linux-toradex.git/crypto/asymmetric_keys/mscode_parser.c, branch v4.9.25

pefile: Fix the failure of calculation for digest

2016-07-18T02:19:46+00:00

Commit e68503bd68 forgot to set digest_len and thus cause the following
error reported by kexec when launching a crash kernel:

	kexec_file_load failed: Bad message

Fixes: e68503bd68 (KEYS: Generalise system_verify_data() to provide access to internal content)
Signed-off-by: Lans Zhang 
Tested-by: Dave Young 
Signed-off-by: David Howells 
Cc: Baoquan He 
Cc: Vivek Goyal 
cc: kexec@lists.infradead.org
cc: linux-crypto@vger.kernel.org
Signed-off-by: James Morris

KEYS: Generalise system_verify_data() to provide access to internal content

2016-04-06T15:14:24+00:00

Generalise system_verify_data() to provide access to internal content
through a callback.  This allows all the PKCS#7 stuff to be hidden inside
this function and removed from the PE file parser and the PKCS#7 test key.

If external content is not required, NULL should be passed as data to the
function.  If the callback is not required, that can be set to NULL.

The function is now called verify_pkcs7_signature() to contrast with
verify_pefile_signature() and the definitions of both have been moved into
linux/verification.h along with the key_being_used_for enum.

Signed-off-by: David Howells

X.509: Make algo identifiers text instead of enum

2016-03-03T21:49:27+00:00

Make the identifier public key and digest algorithm fields text instead of
enum.

Signed-off-by: David Howells 
Acked-by: Herbert Xu

PKCS#7: Add OIDs for sha224, sha284 and sha512 hash algos and use them

2015-08-31T23:59:20+00:00

Add OIDs for sha224, sha284 and sha512 hash algos and use them to select
the hashing algorithm.  Without this, something like the following error
might get written to dmesg:

[   31.829322] PKCS7: Unknown OID: [32] 2.16.840.1.101.3.4.2.3
[   31.829328] PKCS7: Unknown OID: [180] 2.16.840.1.101.3.4.2.3
[   31.829330] Unsupported digest algo: 55

Where the 55 on the third line is OID__NR indicating an unknown OID.

Reported-by: Valdis Kletnieks 
Signed-off-by: David Howells 
Tested-By: Valdis Kletnieks 
Signed-off-by: James Morris

pefile: Handle pesign using the wrong OID

2014-07-09T13:58:37+00:00

The pesign utility had a bug where it was using OID_msIndividualSPKeyPurpose
instead of OID_msPeImageDataObjId - so allow both OIDs.

Signed-off-by: Vivek Goyal 
Acked-by: Vivek Goyal

pefile: Parse the "Microsoft individual code signing" data blob

2014-07-09T13:58:37+00:00

The PKCS#7 certificate should contain a "Microsoft individual code signing"
data blob as its signed content.  This blob contains a digest of the signed
content of the PE binary and the OID of the digest algorithm used (typically
SHA256).

Signed-off-by: David Howells 
Acked-by: Vivek Goyal 
Reviewed-by: Kees Cook