Re: [PATCH] uboot-sign: support to load optee-os and TFA images

[Tom Rini <trini@konsulko.com>]

On Thu, Jan 18, 2024 at 02:19:09AM +0000, Jamin Lin wrote:
> > -----Original Message-----
> > From: Tom Rini <trini@konsulko.com>
> > Sent: Wednesday, January 17, 2024 10:37 PM
> > To: Jamin Lin <jamin_lin@aspeedtech.com>
> > Cc: openembedded-core@lists.openembedded.org
> > Subject: Re: [PATCH] uboot-sign: support to load optee-os and TFA images
> > 
> > On Tue, Jan 16, 2024 at 07:37:04PM -0800, Jamin Lin wrote:
> > 
> > > Hi Alexander,
> > >
> > > One more thing, So far, bitman only support hash 256.
> > 
> > What hashing algorithm would you like to be using instead? We can always
> > include more and better options with configuration as needed.
> > 
> > --
> > Tom
> 
> Hi Tom
> At present, makeimage tool support hash 256, 384 and 512. It also support rsa 2038, 3072 and 4096.
> It would be better if binman support these algorithms.
> 
> I patched uboot-sign.bbclass the original goal is to make yocto support optee-os and tfa in the old version of u-boot.

Right, but it would be best if OE leveraged binman I believe and in turn
you made binman support taking the hash algorithm as an input as needed.

-- 
Tom