Re: [PATCH] lib/sha1.c: quite sparse noise about symbol not declared

2011-09-13 Thread msb
+cc linux-crypto, herbert, davem, torvalds H Hartley Sweeten (hartl...@visionengravers.com) wrote: > Include to pickup the declarations for sha_transform > and sha_init to quite the sparse noise: > > warning: symbol 'sha_transform' was not declared. Should it be static? > warning: symbol 'sha_in

[RFC v2.1 4/6] crypto: GnuPG based MPI lib - extra MPI sources

2011-09-13 Thread Dmitry Kasatkin
Adds the multi-precision-integer maths library which was originally taken from GnuPG and ported to the kernel by (among others) David Howells. This version is taken from Fedora kernel 2.6.32-71.14.1.el6. The difference is that checkpatch reported errors and warning has been fixed. This library is

[RFC v2.1 5/6] crypto: ksign - digital signature verification support

2011-09-13 Thread Dmitry Kasatkin
This patch implements RSA digital signature verification using GnuPG library. Signature and public key have a special format and have special headers. Signature header contains keyid, which is used to identify the key, needed for signature verification. Payload of the signature and the key are mul

[RFC v2.1 6/6] evm: digital signature verification support

2011-09-13 Thread Dmitry Kasatkin
This option enables digital signature verification support for EVM. With this feature file metadata can be protected using digital signature instead of HMAC. When building an image, which has to be flashed to different devices, an HMAC cannot be used to sign file metadata, because the HMAC key is d

[RFC v2.1 3/6] crypto: GnuPG based MPI lib - make files needed for ksign

2011-09-13 Thread Dmitry Kasatkin
Adds the multi-precision-integer maths library which was originally taken from GnuPG and ported to the kernel by (among others) David Howells. This version is taken from Fedora kernel 2.6.32-71.14.1.el6. The difference is that checkpatch reported errors and warning has been fixed. This library is

[RFC v2.1 0/6] evm: digital signature verification extension

2011-09-13 Thread Dmitry Kasatkin
Hello, Changes to version 2.0: - MPI patch has been split to smaller in order to go to mailing lists. First 2 patches include only source and header files which are needed to build ksign verification. Headers and sources are split just to meet 100k kernel.org limit. Last patch adds all res

Re: [PATCH] random: add blocking facility to urandom

2011-09-13 Thread Jarod Wilson
Peter Zijlstra wrote: On Mon, 2011-09-12 at 09:56 -0400, Jarod Wilson wrote: Thomas Gleixner wrote: Well, there is enough prove out there that the hardware you're using is a perfect random number generator by itself. So stop complaining about not having access to TPM chips if you can create

Re: [PATCH] random: add blocking facility to urandom

2011-09-13 Thread Peter Zijlstra
On Mon, 2011-09-12 at 09:56 -0400, Jarod Wilson wrote: > Thomas Gleixner wrote: > > Well, there is enough prove out there that the hardware you're using > > is a perfect random number generator by itself. > > > > So stop complaining about not having access to TPM chips if you can > > create an ent