u-boot.git/tools/image-host.c, branch v2020.07

libfdt: split fdt_region declarations out to

2020-04-26T20:24:08+00:00

fdt_region APIs are not part of libfdt. They are U-Boot extension
for the verified boot. Split the declarations related to fdt_region
out of . This allows  to become a
simple wrapper file, like Linux does.

Signed-off-by: Masahiro Yamada

tools: image-host.c: use correct output format

2020-04-24T14:51:32+00:00

When building on a 32bit host the following warning occurs:

tools/image-host.c: In function ‘fit_image_read_data’:
tools/image-host.c:310:42: warning: format ‘%ld’ expects argument of type
‘long int’, but argument 3 has type ‘ssize_t’ {aka ‘int’} [-Wformat=]
   printf("Can't read all file %s (read %ld bytes, expexted %ld)\n",
                                        ~~^
                                        %d
          filename, n, sbuf.st_size);
                    ~

n is of type ssize_t so we should use %zd for printing.

Fixes: 7298e422504e ("mkimage: fit: add support to encrypt image with aes")
Signed-off-by: Heinrich Schuchardt 
Reviewed-by: Simon Glass

image: Use constants for 'required' and 'key-name-hint'

2020-04-01T13:45:09+00:00

These are used in multiple places so update them to use a shared #define.

Signed-off-by: Simon Glass 
Reviewed-by: Philippe Reynes

fit_check_sign: Allow selecting the configuration to verify

2020-04-01T13:45:09+00:00

This tool always verifies the default configuration. It is useful to be
able to verify a specific one. Add a command-line flag for this and plumb
the logic through.

Signed-off-by: Simon Glass

image: Be a little more verbose when checking signatures

2020-04-01T13:45:09+00:00

It is useful to be a little more specific about what is being checked.
Update a few messages to help with this.

Signed-off-by: Simon Glass

tools: image-host.c: remove uboot_aes.h

2020-02-25T16:29:39+00:00

The include uboot_aes.h is not useful and
it breaks the compilation on android, so
we remove it.

Signed-off-by: Philippe Reynes 
Reported-by: Praneeth Bajjuri

mkimage: fit: add support to encrypt image with aes

2020-01-17T15:15:49+00:00

This commit add the support of encrypting image with aes
in mkimage. To enable the ciphering, a node cipher with
a reference to a key and IV (Initialization Vector) must
be added to the its file. Then mkimage add the encrypted
image to the FIT and add the key and IV to the u-boot
device tree.

Signed-off-by: Philippe Reynes

rsa: add a structure for the padding

2018-12-03T15:44:10+00:00

The rsa signature use a padding algorithm. By default, we use the
padding pkcs-1.5. In order to add some new padding algorithm, we
add a padding framework to manage several padding algorithm.
The choice of the padding is done in the file .its.

Signed-off-by: Philippe Reynes 
Reviewed-by: Simon Glass

mkimage: fit_image: Add support for SOURCE_DATE_EPOCH in signatures

2018-07-10T20:56:00+00:00

When generating timestamps in signatures, use imagetool_get_source_date()
so we can be overridden by SOURCE_DATE_EPOCH to generate reproducible
images.

Signed-off-by: Alex Kiernan 
Reviewed-by: Simon Glass

vboot: Do not use hashed-strings offset

2018-07-10T20:55:58+00:00

The hashed-strings signature property includes two uint32_t values.
The first is unneeded as there should never be a start offset into the
strings region. The second, the size, is needed because the added
signature node appends to this region.

See tools/image-host.c, where a static 0 value is used for the offset.

Signed-off-by: Teddy Reed 
Reviewed-by: Simon Glass