From: Heiko Schocher <hs@denx.de>
To: u-boot@lists.denx.de
Subject: [U-Boot] [PATCH v3 0/8] common, fit, rsa: enhancements
Date: Mon, 3 Mar 2014 12:19:22 +0100 [thread overview]
Message-ID: <1393845570-3283-1-git-send-email-hs@denx.de> (raw)
- add sha256,rsa2048 and sha256,rsa4098 support to u-boot.
- add "fdt checksign" command to u-boot cmdshell. This command
checks, if a fdt is correct signed.
- add hosttool "fit_info" which prints the offset and
the len of a property from in a fdt file. This
values can be used, to extract the data from a property
(for example with "dd")
- add hosttool "fit_check_sign". This does the same as
the u-boot cmdshell tool "fdt sign". It checks, if
fit image is correct signed
- changes for v2:
- add comments from Simon Glass
- add new patch: "[PATCH v2 6/8] gen: Add progressive hash API"
from Hung-ying Tyan <tyanh@chromium.org> as
Simon Glass mentioned
- changes for v3:
- add comments from Simon Glass:
- rebased against current head eeb72e67619b98d2502fe634a3a5d9953de92ad0
-> Makefile adaptions necessary introduced from kbuild changes
Heiko Schocher (8):
tools/image-host: fix sign-images bug
fdt: add "fdt checksign" command
fit: add sha256 support
rsa: add sha256-rsa2048 algorithm
rsa: add sha256,rsa4096 algorithm
gen: Add progressive hash API
tools, fit: add fit_info host command
tools, fit_check_sign: verify a signed fit image
common/cmd_fdt.c | 42 +++++-
common/hash.c | 116 +++++++++++++--
common/image-fit.c | 5 +
common/image-sig.c | 63 ++++++++
doc/uImage.FIT/signature.txt | 20 ++-
include/fdt_support.h | 5 +
include/hash.h | 48 ++++++
include/image.h | 38 ++++-
include/rsa-checksum.h | 24 +++
include/rsa.h | 24 +++
lib/fdtdec.c | 20 +++
lib/rsa/Makefile | 2 +-
lib/rsa/rsa-checksum.c | 163 +++++++++++++++++++++
lib/rsa/rsa-sign.c | 10 +-
lib/rsa/rsa-verify.c | 107 +++++---------
lib/sha256.c | 5 +-
.../{sign-configs.its => sign-configs-sha1.its} | 0
test/vboot/sign-configs-sha256.its | 45 ++++++
.../{sign-images.its => sign-images-sha1.its} | 0
test/vboot/sign-images-sha256.its | 42 ++++++
test/vboot/vboot_test.sh | 86 +++++++----
tools/.gitignore | 2 +
tools/Makefile | 16 +-
tools/fdt_host.h | 2 +
tools/fdtdec.c | 1 +
tools/fit_check_sign.c | 85 +++++++++++
tools/fit_common.c | 86 +++++++++++
tools/fit_common.h | 22 +++
tools/fit_image.c | 62 +-------
tools/fit_info.c | 96 ++++++++++++
tools/image-host.c | 17 ++-
tools/rsa-checksum.c | 1 +
tools/rsa-verify.c | 1 +
tools/sha256.c | 1 +
34 files changed, 1076 insertions(+), 181 deletions(-)
create mode 100644 include/rsa-checksum.h
create mode 100644 lib/rsa/rsa-checksum.c
rename test/vboot/{sign-configs.its => sign-configs-sha1.its} (100%)
create mode 100644 test/vboot/sign-configs-sha256.its
rename test/vboot/{sign-images.its => sign-images-sha1.its} (100%)
create mode 100644 test/vboot/sign-images-sha256.its
create mode 100644 tools/fdtdec.c
create mode 100644 tools/fit_check_sign.c
create mode 100644 tools/fit_common.c
create mode 100644 tools/fit_common.h
create mode 100644 tools/fit_info.c
create mode 100644 tools/rsa-checksum.c
create mode 100644 tools/rsa-verify.c
create mode 100644 tools/sha256.c
Cc: Simon Glass <sjg@chromium.org>
Cc: Hung-ying Tyan <tyanh@chromium.org>
Cc: andreas at oetken.name
--
1.8.3.1
next reply other threads:[~2014-03-03 11:19 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-03-03 11:19 Heiko Schocher [this message]
2014-03-03 11:19 ` [U-Boot] [PATCH v3 1/8] tools/image-host: fix sign-images bug Heiko Schocher
2014-03-27 16:58 ` [U-Boot] [U-Boot,v3,1/8] " Tom Rini
2014-03-03 11:19 ` [U-Boot] [PATCH v3 2/8] fdt: add "fdt checksign" command Heiko Schocher
2014-03-27 16:58 ` [U-Boot] [U-Boot,v3,2/8] " Tom Rini
2014-03-03 11:19 ` [U-Boot] [PATCH v3 3/8] fit: add sha256 support Heiko Schocher
2014-03-27 16:58 ` [U-Boot] [U-Boot,v3,3/8] " Tom Rini
2014-03-03 11:19 ` [U-Boot] [PATCH v3 4/8] rsa: add sha256-rsa2048 algorithm Heiko Schocher
2014-03-09 5:33 ` Simon Glass
2014-03-10 6:00 ` Heiko Schocher
2014-03-27 16:58 ` [U-Boot] [U-Boot,v3,4/8] " Tom Rini
2014-03-03 11:19 ` [U-Boot] [PATCH v3 5/8] rsa: add sha256,rsa4096 algorithm Heiko Schocher
2014-03-27 16:58 ` [U-Boot] [U-Boot,v3,5/8] " Tom Rini
2014-03-03 11:19 ` [U-Boot] [PATCH v3 6/8] gen: Add progressive hash API Heiko Schocher
2014-03-27 16:58 ` [U-Boot] [U-Boot,v3,6/8] " Tom Rini
2014-03-03 11:19 ` [U-Boot] [PATCH v3 7/8] tools, fit: add fit_info host command Heiko Schocher
2014-03-09 5:41 ` Simon Glass
2014-03-27 16:58 ` [U-Boot] [U-Boot,v3,7/8] " Tom Rini
2014-03-03 11:19 ` [U-Boot] [PATCH v3 8/8] tools, fit_check_sign: verify a signed fit image Heiko Schocher
2014-03-09 5:47 ` Simon Glass
2014-03-27 16:58 ` [U-Boot] [U-Boot, v3, " Tom Rini
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1393845570-3283-1-git-send-email-hs@denx.de \
--to=hs@denx.de \
--cc=u-boot@lists.denx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox