evm: digital signature verification support
commit15647eb3985ef30dfd657038924dc85c03026733
authorDmitry Kasatkin <dmitry.kasatkin@intel.com>
Thu, 1 Sep 2011 11:41:40 +0000 (1 14:41 +0300)
committerDmitry Kasatkin <dmitry.kasatkin@intel.com>
Wed, 9 Nov 2011 14:51:14 +0000 (9 16:51 +0200)
tree5d4629ef3b687ff56a446f42a8ee5aa35ec9322b
parent8607c501478432b23654739c7321bc7456053cb6
evm: digital signature verification support

This patch adds support for digital signature verification to EVM.
With this feature file metadata can be protected using digital
signature instead of an HMAC. When building an image,
which has to be flashed to different devices, an HMAC cannot
be used to sign file metadata, because the HMAC key should be
different on every device.

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
security/integrity/evm/evm.h
security/integrity/evm/evm_crypto.c
security/integrity/evm/evm_main.c