diff options
| author | AKASHI Takahiro <takahiro.akashi@linaro.org> | 2019-11-26 09:51:05 +0900 |
|---|---|---|
| committer | Heinrich Schuchardt <xypron.glpk@gmx.de> | 2020-01-07 18:08:19 +0100 |
| commit | 75fe571a4194ac26de7deffb2aa6db494596f58f (patch) | |
| tree | c25c313db059dc3ad04b87119b6596d6bfdd4912 /include | |
| parent | 72a60feab025dcf420f2b2137849d2f0bcbb13b5 (diff) | |
| download | u-boot-75fe571a4194ac26de7deffb2aa6db494596f58f.zip u-boot-75fe571a4194ac26de7deffb2aa6db494596f58f.tar.gz u-boot-75fe571a4194ac26de7deffb2aa6db494596f58f.tar.bz2 | |
include: pe.h: add signature-related definitions
The index (IMAGE_DIRECTORY_ENTRY_SECURITY) in a table points to
a region containing authentication information (image's signature)
in PE format.
WIN_CERTIFICATE structure defines an embedded signature format.
Those definitions will be used in my UEFI secure boot patch.
Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
Reviewed-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
Diffstat (limited to 'include')
| -rw-r--r-- | include/pe.h | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/include/pe.h b/include/pe.h index bff3b0a..086f2b8 100644 --- a/include/pe.h +++ b/include/pe.h @@ -155,6 +155,8 @@ typedef struct _IMAGE_SECTION_HEADER { uint32_t Characteristics; } IMAGE_SECTION_HEADER, *PIMAGE_SECTION_HEADER; +/* Indices for Optional Header Data Directories */ +#define IMAGE_DIRECTORY_ENTRY_SECURITY 4 #define IMAGE_DIRECTORY_ENTRY_BASERELOC 5 typedef struct _IMAGE_BASE_RELOCATION @@ -252,4 +254,20 @@ typedef struct _IMAGE_RELOCATION #define IMAGE_REL_AMD64_PAIR 0x000F #define IMAGE_REL_AMD64_SSPAN32 0x0010 +/* certificate appended to PE image */ +typedef struct _WIN_CERTIFICATE { + uint32_t dwLength; + uint16_t wRevision; + uint16_t wCertificateType; + uint8_t bCertificate[]; +} WIN_CERTIFICATE, *LPWIN_CERTIFICATE; + +/* Definitions for the contents of the certs data block */ +#define WIN_CERT_TYPE_PKCS_SIGNED_DATA 0x0002 +#define WIN_CERT_TYPE_EFI_OKCS115 0x0EF0 +#define WIN_CERT_TYPE_EFI_GUID 0x0EF1 + +#define WIN_CERT_REVISION_1_0 0x0100 +#define WIN_CERT_REVISION_2_0 0x0200 + #endif /* _PE_H */ |