u-boot.git/doc/uImage.FIT, branch v2014.07-rc2

tools, fit_check_sign: verify a signed fit image

2014-03-21T20:40:38Z

add host tool "fit_check_sign" which verifies, if a fit image is signed correct. Signed-off-by: Heiko Schocher Cc: Simon Glass

rsa: add sha256-rsa2048 algorithm

2014-03-21T20:39:34Z

based on patch from andreas@oetken.name: http://patchwork.ozlabs.org/patch/294318/ commit message: I currently need support for rsa-sha256 signatures in u-boot and found out that the code for signatures is not very generic. Thus adding of different hash-algorithms for rsa-signatures is not easy to do without copy-pasting the rsa-code. I attached a patch for how I think it could be better and included support for rsa-sha256. This is a fast first shot. aditionally work: - removed checkpatch warnings - removed compiler warnings - rebased against current head Signed-off-by: Heiko Schocher Cc: andreas@oetken.name Cc: Simon Glass

cosmetic: uImage.FIT: fix documents

2014-01-17T13:04:32Z

- Fix the path to source_file_format.txt - Fix a minor typo - Fix the type for FIT blob: it must be "flat_dt" Signed-off-by: Masahiro Yamada

cosmetic: doc: uImage.FIT: fix typos

2013-09-20T14:30:53Z

Signed-off-by: Masahiro Yamada Acked-by: Simon Glass

Add verified boot information and test

2013-06-26T14:18:57Z

Add a description of how to implement verified boot using signed FIT images, and a simple test which verifies operation on sandbox. The test signs a FIT image and verifies it, then signs a FIT configuration and verifies it. Then it corrupts the signature to check that this is detected. Signed-off-by: Simon Glass

image: Add support for signing of FIT configurations

2013-06-26T14:18:56Z

While signing images is useful, it does not provide complete protection against several types of attack. For example, it it possible to create a FIT with the same signed images, but with the configuration changed such that a different one is selected (mix and match attack). It is also possible to substitute a signed image from an older FIT version into a newer FIT (roll-back attack). Add support for signing of FIT configurations using the libfdt's region support. Please see doc/uImage.FIT/signature.txt for more information. Signed-off-by: Simon Glass

image: Support signing of images

2013-06-26T14:18:56Z

Add support for signing images using a new signature node. The process is handled by fdt_add_verification_data() which now takes parameters to provide the keys and related information. Signed-off-by: Simon Glass

image: Add signing infrastructure

2013-06-26T14:18:56Z

Add a structure to describe an algorithm which can sign and (later) verify images. Signed-off-by: Simon Glass

net ppc: fix ethernet device names with spaces

2010-08-09T18:52:28Z

since commit 1384f3bb8a4f9066805b70c1418eda78ecb73fdd ethernet names with spaces drop a Warning: eth device name has a space! message. This patch fix it for: - "FEC ETHERNET" devices found on mpc512x, mpc5xxx, mpc8xx and mpc8220 boards. renamed to "FEC". - "SCC ETHERNET" devices found on mpc8xx, mpc82xx based boards. Renamed to "SCC". - "HDLC ETHERNET" devices found on mpc8xx boards Renamed to "HDLC" - "FCC ETHERNET" devices found on mpc8260 and mpc85xx based boards. Renamed to "FCC" Tested on the kup4k board. Signed-off-by: Heiko Schocher Signed-off-by: Ben Warren

nios: remove nios-32 arch

2010-05-28T14:56:04Z

The nios-32 arch is obsolete and broken. So it is removed. Signed-off-by: Thomas Chou