[U-Boot] [linux-sunxi] Re: [PATCH v3 1/5] sunxi: a64: Enable FIT Signature

[Jagan Teki]

On Wed, Dec 13, 2017 at 9:38 PM, Peter Korsgaard <peter at korsgaard.com> wrote:
>>>>>> "Maxime" == Maxime Ripard <maxime.ripard at free-electrons.com> writes:
>
> Hi,
>
>  >> +++ b/arch/arm/mach-sunxi/Kconfig
>  >> @@ -179,6 +179,7 @@ config MACH_SUN50I
>  >> select SUNXI_DRAM_DW_32BIT
>  >> select FIT
>  >> select SPL_LOAD_FIT
>  >> +   imply FIT_SIGNATURE
>
>  > I'm really not sure we should force it by default. How much code size
>  > is it adding?
>
> Not only that, enabling FIT_SIGNATURE support disables support for the
> legacy images (uImage / boot.scr) for security reasons, so it may very
> well break existing setups.

Sorry, I didn't get why legacy images will disable with fit? It
depends how user can go with it, whether he want legacy or fit both
will work.

thanks!
-- 
Jagan Teki
Free Software Engineer | www.openedev.com
U-Boot, Linux | Upstream Maintainer
Hyderabad, India.