partitions/dice_protection_environment/dpe_crypto_interface.h

/*
 * Copyright (c) 2023, Arm Limited. All rights reserved.
 *
 * SPDX-License-Identifier: BSD-3-Clause
 *
 */

#ifndef __DPE_CRYPTO_INTERFACE_H__
#define __DPE_CRYPTO_INTERFACE_H__

#include <stddef.h>
#include <stdint.h>
#include "dpe_context_mngr.h"
#include "psa/error.h"

#ifdef __cplusplus
extern "C" {
#endif

/**
 * \brief Derives attestation key pair for a layer.
 *
 * \param[in] layer_ctx  Pointer to current layer context.
 *
 * \return Returns error code as specified in \ref psa_status_t
 */
psa_status_t derive_attestation_key(struct layer_context_t *layer_ctx);

/**
 * \brief Creates a layer's CDI key from input.
 *
 * \param[in] layer_ctx       Pointer to layer context.
 * \param[in] cdi_input       Pointer to the input buffer.
 * \param[in] cdi_input_size  Size of the input buffer.
 *
 * \return Returns error code as specified in \ref psa_status_t
 */
psa_status_t create_layer_cdi_key(struct layer_context_t *layer_ctx,
                                  const uint8_t *cdi_input,
                                  size_t cdi_input_size);

/**
 * \brief Derives attestation CDI for a layer
 *
 * \param[in] layer_ctx  Pointer to current layer context.
 * \param[in] parent_layer_ctx  Pointer to parent layer context.
 *
 * \return Returns error code as specified in \ref psa_status_t
 */
psa_status_t derive_attestation_cdi(struct layer_context_t *layer_ctx,
                                    const struct layer_context_t *parent_layer_ctx);
/**
 * \brief Derives sealing CDI for a layer
 *
 * \param[in] layer_ctx  Pointer to current layer context.
 *
 * \return Returns error code as specified in \ref psa_status_t
 */
psa_status_t derive_sealing_cdi(struct layer_context_t *layer_ctx);

/**
 * \brief Derives certificate id from the layer's attestation public key
 *
 * \param[in] layer_ctx  Pointer to current layer context.
 *
 * \return Returns error code as specified in \ref psa_status_t
 */
psa_status_t derive_id_from_public_key(struct layer_context_t *layer_ctx);

/**
 * \brief Derives wrapping key pair for a layer
 *
 * \param[in] layer_ctx  Pointer to current layer context.
 *
 * \return Returns error code as specified in \ref psa_status_t
 */
psa_status_t derive_wrapping_key(struct layer_context_t *layer_ctx);

/**
 * \brief Derives CDI ID from attestation key.
 *
 * \param[in]  attest_key_id  Key ID of attestation key.
 * \param[out] cdi_id         Buffer to write the CDI ID.
 * \param[in]  cdi_id_size    Size of CDI ID to derive.
 *
 * \return Returns error code as specified in \ref psa_status_t
 */
psa_status_t derive_cdi_id(psa_key_id_t attest_key_id, uint8_t *cdi_id,
                           size_t cdi_id_size);

/**
 * \brief Gets the layer's CDI value.
 *
 * \param[in]  layer_ctx       Pointer to current layer context.
 * \param[out] cdi_buf         Pointer to output CDI Buffer.
 * \param[in]  cdi_buf_size    Size of CDI buffer.
 * \param[out] cdi_actual_size Actual size of the CDI value.
 *
 * \return Returns error code as specified in \ref psa_status_t
 */
psa_status_t get_layer_cdi_value(const struct layer_context_t *layer_ctx,
                                 uint8_t *cdi_buf,
                                 size_t cdi_buf_size,
                                 size_t *cdi_actual_size);
#ifdef __cplusplus
}
#endif

#endif /* __DPE_CRYPTO_INTERFACE_H__ */