public inbox for u-boot@lists.denx.de
 help / color / mirror / Atom feed
From: Marek Vasut <marex@denx.de>
To: u-boot@lists.denx.de
Subject: [U-Boot] [PATCH 0/9] spl: Add full fit and u-boot dto support
Date: Thu, 28 Dec 2017 13:06:12 +0100	[thread overview]
Message-ID: <20171228120621.4039-1-marex@denx.de> (raw)

Add support for using the full fitImage parsing code in SPL. This is useful
ie. if we want SPL to verify the U-Boot proper fitImage using RSA signature.
While verifying image signature can be added to the simplified fitImage
handling code in U-Boot SPL, verifying configuration signatures becomes
quite hairy. Thus, loading the entire fitImage and then applying the full
fitImage handling code on it is far less intrusive change. The size of the
SPL with full fitImage code obviously grows, so this might not be suitable
for size-constrained systems.

The remaining four patches allow applying a DTO from fitImage onto the SPL's
internal DT and restart the image loading process. The usecase here is ie. to
put a replacement public key into the DTO, patch the /signature node and load
offset node of the U-Boot SPL's DT and restart the image loading process to
load U-Boot proper signed with the replacement private key. The user is then
able to replace the DTO and sign own U-Boot fitImage without replacing the
SPL binary itself.

Marek Vasut (9):
  fit: Fix CONFIG_FIT_SPL_PRINT
  fit: Add empty fit_print_contents() and fit_image_print()
  fit: Add standalone image type handling
  fit: Verify all configuration signatures
  spl: Add full fitImage support
  spl: Add support for overlaying U-Boot DT
  spl: Restart loading if load_image returns -EAGAIN
  spl: ram: Add support for fetching image position from control DT
  spl: spi: Add support for fetching image position from control DT

 Kconfig              | 17 +++++++++++
 README               |  2 +-
 common/image-fit.c   | 36 +++++++++++++---------
 common/spl/spl.c     | 86 +++++++++++++++++++++++++++++++++++++++++++++++++++-
 common/spl/spl_ram.c | 21 ++++++++++---
 common/spl/spl_spi.c | 13 ++++++++
 include/image.h      |  1 +
 7 files changed, 154 insertions(+), 22 deletions(-)

-- 
2.15.0

             reply	other threads:[~2017-12-28 12:06 UTC|newest]

Thread overview: 24+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-12-28 12:06 Marek Vasut [this message]
2017-12-28 12:06 ` [U-Boot] [PATCH 1/9] fit: Fix CONFIG_FIT_SPL_PRINT Marek Vasut
2018-01-08  3:53   ` Simon Glass
2017-12-28 12:06 ` [U-Boot] [PATCH 2/9] fit: Add empty fit_print_contents() and fit_image_print() Marek Vasut
2018-01-08  3:53   ` Simon Glass
2017-12-28 12:06 ` [U-Boot] [PATCH 3/9] fit: Add standalone image type handling Marek Vasut
2018-01-08  3:53   ` Simon Glass
2017-12-28 12:06 ` [U-Boot] [PATCH 4/9] fit: Verify all configuration signatures Marek Vasut
2018-01-08  3:56   ` Simon Glass
2017-12-28 12:06 ` [U-Boot] [PATCH 5/9] spl: Add full fitImage support Marek Vasut
2017-12-28 14:21   ` Lukasz Majewski
2018-01-08  3:58   ` Simon Glass
2017-12-28 12:06 ` [U-Boot] [PATCH 6/9] spl: Add support for overlaying U-Boot DT Marek Vasut
2017-12-28 14:23   ` Lukasz Majewski
2018-01-08  4:20   ` Simon Glass
2017-12-28 12:06 ` [U-Boot] [PATCH 7/9] spl: Restart loading if load_image returns -EAGAIN Marek Vasut
2017-12-28 14:25   ` Lukasz Majewski
2017-12-31 17:37     ` Marek Vasut
2017-12-28 12:06 ` [U-Boot] [PATCH 8/9] spl: ram: Add support for fetching image position from control DT Marek Vasut
2017-12-28 14:27   ` Lukasz Majewski
2018-01-08  4:20   ` Simon Glass
2017-12-28 12:06 ` [U-Boot] [PATCH 9/9] spl: spi: " Marek Vasut
2017-12-28 14:29   ` Lukasz Majewski
2018-01-08  4:37     ` Simon Glass

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20171228120621.4039-1-marex@denx.de \
    --to=marex@denx.de \
    --cc=u-boot@lists.denx.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox