[PATCH v2.2 0/7] evm: digital signature verification extension

2011-10-19 Thread Dmitry Kasatkin
Hello, Changes in version 2.2: * uses EXPORT_SYMBOL_GPL * disabled code removed * removed casting after kmalloc Changes to version 2.1: * MPI lib moved to /lib directory. * added configuration option CONFIG_MPILIB_EXTRA to exclude building a part of MPI library, which is not used in RSA

[PATCH v2.2 6/7] integrity: digital signature verification using multiple keyrings

2011-10-19 Thread Dmitry Kasatkin
Define separate keyrings for each of the different use cases - evm, ima, and modules. Using different keyrings improves search performance, and also allows locking specific keyring to prevent adding new keys. This is useful for evm and module keyrings, when keys are usually only added from

[PATCH v2.2 7/7] evm: digital signature verification support

2011-10-19 Thread Dmitry Kasatkin
This patch adds support for digital signature verification to EVM. With this feature file metadata can be protected using digital signature instead of an HMAC. When building an image, which has to be flashed to different devices, an HMAC cannot be used to sign file metadata, because the HMAC key

[PATCH v2.2 5/7] crypto: digital signature verification support

2011-10-19 Thread Dmitry Kasatkin
This patch implements RSA digital signature verification using GnuPG library. The format of the signature and the public key is defined by their respective headers. The signature header contains version information, algorithm, and keyid, which was used to generate the signature. The key header

[PATCH v2.2 4/7] crypto: GnuPG based MPI lib - additional sources (part 4)

2011-10-19 Thread Dmitry Kasatkin
Adds the multi-precision-integer maths library which was originally taken from GnuPG and ported to the kernel by (among others) David Howells. This version is taken from Fedora kernel 2.6.32-71.14.1.el6. The difference is that checkpatch reported errors and warnings have been fixed. This library

[PATCH v2.2 3/7] crypto: GnuPG based MPI lib - make files (part 3)

2011-10-19 Thread Dmitry Kasatkin
Adds the multi-precision-integer maths library which was originally taken from GnuPG and ported to the kernel by (among others) David Howells. This version is taken from Fedora kernel 2.6.32-71.14.1.el6. The difference is that checkpatch reported errors and warnings have been fixed. This library

Re: [PATCH] talitos: handle descriptor not found in error path

2011-10-19 Thread Herbert Xu
On Tue, Oct 18, 2011 at 11:17:00AM -0500, Kim Phillips wrote: http://www.mail-archive.com/linux-crypto@vger.kernel.org/msg05996.html It makes IPSec AH work for async crypto implementations. This needs to go through net...@vger.kernel.org. Thanks, -- Email: Herbert Xu