commit 07916c3155d14159e3ed3be494173bbd6c9fc274
author David Brown <david.brown@linaro.org> Wed May 31 13:38:31 2017 -0600
committer David Brown <david.brown@linaro.org> Wed Jun 07 09:19:21 2017 -0600
tree f00f952e13ac2d5762bf34ec476353bbdc6272b2
parent 23f91ad1526e46acfd31de3da1c415d92832eb62

imgtool.py: Support PKCS#1.5 v2.1 RSA-PSS

Add support for the RSA-PSS signature algorithm to imgtool.py.  This
algorithm has a strong security proof, and is recommended for all new
designs.  The new algorithm is enabled by default for RSA signatures to
match the default in the bootloader also being changed.

scripts/imgtool/image.py

diff --git a/scripts/imgtool/image.py b/scripts/imgtool/image.py
index 10b2d25..c4bedfe 100644
--- a/scripts/imgtool/image.py
+++ b/scripts/imgtool/image.py
@@ -16,7 +16,8 @@
         'PKCS15_RSA2048_SHA256': 0x0000004,
         'ECDSA224_SHA256':       0x0000008,
         'NON_BOOTABLE':          0x0000010,
-        'ECDSA256_SHA256':       0x0000020, }
+        'ECDSA256_SHA256':       0x0000020,
+        'PKCS1_PSS_RSA2048_SHA256': 0x0000040, }
 
 TLV_VALUES = {
         'SHA256': 1,