smcGenerateAesKek + Key sealing.

exosphere/sealedkeys.h

@@ -0,0 +1,21 @@
+#ifndef EXOSPHERE_SEALED_KEYS_H
+#define EXOSPHERE_SEALED_KEYS_H
+
+#include <stdint.h>
+
+/* Key sealing/unsealing functionality. */
+
+#define CRYPTOUSECASE_AES 0
+#define CRYPTOUSECASE_RSAPRIVATE 1
+#define CRYPTOUSECASE_RSAOAEP 2
+#define CRYPTOUSECASE_RSATICKET 3
+
+#define CRYPTOUSECASE_MAX 4
+
+void seal_titlekey(void *dst, size_t dst_size, const void *src, size_t src_size);
+void unseal_titlekey(unsigned int keyslot, const void *src, size_t src_size);
+
+void seal_key(void *dst, size_t dst_size, const void *src, size_t src_size, unsigned int usecase);
+void unseal_key(unsigned int keyslot, const void *src, size_t src_size, unsigned int usecase);
+
+#endif