17 Jan, 2014

1 commit


20 Sep, 2013

1 commit


26 Jun, 2013

4 commits

  • Add a description of how to implement verified boot using signed FIT images,
    and a simple test which verifies operation on sandbox.

    The test signs a FIT image and verifies it, then signs a FIT configuration
    and verifies it. Then it corrupts the signature to check that this is
    detected.

    Signed-off-by: Simon Glass

    Simon Glass
     
  • While signing images is useful, it does not provide complete protection
    against several types of attack. For example, it it possible to create a
    FIT with the same signed images, but with the configuration changed such
    that a different one is selected (mix and match attack). It is also possible
    to substitute a signed image from an older FIT version into a newer FIT
    (roll-back attack).

    Add support for signing of FIT configurations using the libfdt's region
    support.

    Please see doc/uImage.FIT/signature.txt for more information.

    Signed-off-by: Simon Glass

    Simon Glass
     
  • Add support for signing images using a new signature node. The process
    is handled by fdt_add_verification_data() which now takes parameters to
    provide the keys and related information.

    Signed-off-by: Simon Glass

    Simon Glass
     
  • Add a structure to describe an algorithm which can sign and (later) verify
    images.

    Signed-off-by: Simon Glass

    Simon Glass
     

10 Aug, 2010

1 commit

  • since commit 1384f3bb8a4f9066805b70c1418eda78ecb73fdd ethernet names
    with spaces drop a

    Warning: eth device name has a space!

    message. This patch fix it for:

    - "FEC ETHERNET" devices found on
    mpc512x, mpc5xxx, mpc8xx and mpc8220 boards.
    renamed to "FEC".
    - "SCC ETHERNET" devices found on
    mpc8xx, mpc82xx based boards. Renamed to "SCC".
    - "HDLC ETHERNET" devices found on mpc8xx boards
    Renamed to "HDLC"
    - "FCC ETHERNET" devices found on mpc8260 and mpc85xx based
    boards. Renamed to "FCC"

    Tested on the kup4k board.

    Signed-off-by: Heiko Schocher
    Signed-off-by: Ben Warren

    Heiko Schocher
     

28 May, 2010

1 commit


31 Mar, 2010

1 commit

  • The ramdisk sections in doc/uImage.FIT/multi.its lack
    load address and entry point properties. Using examples
    from this file will result in unbootable image, u-boot
    will issue the following error messages:

    Can't get ramdisk subimage load address!
    Ramdisk image is corrupt or invalid

    This patch adds missing properties to ramdisk sections.

    Signed-off-by: Felix Radensky

    Felix Radensky
     

25 Nov, 2009

1 commit

  • The example FIT image source files do not compile with the latest dtc and
    mkimage. The following error message is produced:

    DTC: dts->dtb on file "kernel.its"
    Error: kernel.its 7:0 - 1:0 syntax error
    FATAL ERROR: Unable to parse input tree
    ./mkimage: Can't read kernel.itb.tmp: Invalid argument

    The FIT image source files are missing the "/dts-v1/;" directive at the
    beginning of the file. Add the directive to the examples.

    Signed-off-by: Ira W. Snyder

    Ira W. Snyder
     

19 Oct, 2008

2 commits


09 Oct, 2008

1 commit


09 Sep, 2008

2 commits


26 Mar, 2008

1 commit


21 Mar, 2008

1 commit


12 Mar, 2008

1 commit

  • Create doc/uImage.FIT documentation directory with the following files:
    - command_syntax_extensions.txt : extended command syntax description
    - howto.txt : short usage howto
    - source_file_format.txt : internal new uImage format description

    Add example image source files:
    - kernel.its
    - kernel_fdt.its
    - multi.its

    Update README appropriately.

    Signed-off-by: Marian Balakowicz
    Signed-off-by: Bartlomiej Sieka

    Marian Balakowicz