From: Sughosh Ganu <sughosh.ganu@linaro.org>
To: u-boot@lists.denx.de
Subject: [PATCH 0/5] Add support for embedding public key in platform's dtb
Date: Wed, 7 Apr 2021 17:23:30 +0530 [thread overview]
Message-ID: <20210407115335.8615-1-sughosh.ganu@linaro.org> (raw)
Patch 1 fixes an issue of selection of IMAGE_SIGN_INFO config option
when capsule authentication is enabled.
Patch 2 add two config symbols, EFI_PKEY_DTB_EMBED and EFI_PKEY_FILE
which are used for enabling embedding of the public key in the dtb,
and specifying the esl file name.
Patch 3 moves efi_capsule_auth_enabled as a weak function, which can
be used as a default mechanism for checking if capsule authentication
has been enabled.
Patch 4 adds a default weak function for retrieving the public key
from the platform's dtb.
Patch 5 adds the functionality to embed the esl file into the
platform's dtb during the platform build.
I have tested this functionality on the STM32MP157C DK2 board.
[1] - https://lists.denx.de/pipermail/u-boot/2021-March/442867.html
Sughosh Ganu (5):
efi_loader: Kconfig: Select IMAGE_SIGN_INFO when capsule
authentication is enabled
efi_loader: Kconfig: Add symbols for embedding the public key into the
platform's dtb
efi_capsule: Add a weak function to check whether capsule
authentication is enabled
efi_capsule: Add a weak function to get the public key needed for
capsule authentication
Makefile: Add provision for embedding public key in platform's dtb
Makefile | 10 ++++++
board/emulation/common/qemu_capsule.c | 6 ----
lib/efi_loader/Kconfig | 16 ++++++++++
lib/efi_loader/efi_capsule.c | 44 ++++++++++++++++++++++++---
4 files changed, 66 insertions(+), 10 deletions(-)
--
2.17.1
next reply other threads:[~2021-04-07 11:53 UTC|newest]
Thread overview: 27+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-04-07 11:53 Sughosh Ganu [this message]
2021-04-07 11:53 ` [PATCH 1/5] efi_loader: Kconfig: Select IMAGE_SIGN_INFO when capsule authentication is enabled Sughosh Ganu
2021-04-08 8:27 ` Heinrich Schuchardt
2021-04-07 11:53 ` [PATCH 2/5] efi_loader: Kconfig: Add symbols for embedding the public key into the platform's dtb Sughosh Ganu
2021-04-08 20:13 ` Heinrich Schuchardt
2021-04-07 11:53 ` [PATCH 3/5] efi_capsule: Add a weak function to check whether capsule authentication is enabled Sughosh Ganu
2021-04-08 19:47 ` Heinrich Schuchardt
2021-04-09 6:25 ` Sughosh Ganu
2021-04-07 11:53 ` [PATCH 4/5] efi_capsule: Add a weak function to get the public key needed for capsule authentication Sughosh Ganu
2021-04-08 19:48 ` Heinrich Schuchardt
2021-04-09 6:25 ` Sughosh Ganu
2021-04-07 11:53 ` [PATCH 5/5] Makefile: Add provision for embedding public key in platform's dtb Sughosh Ganu
2021-04-08 19:58 ` Heinrich Schuchardt
2021-04-28 5:43 ` AKASHI Takahiro
2021-04-28 6:31 ` Masami Hiramatsu
2021-05-07 8:15 ` AKASHI Takahiro
2021-05-07 9:57 ` Masami Hiramatsu
2021-05-08 3:32 ` Masami Hiramatsu
2021-04-07 16:14 ` [PATCH 0/5] Add support " Simon Glass
2021-04-08 6:53 ` Sughosh Ganu
2021-04-08 8:41 ` Heinrich Schuchardt
2021-04-08 10:10 ` Sughosh Ganu
2021-04-08 11:21 ` Heinrich Schuchardt
2021-04-08 11:48 ` Sughosh Ganu
2021-04-08 23:55 ` Simon Glass
2021-04-09 11:27 ` Sughosh Ganu
2021-04-09 20:58 ` Simon Glass
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20210407115335.8615-1-sughosh.ganu@linaro.org \
--to=sughosh.ganu@linaro.org \
--cc=u-boot@lists.denx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.