• Marek Behún's avatar
    firmware: turris-mox-rwtm: support ECDSA signatures via debugfs · 50524d78
    Marek Behún authored
    The firmware on Turris MOX secure processor offers signing messages
    with ECDSA private key stored in protected OTP memory.
    
    The optimal solution would be to register an akcipher provider via
    kernel's crypto API, but crypto API does not yet support accessing
    akcipher API from userspace (and probably won't for some time, see
    https://www.spinics.net/lists/linux-crypto/msg38388.html).
    
    At first I tried to put this via standard sysfs API, but the way I
    designed it is not compatible with sysfs's standard "one file per
    attribute".
    
    This patch therefore adds support for accessing this signature
    generation mechanism via debugfs. Since CZ.NIC's Turris MOX is the only
    user of this module, the potential future change to akcipher API should
    not cause problems, since we can just change our userspace software then.
    Signed-off-by: default avatarMarek Behún <marek.behun@nic.cz>
    Signed-off-by: default avatarGregory CLEMENT <gregory.clement@bootlin.com>
    50524d78
turris-mox-rwtm.c 13 KB