xref: /linux/crypto/asymmetric_keys/pkcs7_parser.h (revision 0883c2c06fb5bcf5b9e008270827e63c09a88c1e)
1 /* PKCS#7 crypto data parser internal definitions
2  *
3  * Copyright (C) 2012 Red Hat, Inc. All Rights Reserved.
4  * Written by David Howells (dhowells@redhat.com)
5  *
6  * This program is free software; you can redistribute it and/or
7  * modify it under the terms of the GNU General Public Licence
8  * as published by the Free Software Foundation; either version
9  * 2 of the Licence, or (at your option) any later version.
10  */
11 
12 #include <linux/oid_registry.h>
13 #include <crypto/pkcs7.h>
14 #include "x509_parser.h"
15 
16 #define kenter(FMT, ...) \
17 	pr_devel("==> %s("FMT")\n", __func__, ##__VA_ARGS__)
18 #define kleave(FMT, ...) \
19 	pr_devel("<== %s()"FMT"\n", __func__, ##__VA_ARGS__)
20 
21 struct pkcs7_signed_info {
22 	struct pkcs7_signed_info *next;
23 	struct x509_certificate *signer; /* Signing certificate (in msg->certs) */
24 	unsigned	index;
25 	bool		unsupported_crypto;	/* T if not usable due to missing crypto */
26 
27 	/* Message digest - the digest of the Content Data (or NULL) */
28 	const void	*msgdigest;
29 	unsigned	msgdigest_len;
30 
31 	/* Authenticated Attribute data (or NULL) */
32 	unsigned	authattrs_len;
33 	const void	*authattrs;
34 	unsigned long	aa_set;
35 #define	sinfo_has_content_type		0
36 #define	sinfo_has_signing_time		1
37 #define	sinfo_has_message_digest	2
38 #define sinfo_has_smime_caps		3
39 #define	sinfo_has_ms_opus_info		4
40 #define	sinfo_has_ms_statement_type	5
41 	time64_t	signing_time;
42 
43 	/* Message signature.
44 	 *
45 	 * This contains the generated digest of _either_ the Content Data or
46 	 * the Authenticated Attributes [RFC2315 9.3].  If the latter, one of
47 	 * the attributes contains the digest of the the Content Data within
48 	 * it.
49 	 *
50 	 * THis also contains the issuing cert serial number and issuer's name
51 	 * [PKCS#7 or CMS ver 1] or issuing cert's SKID [CMS ver 3].
52 	 */
53 	struct public_key_signature *sig;
54 };
55 
56 struct pkcs7_message {
57 	struct x509_certificate *certs;	/* Certificate list */
58 	struct x509_certificate *crl;	/* Revocation list */
59 	struct pkcs7_signed_info *signed_infos;
60 	u8		version;	/* Version of cert (1 -> PKCS#7 or CMS; 3 -> CMS) */
61 	bool		have_authattrs;	/* T if have authattrs */
62 
63 	/* Content Data (or NULL) */
64 	enum OID	data_type;	/* Type of Data */
65 	size_t		data_len;	/* Length of Data */
66 	size_t		data_hdrlen;	/* Length of Data ASN.1 header */
67 	const void	*data;		/* Content Data (or 0) */
68 };
69