summaryrefslogtreecommitdiff
path: root/test/libtest/test.h
diff options
context:
space:
mode:
authorKieran Bingham <kieran.bingham@ideasonboard.com>2020-09-09 12:56:07 +0100
committerKieran Bingham <kieran.bingham@ideasonboard.com>2020-09-24 10:56:22 +0100
commit4af45819d009bf5a0d2f61e044045c6accbb7142 (patch)
tree49f5b4efb9672d30a99fb28a35fbb158a7a5773b /test/libtest/test.h
parent131629d3a25f2e5879b96bdf7fa0377efdc2025b (diff)
libcamera: ipa: Move key generation to utils
Move the GPLv2 utilities used for generating public and private keys to the utilities subtree. Signed-off-by: Kieran Bingham <kieran.bingham@ideasonboard.com> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Reviewed-by: Paul Elder <paul.elder@ideasonboard.com>
Diffstat (limited to 'test/libtest/test.h')
0 files changed, 0 insertions, 0 deletions
">"libcamera/internal/pub_key.h" #if HAVE_GNUTLS #include <gnutls/abstract.h> #endif /** * \file pub_key.h * \brief Public key signature verification */ namespace libcamera { /** * \class PubKey * \brief Public key wrapper for signature verification * * The PubKey class wraps a public key and implements signature verification. It * only supports RSA keys and the RSA-SHA256 signature algorithm. */ /** * \brief Construct a PubKey from key data * \param[in] key Key data encoded in DER format */ PubKey::PubKey(Span<const uint8_t> key) : valid_(false) { #if HAVE_GNUTLS int ret = gnutls_pubkey_init(&pubkey_); if (ret < 0) return; const gnutls_datum_t gnuTlsKey{ const_cast<unsigned char *>(key.data()), static_cast<unsigned int>(key.size()) }; ret = gnutls_pubkey_import(pubkey_, &gnuTlsKey, GNUTLS_X509_FMT_DER); if (ret < 0) return; valid_ = true; #endif } PubKey::~PubKey() { #if HAVE_GNUTLS gnutls_pubkey_deinit(pubkey_); #endif } /** * \fn bool PubKey::isValid() const * \brief Check is the public key is valid * \return True if the public key is valid, false otherwise */ /** * \brief Verify signature on data * \param[in] data The signed data * \param[in] sig The signature * * Verify that the signature \a sig matches the signed \a data for the public * key. The signture algorithm is hardcoded to RSA-SHA256. * * \return True if the signature is valid, false otherwise */ bool PubKey::verify(Span<const uint8_t> data, Span<const uint8_t> sig) const { #if HAVE_GNUTLS const gnutls_datum_t gnuTlsData{ const_cast<unsigned char *>(data.data()), static_cast<unsigned int>(data.size()) }; const gnutls_datum_t gnuTlsSig{ const_cast<unsigned char *>(sig.data()), static_cast<unsigned int>(sig.size()) }; int ret = gnutls_pubkey_verify_data2(pubkey_, GNUTLS_SIGN_RSA_SHA256, 0, &gnuTlsData, &gnuTlsSig); return ret >= 0; #else return false; #endif } } /* namespace libcamera */