2015-01-23 10:31:56 +00:00
|
|
|
config RSA
|
|
|
|
|
bool "Use RSA Library"
|
2021-08-28 07:41:22 +00:00
|
|
|
select RSA_FREESCALE_EXP if FSL_CAAM && !ARCH_MX7 && !ARCH_MX7ULP && !ARCH_MX6 && !ARCH_MX5
|
2021-10-27 06:17:30 +00:00
|
|
|
select RSA_ASPEED_EXP if ASPEED_ACRY
|
|
|
|
|
select RSA_SOFTWARE_EXP if !RSA_FREESCALE_EXP && !RSA_ASPEED_EXP
|
2015-01-23 10:31:56 +00:00
|
|
|
help
|
|
|
|
|
RSA support. This enables the RSA algorithm used for FIT image
|
|
|
|
|
verification in U-Boot.
|
|
|
|
|
See doc/uImage.FIT/signature.txt for more details.
|
2016-02-23 05:55:43 +00:00
|
|
|
The Modular Exponentiation algorithm in RSA is implemented using
|
|
|
|
|
driver model. So CONFIG_DM needs to be enabled by default for this
|
|
|
|
|
library to function.
|
|
|
|
|
The signing part is build into mkimage regardless of this
|
|
|
|
|
option. The software based modular exponentiation is built into
|
|
|
|
|
mkimage irrespective of this option.
|
2015-01-23 10:31:56 +00:00
|
|
|
|
2018-04-21 12:00:10 +00:00
|
|
|
if RSA
|
|
|
|
|
|
2016-06-10 02:18:44 +00:00
|
|
|
config SPL_RSA
|
|
|
|
|
bool "Use RSA Library within SPL"
|
|
|
|
|
|
2020-02-21 06:12:55 +00:00
|
|
|
config SPL_RSA_VERIFY
|
|
|
|
|
bool
|
2021-09-16 12:03:36 +00:00
|
|
|
depends on SPL_RSA
|
2020-02-21 06:12:55 +00:00
|
|
|
help
|
|
|
|
|
Add RSA signature verification support in SPL.
|
|
|
|
|
|
|
|
|
|
config RSA_VERIFY
|
|
|
|
|
bool
|
|
|
|
|
help
|
|
|
|
|
Add RSA signature verification support.
|
|
|
|
|
|
2020-02-21 06:12:56 +00:00
|
|
|
config RSA_VERIFY_WITH_PKEY
|
|
|
|
|
bool "Execute RSA verification without key parameters from FDT"
|
|
|
|
|
select RSA_VERIFY
|
2020-02-21 06:12:58 +00:00
|
|
|
select ASYMMETRIC_KEY_TYPE
|
|
|
|
|
select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
|
|
|
|
|
select RSA_PUBLIC_KEY_PARSER
|
2020-02-21 06:12:56 +00:00
|
|
|
help
|
|
|
|
|
The standard RSA-signature verification code (FIT_SIGNATURE) uses
|
|
|
|
|
pre-calculated key properties, that are stored in fdt blob, in
|
|
|
|
|
decrypting a signature.
|
|
|
|
|
This does not suit the use case where there is no way defined to
|
|
|
|
|
provide such additional key properties in standardized form,
|
|
|
|
|
particularly UEFI secure boot.
|
|
|
|
|
This options enables RSA signature verification with a public key
|
|
|
|
|
directly specified in image_sign_info, where all the necessary
|
|
|
|
|
key properties will be calculated on the fly in verification code.
|
|
|
|
|
|
2022-03-28 20:56:58 +00:00
|
|
|
config SPL_RSA_VERIFY_WITH_PKEY
|
|
|
|
|
bool "Execute RSA verification without key parameters from FDT within SPL"
|
|
|
|
|
depends on SPL
|
|
|
|
|
select SPL_RSA_VERIFY
|
|
|
|
|
select SPL_ASYMMETRIC_KEY_TYPE
|
|
|
|
|
select SPL_ASYMMETRIC_PUBLIC_KEY_SUBTYPE
|
|
|
|
|
select SPL_RSA_PUBLIC_KEY_PARSER
|
|
|
|
|
help
|
|
|
|
|
The standard RSA-signature verification code (FIT_SIGNATURE) uses
|
|
|
|
|
pre-calculated key properties, that are stored in fdt blob, in
|
|
|
|
|
decrypting a signature.
|
|
|
|
|
This does not suit the use case where there is no way defined to
|
|
|
|
|
provide such additional key properties in standardized form,
|
|
|
|
|
particularly UEFI secure boot.
|
|
|
|
|
This options enables RSA signature verification with a public key
|
|
|
|
|
directly specified in image_sign_info, where all the necessary
|
|
|
|
|
key properties will be calculated on the fly in verification code
|
|
|
|
|
in the SPL.
|
|
|
|
|
|
2015-01-23 10:31:56 +00:00
|
|
|
config RSA_SOFTWARE_EXP
|
|
|
|
|
bool "Enable driver for RSA Modular Exponentiation in software"
|
2018-04-21 12:00:10 +00:00
|
|
|
depends on DM
|
2015-01-23 10:31:56 +00:00
|
|
|
help
|
|
|
|
|
Enables driver for modular exponentiation in software. This is a RSA
|
|
|
|
|
algorithm used in FIT image verification. It required RSA Key as
|
|
|
|
|
input.
|
|
|
|
|
See doc/uImage.FIT/signature.txt for more details.
|
|
|
|
|
|
|
|
|
|
config RSA_FREESCALE_EXP
|
|
|
|
|
bool "Enable RSA Modular Exponentiation with FSL crypto accelerator"
|
2021-08-28 07:41:22 +00:00
|
|
|
depends on DM && FSL_CAAM && !ARCH_MX7 && !ARCH_MX7ULP && !ARCH_MX6 && !ARCH_MX5
|
2015-01-23 10:31:56 +00:00
|
|
|
help
|
|
|
|
|
Enables driver for RSA modular exponentiation using Freescale cryptographic
|
|
|
|
|
accelerator - CAAM.
|
|
|
|
|
|
2021-10-27 06:17:30 +00:00
|
|
|
config RSA_ASPEED_EXP
|
|
|
|
|
bool "Enable RSA Modular Exponentiation with ASPEED crypto accelerator"
|
|
|
|
|
depends on DM && ASPEED_ACRY
|
|
|
|
|
help
|
|
|
|
|
Enables driver for RSA modular exponentiation using ASPEED cryptographic
|
|
|
|
|
accelerator - ACRY
|
|
|
|
|
|
2015-01-23 10:31:56 +00:00
|
|
|
endif
|
