tree 44414eb8dfd6309ba56a21a8d8982a5d8f938f2b
parent b016702f3608c89461ee564d38c3c0feca4e4e07
author Simon Glass <sjg@chromium.org> 1371161409 -0700
committer Tom Rini <trini@ti.com> 1372256336 -0400

image: Add support for signing of FIT configurations

While signing images is useful, it does not provide complete protection
against several types of attack. For example, it it possible to create a
FIT with the same signed images, but with the configuration changed such
that a different one is selected (mix and match attack). It is also possible
to substitute a signed image from an older FIT version into a newer FIT
(roll-back attack).

Add support for signing of FIT configurations using the libfdt's region
support.

Please see doc/uImage.FIT/signature.txt for more information.

Signed-off-by: Simon Glass <sjg@chromium.org>