Changeset 86610 in vbox for trunk/include/iprt/crypto

Timestamp:

Oct 16, 2020 2:34:15 PM (5 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

140983

Message:

SUPHArdNt,IPRT: Recognize WHQL/attestation signatures from MS. Corrected RTCRX509TBSCERTIFICATE::T3::fExtKeyUsage type (32 -> 64 bit) as it has been to small for a while now. bugref:3103

File:

• trunk/include/iprt/crypto/x509.h (modified) (3 diffs)

trunk/include/iprt/crypto/x509.h

@@ -779 +779 @@
         /** The unique identifier value. */
         RTCRX509EXTENSIONS              Extensions;
-        /** Extensions summary flags. */
+        /** Extensions summary flags (RTCRX509TBSCERTIFICATE_F_PRESENT_XXX). */
         uint32_t                        fFlags;
-        /** Key usage flags. */
+        /** Key usage flags (RTCRX509CERT_KEY_USAGE_F_XXX). */
         uint32_t                        fKeyUsage;
-        /** Extended key usage flags. */
-        uint32_t                        fExtKeyUsage;
+        /** Extended key usage flags (RTCRX509CERT_EKU_F_XXX). */
+        uint64_t                        fExtKeyUsage;
 
         /** Pointer to the authority key ID extension if present. */
@@ -899 +899 @@
 #define RTCRX509CERT_EKU_F_MS_DRM                           RT_BIT_64(38)
 #define RTCRX509CERT_EKU_F_MS_DRM_INDIVIDUALIZATION         RT_BIT_64(39)
+#define RTCRX509CERT_EKU_F_MS_WHQL_CRYPTO                   RT_BIT_64(40)
+#define RTCRX509CERT_EKU_F_MS_ATTEST_WHQL_CRYPTO            RT_BIT_64(41)
 /** @} */
 
@@ -928 +930 @@
 #define RTCRX509_MS_EKU_ENCRYPTED_FILE_SYSTEM_OID           "1.3.6.1.4.1.311.10.3.4"
 #define RTCRX509_MS_EKU_WHQL_CRYPTO_OID                     "1.3.6.1.4.1.311.10.3.5"
+#define RTCRX509_MS_EKU_ATTEST_WHQL_CRYPTO_OID              "1.3.6.1.4.1.311.10.3.5.1"
 #define RTCRX509_MS_EKU_NT5_CRYPTO_OID                      "1.3.6.1.4.1.311.10.3.6"
 #define RTCRX509_MS_EKU_OEM_WHQL_CRYPTO_OID                 "1.3.6.1.4.1.311.10.3.7"