1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
/** @file
Guid & data structure used for Device Security.
Copyright (c) 2024, Intel Corporation. All rights reserved.<BR>
SPDX-License-Identifier: BSD-2-Clause-Patent
**/
#ifndef EFI_DEVICE_AUTHENTICATION_GUID_H_
#define EFI_DEVICE_AUTHENTICATION_GUID_H_
/**
This is a signature database for device authentication, instead of image authentication.
The content of the signature database is same as the one in db/dbx. (a list of EFI_SIGNATURE_LIST)
**/
#define EFI_DEVICE_SIGNATURE_DATABASE_GUID \
{0xb9c2b4f4, 0xbf5f, 0x462d, 0x8a, 0xdf, 0xc5, 0xc7, 0xa, 0xc3, 0x5d, 0xad}
#define EFI_DEVICE_SECURITY_DATABASE L"devdb"
extern EFI_GUID gEfiDeviceSignatureDatabaseGuid;
/**
Signature Database:
+---------------------------------------+ <-----------------
| SignatureType (GUID) | |
+---------------------------------------+ |
| SignatureListSize (UINT32) | |
+---------------------------------------+ |
| SignatureHeaderSize (UINT32) | |
+---------------------------------------+ |
| SignatureSize (UINT32) | |-EFI_SIGNATURE_LIST (1)
+---------------------------------------+ |
| SignatureHeader (SignatureHeaderSize) | |
+---------------------------------------+ <-- |
| SignatureOwner (GUID) | | |
+---------------------------------------+ |-EFI_SIGNATURE_DATA (1)
| SignatureData (SignatureSize - 16) | | |
+---------------------------------------+ <-- |
| SignatureOwner (GUID) | | |
+---------------------------------------+ |-EFI_SIGNATURE_DATA (n)
| SignatureData (SignatureSize - 16) | | |
+---------------------------------------+ <-----------------
| SignatureType (GUID) | |
+---------------------------------------+ |
| SignatureListSize (UINT32) | |-EFI_SIGNATURE_LIST (n)
+---------------------------------------+ |
| ... | |
+---------------------------------------+ <-----------------
SignatureType := EFI_CERT_SHAxxx_GUID |
EFI_CERT_RSA2048_GUID |
EFI_CERT_RSA2048_SHAxxx_GUID |
EFI_CERT_X509_GUID |
EFI_CERT_X509_SHAxxx_GUID
(xxx = 256, 384, 512)
**/
#endif
|
