Re: [U-Boot] RSA in U-Boot

2019-08-27 Thread AKASHI Takahiro
Hi Grant, On Tue, Aug 27, 2019 at 10:35:37AM +, Grant Likely wrote: > Hi Takahiro, > > On 17/05/2019 01:12, AKASHI Takahiro wrote: > [...] > > In fact, I have already imported relevant kernel code into U-Boot > > and it now works perfectly with my experimental UEFI secure boot patch, > > Spe

Re: [U-Boot] RSA in U-Boot

2019-08-27 Thread Grant Likely
Hi Takahiro, On 17/05/2019 01:12, AKASHI Takahiro wrote: [...] > In fact, I have already imported relevant kernel code into U-Boot > and it now works perfectly with my experimental UEFI secure boot patch, Speaking of which, where can I find the experimental UEFI secure boot patches? I've not bee

Re: [U-Boot] RSA in U-Boot

2019-06-05 Thread Tom Rini
On Wed, Jun 05, 2019 at 02:27:32PM +0900, AKASHI Takahiro wrote: > Tom, Wolfgang, > > On Wed, May 22, 2019 at 02:48:42PM +0900, AKASHI Takahiro wrote: > > Wolfgang, > > > > Thank you for your comments. > > > > On Fri, May 17, 2019 at 10:47:56AM +0200, Wolfgang Denk wrote: > > > Dear Akashi Takah

Re: [U-Boot] RSA in U-Boot

2019-06-04 Thread AKASHI Takahiro
Tom, Wolfgang, On Wed, May 22, 2019 at 02:48:42PM +0900, AKASHI Takahiro wrote: > Wolfgang, > > Thank you for your comments. > > On Fri, May 17, 2019 at 10:47:56AM +0200, Wolfgang Denk wrote: > > Dear Akashi Takahiro, > > > > In message <20190517001206.gx11...@linaro.org> you wrote: > > > > > >

Re: [U-Boot] RSA in U-Boot

2019-05-21 Thread AKASHI Takahiro
Wolfgang, Thank you for your comments. On Fri, May 17, 2019 at 10:47:56AM +0200, Wolfgang Denk wrote: > Dear Akashi Takahiro, > > In message <20190517001206.gx11...@linaro.org> you wrote: > > > > > Who: usually the responsible custodians > > > > "Custodians" don't always mean sub-system maintain

Re: [U-Boot] RSA in U-Boot

2019-05-17 Thread Wolfgang Denk
Dear Akashi Takahiro, In message <20190517001206.gx11...@linaro.org> you wrote: > > > Who: usually the responsible custodians > > "Custodians" don't always mean sub-system maintainers. Right? It's just a different name for the same thing. > In fact, I have already imported relevant kernel code i

Re: [U-Boot] RSA in U-Boot

2019-05-16 Thread AKASHI, Takahiro
Thank all of you who commented on my question. @Laszlo, I agree to the criteria that you mentioned. good user base is a crucial factor for security code. @Paolo, I have had no idea about license term issues. You're right. @Heinrich, thank you for pointing out gnutls. I'm stilling looking

Re: [U-Boot] RSA in U-Boot

2019-05-16 Thread AKASHI Takahiro
Tom, Wolfgang, Thank you for your inputs. On Thu, May 16, 2019 at 02:18:03PM +0200, Wolfgang Denk wrote: > Dear Akashi Takahiro, > > In message <20190516115636.GA8052@fireball> you wrote: > > > > Can you give me an example of U-Boot code which comes from linux (or > > other projects) and is reg

Re: [U-Boot] RSA in U-Boot

2019-05-16 Thread Paolo Bonzini
On 16/05/19 09:23, Sughosh Ganu wrote: > > > It's also license-incompatible with U-Boot's GPLv2 I think.  I guess > > grub can use it because GPLv3 and Apache v2 can be combined just fine. > > Reusing Linux's code seems like the best match. > > > > Paolo > > > > You co

Re: [U-Boot] RSA in U-Boot

2019-05-16 Thread Wolfgang Denk
Dear Akashi Takahiro, In message <20190516115636.GA8052@fireball> you wrote: > > Can you give me an example of U-Boot code which comes from linux (or > other projects) and is regularly synced (or updated) with the origin? > Who maintains that? and how? Comes from Linux: a ton... Kconfig, Linker

Re: [U-Boot] RSA in U-Boot

2019-05-16 Thread Tom Rini
On Thu, May 16, 2019 at 08:56:40PM +0900, AKASHI Takahiro wrote: > Hi Tom, > > On Thu, May 16, 2019 at 07:13:59AM -0400, Tom Rini wrote: > > On Thu, May 16, 2019 at 01:45:54PM +0300, Ilias Apalodimas wrote: > > > On Thu, May 16, 2019 at 12:39:02PM +0200, Wolfgang Denk wrote: > > > Hello Wolfgang,

Re: [U-Boot] RSA in U-Boot

2019-05-16 Thread AKASHI Takahiro
Hi Tom, On Thu, May 16, 2019 at 07:13:59AM -0400, Tom Rini wrote: > On Thu, May 16, 2019 at 01:45:54PM +0300, Ilias Apalodimas wrote: > > On Thu, May 16, 2019 at 12:39:02PM +0200, Wolfgang Denk wrote: > > Hello Wolfgang, > > > > Thanks for taking the time with this > > > > > > > > There is Libr

Re: [U-Boot] RSA in U-Boot

2019-05-16 Thread Ilias Apalodimas
Hi Tom, > > On Thu, May 16, 2019 at 12:39:02PM +0200, Wolfgang Denk wrote: > > Hello Wolfgang, > > > > Thanks for taking the time with this > > > > > > > > There is LibreSSL as well which is a fork of openssl. Guess that too > > > > should > > > > be fine. What would be the more preferred solut

Re: [U-Boot] RSA in U-Boot

2019-05-16 Thread Tom Rini
On Thu, May 16, 2019 at 01:45:54PM +0300, Ilias Apalodimas wrote: > On Thu, May 16, 2019 at 12:39:02PM +0200, Wolfgang Denk wrote: > Hello Wolfgang, > > Thanks for taking the time with this > > > > > > There is LibreSSL as well which is a fork of openssl. Guess that too > > > should > > > be fi

Re: [U-Boot] RSA in U-Boot

2019-05-16 Thread Ilias Apalodimas
On Thu, May 16, 2019 at 12:39:02PM +0200, Wolfgang Denk wrote: Hello Wolfgang, Thanks for taking the time with this > > > > There is LibreSSL as well which is a fork of openssl. Guess that too should > > be fine. What would be the more preferred solution here. The relevant bits > > can be import

Re: [U-Boot] RSA in U-Boot

2019-05-16 Thread Wolfgang Denk
Dear Sughosh Ganu, In message you wrote: > > There is LibreSSL as well which is a fork of openssl. Guess that too should > be fine. What would be the more preferred solution here. The relevant bits > can be imported from the kernel code into u-boot, or there can be a > solution with linking of

Re: [U-Boot] RSA in U-Boot

2019-05-16 Thread Sughosh Ganu
On Sat, 27 Apr 2019 at 12:03, Heinrich Schuchardt wrote: > On 4/27/19 7:31 AM, Paolo Bonzini wrote: > > > I've done porting linux's pkcs7/x509 parsers and they work well > with my UEFI secure boot patch, but I'm still looking for other > options > as well. > > * openssl >

Re: [U-Boot] RSA in U-Boot

2019-04-27 Thread Paolo Bonzini
> >> I've done porting linux's pkcs7/x509 parsers and they work well > >> with my UEFI secure boot patch, but I'm still looking for other options > >> as well. > >> > >> * openssl > >> Most of existing components linked to UEFI secure boot, including > >> EDK2, shim and grub, reply on this lib

Re: [U-Boot] RSA in U-Boot

2019-04-26 Thread Heinrich Schuchardt
On 4/27/19 7:31 AM, Paolo Bonzini wrote: I've done porting linux's pkcs7/x509 parsers and they work well with my UEFI secure boot patch, but I'm still looking for other options as well. * openssl Most of existing components linked to UEFI secure boot, including EDK2, shim and grub, reply

Re: [U-Boot] RSA in U-Boot

2019-04-26 Thread Laszlo Ersek
On 04/26/19 11:05, Alexander Graf wrote: > > On 25.04.19 04:12, AKASHI, Takahiro wrote: >> Update and reminder. >> >> On Mon, Mar 18, 2019 at 11:17:14AM +0900, AKASHI, Takahiro wrote: >>> Hi, >>> >>> I'd like to discuss this topic in public. >>> I will appreciate your comments here. >>> # FYI, I n

Re: [U-Boot] RSA in U-Boot

2019-04-26 Thread Alexander Graf
On 25.04.19 04:12, AKASHI, Takahiro wrote: > Update and reminder. > > On Mon, Mar 18, 2019 at 11:17:14AM +0900, AKASHI, Takahiro wrote: >> Hi, >> >> I'd like to discuss this topic in public. >> I will appreciate your comments here. >> # FYI, I now started to experimentally port linux's pkcs7/x509

Re: [U-Boot] RSA in U-Boot

2019-04-24 Thread AKASHI, Takahiro
Update and reminder. On Mon, Mar 18, 2019 at 11:17:14AM +0900, AKASHI, Takahiro wrote: > Hi, > > I'd like to discuss this topic in public. > I will appreciate your comments here. > # FYI, I now started to experimentally port linux's pkcs7/x509 > # parser. I've done porting linux's pkcs7/x509 par

[U-Boot] RSA in U-Boot

2019-03-17 Thread AKASHI, Takahiro
Hi, I'd like to discuss this topic in public. I will appreciate your comments here. # FYI, I now started to experimentally port linux's pkcs7/x509 # parser. Thanks, -Takahiro Akashi - Forwarded message from Simon Glass - Date: Thu, 7 Mar 2019 19:56:10 -0700 From: Simon Glass To: "AKAS