#include "mod_gpg/GpgStorage.h"
#include "cdc_hal/ISecureElement.h"
#include "cdc_core/Crypto.h"
#include "cdc_log.h"
#include <mbedtls/sha256.h>
#include <mbedtls/hkdf.h>
#include <mbedtls/md.h>
#include <mbedtls/platform_util.h>
#include <esp_random.h>
#include <esp_attr.h>
#include <string.h>

Classes
struct	cdc::mod_gpg::DecKeyStorage
struct	cdc::mod_gpg::AesKeyStorage

Namespaces
namespace	cdc
namespace	cdc::mod_gpg

Functions
static cdc::hal::ISecureElement *	get_se ()
static bool	pin_to_hash (const char pin, uint8_t hash_out)
	Computes SHA-256 over a PIN string.
static bool	derive_storage_key (uint16_t slot_id, const uint8_t pin_hash, uint8_t key_out)
	Derives a 32-byte storage key for a specific slot.
static void	build_aad (uint16_t slot_id, const uint8_t magic[MAGIC_SIZE], uint8_t aad_out[6])
	Builds the 6-byte AAD for a slot: slot_id (BE) \|\| magic (4).
static uint16_t	resolve_slot (uint16_t rel_index)
	Resolves an absolute R-Memory slot index relative to the module range.
void	gpg_storage_set_slot_range (uint16_t eccStart, uint16_t eccEnd)
void	gpg_storage_set_rmem_range (uint16_t rmemStart, uint16_t rmemEnd)
bool	gpg_storage_ready (void)
uint8_t	gpg_storage_sig_slot (void)
uint8_t	gpg_storage_dec_slot (void)
uint8_t	gpg_storage_aut_slot (void)
static bool	save_slot_encrypted (uint16_t slot_id, const uint8_t magic[MAGIC_SIZE], const uint8_t payload, size_t payload_len, uint8_t record_buf, size_t record_buf_len, const char *pin)
	Encrypts and writes an arbitrary payload to a slot.
static bool	load_slot_decrypted (uint16_t slot_id, const uint8_t magic[MAGIC_SIZE], uint8_t payload_out, size_t payload_len, const char pin)
	Reads and decrypts a payload from a slot.
bool	gpg_storage_save_dec_privkey (const uint8_t privkey, const char pin)
	Saves a DEC private key into R-Memory using PIN-bound AES-GCM.
bool	gpg_storage_load_dec_privkey (uint8_t privkey_out, const char pin)
	Loads and decrypts the DEC private key from R-Memory.
bool	gpg_storage_has_dec_privkey (void)
	Returns true if encrypted DEC private key record exists.
bool	gpg_storage_delete_dec_privkey (void)
	Deletes DEC private key record.
bool	gpg_storage_save_aes_key (const uint8_t key, size_t key_len, const char pin)
	Saves the symmetric AES key for PSO:DECIPHER (DO 0xD5).
bool	gpg_storage_load_aes_key (uint8_t key_out, size_t key_len_out, const char *pin)
	Loads the symmetric AES key from R-Memory.
bool	gpg_storage_has_aes_key (void)
	Returns true if a symmetric AES key record exists.
bool	gpg_storage_delete_aes_key (void)
	Deletes the symmetric AES key record.
void	gpg_storage_set_rsa_slot_range (uint16_t start, uint16_t end)
	Sets the dedicated R-Memory range used for RSA private-key blobs.
static bool	rsa_role_slots (uint8_t role, uint16_t slot0, uint16_t slot1)
	Resolves the two consecutive R-Memory slots for an RSA key role.
bool	gpg_storage_save_rsa_key (uint8_t role, const uint8_t blob, size_t blob_len, const char pin)
	Saves an encrypted RSA private-key blob for a key role.
bool	gpg_storage_load_rsa_key (uint8_t role, uint8_t blob_out, size_t blob_cap, size_t blob_len_out, const char *pin)
	Loads and decrypts the RSA private-key blob for a key role.
bool	gpg_storage_has_rsa_key (uint8_t role)
	Returns true if an RSA private-key blob exists for the role.
bool	gpg_storage_delete_rsa_key (uint8_t role)
	Deletes the RSA private-key blob for the role (both slots).
void	gpg_storage_set_session_pin (const char *pin)
	Stores session PIN-derived key after successful PIN verification.
bool	gpg_storage_get_session_key (uint8_t *key_out)
	Returns current session key if session is active.
void	gpg_storage_clear_session (void)
	Clears the cached session key.

Variables
static const char *	TAG = "GPGStorage"
	Encrypted persistent storage for OpenPGP secret material.
static constexpr uint16_t	RMEM_SLOT_DEC_KEY = 1
	R-Memory slot offset for the DEC private key payload (= ECC slot 2).
static constexpr uint16_t	RMEM_SLOT_AES_KEY = 2
	R-Memory slot offset for the symmetric AES key payload (= ECC slot 3).
static constexpr uint8_t	DEC_KEY_MAGIC [4] = {'E', 'C', 'D', 'H'}
	Magic marker for encrypted DEC private key records.
static constexpr uint8_t	AES_KEY_MAGIC [4] = {'A', 'E', 'S', '1'}
	Magic marker for symmetric AES key records (DO 0xD5).
static constexpr size_t	MAGIC_SIZE = 4
static constexpr size_t	NONCE_SIZE = 12
static constexpr size_t	TAG_SIZE = 16
static constexpr size_t	PRIVKEY_SIZE = 32
static constexpr size_t	AES_MAX_KEY_SIZE = 32
static constexpr size_t	DEC_TOTAL_SIZE = MAGIC_SIZE + NONCE_SIZE + PRIVKEY_SIZE + TAG_SIZE
static constexpr size_t	AES_RECORD_PAYLOAD = 1 + AES_MAX_KEY_SIZE
static constexpr size_t	AES_TOTAL_SIZE = MAGIC_SIZE + NONCE_SIZE + AES_RECORD_PAYLOAD + TAG_SIZE
static constexpr char	HKDF_INFO [] = "GPG-STORAGE-V2"
	HKDF info string for storage key derivation.
static struct { ... }	s_storage
static constexpr uint8_t	RSA_KEY_MAGIC [MAGIC_SIZE] = {'R', 'S', 'A', '1'}
	Magic marker for encrypted RSA private-key records.
static constexpr uint16_t	RSA_SLOTS_PER_ROLE = 2
static constexpr uint8_t	RSA_ROLE_COUNT = 3
static constexpr size_t	RSA_REC_HEADER = 2
static constexpr size_t	RSA_ENVELOPE = MAGIC_SIZE + NONCE_SIZE + TAG_SIZE
static constexpr size_t	RSA_SLOT_CAP = cdc::hal::ISecureElement::RMEM_SLOT_SIZE
static uint16_t	s_rsa_rmem_start = 0
static uint16_t	s_rsa_rmem_end = 0
static uint8_t	s_rsa_record [RSA_REC_HEADER+GPG_RSA_BLOB_MAX+RSA_ENVELOPE]

Function Documentation

◆ build_aad()

void build_aad	(	uint16_t	slot_id,
		const uint8_t	magic[MAGIC_SIZE],
		uint8_t	aad_out[6] )

static

Builds the 6-byte AAD for a slot: slot_id (BE) || magic (4).

Parameters

slot_id	Absolute R-Memory slot identifier.
magic	4-byte magic marker.
aad_out	6-byte output buffer.

Definition at line 172 of file GpgStorage.cpp.

References MAGIC_SIZE.

Referenced by gpg_storage_load_rsa_key(), gpg_storage_save_rsa_key(), load_slot_decrypted(), and save_slot_encrypted().

◆ derive_storage_key()

bool derive_storage_key	(	uint16_t	slot_id,
		const uint8_t *	pin_hash,
		uint8_t *	key_out )

static

Derives a 32-byte storage key for a specific slot.

Parameters

slot_id	Absolute R-Memory slot identifier (used in HKDF salt).
pin_hash	Optional 32-byte PIN hash; nullptr falls back to chip-bound key.
key_out	32-byte output buffer.

Returns: true on success.

Definition at line 130 of file GpgStorage.cpp.

References get_se(), and HKDF_INFO.

Referenced by gpg_storage_load_rsa_key(), gpg_storage_save_rsa_key(), load_slot_decrypted(), and save_slot_encrypted().

◆ get_se()

cdc::hal::ISecureElement * get_se ( )

static

Definition at line 106 of file GpgStorage.cpp.

References cdc::hal::getSecureElementInstance().

Referenced by derive_storage_key(), gpg_storage_delete_aes_key(), gpg_storage_delete_dec_privkey(), gpg_storage_delete_rsa_key(), gpg_storage_has_aes_key(), gpg_storage_has_dec_privkey(), gpg_storage_has_rsa_key(), gpg_storage_load_rsa_key(), gpg_storage_save_rsa_key(), load_slot_decrypted(), and save_slot_encrypted().

◆ gpg_storage_aut_slot()

uint8_t gpg_storage_aut_slot ( void )

Definition at line 210 of file GpgStorage.cpp.

References s_storage.

Referenced by cmd_get_data(), cmd_internal_authenticate(), cmd_put_data_odd(), get_ecc_slot_for_key_ref(), gpg_generate_key(), openpgp_factory_reset(), and wipe_role_key().

◆ gpg_storage_clear_session()

void gpg_storage_clear_session ( void )

Clears the cached session key.

Definition at line 659 of file GpgStorage.cpp.

References s_storage.

Referenced by cmd_select(), cmd_verify(), gpg_storage_set_session_pin(), and openpgp_factory_reset().

◆ gpg_storage_dec_slot()

uint8_t gpg_storage_dec_slot ( void )

Definition at line 209 of file GpgStorage.cpp.

References s_storage.

Referenced by get_ecc_slot_for_key_ref(), and gpg_generate_key().

◆ gpg_storage_delete_aes_key()

bool gpg_storage_delete_aes_key ( void )

Deletes the symmetric AES key record.

Definition at line 440 of file GpgStorage.cpp.

References get_se(), cdc::hal::OK, resolve_slot(), and RMEM_SLOT_AES_KEY.

◆ gpg_storage_delete_dec_privkey()

bool gpg_storage_delete_dec_privkey ( void )

Deletes DEC private key record.

Definition at line 379 of file GpgStorage.cpp.

References get_se(), cdc::hal::OK, resolve_slot(), and RMEM_SLOT_DEC_KEY.

Referenced by openpgp_factory_reset(), and wipe_role_key().

◆ gpg_storage_delete_rsa_key()

bool gpg_storage_delete_rsa_key ( uint8_t role )

Deletes the RSA private-key blob for the role (both slots).

Definition at line 628 of file GpgStorage.cpp.

References get_se(), cdc::hal::OK, and rsa_role_slots().

Referenced by openpgp_factory_reset(), and wipe_role_key().

◆ gpg_storage_get_session_key()

bool gpg_storage_get_session_key ( uint8_t * key_out )

Returns current session key if session is active.

Parameters

key_out 32-byte output buffer.

Returns: true if session key is available.

Definition at line 651 of file GpgStorage.cpp.

References s_storage.

◆ gpg_storage_has_aes_key()

bool gpg_storage_has_aes_key ( void )

Returns true if a symmetric AES key record exists.

Definition at line 428 of file GpgStorage.cpp.

References AES_KEY_MAGIC, get_se(), MAGIC_SIZE, cdc::hal::OK, resolve_slot(), and RMEM_SLOT_AES_KEY.

Referenced by cmd_pso_decipher_aes().

◆ gpg_storage_has_dec_privkey()

bool gpg_storage_has_dec_privkey ( void )

Returns true if encrypted DEC private key record exists.

Definition at line 367 of file GpgStorage.cpp.

References DEC_KEY_MAGIC, DEC_TOTAL_SIZE, get_se(), MAGIC_SIZE, cdc::hal::OK, resolve_slot(), and RMEM_SLOT_DEC_KEY.

Referenced by cmd_get_data(), cmd_pso_decipher(), and read_public_key().

◆ gpg_storage_has_rsa_key()

bool gpg_storage_has_rsa_key ( uint8_t role )

Returns true if an RSA private-key blob exists for the role.

Definition at line 614 of file GpgStorage.cpp.

References get_se(), MAGIC_SIZE, cdc::hal::OK, RSA_KEY_MAGIC, RSA_REC_HEADER, and rsa_role_slots().

Referenced by cmd_get_data().

◆ gpg_storage_load_aes_key()

bool gpg_storage_load_aes_key	(	uint8_t *	key_out,
		size_t *	key_len_out,
		const char *	pin )

Loads the symmetric AES key from R-Memory.

Parameters

key_out	Output buffer (must hold at least 32 bytes).
key_len_out	Receives the stored key length (16 or 32).
pin	Session PIN; nullptr falls back to chip-bound key.

Returns: true on success.

Definition at line 409 of file GpgStorage.cpp.

References AES_KEY_MAGIC, AES_RECORD_PAYLOAD, load_slot_decrypted(), resolve_slot(), and RMEM_SLOT_AES_KEY.

Referenced by cmd_pso_decipher_aes().

◆ gpg_storage_load_dec_privkey()

bool gpg_storage_load_dec_privkey	(	uint8_t *	privkey_out,
		const char *	pin )

Loads and decrypts the DEC private key from R-Memory.

Parameters

privkey_out	32-byte output buffer.
pin	Session PIN; nullptr falls back to chip-bound key.

Returns: true on success.

Definition at line 361 of file GpgStorage.cpp.

References DEC_KEY_MAGIC, load_slot_decrypted(), PRIVKEY_SIZE, resolve_slot(), and RMEM_SLOT_DEC_KEY.

Referenced by cmd_pso_decipher(), gpg_get_dec_pubkey(), and read_public_key().

◆ gpg_storage_load_rsa_key()

bool gpg_storage_load_rsa_key	(	uint8_t	role,
		uint8_t *	blob_out,
		size_t	blob_cap,
		size_t *	blob_len_out,
		const char *	pin )

Loads and decrypts the RSA private-key blob for a key role.

Parameters

role	0 = SIG, 1 = DEC, 2 = AUT.
blob_out	Output buffer (>= GPG_RSA_BLOB_MAX bytes).
blob_cap	Capacity of blob_out.
blob_len_out	Receives the decrypted blob length.
pin	Session PIN; nullptr falls back to chip-bound key.

Returns: true on success.

Definition at line 544 of file GpgStorage.cpp.

References cdc::core::aesGcm256Open(), build_aad(), derive_storage_key(), get_se(), GPG_RSA_BLOB_MAX, MAGIC_SIZE, NONCE_SIZE, cdc::hal::OK, pin_to_hash(), RSA_ENVELOPE, RSA_KEY_MAGIC, RSA_REC_HEADER, rsa_role_slots(), and s_rsa_record.

Referenced by build_rsa_pubkey_from_storage(), cmd_internal_authenticate(), cmd_pso_cds(), and cmd_pso_decipher().

◆ gpg_storage_ready()

bool gpg_storage_ready ( void )

Definition at line 207 of file GpgStorage.cpp.

References s_storage.

Referenced by gpg_export_pubkey_pem(), gpg_generate_key(), gpg_init(), gpg_reset(), and cdc::mod_gpg::GpgModule::init().

◆ gpg_storage_save_aes_key()

bool gpg_storage_save_aes_key	(	const uint8_t *	key,
		size_t	key_len,
		const char *	pin )

Saves the symmetric AES key for PSO:DECIPHER (DO 0xD5).

Parameters

key	AES key bytes (16 or 32).
key_len	Key length (16 or 32).
pin	Session PIN; nullptr falls back to chip-bound key.

Returns: true on success.

Definition at line 386 of file GpgStorage.cpp.

References AES_KEY_MAGIC, AES_MAX_KEY_SIZE, AES_RECORD_PAYLOAD, AES_TOTAL_SIZE, LOG_I, resolve_slot(), RMEM_SLOT_AES_KEY, save_slot_encrypted(), and TAG.

Referenced by cmd_put_data().

◆ gpg_storage_save_dec_privkey()

bool gpg_storage_save_dec_privkey	(	const uint8_t *	privkey,
		const char *	pin )

Saves a DEC private key into R-Memory using PIN-bound AES-GCM.

Parameters

privkey	32-byte P-256 private key scalar.
pin	Session PIN; nullptr falls back to chip-bound key.

Returns: true on success.

Definition at line 348 of file GpgStorage.cpp.

References DEC_KEY_MAGIC, DEC_TOTAL_SIZE, LOG_I, PRIVKEY_SIZE, resolve_slot(), RMEM_SLOT_DEC_KEY, save_slot_encrypted(), and TAG.

Referenced by cmd_put_data_odd(), generate_dec_key(), and gpg_generate_key().

◆ gpg_storage_save_rsa_key()

bool gpg_storage_save_rsa_key	(	uint8_t	role,
		const uint8_t *	blob,
		size_t	blob_len,
		const char *	pin )

Saves an encrypted RSA private-key blob for a key role.

Parameters

role	0 = SIG, 1 = DEC, 2 = AUT.
blob	Serialized RSA private material.
blob_len	Blob length (<= GPG_RSA_BLOB_MAX).
pin	Session PIN; nullptr falls back to chip-bound key.

Returns: true on success.

Definition at line 483 of file GpgStorage.cpp.

References cdc::core::aesGcm256Seal(), build_aad(), derive_storage_key(), get_se(), GPG_RSA_BLOB_MAX, LOG_E, LOG_I, MAGIC_SIZE, NONCE_SIZE, cdc::hal::OK, pin_to_hash(), RSA_ENVELOPE, RSA_KEY_MAGIC, RSA_REC_HEADER, rsa_role_slots(), RSA_SLOT_CAP, s_rsa_record, and TAG.

Referenced by cmd_generate_keypair(), and cmd_put_data_odd().

◆ gpg_storage_set_rmem_range()

void gpg_storage_set_rmem_range	(	uint16_t	rmemStart,
		uint16_t	rmemEnd )

Definition at line 202 of file GpgStorage.cpp.

References s_storage.

Referenced by cdc::mod_gpg::GpgModule::init().

◆ gpg_storage_set_rsa_slot_range()

void gpg_storage_set_rsa_slot_range	(	uint16_t	start,
		uint16_t	end )

Sets the dedicated R-Memory range used for RSA private-key blobs.

Distinct from the primary GPG range; carved as mod_gpg_rsa in the slot map. Each of the three roles occupies two consecutive slots so an RSA-4096 blob can span them.

Parameters

start	First absolute R-Memory slot of the RSA pool.
end	Last absolute R-Memory slot of the RSA pool.

Definition at line 462 of file GpgStorage.cpp.

References s_rsa_rmem_end, and s_rsa_rmem_start.

Referenced by cdc::mod_gpg::GpgModule::init().

◆ gpg_storage_set_session_pin()

void gpg_storage_set_session_pin ( const char * pin )

Stores session PIN-derived key after successful PIN verification.

Parameters

pin	Verified PIN string.

Definition at line 638 of file GpgStorage.cpp.

References gpg_storage_clear_session(), pin_to_hash(), and s_storage.

Referenced by cmd_verify().

◆ gpg_storage_set_slot_range()

void gpg_storage_set_slot_range	(	uint16_t	eccStart,
		uint16_t	eccEnd )

Definition at line 187 of file GpgStorage.cpp.

References s_storage.

Referenced by cdc::mod_gpg::GpgModule::init().

◆ gpg_storage_sig_slot()

uint8_t gpg_storage_sig_slot ( void )

Definition at line 208 of file GpgStorage.cpp.

References s_storage.

Referenced by cmd_get_data(), cmd_pso_cds(), cmd_put_data_odd(), get_ecc_slot_for_key_ref(), gpg_alchemy_fingerprint(), gpg_export_pubkey_pem(), gpg_generate_key(), gpg_get_status(), cdc::mod_gpg::gpgBuildOwnKeyPayload(), cdc::mod_gpg::gpgCrossSign(), openpgp_factory_reset(), and wipe_role_key().

◆ load_slot_decrypted()

bool load_slot_decrypted	(	uint16_t	slot_id,
		const uint8_t	magic[MAGIC_SIZE],
		uint8_t *	payload_out,
		size_t	payload_len,
		const char *	pin )

static

Reads and decrypts a payload from a slot.

Parameters

slot_id	Absolute R-Memory slot.
magic	4-byte magic marker.
payload_out	Output buffer.
payload_len	Expected plaintext length.
pin	Session PIN; nullptr falls back to chip-bound key.

Returns: true on success.

Definition at line 291 of file GpgStorage.cpp.

References cdc::core::aesGcm256Open(), build_aad(), derive_storage_key(), get_se(), MAGIC_SIZE, NONCE_SIZE, cdc::hal::OK, pin_to_hash(), and TAG_SIZE.

Referenced by gpg_storage_load_aes_key(), and gpg_storage_load_dec_privkey().

◆ pin_to_hash()

bool pin_to_hash	(	const char *	pin,
		uint8_t *	hash_out )

static

Computes SHA-256 over a PIN string.

Parameters

pin	PIN string; may be empty/nullptr.
hash_out	32-byte output buffer.

Returns: true on success.

Definition at line 116 of file GpgStorage.cpp.

Referenced by gpg_storage_load_rsa_key(), gpg_storage_save_rsa_key(), gpg_storage_set_session_pin(), load_slot_decrypted(), and save_slot_encrypted().

◆ resolve_slot()

uint16_t resolve_slot ( uint16_t rel_index )

static

Resolves an absolute R-Memory slot index relative to the module range.

Parameters

rel_index Offset within the module range.

Returns: Absolute slot index.

Definition at line 183 of file GpgStorage.cpp.

References s_storage.

Referenced by gpg_storage_delete_aes_key(), gpg_storage_delete_dec_privkey(), gpg_storage_has_aes_key(), gpg_storage_has_dec_privkey(), gpg_storage_load_aes_key(), gpg_storage_load_dec_privkey(), gpg_storage_save_aes_key(), and gpg_storage_save_dec_privkey().

◆ rsa_role_slots()

bool rsa_role_slots	(	uint8_t	role,
		uint16_t *	slot0,
		uint16_t *	slot1 )

static

Resolves the two consecutive R-Memory slots for an RSA key role.

Parameters

role	0 = SIG, 1 = DEC, 2 = AUT.
slot0	First slot output.
slot1	Second slot output (RSA-4096 spills into it).

Returns: true if the range is configured and holds both slots.

Definition at line 474 of file GpgStorage.cpp.

References RSA_ROLE_COUNT, RSA_SLOTS_PER_ROLE, s_rsa_rmem_end, and s_rsa_rmem_start.

Referenced by gpg_storage_delete_rsa_key(), gpg_storage_has_rsa_key(), gpg_storage_load_rsa_key(), and gpg_storage_save_rsa_key().

◆ save_slot_encrypted()

bool save_slot_encrypted	(	uint16_t	slot_id,
		const uint8_t	magic[MAGIC_SIZE],
		const uint8_t *	payload,
		size_t	payload_len,
		uint8_t *	record_buf,
		size_t	record_buf_len,
		const char *	pin )

static

Encrypts and writes an arbitrary payload to a slot.

Parameters

slot_id	Absolute R-Memory slot.
magic	4-byte magic marker.
payload	Plaintext bytes.
payload_len	Plaintext length.
record_buf	Scratch buffer; must hold MAGIC + NONCE + payload_len + TAG.
record_buf_len	Length of record_buf.
pin	Session PIN; nullptr falls back to chip-bound key.

Returns: true on success.

Definition at line 223 of file GpgStorage.cpp.

References cdc::core::aesGcm256Seal(), build_aad(), derive_storage_key(), get_se(), LOG_E, MAGIC_SIZE, NONCE_SIZE, cdc::hal::OK, pin_to_hash(), TAG, and TAG_SIZE.

Referenced by gpg_storage_save_aes_key(), and gpg_storage_save_dec_privkey().

Variable Documentation

◆ AES_KEY_MAGIC

uint8_t AES_KEY_MAGIC[4] = {'A', 'E', 'S', '1'}

staticconstexpr

Magic marker for symmetric AES key records (DO 0xD5).

Definition at line 37 of file GpgStorage.cpp.

Referenced by gpg_storage_has_aes_key(), gpg_storage_load_aes_key(), and gpg_storage_save_aes_key().

◆ AES_MAX_KEY_SIZE

size_t AES_MAX_KEY_SIZE = 32

staticconstexpr

Definition at line 43 of file GpgStorage.cpp.

Referenced by gpg_storage_save_aes_key().

◆ AES_RECORD_PAYLOAD

size_t AES_RECORD_PAYLOAD = 1 + AES_MAX_KEY_SIZE

staticconstexpr

Definition at line 45 of file GpgStorage.cpp.

Referenced by gpg_storage_load_aes_key(), and gpg_storage_save_aes_key().

◆ AES_TOTAL_SIZE

size_t AES_TOTAL_SIZE = MAGIC_SIZE + NONCE_SIZE + AES_RECORD_PAYLOAD + TAG_SIZE

staticconstexpr

Definition at line 46 of file GpgStorage.cpp.

Referenced by gpg_storage_save_aes_key().

◆ DEC_KEY_MAGIC

uint8_t DEC_KEY_MAGIC[4] = {'E', 'C', 'D', 'H'}

staticconstexpr

Magic marker for encrypted DEC private key records.

Definition at line 34 of file GpgStorage.cpp.

Referenced by gpg_storage_has_dec_privkey(), gpg_storage_load_dec_privkey(), and gpg_storage_save_dec_privkey().

◆ DEC_TOTAL_SIZE

size_t DEC_TOTAL_SIZE = MAGIC_SIZE + NONCE_SIZE + PRIVKEY_SIZE + TAG_SIZE

staticconstexpr

Definition at line 44 of file GpgStorage.cpp.

Referenced by gpg_storage_has_dec_privkey(), and gpg_storage_save_dec_privkey().

◆ HKDF_INFO

char HKDF_INFO[] = "GPG-STORAGE-V2"

staticconstexpr

HKDF info string for storage key derivation.

Definition at line 49 of file GpgStorage.cpp.

Referenced by derive_storage_key().

◆ MAGIC_SIZE

size_t MAGIC_SIZE = 4

staticconstexpr

Definition at line 39 of file GpgStorage.cpp.

Referenced by build_aad(), gpg_storage_has_aes_key(), gpg_storage_has_dec_privkey(), gpg_storage_has_rsa_key(), gpg_storage_load_rsa_key(), gpg_storage_save_rsa_key(), load_slot_decrypted(), and save_slot_encrypted().

◆ NONCE_SIZE

size_t NONCE_SIZE = 12

staticconstexpr

Definition at line 40 of file GpgStorage.cpp.

Referenced by gpg_storage_load_rsa_key(), gpg_storage_save_rsa_key(), load_slot_decrypted(), and save_slot_encrypted().

◆ PRIVKEY_SIZE

size_t PRIVKEY_SIZE = 32

staticconstexpr

Definition at line 42 of file GpgStorage.cpp.

Referenced by gpg_storage_load_dec_privkey(), and gpg_storage_save_dec_privkey().

◆ RMEM_SLOT_AES_KEY

uint16_t RMEM_SLOT_AES_KEY = 2

staticconstexpr

R-Memory slot offset for the symmetric AES key payload (= ECC slot 3).

Definition at line 31 of file GpgStorage.cpp.

Referenced by gpg_storage_delete_aes_key(), gpg_storage_has_aes_key(), gpg_storage_load_aes_key(), and gpg_storage_save_aes_key().

◆ RMEM_SLOT_DEC_KEY

uint16_t RMEM_SLOT_DEC_KEY = 1

staticconstexpr

R-Memory slot offset for the DEC private key payload (= ECC slot 2).

Definition at line 28 of file GpgStorage.cpp.

Referenced by gpg_storage_delete_dec_privkey(), gpg_storage_has_dec_privkey(), gpg_storage_load_dec_privkey(), and gpg_storage_save_dec_privkey().

◆ RSA_ENVELOPE

size_t RSA_ENVELOPE = MAGIC_SIZE + NONCE_SIZE + TAG_SIZE

staticconstexpr

Definition at line 453 of file GpgStorage.cpp.

Referenced by gpg_storage_load_rsa_key(), and gpg_storage_save_rsa_key().

◆ RSA_KEY_MAGIC

uint8_t RSA_KEY_MAGIC[MAGIC_SIZE] = {'R', 'S', 'A', '1'}

staticconstexpr

Magic marker for encrypted RSA private-key records.

Definition at line 448 of file GpgStorage.cpp.

Referenced by gpg_storage_has_rsa_key(), gpg_storage_load_rsa_key(), and gpg_storage_save_rsa_key().

◆ RSA_REC_HEADER

size_t RSA_REC_HEADER = 2

staticconstexpr

Definition at line 452 of file GpgStorage.cpp.

Referenced by gpg_storage_has_rsa_key(), gpg_storage_load_rsa_key(), and gpg_storage_save_rsa_key().

◆ RSA_ROLE_COUNT

uint8_t RSA_ROLE_COUNT = 3

staticconstexpr

Definition at line 451 of file GpgStorage.cpp.

Referenced by rsa_role_slots().

◆ RSA_SLOT_CAP

size_t RSA_SLOT_CAP = cdc::hal::ISecureElement::RMEM_SLOT_SIZE

staticconstexpr

Definition at line 454 of file GpgStorage.cpp.

Referenced by gpg_storage_save_rsa_key().

◆ RSA_SLOTS_PER_ROLE

uint16_t RSA_SLOTS_PER_ROLE = 2

staticconstexpr

Definition at line 450 of file GpgStorage.cpp.

Referenced by rsa_role_slots().

◆ s_rsa_record

uint8_t s_rsa_record[RSA_REC_HEADER+GPG_RSA_BLOB_MAX+RSA_ENVELOPE]

static

Definition at line 460 of file GpgStorage.cpp.

Referenced by gpg_storage_load_rsa_key(), and gpg_storage_save_rsa_key().

◆ s_rsa_rmem_end

uint16_t s_rsa_rmem_end = 0

static

Definition at line 457 of file GpgStorage.cpp.

Referenced by gpg_storage_set_rsa_slot_range(), and rsa_role_slots().

◆ s_rsa_rmem_start

uint16_t s_rsa_rmem_start = 0

static

Definition at line 456 of file GpgStorage.cpp.

Referenced by gpg_storage_set_rsa_slot_range(), and rsa_role_slots().

◆ []

struct { ... } s_storage

Referenced by gpg_storage_aut_slot(), gpg_storage_clear_session(), gpg_storage_dec_slot(), gpg_storage_get_session_key(), gpg_storage_ready(), gpg_storage_set_rmem_range(), gpg_storage_set_session_pin(), gpg_storage_set_slot_range(), gpg_storage_sig_slot(), and resolve_slot().

◆ TAG

const char* TAG = "GPGStorage"

static

Encrypted persistent storage for OpenPGP secret material.

Encrypts payloads with AES-256-GCM. The wrapping key is derived via HKDF over (chip_id || pin_hash) with the slot index appended; AAD binds the record to (slot_id, magic) to defeat slot-shuffle attacks.

Definition at line 21 of file GpgStorage.cpp.

◆ TAG_SIZE

size_t TAG_SIZE = 16

staticconstexpr

Definition at line 41 of file GpgStorage.cpp.

Referenced by load_slot_decrypted(), and save_slot_encrypted().

Classes

Namespaces

Functions

Variables

Function Documentation

◆ build_aad()

◆ derive_storage_key()

◆ get_se()

◆ gpg_storage_aut_slot()

◆ gpg_storage_clear_session()

◆ gpg_storage_dec_slot()

◆ gpg_storage_delete_aes_key()

◆ gpg_storage_delete_dec_privkey()

◆ gpg_storage_delete_rsa_key()

◆ gpg_storage_get_session_key()

◆ gpg_storage_has_aes_key()

◆ gpg_storage_has_dec_privkey()

◆ gpg_storage_has_rsa_key()

◆ gpg_storage_load_aes_key()

◆ gpg_storage_load_dec_privkey()

◆ gpg_storage_load_rsa_key()

◆ gpg_storage_ready()

◆ gpg_storage_save_aes_key()

◆ gpg_storage_save_dec_privkey()

◆ gpg_storage_save_rsa_key()

◆ gpg_storage_set_rmem_range()

◆ gpg_storage_set_rsa_slot_range()

◆ gpg_storage_set_session_pin()

◆ gpg_storage_set_slot_range()

◆ gpg_storage_sig_slot()

◆ load_slot_decrypted()

◆ pin_to_hash()

◆ resolve_slot()

◆ rsa_role_slots()

◆ save_slot_encrypted()

Variable Documentation

◆ AES_KEY_MAGIC

◆ AES_MAX_KEY_SIZE

◆ AES_RECORD_PAYLOAD

◆ AES_TOTAL_SIZE

◆ DEC_KEY_MAGIC

◆ DEC_TOTAL_SIZE

◆ HKDF_INFO

◆ MAGIC_SIZE

◆ NONCE_SIZE

◆ PRIVKEY_SIZE

◆ RMEM_SLOT_AES_KEY

◆ RMEM_SLOT_DEC_KEY

◆ RSA_ENVELOPE

◆ RSA_KEY_MAGIC

◆ RSA_REC_HEADER

◆ RSA_ROLE_COUNT

◆ RSA_SLOT_CAP

◆ RSA_SLOTS_PER_ROLE

◆ s_rsa_record

◆ s_rsa_rmem_end

◆ s_rsa_rmem_start

◆ []

◆ TAG

◆ TAG_SIZE