diff mbox series

[u-boot,v2019.04-aspeed-openbmc,v3,4/4] config: ast2600: Enable FIT signature verification

Message ID 20210128001521.266883-5-joel@jms.id.au
State New
Headers show
Series FIT verification | expand

Commit Message

Joel Stanley Jan. 28, 2021, 12:15 a.m. UTC
This turns on FIT signature verification for the OpenBMC SPL
configuration, for both the SPL and u-boot.

This enables rsa and sha algorithms for verifying the signature of the
u-boot FIT when loading it.

FIT_IMAGE_TINY is selected to save approx 3KB from the image size.

Signed-off-by: Joel Stanley <joel@jms.id.au>
---
v3: Move SPL_FIT_IMAGE_TINY to this patch
---
 configs/ast2600_openbmc_spl_emmc_defconfig | 4 ++++
 1 file changed, 4 insertions(+)

Comments

Andrew Jeffery Jan. 28, 2021, 1:17 a.m. UTC | #1
On Thu, 28 Jan 2021, at 10:45, Joel Stanley wrote:
> This turns on FIT signature verification for the OpenBMC SPL
> configuration, for both the SPL and u-boot.
> 
> This enables rsa and sha algorithms for verifying the signature of the
> u-boot FIT when loading it.
> 
> FIT_IMAGE_TINY is selected to save approx 3KB from the image size.
> 
> Signed-off-by: Joel Stanley <joel@jms.id.au>

Acked-by: Andrew Jeffery <andrew@aj.id.au>
diff mbox series

Patch

diff --git a/configs/ast2600_openbmc_spl_emmc_defconfig b/configs/ast2600_openbmc_spl_emmc_defconfig
index 26e8790cef87..6daf6343478b 100644
--- a/configs/ast2600_openbmc_spl_emmc_defconfig
+++ b/configs/ast2600_openbmc_spl_emmc_defconfig
@@ -36,6 +36,9 @@  CONFIG_ARMV7_BOOT_SEC_DEFAULT=y
 CONFIG_ARMV7_PSCI_NR_CPUS=2
 CONFIG_NR_DRAM_BANKS=1
 CONFIG_FIT=y
+CONFIG_FIT_SIGNATURE=y
+CONFIG_SPL_FIT_SIGNATURE=y
+CONFIG_SPL_LOAD_FIT=y
 CONFIG_USE_BOOTARGS=y
 CONFIG_BOOTARGS="console=ttyS4,115200n8 root=/dev/ram rw"
 CONFIG_USE_BOOTCOMMAND=y
@@ -49,6 +52,7 @@  CONFIG_BOARD_EARLY_INIT_F=y
 CONFIG_SPL_SYS_MALLOC_SIMPLE=y
 CONFIG_SPL_STACK_R=y
 CONFIG_SPL_SEPARATE_BSS=y
+CONFIG_SPL_FIT_IMAGE_TINY=y
 CONFIG_SPL_DM_RESET=y
 CONFIG_SPL_RAM_SUPPORT=y
 CONFIG_SPL_RAM_DEVICE=y