| # |
| # Copyright 2019,2020 NXP |
| # SPDX-License-Identifier: Apache-2.0 |
| # |
| # |
| |
| """License text""" |
| |
| import sys |
| import click |
| import func_timeout |
| from sss.genkey import Generate |
| from sss.const import ECC_CURVE_TYPE |
| from sss.policy import Policy |
| import sss.sss_api as apis |
| from .cli import generate, pass_context, session_open, session_close, \ |
| log_traceback, TIME_OUT, TIME_OUT_RSA |
| |
| RSA_N_BITS = ["1024", "2048", "3072", "4096"] |
| |
| |
| @generate.command('ecc', short_help='Generate ECC Key') |
| @pass_context |
| @click.argument('keyid', type=str, metavar='keyid') |
| @click.argument('curvetype', type=click.Choice(list(ECC_CURVE_TYPE.keys()))) |
| @click.option('--policy_name', type=str, default='', help="File name of the policy to be applied") |
| def ecc(cli_ctx, keyid, curvetype, policy_name): |
| """ Generate ECC Key \n |
| |
| keyid = 32bit Key ID. Should be in hex format. Example: 20E8A001 \n |
| |
| curvetype = ECC Curve type. can be one of "NIST_P192, NIST_P224, NIST_P256, |
| NIST_P384, NIST_P521, Brainpool160, Brainpool192, Brainpool224, Brainpool256, |
| Brainpool320, Brainpool384, Brainpool512, Secp160k1, Secp192k1, Secp224k1, Secp256k1, |
| ED_25519, MONT_DH_25519, MONT_DH_448" |
| |
| """ |
| try: |
| keyid = int(keyid, 16) |
| if policy_name != '': |
| policy_obj = Policy() |
| policy_params = policy_obj.get_object_policy(policy_name) |
| policy = policy_obj.convert_obj_policy_to_ctype(policy_params) |
| else: |
| policy = None |
| cli_ctx.log("Generating ECC Key Pair at KeyID = 0x%08X, curvetype=%s" % |
| (keyid, curvetype)) |
| session_open(cli_ctx) |
| gen_obj = Generate(cli_ctx.session) |
| status = func_timeout.func_timeout(TIME_OUT, gen_obj.gen_ecc_pair, |
| (keyid, ECC_CURVE_TYPE[curvetype], policy)) |
| except func_timeout.FunctionTimedOut as timeout_exc: |
| log_traceback(cli_ctx, timeout_exc.getMsg()) |
| status = apis.kStatus_SSS_Fail |
| except Exception as exc: # pylint: disable=broad-except |
| log_traceback(cli_ctx, exc) |
| status = apis.kStatus_SSS_Fail |
| session_status = session_close(cli_ctx) |
| if status == apis.kStatus_SSS_Success and session_status == apis.kStatus_SSS_Success: |
| cli_ctx.log("Generated ECC Key Pair at KeyID 0x%08X " % (keyid,)) |
| ret_value = 0 |
| else: |
| cli_ctx.log("ERROR! Could not generate ECC Key Pair at KeyID 0x%08X " % (keyid,)) |
| ret_value = 1 |
| sys.exit(ret_value) |
| |
| |
| @generate.command('rsa', short_help='Generate RSA Key') |
| @pass_context |
| @click.argument('keyid', type=str, metavar='keyid') |
| @click.argument('bits', type=click.Choice(RSA_N_BITS)) |
| @click.option('--policy_name', type=str, default='', help="File name of the policy to be applied") |
| def rsa(cli_ctx, keyid, bits, policy_name): |
| """ Generate RSA Key \n |
| keyid = 32bit Key ID. Should be in hex format. Example: 20E8A001 \n |
| |
| bits = Number of bits. can be one of "1024, 2048, 3072, 4096" |
| |
| """ |
| try: |
| keyid = int(keyid, 16) |
| if policy_name != '': |
| policy_obj = Policy() |
| policy_params = policy_obj.get_object_policy(policy_name) |
| policy = policy_obj.convert_obj_policy_to_ctype(policy_params) |
| else: |
| policy = None |
| cli_ctx.log("Generating RSA Key Pair at KeyID = 0x%08X, bits=%s" % |
| (keyid, bits)) |
| session_open(cli_ctx) |
| gen_obj = Generate(cli_ctx.session) |
| status = func_timeout.func_timeout(TIME_OUT_RSA, gen_obj.gen_rsa_pair, |
| (keyid, int(bits), policy)) |
| except func_timeout.FunctionTimedOut as timeout_exc: |
| log_traceback(cli_ctx, timeout_exc.getMsg()) |
| status = apis.kStatus_SSS_Fail |
| except Exception as exc: # pylint: disable=broad-except |
| log_traceback(cli_ctx, exc) |
| status = apis.kStatus_SSS_Fail |
| session_status = session_close(cli_ctx) |
| if status == apis.kStatus_SSS_Success and session_status == apis.kStatus_SSS_Success: |
| cli_ctx.log("Generated RSA Key Pair at KeyID = 0x%08X " % (keyid,)) |
| ret_value = 0 |
| else: |
| cli_ctx.log("ERROR! Could not generate RSA Key Pair at KeyID 0x%08X " % (keyid,)) |
| ret_value = 1 |
| sys.exit(ret_value) |
| |
| |
| @generate.command('pub', short_help='Generate ECC Public Key to file') |
| @pass_context |
| @click.argument('keyid', type=str, metavar='keyid') |
| @click.argument('curvetype', type=click.Choice(list(ECC_CURVE_TYPE.keys()))) |
| @click.argument('filename', type=click.STRING) |
| @click.option('--format', default='', help="Output file format. TEXT can be \"DER\" or \"PEM\"") |
| @click.option('--policy_name', type=str, default='', help="File name of the policy to be applied") |
| def pub(cli_ctx, keyid, curvetype, filename, format, policy_name): |
| """ |
| Generate ECC Public Key to file \n |
| |
| keyid = 32bit Key ID. Should be in hex format. Example: 20E8A001 \n |
| |
| curvetype = ECC Curve type. can be one of "NIST_P192, NIST_P224, NIST_P256, |
| NIST_P384, NIST_P521, Brainpool160, Brainpool192, Brainpool224, Brainpool256, |
| Brainpool320, Brainpool384, Brainpool512, Secp160k1, Secp192k1, Secp224k1, Secp256k1, |
| ED_25519, MONT_DH_25519, MONT_DH_448 \n |
| |
| filename = File name to store public key. Data can be in PEM or DER format |
| based on file extension. By default filename with extension .pem in PEM format |
| and others in DER format. \n |
| """ |
| try: |
| keyid = int(keyid, 16) |
| if policy_name != '': |
| policy_obj = Policy() |
| policy_params = policy_obj.get_object_policy(policy_name) |
| policy = policy_obj.convert_obj_policy_to_ctype(policy_params) |
| else: |
| policy = None |
| session_open(cli_ctx) |
| gen_obj = Generate(cli_ctx.session) |
| status = func_timeout.func_timeout(TIME_OUT, gen_obj.gen_ecc_public, |
| (keyid, ECC_CURVE_TYPE[curvetype], |
| filename, policy, format)) |
| except func_timeout.FunctionTimedOut as timeout_exc: |
| log_traceback(cli_ctx, timeout_exc.getMsg()) |
| status = apis.kStatus_SSS_Fail |
| except Exception as exc: # pylint: disable=broad-except |
| log_traceback(cli_ctx, exc) |
| status = apis.kStatus_SSS_Fail |
| session_status = session_close(cli_ctx) |
| if status == apis.kStatus_SSS_Success and session_status == apis.kStatus_SSS_Success: |
| cli_ctx.log("Generated ECC Public Key at KeyID = 0x%08X " % (keyid,)) |
| ret_value = 0 |
| else: |
| cli_ctx.log("ERROR! Could not generate ECC Public Key at KeyID 0x%08X " % (keyid,)) |
| ret_value = 1 |
| sys.exit(ret_value) |
