| OLD | NEW |
| 1 /* Copyright (c) 2010 The Chromium OS Authors. All rights reserved. | 1 /* Copyright (c) 2010 The Chromium OS Authors. All rights reserved. |
| 2 * Use of this source code is governed by a BSD-style license that can be | 2 * Use of this source code is governed by a BSD-style license that can be |
| 3 * found in the LICENSE file. | 3 * found in the LICENSE file. |
| 4 * | 4 * |
| 5 * Data structure and API definitions for a verified boot kernel image. | 5 * Data structure and API definitions for a verified boot kernel image. |
| 6 */ | 6 */ |
| 7 | 7 |
| 8 #ifndef VBOOT_REFERENCE_KERNEL_IMAGE_H_ | 8 #ifndef VBOOT_REFERENCE_KERNEL_IMAGE_H_ |
| 9 #define VBOOT_REFERENCE_KERNEL_IMAGE_H_ | 9 #define VBOOT_REFERENCE_KERNEL_IMAGE_H_ |
| 10 | 10 |
| (...skipping 145 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 156 /* Checks the kernel config (analogous to preamble for firmware) signature on | 156 /* Checks the kernel config (analogous to preamble for firmware) signature on |
| 157 * kernel config pointed by [kernel_config_blob] using the signing key | 157 * kernel config pointed by [kernel_config_blob] using the signing key |
| 158 * [kernel_sign_key]. | 158 * [kernel_sign_key]. |
| 159 * | 159 * |
| 160 * On success, put kernel length into [kernel_len], and return 0. | 160 * On success, put kernel length into [kernel_len], and return 0. |
| 161 * Else, return error code on failure. | 161 * Else, return error code on failure. |
| 162 */ | 162 */ |
| 163 int VerifyKernelConfig(RSAPublicKey* kernel_sign_key, | 163 int VerifyKernelConfig(RSAPublicKey* kernel_sign_key, |
| 164 const uint8_t* kernel_config_blob, | 164 const uint8_t* kernel_config_blob, |
| 165 int algorithm, | 165 int algorithm, |
| 166 int* kernel_len); | 166 uint64_t* kernel_len); |
| 167 | 167 |
| 168 /* Checks the signature on the kernel data at location [kernel_data_start]. | 168 /* Checks the signature on the kernel data at location [kernel_data_start]. |
| 169 * The length of the actual kernel data is kernel _len and it is assumed to | 169 * The length of the actual kernel data is kernel _len and it is assumed to |
| 170 * be prepended with the signature whose size depends on the signature_algorithm | 170 * be prepended with the signature whose size depends on the signature_algorithm |
| 171 * [algorithm]. | 171 * [algorithm]. |
| 172 * | 172 * |
| 173 * Return 0 on success, error code on failure. | 173 * Return 0 on success, error code on failure. |
| 174 */ | 174 */ |
| 175 int VerifyKernelData(RSAPublicKey* kernel_sign_key, | 175 int VerifyKernelData(RSAPublicKey* kernel_sign_key, |
| 176 const uint8_t* kernel_config_start, | 176 const uint8_t* kernel_config_start, |
| 177 const uint8_t* kernel_data_start, | 177 const uint8_t* kernel_data_start, |
| 178 int kernel_len, | 178 uint64_t kernel_len, |
| 179 int algorithm); | 179 int algorithm); |
| 180 | 180 |
| 181 /* Performs a chained verify of the kernel blob [kernel_blob]. If | 181 /* Performs a chained verify of the kernel blob [kernel_blob]. If |
| 182 * [dev_mode] is 0 [inactive], then the pre-processed public signing key | 182 * [dev_mode] is 0 [inactive], then the pre-processed public signing key |
| 183 * [root_key_blob] is used to verify the signature of the signing key, | 183 * [root_key_blob] is used to verify the signature of the signing key, |
| 184 * else the check is skipped. | 184 * else the check is skipped. |
| 185 * | 185 * |
| 186 * TODO(gauravsh): Does the dev mode only effect the R/W firmware verification, | 186 * TODO(gauravsh): Does the dev mode only effect the R/W firmware verification, |
| 187 * or kernel verification, or both? | 187 * or kernel verification, or both? |
| 188 * | 188 * |
| (...skipping 72 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 261 * BOOT_KERNEL_A_CONTINUE Boot from Kenrel A | 261 * BOOT_KERNEL_A_CONTINUE Boot from Kenrel A |
| 262 * BOOT_KERNEL_B_CONTINUE Boot from Kernel B | 262 * BOOT_KERNEL_B_CONTINUE Boot from Kernel B |
| 263 * BOOT_KERNEL_RECOVERY_CONTINUE Jump to recovery mode | 263 * BOOT_KERNEL_RECOVERY_CONTINUE Jump to recovery mode |
| 264 */ | 264 */ |
| 265 int VerifyKernelDriver_f(uint8_t* firmware_key_blob, | 265 int VerifyKernelDriver_f(uint8_t* firmware_key_blob, |
| 266 kernel_entry* kernelA, | 266 kernel_entry* kernelA, |
| 267 kernel_entry* kernelB, | 267 kernel_entry* kernelB, |
| 268 int dev_mode); | 268 int dev_mode); |
| 269 | 269 |
| 270 #endif /* VBOOT_REFERENCE_KERNEL_IMAGE_H_ */ | 270 #endif /* VBOOT_REFERENCE_KERNEL_IMAGE_H_ */ |
| OLD | NEW |