1 /* SPDX-License-Identifier: GPL-2.0-or-later */
2 /* Asymmetric public-key algorithm definitions
3  *
4  * See Documentation/crypto/asymmetric-keys.rst
5  *
6  * Copyright (C) 2012 Red Hat, Inc. All Rights Reserved.
7  * Written by David Howells (dhowells@redhat.com)
8  */
9 
10 #ifndef _LINUX_PUBLIC_KEY_H
11 #define _LINUX_PUBLIC_KEY_H
12 
13 #include <linux/keyctl.h>
14 #include <linux/oid_registry.h>
15 
16 /*
17  * Cryptographic data for the public-key subtype of the asymmetric key type.
18  *
19  * Note that this may include private part of the key as well as the public
20  * part.
21  */
22 struct public_key {
23 	void *key;
24 	u32 keylen;
25 	enum OID algo;
26 	void *params;
27 	u32 paramlen;
28 	bool key_is_private;
29 	const char *id_type;
30 	const char *pkey_algo;
31 };
32 
33 extern void public_key_free(struct public_key *key);
34 
35 /*
36  * Public key cryptography signature data
37  */
38 struct public_key_signature {
39 	struct asymmetric_key_id *auth_ids[2];
40 	u8 *s;			/* Signature */
41 	u8 *digest;
42 	u32 s_size;		/* Number of bytes in signature */
43 	u32 digest_size;	/* Number of bytes in digest */
44 	const char *pkey_algo;
45 	const char *hash_algo;
46 	const char *encoding;
47 	const void *data;
48 	unsigned int data_size;
49 };
50 
51 extern void public_key_signature_free(struct public_key_signature *sig);
52 
53 extern struct asymmetric_key_subtype public_key_subtype;
54 
55 struct key;
56 struct key_type;
57 union key_payload;
58 
59 extern int restrict_link_by_signature(struct key *dest_keyring,
60 				      const struct key_type *type,
61 				      const union key_payload *payload,
62 				      struct key *trust_keyring);
63 
64 extern int restrict_link_by_key_or_keyring(struct key *dest_keyring,
65 					   const struct key_type *type,
66 					   const union key_payload *payload,
67 					   struct key *trusted);
68 
69 extern int restrict_link_by_key_or_keyring_chain(struct key *trust_keyring,
70 						 const struct key_type *type,
71 						 const union key_payload *payload,
72 						 struct key *trusted);
73 
74 extern int query_asymmetric_key(const struct kernel_pkey_params *,
75 				struct kernel_pkey_query *);
76 
77 extern int encrypt_blob(struct kernel_pkey_params *, const void *, void *);
78 extern int decrypt_blob(struct kernel_pkey_params *, const void *, void *);
79 extern int create_signature(struct kernel_pkey_params *, const void *, void *);
80 extern int verify_signature(const struct key *,
81 			    const struct public_key_signature *);
82 
83 int public_key_verify_signature(const struct public_key *pkey,
84 				const struct public_key_signature *sig);
85 
86 #endif /* _LINUX_PUBLIC_KEY_H */
87