So far we relied on U-Boots mkimage tool to generate dts snippets from RSA public keys which are then compiled into barebox. This series simplifies this by allowing to compile in RSA public keys directly into barebox. Keys are retrieved from certificate files in PEM format or from PKCS#11 URIs.
Sascha Hauer (5): Kbuild: Add config_filename macro from kernel scripts: Add rsatoc tool rsa: let rsa_of_read_key() return a fully allocated key rsa: Allow to directly compile in rsa public keys fit-image: Use compiled-in keys common/image-fit.c | 27 +- crypto/.gitignore | 2 + crypto/Kconfig | 19 ++ crypto/Makefile | 10 + crypto/rsa.c | 59 +++- include/asm-generic/barebox.lds.h | 6 + include/rsa.h | 5 +- scripts/.gitignore | 1 + scripts/Kbuild.include | 49 ++++ scripts/Makefile | 3 + scripts/Makefile.lib | 18 ++ scripts/rsatoc.c | 445 ++++++++++++++++++++++++++++++ 12 files changed, 629 insertions(+), 15 deletions(-) create mode 100644 crypto/.gitignore create mode 100644 scripts/rsatoc.c -- 2.23.0 _______________________________________________ barebox mailing list barebox@lists.infradead.org http://lists.infradead.org/mailman/listinfo/barebox
