cddccb2
From 0451d4e795929a69a0fda6d960aa4b077c5bd179 Mon Sep 17 00:00:00 2001
6a91557
From: Dave Howells <dhowells@redhat.com>
cddccb2
Date: Fri, 5 May 2017 08:21:58 +0100
cddccb2
Subject: [PATCH 1/4] efi: Add EFI signature data types
6a91557
cddccb2
Add the data types that are used for containing hashes, keys and
cddccb2
certificates for cryptographic verification along with their corresponding
cddccb2
type GUIDs.
6a91557
6a91557
Signed-off-by: David Howells <dhowells@redhat.com>
6a91557
---
cddccb2
 include/linux/efi.h | 25 +++++++++++++++++++++++++
cddccb2
 1 file changed, 25 insertions(+)
6a91557
6a91557
diff --git a/include/linux/efi.h b/include/linux/efi.h
cddccb2
index ec36f42..3259ad6 100644
6a91557
--- a/include/linux/efi.h
6a91557
+++ b/include/linux/efi.h
cddccb2
@@ -614,6 +614,10 @@ void efi_native_runtime_setup(void);
cddccb2
 #define EFI_IMAGE_SECURITY_DATABASE_GUID	EFI_GUID(0xd719b2cb, 0x3d3a, 0x4596,  0xa3, 0xbc, 0xda, 0xd0, 0x0e, 0x67, 0x65, 0x6f)
cddccb2
 #define EFI_SHIM_LOCK_GUID			EFI_GUID(0x605dab50, 0xe046, 0x4300,  0xab, 0xb6, 0x3d, 0xd8, 0x10, 0xdd, 0x8b, 0x23)
cddccb2
cddccb2
+#define EFI_CERT_SHA256_GUID			EFI_GUID(0xc1c41626, 0x504c, 0x4092, 0xac, 0xa9, 0x41, 0xf9, 0x36, 0x93, 0x43, 0x28)
cddccb2
+#define EFI_CERT_X509_GUID			EFI_GUID(0xa5c059a1, 0x94e4, 0x4aa7, 0x87, 0xb5, 0xab, 0x15, 0x5c, 0x2b, 0xf0, 0x72)
cddccb2
+#define EFI_CERT_X509_SHA256_GUID		EFI_GUID(0x3bd2a492, 0x96c0, 0x4079, 0xb4, 0x20, 0xfc, 0xf9, 0x8e, 0xf1, 0x03, 0xed)
6a91557
+
cddccb2
 /*
cddccb2
  * This GUID is used to pass to the kernel proper the struct screen_info
cddccb2
  * structure that was populated by the stub based on the GOP protocol instance
cddccb2
@@ -873,6 +877,27 @@ typedef struct {
c3b50ba
 	efi_memory_desc_t entry[0];
c3b50ba
 } efi_memory_attributes_table_t;
cddccb2
6a91557
+typedef struct  {
6a91557
+	efi_guid_t signature_owner;
6a91557
+	u8 signature_data[];
6a91557
+} efi_signature_data_t;
6a91557
+
6a91557
+typedef struct {
6a91557
+	efi_guid_t signature_type;
6a91557
+	u32 signature_list_size;
6a91557
+	u32 signature_header_size;
6a91557
+	u32 signature_size;
6a91557
+	u8 signature_header[];
6a91557
+	/* efi_signature_data_t signatures[][] */
6a91557
+} efi_signature_list_t;
6a91557
+
cddccb2
+typedef u8 efi_sha256_hash_t[32];
cddccb2
+
cddccb2
+typedef struct {
cddccb2
+	efi_sha256_hash_t to_be_signed_hash;
cddccb2
+	efi_time_t time_of_revocation;
cddccb2
+} efi_cert_x509_sha256_t;
cddccb2
+
6a91557
 /*
6a91557
  * All runtime access to EFI goes through this structure:
6a91557
  */
18c8249
-- 
ea38f2f
2.9.3
18c8249