linux-toradex.git/lib/digsig.c, branch v4.4-rc6

KEYS: Merge the type-specific data with the payload data

2015-10-21T14:18:36+00:00

Merge the type-specific data with the payload data into one four-word chunk
as it seems pointless to keep them separate.

Use user_key_payload() for accessing the payloads of overloaded
user-defined keys.

Signed-off-by: David Howells 
cc: linux-cifs@vger.kernel.org
cc: ecryptfs@vger.kernel.org
cc: linux-ext4@vger.kernel.org
cc: linux-f2fs-devel@lists.sourceforge.net
cc: linux-nfs@vger.kernel.org
cc: ceph-devel@vger.kernel.org
cc: linux-ima-devel@lists.sourceforge.net

lib/digsig.c: kernel-doc warning fixes

2014-06-04T23:54:19+00:00

Small typo and @return: -> Returns ...

Signed-off-by: Fabian Frederick 
Cc: Duan Jiong 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

lib/digsig.c: use ERR_CAST inlined function instead of ERR_PTR(PTR_ERR(...))

2013-11-13T03:09:22+00:00

Signed-off-by: Duan Jiong 
Cc: James Morris 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2013-02-21T16:18:12+00:00

Pull security subsystem updates from James Morris:
 "This is basically a maintenance update for the TPM driver and EVM/IMA"

Fix up conflicts in lib/digsig.c and security/integrity/ima/ima_main.c

* 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (45 commits)
  tpm/ibmvtpm: build only when IBM pseries is configured
  ima: digital signature verification using asymmetric keys
  ima: rename hash calculation functions
  ima: use new crypto_shash API instead of old crypto_hash
  ima: add policy support for file system uuid
  evm: add file system uuid to EVM hmac
  tpm_tis: check pnp_acpi_device return code
  char/tpm/tpm_i2c_stm_st33: drop temporary variable for return value
  char/tpm/tpm_i2c_stm_st33: remove dead assignment in tpm_st33_i2c_probe
  char/tpm/tpm_i2c_stm_st33: Remove __devexit attribute
  char/tpm/tpm_i2c_stm_st33: Don't use memcpy for one byte assignment
  tpm_i2c_stm_st33: removed unused variables/code
  TPM: Wait for TPM_ACCESS tpmRegValidSts to go high at startup
  tpm: Fix cancellation of TPM commands (interrupt mode)
  tpm: Fix cancellation of TPM commands (polling mode)
  tpm: Store TPM vendor ID
  TPM: Work around buggy TPMs that block during continue self test
  tpm_i2c_stm_st33: fix oops when i2c client is unavailable
  char/tpm: Use struct dev_pm_ops for power management
  TPM: STMicroelectronics ST33 I2C BUILD STUFF
  ...

digsig: remove unnecessary memory allocation and copying

2013-02-01T05:28:24+00:00

In existing use case, copying of the decoded data is unnecessary in
pkcs_1_v1_5_decode_emsa. It is just enough to get pointer to the message.
Removing copying and extra buffer allocation.

Signed-off-by: Dmitry Kasatkin 
Signed-off-by: James Morris

digsig: Fix memory leakage in digsig_verify_rsa()

2013-02-01T04:59:33+00:00

digsig_verify_rsa() does not free kmalloc'ed buffer returned by
mpi_get_buffer().

Signed-off-by: YOSHIFUJI Hideaki 
Signed-off-by: Dmitry Kasatkin 
Cc: stable@vger.kernel.org
Signed-off-by: James Morris

digsig: add hash size comparision on signature verification

2012-09-13T01:13:02+00:00

When pkcs_1_v1_5_decode_emsa() returns without error and hash sizes do
not match, hash comparision is not done and digsig_verify_rsa() returns
no error.  This is a bug and this patch fixes it.

The bug was introduced in v3.3 by commit b35e286a640f ("lib/digsig:
pkcs_1_v1_5_decode_emsa cleanup").

Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Kasatkin 
Signed-off-by: Linus Torvalds

lib/digsig: checks for NULL return value

2012-02-01T13:24:04+00:00

mpi_read_from_buffer() return value must not be NULL.

Signed-off-by: Dmitry Kasatkin 
Reviewed-by: Tetsuo Handa 
Signed-off-by: James Morris

lib/digsig: pkcs_1_v1_5_decode_emsa cleanup

2012-02-01T13:23:39+00:00

Removed useless 'is_valid' variable in pkcs_1_v1_5_decode_emsa(),
which was inhereted from original code. Client now uses return value
to check for an error.

Signed-off-by: Dmitry Kasatkin 
Reviewed-by: Tetsuo Handa 
Signed-off-by: James Morris

lib/digsig: additional sanity checks against badly formated key payload

2012-02-01T13:23:38+00:00

Added sanity checks for possible wrongly formatted key payload data:
- minimum key payload size
- zero modulus length
- corrected upper key payload boundary.

Signed-off-by: Dmitry Kasatkin 
Reviewed-by: Tetsuo Handa 
Signed-off-by: James Morris