[PATCH v6 14/15] test: py: vboot: prepare test for global signature with ecdsa
Raymond Mao
raymondmaoca at gmail.com
Mon May 25 17:46:32 CEST 2026
Hi Philippe,
On Mon, May 25, 2026 at 9:52 AM Philippe Reynes
<philippe.reynes at softathome.com> wrote:
>
> The vboot tests only consider rsa for test with global signature.
> To prepare the integration of test with ecdsa test, the signature
> algo is now explicit.
>
> Reviewed-by: Simon Glass <sjg at chromium.org>
> Signed-off-by: Philippe Reynes <philippe.reynes at softathome.com>
> ---
> v3:
> - initial version
> v4:
> - no change
> v5:
> - no change
> v6:
> - no change
>
> test/py/tests/test_vboot.py | 12 ++++++------
> ...binman-pss.dts => sandbox-binman-rsa2048-pss.dts} | 0
> ...sandbox-binman.dts => sandbox-binman-rsa2048.dts} | 0
> ...pss.dts => sandbox-u-boot-global-rsa2048-pss.dts} | 0
> ...-global.dts => sandbox-u-boot-global-rsa2048.dts} | 0
> 5 files changed, 6 insertions(+), 6 deletions(-)
> rename test/py/tests/vboot/{sandbox-binman-pss.dts => sandbox-binman-rsa2048-pss.dts} (100%)
> rename test/py/tests/vboot/{sandbox-binman.dts => sandbox-binman-rsa2048.dts} (100%)
> rename test/py/tests/vboot/{sandbox-u-boot-global-pss.dts => sandbox-u-boot-global-rsa2048-pss.dts} (100%)
> rename test/py/tests/vboot/{sandbox-u-boot-global.dts => sandbox-u-boot-global-rsa2048.dts} (100%)
>
Looks good to me. Thanks!
Reviewed-by: Raymond Mao <raymondmaoca at gmail.com>
> diff --git a/test/py/tests/test_vboot.py b/test/py/tests/test_vboot.py
> index 4e4d9529031..22865f653c5 100644
> --- a/test/py/tests/test_vboot.py
> +++ b/test/py/tests/test_vboot.py
> @@ -503,7 +503,7 @@ def test_vboot(ubman, name, sha_algo, sig_algo, padding, sign_options, required,
> dtb)
> run_bootm(sha_algo, 'multi required key', '', False)
>
> - def test_global_sign(sha_algo, padding, sign_options):
> + def test_global_sign(sha_algo, sig_algo, padding, sign_options):
> """Test global image signature with the given hash algorithm and padding.
>
> Args:
> @@ -512,14 +512,14 @@ def test_vboot(ubman, name, sha_algo, sig_algo, padding, sign_options, required,
> rsa signature algorithm.
> """
>
> - dtb = '%ssandbox-u-boot-global%s.dtb' % (tmpdir, padding)
> + dtb = '%ssandbox-u-boot-global%s%s.dtb' % (tmpdir, sig_algo, padding)
> ubman.config.dtb = dtb
>
> # Compile our device tree files for kernel and U-Boot. These are
> # regenerated here since mkimage will modify them (by adding a
> # public key) below.
> dtc('sandbox-kernel.dts', ubman, dtc_args, datadir, tmpdir, dtb)
> - dtc_options('sandbox-u-boot-global%s.dts' % padding, '-p 1024')
> + dtc_options('sandbox-u-boot-global%s%s.dts' % (sig_algo, padding), '-p 1024')
>
> # Build the FIT with dev key (keys NOT required). This adds the
> # signature into sandbox-u-boot.dtb, NOT marked 'required'.
> @@ -528,11 +528,11 @@ def test_vboot(ubman, name, sha_algo, sig_algo, padding, sign_options, required,
>
> # Build the dtb for binman that define the pre-load header
> # with the global sigature.
> - dtc('sandbox-binman%s.dts' % padding, ubman, dtc_args, datadir, tmpdir, dtb)
> + dtc('sandbox-binman%s%s.dts' % (sig_algo, padding), ubman, dtc_args, datadir, tmpdir, dtb)
>
> # Run binman to create the final image with the not signed fit
> # and the pre-load header that contains the global signature.
> - run_binman('sandbox-binman%s.dtb' % padding)
> + run_binman('sandbox-binman%s%s.dtb' % (sig_algo, padding))
>
> # Check that the signature is correctly verified by u-boot
> run_bootm(sha_algo, 'global image signature',
> @@ -582,7 +582,7 @@ def test_vboot(ubman, name, sha_algo, sig_algo, padding, sign_options, required,
> try:
> ubman.config.dtb = dtb
> if global_sign:
> - test_global_sign(sha_algo, padding, sign_options)
> + test_global_sign(sha_algo, sig_algo, padding, sign_options)
> elif required:
> test_required_key(sha_algo, sig_algo, padding, sign_options)
> else:
> diff --git a/test/py/tests/vboot/sandbox-binman-pss.dts b/test/py/tests/vboot/sandbox-binman-rsa2048-pss.dts
> similarity index 100%
> rename from test/py/tests/vboot/sandbox-binman-pss.dts
> rename to test/py/tests/vboot/sandbox-binman-rsa2048-pss.dts
> diff --git a/test/py/tests/vboot/sandbox-binman.dts b/test/py/tests/vboot/sandbox-binman-rsa2048.dts
> similarity index 100%
> rename from test/py/tests/vboot/sandbox-binman.dts
> rename to test/py/tests/vboot/sandbox-binman-rsa2048.dts
> diff --git a/test/py/tests/vboot/sandbox-u-boot-global-pss.dts b/test/py/tests/vboot/sandbox-u-boot-global-rsa2048-pss.dts
> similarity index 100%
> rename from test/py/tests/vboot/sandbox-u-boot-global-pss.dts
> rename to test/py/tests/vboot/sandbox-u-boot-global-rsa2048-pss.dts
> diff --git a/test/py/tests/vboot/sandbox-u-boot-global.dts b/test/py/tests/vboot/sandbox-u-boot-global-rsa2048.dts
> similarity index 100%
> rename from test/py/tests/vboot/sandbox-u-boot-global.dts
> rename to test/py/tests/vboot/sandbox-u-boot-global-rsa2048.dts
> --
> 2.43.0
>
More information about the U-Boot
mailing list