Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.37 as permitted sender) client-ip=23.128.96.37;
From:   Dimitri John Ledkov <dimitri.ledkov@canonical.com>
To:     linux-modules@vger.kernel.org
Cc:     linux-kernel@vger.kernel.org
Subject: [PATCH] kmod: Add FIPS 202 SHA-3 support
Date:   Sun, 22 Oct 2023 19:09:28 +0100
Message-Id: <20231022180928.180437-1-dimitri.ledkov@canonical.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: bulk

Add support for parsing FIPS 202 SHA-3 signature hashes. Separately,
it is not clear why explicit hashes are re-encoded here, instead of
trying to generically show any digest openssl supports.

Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
---
 libkmod/libkmod-signature.c | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/libkmod/libkmod-signature.c b/libkmod/libkmod-signature.c
index b749a818f9..a39059cd7c 100644
--- a/libkmod/libkmod-signature.c
+++ b/libkmod/libkmod-signature.c
@@ -57,6 +57,9 @@ enum pkey_hash_algo {
 	PKEY_HASH_SHA512,
 	PKEY_HASH_SHA224,
 	PKEY_HASH_SM3,
+	PKEY_HASH_SHA3_256,
+	PKEY_HASH_SHA3_384,
+	PKEY_HASH_SHA3_512,
 	PKEY_HASH__LAST
 };
 
@@ -70,6 +73,9 @@ const char *const pkey_hash_algo[PKEY_HASH__LAST] = {
 	[PKEY_HASH_SHA512]	= "sha512",
 	[PKEY_HASH_SHA224]	= "sha224",
 	[PKEY_HASH_SM3]		= "sm3",
+	[PKEY_HASH_SHA3_256]	= "sha3-256",
+	[PKEY_HASH_SHA3_384]	= "sha3-384",
+	[PKEY_HASH_SHA3_512]	= "sha3-512",
 };
 
 enum pkey_id_type {
@@ -167,6 +173,12 @@ static int obj_to_hash_algo(const ASN1_OBJECT *o)
 	case NID_sm3:
 		return PKEY_HASH_SM3;
 # endif
+	case NID_sha3_256:
+		return PKEY_HASH_SHA3_256;
+	case NID_sha3_384:
+		return PKEY_HASH_SHA3_384;
+	case NID_sha3_512:
+		return PKEY_HASH_SHA3_512;
 	default:
 		return -1;
 	}
-- 
2.34.1