blob: 39e3eb363f5017b89dcc7f3722be828629661b76 [file] [log] [blame]
// Copyright 2018 The Chromium OS Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <limits>
#include <memory>
#include <string>
#include <utility>
#include <brillo/brillo_export.h>
#include "libtpmcrypto/tpm.h"
#include "libtpmcrypto/tpm_crypto.h"
namespace tpmcrypto {
class BRILLO_EXPORT TpmCryptoImpl : public TpmCrypto {
using RandBytesFn = std::function<int(uint8_t*, int)>;
explicit TpmCryptoImpl(std::unique_ptr<Tpm> tpm);
TpmCryptoImpl(std::unique_ptr<Tpm> tpm, RandBytesFn rand_bytes_fn);
TpmCryptoImpl(const TpmCryptoImpl&) = delete;
TpmCryptoImpl& operator=(const TpmCryptoImpl&) = delete;
~TpmCryptoImpl() override;
bool Encrypt(const brillo::SecureBlob& data,
std::string* encrypted_data) override WARN_UNUSED_RESULT;
bool Decrypt(const std::string& encrypted_data,
brillo::SecureBlob* data) override WARN_UNUSED_RESULT;
// Creates a randomly generated aes key and seals it to the TPM's PCR0.
bool CreateSealedKey(brillo::SecureBlob* aes_key,
brillo::SecureBlob* sealed_key) const WARN_UNUSED_RESULT;
// Encrypts the given data using the aes_key. Sealed key is necessary to
// wrap into the returned data to allow for decryption.
bool EncryptData(const brillo::SecureBlob& data,
const brillo::SecureBlob& aes_key,
const brillo::SecureBlob& sealed_key,
std::string* encrypted_data) const WARN_UNUSED_RESULT;
// Gets random bytes and returns them in a SecureBlob.
bool GetRandomDataSecureBlob(size_t length, brillo::SecureBlob* data) const
// The TPM implementation
std::unique_ptr<Tpm> tpm_;
RandBytesFn rand_bytes_fn_;
} // namespace tpmcrypto