Re: [PATCH v7 4/4] ima: Support EC keys for signature verification
From: Mimi Zohar <zohar@linux.ibm.com>
Date: 2021-02-05 12:30:18
Also in:
keyrings, linux-integrity, lkml
From: Mimi Zohar <zohar@linux.ibm.com>
Date: 2021-02-05 12:30:18
Also in:
keyrings, linux-integrity, lkml
On Mon, 2021-02-01 at 10:19 -0500, Stefan Berger wrote:
Add support for IMA signature verification for EC keys. Since SHA type of hashes can be used by RSA and ECDSA signature schemes we need to look at the key and derive from the key which signature scheme to use. Since this can be applied to all types of keys, we change the selection of the encoding type to be driven by the key's signature scheme rather than by the hash type. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> Reviewed-by: Vitaly Chikunov <redacted> Reviewed-by: Tianjia Zhang <redacted>
Thanks, Stefan! Acked-by: Mimi Zohar <zohar@linux.ibm.com>