diff options
author | Teddy Reed <teddy.reed@gmail.com> | 2016-06-10 02:18:44 (GMT) |
---|---|---|
committer | Tom Rini <trini@konsulko.com> | 2016-06-12 17:14:58 (GMT) |
commit | 51c14cd128f4355514397dc3c8647fb14f7d8ff4 (patch) | |
tree | 75a6855eebbb86d2fe86e07454e5b873c4b3fab5 /lib/rsa/Kconfig | |
parent | 7147a7ebd26fd0037b473343f0db2e2a98d19555 (diff) | |
download | u-boot-51c14cd128f4355514397dc3c8647fb14f7d8ff4.tar.xz |
verified-boot: Minimal support for booting U-Boot proper from SPL
This allows a board to configure verified boot within the SPL using
a FIT or FIT with external data. It also allows the SPL to perform
signature verification without needing relocation.
The board configuration will need to add the following feature defines:
CONFIG_SPL_CRYPTO_SUPPORT
CONFIG_SPL_HASH_SUPPORT
CONFIG_SPL_SHA256
In this example, SHA256 is the only selected hashing algorithm.
And the following booleans:
CONFIG_SPL=y
CONFIG_SPL_DM=y
CONFIG_SPL_LOAD_FIT=y
CONFIG_SPL_FIT=y
CONFIG_SPL_OF_CONTROL=y
CONFIG_SPL_OF_LIBFDT=y
CONFIG_SPL_FIT_SIGNATURE=y
Signed-off-by: Teddy Reed <teddy.reed@gmail.com>
Acked-by: Simon Glass <sjg@chromium.org>
Acked-by: Andreas Dannenberg <dannenberg@ti.com>
Acked-by: Sumit Garg <sumit.garg@nxp.com>
Diffstat (limited to 'lib/rsa/Kconfig')
-rw-r--r-- | lib/rsa/Kconfig | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/lib/rsa/Kconfig b/lib/rsa/Kconfig index 86df0a0..09ec358 100644 --- a/lib/rsa/Kconfig +++ b/lib/rsa/Kconfig @@ -13,6 +13,10 @@ config RSA option. The software based modular exponentiation is built into mkimage irrespective of this option. +config SPL_RSA + bool "Use RSA Library within SPL" + depends on RSA + if RSA config RSA_SOFTWARE_EXP bool "Enable driver for RSA Modular Exponentiation in software" |