This is my first version of patch series for adding signature verification to firmware loading.
The original idea and code came from the work by Luis some time ago, and I migrated it with some improvements to new driver data APIs, leaving request_firmware() intact. For details about how it works, please see the commit message of patch#1 and the document under Documentation/driver-api/firmware. Please note that patch#3, test script, is still a bit rough-edged, especially that we have to prepare some data files in advance. I will try to improve it for better automation. For you convenience, the patch is available: https://git.linaro.org/people/takahiro.akashi/linux-aarch64.git firmware/signature AKASHI Takahiro (4): firmware: add firmware signing scripts: sign-file: add firmware-signing option test: firmwware: add signature test to driver_data loader test firmware: document signature verification for driver data Documentation/driver-api/firmware/driver_data.rst | 6 + .../driver-api/firmware/fallback-mechanisms.rst | 5 +- Documentation/driver-api/firmware/signing.rst | 81 +++++++ drivers/base/Kconfig | 25 ++ drivers/base/firmware_class.c | 211 +++++++++++++++- include/linux/driver_data.h | 5 + lib/test_driver_data.c | 56 ++++- scripts/sign-file.c | 5 +- tools/testing/selftests/firmware/driver_data.sh | 265 ++++++++++++++++++++- 9 files changed, 638 insertions(+), 21 deletions(-) create mode 100644 Documentation/driver-api/firmware/signing.rst -- 2.11.1
