mirror of
https://source.denx.de/u-boot/u-boot.git
synced 2026-06-13 15:03:58 +03:00
Add a test to verify the preload header correctly signs an encrypted FIT. This test exercises the case where encryption uses random IVs that would change between mkimage calls. Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com> Reviewed-by: Simon Glass <sjg@chromium.org>
64 lines
1.1 KiB
Plaintext
64 lines
1.1 KiB
Plaintext
// SPDX-License-Identifier: GPL-2.0+
|
|
|
|
/dts-v1/;
|
|
|
|
/ {
|
|
#address-cells = <1>;
|
|
#size-cells = <1>;
|
|
|
|
binman {
|
|
pre-load {
|
|
content = <&image>;
|
|
algo-name = "sha256,rsa2048";
|
|
key-name = "dev.key";
|
|
header-size = <4096>;
|
|
version = <0x11223344>;
|
|
};
|
|
|
|
image: fit {
|
|
fit,encrypt;
|
|
description = "Test a FIT with encrypted data and signed with a preload";
|
|
#address-cells = <1>;
|
|
|
|
images {
|
|
u-boot {
|
|
description = "U-Boot";
|
|
type = "firmware";
|
|
arch = "arm64";
|
|
os = "U-Boot";
|
|
compression = "none";
|
|
load = <00000000>;
|
|
entry = <00000000>;
|
|
cipher {
|
|
algo = "aes256";
|
|
key-name-hint = "aes256";
|
|
};
|
|
u-boot-nodtb {
|
|
};
|
|
};
|
|
fdt-1 {
|
|
description = "Flattened Device Tree blob";
|
|
type = "flat_dt";
|
|
arch = "arm64";
|
|
compression = "none";
|
|
cipher {
|
|
algo = "aes256";
|
|
key-name-hint = "aes256";
|
|
};
|
|
u-boot-dtb {
|
|
};
|
|
};
|
|
};
|
|
|
|
configurations {
|
|
default = "conf-1";
|
|
conf-1 {
|
|
description = "Boot U-Boot with FDT blob";
|
|
firmware = "u-boot";
|
|
fdt = "fdt-1";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|