aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/asymmetric_keys
AgeCommit message (Expand)AuthorFilesLines
2017-11-15pkcs7: Set the module licence to prevent taintingDavid Howells4-0/+9
2017-11-14Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-24/+4
2017-11-03crypto: move pub key to generic async completionGilad Ben-Yossef1-24/+4
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman2-0/+2
2017-10-18pkcs7: Prevent NULL pointer dereference, since sinfo is not always set.Eric Sesterhenn1-0/+3
2017-10-18KEYS: checking the input id parameters before finding asymmetric keyChun-Yi Lee1-0/+2
2017-10-18KEYS: Fix the wrong index when checking the existence of second idChun-Yi Lee1-1/+1
2017-06-09crypto : asymmetric_keys : verify_pefile:zero memory content before freeingLoganaden Velvindron1-2/+2
2017-06-09X.509: Fix error code in x509_cert_parse()Dan Carpenter1-0/+1
2017-05-23crypto: asymmetric_keys - handle EBUSY due to backlog correctlyGilad Ben-Yossef1-1/+1
2017-04-04KEYS: Keyring asymmetric key restrict method with chainingMat Martineau2-45/+144
2017-04-04KEYS: Restrict asymmetric key linkage using a specific keychainMat Martineau2-1/+105
2017-04-04KEYS: Add a lookup_restriction function for the asymmetric key typeMat Martineau1-8/+44
2017-04-03KEYS: Split role of the keyring pointer for keyring restrict functionsMat Martineau1-3/+5
2017-04-03PKCS#7: Handle blacklisted certificatesDavid Howells2-8/+25
2017-04-03X.509: Allow X.509 certs to be blacklistedDavid Howells2-0/+16
2016-12-15Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-0/+1
2016-12-14crypto: asymmetric_keys - set error code on failurePan Bian1-0/+1
2016-11-25X.509: Fix double free in x509_cert_parse() [ver #3]Andrey Ryabinin1-1/+0
2016-07-18KEYS: Fix for erroneous trust of incorrectly signed X.509 certsMat Martineau1-1/+1
2016-07-18pefile: Fix the failure of calculation for digestLans Zhang1-1/+6
2016-07-18PKCS#7: Fix panic when referring to the empty AKID when DEBUG definedLans Zhang1-1/+1
2016-05-30Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-0/+1
2016-05-19crypto: public_key: select CRYPTO_AKCIPHERArnd Bergmann1-0/+1
2016-05-11KEYS: The PKCS#7 test key type should use the secondary keyringDavid Howells1-1/+1
2016-04-11KEYS: Move the point of trust determination to __key_link()David Howells3-56/+33
2016-04-11KEYS: Make the system trusted keyring depend on the asymmetric key typeDavid Howells1-1/+1
2016-04-11X.509: Move the trust validation code out to its own fileDavid Howells4-80/+116
2016-04-11X.509: Use verify_signature() if we have a struct key * to useDavid Howells1-2/+1
2016-04-11KEYS: Generalise x509_request_asymmetric_key()David Howells4-35/+33
2016-04-11KEYS: Move x509_request_asymmetric_key() to asymmetric_type.cDavid Howells2-89/+89
2016-04-06PKCS#7: Make trust determination dependent on contents of trust keyringDavid Howells5-19/+5
2016-04-06KEYS: Generalise system_verify_data() to provide access to internal contentDavid Howells6-104/+59
2016-04-06X.509: Fix self-signed determinationDavid Howells1-0/+9
2016-04-06X.509: Extract signature digest and make self-signed cert checks earlierDavid Howells4-71/+110
2016-04-06PKCS#7: Make the signature a pointer rather than embedding itDavid Howells4-48/+55
2016-04-06X.509: Retain the key verification dataDavid Howells5-66/+67
2016-04-06KEYS: Add identifier pointers to public_key_signature structDavid Howells1-0/+4
2016-04-06KEYS: Allow authentication data to be stored in an asymmetric keyDavid Howells4-9/+34
2016-04-06X.509: Whitespace cleanupDavid Howells1-2/+2
2016-04-05PKCS#7: fix missing break on OID_sha224 caseColin Ian King1-0/+1
2016-03-30Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-0/+2
2016-03-23PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argumentNicolai Stange1-0/+2
2016-03-03X.509: Make algo identifiers text instead of enumDavid Howells8-67/+46
2016-03-03akcipher: Move the RSA DER encoding check to the crypto layerDavid Howells4-243/+93
2016-02-29X.509: Handle midnight alternative notation in GeneralizedTimeDavid Howells1-1/+1
2016-02-29X.509: Support leap secondsDavid Howells1-1/+1
2016-02-29X.509: Fix leap year handling againDavid Howells1-4/+4
2016-02-29PKCS#7: fix unitialized boolean 'want'Colin Ian King1-1/+1
2016-02-10crypto: KEYS: convert public key and digsig asym to the akcipher apiTadeusz Struk11-271/+124
2016-02-09crypto: keys - Revert "convert public key to akcipher api"Herbert Xu11-124/+272
2016-02-06crypto: asymmetric_keys - convert public key and digsig asym to the akcipher apiTadeusz Struk11-272/+124
2016-01-25PKCS#7: Don't require SpcSpOpusInfo in Authenticode pkcs7 signaturesPeter Jones1-3/+1
2016-01-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-0/+2
2015-12-15IMA: create machine owner and blacklist keyringsPetko Manolov1-0/+2
2015-12-11crypto: asymmetric_keys - signature.c does not need <module.h>Paul Gortmaker1-1/+1
2015-11-12X.509: Fix the time validation [ver #2]David Howells1-5/+7
2015-11-05Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds6-30/+35
2015-11-04Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds3-7/+9
2015-10-21KEYS: Merge the type-specific data with the payload dataDavid Howells6-30/+35
2015-10-20crypto: asymmetric_keys - Fix unaligned access in x509_get_sig_params()Sowmini Varadhan1-2/+3
2015-10-14crypto: pkcs7 - Fix unaligned access in pkcs7_verify()Sowmini Varadhan1-2/+3
2015-09-25X.509: Don't strip leading 00's from key ID when constructing key descriptionDavid Howells1-4/+0
2015-09-21crypto: asymmetric_keys - remove always false comparisonsudip1-3/+3
2015-09-01PKCS#7: Add OIDs for sha224, sha284 and sha512 hash algos and use themDavid Howells2-0/+17
2015-08-13PKCS#7: Add MODULE_LICENSE() to test moduleDavid Howells1-0/+3
2015-08-12PKCS#7: Appropriately restrict authenticated attributes and content typeDavid Howells7-17/+239
2015-08-12KEYS: Add a name for PKEY_ID_PKCS7David Howells1-0/+1
2015-08-12PKCS#7: Improve and export the X.509 ASN.1 time object decoderDavid Howells3-31/+72
2015-08-12PKCS#7: Support CMS messages also [RFC5652]David Howells3-9/+68
2015-08-12X.509: Change recorded SKID & AKID to not include Subject or IssuerDavid Howells1-6/+2
2015-08-12PKCS#7: Check content type and versionsDavid Howells2-4/+77
2015-08-07PKCS#7: Allow detached data to be supplied for signature checking purposesDavid Howells1-0/+25
2015-08-07X.509: Support X.509 lookup by Issuer+Serial form AuthorityKeyIdentifierDavid Howells3-40/+101
2015-08-07X.509: Extract both parts of the AuthorityKeyIdentifierDavid Howells7-69/+145
2015-07-02Merge tag 'module-implicit-v4.1-rc8' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds1-0/+1
2015-06-27Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds3-11/+35
2015-06-25crypto: asymmetric_keys/rsa - Use non-conflicting variable nameGuenter Roeck1-2/+2
2015-06-16crypto/asymmetric_keys: pkcs7_key_type needs module.hPaul Gortmaker1-0/+1
2015-05-21KEYS: fix "ca_keys=" partial key matchingMimi Zohar3-11/+35
2014-10-12Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds11-232/+518
2014-10-06KEYS: output last portion of fingerprint in /proc/keysDmitry Kasatkin1-5/+5
2014-10-06KEYS: strip 'id:' from ca_keyidDmitry Kasatkin1-1/+1
2014-10-06KEYS: use swapped SKID for performing partial matchingDmitry Kasatkin2-9/+9
2014-10-06KEYS: Restore partial ID matching functionality for asymmetric keysDmitry Kasatkin4-24/+76
2014-10-03X.509: If available, use the raw subjKeyId to form the key descriptionDavid Howells3-2/+11
2014-10-03KEYS: handle error code encoded in pointerDmitry Kasatkin1-2/+2
2014-09-22KEYS: Check hex2bin()'s return when generating an asymmetric key IDDavid Howells1-7/+8
2014-09-16PKCS#7: Handle PKCS#7 messages that contain no X.509 certsDavid Howells2-17/+47
2014-09-16PKCS#7: Better handling of unsupported cryptoDavid Howells5-16/+74
2014-09-16KEYS: Overhaul key identification when searching for asymmetric keysDavid Howells9-184/+195
2014-09-16KEYS: Implement binary asymmetric key ID handlingDavid Howells2-0/+93
2014-09-16KEYS: Make the key matching functions return boolDavid Howells1-2/+2
2014-09-16KEYS: Remove key_type::match in favour of overriding default by match_preparseDavid Howells2-4/+3
2014-09-16KEYS: Remove key_type::def_lookup_typeDavid Howells2-2/+0
2014-09-16KEYS: Preparse match dataDavid Howells1-1/+30
2014-09-16Merge tag 'keys-next-fixes-20140916' into keys-nextDavid Howells1-3/+3
2014-09-16Merge tag 'keys-fixes-20140916' into keys-nextDavid Howells1-28/+33
2014-09-16PKCS#7: Fix the parser cleanup to drain parsed out X.509 certsDavid Howells1-20/+19
2014-09-16PKCS#7: Provide a single place to do signed info block freeingDavid Howells1-9/+15
2014-09-16PKCS#7: Add a missing staticDavid Howells1-3/+3
2014-09-03KEYS: Set pr_fmt() in asymmetric key signature handlingDavid Howells1-0/+1
2014-09-03PEFILE: Relax the check on the length of the PKCS#7 certDavid Howells1-16/+33
2014-09-03KEYS: Fix public_key asymmetric key subtype nameDavid Howells1-0/+1
2014-08-03X.509: Need to export x509_request_asymmetric_key()David Howells1-0/+1
2014-07-31PKCS#7: X.509 certificate issuer and subject are mandatory fields in the ASN.1David Howells1-4/+2
2014-07-29PKCS#7: Use x509_request_asymmetric_key()David Howells2-72/+25
2014-07-28X.509: x509_request_asymmetric_keys() doesn't need string length argumentsDavid Howells1-6/+3
2014-07-28PKCS#7: fix sparse non static symbol warningWei Yongjun1-1/+1
2014-07-25PKCS#7: Missing inclusion of linux/err.hDavid Howells1-0/+1
2014-07-22Merge branch 'keys-fixes' into keys-nextDavid Howells1-1/+0
2014-07-22Merge remote-tracking branch 'integrity/next-with-keys' into keys-nextDavid Howells3-20/+142
2014-07-22Merge tag 'keys-pefile-20140709' into keys-nextDavid Howells6-1/+678
2014-07-22Merge tag 'keys-pkcs7-20140708' into keys-nextDavid Howells11-2/+1302
2014-07-22KEYS: struct key_preparsed_payload should have two payload pointersDavid Howells2-2/+2
2014-07-18KEYS: Provide a generic instantiation functionDavid Howells1-24/+1
2014-07-17RSA: Don't select non-existent symbolJean Delvare1-1/+0
2014-07-17KEYS: validate certificate trust only with builtin keysDmitry Kasatkin1-3/+6
2014-07-17KEYS: validate certificate trust only with selected keyDmitry Kasatkin2-0/+20
2014-07-17KEYS: make partial key id matching as a dedicated functionDmitry Kasatkin2-19/+33
2014-07-17KEYS: verify a certificate is signed by a 'trusted' keyMimi Zohar1-1/+86
2014-07-09pefile: Validate PKCS#7 trust chainDavid Howells1-1/+1
2014-07-09pefile: Digest the PE binary and compare to the PKCS#7 dataDavid Howells1-0/+197
2014-07-09pefile: Handle pesign using the wrong OIDVivek Goyal1-1/+7
2014-07-09pefile: Parse the "Microsoft individual code signing" data blobDavid Howells5-1/+168
2014-07-09pefile: Parse the presumed PKCS#7 content of the certificate blobDavid Howells1-1/+20
2014-07-09pefile: Strip the wrapper off of the cert data blockDavid Howells1-0/+71
2014-07-09pefile: Parse a PE binary to find a key and a signature contained thereinDavid Howells4-0/+217
2014-07-08KEYS: X.509: Fix a spelling mistakeDavid Howells1-1/+1
2014-07-08PKCS#7: Provide a key type for testing PKCS#7David Howells3-0/+117
2014-07-08PKCS#7: Find intersection between PKCS#7 message and known, trusted keysDavid Howells2-0/+220
2014-07-08PKCS#7: Verify internal certificate chainDavid Howells1-1/+87
2014-07-08PKCS#7: Find the right key in the PKCS#7 key list and verify the signatureDavid Howells1-0/+64
2014-07-08PKCS#7: Digest the data in a signed-data messageDavid Howells2-1/+175
2014-07-08PKCS#7: Implement a parser [RFC 2315]David Howells5-0/+606
2014-07-02X.509: Export certificate parse and free functionsDavid Howells1-0/+3
2014-07-01X.509: Add bits needed for PKCS#7David Howells3-2/+30
2013-11-23Revert "KEYS: verify a certificate is signed by a 'trusted' key"Linus Torvalds1-80/+1
2013-11-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6Linus Torvalds1-2/+3
2013-11-01KEYS: The RSA public key algorithm needs to select MPILIBDavid Howells1-0/+1
2013-10-25ima: provide support for arbitrary hash algorithmsDmitry Kasatkin2-3/+2
2013-10-25keys: change asymmetric keys to use common hash definitionsDmitry Kasatkin6-30/+20
2013-10-07crypto: crypto_memneq - add equality testing of memory regions w/o timing leaksJames Yonan1-2/+3
2013-09-25X.509: add module description and licenseKonstantin Khlebnikov1-0/+3
2013-09-25KEYS: verify a certificate is signed by a 'trusted' keyMimi Zohar1-1/+80
2013-09-25KEYS: Set the asymmetric-key type default search methodDavid Howells1-0/+1
2013-09-25X.509: Remove certificate date checksDavid Howells1-38/+0
2013-09-25X.509: Handle certificates that lack an authorityKeyIdentifier fieldDavid Howells1-4/+5
2013-09-25X.509: Check the algorithm IDs obtained from parsing an X.509 certificateDavid Howells1-0/+11
2013-09-25X.509: Embed public_key_signature struct and create filler functionDavid Howells3-55/+74
2013-09-25X.509: struct x509_certificate needs struct tm declaringDavid Howells1-0/+1
2013-09-25KEYS: Split public_key_verify_signature() and make availableDavid Howells3-9/+39
2013-09-25KEYS: Store public key algo ID in public_key structDavid Howells3-5/+5
2013-09-25KEYS: Move the algorithm pointer array from x509 to public_key.cDavid Howells3-11/+10
2013-09-25KEYS: Rename public key parameter name arraysDavid Howells2-11/+11
2013-04-22X.509: Support parse long form of length octets in Authority Key IdentifierChun-Yi Lee1-8/+47
2012-10-10X.509: Convert some printk calls to pr_develDavid Howells1-3/+3
2012-10-10asymmetric keys: fix printk format warningRandy Dunlap1-1/+1
2012-10-10MODSIGN: Fix 32-bit overflow in X.509 certificate validity date checkingDavid Howells3-20/+51
2012-10-08X.509: Add a crypto key parser for binary (DER) X.509 certificatesDavid Howells8-0/+832
2012-10-08RSA: Fix signature verification for shorter signaturesDavid Howells1-3/+11
2012-10-08RSA: Implement signature verification algorithm [PKCS#1 / RFC3447]David Howells4-0/+279
2012-10-08KEYS: Provide signature verification with an asymmetric keyDavid Howells2-1/+50
2012-10-08KEYS: Asymmetric public-key algorithm crypto key subtypeDavid Howells4-0/+146
2012-10-08KEYS: Asymmetric key pluggable data parsersDavid Howells1-1/+119
2012-10-08KEYS: Implement asymmetric key typeDavid Howells4-0/+191