{"id":2175908,"url":"http://patchwork.ozlabs.org/api/1.0/patches/2175908/?format=json","project":{"id":58,"url":"http://patchwork.ozlabs.org/api/1.0/projects/58/?format=json","name":"swupdate development","link_name":"swupdate","list_id":"swupdate.googlegroups.com","list_email":"swupdate@googlegroups.com","web_url":"https://github.com/sbabic/swupdate","scm_url":"git://github.com/sbabic/swupdate","webscm_url":""},"msgid":"<20251219112215.103862-2-bage@debian.org>","date":"2025-12-19T11:21:56","name":"[1/5] crypto: Add swupdate_pkcs11.h","commit_ref":null,"pull_url":null,"state":"accepted","archived":false,"hash":"7862155bd0f262d7c234b508df7577866794d496","submitter":{"id":84118,"url":"http://patchwork.ozlabs.org/api/1.0/people/84118/?format=json","name":"Bastian Germann","email":"bage@debian.org"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/swupdate/patch/20251219112215.103862-2-bage@debian.org/mbox/","series":[{"id":485984,"url":"http://patchwork.ozlabs.org/api/1.0/series/485984/?format=json","date":"2025-12-19T11:22:00","name":"pkcs11 decrypt provider based on p11-kit","version":1,"mbox":"http://patchwork.ozlabs.org/series/485984/mbox/"}],"check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2175908/checks/","tags":{},"headers":{"Return-Path":"<swupdate+bncBCN5N5NJZ4BBB3XKSTFAMGQEK7WHLAA@googlegroups.com>","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=googlegroups.com header.i=@googlegroups.com\n header.a=rsa-sha256 header.s=20230601 header.b=TY6Tgn47;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=googlegroups.com\n (client-ip=2a00:1450:4864:20::23a; helo=mail-lj1-x23a.google.com;\n envelope-from=swupdate+bncbcn5n5njz4bbb3xkstfamgqek7whlaa@googlegroups.com;\n receiver=patchwork.ozlabs.org)"],"Received":["from mail-lj1-x23a.google.com (mail-lj1-x23a.google.com\n [IPv6:2a00:1450:4864:20::23a])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4dXlW96K6Fz1y3v\n\tfor <incoming@patchwork.ozlabs.org>; Fri, 19 Dec 2025 22:22:28 +1100 (AEDT)","by mail-lj1-x23a.google.com with SMTP id\n 38308e7fff4ca-37fd877f38asf7717511fa.3\n        for <incoming@patchwork.ozlabs.org>;\n Fri, 19 Dec 2025 03:22:28 -0800 (PST)","by 2002:a2e:87ce:0:b0:37f:b03b:76e5 with SMTP id\n 38308e7fff4ca-37fcf0fedd2ls14355951fa.2.-pod-prod-02-eu;\n Fri, 19 Dec 2025 03:22:20 -0800 (PST)","from stravinsky.debian.org (stravinsky.debian.org.\n [2001:41b8:202:deb::311:108])\n        by gmr-mx.google.com with ESMTPS id\n 38308e7fff4ca-3812260eac9si315391fa.7.2025.12.19.03.22.20\n        for <swupdate@googlegroups.com>\n        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n        Fri, 19 Dec 2025 03:22:20 -0800 (PST)","from authenticated user\n\tby stravinsky.debian.org with esmtpsa\n (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)\n\t(Exim 4.94.2)\n\t(envelope-from <bage@debian.org>)\n\tid 1vWYYt-003BXg-PM; Fri, 19 Dec 2025 11:22:19 +0000"],"ARC-Seal":["i=2; a=rsa-sha256; t=1766143345; cv=pass;\n        d=google.com; s=arc-20240605;\n        b=kOx3IqqGnMT/uWthQTLnbyZ+QIMMyYftvD2UYtb0xmT9zGRg3kvx4pjHm9gtC74/2l\n         qtYF63prdIjbdsAA25KL9WHFrcosUlvye790PfZgHYuQcrcjqHRFvutpLhN0u2agz9Vh\n         7lRfmcDwzncJ2FRTIkJ/oTJ87vDyzFI4jTy/fZoXhZVqLQ02WqnAq+0HZ7X7Pqj36nvW\n         T32zB9acGn5REgn9W20LT7VlAt1Ml4tnSbUVGEeGjo9z7uwqBx2DBivXkK7XtncZ4a3b\n         P9y0NtP7vK9VV7CylbRFKlx/xrckLgwlFVXSz0QosgGRMD3p3Qs/1lp8qDLcwaYlsniD\n         GlOg==","i=1; a=rsa-sha256; t=1766143340; cv=none;\n        d=google.com; s=arc-20240605;\n        b=G8B70Sv5pNWsRGuCb2Rc8fqyhxkHrtktTepkhqiEkfGPKuIaoGkbLZOz4bdZ0sEHC0\n         VoObGfP70kPaj9c5wqH80chRmDsk/32x7yNJlesiMeyFK/yAsZgWL7Z2TnEZ4m5O8Azg\n         J924K4LfQn6PRyskMURwFijpaY3nzrT65K+jhraKhbwqr5q4dMeKrWy2kgqMezxKWWK6\n         uA6PY9ijXucE/tuhtfEd7ORkddvfCp79o5gvysg1+HYJKUv8LP3Cac3LSdnPNIkW3uNV\n         tZtnTHSyhHAInSd3CU9iiKsIg6pubHKfK8K1dWHVlyo3PAqkGUXwh5iy8Whn0RSTGCK7\n         NjSw=="],"ARC-Message-Signature":["i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com;\n s=arc-20240605;\n        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post\n         :list-id:mailing-list:precedence:mime-version:references:in-reply-to\n         :message-id:date:subject:cc:to:from:sender:dkim-signature;\n        bh=J8Q8QNx6vhRVms1nzPKktxYRR/ZsUJwCBcPIXt/c/Zs=;\n        fh=sUj1NxF3OFofUE0JNPUQoV0hYmV/mTF0cjAZGiR1gyI=;\n        b=iqKvojHko9epxGunNk/pJe3ghK0iAxcM3fWzQkTCbJks4uYtwEa7w6vsl8aFJHABGf\n         RckR8iUO1iven7BMSLcuJPAOszWz50i5Ff1DkpQXVUpfgzMTIbfdY19OWTz1O/0WDuxj\n         4aoV60Y0D2YNWCXS+QnB8tPYRUrD1q/ajZpDhjf6BdrLCLGuOxTocOJQXpxXti0MaDM0\n         yoWycURpWvGKy0W/KEehRnB3BCXvPxK7DITmzKIxk3KzcxE7Tg63dFlOCyrTxHPSIeNV\n         sbpO5NwGDkBGMP62CE8L+feM95CiyxixN+D43p23ElEHCHINVZTza6UlOXu0BYqOKJvz\n         jpCw==;\n        darn=patchwork.ozlabs.org","i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;\n s=arc-20240605;\n        h=content-transfer-encoding:mime-version:references:in-reply-to\n         :message-id:date:subject:cc:to:from:dkim-signature;\n        bh=We2GDwwe+Um8L07Lpyh8f/Rm/WoIqiNsBJzzEJdCue0=;\n        fh=uhIbdHOwgcqt5kz5/YMvH8NrIswTHi9fiDBkOU8HgOo=;\n        b=G8VecWooG94dagt7Hq+GGea5eLsxcOvadi8LeTpDJuE0ygT5eh41xrzmd6RTcOPVOw\n         cvS/vUf3cH9ryFu3UXA7sq2twSwKcnIWIicUEkJfZ4oHJlR9sWSD1nNF3C1AAz7Jn1X2\n         lG6J3/y1FoiX3C9hUtFXfUiQ1vr/y2cOz06zNfrTXvWFjNupFWV75+NxO2BEq5hgWvRM\n         pHtRyYAPPWa/3bhJXxAEwmG0sr1JAxCR3S2dQpiZzQASb4S9KdesAWljC3R3O4iqJyu+\n         QKJ02PIUGK4J7H8hYIZoSPNoeG+I0OXRmPsv+TNNYkQI8Q3SWqC1tciSp/ZtULzjHxfp\n         f58A==;\n        dara=google.com"],"ARC-Authentication-Results":["i=2; gmr-mx.google.com;\n       dkim=pass header.i=@debian.org header.s=smtpauto.stravinsky\n header.b=drxhwTgv;\n       spf=none (google.com: bage@debian.org does not designate permitted\n sender hosts) smtp.mailfrom=bage@debian.org","i=1; gmr-mx.google.com;\n       dkim=pass header.i=@debian.org header.s=smtpauto.stravinsky\n header.b=drxhwTgv;\n       spf=none (google.com: bage@debian.org does not designate permitted\n sender hosts) smtp.mailfrom=bage@debian.org"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n        d=googlegroups.com; s=20230601; t=1766143345; x=1766748145;\n darn=patchwork.ozlabs.org;\n        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post\n         :list-id:mailing-list:precedence:x-original-authentication-results\n         :x-original-sender:mime-version:references:in-reply-to:message-id\n         :date:subject:cc:to:from:sender:from:to:cc:subject:date:message-id\n         :reply-to;\n        bh=J8Q8QNx6vhRVms1nzPKktxYRR/ZsUJwCBcPIXt/c/Zs=;\n        b=TY6Tgn476DnwtWc7xuMlMmzWPzmxEWFB1ymR38GJ6+qHVG2P3GocIcn1+H+FobxdDc\n         NHbgrpa4B/0OHEo8wJex+bDbExnMzSVS70u9wHDrOFJfSHeKdPcFqYibUfBdkjaiYteD\n         JynJb2KWUnWQ75Sk58KQIc3JWbVcgOQOd5iMgNq1i7B7K8ijqT3IYKLcGAQlepv06ZJI\n         oZohVz0Lqy3RIYRpjiTRUWL7khNnxm3MxdEDMMnuiz4ubQm0w8ktiFms50R+tz7pROCk\n         /Ko3vh79IidT4Norrw9r3mUGlXBBeoN4MI8qJ23+cHlTiu+a8jp6DqDw8OCQpRURrJJ8\n         QLsA==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n        d=1e100.net; s=20230601; t=1766143345; x=1766748145;\n        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post\n         :x-spam-checked-in-group:list-id:mailing-list:precedence\n         :x-original-authentication-results:x-original-sender:mime-version\n         :references:in-reply-to:message-id:date:subject:cc:to:from\n         :x-beenthere:x-gm-message-state:sender:from:to:cc:subject:date\n         :message-id:reply-to;\n        bh=J8Q8QNx6vhRVms1nzPKktxYRR/ZsUJwCBcPIXt/c/Zs=;\n        b=N64M/tqsigjDbVVnuim8ZL9e1KGmmOCyb2/rF0HxL0te7EhoKsffj5Rk0knBUCyC6O\n         cshGdr4HWi1YZHkpSY1/1XJRwuJepBvHhU3KULu+Qm+WnsWy5uoBpwDnHom/vYmKW1KL\n         a1TDZ5peNTl7J488MoR/JhanLZ0hzQ9YF8BOOY/wcqeCBM1mx6QbRmL6mzDFIzxeibPB\n         9ujh/g3ymUIp0gPezq6WX8r/SSTckoaFaANt+lSLL/rLgrshysCe+omqr59iFYq9eBVh\n         yyvbZJf1MZ0sFId6MtAtHGPsbsUZ0LVXmTAGrrSgv1Hm76/6FN9lpJGwI+ft6DRYvVI5\n         xiag==","Sender":"swupdate@googlegroups.com","X-Forwarded-Encrypted":"i=2;\n AJvYcCVtVM16Ucreilf805fMM3vekMcvYWCYi83clq6IezXLW3yrhiieyNiqutll+xUkE0z97h7qjLq1Ew==@patchwork.ozlabs.org","X-Gm-Message-State":"AOJu0YwYgSZLth7cM3B9FZMJG3WRUcFVP9NtUqScisY58kejPTCAvEXc\n\t1MKqNRD0PoYiTCuF6UXAfNC49QE70xa8VHrHdO8+kxztTpoWcNK/snZV","X-Google-Smtp-Source":"\n AGHT+IEwhiVxG4rFc70F0OvN7MyEzOdsQ6kV0JutfI3FGXga0no7+SKO4MdbyMW3VnFql78o+g/X/w==","X-Received":["by 2002:a05:651c:3244:b0:37f:c5ca:a0dc with SMTP id\n 38308e7fff4ca-3812155316dmr7477671fa.9.1766143345470;\n        Fri, 19 Dec 2025 03:22:25 -0800 (PST)","by 2002:a2e:be28:0:b0:380:989:f5fb with SMTP id\n 38308e7fff4ca-381212fd26amr7242611fa.0.1766143340166;\n        Fri, 19 Dec 2025 03:22:20 -0800 (PST)"],"X-BeenThere":"swupdate@googlegroups.com;\n h=\"AWVwgWbDS19CjOUMCMqbe2PQX8hfquT1gq2wAfVM3YVn9udhFw==\"","Received-SPF":"none (google.com: bage@debian.org does not designate permitted\n sender hosts) client-ip=2001:41b8:202:deb::311:108;","From":"Bastian Germann <bage@debian.org>","To":"swupdate@googlegroups.com","Cc":"Bastian Germann <bage@debian.org>,\n\tzachar.matej@gmail.com","Subject":"[swupdate] [PATCH 1/5] crypto: Add swupdate_pkcs11.h","Date":"Fri, 19 Dec 2025 12:21:56 +0100","Message-ID":"<20251219112215.103862-2-bage@debian.org>","X-Mailer":"git-send-email 2.51.0","In-Reply-To":"<20251219112215.103862-1-bage@debian.org>","References":"<20251219112215.103862-1-bage@debian.org>","MIME-Version":"1.0","X-Debian-User":"bage","X-Original-Sender":"bage@debian.org","X-Original-Authentication-Results":"gmr-mx.google.com;       dkim=pass\n header.i=@debian.org header.s=smtpauto.stravinsky header.b=drxhwTgv;\n       spf=none (google.com: bage@debian.org does not designate permitted\n sender hosts) smtp.mailfrom=bage@debian.org","Content-Type":"text/plain; charset=\"UTF-8\"","Precedence":"list","Mailing-list":"list swupdate@googlegroups.com;\n contact swupdate+owners@googlegroups.com","List-ID":"<swupdate.googlegroups.com>","X-Spam-Checked-In-Group":"swupdate@googlegroups.com","X-Google-Group-Id":"605343134186","List-Post":"<https://groups.google.com/group/swupdate/post>,\n <mailto:swupdate@googlegroups.com>","List-Help":"<https://groups.google.com/support/>,\n <mailto:swupdate+help@googlegroups.com>","List-Archive":"<https://groups.google.com/group/swupdate","List-Subscribe":"<https://groups.google.com/group/swupdate/subscribe>,\n <mailto:swupdate+subscribe@googlegroups.com>","List-Unsubscribe":"\n <mailto:googlegroups-manage+605343134186+unsubscribe@googlegroups.com>,\n <https://groups.google.com/group/swupdate/subscribe>"},"content":"Add a header importing p11-kit stuff that is used for another PKCS#11\nimplementation.\n\nSigned-off-by: Bastian Germann <bage@debian.org>\n---\n crypto/swupdate_pkcs11.h | 22 ++++++++++++++++++++++\n 1 file changed, 22 insertions(+)\n create mode 100644 crypto/swupdate_pkcs11.h","diff":"diff --git a/crypto/swupdate_pkcs11.h b/crypto/swupdate_pkcs11.h\nnew file mode 100644\nindex 00000000..5658dc88\n--- /dev/null\n+++ b/crypto/swupdate_pkcs11.h\n@@ -0,0 +1,22 @@\n+/*\n+ * (C) Copyright 2025\n+ * Bastian Germann\n+ *\n+ * SPDX-License-Identifier:     GPL-2.0-only\n+ */\n+\n+#pragma once\n+\n+#include <p11-kit/uri.h>\n+#include <p11-kit/p11-kit.h>\n+\n+#include \"util.h\"\n+\n+struct pkcs11_digest {\n+\tP11KitUri *uri;\n+\tCK_FUNCTION_LIST_PTR module;\n+\tCK_SESSION_HANDLE session;\n+\tCK_MECHANISM mechanism;\n+\tCK_BYTE iv[AES_BLK_SIZE];\n+\tCK_BYTE last[AES_BLK_SIZE + 1];\n+};\n","prefixes":["1/5"]}