Files
slimbootloader/BootloaderCommonPkg/Library/ContainerLib/ContainerLib.inf
T
Subash Lakkimsetti 79abb75ed6 Enable RSA3072 and SHA384 signing support
This patch introduces support for RSA3K and SHA384 signing
And verifications support to Slimbootloader. Component hash
verification is done using PcdCompSignHashAlg.

To enable RSA3072 and SHA384,
 - Signing hash algorithm SIGN_HASH_TYPE should be set to SHA2_384
 - RSA3K private keys should be configured in platform board configs.
 - Set IPP_CRYPTO_ALG_MASK to include SHA2_384
 - Enable required IPP_CRYPTO_OPTIMIZATION_MASK
 - Default siging hash type is set to SHA2_256. Use hash type option
   while using the tools as Gencontainer, CfgDataTool in standalone
   mode.

Signed-off-by: Subash Lakkimsetti <subash.lakkimsetti@intel.com>
2020-01-02 11:23:49 -07:00

34 lines
852 B
INI

## @file
# Container Library Instance.
#
# Copyright (c) 2019, Intel Corporation. All rights reserved.<BR>
# SPDX-License-Identifier: BSD-2-Clause-Patent
#
##
[Defines]
INF_VERSION = 0x00010005
BASE_NAME = ContainerLib
FILE_GUID = F7EAF992-7473-4232-B1D2-4A798E92722A
MODULE_TYPE = BASE
VERSION_STRING = 1.0
LIBRARY_CLASS = ContainerLib
[Sources]
ContainerLib.c
[Packages]
MdePkg/MdePkg.dec
BootloaderCommonPkg/BootloaderCommonPkg.dec
[LibraryClasses]
BaseLib
DebugLib
SecureBootLib
DecompressLib
[Pcd]
gPlatformCommonLibTokenSpaceGuid.PcdContainerMaxNumber
gPlatformCommonLibTokenSpaceGuid.PcdVerifiedBootEnabled
gPlatformCommonLibTokenSpaceGuid.PcdCompSignHashAlg