[U-Boot] FitImage add pubkey signature in DTS

Clément Péron peron.clem at gmail.com
Thu May 3 08:32:45 UTC 2018


Hi,

I'm looking to add the public key for the FitImage signature in my dts.

Do you know if there is a script to add the pubkey in the .dts and not in
the .dtb ?

Actually I "decompile" the .dtb to get those values, but maybe there is an
easier way.

Looking to generate something like this from the RSA keys :
         signature {
                 key-product-dev {
                         required = "conf";
                         algo = "sha1,rsa2048";
                         rsa,r-squared = <0x68b44337 0x916dcfda 0x.....>
                         rsa,modulus = <0xb7929d33 0x34df0e32 0x......>
                         rsa,exponent = <0x0 0x10001>;
                         rsa,n0-inverse = <0x29.....>;
                         rsa,num-bits = <0x800>;
                         key-name-hint = "product-dev";
                 };
         };

Thanks,
Clement


More information about the U-Boot mailing list