V2: 1. Redefined sign and download command line parameters as below: generate signed messages: --gen-signed-msgs --signed-msgs-file <msgs.bin> download signed messages: --download-signed-msgs --signed-msgs-file <msgs.bin> 2. Added option --soc=<soc#> to specify tegra soc model number so that generating signed messages can be proceeded without accessing hardware. 3. Re-enabled cmac_hash when generating signed messages so that signed messages can also run on an unsecured board. 4. Download bootloader's pkc signature only when the board is in secured pkc mode. 5. Added error check on key length. 6. Added option --usb-timeout to allow user to specify usb transfer timeout value. V1: 1. Use option "--pkc" to sign and download bootloader. This option is designed for developer. Patch 0001-Add-option-pkc.patch was originally submitted by Alban Bedel. 2. Use option "--ml_rcm" and "--pkc" to sign rcm messages and bootloader. This signing only feature is intended for production where signging is done at secured server and flashing can be done at different stage and site without requiring keyfile being present. 3. Use option "--signed" to specify and download signed rcm messages. This option is used for flashing on fused board. ie, a system with security mode enabled. Alban Bedel (1): Add support for production devices secured with PKC Jimmy Zhang (3): Add option --gen-signed-msgs and --signed-msgs-file to generate signed blobs Add option --download-signed-msgs to download signed blobs Add option --usb-timeout=<value> src/Makefile.am | 2 + src/main.c | 535 +++++++++++++++++++++++++++++++++++++++++++++++++------- src/rcm.c | 16 +- src/rcm.h | 13 +- src/rsa-pss.cpp | 163 +++++++++++++++++ src/rsa-pss.h | 46 +++++ src/usb.c | 5 +- 7 files changed, 713 insertions(+), 67 deletions(-) create mode 100644 src/rsa-pss.cpp create mode 100644 src/rsa-pss.h -- 1.9.1 -- To unsubscribe from this list: send the line "unsubscribe linux-tegra" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html