diff options
author | David Howells <dhowells@redhat.com> | 2014-07-22 20:54:05 (GMT) |
---|---|---|
committer | David Howells <dhowells@redhat.com> | 2014-07-22 20:54:05 (GMT) |
commit | 6204e0025566ad3992ce649d4f44b7e8cdde2293 (patch) | |
tree | bf851c8197aa6546c12c97cb205f9c75a7cae729 /security | |
parent | 1ca72c96dbad332ebd89b5756640f881ff0e6e9e (diff) | |
parent | 98801c002f7e573b4a86bcd5b234864d375e98a0 (diff) | |
download | linux-6204e0025566ad3992ce649d4f44b7e8cdde2293.tar.xz |
Merge tag 'keys-pefile-20140709' into keys-next
Here's a set of changes that implement a PE file signature checker.
This provides the following facility:
(1) Extract the signature from the PE file. This is a PKCS#7 message
containing, as its data, a hash of the signed parts of the file.
(2) Digest the signed parts of the file.
(3) Compare the digest with the one from the PKCS#7 message.
(4) Validate the signatures on the PKCS#7 message and indicate
whether it was matched by a trusted key.
Signed-off-by: David Howells <dhowells@redhat.com>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions