From mboxrd@z Thu Jan  1 00:00:00 1970
From: Kenneth Johansson <kenneth@southpole.se>
Date: Mon, 21 Apr 2008 14:07:38 +0200
Subject: [U-Boot-Users] What methods of software authentication does
	U-Boot support?
In-Reply-To: <20080420233220.DE0A4248A6@gemini.denx.de>
References: <20080420233220.DE0A4248A6@gemini.denx.de>
Message-ID: <1208779658.7326.47.camel@localhost.localdomain>
List-Id: <u-boot.lists.denx.de>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: u-boot@lists.denx.de


On Mon, 2008-04-21 at 01:32 +0200, Wolfgang Denk wrote:
> In message <20080418163211.d5a1ee64.kim.phillips@freescale.com> you wrote:
> >
> > > U-Boot will run only software that has been
> > > authenticated to be from the system's producer.  
> 
> Seems it's time to start a discussion to switch to GPL v3...
> 
> 
> > > Any comments or suggestions?
> > > 
> > this patch taps into openssl:
> 
> Be careful. Linking against openssl is not possible because the
> openssl licence is not compatible with GPL; see for example
> http://www.gnome.org/~markmc/openssl-and-the-gpl.html
> 
> Best regards,
> 
> Wolfgang Denk
> 

For a u-boot friendly version of RSA look at
http://xyssl.org/code/source/rsa/

I have not used it as the client put the secure(authenticated) image
thing on hold but it was the best I could find in the limited time I put
into it.