Re: [PATCH] binman: add fast authentication method for i.MX8M signing

2024-09-30 Thread Simon Glass
Hi Brian, On Mon, 30 Sept 2024 at 08:47, Brian Ruley wrote: > > On Mon, Sep 30, 2024 at 08:10:49AM -0600, Simon Glass wrote: > > > > WARNING: This email originated from outside of GE HealthCare. Please > > validate the sender's email address before clicking on links or attachments > > as they m

Re: [PATCH] binman: add fast authentication method for i.MX8M signing

2024-09-30 Thread Brian Ruley
On Mon, Sep 30, 2024 at 08:10:49AM -0600, Simon Glass wrote: > > WARNING: This email originated from outside of GE HealthCare. Please validate > the sender's email address before clicking on links or attachments as they > may not be safe. > > Hi Brian, > > On Mon, 30 Sept 2024 at 07:01, Brian

Re: [PATCH] binman: add fast authentication method for i.MX8M signing

2024-09-30 Thread Simon Glass
Hi Brian, On Mon, 30 Sept 2024 at 07:01, Brian Ruley wrote: > > On Sun, Sep 29, 2024 at 06:46:23PM -0600, Tom Rini wrote: > > On Sun, Sep 29, 2024 at 04:49:17PM -0600, Simon Glass wrote: > > > Hi Fabio, > > > > > > On Sun, 29 Sept 2024 at 14:53, Fabio Estevam wrote: > > > > > > > > Hi Simon, Mar

Re: [PATCH] binman: add fast authentication method for i.MX8M signing

2024-09-30 Thread Brian Ruley
On Sun, Sep 29, 2024 at 06:46:23PM -0600, Tom Rini wrote: > On Sun, Sep 29, 2024 at 04:49:17PM -0600, Simon Glass wrote: > > Hi Fabio, > > > > On Sun, 29 Sept 2024 at 14:53, Fabio Estevam wrote: > > > > > > Hi Simon, Marek, and Tom, > > > > > > On Fri, Sep 27, 2024 at 5:47???PM Tom Rini wrote: >

Re: [PATCH] binman: add fast authentication method for i.MX8M signing

2024-09-29 Thread Tom Rini
On Sun, Sep 29, 2024 at 04:49:17PM -0600, Simon Glass wrote: > Hi Fabio, > > On Sun, 29 Sept 2024 at 14:53, Fabio Estevam wrote: > > > > Hi Simon, Marek, and Tom, > > > > On Fri, Sep 27, 2024 at 5:47 PM Tom Rini wrote: > > > > > > Please can you coordinate with Marek as we need to sort out the t

Re: [PATCH] binman: add fast authentication method for i.MX8M signing

2024-09-29 Thread Simon Glass
Hi Fabio, On Sun, 29 Sept 2024 at 14:53, Fabio Estevam wrote: > > Hi Simon, Marek, and Tom, > > On Fri, Sep 27, 2024 at 5:47 PM Tom Rini wrote: > > > > Please can you coordinate with Marek as we need to sort out the test > > > coverage for this etype, before adding more functionality. I did a >

Re: [PATCH] binman: add fast authentication method for i.MX8M signing

2024-09-29 Thread Fabio Estevam
Hi Simon, Marek, and Tom, On Fri, Sep 27, 2024 at 5:47 PM Tom Rini wrote: > > Please can you coordinate with Marek as we need to sort out the test > > coverage for this etype, before adding more functionality. I did a > > starting point, now in -next, which should help. > > Well, when someone ha

[PATCH] binman: add fast authentication method for i.MX8M signing

2024-09-27 Thread Brian Ruley
Using the PKI tree with SRKs as intermediate CA isn't necessary or even desirable in some situations (boot time, for example). Add the possbility to use the "fast authentication" method where the image and CSF are both signed using the SRK [1, p.63]. [1] https://community.nxp.com/pwmxy87654/attac

Re: [PATCH] binman: add fast authentication method for i.MX8M signing

2024-09-27 Thread Tom Rini
On Fri, Sep 27, 2024 at 10:50:29AM -0600, Simon Glass wrote: > Hi, > > On Fri, 27 Sept 2024 at 06:42, Brian Ruley > wrote: > > > > Using the PKI tree with SRKs as intermediate CA isn't necessary or even > > desirable in some situations (boot time, for example). Add the possbility > > to use the

Re: [PATCH] binman: add fast authentication method for i.MX8M signing

2024-09-27 Thread Simon Glass
Hi, On Fri, 27 Sept 2024 at 06:42, Brian Ruley wrote: > > Using the PKI tree with SRKs as intermediate CA isn't necessary or even > desirable in some situations (boot time, for example). Add the possbility > to use the "fast authentication" method where the image and CSF are both > signed using t