aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/asymmetric_keys
AgeCommit message (Expand)AuthorFilesLines
2 daysMerge branch 'next' of https://git.kernel.org/pub/scm/linux/kernel/git/pcmoor...Mark Brown6-2/+147
10 daysX.509: Fix validation of ASN.1 certificate headerLukas Wunner1-1/+1
2026-05-13crypto: pkcs7: add tests for pkcs7_get_authattrJames Bottomley1-1/+43
2026-05-13crypto: pkcs7: add ability to extract signed attributes by OIDJames Bottomley3-1/+102
2026-05-13crypto: pkcs7: add flag for validated trust on a signed info blockJames Bottomley2-0/+2
2026-05-07crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contentsWeiming Shi1-0/+2
2026-05-05keys: cleanup dead code in Kconfig for FIPS_SIGNATURE_SELFTESTJulian Braha1-1/+0
2026-04-12X.509: Fix out-of-bounds access when parsing extensionsLukas Wunner1-4/+4
2026-02-22x509: select CONFIG_CRYPTO_LIB_SHA256Arnd Bergmann1-0/+1
2026-02-21Convert 'alloc_obj' family to use the new default GFP_KERNEL argumentLinus Torvalds5-13/+13
2026-02-21treewide: Replace kmalloc with kmalloc_obj for non-scalar typesKees Cook5-15/+13
2026-02-12Merge tag 'mm-nonmm-stable-2026-02-12-10-48' of git://git.kernel.org/pub/scm/...Linus Torvalds2-0/+2
2026-02-05pkcs7: Change a pr_warn() to pr_warn_once()David Howells1-1/+1
2026-02-02pkcs7: Allow authenticatedAttributes for ML-DSADavid Howells4-0/+28
2026-01-30pkcs7, x509: Add ML-DSA supportDavid Howells3-2/+59
2026-01-30pkcs7: Allow the signing algo to do whatever digestion it wants itselfDavid Howells4-19/+48
2026-01-30pkcs7, x509: Rename ->digest to ->mDavid Howells5-25/+22
2026-01-30x509: Separately calculate sha256 for blacklistDavid Howells2-9/+15
2026-01-20kernel.h: drop hex.h and update all hex.h usersRandy Dunlap2-0/+2
2025-11-22crypto: asymmetric_keys - fix uninitialized pointers with free attributeAlly Heev2-2/+2
2025-11-22KEYS: Avoid -Wflex-array-member-not-at-end warningGustavo A. R. Silva1-2/+5
2025-10-23crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_idThorsten Blum1-3/+9
2025-10-04Merge tag 'v6.18-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-4/+12
2025-09-28KEYS: X.509: Fix Basic Constraints CA flag parsingFan Wu1-4/+12
2025-09-22bpf: Implement signature verification for BPF programsKP Singh1-0/+1
2025-05-30Merge tag 'efi-next-for-v6.16' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-4/+4
2025-05-21include: pe.h: Fix PE definitionsPali Rohár1-4/+4
2025-04-17crypto: public_key - Make sig/tfm local to if clause in software_key_queryHerbert Xu1-11/+12
2025-04-16crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERYLukas Wunner1-4/+4
2025-04-16crypto: ecdsa - Fix enc/dec size reported by KEYCTL_PKEY_QUERYLukas Wunner1-2/+7
2025-04-16crypto: x509 - Replace kmalloc() + NUL-termination with kzalloc()Thorsten Blum1-2/+1
2025-02-09crypto: sig - Prepare for algorithms with variable signature sizeLukas Wunner1-7/+2
2025-01-19crypto: asymmetric_keys - Remove unused key_being_used_for[]Dr. David Alan Gilbert1-10/+0
2024-11-10crypto: rsassa-pkcs1 - Reinstate support for legacy protocolsLukas Wunner1-1/+1
2024-11-02crypto: asymmetric_keys - Remove unused functionsDr. David Alan Gilbert1-63/+0
2024-10-05crypto: ecdsa - Support P1363 signature decodingLukas Wunner1-1/+2
2024-10-05crypto: ecdsa - Move X9.62 signature size calculation into templateLukas Wunner1-34/+4
2024-10-05crypto: sig - Rename crypto_sig_maxsize() to crypto_sig_keysize()Lukas Wunner1-2/+2
2024-10-05crypto: ecdsa - Move X9.62 signature decoding into templateLukas Wunner1-0/+3
2024-10-05crypto: rsassa-pkcs1 - Migrate to sig_alg backendLukas Wunner1-2/+8
2024-09-20KEYS: prevent NULL pointer dereference in find_asymmetric_key()Roman Smirnov1-3/+4
2024-06-07crypto: sm2 - Remove sm2 algorithmHerbert Xu4-42/+2
2024-05-15Merge tag 'asymmetric-keys-next-6.10-rc1' of git://git.kernel.org/pub/scm/lin...Linus Torvalds6-189/+330
2024-05-14certs: Add ECDSA signature verification self-testJoachim Vandersmissen5-0/+103
2024-05-14certs: Move RSA self-test data to separate fileJoachim Vandersmissen5-189/+224
2024-05-13Merge tag 'v6.10-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds4-50/+43
2024-05-13KEYS: asymmetric: Add missing dependencies of FIPS_SIGNATURE_SELFTESTEric Biggers1-0/+2
2024-05-13KEYS: asymmetric: Add missing dependency on CRYPTO_SIGEric Biggers1-0/+1
2024-04-12X.509: Introduce scope-based x509_certificate allocationLukas Wunner3-49/+28
2024-04-12crypto: x509 - Add OID for NIST P521 and extend parser for itStefan Berger1-0/+3
2024-04-12crypto: asymmetric_keys - Adjust signature size calculation for NIST P521Stefan Berger1-1/+13
2024-03-22Revert "crypto: pkcs7 - remove sha1 support"Eric Biggers5-2/+18
2024-01-26crypto: asymmetric_keys - remove redundant pointer secsColin Ian King1-2/+2
2023-11-02Merge tag 'v6.7-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/...Linus Torvalds14-66/+106
2023-11-02Merge tag 'integrity-v6.7' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds1-0/+4
2023-10-31certs: Only allow certs signed by keys on the builtin keyringMimi Zohar1-0/+4
2023-10-27crypto: asymmetric_keys - allow FIPS 202 SHA-3 signaturesDimitri John Ledkov4-1/+49
2023-10-27treewide: Add SPDX identifier to IETF ASN.1 modulesLukas Wunner4-0/+25
2023-10-27certs: Break circular dependency when selftest is modularHerbert Xu5-21/+15
2023-10-20crypto: mscode_parser - remove sha224 authenticode supportDimitri John Ledkov1-3/+0
2023-10-20crypto: pkcs7 - remove sha1 supportDimitri John Ledkov5-18/+2
2023-10-18KEYS: asymmetric: Fix sign/verify on pkcs1pad without a hashHerbert Xu1-3/+2
2023-10-05crypto: pkcs7 - remove md4 md5 x.509 supportDimitri John Ledkov3-18/+0
2023-10-05X.509: Add missing IMPLICIT annotations to AKID ASN.1 moduleLukas Wunner1-7/+17
2023-08-29Merge tag 'v6.6-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/...Linus Torvalds3-5/+10
2023-08-25X.509: if signature is unsupported skip validationThore Sommer1-0/+5
2023-08-17KEYS: DigitalSignature link restrictionEric Snowberg1-0/+44
2023-07-28KEYS: use kfree_sensitive with keyMahmoud Adam1-4/+4
2023-07-14KEYS: fix kernel-doc warnings in verify_pefileGaosheng Cui1-1/+1
2023-07-07KEYS: asymmetric: Fix error codesDan Carpenter1-5/+15
2023-06-23KEYS: asymmetric: Use new crypto interface without scatterlistsHerbert Xu1-97/+137
2023-06-23KEYS: asymmetric: Move sm2 code into x509_public_keyHerbert Xu2-75/+21
2023-04-27Merge tag 'modules-6.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-1/+0
2023-04-24integrity: machine keyring CA configurationEric Snowberg1-0/+2
2023-04-24KEYS: CA link restrictionEric Snowberg1-0/+38
2023-04-24KEYS: X.509: Parse Key UsageEric Snowberg1-0/+28
2023-04-24KEYS: X.509: Parse Basic Constraints for CAEric Snowberg1-0/+22
2023-04-13KEYS: remove MODULE_LICENSE in non-modulesNick Alcock1-1/+0
2023-03-21asymmetric_keys: log on fatal failures in PE/pkcs7Robbie Harwood2-17/+17
2023-03-21verify_pefile: relax wrapper length checkRobbie Harwood1-4/+8
2023-02-21Merge tag 'net-next-6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-0/+1
2023-02-13KEYS: asymmetric: Fix ECDSA use via keyctl uapiDenis Kenzior1-2/+22
2023-02-13crypto: certs: fix FIPS selftest dependencyArnd Bergmann2-1/+2
2023-01-19wifi: cfg80211: Deduplicate certificate loadingLukas Wunner1-0/+1
2022-08-03KEYS: asymmetric: enforce SM2 signature use pkey algoTianjia Zhang1-2/+5
2022-08-03pkcs7: support EC-RDSA/streebog in SignerInfoElvira Khabirova1-0/+11
2022-08-03pkcs7: parser support SM2 and SM3 algorithms combinationTianjia Zhang1-0/+7
2022-08-03X.509: Support parsing certificate using SM2 algorithmTianjia Zhang1-0/+3
2022-06-21certs: Add FIPS selftestsDavid Howells5-1/+251
2022-06-21certs: Move load_certificate_list() to be with the asymmetric keys codeDavid Howells2-0/+58
2022-05-23certs: Factor out the blacklist hash creationMickaël Salaün1-1/+2
2022-03-21Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds2-2/+2
2022-03-10KEYS: asymmetric: properly validate hash_algo and encodingEric Biggers1-35/+76
2022-03-10KEYS: asymmetric: enforce that sig algo matches key algoEric Biggers3-12/+15
2022-03-08KEYS: remove support for asym_tpm keysEric Biggers5-1097/+0
2022-03-08KEYS: x509: remove dead code that set ->unsupported_sigEric Biggers1-9/+0
2022-03-08KEYS: x509: remove never-set ->unsupported_key flagEric Biggers3-15/+2
2022-03-08KEYS: x509: remove unused fieldsEric Biggers1-2/+0
2022-03-08KEYS: x509: clearly distinguish between key and signature algorithmsEric Biggers2-15/+19
2022-03-03crypto: cleanup commentsTom Rix2-2/+2
2022-01-09keys: X.509 public key issuer lookup without AKIDAndrew Zaborowski5-35/+96
2021-08-23certs: Add support for using elliptic curve keys for signing modulesStefan Berger1-0/+8
2021-03-26x509: Add OID for NIST P384 and extend parser for itSaulo Alessandre1-0/+3
2021-03-26x509: Add support for parsing x509 certs with ECDSA keysStefan Berger3-3/+39
2021-03-26x509: Detect sm2 keys by their parameters OIDStefan Berger1-1/+11
2021-02-23Merge tag 'keys-misc-20210126' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds4-11/+11
2021-02-16keys: Update comment for restrict_link_by_key_or_keyring_chainAndrew Zaborowski1-3/+4
2021-01-21crypto: pkcs7: Use match_string() helper to simplify the codeYueHaibing1-5/+4
2021-01-21PKCS#7: drop function from kernel-doc pkcs7_validate_trust_oneAlex Shi1-1/+1
2021-01-21crypto: asymmetric_keys: fix some comments in pkcs7_parser.hRandy Dunlap1-3/+2
2021-01-21KEYS: asymmetric: Fix kerneldocKrzysztof Kozlowski1-2/+4
2021-01-20X.509: Fix crash caused by NULL pointerTianjia Zhang1-1/+2
2020-12-31crypto: asym_tpm: correct zero out potential secretsGreg Kroah-Hartman1-1/+1
2020-11-20crypto: sha - split sha.h into sha1.h and sha2.hEric Biggers1-1/+1
2020-10-08X.509: Fix modular build of public_key_sm2Herbert Xu3-64/+57
2020-10-08X.509: fix error return value on the failed pathTianjia Zhang1-1/+3
2020-09-25X.509: support OSCCA SM2-with-SM3 certificate verificationTianjia Zhang4-0/+71
2020-09-25X.509: support OSCCA certificate parseTianjia Zhang1-5/+22
2020-08-07mm, treewide: rename kzfree() to kfree_sensitive()Waiman Long1-2/+2
2020-08-04Merge tag 'docs-5.9' of git://git.lwn.net/linuxLinus Torvalds3-3/+3
2020-07-15keys: asymmetric: fix error return code in software_key_query()Wei Yongjun1-0/+1
2020-06-19docs: crypto: convert asymmetric-keys.txt to ReSTMauro Carvalho Chehab3-3/+3
2019-12-12KEYS: asymmetric: return ENOMEM if akcipher_request_alloc() failsEric Biggers2-0/+2
2019-11-12KEYS: trusted: Create trusted keys subsystemSumit Garg1-1/+1
2019-11-12KEYS: Use common tpm_buf for trusted and asymmetric keysSumit Garg1-62/+45
2019-11-12tpm: Move tpm_buf code to include/linux/Sumit Garg1-6/+6
2019-09-28Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-1/+3
2019-08-19kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCEJiri Bohac1-1/+3
2019-08-05PKCS#7: Introduce pkcs7_get_digest()Thiago Jung Bauermann1-0/+33
2019-07-08Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-0/+3
2019-07-08Merge tag 'keys-namespace-20190627' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds1-1/+1
2019-06-27crypto: asymmetric_keys - select CRYPTO_HASH where neededArnd Bergmann1-0/+3
2019-06-26keys: Add a 'recurse' flag for keyring searchesDavid Howells1-1/+1
2019-05-24treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36Thomas Gleixner17-85/+17
2019-04-25crypto: shash - remove shash_desc::flagsEric Biggers3-3/+0
2019-04-18crypto: ecrdsa - add EC-RDSA (GOST 34.10) algorithmVitaly Chikunov1-4/+22
2019-04-18X.509: parse public key parameters from x509 for akcipherVitaly Chikunov4-17/+97
2019-04-18KEYS: do not kmemdup digest in {public,tpm}_key_verify_signatureVitaly Chikunov2-17/+2
2019-04-18crypto: akcipher - new verify API for public key algorithmsVitaly Chikunov2-48/+20
2018-10-26KEYS: asym_tpm: Add support for the sign operation [ver #2]Denis Kenzior1-1/+155
2018-10-26KEYS: asym_tpm: Implement tpm_sign [ver #2]Denis Kenzior1-0/+87
2018-10-26KEYS: asym_tpm: Implement signature verification [ver #2]Denis Kenzior1-6/+100
2018-10-26KEYS: asym_tpm: Implement the decrypt operation [ver #2]Denis Kenzior1-1/+57
2018-10-26KEYS: asym_tpm: Implement tpm_unbind [ver #2]Denis Kenzior1-0/+82
2018-10-26KEYS: asym_tpm: Add loadkey2 and flushspecific [ver #2]Denis Kenzior1-0/+94
2018-10-26KEYS: trusted: Expose common functionality [ver #2]Denis Kenzior1-0/+1
2018-10-26KEYS: asym_tpm: Implement encryption operation [ver #2]Denis Kenzior1-0/+84
2018-10-26KEYS: asym_tpm: Implement pkey_query [ver #2]Denis Kenzior1-0/+135
2018-10-26KEYS: Add parser for TPM-based keys [ver #2]Denis Kenzior4-0/+127
2018-10-26KEYS: asym_tpm: extract key size & public key [ver #2]Denis Kenzior1-0/+112
2018-10-26KEYS: asym_tpm: add skeleton for asym_tpm [ver #2]Denis Kenzior3-0/+102
2018-10-26KEYS: Implement PKCS#8 RSA Private Key parser [ver #2]David Howells4-0/+231
2018-10-26KEYS: Implement encrypt, decrypt and sign for software asymmetric key [ver #2]David Howells1-1/+81
2018-10-26KEYS: Allow the public_key struct to hold a private key [ver #2]David Howells1-2/+12
2018-10-26KEYS: Provide software public key query function [ver #2]David Howells1-17/+82
2018-10-26KEYS: Make the X.509 and PKCS7 parsers supply the sig encoding type [ver #2]David Howells2-12/+10
2018-10-26KEYS: Provide missing asymmetric key subops for new key type ops [ver #2]David Howells3-0/+141
2018-08-16Replace magic for trusting the secondary keyring with #defineYannik Sembritzki1-1/+1
2018-06-25X.509: unpack RSA signatureValue field from BIT STRINGMaciej S. Szmigiero1-0/+9
2018-06-15docs: Fix some broken referencesMauro Carvalho Chehab2-2/+2
2018-04-07kbuild: rename *-asn1.[ch] to *.asn1.[ch]Masahiro Yamada4-16/+16
2018-04-07kbuild: clean up *-asn1.[ch] patterns from top-level MakefileMasahiro Yamada1-7/+0
2018-04-07.gitignore: move *-asn1.[ch] patterns to the top-level .gitignoreMasahiro Yamada1-1/+0
2018-02-22X.509: fix NULL dereference when restricting key with unsupported_sigEric Biggers1-8/+13
2018-02-22X.509: fix BUG_ON() when hash algorithm is unsupportedEric Biggers1-1/+3
2018-02-22PKCS#7: fix direct verification of SignerInfo signatureEric Biggers1-0/+1
2018-02-22PKCS#7: fix certificate blacklistingEric Biggers1-4/+6
2018-02-22PKCS#7: fix certificate chain verificationEric Biggers1-1/+1
2017-12-08X.509: fix comparisons of ->pkey_algoEric Biggers2-2/+2
2017-12-08X.509: use crypto_shash_digest()Eric Biggers1-5/+1
2017-12-08KEYS: be careful with error codes in public_key_verify_signature()Eric Biggers1-2/+5
2017-12-08pkcs7: use crypto_shash_digest()Eric Biggers1-5/+2
2017-12-08pkcs7: fix check for self-signed certificateEric Biggers1-1/+1
2017-12-08pkcs7: return correct error code if pkcs7_check_authattrs() failsEric Biggers1-1/+3
2017-12-08X.509: reject invalid BIT STRING for subjectPublicKeyEric Biggers1-0/+2
2017-11-15pkcs7: Set the module licence to prevent taintingDavid Howells4-0/+9
2017-11-14Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-24/+4
2017-11-03crypto: move pub key to generic async completionGilad Ben-Yossef1-24/+4
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman2-0/+2
2017-10-18pkcs7: Prevent NULL pointer dereference, since sinfo is not always set.Eric Sesterhenn1-0/+3
2017-10-18KEYS: checking the input id parameters before finding asymmetric keyChun-Yi Lee1-0/+2
2017-10-18KEYS: Fix the wrong index when checking the existence of second idChun-Yi Lee1-1/+1
2017-06-09crypto : asymmetric_keys : verify_pefile:zero memory content before freeingLoganaden Velvindron1-2/+2
2017-06-09X.509: Fix error code in x509_cert_parse()Dan Carpenter1-0/+1
2017-05-23crypto: asymmetric_keys - handle EBUSY due to backlog correctlyGilad Ben-Yossef1-1/+1
2017-04-04KEYS: Keyring asymmetric key restrict method with chainingMat Martineau2-45/+144
2017-04-04KEYS: Restrict asymmetric key linkage using a specific keychainMat Martineau2-1/+105
2017-04-04KEYS: Add a lookup_restriction function for the asymmetric key typeMat Martineau1-8/+44
2017-04-03KEYS: Split role of the keyring pointer for keyring restrict functionsMat Martineau1-3/+5
2017-04-03PKCS#7: Handle blacklisted certificatesDavid Howells2-8/+25
2017-04-03X.509: Allow X.509 certs to be blacklistedDavid Howells2-0/+16
2016-12-15Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-0/+1
2016-12-14crypto: asymmetric_keys - set error code on failurePan Bian1-0/+1
2016-11-25X.509: Fix double free in x509_cert_parse() [ver #3]Andrey Ryabinin1-1/+0
2016-07-18KEYS: Fix for erroneous trust of incorrectly signed X.509 certsMat Martineau1-1/+1
2016-07-18pefile: Fix the failure of calculation for digestLans Zhang1-1/+6
2016-07-18PKCS#7: Fix panic when referring to the empty AKID when DEBUG definedLans Zhang1-1/+1
2016-05-30Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-0/+1
2016-05-19crypto: public_key: select CRYPTO_AKCIPHERArnd Bergmann1-0/+1
2016-05-11KEYS: The PKCS#7 test key type should use the secondary keyringDavid Howells1-1/+1