This series adds support for signed SPL/U-Boot FIT images on Sunxi platforms and removes the unnecessary SPL_DM dependency for RSA verification.
Patch 1 allows FIT signature verification in SPL to work on boards that do not enable SPL_DM by falling back to the software RSA implementation when no hardware modular exponentiation driver is available. Patch 2 extends sunxi-u-boot.dtsi to add conditional nodes for hashes and signatures, following the same approach used in the Rockchip u-boot.dtsi. This enables secure boot flows where SPL can verify U-Boot and associated binaries before handing over control. Tested on a Sunxi board with CONFIG_SPL_FIT_SIGNATURE enabled and SPL_DM disabled, verifying a signed U-Boot image successfully. Lukas Schmid (2): rsa: allow operation without SPL_DM by falling back to software sunxi: u-boot.dtsi: add support for signed SPL and U-Boot images arch/arm/dts/sunxi-u-boot.dtsi | 68 ++++++++++++++++++++++++++++++++-- boot/Kconfig | 2 +- lib/rsa/rsa-verify.c | 4 +- 3 files changed, 67 insertions(+), 7 deletions(-) -- 2.39.5
