ima: Support EC keys for signature verification
authorStefan Berger <stefanb@linux.ibm.com>
Tue, 16 Mar 2021 21:07:38 +0000 (17:07 -0400)
committerHerbert Xu <herbert@gondor.apana.org.au>
Fri, 26 Mar 2021 08:41:59 +0000 (19:41 +1100)
commit947d70597236dd5ae65c1f68c8eabfb962ee5a6b
tree3023712de73708ee7236e770e51d4c279392ba55
parent299f561a66939debba70e6d7c67aa01ed32613d9
ima: Support EC keys for signature verification

Add support for IMA signature verification for EC keys. Since SHA type
of hashes can be used by RSA and ECDSA signature schemes we need to
look at the key and derive from the key which signature scheme to use.
Since this can be applied to all types of keys, we change the selection
of the encoding type to be driven by the key's signature scheme rather
than by the hash type.

Cc: Dmitry Kasatkin <dmitry.kasatkin@gmail.com>
Cc: linux-integrity@vger.kernel.org
Cc: David Howells <dhowells@redhat.com>
Cc: keyrings@vger.kernel.org
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Reviewed-by: Vitaly Chikunov <vt@altlinux.org>
Reviewed-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Acked-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
include/keys/asymmetric-type.h
security/integrity/digsig_asymmetric.c