Re: [PATCH v7 4/4] ima: Support EC keys for signature verification

From: Mimi Zohar
Date: Fri Feb 05 2021 - 07:30:01 EST


On Mon, 2021-02-01 at 10:19 -0500, Stefan Berger wrote:
> Add support for IMA signature verification for EC keys. Since SHA type
> of hashes can be used by RSA and ECDSA signature schemes we need to
> look at the key and derive from the key which signature scheme to use.
> Since this can be applied to all types of keys, we change the selection
> of the encoding type to be driven by the key's signature scheme rather
> than by the hash type.
>
> Signed-off-by: Stefan Berger <stefanb@xxxxxxxxxxxxx>
> Reviewed-by: Vitaly Chikunov <vt@xxxxxxxxxxxx>
> Reviewed-by: Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx>

Thanks, Stefan!

Acked-by: Mimi Zohar <zohar@xxxxxxxxxxxxx>