u-boot.git/lib/rsa/rsa-verify.c, branch master

lib: rsa: use FIT_ALGO_PROP constant instead of "algo" in FIT

2025-12-16T17:39:38+00:00

Some FIT image properties have their string represented in
include/image.h via constants. FIT_ALGO_PROP does exist and would fit the
bill so let's use it instead of using a hardcoded string.

Signed-off-by: Quentin Schulz

rsa: update doxygen doc for RSA signature verification to mention PSS

2025-11-11T20:53:25+00:00

While the verification step originally only supported PKCS1.5 as padding
algorithm for the signature, it was later extended to add support for
PSS but the doxygen doc wasn't updated to reflect that so let's fix
that oversight.

Fixes: 061daa0b61f0 ("rsa: add support of padding pss")
Signed-off-by: Quentin Schulz

rsa: rename FIT_RSASSA_PSS to RSASSA_PSS and move symbols under lib/rsa

2025-11-11T20:53:25+00:00

This renames FIT_RSASSA_PSS symbols to drop the FIT_ prefix to avoid
potential confusion since there's nothing FIT specific to those symbols.

It also isn't really related to booting, so boot/Kconfig is an odd place
for them to live. Since they make sense only in relation with RSA,
simply move them to lib/rsa where it makes more sense for them to
reside.

Signed-off-by: Quentin Schulz

lib: rsa: fix compilation error without openssl

2025-06-22T16:16:39+00:00

The symbol TOOLS_IMAGE_PRE_LOAD doesn't depend on TOOLS_LIBCRYPTO.
If we choose to build tools without openssl, rsa_verify_openssl()
will attempt to call the unavailable openssl library functions.

Fixes: 942c8c8e6697 ("rsa: Add rsa_verify_openssl() to use openssl for host builds")
Signed-off-by: Shiji Yang

lib: rsa: add NULL check for 'algo' in

2025-03-13T20:23:09+00:00

- Check return value of fdt_getprop for NULL.
- Return -EFAULT if 'algo' property is missing.
- Prevent NULL pointer dereference in strcmp."

Triggers found by static analyzer Svace.

Signed-off-by: Anton Moryakov

rsa: Add rsa_verify_openssl() to use openssl for host builds

2025-02-28T22:51:01+00:00

rsa_verify_openssl() is used in lib/rsa/rsa-verify.c to authenticate data
when building host tools.

Signed-off-by: Paul HENRYS

lib: add missing line breaks in debug messages

2024-04-10T15:34:53+00:00

Add missing line breaks to improve debug log readability.

Signed-off-by: Maxim Moskalets 
Reviewed-by: Heinrich Schuchardt

lib: Remove inclusion from these files

2023-12-21T13:54:37+00:00

After some header file cleanups to add missing include files, remove
common.h from all files in the lib directory. This primarily means just
dropping the line but in a few cases we need to add in other header
files now.

Reviewed-by: Simon Glass 
Signed-off-by: Tom Rini

global: Restrict use of '#include '

2023-12-21T13:54:05+00:00

In general terms, we -include include/linux/kconfig.h and so normal
U-Boot code does not need to also #include it. However, for code which
is shared with userspace we may need to add it so that either our full
config is available or so that macros such as CONFIG_IS_ENABLED() can be
evaluated. In this case make sure that we guard these includes with a
test for USE_HOSTCC so that it clear as to why we're doing this.

Reviewed-by: Simon Glass 
Signed-off-by: Tom Rini

rsa-verify: Rework host check for CONFIG_RSA_VERIFY_WITH_PKEY

2022-12-23T15:07:03+00:00

While we do not want to use CONFIG_RSA_VERIFY_WITH_PKEY on the host, we
cannot undef the symbol in this manner. As this ends up being a test
within another function we can use !tools_build() as a test here.

Cc: AKASHI Takahiro 
Cc: Simon Glass 
Signed-off-by: Tom Rini 
Reviewed-by: Simon Glass