u-boot.git/include/image.h, branch v2017.01

tools: mkimage: add firmware-ivt image type for HAB verification

2017-01-02T16:06:57+00:00

When we want to use Secure Boot with HAB from SPL over U-Boot.img,
we need to append the IVT to the image and leave space for the CSF.
Images generated as firmware_ivt can directly be signed using the
Freescale code signing tool. For creation of a CSF, mkimage outputs
the correct HAB Blocks for the image.
The changes to the usual firmware image class are quite small,
that is why I implemented that directly into the default_image.

Cc: sbabic@denx.de

v2-Changes: None

Signed-off-by: Sven Ebenfeld 
Reviewed-by: George McCollister 
Tested-by: George McCollister

image: Add Trusted Execution Environment image type

2016-12-03T18:21:20+00:00

Add a new image type representing Trusted Execution Environment (TEE)
image types. For example, an OP-TEE OS binary image.

Signed-off-by: Andrew F. Davis 
Reviewed-by: Simon Glass

image: Add FIT image loadable section custom processing

2016-12-03T18:21:19+00:00

To help automate the loading of custom image types we add the ability
to define custom handlers for the loadable section types. When we find
a compatible type while loading a "loadable" image from a FIT image we
run its associated handlers to perform any additional steps needed for
loading this image.

Signed-off-by: Andrew F. Davis 
Reviewed-by: Simon Glass

image: Combine image_sig_algo with image_sign_info

2016-11-21T19:07:31+00:00

Remove the need to explicitly add SHA/RSA pairings. Invalid SHA/RSA
pairings will still fail on verify operations when the hash length is
longer than the key length.

Follow the same naming scheme "checksum,crytpo" without explicitly
defining the string.

Indirectly adds support for "sha1,rsa4096" signing/verification.

Signed-off-by: Andrew Duda 
Signed-off-by: aduda 
Reviewed-by: Simon Glass

image: Add crypto_algo struct for RSA info

2016-11-21T19:07:31+00:00

Cut down on the repetition of algorithm information by defining separate
checksum and crypto structs. image_sig_algos are now simply pairs of
unique checksum and crypto algos.

Signed-off-by: Andrew Duda 
Signed-off-by: aduda 
Reviewed-by: Simon Glass

rsa: Verify RSA padding programatically

2016-11-21T19:07:30+00:00

Padding verification was done against static SHA/RSA pair arrays which
take up a lot of static memory, are mostly 0xff, and cannot be reused
for additional SHA/RSA pairings. The padding can be easily computed
according to PKCS#1v2.1 as:

  EM = 0x00 || 0x01 || PS || 0x00 || T

where PS is (emLen - tLen - 3) octets of 0xff and T is DER encoding
of the hash.

Store DER prefix in checksum_algo and create rsa_verify_padding
function to handle verification of a message for any SHA/RSA pairing.

Signed-off-by: Andrew Duda 
Signed-off-by: aduda 
Reviewed-by: Simon Glass

rsa: cosmetic: rename pad_len to key_len

2016-11-21T19:07:30+00:00

checksum_algo's pad_len field isn't actually used to store the length of
the padding but the total length of the RSA key (msg_len + pad_len)

Signed-off-by: Andrew Duda 
Signed-off-by: aduda 
Reviewed-by: Simon Glass

tools: mkimage: add support for Vybrid image format

2016-10-06T07:06:16+00:00

This format can be flashed directly at address 0 of
the NAND FLASH, as it contains all necessary headers.

Signed-off-by: Albert ARIBAUD (3ADEV)

xtensa: add support for the xtensa processor architecture [1/2]

2016-08-15T22:46:38+00:00

The Xtensa processor architecture is a configurable, extensible,
and synthesizable 32-bit RISC processor core provided by Cadence.

This is the first part of the basic architecture port with changes to
common files. The 'arch/xtensa' directory, and boards and additional
drivers will be in separate commits.

Signed-off-by: Chris Zankel 
Signed-off-by: Max Filippov 
Reviewed-by: Simon Glass 
Reviewed-by: Tom Rini

image: fix IH_ARCH_... values for uImage compatibility

2016-07-21T14:47:03+00:00

Commit 555f45d8f916 ("image: Convert the IH_... values to enums")
accidentally changed some IH_ARCH_... values.

Prior to that commit, there existed a gap between IH_ARCH_M68K and
IH_ARCH_MICROBLAZE, like follows.

  #define IH_ARCH_SPARC64         11      /* Sparc 64 Bit */
  #define IH_ARCH_M68K            12      /* M68K         */
  #define IH_ARCH_MICROBLAZE      14      /* MicroBlaze   */
  #define IH_ARCH_NIOS2           15      /* Nios-II      */

The enum conversion broke the compatibility with existing uImage
files.  Reverting 555f45d8f916 will cause build error unfortunately,
so here is a more easy fix.

I dug the git history and figured out the gap was introduced by
commit 1117cbf2adac ("nios: remove nios-32 arch").  So, I revived
IH_ARCH_NIOS just for filling the gap.

I added comments to each enum block.  Once we assign a value to
IH_... it is not allowed to change it.

Acked-by: Michal Simek 
Signed-off-by: Masahiro Yamada 
Reviewed-by: Simon Glass