u-boot.git/lib/ecdsa, branch v2024.07

Check curve_name for null to avoid crash

2024-03-07T12:41:41+00:00

If mixed rsa and ecdsa keys are specified in dtsi, an rsa key can be sent
into the ecdsa verify. Without the ecdsa,curve property, this function will
crash due to lack of checking the null pointer return.

Signed-off-by: Bob Wolff

mkimage: ecdsa: password for signing from environment

2023-06-20T20:08:13+00:00

Use a variable (MKIMAGE_SIGN_PASSWORD) like already done for RSA to
allow the signing process to run in batch.

Signed-off-by: Stefano Babic

spl: Ensure all SPL symbols in Kconfig have some SPL dependency

2022-07-07T13:29:08+00:00

Tighten up symbol dependencies in a number of places.  Ensure that a SPL
specific option has at least a direct dependency on SPL.  In places
where it's clear that we depend on something more specific, use that
dependency instead.  This means in a very small number of places we can
drop redundant dependencies.

Reported-by: Pali Rohár 
Signed-off-by: Tom Rini

image: Return destination node for add_verify_data() method

2022-01-26T15:50:44+00:00

It is useful to know where the verification data was written. Update the
API to return this.

Signed-off-by: Simon Glass

tools: avoid OpenSSL deprecation warnings

2021-12-26T05:57:20+00:00

Our Gitlab CI buildsystem is set up to treat warnings as errors.
With OpenSSL 3.0 a lot of deprecation warnings occur.

With the patch compatibility with OpenSSL 1.1.1 is declared.
In the long run we should upgrade our code to use the current API.

A -Wdiscarded-qualifiers warning is muted by casting.

Signed-off-by: Heinrich Schuchardt

lib: ecdsa: Implement UCLASS_ECDSA verification on target

2021-08-16T08:49:35+00:00

Implement the crypto_algo .verify() function for ecdsa256. Because
it backends on UCLASS_ECDSA, this change is focused on parsing the
keys from devicetree and passing this information to the specific
UCLASS driver.

Signed-off-by: Alexandru Gagniuc 
Reviewed-by: Simon Glass 
Reviewed-by: Patrick Delaunay

lib/ecdsa: Use the 'keydir' argument from mkimage if appropriate

2021-04-14T19:23:01+00:00

Keys can be derived from keydir, and the "key-name-hint" property of
the FIT. They can also be specified ad-literam via 'keyfile'. Update
the ECDSA signing path to use the appropriate one.

Signed-off-by: Alexandru Gagniuc 
Reviewed-by: Simon Glass

lib: Add support for ECDSA image signing

2021-04-14T19:06:08+00:00

mkimage supports rsa2048, and rsa4096 signatures. With newer silicon
now supporting hardware-accelerated ECDSA, it makes sense to expand
signing support to elliptic curves.

Implement host-side ECDSA signing and verification with libcrypto.
Device-side implementation of signature verification is beyond the
scope of this patch.

Signed-off-by: Alexandru Gagniuc 
Reviewed-by: Simon Glass