b886d83c5b621 (Thomas Gleixner 2019-06-01 10:08:55 +0200 1) // SPDX-License-Identifier: GPL-2.0-only
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 2) /*
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 3) * Copyright (C) 2011 Nokia Corporation
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 4) * Copyright (C) 2011 Intel Corporation
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 5) *
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 6) * Author:
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 7) * Dmitry Kasatkin <dmitry.kasatkin@nokia.com>
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 8) * <dmitry.kasatkin@intel.com>
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 9) *
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 10) * File: sign.c
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 11) * implements signature (RSA) verification
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 12) * pkcs decoding is based on LibTomCrypt code
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 13) */
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 14)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 15) #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 16)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 17) #include <linux/err.h>
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 18) #include <linux/module.h>
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 19) #include <linux/slab.h>
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 20) #include <linux/key.h>
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 21) #include <linux/crypto.h>
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 22) #include <crypto/hash.h>
a24d22b225ce1 (Eric Biggers 2020-11-12 21:20:21 -0800 23) #include <crypto/sha1.h>
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 24) #include <keys/user-type.h>
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 25) #include <linux/mpi.h>
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 26) #include <linux/digsig.h>
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 27)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 28) static struct crypto_shash *shash;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 29)
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 30) static const char *pkcs_1_v1_5_decode_emsa(const unsigned char *msg,
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 31) unsigned long msglen,
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 32) unsigned long modulus_bitlen,
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 33) unsigned long *outlen)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 34) {
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 35) unsigned long modulus_len, ps_len, i;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 36)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 37) modulus_len = (modulus_bitlen >> 3) + (modulus_bitlen & 7 ? 1 : 0);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 38)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 39) /* test message size */
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 40) if ((msglen > modulus_len) || (modulus_len < 11))
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 41) return NULL;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 42)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 43) /* separate encoded message */
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 44) if (msg[0] != 0x00 || msg[1] != 0x01)
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 45) return NULL;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 46)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 47) for (i = 2; i < modulus_len - 1; i++)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 48) if (msg[i] != 0xFF)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 49) break;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 50)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 51) /* separator check */
b35e286a640f3 (Dmitry Kasatkin 2012-01-26 19:13:26 +0200 52) if (msg[i] != 0)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 53) /* There was no octet with hexadecimal value 0x00
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 54) to separate ps from m. */
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 55) return NULL;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 56)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 57) ps_len = i - 2;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 58)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 59) *outlen = (msglen - (2 + ps_len + 1));
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 60)
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 61) return msg + 2 + ps_len + 1;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 62) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 63)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 64) /*
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 65) * RSA Signature verification with public key
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 66) */
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 67) static int digsig_verify_rsa(struct key *key,
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 68) const char *sig, int siglen,
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 69) const char *h, int hlen)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 70) {
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 71) int err = -EINVAL;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 72) unsigned long len;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 73) unsigned long mlen, mblen;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 74) unsigned nret, l;
b35e286a640f3 (Dmitry Kasatkin 2012-01-26 19:13:26 +0200 75) int head, i;
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 76) unsigned char *out1 = NULL;
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 77) const char *m;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 78) MPI in = NULL, res = NULL, pkey[2];
146aa8b1453bd (David Howells 2015-10-21 14:04:48 +0100 79) uint8_t *p, *datap;
146aa8b1453bd (David Howells 2015-10-21 14:04:48 +0100 80) const uint8_t *endp;
146aa8b1453bd (David Howells 2015-10-21 14:04:48 +0100 81) const struct user_key_payload *ukp;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 82) struct pubkey_hdr *pkh;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 83)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 84) down_read(&key->sem);
0837e49ab3fa8 (David Howells 2017-03-01 15:11:23 +0000 85) ukp = user_key_payload_locked(key);
f58a08152ce41 (Dmitry Kasatkin 2012-01-26 19:13:25 +0200 86)
192cabd6a296c (Eric Biggers 2017-10-09 12:43:20 -0700 87) if (!ukp) {
192cabd6a296c (Eric Biggers 2017-10-09 12:43:20 -0700 88) /* key was revoked before we acquired its semaphore */
192cabd6a296c (Eric Biggers 2017-10-09 12:43:20 -0700 89) err = -EKEYREVOKED;
192cabd6a296c (Eric Biggers 2017-10-09 12:43:20 -0700 90) goto err1;
192cabd6a296c (Eric Biggers 2017-10-09 12:43:20 -0700 91) }
192cabd6a296c (Eric Biggers 2017-10-09 12:43:20 -0700 92)
f58a08152ce41 (Dmitry Kasatkin 2012-01-26 19:13:25 +0200 93) if (ukp->datalen < sizeof(*pkh))
f58a08152ce41 (Dmitry Kasatkin 2012-01-26 19:13:25 +0200 94) goto err1;
f58a08152ce41 (Dmitry Kasatkin 2012-01-26 19:13:25 +0200 95)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 96) pkh = (struct pubkey_hdr *)ukp->data;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 97)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 98) if (pkh->version != 1)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 99) goto err1;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 100)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 101) if (pkh->algo != PUBKEY_ALGO_RSA)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 102) goto err1;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 103)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 104) if (pkh->nmpi != 2)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 105) goto err1;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 106)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 107) datap = pkh->mpi;
f58a08152ce41 (Dmitry Kasatkin 2012-01-26 19:13:25 +0200 108) endp = ukp->data + ukp->datalen;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 109)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 110) for (i = 0; i < pkh->nmpi; i++) {
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 111) unsigned int remaining = endp - datap;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 112) pkey[i] = mpi_read_from_buffer(datap, &remaining);
03cdfaad491e8 (Nicolai Stange 2016-05-26 23:19:51 +0200 113) if (IS_ERR(pkey[i])) {
03cdfaad491e8 (Nicolai Stange 2016-05-26 23:19:51 +0200 114) err = PTR_ERR(pkey[i]);
86f8bedc9e1a8 (Dmitry Kasatkin 2012-01-26 19:13:24 +0200 115) goto err;
03cdfaad491e8 (Nicolai Stange 2016-05-26 23:19:51 +0200 116) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 117) datap += remaining;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 118) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 119)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 120) mblen = mpi_get_nbits(pkey[0]);
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 121) mlen = DIV_ROUND_UP(mblen, 8);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 122)
c5ce7c697c983 (Nicolai Stange 2016-05-26 23:19:52 +0200 123) if (mlen == 0) {
c5ce7c697c983 (Nicolai Stange 2016-05-26 23:19:52 +0200 124) err = -EINVAL;
f58a08152ce41 (Dmitry Kasatkin 2012-01-26 19:13:25 +0200 125) goto err;
c5ce7c697c983 (Nicolai Stange 2016-05-26 23:19:52 +0200 126) }
c5ce7c697c983 (Nicolai Stange 2016-05-26 23:19:52 +0200 127)
c5ce7c697c983 (Nicolai Stange 2016-05-26 23:19:52 +0200 128) err = -ENOMEM;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 129)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 130) out1 = kzalloc(mlen, GFP_KERNEL);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 131) if (!out1)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 132) goto err;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 133)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 134) nret = siglen;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 135) in = mpi_read_from_buffer(sig, &nret);
03cdfaad491e8 (Nicolai Stange 2016-05-26 23:19:51 +0200 136) if (IS_ERR(in)) {
03cdfaad491e8 (Nicolai Stange 2016-05-26 23:19:51 +0200 137) err = PTR_ERR(in);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 138) goto err;
03cdfaad491e8 (Nicolai Stange 2016-05-26 23:19:51 +0200 139) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 140)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 141) res = mpi_alloc(mpi_get_nlimbs(in) * 2);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 142) if (!res)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 143) goto err;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 144)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 145) err = mpi_powm(res, in, pkey[1], pkey[0]);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 146) if (err)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 147) goto err;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 148)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 149) if (mpi_get_nlimbs(res) * BYTES_PER_MPI_LIMB > mlen) {
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 150) err = -EINVAL;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 151) goto err;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 152) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 153)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 154) p = mpi_get_buffer(res, &l, NULL);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 155) if (!p) {
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 156) err = -EINVAL;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 157) goto err;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 158) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 159)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 160) len = mlen;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 161) head = len - l;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 162) memset(out1, 0, head);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 163) memcpy(out1 + head, p, l);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 164)
7810cc1e77212 (YOSHIFUJI Hideaki 2013-01-25 16:54:20 +0200 165) kfree(p);
7810cc1e77212 (YOSHIFUJI Hideaki 2013-01-25 16:54:20 +0200 166)
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 167) m = pkcs_1_v1_5_decode_emsa(out1, len, mblen, &len);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 168)
26d438457ed1b (Dmitry Kasatkin 2013-01-30 11:30:05 +0200 169) if (!m || len != hlen || memcmp(m, h, hlen))
bc01637a80f5b (Dmitry Kasatkin 2012-09-12 13:26:55 +0300 170) err = -EINVAL;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 171)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 172) err:
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 173) mpi_free(in);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 174) mpi_free(res);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 175) kfree(out1);
86f8bedc9e1a8 (Dmitry Kasatkin 2012-01-26 19:13:24 +0200 176) while (--i >= 0)
86f8bedc9e1a8 (Dmitry Kasatkin 2012-01-26 19:13:24 +0200 177) mpi_free(pkey[i]);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 178) err1:
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 179) up_read(&key->sem);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 180)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 181) return err;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 182) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 183)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 184) /**
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 185) * digsig_verify() - digital signature verification with public key
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 186) * @keyring: keyring to search key in
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 187) * @sig: digital signature
54b14f40c5b13 (Fabian Frederick 2014-06-04 16:11:57 -0700 188) * @siglen: length of the signature
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 189) * @data: data
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 190) * @datalen: length of the data
54b14f40c5b13 (Fabian Frederick 2014-06-04 16:11:57 -0700 191) *
54b14f40c5b13 (Fabian Frederick 2014-06-04 16:11:57 -0700 192) * Returns 0 on success, -EINVAL otherwise
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 193) *
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 194) * Verifies data integrity against digital signature.
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 195) * Currently only RSA is supported.
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 196) * Normally hash of the content is used as a data for this function.
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 197) *
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 198) */
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 199) int digsig_verify(struct key *keyring, const char *sig, int siglen,
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 200) const char *data, int datalen)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 201) {
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 202) int err = -ENOMEM;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 203) struct signature_hdr *sh = (struct signature_hdr *)sig;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 204) struct shash_desc *desc = NULL;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 205) unsigned char hash[SHA1_DIGEST_SIZE];
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 206) struct key *key;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 207) char name[20];
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 208)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 209) if (siglen < sizeof(*sh) + 2)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 210) return -EINVAL;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 211)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 212) if (sh->algo != PUBKEY_ALGO_RSA)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 213) return -ENOTSUPP;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 214)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 215) sprintf(name, "%llX", __be64_to_cpup((uint64_t *)sh->keyid));
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 216)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 217) if (keyring) {
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 218) /* search in specific keyring */
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 219) key_ref_t kref;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 220) kref = keyring_search(make_key_ref(keyring, 1UL),
dcf49dbc8077e (David Howells 2019-06-26 21:02:32 +0100 221) &key_type_user, name, true);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 222) if (IS_ERR(kref))
ff6092a8a413f (Duan Jiong 2013-11-12 15:09:51 -0800 223) key = ERR_CAST(kref);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 224) else
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 225) key = key_ref_to_ptr(kref);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 226) } else {
028db3e290f15 (Linus Torvalds 2019-07-10 18:43:43 -0700 227) key = request_key(&key_type_user, name, NULL);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 228) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 229) if (IS_ERR(key)) {
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 230) pr_err("key not found, id: %s\n", name);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 231) return PTR_ERR(key);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 232) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 233)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 234) desc = kzalloc(sizeof(*desc) + crypto_shash_descsize(shash),
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 235) GFP_KERNEL);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 236) if (!desc)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 237) goto err;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 238)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 239) desc->tfm = shash;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 240)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 241) crypto_shash_init(desc);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 242) crypto_shash_update(desc, data, datalen);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 243) crypto_shash_update(desc, sig, sizeof(*sh));
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 244) crypto_shash_final(desc, hash);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 245)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 246) kfree(desc);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 247)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 248) /* pass signature mpis address */
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 249) err = digsig_verify_rsa(key, sig + sizeof(*sh), siglen - sizeof(*sh),
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 250) hash, sizeof(hash));
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 251)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 252) err:
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 253) key_put(key);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 254)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 255) return err ? -EINVAL : 0;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 256) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 257) EXPORT_SYMBOL_GPL(digsig_verify);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 258)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 259) static int __init digsig_init(void)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 260) {
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 261) shash = crypto_alloc_shash("sha1", 0, 0);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 262) if (IS_ERR(shash)) {
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 263) pr_err("shash allocation failed\n");
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 264) return PTR_ERR(shash);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 265) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 266)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 267) return 0;
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 268)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 269) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 270)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 271) static void __exit digsig_cleanup(void)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 272) {
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 273) crypto_free_shash(shash);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 274) }
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 275)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 276) module_init(digsig_init);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 277) module_exit(digsig_cleanup);
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 278)
051dbb918c7fb (Dmitry Kasatkin 2011-10-14 15:25:16 +0300 279) MODULE_LICENSE("GPL");
VisionFive2 Linux kernel
StarFive Tech Linux Kernel for VisionFive (JH7110) boards (mirror)
More than 9999 Commits
32 Branches
54 Tags