[U-Boot] [linux-sunxi] Re: [PATCH v3 1/5] sunxi: a64: Enable FIT Signature

[Peter Korsgaard]

>>>>> "Jagan" == Jagan Teki <jagannadh.teki at gmail.com> writes:

 > On Wed, Dec 13, 2017 at 9:38 PM, Peter Korsgaard <peter at korsgaard.com> wrote:
 >>>>>>> "Maxime" == Maxime Ripard <maxime.ripard at free-electrons.com> writes:
 >> 
 >> Hi,
 >> 
 >> >> +++ b/arch/arm/mach-sunxi/Kconfig
 >> >> @@ -179,6 +179,7 @@ config MACH_SUN50I
 >> >> select SUNXI_DRAM_DW_32BIT
 >> >> select FIT
 >> >> select SPL_LOAD_FIT
 >> >> +   imply FIT_SIGNATURE
 >> 
 >> > I'm really not sure we should force it by default. How much code size
 >> > is it adding?
 >> 
 >> Not only that, enabling FIT_SIGNATURE support disables support for the
 >> legacy images (uImage / boot.scr) for security reasons, so it may very
 >> well break existing setups.

 > Sorry, I didn't get why legacy images will disable with fit? It
 > depends how user can go with it, whether he want legacy or fit both
 > will work.

Not when you enable CONFIG_FIT_SIGNATURE. That option disables support
for the legacy images.

-- 
Bye, Peter Korsgaard