PKCS#7: Allow detached data to be supplied for signature checking purposes
authorDavid Howells <dhowells@redhat.com>
Mon, 20 Jul 2015 20:16:26 +0000 (21:16 +0100)
committerDavid Howells <dhowells@redhat.com>
Fri, 7 Aug 2015 15:26:13 +0000 (16:26 +0100)
commit4ebdb76f7da662346267384440492bb9d87c2aa3
tree53b863a630359237fc6dfdfc051a2aebbac5f7d1
parent4573b64a31cd8cb4cfeb1d1b95536cfe71980cf4
PKCS#7: Allow detached data to be supplied for signature checking purposes

It is possible for a PKCS#7 message to have detached data.  However, to verify
the signatures on a PKCS#7 message, we have to be able to digest the data.
Provide a function to supply that data.  An error is given if the PKCS#7
message included embedded data.

This is used in a subsequent patch to supply the data to module signing where
the signature is in the form of a PKCS#7 message with detached data, whereby
the detached data is the module content that is signed.

Signed-off-by: David Howells <dhowells@redhat.com>
Tested-by: Vivek Goyal <vgoyal@redhat.com>
crypto/asymmetric_keys/pkcs7_verify.c
include/crypto/pkcs7.h