u-boot.git/lib/rsa, branch v2020.04

image: Use constants for 'required' and 'key-name-hint'

2020-04-01T13:45:09+00:00

These are used in multiple places so update them to use a shared #define.

Signed-off-by: Simon Glass 
Reviewed-by: Philippe Reynes

dm: core: Create a new header file for 'compat' features

2020-02-06T02:33:46+00:00

At present dm/device.h includes the linux-compatible features. This
requires including linux/compat.h which in turn includes a lot of headers.
One of these is malloc.h which we thus end up including in every file in
U-Boot. Apart from the inefficiency of this, it is problematic for sandbox
which needs to use the system malloc() in some files.

Move the compatibility features into a separate header file.

Signed-off-by: Simon Glass

rsa: Return immediately if required-key verification fails

2019-10-15T14:40:03+00:00

Currently, if image verification with a required key fails, rsa_verify()
code tries to find another key to verify the FIT image. This however, is
not the intended behavior as the documentation says that required keys
"must be verified for the image / configuration to be considered valid".

This patch fixes the issue by making rsa_verify() return immediately if
the verification of a required key fails.

Signed-off-by: Daniele Alessandrelli

lib: rsa: add support to other openssl engine types than pkcs11

2019-07-18T15:31:23+00:00

There are multiple other openssl engines used by HSMs that can be used to
sign FIT images instead of forcing users to use pkcs11 type of service.

Relax engine selection so that other openssl engines can be specified and
use generic key id definition formula.

Signed-off-by: Vesa Jääskeläinen 
Cc: Tom Rini

rsa: check that pointer checksum isn't NULL before using it

2019-03-25T15:44:12+00:00

The pointer checksum were used before checking that it
isn't NULL. We move the code that use it after the check.

Reported-by: Coverity (CID: 185835)
Signed-off-by: Philippe Reynes 
Reviewed-by: Simon Glass

rsa: add support of padding pss

2018-12-03T15:44:10+00:00

We add the support of the padding pss for rsa signature.
This new padding is often recommended instead of pkcs-1.5.

Signed-off-by: Philippe Reynes 
Reviewed-by: Simon Glass

rsa: add a structure for the padding

2018-12-03T15:44:10+00:00

The rsa signature use a padding algorithm. By default, we use the
padding pkcs-1.5. In order to add some new padding algorithm, we
add a padding framework to manage several padding algorithm.
The choice of the padding is done in the file .its.

Signed-off-by: Philippe Reynes 
Reviewed-by: Simon Glass

rsa: use new openssl API to create signature

2018-12-03T15:44:10+00:00

Previous implementation of the rsa signature was using
the openssl API EVP_Sign*, but the new openssl API
EVP_DigestSign* is more flexible. So we move to this
new API.

Signed-off-by: Philippe Reynes 
Reviewed-by: Simon Glass

rsa: Fix LibreSSL before v2.7.0

2018-08-13T18:03:57+00:00

Fix LibreSSL compilation for versions before v2.7.0.

Signed-off-by: Caliph Nomble 
Reviewed-by: Jonathan Gray

xilinx: zynq: Add support to secure images

2018-07-19T08:49:54+00:00

This patch basically adds two new commands for loadig secure
images.
1. zynq rsa adds support to load secure image which can be both
   authenticated or encrypted or both authenticated and encrypted
   image in xilinx bootimage(BOOT.bin) format.
2. zynq aes command adds support to decrypt and load encrypted
   image back to DDR as per destination address. The image has
   to be encrypted using xilinx bootgen tool and to get only the
   encrypted image from tool use -split option while invoking
   bootgen.

Signed-off-by: Siva Durga Prasad Paladugu 
Signed-off-by: Michal Simek