Examples with CredentialHash com.android.server.LockSettingsStorage.CredentialHash used on opensource projects

Example 1 with CredentialHash

use of com.android.server.LockSettingsStorage.CredentialHash in project platform_frameworks_base by android.

the class LockSettingsService method setLockPasswordInternal.

private void setLockPasswordInternal(String password, String savedCredential, int userId) throws RemoteException {
    byte[] currentHandle = getCurrentHandle(userId);
    if (password == null) {
        clearUserKeyProtection(userId);
        getGateKeeperService().clearSecureUserId(userId);
        mStorage.writePasswordHash(null, userId);
        setKeystorePassword(null, userId);
        fixateNewestUserKeyAuth(userId);
        onUserLockChanged(userId);
        return;
    }
    if (isManagedProfileWithUnifiedLock(userId)) {
        // get credential from keystore when managed profile has unified lock
        try {
            savedCredential = getDecryptedPasswordForTiedProfile(userId);
        } catch (FileNotFoundException e) {
            Slog.i(TAG, "Child profile key not found");
        } catch (UnrecoverableKeyException | InvalidKeyException | KeyStoreException | NoSuchAlgorithmException | NoSuchPaddingException | InvalidAlgorithmParameterException | IllegalBlockSizeException | BadPaddingException | CertificateException | IOException e) {
            Slog.e(TAG, "Failed to decrypt child profile key", e);
        }
    } else {
        if (currentHandle == null) {
            if (savedCredential != null) {
                Slog.w(TAG, "Saved credential provided, but none stored");
            }
            savedCredential = null;
        }
    }
    byte[] enrolledHandle = enrollCredential(currentHandle, savedCredential, password, userId);
    if (enrolledHandle != null) {
        CredentialHash willStore = new CredentialHash(enrolledHandle, CredentialHash.VERSION_GATEKEEPER);
        setUserKeyProtection(userId, password, doVerifyPassword(password, willStore, true, 0, userId, null));
        mStorage.writePasswordHash(enrolledHandle, userId);
        fixateNewestUserKeyAuth(userId);
        onUserLockChanged(userId);
    } else {
        throw new RemoteException("Failed to enroll password");
    }
}

Example 2 with CredentialHash

use of com.android.server.LockSettingsStorage.CredentialHash in project platform_frameworks_base by android.

the class LockSettingsService method getCurrentHandle.

private byte[] getCurrentHandle(int userId) {
    CredentialHash credential;
    byte[] currentHandle;
    int currentHandleType = mStorage.getStoredCredentialType(userId);
    switch(currentHandleType) {
        case CredentialHash.TYPE_PATTERN:
            credential = mStorage.readPatternHash(userId);
            currentHandle = credential != null ? credential.hash : null;
            break;
        case CredentialHash.TYPE_PASSWORD:
            credential = mStorage.readPasswordHash(userId);
            currentHandle = credential != null ? credential.hash : null;
            break;
        case CredentialHash.TYPE_NONE:
        default:
            currentHandle = null;
            break;
    }
    // sanity check
    if (currentHandleType != CredentialHash.TYPE_NONE && currentHandle == null) {
        Slog.e(TAG, "Stored handle type [" + currentHandleType + "] but no handle available");
    }
    return currentHandle;
}

Example 3 with CredentialHash

use of com.android.server.LockSettingsStorage.CredentialHash in project platform_frameworks_base by android.

the class LockSettingsService method setLockPatternInternal.

private void setLockPatternInternal(String pattern, String savedCredential, int userId) throws RemoteException {
    byte[] currentHandle = getCurrentHandle(userId);
    if (pattern == null) {
        clearUserKeyProtection(userId);
        getGateKeeperService().clearSecureUserId(userId);
        mStorage.writePatternHash(null, userId);
        setKeystorePassword(null, userId);
        fixateNewestUserKeyAuth(userId);
        onUserLockChanged(userId);
        return;
    }
    if (isManagedProfileWithUnifiedLock(userId)) {
        // get credential from keystore when managed profile has unified lock
        try {
            savedCredential = getDecryptedPasswordForTiedProfile(userId);
        } catch (UnrecoverableKeyException | InvalidKeyException | KeyStoreException | NoSuchAlgorithmException | NoSuchPaddingException | InvalidAlgorithmParameterException | IllegalBlockSizeException | BadPaddingException | CertificateException | IOException e) {
            if (e instanceof FileNotFoundException) {
                Slog.i(TAG, "Child profile key not found");
            } else {
                Slog.e(TAG, "Failed to decrypt child profile key", e);
            }
        }
    } else {
        if (currentHandle == null) {
            if (savedCredential != null) {
                Slog.w(TAG, "Saved credential provided, but none stored");
            }
            savedCredential = null;
        }
    }
    byte[] enrolledHandle = enrollCredential(currentHandle, savedCredential, pattern, userId);
    if (enrolledHandle != null) {
        CredentialHash willStore = new CredentialHash(enrolledHandle, CredentialHash.VERSION_GATEKEEPER);
        setUserKeyProtection(userId, pattern, doVerifyPattern(pattern, willStore, true, 0, userId, null));
        mStorage.writePatternHash(enrolledHandle, userId);
        fixateNewestUserKeyAuth(userId);
        onUserLockChanged(userId);
    } else {
        throw new RemoteException("Failed to enroll pattern");
    }
}

Example 4 with CredentialHash

use of com.android.server.LockSettingsStorage.CredentialHash in project android_frameworks_base by DirtyUnicorns.

the class LockSettingsService method doVerifyPattern.

private VerifyCredentialResponse doVerifyPattern(String pattern, boolean hasChallenge, long challenge, int userId, ICheckCredentialProgressCallback progressCallback) throws RemoteException {
    checkPasswordReadPermission(userId);
    if (TextUtils.isEmpty(pattern)) {
        throw new IllegalArgumentException("Pattern can't be null or empty");
    }
    CredentialHash storedHash = mStorage.readPatternHash(userId);
    return doVerifyPattern(pattern, storedHash, hasChallenge, challenge, userId, progressCallback);
}

Example 5 with CredentialHash

use of com.android.server.LockSettingsStorage.CredentialHash in project android_frameworks_base by DirtyUnicorns.

the class LockSettingsService method doVerifyPassword.

private VerifyCredentialResponse doVerifyPassword(String password, boolean hasChallenge, long challenge, int userId, ICheckCredentialProgressCallback progressCallback) throws RemoteException {
    checkPasswordReadPermission(userId);
    if (TextUtils.isEmpty(password)) {
        throw new IllegalArgumentException("Password can't be null or empty");
    }
    CredentialHash storedHash = mStorage.readPasswordHash(userId);
    return doVerifyPassword(password, storedHash, hasChallenge, challenge, userId, progressCallback);
}