key_manager: Convert Ticket union to std::variant

This commit is contained in:
Zach Hilman 2019-05-26 13:01:42 -04:00
parent d9ef20e5a5
commit 50d5414075
3 changed files with 89 additions and 58 deletions

View file

@ -56,6 +56,13 @@ const std::map<std::pair<S128KeyType, u64>, std::string> KEYS_VARIABLE_LENGTH{
{{S128KeyType::KeyblobMAC, 0}, "keyblob_mac_key_"}, {{S128KeyType::KeyblobMAC, 0}, "keyblob_mac_key_"},
}; };
namespace {
template <std::size_t Size>
bool IsAllZeroArray(const std::array<u8, Size>& array) {
return std::all_of(array.begin(), array.end(), [](const auto& elem) { return elem == 0; });
}
} // namespace
u64 GetSignatureTypeDataSize(SignatureType type) { u64 GetSignatureTypeDataSize(SignatureType type) {
switch (type) { switch (type) {
case SignatureType::RSA_4096_SHA1: case SignatureType::RSA_4096_SHA1:
@ -85,47 +92,61 @@ u64 GetSignatureTypePaddingSize(SignatureType type) {
UNREACHABLE(); UNREACHABLE();
} }
TicketData& Ticket::GetData() { SignatureType Ticket::GetSignatureType() const {
switch (sig_type) { if (auto ticket = std::get_if<RSA4096Ticket>(&data)) {
case SignatureType::RSA_4096_SHA1: return ticket->sig_type;
case SignatureType::RSA_4096_SHA256:
return rsa_4096.data;
case SignatureType::RSA_2048_SHA1:
case SignatureType::RSA_2048_SHA256:
return rsa_2048.data;
case SignatureType::ECDSA_SHA1:
case SignatureType::ECDSA_SHA256:
return ecdsa.data;
} }
if (auto ticket = std::get_if<RSA2048Ticket>(&data)) {
return ticket->sig_type;
}
if (auto ticket = std::get_if<ECDSATicket>(&data)) {
return ticket->sig_type;
}
UNREACHABLE();
}
TicketData& Ticket::GetData() {
if (auto ticket = std::get_if<RSA4096Ticket>(&data)) {
return ticket->data;
}
if (auto ticket = std::get_if<RSA2048Ticket>(&data)) {
return ticket->data;
}
if (auto ticket = std::get_if<ECDSATicket>(&data)) {
return ticket->data;
}
UNREACHABLE(); UNREACHABLE();
} }
const TicketData& Ticket::GetData() const { const TicketData& Ticket::GetData() const {
switch (sig_type) { if (auto ticket = std::get_if<RSA4096Ticket>(&data)) {
case SignatureType::RSA_4096_SHA1: return ticket->data;
case SignatureType::RSA_4096_SHA256:
return rsa_4096.data;
case SignatureType::RSA_2048_SHA1:
case SignatureType::RSA_2048_SHA256:
return rsa_2048.data;
case SignatureType::ECDSA_SHA1:
case SignatureType::ECDSA_SHA256:
return ecdsa.data;
} }
if (auto ticket = std::get_if<RSA2048Ticket>(&data)) {
return ticket->data;
}
if (auto ticket = std::get_if<ECDSATicket>(&data)) {
return ticket->data;
}
UNREACHABLE(); UNREACHABLE();
} }
u64 Ticket::GetSize() const { u64 Ticket::GetSize() const {
const auto sig_type = GetSignatureType();
return sizeof(SignatureType) + GetSignatureTypeDataSize(sig_type) + return sizeof(SignatureType) + GetSignatureTypeDataSize(sig_type) +
GetSignatureTypePaddingSize(sig_type) + sizeof(TicketData); GetSignatureTypePaddingSize(sig_type) + sizeof(TicketData);
} }
Ticket Ticket::SynthesizeCommon(Key128 title_key, std::array<u8, 16> rights_id) { Ticket Ticket::SynthesizeCommon(Key128 title_key, const std::array<u8, 16>& rights_id) {
Ticket out{}; RSA2048Ticket out{};
out.sig_type = SignatureType::RSA_2048_SHA256; out.sig_type = SignatureType::RSA_2048_SHA256;
out.GetData().rights_id = rights_id; out.data.rights_id = rights_id;
out.GetData().title_key_common = title_key; out.data.title_key_common = title_key;
return out; return Ticket{out};
} }
Key128 GenerateKeyEncryptionKey(Key128 source, Key128 master, Key128 kek_seed, Key128 key_seed) { Key128 GenerateKeyEncryptionKey(Key128 source, Key128 master, Key128 kek_seed, Key128 key_seed) {
@ -208,14 +229,13 @@ void KeyManager::DeriveGeneralPurposeKeys(std::size_t crypto_revision) {
} }
} }
RSAKeyPair<2048> KeyManager::GetETicketRSAKey() { RSAKeyPair<2048> KeyManager::GetETicketRSAKey() const {
if (eticket_extended_kek == std::array<u8, 576>{} || !HasKey(S128KeyType::ETicketRSAKek)) if (IsAllZeroArray(eticket_extended_kek) || !HasKey(S128KeyType::ETicketRSAKek))
return {}; return {};
const auto eticket_final = GetKey(S128KeyType::ETicketRSAKek); const auto eticket_final = GetKey(S128KeyType::ETicketRSAKek);
std::vector<u8> extended_iv(0x10); std::vector<u8> extended_iv(eticket_extended_kek.begin(), eticket_extended_kek.begin() + 0x10);
std::memcpy(extended_iv.data(), eticket_extended_kek.data(), extended_iv.size());
std::array<u8, 0x230> extended_dec{}; std::array<u8, 0x230> extended_dec{};
AESCipher<Key128> rsa_1(eticket_final, Mode::CTR); AESCipher<Key128> rsa_1(eticket_final, Mode::CTR);
rsa_1.SetIV(extended_iv); rsa_1.SetIV(extended_iv);
@ -1001,13 +1021,14 @@ void KeyManager::PopulateTickets() {
void KeyManager::SynthesizeTickets() { void KeyManager::SynthesizeTickets() {
for (const auto& key : s128_keys) { for (const auto& key : s128_keys) {
if (key.first.type == S128KeyType::Titlekey) { if (key.first.type != S128KeyType::Titlekey) {
u128 rights_id{key.first.field1, key.first.field2}; continue;
Key128 rights_id_2;
std::memcpy(rights_id_2.data(), rights_id.data(), rights_id_2.size());
const auto ticket = Ticket::SynthesizeCommon(key.second, rights_id_2);
common_tickets.insert_or_assign(rights_id, ticket);
} }
u128 rights_id{key.first.field1, key.first.field2};
Key128 rights_id_2;
std::memcpy(rights_id_2.data(), rights_id.data(), rights_id_2.size());
const auto ticket = Ticket::SynthesizeCommon(key.second, rights_id_2);
common_tickets.insert_or_assign(rights_id, ticket);
} }
} }

View file

@ -9,6 +9,7 @@
#include <optional> #include <optional>
#include <string> #include <string>
#include <variant>
#include <boost/container/flat_map.hpp> #include <boost/container/flat_map.hpp>
#include <fmt/format.h> #include <fmt/format.h>
#include "common/common_funcs.h" #include "common/common_funcs.h"
@ -73,33 +74,36 @@ struct TicketData {
}; };
static_assert(sizeof(TicketData) == 0x2C0, "TicketData has incorrect size."); static_assert(sizeof(TicketData) == 0x2C0, "TicketData has incorrect size.");
struct Ticket { struct RSA4096Ticket {
SignatureType sig_type; SignatureType sig_type;
union { std::array<u8, 0x200> sig_data;
struct { INSERT_PADDING_BYTES(0x3C);
std::array<u8, 0x200> sig_data; TicketData data;
INSERT_PADDING_BYTES(0x3C); };
TicketData data;
} rsa_4096;
struct { struct RSA2048Ticket {
std::array<u8, 0x100> sig_data; SignatureType sig_type;
INSERT_PADDING_BYTES(0x3C); std::array<u8, 0x100> sig_data;
TicketData data; INSERT_PADDING_BYTES(0x3C);
} rsa_2048; TicketData data;
};
struct { struct ECDSATicket {
std::array<u8, 0x3C> sig_data; SignatureType sig_type;
INSERT_PADDING_BYTES(0x40); std::array<u8, 0x3C> sig_data;
TicketData data; INSERT_PADDING_BYTES(0x40);
} ecdsa; TicketData data;
}; };
struct Ticket {
std::variant<RSA4096Ticket, RSA2048Ticket, ECDSATicket> data;
SignatureType GetSignatureType() const;
TicketData& GetData(); TicketData& GetData();
const TicketData& GetData() const; const TicketData& GetData() const;
u64 GetSize() const; u64 GetSize() const;
static Ticket SynthesizeCommon(Key128 title_key, std::array<u8, 0x10> rights_id); static Ticket SynthesizeCommon(Key128 title_key, const std::array<u8, 0x10>& rights_id);
}; };
static_assert(sizeof(Key128) == 16, "Key128 must be 128 bytes big."); static_assert(sizeof(Key128) == 16, "Key128 must be 128 bytes big.");
@ -120,6 +124,12 @@ bool operator==(const RSAKeyPair<bit_size, byte_size>& lhs,
std::tie(rhs.encryption_key, rhs.decryption_key, rhs.modulus, rhs.exponent); std::tie(rhs.encryption_key, rhs.decryption_key, rhs.modulus, rhs.exponent);
} }
template <size_t bit_size, size_t byte_size>
bool operator!=(const RSAKeyPair<bit_size, byte_size>& lhs,
const RSAKeyPair<bit_size, byte_size>& rhs) {
return !(lhs == rhs);
}
enum class KeyCategory : u8 { enum class KeyCategory : u8 {
Standard, Standard,
Title, Title,
@ -268,7 +278,7 @@ private:
void DeriveGeneralPurposeKeys(std::size_t crypto_revision); void DeriveGeneralPurposeKeys(std::size_t crypto_revision);
RSAKeyPair<2048> GetETicketRSAKey(); RSAKeyPair<2048> GetETicketRSAKey() const;
void SetKeyWrapped(S128KeyType id, Key128 key, u64 field1 = 0, u64 field2 = 0); void SetKeyWrapped(S128KeyType id, Key128 key, u64 field1 = 0, u64 field2 = 0);
void SetKeyWrapped(S256KeyType id, Key256 key, u64 field1 = 0, u64 field2 = 0); void SetKeyWrapped(S256KeyType id, Key256 key, u64 field1 = 0, u64 field2 = 0);

View file

@ -234,7 +234,7 @@ private:
const auto ticket = keys.GetCommonTickets().at(rights_id); const auto ticket = keys.GetCommonTickets().at(rights_id);
const auto write_size = std::min(ticket.GetSize(), ctx.GetWriteBufferSize()); const auto write_size = std::min<u64>(ticket.GetSize(), ctx.GetWriteBufferSize());
ctx.WriteBuffer(&ticket, write_size); ctx.WriteBuffer(&ticket, write_size);
IPC::ResponseBuilder rb{ctx, 4}; IPC::ResponseBuilder rb{ctx, 4};
@ -253,7 +253,7 @@ private:
const auto ticket = keys.GetPersonalizedTickets().at(rights_id); const auto ticket = keys.GetPersonalizedTickets().at(rights_id);
const auto write_size = std::min(ticket.GetSize(), ctx.GetWriteBufferSize()); const auto write_size = std::min<u64>(ticket.GetSize(), ctx.GetWriteBufferSize());
ctx.WriteBuffer(&ticket, write_size); ctx.WriteBuffer(&ticket, write_size);
IPC::ResponseBuilder rb{ctx, 4}; IPC::ResponseBuilder rb{ctx, 4};