Re: [PATCH] lib: rsa: check algo match in rsa_verify_with_keynode

2020-10-13 Thread Tom Rini
On Wed, Sep 23, 2020 at 07:11:44PM +0200, Matthieu CASTET wrote: > The algo name should match between the FIT's signature node and the > U-Boot's control FDT. > > If we do not check it, U-Boot's control FDT can expect sha512 hash but > nothing will prevent to accept image with sha1 hash if the

[PATCH] lib: rsa: check algo match in rsa_verify_with_keynode

2020-09-23 Thread Matthieu CASTET
The algo name should match between the FIT's signature node and the U-Boot's control FDT. If we do not check it, U-Boot's control FDT can expect sha512 hash but nothing will prevent to accept image with sha1 hash if the signature is correct. Signed-off-by: Matthieu CASTET ---