u-boot.git/lib/rsa, branch v2024.04

lib: rsa: Allow legacy URI specification without "pkcs11:"

2024-01-18T22:50:27+00:00

But emit a warning for it. Then we can remove support when
everyone had time to update their scripts, docs, CI etc.

Fixes: ece85cc020 rsa: use pkcs11 uri as defined in rfc7512

Signed-off-by: Csókás Bence

lib: rsa: Fix PKCS11 URI if one is not given in `keydir`

2024-01-18T22:50:27+00:00

If `keydir` is not present, we need to build a PKCS11 URI
from just the key name. In this case, we *do* need 'pkcs11:'

Fixes: ece85cc020 rsa: use pkcs11 uri as defined in rfc7512

Signed-off-by: Csókás Bence

lib: rsa: Print detailed error info in rsa_engine_init() on engine resolution failure

2023-12-21T16:59:49+00:00

Signed-off-by: Csókás Bence 
Reviewed-by: Tom Rini

lib: Remove inclusion from these files

2023-12-21T13:54:37+00:00

After some header file cleanups to add missing include files, remove
common.h from all files in the lib directory. This primarily means just
dropping the line but in a few cases we need to add in other header
files now.

Reviewed-by: Simon Glass 
Signed-off-by: Tom Rini

global: Restrict use of '#include '

2023-12-21T13:54:05+00:00

In general terms, we -include include/linux/kconfig.h and so normal
U-Boot code does not need to also #include it. However, for code which
is shared with userspace we may need to add it so that either our full
config is available or so that macros such as CONFIG_IS_ENABLED() can be
evaluated. In this case make sure that we guard these includes with a
test for USE_HOSTCC so that it clear as to why we're doing this.

Reviewed-by: Simon Glass 
Signed-off-by: Tom Rini

rsa: use pkcs11 uri as defined in rfc7512

2023-12-20T14:48:17+00:00

pkcs11 : change engine uri to use full pk11-URI as defined in:

https://www.rfc-editor.org/rfc/rfc7512.html
Signed-off-by: Ayoub Zaki

lib: rsa: cosmetic: fix building warning

2023-01-11T16:54:50+00:00

add initialization of variable 'node',this can aviod the building
warning:

    'node' may be used uninitialized [-Wmaybe-uninitialized]

Signed-off-by: Haijun Qin 
Reviewed-by: Simon Glass

rsa-verify: Rework host check for CONFIG_RSA_VERIFY_WITH_PKEY

2022-12-23T15:07:03+00:00

While we do not want to use CONFIG_RSA_VERIFY_WITH_PKEY on the host, we
cannot undef the symbol in this manner. As this ends up being a test
within another function we can use !tools_build() as a test here.

Cc: AKASHI Takahiro 
Cc: Simon Glass 
Signed-off-by: Tom Rini 
Reviewed-by: Simon Glass

lib: rsa: fix padding_pss_verify

2022-09-15T13:57:11+00:00

Check the that the hash length is shorter than the message length. This
avoids:

    ./tools/../lib/rsa/rsa-verify.c:275:11: warning:
    ‘*db’ may be used uninitialized [-Wmaybe-uninitialized]
      275 |         db[0] &= 0xff >> leftmost_bits;

Fixes: 061daa0b61f0 ("rsa: add support of padding pss")
Signed-off-by: Heinrich Schuchardt 
Reviewed-by: Simon Glass

spl: Ensure all SPL symbols in Kconfig have some SPL dependency

2022-07-07T13:29:08+00:00

Tighten up symbol dependencies in a number of places.  Ensure that a SPL
specific option has at least a direct dependency on SPL.  In places
where it's clear that we depend on something more specific, use that
dependency instead.  This means in a very small number of places we can
drop redundant dependencies.

Reported-by: Pali Rohár 
Signed-off-by: Tom Rini