u-boot.git/boot/image-pre-load.c, branch v2023.07.01

boot: image-pre-load: Check environment for location of signature info

2022-10-11T19:40:48Z

Setting an alternative signature info node in "pre_load_sig_info_path" allows verification of an image using the bootm pre-load mechanism with a different key, e.g.: setenv pre_load_sig_info_path "/alt/sig" ; bootm preload [addr] Signed-off-by: Steven Lawrance Reviewed-by: Simon Glass

image-pre-load: Move macros/definitions to image.h

2022-10-11T19:40:48Z

Putting these definitions in a header will allow signatures to be validated independently of bootm. Signed-off-by: Steven Lawrance Reviewed-by: Simon Glass

boot: image-pre-load: drop unused CONFIG_SYS_BOOTM_LEN

2022-06-06T21:47:16Z

CONFIG_SYS_BOOTM_LEN is not used in this file, drop it. Signed-off-by: Peng Fan Reviewed-by: Tom Rini

boot: image: add a stage pre-load

2022-03-31T18:12:01Z

Add a stage pre-load that could check or modify an image. For the moment, only a header with a signature is supported. This header has the following format: - magic : 4 bytes - version : 4 bytes - header size : 4 bytes - image size : 4 bytes - offset image signature : 4 bytes - flags : 4 bytes - reserved0 : 4 bytes - reserved1 : 4 bytes - sha256 of the image signature : 32 bytes - signature of the first 64 bytes : n bytes - image signature : n bytes - padding : up to header size The stage uses a node /image/pre-load/sig to get some informations: - algo-name (mandatory) : name of the algo used to sign - padding-name : name of padding used to sign - signature-size : size of the signature (in the header) - mandatory : set to yes if this sig is mandatory - public-key (madatory) : value of the public key Before running the image, the stage pre-load checks the signature provided in the header. This is an initial support, later we could add the support of: - ciphering - uncompressing - ... Signed-off-by: Philippe Reynes