[PATCH 1/1] boot: don't select non-existent CONFIG_VPL_CRYPTO
Heinrich Schuchardt
heinrich.schuchardt at canonical.com
Wed Feb 25 13:21:08 CET 2026
On 2/25/26 10:06, Heinrich Schuchardt wrote:
> On 2/25/26 09:37, Quentin Schulz wrote:
>> Hi Heinrich,
>>
>> On 2/25/26 8:37 AM, Heinrich Schuchardt wrote:
>>> Symbol CONFIG_VPL_CRYPTO does not exist.
>>
>> Correct but I have a hunch this was based off of SPL_FIT_SIGNATURE
>> which does require crypto support, so I'm assuming VPL would too.
>>
>> But this symbol indeed never existed, and even if it did, it wouldn't
>> compile anything else as far as I can tell since drivers/crypto is
>> enabled by default in proper and only if CONFIG_SPL_CRYPTO is set for
>> SPL, and only SPL (checking for !TPL and !VPL)... so something feels
>> unfinished with VPL here to me.
>>
>> I'm not sure we're improving anything there but I don't think it makes
>> things worse, as such
>>
>> Fixes: 4218456b3fac ("vbe: Add Kconfig options for VPL")
>>
>> Reviewed-by: Quentin Schulz <quentin.schulz at cherry.de>
>>
>> Thanks!
>> Quentin
>
> Thank you for reviewing.
>
> There is a symbol CONFIG_VPL_MBEDTLS_LIB_CRYPTO that might be used but
> then VPL_FIT_SIGNATURE support would have to depend on MBEDTLS.
>
> Maybe Simon can inform us what his design intention was. Adding a
> defconfig actually testing VPL_FIT_SIGNATURE would be helpful.
>
> Best regards
>
> Heinrich
There are more non-existent symbols implied by VPL_FIT_SIGNATURE
imply VPL_RSA
imply VPL_RSA_VERIFY
@Tom
I wonder why the VPL feature was suggested if it was never tested or
used. Should we remove all of VPL?
Best regards
Heinrich
More information about the U-Boot
mailing list