cddccb
From 0451d4e795929a69a0fda6d960aa4b077c5bd179 Mon Sep 17 00:00:00 2001
6a9155
From: Dave Howells <dhowells@redhat.com>
cddccb
Date: Fri, 5 May 2017 08:21:58 +0100
cddccb
Subject: [PATCH 1/4] efi: Add EFI signature data types
6a9155
cddccb
Add the data types that are used for containing hashes, keys and
cddccb
certificates for cryptographic verification along with their corresponding
cddccb
type GUIDs.
6a9155
6a9155
Signed-off-by: David Howells <dhowells@redhat.com>
6a9155
---
cddccb
 include/linux/efi.h | 25 +++++++++++++++++++++++++
cddccb
 1 file changed, 25 insertions(+)
6a9155
6a9155
diff --git a/include/linux/efi.h b/include/linux/efi.h
cddccb
index ec36f42..3259ad6 100644
6a9155
--- a/include/linux/efi.h
6a9155
+++ b/include/linux/efi.h
cddccb
@@ -614,6 +614,10 @@ void efi_native_runtime_setup(void);
cddccb
 #define EFI_IMAGE_SECURITY_DATABASE_GUID	EFI_GUID(0xd719b2cb, 0x3d3a, 0x4596,  0xa3, 0xbc, 0xda, 0xd0, 0x0e, 0x67, 0x65, 0x6f)
cddccb
 #define EFI_SHIM_LOCK_GUID			EFI_GUID(0x605dab50, 0xe046, 0x4300,  0xab, 0xb6, 0x3d, 0xd8, 0x10, 0xdd, 0x8b, 0x23)
cddccb
cddccb
+#define EFI_CERT_SHA256_GUID			EFI_GUID(0xc1c41626, 0x504c, 0x4092, 0xac, 0xa9, 0x41, 0xf9, 0x36, 0x93, 0x43, 0x28)
cddccb
+#define EFI_CERT_X509_GUID			EFI_GUID(0xa5c059a1, 0x94e4, 0x4aa7, 0x87, 0xb5, 0xab, 0x15, 0x5c, 0x2b, 0xf0, 0x72)
cddccb
+#define EFI_CERT_X509_SHA256_GUID		EFI_GUID(0x3bd2a492, 0x96c0, 0x4079, 0xb4, 0x20, 0xfc, 0xf9, 0x8e, 0xf1, 0x03, 0xed)
6a9155
+
cddccb
 /*
cddccb
  * This GUID is used to pass to the kernel proper the struct screen_info
cddccb
  * structure that was populated by the stub based on the GOP protocol instance
cddccb
@@ -873,6 +877,27 @@ typedef struct {
c3b50b
 	efi_memory_desc_t entry[0];
c3b50b
 } efi_memory_attributes_table_t;
cddccb
6a9155
+typedef struct  {
6a9155
+	efi_guid_t signature_owner;
6a9155
+	u8 signature_data[];
6a9155
+} efi_signature_data_t;
6a9155
+
6a9155
+typedef struct {
6a9155
+	efi_guid_t signature_type;
6a9155
+	u32 signature_list_size;
6a9155
+	u32 signature_header_size;
6a9155
+	u32 signature_size;
6a9155
+	u8 signature_header[];
6a9155
+	/* efi_signature_data_t signatures[][] */
6a9155
+} efi_signature_list_t;
6a9155
+
cddccb
+typedef u8 efi_sha256_hash_t[32];
cddccb
+
cddccb
+typedef struct {
cddccb
+	efi_sha256_hash_t to_be_signed_hash;
cddccb
+	efi_time_t time_of_revocation;
cddccb
+} efi_cert_x509_sha256_t;
cddccb
+
6a9155
 /*
6a9155
  * All runtime access to EFI goes through this structure:
6a9155
  */
18c824
-- 
ea38f2
2.9.3
18c824