Commit Graph

11 Commits

Author SHA1 Message Date
Gabriel Valcazar daae78b60c trustfence-sign-tools: add ccimx8mm support to the artifact signing script
https://jira.digi.com/browse/DEL-7420

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-02-12 11:37:15 +01:00
Arturo Buzarra 6c7bd330a4 trustfence-sign-artifact: add support for ccimx8x encryption
Add support to sign and encrypt OS artifacts for AHAB devices.

https://jira.digi.com/browse/DEL-7371

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2021-01-08 13:03:36 +01:00
Mike Engel 024732f8cc trustfence: create 128Bit dek when using MX8MN.
This commit creates a 128Bit DEK, which is the max supported
length at the moment for the iMX8M.

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2020-12-28 11:04:28 +01:00
Gonzalo Ruiz 168800c3b5 trustfence-sign-artifact: [cosmetic] bring together DTB parameters
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2020-06-19 16:29:15 +02:00
Gonzalo Ruiz 82157675d8 trustfence-sign-artifact: ccimx8x: preserve original image
Perform AHAB signing process without altering the original file.

https://jira.digi.com/browse/DEL-7024

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2020-06-15 20:06:00 +02:00
Gonzalo Ruiz 38d95cf361 trustfence: add support to sign/encrypt DTB overlays
https://jira.digi.com/browse/DEL-7024

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2020-06-04 19:01:34 +02:00
Gonzalo Ruiz 283e6b0638 trustfence-sign-artifact: set CONFIG_CSF_SIZE to 0x2000 for ccimx8mn
https://jira.digi.com/browse/DEL-7024

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2020-06-04 19:01:34 +02:00
Gonzalo Ruiz 98abd4bc28 trustfence-sign-artifact: add support for ccimx8mn signing
LINUX_ARM64 images include the padding length in the size property of
their header, so for these images read the header size property instead
of calculating it with 'stat'.

https://jira.digi.com/browse/DEL-7024

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2020-06-04 19:01:34 +02:00
Gonzalo Ruiz ea2ffcfee8 trustfence: introduce AHAB container creation into script
https://jira.digi.com/browse/DEL-7024

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2020-06-04 19:01:34 +02:00
Gonzalo Ruiz 5b23f09622 trustfence-sign-artifact: verify CONFIG_SIGN_MODE argument is set
If CONFIG_SIGN_MODE is unset, we were assuming the sign mode to be AHAB
whereas it is preferable to abort the signing process and notify with an
error message.

https://jira.digi.com/browse/DEL-7024

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2020-06-04 19:01:34 +02:00
Gonzalo Ruiz 9b4a03c14c trustfence: [cosmetic] rename script to trustfence-sign-artifact
The signing script is used for signing multiple artifacts, not just the
kernel, so rename it for a broader use.

https://jira.digi.com/browse/DEL-7047

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2020-06-04 19:01:34 +02:00