[PATCH 2/2] evm: Allow non-SHA1 digital signatures

2018-06-01 Thread Matthew Garrett
SHA1 is reasonable in HMAC constructs, but it's desirable to be able to use stronger hashes in digital signatures. Modify the EVM crypto code so the hash type is imported from the digital signature and passed down to the hash calculation code, and return the digest size to higher layers for validat

[PATCH 1/2] evm: Don't deadlock if a crypto algorithm is unavailable

2018-06-01 Thread Matthew Garrett
Trying to instantiate a non-existent crypto algorithm will cause the kernel to trigger a module load. If EVM appraisal is enabled, this will in turn trigger appraisal of the module, which will fail because the crypto algorithm isn't available. Add a CRYPTO_NOLOAD flag and skip module loading if it'

[PATCH v2 0/5] crypto: Speck support

2018-06-01 Thread Tomer Ashur
[Resending because the email bounced back from all 3 mailing lists. Sorry if you get this email twice] Hi Eric et al., I know that this thread is already stale, and I'm sorry I couldn't join earlier but maybe late is better than never. Allow me to first introduce myself: my name is Tomer Ashur and