ndn::security::tpm::BackEnd Class Reference

Abstract interface for a TPM backend implementation. More...

#include <ndn-cxx/security/tpm/back-end.hpp>

Inheritance diagram for ndn::security::tpm::BackEnd:

Collaboration diagram for ndn::security::tpm::BackEnd:

Public Types
using	Error = Tpm::Error

Public Member Functions
virtual	~BackEnd ()
unique_ptr< KeyHandle >	createKey (const Name &identityName, const KeyParams &params)
	Create a key for identityName according to params.
void	deleteKey (const Name &keyName)
	Delete the key with name keyName.
ConstBufferPtr	exportKey (const Name &keyName, const char *pw, size_t pwLen)
	Get the private key with name keyName in encrypted PKCS #8 format.
unique_ptr< KeyHandle >	getKeyHandle (const Name &keyName) const
	Get the handle of the key with name keyName.
bool	hasKey (const Name &keyName) const
	Check if the key with name keyName exists in the TPM.
void	importKey (const Name &keyName, shared_ptr< transform::PrivateKey > key)
	Import a private key.
void	importKey (const Name &keyName, span< const uint8_t > pkcs8, const char *pw, size_t pwLen)
	Import a private key in encrypted PKCS #8 format.

Protected Member Functions
Name	constructAsymmetricKeyName (const KeyHandle &key, const Name &identity, const KeyParams &params) const
	Construct and return the name of a RSA or EC key, based on identity and params.
Name	constructHmacKeyName (const transform::PrivateKey &key, const Name &identity, const KeyParams &params) const
	Construct and return the name of a HMAC key, based on identity and params.

Detailed Description

Abstract interface for a TPM backend implementation.

This class provides KeyHandle to the front-end and other TPM management operations.

Definition at line 34 of file back-end.hpp.

Member Typedef Documentation

Error

using ndn::security::tpm::BackEnd::Error = Tpm::Error

Definition at line 37 of file back-end.hpp.

Constructor & Destructor Documentation

~BackEnd()

ndn::security::tpm::BackEnd::~BackEnd ( )

virtualdefault

Member Function Documentation

constructAsymmetricKeyName()

Name ndn::security::tpm::BackEnd::constructAsymmetricKeyName ( const KeyHandle &  key, const Name &  identity, const KeyParams &  params  ) const

protected

Construct and return the name of a RSA or EC key, based on identity and params.

Definition at line 112 of file back-end.cpp.

constructHmacKeyName()

Name ndn::security::tpm::BackEnd::constructHmacKeyName ( const transform::PrivateKey &  key, const Name &  identity, const KeyParams &  params  ) const

protected

Construct and return the name of a HMAC key, based on identity and params.

Definition at line 142 of file back-end.cpp.

createKey()

unique_ptr< KeyHandle > ndn::security::tpm::BackEnd::createKey	(	const Name &	identityName,
		const KeyParams &	params
	)

Create a key for identityName according to params.

Returns

The handle of the created key.

Exceptions

std::invalid_argument	params are invalid.
Error	The key could not be created.

Definition at line 51 of file back-end.cpp.

deleteKey()

void ndn::security::tpm::BackEnd::deleteKey

(

const Name &

keyName

)

Delete the key with name keyName.

Warning

Continuing to use existing KeyHandle objects for a deleted key results in undefined behavior.

Exceptions

Error

The key could not be deleted.

Definition at line 79 of file back-end.cpp.

exportKey()

ConstBufferPtr ndn::security::tpm::BackEnd::exportKey	(	const Name &	keyName,
		const char *	pw,
		size_t	pwLen
	)

Get the private key with name keyName in encrypted PKCS #8 format.

Parameters

keyName	The name of the key.
pw	The password to encrypt the private key.
pwLen	The length of the password.

Returns

The encoded private key.

Exceptions

Error

The key does not exist or cannot be exported.

Definition at line 85 of file back-end.cpp.

getKeyHandle()

unique_ptr< KeyHandle > ndn::security::tpm::BackEnd::getKeyHandle

(

const Name &

keyName

)

const

Get the handle of the key with name keyName.

Calling this function multiple times with the same keyName will return different KeyHandle objects that all refer to the same key.

Returns

The handle of the key, or nullptr if the key does not exist.

Definition at line 45 of file back-end.cpp.

hasKey()

bool ndn::security::tpm::BackEnd::hasKey

(

const Name &

keyName

)

const

Check if the key with name keyName exists in the TPM.

Returns

True if the key exists, false otherwise.

Definition at line 39 of file back-end.cpp.

importKey() [1/2]

void ndn::security::tpm::BackEnd::importKey	(	const Name &	keyName,
		shared_ptr< transform::PrivateKey >	key
	)

Import a private key.

Exceptions

Error

The key could not be imported.

Definition at line 103 of file back-end.cpp.

importKey() [2/2]

void ndn::security::tpm::BackEnd::importKey	(	const Name &	keyName,
		span< const uint8_t >	pkcs8,
		const char *	pw,
		size_t	pwLen
	)

Import a private key in encrypted PKCS #8 format.

Parameters

keyName	The name of the key to use in the TPM.
pkcs8	The key in encrypted PKCS #8 format.
pw	The password to decrypt the private key.
pwLen	The length of the password.

Exceptions

Error

The key could not be imported.

Definition at line 94 of file back-end.cpp.