Hi Tom, Please pull mbedtls-2027-01-rc1-101426 from u-boot-mbedtls. Thanks!
The following changes since commit fed92546960a92177d67c0b8d7b22385f50fed29: Gitlab CI: sage: Update for labgrid 26.0 behavior (2026-10-12 11:13:40 -0600) are available in the Git repository at: https://git.u-boot-project.org/u-boot/custodians/raymo200915/u-boot-mbedtls.git tags/mbedtls-2027-01-rc1-101426 for you to fetch changes up to 55a7009d31654b74df5936569a712e262bd26e4c: test: py: vboot: add test for global signature with ecdsa (2026-10-13 10:58:37 -0400) ---------------------------------------------------------------- mbedtls updates for v2027.01-rc1 Adds the support of ecdsa using mbedtls: - fix the support of secp521r1 - enable support of ecdsa in mbedtls - add software ecdsa signature check using mbedtls - add support of ecdsa for internal fit signature - add test for ecdsa for internal fit signature in vboot - add support of ecdsa for pre-load signature - add test for ecdsa for pre-load signature in vboot - enable software ecdsa signature check in sandbox CI: https://git.u-boot-project.org/u-boot/custodians/raymo200915/u-boot-mbedtls/-/pipelines/1584 ---------------------------------------------------------------- Philippe Reynes (15): ecdsa: fix support of secp521r1 mbedtls: enable support of ecc ecdsa: initial support of ecdsa using mbedtls test: lib: ecdsa: add initial test drivers: crypto: add software ecdsa support test: dm: ecdsa.c: clean this test as software ecdsa is now implemented test: py: vboot: prepare integration test for ecdsa test: vboot: add test for ecdsa tools: fit_image_setup_sig: set required_keynode to -1 tools: mkimage: pre-load: add support of ecdsa tools: binman: pre-load: add support of ecdsa boot: pre-load: add support of ecdsa tools: preload_check_sign: add support of ecdsa test: py: vboot: prepare test for global signature with ecdsa test: py: vboot: add test for global signature with ecdsa boot/image-pre-load.c | 53 ++- configs/sandbox_defconfig | 2 + drivers/crypto/Makefile | 1 + drivers/crypto/ecdsa/Makefile | 6 + drivers/crypto/ecdsa/ecdsa-sw.c | 31 ++ include/crypto/ecdsa-uclass.h | 15 +- include/crypto/internal/ecdsa.h | 39 ++ lib/ecdsa/Kconfig | 1 + lib/ecdsa/ecdsa-libcrypto.c | 104 ++++- lib/ecdsa/ecdsa-verify.c | 73 +++- lib/fdt-libcrypto.c | 2 +- lib/mbedtls/Kconfig | 24 ++ lib/mbedtls/Makefile | 20 +- lib/mbedtls/ecdsa.c | 152 +++++++ lib/mbedtls/mbedtls_def_config.h | 41 +- test/dm/ecdsa.c | 107 ++++- test/lib/Makefile | 1 + test/lib/ecdsa.c | 456 +++++++++++++++++++++ test/py/tests/test_fit_ecdsa.py | 2 +- test/py/tests/test_vboot.py | 148 ++++--- test/py/tests/vboot/sandbox-binman-ecdsa256.dts | 24 ++ test/py/tests/vboot/sandbox-binman-ecdsa384.dts | 24 ++ test/py/tests/vboot/sandbox-binman-ecdsa521.dts | 24 ++ ...nman-pss.dts => sandbox-binman-rsa2048-pss.dts} | 0 ...ndbox-binman.dts => sandbox-binman-rsa2048.dts} | 0 .../tests/vboot/sandbox-u-boot-global-ecdsa256.dts | 27 ++ .../tests/vboot/sandbox-u-boot-global-ecdsa384.dts | 27 ++ .../tests/vboot/sandbox-u-boot-global-ecdsa521.dts | 27 ++ ...s.dts => sandbox-u-boot-global-rsa2048-pss.dts} | 0 ...lobal.dts => sandbox-u-boot-global-rsa2048.dts} | 0 ...1-pss.its => sign-configs-sha1-rsa2048-pss.its} | 0 ...figs-sha1.its => sign-configs-sha1-rsa2048.its} | 0 .../tests/vboot/sign-configs-sha256-ecdsa256.its | 44 ++ .../tests/vboot/sign-configs-sha256-ecdsa384.its | 44 ++ .../tests/vboot/sign-configs-sha256-ecdsa521.its | 44 ++ ...ts => sign-configs-sha256-rsa2048-pss-prod.its} | 0 ...pss.its => sign-configs-sha256-rsa2048-pss.its} | 0 ...-sha256.its => sign-configs-sha256-rsa2048.its} | 0 ...-sha384.its => sign-configs-sha384-rsa3072.its} | 0 ...a1-pss.its => sign-images-sha1-rsa2048-pss.its} | 0 ...mages-sha1.its => sign-images-sha1-rsa2048.its} | 0 .../py/tests/vboot/sign-images-sha256-ecdsa256.its | 42 ++ .../py/tests/vboot/sign-images-sha256-ecdsa384.its | 42 ++ .../py/tests/vboot/sign-images-sha256-ecdsa521.its | 42 ++ ...-pss.its => sign-images-sha256-rsa2048-pss.its} | 0 ...s-sha256.its => sign-images-sha256-rsa2048.its} | 0 ...s-sha384.its => sign-images-sha384-rsa3072.its} | 0 tools/binman/etype/pre_load.py | 78 +++- tools/binman/ftest.py | 50 +++ tools/binman/test/ecdsa521.pem | 7 + tools/binman/test/security/pre_load_ecdsa.dts | 22 + .../test/security/pre_load_ecdsa_invalid_algo.dts | 22 + .../test/security/pre_load_ecdsa_invalid_key.dts | 22 + .../test/security/pre_load_ecdsa_invalid_sha.dts | 22 + tools/image-host.c | 93 ++++- tools/image-sig-host.c | 7 + tools/preload_check_sign.c | 30 ++ 57 files changed, 1892 insertions(+), 150 deletions(-)
