summaryrefslogtreecommitdiff
path: root/Kconfig
diff options
context:
space:
mode:
authorAKASHI Takahiro <takahiro.akashi@linaro.org>2020-02-21 15:12:55 +0900
committerTom Rini <trini@konsulko.com>2020-03-12 08:20:38 -0400
commitb983cc2da0bafd73a4dfc069eb3c3a98677e2d92 (patch)
tree6ea5e39eb92db6a1c1311876a8df52f267a3aeea /Kconfig
parentd08b16edf80aa268985b96b2d9e633909734e7c1 (diff)
lib: rsa: decouple rsa from FIT image verification
Introduce new configuration, CONFIG_RSA_VERIFY which will decouple building RSA functions from FIT verification and allow for adding a RSA-based signature verification for other file formats, in particular PE file for UEFI secure boot. Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org> Reviewed-by: Simon Glass <sjg@chromium.org>
Diffstat (limited to 'Kconfig')
-rw-r--r--Kconfig4
1 files changed, 4 insertions, 0 deletions
diff --git a/Kconfig b/Kconfig
index 66148ce477..e2387b2ff8 100644
--- a/Kconfig
+++ b/Kconfig
@@ -354,6 +354,8 @@ config FIT_SIGNATURE
depends on DM
select HASH
select RSA
+ select RSA_VERIFY
+ select IMAGE_SIGN_INFO
help
This option enables signature verification of FIT uImages,
using a hash signed and verified using RSA. If
@@ -442,6 +444,8 @@ config SPL_FIT_SIGNATURE
depends on SPL_DM
select SPL_FIT
select SPL_RSA
+ select SPL_RSA_VERIFY
+ select IMAGE_SIGN_INFO
config SPL_LOAD_FIT
bool "Enable SPL loading U-Boot as a FIT (basic fitImage features)"