Lennart Poettering
b2ac928088
This bool controls whether we should interactively ask for a password, which is pretty much what the ask_password-api.c APIs are about. Hence, just make the bool a flag in AskPasswordFlags enum, and use it everywhere. This still catches the flag early in upper levels of the codebase, exactly as before, but if the flag is still present in the lower layers it's also handled there and results in ENOEXEC if seen. This is mostly an excercise in simplifying our ridiculously long function call parameter lists a bit.
109 lines
3.7 KiB
C
109 lines
3.7 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
#pragma once
|
|
|
|
#include <sys/types.h>
|
|
|
|
#include "ask-password-api.h"
|
|
#include "cryptsetup-util.h"
|
|
#include "log.h"
|
|
#include "time-util.h"
|
|
#include "tpm2-util.h"
|
|
|
|
#if HAVE_TPM2
|
|
|
|
int acquire_tpm2_key(
|
|
const char *volume_name,
|
|
const char *device,
|
|
uint32_t hash_pcr_mask,
|
|
uint16_t pcr_bank,
|
|
const struct iovec *pubkey,
|
|
uint32_t pubkey_pcr_mask,
|
|
const char *signature_path,
|
|
const char *pcrlock_path,
|
|
uint16_t primary_alg,
|
|
const char *key_file,
|
|
size_t key_file_size,
|
|
uint64_t key_file_offset,
|
|
const struct iovec *key_data,
|
|
const struct iovec *policy_hash,
|
|
const struct iovec *salt,
|
|
const struct iovec *srk,
|
|
const struct iovec *pcrlock_nv,
|
|
TPM2Flags flags,
|
|
usec_t until,
|
|
const char *askpw_credential,
|
|
AskPasswordFlags askpw_flags,
|
|
struct iovec *ret_decrypted_key);
|
|
|
|
int find_tpm2_auto_data(
|
|
struct crypt_device *cd,
|
|
uint32_t search_pcr_mask,
|
|
int start_token,
|
|
uint32_t *ret_hash_pcr_mask,
|
|
uint16_t *ret_pcr_bank,
|
|
struct iovec *ret_pubkey,
|
|
uint32_t *ret_pubkey_pcr_mask,
|
|
uint16_t *ret_primary_alg,
|
|
struct iovec *ret_blob,
|
|
struct iovec *ret_policy_hash,
|
|
struct iovec *ret_salt,
|
|
struct iovec *ret_srk,
|
|
struct iovec *ret_pcrlock_nv,
|
|
TPM2Flags *ret_flags,
|
|
int *ret_keyslot,
|
|
int *ret_token);
|
|
|
|
#else
|
|
|
|
static inline int acquire_tpm2_key(
|
|
const char *volume_name,
|
|
const char *device,
|
|
uint32_t hash_pcr_mask,
|
|
uint16_t pcr_bank,
|
|
const struct iovec *pubkey,
|
|
uint32_t pubkey_pcr_mask,
|
|
const char *signature_path,
|
|
const char *pcrlock_path,
|
|
uint16_t primary_alg,
|
|
const char *key_file,
|
|
size_t key_file_size,
|
|
uint64_t key_file_offset,
|
|
const struct iovec *key_data,
|
|
const struct iovec *policy_hash,
|
|
const struct iovec *salt,
|
|
const struct iovec *srk,
|
|
const struct iovec *pcrlock_nv,
|
|
TPM2Flags flags,
|
|
usec_t until,
|
|
const char *askpw_credential,
|
|
AskPasswordFlags askpw_flags,
|
|
struct iovec *ret_decrypted_key) {
|
|
|
|
return log_error_errno(SYNTHETIC_ERRNO(EOPNOTSUPP),
|
|
"TPM2 support not available.");
|
|
}
|
|
|
|
static inline int find_tpm2_auto_data(
|
|
struct crypt_device *cd,
|
|
uint32_t search_pcr_mask,
|
|
int start_token,
|
|
uint32_t *ret_hash_pcr_mask,
|
|
uint16_t *ret_pcr_bank,
|
|
struct iovec *ret_pubkey,
|
|
uint32_t *ret_pubkey_pcr_mask,
|
|
uint16_t *ret_primary_alg,
|
|
struct iovec *ret_blob,
|
|
struct iovec *ret_policy_hash,
|
|
struct iovec *ret_salt,
|
|
struct iovec *ret_srk,
|
|
struct iovec *ret_pcrlock_nv,
|
|
TPM2Flags *ret_flags,
|
|
int *ret_keyslot,
|
|
int *ret_token) {
|
|
|
|
return log_error_errno(SYNTHETIC_ERRNO(EOPNOTSUPP),
|
|
"TPM2 support not available.");
|
|
}
|
|
|
|
#endif
|