Re: [PATCH v3 2/3] tools: binman: Replace 'fit,sign' by 'fit,keys-directory'

2024-11-21 Thread Alexander Kochetkov
Here how I understand Simon’s answer. He suggested to introduce new property like ‘fit,encrypt’. And if you see that property, then you enable keys detection (and so you enable encryption). Regarding you current (v3) implementation. I would call the new property as ‘fit,detect-keys-directory’ as

Re: [PATCH v3 2/3] tools: binman: Replace 'fit,sign' by 'fit,keys-directory'

2024-11-21 Thread Paul HENRYS
Hi Simon, On 20/11/2024 14:35, Simon Glass wrote: This Mail comes from Outside of SoftAtHome: Do not answer, click links or open attachments unless you recognize the sender and know the content is safe. Hi Paul, On Wed, 20 Nov 2024 at 03:09, Paul HENRYS wrote: mkimage can be used for both s

Re: [PATCH v3 2/3] tools: binman: Replace 'fit, sign' by 'fit, keys-directory'

2024-11-20 Thread Simon Glass
Hi Paul, On Wed, 20 Nov 2024 at 03:09, Paul HENRYS wrote: > > mkimage can be used for both signing the FIT or encrypt its content and the > option '-k' can be used to pass a directory where both signing and encryption > keys can be retrieved. > _get_priv_keys_dir() is also renamed as _get_keys_di

[PATCH v3 2/3] tools: binman: Replace 'fit, sign' by 'fit, keys-directory'

2024-11-20 Thread Paul HENRYS
mkimage can be used for both signing the FIT or encrypt its content and the option '-k' can be used to pass a directory where both signing and encryption keys can be retrieved. _get_priv_keys_dir() is also renamed as _get_keys_dir() and adapted to support both signing and encryption nodes in the FI