diff options
| author | Shawn Willden <swillden@google.com> | 2015-07-08 06:04:52 -0600 |
|---|---|---|
| committer | Shawn Willden <swillden@google.com> | 2015-07-15 10:07:59 -0600 |
| commit | a3f0ab55a73d4c21de9f34ec21f27a2609b568fd (patch) | |
| tree | 08b2fa42295d1888a0e33a664bd46b6c65707349 /include/hardware/keymaster_defs.h | |
| parent | a36ffbe0bbccbc2173589da1941dd39ee01a8004 (diff) | |
| download | hardware_libhardware-a3f0ab55a73d4c21de9f34ec21f27a2609b568fd.zip hardware_libhardware-a3f0ab55a73d4c21de9f34ec21f27a2609b568fd.tar.gz hardware_libhardware-a3f0ab55a73d4c21de9f34ec21f27a2609b568fd.tar.bz2 | |
Add KM_TAG_MIN_MAC_LENGTH.
This allows the binding of minimum length for MACs or tags to HMAC keys
and AEAD symmetric keys. Later attempts to use these keys with a
shorter MAC or tag specification (provided to begin() with
KM_TAG_MAC_LENGTH) will fail with KM_ERROR_INVALID_MAC_LENGTH.
Bug: 22337277
Change-Id: Ic5292ce01bdd6ecde25aad115e4b407aadc85f23
Diffstat (limited to 'include/hardware/keymaster_defs.h')
| -rw-r--r-- | include/hardware/keymaster_defs.h | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/include/hardware/keymaster_defs.h b/include/hardware/keymaster_defs.h index 32374f1..b19086e 100644 --- a/include/hardware/keymaster_defs.h +++ b/include/hardware/keymaster_defs.h @@ -59,6 +59,8 @@ typedef enum { KM_TAG_DIGEST = KM_ENUM_REP | 5, /* keymaster_digest_t. */ KM_TAG_PADDING = KM_ENUM_REP | 6, /* keymaster_padding_t. */ KM_TAG_CALLER_NONCE = KM_BOOL | 7, /* Allow caller to specify nonce or IV. */ + KM_TAG_MIN_MAC_LENGTH = KM_UINT | 8, /* Minimum length of MAC or AEAD authentication tag in + * bits. */ /* Algorithm-specific. */ KM_TAG_RSA_PUBLIC_EXPONENT = KM_ULONG | 200, @@ -336,6 +338,9 @@ typedef enum { KM_ERROR_KEY_RATE_LIMIT_EXCEEDED = -54, KM_ERROR_CALLER_NONCE_PROHIBITED = -55, KM_ERROR_KEY_MAX_OPS_EXCEEDED = -56, + KM_ERROR_INVALID_MAC_LENGTH = -57, + KM_ERROR_MISSING_MIN_MAC_LENGTH = -58, + KM_ERROR_UNSUPPORTED_MIN_MAC_LENGTH = -59, KM_ERROR_UNIMPLEMENTED = -100, KM_ERROR_VERSION_MISMATCH = -101, |