| commit | 15647eb3985ef30dfd657038924dc85c03026733 | |
| author | Dmitry Kasatkin <dmitry.kasatkin@intel.com> | |
| Thu, 1 Sep 2011 11:41:40 +0000 (1 14:41 +0300) | ||
| committer | Dmitry Kasatkin <dmitry.kasatkin@intel.com> | |
| Wed, 9 Nov 2011 14:51:14 +0000 (9 16:51 +0200) | ||
| tree | 5d4629ef3b687ff56a446f42a8ee5aa35ec9322b | treesnapshot (tar.gz zip) |
| parent | 8607c501478432b23654739c7321bc7456053cb6 | commitdiff |
evm: digital signature verification support
This patch adds support for digital signature verification to EVM.
With this feature file metadata can be protected using digital
signature instead of an HMAC. When building an image,
which has to be flashed to different devices, an HMAC cannot
be used to sign file metadata, because the HMAC key should be
different on every device.
Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
This patch adds support for digital signature verification to EVM.
With this feature file metadata can be protected using digital
signature instead of an HMAC. When building an image,
which has to be flashed to different devices, an HMAC cannot
be used to sign file metadata, because the HMAC key should be
different on every device.
Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
| security/integrity/evm/evm.h | diffblobblamehistory | |
| security/integrity/evm/evm_crypto.c | diffblobblamehistory | |
| security/integrity/evm/evm_main.c | diffblobblamehistory |