adding security misc from Vx7 to 6.9 (original files from vx7) (#5)
Co-authored-by: neelimap <neelimaps@neominds.in> Reviewed-on: http://13.234.246.121:3000/Neominds/ossl35vx69/pulls/5 Reviewed-by: Siddhant Singh <siddhant.singh@neominds.in> Co-authored-by: Neelima P S <neelima.ps@neominds.in> Co-committed-by: Neelima P S <neelima.ps@neominds.in>
This commit is contained in:
committed by
neelimap
neelimap
co-authored by
neelimap
neelimap
parent
368226261b
commit
122392cfc0
@@ -0,0 +1,311 @@
|
||||
/** @file
|
||||
Platform Key, Key Exchange Key, and Image signature database are defined
|
||||
for the signed image validation.
|
||||
|
||||
Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.<BR>
|
||||
This program and the accompanying materials
|
||||
are licensed and made available under the terms and conditions of the BSD License
|
||||
which accompanies this distribution. The full text of the license may be found at
|
||||
http://opensource.org/licenses/bsd-license.php
|
||||
|
||||
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
||||
|
||||
@par Revision Reference:
|
||||
GUIDs defined in UEFI 2.3.1 spec.
|
||||
**/
|
||||
|
||||
/*
|
||||
* Copyright (c) 2017 Wind River Systems, Inc.
|
||||
*
|
||||
* The right to copy, distribute, modify or otherwise make use
|
||||
* of this software may be licensed only pursuant to the terms
|
||||
* of an applicable Wind River License agreement.
|
||||
*/
|
||||
|
||||
/*
|
||||
modification history
|
||||
--------------------
|
||||
18sep17,lta written (F8920)
|
||||
*/
|
||||
|
||||
#ifndef __IMAGE_AUTHTICATION_H__
|
||||
#define __IMAGE_AUTHTICATION_H__
|
||||
|
||||
#ifdef notused
|
||||
#include <Guid/GlobalVariable.h>
|
||||
#endif
|
||||
|
||||
#define EFI_IMAGE_SECURITY_DATABASE_GUID \
|
||||
{ \
|
||||
0xd719b2cb, 0x3d3a, 0x4596, { 0xa3, 0xbc, 0xda, 0xd0, 0xe, 0x67, 0x65, 0x6f } \
|
||||
}
|
||||
|
||||
///
|
||||
/// Variable name with guid EFI_IMAGE_SECURITY_DATABASE_GUID
|
||||
/// for the authorized signature database.
|
||||
///
|
||||
#define EFI_IMAGE_SECURITY_DATABASE L"db"
|
||||
///
|
||||
/// Variable name with guid EFI_IMAGE_SECURITY_DATABASE_GUID
|
||||
/// for the forbidden signature database.
|
||||
///
|
||||
#define EFI_IMAGE_SECURITY_DATABASE1 L"dbx"
|
||||
#define SECURE_BOOT_MODE_ENABLE 1
|
||||
#define SECURE_BOOT_MODE_DISABLE 0
|
||||
#define SETUP_MODE 1
|
||||
#define USER_MODE 0
|
||||
///
|
||||
/// Globally "SetupMode" variable to specify whether the system is currently operating
|
||||
/// in setup mode (1) or not (0). All other values are reserved.
|
||||
///
|
||||
#define EFI_SETUP_MODE_NAME L"SetupMode"
|
||||
///
|
||||
/// Global "PK" variable for the Platform Key Signature Database.
|
||||
///
|
||||
#define EFI_PLATFORM_KEY_NAME L"PK"
|
||||
///
|
||||
/// Global "KEK" variable for the Key Exchange Key Signature Database.
|
||||
///
|
||||
#define EFI_KEY_EXCHANGE_KEY_NAME L"KEK"
|
||||
///
|
||||
/// Global "SignatureSupport" variable returns an array of GUIDs,
|
||||
/// with each GUID representing a type of signature which the platform
|
||||
/// firmware supports for images and other data.
|
||||
///
|
||||
#define EFI_SIGNATURE_SUPPORT_NAME L"SignatureSupport"
|
||||
|
||||
///
|
||||
/// Global "SecureBoot" variable to specify whether the platform firmware
|
||||
/// is operating in Secure boot mode (1) or not (0). All other values are reserved.
|
||||
///
|
||||
#define EFI_SECURE_BOOT_MODE_NAME L"SecureBoot"
|
||||
|
||||
//***********************************************************************
|
||||
// Signature Database
|
||||
//***********************************************************************
|
||||
///
|
||||
/// The format of a signature database.
|
||||
///
|
||||
#pragma pack(1)
|
||||
|
||||
typedef struct {
|
||||
///
|
||||
/// An identifier which identifies the agent which added the signature to the list.
|
||||
///
|
||||
EFI_GUID SignatureOwner;
|
||||
///
|
||||
/// The format of the signature is defined by the SignatureType.
|
||||
///
|
||||
UINT8 SignatureData[1];
|
||||
} EFI_SIGNATURE_DATA;
|
||||
|
||||
typedef struct {
|
||||
///
|
||||
/// Type of the signature. GUID signature types are defined in below.
|
||||
///
|
||||
EFI_GUID SignatureType;
|
||||
///
|
||||
/// Total size of the signature list, including this header.
|
||||
///
|
||||
UINT32 SignatureListSize;
|
||||
///
|
||||
/// Size of the signature header which precedes the array of signatures.
|
||||
///
|
||||
UINT32 SignatureHeaderSize;
|
||||
///
|
||||
/// Size of each signature.
|
||||
///
|
||||
UINT32 SignatureSize;
|
||||
///
|
||||
/// Header before the array of signatures. The format of this header is specified
|
||||
/// by the SignatureType.
|
||||
/// UINT8 SignatureHeader[SignatureHeaderSize];
|
||||
///
|
||||
/// An array of signatures. Each signature is SignatureSize bytes in length.
|
||||
/// EFI_SIGNATURE_DATA Signatures[][SignatureSize];
|
||||
///
|
||||
} EFI_SIGNATURE_LIST;
|
||||
|
||||
#pragma pack()
|
||||
|
||||
///
|
||||
/// This identifies a signature containing a SHA-256 hash. The SignatureHeader size shall
|
||||
/// always be 0. The SignatureSize shall always be 16 (size of SignatureOwner component) +
|
||||
/// 32 bytes.
|
||||
///
|
||||
#define EFI_CERT_SHA256_GUID \
|
||||
{ \
|
||||
0xc1c41626, 0x504c, 0x4092, {0xac, 0xa9, 0x41, 0xf9, 0x36, 0x93, 0x43, 0x28} \
|
||||
}
|
||||
|
||||
///
|
||||
/// This identifies a signature containing an RSA-2048 key. The key (only the modulus
|
||||
/// since the public key exponent is known to be 0x10001) shall be stored in big-endian
|
||||
/// order.
|
||||
/// The SignatureHeader size shall always be 0. The SignatureSize shall always be 16 (size
|
||||
/// of SignatureOwner component) + 256 bytes.
|
||||
///
|
||||
#define EFI_CERT_RSA2048_GUID \
|
||||
{ \
|
||||
0x3c5766e8, 0x269c, 0x4e34, {0xaa, 0x14, 0xed, 0x77, 0x6e, 0x85, 0xb3, 0xb6} \
|
||||
}
|
||||
|
||||
///
|
||||
/// This identifies a signature containing a RSA-2048 signature of a SHA-256 hash. The
|
||||
/// SignatureHeader size shall always be 0. The SignatureSize shall always be 16 (size of
|
||||
/// SignatureOwner component) + 256 bytes.
|
||||
///
|
||||
#define EFI_CERT_RSA2048_SHA256_GUID \
|
||||
{ \
|
||||
0xe2b36190, 0x879b, 0x4a3d, {0xad, 0x8d, 0xf2, 0xe7, 0xbb, 0xa3, 0x27, 0x84} \
|
||||
}
|
||||
|
||||
///
|
||||
/// This identifies a signature containing a SHA-1 hash. The SignatureSize shall always
|
||||
/// be 16 (size of SignatureOwner component) + 20 bytes.
|
||||
///
|
||||
#define EFI_CERT_SHA1_GUID \
|
||||
{ \
|
||||
0x826ca512, 0xcf10, 0x4ac9, {0xb1, 0x87, 0xbe, 0x1, 0x49, 0x66, 0x31, 0xbd} \
|
||||
}
|
||||
|
||||
///
|
||||
/// TThis identifies a signature containing a RSA-2048 signature of a SHA-1 hash. The
|
||||
/// SignatureHeader size shall always be 0. The SignatureSize shall always be 16 (size of
|
||||
/// SignatureOwner component) + 256 bytes.
|
||||
///
|
||||
#define EFI_CERT_RSA2048_SHA1_GUID \
|
||||
{ \
|
||||
0x67f8444f, 0x8743, 0x48f1, {0xa3, 0x28, 0x1e, 0xaa, 0xb8, 0x73, 0x60, 0x80} \
|
||||
}
|
||||
|
||||
///
|
||||
/// This identifies a signature based on an X.509 certificate. If the signature is an X.509
|
||||
/// certificate then verification of the signature of an image should validate the public
|
||||
/// key certificate in the image using certificate path verification, up to this X.509
|
||||
/// certificate as a trusted root. The SignatureHeader size shall always be 0. The
|
||||
/// SignatureSize may vary but shall always be 16 (size of the SignatureOwner component) +
|
||||
/// the size of the certificate itself.
|
||||
/// Note: This means that each certificate will normally be in a separate EFI_SIGNATURE_LIST.
|
||||
///
|
||||
#define EFI_CERT_X509_GUID \
|
||||
{ \
|
||||
0xa5c059a1, 0x94e4, 0x4aa7, {0x87, 0xb5, 0xab, 0x15, 0x5c, 0x2b, 0xf0, 0x72} \
|
||||
}
|
||||
|
||||
///
|
||||
/// This identifies a signature containing a SHA-224 hash. The SignatureHeader size shall
|
||||
/// always be 0. The SignatureSize shall always be 16 (size of SignatureOwner component) +
|
||||
/// 28 bytes.
|
||||
///
|
||||
#define EFI_CERT_SHA224_GUID \
|
||||
{ \
|
||||
0xb6e5233, 0xa65c, 0x44c9, {0x94, 0x7, 0xd9, 0xab, 0x83, 0xbf, 0xc8, 0xbd} \
|
||||
}
|
||||
|
||||
///
|
||||
/// This identifies a signature containing a SHA-384 hash. The SignatureHeader size shall
|
||||
/// always be 0. The SignatureSize shall always be 16 (size of SignatureOwner component) +
|
||||
/// 48 bytes.
|
||||
///
|
||||
#define EFI_CERT_SHA384_GUID \
|
||||
{ \
|
||||
0xff3e5307, 0x9fd0, 0x48c9, {0x85, 0xf1, 0x8a, 0xd5, 0x6c, 0x70, 0x1e, 0x1} \
|
||||
}
|
||||
|
||||
///
|
||||
/// This identifies a signature containing a SHA-512 hash. The SignatureHeader size shall
|
||||
/// always be 0. The SignatureSize shall always be 16 (size of SignatureOwner component) +
|
||||
/// 64 bytes.
|
||||
///
|
||||
#define EFI_CERT_SHA512_GUID \
|
||||
{ \
|
||||
0x93e0fae, 0xa6c4, 0x4f50, {0x9f, 0x1b, 0xd4, 0x1e, 0x2b, 0x89, 0xc1, 0x9a} \
|
||||
}
|
||||
|
||||
///
|
||||
/// This identifies a signature containing a DER-encoded PKCS #7 version 1.5 [RFC2315]
|
||||
/// SignedData value.
|
||||
///
|
||||
#define EFI_CERT_TYPE_PKCS7_GUID \
|
||||
{ \
|
||||
0x4aafd29d, 0x68df, 0x49ee, {0x8a, 0xa9, 0x34, 0x7d, 0x37, 0x56, 0x65, 0xa7} \
|
||||
}
|
||||
|
||||
//***********************************************************************
|
||||
// Image Execution Information Table Definition
|
||||
//***********************************************************************
|
||||
typedef UINT32 EFI_IMAGE_EXECUTION_ACTION;
|
||||
|
||||
#define EFI_IMAGE_EXECUTION_AUTHENTICATION 0x00000007
|
||||
#define EFI_IMAGE_EXECUTION_AUTH_UNTESTED 0x00000000
|
||||
#define EFI_IMAGE_EXECUTION_AUTH_SIG_FAILED 0x00000001
|
||||
#define EFI_IMAGE_EXECUTION_AUTH_SIG_PASSED 0x00000002
|
||||
#define EFI_IMAGE_EXECUTION_AUTH_SIG_NOT_FOUND 0x00000003
|
||||
#define EFI_IMAGE_EXECUTION_AUTH_SIG_FOUND 0x00000004
|
||||
#define EFI_IMAGE_EXECUTION_POLICY_FAILED 0x00000005
|
||||
#define EFI_IMAGE_EXECUTION_INITIALIZED 0x00000008
|
||||
|
||||
//
|
||||
// EFI_IMAGE_EXECUTION_INFO is added to EFI System Configuration Table
|
||||
// and assigned the GUID EFI_IMAGE_SECURITY_DATABASE_GUID.
|
||||
//
|
||||
typedef struct {
|
||||
///
|
||||
/// Describes the action taken by the firmware regarding this image.
|
||||
///
|
||||
EFI_IMAGE_EXECUTION_ACTION Action;
|
||||
///
|
||||
/// Size of all of the entire structure.
|
||||
///
|
||||
UINT32 InfoSize;
|
||||
///
|
||||
/// If this image was a UEFI device driver (for option ROM, for example) this is the
|
||||
/// null-terminated, user-friendly name for the device. If the image was for an application,
|
||||
/// then this is the name of the application. If this cannot be determined, then a simple
|
||||
/// NULL character should be put in this position.
|
||||
/// CHAR16 Name[];
|
||||
///
|
||||
|
||||
///
|
||||
/// For device drivers, this is the device path of the device for which this device driver
|
||||
/// was intended. In some cases, the driver itself may be stored as part of the system
|
||||
/// firmware, but this field should record the device's path, not the firmware path. For
|
||||
/// applications, this is the device path of the application. If this cannot be determined,
|
||||
/// a simple end-of-path device node should be put in this position.
|
||||
/// EFI_DEVICE_PATH_PROTOCOL DevicePath;
|
||||
///
|
||||
|
||||
///
|
||||
/// Zero or more image signatures. If the image contained no signatures,
|
||||
/// then this field is empty.
|
||||
///
|
||||
EFI_SIGNATURE_LIST Signature;
|
||||
} EFI_IMAGE_EXECUTION_INFO;
|
||||
|
||||
|
||||
typedef struct {
|
||||
///
|
||||
/// Number of EFI_IMAGE_EXECUTION_INFO structures.
|
||||
///
|
||||
UINTN NumberOfImages;
|
||||
///
|
||||
/// Number of image instances of EFI_IMAGE_EXECUTION_INFO structures.
|
||||
///
|
||||
// EFI_IMAGE_EXECUTION_INFO InformationInfo[]
|
||||
} EFI_IMAGE_EXECUTION_INFO_TABLE;
|
||||
|
||||
extern EFI_GUID gEfiImageSecurityDatabaseGuid;
|
||||
extern EFI_GUID gEfiCertSha256Guid;
|
||||
extern EFI_GUID gEfiCertRsa2048Guid;
|
||||
extern EFI_GUID gEfiCertRsa2048Sha256Guid;
|
||||
extern EFI_GUID gEfiCertSha1Guid;
|
||||
extern EFI_GUID gEfiCertRsa2048Sha1Guid;
|
||||
extern EFI_GUID gEfiCertX509Guid;
|
||||
extern EFI_GUID gEfiCertSha224Guid;
|
||||
extern EFI_GUID gEfiCertSha384Guid;
|
||||
extern EFI_GUID gEfiCertSha512Guid;
|
||||
extern EFI_GUID gEfiCertPkcs7Guid;
|
||||
|
||||
#endif
|
||||
@@ -0,0 +1,33 @@
|
||||
/* secKeyStoreP.h - #BRIEF# library header file */
|
||||
|
||||
/*
|
||||
* Copyright (c) 2015, 2020-2021 Wind River Systems, Inc.
|
||||
*
|
||||
* The right to copy, distribute, modify, or otherwise make use
|
||||
* of this software may be licensed only pursuant to the terms
|
||||
* of an applicable Wind River license agreement.
|
||||
*/
|
||||
|
||||
#ifndef __INCsecKeyStorePh
|
||||
#define __INCsecKeyStorePh
|
||||
|
||||
/* includes */
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C" {
|
||||
#endif /* __cplusplus */
|
||||
|
||||
/* defines */
|
||||
|
||||
/* typedefs */
|
||||
|
||||
/* function declarations */
|
||||
void* secKeyStoreOpen(void);
|
||||
int secKeyStoreRead(void* handle, char* name, int len);
|
||||
STATUS secKeyStoreClose(void* handle);
|
||||
STATUS secKeyStoreReadyCheck();
|
||||
#ifdef __cplusplus
|
||||
}
|
||||
#endif /* __cplusplus */
|
||||
|
||||
#endif /* __INCsecKeyStorePh */
|
||||
@@ -0,0 +1,122 @@
|
||||
/* secSecretP.h - secSecret private header file */
|
||||
|
||||
/*
|
||||
* Copyright (c) 2015-2017, 2019, 2021 Wind River Systems, Inc.
|
||||
*
|
||||
* The right to copy, distribute, modify, or otherwise make use
|
||||
* of this software may be licensed only pursuant to the terms
|
||||
* of an applicable Wind River license agreement.
|
||||
*/
|
||||
|
||||
#ifndef __INCsecSecretPh
|
||||
#define __INCsecSecretPh
|
||||
|
||||
/* includes */
|
||||
|
||||
#include <secSecret.h>
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C" {
|
||||
#endif /* __cplusplus */
|
||||
|
||||
/* defines */
|
||||
|
||||
#ifndef SEC_SECRET_PATH_MAX
|
||||
#define SEC_SECRET_PATH_MAX 128
|
||||
#endif
|
||||
|
||||
#define SEC_SECRET_TYPE_PKEY 1
|
||||
#define SEC_SECRET_TYPE_TPM2_KEY 2
|
||||
#define SEC_SECRET_TYPE_OPAQUE 4
|
||||
|
||||
#define SEC_SECRET_MODE_READ 1
|
||||
#define SEC_SECRET_MODE_WRITE 2
|
||||
|
||||
/* Variables */
|
||||
|
||||
/* typedefs */
|
||||
|
||||
/* function declarations */
|
||||
/*******************************************************************************
|
||||
*
|
||||
* secSecretOpen - open the database for reading
|
||||
*
|
||||
* This routine returns a handle that can be used to iterate all key IDs in the
|
||||
* database. Note that public keys and buffers/pre-shared keys have different
|
||||
* name spaces.
|
||||
*
|
||||
* RETURNS: A handle to be used in subsequent calls to secSecretRead
|
||||
* and secSecretClose.
|
||||
* NULL in case of error.
|
||||
*
|
||||
* ERRNO:
|
||||
*/
|
||||
void* secSecretOpen(void);
|
||||
|
||||
|
||||
/*******************************************************************************
|
||||
*
|
||||
* secSecretRead - return next key ID from the database
|
||||
*
|
||||
* This routine returns the next key ID from the database.
|
||||
*
|
||||
* Parameter:
|
||||
* \is
|
||||
* \i <handle>
|
||||
* handle returned from secSecretOpen
|
||||
* \i <name>
|
||||
* buffer to store the key ID in
|
||||
* \i <name>
|
||||
* length of name buffer
|
||||
* \ie
|
||||
*
|
||||
* RETURNS:
|
||||
* IPCOM_SUCCESS if successful
|
||||
* IPCOM_ERR_END if no more entries can be read
|
||||
* IPCOM_ERR_FAILED in case of error
|
||||
*
|
||||
* ERRNO:
|
||||
*/
|
||||
int secSecretRead(void* handle, char* name, int name_len);
|
||||
|
||||
|
||||
/*******************************************************************************
|
||||
*
|
||||
* secSecretClose - close handle
|
||||
*
|
||||
* This routine closes a handle used to iterate all key IDs in the
|
||||
* database.
|
||||
*
|
||||
* Parameter:
|
||||
* \is
|
||||
* \i <handle>
|
||||
* handle returned from secSecretOpen
|
||||
* \ie
|
||||
*
|
||||
* RETURNS:
|
||||
* OK if the handle was closed
|
||||
* ERROR if the handle could not be closed;
|
||||
*
|
||||
* ERRNO:
|
||||
*/
|
||||
int secSecretClose(void* handle);
|
||||
|
||||
|
||||
void* secSecretOpenDir(int type);
|
||||
void secSecretInit(const char* rootDir);
|
||||
|
||||
int secSecretKepGet(char* buf, int* len);
|
||||
|
||||
FILE* secSecretFpGet(const char* keyId, int type, int mode);
|
||||
|
||||
void secSecretLock(void);
|
||||
void secSecretUnlock(void);
|
||||
STATUS secSecretGetDirPath(const int type, char* filePath, size_t pathLen);
|
||||
STATUS secSecretGetFilePath(const char* keyId, const int type, char* filePath, size_t pathLen);
|
||||
|
||||
|
||||
#ifdef __cplusplus
|
||||
}
|
||||
#endif /* __cplusplus */
|
||||
|
||||
#endif /* __INCsecSecretPh */
|
||||
@@ -0,0 +1,49 @@
|
||||
/* secUefiDbP.h - secUefiDb private header file */
|
||||
|
||||
/*
|
||||
* Copyright (c) 2017, 2021 Wind River Systems, Inc.
|
||||
*
|
||||
* The right to copy, distribute, modify, or otherwise make use
|
||||
* of this software may be licensed only pursuant to the terms
|
||||
* of an applicable Wind River license agreement.
|
||||
*/
|
||||
|
||||
#ifndef __INCsecUefiDbPh
|
||||
#define __INCsecUefiDbPh
|
||||
|
||||
/* includes */
|
||||
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C" {
|
||||
#endif /* __cplusplus */
|
||||
|
||||
/* defines */
|
||||
|
||||
|
||||
/* Variables */
|
||||
|
||||
/* typedefs */
|
||||
|
||||
#ifdef _WRS_CONFIG_LP64
|
||||
typedef uint64_t UINTN;
|
||||
#else
|
||||
typedef uint32_t UINTN;
|
||||
#endif
|
||||
|
||||
/* Introduced from header efidef.h from gnu-efi-3.0 */
|
||||
|
||||
typedef struct {
|
||||
UINT32 Data1;
|
||||
UINT16 Data2;
|
||||
UINT16 Data3;
|
||||
UINT8 Data4[8];
|
||||
} EFI_GUID;
|
||||
|
||||
extern const char uefiDatabase[];
|
||||
|
||||
#ifdef __cplusplus
|
||||
}
|
||||
#endif /* __cplusplus */
|
||||
|
||||
#endif /* __INCsecUefiDbPh */
|
||||
@@ -0,0 +1,44 @@
|
||||
/* secVaultP.h - wrapper header file for secSecretP.h */
|
||||
|
||||
/*
|
||||
* Copyright (c) 2015-2017, 2021 Wind River Systems, Inc.
|
||||
*
|
||||
* The right to copy, distribute, modify, or otherwise make use
|
||||
* of this software may be licensed only pursuant to the terms
|
||||
* of an applicable Wind River license agreement.
|
||||
*/
|
||||
|
||||
#ifndef __INCsecVaultPh
|
||||
#define __INCsecVaultPh
|
||||
|
||||
/* includes */
|
||||
#include <secSecret.h>
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C" {
|
||||
#endif /* __cplusplus */
|
||||
|
||||
/* defines */
|
||||
#define SEC_VAULT_PATH_MAX SEC_SECRET_PATH_MAX
|
||||
|
||||
#define SEC_VAULT_TYPE_PKEY SEC_SECRET_TYPE_PKEY
|
||||
#define SEC_VAULT_TYPE_OPAQUE SEC_SECRET_TYPE_OPAQUE
|
||||
|
||||
#define SEC_VAULT_MODE_READ SEC_SECRET_MODE_READ
|
||||
#define SEC_VAULT_MODE_WRITE SEC_SECRET_MODE_WRITE
|
||||
|
||||
|
||||
#define secVaultOpen() secSecretOpen()
|
||||
#define secVaultRead(handle, name,name_len) secSecretRead(handle, name,name_len)
|
||||
|
||||
|
||||
#define secVaultClose(handle) secSecretClose(handle)
|
||||
|
||||
|
||||
#ifdef __cplusplus
|
||||
}
|
||||
#endif /* __cplusplus */
|
||||
|
||||
#include <private/secSecretP.h>
|
||||
|
||||
#endif /* __INCsecVaultPh */
|
||||
@@ -0,0 +1,47 @@
|
||||
/* uefiTrustStoreP.h - private header file for UEFI trust store */
|
||||
|
||||
/*
|
||||
* Copyright (c) 2017, 2021 Wind River Systems, Inc.
|
||||
*
|
||||
* The right to copy, distribute, modify, or otherwise make use
|
||||
* of this software may be licensed only pursuant to the terms
|
||||
* of an applicable Wind River license agreement.
|
||||
*/
|
||||
|
||||
/*
|
||||
DESCRIPTION
|
||||
This header file describes the private definitions and structures
|
||||
for the UEFI database trust store.
|
||||
*/
|
||||
|
||||
#ifndef __INCuefiTrustStorePh
|
||||
#define __INCuefiTrustStorePh
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C" {
|
||||
#endif /* __cplusplus */
|
||||
|
||||
/* includes */
|
||||
|
||||
/* defines */
|
||||
|
||||
#define SECURE_LOADER_DB_SECTION ".uefi_db"
|
||||
#define UEFI_DATABASE_VERSION 1 /* current version */
|
||||
|
||||
/* typedefs */
|
||||
|
||||
typedef struct
|
||||
{
|
||||
uint32_t version; /* version number */
|
||||
uint32_t padding; /* add padding for alignment */
|
||||
uint64_t white_db_size; /* whitelist database size in bytes */
|
||||
uint64_t black_db_size; /* blacklist database size in bytes */
|
||||
char efiSignatureList[1]; /* place holder for start of signature list */
|
||||
} UEFI_DB_INFO;
|
||||
|
||||
|
||||
#ifdef __cplusplus
|
||||
}
|
||||
#endif /* __cplusplus */
|
||||
|
||||
#endif /* INCuefiTrustStorePh */
|
||||
Reference in New Issue
Block a user