[PATCH] common: Kconfig.boot: add config SPL_FIT_RSASSA_PSS

Philippe Reynes philippe.reynes at softathome.com
Fri Oct 15 11:35:03 CEST 2021

The padding pss is only supported on u-boot and tools since
commit 2bbed3ff8c7f ("image: Use Kconfig to enable FIT_RSASSA_PSS on host")

This commit adds the config SPL_FIT_RSASSA_PSS to support
the padding pss in the SPL.

Signed-off-by: Philippe Reynes <philippe.reynes at softathome.com>
 common/Kconfig.boot | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/common/Kconfig.boot b/common/Kconfig.boot
index 9b84a8d005..c948d58094 100644
--- a/common/Kconfig.boot
+++ b/common/Kconfig.boot
@@ -175,6 +175,13 @@ config SPL_FIT_SIGNATURE_MAX_SIZE
 	  device memory. Assure this size does not extend past expected storage
+	bool "Support rsassa-pss signature scheme of FIT image contents in SPL"
+	depends on SPL_FIT_SIGNATURE
+	help
+	  Enable this to support the pss padding algorithm as described
+	  in the rfc8017 (https://tools.ietf.org/html/rfc8017) in SPL.
 config SPL_LOAD_FIT
 	bool "Enable SPL loading U-Boot as a FIT (basic fitImage features)"
 	select SPL_FIT

More information about the U-Boot mailing list