verify_runtime.h

Go to the documentation of this file.

 
#ifndef _VERIFY_RUNTIME_H
#define _VERIFY_RUNTIME_H
 
// Dependencies
#include "modules/image/image.h"
#include "modules/memory/memory.h"
#include "core/verify.h"
 
// The runtime signature algorithm verification
#if (defined(BOOT_RUNTIME_SIGNATURE_RSA) && (BOOT_RUNTIME_SIGNATURE_RSA == ENABLED)) ||             \
   (defined(BOOT_FIRST_STAGE_RUNTIME_SIGNATURE_RSA) &&                                              \
   (BOOT_FIRST_STAGE_RUNTIME_SIGNATURE_RSA == ENABLED))
#define VERIFY_RUNTIME_RSA_SUPPORT ENABLED
#else
#define VERIFY_RUNTIME_RSA_SUPPORT DISABLED
#endif
 
#if (defined(BOOT_RUNTIME_SIGNATURE_ECDSA) && (BOOT_RUNTIME_SIGNATURE_ECDSA == ENABLED)) ||         \
   (defined(BOOT_FIRST_STAGE_RUNTIME_SIGNATURE_ECDSA) &&                                            \
   (BOOT_FIRST_STAGE_RUNTIME_SIGNATURE_ECDSA == ENABLED))
#define VERIFY_RUNTIME_ECDSA_SUPPORT ENABLED
#else
#define VERIFY_RUNTIME_ECDSA_SUPPORT DISABLED
#endif
 
#if (VERIFY_RUNTIME_RSA_SUPPORT == ENABLED)
#include "pkc/rsa.h"
#include "pkix/pem_key_import.h"
#endif
 
#if (VERIFY_RUNTIME_ECDSA_SUPPORT == ENABLED)
#include "ecc/ec.h"
#include "ecc/ecdsa.h"
#include "pkix/pem_key_import.h"
#endif
 
// C++ guard
#ifdef __cplusplus
extern "C"
{
#endif
 
cboot_error_t verifyRuntimeImageSignature(const Slot *slot, uint32_t entryOffset,
   const char_t *signKey, size_t signKeyLen,
   const HashAlgo *hashAlgo, VerifySignAlgo signAlgo);
 
cboot_error_t verifyRuntimeImageIntegrity(const Slot *slot, uint32_t entryOffset,
   const HashAlgo *hashAlgo);
 
// C++ guard
#ifdef __cplusplus
}
#endif
#endif // !_VERIFY_RUNTIME_H