diff options
| author | Denis Kenzior <denkenz@gmail.com> | 2018-10-09 17:48:17 +0100 |
|---|---|---|
| committer | James Morris <james.morris@microsoft.com> | 2018-10-26 09:30:46 +0100 |
| commit | e160c236c5f5582708f2935e4bcbbe9505072933 (patch) | |
| tree | 5dffcd7314ef6e5a52a988b9e608a73129b66ff7 /crypto/asymmetric_keys/Makefile | |
| parent | 0d8bf3fdcb962c4236b5f57abb5e8f268e23523a (diff) | |
| download | linux-crypto-e160c236c5f5582708f2935e4bcbbe9505072933.tar.gz linux-crypto-e160c236c5f5582708f2935e4bcbbe9505072933.zip | |
KEYS: Add parser for TPM-based keys [ver #2]
For TPM based keys, the only standard seems to be described here:
http://david.woodhou.se/draft-woodhouse-cert-best-practice.html#rfc.section.4.4
Quote from the relevant section:
"Rather, a common form of storage for "wrapped" keys is to encode the
binary TCPA_KEY structure in a single ASN.1 OCTET-STRING, and store the
result in PEM format with the tag "-----BEGIN TSS KEY BLOB-----". "
This patch implements the above behavior. It is assumed that the PEM
encoding is stripped out by userspace and only the raw DER/BER format is
provided. This is similar to how PKCS7, PKCS8 and X.509 keys are
handled.
Signed-off-by: Denis Kenzior <denkenz@gmail.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Tested-by: Marcel Holtmann <marcel@holtmann.org>
Reviewed-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: James Morris <james.morris@microsoft.com>
Diffstat (limited to 'crypto/asymmetric_keys/Makefile')
| -rw-r--r-- | crypto/asymmetric_keys/Makefile | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/crypto/asymmetric_keys/Makefile b/crypto/asymmetric_keys/Makefile index 73fbe650..28b91adb 100644 --- a/crypto/asymmetric_keys/Makefile +++ b/crypto/asymmetric_keys/Makefile @@ -75,3 +75,14 @@ verify_signed_pefile-y := \ $(obj)/mscode_parser.o: $(obj)/mscode.asn1.h $(obj)/mscode.asn1.h $(obj)/mscode.asn1.o: $(obj)/mscode.asn1.c $(obj)/mscode.asn1.h + +# +# TPM private key parsing +# +obj-$(CONFIG_TPM_KEY_PARSER) += tpm_key_parser.o +tpm_key_parser-y := \ + tpm.asn1.o \ + tpm_parser.o + +$(obj)/tpm_parser.o: $(obj)/tpm.asn1.h +$(obj)/tpm.asn1.o: $(obj)/tpm.asn1.c $(obj)/tpm.asn1.h |