furi_hal_crypto.h

Go to the documentation of this file.

 
#pragma once
 
#include <stdbool.h>
#include <stdint.h>
#include <stddef.h>
 
#ifdef __cplusplus
extern "C" {
#endif
 
#define FURI_HAL_CRYPTO_ENCLAVE_MASTER_KEY_SLOT (0u)
 
#define FURI_HAL_CRYPTO_ENCLAVE_FACTORY_KEY_SLOT_START (1u)
#define FURI_HAL_CRYPTO_ENCLAVE_FACTORY_KEY_SLOT_END   (10u)
 
#define FURI_HAL_CRYPTO_ENCLAVE_UNIQUE_KEY_SLOT (11u)
 
#define FURI_HAL_CRYPTO_ENCLAVE_USER_KEY_SLOT_START (12u)
#define FURI_HAL_CRYPTO_ENCLAVE_USER_KEY_SLOT_END   (100u)
 
#define FURI_HAL_CRYPTO_ADVANCED_AVAIL 1
 
typedef enum {
    FuriHalCryptoKeyTypeMaster, 
    FuriHalCryptoKeyTypeSimple, 
    FuriHalCryptoKeyTypeEncrypted, 
} FuriHalCryptoKeyType;
 
typedef enum {
    FuriHalCryptoKeySize128,
    FuriHalCryptoKeySize256,
} FuriHalCryptoKeySize;
 
typedef struct {
    FuriHalCryptoKeyType type;
    FuriHalCryptoKeySize size;
    uint8_t* data;
} FuriHalCryptoKey;
 
typedef enum {
    FuriHalCryptoGCMStateOk, 
    FuriHalCryptoGCMStateError, 
    FuriHalCryptoGCMStateAuthFailure, 
} FuriHalCryptoGCMState;
 
void furi_hal_crypto_init(void);
 
bool furi_hal_crypto_enclave_verify(uint8_t* keys_nb, uint8_t* valid_keys_nb);
 
bool furi_hal_crypto_enclave_ensure_key(uint8_t key_slot);
 
bool furi_hal_crypto_enclave_store_key(FuriHalCryptoKey* key, uint8_t* slot);
 
bool furi_hal_crypto_enclave_load_key(uint8_t slot, const uint8_t* iv);
 
bool furi_hal_crypto_enclave_unload_key(uint8_t slot);
 
bool furi_hal_crypto_load_key(const uint8_t* key, const uint8_t* iv);
 
bool furi_hal_crypto_unload_key(void);
 
bool furi_hal_crypto_encrypt(const uint8_t* input, uint8_t* output, size_t size);
 
bool furi_hal_crypto_decrypt(const uint8_t* input, uint8_t* output, size_t size);
 
bool furi_hal_crypto_ctr(
    const uint8_t* key,
    const uint8_t* iv,
    const uint8_t* input,
    uint8_t* output,
    size_t length);
 
bool furi_hal_crypto_gcm(
    const uint8_t* key,
    const uint8_t* iv,
    const uint8_t* aad,
    size_t aad_length,
    const uint8_t* input,
    uint8_t* output,
    size_t length,
    uint8_t* tag,
    bool decrypt);
 
FuriHalCryptoGCMState furi_hal_crypto_gcm_encrypt_and_tag(
    const uint8_t* key,
    const uint8_t* iv,
    const uint8_t* aad,
    size_t aad_length,
    const uint8_t* input,
    uint8_t* output,
    size_t length,
    uint8_t* tag);
 
FuriHalCryptoGCMState furi_hal_crypto_gcm_decrypt_and_verify(
    const uint8_t* key,
    const uint8_t* iv,
    const uint8_t* aad,
    size_t aad_length,
    const uint8_t* input,
    uint8_t* output,
    size_t length,
    const uint8_t* tag);
 
#ifdef __cplusplus
}
#endif