[U-Boot] Kernel RSA signature ?

Wolfgang Denk wd at denx.de
Wed Jul 22 12:30:44 CEST 2009


Dear Cyrille Francois,

In message <61acdef60907220154q67c37cfen5e95aa18170af9b0 at mail.gmail.com> you wrote:
> 
> Thanks for this information.
> But this feature is used to check the kernel integrity.
> 
> My need is to authenticate the kernel image by the u-boot, to be sure
> that the kernel image is a official firmware.
> 
> That is why i'm thinking about RSA signature.
> 
> The goal is, at generation time, to sign the uImage with a private RSA
> key (unique for one firmware release), and u-boot uses the public RSA
> key to authenticate the uImage.

You mean you want to tivoize your device?

Best regards,

Wolfgang Denk

-- 
DENX Software Engineering GmbH,     MD: Wolfgang Denk & Detlev Zundel
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-10 Fax: (+49)-8142-66989-80 Email: wd at denx.de
Where would we be without rhetorical questions?


More information about the U-Boot mailing list