blob: f4e81074f5e098839f037ed78d29cc3c19ba99b1 [file] [log] [blame]
David Howells2e3fadb2014-07-01 16:40:19 +01001/* PKCS#7 crypto data parser internal definitions
2 *
3 * Copyright (C) 2012 Red Hat, Inc. All Rights Reserved.
4 * Written by David Howells (dhowells@redhat.com)
5 *
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public Licence
8 * as published by the Free Software Foundation; either version
9 * 2 of the Licence, or (at your option) any later version.
10 */
11
12#include <linux/oid_registry.h>
13#include <crypto/pkcs7.h>
14#include "x509_parser.h"
15
16#define kenter(FMT, ...) \
17 pr_devel("==> %s("FMT")\n", __func__, ##__VA_ARGS__)
18#define kleave(FMT, ...) \
19 pr_devel("<== %s()"FMT"\n", __func__, ##__VA_ARGS__)
20
21struct pkcs7_signed_info {
22 struct pkcs7_signed_info *next;
23 struct x509_certificate *signer; /* Signing certificate (in msg->certs) */
David Howells99db4432015-08-05 15:22:27 +010024 unsigned index;
David Howells99db4432015-08-05 15:22:27 +010025 bool unsupported_crypto; /* T if not usable due to missing crypto */
David Howells2e3fadb2014-07-01 16:40:19 +010026
27 /* Message digest - the digest of the Content Data (or NULL) */
28 const void *msgdigest;
29 unsigned msgdigest_len;
30
31 /* Authenticated Attribute data (or NULL) */
32 unsigned authattrs_len;
33 const void *authattrs;
David Howells99db4432015-08-05 15:22:27 +010034 unsigned long aa_set;
35#define sinfo_has_content_type 0
36#define sinfo_has_signing_time 1
37#define sinfo_has_message_digest 2
38#define sinfo_has_smime_caps 3
39#define sinfo_has_ms_opus_info 4
40#define sinfo_has_ms_statement_type 5
41 time64_t signing_time;
David Howells2e3fadb2014-07-01 16:40:19 +010042
David Howells2e3fadb2014-07-01 16:40:19 +010043 /* Message signature.
44 *
45 * This contains the generated digest of _either_ the Content Data or
46 * the Authenticated Attributes [RFC2315 9.3]. If the latter, one of
47 * the attributes contains the digest of the the Content Data within
48 * it.
David Howells566a1172016-04-06 16:13:33 +010049 *
50 * THis also contains the issuing cert serial number and issuer's name
51 * [PKCS#7 or CMS ver 1] or issuing cert's SKID [CMS ver 3].
David Howells2e3fadb2014-07-01 16:40:19 +010052 */
David Howells566a1172016-04-06 16:13:33 +010053 struct public_key_signature *sig;
David Howells2e3fadb2014-07-01 16:40:19 +010054};
55
56struct pkcs7_message {
57 struct x509_certificate *certs; /* Certificate list */
58 struct x509_certificate *crl; /* Revocation list */
59 struct pkcs7_signed_info *signed_infos;
David Howells60d65ca2015-07-20 21:16:33 +010060 u8 version; /* Version of cert (1 -> PKCS#7 or CMS; 3 -> CMS) */
David Howells99db4432015-08-05 15:22:27 +010061 bool have_authattrs; /* T if have authattrs */
David Howells2e3fadb2014-07-01 16:40:19 +010062
63 /* Content Data (or NULL) */
64 enum OID data_type; /* Type of Data */
65 size_t data_len; /* Length of Data */
66 size_t data_hdrlen; /* Length of Data ASN.1 header */
67 const void *data; /* Content Data (or 0) */
68};