diff options
| author | Alexandru Gagniuc <[email protected]> | 2021-07-29 11:47:18 -0500 |
|---|---|---|
| committer | Patrice Chotard <[email protected]> | 2021-08-16 10:49:35 +0200 |
| commit | 61416fe9df966319866f058bb69c49922f33adcb (patch) | |
| tree | caf81e68c0c46de228dd11941752eb4801a1b491 | |
| parent | ee870859ce19a3b1b932e946646cb85f2474ab39 (diff) | |
Kconfig: FIT_SIGNATURE should not select RSA_VERIFY
FIT signatures can now be implemented with ECDSA. The assumption that
all FIT images are signed with RSA is no longer valid. Thus, instead
of 'select'ing RSA, only 'imply' it. This doesn't change the defaults,
but allows one to explicitly disable RSA support.
Signed-off-by: Alexandru Gagniuc <[email protected]>
Reviewed-by: Simon Glass <[email protected]>
Reviewed-by: Igor Opaniuk <[email protected]>
Reviewed-by: Patrick Delaunay <[email protected]>
| -rw-r--r-- | common/Kconfig.boot | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/common/Kconfig.boot b/common/Kconfig.boot index f39df04bbfa..0d4c38402c1 100644 --- a/common/Kconfig.boot +++ b/common/Kconfig.boot @@ -76,8 +76,8 @@ config FIT_SIGNATURE bool "Enable signature verification of FIT uImages" depends on DM select HASH - select RSA - select RSA_VERIFY + imply RSA + imply RSA_VERIFY select IMAGE_SIGN_INFO select FIT_FULL_CHECK help @@ -186,8 +186,8 @@ config SPL_FIT_SIGNATURE select SPL_FIT select SPL_CRYPTO select SPL_HASH_SUPPORT - select SPL_RSA - select SPL_RSA_VERIFY + imply SPL_RSA + imply SPL_RSA_VERIFY select SPL_IMAGE_SIGN_INFO select SPL_FIT_FULL_CHECK |