blob: ee7ace37a33360774608bd7b7cd4ee10ad5df93c [file] [log] [blame]
Kuiying Wang8f706212020-12-16 18:59:24 +08001/*
2// Copyright (c) 2020 Intel Corporation
3//
4// Licensed under the Apache License, Version 2.0 (the "License");
5// you may not use this file except in compliance with the License.
6// You may obtain a copy of the License at
7//
8// http://www.apache.org/licenses/LICENSE-2.0
9//
10// Unless required by applicable law or agreed to in writing, software
11// distributed under the License is distributed on an "AS IS" BASIS,
12// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13// See the License for the specific language governing permissions and
14// limitations under the License.
15*/
16#pragma once
17#include "config.h"
18
19#include <openssl/evp.h>
20#include <openssl/hmac.h>
21#include <openssl/sha.h>
22
23#include <nlohmann/json.hpp>
24#include <sdbusplus/asio/object_server.hpp>
25#include <sdbusplus/server.hpp>
26#include <xyz/openbmc_project/BIOSConfig/Password/server.hpp>
27
28#include <filesystem>
29#include <string>
30
31namespace bios_config_pwd
32{
33
34static constexpr auto servicePwd = "xyz.openbmc_project.BIOSConfigPassword";
35static constexpr auto objectPathPwd =
36 "/xyz/openbmc_project/bios_config/password";
37constexpr auto biosPasswordFile = "passwordData";
38constexpr auto biosSeedFile = "seedData";
Ayushi Smriti96e72ec2021-05-20 13:44:12 +053039constexpr uint8_t maxHashSize = 64;
40constexpr uint8_t maxSeedSize = 32;
41constexpr uint8_t maxPasswordLen = 32;
Snehalatha Venkatesh2f7ba732021-09-30 10:25:32 +000042constexpr int iterValue = 1000;
Kuiying Wang8f706212020-12-16 18:59:24 +080043
44using Base = sdbusplus::xyz::openbmc_project::BIOSConfig::server::Password;
45namespace fs = std::filesystem;
46
47/** @class Password
48 *
49 * @brief Implements the BIOS Password
50 */
51class Password : public Base
52{
53 public:
54 Password() = delete;
55 ~Password() = default;
56 Password(const Password&) = delete;
57 Password& operator=(const Password&) = delete;
58 Password(Password&&) = delete;
59 Password& operator=(Password&&) = delete;
60
61 /** @brief Constructs Password object.
62 *
63 * @param[in] objectServer - object server
64 * @param[in] systemBus - bus connection
65 */
66 Password(sdbusplus::asio::object_server& objectServer,
67 std::shared_ptr<sdbusplus::asio::connection>& systemBus);
68
69 /** @brief Set the BIOS attribute with a new value, the new value is added
70 * to the PendingAttribute.
71 *
72 * @param[in] userName - User name - user / admin.
73 * @param[in] currentPassword - Current user/ admin Password.
74 * @param[in] newPassword - New user/ admin Password.
75 */
76 void changePassword(std::string userName, std::string currentPassword,
77 std::string newPassword) override;
78
79 private:
80 void verifyPassword(std::string userName, std::string currentPassword,
81 std::string newPassword);
Ayushi Smriti96e72ec2021-05-20 13:44:12 +053082 bool isMatch(const std::array<uint8_t, maxHashSize>& expected,
83 const std::array<uint8_t, maxSeedSize>& seed,
George Liu616f9222021-12-29 14:25:39 +080084 const std::string& rawData, const std::string& algo);
Kuiying Wang8f706212020-12-16 18:59:24 +080085 sdbusplus::asio::object_server& objServer;
86 std::shared_ptr<sdbusplus::asio::connection>& systemBus;
Kuiying Wang8f706212020-12-16 18:59:24 +080087 std::filesystem::path seedFile;
Ayushi Smriti96e72ec2021-05-20 13:44:12 +053088 std::array<uint8_t, maxHashSize> mNewPwdHash;
Kuiying Wang8f706212020-12-16 18:59:24 +080089};
90
91} // namespace bios_config_pwd