blob: 50ac8759d7ee37129551690be7a8698f4f0cb746 [file] [log] [blame]
David Howellsa9681bf2012-09-21 23:24:55 +01001/* Asymmetric public-key algorithm definitions
2 *
3 * See Documentation/crypto/asymmetric-keys.txt
4 *
5 * Copyright (C) 2012 Red Hat, Inc. All Rights Reserved.
6 * Written by David Howells (dhowells@redhat.com)
7 *
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public Licence
10 * as published by the Free Software Foundation; either version
11 * 2 of the Licence, or (at your option) any later version.
12 */
13
14#ifndef _LINUX_PUBLIC_KEY_H
15#define _LINUX_PUBLIC_KEY_H
16
17#include <linux/mpi.h>
Dmitry Kasatkin3fe78ca2013-05-06 15:58:15 +030018#include <crypto/hash_info.h>
David Howellsa9681bf2012-09-21 23:24:55 +010019
20enum pkey_algo {
21 PKEY_ALGO_DSA,
22 PKEY_ALGO_RSA,
23 PKEY_ALGO__LAST
24};
25
David Howells9abc4e62013-08-30 16:15:10 +010026extern const char *const pkey_algo_name[PKEY_ALGO__LAST];
David Howellsa9681bf2012-09-21 23:24:55 +010027
Dmitry Kasatkin3fe78ca2013-05-06 15:58:15 +030028/* asymmetric key implementation supports only up to SHA224 */
29#define PKEY_HASH__LAST (HASH_ALGO_SHA224 + 1)
David Howellsa9681bf2012-09-21 23:24:55 +010030
31enum pkey_id_type {
32 PKEY_ID_PGP, /* OpenPGP generated key ID */
33 PKEY_ID_X509, /* X.509 arbitrary subjectKeyIdentifier */
David Howellsbc1c3732015-07-20 21:16:27 +010034 PKEY_ID_PKCS7, /* Signature in PKCS#7 message */
David Howellsa9681bf2012-09-21 23:24:55 +010035 PKEY_ID_TYPE__LAST
36};
37
David Howells9abc4e62013-08-30 16:15:10 +010038extern const char *const pkey_id_type_name[PKEY_ID_TYPE__LAST];
David Howellsa9681bf2012-09-21 23:24:55 +010039
40/*
David Howells99db4432015-08-05 15:22:27 +010041 * The use to which an asymmetric key is being put.
42 */
43enum key_being_used_for {
44 VERIFYING_MODULE_SIGNATURE,
45 VERIFYING_FIRMWARE_SIGNATURE,
46 VERIFYING_KEXEC_PE_SIGNATURE,
47 VERIFYING_KEY_SIGNATURE,
48 VERIFYING_KEY_SELF_SIGNATURE,
49 VERIFYING_UNSPECIFIED_SIGNATURE,
50 NR__KEY_BEING_USED_FOR
51};
52extern const char *const key_being_used_for[NR__KEY_BEING_USED_FOR];
53
54/*
David Howellsa9681bf2012-09-21 23:24:55 +010055 * Cryptographic data for the public-key subtype of the asymmetric key type.
56 *
57 * Note that this may include private part of the key as well as the public
58 * part.
59 */
60struct public_key {
Tadeusz Strukdb6c43b2016-02-02 10:08:53 -080061 void *key;
62 u32 keylen;
David Howells67f7d60b2013-08-30 16:15:24 +010063 enum pkey_algo pkey_algo : 8;
David Howellsa9681bf2012-09-21 23:24:55 +010064 enum pkey_id_type id_type : 8;
David Howellsa9681bf2012-09-21 23:24:55 +010065};
66
67extern void public_key_destroy(void *payload);
68
69/*
70 * Public key cryptography signature data
71 */
72struct public_key_signature {
Tadeusz Strukdb6c43b2016-02-02 10:08:53 -080073 u8 *s; /* Signature */
74 u32 s_size; /* Number of bytes in signature */
David Howellsa9681bf2012-09-21 23:24:55 +010075 u8 *digest;
76 u8 digest_size; /* Number of bytes in digest */
77 u8 nr_mpi; /* Occupancy of mpi[] */
David Howells15738012013-08-30 16:15:37 +010078 enum pkey_algo pkey_algo : 8;
Dmitry Kasatkin3fe78ca2013-05-06 15:58:15 +030079 enum hash_algo pkey_hash_algo : 8;
David Howellsa9681bf2012-09-21 23:24:55 +010080 union {
81 MPI mpi[2];
82 struct {
83 MPI s; /* m^d mod n */
84 } rsa;
85 struct {
86 MPI r;
87 MPI s;
88 } dsa;
89 };
90};
91
Tadeusz Strukdb6c43b2016-02-02 10:08:53 -080092extern struct asymmetric_key_subtype public_key_subtype;
David Howells4ae71c12012-09-21 23:25:04 +010093struct key;
94extern int verify_signature(const struct key *key,
95 const struct public_key_signature *sig);
96
David Howells46963b72014-09-16 17:36:13 +010097struct asymmetric_key_id;
David Howells5ce43ad2014-07-28 14:11:32 +010098extern struct key *x509_request_asymmetric_key(struct key *keyring,
David Howells4573b642015-07-20 21:16:26 +010099 const struct asymmetric_key_id *id,
100 const struct asymmetric_key_id *skid,
Dmitry Kasatkinf1b731d2014-10-06 15:21:05 +0100101 bool partial);
David Howells5ce43ad2014-07-28 14:11:32 +0100102
Tadeusz Strukdb6c43b2016-02-02 10:08:53 -0800103int public_key_verify_signature(const struct public_key *pkey,
104 const struct public_key_signature *sig);
105
106int rsa_verify_signature(const struct public_key *pkey,
107 const struct public_key_signature *sig);
David Howellsa9681bf2012-09-21 23:24:55 +0100108#endif /* _LINUX_PUBLIC_KEY_H */