netdev - RE: [PATCH v6 5/5] selftests/bpf: Add test for bpf_verify_pkcs7

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 28 Jun 2022 12:32:09 +0000
From:   Roberto Sassu <roberto.sassu@...wei.com>
To:     "ast@...nel.org" <ast@...nel.org>,
        "daniel@...earbox.net" <daniel@...earbox.net>,
        "andrii@...nel.org" <andrii@...nel.org>,
        "kpsingh@...nel.org" <kpsingh@...nel.org>,
        "john.fastabend@...il.com" <john.fastabend@...il.com>,
        "songliubraving@...com" <songliubraving@...com>,
        "kafai@...com" <kafai@...com>, "yhs@...com" <yhs@...com>,
        "dhowells@...hat.com" <dhowells@...hat.com>
CC:     "keyrings@...r.kernel.org" <keyrings@...r.kernel.org>,
        "bpf@...r.kernel.org" <bpf@...r.kernel.org>,
        "netdev@...r.kernel.org" <netdev@...r.kernel.org>,
        "linux-kselftest@...r.kernel.org" <linux-kselftest@...r.kernel.org>,
        "linux-security-module@...r.kernel.org" 
        <linux-security-module@...r.kernel.org>,
        "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: RE: [PATCH v6 5/5] selftests/bpf: Add test for
 bpf_verify_pkcs7_signature() helper

> From: Roberto Sassu
> Sent: Tuesday, June 28, 2022 2:28 PM
> Ensure that signature verification is performed successfully from an eBPF
> program, with the new bpf_verify_pkcs7_signature() helper.
> 
> Generate a testing signature key and compile sign-file from scripts/, so
> that the test is selfcontained. Also, search for the tcb_bic.ko kernel
> module, parse it in user space to extract the raw PKCS#7 signature and send
> it to the eBPF program for signature verification. If tcb_bic.ko is not
> found, the test does not fail.

Ops, tcp_bic.ko.

Roberto