mirror of
https://github.com/edk2-porting/linux-next.git
synced 2024-12-21 03:33:59 +08:00
6f52b16c5b
Many user space API headers are missing licensing information, which makes it hard for compliance tools to determine the correct license. By default are files without license information under the default license of the kernel, which is GPLV2. Marking them GPLV2 would exclude them from being included in non GPLV2 code, which is obviously not intended. The user space API headers fall under the syscall exception which is in the kernels COPYING file: NOTE! This copyright does *not* cover user programs that use kernel services by normal system calls - this is merely considered normal use of the kernel, and does *not* fall under the heading of "derived work". otherwise syscall usage would not be possible. Update the files which contain no license information with an SPDX license identifier. The chosen identifier is 'GPL-2.0 WITH Linux-syscall-note' which is the officially assigned identifier for the Linux syscall exception. SPDX license identifiers are a legally binding shorthand, which can be used instead of the full boiler plate text. This patch is based on work done by Thomas Gleixner and Kate Stewart and Philippe Ombredanne. See the previous patch in this series for the methodology of how this patch was researched. Reviewed-by: Kate Stewart <kstewart@linuxfoundation.org> Reviewed-by: Philippe Ombredanne <pombredanne@nexb.com> Reviewed-by: Thomas Gleixner <tglx@linutronix.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
133 lines
4.3 KiB
C
133 lines
4.3 KiB
C
/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
|
|
/*
|
|
* Userspace interface to the pkey device driver
|
|
*
|
|
* Copyright IBM Corp. 2017
|
|
*
|
|
* Author: Harald Freudenberger <freude@de.ibm.com>
|
|
*
|
|
*/
|
|
|
|
#ifndef _UAPI_PKEY_H
|
|
#define _UAPI_PKEY_H
|
|
|
|
#include <linux/ioctl.h>
|
|
#include <linux/types.h>
|
|
|
|
/*
|
|
* Ioctl calls supported by the pkey device driver
|
|
*/
|
|
|
|
#define PKEY_IOCTL_MAGIC 'p'
|
|
|
|
#define SECKEYBLOBSIZE 64 /* secure key blob size is always 64 bytes */
|
|
#define MAXPROTKEYSIZE 64 /* a protected key blob may be up to 64 bytes */
|
|
#define MAXCLRKEYSIZE 32 /* a clear key value may be up to 32 bytes */
|
|
|
|
/* defines for the type field within the pkey_protkey struct */
|
|
#define PKEY_KEYTYPE_AES_128 1
|
|
#define PKEY_KEYTYPE_AES_192 2
|
|
#define PKEY_KEYTYPE_AES_256 3
|
|
|
|
/* Struct to hold a secure key blob */
|
|
struct pkey_seckey {
|
|
__u8 seckey[SECKEYBLOBSIZE]; /* the secure key blob */
|
|
};
|
|
|
|
/* Struct to hold protected key and length info */
|
|
struct pkey_protkey {
|
|
__u32 type; /* key type, one of the PKEY_KEYTYPE values */
|
|
__u32 len; /* bytes actually stored in protkey[] */
|
|
__u8 protkey[MAXPROTKEYSIZE]; /* the protected key blob */
|
|
};
|
|
|
|
/* Struct to hold a clear key value */
|
|
struct pkey_clrkey {
|
|
__u8 clrkey[MAXCLRKEYSIZE]; /* 16, 24, or 32 byte clear key value */
|
|
};
|
|
|
|
/*
|
|
* Generate secure key
|
|
*/
|
|
struct pkey_genseck {
|
|
__u16 cardnr; /* in: card to use or FFFF for any */
|
|
__u16 domain; /* in: domain or FFFF for any */
|
|
__u32 keytype; /* in: key type to generate */
|
|
struct pkey_seckey seckey; /* out: the secure key blob */
|
|
};
|
|
#define PKEY_GENSECK _IOWR(PKEY_IOCTL_MAGIC, 0x01, struct pkey_genseck)
|
|
|
|
/*
|
|
* Construct secure key from clear key value
|
|
*/
|
|
struct pkey_clr2seck {
|
|
__u16 cardnr; /* in: card to use or FFFF for any */
|
|
__u16 domain; /* in: domain or FFFF for any */
|
|
__u32 keytype; /* in: key type to generate */
|
|
struct pkey_clrkey clrkey; /* in: the clear key value */
|
|
struct pkey_seckey seckey; /* out: the secure key blob */
|
|
};
|
|
#define PKEY_CLR2SECK _IOWR(PKEY_IOCTL_MAGIC, 0x02, struct pkey_clr2seck)
|
|
|
|
/*
|
|
* Fabricate protected key from a secure key
|
|
*/
|
|
struct pkey_sec2protk {
|
|
__u16 cardnr; /* in: card to use or FFFF for any */
|
|
__u16 domain; /* in: domain or FFFF for any */
|
|
struct pkey_seckey seckey; /* in: the secure key blob */
|
|
struct pkey_protkey protkey; /* out: the protected key */
|
|
};
|
|
#define PKEY_SEC2PROTK _IOWR(PKEY_IOCTL_MAGIC, 0x03, struct pkey_sec2protk)
|
|
|
|
/*
|
|
* Fabricate protected key from an clear key value
|
|
*/
|
|
struct pkey_clr2protk {
|
|
__u32 keytype; /* in: key type to generate */
|
|
struct pkey_clrkey clrkey; /* in: the clear key value */
|
|
struct pkey_protkey protkey; /* out: the protected key */
|
|
};
|
|
#define PKEY_CLR2PROTK _IOWR(PKEY_IOCTL_MAGIC, 0x04, struct pkey_clr2protk)
|
|
|
|
/*
|
|
* Search for matching crypto card based on the Master Key
|
|
* Verification Pattern provided inside a secure key.
|
|
*/
|
|
struct pkey_findcard {
|
|
struct pkey_seckey seckey; /* in: the secure key blob */
|
|
__u16 cardnr; /* out: card number */
|
|
__u16 domain; /* out: domain number */
|
|
};
|
|
#define PKEY_FINDCARD _IOWR(PKEY_IOCTL_MAGIC, 0x05, struct pkey_findcard)
|
|
|
|
/*
|
|
* Combined together: findcard + sec2prot
|
|
*/
|
|
struct pkey_skey2pkey {
|
|
struct pkey_seckey seckey; /* in: the secure key blob */
|
|
struct pkey_protkey protkey; /* out: the protected key */
|
|
};
|
|
#define PKEY_SKEY2PKEY _IOWR(PKEY_IOCTL_MAGIC, 0x06, struct pkey_skey2pkey)
|
|
|
|
/*
|
|
* Verify the given secure key for being able to be useable with
|
|
* the pkey module. Check for correct key type and check for having at
|
|
* least one crypto card being able to handle this key (master key
|
|
* or old master key verification pattern matches).
|
|
* Return some info about the key: keysize in bits, keytype (currently
|
|
* only AES), flag if key is wrapped with an old MKVP.
|
|
*/
|
|
struct pkey_verifykey {
|
|
struct pkey_seckey seckey; /* in: the secure key blob */
|
|
__u16 cardnr; /* out: card number */
|
|
__u16 domain; /* out: domain number */
|
|
__u16 keysize; /* out: key size in bits */
|
|
__u32 attributes; /* out: attribute bits */
|
|
};
|
|
#define PKEY_VERIFYKEY _IOWR(PKEY_IOCTL_MAGIC, 0x07, struct pkey_verifykey)
|
|
#define PKEY_VERIFY_ATTR_AES 0x00000001 /* key is an AES key */
|
|
#define PKEY_VERIFY_ATTR_OLD_MKVP 0x00000100 /* key has old MKVP value */
|
|
|
|
#endif /* _UAPI_PKEY_H */
|