/* SPDX-License-Identifier: GPL-2.0-or-later */

  /* Asymmetric public-key algorithm definitions
   *
   * See Documentation/crypto/asymmetric-keys.txt
   *
   * Copyright (C) 2012 Red Hat, Inc. All Rights Reserved.
   * Written by David Howells (dhowells@redhat.com)

   */
  
  #ifndef _LINUX_PUBLIC_KEY_H
  #define _LINUX_PUBLIC_KEY_H

  #include <linux/keyctl.h>

  #include <linux/oid_registry.h>

  /*
   * Cryptographic data for the public-key subtype of the asymmetric key type.
   *
   * Note that this may include private part of the key as well as the public
   * part.
   */
  struct public_key {

  	void *key;
  	u32 keylen;

  	enum OID algo;
  	void *params;
  	u32 paramlen;

  	bool key_is_private;

  	const char *id_type;
  	const char *pkey_algo;

  };

  extern void public_key_free(struct public_key *key);

  
  /*
   * Public key cryptography signature data
   */
  struct public_key_signature {

  	struct asymmetric_key_id *auth_ids[2];

  	u8 *s;			/* Signature */
  	u32 s_size;		/* Number of bytes in signature */

  	u8 *digest;

  	u8 digest_size;		/* Number of bytes in digest */

  	const char *pkey_algo;
  	const char *hash_algo;

  	const char *encoding;

  };

  extern void public_key_signature_free(struct public_key_signature *sig);

  extern struct asymmetric_key_subtype public_key_subtype;

  struct key;

  struct key_type;
  union key_payload;

  extern int restrict_link_by_signature(struct key *dest_keyring,

  				      const struct key_type *type,

  				      const union key_payload *payload,
  				      struct key *trust_keyring);

  extern int restrict_link_by_key_or_keyring(struct key *dest_keyring,
  					   const struct key_type *type,
  					   const union key_payload *payload,
  					   struct key *trusted);

  extern int restrict_link_by_key_or_keyring_chain(struct key *trust_keyring,
  						 const struct key_type *type,
  						 const union key_payload *payload,
  						 struct key *trusted);

  extern int query_asymmetric_key(const struct kernel_pkey_params *,
  				struct kernel_pkey_query *);
  
  extern int encrypt_blob(struct kernel_pkey_params *, const void *, void *);
  extern int decrypt_blob(struct kernel_pkey_params *, const void *, void *);
  extern int create_signature(struct kernel_pkey_params *, const void *, void *);
  extern int verify_signature(const struct key *,
  			    const struct public_key_signature *);

  int public_key_verify_signature(const struct public_key *pkey,
  				const struct public_key_signature *sig);

  #endif /* _LINUX_PUBLIC_KEY_H */