From: Philippe Reynes <philippe.reynes@softathome.com>
To: sjg@chromium.org, mr.nuke.me@gmail.com, joel.peshkin@broadcom.com
Cc: u-boot@lists.denx.de, Philippe Reynes <philippe.reynes@softathome.com>
Subject: [RFC PATCH v3 0/8] image: add a stage pre-load
Date: Wed, 17 Nov 2021 18:52:07 +0100 [thread overview]
Message-ID: <20211117175215.24262-1-philippe.reynes@softathome.com> (raw)
This serie adds a stage pre-load before launching an image.
This stage is used to read a header before the image and
this header contains the signature of the full image.
So u-boot may check the full image before using any
data of the image.
Changelog:
v3:
- move image-pre-load.c to /boot
- update mkimage to add public key in u-boot device tree
- add script gen_pre_load_header.sh
v2:
- move the code to image-pre-load
- add support of stage pre-load for spl
- add support of stage pre-load on spl_ram
Philippe Reynes (8):
lib: allow to build asn1 decoder and oid registry in SPL
lib: crypto: allow to build crypyo in SPL
lib: rsa: allow rsa verify with pkey in SPL
boot: image: add a stage pre-load
cmd: bootm: add a stage pre-load
common: spl: fit_ram: allow to use image pre load
mkimage: add public key for image pre-load stage
tools: gen_pre_load_header.sh: initial import
boot/Kconfig | 33 ++++
boot/Makefile | 1 +
boot/bootm.c | 33 ++++
boot/image-pre-load.c | 291 +++++++++++++++++++++++++++++++++++
cmd/Kconfig | 10 ++
cmd/bootm.c | 2 +-
common/spl/spl_ram.c | 21 ++-
include/image.h | 25 +++
lib/Kconfig | 6 +
lib/Makefile | 9 +-
lib/crypto/Kconfig | 15 ++
lib/crypto/Makefile | 19 ++-
lib/rsa/Kconfig | 8 +
tools/fit_image.c | 3 +
tools/gen_pre_load_header.sh | 174 +++++++++++++++++++++
tools/image-host.c | 116 ++++++++++++++
16 files changed, 755 insertions(+), 11 deletions(-)
create mode 100644 boot/image-pre-load.c
create mode 100755 tools/gen_pre_load_header.sh
--
2.17.1
next reply other threads:[~2021-11-17 17:52 UTC|newest]
Thread overview: 25+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-11-17 17:52 Philippe Reynes [this message]
2021-11-17 17:52 ` [RFC PATCH v3 1/8] lib: allow to build asn1 decoder and oid registry in SPL Philippe Reynes
2021-11-25 0:12 ` Simon Glass
2021-11-17 17:52 ` [RFC PATCH v3 2/8] lib: crypto: allow to build crypyo " Philippe Reynes
2021-11-25 0:12 ` Simon Glass
2021-11-17 17:52 ` [RFC PATCH v3 3/8] lib: rsa: allow rsa verify with pkey " Philippe Reynes
2021-11-25 0:12 ` Simon Glass
2021-11-17 17:52 ` [RFC PATCH v3 4/8] boot: image: add a stage pre-load Philippe Reynes
2021-11-25 0:12 ` Simon Glass
2021-11-17 17:52 ` [RFC PATCH v3 5/8] cmd: bootm: " Philippe Reynes
2021-11-25 0:12 ` Simon Glass
2021-11-17 17:52 ` [RFC PATCH v3 6/8] common: spl: fit_ram: allow to use image pre load Philippe Reynes
2021-11-25 0:12 ` Simon Glass
2021-11-17 17:52 ` [RFC PATCH v3 7/8] mkimage: add public key for image pre-load stage Philippe Reynes
2021-11-25 0:13 ` Simon Glass
2021-12-03 10:29 ` Philippe REYNES
2021-11-17 17:52 ` [RFC PATCH v3 8/8] tools: gen_pre_load_header.sh: initial import Philippe Reynes
2021-11-25 0:13 ` Simon Glass
2021-12-06 8:23 ` Rasmus Villemoes
2021-12-08 18:10 ` Philippe REYNES
2021-12-09 1:04 ` Rasmus Villemoes
2021-12-10 0:14 ` Simon Glass
2021-12-10 7:41 ` Rasmus Villemoes
2021-12-11 11:37 ` Simon Glass
2021-11-25 0:13 ` [RFC PATCH v3 0/8] image: add a stage pre-load Simon Glass
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20211117175215.24262-1-philippe.reynes@softathome.com \
--to=philippe.reynes@softathome.com \
--cc=joel.peshkin@broadcom.com \
--cc=mr.nuke.me@gmail.com \
--cc=sjg@chromium.org \
--cc=u-boot@lists.denx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.