Re: [RFC][PATCH 3/6] verification: Introduce verify_umd_signature() and verify_umd_message_sig()

On Tue Apr 25, 2023 at 8:35 PM EEST, Roberto Sassu wrote:

From: Roberto Sassu roberto.sassu@huawei.com

Introduce verify_umd_signature() and verify_umd_message_sig(), to verify UMD-parsed signatures from detached data. It aims to be used by kernel subsystems wishing to verify the authenticity of system data, with system-defined keyrings as trust anchor.

UMD is not generic knowledge. It is a term coined up in this patch set so please open code it to each patch.

One discussion points should be what these handlers should be called. Right now the patch set is misleads the reader to think as this was some kind of "official" term and set to stone.

BR, Jarkko