search

mcu-tools / mcuboot

Secure boot for 32-bit Microcontrollers!
Apache License 2.0
1.31k stars 666 forks source link

imgtool: Add --pure switch to allow calculating signatures over entire images #2063

Open de-nordic opened 2 weeks ago

de-nordic commented 2 weeks ago

The PR adds --pure switch to imgtool that allows to run ED25519 over entire image calculating the PureEdDSA signature.

The imgtool will add SIG_PURE TLV as indicator that whatever signature is used is calculated directly over image. The PR also provides different output for signature verification, where there is signature reported on verification, rather than digest, as digest is no longer available.

Depends on https://github.com/mcu-tools/mcuboot/pull/2029 -- that reserves the SIG_PURE in MCUboot code Based on https://github.com/mcu-tools/mcuboot/pull/2048

de-nordic commented 2 weeks ago

May be interesting for you @taltenbach