mirror of
https://github.com/edk2-porting/linux-next.git
synced 2024-12-25 13:43:55 +08:00
4e561d388f
This patch introduces a new parameter, called 'format', that defines the format of data stored by encrypted keys. The 'default' format identifies encrypted keys containing only the symmetric key, while other formats can be defined to support additional information. The 'format' parameter is written in the datablob produced by commands 'keyctl print' or 'keyctl pipe' and is integrity protected by the HMAC. Signed-off-by: Roberto Sassu <roberto.sassu@polito.it> Acked-by: Gianluca Ramunno <ramunno@polito.it> Acked-by: David Howells <dhowells@redhat.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
39 lines
1.3 KiB
C
39 lines
1.3 KiB
C
/*
|
|
* Copyright (C) 2010 IBM Corporation
|
|
* Copyright (C) 2010 Politecnico di Torino, Italy
|
|
* TORSEC group -- http://security.polito.it
|
|
*
|
|
* Authors:
|
|
* Mimi Zohar <zohar@us.ibm.com>
|
|
* Roberto Sassu <roberto.sassu@polito.it>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, version 2 of the License.
|
|
*/
|
|
|
|
#ifndef _KEYS_ENCRYPTED_TYPE_H
|
|
#define _KEYS_ENCRYPTED_TYPE_H
|
|
|
|
#include <linux/key.h>
|
|
#include <linux/rcupdate.h>
|
|
|
|
struct encrypted_key_payload {
|
|
struct rcu_head rcu;
|
|
char *format; /* datablob: format */
|
|
char *master_desc; /* datablob: master key name */
|
|
char *datalen; /* datablob: decrypted key length */
|
|
u8 *iv; /* datablob: iv */
|
|
u8 *encrypted_data; /* datablob: encrypted data */
|
|
unsigned short datablob_len; /* length of datablob */
|
|
unsigned short decrypted_datalen; /* decrypted data length */
|
|
unsigned short payload_datalen; /* payload data length */
|
|
unsigned short encrypted_key_format; /* encrypted key format */
|
|
u8 *decrypted_data; /* decrypted data */
|
|
u8 payload_data[0]; /* payload data + datablob + hmac */
|
|
};
|
|
|
|
extern struct key_type key_type_encrypted;
|
|
|
|
#endif /* _KEYS_ENCRYPTED_TYPE_H */
|