From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 8561EC433F5 for ; Sat, 25 Dec 2021 01:53:28 +0000 (UTC) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 2986E8379C; Sat, 25 Dec 2021 02:53:25 +0100 (CET) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.b="hlj69ouf"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id D36E4837AC; Fri, 24 Dec 2021 19:23:45 +0100 (CET) Received: from mail-lf1-x12f.google.com (mail-lf1-x12f.google.com [IPv6:2a00:1450:4864:20::12f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 018EB8379C for ; Fri, 24 Dec 2021 19:23:41 +0100 (CET) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=fr0st61te@gmail.com Received: by mail-lf1-x12f.google.com with SMTP id g26so20483032lfv.11 for ; Fri, 24 Dec 2021 10:23:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=rwLdPFN2OIiZ7TqdHDkyAgO+bT2aZOwwEQfqqph4ack=; b=hlj69oufknVtTajIhfz7zSXuadIA2nntdIlIXOFl6pCCIwZV4omYqA2xhOF3Ahb6Wf flYglrmwNbos2V4qIT7kKKu2BtKpXb/bKudJwE0TPjtaWno+GKOtr5xJ5ApdcBCL3msV fmjUUAptV4QLWIaOakNo7Fp/4oXX13iD8zvv1B9Q4YjOUU96mPwoYRiNNeLl7zFfOZEP eg95MQJ2YN5gJ5EDEbycoHjvRT4Cx2UANkcU6ymgWgNXRdm8zhO30KVBJ9ngRBtM2lps 5Al6l8xUqEROz/d/0haOHGVzilqGNPngEkbyUvTnTOnC50kAQloeqeIoJGjiUHpnFX8N eseg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=rwLdPFN2OIiZ7TqdHDkyAgO+bT2aZOwwEQfqqph4ack=; b=L472xYIhTpw7LPUmEjYgBLFIJQIkUbZjM7gvDFbgh5Cyvpwh3HLQsnpyXiHHzJcPHu hK3vU3kTzPPQDIOxzxxnaJjWY/RE4qsJvUh7jf9xSKLI02LnVjC4HpeJ+ReimGcwP+Or QfdDaXbtEUY5wrsaFzLYLV10GIs4aFJq6xvGzR18vYZtMUzT8R1kC/JzgNX/jWl+8Jxp eCJVignh4TwDVfQmoICtTkN7PTP02yCWuqG0ep7MkR1Kb7DpB5oyzB2Q8fhAGCkt4YT1 6eevXZovaJyuM8Os62L4mEo6KagxAAA/9s2zcso0AqVlDOiyJh+fv+oP/zXU/BIDHCHy XX2g== X-Gm-Message-State: AOAM532Z14cMwMqsjiXZhoO7fDjvAntf0jj7yEqAkCVX4prGwuTxcxzZ T5oXXc+NdbbjOj70WpPGx0Y= X-Google-Smtp-Source: ABdhPJw1wlD+Db+Otpg+FLdVlLrLMjGzX7ZONSc1Vi/Pj/W8yhbI9NIqTNqiebHY/ZEOR+N4pNQzQw== X-Received: by 2002:a05:6512:2294:: with SMTP id f20mr2878102lfu.437.1640370221288; Fri, 24 Dec 2021 10:23:41 -0800 (PST) Received: from localhost.localdomain (93-80-65-34.broadband.corbina.ru. [93.80.65.34]) by smtp.googlemail.com with ESMTPSA id f18sm874995lfj.56.2021.12.24.10.23.40 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 24 Dec 2021 10:23:41 -0800 (PST) From: Ivan Mikhaylov To: Simon Glass , Jan Kiszka Cc: u-boot@lists.denx.de, Ivan Mikhaylov Subject: [PATCH 0/1] Introduce new sign binman's option Date: Fri, 24 Dec 2021 21:23:33 +0000 Message-Id: <20211224212334.7146-1-fr0st61te@gmail.com> X-Mailer: git-send-email 2.34.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Mailman-Approved-At: Sat, 25 Dec 2021 02:53:23 +0100 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.38 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.2 at phobos.denx.de X-Virus-Status: Clean From: Ivan Mikhaylov This patch introduces prototype of new sign binman's option. It doesn't looks good for now but it shows how sign process can be done. Just enhancing sign procedure, as example from: mkimage -G privateky -r -o sha256,rsa4096 -F fit@0x280000.fit binman replace -i flash.bin -f fit@0x280000.fit fit@0x280000 into: binman sign -i flash.bin -k privatekey -a sha256,rsa4096 -f fit@0x280000.fit fit@0x280000 1. Is it needed at all? I think, it improves the way of signing, maybe there is some other opinions on this spot? 2. I hope, that `mkimage sign` can be replaced with python code instead of tools.Run. 3. And what things/cases should be covered in case of approval of such option? Tests? 4. Also this option may cover cases like for TI's K3 architectures, it may replace things like tools/k3_gen_x509_cert.sh with binman sign option. Also this patch refers on https://lists.denx.de/pipermail/u-boot/2021-November/468282.html with algo option for mkimage. Ivan Mikhaylov (1): binman: add sign option for binman tools/binman/cmdline.py | 13 +++++++++++++ tools/binman/control.py | 27 ++++++++++++++++++++++++++- 2 files changed, 39 insertions(+), 1 deletion(-) --