- add sha256,rsa2048 and sha256,rsa4098 support to u-boot.
- add "fdt sign" command to u-boot cmdshell. This command
checks, if a fdt is correct signed.
- add hosttool "fit_info" which prints the offset and
the len of a property from in a fdt file. This
values can be used, to extract the data from a property
(for example with "dd")
- add hosttool "fit_check_sign". This does the same as
the u-boot cmdshell tool "fdt sign". It checks, if
fit image is correct signed
- changes for v2:
- add comments from Simon Glass
- add new patch: "[PATCH v2 6/8] gen: Add progressive hash API"
from Hung-ying Tyan <ty...@chromium.org> as
Simon Glass mentioned
Heiko Schocher (8):
tools/image-host: fix sign-images bug
fdt: add "fdt checksign" command
fit: add sha256 support
rsa: add sha256-rsa2048 algorithm
rsa: add sha256,rsa4096 algorithm
gen: Add progressive hash API
tools, fit: add fit_info host command
tools, fit_check_sign: verify a signed fit image
Makefile | 2 +
common/cmd_fdt.c | 42 +++++-
common/hash.c | 116 +++++++++++++--
common/image-fit.c | 5 +
common/image-sig.c | 66 +++++++++
doc/uImage.FIT/signature.txt | 33 ++++-
include/fdt_support.h | 5 +
include/hash.h | 48 ++++++
include/image.h | 37 ++++-
include/rsa-checksum.h | 26 ++++
include/rsa.h | 24 +++
lib/libfdt/fdt_wip.c | 17 +++
lib/rsa/Makefile | 2 +-
lib/rsa/rsa-checksum.c | 163 +++++++++++++++++++++
lib/rsa/rsa-sign.c | 10 +-
lib/rsa/rsa-verify.c | 107 +++++---------
lib/sha256.c | 2 +-
.../{sign-configs.its => sign-configs-sha1.its} | 0
test/vboot/sign-configs-sha256.its | 45 ++++++
.../{sign-images.its => sign-images-sha1.its} | 0
test/vboot/sign-images-sha256.its | 42 ++++++
test/vboot/vboot_test.sh | 54 ++++++-
tools/Makefile | 42 +++++-
tools/fdt_host.h | 2 +
tools/fit_check_sign.c | 119 +++++++++++++++
tools/fit_common.c | 81 ++++++++++
tools/fit_common.h | 22 +++
tools/fit_image.c | 62 +-------
tools/fit_info.c | 116 +++++++++++++++
tools/image-host.c | 15 +-
30 files changed, 1148 insertions(+), 157 deletions(-)
create mode 100644 include/rsa-checksum.h
create mode 100644 lib/rsa/rsa-checksum.c
rename test/vboot/{sign-configs.its => sign-configs-sha1.its} (100%)
create mode 100644 test/vboot/sign-configs-sha256.its
rename test/vboot/{sign-images.its => sign-images-sha1.its} (100%)
create mode 100644 test/vboot/sign-images-sha256.its
create mode 100644 tools/fit_check_sign.c
create mode 100644 tools/fit_common.c
create mode 100644 tools/fit_common.h
create mode 100644 tools/fit_info.c
Cc: Simon Glass <s...@chromium.org>
Cc: Hung-ying Tyan <ty...@chromium.org>
Cc: andr...@oetken.name
--
1.8.3.1
_______________________________________________
U-Boot mailing list
U-Boot@lists.denx.de
http://lists.denx.de/mailman/listinfo/u-boot
