u-boot-toradex.git/include/crypto, branch master

mbedtls: access mbedtls private members in mscode and pkcs7 parser

2025-02-27T18:11:02+00:00

U-Boot requires to access x509_internal.h, mbedtls_sha256_context and
mbedtls_sha1_context in the porting layer, and this requires to
enable MBEDTLS_ALLOW_PRIVATE_ACCESS.

Enable it to mscode and pkcs7_parser to fix a mbedtls internal building
error when X509 is selected.

Moreover, Move it to a separate file to avoid enabling it in multiple
places.

Signed-off-by: Raymond Mao 
Acked-by: Ilias Apalodimas

lib/crypto: Adapt mscode_parser to MbedTLS

2024-10-14T23:58:49+00:00

Previous patch has introduced MbedTLS porting layer for mscode parser,
here to adjust the header and makefiles accordingly.
Adding _LEGACY Kconfig for legacy mscode implementation.

Signed-off-by: Raymond Mao

lib/crypto: Adapt PKCS7 parser to MbedTLS

2024-10-14T23:58:47+00:00

Previous patch has introduced MbedTLS porting layer for PKCS7 parser,
here to adjust the header and makefiles accordingly.

Signed-off-by: Raymond Mao

lib/crypto: Adapt x509_cert_parser to MbedTLS

2024-10-14T23:58:46+00:00

Previous patch has introduced MbedTLS porting layer for x509 cert parser,
here to adjust the header and makefiles accordingly.

Signed-off-by: Raymond Mao

lib/crypto: Adapt public_key header with MbedTLS

2024-10-14T23:58:44+00:00

Previous patch has introduced MbedTLS porting layer for public key,
here to adjust the header and makefiles accordingly.

Signed-off-by: Raymond Mao 
Reviewed-by: Ilias Apalodimas

common: Drop linux/printk.h from common header

2023-09-24T13:54:57+00:00

This old patch was marked as deferred. Bring it back to life, to continue
towards the removal of common.h

Move this out of the common header and include it only where needed.

Signed-off-by: Simon Glass

lib: crypto: add mscode_parser

2022-07-05T12:37:16+00:00

In MS authenticode, pkcs7 should have data in its contentInfo field.
This data is tagged with SpcIndirectData type and, for a signed PE image,
provides a image's message digest as SpcPeImageData.

This parser is used in image authentication to parse the field and
retrieve a message digest.

Imported from linux v5.19-rc, crypto/asymmetric_keys/mscode*.
Checkpatch.pl generates tones of warnings, but those are not fixed
for the sake of maintainability (importing from another source).

Signed-off-by: AKASHI Takahiro

dm: crypto: Define UCLASS API for ECDSA signature verification

2021-08-16T08:49:35+00:00

Define a UCLASS API for verifying ECDSA signatures. Unlike
UCLASS_MOD_EXP, which focuses strictly on modular exponentiation,
the ECDSA class focuses on verification. This is done so that it
better aligns with mach-specific implementations, such as stm32mp.

Signed-off-by: Alexandru Gagniuc 
Reviewed-by: Patrick Delaunay

lib: crypto: export and enhance pkcs7_verify_one()

2020-07-22T10:37:17+00:00

The function, pkcs7_verify_one(), will be utilized to rework signature
verification logic aiming to support intermediate certificates in
"chain of trust."

To do that, its function interface is expanded, adding an extra argument
which is expected to return the last certificate in trusted chain.
Then, this last one must further be verified with signature database, db
and/or dbx.

Signed-off-by: AKASHI Takahiro

lib: crypto: add public_key_verify_signature()

2020-07-22T10:33:55+00:00

This function will be called from x509_check_for_self_signed() and
pkcs7_verify_one(), which will be imported from linux in a later patch.

While it does exist in linux code and has a similar functionality of
rsa_verify(), it calls further linux-specific interfaces inside.
That could lead to more files being imported from linux.

So simply re-implement it here instead of re-using the code.

Signed-off-by: AKASHI Takahiro