Files
u-boot/lib
AKASHI Takahiro 7926dfb579 efi_loader: image_loader: add digest-based verification for signed image
In case that a type of certificate in "db" or "dbx" is
EFI_CERT_X509_SHA256_GUID, it is actually not a certificate which contains
a public key for RSA decryption, but a digest of image to be loaded.
If the value matches to a value calculated from a given binary image, it is
granted for loading.

With this patch, common digest check code, which used to be used for
unsigned image verification, will be extracted from
efi_signature_verify_with_sigdb() into efi_signature_lookup_digest(), and
extra step for digest check will be added to efi_image_authenticate().

Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
2020-07-11 23:14:15 +02:00
..
2020-04-27 14:55:29 -04:00
2020-05-18 21:19:18 -04:00
2020-05-18 21:19:18 -04:00
2020-05-18 21:19:18 -04:00
2019-12-02 18:23:07 -05:00
2019-10-31 07:22:53 -04:00
2020-07-01 15:01:21 +08:00
2020-04-24 10:51:32 -04:00
2020-07-10 14:10:43 -04:00
2020-05-18 21:19:18 -04:00
2020-06-12 13:14:07 -04:00
2019-12-06 16:44:20 -05:00
2020-05-18 21:19:18 -04:00
2020-06-12 13:14:07 -04:00
2020-05-18 21:19:18 -04:00
2020-05-01 11:03:24 -04:00
2020-05-18 21:19:18 -04:00
2020-05-18 18:36:55 -04:00
2019-05-05 08:48:50 -04:00