You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
71 lines
2.6 KiB
71 lines
2.6 KiB
// |
|
// Copyright (C) 2015 The Android Open Source Project |
|
// |
|
// Licensed under the Apache License, Version 2.0 (the "License"); |
|
// you may not use this file except in compliance with the License. |
|
// You may obtain a copy of the License at |
|
// |
|
// http://www.apache.org/licenses/LICENSE-2.0 |
|
// |
|
// Unless required by applicable law or agreed to in writing, software |
|
// distributed under the License is distributed on an "AS IS" BASIS, |
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|
// See the License for the specific language governing permissions and |
|
// limitations under the License. |
|
// |
|
|
|
#ifndef TRUNKS_SESSION_MANAGER_IMPL_H_ |
|
#define TRUNKS_SESSION_MANAGER_IMPL_H_ |
|
|
|
#include "trunks/session_manager.h" |
|
|
|
#include <string> |
|
|
|
#include <gtest/gtest_prod.h> |
|
|
|
#include "trunks/tpm_generated.h" |
|
#include "trunks/trunks_factory.h" |
|
|
|
namespace trunks { |
|
|
|
// This class is used to keep track of a TPM session. Each instance of this |
|
// class is used to account for one instance of a TPM session. Currently |
|
// this class is used by AuthorizationSession instances to keep track of TPM |
|
// sessions. |
|
class TRUNKS_EXPORT SessionManagerImpl : public SessionManager { |
|
public: |
|
explicit SessionManagerImpl(const TrunksFactory& factory); |
|
~SessionManagerImpl() override; |
|
|
|
TPM_HANDLE GetSessionHandle() const override { return session_handle_; } |
|
void CloseSession() override; |
|
TPM_RC StartSession(TPM_SE session_type, |
|
TPMI_DH_ENTITY bind_entity, |
|
const std::string& bind_authorization_value, |
|
bool enable_encryption, |
|
HmacAuthorizationDelegate* delegate) override; |
|
|
|
private: |
|
// This function is used to encrypt a plaintext salt |salt|, using RSA |
|
// public encrypt with the SaltingKey PKCS1_OAEP padding. It follows the |
|
// specification defined in TPM2.0 Part 1 Architecture, Appendix B.10.2. |
|
// The encrypted salt is stored in the out parameter |encrypted_salt|. |
|
TPM_RC EncryptSalt(const std::string& salt, std::string* encrypted_salt); |
|
|
|
// This factory is only set in the constructor and is used to instantiate |
|
// The TPM class to forward commands to the TPM chip. |
|
const TrunksFactory& factory_; |
|
// This handle keeps track of the TPM session. It is issued by the TPM, |
|
// and is only modified when a new TPM session is started using |
|
// StartBoundSession or StartUnboundSession. We use this to keep track of |
|
// the session handle, so that we can clean it up when this class is |
|
// destroyed. |
|
TPM_HANDLE session_handle_; |
|
|
|
friend class SessionManagerTest; |
|
DISALLOW_COPY_AND_ASSIGN(SessionManagerImpl); |
|
}; |
|
|
|
} // namespace trunks |
|
|
|
#endif // TRUNKS_SESSION_MANAGER_IMPL_H_
|
|
|