Blame view

include/keys/trusted-type.h 1.17 KB
d00a1c72f   Mimi Zohar   keys: add new tru...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
  /*
   * Copyright (C) 2010 IBM Corporation
   * Author: David Safford <safford@us.ibm.com>
   *
   * This program is free software; you can redistribute it and/or modify
   * it under the terms of the GNU General Public License as published by
   * the Free Software Foundation, version 2 of the License.
   */
  
  #ifndef _KEYS_TRUSTED_TYPE_H
  #define _KEYS_TRUSTED_TYPE_H
  
  #include <linux/key.h>
  #include <linux/rcupdate.h>
fe351e8d4   Jarkko Sakkinen   keys, trusted: mo...
15
  #include <linux/tpm.h>
d00a1c72f   Mimi Zohar   keys: add new tru...
16
17
18
  
  #define MIN_KEY_SIZE			32
  #define MAX_KEY_SIZE			128
954650efb   Jarkko Sakkinen   tpm: seal/unseal ...
19
  #define MAX_BLOB_SIZE			512
fe351e8d4   Jarkko Sakkinen   keys, trusted: mo...
20
  #define MAX_PCRINFO_SIZE		64
5beb0c435   Jarkko Sakkinen   keys, trusted: se...
21
  #define MAX_DIGEST_SIZE			64
d00a1c72f   Mimi Zohar   keys: add new tru...
22
23
24
25
26
27
28
29
30
  
  struct trusted_key_payload {
  	struct rcu_head rcu;
  	unsigned int key_len;
  	unsigned int blob_len;
  	unsigned char migratable;
  	unsigned char key[MAX_KEY_SIZE + 1];
  	unsigned char blob[MAX_BLOB_SIZE];
  };
fe351e8d4   Jarkko Sakkinen   keys, trusted: mo...
31
32
33
34
35
36
37
38
  struct trusted_key_options {
  	uint16_t keytype;
  	uint32_t keyhandle;
  	unsigned char keyauth[TPM_DIGEST_SIZE];
  	unsigned char blobauth[TPM_DIGEST_SIZE];
  	uint32_t pcrinfo_len;
  	unsigned char pcrinfo[MAX_PCRINFO_SIZE];
  	int pcrlock;
5ca4c20cf   Jarkko Sakkinen   keys, trusted: se...
39
  	uint32_t hash;
f3c82ade7   Jarkko Sakkinen   tpm: fix checks f...
40
  	uint32_t policydigest_len;
5beb0c435   Jarkko Sakkinen   keys, trusted: se...
41
42
  	unsigned char policydigest[MAX_DIGEST_SIZE];
  	uint32_t policyhandle;
fe351e8d4   Jarkko Sakkinen   keys, trusted: mo...
43
  };
d00a1c72f   Mimi Zohar   keys: add new tru...
44
45
46
  extern struct key_type key_type_trusted;
  
  #endif /* _KEYS_TRUSTED_TYPE_H */