diff options
| author | Matthias Pritschet <matthias.pritschet@itk-engineering.de> | 2024-08-29 14:44:47 +0200 |
|---|---|---|
| committer | Tom Rini <trini@konsulko.com> | 2024-10-07 21:31:20 -0600 |
| commit | c623bce70c905739aff8f85fac4c61eacb3b8e99 (patch) | |
| tree | 8c9cf257b00461e570e7cd753764b32e56d8e6ef /lib/ecdsa/ecdsa-libcrypto.c | |
| parent | b67436d31969e6d6b76b39849da276506058b900 (diff) | |
mkimage: ecdsa: add nodes to signature/key node
Add the "required", "algo", and "key-name-hint" nodes to the
signature/key node if ecdsa256 is used.
This change is mainly copy&paste from rsa_add_verify_data which already
adds these nodes.
Signed-off-by: Matthias Pritschet <matthias.pritschet@itk-engineering.de>
Diffstat (limited to 'lib/ecdsa/ecdsa-libcrypto.c')
| -rw-r--r-- | lib/ecdsa/ecdsa-libcrypto.c | 20 |
1 files changed, 18 insertions, 2 deletions
diff --git a/lib/ecdsa/ecdsa-libcrypto.c b/lib/ecdsa/ecdsa-libcrypto.c index e9aa2a1cf34..1c5dde60691 100644 --- a/lib/ecdsa/ecdsa-libcrypto.c +++ b/lib/ecdsa/ecdsa-libcrypto.c @@ -272,7 +272,8 @@ int ecdsa_verify(struct image_sign_info *info, return ret; } -static int do_add(struct signer *ctx, void *fdt, const char *key_node_name) +static int do_add(struct signer *ctx, void *fdt, const char *key_node_name, + struct image_sign_info *info) { int signature_node, key_node, ret, key_bits; const char *curve_name; @@ -322,6 +323,11 @@ static int do_add(struct signer *ctx, void *fdt, const char *key_node_name) point = EC_KEY_get0_public_key(ctx->ecdsa_key); EC_POINT_get_affine_coordinates(group, point, x, y, NULL); + ret = fdt_setprop_string(fdt, key_node, FIT_KEY_HINT, + info->keyname); + if (ret < 0) + return ret; + ret = fdt_setprop_string(fdt, key_node, "ecdsa,curve", curve_name); if (ret < 0) return ret; @@ -334,6 +340,16 @@ static int do_add(struct signer *ctx, void *fdt, const char *key_node_name) if (ret < 0) return ret; + ret = fdt_setprop_string(fdt, key_node, FIT_ALGO_PROP, + info->name); + if (ret < 0) + return ret; + + ret = fdt_setprop_string(fdt, key_node, FIT_KEY_REQUIRED, + info->require_keys); + if (ret < 0) + return ret; + return key_node; } @@ -346,7 +362,7 @@ int ecdsa_add_verify_data(struct image_sign_info *info, void *fdt) fdt_key_name = info->keyname ? info->keyname : "default-key"; ret = prepare_ctx(&ctx, info); if (ret >= 0) { - ret = do_add(&ctx, fdt, fdt_key_name); + ret = do_add(&ctx, fdt, fdt_key_name, info); if (ret < 0) ret = ret == -FDT_ERR_NOSPACE ? -ENOSPC : -EIO; } |