1 // Copyright (c) 2009-2013 The Bitcoin developers
2 // Distributed under the MIT/X11 software license, see the accompanying
3 // file COPYING or http://www.opensource.org/licenses/mit-license.php.
8 #include "allocators.h"
14 const unsigned int WALLET_CRYPTO_KEY_SIZE
= 32;
15 const unsigned int WALLET_CRYPTO_SALT_SIZE
= 8;
18 Private key encryption is done based on a CMasterKey,
19 which holds a salt and random encryption key.
21 CMasterKeys are encrypted using AES-256-CBC using a key
22 derived using derivation method nDerivationMethod
23 (0 == EVP_sha512()) and derivation iterations nDeriveIterations.
24 vchOtherDerivationParameters is provided for alternative algorithms
25 which may require more parameters (such as scrypt).
27 Wallet Private Keys are then encrypted using AES-256-CBC
28 with the double-sha256 of the public key as the IV, and the
29 master key's key as the encryption key (see keystore.[ch]).
32 /** Master key for wallet encryption */
36 std::vector
<unsigned char> vchCryptedKey
;
37 std::vector
<unsigned char> vchSalt
;
40 unsigned int nDerivationMethod
;
41 unsigned int nDeriveIterations
;
42 // Use this for more parameters to key derivation,
43 // such as the various parameters to scrypt
44 std::vector
<unsigned char> vchOtherDerivationParameters
;
48 READWRITE(vchCryptedKey
);
50 READWRITE(nDerivationMethod
);
51 READWRITE(nDeriveIterations
);
52 READWRITE(vchOtherDerivationParameters
);
56 // 25000 rounds is just under 0.1 seconds on a 1.86 GHz Pentium M
57 // ie slightly lower than the lowest hardware we need bother supporting
58 nDeriveIterations
= 25000;
59 nDerivationMethod
= 0;
60 vchOtherDerivationParameters
= std::vector
<unsigned char>(0);
64 typedef std::vector
<unsigned char, secure_allocator
<unsigned char> > CKeyingMaterial
;
66 /** Encryption/decryption context with key information */
70 unsigned char chKey
[WALLET_CRYPTO_KEY_SIZE
];
71 unsigned char chIV
[WALLET_CRYPTO_KEY_SIZE
];
75 bool SetKeyFromPassphrase(const SecureString
&strKeyData
, const std::vector
<unsigned char>& chSalt
, const unsigned int nRounds
, const unsigned int nDerivationMethod
);
76 bool Encrypt(const CKeyingMaterial
& vchPlaintext
, std::vector
<unsigned char> &vchCiphertext
);
77 bool Decrypt(const std::vector
<unsigned char>& vchCiphertext
, CKeyingMaterial
& vchPlaintext
);
78 bool SetKey(const CKeyingMaterial
& chNewKey
, const std::vector
<unsigned char>& chNewIV
);
82 OPENSSL_cleanse(chKey
, sizeof(chKey
));
83 OPENSSL_cleanse(chIV
, sizeof(chIV
));
91 // Try to keep the key data out of swap (and be a bit over-careful to keep the IV that we don't even use out of swap)
92 // Note that this does nothing about suspend-to-disk (which will put all our key data on disk)
93 // Note as well that at no point in this program is any attempt made to prevent stealing of keys by reading the memory of the running process.
94 LockedPageManager::Instance().LockRange(&chKey
[0], sizeof chKey
);
95 LockedPageManager::Instance().LockRange(&chIV
[0], sizeof chIV
);
102 LockedPageManager::Instance().UnlockRange(&chKey
[0], sizeof chKey
);
103 LockedPageManager::Instance().UnlockRange(&chIV
[0], sizeof chIV
);
107 bool EncryptSecret(const CKeyingMaterial
& vMasterKey
, const CKeyingMaterial
&vchPlaintext
, const uint256
& nIV
, std::vector
<unsigned char> &vchCiphertext
);
108 bool DecryptSecret(const CKeyingMaterial
& vMasterKey
, const std::vector
<unsigned char>& vchCiphertext
, const uint256
& nIV
, CKeyingMaterial
& vchPlaintext
);
110 /** Keystore which keeps the private keys encrypted.
111 * It derives from the basic key store, which is used if no encryption is active.
113 class CCryptoKeyStore
: public CBasicKeyStore
116 CryptedKeyMap mapCryptedKeys
;
118 CKeyingMaterial vMasterKey
;
120 // if fUseCrypto is true, mapKeys must be empty
121 // if fUseCrypto is false, vMasterKey must be empty
124 // keeps track of whether Unlock has run a thourough check before
125 bool fDecryptionThoroughlyChecked
;
130 // will encrypt previously unencrypted keys
131 bool EncryptKeys(CKeyingMaterial
& vMasterKeyIn
);
133 bool Unlock(const CKeyingMaterial
& vMasterKeyIn
);
136 CCryptoKeyStore() : fUseCrypto(false), fDecryptionThoroughlyChecked(false)
140 bool IsCrypted() const
145 bool IsLocked() const
152 result
= vMasterKey
.empty();
159 virtual bool AddCryptedKey(const CPubKey
&vchPubKey
, const std::vector
<unsigned char> &vchCryptedSecret
);
160 bool AddKeyPubKey(const CKey
& key
, const CPubKey
&pubkey
);
161 bool HaveKey(const CKeyID
&address
) const
166 return CBasicKeyStore::HaveKey(address
);
167 return mapCryptedKeys
.count(address
) > 0;
171 bool GetKey(const CKeyID
&address
, CKey
& keyOut
) const;
172 bool GetPubKey(const CKeyID
&address
, CPubKey
& vchPubKeyOut
) const;
173 void GetKeys(std::set
<CKeyID
> &setAddress
) const
177 CBasicKeyStore::GetKeys(setAddress
);
181 CryptedKeyMap::const_iterator mi
= mapCryptedKeys
.begin();
182 while (mi
!= mapCryptedKeys
.end())
184 setAddress
.insert((*mi
).first
);
189 /* Wallet status (encrypted, locked) changed.
190 * Note: Called without locks held.
192 boost::signals2::signal
<void (CCryptoKeyStore
* wallet
)> NotifyStatusChanged
;