[{"id":3673009,"web_url":"http://patchwork.ozlabs.org/comment/3673009/","msgid":"","list_archive_url":null,"date":"2026-04-03T07:41:47","subject":"Re: [PATCH v3 1/3] tools: binman: Test signing an encrypted FIT with\n a preload header","submitter":{"id":83555,"url":"http://patchwork.ozlabs.org/api/people/83555/","name":"Paul HENRYS","email":"paul.henrys_ext@softathome.com"},"content":"Hi Tom,\n\nJust after pushing the v3 I realized that this test would better go \nunder tools/binman/test/security/ instead of tools/binman/test/fit/.\nI am going to push a v4 with this change. Sorry for the inconvenience.\n\nKind regards,\nPaul\n\nOn 03/04/2026 09:32, Paul HENRYS wrote:\n> Add a test to verify the preload header correctly signs an encrypted\n> FIT. This test exercises the case where encryption uses random IVs that\n> would change between mkimage calls.\n>\n> Signed-off-by: Paul HENRYS \n> ---\n> Changes for v3:\n> - Rebase against 'next' branch\n> - Move test in tools/binman/test/fit without a numeric prefix\n> - Update encryption key path passed to _DoReadFileDtb()\n>\n> tools/binman/ftest.py | 21 +++++++\n> .../test/fit/pre_load_fit_encrypted.dts | 63 +++++++++++++++++++\n> 2 files changed, 84 insertions(+)\n> create mode 100644 tools/binman/test/fit/pre_load_fit_encrypted.dts\n>\n> diff --git a/tools/binman/ftest.py b/tools/binman/ftest.py\n> index ca5149ee654..301c7705837 100644\n> --- a/tools/binman/ftest.py\n> +++ b/tools/binman/ftest.py\n> @@ -5895,6 +5895,27 @@ fdt fdtmap Extract the devicetree blob from the fdtmap\n> data = self._DoReadFileDtb('security/pre_load_invalid_key.dts',\n> entry_args=entry_args)\n> \n> + def testPreLoadEncryptedFit(self):\n> + \"\"\"Test an encrypted FIT image with a pre-load header\"\"\"\n> + entry_args = {\n> + 'pre-load-key-path': os.path.join(self._binman_dir, 'test'),\n> + }\n> + data = tools.read_file(self.TestFile(\"fit/aes256.bin\"))\n> + self._MakeInputFile(\"keys/aes256.bin\", data)\n> +\n> + keys_subdir = os.path.join(self._indir, \"keys\")\n> + data = self._DoReadFileDtb(\n> + 'fit/pre_load_fit_encrypted.dts', entry_args=entry_args,\n> + extra_indirs=[keys_subdir])[0]\n> +\n> + image_fname = tools.get_output_filename('image.bin')\n> + is_signed = self._CheckPreload(image_fname, self.TestFile(\"dev.key\"))\n> +\n> + self.assertEqual(PRE_LOAD_MAGIC, data[:len(PRE_LOAD_MAGIC)])\n> + self.assertEqual(PRE_LOAD_VERSION, data[4:4 + len(PRE_LOAD_VERSION)])\n> + self.assertEqual(PRE_LOAD_HDR_SIZE, data[8:8 + len(PRE_LOAD_HDR_SIZE)])\n> + self.assertEqual(is_signed, True)\n> +\n> def _CheckSafeUniqueNames(self, *images):\n> \"\"\"Check all entries of given images for unsafe unique names\"\"\"\n> for image in images:\n> diff --git a/tools/binman/test/fit/pre_load_fit_encrypted.dts b/tools/binman/test/fit/pre_load_fit_encrypted.dts\n> new file mode 100644\n> index 00000000000..f5e9bf9426c\n> --- /dev/null\n> +++ b/tools/binman/test/fit/pre_load_fit_encrypted.dts\n> @@ -0,0 +1,63 @@\n> +// SPDX-License-Identifier: GPL-2.0+\n> +\n> +/dts-v1/;\n> +\n> +/ {\n> +\t#address-cells = <1>;\n> +\t#size-cells = <1>;\n> +\n> +\tbinman {\n> +\t\tpre-load {\n> +\t\t\tcontent = <&image>;\n> +\t\t\talgo-name = \"sha256,rsa2048\";\n> +\t\t\tkey-name = \"dev.key\";\n> +\t\t\theader-size = <4096>;\n> +\t\t\tversion = <0x11223344>;\n> +\t\t};\n> +\n> +\t\timage: fit {\n> +\t\t\tfit,encrypt;\n> +\t\t\tdescription = \"Test a FIT with encrypted data and signed with a preload\";\n> +\t\t\t#address-cells = <1>;\n> +\n> +\t\t\timages {\n> +\t\t\t\tu-boot {\n> +\t\t\t\t\tdescription = \"U-Boot\";\n> +\t\t\t\t\ttype = \"firmware\";\n> +\t\t\t\t\tarch = \"arm64\";\n> +\t\t\t\t\tos = \"U-Boot\";\n> +\t\t\t\t\tcompression = \"none\";\n> +\t\t\t\t\tload = <00000000>;\n> +\t\t\t\t\tentry = <00000000>;\n> +\t\t\t\t\tcipher {\n> +\t\t\t\t\t\talgo = \"aes256\";\n> +\t\t\t\t\t\tkey-name-hint = \"aes256\";\n> +\t\t\t\t\t};\n> +\t\t\t\t\tu-boot-nodtb {\n> +\t\t\t\t\t};\n> +\t\t\t\t};\n> +\t\t\t\tfdt-1 {\n> +\t\t\t\t\tdescription = \"Flattened Device Tree blob\";\n> +\t\t\t\t\ttype = \"flat_dt\";\n> +\t\t\t\t\tarch = \"arm64\";\n> +\t\t\t\t\tcompression = \"none\";\n> +\t\t\t\t\tcipher {\n> +\t\t\t\t\t\talgo = \"aes256\";\n> +\t\t\t\t\t\tkey-name-hint = \"aes256\";\n> +\t\t\t\t\t};\n> +\t\t\t\t\tu-boot-dtb {\n> +\t\t\t\t\t};\n> +\t\t\t\t};\n> +\t\t\t};\n> +\n> +\t\t\tconfigurations {\n> +\t\t\t\tdefault = \"conf-1\";\n> +\t\t\t\tconf-1 {\n> +\t\t\t\t\tdescription = \"Boot U-Boot with FDT blob\";\n> +\t\t\t\t\tfirmware = \"u-boot\";\n> +\t\t\t\t\tfdt = \"fdt-1\";\n> +\t\t\t\t};\n> +\t\t\t};\n> +\t\t};\n> +\t};\n> +};","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=softathome1.onmicrosoft.com header.i=@softathome1.onmicrosoft.com\n header.a=rsa-sha256 header.s=selector1-softathome1-onmicrosoft-com\n header.b=ViJw4yej;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de\n (client-ip=85.214.62.61; helo=phobos.denx.de;\n envelope-from=u-boot-bounces@lists.denx.de; receiver=patchwork.ozlabs.org)","phobos.denx.de;\n dmarc=none (p=none dis=none) header.from=softathome.com","phobos.denx.de;\n spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de","phobos.denx.de;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=softathome1.onmicrosoft.com header.i=@softathome1.onmicrosoft.com\n header.b=\"ViJw4yej\";\n\tdkim-atps=neutral","phobos.denx.de; dmarc=none (p=none dis=none)\n header.from=softathome.com","phobos.denx.de;\n spf=pass smtp.mailfrom=paul.henrys_ext@softathome.com","dkim=none (message not signed)\n header.d=none;dmarc=none action=none header.from=softathome.com;"],"Received":["from phobos.denx.de (phobos.denx.de [85.214.62.61])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fn9fF0qHcz1yD3\n\tfor ; Fri, 03 Apr 2026 18:41:57 +1100 (AEDT)","from h2850616.stratoserver.net (localhost [IPv6:::1])\n\tby phobos.denx.de (Postfix) with ESMTP id 348058407E;\n\tFri, 3 Apr 2026 09:41:54 +0200 (CEST)","by phobos.denx.de (Postfix, from userid 109)\n id 533FD840B0; Fri, 3 Apr 2026 09:41:53 +0200 (CEST)","from PA5P264CU001.outbound.protection.outlook.com\n (mail-francecentralazlp170100000.outbound.protection.outlook.com\n [IPv6:2a01:111:f403:c20a::])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))\n (No client certificate requested)\n by phobos.denx.de (Postfix) with ESMTPS id 4A1C683CF5\n for ;\n Fri, 3 Apr 2026 09:41:51 +0200 (CEST)","from PAZP264MB3119.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:1f2::23)\n by PR0P264MB2632.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:1d3::12)\n with Microsoft SMTP Server (version=TLS1_2,\n cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9769.20; Fri, 3 Apr\n 2026 07:41:49 +0000","from PAZP264MB3119.FRAP264.PROD.OUTLOOK.COM\n ([fe80::5c56:6063:a2be:2a32]) by PAZP264MB3119.FRAP264.PROD.OUTLOOK.COM\n ([fe80::5c56:6063:a2be:2a32%4]) with mapi id 15.20.9769.018; Fri, 3 Apr 2026\n 07:41:48 +0000"],"X-Spam-Checker-Version":"SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de","X-Spam-Level":"","X-Spam-Status":"No, score=0.6 required=5.0 tests=BAYES_00,DKIM_SIGNED,\n DKIM_VALID,RCVD_IN_DNSWL_BLOCKED,SPF_HELO_PASS,SPF_PASS,\n SUSPICIOUS_RECIPS autolearn=no autolearn_force=no version=3.4.2","ARC-Seal":"i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;\n b=XMM4NDxiL4k3MVEVfWjxU8h8fG5TcqKDHadU91qj6Ahj9+X0Aoveaii7S+Xkd90w+yZOySn45HPJNj8OR9oQ6V7qLHLFQBgViGF0kOYydrSbVT8pfY5RDgu0+xVSdFalcLoXX6YPU1e6uZ0Yirvh4GfztmMObLMQTEe59cp9sM0YG/h+eq4U2L6UjCscwB70s9RzQJWMleU5Q29S/Nhogryu6W4A7bPqjoTwvblDaB2T8AvWyWISxv5jIInWmWE/x412XicrxF4WAExotzCZN6ME+ym8qSS84dN01UGNhQECqtVhpnDz4hNJJ0K5b3WZMn0LVlNildNFIvsl0RJvhQ==","ARC-Message-Signature":"i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;\n s=arcselector10001;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;\n bh=vAAQ7/lt36x8tejb0r8DSLRsS4ejJE/ztNNZVtSKq08=;\n b=YcwHX1u5vHoHzXJoUtxrZPgprvb3ssbsb8AhyVd0FyinRN6ftk3JhICXSXrhCoF8mPEMK+IpZ5YWGC7R56KRQSKKFZSglzgA4F6XCJpg1quBNrFwScnRvo+dSz6YhFl24KSxeSXAsvN8238O2Mxj3PvAZnuVtkBzIrMOVW16bpD7G9co6PKiXi/IViESozH2ec12+QfOZVjkhpE6EttSOgJwC/ApZ7eXvekbW6i7zkOUIKnThY4wW7WgYvuKYn8VgTEuoOHuuNWo49GfDvQjjwT2eS6ojd8w7psLxI7LsuCSUnh9Ur126Nb48JgDZn95Of3MmqmFpa6Idldh1H4XKA==","ARC-Authentication-Results":"i=1; mx.microsoft.com 1; spf=pass\n smtp.mailfrom=softathome.com; dmarc=pass action=none\n header.from=softathome.com; dkim=pass header.d=softathome.com; arc=none","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=softathome1.onmicrosoft.com; s=selector1-softathome1-onmicrosoft-com;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;\n bh=vAAQ7/lt36x8tejb0r8DSLRsS4ejJE/ztNNZVtSKq08=;\n b=ViJw4yejmQf+3Q4UmBKEs7wxad/wqLCHz6yzZZG7E4tWNtvlEH3Y806nXc4wbVh6n/ega7pPhhsmyZQOjGQPUNPIagh6JzgDayBLBR8jO8agqQMgqGylvw3JPmQKtHM5eDnG+/gBRYPwG7bP5mWFaFg4ASot7raV7b9YBcSoYM7GtGa7nI80CsGv3wNGTIYdis63gx1K7RkiInrtRTCwcasPfMsR5XkQtGv3ISQHYF2hja9rcEnfjyb/hP7jDEDLBv+nSk6XMgMMZ0sovYmU9UCRC9nUhGTfpWOa9PId1WtlOgEaj3jtU+zKd4D5MgD0qo9QcsRXBIOn1jwth800qQ==","Message-ID":"","Date":"Fri, 3 Apr 2026 09:41:47 +0200","User-Agent":"Mozilla Thunderbird","Subject":"Re: [PATCH v3 1/3] tools: binman: Test signing an encrypted FIT with\n a preload header","To":"trini+nodisclaimer@konsulko.com","Cc":"sjg+nodisclaimer@chromium.org, alpernebiyasak+nodisclaimer@gmail.com,\n philippe.reynes+nodisclaimer@softathome.com,\n u-boot+nodisclaimer@lists.denx.de","References":"<20260402192431.2421155-1-yan.wang@softathome.com>\n <20260403073251.1051533-1-paul.henrys_ext@softathome.com>","Content-Language":"en-US","From":"Paul HENRYS ","Autocrypt":"addr=paul.henrys_ext@softathome.com; keydata=\n xsFNBGQYeUEBEACp9Mxa0R+O3VXwft27iMo1uMfatjkGSMebTe/NXYDeXAc3ZhaktWik/kN0\n dksMdNHuDjQshXFjf16QCp93REtLE1m+h3d1k2KH7VU0Is/wtrAlz3zxyxWwod3H8MF3cBes\n SvFgEsb/qFQ+Re8rKG3+ab0dEqTPTsHJWkciZOxO7+J5hEcS9FKpGk5OxCWRgDHzdDnXi5p4\n VLgvXtoKujLpPlBqpGSNziJzSYtBgt979tzLkt6TNw6kL1/uNCYcmKkutAL/deVdThdMhF8p\n pWz8cSLFyB07/+oCxVVQLdsgNfpoTcv9PFuOH9Fl01F0fezcgwGwk5vr5mrNqqMeG9byrGdd\n Fos6Xf6xACZ7tUXifeFs1jr8GuB5ErGgrSIPTXJBgHHgWr8WUVcTTPjBoPWHR5hMQ4oh7+6Z\n fCdlrQSyjUHz8DWG79mRZ0dQiiPlXBxOZ5dO47Z2NVhKo8GLyHklrhaO1mgqKfHIDGF/IX/a\n TTXyiGHU/anYmzcSKLFkn5C+TMNXx4jBOT2yp51wMX2zh9odDzq/EPbN+A2kweQrfLBgLwcs\n JzsskWpji7Lb7dS8YS3yleEDhL1o26if+fE5YqlDW2A2OGjEBd2HRDyrLAcPll+mhnflgFqK\n IpHRPNsdjUqwMvWknzXMDi/u1FlOCgzFQpqRwZ4k1zyhC4O/UwARAQABzSxQYXVsIEhFTlJZ\n UyA8cGF1bC5oZW5yeXNfZXh0QHNvZnRhdGhvbWUuY29tPsLBjgQTAQoAOBYhBC/0TbUGNniU\n 1s2pmlybfngNcCltBQJkGHlBAhsDBQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEFybfngN\n cCltEz0P/A5X/r/RlxwW7S0WBp7MK52hGtT+CApyKqEWRyJbovN6Gjor0uu+VLPqmk8y8ufi\n R2zAvO+cB3hziL7+qY/uxzXIp7j2eziBhhiM4GGzv2BqR7fGXZC9Zy7edAoDVa9QXm8MsCq9\n Ai+87bapfXek/92cnGK8Q40mRSxlgmk1ZyI1mY579k9K4el5ja48aWcvOmTsIeleGBn2BoFv\n dp7/la++0Sfs2HGtxrWeZ+eCUEGFJweU8bb+1nTmK0ksA04qFjlnS3QNPvHteeDd+eyJyq0a\n 6QGrYw7czPJsmjGa6KkSdqarG1zh79GMiCvpA/kjp2V03+iRPe/OZDzEwZ3abESWxDx6z8Py\n xhsreNZG2VoNrc9QUK9hT5vYpQHvD+n2cd6V/zOBxIhH1/9I4gf4lGMYDR1ucZYJnlQarjMf\n Ty/eiur55M045vySk/ql8Jlfh7gFCBgmGd8A5LMhYc8UAA/RO9BAL7mUQh195uLmi3ARMAVQ\n TP2c9KDKV4t/Txu32oGis21Bxe8J5p8SNsMUkWV/zShLkGYiPFP3USBO9nht0TQ6+SyFXqH1\n FrmD8Iwpu7ykdAaaXVZ+8LKCR8n/je2GQ0JHcer2XoRvegwfLJFHG7CqtZZVZRxT9iYhWQAA\n xij5PpQVgHqzzHeJ0xs28n9GhFyOgU88HNruzzyzaC2QzsFNBGQYeUEBEACmlubHldszJX1R\n Gpx1T6ILdVe7rPY6SsV92JybiDghSoGzm2G76lN4BywF27xMjK4A1j1I0hdIKFmp7lUB1S/8\n NDpsiWF3YfMEhpdbEQqFvF6S+AkC0GUj1c4PNOThslFFRVSD3Zs/Oot+EJSQFA82Ws7RBBvk\n azfqlyhoLaO7A9tLQIT6E/PYVLj+YzSRWtG7LwIooYgHTmhrue6MXEk1ksQgbLJlAyhOTpoQ\n 80QRrck5Qcv7j12WtpZTNWiztjG4ZywlopZfpwtn48genI0PuZB++sRfaJvcrABY2eNHD9iR\n GxmnzDldt6r091fCC9fcY/A6Licbw/I/p42f2tzwmm7Ni8SXTMqkalhGmXyMqlgHBan/AOrM\n im11508QkY1Ls7FxuMq81QP/vppxt6B7DXmI587t/PU6GP9FSQ5uWoKbL3Ny3otRgo9IG7Kl\n gX8NqGtdSGqnUcbTsafXCnQmO/18MbdFTRbaXyeGCrndUMWBJlb9tvg0Mbd/WZUTnqNvyV8f\n JaY20NsGI07haZeuW3/Wey89EiqFQtHw+V69wQCTI6VPeByfcohe4CeFAuIGyx4LGYlP+Z78\n uj5PcL2xSmruqG70HaIyhr+Iom3F9QUXqR8kitUe6Bz4MjAvGN4jzblI6h+Q4UKHB5HY5Fjj\n Y0YqGFnS75Uos16VAKJUHQARAQABwsF2BBgBCgAgFiEEL/RNtQY2eJTWzamaXJt+eA1wKW0F\n AmQYeUECGwwACgkQXJt+eA1wKW2l3g/8CLQkwqgT5Pt4Nsup0/WugJWKaKeqREeUQFZCjIlQ\n oLGenrdeE3FevRyj1qGIHRIDg7zxO7bIcePIKMhzntXYByas+dsWI/u49WIjkn+agjdvnsfm\n 6iBNN2uHa27bcEGhOfvskcJVs6qPivUfcXGbl4ovF6DOHPTWsLpLkEANKK0tyZpQD2FKMHSu\n ST9edYn8gdVyCmxeSJ6uyJOBdJ62RZMgg1qYJt1TCF9SBpUYaD6boXZQLgJBIUyo5ah1OM41\n ZG4LtXnmbGoCjlfXADn1GKs6Q1tPeu7Az2HB9NmnUFYAaAk0U2TFE4c13hqBqbf28NE1i54V\n a1i4usgGeOyRYobNsB7wH1znbpuPqcFGRAln4lZt3KAIVmBtLQLUUsfeSLxNQW7mbMxJJaYG\n 2pUFD1r55Ye3ODy1qz7edVVsTWjUvZaaZ2d2kQGMe5k8hbZWMefaXTx5Gt2TOULgagRhkPM/\n MVtSwPLGzbgcPyGaMgwbNFg0Lgk+Z0eFfSGO0ROuKZZmyL34FZ3CHFDVZEFQGEFn488SYBeQ\n PVFZ6XtspuBK9LSNi9Y4g4MS5NhWywy7555Q1t/NTiftzPQz3sfmr5iDzVqyxIXFZMKwOxl7\n zE8PsOtQMDauBN1eFehaPb1mlyBio5ispwRCJCm006jBSHvE4i9W+/Lu7DSE2v/LI0U=","In-Reply-To":"<20260403073251.1051533-1-paul.henrys_ext@softathome.com>","Content-Type":"text/plain; charset=UTF-8; format=flowed","Content-Transfer-Encoding":"7bit","X-ClientProxiedBy":"PR3P189CA0031.EURP189.PROD.OUTLOOK.COM\n (2603:10a6:102:53::6) To PAZP264MB3119.FRAP264.PROD.OUTLOOK.COM\n (2603:10a6:102:1f2::23)","MIME-Version":"1.0","X-MS-PublicTrafficType":"Email","X-MS-TrafficTypeDiagnostic":"PAZP264MB3119:EE_|PR0P264MB2632:EE_","X-MS-Office365-Filtering-Correlation-Id":"23a8ed9b-9444-4a0e-28ef-08de915476a3","X-MS-Exchange-SenderADCheck":"1","X-MS-Exchange-AntiSpam-Relay":"0","X-Microsoft-Antispam":"BCL:0;\n ARA:13230040|366016|376014|1800799024|18002099003|17002099007|56012099003|22082099003;","X-Microsoft-Antispam-Message-Info":"\n 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","X-Forefront-Antispam-Report":"CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;\n IPV:NLI; SFV:NSPM; H:PAZP264MB3119.FRAP264.PROD.OUTLOOK.COM; PTR:; CAT:NONE;\n SFS:(13230040)(366016)(376014)(1800799024)(18002099003)(17002099007)(56012099003)(22082099003);\n DIR:OUT; SFP:1101;","X-MS-Exchange-AntiSpam-MessageData-ChunkCount":"1","X-MS-Exchange-AntiSpam-MessageData-0":"=?utf-8?q?7deB/csKc4eHeWFhCYRkifiVSzK8?=\n\t=?utf-8?q?KAZicbytAgkMEQplGBm/hYUOLD8l7an2HVEraMZbJsbAw599ELMqb1RC4OxEuv7Wz?=\n\t=?utf-8?q?PeBtwLrGDncjEDV3NJMq9EmNPXh2c31YWsIgogrwIJUmxPZFtlJuFuEy+XgK19MEN?=\n\t=?utf-8?q?gbpD/rUlC2vxCRyw2oeXZchHeEcDA0Tc9jdyx63rF5zatc/oP2HPiVKJhRDEQLiYq?=\n\t=?utf-8?q?YWBZSJC1lkJRd1eCH2oTdihyjwzKn8AIa2llLFMCB6dFdI3jVbpIzq4KvZakjoqpe?=\n\t=?utf-8?q?r89Bbl0RGUjokvTe78PMlsaAO/siuZcFug0QdBBQGqVmG0pOjc8n6a6sX6YmlNMEl?=\n\t=?utf-8?q?FGsr/kIvepwgoeVpkdOq0a8HwYeJESmikdGpau/2ni0BtuhiCnqkzcGcIxJE8tZve?=\n\t=?utf-8?q?tsK2rE2iwdRlIoDfP/tZhIM+Xma0sQVkpmePgGr4NgVIYEt3sv7wIf4cbOQT3gh40?=\n\t=?utf-8?q?tKhaRQyXLuDKGWTAe2XcNPUncbdG53kMpQJ8hVQ8hJleO87hvurSj/l7aWDCh+2rj?=\n\t=?utf-8?q?Qqy3euDLlHoWMGeiPdymixzB26PfzWQtoGfSn/sUTTeWEqIIS/AhIOpexQhWh7/Gi?=\n\t=?utf-8?q?5qQPdG7BSlVhanWdMso8u25QSPXF0lYeBg/JagEttVdablBo71QD1tkpzDD4NhS16?=\n\t=?utf-8?q?jrCgVpLp02I7qtrKEbpT9ysJtbLSadKDy/v7aTSbxHyhLTLCr8E4QcCfNw41lALPm?=\n\t=?utf-8?q?fYfhosSoAxxKBKq6/ElyIW1COibtW+cL6s3ZNW528dNGSpnFF/zhaoxcv/shlrxhE?=\n\t=?utf-8?q?afYIFD4nFmEQHnTVpkQLCpL2Vd68CB00tuTSRUihoaN7TYRITdm9qLoMdf3mSBXJn?=\n\t=?utf-8?q?KlyvvjGaFg/grgub4GkIO7VZk+fnHwMC0Xn1CpHw3PIa0kNKZ1TzAPZil341lQmcw?=\n\t=?utf-8?q?///KeTc8oPN4TEFKk/p5fySXVi+o44s+JIY070xI896Tdg1QMkAUhUAv386uw6yuT?=\n\t=?utf-8?q?3wj0Du5fpcVhyqRkUggHwy0KCq5dn2IMw3c6VcPpL/weHqQ+onXv7QFa87fUnIcxh?=\n\t=?utf-8?q?6nTVv6cSfefijURE+12nlY/82XHhAzMPKeKzOQnLv0ZxmDH1l+jcaC2q+t4c/KrpM?=\n\t=?utf-8?q?F6+vDgZ6dH+os/ifVamqpISTjiKXY6C/+8KW7xjX++691W7ZYs/yKuKMFRx6CIy5H?=\n\t=?utf-8?q?n2+QQbqUh0ZTuz9cvN2jhIuYl8FvJndoyxTMgNdvGSf4tIaaIx7/AWQEPThWybzSo?=\n\t=?utf-8?q?7UmvJvZ2CKgbZvxQc7DYukC8BFe6ziihPahIp/52bAOCUH5gQUJq692+7xL8z+vET?=\n\t=?utf-8?q?l0y9SNB+omK9ho48Qez7hh228No4ZnQyr9165FoHoi3ZFcSErIDMrhuIHQdlrkKzG?=\n\t=?utf-8?q?ClJXOaKxkJzoItXn0Z9p5LFMb8GEl3duiRss0r8fpBlK1bEeOvbnXlNzUWoNJOt+P?=\n\t=?utf-8?q?vFHaSo/bjv9oTw/8rPtYmeMaKR1QSIFaLaqq2j9TYN5Bu43S6T7rFeNclWS+Gezdg?=\n\t=?utf-8?q?5BbTpQurFHz8EEtFB+2AKbylN98URKk2yJgVzV/AB+VOs12Aj0ZGP5WAlUMeua76J?=\n\t=?utf-8?q?21HrOdpRhKB0WqYzfZA7elDpRHDxkKQ3OaxqomRwkEZknsF/wQl6AVsPHobfdbk9r?=\n\t=?utf-8?q?0NbjXfPbGa+4qAcTKThb0RVZ+eeouOaEfVx1N8DcV9CZeC8qYIYpCuZcqCZFMoBcq?=\n\t=?utf-8?q?oc4QipkdUB9PWTCT2e3AgDxnuopfySeJaGSARWT64aHGx2Py4xobk=3D?=","X-OriginatorOrg":"softathome.com","X-MS-Exchange-CrossTenant-Network-Message-Id":"\n 23a8ed9b-9444-4a0e-28ef-08de915476a3","X-MS-Exchange-CrossTenant-AuthSource":"PAZP264MB3119.FRAP264.PROD.OUTLOOK.COM","X-MS-Exchange-CrossTenant-AuthAs":"Internal","X-MS-Exchange-CrossTenant-OriginalArrivalTime":"03 Apr 2026 07:41:48.8972 (UTC)","X-MS-Exchange-CrossTenant-FromEntityHeader":"Hosted","X-MS-Exchange-CrossTenant-Id":"aa10e044-e405-4c10-8353-36b4d0cce511","X-MS-Exchange-CrossTenant-MailboxType":"HOSTED","X-MS-Exchange-CrossTenant-UserPrincipalName":"\n 1ACwStfvvqiNfsszTtciTBrhToTpeySzIucLXw/PppIr73kAGNOTv011ZfgoiNNbkzx+pHJILVDZIp+9Dsfeu0S0/NmXAKkiPR0YCOsROjE=","X-MS-Exchange-Transport-CrossTenantHeadersStamped":"PR0P264MB2632","X-BeenThere":"u-boot@lists.denx.de","X-Mailman-Version":"2.1.39","Precedence":"list","List-Id":"U-Boot discussion ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"u-boot-bounces@lists.denx.de","Sender":"\"U-Boot\" ","X-Virus-Scanned":"clamav-milter 0.103.8 at phobos.denx.de","X-Virus-Status":"Clean"}},{"id":3673158,"web_url":"http://patchwork.ozlabs.org/comment/3673158/","msgid":"<20260403145354.GJ41863@bill-the-cat>","list_archive_url":null,"date":"2026-04-03T14:53:54","subject":"Re: [PATCH v3 1/3] tools: binman: Test signing an encrypted FIT with\n a preload header","submitter":{"id":65875,"url":"http://patchwork.ozlabs.org/api/people/65875/","name":"Tom Rini","email":"trini@konsulko.com"},"content":"On Fri, Apr 03, 2026 at 09:41:47AM +0200, Paul HENRYS wrote:\n> Hi Tom,\n> \n> Just after pushing the v3 I realized that this test would better go under\n> tools/binman/test/security/ instead of tools/binman/test/fit/.\n> I am going to push a v4 with this change. Sorry for the inconvenience.\n\nThanks. It looks like there might be a v5, so please add a cover letter\ntoo, this will be used as part of merging the series.","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (1024-bit key;\n unprotected) header.d=konsulko.com header.i=@konsulko.com header.a=rsa-sha256\n header.s=google header.b=TlYSLhgG;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de\n (client-ip=2a01:238:438b:c500:173d:9f52:ddab:ee01; helo=phobos.denx.de;\n envelope-from=u-boot-bounces@lists.denx.de; receiver=patchwork.ozlabs.org)","phobos.denx.de;\n dmarc=pass (p=none dis=none) header.from=konsulko.com","phobos.denx.de;\n spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de","phobos.denx.de;\n\tdkim=pass (1024-bit key;\n unprotected) header.d=konsulko.com header.i=@konsulko.com\n header.b=\"TlYSLhgG\";\n\tdkim-atps=neutral","phobos.denx.de;\n dmarc=pass (p=none dis=none) header.from=konsulko.com","phobos.denx.de;\n spf=pass smtp.mailfrom=trini@konsulko.com"],"Received":["from phobos.denx.de (phobos.denx.de\n [IPv6:2a01:238:438b:c500:173d:9f52:ddab:ee01])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fnMDz2Pdvz1yCs\n\tfor ; Sat, 04 Apr 2026 01:54:11 +1100 (AEDT)","from h2850616.stratoserver.net (localhost [IPv6:::1])\n\tby phobos.denx.de (Postfix) with ESMTP id 540CF83642;\n\tFri, 3 Apr 2026 16:54:03 +0200 (CEST)","by phobos.denx.de (Postfix, from userid 109)\n id A896483F9D; Fri, 3 Apr 2026 16:54:01 +0200 (CEST)","from mail-oi1-x230.google.com (mail-oi1-x230.google.com\n [IPv6:2607:f8b0:4864:20::230])\n (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits))\n (No client certificate requested)\n by phobos.denx.de (Postfix) with ESMTPS id 6F955800AE\n for ;\n Fri, 3 Apr 2026 16:53:59 +0200 (CEST)","by mail-oi1-x230.google.com with SMTP id\n 5614622812f47-4671cbce465so793565b6e.3\n for ;\n Fri, 03 Apr 2026 07:53:59 -0700 (PDT)","from bill-the-cat (fixed-189-203-97-235.totalplay.net.\n [189.203.97.235]) by smtp.gmail.com with ESMTPSA id\n 5614622812f47-46d92f66ca2sm3522057b6e.13.2026.04.03.07.53.56\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Fri, 03 Apr 2026 07:53:57 -0700 (PDT)"],"X-Spam-Checker-Version":"SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de","X-Spam-Level":"","X-Spam-Status":"No, score=0.4 required=5.0 tests=BAYES_00,DKIM_SIGNED,\n DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_BLOCKED,\n SPF_HELO_NONE,SPF_PASS,SUSPICIOUS_RECIPS autolearn=no\n autolearn_force=no version=3.4.2","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=konsulko.com; s=google; t=1775228038; x=1775832838; darn=lists.denx.de;\n h=in-reply-to:content-disposition:mime-version:references:message-id\n :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to;\n bh=VxaJi/RPnjglFt4tObsc+yqW31b2VkGyeX7x/VJeHuM=;\n b=TlYSLhgGaDGapZQp5VJhBbxRCdSIcqZKafEwIEDgFW8p7prV9XY1n/fEH1u4M7QxXZ\n RpWKk16UHAApuCkeNiNaD35nJ23DZ54SorXWeRIvlWx5OiGFKay1iGcehnpMDwHi2MfR\n b7GErn/Ey2yRxPrGAqIqH5pxGMS61Xn3OMsEM=","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1775228038; x=1775832838;\n h=in-reply-to:content-disposition:mime-version:references:message-id\n :subject:cc:to:from:date:x-gm-gg:x-gm-message-state:from:to:cc\n :subject:date:message-id:reply-to;\n bh=VxaJi/RPnjglFt4tObsc+yqW31b2VkGyeX7x/VJeHuM=;\n b=dCCNj4mXHziB6jdq75J23f760ODoeJ3wSVbRvovGGkSnWxnU2vTFo2uXo844LLubd/\n TU2YgYha2YBVazrwN6Bq55US+/DKdyh2+M1nDXgcNozvrvkrol63VKweUiYWyrfwOvUS\n WmYdU4Tqm+VAwW/I/4+zLpeRxJMm/xyeBXs/qfoSxfUQzikp1S5VUSuxKeM/RbyfFTKj\n bP66YAyrwKP0YgDm863G3kGM+jlyNr5gr6ucnb0qvVjG2SvPqR5dSM4ogN/wEztK6MAU\n JpI2zASHlwpf9zX22Jxc280Kj87a0vflruJV7gbWKKQ71b6A0jUbO3Ivtl+XmKTPTYSc\n E0ww==","X-Forwarded-Encrypted":"i=1;\n AJvYcCW7nD9arIwVD0Exm6rr7YxU8HeBFrr3skGbHBmDl6hr9ajPettwKc8OmvZEoDaX3WoQpmZYoxs=@lists.denx.de","X-Gm-Message-State":"AOJu0YyV7IajaITFy249mLM4+mh1LemEwJPXQncdC1Kth24rNkd12qjn\n 41w+XuZqoMSAzcY3kOdKxm6jeFpEL8bxYQndYGy+OZEFBR9SILu4EpwTHbgLEn2O3aE=","X-Gm-Gg":"ATEYQzxQktWQbqxbGCSO3jtPUs3VE/JRnDdX8x6qwfsZPxgVipDUdGeRXNQeSJSbPly\n x9+ole3tSNYxDC6Esgy8ybiT+RZKqZQ9cAaNUfZThLAbLiIDlIsb3wRq+7JUXghWsoWFu7dXWFx\n aFUtAtNnsECvFBTmenRcr1cSmu6FB4AyyhpCUzkwGIXfGElR1KC4NF4bYzhEdq+g8HtXX5pv6fH\n vDbnPxHP2/CK7u4QYE9N8eNjlyf6CqECme9srgQqpz1b3H2b8u3IFwDpQyqFMWHCGpXFuWywzIK\n 8I6Gl8Be2jaPsUS1Mv84cyspuZFGGnFZsf417NDRv0nx5Yv1bhSyLDnXa9gfS9hNhSvEwqDx4JN\n PyZ1FWMHMyXS8RvfZnmCX0Qi+4DGP7YmYmGypczC71xNRCCM8sW49kmyjXH45neLl7vvOLQTp2v\n scP3urUkv4/aTrpWgrnbZ5CwyXJX/3vmR6wVxB8v6gFdu7rhpfTYdL8uJvJlATjBD3XsF+kR1GD\n hcOyVkePTknu6K0uTvHCTHHnh4FvTiJAYRaWfE55fhitGLl","X-Received":"by 2002:a05:6808:159b:b0:460:f435:2a71 with SMTP id\n 5614622812f47-46ef8218f3dmr1765273b6e.46.1775228038096;\n Fri, 03 Apr 2026 07:53:58 -0700 (PDT)","Date":"Fri, 3 Apr 2026 08:53:54 -0600","From":"Tom Rini ","To":"Paul HENRYS ","Cc":"trini+nodisclaimer@konsulko.com, sjg+nodisclaimer@chromium.org,\n alpernebiyasak+nodisclaimer@gmail.com,\n philippe.reynes+nodisclaimer@softathome.com,\n u-boot+nodisclaimer@lists.denx.de","Subject":"Re: [PATCH v3 1/3] tools: binman: Test signing an encrypted FIT with\n a preload header","Message-ID":"<20260403145354.GJ41863@bill-the-cat>","References":"<20260402192431.2421155-1-yan.wang@softathome.com>\n <20260403073251.1051533-1-paul.henrys_ext@softathome.com>\n ","MIME-Version":"1.0","Content-Type":"multipart/signed; micalg=pgp-sha512;\n protocol=\"application/pgp-signature\"; boundary=\"vSx3ajQrQAmQ2XYl\"","Content-Disposition":"inline","In-Reply-To":"","X-Clacks-Overhead":"GNU Terry Pratchett","X-BeenThere":"u-boot@lists.denx.de","X-Mailman-Version":"2.1.39","Precedence":"list","List-Id":"U-Boot discussion ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"u-boot-bounces@lists.denx.de","Sender":"\"U-Boot\" ","X-Virus-Scanned":"clamav-milter 0.103.8 at phobos.denx.de","X-Virus-Status":"Clean"}}]