Index: src/platform/vboot_reference/include/rsa.h |
diff --git a/src/platform/vboot_reference/include/rsa.h b/src/platform/vboot_reference/include/rsa.h |
index 8f2ede8a6adbe0beec94e892237bcf5c47e4c4f9..1a45803717e78fcc308ac146bdf361791e0403ba 100644 |
--- a/src/platform/vboot_reference/include/rsa.h |
+++ b/src/platform/vboot_reference/include/rsa.h |
@@ -6,7 +6,11 @@ |
#ifndef VBOOT_REFERENCE_RSA_H_ |
#define VBOOT_REFERENCE_RSA_H_ |
-#include <inttypes.h> |
+#ifndef VBOOT_REFERENCE_CRYPTOLIB_H_ |
+#error "Do not include this file directly. Use cryptolib.h instead." |
+#endif |
+ |
+#include <stdint.h> |
#define RSA1024NUMBYTES 128 /* 1024 bit key length */ |
#define RSA2048NUMBYTES 256 /* 2048 bit key length */ |
@@ -29,9 +33,59 @@ typedef struct RSAPublicKey { |
* against an expected [hash] using [key]. Returns 0 on failure, 1 on success. |
*/ |
int RSAVerify(const RSAPublicKey *key, |
- const uint8_t* sig, |
- const int sig_len, |
- const uint8_t sig_type, |
- const uint8_t* hash); |
+ const uint8_t* sig, |
+ const int sig_len, |
+ const uint8_t sig_type, |
+ const uint8_t* hash); |
+ |
+/* Perform RSA signature verification on [buf] of length [len] against expected |
+ * signature [sig] using signature algorithm [algorithm]. The public key used |
+ * for verification can either be in the form of a pre-process key blob |
+ * [key_blob] or RSAPublicKey structure [key]. One of [key_blob] or [key] must |
+ * be non-NULL, and the other NULL or the function will fail. |
+ * |
+ * Returns 1 on verification success, 0 on verification failure or invalid |
+ * arguments. |
+ * |
+ * Note: This function is for use in the firmware and assumes all pointers point |
+ * to areas in the memory of the right size. |
+ * |
+ */ |
+int RSAVerifyBinary_f(const uint8_t* key_blob, |
+ const RSAPublicKey* key, |
+ const uint8_t* buf, |
+ uint64_t len, |
+ const uint8_t* sig, |
+ int algorithm); |
+ |
+/* Version of RSAVerifyBinary_f() where instead of the raw binary blob |
+ * of data, its digest is passed as the argument. */ |
+int RSAVerifyBinaryWithDigest_f(const uint8_t* key_blob, |
+ const RSAPublicKey* key, |
+ const uint8_t* digest, |
+ const uint8_t* sig, |
+ int algorithm); |
+ |
+ |
+/* ----Some additional utility functions for RSA.---- */ |
+ |
+/* Returns the size of a pre-processed RSA public key in bytes with algorithm |
+ * [algorithm]. */ |
+int RSAProcessedKeySize(int algorithm); |
+ |
+/* Allocate a new RSAPublicKey structure and initialize its pointer fields to |
+ * NULL */ |
+RSAPublicKey* RSAPublicKeyNew(void); |
+ |
+/* Deep free the contents of [key]. */ |
+void RSAPublicKeyFree(RSAPublicKey* key); |
+ |
+/* Create a RSAPublic key structure from binary blob [buf] of length |
+ * [len]. |
+ * |
+ * Caller owns the returned key and must free it. |
+ */ |
+RSAPublicKey* RSAPublicKeyFromBuf(const uint8_t* buf, int len); |
+ |
#endif /* VBOOT_REFERENCE_RSA_H_ */ |