xref: /optee_os/ta/pkcs11/src/pkcs11_attributes.c (revision db28c5425866ea52ba60ce0afd7dc0a007375bc7)
1 // SPDX-License-Identifier: BSD-2-Clause
2 /*
3  * Copyright (c) 2017-2020, Linaro Limited
4  */
5 
6 #include <assert.h>
7 #include <inttypes.h>
8 #include <pkcs11_ta.h>
9 #include <stdlib.h>
10 #include <string_ext.h>
11 #include <tee_internal_api_extensions.h>
12 #include <tee_internal_api.h>
13 #include <trace.h>
14 #include <util.h>
15 
16 #include "attributes.h"
17 #include "handle.h"
18 #include "pkcs11_attributes.h"
19 #include "pkcs11_helpers.h"
20 #include "pkcs11_token.h"
21 #include "sanitize_object.h"
22 #include "serializer.h"
23 #include "token_capabilities.h"
24 
25 static uint32_t pkcs11_func2ckfm(enum processing_func function)
26 {
27 	switch (function) {
28 	case PKCS11_FUNCTION_DIGEST:
29 		return PKCS11_CKFM_DIGEST;
30 	case PKCS11_FUNCTION_GENERATE:
31 		return PKCS11_CKFM_GENERATE;
32 	case PKCS11_FUNCTION_GENERATE_PAIR:
33 		return PKCS11_CKFM_GENERATE_KEY_PAIR;
34 	case PKCS11_FUNCTION_DERIVE:
35 		return PKCS11_CKFM_DERIVE;
36 	case PKCS11_FUNCTION_WRAP:
37 		return PKCS11_CKFM_WRAP;
38 	case PKCS11_FUNCTION_UNWRAP:
39 		return PKCS11_CKFM_UNWRAP;
40 	case PKCS11_FUNCTION_ENCRYPT:
41 		return PKCS11_CKFM_ENCRYPT;
42 	case PKCS11_FUNCTION_DECRYPT:
43 		return PKCS11_CKFM_DECRYPT;
44 	case PKCS11_FUNCTION_SIGN:
45 		return PKCS11_CKFM_SIGN;
46 	case PKCS11_FUNCTION_VERIFY:
47 		return PKCS11_CKFM_VERIFY;
48 	case PKCS11_FUNCTION_SIGN_RECOVER:
49 		return PKCS11_CKFM_SIGN_RECOVER;
50 	case PKCS11_FUNCTION_VERIFY_RECOVER:
51 		return PKCS11_CKFM_VERIFY_RECOVER;
52 	default:
53 		return 0;
54 	}
55 }
56 
57 enum pkcs11_rc
58 check_mechanism_against_processing(struct pkcs11_session *session,
59 				   enum pkcs11_mechanism_id mechanism_type,
60 				   enum processing_func function,
61 				   enum processing_step step)
62 {
63 	bool allowed = false;
64 
65 	switch (step) {
66 	case PKCS11_FUNC_STEP_INIT:
67 		switch (function) {
68 		case PKCS11_FUNCTION_IMPORT:
69 		case PKCS11_FUNCTION_COPY:
70 		case PKCS11_FUNCTION_MODIFY:
71 		case PKCS11_FUNCTION_DESTROY:
72 			return PKCS11_CKR_OK;
73 		default:
74 			break;
75 		}
76 		/*
77 		 * Check that the returned PKCS11_CKFM_* flag from
78 		 * pkcs11_func2ckfm() is among the ones from
79 		 * mechanism_supported_flags().
80 		 */
81 		allowed = mechanism_supported_flags(mechanism_type) &
82 			  pkcs11_func2ckfm(function);
83 		break;
84 
85 	case PKCS11_FUNC_STEP_ONESHOT:
86 		if (session->processing->always_authen &&
87 		    !session->processing->relogged)
88 			return PKCS11_CKR_USER_NOT_LOGGED_IN;
89 
90 		if (session->processing->updated) {
91 			EMSG("Cannot perform one-shot on updated processing");
92 			return PKCS11_CKR_OPERATION_ACTIVE;
93 		}
94 
95 		allowed = true;
96 		break;
97 
98 	case PKCS11_FUNC_STEP_UPDATE:
99 		if (session->processing->always_authen &&
100 		    !session->processing->relogged)
101 			return PKCS11_CKR_USER_NOT_LOGGED_IN;
102 
103 		allowed = !mechanism_is_one_shot_only(mechanism_type);
104 		break;
105 
106 	case PKCS11_FUNC_STEP_UPDATE_KEY:
107 		assert(function == PKCS11_FUNCTION_DIGEST);
108 
109 		if (session->processing->always_authen &&
110 		    !session->processing->relogged)
111 			return PKCS11_CKR_USER_NOT_LOGGED_IN;
112 
113 		allowed = true;
114 		break;
115 
116 	case PKCS11_FUNC_STEP_FINAL:
117 		if (session->processing->always_authen &&
118 		    !session->processing->relogged)
119 			return PKCS11_CKR_USER_NOT_LOGGED_IN;
120 
121 		return PKCS11_CKR_OK;
122 
123 	default:
124 		TEE_Panic(step);
125 		break;
126 	}
127 
128 	if (!allowed) {
129 		EMSG("Processing %#x/%s not permitted (%u/%u)",
130 		     (unsigned int)mechanism_type, id2str_proc(mechanism_type),
131 		     function, step);
132 		return PKCS11_CKR_MECHANISM_INVALID;
133 	}
134 
135 	return PKCS11_CKR_OK;
136 }
137 
138 /*
139  * Object default boolean attributes as per PKCS#11
140  */
141 static uint8_t *pkcs11_object_default_boolprop(uint32_t attribute)
142 {
143 	static const uint8_t bool_true = 1;
144 	static const uint8_t bool_false;
145 
146 	switch (attribute) {
147 	/* As per PKCS#11 default value */
148 	case PKCS11_CKA_MODIFIABLE:
149 	case PKCS11_CKA_COPYABLE:
150 	case PKCS11_CKA_DESTROYABLE:
151 		return (uint8_t *)&bool_true;
152 	case PKCS11_CKA_TOKEN:
153 	case PKCS11_CKA_PRIVATE:
154 	case PKCS11_CKA_WRAP_WITH_TRUSTED:
155 	case PKCS11_CKA_ALWAYS_AUTHENTICATE:
156 	case PKCS11_CKA_SENSITIVE:
157 		return (uint8_t *)&bool_false;
158 	/* Token specific default value */
159 	case PKCS11_CKA_SIGN:
160 	case PKCS11_CKA_VERIFY:
161 	case PKCS11_CKA_DERIVE:
162 	case PKCS11_CKA_ENCRYPT:
163 	case PKCS11_CKA_DECRYPT:
164 	case PKCS11_CKA_SIGN_RECOVER:
165 	case PKCS11_CKA_VERIFY_RECOVER:
166 	case PKCS11_CKA_WRAP:
167 	case PKCS11_CKA_UNWRAP:
168 	case PKCS11_CKA_EXTRACTABLE:
169 	case PKCS11_CKA_TRUSTED:
170 		return (uint8_t *)&bool_false;
171 	default:
172 		DMSG("No default for boolprop attribute %#"PRIx32, attribute);
173 		return NULL;
174 	}
175 }
176 
177 /*
178  * Object expects several boolean attributes to be set to a default value
179  * or to a validate client configuration value. This function append the input
180  * attribute (id/size/value) in the serialized object.
181  */
182 static enum pkcs11_rc pkcs11_import_object_boolprop(struct obj_attrs **out,
183 						    struct obj_attrs *templ,
184 						    uint32_t attribute)
185 {
186 	enum pkcs11_rc rc = PKCS11_CKR_OK;
187 	uint8_t bbool = 0;
188 	uint32_t size = sizeof(uint8_t);
189 	void *attr = NULL;
190 
191 	rc = get_attribute(templ, attribute, &bbool, &size);
192 	if (rc) {
193 		if (rc != PKCS11_RV_NOT_FOUND)
194 			return rc;
195 		attr = pkcs11_object_default_boolprop(attribute);
196 		if (!attr)
197 			return PKCS11_CKR_TEMPLATE_INCOMPLETE;
198 	} else {
199 		attr = &bbool;
200 	}
201 
202 	/* Boolean attributes are 1byte in the ABI, no alignment issue */
203 	return add_attribute(out, attribute, attr, sizeof(uint8_t));
204 }
205 
206 static enum pkcs11_rc set_mandatory_boolprops(struct obj_attrs **out,
207 					      struct obj_attrs *temp,
208 					      uint32_t const *bp,
209 					      size_t bp_count)
210 {
211 	enum pkcs11_rc rc = PKCS11_CKR_OK;
212 	size_t n = 0;
213 
214 	for (n = 0; n < bp_count; n++) {
215 		rc = pkcs11_import_object_boolprop(out, temp, bp[n]);
216 		if (rc)
217 			return rc;
218 	}
219 
220 	return rc;
221 }
222 
223 static enum pkcs11_rc set_mandatory_attributes(struct obj_attrs **out,
224 					       struct obj_attrs *temp,
225 					       uint32_t const *attrs,
226 					       size_t attrs_count)
227 {
228 	enum pkcs11_rc rc = PKCS11_CKR_OK;
229 	size_t n = 0;
230 
231 	for (n = 0; n < attrs_count; n++) {
232 		uint32_t size = 0;
233 		void *value = NULL;
234 
235 		if (get_attribute_ptr(temp, attrs[n], &value, &size))
236 			return PKCS11_CKR_TEMPLATE_INCOMPLETE;
237 
238 		rc = add_attribute(out, attrs[n], value, size);
239 		if (rc)
240 			return rc;
241 	}
242 
243 	return rc;
244 }
245 
246 static enum pkcs11_rc get_default_value(enum pkcs11_attr_id id, void **value,
247 					uint32_t *size)
248 {
249 	/* should have been taken care of already */
250 	assert(!pkcs11_attr_is_boolean(id));
251 
252 	/* All other attributes have an empty default value */
253 	*value = NULL;
254 	*size = 0;
255 	return PKCS11_CKR_OK;
256 }
257 
258 static enum pkcs11_rc set_optional_attributes_with_def(struct obj_attrs **out,
259 						       struct obj_attrs *temp,
260 						       uint32_t const *attrs,
261 						       size_t attrs_count,
262 						       bool default_to_null)
263 {
264 	enum pkcs11_rc rc = PKCS11_CKR_OK;
265 	size_t n = 0;
266 
267 	for (n = 0; n < attrs_count; n++) {
268 		uint32_t size = 0;
269 		void *value = NULL;
270 
271 		rc = get_attribute_ptr(temp, attrs[n], &value, &size);
272 		if (rc == PKCS11_RV_NOT_FOUND) {
273 			if (default_to_null) {
274 				rc = get_default_value(attrs[n], &value, &size);
275 			} else {
276 				rc = PKCS11_CKR_OK;
277 				continue;
278 			}
279 		}
280 		if (rc)
281 			return rc;
282 
283 		rc = add_attribute(out, attrs[n], value, size);
284 		if (rc)
285 			return rc;
286 	}
287 
288 	return rc;
289 }
290 
291 static enum pkcs11_rc set_attributes_opt_or_null(struct obj_attrs **out,
292 						 struct obj_attrs *temp,
293 						 uint32_t const *attrs,
294 						 size_t attrs_count)
295 {
296 	return set_optional_attributes_with_def(out, temp, attrs, attrs_count,
297 						true /* defaults to empty */);
298 }
299 
300 static enum pkcs11_rc set_optional_attributes(struct obj_attrs **out,
301 					      struct obj_attrs *temp,
302 					      uint32_t const *attrs,
303 					      size_t attrs_count)
304 {
305 	return set_optional_attributes_with_def(out, temp, attrs, attrs_count,
306 						false /* no default value */);
307 }
308 
309 /*
310  * Below are listed the mandated or optional expected attributes for
311  * PKCS#11 storage objects.
312  *
313  * Note: boolprops (mandated boolean attributes) PKCS11_CKA_ALWAYS_SENSITIVE,
314  * and PKCS11_CKA_NEVER_EXTRACTABLE are set by the token, not provided
315  * in the client template.
316  */
317 
318 /* PKCS#11 specification for any object (session/token) of the storage */
319 static const uint32_t any_object_boolprops[] = {
320 	PKCS11_CKA_TOKEN, PKCS11_CKA_PRIVATE,
321 	PKCS11_CKA_MODIFIABLE, PKCS11_CKA_COPYABLE, PKCS11_CKA_DESTROYABLE,
322 };
323 
324 static const uint32_t any_object_opt_or_null[] = {
325 	PKCS11_CKA_LABEL,
326 };
327 
328 /* PKCS#11 specification for raw data object (+any_object_xxx) */
329 const uint32_t raw_data_opt_or_null[] = {
330 	PKCS11_CKA_OBJECT_ID, PKCS11_CKA_APPLICATION, PKCS11_CKA_VALUE,
331 };
332 
333 /* PKCS#11 specification for any key object (+any_object_xxx) */
334 static const uint32_t any_key_boolprops[] = {
335 	PKCS11_CKA_DERIVE,
336 };
337 
338 static const uint32_t any_key_opt_or_null[] = {
339 	PKCS11_CKA_ID,
340 	PKCS11_CKA_START_DATE, PKCS11_CKA_END_DATE,
341 };
342 
343 static const uint32_t any_key_optional[] = {
344 	PKCS11_CKA_ALLOWED_MECHANISMS,
345 };
346 
347 /* PKCS#11 specification for any symmetric key (+any_key_xxx) */
348 static const uint32_t symm_key_boolprops[] = {
349 	PKCS11_CKA_ENCRYPT, PKCS11_CKA_DECRYPT,
350 	PKCS11_CKA_SIGN, PKCS11_CKA_VERIFY,
351 	PKCS11_CKA_WRAP, PKCS11_CKA_UNWRAP,
352 	PKCS11_CKA_SENSITIVE, PKCS11_CKA_EXTRACTABLE,
353 	PKCS11_CKA_WRAP_WITH_TRUSTED, PKCS11_CKA_TRUSTED,
354 };
355 
356 static const uint32_t symm_key_opt_or_null[] = {
357 	PKCS11_CKA_WRAP_TEMPLATE, PKCS11_CKA_UNWRAP_TEMPLATE,
358 	PKCS11_CKA_DERIVE_TEMPLATE, PKCS11_CKA_VALUE,
359 };
360 
361 static const uint32_t symm_key_optional[] = {
362 	PKCS11_CKA_VALUE_LEN,
363 };
364 
365 /* PKCS#11 specification for any asymmetric public key (+any_key_xxx) */
366 static const uint32_t public_key_boolprops[] = {
367 	PKCS11_CKA_ENCRYPT, PKCS11_CKA_VERIFY, PKCS11_CKA_VERIFY_RECOVER,
368 	PKCS11_CKA_WRAP,
369 	PKCS11_CKA_TRUSTED,
370 };
371 
372 static const uint32_t public_key_mandated[] = {
373 };
374 
375 static const uint32_t public_key_opt_or_null[] = {
376 	PKCS11_CKA_SUBJECT, PKCS11_CKA_WRAP_TEMPLATE,
377 	PKCS11_CKA_PUBLIC_KEY_INFO,
378 };
379 
380 /* PKCS#11 specification for any asymmetric private key (+any_key_xxx) */
381 static const uint32_t private_key_boolprops[] = {
382 	PKCS11_CKA_DECRYPT, PKCS11_CKA_SIGN, PKCS11_CKA_SIGN_RECOVER,
383 	PKCS11_CKA_UNWRAP,
384 	PKCS11_CKA_SENSITIVE, PKCS11_CKA_EXTRACTABLE,
385 	PKCS11_CKA_WRAP_WITH_TRUSTED, PKCS11_CKA_ALWAYS_AUTHENTICATE,
386 };
387 
388 static const uint32_t private_key_mandated[] = {
389 };
390 
391 static const uint32_t private_key_opt_or_null[] = {
392 	PKCS11_CKA_SUBJECT, PKCS11_CKA_UNWRAP_TEMPLATE,
393 	PKCS11_CKA_PUBLIC_KEY_INFO,
394 };
395 
396 /* PKCS#11 specification for any RSA key (+public/private_key_xxx) */
397 static const uint32_t rsa_public_key_mandated[] = {
398 	PKCS11_CKA_MODULUS_BITS,
399 };
400 
401 static const uint32_t rsa_public_key_opt_or_null[] = {
402 	PKCS11_CKA_MODULUS, PKCS11_CKA_PUBLIC_EXPONENT,
403 };
404 
405 static const uint32_t rsa_private_key_opt_or_null[] = {
406 	PKCS11_CKA_MODULUS, PKCS11_CKA_PUBLIC_EXPONENT,
407 	PKCS11_CKA_PRIVATE_EXPONENT,
408 	PKCS11_CKA_PRIME_1, PKCS11_CKA_PRIME_2,
409 	PKCS11_CKA_EXPONENT_1, PKCS11_CKA_EXPONENT_2, PKCS11_CKA_COEFFICIENT,
410 };
411 
412 /* PKCS#11 specification for any EC key (+public/private_key_xxx) */
413 static const uint32_t ec_public_key_mandated[] = {
414 	PKCS11_CKA_EC_PARAMS,
415 };
416 
417 static const uint32_t ec_public_key_opt_or_null[] = {
418 	PKCS11_CKA_EC_POINT,
419 };
420 
421 static const uint32_t ec_private_key_mandated[] = {
422 };
423 
424 static const uint32_t ec_private_key_opt_or_null[] = {
425 	PKCS11_CKA_EC_PARAMS,
426 	PKCS11_CKA_VALUE,
427 };
428 
429 static enum pkcs11_rc create_storage_attributes(struct obj_attrs **out,
430 						struct obj_attrs *temp)
431 {
432 	enum pkcs11_class_id class = PKCS11_CKO_UNDEFINED_ID;
433 	enum pkcs11_rc rc = PKCS11_CKR_OK;
434 
435 	rc = init_attributes_head(out);
436 	if (rc)
437 		return rc;
438 
439 	/* Object class is mandatory */
440 	class = get_class(temp);
441 	if (class == PKCS11_CKO_UNDEFINED_ID) {
442 		EMSG("Class attribute not found");
443 
444 		return PKCS11_CKR_TEMPLATE_INCONSISTENT;
445 	}
446 	rc = add_attribute(out, PKCS11_CKA_CLASS, &class, sizeof(uint32_t));
447 	if (rc)
448 		return rc;
449 
450 	rc = set_mandatory_boolprops(out, temp, any_object_boolprops,
451 				     ARRAY_SIZE(any_object_boolprops));
452 	if (rc)
453 		return rc;
454 
455 	return set_attributes_opt_or_null(out, temp, any_object_opt_or_null,
456 					  ARRAY_SIZE(any_object_opt_or_null));
457 }
458 
459 static enum pkcs11_rc create_genkey_attributes(struct obj_attrs **out,
460 					       struct obj_attrs *temp)
461 {
462 	uint32_t type = PKCS11_CKO_UNDEFINED_ID;
463 	enum pkcs11_rc rc = PKCS11_CKR_OK;
464 
465 	rc = create_storage_attributes(out, temp);
466 	if (rc)
467 		return rc;
468 
469 	type = get_key_type(temp);
470 	if (type == PKCS11_CKK_UNDEFINED_ID) {
471 		EMSG("Key type attribute not found");
472 
473 		return PKCS11_CKR_TEMPLATE_INCONSISTENT;
474 	}
475 	rc = add_attribute(out, PKCS11_CKA_KEY_TYPE, &type, sizeof(uint32_t));
476 	if (rc)
477 		return rc;
478 
479 	rc = set_mandatory_boolprops(out, temp, any_key_boolprops,
480 				     ARRAY_SIZE(any_key_boolprops));
481 	if (rc)
482 		return rc;
483 
484 	rc = set_attributes_opt_or_null(out, temp, any_key_opt_or_null,
485 					ARRAY_SIZE(any_key_opt_or_null));
486 	if (rc)
487 		return rc;
488 
489 	return set_optional_attributes(out, temp, any_key_optional,
490 				       ARRAY_SIZE(any_key_optional));
491 
492 }
493 
494 static enum pkcs11_rc create_symm_key_attributes(struct obj_attrs **out,
495 						 struct obj_attrs *temp)
496 {
497 	enum pkcs11_rc rc = PKCS11_CKR_OK;
498 
499 	assert(get_class(temp) == PKCS11_CKO_SECRET_KEY);
500 
501 	rc = create_genkey_attributes(out, temp);
502 	if (rc)
503 		return rc;
504 
505 	assert(get_class(*out) == PKCS11_CKO_SECRET_KEY);
506 
507 	switch (get_key_type(*out)) {
508 	case PKCS11_CKK_GENERIC_SECRET:
509 	case PKCS11_CKK_AES:
510 	case PKCS11_CKK_MD5_HMAC:
511 	case PKCS11_CKK_SHA_1_HMAC:
512 	case PKCS11_CKK_SHA256_HMAC:
513 	case PKCS11_CKK_SHA384_HMAC:
514 	case PKCS11_CKK_SHA512_HMAC:
515 	case PKCS11_CKK_SHA224_HMAC:
516 		break;
517 	default:
518 		EMSG("Invalid key type %#"PRIx32"/%s",
519 		     get_key_type(*out), id2str_key_type(get_key_type(*out)));
520 
521 		return PKCS11_CKR_TEMPLATE_INCONSISTENT;
522 	}
523 
524 	rc = set_mandatory_boolprops(out, temp, symm_key_boolprops,
525 				     ARRAY_SIZE(symm_key_boolprops));
526 	if (rc)
527 		return rc;
528 
529 	rc = set_attributes_opt_or_null(out, temp, symm_key_opt_or_null,
530 					ARRAY_SIZE(symm_key_opt_or_null));
531 	if (rc)
532 		return rc;
533 
534 	return set_optional_attributes(out, temp, symm_key_optional,
535 				       ARRAY_SIZE(symm_key_optional));
536 }
537 
538 static enum pkcs11_rc create_data_attributes(struct obj_attrs **out,
539 					     struct obj_attrs *temp)
540 {
541 	enum pkcs11_rc rc = PKCS11_CKR_OK;
542 
543 	assert(get_class(temp) == PKCS11_CKO_DATA);
544 
545 	rc = create_storage_attributes(out, temp);
546 	if (rc)
547 		return rc;
548 
549 	assert(get_class(*out) == PKCS11_CKO_DATA);
550 
551 	return set_attributes_opt_or_null(out, temp, raw_data_opt_or_null,
552 					  ARRAY_SIZE(raw_data_opt_or_null));
553 }
554 
555 static enum pkcs11_rc create_pub_key_attributes(struct obj_attrs **out,
556 						struct obj_attrs *temp)
557 {
558 	uint32_t const *mandated = NULL;
559 	uint32_t const *opt_or_null = NULL;
560 	size_t mandated_count = 0;
561 	size_t opt_or_null_count = 0;
562 	enum pkcs11_rc rc = PKCS11_CKR_OK;
563 
564 	assert(get_class(temp) == PKCS11_CKO_PUBLIC_KEY);
565 
566 	rc = create_genkey_attributes(out, temp);
567 	if (rc)
568 		return rc;
569 
570 	assert(get_class(*out) == PKCS11_CKO_PUBLIC_KEY);
571 
572 	rc = set_mandatory_boolprops(out, temp, public_key_boolprops,
573 				     ARRAY_SIZE(public_key_boolprops));
574 	if (rc)
575 		return rc;
576 
577 	rc = set_mandatory_attributes(out, temp, public_key_mandated,
578 				      ARRAY_SIZE(public_key_mandated));
579 	if (rc)
580 		return rc;
581 
582 	rc = set_attributes_opt_or_null(out, temp,
583 					public_key_opt_or_null,
584 					ARRAY_SIZE(public_key_opt_or_null));
585 	if (rc)
586 		return rc;
587 
588 	switch (get_key_type(*out)) {
589 	case PKCS11_CKK_RSA:
590 		mandated = rsa_public_key_mandated;
591 		opt_or_null = rsa_public_key_opt_or_null;
592 		mandated_count = ARRAY_SIZE(rsa_public_key_mandated);
593 		opt_or_null_count = ARRAY_SIZE(rsa_public_key_opt_or_null);
594 		break;
595 	case PKCS11_CKK_EC:
596 		mandated = ec_public_key_mandated;
597 		opt_or_null = ec_public_key_opt_or_null;
598 		mandated_count = ARRAY_SIZE(ec_public_key_mandated);
599 		opt_or_null_count = ARRAY_SIZE(ec_public_key_opt_or_null);
600 		break;
601 	default:
602 		EMSG("Invalid key type %#"PRIx32"/%s",
603 		     get_key_type(*out), id2str_key_type(get_key_type(*out)));
604 
605 		return PKCS11_CKR_TEMPLATE_INCONSISTENT;
606 	}
607 
608 	rc = set_mandatory_attributes(out, temp, mandated, mandated_count);
609 	if (rc)
610 		return rc;
611 
612 	return set_attributes_opt_or_null(out, temp, opt_or_null,
613 					  opt_or_null_count);
614 }
615 
616 static enum pkcs11_rc create_priv_key_attributes(struct obj_attrs **out,
617 						 struct obj_attrs *temp)
618 {
619 	uint32_t const *mandated = NULL;
620 	uint32_t const *opt_or_null = NULL;
621 	size_t mandated_count = 0;
622 	size_t opt_or_null_count = 0;
623 	enum pkcs11_rc rc = PKCS11_CKR_OK;
624 
625 	assert(get_class(temp) == PKCS11_CKO_PRIVATE_KEY);
626 
627 	rc = create_genkey_attributes(out, temp);
628 	if (rc)
629 		return rc;
630 
631 	assert(get_class(*out) == PKCS11_CKO_PRIVATE_KEY);
632 
633 	rc = set_mandatory_boolprops(out, temp, private_key_boolprops,
634 				     ARRAY_SIZE(private_key_boolprops));
635 	if (rc)
636 		return rc;
637 
638 	rc = set_mandatory_attributes(out, temp, private_key_mandated,
639 				      ARRAY_SIZE(private_key_mandated));
640 	if (rc)
641 		return rc;
642 
643 	rc = set_attributes_opt_or_null(out, temp, private_key_opt_or_null,
644 					ARRAY_SIZE(private_key_opt_or_null));
645 	if (rc)
646 		return rc;
647 
648 	switch (get_key_type(*out)) {
649 	case PKCS11_CKK_RSA:
650 		opt_or_null = rsa_private_key_opt_or_null;
651 		opt_or_null_count = ARRAY_SIZE(rsa_private_key_opt_or_null);
652 		break;
653 	case PKCS11_CKK_EC:
654 		mandated = ec_private_key_mandated;
655 		opt_or_null = ec_private_key_opt_or_null;
656 		mandated_count = ARRAY_SIZE(ec_private_key_mandated);
657 		opt_or_null_count = ARRAY_SIZE(ec_private_key_opt_or_null);
658 		break;
659 	default:
660 		EMSG("Invalid key type %#"PRIx32"/%s",
661 		     get_key_type(*out), id2str_key_type(get_key_type(*out)));
662 
663 		return PKCS11_CKR_TEMPLATE_INCONSISTENT;
664 	}
665 
666 	rc = set_mandatory_attributes(out, temp, mandated, mandated_count);
667 	if (rc)
668 		return rc;
669 
670 	return set_attributes_opt_or_null(out, temp, opt_or_null,
671 					  opt_or_null_count);
672 }
673 
674 static enum pkcs11_rc
675 sanitize_symm_key_attributes(struct obj_attrs **temp,
676 			     enum processing_func function)
677 {
678 	enum pkcs11_rc rc = PKCS11_CKR_OK;
679 	uint32_t a_size = 0;
680 
681 	assert(get_class(*temp) == PKCS11_CKO_SECRET_KEY);
682 
683 	rc = get_attribute_ptr(*temp, PKCS11_CKA_VALUE, NULL, &a_size);
684 
685 	switch (get_key_type(*temp)) {
686 	case PKCS11_CKK_GENERIC_SECRET:
687 	case PKCS11_CKK_AES:
688 	case PKCS11_CKK_MD5_HMAC:
689 	case PKCS11_CKK_SHA_1_HMAC:
690 	case PKCS11_CKK_SHA256_HMAC:
691 	case PKCS11_CKK_SHA384_HMAC:
692 	case PKCS11_CKK_SHA512_HMAC:
693 	case PKCS11_CKK_SHA224_HMAC:
694 		switch (function) {
695 		case PKCS11_FUNCTION_IMPORT:
696 			/* CKA_VALUE is a mandatory with C_CreateObject */
697 			if (rc || a_size == 0)
698 				return PKCS11_CKR_TEMPLATE_INCONSISTENT;
699 
700 			if (get_attribute_ptr(*temp, PKCS11_CKA_VALUE_LEN, NULL,
701 					      NULL) != PKCS11_RV_NOT_FOUND)
702 				return PKCS11_CKR_TEMPLATE_INCONSISTENT;
703 
704 			return add_attribute(temp, PKCS11_CKA_VALUE_LEN,
705 					     &a_size, sizeof(uint32_t));
706 		case PKCS11_FUNCTION_GENERATE:
707 			if (rc != PKCS11_RV_NOT_FOUND)
708 				return PKCS11_CKR_TEMPLATE_INCONSISTENT;
709 			break;
710 		default:
711 			break;
712 		}
713 		break;
714 	default:
715 		EMSG("Invalid key type %#"PRIx32"/%s",
716 		     get_key_type(*temp), id2str_key_type(get_key_type(*temp)));
717 
718 		return PKCS11_CKR_TEMPLATE_INCONSISTENT;
719 	}
720 
721 	return PKCS11_CKR_OK;
722 }
723 
724 /*
725  * Create an attribute list for a new object from a template and a parent
726  * object (optional) for an object generation function (generate, copy,
727  * derive...).
728  *
729  * PKCS#11 directives on the supplied template and expected return value:
730  * - template has an invalid attribute ID: ATTRIBUTE_TYPE_INVALID
731  * - template has an invalid value for an attribute: ATTRIBUTE_VALID_INVALID
732  * - template has value for a read-only attribute: ATTRIBUTE_READ_ONLY
733  * - template+default+parent => still miss an attribute: TEMPLATE_INCONSISTENT
734  *
735  * INFO on PKCS11_CMD_COPY_OBJECT:
736  * - parent PKCS11_CKA_COPYIABLE=false => return ACTION_PROHIBITED.
737  * - template can specify PKCS11_CKA_TOKEN, PKCS11_CKA_PRIVATE,
738  *   PKCS11_CKA_MODIFIABLE, PKCS11_CKA_DESTROYABLE.
739  * - SENSITIVE can change from false to true, not from true to false.
740  * - LOCAL is the parent LOCAL
741  */
742 enum pkcs11_rc
743 create_attributes_from_template(struct obj_attrs **out, void *template,
744 				size_t template_size,
745 				struct obj_attrs *parent,
746 				enum processing_func function,
747 				enum pkcs11_mechanism_id mecha,
748 				enum pkcs11_class_id template_class)
749 {
750 	struct obj_attrs *temp = NULL;
751 	struct obj_attrs *attrs = NULL;
752 	enum pkcs11_rc rc = PKCS11_CKR_OK;
753 	uint8_t local = 0;
754 	uint8_t always_sensitive = 0;
755 	uint8_t never_extract = 0;
756 	uint8_t extractable = 0;
757 	uint32_t class = PKCS11_UNDEFINED_ID;
758 	uint32_t type = PKCS11_UNDEFINED_ID;
759 	uint32_t mechanism_id = PKCS11_CKM_UNDEFINED_ID;
760 	struct obj_attrs *req_attrs = NULL;
761 	uint32_t size = 0;
762 	uint32_t indirect_template = PKCS11_CKA_UNDEFINED_ID;
763 
764 #ifdef DEBUG	/* Sanity: check function argument */
765 	trace_attributes_from_api_head("template", template, template_size);
766 	switch (function) {
767 	case PKCS11_FUNCTION_GENERATE:
768 	case PKCS11_FUNCTION_GENERATE_PAIR:
769 	case PKCS11_FUNCTION_IMPORT:
770 	case PKCS11_FUNCTION_MODIFY:
771 	case PKCS11_FUNCTION_DERIVE:
772 	case PKCS11_FUNCTION_UNWRAP:
773 	case PKCS11_FUNCTION_COPY:
774 		break;
775 	default:
776 		TEE_Panic(TEE_ERROR_NOT_SUPPORTED);
777 	}
778 #endif
779 
780 	/*
781 	 * For PKCS11_FUNCTION_GENERATE, find the class and type
782 	 * based on the mechanism. These will be passed as hint
783 	 * sanitize_client_object() and added in temp if not
784 	 * already present
785 	 */
786 	if (function == PKCS11_FUNCTION_GENERATE) {
787 		switch (mecha) {
788 		case PKCS11_CKM_GENERIC_SECRET_KEY_GEN:
789 			class = PKCS11_CKO_SECRET_KEY;
790 			type = PKCS11_CKK_GENERIC_SECRET;
791 			break;
792 		case PKCS11_CKM_AES_KEY_GEN:
793 			class = PKCS11_CKO_SECRET_KEY;
794 			type = PKCS11_CKK_AES;
795 			break;
796 		default:
797 			TEE_Panic(TEE_ERROR_NOT_SUPPORTED);
798 		}
799 	}
800 
801 	/*
802 	 * For PKCS11_FUNCTION_GENERATE_PAIR, find the class and type
803 	 * based on the mechanism. These will be passed as hint
804 	 * sanitize_client_object() and added in temp if not
805 	 * already present
806 	 */
807 	if (function == PKCS11_FUNCTION_GENERATE_PAIR) {
808 		switch (mecha) {
809 		case PKCS11_CKM_EC_KEY_PAIR_GEN:
810 			class = template_class;
811 			type = PKCS11_CKK_EC;
812 			break;
813 		default:
814 			TEE_Panic(TEE_ERROR_NOT_SUPPORTED);
815 		}
816 	}
817 
818 	/*
819 	 * Check and remove duplicates if any and create a new temporary
820 	 * template
821 	 */
822 	rc = sanitize_client_object(&temp, template, template_size, class,
823 				    type);
824 	if (rc)
825 		goto out;
826 
827 	/*
828 	 * For function type modify and copy return the created template
829 	 * from here. Rest of the code below is for creating objects
830 	 * or generating keys.
831 	 */
832 	switch (function) {
833 	case PKCS11_FUNCTION_MODIFY:
834 	case PKCS11_FUNCTION_COPY:
835 		*out = temp;
836 		return rc;
837 	case PKCS11_FUNCTION_DERIVE:
838 	case PKCS11_FUNCTION_UNWRAP:
839 		if (function == PKCS11_FUNCTION_UNWRAP)
840 			indirect_template = PKCS11_CKA_UNWRAP_TEMPLATE;
841 		else
842 			indirect_template = PKCS11_CKA_DERIVE_TEMPLATE;
843 
844 		rc = get_attribute_ptr(parent, indirect_template,
845 				       (void *)&req_attrs, &size);
846 		if (rc == PKCS11_CKR_OK && size != 0) {
847 			rc = attributes_match_add_reference(&temp, req_attrs);
848 			if (rc)
849 				goto out;
850 		}
851 		break;
852 	default:
853 		break;
854 	}
855 
856 	/*
857 	 * Check if class and type in temp are consistent with the mechanism
858 	 */
859 	switch (mecha) {
860 	case PKCS11_CKM_GENERIC_SECRET_KEY_GEN:
861 		if (get_class(temp) != PKCS11_CKO_SECRET_KEY ||
862 		    get_key_type(temp) != PKCS11_CKK_GENERIC_SECRET) {
863 			rc = PKCS11_CKR_TEMPLATE_INCONSISTENT;
864 			goto out;
865 		}
866 		break;
867 	case PKCS11_CKM_AES_KEY_GEN:
868 		if (get_class(temp) != PKCS11_CKO_SECRET_KEY ||
869 		    get_key_type(temp) != PKCS11_CKK_AES) {
870 			rc = PKCS11_CKR_TEMPLATE_INCONSISTENT;
871 			goto out;
872 		}
873 		break;
874 	case PKCS11_CKM_EC_KEY_PAIR_GEN:
875 		if ((get_class(temp) != PKCS11_CKO_PUBLIC_KEY &&
876 		     get_class(temp) != PKCS11_CKO_PRIVATE_KEY) ||
877 		    get_key_type(temp) != PKCS11_CKK_EC) {
878 			rc = PKCS11_CKR_TEMPLATE_INCONSISTENT;
879 			goto out;
880 		}
881 		break;
882 	default:
883 		break;
884 	}
885 
886 	if (!sanitize_consistent_class_and_type(temp)) {
887 		EMSG("Inconsistent class/type");
888 		rc = PKCS11_CKR_TEMPLATE_INCONSISTENT;
889 		goto out;
890 	}
891 
892 	/*
893 	 * TBD - Add a check to see if temp contains any attribute which
894 	 * is not consistent with the object class or type and return error.
895 	 * In current implementation such attributes are ignored and not
896 	 * added to final object while PKCS#11 specification expects a
897 	 * failure and an error code be returned.
898 	 */
899 
900 	switch (get_class(temp)) {
901 	case PKCS11_CKO_DATA:
902 		rc = create_data_attributes(&attrs, temp);
903 		break;
904 	case PKCS11_CKO_SECRET_KEY:
905 		rc = sanitize_symm_key_attributes(&temp, function);
906 		if (rc)
907 			goto out;
908 		rc = create_symm_key_attributes(&attrs, temp);
909 		break;
910 	case PKCS11_CKO_PUBLIC_KEY:
911 		rc = create_pub_key_attributes(&attrs, temp);
912 		break;
913 	case PKCS11_CKO_PRIVATE_KEY:
914 		rc = create_priv_key_attributes(&attrs, temp);
915 		break;
916 	default:
917 		DMSG("Invalid object class %#"PRIx32"/%s",
918 		     get_class(temp), id2str_class(get_class(temp)));
919 
920 		rc = PKCS11_CKR_TEMPLATE_INCONSISTENT;
921 		break;
922 	}
923 	if (rc)
924 		goto out;
925 
926 	if (get_attribute_ptr(temp, PKCS11_CKA_LOCAL, NULL, NULL) !=
927 	    PKCS11_RV_NOT_FOUND) {
928 		rc = PKCS11_CKR_TEMPLATE_INCONSISTENT;
929 		goto out;
930 	}
931 
932 	if (get_attribute_ptr(temp, PKCS11_CKA_KEY_GEN_MECHANISM, NULL, NULL) !=
933 	    PKCS11_RV_NOT_FOUND) {
934 		rc = PKCS11_CKR_TEMPLATE_INCONSISTENT;
935 		goto out;
936 	}
937 
938 	switch (function) {
939 	case PKCS11_FUNCTION_GENERATE:
940 	case PKCS11_FUNCTION_GENERATE_PAIR:
941 		local = PKCS11_TRUE;
942 		break;
943 	case PKCS11_FUNCTION_IMPORT:
944 	case PKCS11_FUNCTION_DERIVE:
945 	case PKCS11_FUNCTION_UNWRAP:
946 	default:
947 		local = PKCS11_FALSE;
948 		break;
949 	}
950 	rc = add_attribute(&attrs, PKCS11_CKA_LOCAL, &local, sizeof(local));
951 	if (rc)
952 		goto out;
953 
954 	switch (get_class(attrs)) {
955 	case PKCS11_CKO_SECRET_KEY:
956 	case PKCS11_CKO_PRIVATE_KEY:
957 	case PKCS11_CKO_PUBLIC_KEY:
958 		always_sensitive = PKCS11_FALSE;
959 		never_extract = PKCS11_FALSE;
960 
961 		switch (function) {
962 		case PKCS11_FUNCTION_DERIVE:
963 			always_sensitive =
964 				get_bool(parent, PKCS11_CKA_ALWAYS_SENSITIVE) &&
965 				get_bool(attrs, PKCS11_CKA_SENSITIVE);
966 			never_extract =
967 			       get_bool(parent, PKCS11_CKA_NEVER_EXTRACTABLE) &&
968 			       !get_bool(attrs, PKCS11_CKA_EXTRACTABLE);
969 			break;
970 		case PKCS11_FUNCTION_UNWRAP:
971 			always_sensitive = PKCS11_FALSE;
972 			never_extract = PKCS11_FALSE;
973 			extractable = PKCS11_TRUE;
974 
975 			/*
976 			 * Check if template passed by user has CKA_EXTRACTABLE.
977 			 * If not, by default value of CKA_EXTRACTABLE is set as
978 			 * TRUE.
979 			 */
980 			if (get_attribute_ptr(temp, PKCS11_CKA_EXTRACTABLE,
981 					      NULL,
982 					      NULL) == PKCS11_RV_NOT_FOUND) {
983 				rc = set_attribute(&attrs,
984 						   PKCS11_CKA_EXTRACTABLE,
985 						   &extractable,
986 						   sizeof(extractable));
987 				if (rc)
988 					goto out;
989 			}
990 			break;
991 		case PKCS11_FUNCTION_GENERATE:
992 		case PKCS11_FUNCTION_GENERATE_PAIR:
993 			always_sensitive = get_bool(attrs,
994 						    PKCS11_CKA_SENSITIVE);
995 			never_extract = !get_bool(attrs,
996 						  PKCS11_CKA_EXTRACTABLE);
997 			break;
998 		default:
999 			break;
1000 		}
1001 
1002 		rc = add_attribute(&attrs, PKCS11_CKA_ALWAYS_SENSITIVE,
1003 				   &always_sensitive, sizeof(always_sensitive));
1004 		if (rc)
1005 			goto out;
1006 
1007 		rc = add_attribute(&attrs, PKCS11_CKA_NEVER_EXTRACTABLE,
1008 				   &never_extract, sizeof(never_extract));
1009 		if (rc)
1010 			goto out;
1011 
1012 		/* Keys mandate attribute PKCS11_CKA_KEY_GEN_MECHANISM */
1013 		if (local)
1014 			mechanism_id = mecha;
1015 		else
1016 			mechanism_id = PKCS11_CK_UNAVAILABLE_INFORMATION;
1017 
1018 		rc = add_attribute(&attrs, PKCS11_CKA_KEY_GEN_MECHANISM,
1019 				   &mechanism_id, sizeof(mechanism_id));
1020 		if (rc)
1021 			goto out;
1022 		break;
1023 
1024 	default:
1025 		break;
1026 	}
1027 
1028 	*out = attrs;
1029 
1030 #ifdef DEBUG
1031 	trace_attributes("object", attrs);
1032 #endif
1033 
1034 out:
1035 	TEE_Free(temp);
1036 	if (rc)
1037 		TEE_Free(attrs);
1038 
1039 	return rc;
1040 }
1041 
1042 static enum pkcs11_rc check_attrs_misc_integrity(struct obj_attrs *head)
1043 {
1044 	if (get_bool(head, PKCS11_CKA_NEVER_EXTRACTABLE) &&
1045 	    get_bool(head, PKCS11_CKA_EXTRACTABLE)) {
1046 		DMSG("Never/Extractable attributes mismatch %d/%d",
1047 		     get_bool(head, PKCS11_CKA_NEVER_EXTRACTABLE),
1048 		     get_bool(head, PKCS11_CKA_EXTRACTABLE));
1049 
1050 		return PKCS11_CKR_TEMPLATE_INCONSISTENT;
1051 	}
1052 
1053 	if (get_bool(head, PKCS11_CKA_ALWAYS_SENSITIVE) &&
1054 	    !get_bool(head, PKCS11_CKA_SENSITIVE)) {
1055 		DMSG("Sensitive/always attributes mismatch %d/%d",
1056 		     get_bool(head, PKCS11_CKA_SENSITIVE),
1057 		     get_bool(head, PKCS11_CKA_ALWAYS_SENSITIVE));
1058 
1059 		return PKCS11_CKR_TEMPLATE_INCONSISTENT;
1060 	}
1061 
1062 	return PKCS11_CKR_OK;
1063 }
1064 
1065 bool object_is_private(struct obj_attrs *head)
1066 {
1067 	return get_bool(head, PKCS11_CKA_PRIVATE);
1068 }
1069 
1070 bool object_is_token(struct obj_attrs *head)
1071 {
1072 	return get_bool(head, PKCS11_CKA_TOKEN);
1073 }
1074 
1075 bool object_is_modifiable(struct obj_attrs *head)
1076 {
1077 	return get_bool(head, PKCS11_CKA_MODIFIABLE);
1078 }
1079 
1080 bool object_is_copyable(struct obj_attrs *head)
1081 {
1082 	return get_bool(head, PKCS11_CKA_COPYABLE);
1083 }
1084 
1085 /*
1086  * Check access to object against authentication to token
1087  */
1088 enum pkcs11_rc check_access_attrs_against_token(struct pkcs11_session *session,
1089 						struct obj_attrs *head)
1090 {
1091 	bool private = true;
1092 
1093 	switch (get_class(head)) {
1094 	case PKCS11_CKO_SECRET_KEY:
1095 	case PKCS11_CKO_PRIVATE_KEY:
1096 	case PKCS11_CKO_PUBLIC_KEY:
1097 	case PKCS11_CKO_DATA:
1098 		private = object_is_private(head);
1099 		break;
1100 	default:
1101 		return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1102 	}
1103 
1104 	if (private && (pkcs11_session_is_public(session) ||
1105 			pkcs11_session_is_so(session))) {
1106 		DMSG("Private object access from a public or SO session");
1107 
1108 		return PKCS11_CKR_USER_NOT_LOGGED_IN;
1109 	}
1110 
1111 	return PKCS11_CKR_OK;
1112 }
1113 
1114 /*
1115  * Check the attributes of a to-be-created object matches the token state
1116  */
1117 enum pkcs11_rc check_created_attrs_against_token(struct pkcs11_session *session,
1118 						 struct obj_attrs *head)
1119 {
1120 	enum pkcs11_rc rc = PKCS11_CKR_OK;
1121 
1122 	rc = check_attrs_misc_integrity(head);
1123 	if (rc)
1124 		return rc;
1125 
1126 	if (get_bool(head, PKCS11_CKA_TRUSTED) &&
1127 	    !pkcs11_session_is_so(session)) {
1128 		DMSG("Can't create trusted object");
1129 
1130 		return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1131 	}
1132 
1133 	if (get_bool(head, PKCS11_CKA_TOKEN) &&
1134 	    !pkcs11_session_is_read_write(session)) {
1135 		DMSG("Can't create persistent object");
1136 
1137 		return PKCS11_CKR_SESSION_READ_ONLY;
1138 	}
1139 
1140 	/*
1141 	 * TODO: START_DATE and END_DATE: complies with current time?
1142 	 */
1143 	return PKCS11_CKR_OK;
1144 }
1145 
1146 #define DMSG_BAD_BBOOL(attr, proc, head)				\
1147 	do {								\
1148 		uint32_t __maybe_unused _attr = (attr);			\
1149 		uint8_t __maybe_unused _bvalue = 0;			\
1150 		enum pkcs11_rc __maybe_unused _rc = PKCS11_CKR_OK;	\
1151 									\
1152 		_rc = get_attribute((head), _attr, &_bvalue, NULL);	\
1153 		DMSG("%s issue for %s: %sfound, value %"PRIu8,		\
1154 		     id2str_attr(_attr), id2str_proc((proc)),		\
1155 		     _rc ? "not " : "", _bvalue);			\
1156 	} while (0)
1157 
1158 static bool __maybe_unused check_attr_bval(uint32_t proc_id __maybe_unused,
1159 					   struct obj_attrs *head,
1160 					   uint32_t attribute, bool val)
1161 {
1162 	uint8_t bbool = 0;
1163 	uint32_t sz = sizeof(bbool);
1164 
1165 	if (!get_attribute(head, attribute, &bbool, &sz) && !!bbool == val)
1166 		return true;
1167 
1168 	DMSG_BAD_BBOOL(attribute, proc_id, head);
1169 	return false;
1170 }
1171 
1172 /*
1173  * Check the attributes of a new secret match the processing/mechanism
1174  * used to create it.
1175  *
1176  * @proc_id - PKCS11_CKM_xxx
1177  * @head - head of the attributes of the to-be-created object.
1178  */
1179 enum pkcs11_rc check_created_attrs_against_processing(uint32_t proc_id,
1180 						      struct obj_attrs *head)
1181 {
1182 	/*
1183 	 * Processings that do not create secrets are not expected to call
1184 	 * this function which would panic.
1185 	 */
1186 	switch (proc_id) {
1187 	case PKCS11_PROCESSING_IMPORT:
1188 	case PKCS11_CKM_AES_ECB:
1189 	case PKCS11_CKM_AES_CBC:
1190 	case PKCS11_CKM_AES_ECB_ENCRYPT_DATA:
1191 	case PKCS11_CKM_AES_CBC_ENCRYPT_DATA:
1192 		assert(check_attr_bval(proc_id, head, PKCS11_CKA_LOCAL, false));
1193 		break;
1194 	case PKCS11_CKM_GENERIC_SECRET_KEY_GEN:
1195 	case PKCS11_CKM_AES_KEY_GEN:
1196 	case PKCS11_CKM_EC_KEY_PAIR_GEN:
1197 		assert(check_attr_bval(proc_id, head, PKCS11_CKA_LOCAL, true));
1198 		break;
1199 	default:
1200 		TEE_Panic(proc_id);
1201 		break;
1202 	}
1203 
1204 	switch (proc_id) {
1205 	case PKCS11_CKM_GENERIC_SECRET_KEY_GEN:
1206 		assert(get_key_type(head) == PKCS11_CKK_GENERIC_SECRET);
1207 		break;
1208 	case PKCS11_CKM_AES_KEY_GEN:
1209 		assert(get_key_type(head) == PKCS11_CKK_AES);
1210 		break;
1211 	case PKCS11_CKM_EC_KEY_PAIR_GEN:
1212 		assert(get_key_type(head) == PKCS11_CKK_EC);
1213 		break;
1214 	case PKCS11_PROCESSING_IMPORT:
1215 	default:
1216 		break;
1217 	}
1218 
1219 	return PKCS11_CKR_OK;
1220 }
1221 
1222 /* Return min and max key size supported for a key_type in bytes */
1223 static void get_key_min_max_sizes(enum pkcs11_key_type key_type,
1224 				  uint32_t *min_key_size,
1225 				  uint32_t *max_key_size)
1226 {
1227 	enum pkcs11_mechanism_id mechanism = PKCS11_CKM_UNDEFINED_ID;
1228 
1229 	switch (key_type) {
1230 	case PKCS11_CKK_GENERIC_SECRET:
1231 		mechanism = PKCS11_CKM_GENERIC_SECRET_KEY_GEN;
1232 		break;
1233 	case PKCS11_CKK_AES:
1234 		mechanism = PKCS11_CKM_AES_KEY_GEN;
1235 		break;
1236 	case PKCS11_CKK_MD5_HMAC:
1237 		mechanism = PKCS11_CKM_MD5_HMAC;
1238 		break;
1239 	case PKCS11_CKK_SHA_1_HMAC:
1240 		mechanism = PKCS11_CKM_SHA_1_HMAC;
1241 		break;
1242 	case PKCS11_CKK_SHA224_HMAC:
1243 		mechanism = PKCS11_CKM_SHA224_HMAC;
1244 		break;
1245 	case PKCS11_CKK_SHA256_HMAC:
1246 		mechanism = PKCS11_CKM_SHA256_HMAC;
1247 		break;
1248 	case PKCS11_CKK_SHA384_HMAC:
1249 		mechanism = PKCS11_CKM_SHA384_HMAC;
1250 		break;
1251 	case PKCS11_CKK_SHA512_HMAC:
1252 		mechanism = PKCS11_CKM_SHA512_HMAC;
1253 		break;
1254 	case PKCS11_CKK_EC:
1255 		mechanism = PKCS11_CKM_EC_KEY_PAIR_GEN;
1256 		break;
1257 	default:
1258 		TEE_Panic(key_type);
1259 		break;
1260 	}
1261 
1262 	mechanism_supported_key_sizes_bytes(mechanism, min_key_size,
1263 					    max_key_size);
1264 }
1265 
1266 enum pkcs11_rc check_created_attrs(struct obj_attrs *key1,
1267 				   struct obj_attrs *key2)
1268 {
1269 	enum pkcs11_rc rc = PKCS11_CKR_OK;
1270 	struct obj_attrs *secret = NULL;
1271 	struct obj_attrs *private = NULL;
1272 	struct obj_attrs *public = NULL;
1273 	uint32_t max_key_size = 0;
1274 	uint32_t min_key_size = 0;
1275 	uint32_t key_length = 0;
1276 
1277 	switch (get_class(key1)) {
1278 	case PKCS11_CKO_SECRET_KEY:
1279 		secret = key1;
1280 		break;
1281 	case PKCS11_CKO_PUBLIC_KEY:
1282 		public = key1;
1283 		break;
1284 	case PKCS11_CKO_PRIVATE_KEY:
1285 		private = key1;
1286 		break;
1287 	default:
1288 		return PKCS11_CKR_ATTRIBUTE_VALUE_INVALID;
1289 	}
1290 
1291 	if (key2) {
1292 		switch (get_class(key2)) {
1293 		case PKCS11_CKO_PUBLIC_KEY:
1294 			public = key2;
1295 			if (private == key1)
1296 				break;
1297 
1298 			return PKCS11_CKR_TEMPLATE_INCONSISTENT;
1299 		case PKCS11_CKO_PRIVATE_KEY:
1300 			private = key2;
1301 			if (public == key1)
1302 				break;
1303 
1304 			return PKCS11_CKR_TEMPLATE_INCONSISTENT;
1305 		default:
1306 			return PKCS11_CKR_ATTRIBUTE_VALUE_INVALID;
1307 		}
1308 
1309 		if (get_key_type(private) != get_key_type(public))
1310 			return PKCS11_CKR_TEMPLATE_INCONSISTENT;
1311 	}
1312 
1313 	if (secret) {
1314 		switch (get_key_type(secret)) {
1315 		case PKCS11_CKK_AES:
1316 		case PKCS11_CKK_GENERIC_SECRET:
1317 		case PKCS11_CKK_MD5_HMAC:
1318 		case PKCS11_CKK_SHA_1_HMAC:
1319 		case PKCS11_CKK_SHA224_HMAC:
1320 		case PKCS11_CKK_SHA256_HMAC:
1321 		case PKCS11_CKK_SHA384_HMAC:
1322 		case PKCS11_CKK_SHA512_HMAC:
1323 			break;
1324 		default:
1325 			return PKCS11_CKR_TEMPLATE_INCONSISTENT;
1326 		}
1327 
1328 		/* Get key size */
1329 		rc = get_u32_attribute(secret, PKCS11_CKA_VALUE_LEN,
1330 				       &key_length);
1331 		if (rc)
1332 			return PKCS11_CKR_TEMPLATE_INCOMPLETE;
1333 	}
1334 	if (public) {
1335 		switch (get_key_type(public)) {
1336 		case PKCS11_CKK_EC:
1337 			break;
1338 		default:
1339 			return PKCS11_CKR_TEMPLATE_INCONSISTENT;
1340 		}
1341 	}
1342 	if (private) {
1343 		switch (get_key_type(private)) {
1344 		case PKCS11_CKK_EC:
1345 			break;
1346 		default:
1347 			return PKCS11_CKR_TEMPLATE_INCONSISTENT;
1348 		}
1349 	}
1350 
1351 	/*
1352 	 * Check key size for symmetric keys and RSA keys
1353 	 * EC is bound to domains, no need to check here.
1354 	 */
1355 	switch (get_key_type(key1)) {
1356 	case PKCS11_CKK_EC:
1357 		return PKCS11_CKR_OK;
1358 	default:
1359 		break;
1360 	}
1361 
1362 	get_key_min_max_sizes(get_key_type(key1), &min_key_size, &max_key_size);
1363 	if (key_length < min_key_size || key_length > max_key_size) {
1364 		EMSG("Length %"PRIu32" vs range [%"PRIu32" %"PRIu32"]",
1365 		     key_length, min_key_size, max_key_size);
1366 
1367 		return PKCS11_CKR_KEY_SIZE_RANGE;
1368 	}
1369 
1370 	if (secret && get_key_type(secret) == PKCS11_CKK_AES) {
1371 		if (key_length != 16 && key_length != 24 && key_length != 32)
1372 			return PKCS11_CKR_KEY_SIZE_RANGE;
1373 	}
1374 
1375 	return PKCS11_CKR_OK;
1376 }
1377 
1378 /* Check processing ID against attribute ALLOWED_MECHANISMS if any */
1379 static bool parent_key_complies_allowed_processings(uint32_t proc_id,
1380 						    struct obj_attrs *head)
1381 {
1382 	char *attr = NULL;
1383 	uint32_t size = 0;
1384 	uint32_t proc = 0;
1385 	size_t count = 0;
1386 	enum pkcs11_rc rc = PKCS11_CKR_GENERAL_ERROR;
1387 
1388 	rc = get_attribute_ptr(head, PKCS11_CKA_ALLOWED_MECHANISMS,
1389 			       (void *)&attr, &size);
1390 	if (rc == PKCS11_RV_NOT_FOUND)
1391 		return true;
1392 	if (rc) {
1393 		EMSG("unexpected attributes state");
1394 		TEE_Panic(TEE_ERROR_BAD_STATE);
1395 	}
1396 
1397 	for (count = size / sizeof(uint32_t); count; count--) {
1398 		TEE_MemMove(&proc, attr, sizeof(uint32_t));
1399 		attr += sizeof(uint32_t);
1400 
1401 		if (proc == proc_id)
1402 			return true;
1403 	}
1404 
1405 	DMSG("can't find %s in allowed list", id2str_proc(proc_id));
1406 	return false;
1407 }
1408 
1409 static enum pkcs11_attr_id func_to_attr(enum processing_func func)
1410 {
1411 	switch (func) {
1412 	case PKCS11_FUNCTION_ENCRYPT:
1413 		return PKCS11_CKA_ENCRYPT;
1414 	case PKCS11_FUNCTION_DECRYPT:
1415 		return PKCS11_CKA_DECRYPT;
1416 	case PKCS11_FUNCTION_SIGN:
1417 		return PKCS11_CKA_SIGN;
1418 	case PKCS11_FUNCTION_VERIFY:
1419 		return PKCS11_CKA_VERIFY;
1420 	case PKCS11_FUNCTION_WRAP:
1421 		return PKCS11_CKA_WRAP;
1422 	case PKCS11_FUNCTION_UNWRAP:
1423 		return PKCS11_CKA_UNWRAP;
1424 	case PKCS11_FUNCTION_DERIVE:
1425 		return PKCS11_CKA_DERIVE;
1426 	default:
1427 		return PKCS11_CKA_UNDEFINED_ID;
1428 	}
1429 }
1430 
1431 enum pkcs11_rc
1432 check_parent_attrs_against_processing(enum pkcs11_mechanism_id proc_id,
1433 				      enum processing_func function,
1434 				      struct obj_attrs *head)
1435 {
1436 	enum pkcs11_class_id key_class = get_class(head);
1437 	enum pkcs11_key_type key_type = get_key_type(head);
1438 	enum pkcs11_attr_id attr = func_to_attr(function);
1439 
1440 	if (!get_bool(head, attr)) {
1441 		DMSG("%s not permitted", id2str_attr(attr));
1442 		return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1443 	}
1444 
1445 	/* Check processing complies with parent key family */
1446 	switch (proc_id) {
1447 	case PKCS11_CKM_AES_ECB:
1448 	case PKCS11_CKM_AES_CBC:
1449 	case PKCS11_CKM_AES_CBC_PAD:
1450 	case PKCS11_CKM_AES_CTS:
1451 	case PKCS11_CKM_AES_CTR:
1452 		if (key_class == PKCS11_CKO_SECRET_KEY &&
1453 		    key_type == PKCS11_CKK_AES)
1454 			break;
1455 
1456 		DMSG("%s invalid key %s/%s", id2str_proc(proc_id),
1457 		     id2str_class(key_class), id2str_key_type(key_type));
1458 
1459 		if (function == PKCS11_FUNCTION_WRAP)
1460 			return PKCS11_CKR_WRAPPING_KEY_TYPE_INCONSISTENT;
1461 		else if (function == PKCS11_FUNCTION_UNWRAP)
1462 			return PKCS11_CKR_UNWRAPPING_KEY_TYPE_INCONSISTENT;
1463 		else
1464 			return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1465 
1466 	case PKCS11_CKM_AES_ECB_ENCRYPT_DATA:
1467 	case PKCS11_CKM_AES_CBC_ENCRYPT_DATA:
1468 		if (key_class != PKCS11_CKO_SECRET_KEY &&
1469 		    key_type != PKCS11_CKK_AES)
1470 			return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1471 
1472 		if (get_bool(head, PKCS11_CKA_ENCRYPT)) {
1473 			/*
1474 			 * Intentionally refuse to proceed despite
1475 			 * PKCS#11 specifications v2.40 and v3.0 not expecting
1476 			 * this behavior to avoid potential security issue
1477 			 * where keys derived by these mechanisms can be
1478 			 * revealed by doing data encryption using parent key.
1479 			 */
1480 			return PKCS11_CKR_FUNCTION_FAILED;
1481 		}
1482 
1483 		break;
1484 	case PKCS11_CKM_MD5_HMAC:
1485 	case PKCS11_CKM_SHA_1_HMAC:
1486 	case PKCS11_CKM_SHA224_HMAC:
1487 	case PKCS11_CKM_SHA256_HMAC:
1488 	case PKCS11_CKM_SHA384_HMAC:
1489 	case PKCS11_CKM_SHA512_HMAC:
1490 		if (key_class != PKCS11_CKO_SECRET_KEY)
1491 			return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1492 
1493 		if (key_type == PKCS11_CKK_GENERIC_SECRET)
1494 			break;
1495 
1496 		switch (proc_id) {
1497 		case PKCS11_CKM_MD5_HMAC:
1498 			if (key_type == PKCS11_CKK_MD5_HMAC)
1499 				break;
1500 			return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1501 		case PKCS11_CKM_SHA_1_HMAC:
1502 			if (key_type == PKCS11_CKK_SHA_1_HMAC)
1503 				break;
1504 			return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1505 		case PKCS11_CKM_SHA224_HMAC:
1506 			if (key_type == PKCS11_CKK_SHA224_HMAC)
1507 				break;
1508 			return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1509 		case PKCS11_CKM_SHA256_HMAC:
1510 			if (key_type == PKCS11_CKK_SHA256_HMAC)
1511 				break;
1512 			return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1513 		case PKCS11_CKM_SHA384_HMAC:
1514 			if (key_type == PKCS11_CKK_SHA384_HMAC)
1515 				break;
1516 			return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1517 		case PKCS11_CKM_SHA512_HMAC:
1518 			if (key_type == PKCS11_CKK_SHA512_HMAC)
1519 				break;
1520 			return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1521 		default:
1522 			return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1523 		}
1524 		break;
1525 
1526 	case PKCS11_CKM_ECDSA:
1527 	case PKCS11_CKM_ECDSA_SHA1:
1528 	case PKCS11_CKM_ECDSA_SHA224:
1529 	case PKCS11_CKM_ECDSA_SHA256:
1530 	case PKCS11_CKM_ECDSA_SHA384:
1531 	case PKCS11_CKM_ECDSA_SHA512:
1532 		if (key_type != PKCS11_CKK_EC) {
1533 			EMSG("Invalid key %s for mechanism %s",
1534 			     id2str_type(key_type, key_class),
1535 			     id2str_proc(proc_id));
1536 
1537 			return PKCS11_CKR_KEY_TYPE_INCONSISTENT;
1538 		}
1539 		if (key_class != PKCS11_CKO_PUBLIC_KEY &&
1540 		    key_class != PKCS11_CKO_PRIVATE_KEY) {
1541 			EMSG("Invalid key class for mechanism %s",
1542 			     id2str_proc(proc_id));
1543 
1544 			return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1545 		}
1546 		break;
1547 	default:
1548 		DMSG("Invalid processing %#"PRIx32"/%s", proc_id,
1549 		     id2str_proc(proc_id));
1550 
1551 		return PKCS11_CKR_MECHANISM_INVALID;
1552 	}
1553 
1554 	if (!parent_key_complies_allowed_processings(proc_id, head)) {
1555 		DMSG("Allowed mechanism failed");
1556 		return PKCS11_CKR_KEY_FUNCTION_NOT_PERMITTED;
1557 	}
1558 
1559 	return PKCS11_CKR_OK;
1560 }
1561 
1562 bool attribute_is_exportable(struct pkcs11_attribute_head *req_attr,
1563 			     struct pkcs11_object *obj)
1564 {
1565 	uint8_t boolval = 0;
1566 	uint32_t boolsize = 0;
1567 	enum pkcs11_rc rc = PKCS11_CKR_GENERAL_ERROR;
1568 	enum pkcs11_class_id key_class = get_class(obj->attributes);
1569 
1570 	if (key_class != PKCS11_CKO_SECRET_KEY &&
1571 	    key_class != PKCS11_CKO_PRIVATE_KEY)
1572 		return true;
1573 
1574 	switch (req_attr->id) {
1575 	case PKCS11_CKA_PRIVATE_EXPONENT:
1576 	case PKCS11_CKA_PRIME_1:
1577 	case PKCS11_CKA_PRIME_2:
1578 	case PKCS11_CKA_EXPONENT_1:
1579 	case PKCS11_CKA_EXPONENT_2:
1580 	case PKCS11_CKA_COEFFICIENT:
1581 	case PKCS11_CKA_VALUE:
1582 		boolsize = sizeof(boolval);
1583 		rc = get_attribute(obj->attributes, PKCS11_CKA_EXTRACTABLE,
1584 				   &boolval, &boolsize);
1585 		if (rc || boolval == PKCS11_FALSE)
1586 			return false;
1587 
1588 		boolsize = sizeof(boolval);
1589 		rc = get_attribute(obj->attributes, PKCS11_CKA_SENSITIVE,
1590 				   &boolval, &boolsize);
1591 		if (rc || boolval == PKCS11_TRUE)
1592 			return false;
1593 		break;
1594 	default:
1595 		break;
1596 	}
1597 
1598 	return true;
1599 }
1600 
1601 static bool attr_is_modifiable_any_key(struct pkcs11_attribute_head *attr)
1602 {
1603 	switch (attr->id) {
1604 	case PKCS11_CKA_ID:
1605 	case PKCS11_CKA_START_DATE:
1606 	case PKCS11_CKA_END_DATE:
1607 	case PKCS11_CKA_DERIVE:
1608 		return true;
1609 	default:
1610 		return false;
1611 	}
1612 }
1613 
1614 static bool attr_is_modifiable_secret_key(struct pkcs11_attribute_head *attr,
1615 					  struct pkcs11_session *session,
1616 					  struct pkcs11_object *obj)
1617 {
1618 	switch (attr->id) {
1619 	case PKCS11_CKA_ENCRYPT:
1620 	case PKCS11_CKA_DECRYPT:
1621 	case PKCS11_CKA_SIGN:
1622 	case PKCS11_CKA_VERIFY:
1623 	case PKCS11_CKA_WRAP:
1624 	case PKCS11_CKA_UNWRAP:
1625 		return true;
1626 	/* Can't be modified once set to CK_FALSE - 12 in Table 10 */
1627 	case PKCS11_CKA_EXTRACTABLE:
1628 		return get_bool(obj->attributes, attr->id);
1629 	/* Can't be modified once set to CK_TRUE - 11 in Table 10 */
1630 	case PKCS11_CKA_SENSITIVE:
1631 	case PKCS11_CKA_WRAP_WITH_TRUSTED:
1632 		return !get_bool(obj->attributes, attr->id);
1633 	/* Change in CKA_TRUSTED can only be done by SO */
1634 	case PKCS11_CKA_TRUSTED:
1635 		return pkcs11_session_is_so(session);
1636 	case PKCS11_CKA_NEVER_EXTRACTABLE:
1637 	case PKCS11_CKA_ALWAYS_SENSITIVE:
1638 		return false;
1639 	default:
1640 		return false;
1641 	}
1642 }
1643 
1644 static bool attr_is_modifiable_public_key(struct pkcs11_attribute_head *attr,
1645 					  struct pkcs11_session *session,
1646 					  struct pkcs11_object *obj __unused)
1647 {
1648 	switch (attr->id) {
1649 	case PKCS11_CKA_SUBJECT:
1650 	case PKCS11_CKA_ENCRYPT:
1651 	case PKCS11_CKA_VERIFY:
1652 	case PKCS11_CKA_VERIFY_RECOVER:
1653 	case PKCS11_CKA_WRAP:
1654 		return true;
1655 	case PKCS11_CKA_TRUSTED:
1656 		/* Change in CKA_TRUSTED can only be done by SO */
1657 		return pkcs11_session_is_so(session);
1658 	default:
1659 		return false;
1660 	}
1661 }
1662 
1663 static bool attr_is_modifiable_private_key(struct pkcs11_attribute_head *attr,
1664 					   struct pkcs11_session *sess __unused,
1665 					   struct pkcs11_object *obj)
1666 {
1667 	switch (attr->id) {
1668 	case PKCS11_CKA_SUBJECT:
1669 	case PKCS11_CKA_DECRYPT:
1670 	case PKCS11_CKA_SIGN:
1671 	case PKCS11_CKA_SIGN_RECOVER:
1672 	case PKCS11_CKA_UNWRAP:
1673 	/*
1674 	 * TBD: Revisit if we don't support PKCS11_CKA_PUBLIC_KEY_INFO
1675 	 * Specification mentions that if this attribute is
1676 	 * supplied as part of a template for C_CreateObject, C_CopyObject or
1677 	 * C_SetAttributeValue for a private key, the token MUST verify
1678 	 * correspondence between the private key data and the public key data
1679 	 * as supplied in CKA_PUBLIC_KEY_INFO. This needs to be
1680 	 * taken care of when this object type will be implemented
1681 	 */
1682 	case PKCS11_CKA_PUBLIC_KEY_INFO:
1683 		return true;
1684 	/* Can't be modified once set to CK_FALSE - 12 in Table 10 */
1685 	case PKCS11_CKA_EXTRACTABLE:
1686 		return get_bool(obj->attributes, attr->id);
1687 	/* Can't be modified once set to CK_TRUE - 11 in Table 10 */
1688 	case PKCS11_CKA_SENSITIVE:
1689 	case PKCS11_CKA_WRAP_WITH_TRUSTED:
1690 		return !get_bool(obj->attributes, attr->id);
1691 	case PKCS11_CKA_NEVER_EXTRACTABLE:
1692 	case PKCS11_CKA_ALWAYS_SENSITIVE:
1693 		return false;
1694 	default:
1695 		return false;
1696 	}
1697 }
1698 
1699 static bool attribute_is_modifiable(struct pkcs11_session *session,
1700 				    struct pkcs11_attribute_head *req_attr,
1701 				    struct pkcs11_object *obj,
1702 				    enum pkcs11_class_id class,
1703 				    enum processing_func function)
1704 {
1705 	/* Check modifiable attributes common to any object */
1706 	switch (req_attr->id) {
1707 	case PKCS11_CKA_LABEL:
1708 		return true;
1709 	case PKCS11_CKA_TOKEN:
1710 	case PKCS11_CKA_MODIFIABLE:
1711 	case PKCS11_CKA_DESTROYABLE:
1712 	case PKCS11_CKA_PRIVATE:
1713 		return function == PKCS11_FUNCTION_COPY;
1714 	case PKCS11_CKA_COPYABLE:
1715 		/*
1716 		 * Specification mentions that if the attribute value is false
1717 		 * it can't be set to true. Reading this we assume that it
1718 		 * should be possible to modify this attribute even though this
1719 		 * is not marked as modifiable in Table 10 if done in right
1720 		 * direction i.e from TRUE -> FALSE.
1721 		 */
1722 		return get_bool(obj->attributes, req_attr->id);
1723 	default:
1724 		break;
1725 	}
1726 
1727 	/* Attribute checking based on class type */
1728 	switch (class) {
1729 	case PKCS11_CKO_SECRET_KEY:
1730 	case PKCS11_CKO_PUBLIC_KEY:
1731 	case PKCS11_CKO_PRIVATE_KEY:
1732 		if (attr_is_modifiable_any_key(req_attr))
1733 			return true;
1734 		if (class == PKCS11_CKO_SECRET_KEY &&
1735 		    attr_is_modifiable_secret_key(req_attr, session, obj))
1736 			return true;
1737 		if (class == PKCS11_CKO_PUBLIC_KEY &&
1738 		    attr_is_modifiable_public_key(req_attr, session, obj))
1739 			return true;
1740 		if (class == PKCS11_CKO_PRIVATE_KEY &&
1741 		    attr_is_modifiable_private_key(req_attr, session, obj))
1742 			return true;
1743 		break;
1744 	case PKCS11_CKO_DATA:
1745 		/* None of the data object attributes are modifiable */
1746 		return false;
1747 	default:
1748 		break;
1749 	}
1750 
1751 	return false;
1752 }
1753 
1754 enum pkcs11_rc check_attrs_against_modification(struct pkcs11_session *session,
1755 						struct obj_attrs *head,
1756 						struct pkcs11_object *obj,
1757 						enum processing_func function)
1758 {
1759 	enum pkcs11_class_id class = PKCS11_CKO_UNDEFINED_ID;
1760 	char *cur = NULL;
1761 	char *end = NULL;
1762 	size_t len = 0;
1763 
1764 	class = get_class(obj->attributes);
1765 
1766 	cur = (char *)head + sizeof(struct obj_attrs);
1767 	end = cur + head->attrs_size;
1768 
1769 	for (; cur < end; cur += len) {
1770 		/* Structure aligned copy of the pkcs11_ref in the object */
1771 		struct pkcs11_attribute_head cli_ref = { };
1772 
1773 		TEE_MemMove(&cli_ref, cur, sizeof(cli_ref));
1774 		len = sizeof(cli_ref) + cli_ref.size;
1775 
1776 		/*
1777 		 * Check 1 - Check if attribute belongs to the object
1778 		 * The obj->attributes has all the attributes in
1779 		 * it which are allowed for an object.
1780 		 */
1781 		if (get_attribute_ptr(obj->attributes, cli_ref.id, NULL,
1782 				      NULL) == PKCS11_RV_NOT_FOUND)
1783 			return PKCS11_CKR_ATTRIBUTE_TYPE_INVALID;
1784 
1785 		/* Check 2 - Is attribute modifiable */
1786 		if (!attribute_is_modifiable(session, &cli_ref, obj, class,
1787 					     function))
1788 			return PKCS11_CKR_ATTRIBUTE_READ_ONLY;
1789 
1790 		/*
1791 		 * Checks for modification in PKCS11_CKA_TOKEN and
1792 		 * PKCS11_CKA_PRIVATE are required for PKCS11_FUNCTION_COPY
1793 		 * only, so skip them for PKCS11_FUNCTION_MODIFY.
1794 		 */
1795 		if (function == PKCS11_FUNCTION_MODIFY)
1796 			continue;
1797 
1798 		/*
1799 		 * An attempt to copy an object to a token will fail for
1800 		 * RO session
1801 		 */
1802 		if (cli_ref.id == PKCS11_CKA_TOKEN &&
1803 		    get_bool(head, PKCS11_CKA_TOKEN)) {
1804 			if (!pkcs11_session_is_read_write(session)) {
1805 				DMSG("Can't copy to token in a RO session");
1806 				return PKCS11_CKR_SESSION_READ_ONLY;
1807 			}
1808 		}
1809 
1810 		if (cli_ref.id == PKCS11_CKA_PRIVATE) {
1811 			bool parent_priv =
1812 				get_bool(obj->attributes, cli_ref.id);
1813 			bool obj_priv = get_bool(head, cli_ref.id);
1814 
1815 			/*
1816 			 * If PKCS11_CKA_PRIVATE is being set to TRUE from
1817 			 * FALSE, user has to be logged in
1818 			 */
1819 			if (!parent_priv && obj_priv) {
1820 				if ((pkcs11_session_is_public(session) ||
1821 				     pkcs11_session_is_so(session)))
1822 					return PKCS11_CKR_USER_NOT_LOGGED_IN;
1823 			}
1824 
1825 			/*
1826 			 * Restriction added - Even for Copy, do not allow
1827 			 * modification of CKA_PRIVATE from TRUE to FALSE
1828 			 */
1829 			if (parent_priv && !obj_priv)
1830 				return PKCS11_CKR_TEMPLATE_INCONSISTENT;
1831 		}
1832 	}
1833 
1834 	return PKCS11_CKR_OK;
1835 }
1836 
1837 static enum pkcs11_rc set_secret_key_data(struct obj_attrs **head, void *data,
1838 					  size_t key_size)
1839 {
1840 	uint32_t size = sizeof(uint32_t);
1841 	uint32_t key_length = 0;
1842 	enum pkcs11_rc rc = PKCS11_CKR_GENERAL_ERROR;
1843 
1844 	/* Get key size if present in template */
1845 	rc = get_attribute(*head, PKCS11_CKA_VALUE_LEN, &key_length, &size);
1846 	if (rc && rc != PKCS11_RV_NOT_FOUND)
1847 		return rc;
1848 
1849 	if (key_length) {
1850 		if (key_size < key_length)
1851 			return PKCS11_CKR_DATA_LEN_RANGE;
1852 	} else {
1853 		key_length = key_size;
1854 		rc = set_attribute(head, PKCS11_CKA_VALUE_LEN, &key_length,
1855 				   sizeof(uint32_t));
1856 		if (rc)
1857 			return rc;
1858 	}
1859 
1860 	/* Now we can check the VALUE_LEN field */
1861 	rc = check_created_attrs(*head, NULL);
1862 	if (rc)
1863 		return rc;
1864 
1865 	/* Remove the default empty value attribute if found */
1866 	rc = remove_empty_attribute(head, PKCS11_CKA_VALUE);
1867 	if (rc != PKCS11_CKR_OK && rc != PKCS11_RV_NOT_FOUND)
1868 		return PKCS11_CKR_GENERAL_ERROR;
1869 
1870 	return add_attribute(head, PKCS11_CKA_VALUE, data, key_length);
1871 }
1872 
1873 enum pkcs11_rc set_key_data(struct obj_attrs **head, void *data,
1874 			    size_t key_size)
1875 {
1876 	switch (get_class(*head)) {
1877 	case PKCS11_CKO_SECRET_KEY:
1878 		return set_secret_key_data(head, data, key_size);
1879 	default:
1880 		return PKCS11_CKR_GENERAL_ERROR;
1881 	}
1882 }
1883 
1884 enum pkcs11_rc get_key_data_to_wrap(struct obj_attrs *head, void **data,
1885 				    uint32_t *sz)
1886 {
1887 	switch (get_class(head)) {
1888 	case PKCS11_CKO_SECRET_KEY:
1889 		if (get_attribute_ptr(head, PKCS11_CKA_VALUE, data, sz))
1890 			return PKCS11_CKR_ARGUMENTS_BAD;
1891 		break;
1892 	default:
1893 		return PKCS11_CKR_GENERAL_ERROR;
1894 	}
1895 
1896 	return PKCS11_CKR_OK;
1897 }
1898 
1899 enum pkcs11_rc add_missing_attribute_id(struct obj_attrs **pub_head,
1900 					struct obj_attrs **priv_head)
1901 {
1902 	enum pkcs11_rc rc = PKCS11_CKR_GENERAL_ERROR;
1903 	void *id1 = NULL;
1904 	uint32_t id1_size = 0;
1905 	void *id2 = NULL;
1906 	uint32_t id2_size = 0;
1907 
1908 	assert(pub_head);
1909 	assert(priv_head);
1910 
1911 	rc = get_attribute_ptr(*pub_head, PKCS11_CKA_ID, &id1, &id1_size);
1912 	if (rc) {
1913 		if (rc != PKCS11_RV_NOT_FOUND)
1914 			return rc;
1915 		id1 = NULL;
1916 	} else if (!id1_size) {
1917 		id1 = NULL;
1918 	}
1919 
1920 	rc = get_attribute_ptr(*priv_head, PKCS11_CKA_ID, &id2, &id2_size);
1921 	if (rc) {
1922 		if (rc != PKCS11_RV_NOT_FOUND)
1923 			return rc;
1924 		id2 = NULL;
1925 	} else if (!id2_size) {
1926 		id2 = NULL;
1927 	}
1928 
1929 	/* Both have value -- let them be what caller has specified them */
1930 	if (id1 && id2)
1931 		return PKCS11_CKR_OK;
1932 
1933 	/* Both are empty -- leave empty values */
1934 	if (!id1 && !id2)
1935 		return PKCS11_CKR_OK;
1936 
1937 	/* Cross copy CKA_ID value */
1938 	if (id1)
1939 		return set_attribute(priv_head, PKCS11_CKA_ID, id1, id1_size);
1940 	else
1941 		return set_attribute(pub_head, PKCS11_CKA_ID, id2, id2_size);
1942 }
1943