You've already forked slimbootloader
mirror of
https://github.com/Dasharo/slimbootloader.git
synced 2026-03-06 15:26:20 -08:00
79abb75ed6
This patch introduces support for RSA3K and SHA384 signing And verifications support to Slimbootloader. Component hash verification is done using PcdCompSignHashAlg. To enable RSA3072 and SHA384, - Signing hash algorithm SIGN_HASH_TYPE should be set to SHA2_384 - RSA3K private keys should be configured in platform board configs. - Set IPP_CRYPTO_ALG_MASK to include SHA2_384 - Enable required IPP_CRYPTO_OPTIMIZATION_MASK - Default siging hash type is set to SHA2_256. Use hash type option while using the tools as Gencontainer, CfgDataTool in standalone mode. Signed-off-by: Subash Lakkimsetti <subash.lakkimsetti@intel.com>