1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
// Copyright 2020 The ChromiumOS Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef SYSTEM_API_CONSTANTS_PKCS11_CUSTOM_ATTRIBUTES_H_
#define SYSTEM_API_CONSTANTS_PKCS11_CUSTOM_ATTRIBUTES_H_
#include <stdint.h>
namespace pkcs11_custom_attributes {
using CkAttributeType = uint32_t;
// PKCS #11 v2.20 section A Manifest constants page 377.
constexpr CkAttributeType kCkaVendorDefined = 0x80000000;
// Attributes for storing metadata with keys.
// 0x43724f53 has been chosen as the ASCII representation of "CrOS" to be
// something unlikely to collide with other components defining custom
// attributes (such as NSS).
constexpr CkAttributeType kCkaChromeOsFirstAttribute =
kCkaVendorDefined | 0x43724f53;
// This attribute encodes in which contexts the key can be used.
// The type of the value of this attribute is a byte array (array of CK_BYTEs)
// representing a serialized KeyPermissions proto message.
constexpr CkAttributeType kCkaChromeOsKeyPermissions =
kCkaChromeOsFirstAttribute;
// This attribute stores the profile ID for keys added through the built-in
// certificate provisioning feature.
// The type of the value of this attribute is a byte array (array of CK_BYTEs)
// that identifies a client certificate profile. This should be treated as
// opaque data. Implementation detail: chrome will dump the std::string into
// this, without appending a null terminator.
constexpr CkAttributeType kCkaChromeOsBuiltinProvisioningProfileId =
kCkaChromeOsFirstAttribute + 1;
// This attribute contains a boolean that indicates whether the object was
// created as a part of migration from NSS public slot into Chaps
// software-backed storage (see b/264387231). Usually should either be unset or
// contain CK_TRUE.
constexpr CkAttributeType kCkaChromeOsMigratedFromNss =
kCkaChromeOsFirstAttribute + 2;
// This attribute contains a custom string that can be set by
// extensions. This allows extensions to group/find keys based
// on some external logic.
constexpr CkAttributeType kCkaChromeOsPlatformKeysTag =
kCkaChromeOsFirstAttribute + 3;
} // namespace pkcs11_custom_attributes
#endif // SYSTEM_API_CONSTANTS_PKCS11_CUSTOM_ATTRIBUTES_H_
|
