linux.git/Documentation/crypto, branch v5.1

crypto: skcipher - remove remnants of internal IV generators

2018-12-23T03:52:45+00:00

Remove dead code related to internal IV generators, which are no longer
used since they've been replaced with the "seqiv" and "echainiv"
templates.  The removed code includes:

- The "givcipher" (GIVCIPHER) algorithm type.  No algorithms are
  registered with this type anymore, so it's unneeded.

- The "const char *geniv" member of aead_alg, ablkcipher_alg, and
  blkcipher_alg.  A few algorithms still set this, but it isn't used
  anymore except to show via /proc/crypto and CRYPTO_MSG_GETALG.
  Just hardcode "" or "" in those cases.

- The 'skcipher_givcrypt_request' structure, which is never used.

Signed-off-by: Eric Biggers 
Signed-off-by: Herbert Xu

KEYS: Implement PKCS#8 RSA Private Key parser [ver #2]

2018-10-26T08:30:46+00:00

Implement PKCS#8 RSA Private Key format [RFC 5208] parser for the
asymmetric key type.  For the moment, this will only support unencrypted
DER blobs.  PEM and decryption can be added later.

PKCS#8 keys can be loaded like this:

	openssl pkcs8 -in private_key.pem -topk8 -nocrypt -outform DER | \
	  keyctl padd asymmetric foo @s

Signed-off-by: David Howells 
Tested-by: Marcel Holtmann 
Reviewed-by: Marcel Holtmann 
Reviewed-by: Denis Kenzior 
Tested-by: Denis Kenzior 
Signed-off-by: James Morris

KEYS: Provide missing asymmetric key subops for new key type ops [ver #2]

2018-10-26T08:30:46+00:00

Provide the missing asymmetric key subops for new key type ops.  This
include query, encrypt, decrypt and create signature.  Verify signature
already exists.  Also provided are accessor functions for this:

	int query_asymmetric_key(const struct key *key,
				 struct kernel_pkey_query *info);

	int encrypt_blob(struct kernel_pkey_params *params,
			 const void *data, void *enc);
	int decrypt_blob(struct kernel_pkey_params *params,
			 const void *enc, void *data);
	int create_signature(struct kernel_pkey_params *params,
			     const void *data, void *enc);

The public_key_signature struct gains an encoding field to carry the
encoding for verify_signature().

Signed-off-by: David Howells 
Tested-by: Marcel Holtmann 
Reviewed-by: Marcel Holtmann 
Reviewed-by: Denis Kenzior 
Tested-by: Denis Kenzior 
Signed-off-by: James Morris

crypto: remove redundant type flags from tfm allocation

2018-07-08T16:30:29+00:00

Some crypto API users allocating a tfm with crypto_alloc_$FOO() are also
specifying the type flags for $FOO, e.g. crypto_alloc_shash() with
CRYPTO_ALG_TYPE_SHASH.  But, that's redundant since the crypto API will
override any specified type flag/mask with the correct ones.

So, remove the unneeded flags.

This patch shouldn't change any actual behavior.

Signed-off-by: Eric Biggers 
Signed-off-by: Herbert Xu

docs: crypto_engine.rst: Fix two parse warnings

2018-06-15T15:48:59+00:00

./Documentation/crypto/crypto_engine.rst:13: WARNING: Unexpected indentation.
./Documentation/crypto/crypto_engine.rst:15: WARNING: Block quote ends without a blank line; unexpected unindent.

Signed-off-by: Mauro Carvalho Chehab 
Acked-by: Jonathan Corbet

docs: */index.rst: Add newer documents to their respective index.rst

2018-05-08T15:57:35+00:00

A number of new docs were added, but they're currently not on
the index.rst from the session they're supposed to be, causing
Sphinx warnings.

Add them.

Signed-off-by: Mauro Carvalho Chehab 
Signed-off-by: Jonathan Corbet

crypto: doc - clarify hash callbacks state machine

2018-03-30T17:33:02+00:00

Add a note that it is perfectly legal to "abandon" a request object:
- call .init() and then (as many times) .update()
- _not_ call any of .final(), .finup() or .export() at any point in
  future

Link: https://lkml.kernel.org/r/20180222114741.GA27631@gondor.apana.org.au
Signed-off-by: Horia Geantă 
Signed-off-by: Herbert Xu

crypto: doc - document crypto engine API

2018-02-15T15:26:49+00:00

Signed-off-by: Corentin Labbe 
Signed-off-by: Herbert Xu

crypto: doc - adapt api sample to use async. op wait

2017-11-03T14:11:23+00:00

The code sample is waiting for an async. crypto op completion.
Adapt sample to use the new generic infrastructure to do the same.

This also fixes a possible data coruption bug created by the
use of wait_for_completion_interruptible() without dealing
correctly with an interrupt aborting the wait prior to the
async op finishing.

Signed-off-by: Gilad Ben-Yossef 
Signed-off-by: Herbert Xu

KEYS: Add documentation for asymmetric keyring restrictions

2017-07-14T01:01:38+00:00

Provide more specific examples of keyring restrictions as applied to
X.509 signature chain verification.

Signed-off-by: Mat Martineau 
Signed-off-by: David Howells 
Signed-off-by: James Morris