1 /* Asymmetric Public-key cryptography key type interface 2 * 3 * See Documentation/security/asymmetric-keys.txt 4 * 5 * Copyright (C) 2012 Red Hat, Inc. All Rights Reserved. 6 * Written by David Howells (dhowells@redhat.com) 7 * 8 * This program is free software; you can redistribute it and/or 9 * modify it under the terms of the GNU General Public Licence 10 * as published by the Free Software Foundation; either version 11 * 2 of the Licence, or (at your option) any later version. 12 */ 13 14 #ifndef _KEYS_ASYMMETRIC_TYPE_H 15 #define _KEYS_ASYMMETRIC_TYPE_H 16 17 #include <linux/key-type.h> 18 19 extern struct key_type key_type_asymmetric; 20 21 /* 22 * Identifiers for an asymmetric key ID. We have three ways of looking up a 23 * key derived from an X.509 certificate: 24 * 25 * (1) Serial Number & Issuer. Non-optional. This is the only valid way to 26 * map a PKCS#7 signature to an X.509 certificate. 27 * 28 * (2) Issuer & Subject Unique IDs. Optional. These were the original way to 29 * match X.509 certificates, but have fallen into disuse in favour of (3). 30 * 31 * (3) Auth & Subject Key Identifiers. Optional. SKIDs are only provided on 32 * CA keys that are intended to sign other keys, so don't appear in end 33 * user certificates unless forced. 34 * 35 * We could also support an PGP key identifier, which is just a SHA1 sum of the 36 * public key and certain parameters, but since we don't support PGP keys at 37 * the moment, we shall ignore those. 38 * 39 * What we actually do is provide a place where binary identifiers can be 40 * stashed and then compare against them when checking for an id match. 41 */ 42 struct asymmetric_key_id { 43 unsigned short len; 44 unsigned char data[]; 45 }; 46 47 struct asymmetric_key_ids { 48 void *id[2]; 49 }; 50 51 extern bool asymmetric_key_id_same(const struct asymmetric_key_id *kid1, 52 const struct asymmetric_key_id *kid2); 53 54 extern bool asymmetric_key_id_partial(const struct asymmetric_key_id *kid1, 55 const struct asymmetric_key_id *kid2); 56 57 extern struct asymmetric_key_id *asymmetric_key_generate_id(const void *val_1, 58 size_t len_1, 59 const void *val_2, 60 size_t len_2); 61 62 /* 63 * The payload is at the discretion of the subtype. 64 */ 65 66 #endif /* _KEYS_ASYMMETRIC_TYPE_H */ 67