u-boot.git/lib/rsa, branch v2015.01

rsa: Fix two errors in the implementation

2014-08-09T15:17:04+00:00

1. Failure to set the return code correctly
2. Failure to detect the loop end condition when the value is equal to
the modulus.

Reported-by: Jeroen Hofstee 
Signed-off-by: Simon Glass

Implement generalised RSA public exponents for verified boot

2014-08-09T15:17:01+00:00

Remove the verified boot limitation that only allows a single
RSA public exponent of 65537 (F4).  This change allows use with
existing PKI infrastructure and has been tested with HSM-based
PKI.

Change the configuration OF tree format to store the RSA public
exponent as a 64 bit integer and implement backward compatibility
for verified boot configuration trees without this extra field.

Parameterise vboot_test.sh to test different public exponents.

Mathematics and other hard work by Andrew Bott.

Tested with the following public exponents: 3, 5, 17, 257, 39981,
50457, 65537 and 4294967297.

Signed-off-by: Andrew Bott 
Signed-off-by: Andrew Wishart 
Signed-off-by: Neil Piercy 
Signed-off-by: Michael van der Westhuizen 
Cc: Simon Glass

includes: move openssl headers to include/u-boot

2014-06-19T15:19:04+00:00

commit 18b06652cd "tools: include u-boot version of sha256.h"
unconditionally forced the sha256.h from u-boot to be used
for tools instead of the host version. This is fragile though
as it will also include the host version. Therefore move it
to include/u-boot to join u-boot/md5.h etc which were renamed
for the same reason.

cc: Simon Glass 
Signed-off-by: Jeroen Hofstee

mkimage: Automatically expand FDT in more cases

2014-06-19T15:18:56+00:00

The original code did not cover every case and there was a missing negative
sign in one case. Expand the coverage and fix the bug.

Signed-off-by: Simon Glass

fdt: Update functions which write to an FDT to return -ENOSPC

2014-06-11T20:25:46+00:00

When writing values into an FDT it is possible that there will be
insufficient space. If the caller gets a useful error then it can
potentially deal with the situation.

Adjust these functions to return -ENOSPC when the FDT is full.

Signed-off-by: Simon Glass

tools, fit_check_sign: verify a signed fit image

2014-03-21T20:40:38+00:00

add host tool "fit_check_sign" which verifies, if a fit image is
signed correct.

Signed-off-by: Heiko Schocher 
Cc: Simon Glass

rsa: add sha256,rsa4096 algorithm

2014-03-21T20:39:35+00:00

Add support for sha256,rsa4096 signatures in u-boot.

Signed-off-by: Heiko Schocher 
Acked-by: Simon Glass 
Cc: andreas@oetken.name

rsa: add sha256-rsa2048 algorithm

2014-03-21T20:39:34+00:00

based on patch from andreas@oetken.name:

http://patchwork.ozlabs.org/patch/294318/
commit message:
I currently need support for rsa-sha256 signatures in u-boot and found out that
the code for signatures is not very generic. Thus adding of different
hash-algorithms for rsa-signatures is not easy to do without copy-pasting the
rsa-code. I attached a patch for how I think it could be better and included
support for rsa-sha256. This is a fast first shot.

aditionally work:
- removed checkpatch warnings
- removed compiler warnings
- rebased against current head

Signed-off-by: Heiko Schocher 
Cc: andreas@oetken.name
Cc: Simon Glass

lib: descend into sub directories only when it is necessary

2013-11-17T19:11:30+00:00

Signed-off-by: Masahiro Yamada

lib: convert makefiles to Kbuild style

2013-10-31T17:26:44+00:00

Signed-off-by: Masahiro Yamada