse)
- {
- #define ALLOCATE_ADDITIONAL_BYTES 6
-
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- uint16_t wTotalRecvLen = 0;
- uint16_t wReadLen = 0;
- uint16_t wOffset = 0;
- sApduData_d sApduData;
- sApduData.prgbAPDUBuffer = NULL;
- do
- {
- #ifdef STACK_ALLOC
- #error "Implement the inilization of stack memory for the required buffer"
-
- #else
- INIT_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer,wMaxCommsBuffer + ALLOCATE_ADDITIONAL_BYTES);
- #endif
- if((NULL == PpsGDVector)||(NULL == PpsResponse)||(NULL == PpsResponse->prgbBuffer))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- if(0x00 == PpsResponse->wBufferLength)
- {
- i4Status = (int32_t)CMD_LIB_LENZERO_ERROR;
- break;
- }
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer+ALLOCATE_ADDITIONAL_BYTES;
- sApduData.bCmd = CMD_GETDATA;
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD] = (uint8_t)(PpsGDVector->wOID >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD +1] = (uint8_t)PpsGDVector->wOID;
-
- if(eDATA == PpsGDVector->eDataOrMdata)
- {
- sApduData.bParam = PARAM_GET_DATA;
- sApduData.wPayloadLength = LEN_PL_OIDDATA;
- wOffset = PpsGDVector->wOffset;
- }
-
- else if(eMETA_DATA == PpsGDVector->eDataOrMdata)
- {
- sApduData.bParam = PARAM_GET_METADATA;
- sApduData.wPayloadLength = LEN_PL_OID;
- }
- else
- {
- i4Status = (int32_t)CMD_LIB_INVALID_PARAM;
- break;
- }
- do
- {
- if(eDATA == PpsGDVector->eDataOrMdata)
- {
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_OID] = (uint8_t)(wOffset >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_OID +1] = (uint8_t)wOffset;
-
- wReadLen = MIN((wMaxCommsBuffer-LEN_APDUHEADER),(PpsGDVector->wLength-wTotalRecvLen));
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_OID + BYTES_OFFSET] = (uint8_t)(wReadLen >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_OID + BYTES_OFFSET +1] = (uint8_t)wReadLen;
- }
- sApduData.wResponseLength = wMaxCommsBuffer;
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
-
- sApduData.wResponseLength -= LEN_APDUHEADER;
-
- if(((PpsResponse->wBufferLength-wTotalRecvLen) < sApduData.wResponseLength))
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
- OCP_MEMCPY(PpsResponse->prgbBuffer+wTotalRecvLen,sApduData.prgbRespBuffer+LEN_APDUHEADER,sApduData.wResponseLength);
-
- wTotalRecvLen += sApduData.wResponseLength;
-
- wOffset += sApduData.wResponseLength;
-
- if(wTotalRecvLen == PpsGDVector->wLength)
- {
- break;
- }
-
- }while(wReadLen == sApduData.wResponseLength);
- if((CMD_LIB_OK != i4Status)&&((wTotalRecvLen == 0)||
- (ERR_DATA_OUT_OF_BOUND != (i4Status^(int32_t)CMD_DEV_ERROR))))
- {
-
- OCP_MEMSET(PpsResponse->prgbBuffer,0,wTotalRecvLen);
- PpsResponse->wRespLength = 0;
- break;
- }
- PpsResponse->wRespLength = wTotalRecvLen;
- i4Status = (int32_t)CMD_LIB_OK;
- }while(FALSE);
- #ifndef STACK_ALLOC
- FREE_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer);
- #else
- #undef STACK_ALLOC
- #endif
- #undef ALLOCATE_ADDITIONAL_BYTES
- return i4Status;
- }
- int32_t CmdLib_SetDataObject(const sSetData_d *PpsSDVector)
- {
- #define BUFFER_SIZE (wMaxCommsBuffer)
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- uint16_t wTotalWriteLen = 0;
- uint16_t wWriteLen = 0;
- uint16_t wOffset;
- sApduData_d sApduData;
- sApduData.prgbAPDUBuffer = NULL;
- do
- {
- #ifdef STACK_ALLOC
- #error "Implement the inilization of stack memory for the required buffer"
-
- #else
- INIT_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer,BUFFER_SIZE);
- #endif
- if((NULL == PpsSDVector)||(NULL == PpsSDVector->prgbData))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- if(0x00 == PpsSDVector->wLength)
- {
- i4Status = (int32_t)CMD_LIB_LENZERO_ERROR;
- break;
- }
- sApduData.bCmd = CMD_SETDATA;
- if((eDATA == PpsSDVector->eDataOrMdata)&&
- (eWRITE == PpsSDVector->eWriteOption))
- {
- sApduData.bParam = PARAM_SET_DATA;
- }
- else if((eDATA == PpsSDVector->eDataOrMdata)&&
- (eERASE_AND_WRITE == PpsSDVector->eWriteOption))
- {
- sApduData.bParam = PARAM_SET_DATA_ERASE;
- }
- else if((eMETA_DATA == PpsSDVector->eDataOrMdata)&&
- (eWRITE == PpsSDVector->eWriteOption))
- {
- sApduData.bParam = PARAM_SET_METADATA;
- }
- else
- {
- i4Status = (int32_t)CMD_LIB_INVALID_PARAM;
- break;
- }
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer+7;
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD] = (uint8_t)(PpsSDVector->wOID >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + 1] = (uint8_t)PpsSDVector->wOID;
- wOffset = PpsSDVector->wOffset;
- do
- {
-
- if((sApduData.bParam == PARAM_SET_DATA_ERASE)&&
- (wTotalWriteLen != 0))
- {
- sApduData.bParam = PARAM_SET_DATA;
- }
- #define OVERHEAD (OFFSET_PAYLOAD+BYTES_OID+BYTES_OFFSET)
- wWriteLen = MIN((wMaxCommsBuffer-OVERHEAD),(PpsSDVector->wLength-wTotalWriteLen));
-
- sApduData.wPayloadLength = BYTES_OID + BYTES_OFFSET + wWriteLen;
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_OID] = (uint8_t)(wOffset >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_OID + 1] = (uint8_t)wOffset;
-
- OCP_MEMCPY(sApduData.prgbAPDUBuffer+OVERHEAD,PpsSDVector->prgbData+wTotalWriteLen,wWriteLen);
-
- sApduData.wResponseLength = BUFFER_SIZE;
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
- wTotalWriteLen += wWriteLen;
- wOffset += wWriteLen;
- }while(wTotalWriteLen != PpsSDVector->wLength);
- }while(FALSE);
- #ifndef STACK_ALLOC
- FREE_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer);
- #else
- #undef STACK_ALLOC
- #endif
- #undef OVERHEAD
- #undef BUFFER_SIZE
- return i4Status;
- }
- uint16_t CmdLib_GetMaxCommsBufferSize(Void)
- {
- return wMaxCommsBuffer;
- }
- #endif
- int32_t CmdLib_GetSignature(const sAuthMsg_d *PpsAuthMsg, sCmdResponse_d *PpsResponse)
- {
- #define STACK_ALLOC
- #define GETSIGN_APDU_BUF_LEN 270
-
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- sApduData_d sApduData;
- sAuthScheme_d sAuthScheme;
- do
- {
- #ifdef STACK_ALLOC
- INIT_STACK_APDUBUFFER(sApduData.prgbAPDUBuffer,GETSIGN_APDU_BUF_LEN);
- #else
- INIT_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer,GETSIGN_APDU_BUF_LEN);
- #endif
- if((NULL == PpsAuthMsg)||(NULL == PpsAuthMsg->prgbRnd)||
- (NULL == PpsResponse)||(NULL == PpsResponse->prgbBuffer))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
-
- if((CHALLENGE_MIN_LEN > PpsAuthMsg->wRndLength) || (CHALLENGE_MAX_LEN < PpsAuthMsg->wRndLength))
- {
- i4Status = (int32_t)CMD_LIB_INVALID_LEN;
- break;
- }
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
- sApduData.wResponseLength = GETSIGN_APDU_BUF_LEN;
-
- sAuthScheme.eAuthScheme = eECDSA;
- sAuthScheme.wDevicePrivKey = PpsAuthMsg->wOIDDevPrivKey;
- i4Status = CmdLib_SetAuthScheme(&sAuthScheme);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
-
- sApduData.bCmd = CMD_SETAUTH_MSG;
- sApduData.bParam = PARAM_SET_AUTH_MSG;
- sApduData.wPayloadLength = PpsAuthMsg->wRndLength;
- sApduData.wResponseLength = GETSIGN_APDU_BUF_LEN;
-
- OCP_MEMCPY(sApduData.prgbAPDUBuffer+OFFSET_PAYLOAD,PpsAuthMsg->prgbRnd,PpsAuthMsg->wRndLength);
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
-
- sApduData.bCmd = CMD_GETAUTH_MSG;
- sApduData.bParam = PARAM_GET_AUTH_MSG;
- sApduData.wPayloadLength = 0;
- sApduData.wResponseLength = GETSIGN_APDU_BUF_LEN;
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
-
- sApduData.wResponseLength -= LEN_APDUHEADER;
- PpsResponse->wRespLength = sApduData.wResponseLength;
- if(PpsResponse->wBufferLength < sApduData.wResponseLength)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
- OCP_MEMCPY(PpsResponse->prgbBuffer,sApduData.prgbAPDUBuffer+LEN_APDUHEADER,sApduData.wResponseLength);
- }while(FALSE);
- #ifndef STACK_ALLOC
- FREE_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer);
- #else
- #undef STACK_ALLOC
- #endif
- #undef GETSIGN_APDU_BUF_LEN
- return i4Status;
- }
- int32_t CmdLib_GetRandom(const sRngOptions_d *PpsRng, sCmdResponse_d *PpsResponse)
- {
-
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- sApduData_d sApduData;
- do
- {
-
- sApduData.prgbAPDUBuffer = NULL;
- if((NULL == PpsRng)||(NULL == PpsResponse)||(NULL == PpsResponse->prgbBuffer))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- if(0x00 == PpsResponse->wBufferLength)
- {
- i4Status = (int32_t)CMD_LIB_LENZERO_ERROR;
- break;
- }
-
- if((wMaxCommsBuffer) < (LEN_APDUHEADER + PpsRng->wRandomDataLen))
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
- PpsResponse->wRespLength = 0;
- sApduData.bCmd = CMD_GET_RND;
- sApduData.bParam = (uint8_t)PpsRng->eRngType;
- sApduData.wPayloadLength = LEN_PL_OID;
- INIT_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer, (LEN_APDUHEADER + PpsRng->wRandomDataLen));
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD] = (uint8_t)(PpsRng->wRandomDataLen >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + 1] = (uint8_t)PpsRng->wRandomDataLen;
- sApduData.wResponseLength = (LEN_APDUHEADER + PpsRng->wRandomDataLen);
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
-
- sApduData.wResponseLength -= LEN_APDUHEADER;
- if(PpsResponse->wBufferLength < sApduData.wResponseLength)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
- OCP_MEMCPY(PpsResponse->prgbBuffer,sApduData.prgbAPDUBuffer+LEN_APDUHEADER,sApduData.wResponseLength);
- PpsResponse->wRespLength = sApduData.wResponseLength;
- }while(FALSE);
- FREE_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer);
- return i4Status;
- }
- int32_t CmdLib_SetAuthScheme(const sAuthScheme_d *PpsAuthVector)
- {
- #define SET_AUTH_SCHEME_APDU_BUF_LEN 10
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- sApduData_d sApduData;
- uint16_t wPayloadSize;
- do
- {
- INIT_STACK_APDUBUFFER(sApduData.prgbAPDUBuffer, SET_AUTH_SCHEME_APDU_BUF_LEN);
- if(NULL == PpsAuthVector)
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
-
- if(eDTLSClient == PpsAuthVector->eAuthScheme)
- {
-
- if((SESSION_ID_LOWER_VALUE > PpsAuthVector->wSessionKeyId)
- || (SESSION_ID_HIGHER_VALUE < PpsAuthVector->wSessionKeyId))
- {
- i4Status = (int32_t)CMD_LIB_INVALID_SESSIONID;
- break;
- }
- wPayloadSize = 4;
- }
- else if(eECDSA == PpsAuthVector->eAuthScheme)
- {
- wPayloadSize = 2;
- }
- else
- {
- i4Status = (int32_t)CMD_LIB_INVALID_PARAM;
- break;
- }
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
-
-
- sApduData.bCmd = CMD_SETAUTH_SCM;
- sApduData.bParam = (uint8_t)PpsAuthVector->eAuthScheme;
- sApduData.wPayloadLength = wPayloadSize;
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD] = (uint8_t)(PpsAuthVector->wDevicePrivKey >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD+1] = (uint8_t)PpsAuthVector->wDevicePrivKey;
- sApduData.wResponseLength = SET_AUTH_SCHEME_APDU_BUF_LEN;
- if(eDTLSClient == PpsAuthVector->eAuthScheme)
- {
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD+2] = (uint8_t)(PpsAuthVector->wSessionKeyId >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD+3] = (uint8_t)PpsAuthVector->wSessionKeyId;
- }
-
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
- }while(FALSE);
- #undef SET_AUTH_SCHEME_APDU_BUF_LEN
- return i4Status;
- }
- #ifdef MODULE_ENABLE_TOOLBOX
- int32_t CmdLib_CalcHash(sCalcHash_d* PpsCalcHash)
- {
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- sApduData_d sApduData;
- eDataType_d eHashDataType;
- uint16_t wMemoryAllocLen;
- uint16_t wInDataLen;
- sHashinfo_d* psHashinfo;
- uint16_t wOptTagLen = 0;
- uint16_t wOptTagOffset = 0;
- uint16_t wOffset;
- uint16_t wBufferLen;
- do
- {
-
- sApduData.prgbAPDUBuffer = NULL;
-
- if(NULL == PpsCalcHash)
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- i4Status = Get_HashInfo(PpsCalcHash->eHashAlg, &psHashinfo);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
-
- if(((eFinalizeHash == PpsCalcHash->eHashSequence) || (eStartFinalizeHash == PpsCalcHash->eHashSequence) ||
- (eIntermediateHash == PpsCalcHash->eHashSequence)) && (NULL == PpsCalcHash->sOutHash.prgbBuffer))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
-
- if((eUnused != PpsCalcHash->sContextInfo.eContextAction) && (NULL == PpsCalcHash->sContextInfo.pbContextData))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- #define INDATA_LEN_OID (BYTES_OID + BYTES_LENGTH + BYTES_OFFSET)
- #define NIBBLE_LEN 4
- eHashDataType = PpsCalcHash->eHashDataType;
-
- if(eTerminateHash == PpsCalcHash->eHashSequence)
- {
- wInDataLen = 0;
- eHashDataType = eDataStream;
- }
- else if(eDataStream == eHashDataType)
- {
- if(NULL == PpsCalcHash->sDataStream.prgbStream)
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
-
- wInDataLen = PpsCalcHash->sDataStream.wLen;
- }
- else
- {
-
- wInDataLen = INDATA_LEN_OID;
- }
-
- if(eUnused != PpsCalcHash->sContextInfo.eContextAction)
- {
- wOptTagLen = (eExport != PpsCalcHash->sContextInfo.eContextAction)? (CALC_HASH_IMPORT_OR_EXPORT_OVERHEAD_SIZE + PpsCalcHash->sContextInfo.dwContextLen) : (CALC_HASH_IMPORT_OR_EXPORT_OVERHEAD_SIZE);
-
- if(eImportExport == PpsCalcHash->sContextInfo.eContextAction)
- {
- wOptTagLen += CALC_HASH_IMPORT_OR_EXPORT_OVERHEAD_SIZE;
- }
- wOptTagOffset = (eDataStream == PpsCalcHash->eHashDataType)? (OFFSET_PAYLOAD + BYTES_SEQ + BYTES_LENGTH + wInDataLen) :
- (OFFSET_PAYLOAD + BYTES_SEQ + BYTES_LENGTH + INDATA_LEN_OID);
- }
-
- if((wInDataLen + wOptTagLen + CALC_HASH_FIXED_OVERHEAD_SIZE) > wMaxCommsBuffer)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
-
- sApduData.bCmd = CMD_CALCHASH;
- sApduData.bParam = (uint8_t)PpsCalcHash->eHashAlg;
- wMemoryAllocLen = CALC_HASH_FIXED_OVERHEAD_SIZE + wInDataLen + wOptTagLen;
- wBufferLen = CALC_HASH_FIXED_OVERHEAD_SIZE;
-
-
- if((eFinalizeHash == PpsCalcHash->eHashSequence) || (eStartFinalizeHash == PpsCalcHash->eHashSequence) ||
- (eIntermediateHash == PpsCalcHash->eHashSequence))
- {
- wBufferLen += psHashinfo->bHashLen;
- }
-
- if((eExport == PpsCalcHash->sContextInfo.eContextAction) || (eImportExport == PpsCalcHash->sContextInfo.eContextAction))
- {
- wBufferLen += psHashinfo->wHashCntx;
- }
- if(wBufferLen > wMemoryAllocLen)
- {
- wMemoryAllocLen = wBufferLen;
- }
-
- INIT_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer, wMemoryAllocLen);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD] = (uint8_t)(((uint8_t)eHashDataType << NIBBLE_LEN) | (uint8_t) PpsCalcHash->eHashSequence);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_SEQ] = (uint8_t)(wInDataLen >> 8);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_SEQ + 1] = (uint8_t)wInDataLen ;
- if(eTerminateHash != PpsCalcHash->eHashSequence)
- {
-
- if(eDataStream == eHashDataType)
- {
- OCP_MEMCPY(&sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_SEQ + BYTES_LENGTH], PpsCalcHash->sDataStream.prgbStream,
- wInDataLen);
- }
- else
- {
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_SEQ + BYTES_LENGTH] = (uint8_t)(PpsCalcHash->sOIDData.wOID >> 8);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_SEQ + BYTES_LENGTH + 1] = (uint8_t)PpsCalcHash->sOIDData.wOID;
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_SEQ + BYTES_LENGTH + BYTES_OID] = (uint8_t)(PpsCalcHash->sOIDData.wOffset >> 8);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_SEQ + BYTES_LENGTH + BYTES_OID + 1] = (uint8_t)PpsCalcHash->sOIDData.wOffset;
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_SEQ + INDATA_LEN_OID] = (uint8_t)(PpsCalcHash->sOIDData.wLength >> 8);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + BYTES_SEQ + INDATA_LEN_OID + 1] = (uint8_t)(PpsCalcHash->sOIDData.wLength);
- }
- #define OFFSET_EXPORT_CNTXTAG (wOptTagOffset + BYTES_SEQ+ BYTES_LENGTH + PpsCalcHash->sContextInfo.dwContextLen)
-
- if((eImportExport == PpsCalcHash->sContextInfo.eContextAction) ||
- (eImport == PpsCalcHash->sContextInfo.eContextAction))
- {
- sApduData.prgbAPDUBuffer[wOptTagOffset] = (uint8_t)eImport;
- sApduData.prgbAPDUBuffer[wOptTagOffset + BYTES_SEQ] = (uint8_t)(PpsCalcHash->sContextInfo.dwContextLen >> 8);
- sApduData.prgbAPDUBuffer[wOptTagOffset + BYTES_SEQ + 1] = (uint8_t)(PpsCalcHash->sContextInfo.dwContextLen);
- OCP_MEMCPY(&sApduData.prgbAPDUBuffer[wOptTagOffset + BYTES_SEQ + BYTES_LENGTH], PpsCalcHash->sContextInfo.pbContextData,
- PpsCalcHash->sContextInfo.dwContextLen);
- }
-
- if((eImportExport == PpsCalcHash->sContextInfo.eContextAction) ||
- (eExport == PpsCalcHash->sContextInfo.eContextAction))
- {
- wOffset = (eExport == PpsCalcHash->sContextInfo.eContextAction)?wOptTagOffset : OFFSET_EXPORT_CNTXTAG;
- sApduData.prgbAPDUBuffer[wOffset] = (uint8_t)eExport;
- sApduData.prgbAPDUBuffer[wOffset + BYTES_SEQ] = 0x00;
- sApduData.prgbAPDUBuffer[wOffset + BYTES_SEQ + 1] =0x00;
- }
- }
-
- sApduData.wPayloadLength = BYTES_SEQ + BYTES_LENGTH + wInDataLen + wOptTagLen;
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
- sApduData.wResponseLength = wMemoryAllocLen;
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
- #define TAG_HASH_OUTPUT 0x01
- #define TAG_CONTEXT_OUTPUT 0x06
- sApduData.wResponseLength -= LEN_APDUHEADER;
-
-
- if((TAG_HASH_OUTPUT == (*(sApduData.prgbRespBuffer + LEN_APDUHEADER))) && (sApduData.wResponseLength != 0))
- {
-
- if((psHashinfo->bHashLen) > PpsCalcHash->sOutHash.wBufferLength)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
- PpsCalcHash->sOutHash.wRespLength = Utility_GetUint16(sApduData.prgbRespBuffer + LEN_APDUHEADER + BYTES_SEQ);
- OCP_MEMCPY(PpsCalcHash->sOutHash.prgbBuffer, (sApduData.prgbRespBuffer + CALC_HASH_FIXED_OVERHEAD_SIZE), PpsCalcHash->sOutHash.wRespLength);
- }
-
-
- if((TAG_CONTEXT_OUTPUT == (*(sApduData.prgbRespBuffer + LEN_APDUHEADER))) && (sApduData.wResponseLength != 0))
- {
-
- if((psHashinfo->wHashCntx) > PpsCalcHash->sContextInfo.dwContextLen)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
- PpsCalcHash->sContextInfo.dwContextLen = Utility_GetUint16(sApduData.prgbRespBuffer + LEN_APDUHEADER + BYTES_SEQ);
- OCP_MEMCPY(PpsCalcHash->sContextInfo.pbContextData, (sApduData.prgbRespBuffer + CALC_HASH_FIXED_OVERHEAD_SIZE), PpsCalcHash->sContextInfo.dwContextLen);
- }
- }while(FALSE);
- FREE_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer);
- #undef INDATA_LEN_OID
- #undef NIBBLE_LEN
- #undef OFFSET_EXPORT_CNTXTAG
- #undef TAG_HASH_OUTPUT
- #undef TAG_CONTEXT_OUTPUT
- return i4Status;
- }
- int32_t CmdLib_VerifySign(const sVerifyOption_d* PpsVerifySign,const sbBlob_d * PpsDigest,const sbBlob_d * PpsSignature)
- {
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- sApduData_d sApduData = {0};
- uint16_t wWritePosition = OFFSET_PAYLOAD;
- uint16_t wCalApduLen = 0;
-
- #define DATA_STREAM_APDU_INDATA_LEN 13
-
- #define OID_APDU_INDATA_LEN 11
- do
- {
-
- if((NULL == PpsVerifySign) || (NULL == PpsDigest->prgbStream) ||
- (NULL == PpsSignature->prgbStream))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- if(eDataStream == PpsVerifySign->eVerifyDataType)
- {
-
- if(NULL == PpsVerifySign->sPubKeyInput.sDataStream.prgbStream)
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- wCalApduLen = OFFSET_PAYLOAD + DATA_STREAM_APDU_INDATA_LEN + PpsDigest->wLen + PpsSignature->wLen + PpsVerifySign->sPubKeyInput.sDataStream.wLen;
- }
- if(eOIDData == PpsVerifySign->eVerifyDataType)
- {
- wCalApduLen = OFFSET_PAYLOAD + OID_APDU_INDATA_LEN + PpsDigest->wLen + PpsSignature->wLen;
- }
- if((wMaxCommsBuffer) < wCalApduLen)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
-
- INIT_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer,wCalApduLen);
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
- sApduData.wResponseLength = wMaxCommsBuffer;
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD] = TAG_DIGEST;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], PpsDigest->wLen);
- OCP_MEMCPY(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET],PpsDigest->prgbStream,PpsDigest->wLen);
- wWritePosition += TAG_VALUE_OFFSET+ PpsDigest->wLen;
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_SIGNATURE;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], PpsSignature->wLen);
- OCP_MEMCPY(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET],PpsSignature->prgbStream,PpsSignature->wLen);
- wWritePosition += TAG_VALUE_OFFSET + PpsSignature->wLen;
- if(eDataStream == PpsVerifySign->eVerifyDataType)
- {
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_ALGO_IDENTIFIER;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], LEN_ALGO_IDENTIFIER);
- sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET] = (uint8_t)PpsVerifySign->sPubKeyInput.eAlgId;
- sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET + BYTES_SEQ] = (uint8_t)TAG_PUB_KEY;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET + BYTES_OFFSET], PpsVerifySign->sPubKeyInput.sDataStream.wLen);
- wWritePosition += TAG_VALUE_OFFSET + BYTES_OFFSET + BYTES_OFFSET;
- OCP_MEMCPY(&sApduData.prgbAPDUBuffer[wWritePosition],PpsVerifySign->sPubKeyInput.sDataStream.prgbStream ,PpsVerifySign->sPubKeyInput.sDataStream.wLen);
-
- sApduData.wPayloadLength = (uint16_t)(wWritePosition + PpsVerifySign->sPubKeyInput.sDataStream.wLen - OFFSET_PAYLOAD);
- }
- if(eOIDData == PpsVerifySign->eVerifyDataType)
- {
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_PUB_KEY_OID;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], LEN_PUB_KEY);
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET], PpsVerifySign->wOIDPubKey);
-
- sApduData.wPayloadLength = (uint16_t)(wWritePosition + TAG_VALUE_OFFSET + BYTES_OFFSET - OFFSET_PAYLOAD);
- }
-
- sApduData.bCmd = CMD_VERIFYSIGN;
- sApduData.bParam = (uint8_t)PpsVerifySign->eSignScheme;
-
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
- }while(FALSE);
-
- FREE_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer);
- #undef DATA_STREAM_APDU_INDATA_LEN
- #undef OID_APDU_INDATA_LEN
- return i4Status;
- }
- int32_t CmdLib_GenerateKeyPair(const sKeyPairOption_d* PpsKeyPairOption,sOutKeyPair_d* PpsOutKeyPair)
- {
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- uint16_t wWritePosition = LEN_APDUHEADER;
- uint16_t wCalApduLen;
- uint16_t wLen;
- uint16_t wParsLen;
- uint8_t bMultiplier;
- sApduData_d sApduData = {0};
- uint8_t wAlgoLen;
- sbBlob_d * psBlobKey = NULL;
-
- #define TAG_PUBLIC_KEY 0x02
-
- #define PRIV_KEY_APDU_INDATA_LEN 9
-
- #define KEY_PAIR_INDATA_LEN 4
- do
- {
-
- if((NULL == PpsKeyPairOption) || (NULL == PpsOutKeyPair) || (NULL == PpsOutKeyPair->sPublicKey.prgbStream))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- wCalApduLen = LEN_APDUHEADER + PRIV_KEY_APDU_INDATA_LEN;
- bMultiplier = 2;
- if(eExportKeyPair == PpsKeyPairOption->eKeyExport)
- {
-
- if(NULL == PpsOutKeyPair->sPrivateKey.prgbStream)
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- wCalApduLen = LEN_APDUHEADER + KEY_PAIR_INDATA_LEN + TAG_VALUE_OFFSET + TAG_VALUE_OFFSET;
- bMultiplier = 3;
- }
-
- i4Status = Get_KeySize(PpsKeyPairOption->eAlgId, &wAlgoLen);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
- wCalApduLen += ((wAlgoLen * bMultiplier) + 2);
-
- INIT_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer,wCalApduLen);
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
- sApduData.wResponseLength = wCalApduLen;
- if(eStorePrivKeyOnly == PpsKeyPairOption->eKeyExport)
- {
-
- sApduData.prgbAPDUBuffer[LEN_APDUHEADER] = TAG_OID;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], LEN_PRI_KEY);
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET], PpsKeyPairOption->wOIDPrivKey);
- wWritePosition += TAG_VALUE_OFFSET+ BYTES_OFFSET;
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_KEY_USAGE_IDENTIFIER;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], LEN_KEY_USAGE_IDENTIFIER);
- sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET] = (uint8_t)PpsKeyPairOption->eKeyUsage;
- wWritePosition += TAG_VALUE_OFFSET + BYTES_SEQ;
- }
- if(eExportKeyPair == PpsKeyPairOption->eKeyExport)
- {
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_EXPORT_KEY_PAIR;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], LEN_EXPORT_KEY_PAIR);
- wWritePosition += TAG_VALUE_OFFSET;
- }
- sApduData.wPayloadLength = (uint16_t)(wWritePosition - LEN_APDUHEADER);
-
- sApduData.bCmd = CMD_GENERATE_KEY_PAIR;
- sApduData.bParam = (uint8_t)PpsKeyPairOption->eAlgId;
-
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
- wParsLen = LEN_APDUHEADER;
- do
- {
- wLen = Utility_GetUint16(&sApduData.prgbRespBuffer[wParsLen+BYTES_SEQ]);
- psBlobKey = (TAG_PUBLIC_KEY == sApduData.prgbRespBuffer[wParsLen])?&(PpsOutKeyPair->sPublicKey):&(PpsOutKeyPair->sPrivateKey);
- if(wLen > psBlobKey->wLen)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
-
- OCP_MEMCPY(psBlobKey->prgbStream,&sApduData.prgbRespBuffer[TAG_VALUE_OFFSET + wParsLen] ,wLen);
- psBlobKey->wLen = wLen;
- wParsLen += (wLen + TAG_VALUE_OFFSET);
- } while (wParsLen != sApduData.wResponseLength);
- } while(FALSE);
-
- FREE_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer);
- #undef TAG_PUBLIC_KEY
- #undef PRIV_KEY_APDU_INDATA_LEN
- #undef KEY_PAIR_INDATA_LEN
- return i4Status;
- }
- int32_t CmdLib_CalculateSign(const sCalcSignOptions_d *PpsCalcSign,sbBlob_d *PpsSignature)
- {
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- uint16_t wWritePosition = LEN_APDUHEADER;
- uint16_t wCalApduLen;
- sApduData_d sApduData = {0};
- do
- {
-
- if((NULL == PpsCalcSign) || (NULL == PpsSignature->prgbStream) || (NULL == PpsCalcSign->sDigestToSign.prgbStream))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- #define CALSIGN_APDU_LEN 8
- #define SIGNATURE_LEN 0x77
- #define TX_LEN (CALSIGN_APDU_LEN + PpsCalcSign->sDigestToSign.wLen)
-
- wCalApduLen = LEN_APDUHEADER + (TX_LEN > SIGNATURE_LEN ? TX_LEN : SIGNATURE_LEN);
- if((wMaxCommsBuffer) < wCalApduLen)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
-
- INIT_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer,wCalApduLen);
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
- sApduData.wResponseLength = wCalApduLen;
-
- sApduData.prgbAPDUBuffer[LEN_APDUHEADER] = TAG_DIGEST;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], PpsCalcSign->sDigestToSign.wLen);
- OCP_MEMCPY(&sApduData.prgbRespBuffer[TAG_VALUE_OFFSET + wWritePosition],PpsCalcSign->sDigestToSign.prgbStream,PpsCalcSign->sDigestToSign.wLen);
- wWritePosition += TAG_VALUE_OFFSET + PpsCalcSign->sDigestToSign.wLen;
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_OID_SIG_KEY;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], LEN_OID_SIG_KEY);
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET], PpsCalcSign->wOIDSignKey);
- wWritePosition += TAG_VALUE_OFFSET + LEN_OID_SIG_KEY;
- sApduData.wPayloadLength = (uint16_t)(wWritePosition - LEN_APDUHEADER);
-
- sApduData.bCmd = CMD_CALC_SIGN;
- sApduData.bParam = (uint8_t)PpsCalcSign->eSignScheme;
-
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
- sApduData.wResponseLength -= LEN_APDUHEADER;
- if(sApduData.wResponseLength > PpsSignature->wLen)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
-
- OCP_MEMCPY(PpsSignature->prgbStream,&sApduData.prgbRespBuffer[LEN_APDUHEADER],sApduData.wResponseLength);
- PpsSignature->wLen = sApduData.wResponseLength;
- }while(FALSE);
-
- FREE_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer);
- #undef CALSIGN_APDU_LEN
- #undef SIGNATURE_LEN
- #undef TX_LEN
- return i4Status;
- }
- int32_t CmdLib_CalculateSharedSecret(const sCalcSSecOptions_d *PpsCalcSSec,sbBlob_d *PpsSecret)
- {
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- uint16_t wWritePosition = LEN_APDUHEADER;
- uint16_t wCalApduLen = 0;
- sApduData_d sApduData = {0};
- do
- {
-
- if((NULL == PpsCalcSSec) || (NULL == PpsCalcSSec->sPubKey.prgbStream))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
-
-
-
- #define CALCSSEC_APDU_LEN 15
-
- #define TAG_PUBLIC_KEY 0x06
-
- #define LEN_EXPORT_SHAR_SEC 0x0000
-
- #define LEN_OID_SHARE_SEC 0x0002
-
- #define OID_SHARE_SEC_ZERO 0x0000
-
- #define TAG_EXPORT_SHARE_SEC 0x07
-
- #define TAG_OID_SHARE_SEC 0x08
-
- #define TX_LEN (CALCSSEC_APDU_LEN + PpsCalcSSec->sPubKey.wLen + 2)
-
-
- wCalApduLen = LEN_APDUHEADER + TX_LEN;
-
- if(OID_SHARE_SEC_ZERO == PpsCalcSSec->wOIDSharedSecret)
- {
- if(NULL == PpsSecret->prgbStream)
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- wCalApduLen -=2;
- }
-
- if((wMaxCommsBuffer) < wCalApduLen)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
-
- INIT_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer,wCalApduLen);
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
- sApduData.wResponseLength = wCalApduLen;
-
- sApduData.prgbAPDUBuffer[LEN_APDUHEADER] = TAG_OID;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET],LEN_PRI_KEY);
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET],PpsCalcSSec->wOIDPrivKey);
- wWritePosition += TAG_VALUE_OFFSET + LEN_PRI_KEY;
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_ALGO_IDENTIFIER;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET],LEN_ALGO_IDENTIFIER);
- sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET] = (uint8_t)PpsCalcSSec->ePubKeyAlgId;
- wWritePosition += TAG_VALUE_OFFSET + LEN_ALGO_IDENTIFIER;
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_PUBLIC_KEY;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET],PpsCalcSSec->sPubKey.wLen);
- OCP_MEMCPY(&sApduData.prgbRespBuffer[TAG_VALUE_OFFSET + wWritePosition],PpsCalcSSec->sPubKey.prgbStream,PpsCalcSSec->sPubKey.wLen);
- wWritePosition += TAG_VALUE_OFFSET + PpsCalcSSec->sPubKey.wLen;
- if(OID_SHARE_SEC_ZERO == PpsCalcSSec->wOIDSharedSecret)
- {
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_EXPORT_SHARE_SEC;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], LEN_EXPORT_SHAR_SEC);
- wWritePosition += TAG_VALUE_OFFSET;
- }
- else
- {
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_OID_SHARE_SEC;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], LEN_OID_SHARE_SEC);
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET], PpsCalcSSec->wOIDSharedSecret);
- wWritePosition += TAG_VALUE_OFFSET + LEN_OID_SHARE_SEC;
- }
- sApduData.wPayloadLength = (uint16_t)(wWritePosition - LEN_APDUHEADER);
-
- sApduData.bCmd = CMD_CALC_SHARED_SEC;
- sApduData.bParam = (uint8_t)PpsCalcSSec->eKeyAgreementType;
-
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
- sApduData.wResponseLength -= LEN_APDUHEADER;
- if(OID_SHARE_SEC_ZERO == PpsCalcSSec->wOIDSharedSecret)
- {
- if(sApduData.wResponseLength > PpsSecret->wLen)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
-
- OCP_MEMCPY(PpsSecret->prgbStream,&sApduData.prgbRespBuffer[LEN_APDUHEADER],sApduData.wResponseLength);
- PpsSecret->wLen = sApduData.wResponseLength;
- }
- }while(FALSE);
-
- FREE_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer);
-
- #undef CALCSSEC_APDU_LEN
- #undef TAG_PUBLIC_KEY
- #undef LEN_EXPORT_SHAR_SEC
- #undef LEN_OID_SHARE_SEC
- #undef OID_SHARE_SEC_ZERO
- #undef TAG_EXPORT_SHARE_SEC
- #undef TAG_OID_SHARE_SEC
- #undef TX_LEN
-
- return i4Status;
- }
- int32_t CmdLib_DeriveKey(const sDeriveKeyOptions_d *PpsDeriveKey,sbBlob_d *PpsKey)
- {
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- uint16_t wWritePosition = LEN_APDUHEADER;
- uint16_t wCalApduLen = 0;
- sApduData_d sApduData = {0};
- do
- {
-
- if((NULL == PpsDeriveKey) || (NULL == PpsDeriveKey->sSeed.prgbStream))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
-
-
-
- #define DERIVEKEY_APDU_LEN 16
-
- #define TAG_DERIVE_KEY 0x03
-
- #define LEN_EXPORT_DERIVE_KEY 0x0000
-
- #define LEN_DERIVE_KEY 0x0002
-
- #define OID_DERIVE_SEC_ZERO 0x0000
-
- #define TAG_EXPORT_DERIVE_KEY 0x07
-
- #define TAG_OID_DERIVE_KEY 0x08
-
- #define TX_LEN (DERIVEKEY_APDU_LEN + 2)
-
-
- wCalApduLen = LEN_APDUHEADER + TX_LEN + (PpsDeriveKey->sSeed.wLen > PpsDeriveKey->wDerivedKeyLen ? PpsDeriveKey->sSeed.wLen : PpsDeriveKey->wDerivedKeyLen);
-
- if(OID_DERIVE_SEC_ZERO == PpsDeriveKey->wOIDDerivedKey)
- {
- if(NULL == PpsKey->prgbStream)
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
- wCalApduLen -= 2;
- }
-
- if((wMaxCommsBuffer) < wCalApduLen)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
-
- INIT_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer,wCalApduLen);
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
- sApduData.wResponseLength = wCalApduLen;
-
- sApduData.prgbAPDUBuffer[LEN_APDUHEADER] = TAG_OID;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET],LEN_SHARED_SECRET_OID);
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET],PpsDeriveKey->wOIDSharedSecret);
- wWritePosition += TAG_VALUE_OFFSET + LEN_PRI_KEY;
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_SEED;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET],PpsDeriveKey->sSeed.wLen);
- OCP_MEMCPY(&sApduData.prgbRespBuffer[TAG_VALUE_OFFSET + wWritePosition],PpsDeriveKey->sSeed.prgbStream,PpsDeriveKey->sSeed.wLen);
- wWritePosition += TAG_VALUE_OFFSET + PpsDeriveKey->sSeed.wLen;
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_DERIVE_KEY;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET],LEN_DERIVE_KEY);
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET],PpsDeriveKey->wDerivedKeyLen);
- wWritePosition += TAG_VALUE_OFFSET + LEN_DERIVE_KEY;
- if(OID_DERIVE_SEC_ZERO == PpsDeriveKey->wOIDDerivedKey)
- {
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_EXPORT_DERIVE_KEY;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], LEN_EXPORT_DERIVE_KEY);
- wWritePosition += TAG_VALUE_OFFSET;
- }
- else
- {
-
- sApduData.prgbAPDUBuffer[wWritePosition] = TAG_OID_DERIVE_KEY;
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_LENGTH_OFFSET], LEN_DERIVE_KEY);
- Utility_SetUint16(&sApduData.prgbAPDUBuffer[wWritePosition + TAG_VALUE_OFFSET], PpsDeriveKey->wOIDDerivedKey);
- wWritePosition += TAG_VALUE_OFFSET + LEN_DERIVE_KEY;
- }
- sApduData.wPayloadLength = (uint16_t)(wWritePosition - LEN_APDUHEADER);
-
- sApduData.bCmd = CMD_DERIVE_KEY;
- sApduData.bParam = (uint8_t)PpsDeriveKey->eKDM;
-
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
- sApduData.wResponseLength -= LEN_APDUHEADER;
- if(OID_DERIVE_SEC_ZERO == PpsDeriveKey->wOIDDerivedKey)
- {
- if(sApduData.wResponseLength > PpsKey->wLen)
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
-
- OCP_MEMCPY(PpsKey->prgbStream,&sApduData.prgbRespBuffer[LEN_APDUHEADER],sApduData.wResponseLength);
- PpsKey->wLen = sApduData.wResponseLength;
- }
- }while(FALSE);
-
- FREE_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer);
-
- #undef DERIVEKEY_APDU_LEN
- #undef TAG_DERIVE_KEY
- #undef LEN_EXPORT_DERIVE_KEY
- #undef LEN_DERIVE_KEY
- #undef OID_DERIVE_SEC_ZERO
- #undef TAG_EXPORT_DERIVE_KEY
- #undef TAG_OID_DERIVE_KEY
- #undef TX_LEN
-
- return i4Status;
- }
- #endif
- #ifdef MODULE_ENABLE_DTLS_MUTUAL_AUTH
- int32_t CmdLib_GetMessage(const sProcMsgData_d *PpsGMsgVector)
- {
- #define STACK_ALLOC
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- sApduData_d sApduData;
- uint8_t bFragSeq ;
- uint16_t wRespLen;
- sbBlob_d sBlobMessage;
- do
- {
- #ifdef STACK_ALLOC
- INIT_STACK_APDUBUFFER(sApduData.prgbAPDUBuffer,MAX_APDU_BUFF_LEN);
- #else
- INIT_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer,MAX_APDU_BUFF_LEN);
- #endif
-
- if((NULL == PpsGMsgVector) || (NULL == PpsGMsgVector->psCallBack) ||
- (NULL == PpsGMsgVector->psCallBack->pfAcceptMessage) || (NULL == PpsGMsgVector->psCallBack->fvParams))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
-
- if((eClientHello != PpsGMsgVector->eParam) && (eClientHelloWithCookie != PpsGMsgVector->eParam) &&
- (eClientCertificate != PpsGMsgVector->eParam) && (eClientKeyExchange != PpsGMsgVector->eParam) &&
- (eCertificateVerify != PpsGMsgVector->eParam) && (eClientFinished != PpsGMsgVector->eParam))
- {
- i4Status = (int32_t)CMD_LIB_INVALID_PARAM;
- break;
- }
-
- if((SESSION_ID_LOWER_VALUE > PpsGMsgVector->wSessionKeyOID) ||
- (SESSION_ID_HIGHER_VALUE < PpsGMsgVector->wSessionKeyOID))
- {
- i4Status = (int32_t)CMD_LIB_INVALID_SESSIONID;
- break;
- }
-
- bFragSeq = (uint8_t)eStart;
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
- while((eFragSeq_d)bFragSeq != eFinal)
- {
-
-
- sApduData.bCmd = CMD_GETMSG;
- sApduData.bParam = (uint8_t)PpsGMsgVector->eParam;
-
- sApduData.wPayloadLength = BYTES_SESSIONID;
-
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD] = (uint8_t)(PpsGMsgVector->wSessionKeyOID >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + 1] = (uint8_t)PpsGMsgVector->wSessionKeyOID;
- sApduData.wResponseLength = MAX_APDU_BUFF_LEN;
- if(((uint8_t)eClientHello == sApduData.bParam) && (NULL != PpsGMsgVector->puMsgParams))
- {
- sApduData.wPayloadLength += LEN_TAG_ENCODING + BYTES_GMT_TIME;
- sApduData.prgbAPDUBuffer[OFFSET_TAG] = TAG_GMTUNIX_TIME;
- sApduData.prgbAPDUBuffer[OFFSET_TAG_LEN] = 0x00;
- sApduData.prgbAPDUBuffer[OFFSET_TAG_LEN + 1] = BYTES_GMT_TIME;
- Utility_SetUint32 (&sApduData.prgbAPDUBuffer[OFFSET_TAG_DATA],PpsGMsgVector->puMsgParams->sMsgParamCH_d.dwUnixTime);
- }
- else if(((uint8_t)eClientCertificate == sApduData.bParam) && (NULL != PpsGMsgVector->puMsgParams))
- {
- sApduData.wPayloadLength += LEN_TAG_ENCODING + BYTES_OID;
- sApduData.prgbAPDUBuffer[OFFSET_TAG] = TAG_CERTIFICATE_OID;
- sApduData.prgbAPDUBuffer[OFFSET_TAG_LEN] = 0x00;
- sApduData.prgbAPDUBuffer[OFFSET_TAG_LEN + 1] = BYTES_OID;
- Utility_SetUint16 (&sApduData.prgbAPDUBuffer[OFFSET_TAG_DATA],PpsGMsgVector->puMsgParams->sMsgParamCert_d.wCertOID);
- }
-
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
-
- sApduData.wResponseLength -= (LEN_APDUHEADER + LEN_TAG_ENCODING);
-
-
- if(TAG_UNPROTECTED != (*(sApduData.prgbRespBuffer + LEN_APDUHEADER) & MASK_HIGHER_NIBBLE))
- {
- i4Status = (int32_t)CMD_LIB_INVALID_TAG;
- break;
- }
-
- bFragSeq = *(sApduData.prgbRespBuffer + LEN_APDUHEADER) & MASK_LOWER_NIBBLE;
-
- wRespLen = Utility_GetUint16(sApduData.prgbRespBuffer + LEN_APDUHEADER + 1);
-
- if(sApduData.wResponseLength != wRespLen)
- {
- i4Status = (int32_t)CMD_LIB_INVALID_TAGLEN;
- break;
- }
-
- sBlobMessage.prgbStream = sApduData.prgbRespBuffer + LEN_APDUHEADER + LEN_TAG_ENCODING;
-
- sBlobMessage.wLen = sApduData.wResponseLength;
-
- i4Status = PpsGMsgVector->psCallBack->pfAcceptMessage(PpsGMsgVector->psCallBack->fvParams, &sBlobMessage);
- if(i4Status != CMD_LIB_OK)
- {
- i4Status = (int32_t)CMD_LIB_ERROR;
- break;
- }
- }
-
-
- }while(FALSE);
-
- #ifndef STACK_ALLOC
- FREE_HEAP_APDUBUFFER(sApduData.prgbAPDUBuffer);
- #else
- #undef STACK_ALLOC
- #endif
- return i4Status;
- }
- int32_t CmdLib_PutMessage(const sProcMsgData_d *PpsPMsgVector)
- {
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- sApduData_d sApduData;
- do
- {
-
- if((NULL == PpsPMsgVector) || (NULL == PpsPMsgVector->psBlobInBuffer) ||
- (NULL == PpsPMsgVector->psBlobInBuffer->prgbStream))
- {
- i4Status = (int32_t)CMD_LIB_NULL_PARAM;
- break;
- }
-
- if(0x00 == PpsPMsgVector->psBlobInBuffer->wLen)
- {
- i4Status = (int32_t)CMD_LIB_LENZERO_ERROR;
- break;
- }
-
- if(((eServerCertificate > PpsPMsgVector->eParam) || (eServerHelloDone < PpsPMsgVector->eParam)) &&
- ((eServerHello != PpsPMsgVector->eParam) && (eHelloVerifyRequest != PpsPMsgVector->eParam) &&
- (eServerFinished != PpsPMsgVector->eParam)))
- {
- i4Status = (int32_t)CMD_LIB_INVALID_PARAM;
- break;
- }
-
- if((SESSION_ID_LOWER_VALUE > PpsPMsgVector->wSessionKeyOID) ||
- (SESSION_ID_HIGHER_VALUE < PpsPMsgVector->wSessionKeyOID))
- {
- i4Status = (int32_t)CMD_LIB_INVALID_SESSIONID;
- break;
- }
-
-
- if(PpsPMsgVector->psBlobInBuffer->wLen > (wMaxCommsBuffer) )
- {
- i4Status = (int32_t)CMD_LIB_INSUFFICIENT_MEMORY;
- break;
- }
-
- sApduData.prgbAPDUBuffer = PpsPMsgVector->psBlobInBuffer->prgbStream;
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
-
-
- sApduData.bCmd = CMD_PUTMSG;
- sApduData.bParam = (uint8_t)PpsPMsgVector->eParam;
-
- sApduData.wPayloadLength = PpsPMsgVector->psBlobInBuffer->wLen - OFFSET_PAYLOAD;
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD] = (uint8_t)(PpsPMsgVector->wSessionKeyOID >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + 1] = (uint8_t)PpsPMsgVector->wSessionKeyOID;
-
- sApduData.prgbAPDUBuffer[OFFSET_TAG] = TAG_UNPROTECTED;
- sApduData.prgbAPDUBuffer[OFFSET_TAG] |= (uint8_t)eFinal;
-
-
- sApduData.prgbAPDUBuffer[OFFSET_TAG_LEN] = (uint8_t)(((PpsPMsgVector->psBlobInBuffer->wLen) - (OFFSET_PAYLOAD + BYTES_SESSIONID + LEN_TAG_ENCODING)) >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_TAG_LEN + 1] = (uint8_t)(PpsPMsgVector->psBlobInBuffer->wLen - (OFFSET_PAYLOAD + BYTES_SESSIONID + LEN_TAG_ENCODING));
- sApduData.wResponseLength = PpsPMsgVector->psBlobInBuffer->wLen;
-
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
- }while(FALSE);
- return i4Status;
- }
- int32_t CmdLib_CloseSession(uint16_t PwSessionRefId)
- {
- #define CLOSE_SESSION_APDU_BUF_LEN 6
- int32_t i4Status = (int32_t)CMD_LIB_ERROR;
- sApduData_d sApduData;
- do
- {
- INIT_STACK_APDUBUFFER(sApduData.prgbAPDUBuffer,CLOSE_SESSION_APDU_BUF_LEN);
-
- if((SESSION_ID_LOWER_VALUE > PwSessionRefId) ||
- (SESSION_ID_HIGHER_VALUE < PwSessionRefId))
- {
- i4Status = (int32_t)CMD_LIB_INVALID_SESSIONID;
- break;
- }
-
- sApduData.prgbRespBuffer = sApduData.prgbAPDUBuffer;
-
-
- sApduData.bCmd = CMD_GETMSG;
- sApduData.bParam = (uint8_t)eCloseSession;
-
- sApduData.wPayloadLength = BYTES_SESSIONID;
-
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD] = (uint8_t)( PwSessionRefId >> BITS_PER_BYTE);
- sApduData.prgbAPDUBuffer[OFFSET_PAYLOAD + 1] = (uint8_t)PwSessionRefId;
- sApduData.wResponseLength = CLOSE_SESSION_APDU_BUF_LEN;
-
- i4Status = TransceiveAPDU(&sApduData,TRUE);
- if(CMD_LIB_OK != i4Status)
- {
- break;
- }
- }while(FALSE);
- #undef CLOSE_SESSION_APDU_BUF_LEN
- return i4Status;
- }
- int32_t CmdLib_Encrypt(sProcCryptoData_d *PpsEncVector)
- {
- return CmdLib_EncDecHelper(PpsEncVector,CMD_ENCDATA,PARAM_ENC_DATA);
- }
- int32_t CmdLib_Decrypt(sProcCryptoData_d *PpsDecVector)
- {
- return CmdLib_EncDecHelper(PpsDecVector,CMD_DECDATA,PARAM_DEC_DATA);
- }
- #endif
|