mirror of
https://github.com/ipxe/ipxe
synced 2026-01-21 01:28:02 +03:00
adcaaf9b93
Some past security reviews carried out for UEFI Secure Boot signing submissions have covered specific drivers or functional areas of iPXE. Mark all of the files comprising these areas as permitted for UEFI Secure Boot. Signed-off-by: Michael Brown <mcb30@ipxe.org>
64 lines
2.2 KiB
C
64 lines
2.2 KiB
C
/*
|
|
* Copyright (C) 2015 Michael Brown <mbrown@fensystems.co.uk>.
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License as
|
|
* published by the Free Software Foundation; either version 2 of the
|
|
* License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
|
|
* 02110-1301, USA.
|
|
*
|
|
* You can also choose to distribute this program under the terms of
|
|
* the Unmodified Binary Distribution Licence (as given in the file
|
|
* COPYING.UBDL), provided that you have satisfied its requirements.
|
|
*/
|
|
|
|
FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
|
|
FILE_SECBOOT ( PERMITTED );
|
|
|
|
#include <ipxe/rsa.h>
|
|
#include <ipxe/sha512.h>
|
|
#include <ipxe/asn1.h>
|
|
#include <ipxe/tls.h>
|
|
|
|
/** "sha512WithRSAEncryption" object identifier */
|
|
static uint8_t oid_sha512_with_rsa_encryption[] =
|
|
{ ASN1_OID_SHA512WITHRSAENCRYPTION };
|
|
|
|
/** "sha512WithRSAEncryption" OID-identified algorithm */
|
|
struct asn1_algorithm sha512_with_rsa_encryption_algorithm __asn1_algorithm = {
|
|
.name = "sha512WithRSAEncryption",
|
|
.pubkey = &rsa_algorithm,
|
|
.digest = &sha512_algorithm,
|
|
.oid = ASN1_CURSOR ( oid_sha512_with_rsa_encryption ),
|
|
};
|
|
|
|
/** SHA-512 digestInfo prefix */
|
|
static const uint8_t rsa_sha512_prefix_data[] =
|
|
{ RSA_DIGESTINFO_PREFIX ( SHA512_DIGEST_SIZE, ASN1_OID_SHA512 ) };
|
|
|
|
/** SHA-512 digestInfo prefix */
|
|
struct rsa_digestinfo_prefix rsa_sha512_prefix __rsa_digestinfo_prefix = {
|
|
.digest = &sha512_algorithm,
|
|
.data = rsa_sha512_prefix_data,
|
|
.len = sizeof ( rsa_sha512_prefix_data ),
|
|
};
|
|
|
|
/** RSA with SHA-512 signature hash algorithm */
|
|
struct tls_signature_hash_algorithm tls_rsa_sha512 __tls_sig_hash_algorithm = {
|
|
.code = {
|
|
.signature = TLS_RSA_ALGORITHM,
|
|
.hash = TLS_SHA512_ALGORITHM,
|
|
},
|
|
.pubkey = &rsa_algorithm,
|
|
.digest = &sha512_algorithm,
|
|
};
|