From patchwork Tue May 2 04:47:30 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Baruch Siach X-Patchwork-Id: 1775721 X-Patchwork-Delegate: xypron.glpk@gmx.de Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@legolas.ozlabs.org Authentication-Results: legolas.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de (client-ip=85.214.62.61; helo=phobos.denx.de; envelope-from=u-boot-bounces@lists.denx.de; receiver=) Authentication-Results: legolas.ozlabs.org; dkim=pass (2048-bit key; secure) header.d=tkos.co.il header.i=@tkos.co.il header.a=rsa-sha256 header.s=default header.b=h1GZNo++; dkim-atps=neutral Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (No client certificate requested) by legolas.ozlabs.org (Postfix) with ESMTPS id 4Q9SJ46rVLz20fd for ; Tue, 2 May 2023 14:48:04 +1000 (AEST) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id A149C863A5; Tue, 2 May 2023 06:47:49 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=tkos.co.il Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (2048-bit key; secure) header.d=tkos.co.il header.i=@tkos.co.il header.b="h1GZNo++"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id AFC7A8637A; Tue, 2 May 2023 06:47:46 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.2 Received: from mail.tkos.co.il (hours.tkos.co.il [84.110.109.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 75EF78637F for ; Tue, 2 May 2023 06:47:44 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=tkos.co.il Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=baruch@tkos.co.il Received: from tarshish.tkos.co.il (unknown [10.0.8.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.tkos.co.il (Postfix) with ESMTPS id 2E44044107B; Tue, 2 May 2023 07:42:04 +0300 (IDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tkos.co.il; s=default; t=1683002524; bh=kQ2JglCg4p76xJVStrotvO0JKRXNI46iB0c5GNkcbWA=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=h1GZNo++jaSNpGIgSHj+tLmFTIZRfDkvcRnLaOFXQvvEn8af8qi7LfcsYqyi2yZF2 ySEoylaocvpA6rsq2k4xqmwDnt5oJqYF4aZbpJbSj748JWV534SAWahL6SX6xQ1th9 pR0b/f7DEKXIJMzPSgd1ysuzSv+6oNoTbVIjQsXM807OiYhL2mf6kCm1zZ5q2WyH85 yLDpGU3udRp1R/b+/pGRHAezkbB7CmwkJ8js+FbOejKWYSyBdWZPVYcvdk4Ypzvjr9 DIDfK4QcHIfcTmH3I7T3jX8/Kdr+oIxJ+/2+BxGuj4VjlZ1aTiu0QvooXNvyxfe64p wH3+g+kYngmMg== From: Baruch Siach To: Simon Glass Cc: u-boot@lists.denx.de, Baruch Siach Subject: [PATCH 3/4] doc: signature: describe how to enable ECDSA Date: Tue, 2 May 2023 07:47:30 +0300 Message-Id: <856e7d332bf83de4c87335b2b02c5014b5ac7753.1683002851.git.baruch@tkos.co.il> X-Mailer: git-send-email 2.39.2 In-Reply-To: <58421075b02401535de82d4b91616c270b020982.1683002851.git.baruch@tkos.co.il> References: <58421075b02401535de82d4b91616c270b020982.1683002851.git.baruch@tkos.co.il> MIME-Version: 1.0 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean Signed-off-by: Baruch Siach Reviewed-by: Simon Glass --- doc/uImage.FIT/signature.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/doc/uImage.FIT/signature.txt b/doc/uImage.FIT/signature.txt index b6707417ff63..240244b30e63 100644 --- a/doc/uImage.FIT/signature.txt +++ b/doc/uImage.FIT/signature.txt @@ -439,6 +439,7 @@ be enabled: CONFIG_FIT_SIGNATURE - enable signing and verification in FITs CONFIG_RSA - enable RSA algorithm for signing +CONFIG_ECDSA - enable ECDSA algorithm for signing WARNING: When relying on signed FIT images with required signature check the legacy image format is default disabled by not defining