On Mon, Aug 12, 2019 at 8:01 AM Patrick Doyle <wpds...@gmail.com> wrote:
>
> I am about to embark on the task of adding support for importing and
> using multiple keys in the verified boot process. Does u-boot already
> support this?  Has anybody (else) thought about it?

I now see that lib/rsa/rsa-verify.c actually checks against multiple
public keys compiled into the device tree.  I guess I could use fit
commands to add more nodes with keys to the device tree, but that
seems a bit cumbersome.  Plus, they wouldn't be verified against the
existing key(s).

Still plugging away...

--wpd
_______________________________________________
U-Boot mailing list
U-Boot@lists.denx.de
https://lists.denx.de/listinfo/u-boot

Reply via email to