Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | lib/ecdsa: Use the 'keydir' argument from mkimage if appropriate | Alexandru Gagniuc | 2021-04-14 | 1 | -1/+13 |
| | | | | | | | | | Keys can be derived from keydir, and the "key-name-hint" property of the FIT. They can also be specified ad-literam via 'keyfile'. Update the ECDSA signing path to use the appropriate one. Signed-off-by: Alexandru Gagniuc <mr.nuke.me@gmail.com> Reviewed-by: Simon Glass <sjg@chromium.org> | ||||
* | lib: Add support for ECDSA image signing | Alexandru Gagniuc | 2021-04-14 | 1 | -0/+306 |
mkimage supports rsa2048, and rsa4096 signatures. With newer silicon now supporting hardware-accelerated ECDSA, it makes sense to expand signing support to elliptic curves. Implement host-side ECDSA signing and verification with libcrypto. Device-side implementation of signature verification is beyond the scope of this patch. Signed-off-by: Alexandru Gagniuc <mr.nuke.me@gmail.com> Reviewed-by: Simon Glass <sjg@chromium.org> |