projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: dd7d66f) | patch
pefile: Digest the PE binary and compare to the PKCS#7 data
authorDavid Howells <dhowells@redhat.com>
Tue, 1 Jul 2014 15:02:52 +0000 (16:02 +0100)
committerDavid Howells <dhowells@redhat.com>
Wed, 9 Jul 2014 13:58:37 +0000 (14:58 +0100)
commitaf316fc442ef23901bbfcec5af55e69ca6ce9563
treed638d69cfe97e2c8b74aa99fd82d25661baa5e16tree | snapshot
parentdd7d66f21b9eb6a3979d8c9ba910eba772cfbbc9commit | diff
pefile: Digest the PE binary and compare to the PKCS#7 data

Digest the signed parts of the PE binary, canonicalising the section table
before we need it, and then compare the the resulting digest to the one in the
PKCS#7 signed content.

Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Vivek Goyal <vgoyal@redhat.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
crypto/asymmetric_keys/verify_pefile.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git