1 /* Asymmetric public-key algorithm definitions 2 * 3 * See Documentation/crypto/asymmetric-keys.txt 4 * 5 * Copyright (C) 2012 Red Hat, Inc. All Rights Reserved. 6 * Written by David Howells (dhowells@redhat.com) 7 * 8 * This program is free software; you can redistribute it and/or 9 * modify it under the terms of the GNU General Public Licence 10 * as published by the Free Software Foundation; either version 11 * 2 of the Licence, or (at your option) any later version. 12 */ 13 14 #ifndef _LINUX_PUBLIC_KEY_H 15 #define _LINUX_PUBLIC_KEY_H 16 17 /* 18 * The use to which an asymmetric key is being put. 19 */ 20 enum key_being_used_for { 21 VERIFYING_MODULE_SIGNATURE, 22 VERIFYING_FIRMWARE_SIGNATURE, 23 VERIFYING_KEXEC_PE_SIGNATURE, 24 VERIFYING_KEY_SIGNATURE, 25 VERIFYING_KEY_SELF_SIGNATURE, 26 VERIFYING_UNSPECIFIED_SIGNATURE, 27 NR__KEY_BEING_USED_FOR 28 }; 29 extern const char *const key_being_used_for[NR__KEY_BEING_USED_FOR]; 30 31 /* 32 * Cryptographic data for the public-key subtype of the asymmetric key type. 33 * 34 * Note that this may include private part of the key as well as the public 35 * part. 36 */ 37 struct public_key { 38 void *key; 39 u32 keylen; 40 const char *id_type; 41 const char *pkey_algo; 42 }; 43 44 extern void public_key_destroy(void *payload); 45 46 /* 47 * Public key cryptography signature data 48 */ 49 struct public_key_signature { 50 u8 *s; /* Signature */ 51 u32 s_size; /* Number of bytes in signature */ 52 u8 *digest; 53 u8 digest_size; /* Number of bytes in digest */ 54 const char *pkey_algo; 55 const char *hash_algo; 56 }; 57 58 extern struct asymmetric_key_subtype public_key_subtype; 59 struct key; 60 extern int verify_signature(const struct key *key, 61 const struct public_key_signature *sig); 62 63 struct asymmetric_key_id; 64 extern struct key *x509_request_asymmetric_key(struct key *keyring, 65 const struct asymmetric_key_id *id, 66 const struct asymmetric_key_id *skid, 67 bool partial); 68 69 int public_key_verify_signature(const struct public_key *pkey, 70 const struct public_key_signature *sig); 71 72 #endif /* _LINUX_PUBLIC_KEY_H */ 73