Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow entropy to be provided to some operations

Browse Source 
generateKey and begin can now optionally take an array of bytes to add
to the rng entropy of the device before the operation. If entropy is
specified and the device does not support add_rng_entropy or the call
fails then that device will not be used, leading to fallback or error
depending on the situation.

Change-Id: Id7d33e3cc959594dfa5483d002993ba35c1fb134
This commit is contained in:
Chad Brubaker
2015-03-27 14:28:35 -07:00
parent 274a4ee344
commit dae79e5408
3 changed files with 37 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
keystore/java/android/security/KeyStore.java
View File

@@ -389,19 +389,19 @@ public class KeyStore {
}
}
public int generateKey(String alias, KeymasterArguments args, int uid, int flags,
KeyCharacteristics outCharacteristics) {
public int generateKey(String alias, KeymasterArguments args, byte[] entropy, int uid,
int flags, KeyCharacteristics outCharacteristics) {
try {
return mBinder.generateKey(alias, args, uid, flags, outCharacteristics);
return mBinder.generateKey(alias, args, entropy, uid, flags, outCharacteristics);
} catch (RemoteException e) {
Log.w(TAG, "Cannot connect to keystore", e);
return SYSTEM_ERROR;
}
}
public int generateKey(String alias, KeymasterArguments args, int flags,
public int generateKey(String alias, KeymasterArguments args, byte[] entropy, int flags,
KeyCharacteristics outCharacteristics) {
return generateKey(alias, args, UID_SELF, flags, outCharacteristics);
return generateKey(alias, args, entropy, UID_SELF, flags, outCharacteristics);
}
public int getKeyCharacteristics(String alias, KeymasterBlob clientId, KeymasterBlob appId,
@@ -441,9 +441,9 @@ public class KeyStore {
}
public OperationResult begin(String alias, int purpose, boolean pruneable,
KeymasterArguments args, KeymasterArguments outArgs) {
KeymasterArguments args, byte[] entropy, KeymasterArguments outArgs) {
try {
return mBinder.begin(getToken(), alias, purpose, pruneable, args, outArgs);
return mBinder.begin(getToken(), alias, purpose, pruneable, args, entropy, outArgs);
} catch (RemoteException e) {
Log.w(TAG, "Cannot connect to keystore", e);
return null;