This patch adds the support for PKCS7 Verification Protocl defined in UEFI 2.5. One new crypto API was added to support the embedded content extraction in CryptoPkg. And only VerifyBuffer interface in PKCS7 Verificatio Protocol is supported in this version. Another interface (VerifySignature) will return EFI_UNSUPPORTED due to current underlying openssl interface limitation.
Qin Long (2): CryptoPkg: Add one new API for PKCS7 Verification Protocol Support SecurityPkg: Add UEFI-2.5 PKCS7 Verification Protocol Support CryptoPkg/Include/Library/BaseCryptLib.h | 33 +- .../Library/BaseCryptLib/Pk/CryptPkcs7Verify.c | 109 +- .../Library/BaseCryptLib/Pk/CryptPkcs7VerifyNull.c | 31 +- .../Pk/CryptPkcs7VerifyNull.c | 31 +- .../Pkcs7Verify/Pkcs7VerifyDxe/Pkcs7VerifyDxe.c | 1047 ++++++++++++++++++++ .../Pkcs7Verify/Pkcs7VerifyDxe/Pkcs7VerifyDxe.inf | 70 ++ .../Pkcs7Verify/Pkcs7VerifyDxe/Pkcs7VerifyDxe.uni | Bin 0 -> 2254 bytes .../Pkcs7VerifyDxe/Pkcs7VerifyDxeExtra.uni | Bin 0 -> 1342 bytes SecurityPkg/SecurityPkg.dsc | 5 + 9 files changed, 1321 insertions(+), 5 deletions(-) create mode 100644 SecurityPkg/Pkcs7Verify/Pkcs7VerifyDxe/Pkcs7VerifyDxe.c create mode 100644 SecurityPkg/Pkcs7Verify/Pkcs7VerifyDxe/Pkcs7VerifyDxe.inf create mode 100644 SecurityPkg/Pkcs7Verify/Pkcs7VerifyDxe/Pkcs7VerifyDxe.uni create mode 100644 SecurityPkg/Pkcs7Verify/Pkcs7VerifyDxe/Pkcs7VerifyDxeExtra.uni -- 1.9.5.msysgit.1 ------------------------------------------------------------------------------ _______________________________________________ edk2-devel mailing list edk2-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/edk2-devel
