/* SPDX-License-Identifier: GPL-2.0+ */
|
#ifndef FSVERITYSETUP_H
|
#define FSVERITYSETUP_H
|
|
#include "util.h"
|
|
struct fsveritysetup_params {
|
const struct fsverity_hash_alg *hash_alg;
|
u8 *salt;
|
size_t saltlen;
|
int blocksize;
|
int blockbits; /* ilog2(blocksize) */
|
unsigned int hashes_per_block; /* blocksize / digest_size */
|
const char *signing_key_file;
|
const char *signing_cert_file;
|
const char *signature_file;
|
struct fsverity_elide_patch **elisions_and_patches;
|
size_t num_elisions_and_patches;
|
};
|
|
void fsverity_append_extension(void **buf_p, int type,
|
const void *ext, size_t extlen);
|
|
#define FSVERITY_EXTLEN(inner_len) \
|
ALIGN(sizeof(struct fsverity_extension) + (inner_len), 8)
|
|
/* elide_patch.c */
|
bool load_elisions_and_patches(const struct string_list *elide_opts,
|
const struct string_list *patch_opts,
|
struct fsveritysetup_params *params);
|
void free_elisions_and_patches(struct fsveritysetup_params *params);
|
bool apply_elisions_and_patches(const struct fsveritysetup_params *params,
|
struct filedes *in, u64 in_length,
|
struct filedes *out_ret, u64 *out_length_ret);
|
size_t total_elide_patch_ext_length(const struct fsveritysetup_params *params);
|
void append_elide_patch_exts(void **buf_p,
|
const struct fsveritysetup_params *params);
|
/* sign.c */
|
int append_signed_measurement(struct filedes *out,
|
const struct fsveritysetup_params *params,
|
const u8 *measurement);
|
|
#endif /* FSVERITYSETUP_H */
|
