101 lines · c
1/* SPDX-License-Identifier: GPL-2.0-only */2/*3 * Copyright (C) 2010 IBM Corporation4 * Author: David Safford <safford@us.ibm.com>5 */6 7#ifndef _KEYS_TRUSTED_TYPE_H8#define _KEYS_TRUSTED_TYPE_H9 10#include <linux/key.h>11#include <linux/rcupdate.h>12#include <linux/tpm.h>13 14#ifdef pr_fmt15#undef pr_fmt16#endif17 18#define pr_fmt(fmt) "trusted_key: " fmt19 20#define MIN_KEY_SIZE 3221#define MAX_KEY_SIZE 12822#define MAX_BLOB_SIZE 51223#define MAX_PCRINFO_SIZE 6424#define MAX_DIGEST_SIZE 6425 26struct trusted_key_payload {27 struct rcu_head rcu;28 unsigned int key_len;29 unsigned int blob_len;30 unsigned char migratable;31 unsigned char old_format;32 unsigned char key[MAX_KEY_SIZE + 1];33 unsigned char blob[MAX_BLOB_SIZE];34};35 36struct trusted_key_options {37 uint16_t keytype;38 uint32_t keyhandle;39 unsigned char keyauth[TPM_DIGEST_SIZE];40 uint32_t blobauth_len;41 unsigned char blobauth[TPM_DIGEST_SIZE];42 uint32_t pcrinfo_len;43 unsigned char pcrinfo[MAX_PCRINFO_SIZE];44 int pcrlock;45 uint32_t hash;46 uint32_t policydigest_len;47 unsigned char policydigest[MAX_DIGEST_SIZE];48 uint32_t policyhandle;49};50 51struct trusted_key_ops {52 /*53 * flag to indicate if trusted key implementation supports migration54 * or not.55 */56 unsigned char migratable;57 58 /* Initialize key interface. */59 int (*init)(void);60 61 /* Seal a key. */62 int (*seal)(struct trusted_key_payload *p, char *datablob);63 64 /* Unseal a key. */65 int (*unseal)(struct trusted_key_payload *p, char *datablob);66 67 /* Optional: Get a randomized key. */68 int (*get_random)(unsigned char *key, size_t key_len);69 70 /* Exit key interface. */71 void (*exit)(void);72};73 74struct trusted_key_source {75 char *name;76 struct trusted_key_ops *ops;77};78 79extern struct key_type key_type_trusted;80 81#define TRUSTED_DEBUG 082 83#if TRUSTED_DEBUG84static inline void dump_payload(struct trusted_key_payload *p)85{86 pr_info("key_len %d\n", p->key_len);87 print_hex_dump(KERN_INFO, "key ", DUMP_PREFIX_NONE,88 16, 1, p->key, p->key_len, 0);89 pr_info("bloblen %d\n", p->blob_len);90 print_hex_dump(KERN_INFO, "blob ", DUMP_PREFIX_NONE,91 16, 1, p->blob, p->blob_len, 0);92 pr_info("migratable %d\n", p->migratable);93}94#else95static inline void dump_payload(struct trusted_key_payload *p)96{97}98#endif99 100#endif /* _KEYS_TRUSTED_TYPE_H */101