| Ruchika Gupta | d9f23c7 | 2015-01-23 16:01:56 +0530 | [diff] [blame] | 1 | config RSA |
| 2 | bool "Use RSA Library" |
| George McCollister | f4e9ff7 | 2017-03-16 16:17:06 -0500 | [diff] [blame] | 3 | select RSA_FREESCALE_EXP if FSL_CAAM && !ARCH_MX7 && !ARCH_MX6 && !ARCH_MX5 |
| Ruchika Gupta | d9f23c7 | 2015-01-23 16:01:56 +0530 | [diff] [blame] | 4 | select RSA_SOFTWARE_EXP if !RSA_FREESCALE_EXP |
| 5 | help |
| 6 | RSA support. This enables the RSA algorithm used for FIT image |
| 7 | verification in U-Boot. |
| 8 | See doc/uImage.FIT/signature.txt for more details. |
| Simon Glass | 73223f0 | 2016-02-22 22:55:43 -0700 | [diff] [blame] | 9 | The Modular Exponentiation algorithm in RSA is implemented using |
| 10 | driver model. So CONFIG_DM needs to be enabled by default for this |
| 11 | library to function. |
| 12 | The signing part is build into mkimage regardless of this |
| 13 | option. The software based modular exponentiation is built into |
| 14 | mkimage irrespective of this option. |
| Ruchika Gupta | d9f23c7 | 2015-01-23 16:01:56 +0530 | [diff] [blame] | 15 | |
| Eugeniu Rosca | 39883af | 2018-04-21 14:00:10 +0200 | [diff] [blame] | 16 | if RSA |
| 17 | |
| Teddy Reed | 51c14cd | 2016-06-09 19:18:44 -0700 | [diff] [blame] | 18 | config SPL_RSA |
| 19 | bool "Use RSA Library within SPL" |
| Teddy Reed | 51c14cd | 2016-06-09 19:18:44 -0700 | [diff] [blame] | 20 | |
| AKASHI Takahiro | b983cc2 | 2020-02-21 15:12:55 +0900 | [diff] [blame] | 21 | config SPL_RSA_VERIFY |
| 22 | bool |
| 23 | help |
| 24 | Add RSA signature verification support in SPL. |
| 25 | |
| 26 | config RSA_VERIFY |
| 27 | bool |
| 28 | help |
| 29 | Add RSA signature verification support. |
| 30 | |
| AKASHI Takahiro | dd89f5b | 2020-02-21 15:12:56 +0900 | [diff] [blame^] | 31 | config RSA_VERIFY_WITH_PKEY |
| 32 | bool "Execute RSA verification without key parameters from FDT" |
| 33 | select RSA_VERIFY |
| 34 | help |
| 35 | The standard RSA-signature verification code (FIT_SIGNATURE) uses |
| 36 | pre-calculated key properties, that are stored in fdt blob, in |
| 37 | decrypting a signature. |
| 38 | This does not suit the use case where there is no way defined to |
| 39 | provide such additional key properties in standardized form, |
| 40 | particularly UEFI secure boot. |
| 41 | This options enables RSA signature verification with a public key |
| 42 | directly specified in image_sign_info, where all the necessary |
| 43 | key properties will be calculated on the fly in verification code. |
| 44 | |
| Ruchika Gupta | d9f23c7 | 2015-01-23 16:01:56 +0530 | [diff] [blame] | 45 | config RSA_SOFTWARE_EXP |
| 46 | bool "Enable driver for RSA Modular Exponentiation in software" |
| Eugeniu Rosca | 39883af | 2018-04-21 14:00:10 +0200 | [diff] [blame] | 47 | depends on DM |
| Ruchika Gupta | d9f23c7 | 2015-01-23 16:01:56 +0530 | [diff] [blame] | 48 | help |
| 49 | Enables driver for modular exponentiation in software. This is a RSA |
| 50 | algorithm used in FIT image verification. It required RSA Key as |
| 51 | input. |
| 52 | See doc/uImage.FIT/signature.txt for more details. |
| 53 | |
| 54 | config RSA_FREESCALE_EXP |
| 55 | bool "Enable RSA Modular Exponentiation with FSL crypto accelerator" |
| Eugeniu Rosca | 39883af | 2018-04-21 14:00:10 +0200 | [diff] [blame] | 56 | depends on DM && FSL_CAAM && !ARCH_MX7 && !ARCH_MX6 && !ARCH_MX5 |
| Ruchika Gupta | d9f23c7 | 2015-01-23 16:01:56 +0530 | [diff] [blame] | 57 | help |
| 58 | Enables driver for RSA modular exponentiation using Freescale cryptographic |
| 59 | accelerator - CAAM. |
| 60 | |
| 61 | endif |