projects / platform / kernel / u-boot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b1c6a54) | patch
mkimage: Add support for signing with pkcs11
authorGeorge McCollister <george.mccollister@gmail.com>
Fri, 6 Jan 2017 19:14:17 +0000 (13:14 -0600)
committerTom Rini <trini@konsulko.com>
Sat, 14 Jan 2017 21:47:13 +0000 (16:47 -0500)
commitf1ca1fdebf1cde1c37c91b3d85f8b7af111112ea
treeb34c5ae6c177400ed6ed5524266cd2912138a292tree | snapshot
parentb1c6a54a534d2579db1375039a45572fe38d0ce8commit | diff
mkimage: Add support for signing with pkcs11

Add support for signing with the pkcs11 engine. This allows FIT images
to be signed with keys securely stored on a smartcard, hardware security
module, etc without exposing the keys.

Support for other engines can be added in the future by modifying
rsa_engine_get_pub_key() and rsa_engine_get_priv_key() to construct
correct key_id strings.

Signed-off-by: George McCollister <george.mccollister@gmail.com>
doc/uImage.FIT/signature.txt diff | blob | history
include/image.h diff | blob | history
lib/rsa/rsa-sign.c diff | blob | history
tools/fit_image.c diff | blob | history
tools/image-host.c diff | blob | history
tools/imagetool.h diff | blob | history
tools/mkimage.c diff | blob | history
Domain: System / Kernel;