]> git.ipfire.org Git - thirdparty/grub.git/commit
appended signatures: Parse PKCS#7 signed data
authorSudhakar Kuppusamy <sudhakar@linux.ibm.com>
Mon, 6 Oct 2025 07:24:52 +0000 (12:54 +0530)
committerDaniel Kiper <daniel.kiper@oracle.com>
Sat, 11 Oct 2025 13:36:35 +0000 (15:36 +0200)
commita33754979725746d7d5b3809089e519006d0d4c3
tree0fbfc4300b1b40b65d7890d756c8acdeeeacbf85
parent3e4ff6ffb377608de2daa0ee4ff5ac896c0d021f
appended signatures: Parse PKCS#7 signed data

This code allows us to parse:

 - PKCS#7 signed data messages. Only a single signer info is supported, which
   is all that the Linux sign-file utility supports creating out-of-the-box.
   Only RSA, SHA-256 and SHA-512 are supported. Any certificate embedded in
   the PKCS#7 message will be ignored.

Signed-off-by: Daniel Axtens <dja@axtens.net>
Signed-off-by: Sudhakar Kuppusamy <sudhakar@linux.ibm.com>
Reviewed-by: Avnish Chouhan <avnish@linux.ibm.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
grub-core/commands/appendedsig/appendedsig.h
grub-core/commands/appendedsig/pkcs7.c [new file with mode: 0644]