diff options
author | Krzysztof Jackiewicz <k.jackiewicz@samsung.com> | 2019-02-19 12:39:17 +0100 |
---|---|---|
committer | Krzysztof Jackiewicz <k.jackiewicz@samsung.com> | 2019-02-19 12:52:44 +0100 |
commit | ee2c14eb1eafd0ecbdb660a8deb8568090230e33 (patch) | |
tree | 43c35f352c1a6c0cbf40c15af3896c36b278fa7b /src/manager/service/key-provider.cpp | |
parent | 2cb35737891323de4b0fea29e060958375f25c26 (diff) | |
download | key-manager-ee2c14eb1eafd0ecbdb660a8deb8568090230e33.tar.gz key-manager-ee2c14eb1eafd0ecbdb660a8deb8568090230e33.tar.bz2 key-manager-ee2c14eb1eafd0ecbdb660a8deb8568090230e33.zip |
Refactor PKEK2 related functions
PKEK2 is used to derive both DB DEK and APP DEK. Currently, variable names and
comments are a bit misleading.
This commit refactors the variable names and comments to better describe the
actual purpose of this key.
Change-Id: If8ee266ec2da63c929f498f1ed009df5d79c134f
Diffstat (limited to 'src/manager/service/key-provider.cpp')
-rw-r--r-- | src/manager/service/key-provider.cpp | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/src/manager/service/key-provider.cpp b/src/manager/service/key-provider.cpp index 18911537..e89af167 100644 --- a/src/manager/service/key-provider.cpp +++ b/src/manager/service/key-provider.cpp @@ -146,12 +146,12 @@ KeyData makePKEK1(const KeyComponentsInfo& keyInfo, const Password &password) return key; } -// derives a key used for DB DEK encryption (aka PKEK2) from DomainKEK and user id -KeyData makePKEK2(const uint8_t *domainKEK, const std::string &user) +// derives a key (PKEK2) from DomainKEK and custom client string (may be a client id or uid) +KeyData makePKEK2(const uint8_t *domainKEK, const std::string &client) { KeyData key; - if (!PKCS5_PBKDF2_HMAC_SHA1(user.c_str(), - user.size(), + if (!PKCS5_PBKDF2_HMAC_SHA1(client.c_str(), + client.size(), domainKEK, MAX_SALT_SIZE, PBKDF2_ITERATIONS, @@ -413,7 +413,7 @@ RawBuffer KeyProvider::getPureDEK(const RawBuffer &DEKInWrapForm) (kmcDEK.getKeyAndInfo().key) + kmcDEK.getKeyAndInfo().keyInfo.keyLength); } -RawBuffer KeyProvider::generateDEK(const ClientId &client) +RawBuffer KeyProvider::generateDEK(const std::string &client) { if (!m_isInitialized) ThrowErr(Exc::InternalError, "Object not initialized!"); |