[PATCH v4 2/2] binman: add fast authentication method for i.MX8M signing

Fabio Estevam festevam at gmail.com
Tue Oct 8 16:10:31 CEST 2024


Hi Simon,

On Tue, Oct 1, 2024 at 2:27 PM Brian Ruley <brian.ruley at gehealthcare.com> wrote:
>
> Using the PKI tree with SRKs as intermediate CA isn't necessary or even
> desirable in some situations (boot time, for example). Add the possibility
> to use the "fast authentication" method where the image and CSF are both
> signed using the SRK [1, p.63].
>
> [1] https://community.nxp.com/pwmxy87654/attachments/pwmxy87654/imx-processors/202591/1/CST_UG.pdf
>
> Signed-off-by: Brian Ruley <brian.ruley at gehealthcare.com>
> Cc: Marek Vasut <marex at denx.de>
> ---
> Changes for v2:
> - fixed default key length (s/2048/4096) for srk-crt node
> Changes for v3:
> - code formatting
> Changes for v4:
> - fix spelling in commit message
> - code formatting

Are you happy with this series?


More information about the U-Boot mailing list