Kconfig 2.1 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364
  1. config RSA
  2. bool "Use RSA Library"
  3. select RSA_FREESCALE_EXP if FSL_CAAM && !ARCH_MX7 && !ARCH_MX6 && !ARCH_MX5
  4. select RSA_SOFTWARE_EXP if !RSA_FREESCALE_EXP
  5. help
  6. RSA support. This enables the RSA algorithm used for FIT image
  7. verification in U-Boot.
  8. See doc/uImage.FIT/signature.txt for more details.
  9. The Modular Exponentiation algorithm in RSA is implemented using
  10. driver model. So CONFIG_DM needs to be enabled by default for this
  11. library to function.
  12. The signing part is build into mkimage regardless of this
  13. option. The software based modular exponentiation is built into
  14. mkimage irrespective of this option.
  15. if RSA
  16. config SPL_RSA
  17. bool "Use RSA Library within SPL"
  18. config SPL_RSA_VERIFY
  19. bool
  20. help
  21. Add RSA signature verification support in SPL.
  22. config RSA_VERIFY
  23. bool
  24. help
  25. Add RSA signature verification support.
  26. config RSA_VERIFY_WITH_PKEY
  27. bool "Execute RSA verification without key parameters from FDT"
  28. select RSA_VERIFY
  29. select ASYMMETRIC_KEY_TYPE
  30. select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
  31. select RSA_PUBLIC_KEY_PARSER
  32. help
  33. The standard RSA-signature verification code (FIT_SIGNATURE) uses
  34. pre-calculated key properties, that are stored in fdt blob, in
  35. decrypting a signature.
  36. This does not suit the use case where there is no way defined to
  37. provide such additional key properties in standardized form,
  38. particularly UEFI secure boot.
  39. This options enables RSA signature verification with a public key
  40. directly specified in image_sign_info, where all the necessary
  41. key properties will be calculated on the fly in verification code.
  42. config RSA_SOFTWARE_EXP
  43. bool "Enable driver for RSA Modular Exponentiation in software"
  44. depends on DM
  45. help
  46. Enables driver for modular exponentiation in software. This is a RSA
  47. algorithm used in FIT image verification. It required RSA Key as
  48. input.
  49. See doc/uImage.FIT/signature.txt for more details.
  50. config RSA_FREESCALE_EXP
  51. bool "Enable RSA Modular Exponentiation with FSL crypto accelerator"
  52. depends on DM && FSL_CAAM && !ARCH_MX7 && !ARCH_MX6 && !ARCH_MX5
  53. help
  54. Enables driver for RSA modular exponentiation using Freescale cryptographic
  55. accelerator - CAAM.
  56. endif