Dear Simon Glass,

> FIT image verification requires public keys. Add a convenient option to
> mkimage to write the public keys to an FDT blob when it uses then for
> signing an image. This allows us to use:
> 
>    mkimage -f test.its -K dest.dtb -k keys test.fit
> 
> and have the signatures written to test.fit and the corresponding public
> keys written to dest.dtb. Then dest.dtb can be used as the control FDT
> for U-Boot (CONFIG_OF_CONTROL), thus providing U-Boot with access to the
> public keys it needs.
> 
> Signed-off-by: Simon Glass <s...@chromium.org>

Reviewed-by: Marek Vasut <ma...@denx.de>

Best regards,
Marek Vasut
_______________________________________________
U-Boot mailing list
U-Boot@lists.denx.de
http://lists.denx.de/mailman/listinfo/u-boot

Reply via email to