evm: digital signature verification support

Browse source

This patch adds support for digital signature verification to EVM.
With this feature file metadata can be protected using digital
signature instead of an HMAC. When building an image,
which has to be flashed to different devices, an HMAC cannot
be used to sign file metadata, because the HMAC key should be
different on every device.

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>

...

This commit is contained in:

Dmitry Kasatkin 2011-09-01 14:41:40 +03:00

parent 8607c50147

commit 15647eb398

3 changed files with 142 additions and 30 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

12

security/integrity/evm/evm.h

View file

66

security/integrity/evm/evm_crypto.c

View file

94

security/integrity/evm/evm_main.c

View file