You've already forked slimbootloader
mirror of
https://github.com/Dasharo/slimbootloader.git
synced 2026-03-06 15:26:20 -08:00
Subash Lakkimsetti
8a4289c110
Hash verification of Public key hash should be based on hash alg used with Hash store. Previously hash alg in signature info is used. There would be instances where hashstore hash alg differs from signing alg. Signed-off-by: Subash Lakkimsetti <subash.lakkimsetti@intel.com>
113 lines
3.7 KiB
C
113 lines
3.7 KiB
C
/** @file
|
|
|
|
Copyright (c) 2017 - 2019, Intel Corporation. All rights reserved.<BR>
|
|
SPDX-License-Identifier: BSD-2-Clause-Patent
|
|
|
|
**/
|
|
|
|
#ifndef __VERIFIED_BOOT_LIB_H__
|
|
#define __VERIFIED_BOOT_LIB_H__
|
|
|
|
#include <Guid/KeyHashGuid.h>
|
|
#include <Library/CryptoLib.h>
|
|
|
|
#define SIG_TYPE_RSA2048_SHA256 0
|
|
#define SIG_TYPE_RSA3072_SHA384 1
|
|
|
|
/**
|
|
Calculate hash API.
|
|
|
|
@param[in] Data Data buffer pointer.
|
|
@param[in] Length Data buffer size.
|
|
@param[in] HashAlg Specify hash algrothsm.
|
|
@param[in,out] OutHash Hash of Data buffer
|
|
|
|
|
|
@retval RETURN_SUCCESS Hash Calculation succeeded.
|
|
@retval RETRUN_INVALID_PARAMETER Hash parameter is not valid.
|
|
@retval RETURN_UNSUPPORTED Hash Alg type is not supported.
|
|
|
|
**/
|
|
RETURN_STATUS
|
|
CalculateHash (
|
|
IN CONST UINT8 *Data,
|
|
IN UINT32 Length,
|
|
IN UINT8 HashAlg,
|
|
IN OUT UINT8 *OutHash
|
|
);
|
|
|
|
/**
|
|
Verify data block hash with the built-in one.
|
|
|
|
@param[in] Data Data buffer pointer.
|
|
@param[in] Length Data buffer size.
|
|
@param[in] Usage Hash usage.
|
|
@param[in] HashAlg Specify hash algorithm.
|
|
@param[in,out] Hash On input, expected hash value when ComponentType is not used.
|
|
On output, calculated hash value when verification succeeds.
|
|
|
|
@retval RETURN_SUCCESS Hash verification succeeded.
|
|
@retval RETRUN_INVALID_PARAMETER Hash parameter is not valid.
|
|
@retval RETURN_NOT_FOUND Hash data for ComponentType is not found.
|
|
@retval RETURN_UNSUPPORTED Hash component type is not supported.
|
|
@retval RETURN_SECURITY_VIOLATION Hash verification failed.
|
|
|
|
**/
|
|
RETURN_STATUS
|
|
DoHashVerify (
|
|
IN CONST UINT8 *Data,
|
|
IN UINT32 Length,
|
|
IN HASH_COMP_USAGE Usage,
|
|
IN UINT8 HashAlg,
|
|
IN OUT UINT8 *Hash
|
|
);
|
|
|
|
/**
|
|
Verifies the RSA signature with PKCS1-v1_5 encoding scheme defined in RSA PKCS#1.
|
|
Also(optional), return the hash of the message to the caller.
|
|
|
|
@param[in] Data Data buffer pointer.
|
|
@param[in] Length Data buffer size.
|
|
@param[in] Usage Hash usage.
|
|
@param[in] SignatureHdr Signature header for singanture data.
|
|
@param[in] PubKeyHdr Public key header for key data
|
|
@param[in] PubKeyHashAlg Hash Alg for PubKeyHash.
|
|
@param[in] PubKeyHash Public key hash value when ComponentType is not used.
|
|
@param[out] OutHash Calculated data hash value.
|
|
|
|
|
|
@retval RETURN_SUCCESS RSA verification succeeded.
|
|
@retval RETURN_NOT_FOUND Hash data for ComponentType is not found.
|
|
@retval RETURN_UNSUPPORTED Hash component type is not supported.
|
|
@retval RETURN_SECURITY_VIOLATION PubKey or Signature verification failed.
|
|
|
|
**/
|
|
RETURN_STATUS
|
|
DoRsaVerify (
|
|
IN CONST UINT8 *Data,
|
|
IN UINT32 Length,
|
|
IN HASH_COMP_USAGE Usage,
|
|
IN CONST SIGNATURE_HDR *SignatureHdr,
|
|
IN PUB_KEY_HDR *PubKeyHdr,
|
|
IN UINT8 PubKeyHashAlg,
|
|
IN UINT8 *PubKeyHash OPTIONAL,
|
|
OUT UINT8 *OutHash OPTIONAL
|
|
);
|
|
|
|
/**
|
|
Generate RandomNumbers.
|
|
|
|
@param[out] Data Array of random numbers generated
|
|
@param[in] Size Size of the array to be generated.
|
|
|
|
@retval EFI_SUCCESS Random number generation successful.
|
|
@retval EFI_UNSUPPORTED Couldn't generate a random number.
|
|
**/
|
|
RETURN_STATUS
|
|
EFIAPI
|
|
GenerateRandomNumbers(
|
|
OUT CHAR8 *Data,
|
|
IN UINTN Size
|
|
);
|
|
#endif /* __VERIFIED_BOOT_LIB_H__ */
|