Re: [RFC PATCH v3 7/8] mkimage: add public key for image pre-load stage

2021-12-03 Thread Philippe REYNES

Hi Simon,

Le 25/11/2021 à 01:13, Simon Glass a écrit :

Hi Philippe,

On Wed, 17 Nov 2021 at 10:52, Philippe Reynes
 wrote:

This commit enhances mkimage to update the node
/image/pre-load/sig with the public key.

Signed-off-by: Philippe Reynes 
---
  include/image.h|  15 ++
  tools/fit_image.c  |   3 ++
  tools/image-host.c | 116 +
  3 files changed, 134 insertions(+)

I'm a bit unsure about the format of the key here. Is it different
from the normal one used by U-Boot?

The format used by pkey is the der format without the first 24 bytes.
For example, to create this key in a shell, I use the following commands :

openssl rsa -in private.pem -pubout -outform der -out public.der
dd if=public.der of=public.raw bs=24 skip=1

As described in the comment line 340 in the file test/lib/asn1.c.


Regards,
Simon

Regards,
Philippe


-- This message and any attachments herein are confidential, intended solely 
for the addressees and are SoftAtHome’s ownership. Any unauthorized use or 
dissemination is prohibited. If you are not the intended addressee of this 
message, please cancel it immediately and inform the sender.


Re: [RFC PATCH v3 7/8] mkimage: add public key for image pre-load stage

2021-11-24 Thread Simon Glass
Hi Philippe,

On Wed, 17 Nov 2021 at 10:52, Philippe Reynes
 wrote:
>
> This commit enhances mkimage to update the node
> /image/pre-load/sig with the public key.
>
> Signed-off-by: Philippe Reynes 
> ---
>  include/image.h|  15 ++
>  tools/fit_image.c  |   3 ++
>  tools/image-host.c | 116 +
>  3 files changed, 134 insertions(+)

I'm a bit unsure about the format of the key here. Is it different
from the normal one used by U-Boot?

Regards,
Simon