David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 1 | /* Asymmetric public-key algorithm definitions |
| 2 | * |
| 3 | * See Documentation/crypto/asymmetric-keys.txt |
| 4 | * |
| 5 | * Copyright (C) 2012 Red Hat, Inc. All Rights Reserved. |
| 6 | * Written by David Howells (dhowells@redhat.com) |
| 7 | * |
| 8 | * This program is free software; you can redistribute it and/or |
| 9 | * modify it under the terms of the GNU General Public Licence |
| 10 | * as published by the Free Software Foundation; either version |
| 11 | * 2 of the Licence, or (at your option) any later version. |
| 12 | */ |
| 13 | |
| 14 | #ifndef _LINUX_PUBLIC_KEY_H |
| 15 | #define _LINUX_PUBLIC_KEY_H |
| 16 | |
| 17 | #include <linux/mpi.h> |
Dmitry Kasatkin | 3fe78ca | 2013-05-06 15:58:15 +0300 | [diff] [blame] | 18 | #include <crypto/hash_info.h> |
David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 19 | |
| 20 | enum pkey_algo { |
| 21 | PKEY_ALGO_DSA, |
| 22 | PKEY_ALGO_RSA, |
| 23 | PKEY_ALGO__LAST |
| 24 | }; |
| 25 | |
David Howells | 9abc4e6 | 2013-08-30 16:15:10 +0100 | [diff] [blame] | 26 | extern const char *const pkey_algo_name[PKEY_ALGO__LAST]; |
David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 27 | |
Dmitry Kasatkin | 3fe78ca | 2013-05-06 15:58:15 +0300 | [diff] [blame] | 28 | /* asymmetric key implementation supports only up to SHA224 */ |
| 29 | #define PKEY_HASH__LAST (HASH_ALGO_SHA224 + 1) |
David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 30 | |
| 31 | enum pkey_id_type { |
| 32 | PKEY_ID_PGP, /* OpenPGP generated key ID */ |
| 33 | PKEY_ID_X509, /* X.509 arbitrary subjectKeyIdentifier */ |
David Howells | bc1c373 | 2015-07-20 21:16:27 +0100 | [diff] [blame] | 34 | PKEY_ID_PKCS7, /* Signature in PKCS#7 message */ |
David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 35 | PKEY_ID_TYPE__LAST |
| 36 | }; |
| 37 | |
David Howells | 9abc4e6 | 2013-08-30 16:15:10 +0100 | [diff] [blame] | 38 | extern const char *const pkey_id_type_name[PKEY_ID_TYPE__LAST]; |
David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 39 | |
| 40 | /* |
David Howells | 99db443 | 2015-08-05 15:22:27 +0100 | [diff] [blame] | 41 | * The use to which an asymmetric key is being put. |
| 42 | */ |
| 43 | enum key_being_used_for { |
| 44 | VERIFYING_MODULE_SIGNATURE, |
| 45 | VERIFYING_FIRMWARE_SIGNATURE, |
| 46 | VERIFYING_KEXEC_PE_SIGNATURE, |
| 47 | VERIFYING_KEY_SIGNATURE, |
| 48 | VERIFYING_KEY_SELF_SIGNATURE, |
| 49 | VERIFYING_UNSPECIFIED_SIGNATURE, |
| 50 | NR__KEY_BEING_USED_FOR |
| 51 | }; |
| 52 | extern const char *const key_being_used_for[NR__KEY_BEING_USED_FOR]; |
| 53 | |
| 54 | /* |
David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 55 | * Cryptographic data for the public-key subtype of the asymmetric key type. |
| 56 | * |
| 57 | * Note that this may include private part of the key as well as the public |
| 58 | * part. |
| 59 | */ |
| 60 | struct public_key { |
Tadeusz Struk | db6c43b | 2016-02-02 10:08:53 -0800 | [diff] [blame^] | 61 | void *key; |
| 62 | u32 keylen; |
David Howells | 67f7d60b | 2013-08-30 16:15:24 +0100 | [diff] [blame] | 63 | enum pkey_algo pkey_algo : 8; |
David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 64 | enum pkey_id_type id_type : 8; |
David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 65 | }; |
| 66 | |
| 67 | extern void public_key_destroy(void *payload); |
| 68 | |
| 69 | /* |
| 70 | * Public key cryptography signature data |
| 71 | */ |
| 72 | struct public_key_signature { |
Tadeusz Struk | db6c43b | 2016-02-02 10:08:53 -0800 | [diff] [blame^] | 73 | u8 *s; /* Signature */ |
| 74 | u32 s_size; /* Number of bytes in signature */ |
David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 75 | u8 *digest; |
| 76 | u8 digest_size; /* Number of bytes in digest */ |
| 77 | u8 nr_mpi; /* Occupancy of mpi[] */ |
David Howells | 1573801 | 2013-08-30 16:15:37 +0100 | [diff] [blame] | 78 | enum pkey_algo pkey_algo : 8; |
Dmitry Kasatkin | 3fe78ca | 2013-05-06 15:58:15 +0300 | [diff] [blame] | 79 | enum hash_algo pkey_hash_algo : 8; |
David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 80 | union { |
| 81 | MPI mpi[2]; |
| 82 | struct { |
| 83 | MPI s; /* m^d mod n */ |
| 84 | } rsa; |
| 85 | struct { |
| 86 | MPI r; |
| 87 | MPI s; |
| 88 | } dsa; |
| 89 | }; |
| 90 | }; |
| 91 | |
Tadeusz Struk | db6c43b | 2016-02-02 10:08:53 -0800 | [diff] [blame^] | 92 | extern struct asymmetric_key_subtype public_key_subtype; |
David Howells | 4ae71c1 | 2012-09-21 23:25:04 +0100 | [diff] [blame] | 93 | struct key; |
| 94 | extern int verify_signature(const struct key *key, |
| 95 | const struct public_key_signature *sig); |
| 96 | |
David Howells | 46963b7 | 2014-09-16 17:36:13 +0100 | [diff] [blame] | 97 | struct asymmetric_key_id; |
David Howells | 5ce43ad | 2014-07-28 14:11:32 +0100 | [diff] [blame] | 98 | extern struct key *x509_request_asymmetric_key(struct key *keyring, |
David Howells | 4573b64 | 2015-07-20 21:16:26 +0100 | [diff] [blame] | 99 | const struct asymmetric_key_id *id, |
| 100 | const struct asymmetric_key_id *skid, |
Dmitry Kasatkin | f1b731d | 2014-10-06 15:21:05 +0100 | [diff] [blame] | 101 | bool partial); |
David Howells | 5ce43ad | 2014-07-28 14:11:32 +0100 | [diff] [blame] | 102 | |
Tadeusz Struk | db6c43b | 2016-02-02 10:08:53 -0800 | [diff] [blame^] | 103 | int public_key_verify_signature(const struct public_key *pkey, |
| 104 | const struct public_key_signature *sig); |
| 105 | |
| 106 | int rsa_verify_signature(const struct public_key *pkey, |
| 107 | const struct public_key_signature *sig); |
David Howells | a9681bf | 2012-09-21 23:24:55 +0100 | [diff] [blame] | 108 | #endif /* _LINUX_PUBLIC_KEY_H */ |