Merge tag 'keys-next-20140922' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into next

2 files changed, 28 insertions, 7 deletions

diff --git a/include/linux/kernel.h b/include/linux/kernel.h
index 4c52907a6d8b..89a0b8e5a952 100644
--- a/include/linux/kernel.h
+++ b/include/linux/kernel.h
@@ -500,6 +500,7 @@ static inline char * __deprecated pack_hex_byte(char *buf, u8 byte)
 
 extern int hex_to_bin(char ch);
 extern int __must_check hex2bin(u8 *dst, const char *src, size_t count);
+extern char *bin2hex(char *dst, const void *src, size_t count);
 
 int mac_pton(const char *s, u8 *mac);
 
diff --git a/include/linux/key-type.h b/include/linux/key-type.h
index 44792ee649de..ff9f1d394235 100644
--- a/include/linux/key-type.h
+++ b/include/linux/key-type.h
@@ -53,6 +53,24 @@ typedef int (*request_key_actor_t)(struct key_construction *key,
                                    const char *op, void *aux);
 
 /*
+ * Preparsed matching criterion.
+ */
+struct key_match_data {
+        /* Comparison function, defaults to exact description match, but can be
+         * overridden by type->match_preparse().  Should return true if a match
+         * is found and false if not.
+         */
+        bool (*cmp)(const struct key *key,
+                    const struct key_match_data *match_data);
+
+        const void      *raw_data;      /* Raw match data */
+        void            *preparsed;     /* For ->match_preparse() to stash stuff */
+        unsigned        lookup_type;    /* Type of lookup for this search. */
+#define KEYRING_SEARCH_LOOKUP_DIRECT    0x0000  /* Direct lookup by description. */
+#define KEYRING_SEARCH_LOOKUP_ITERATE   0x0001  /* Iterative search. */
+};
+
+/*
  * kernel managed key type definition
  */
 struct key_type {
@@ -65,11 +83,6 @@ struct key_type {
          */
         size_t def_datalen;
 
-        /* Default key search algorithm. */
-        unsigned def_lookup_type;
-#define KEYRING_SEARCH_LOOKUP_DIRECT    0x0000  /* Direct lookup by description. */
-#define KEYRING_SEARCH_LOOKUP_ITERATE   0x0001  /* Iterative search. */
-
         /* vet a description */
         int (*vet_description)(const char *description);
 
@@ -96,8 +109,15 @@ struct key_type {
          */
         int (*update)(struct key *key, struct key_preparsed_payload *prep);
 
-        /* match a key against a description */
-        int (*match)(const struct key *key, const void *desc);
+        /* Preparse the data supplied to ->match() (optional).  The
+         * data to be preparsed can be found in match_data->raw_data.
+         * The lookup type can also be set by this function.
+         */
+        int (*match_preparse)(struct key_match_data *match_data);
+
+        /* Free preparsed match data (optional).  This should be supplied it
+         * ->match_preparse() is supplied. */
+        void (*match_free)(struct key_match_data *match_data);
 
         /* clear some of the data from a key on revokation (optional)
          * - the key's semaphore will be write-locked by the caller