Skip to content
Snippets Groups Projects
Forked from Reform / reform-boundary-uboot
Source project has a limited visibility.
  • Simon Glass's avatar
    4d098529
    image: Add support for signing of FIT configurations · 4d098529
    Simon Glass authored
    
    While signing images is useful, it does not provide complete protection
    against several types of attack. For example, it it possible to create a
    FIT with the same signed images, but with the configuration changed such
    that a different one is selected (mix and match attack). It is also possible
    to substitute a signed image from an older FIT version into a newer FIT
    (roll-back attack).
    
    Add support for signing of FIT configurations using the libfdt's region
    support.
    
    Please see doc/uImage.FIT/signature.txt for more information.
    
    Signed-off-by: default avatarSimon Glass <sjg@chromium.org>
    4d098529
    History
    image: Add support for signing of FIT configurations
    Simon Glass authored
    
    While signing images is useful, it does not provide complete protection
    against several types of attack. For example, it it possible to create a
    FIT with the same signed images, but with the configuration changed such
    that a different one is selected (mix and match attack). It is also possible
    to substitute a signed image from an older FIT version into a newer FIT
    (roll-back attack).
    
    Add support for signing of FIT configurations using the libfdt's region
    support.
    
    Please see doc/uImage.FIT/signature.txt for more information.
    
    Signed-off-by: default avatarSimon Glass <sjg@chromium.org>