Re: [PATCH v2 1/3] add params and ids to support nist_p384

Em seg., 22 de fev. de 2021 às 17:26, Stefan Berger escreveu: > > On 2/22/21 12:58 PM, Saulo Alessandre wrote: > > From: Saulo Alessandre > > > > * crypto/asymmetric_keys/x509_cert_parser.c > >- prepare x509 parser to load nist_secp384r1 > > > &

[PATCH v2 1/3] add params and ids to support nist_p384

From: Saulo Alessandre * crypto/asymmetric_keys/x509_cert_parser.c - prepare x509 parser to load nist_secp384r1 * crypto/ecc_curve_defs.h - add nist_p384 params * include/crypto/ecdh.h - add ECC_CURVE_NIST_P384 * include/linux/oid_registry.h - reorder OID_id_ecdsa_with_sha1 - add

[PATCH v2 2/3] adds math to support nist_p384 fast and changes routines to pass forward ecc_curve

From: Saulo Alessandre * crypto/ecc.c - change ecc_get_curve to accept nist_p384 - add vli_mmod_fast_384 - change some routines to pass ecc_curve forward until vli_mmod_fast * crypto/ecc.h - add ECC_CURVE_NIST_P384_DIGITS Signed-off-by: Saulo Alessandre --- crypto/ecc.c | 265

[PATCH v2 3/3] adds nist_p384 register and unregister to support nist_p384 and tests

From: Saulo Alessandre * crypto/ecdsa.c - add ecdsa_nist_p384_init_tfm - register and unregister p384 tfm * crypto/testmgr.c - add test vector for p384 on vector of tests * crypto/testmgr.h - add test vector params for p384(sha1, sha224, sha256, sha384 and sha512) Signed-off-by: Saulo

[PATCH 3/3] add nist_p384 register and unregister to support nist_p384

From: Saulo Alessandre * crypto/ecdsa.c - add ecdsa_nist_p384_init_tfm - register and unregister p384 tfm * crypto/testmgr.c - add test vector for p384 on vector of tests * crypto/testmgr.h - add test vector params for p384(sha1, sha224, sha256, sha384 and sha512) --- crypto

[PATCH 2/3] add mathematic to support fast nist_p384 and change routines to pass forward ecc_curve

From: Saulo Alessandre * crypto/ecc.c - change ecc_get_curve to accept nist_p384 - add vli_mmod_fast_384 - change some routines to pass ecc_curve forward until vli_mmod_fast * crypto/ecc.h - add ECC_CURVE_NIST_P384_DIGITS - change ECC_MAX_DIGITS to P384 size --- crypto/ecc.c | 282

[PATCH 1/3] add params and ids to support nist_p384

From: Saulo Alessandre * crypto/asymmetric_keys/x509_cert_parser.c - prepare x509 parser to load nist_secpp384r1 * crypto/ecc_curve_defs.h - add nist_p384 params * include/crypto/ecdh.h - add ECC_CURVE_NIST_P384 * include/linux/oid_registry.h - reorder OID_id_ecdsa_with_sha1 - add

[PATCH 1/3] add params and ids to support nist_p384

From: Saulo Alessandre * crypto/asymmetric_keys/x509_cert_parser.c - prepare x509 parser to load nist_secpp384r1 * crypto/ecc_curve_defs.h - add nist_p384 params * include/crypto/ecdh.h - add ECC_CURVE_NIST_P384 * include/linux/oid_registry.h - reorder OID_id_ecdsa_with_sha1 - add

[PATCH v7 4/7] crypto: add ecc curve and expose them

.) and have all params for the curve inside strut ecc_curve, remembering that we have anothers curves incoming, like Edwards. regards, -- Email: Saulo Alessandre

[PATCH v2 3/4] ecdsa: change ecc.c and ecc.h to support ecdsa

From: Saulo Alessandre * crypto/ecc.c - ecc_get_curve - modified to recognize NIST_P384 and NISTP521; - vli_rshift - created for use on vli_mmod_fast_521 for ecdsa; - vli_mod_add - exported for use on ecdsa.c; - vli_mmod_fast_384 - implements fast elliptic curve nist p384 [4

[PATCH v2 4/4] ecdsa: implements ecdsa signature verification

From: Saulo Alessandre * Documentation/admin-guide/module-signing.rst - Documents how to generate certificate and signature for (ECDSA). * crypto/Kconfig - ECDSA added into kernel Public-key cryptography section. * crypto/Makefile - add ECDSA objects and asn1 params to compile

[PATCH v2 1/4] ecdsa: add params to ecdsa algo

From: Saulo Alessandre * crypto/ecc_curve_defs.h - nist_p384_(x,y,p,n,z,b) and nist_p384 added curve params added; - nist_p521_(x,y,p,n,z,b) and nist_p521 added curve params added; * include/crypto/ecdh.h - ECC_CURVE_NIST_P384, ECC_CURVE_NIST_P521 - added new curves * lib/oid_registry.c

[PATCH v2 2/4] ecdsa: prepare akcipher and x509 parser to use incoming ecdsa

From: Saulo Alessandre * crypto/asymmetric_keys/pkcs7_parser.c - pkcs7_sig_note_pkey_algo - changed to recognize OID_id_ecdsa_with_sha(1,256,384,512). * crypto/asymmetric_keys/pkcs7_verify.c - pkcs7_digest - added warning when the summary has an unsupported algorithm, to avoid let others

[PATCH v2 0/4] ecdsa: this patch implement signature verification

From: Saulo Alessandre Why ECDSA on kernel: I work on Brazilian Supreme Electoral Court [http://www.tse.jus.br], we are using ECDSA for module and elf32 binaries verification including shared libraries on about 450k T-DRE voting machines [5]. This is the first part of our try to contribution

[PATCH] implements ecdsa 256, 384 and 521 alghorithm in akcipher model; change pcks7 and x509 to load certificates with ecdsa; increment testmgr to test ecdsa algo and finally allows signature and ver

From: Saulo Alessandre Signed-off-by: Saulo Alessandre --- Documentation/admin-guide/module-signing.rst | 10 + crypto/Kconfig | 12 + crypto/Makefile | 7 + crypto/asymmetric_keys/pkcs7_parser.c| 7 +- crypto