search

msm8916-mainline / qtestsign

Simple tool to "sign" ELF Qualcomm firmware images using dummy certificates ("test keys")
GNU General Public License v2.0
40 stars 8 forks source link

Signing tool for MSM8974 (not ELF) #3

Open bzy-080408 opened 1 year ago

bzy-080408 commented 1 year ago

I tryed to sign the sbl1.mbn,emmc_aboot.mbn (for msm8974) use this tool,but it showed this image

stephan-gh commented 1 year ago

SBL1 on older SoCs like MSM8974 is not an ELF file, it cannot be signed by qtestsign at the moment. Sorry.

bzy-080408 commented 1 year ago

and I have a msm8953 device,it enabled the "secure boot" and I have the hashes_HA256 code,can I change this tool and use it sign bootloader for my device?

stephan-gh commented 1 year ago

If you have a device with secure boot enabled you'd need access to the private signing keys, which hopefully shouldn't be possible to obtain anywhere.

bzy-080408 commented 1 year ago

and did you know that how to sign the aboot image for msm8974?I cannot find anytools for it.

bzy-080408 commented 1 year ago

by the way,my msm8974 device don`t have secure boot

stephan-gh commented 1 year ago

I'm not sure if you need to sign it at all, the EMMCBOOT.MBN generated by LK already has a header that might be suitable for devices without secure boot. I'd recommend to try if flashing it just works but MAKE SURE THAT YOU HAVE A WAY TO RECOVER YOUR DEVICE IN CASE IT FAILS (e.g. with EDL).

bzy-080408 commented 1 year ago

I tryed to flash aboot image that i built,but it cannot boot

stephan-gh commented 1 year ago

I'm not sure then at the moment, I have no experience with replacing firmware on MSM8974.

bzy-080408 commented 1 year ago

ok,thank you

bzy-080408 commented 1 year ago

emmm, I tryed to flashed a ARM Trusted Firmware I built without signed (for msm8974,sources from qualcomm leaked) and it booted success.So it looks like does not need to signed