Add security package to repository.

git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@12261 6f19259b-4bc3-4df7-8a09-765794883524

1 files changed, 209 insertions, 0 deletions

diff --git a/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.h b/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.h
new file mode 100644
index 0000000000..6b0db74c81
--- /dev/null
+++ b/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.h
@@ -0,0 +1,209 @@
+/** @file

+  The internal header file includes the common header files, defines

+  internal structure and functions used by AuthService module.

+

+Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.<BR>

+This program and the accompanying materials 

+are licensed and made available under the terms and conditions of the BSD License 

+which accompanies this distribution.  The full text of the license may be found at 

+http://opensource.org/licenses/bsd-license.php

+

+THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS, 

+WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

+

+**/

+

+#ifndef _AUTHSERVICE_H_

+#define _AUTHSERVICE_H_

+

+#define EFI_CERT_TYPE_RSA2048_SHA256_SIZE 256

+#define EFI_CERT_TYPE_RSA2048_SIZE        256

+

+///

+/// Size of AuthInfo prior to the data payload

+///

+#define AUTHINFO_SIZE (((UINTN)(((EFI_VARIABLE_AUTHENTICATION *) 0)->AuthInfo.CertData)) + sizeof (EFI_CERT_BLOCK_RSA_2048_SHA256))

+

+///

+/// "AuthVarKeyDatabase" variable for the Public Key store.

+///

+#define AUTHVAR_KEYDB_NAME      L"AuthVarKeyDatabase"

+#define AUTHVAR_KEYDB_NAME_SIZE 38

+

+///

+/// Max size of public key database, restricted by max individal EFI varible size, exclude variable header and name size.

+///

+#define MAX_KEYDB_SIZE  (FixedPcdGet32 (PcdMaxVariableSize) - sizeof (VARIABLE_HEADER) - AUTHVAR_KEYDB_NAME_SIZE)

+#define MAX_KEY_NUM     (MAX_KEYDB_SIZE / EFI_CERT_TYPE_RSA2048_SIZE)

+

+///

+/// Item number of support signature types.

+///

+#define SIGSUPPORT_NUM 2

+

+

+/**

+  Process variable with EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS/EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS set.

+

+  @param[in]  VariableName                Name of Variable to be found.

+  @param[in]  VendorGuid                  Variable vendor GUID.

+

+  @param[in]  Data                        Data pointer.

+  @param[in]  DataSize                    Size of Data found. If size is less than the

+                                          data, this value contains the required size.

+  @param[in]  Variable                    The variable information which is used to keep track of variable usage.

+  @param[in]  Attributes                  Attribute value of the variable.

+

+  @return EFI_INVALID_PARAMETER           Invalid parameter

+  @return EFI_WRITE_PROTECTED             Variable is write-protected and needs authentication with

+                                          EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS set.

+  @return EFI_SECURITY_VIOLATION          The variable is with EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS

+                                          set, but the AuthInfo does NOT pass the validation 

+                                          check carried out by the firmware. 

+  @return EFI_SUCCESS                     Variable is not write-protected, or passed validation successfully.

+

+**/

+EFI_STATUS

+ProcessVariable (

+  IN     CHAR16                             *VariableName,

+  IN     EFI_GUID                           *VendorGuid,

+  IN     VOID                               *Data,

+  IN     UINTN                              DataSize,

+  IN     VARIABLE_POINTER_TRACK             *Variable,

+  IN     UINT32                             Attributes

+  );

+

+/**

+  Initializes for authenticated varibale service.

+

+  @retval EFI_SUCCESS           Function successfully executed.

+  @retval EFI_OUT_OF_RESOURCES  Fail to allocate enough memory resource.

+

+**/

+EFI_STATUS

+AutenticatedVariableServiceInitialize (

+  VOID

+  );

+

+/**

+  Initializes for cryptlib service before use, include register algrithm and allocate scratch.

+

+**/

+VOID

+CryptLibraryInitialize (

+  VOID

+  );

+

+/**

+  Process variable with platform key for verification.

+

+  @param[in]  VariableName                Name of Variable to be found.

+  @param[in]  VendorGuid                  Variable vendor GUID.

+  @param[in]  Data                        Data pointer.

+  @param[in]  DataSize                    Size of Data found. If size is less than the

+                                          data, this value contains the required size.

+  @param[in]  Variable                    The variable information which is used to keep track of variable usage.

+  @param[in]  Attributes                  Attribute value of the variable.

+  @param[in]  IsPk                        Indicate whether it is to process pk.

+

+  @return EFI_INVALID_PARAMETER           Invalid parameter

+  @return EFI_SECURITY_VIOLATION          The variable does NOT pass the validation 

+                                          check carried out by the firmware. 

+  @return EFI_SUCCESS                     Variable passed validation successfully.

+

+**/

+EFI_STATUS

+ProcessVarWithPk (

+  IN  CHAR16                    *VariableName,

+  IN  EFI_GUID                  *VendorGuid,

+  IN  VOID                      *Data,

+  IN  UINTN                     DataSize,

+  IN  VARIABLE_POINTER_TRACK    *Variable,

+  IN  UINT32                    Attributes OPTIONAL,

+  IN  BOOLEAN                   IsPk

+  );

+

+/**

+  Process variable with key exchange key for verification.

+

+  @param[in]  VariableName                Name of Variable to be found.

+  @param[in]  VendorGuid                  Variable vendor GUID.

+  @param[in]  Data                        Data pointer.

+  @param[in]  DataSize                    Size of Data found. If size is less than the

+                                          data, this value contains the required size.

+  @param[in]  Variable                    The variable information that is used to keep track of variable usage.

+  @param[in]  Attributes                  Attribute value of the variable.

+

+  @return EFI_INVALID_PARAMETER           Invalid parameter.

+  @return EFI_SECURITY_VIOLATION          The variable does NOT pass the validation 

+                                          check carried out by the firmware. 

+  @return EFI_SUCCESS                     Variable passed validation successfully.

+

+**/

+EFI_STATUS

+ProcessVarWithKek (

+  IN  CHAR16                    *VariableName,

+  IN  EFI_GUID                  *VendorGuid,

+  IN  VOID                      *Data,

+  IN  UINTN                     DataSize,

+  IN  VARIABLE_POINTER_TRACK    *Variable,

+  IN  UINT32                    Attributes OPTIONAL

+  );

+

+/**

+  Compare two EFI_TIME data.

+

+

+  @param FirstTime           A pointer to the first EFI_TIME data.

+  @param SecondTime          A pointer to the second EFI_TIME data.

+

+  @retval  TRUE              The FirstTime is not later than the SecondTime.

+  @retval  FALSE             The FirstTime is later than the SecondTime.

+

+**/

+BOOLEAN

+CompareTimeStamp (

+  IN EFI_TIME               *FirstTime,

+  IN EFI_TIME               *SecondTime

+  );

+

+

+/**

+  Process variable with EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS set

+

+  @param[in]  VariableName                Name of Variable to be found.

+  @param[in]  VendorGuid                  Variable vendor GUID.

+  @param[in]  Data                        Data pointer.

+  @param[in]  DataSize                    Size of Data found. If size is less than the

+                                          data, this value contains the required size.

+  @param[in]  Variable                    The variable information which is used to keep track of variable usage.

+  @param[in]  Attributes                  Attribute value of the variable.

+  @param[in]  Pk                          Verify against PK or KEK database.

+  @param[out] VarDel                      Delete the variable or not.

+

+  @retval EFI_INVALID_PARAMETER           Invalid parameter.

+  @retval EFI_SECURITY_VIOLATION          The variable does NOT pass the validation 

+                                          check carried out by the firmware. 

+  @retval EFI_OUT_OF_RESOURCES            Failed to process variable due to lack

+                                          of resources.

+  @retval EFI_SUCCESS                     Variable pass validation successfully.

+

+**/

+EFI_STATUS

+VerifyTimeBasedPayload (

+  IN     CHAR16                             *VariableName,

+  IN     EFI_GUID                           *VendorGuid,

+  IN     VOID                               *Data,

+  IN     UINTN                              DataSize,

+  IN     VARIABLE_POINTER_TRACK             *Variable,

+  IN     UINT32                             Attributes,

+  IN     BOOLEAN                            Pk,

+  OUT    BOOLEAN                            *VarDel

+  );

+

+extern UINT8  mPubKeyStore[MAX_KEYDB_SIZE];

+extern UINT32 mPubKeyNumber;

+extern VOID   *mHashCtx;

+extern VOID   *mStorageArea;

+  

+#endif