]> git.baikalelectronics.ru Git - kernel.git/commit
evm: digital signature verification support
authorDmitry Kasatkin <dmitry.kasatkin@intel.com>
Thu, 1 Sep 2011 11:41:40 +0000 (14:41 +0300)
committerDmitry Kasatkin <dmitry.kasatkin@intel.com>
Wed, 9 Nov 2011 14:51:14 +0000 (16:51 +0200)
commita14c0158b893fd8fded94d1d435dfd036cc5e362
tree5d4629ef3b687ff56a446f42a8ee5aa35ec9322b
parent8ae030400abdf6f75243f082b0658c55ea853f28
evm: digital signature verification support

This patch adds support for digital signature verification to EVM.
With this feature file metadata can be protected using digital
signature instead of an HMAC. When building an image,
which has to be flashed to different devices, an HMAC cannot
be used to sign file metadata, because the HMAC key should be
different on every device.

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
security/integrity/evm/evm.h
security/integrity/evm/evm_crypto.c
security/integrity/evm/evm_main.c