From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qv1-f52.google.com (mail-qv1-f52.google.com [209.85.219.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id BD50E3A718C for ; Wed, 13 May 2026 18:36:20 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.219.52 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778697382; cv=none; b=Wx9joaJfIpn0xVVKamBrPmHWzAtkRyT3oSj3L/xK03cAlWbMhXdnUap6zM7UEy77IIrrtaZvVyP3j1fsOnaMjNOzZRw+/kTNsuF1MzEFA6jI76J/SS7VZRTE3zePKzSic54q+U20Sr5o3IjRKTmAsMWWL5k8wKXcMQwjUPAo5a8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778697382; c=relaxed/simple; bh=rM3smG6DhfmKq6u5uT72ezd1TJoaV7KpSoZfNmuAruM=; h=Date:Message-ID:MIME-Version:Content-Type:From:To:Subject: References:In-Reply-To; b=TwiELsdy2d1QE7NmPnpQiTIz3qGVD2wPBjyTwZuXZihprJjMNFA8rTzNx3jbE5deICF3ZjPJCHrG4lrYZD2+/CNQCLvY93SMLmFN4CXKI4R+qucXxrVJspr3vT9iv84raHaNzNxMmPt7xWjRNPobDI38hzNjw0z2ciYUy6BR4T8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com; spf=pass smtp.mailfrom=paul-moore.com; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b=Gtmd5QBD; arc=none smtp.client-ip=209.85.219.52 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b="Gtmd5QBD" Received: by mail-qv1-f52.google.com with SMTP id 6a1803df08f44-8b59772d441so70439336d6.0 for ; Wed, 13 May 2026 11:36:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore.com; s=google; t=1778697380; x=1779302180; darn=vger.kernel.org; h=in-reply-to:references:subject:to:from:content-transfer-encoding :mime-version:message-id:date:from:to:cc:subject:date:message-id :reply-to; bh=1aPyCkn8cjAjReTjdDgF7aPv74Q5Bw6zKWh4tDPFGek=; b=Gtmd5QBDZ96LdBQrMonh4NM6wrCOPcJkTO6LltdyRy1HT3UTsgLbOfeUUMoTQID8Rl /53IUUbkBOqAWGInrqbaislt696O2m70WGctNrWTZocHMbm3MUmiUrwPKfIS1SmfHYnd g0UBHSUc4ZHEAFoo601hVezxM/n84ux5WH7wRhYf8fP4AYqietaUNEZxBbc3esBmbhG8 cTACiCtJhXHHtgBQrHuS7G7WihSb3ltCFGy9i1Gc2KL36/scMcoNJ7hlUWgFybyUMtOk RnJgjdhKtxHW7sGxfVog2UjdjDwT2CjElxfBkprAlV+kc/UOgoEZg2JPfAKzp5ExwowF z7NA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778697380; x=1779302180; h=in-reply-to:references:subject:to:from:content-transfer-encoding :mime-version:message-id:date:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=1aPyCkn8cjAjReTjdDgF7aPv74Q5Bw6zKWh4tDPFGek=; b=aYFIak0upOzVOxZ151ChgjZz9rjmEgVp0D4lDSV6ZijmcXe72PaHSqWG4r4vIGZErh ZumCLU0kIDR/JeY9Fws4Ewj++HOWxkU0CoPvHLj7tc5FH/Q5zMqA8zAybCN7IZYbyz5P d4TKPxyUb9IMP8/WFH7TxhGKIY03RXL3p4MNpWP/hG1t90mzvmyRDq4vIgZaHQ/aik3o zpyllfk2YW2TPanbhWsUfIsmYilOE6dXozGBngT+DfB2vVjLL7r2SbeaRkUgFwTtL4SX TPml/Qcg/4345lKMYwgt0iz/XSp786rBByj0NiTbOYdGurb4NKlUwUfrFHWz88zaoG+z TN5Q== X-Forwarded-Encrypted: i=1; AFNElJ+4xIWt0/SDFuc7QfNcVprIiMjUMT7u9MN/TjWrGZQWcYd7hPDNac/xEapPKfDJ8C5ee381znrHXvI=@vger.kernel.org X-Gm-Message-State: AOJu0YxqfOeaMLW8ULoW3SlCUmlEPDdsm77gI0q45STjGRDmVoo2tx3N FdO65nk6jSuAa2HHNtjIGkZtrFGPkNACqGWAr2NguC7jdza6HI8r5hAzK/XTgXgQtA== X-Gm-Gg: Acq92OGlHJNB5AGFYxY5ICeuRv61qjNQZT1mwsPSGWHqi571lXzungOtvR++7WI03P5 UOSThbQFKoN9/uLZBW5/yjmmYDxicVufmeE6TiG7Ue6ssLdkgJpZvzAvIYfkQ7LT/PtdOjyTPEc UiQIkAiBcsYnK7o8qAVum4wUCLhuKy+LyhgoMwXIoUSZfSLSn1wPgof/NoUS4h7VraWT8Gh+QYU m41LEmBthuXpzBd7qHmykyyHMaBGoMCcAU7Ppr7Bv9pu0+0+gBUMFa088ZzSl4kERnWeZuPzHyI A6EmQPnxOqJo9msvsfXSrMJF9ir6ayMq9klTvWOk5+iSW4KDGgwcC0+wHJNJXCuinj3p5x8L5L+ iYSP+ymesaWkAcpwa8WXkW1jphZChjVP2ZVnmsgLn127WHdIR0TW8Sy6UhKIZ5aDSevGgQAbEQe vdoEK/sX3u5nVGuOJmlK3dYaWE0Xs0FDh6mTaGSNs2wcQLR9TCRdLYjXb6uiPdulSsplaTkjpok GwKQJI= X-Received: by 2002:a05:6214:5781:b0:8ac:b237:9fb5 with SMTP id 6a1803df08f44-8c7bd2d3297mr68869026d6.49.1778697379782; Wed, 13 May 2026 11:36:19 -0700 (PDT) Received: from localhost (pool-71-126-255-178.bstnma.fios.verizon.net. [71.126.255.178]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-8c908562d3csm3280956d6.4.2026.05.13.11.36.16 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 13 May 2026 11:36:16 -0700 (PDT) Date: Wed, 13 May 2026 14:36:16 -0400 Message-ID: <5c1eb7f77bb48eae4ace38a5b35d207d@paul-moore.com> Precedence: bulk X-Mailing-List: linux-doc@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Mailer: pstg-pwork:20260512_1604/pstg-lib:20260513_1343/pstg-pwork:20260512_1604 From: Paul Moore To: Blaise Boscaccy , "Blaise Boscaccy" , "Jonathan Corbet" , "" , "James Morris" , "Serge E. Hallyn" , =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= , =?UTF-8?q?G=C3=BCnther=20Noack?= , "Dr. David Alan Gilbert" , "Andrew Morton" , James.Bottomley@HansenPartnership.com, dhowells@redhat.com, "Fan Wu" , "Ryan Foster" , "Randy Dunlap" , linux-security-module@vger.kernel.org, linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org, bpf@vger.kernel.org, "Song Liu" Subject: Re: [PATCH v7 7/10] hornet: Introduce gen_sig References: <20260507191416.2984054-8-bboscaccy@linux.microsoft.com> In-Reply-To: <20260507191416.2984054-8-bboscaccy@linux.microsoft.com> On May 7, 2026 Blaise Boscaccy wrote: > > This introduces the gen_sig tool. It creates a pkcs#7 signature of a > data payload. Additionally it appends a signed attribute containing a > set of hashes. > > Typical usage is to provide a payload containing the light skeleton > ebpf syscall program binary and it's associated maps, which can be > extracted from the auto-generated skeleton header. > > Signed-off-by: Blaise Boscaccy > --- > scripts/Makefile | 1 + > scripts/hornet/Makefile | 5 + > scripts/hornet/gen_sig.c | 401 ++++++++++++++++++++++++++++++++++++ > scripts/hornet/write-sig.sh | 27 +++ > 4 files changed, 434 insertions(+) > create mode 100644 scripts/hornet/Makefile > create mode 100644 scripts/hornet/gen_sig.c > create mode 100755 scripts/hornet/write-sig.sh Merged into lsm/dev, but I did add a .gitignore for scripts/hornet/ and I fixed up the SPDX tag (it wants C++ style comments). -- paul-moore.com