| /linux/Documentation/arch/arm64/ |
| H A D | acpi_object_usage.rst | 9 specification where the object is defined. If "Signature Reserved" is used,
10 the table signature (the first four bytes of the table) is the only portion
30 AEST Signature Reserved (signature == "AEST")
37 AGDI Signature Reserved (signature == "AGDI")
44 APMT Signature Reserved (signature == "APMT")
51 BERT Section 18.3 (signature == "BERT")
58 BOOT Signature Reserved (signature == "BOOT")
64 BGRT Section 5.2.22 (signature == "BGRT")
71 CEDT Signature Reserved (signature == "CEDT")
78 CPEP Section 5.2.18 (signature == "CPEP")
[all …]
|
| /linux/tools/crypto/ccp/ |
| H A D | dbc.c | 21 int get_nonce(int fd, void *nonce_out, void *signature) in get_nonce() argument
24 .auth_needed = !!signature, in get_nonce()
29 if (signature) in get_nonce()
30 memcpy(tmp.signature, signature, sizeof(tmp.signature)); in get_nonce()
39 int set_uid(int fd, __u8 *uid, __u8 *signature) in set_uid() argument
44 assert(signature); in set_uid()
47 memcpy(tmp.signature, signature, sizeof(tmp.signature)); in set_uid()
54 int process_param(int fd, int msg_index, __u8 *signature, int *data) in process_param() argument
61 assert(signature); in process_param()
64 memcpy(tmp.signature, signature, sizeof(tmp.signature)); in process_param()
[all …]
|
| H A D | test_dbc.py | 36 self.signature = b"FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF"
143 get_nonce(self.d, self.signature)
150 set_uid(self.d, self.uid, self.signature)
156 process_param(self.d, PARAM_GET_SOC_PWR_CUR, self.signature)
162 process_param(self.d, PARAM_SET_PWR_CAP, self.signature, 1000)
175 set_uid(self.d, self.uid, self.signature)
179 get_nonce(self.d, self.signature)
195 soc_power_max = process_param(self.d, PARAM_GET_SOC_PWR_MAX, self.signature)
196 soc_power_min = process_param(self.d, PARAM_GET_SOC_PWR_MIN, self.signature)
200 fmax_max = process_param(self.d, PARAM_GET_FMAX_MAX, self.signature)
[all …]
|
| H A D | dbc.py | 33 def get_nonce(device, signature): argument
37 ret = lib.get_nonce(device.fileno(), ctypes.byref(buf), signature)
43 def set_uid(device, new_uid, signature): argument
44 if not signature:
45 raise ValueError("Signature required")
48 ret = lib.set_uid(device.fileno(), new_uid, signature)
54 def process_param(device, message, signature, data=None): argument
55 if not signature:
56 raise ValueError("Signature required")
60 sig = ctypes.create_string_buffer(signature, len(signature))
|
| H A D | dbc_cli.py | 17 errno.EPERM: "Signature invalid",
50 parser.add_argument("--signature", help="File containing signature for command")
71 if args.signature:
72 if not os.path.exists(args.signature):
73 raise ValueError("Invalid signature file %s" % args.signature)
74 with open(args.signature, "rb") as f:
78 "Invalid signature length %d (expected %d)" % (len(sig), DBC_SIG_SIZE)
113 param, signature = process_param(d, messages[args.message], sig) variable
115 "Parameter: {par}, response signature {sig}".format(
117 sig=_pretty_buffer(bytes(signature)),
[all …]
|
| /linux/drivers/net/wwan/iosm/ |
| H A D | iosm_ipc_mux_codec.h | 37 /* ACBH: Signature of the Aggregated Command Block Header. */
40 /* ADTH: Signature of the Aggregated Datagram Table Header. */
43 /* ADBH: Signature of the Aggregated Data Block Header. */
46 /* ADGH: Signature of the Datagram Header. */
55 /* ADGH: Signature of the Datagram Header. */
58 /* CMDH: Signature of the Command Header. */
61 /* QLTH: Signature of the Queue Level Table */
64 /* FCTH: Signature of the Flow Credit Table */
90 * @signature: Signature of the Command Header.
101 __le32 signature; member
[all …]
|
| /linux/Documentation/security/ |
| H A D | digsig.rst | 2 Digital Signature Verification API
19 Digital signature verification API provides a method to verify digital signature.
22 Digital signature verification is implemented using cut-down kernel port of
27 Public key and signature consist of header and MPIs::
38 uint8_t version; /* signature format version */
39 time_t timestamp; /* signature made */
48 Signature header is used as an input to generate a signature.
49 Such approach insures that key or signature header could not be changed.
58 digsig_verify() - digital signature verification with public key
62 * digsig_verify() - digital signature verification with public key
[all …]
|
| /linux/tools/power/acpi/os_specific/service_layers/ |
| H A D | oslinuxtbl.c | 22 char signature[ACPI_NAMESEG_SIZE] ACPI_NONSTRING; member
31 osl_table_name_from_file(char *filename, char *signature, u32 *instance);
33 static acpi_status osl_add_table_to_list(char *signature, u32 instance);
42 char *signature, struct acpi_table_header **table);
57 char *signature,
65 osl_get_bios_table(char *signature,
203 * PARAMETERS: signature - ACPI Signature for desired table. Must be
212 * AE_NOT_FOUND: A table with the signature was not found
214 * NOTE: Assumes the input signature i
219 acpi_os_get_table_by_name(char * signature,u32 instance,struct acpi_table_header ** table,acpi_physical_address * address) acpi_os_get_table_by_name() argument
277 osl_add_table_to_list(char * signature,u32 instance) osl_add_table_to_list() argument
766 osl_get_bios_table(char * signature,u32 instance,struct acpi_table_header ** table,acpi_physical_address * address) osl_get_bios_table() argument
1055 osl_map_table(acpi_size address,char * signature,struct acpi_table_header ** table) osl_map_table() argument
1156 osl_table_name_from_file(char * filename,char * signature,u32 * instance) osl_table_name_from_file() argument
1308 osl_get_customized_table(char * pathname,char * signature,u32 instance,struct acpi_table_header ** table,acpi_physical_address * address) osl_get_customized_table() argument
[all...] |
| /linux/fs/verity/ |
| H A D | signature.c | 11 * signatures with fs-verity, and the alternatives (such as userspace signature
26 * If 1, all verity files must have a valid builtin signature.
39 * fsverity_verify_signature() - check a verity file's signature
41 * @signature: the file's built-in signature
42 * @sig_size: size of signature in bytes, or 0 if no signature
44 * If the file includes a signature of its fs-verity file digest, verify it
51 * Return: 0 on success (signature valid or not required); -errno on failure
54 const u8 *signature, size_t sig_size) in fsverity_verify_signature() argument
95 signature, sig_size, fsverity_keyring, in fsverity_verify_signature()
105 fsverity_err(inode, "Incorrect file signature"); in fsverity_verify_signature()
[all …]
|
| /linux/Documentation/bpf/ |
| H A D | signing.rst | 11 the signature actually guarantees, or build a policy on top of it.
28 checked by the verifier like any other program. A valid signature establishes
33 instruction buffer at build time and verify that signature at
48 So a signature over the original instructions cannot match the relocated
72 content of the metadata map. Verifying the loader's signature establishes that
93 instructions and covered by the same signature (there is no separate metadata
99 metadata, **after** the kernel has verified the ``insns || metadata`` signature.
103 signature can be checked" to "after a trusted program runs" - which is exactly
119 signature cannot change before the loader runs. (Freezing does not make the
132 #. The loader is loaded with ``signature``/``signature_size``/``keyring_id``
[all …]
|
| /linux/include/uapi/linux/ |
| H A D | psp-dbc.h | 29 * @signature: Optional 32 byte signature created by software using a
35 __u8 signature[DBC_SIG_SIZE]; member
41 * @signature: 32 byte signature created by software using a previous nonce
45 __u8 signature[DBC_SIG_SIZE]; member
52 * @signature: 32 byte signature.
55 * - For interpreting results, this signature is updated by the
62 __u8 signature[DBC_SIG_SIZE]; member
81 * -EPERM: invalid signature
98 * 32 byte signature built using the nonce fetched from
110 * This command must be sent using a 32 byte signature built
[all …]
|
| /linux/tools/testing/selftests/kexec/ |
| H A D | test_kexec_file_load.sh | 5 # the IMA signature stored in the security.ima xattr or the PE signature,
23 # Return 1 for IMA signature required and 0 for not required.
29 "IMA kernel image signature required"
31 log_info "IMA signature required"
41 # First check for appended signature (modsig), then xattr
47 log_info "IMA or appended(modsig) signature required"
52 [ $ret -eq 1 ] && log_info "IMA signature required";
59 # Return 1 for PE signature found and 0 for not found.
64 pesign -i $KERNEL_IMAGE --show-signature | grep -q "No signatures"
75 # Return 1 for IMA signature found and 0 for not found.
[all …]
|
| /linux/lib/ |
| H A D | check_signature.c | 8 * @signature: signature block
9 * @length: length of signature
11 * Perform a signature comparison with the mmio address io_addr. This
17 const unsigned char *signature, int length) in check_signature() argument
20 if (readb(io_addr) != *signature) in check_signature()
23 signature++; in check_signature()
|
| /linux/tools/power/acpi/tools/acpidump/ |
| H A D | apdump.c | 33 if (!ACPI_VALIDATE_RSDP_SIG(table->signature)) { in ap_is_valid_header()
35 /* Make sure signature is all ASCII and a valid ACPI name */ in ap_is_valid_header()
37 if (!acpi_ut_valid_nameseg(table->signature)) { in ap_is_valid_header()
39 "Table signature (0x%8.8X) is invalid\n", in ap_is_valid_header()
40 *(u32 *)table->signature); in ap_is_valid_header()
73 if (ACPI_VALIDATE_RSDP_SIG(table->signature)) { in ap_is_valid_checksum()
88 table->signature); in ap_is_valid_checksum()
103 * DESCRIPTION: Obtain table length according to table signature.
117 if (ACPI_VALIDATE_RSDP_SIG(table->signature)) { in ap_get_table_length()
169 table->signature, ACPI_FORMAT_UINT6 in ap_dump_table_buffer()
293 ap_dump_table_by_name(char * signature) ap_dump_table_by_name() argument
[all...] |
| /linux/kernel/ |
| H A D | Kconfig.kexec | 50 bool "Verify kernel signature during kexec_file_load() syscall"
55 signature of the kernel image. The image can still be loaded without
56 a valid signature unless you also enable KEXEC_SIG_FORCE, though if
57 there's a signature that we can check, then it must be valid.
59 In addition to this option, you need to enable signature
64 bool "Require a valid signature in kexec_file_load() syscall"
68 This option makes kernel signature verification mandatory for
72 bool "Enable Image signature verification support (ARM)"
78 Enable Image signature verification support.
81 bool "Enable bzImage signature verification support"
[all …]
|
| /linux/include/rdma/ |
| H A D | signature.h | 23 * enum ib_signature_type - Signature types
33 * enum ib_t10_dif_bg_type - Signature T10-DIF block-guard types
68 * struct ib_sig_domain - Parameters for signature domain
70 * @sig: union of all signature domain attributes that may
81 * struct ib_sig_attrs - Parameters for signature handover operation
82 * @check_mask: bitmask for signature byte check (8 bytes)
101 * Signature check masks (8 bytes in total) according to the T10-PI standard:
114 * struct ib_sig_err - signature error descriptor
|
| /linux/Documentation/crypto/ |
| H A D | asymmetric-keys.rst | 12 - Signature verification.
112 1) Signature verification.
116 (eg. decryption and signature generation) require extra key data.
119 Signature Verification
122 An operation is provided to perform cryptographic signature verification, using
129 it to check the signature. The caller must have parsed the signature and
144 make up the actual signature must be stored in sig->mpi[] and the count of MPIs
151 The function will return 0 upon success or -EKEYREJECTED if the signature
219 signature creation operations (which are distinguished by the operation ID
225 Optional. This is the entry point for signature verification. The
[all …]
|
| /linux/scripts/ |
| H A D | extract-module-sig.pl | 6 # Reads the module file and writes out some or all of the signature
9 # -0: The unsigned module, no signature data at all
10 # -a: All of the signature data, including magic number
14 # -s: Just the crypto signature or PKCS#7 message
25 my $magic_number = "~Module signature appended~\n";
87 print STDERR "Found $sig_len bytes of signature [";
112 # The unsigned module, no signature data at all
116 # All of the signature data, including magic number
135 # Just the crypto signature or PKCS#7 message
|
| /linux/security/integrity/ |
| H A D | integrity.h | 84 * signature header format v2 - for using with asymmetric keys
86 * The signature_v2_hdr struct includes a signature format version
87 * to simplify defining new signature formats.
89 * signature format:
90 * version 2: regular file data hash based signature
91 * version 3: struct ima_file_id data based signature
95 uint8_t version; /* signature format version */
98 __be16 sig_size; /* signature size */
99 uint8_t sig[]; /* signature payload */
103 * IMA signature versio
[all...] |
| H A D | Kconfig | 11 (EVM), IMA-appraisal extension, digital signature verification
20 bool "Digital signature verification using multiple keyrings"
23 select SIGNATURE
25 This option enables digital signature verification support
43 This option enables digital signature verification using
64 and, possibly, the initramfs signature.
|
| /linux/drivers/pci/ |
| H A D | rom.c | 29 /* Data structure signature is "PCIR" in ASCII representation */
105 u16 signature; in pci_rom_header_valid() local
127 signature = readw(image); in pci_rom_header_valid()
128 if (signature != PCI_ROM_IMAGE_SIGNATURE) { in pci_rom_header_valid()
130 pci_info(pdev, "Invalid PCI ROM header signature: expecting %#06x, got %#06x\n", in pci_rom_header_valid()
131 PCI_ROM_IMAGE_SIGNATURE, signature); in pci_rom_header_valid()
146 u32 signature; in pci_rom_data_struct_valid() local
164 signature = readl(pds); in pci_rom_data_struct_valid()
165 if (signature != PCI_ROM_DATA_STRUCT_SIGNATURE) { in pci_rom_data_struct_valid()
166 pci_info(pdev, "Invalid PCI ROM data signature: expecting %#010x, got %#010x\n", in pci_rom_data_struct_valid()
[all …]
|
| /linux/security/integrity/platform_certs/ |
| H A D | keyring_handler.h | 23 * Return the handler for particular signature list types found in the db.
28 * Return the handler for particular signature list types found in the mok.
33 * Return the handler for particular signature list types for CA keys.
38 * Return the handler for particular signature list types for code signing keys.
43 * Return the handler for particular signature list types found in the dbx.
|
| /linux/tools/testing/selftests/bpf/prog_tests/ |
| H A D | signed_loader.c | 52 attr.signature = ptr_to_u64(sig); in load_loader()
99 attr.signature = ptr_to_u64(sig); in run_gen_loader()
318 * A present-but-invalid signature (the cert bytes are not a in signature_enforced()
319 * PKCS#7 signature) must be rejected at load: the signature in signature_enforced()
324 * would trip even if the signature were silently ignored. in signature_enforced()
328 ASSERT_EQ(fd, -EBADMSG, "invalid signature rejected at load"); in signature_enforced()
344 * (their contents are folded into the signature). Binding a in signed_nonexcl_fd_array_rejected()
345 * non-exclusive map is rejected, before the signature is even in signed_nonexcl_fd_array_rejected()
414 * signature. An exclusive map of any other type is rejected in signed_nonarray_fd_array_rejected()
470 * folded into the signature. Build an otherwise genuinely signed load - in signed_btf_fd_array_rejected()
[all …]
|
| /linux/drivers/platform/cznic/ |
| H A D | turris-omnia-mcu-keyctl.c | 40 memcpy(mcu->signature, &reply[1], in omnia_msg_signed_irq_handler()
50 void *signature) in omnia_mcu_sign() argument
82 memcpy(signature, mcu->signature, OMNIA_MCU_CRYPTO_SIGNATURE_LEN); in omnia_mcu_sign()
84 /* forget the signature, for security */ in omnia_mcu_sign()
85 memzero_explicit(mcu->signature, sizeof(mcu->signature)); in omnia_mcu_sign()
|
| /linux/crypto/asymmetric_keys/ |
| H A D | restrict.c | 69 * signature check fails or the key is blacklisted, -ENOPKG if the signature
71 * certificate but the signature check cannot be performed.
129 * certificate is not a CA. -ENOPKG if the signature uses unsupported
131 * the signature check cannot be performed.
170 * certificate is not a digsig. -ENOPKG if the signature uses unsupported
172 * the signature check cannot be performed.
327 * -EKEYREJECTED if the signature check fails, -ENOPKG if the signature uses
329 * but the signature check cannot be performed.
355 * -EKEYREJECTED if the signature check fails, -ENOPKG if the signature uses
357 * but the signature check cannot be performed.
|