From patchwork Tue May 2 04:47:28 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Baruch Siach X-Patchwork-Id: 1775722 X-Patchwork-Delegate: xypron.glpk@gmx.de Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@legolas.ozlabs.org Authentication-Results: legolas.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de (client-ip=2a01:238:438b:c500:173d:9f52:ddab:ee01; helo=phobos.denx.de; envelope-from=u-boot-bounces@lists.denx.de; receiver=) Authentication-Results: legolas.ozlabs.org; dkim=pass (2048-bit key; secure) header.d=tkos.co.il header.i=@tkos.co.il header.a=rsa-sha256 header.s=default header.b=MwaU3vfJ; dkim-atps=neutral Received: from phobos.denx.de (phobos.denx.de [IPv6:2a01:238:438b:c500:173d:9f52:ddab:ee01]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (No client certificate requested) by legolas.ozlabs.org (Postfix) with ESMTPS id 4Q9SJK2VCzz20fd for ; Tue, 2 May 2023 14:48:17 +1000 (AEST) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 934E2863B2; Tue, 2 May 2023 06:47:50 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=tkos.co.il Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (2048-bit key; secure) header.d=tkos.co.il header.i=@tkos.co.il header.b="MwaU3vfJ"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id 8904986380; Tue, 2 May 2023 06:47:48 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.2 Received: from mail.tkos.co.il (guitar.tkos.co.il [84.110.109.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 0E93886303 for ; Tue, 2 May 2023 06:47:44 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=tkos.co.il Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=baruch@tkos.co.il Received: from tarshish.tkos.co.il (unknown [10.0.8.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.tkos.co.il (Postfix) with ESMTPS id 47642441078; Tue, 2 May 2023 07:42:03 +0300 (IDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tkos.co.il; s=default; t=1683002523; bh=yqVwEx3VcuEi+Zle5WvVolX/7g2kCcMkw14SM1PBo08=; h=From:To:Cc:Subject:Date:From; b=MwaU3vfJsQY7aQ8Pb6t/NUdP6jd7MmOI4HwwRmzToAKSyiNAW2cJcOk2NYq763AfU PAtqAqHM32v7ed9tvT3SQE6v14Nrq1LYDUoKHZjqnicqXR8Q/gpzj4/5Oz12q1tFmJ tOHTvW3dQmb00/XuIPHQysS+xaYkOTNhHP7/CvYz8sGGA55XzShU3HWp3RW8WdRMuy c5uAgXWnBL2B93MeZkBtkssZ27frI7J11mIOVbXOVC67q7aTgDR4Pp8lElkwxlKhWI v9CsdLtQQw6d45JrcILfPQyWszG3Ur/xlm8mR3MxwIXRxoRUOGc8FGfyd+/eMTcwY7 8FBYV79slwUyg== From: Baruch Siach To: Simon Glass Cc: u-boot@lists.denx.de, Baruch Siach Subject: [PATCH 1/4] doc: signature: update algorithms support description Date: Tue, 2 May 2023 07:47:28 +0300 Message-Id: <58421075b02401535de82d4b91616c270b020982.1683002851.git.baruch@tkos.co.il> X-Mailer: git-send-email 2.39.2 MIME-Version: 1.0 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean U-Boot supports more hash and verification algorithms these days. Signed-off-by: Baruch Siach Reviewed-by: Simon Glass --- doc/uImage.FIT/signature.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/uImage.FIT/signature.txt b/doc/uImage.FIT/signature.txt index c71280b63bb6..bc123f512f7b 100644 --- a/doc/uImage.FIT/signature.txt +++ b/doc/uImage.FIT/signature.txt @@ -42,8 +42,8 @@ device. Algorithms ---------- In principle any suitable algorithm can be used to sign and verify a hash. -At present only one class of algorithms is supported: SHA1 hashing with RSA. -This works by hashing the image to produce a 20-byte hash. +U-Boot supports a few hashing and verification algorithms. See below for +details. While it is acceptable to bring in large cryptographic libraries such as openssl on the host side (e.g. mkimage), it is not desirable for U-Boot. From patchwork Tue May 2 04:47:29 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Baruch Siach X-Patchwork-Id: 1775720 X-Patchwork-Delegate: xypron.glpk@gmx.de Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@legolas.ozlabs.org Authentication-Results: legolas.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de (client-ip=85.214.62.61; helo=phobos.denx.de; envelope-from=u-boot-bounces@lists.denx.de; receiver=) Authentication-Results: legolas.ozlabs.org; dkim=pass (2048-bit key; secure) header.d=tkos.co.il header.i=@tkos.co.il header.a=rsa-sha256 header.s=default header.b=rT2/i07m; dkim-atps=neutral Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by legolas.ozlabs.org (Postfix) with ESMTPS id 4Q9SHs2nrQz20fd for ; Tue, 2 May 2023 14:47:53 +1000 (AEST) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 75DCB8637F; Tue, 2 May 2023 06:47:48 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=tkos.co.il Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (2048-bit key; secure) header.d=tkos.co.il header.i=@tkos.co.il header.b="rT2/i07m"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id 923C1863AA; Tue, 2 May 2023 06:47:46 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.2 Received: from mail.tkos.co.il (wiki.tkos.co.il [84.110.109.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 4673A8637A for ; Tue, 2 May 2023 06:47:44 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=tkos.co.il Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=baruch@tkos.co.il Received: from tarshish.tkos.co.il (unknown [10.0.8.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.tkos.co.il (Postfix) with ESMTPS id 84FB6441079; Tue, 2 May 2023 07:42:03 +0300 (IDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tkos.co.il; s=default; t=1683002523; bh=WUn0kmbBIvruI1g6MRH+hnEY2xsP/badeiIXJMYoTxE=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=rT2/i07mdtJHYxZWjFoPesPGvA9jKNfFp6rI5vQlQugVITNzJ1gKgNu+N7MRAoGr0 flC/u06xmj0DEDBoRrXyH/9nLILcj0rBEvO+M+z1kLQ9XnWUSHAHenZFt0NuXPRIOP 1SjsCKpntoBr2VJivRZOD3egfIuXk2TgjExWgCOIvHhvXeTUEvEQF0tOn60BDjNeCa qUhazgA1/jBzaW1Gan+gVEuFV8chJNTq5/RUY/TliaXYpoCUNPrEvpYR+acW43K0EM Qt6jRBngr/3Q6e9+rBRv4OJqeFP9MhfVShL15u7PTpjqERSdJ/T8dnYF7TFrftx4Gr EF//PeldFb1hg== From: Baruch Siach To: Simon Glass Cc: u-boot@lists.denx.de, Baruch Siach Subject: [PATCH 2/4] doc: signature: update algorithm addition description Date: Tue, 2 May 2023 07:47:29 +0300 Message-Id: <3da41960dc08691d2674e286090876d623843317.1683002851.git.baruch@tkos.co.il> X-Mailer: git-send-email 2.39.2 In-Reply-To: <58421075b02401535de82d4b91616c270b020982.1683002851.git.baruch@tkos.co.il> References: <58421075b02401535de82d4b91616c270b020982.1683002851.git.baruch@tkos.co.il> MIME-Version: 1.0 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean U-Boot now uses the U_BOOT_CRYPTO_ALGO() macro. Signed-off-by: Baruch Siach Reviewed-by: Simon Glass Acked-by: Heinrich Schuchardt --- doc/uImage.FIT/signature.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/doc/uImage.FIT/signature.txt b/doc/uImage.FIT/signature.txt index bc123f512f7b..b6707417ff63 100644 --- a/doc/uImage.FIT/signature.txt +++ b/doc/uImage.FIT/signature.txt @@ -56,10 +56,10 @@ of data from the FDT and exponentiation mod n. Code size impact is a little under 5KB on Tegra Seaboard, for example. It is relatively straightforward to add new algorithms if required. If -another RSA variant is needed, then it can be added to the table in -image-sig.c. If another algorithm is needed (such as DSA) then it can be -placed alongside rsa.c, and its functions added to the table in image-sig.c -also. +another RSA variant is needed, then it can be added with the +U_BOOT_CRYPTO_ALGO() macro. If another algorithm is needed (such as DSA) then +it can be placed in a directory alongside lib/rsa/, and its functions added +using U_BOOT_CRYPTO_ALGO(). Creating an RSA key pair and certificate From patchwork Tue May 2 04:47:30 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Baruch Siach X-Patchwork-Id: 1775721 X-Patchwork-Delegate: xypron.glpk@gmx.de Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@legolas.ozlabs.org Authentication-Results: legolas.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de (client-ip=85.214.62.61; helo=phobos.denx.de; envelope-from=u-boot-bounces@lists.denx.de; receiver=) Authentication-Results: legolas.ozlabs.org; dkim=pass (2048-bit key; secure) header.d=tkos.co.il header.i=@tkos.co.il header.a=rsa-sha256 header.s=default header.b=h1GZNo++; dkim-atps=neutral Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (No client certificate requested) by legolas.ozlabs.org (Postfix) with ESMTPS id 4Q9SJ46rVLz20fd for ; Tue, 2 May 2023 14:48:04 +1000 (AEST) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id A149C863A5; Tue, 2 May 2023 06:47:49 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=tkos.co.il Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (2048-bit key; secure) header.d=tkos.co.il header.i=@tkos.co.il header.b="h1GZNo++"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id AFC7A8637A; Tue, 2 May 2023 06:47:46 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.2 Received: from mail.tkos.co.il (hours.tkos.co.il [84.110.109.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 75EF78637F for ; Tue, 2 May 2023 06:47:44 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=tkos.co.il Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=baruch@tkos.co.il Received: from tarshish.tkos.co.il (unknown [10.0.8.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.tkos.co.il (Postfix) with ESMTPS id 2E44044107B; Tue, 2 May 2023 07:42:04 +0300 (IDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tkos.co.il; s=default; t=1683002524; bh=kQ2JglCg4p76xJVStrotvO0JKRXNI46iB0c5GNkcbWA=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=h1GZNo++jaSNpGIgSHj+tLmFTIZRfDkvcRnLaOFXQvvEn8af8qi7LfcsYqyi2yZF2 ySEoylaocvpA6rsq2k4xqmwDnt5oJqYF4aZbpJbSj748JWV534SAWahL6SX6xQ1th9 pR0b/f7DEKXIJMzPSgd1ysuzSv+6oNoTbVIjQsXM807OiYhL2mf6kCm1zZ5q2WyH85 yLDpGU3udRp1R/b+/pGRHAezkbB7CmwkJ8js+FbOejKWYSyBdWZPVYcvdk4Ypzvjr9 DIDfK4QcHIfcTmH3I7T3jX8/Kdr+oIxJ+/2+BxGuj4VjlZ1aTiu0QvooXNvyxfe64p wH3+g+kYngmMg== From: Baruch Siach To: Simon Glass Cc: u-boot@lists.denx.de, Baruch Siach Subject: [PATCH 3/4] doc: signature: describe how to enable ECDSA Date: Tue, 2 May 2023 07:47:30 +0300 Message-Id: <856e7d332bf83de4c87335b2b02c5014b5ac7753.1683002851.git.baruch@tkos.co.il> X-Mailer: git-send-email 2.39.2 In-Reply-To: <58421075b02401535de82d4b91616c270b020982.1683002851.git.baruch@tkos.co.il> References: <58421075b02401535de82d4b91616c270b020982.1683002851.git.baruch@tkos.co.il> MIME-Version: 1.0 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean Signed-off-by: Baruch Siach Reviewed-by: Simon Glass --- doc/uImage.FIT/signature.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/doc/uImage.FIT/signature.txt b/doc/uImage.FIT/signature.txt index b6707417ff63..240244b30e63 100644 --- a/doc/uImage.FIT/signature.txt +++ b/doc/uImage.FIT/signature.txt @@ -439,6 +439,7 @@ be enabled: CONFIG_FIT_SIGNATURE - enable signing and verification in FITs CONFIG_RSA - enable RSA algorithm for signing +CONFIG_ECDSA - enable ECDSA algorithm for signing WARNING: When relying on signed FIT images with required signature check the legacy image format is default disabled by not defining From patchwork Tue May 2 04:47:31 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Baruch Siach X-Patchwork-Id: 1775723 X-Patchwork-Delegate: xypron.glpk@gmx.de Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@legolas.ozlabs.org Authentication-Results: legolas.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de (client-ip=85.214.62.61; helo=phobos.denx.de; envelope-from=u-boot-bounces@lists.denx.de; receiver=) Authentication-Results: legolas.ozlabs.org; dkim=pass (2048-bit key; secure) header.d=tkos.co.il header.i=@tkos.co.il header.a=rsa-sha256 header.s=default header.b=KE8WbDYm; dkim-atps=neutral Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (No client certificate requested) by legolas.ozlabs.org (Postfix) with ESMTPS id 4Q9SJY6NPHz20fd for ; Tue, 2 May 2023 14:48:29 +1000 (AEST) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 9FC46863BA; Tue, 2 May 2023 06:47:51 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=tkos.co.il Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (2048-bit key; secure) header.d=tkos.co.il header.i=@tkos.co.il header.b="KE8WbDYm"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id AF69A86384; Tue, 2 May 2023 06:47:48 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.2 Received: from mail.tkos.co.il (hours.tkos.co.il [84.110.109.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id B030D863A4 for ; Tue, 2 May 2023 06:47:44 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=tkos.co.il Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=baruch@tkos.co.il Received: from tarshish.tkos.co.il (unknown [10.0.8.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.tkos.co.il (Postfix) with ESMTPS id 74FD144107D; Tue, 2 May 2023 07:42:04 +0300 (IDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tkos.co.il; s=default; t=1683002524; bh=urp9cm8NzTWKaq9bPqERlDgp8r4hhrKXS4YAlFqB/wQ=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=KE8WbDYmWXM4GL2QEkeuYbQFQYX13P9B2nn2E1EPYhGmy8/OVhK0u90tDeaxqshI4 IWMdzlsJTGrBjwUFCCHqd6Nx4sDj6DioudOoheAbCU1ysIxszp6n2PV9kxHEbohjZZ 2g5B7s+h79tDNeIUZaEGRyFNUM4pfprJw3aAG73JmjxJkpykVFRAtidR0im3TKeUgd 9mDeoy48RpinVqPuden3wYzS6ot9oNr53+cNAW014yr5yXiyd8PNsHg1qY5DkE4CE5 J/uakISAG2RC5Sb7eapXhZHZsxbUDGRsWA4vo8XVzFwsH/A5nFwC06qPLcygy1NZfO rtJQSs8q0zkPQ== From: Baruch Siach To: Simon Glass Cc: u-boot@lists.denx.de, Baruch Siach Subject: [PATCH 4/4] doc: signature: trim the future work list Date: Tue, 2 May 2023 07:47:31 +0300 Message-Id: X-Mailer: git-send-email 2.39.2 In-Reply-To: <58421075b02401535de82d4b91616c270b020982.1683002851.git.baruch@tkos.co.il> References: <58421075b02401535de82d4b91616c270b020982.1683002851.git.baruch@tkos.co.il> MIME-Version: 1.0 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean Since U-Boot supports more RSA/SHA variants, as well as ECDSA, remove these items from the TODO list. Signed-off-by: Baruch Siach Reviewed-by: Simon Glass --- doc/uImage.FIT/signature.txt | 2 -- 1 file changed, 2 deletions(-) diff --git a/doc/uImage.FIT/signature.txt b/doc/uImage.FIT/signature.txt index 240244b30e63..21eb3894aada 100644 --- a/doc/uImage.FIT/signature.txt +++ b/doc/uImage.FIT/signature.txt @@ -695,8 +695,6 @@ bootm. Possible Future Work -------------------- -- Add support for other RSA/SHA variants, such as rsa4096,sha512. -- Other algorithms besides RSA - More sandbox tests for failure modes - Passwords for keys/certificates - Perhaps implement OAEP