On Fri, Aug 21, 2026 at 03:20:38AM +0000, Jamin Lin wrote:
> The ASPEED AST10x0 Secure Boot Controller has a hardware ECDSA engine
> that guest firmware uses to verify secp384r1 signatures. Emulating it
> requires ECDSA support in the crypto akcipher framework, which today
> only implements RSA.
> 
> Introduce a new asymmetric cipher algorithm, ECDSA, a curve identifier
> enum (prime256v1 / NIST P-256 and secp384r1 / NIST P-384) and the
> per-algorithm ECDSA options. This is the QAPI groundwork consumed by the
> crypto akcipher backends in the following patches.
> 
> Signed-off-by: Jamin Lin <[email protected]>
> Acked-by: Markus Armbruster <[email protected]>
> ---
>  qapi/crypto.json | 33 +++++++++++++++++++++++++++++++--
>  1 file changed, 31 insertions(+), 2 deletions(-)

Reviewed-by: Daniel P. Berrangé <[email protected]>


With regards,
Daniel
-- 
|: https://berrange.com       ~~        https://hachyderm.io/@berrange :|
|: https://libvirt.org          ~~          https://entangle-photo.org :|
|: https://pixelfed.art/berrange   ~~    https://fstop138.berrange.com :|


Reply via email to