diff options
| author | Simon Glass <sjg@chromium.org> | 2013-06-13 15:10:09 -0700 |
|---|---|---|
| committer | Tom Rini <trini@ti.com> | 2013-06-26 10:18:56 -0400 |
| commit | 4d0985295bbb50a952f4312c0a818cd89b8ee7aa (patch) | |
| tree | 44414eb8dfd6309ba56a21a8d8982a5d8f938f2b /net | |
| parent | 3e06cd1f97792b4bc3882de1ac99f031fb0eaa80 (diff) | |
| download | talos-obmc-uboot-4d0985295bbb50a952f4312c0a818cd89b8ee7aa.tar.gz talos-obmc-uboot-4d0985295bbb50a952f4312c0a818cd89b8ee7aa.zip | |
image: Add support for signing of FIT configurations
While signing images is useful, it does not provide complete protection
against several types of attack. For example, it it possible to create a
FIT with the same signed images, but with the configuration changed such
that a different one is selected (mix and match attack). It is also possible
to substitute a signed image from an older FIT version into a newer FIT
(roll-back attack).
Add support for signing of FIT configurations using the libfdt's region
support.
Please see doc/uImage.FIT/signature.txt for more information.
Signed-off-by: Simon Glass <sjg@chromium.org>
Diffstat (limited to 'net')
0 files changed, 0 insertions, 0 deletions
