1
0
Fork 0
alistair23-linux/security/integrity/evm
Matthew Garrett 5feeb61183 evm: Allow non-SHA1 digital signatures
SHA1 is reasonable in HMAC constructs, but it's desirable to be able to
use stronger hashes in digital signatures. Modify the EVM crypto code so
the hash type is imported from the digital signature and passed down to
the hash calculation code, and return the digest size to higher layers
for validation.

Signed-off-by: Matthew Garrett <mjg59@google.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
2018-07-18 07:27:22 -04:00
..
Kconfig evm: Allow non-SHA1 digital signatures 2018-07-18 07:27:22 -04:00
Makefile evm: posix acls modify i_mode 2011-09-14 15:24:51 -04:00
evm.h evm: Allow non-SHA1 digital signatures 2018-07-18 07:27:22 -04:00
evm_crypto.c evm: Allow non-SHA1 digital signatures 2018-07-18 07:27:22 -04:00
evm_main.c evm: Allow non-SHA1 digital signatures 2018-07-18 07:27:22 -04:00
evm_posix_acl.c ima: fix script messages 2013-10-25 13:17:19 -04:00
evm_secfs.c EVM: unlock on error path in evm_read_xattrs() 2018-06-01 06:03:08 -04:00