mirror of
https://github.com/Telecominfraproject/OpenCellular.git
synced 2025-11-24 10:14:55 +00:00
08df9b88a3
The old VerifyFirmware function (now called VerifyFirmwareImage) works on the FirmwareImage structure. This CL adds a verification function which can be used directly on packed binary verified boot firmware blobs. This function can be used as the reference implementation for verified boot in firmware. In addition, all functions that work on FirmwareImage structure have been renames to distinguish them from those which work on binary firmware blobs. In addition, this adds some new crypto utility functions and refactors old ones. BUG=670 TEST=Added tests for the new function and they pass. Review URL: http://codereview.chromium.org/650105
48 lines
1.6 KiB
C
48 lines
1.6 KiB
C
/* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
|
|
* Use of this source code is governed by a BSD-style license that can be
|
|
* found in the LICENSE file.
|
|
*
|
|
* Some utility functions for use with RSA signature verification.
|
|
*/
|
|
|
|
#ifndef VBOOT_REFERENCE_RSA_UTILITY_H_
|
|
#define VBOOT_REFERENCE_RSA_UTILITY_H_
|
|
|
|
#include "rsa.h"
|
|
|
|
/* Returns the size of a pre-processed RSA public key in bytes with algorithm
|
|
* [algorithm]. */
|
|
int RSAProcessedKeySize(int algorithm);
|
|
|
|
/* Deep free the contents of [key]. */
|
|
void RSAPublicKeyFree(RSAPublicKey* key);
|
|
|
|
/* Create a RSAPublic key structure from binary blob [buf] of length
|
|
* [len].
|
|
*
|
|
* Caller owns the returned key and must free it.
|
|
*/
|
|
RSAPublicKey* RSAPublicKeyFromBuf(const uint8_t* buf, int len);
|
|
|
|
/* Perform RSA signature verification on [buf] of length [len] against expected
|
|
* signature [sig] using signature algorithm [algorithm]. The public key used
|
|
* for verification can either be in the form of a pre-process key blob
|
|
* [key_blob] or RSAPublicKey structure [key]. One of [key_blob] or [key] must
|
|
* be non-NULL, and the other NULL or the function will fail.
|
|
*
|
|
* Returns 1 on verification success, 0 on verification failure or invalid
|
|
* arguments.
|
|
*
|
|
* Note: This function is for use in the firmware and assumes all pointers point
|
|
* to areas in the memory of the right size.
|
|
*
|
|
*/
|
|
int RSAVerifyBinary_f(const uint8_t* key_blob,
|
|
const RSAPublicKey* key,
|
|
const uint8_t* buf,
|
|
int len,
|
|
const uint8_t* sig,
|
|
int algorithm);
|
|
|
|
#endif /* VBOOT_REFERENCE_RSA_UTILITY_H_ */
|