u-boot.git/lib/rsa, branch v2016.03

rsa : Compile Modular Exponentiation files based on CONFIG_RSA_SOFTWARE_EXP

2015-03-05T20:04:59+00:00

Remove dependency of rsa_mod_exp from CONFIG_FIT_SIGNATURE.
As rsa modular exponentiation is an independent module
and can be invoked independently.

Signed-off-by: Gaurav Rana 
Acked-by: Simon Glass 
Reviewed-by: York Sun

rsa: Use checksum algorithms from struct hash_algo

2015-01-30T00:09:59+00:00

Currently the hash functions used in RSA are called directly from the sha1
and sha256 libraries. Change the RSA checksum library to use the progressive
hash API's registered with struct hash_algo. This will allow the checksum
library to use the hardware accelerated progressive hash API's once available.

Signed-off-by: Ruchika Gupta 
CC: Simon Glass 
Acked-by: Simon Glass 
Signed-off-by: Simon Glass 
(Fixed build error in am335x_boneblack_vboot due to duplicate CONFIG_DM)

Change-Id: Ic44279432f88d4e8594c6e94feb1cfcae2443a54

lib/rsa: Add Kconfig for devices supporting RSA Modular Exponentiation

2015-01-30T00:09:59+00:00

Kconfig option added for devices which support RSA Verification.
1. RSA_SOFTWARE_EXP
Enables driver for supporting RSA Modular Exponentiation in Software
2. RSA_FREESCALE_EXP
Enables driver for supporting RSA Modular Exponentiation using Freescale specific
driver

The above drivers use RSA uclass

Signed-off-by: Ruchika Gupta 
CC: Simon Glass 
Acked-by: Simon Glass 
Signed-off-by: Simon Glass 
(Removed duplicate line in Kconfig comment)

Change-Id: I7663c4d5350e2bfc3dfa2696f70ef777d6ccc6f6

lib/rsa: Modify rsa to use DM driver

2015-01-30T00:09:58+00:00

Modify rsa_verify to use the rsa driver of DM library .The tools
will continue to use the same RSA sw library.

CONFIG_RSA is now dependent on CONFIG_DM. All configurations which
enable FIT based signatures have been modified to enable CONFIG_DM
by default.

Signed-off-by: Ruchika Gupta 
CC: Simon Glass 
Acked-by: Simon Glass

rsa: Split the rsa-verify to separate the modular exponentiation

2015-01-30T00:09:58+00:00

Public exponentiation which is required in rsa verify functionality is
tightly integrated with verification code in rsa_verify.c. The patch
splits the file into twp separating the modular exponentiation.

1. rsa-verify.c
- The file parses device tree keys node to fill a keyprop structure.
The keyprop structure can then be converted to implementation specific
format.
(struct rsa_pub_key for sw implementation)
- The parsed device tree node is then passed to a generic rsa_mod_exp
function.

2. rsa-mod-exp.c
Move the software specific functions related to modular exponentiation
from rsa-verify.c to this file.

Signed-off-by: Ruchika Gupta 
CC: Simon Glass 
Acked-by: Simon Glass

rsa: Fix two errors in the implementation

2014-08-09T15:17:04+00:00

1. Failure to set the return code correctly
2. Failure to detect the loop end condition when the value is equal to
the modulus.

Reported-by: Jeroen Hofstee 
Signed-off-by: Simon Glass

Implement generalised RSA public exponents for verified boot

2014-08-09T15:17:01+00:00

Remove the verified boot limitation that only allows a single
RSA public exponent of 65537 (F4).  This change allows use with
existing PKI infrastructure and has been tested with HSM-based
PKI.

Change the configuration OF tree format to store the RSA public
exponent as a 64 bit integer and implement backward compatibility
for verified boot configuration trees without this extra field.

Parameterise vboot_test.sh to test different public exponents.

Mathematics and other hard work by Andrew Bott.

Tested with the following public exponents: 3, 5, 17, 257, 39981,
50457, 65537 and 4294967297.

Signed-off-by: Andrew Bott 
Signed-off-by: Andrew Wishart 
Signed-off-by: Neil Piercy 
Signed-off-by: Michael van der Westhuizen 
Cc: Simon Glass

includes: move openssl headers to include/u-boot

2014-06-19T15:19:04+00:00

commit 18b06652cd "tools: include u-boot version of sha256.h"
unconditionally forced the sha256.h from u-boot to be used
for tools instead of the host version. This is fragile though
as it will also include the host version. Therefore move it
to include/u-boot to join u-boot/md5.h etc which were renamed
for the same reason.

cc: Simon Glass 
Signed-off-by: Jeroen Hofstee

mkimage: Automatically expand FDT in more cases

2014-06-19T15:18:56+00:00

The original code did not cover every case and there was a missing negative
sign in one case. Expand the coverage and fix the bug.

Signed-off-by: Simon Glass

fdt: Update functions which write to an FDT to return -ENOSPC

2014-06-11T20:25:46+00:00

When writing values into an FDT it is possible that there will be
insufficient space. If the caller gets a useful error then it can
potentially deal with the situation.

Adjust these functions to return -ENOSPC when the FDT is full.

Signed-off-by: Simon Glass