Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2225951/?format=api
{ "id": 2225951, "url": "http://patchwork.ozlabs.org/api/patches/2225951/?format=api", "web_url": "http://patchwork.ozlabs.org/project/uboot/patch/20260421210954.1170437-3-philippe.reynes@softathome.com/", "project": { "id": 18, "url": "http://patchwork.ozlabs.org/api/projects/18/?format=api", "name": "U-Boot", "link_name": "uboot", "list_id": "u-boot.lists.denx.de", "list_email": "u-boot@lists.denx.de", "web_url": null, "scm_url": null, "webscm_url": null, "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260421210954.1170437-3-philippe.reynes@softathome.com>", "list_archive_url": null, "date": "2026-04-21T21:09:41", "name": "[v5,02/15] mbedtls: enable support of ecc", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "099e856b7ef96f9b0e007d199a0f8b3530a710cb", "submitter": { "id": 74351, "url": "http://patchwork.ozlabs.org/api/people/74351/?format=api", "name": "Philippe Reynes", "email": "philippe.reynes@softathome.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/uboot/patch/20260421210954.1170437-3-philippe.reynes@softathome.com/mbox/", "series": [ { "id": 500895, "url": "http://patchwork.ozlabs.org/api/series/500895/?format=api", "web_url": "http://patchwork.ozlabs.org/project/uboot/list/?series=500895", "date": "2026-04-21T21:09:51", "name": "add software ecdsa support", "version": 5, "mbox": "http://patchwork.ozlabs.org/series/500895/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2225951/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2225951/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<u-boot-bounces@lists.denx.de>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=softathome1.onmicrosoft.com header.i=@softathome1.onmicrosoft.com\n header.a=rsa-sha256 header.s=selector1-softathome1-onmicrosoft-com\n header.b=Kevc7S+K;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de\n (client-ip=2a01:238:438b:c500:173d:9f52:ddab:ee01; helo=phobos.denx.de;\n envelope-from=u-boot-bounces@lists.denx.de; receiver=patchwork.ozlabs.org)", "phobos.denx.de;\n dmarc=none (p=none dis=none) header.from=softathome.com", "phobos.denx.de;\n spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de", "phobos.denx.de;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=softathome1.onmicrosoft.com header.i=@softathome1.onmicrosoft.com\n header.b=\"Kevc7S+K\";\n\tdkim-atps=neutral", "phobos.denx.de; dmarc=none (p=none dis=none)\n header.from=softathome.com", "phobos.denx.de;\n spf=pass smtp.mailfrom=philippe.reynes@softathome.com" ], "Received": [ "from phobos.denx.de (phobos.denx.de\n [IPv6:2a01:238:438b:c500:173d:9f52:ddab:ee01])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0ZlV0Wlrz1yGs\n\tfor <incoming@patchwork.ozlabs.org>; Wed, 22 Apr 2026 07:11:02 +1000 (AEST)", "from h2850616.stratoserver.net (localhost [IPv6:::1])\n\tby phobos.denx.de (Postfix) with ESMTP id EF4978426E;\n\tTue, 21 Apr 2026 23:10:27 +0200 (CEST)", "by phobos.denx.de (Postfix, from userid 109)\n id 74BDE842FD; Tue, 21 Apr 2026 23:10:11 +0200 (CEST)", "from PAUP264CU001.outbound.protection.outlook.com\n (mail-francecentralazlp170110002.outbound.protection.outlook.com\n [IPv6:2a01:111:f403:c20a::2])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))\n (No client certificate requested)\n by phobos.denx.de (Postfix) with ESMTPS id 595D7841D6\n for <u-boot@lists.denx.de>; Tue, 21 Apr 2026 23:10:02 +0200 (CEST)", "from PA7P264CA0300.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:370::12)\n by PAZP264MB2717.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:1e7::10)\n with Microsoft SMTP Server (version=TLS1_2,\n cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9818.33; Tue, 21 Apr\n 2026 21:09:57 +0000", "from PA2PEPF00019233.FRAP264.PROD.OUTLOOK.COM\n (2603:10a6:102:370:cafe::cd) by PA7P264CA0300.outlook.office365.com\n (2603:10a6:102:370::12) with Microsoft SMTP Server (version=TLS1_3,\n cipher=TLS_AES_256_GCM_SHA384) id 15.20.9791.48 via Frontend Transport; Tue,\n 21 Apr 2026 21:09:57 +0000", "from proxy.softathome.com (149.6.166.170) by\n PA2PEPF00019233.mail.protection.outlook.com (10.167.242.39) with Microsoft\n SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9846.18\n via Frontend Transport; Tue, 21 Apr 2026 21:09:57 +0000", "from sah1lpt726.softathome.com (unknown [192.168.72.32])\n by proxy.softathome.com (Postfix) with ESMTPSA id D66CD2014C;\n Tue, 21 Apr 2026 23:09:56 +0200 (CEST)" ], "X-Spam-Checker-Version": "SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de", "X-Spam-Level": "", "X-Spam-Status": "No, score=-1.9 required=5.0 tests=BAYES_00,DKIM_SIGNED,\n DKIM_VALID,RCVD_IN_DNSWL_BLOCKED,SPF_HELO_PASS,SPF_PASS autolearn=ham\n autolearn_force=no version=3.4.2", "ARC-Seal": "i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;\n b=uZCXj3UeHp5bw8wkzd//ZTgAMezgbUAfyALvqKhqTjaCgUvTOlLBrvf4nJgCfzU6xcq0ROir4KLPIIXqG9wx+tuJBk57M1aQVUFm4/gSizomvYLzitLwyzWW6roQsZ7TG3tLM5tgNlYb5xKGiJHpRphysKulhKRnJwLx0nXZAynQmanh/DHTB01kLqhUOed0b3yuH/naNKLaSHrDzdk0uLxmf47yd+1EYJjxQufAEOv/xVVECI7qSSw4oJsAdSr5oa+rcNlcfryI4KYEpECE4yCL161d/LfLAIgQROL0lGa2GxmKptSEDRoOQCP0C6ModGdst2L8Btzgy5xKuIENxg==", "ARC-Message-Signature": "i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;\n s=arcselector10001;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;\n bh=AIl6n/+34g6m6586OZ7bI7Ju89NpjzoxLDkjuaLiYdU=;\n b=gBpi1P8g1UmFsfEnRVYaGXtmNy+0dcja7VSl61Fbd8UZEZ4pgVS22iaN6xQUI05djk56UxhQT9AzjPFwMVlxm2b+ETp92Mrg8EkoPwt8JeKwkF1K6n4rhaUPya6NSs0NVR6Fk2NWrgxsmVD/WnJpVX6v6b0/8zDJs8dJmQetTrg9YJRnABexGP9L0hN6p2WQ4G9jokPWNMSgJXbJbVPVBFMeNfwMt2/bpNeHPcVu32GQm0XaCDpNJU33EY4K481C0j4OG2zA6B/OAU0uiTaxG/XQ/qeGO7rYTsYHeW6VcG4wHbszrjBIIx/Xkwu8CWnBYuFrS1gAv4rENFsWDK3jUQ==", "ARC-Authentication-Results": "i=1; mx.microsoft.com 1; spf=pass (sender ip is\n 149.6.166.170) smtp.rcpttodomain=canonical.com smtp.mailfrom=softathome.com;\n dmarc=bestguesspass action=none header.from=softathome.com; dkim=none\n (message not signed); arc=none (0)", "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=softathome1.onmicrosoft.com; s=selector1-softathome1-onmicrosoft-com;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;\n bh=AIl6n/+34g6m6586OZ7bI7Ju89NpjzoxLDkjuaLiYdU=;\n b=Kevc7S+K612ngHP9oBD9PffurR1G+q/ugqk8v+/rpisIfykHqNY39T0opOxX5TvxRA90f8YfJy3uZhtgwivzOWeJVo1A8oLzNDB9tVbdkjrAA5H8IZwvLvyLxDecF9HrZu8hEng90BVLTUfxqH1XAIcy0lHCIyngNt26qUkBYVfLyEq2Q4nDTgRVygc1XIpOujaOs28RCfscFOC/WMEqJGSTSaj1am97sbr0MllZ/Rpsyz5v7CVYiO5b2GQz1xRvEyXywjDz3XzO2A68hz8ef75VCjLWE0tYAX/EGS6X5Qd7Pecxeg/p2oDT9pgjy53nJMzEIuELosBb5U1qBFg2lg==", "X-MS-Exchange-Authentication-Results": "spf=pass (sender IP is 149.6.166.170)\n smtp.mailfrom=softathome.com; dkim=none (message not signed)\n header.d=none;dmarc=bestguesspass action=none header.from=softathome.com;", "Received-SPF": "Pass (protection.outlook.com: domain of softathome.com\n designates 149.6.166.170 as permitted sender)\n receiver=protection.outlook.com; client-ip=149.6.166.170;\n helo=proxy.softathome.com; pr=C", "From": "Philippe Reynes <philippe.reynes@softathome.com>", "To": "marko.makela@iki.fi, jonny.green@keytechinc.com, raymondmaoca@gmail.com,\n trini@konsulko.com, simon.glass@canonical.com", "Cc": "u-boot@lists.denx.de,\n\tPhilippe Reynes <philippe.reynes@softathome.com>", "Subject": "[PATCH v5 02/15] mbedtls: enable support of ecc", "Date": "Tue, 21 Apr 2026 23:09:41 +0200", "Message-ID": "<20260421210954.1170437-3-philippe.reynes@softathome.com>", "X-Mailer": "git-send-email 2.43.0", "In-Reply-To": "<20260421210954.1170437-1-philippe.reynes@softathome.com>", "References": "<20260421210954.1170437-1-philippe.reynes@softathome.com>", "MIME-Version": "1.0", "Content-Transfer-Encoding": "8bit", "X-EOPAttributedMessage": "0", "X-MS-PublicTrafficType": "Email", "X-MS-TrafficTypeDiagnostic": "PA2PEPF00019233:EE_|PAZP264MB2717:EE_", "Content-Type": "text/plain", "X-MS-Office365-Filtering-Correlation-Id": "bf413db5-2819-4f52-caff-08de9fea5765", "X-MS-Exchange-SenderADCheck": "1", "X-MS-Exchange-AntiSpam-Relay": "0", "X-Microsoft-Antispam": "BCL:0;\n ARA:13230040|1800799024|376014|36860700016|82310400026|18002099003|22082099003|56012099003;", "X-Microsoft-Antispam-Message-Info": "\n /9qS0c6avfR1P5ro6ZspJOpiGohxhiSs7q6+kxQElI0fLeVgnY62SPuNxeuNovY/3uS1ELgmzaiKnsKnAfVYsMInBSAQds/7sqVOr5C4a7MtzOjFm7NA27S7i3pS9RktUQ6KpxFz0m5mv0CVxN9SwuYvfY5XFspSy2Mw3l5PwTV2JRxyKZWYf10uKUxMIAflm8hLTwoqfKfqGijKHoNU086Fvdm/pbKmTdtwpGC4dQEGVRqWVKVNneBARvYxzqxj7IdFVSQYMXrI6oapctNb6cnG5t11Lch8Djw6rmo4Il8C+Au0lQBPsXL8ZitUfykJKFwYkPTMV/q++647HUVFYnwWIO+N2EsgBoB6ALDeZI9VvUCffoWqsGdIR50EV2Oy6VhWoo6QKddpstVBIM2UfEidMRmOAbsUpFp3xNyxj8BdjPbwQTpuronRwj8V2yVTHkcEmckJsGNkLXlaohaT9gu7oX0wRy5XvtS281MkVDNgMpoIcarRijRDayaUTn3WIwMOoseR3F0SdkKjMS8kRR1fYrbVRAd6jVq5Lv0uONZN0gaR31LMYXTJV7hySNg9rltUcuJzZ+XO90dNna6eCYCWm7ixCN1gVOzUBXyibDTCCTYUsAh5z77xPXHR25zjhGCAOWb+dcuZhsjF4PsITV0KvUbLED9kUZ5C/1L+FTNpK4Ik99BF45XPmsq+nnmM8oMahHRlkvluCxSwoDor/RC7EuLt4q8Ezwy2to53JPkYB+26Jeb8m05tq/hwsxKiqxOLBQm8M0azoKPOzpnHgg==", "X-Forefront-Antispam-Report": "CIP:149.6.166.170; CTRY:FR; LANG:en; SCL:1; SRV:;\n IPV:CAL; SFV:NSPM; H:proxy.softathome.com; PTR:InfoDomainNonexistent;\n CAT:NONE;\n SFS:(13230040)(1800799024)(376014)(36860700016)(82310400026)(18002099003)(22082099003)(56012099003);\n DIR:OUT; SFP:1101;", "X-MS-Exchange-AntiSpam-MessageData-ChunkCount": "1", "X-MS-Exchange-AntiSpam-MessageData-0": "\n +xwvXF5BeEpxFUFxOb3jax34f/C3Q3Fxk2Ktf0o5JO9BCQWf+NE7JBKDi1sO+48aL+vCHxgsJLKELfKhvIOs6fLk3fT/DfPy04CeCa4J6tFs/reFdaLR6teZBl4q/0y7kUDSrzIprsn4w6k+eyaAbuRiPk+LkodQhzlAXePdgvc/0oMVsm0unrtW2aD4wxT3MWoWeL7vbESzybNU4N9eDNvYy1qYxX/G0V19gTxHnFXEJszt/dGThtPv5i7N+eX2clGcMwkbVE+NiXp2rFBbxPvXPzCK70Dq9OSCBQWhCZDoCWPtC2MBceXkwF1s8hVSzsz/Z3BVhG4h1AdpcM0S9dirz2sdzCax21D9Qrzhh9wf15rVGSdGkr6xXISQs4p0Lv/jkWgOvq0AIB5gPh8xFZXzwv9k020x563el2DjpIJfovpHJnR4tLlhVXMDsxKH", "X-OriginatorOrg": "softathome.com", "X-MS-Exchange-CrossTenant-OriginalArrivalTime": "21 Apr 2026 21:09:57.0157 (UTC)", "X-MS-Exchange-CrossTenant-Network-Message-Id": "\n bf413db5-2819-4f52-caff-08de9fea5765", "X-MS-Exchange-CrossTenant-Id": "aa10e044-e405-4c10-8353-36b4d0cce511", "X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp": "\n TenantId=aa10e044-e405-4c10-8353-36b4d0cce511; Ip=[149.6.166.170];\n Helo=[proxy.softathome.com]", "X-MS-Exchange-CrossTenant-AuthSource": "PA2PEPF00019233.FRAP264.PROD.OUTLOOK.COM", "X-MS-Exchange-CrossTenant-AuthAs": "Anonymous", "X-MS-Exchange-CrossTenant-FromEntityHeader": "HybridOnPrem", "X-MS-Exchange-Transport-CrossTenantHeadersStamped": "PAZP264MB2717", "X-BeenThere": "u-boot@lists.denx.de", "X-Mailman-Version": "2.1.39", "Precedence": "list", "List-Id": "U-Boot discussion <u-boot.lists.denx.de>", "List-Unsubscribe": "<https://lists.denx.de/options/u-boot>,\n <mailto:u-boot-request@lists.denx.de?subject=unsubscribe>", "List-Archive": "<https://lists.denx.de/pipermail/u-boot/>", "List-Post": "<mailto:u-boot@lists.denx.de>", "List-Help": "<mailto:u-boot-request@lists.denx.de?subject=help>", "List-Subscribe": "<https://lists.denx.de/listinfo/u-boot>,\n <mailto:u-boot-request@lists.denx.de?subject=subscribe>", "Errors-To": "u-boot-bounces@lists.denx.de", "Sender": "\"U-Boot\" <u-boot-bounces@lists.denx.de>", "X-Virus-Scanned": "clamav-milter 0.103.8 at phobos.denx.de", "X-Virus-Status": "Clean" }, "content": "Enables the support of ecc in mbedtls.\n\nSigned-off-by: Philippe Reynes <philippe.reynes@softathome.com>\n---\nv2:\n- move ecdsa to MBEDTLS_LIB_X509\n- enhance depencendies\nv3:\n- do not use _MBEDTLS in mbedtls_def_config.h\nv4:\n- do not select ECDSA on some configs\n- remove duplicated MBEDTLS_ECP_DP_SECP256K1_ENABLED\n- change dependencies for ECDSA configs\nv5:\n- MBEDTLS_LIB_TLS depends en ECDSA_MBEDTLS\n- update some configs according to previous change\n- build of ecdsa is conditionned by ECDSA_MBEDTLS\n\n configs/amd_versal2_virt_defconfig | 3 +++\n configs/qemu_arm64_lwip_defconfig | 3 +++\n configs/sandbox_defconfig | 1 +\n configs/starfive_visionfive2_defconfig | 3 +++\n configs/xilinx_versal_net_virt_defconfig | 3 +++\n configs/xilinx_versal_virt_defconfig | 3 +++\n configs/xilinx_zynqmp_kria_defconfig | 3 +++\n configs/xilinx_zynqmp_virt_defconfig | 3 +++\n lib/ecdsa/Kconfig | 1 +\n lib/mbedtls/Kconfig | 14 ++++++++++++++\n lib/mbedtls/Makefile | 16 +++++++++-------\n lib/mbedtls/mbedtls_def_config.h | 17 +++++++++++++++++\n 12 files changed, 63 insertions(+), 7 deletions(-)", "diff": "diff --git a/configs/amd_versal2_virt_defconfig b/configs/amd_versal2_virt_defconfig\nindex 0f4b75c72e1..cbc0789d5b3 100644\n--- a/configs/amd_versal2_virt_defconfig\n+++ b/configs/amd_versal2_virt_defconfig\n@@ -167,6 +167,9 @@ CONFIG_VIRTIO_MMIO=y\n CONFIG_VIRTIO_NET=y\n CONFIG_VIRTIO_BLK=y\n CONFIG_MBEDTLS_LIB=y\n+CONFIG_ECDSA_MBEDTLS=y\n+CONFIG_ECDSA=y\n+CONFIG_ECDSA_VERIFY=y\n CONFIG_TPM=y\n # CONFIG_OPTEE_LIB is not set\n CONFIG_TOOLS_MKFWUMDATA=y\ndiff --git a/configs/qemu_arm64_lwip_defconfig b/configs/qemu_arm64_lwip_defconfig\nindex a974970c3d3..151506eaca2 100644\n--- a/configs/qemu_arm64_lwip_defconfig\n+++ b/configs/qemu_arm64_lwip_defconfig\n@@ -3,6 +3,9 @@\n CONFIG_ARM=y\n CONFIG_ARCH_QEMU=y\n \n+CONFIG_ECDSA=y\n+CONFIG_ECDSA_VERIFY=y\n+CONFIG_ECDSA_MBEDTLS=y\n CONFIG_NET_LWIP=y\n CONFIG_CMD_DNS=y\n CONFIG_CMD_NFS=y\ndiff --git a/configs/sandbox_defconfig b/configs/sandbox_defconfig\nindex f26295103f1..15831dd7e04 100644\n--- a/configs/sandbox_defconfig\n+++ b/configs/sandbox_defconfig\n@@ -391,6 +391,7 @@ CONFIG_PANIC_HANG=y\n CONFIG_CMD_DHRYSTONE=y\n CONFIG_MBEDTLS_LIB=y\n CONFIG_HKDF_MBEDTLS=y\n+CONFIG_ECDSA_MBEDTLS=y\n CONFIG_ECDSA=y\n CONFIG_ECDSA_VERIFY=y\n CONFIG_RSASSA_PSS=y\ndiff --git a/configs/starfive_visionfive2_defconfig b/configs/starfive_visionfive2_defconfig\nindex 74a24dfd074..77b3146f6cb 100644\n--- a/configs/starfive_visionfive2_defconfig\n+++ b/configs/starfive_visionfive2_defconfig\n@@ -156,3 +156,6 @@ CONFIG_USB_GADGET=y\n CONFIG_WDT=y\n CONFIG_WDT_STARFIVE=y\n CONFIG_MBEDTLS_LIB=y\n+CONFIG_ECDSA_MBEDTLS=y\n+CONFIG_ECDSA=y\n+CONFIG_ECDSA_VERIFY=y\ndiff --git a/configs/xilinx_versal_net_virt_defconfig b/configs/xilinx_versal_net_virt_defconfig\nindex 3410b874a04..90c04b98e0d 100644\n--- a/configs/xilinx_versal_net_virt_defconfig\n+++ b/configs/xilinx_versal_net_virt_defconfig\n@@ -155,4 +155,7 @@ CONFIG_VIRTIO_MMIO=y\n CONFIG_VIRTIO_NET=y\n CONFIG_VIRTIO_BLK=y\n CONFIG_MBEDTLS_LIB=y\n+CONFIG_ECDSA_MBEDTLS=y\n+CONFIG_ECDSA=y\n+CONFIG_ECDSA_VERIFY=y\n CONFIG_TPM=y\ndiff --git a/configs/xilinx_versal_virt_defconfig b/configs/xilinx_versal_virt_defconfig\nindex d5d60d7f87d..bd3e368d1b4 100644\n--- a/configs/xilinx_versal_virt_defconfig\n+++ b/configs/xilinx_versal_virt_defconfig\n@@ -170,5 +170,8 @@ CONFIG_VIRTIO_MMIO=y\n CONFIG_VIRTIO_NET=y\n CONFIG_VIRTIO_BLK=y\n CONFIG_MBEDTLS_LIB=y\n+CONFIG_ECDSA_MBEDTLS=y\n+CONFIG_ECDSA=y\n+CONFIG_ECDSA_VERIFY=y\n CONFIG_TPM=y\n CONFIG_TOOLS_MKFWUMDATA=y\ndiff --git a/configs/xilinx_zynqmp_kria_defconfig b/configs/xilinx_zynqmp_kria_defconfig\nindex 72a4668b448..7a741416685 100644\n--- a/configs/xilinx_zynqmp_kria_defconfig\n+++ b/configs/xilinx_zynqmp_kria_defconfig\n@@ -221,6 +221,9 @@ CONFIG_VIRTIO_BLK=y\n CONFIG_BINMAN_DTB=\"./arch/arm/dts/zynqmp-binman-som.dtb\"\n CONFIG_PANIC_HANG=y\n CONFIG_MBEDTLS_LIB=y\n+CONFIG_ECDSA_MBEDTLS=y\n+CONFIG_ECDSA=y\n+CONFIG_ECDSA_VERIFY=y\n CONFIG_TPM=y\n CONFIG_SPL_GZIP=y\n CONFIG_TOOLS_MKFWUMDATA=y\ndiff --git a/configs/xilinx_zynqmp_virt_defconfig b/configs/xilinx_zynqmp_virt_defconfig\nindex 1433b63979a..7dd73c48c1b 100644\n--- a/configs/xilinx_zynqmp_virt_defconfig\n+++ b/configs/xilinx_zynqmp_virt_defconfig\n@@ -239,6 +239,9 @@ CONFIG_VIRTIO_BLK=y\n CONFIG_BINMAN_DTB=\"./arch/arm/dts/zynqmp-binman.dtb\"\n CONFIG_PANIC_HANG=y\n CONFIG_MBEDTLS_LIB=y\n+CONFIG_ECDSA_MBEDTLS=y\n+CONFIG_ECDSA=y\n+CONFIG_ECDSA_VERIFY=y\n CONFIG_TPM=y\n CONFIG_SPL_GZIP=y\n CONFIG_TOOLS_MKFWUMDATA=y\ndiff --git a/lib/ecdsa/Kconfig b/lib/ecdsa/Kconfig\nindex ca13b6bfa1f..dac8bcf23dd 100644\n--- a/lib/ecdsa/Kconfig\n+++ b/lib/ecdsa/Kconfig\n@@ -1,6 +1,7 @@\n config ECDSA\n \tbool \"Enable ECDSA support\"\n \tdepends on DM\n+\tselect ASN1_DECODER\n \thelp\n \t This enables the ECDSA (elliptic curve signature) algorithm for FIT\n \t image verification in U-Boot. The ECDSA algorithm is implemented\ndiff --git a/lib/mbedtls/Kconfig b/lib/mbedtls/Kconfig\nindex 789721ee6cd..e948a8876f6 100644\n--- a/lib/mbedtls/Kconfig\n+++ b/lib/mbedtls/Kconfig\n@@ -247,6 +247,9 @@ config MBEDTLS_LIB_X509\n \n if MBEDTLS_LIB_X509\n \n+config BIGNUM_MBEDTLS\n+\tbool\n+\n config ASN1_DECODER_MBEDTLS\n \tbool \"ASN1 decoder with MbedTLS certificate library\"\n \tdepends on MBEDTLS_LIB_X509 && ASN1_DECODER\n@@ -264,6 +267,7 @@ config RSA_PUBLIC_KEY_PARSER_MBEDTLS\n \tbool \"RSA public key parser with MbedTLS certificate library\"\n \tdepends on ASYMMETRIC_PUBLIC_KEY_MBEDTLS\n \tselect ASN1_DECODER_MBEDTLS\n+\tselect BIGNUM_MBEDTLS\n \thelp\n \t This option chooses MbedTLS certificate library for RSA public key\n \t parser.\n@@ -292,6 +296,15 @@ config MSCODE_PARSER_MBEDTLS\n \t This option chooses MbedTLS certificate library for MS authenticode\n \t parser.\n \n+config ECDSA_MBEDTLS\n+\tbool \"Enable ECDSA support with MbedTLS certificate library\"\n+\tdepends on MBEDTLS_LIB_X509 && ECDSA_VERIFY\n+\tselect ASN1_DECODER_MBEDTLS if ASN1_DECODER\n+\tselect BIGNUM_MBEDTLS\n+\thelp\n+\t This option enables support of ECDSA with the MbedTLS certificate\n+\t library.\n+\n endif # MBEDTLS_LIB_X509\n \n config MBEDTLS_LIB_TLS\n@@ -300,6 +313,7 @@ config MBEDTLS_LIB_TLS\n \tdepends on X509_CERTIFICATE_PARSER_MBEDTLS\n \tdepends on ASYMMETRIC_PUBLIC_KEY_MBEDTLS\n \tdepends on ASN1_DECODER_MBEDTLS\n+\tdepends on ECDSA_MBEDTLS\n \tdepends on MBEDTLS_LIB\n \thelp\n \t Enable MbedTLS TLS library. Required for HTTPs support\ndiff --git a/lib/mbedtls/Makefile b/lib/mbedtls/Makefile\nindex c5b445bd85c..a24c8389744 100644\n--- a/lib/mbedtls/Makefile\n+++ b/lib/mbedtls/Makefile\n@@ -39,13 +39,20 @@ mbedtls_lib_crypto-$(CONFIG_$(PHASE_)HKDF_MBEDTLS) += \\\n # MbedTLS X509 library\n obj-$(CONFIG_$(XPL_)MBEDTLS_LIB_X509) += mbedtls_lib_x509.o\n mbedtls_lib_x509-y := $(MBEDTLS_LIB_DIR)/x509.o\n+mbedtls_lib_x509-$(CONFIG_$(PHASE_)ECDSA_MBEDTLS) += \\\n+\t$(MBEDTLS_LIB_DIR)/ecdsa.o \\\n+\t$(MBEDTLS_LIB_DIR)/ecp.o \\\n+\t$(MBEDTLS_LIB_DIR)/ecp_curves.o \\\n+\t$(MBEDTLS_LIB_DIR)/ecp_curves_new.o \\\n+\t$(MBEDTLS_LIB_DIR)/pk_ecc.o\n+mbedtls_lib_x509-$(CONFIG_$(PHASE_)BIGNUM_MBEDTLS) += \\\n+\t$(MBEDTLS_LIB_DIR)/bignum.o \\\n+\t$(MBEDTLS_LIB_DIR)/bignum_core.o\n mbedtls_lib_x509-$(CONFIG_$(PHASE_)ASN1_DECODER_MBEDTLS) += \\\n \t$(MBEDTLS_LIB_DIR)/asn1parse.o \\\n \t$(MBEDTLS_LIB_DIR)/asn1write.o \\\n \t$(MBEDTLS_LIB_DIR)/oid.o\n mbedtls_lib_x509-$(CONFIG_$(PHASE_)RSA_PUBLIC_KEY_PARSER_MBEDTLS) += \\\n-\t$(MBEDTLS_LIB_DIR)/bignum.o \\\n-\t$(MBEDTLS_LIB_DIR)/bignum_core.o \\\n \t$(MBEDTLS_LIB_DIR)/rsa.o \\\n \t$(MBEDTLS_LIB_DIR)/rsa_alt_helpers.o\n mbedtls_lib_x509-$(CONFIG_$(PHASE_)ASYMMETRIC_PUBLIC_KEY_MBEDTLS) += \\\n@@ -64,7 +71,6 @@ mbedtls_lib_tls-y := \\\n \t$(MBEDTLS_LIB_DIR)/mps_reader.o \\\n \t$(MBEDTLS_LIB_DIR)/mps_trace.o \\\n \t$(MBEDTLS_LIB_DIR)/net_sockets.o \\\n-\t$(MBEDTLS_LIB_DIR)/pk_ecc.o \\\n \t$(MBEDTLS_LIB_DIR)/ssl_cache.o \\\n \t$(MBEDTLS_LIB_DIR)/ssl_ciphersuites.o \\\n \t$(MBEDTLS_LIB_DIR)/ssl_client.o \\\n@@ -82,8 +88,4 @@ mbedtls_lib_tls-y := \\\n \t$(MBEDTLS_LIB_DIR)/cipher.o \\\n \t$(MBEDTLS_LIB_DIR)/cipher_wrap.o \\\n \t$(MBEDTLS_LIB_DIR)/ecdh.o \\\n-\t$(MBEDTLS_LIB_DIR)/ecdsa.o \\\n-\t$(MBEDTLS_LIB_DIR)/ecp.o \\\n-\t$(MBEDTLS_LIB_DIR)/ecp_curves.o \\\n-\t$(MBEDTLS_LIB_DIR)/ecp_curves_new.o \\\n \t$(MBEDTLS_LIB_DIR)/gcm.o \\\ndiff --git a/lib/mbedtls/mbedtls_def_config.h b/lib/mbedtls/mbedtls_def_config.h\nindex dda3f4dd6e4..d1bbcaa0924 100644\n--- a/lib/mbedtls/mbedtls_def_config.h\n+++ b/lib/mbedtls/mbedtls_def_config.h\n@@ -89,6 +89,23 @@\n #define MBEDTLS_ASN1_WRITE_C\n #endif\n \n+#if CONFIG_IS_ENABLED(ECDSA_MBEDTLS)\n+#define MBEDTLS_ECDSA_C\n+#define MBEDTLS_ECP_C\n+#define MBEDTLS_BIGNUM_C\n+#define MBEDTLS_ECP_DP_SECP192R1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP224R1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP256R1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP384R1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP521R1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP192K1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP224K1_ENABLED\n+#define MBEDTLS_ECP_DP_SECP256K1_ENABLED\n+#define MBEDTLS_ECP_DP_BP256R1_ENABLED\n+#define MBEDTLS_ECP_DP_BP384R1_ENABLED\n+#define MBEDTLS_ECP_DP_BP512R1_ENABLED\n+#endif\n+\n #endif /* #if CONFIG_IS_ENABLED(MBEDTLS_LIB_X509) */\n \n #if CONFIG_IS_ENABLED(MBEDTLS_LIB_TLS)\n", "prefixes": [ "v5", "02/15" ] }