1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
/** @file
Provides a Secure Boot related data structure definitions.
Copyright (c) Microsoft Corporation.
SPDX-License-Identifier: BSD-2-Clause-Patent
**/
#ifndef UEFI_SECURE_BOOT_H_
#define UEFI_SECURE_BOOT_H_
#pragma pack (push, 1)
/*
Data structure to provide certificates to setup authenticated secure
boot variables ('db', 'dbx', 'dbt', 'pk', etc.).
*/
typedef struct {
//
// The size, in number of bytes, of supplied certificate in 'Data' field.
//
UINTN DataSize;
//
// The pointer to the certificates in DER-encoded format.
// Note: This certificate data should not contain the EFI_VARIABLE_AUTHENTICATION_2
// for authenticated variables.
//
CONST VOID *Data;
} SECURE_BOOT_CERTIFICATE_INFO;
/*
Data structure to provide all Secure Boot related certificates.
*/
typedef struct {
//
// The human readable name for this set of Secure Boot key sets.
//
CONST CHAR16 *SecureBootKeyName;
//
// The size, in number of bytes, of supplied certificate in 'DbPtr' field.
//
UINTN DbSize;
//
// The pointer to the DB certificates in signature list format.
// Note: This DB certificates should not contain the EFI_VARIABLE_AUTHENTICATION_2
// for authenticated variables.
//
CONST VOID *DbPtr;
//
// The size, in number of bytes, of supplied certificate in 'DbxPtr' field.
//
UINTN DbxSize;
//
// The pointer to the DBX certificates in signature list format.
// Note: This DBX certificates should not contain the EFI_VARIABLE_AUTHENTICATION_2
// for authenticated variables.
//
CONST VOID *DbxPtr;
//
// The size, in number of bytes, of supplied certificate in 'DbtPtr' field.
//
UINTN DbtSize;
//
// The pointer to the DBT certificates in signature list format.
// Note: This DBT certificates should not contain the EFI_VARIABLE_AUTHENTICATION_2
// for authenticated variables.
//
CONST VOID *DbtPtr;
//
// The size, in number of bytes, of supplied certificate in 'KekPtr' field.
//
UINTN KekSize;
//
// The pointer to the KEK certificates in signature list format.
// Note: This KEK certificates should not contain the EFI_VARIABLE_AUTHENTICATION_2
// for authenticated variables.
//
CONST VOID *KekPtr;
//
// The size, in number of bytes, of supplied certificate in 'PkPtr' field.
//
UINTN PkSize;
//
// The pointer to the PK certificates in signature list format.
// Note: This PK certificates should not contain the EFI_VARIABLE_AUTHENTICATION_2
// for authenticated variables.
//
CONST VOID *PkPtr;
} SECURE_BOOT_PAYLOAD_INFO;
#pragma pack (pop)
#endif // UEFI_SECURE_BOOT_H_
|
