You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
46 lines
1.7 KiB
46 lines
1.7 KiB
/* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
|
|
* Use of this source code is governed by a BSD-style license that can be
|
|
* found in the LICENSE file.
|
|
*
|
|
* Host-side functions for verified boot.
|
|
*/
|
|
|
|
#ifndef VBOOT_REFERENCE_HOST_KEYBLOCK_H_
|
|
#define VBOOT_REFERENCE_HOST_KEYBLOCK_H_
|
|
|
|
#include "host_key.h"
|
|
#include "vboot_struct.h"
|
|
|
|
|
|
/* Create a key block header containing [data_key] and [flags], signed
|
|
* by private key the file [signing_key_pem_file] and algorithm [algorithm]
|
|
* using the external signer program [external_signer] for all private key
|
|
* operations.
|
|
* Caller owns the returned pointer, and must free
|
|
* it with Free(). */
|
|
VbKeyBlockHeader* KeyBlockCreate_external(const VbPublicKey* data_key,
|
|
const char* signing_key_pem_file,
|
|
uint64_t algorithm,
|
|
uint64_t flags,
|
|
const char* external_signer);
|
|
|
|
/* Create a key block header containing [data_key] and [flags], signed
|
|
* by [signing_key]. Caller owns the returned pointer, and must free
|
|
* it with Free(). */
|
|
VbKeyBlockHeader* KeyBlockCreate(const VbPublicKey* data_key,
|
|
const VbPrivateKey* signing_key,
|
|
uint64_t flags);
|
|
|
|
|
|
/* Read a key block from a .keyblock file. Caller owns the returned
|
|
* pointer, and must free it with Free().
|
|
*
|
|
* Returns NULL if error. */
|
|
VbKeyBlockHeader* KeyBlockRead(const char* filename);
|
|
|
|
|
|
/* Write a key block to a file in .keyblock format. */
|
|
int KeyBlockWrite(const char* filename, const VbKeyBlockHeader* key_block);
|
|
|
|
#endif /* VBOOT_REFERENCE_HOST_KEYBLOCK_H_ */
|