path: root/tools/cert_create/include/key.h
diff options
authorSoby Mathew <soby.mathew@arm.com>2017-08-31 11:50:29 +0100
committerSoby Mathew <soby.mathew@arm.com>2017-08-31 16:42:11 +0100
commita8eb286adaa73e86305317b9cae15d41c57de8e7 (patch)
treedfb4cbd2168a73d0dabf2e2472e9a414a40dc916 /tools/cert_create/include/key.h
parent2091755c5e3b8d94333b9aad742e61db9d754cc5 (diff)
cert_tool: Support for legacy RSA PKCS#1 v1.5
This patch enables choice of RSA version at run time to be used for generating signatures by the cert_tool. The RSA PSS as defined in PKCS#1 v2.1 becomes the default version and this patch enables to specify the RSA PKCS#1 v1.5 algorithm to `cert_create` through the command line -a option. Also, the build option `KEY_ALG` can be used to pass this option from the build system. Please note that RSA PSS is mandated by Trusted Board Boot requirements (TBBR) and legacy RSA support is being added for compatibility reasons. Fixes ARM-Software/tf-issues#499 Change-Id: Ifaa3f2f7c9b43f3d7b3effe2cde76bf6745a5d73 Co-Authored-By: Eleanor Bonnici <Eleanor.bonnici@arm.com> Signed-off-by: Soby Mathew <soby.mathew@arm.com>
Diffstat (limited to 'tools/cert_create/include/key.h')
1 files changed, 2 insertions, 1 deletions
diff --git a/tools/cert_create/include/key.h b/tools/cert_create/include/key.h
index 4b9e88258..304fa6154 100644
--- a/tools/cert_create/include/key.h
+++ b/tools/cert_create/include/key.h
@@ -22,7 +22,8 @@ enum {
/* Supported key algorithms */
enum {
+ KEY_ALG_RSA, /* RSA PSS as defined by PKCS#1 v2.1 (default) */
+ KEY_ALG_RSA_1_5, /* RSA as defined by PKCS#1 v1.5 */
#endif /* OPENSSL_NO_EC */