Lines Matching +full:sha3 +full:- +full:512
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /* In-software asymmetric public-key crypto subtype
4 * See Documentation/crypto/asymmetric-keys.rst
14 #include <keys/asymmetric-subtype.h>
23 MODULE_DESCRIPTION("In-software asymmetric public-key subtype");
33 struct public_key *key = asymmetric_key->payload.data[asym_crypto]; in public_key_describe()
36 seq_printf(m, "%s.%s", key->id_type, key->pkey_algo); in public_key_describe()
45 kfree_sensitive(key->key); in public_key_free()
46 kfree(key->params); in public_key_free()
77 return -EINVAL; in software_key_determine_akcipher()
79 if (strcmp(pkey->pkey_algo, "rsa") == 0) { in software_key_determine_akcipher()
81 * RSA signatures usually use EMSA-PKCS1-1_5 [RFC3447 sec 8.2]. in software_key_determine_akcipher()
93 pkey->pkey_algo); in software_key_determine_akcipher()
99 pkey->pkey_algo, hash_algo); in software_key_determine_akcipher()
101 return n >= CRYPTO_MAX_ALG_NAME ? -EINVAL : 0; in software_key_determine_akcipher()
104 return -EINVAL; in software_key_determine_akcipher()
110 return -EINVAL; in software_key_determine_akcipher()
112 } else if (strncmp(pkey->pkey_algo, "ecdsa", 5) == 0) { in software_key_determine_akcipher()
115 return -EINVAL; in software_key_determine_akcipher()
119 * that the verifier should hard-code a specific hash algorithm. in software_key_determine_akcipher()
124 return -EINVAL; in software_key_determine_akcipher()
130 strcmp(hash_algo, "sha3-256") != 0 && in software_key_determine_akcipher()
131 strcmp(hash_algo, "sha3-384") != 0 && in software_key_determine_akcipher()
132 strcmp(hash_algo, "sha3-512") != 0) in software_key_determine_akcipher()
133 return -EINVAL; in software_key_determine_akcipher()
135 encoding, pkey->pkey_algo); in software_key_determine_akcipher()
136 return n >= CRYPTO_MAX_ALG_NAME ? -EINVAL : 0; in software_key_determine_akcipher()
137 } else if (strcmp(pkey->pkey_algo, "ecrdsa") == 0) { in software_key_determine_akcipher()
139 return -EINVAL; in software_key_determine_akcipher()
141 return -EINVAL; in software_key_determine_akcipher()
144 return -EINVAL; in software_key_determine_akcipher()
147 return -ENOPKG; in software_key_determine_akcipher()
149 if (strscpy(alg_name, pkey->pkey_algo, CRYPTO_MAX_ALG_NAME) < 0) in software_key_determine_akcipher()
150 return -EINVAL; in software_key_determine_akcipher()
167 struct public_key *pkey = params->key->payload.data[asym_crypto]; in software_key_query()
174 ret = software_key_determine_akcipher(pkey, params->encoding, in software_key_query()
175 params->hash_algo, alg_name, in software_key_query()
180 key = kmalloc(pkey->keylen + sizeof(u32) * 2 + pkey->paramlen, in software_key_query()
183 return -ENOMEM; in software_key_query()
185 memcpy(key, pkey->key, pkey->keylen); in software_key_query()
186 ptr = key + pkey->keylen; in software_key_query()
187 ptr = pkey_pack_u32(ptr, pkey->algo); in software_key_query()
188 ptr = pkey_pack_u32(ptr, pkey->paramlen); in software_key_query()
189 memcpy(ptr, pkey->params, pkey->paramlen); in software_key_query()
198 if (pkey->key_is_private) in software_key_query()
199 ret = crypto_sig_set_privkey(sig, key, pkey->keylen); in software_key_query()
201 ret = crypto_sig_set_pubkey(sig, key, pkey->keylen); in software_key_query()
206 info->max_sig_size = crypto_sig_maxsize(sig); in software_key_query()
207 info->max_data_size = crypto_sig_digestsize(sig); in software_key_query()
209 info->supported_ops = KEYCTL_SUPPORTS_VERIFY; in software_key_query()
210 if (pkey->key_is_private) in software_key_query()
211 info->supported_ops |= KEYCTL_SUPPORTS_SIGN; in software_key_query()
213 if (strcmp(params->encoding, "pkcs1") == 0) { in software_key_query()
214 info->supported_ops |= KEYCTL_SUPPORTS_ENCRYPT; in software_key_query()
215 if (pkey->key_is_private) in software_key_query()
216 info->supported_ops |= KEYCTL_SUPPORTS_DECRYPT; in software_key_query()
225 if (pkey->key_is_private) in software_key_query()
226 ret = crypto_akcipher_set_priv_key(tfm, key, pkey->keylen); in software_key_query()
228 ret = crypto_akcipher_set_pub_key(tfm, key, pkey->keylen); in software_key_query()
233 info->max_sig_size = len; in software_key_query()
234 info->max_data_size = len; in software_key_query()
236 info->supported_ops = KEYCTL_SUPPORTS_ENCRYPT; in software_key_query()
237 if (pkey->key_is_private) in software_key_query()
238 info->supported_ops |= KEYCTL_SUPPORTS_DECRYPT; in software_key_query()
241 info->key_size = len * 8; in software_key_query()
242 info->max_enc_size = len; in software_key_query()
243 info->max_dec_size = len; in software_key_query()
264 const struct public_key *pkey = params->key->payload.data[asym_crypto]; in software_key_eds_op()
275 ret = software_key_determine_akcipher(pkey, params->encoding, in software_key_eds_op()
276 params->hash_algo, alg_name, in software_key_eds_op()
277 &issig, params->op); in software_key_eds_op()
281 key = kmalloc(pkey->keylen + sizeof(u32) * 2 + pkey->paramlen, in software_key_eds_op()
284 return -ENOMEM; in software_key_eds_op()
286 memcpy(key, pkey->key, pkey->keylen); in software_key_eds_op()
287 ptr = key + pkey->keylen; in software_key_eds_op()
288 ptr = pkey_pack_u32(ptr, pkey->algo); in software_key_eds_op()
289 ptr = pkey_pack_u32(ptr, pkey->paramlen); in software_key_eds_op()
290 memcpy(ptr, pkey->params, pkey->paramlen); in software_key_eds_op()
299 if (pkey->key_is_private) in software_key_eds_op()
300 ret = crypto_sig_set_privkey(sig, key, pkey->keylen); in software_key_eds_op()
302 ret = crypto_sig_set_pubkey(sig, key, pkey->keylen); in software_key_eds_op()
314 if (pkey->key_is_private) in software_key_eds_op()
315 ret = crypto_akcipher_set_priv_key(tfm, key, pkey->keylen); in software_key_eds_op()
317 ret = crypto_akcipher_set_pub_key(tfm, key, pkey->keylen); in software_key_eds_op()
324 ret = -EINVAL; in software_key_eds_op()
327 switch (params->op) { in software_key_eds_op()
331 ret = crypto_akcipher_sync_encrypt(tfm, in, params->in_len, in software_key_eds_op()
332 out, params->out_len); in software_key_eds_op()
337 ret = crypto_akcipher_sync_decrypt(tfm, in, params->in_len, in software_key_eds_op()
338 out, params->out_len); in software_key_eds_op()
343 ret = crypto_sig_sign(sig, in, params->in_len, in software_key_eds_op()
344 out, params->out_len); in software_key_eds_op()
380 BUG_ON(!sig->s); in public_key_verify_signature()
388 * "ecdsa-nist-*" for the key, but "ecdsa" for the signature. in public_key_verify_signature()
390 if (sig->pkey_algo) { in public_key_verify_signature()
391 if (strcmp(pkey->pkey_algo, sig->pkey_algo) != 0 && in public_key_verify_signature()
392 (strncmp(pkey->pkey_algo, "ecdsa-", 6) != 0 || in public_key_verify_signature()
393 strcmp(sig->pkey_algo, "ecdsa") != 0)) in public_key_verify_signature()
394 return -EKEYREJECTED; in public_key_verify_signature()
397 ret = software_key_determine_akcipher(pkey, sig->encoding, in public_key_verify_signature()
398 sig->hash_algo, alg_name, in public_key_verify_signature()
407 key = kmalloc(pkey->keylen + sizeof(u32) * 2 + pkey->paramlen, in public_key_verify_signature()
410 ret = -ENOMEM; in public_key_verify_signature()
414 memcpy(key, pkey->key, pkey->keylen); in public_key_verify_signature()
415 ptr = key + pkey->keylen; in public_key_verify_signature()
416 ptr = pkey_pack_u32(ptr, pkey->algo); in public_key_verify_signature()
417 ptr = pkey_pack_u32(ptr, pkey->paramlen); in public_key_verify_signature()
418 memcpy(ptr, pkey->params, pkey->paramlen); in public_key_verify_signature()
420 if (pkey->key_is_private) in public_key_verify_signature()
421 ret = crypto_sig_set_privkey(tfm, key, pkey->keylen); in public_key_verify_signature()
423 ret = crypto_sig_set_pubkey(tfm, key, pkey->keylen); in public_key_verify_signature()
427 ret = crypto_sig_verify(tfm, sig->s, sig->s_size, in public_key_verify_signature()
428 sig->digest, sig->digest_size); in public_key_verify_signature()
436 ret = -EINVAL; in public_key_verify_signature()
444 const struct public_key *pk = key->payload.data[asym_crypto]; in public_key_verify_signature_2()
454 .name_len = sizeof("public_key") - 1,