1
2
3
4
5
6
7
8
9
10#ifndef _LINUX_PUBLIC_KEY_H
11#define _LINUX_PUBLIC_KEY_H
12
13#ifdef __UBOOT__
14#include <linux/types.h>
15#else
16#include <linux/keyctl.h>
17#endif
18#include <linux/oid_registry.h>
19
20
21
22
23
24
25
26struct public_key {
27 void *key;
28 u32 keylen;
29 enum OID algo;
30 void *params;
31 u32 paramlen;
32 bool key_is_private;
33 const char *id_type;
34 const char *pkey_algo;
35};
36
37extern void public_key_free(struct public_key *key);
38
39
40
41
42struct public_key_signature {
43 struct asymmetric_key_id *auth_ids[2];
44 u8 *s;
45 u32 s_size;
46 u8 *digest;
47 u8 digest_size;
48 const char *pkey_algo;
49 const char *hash_algo;
50 const char *encoding;
51};
52
53extern void public_key_signature_free(struct public_key_signature *sig);
54
55#ifndef __UBOOT__
56extern struct asymmetric_key_subtype public_key_subtype;
57
58struct key;
59struct key_type;
60union key_payload;
61
62extern int restrict_link_by_signature(struct key *dest_keyring,
63 const struct key_type *type,
64 const union key_payload *payload,
65 struct key *trust_keyring);
66
67extern int restrict_link_by_key_or_keyring(struct key *dest_keyring,
68 const struct key_type *type,
69 const union key_payload *payload,
70 struct key *trusted);
71
72extern int restrict_link_by_key_or_keyring_chain(struct key *trust_keyring,
73 const struct key_type *type,
74 const union key_payload *payload,
75 struct key *trusted);
76
77extern int query_asymmetric_key(const struct kernel_pkey_params *,
78 struct kernel_pkey_query *);
79
80extern int encrypt_blob(struct kernel_pkey_params *, const void *, void *);
81extern int decrypt_blob(struct kernel_pkey_params *, const void *, void *);
82extern int create_signature(struct kernel_pkey_params *, const void *, void *);
83extern int verify_signature(const struct key *,
84 const struct public_key_signature *);
85#endif
86
87int public_key_verify_signature(const struct public_key *pkey,
88 const struct public_key_signature *sig);
89
90#endif
91