mirror of
https://source.denx.de/u-boot/u-boot.git
synced 2025-12-19 16:31:27 +01:00
6d04828b45
Support for using "u-boot,dm-..." rather than "bootph-..." has been deprecated since February 2023. Any platforms using this have had a console message saying to migrate by 2023.07. Go and remove all support here now, for the v2026.01 release. The results of this change that aren't clear from the above are that we still have a checkpatch.pl error message, and document in doc/develop/spl.rst that they have been migrated since 2023. We also change the key2dtsi.py tool to use the correct bootph phase rather than the legacy phase. Signed-off-by: Tom Rini <trini@konsulko.com>
66 lines
2.4 KiB
Python
Executable File
66 lines
2.4 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
#
|
|
# Public key to dtsi converter.
|
|
#
|
|
# Copyright (c) Siemens AG, 2022
|
|
#
|
|
|
|
from argparse import ArgumentParser, FileType
|
|
from os.path import basename, splitext
|
|
from Cryptodome.PublicKey import RSA
|
|
from Cryptodome.Util.number import inverse
|
|
|
|
def int_to_bytestr(n, bits):
|
|
byte_array = n.to_bytes(bits // 8, 'big')
|
|
return ' '.join(['{:02x}'.format(byte) for byte in byte_array])
|
|
|
|
ap = ArgumentParser(description='Public key to dtsi converter')
|
|
|
|
ap.add_argument('--hash', '-H', default='sha256',
|
|
help='hash to be used with key (default: sha256)')
|
|
ap.add_argument('--required-conf', '-c', action='store_true',
|
|
help='mark key required for configuration')
|
|
ap.add_argument('--required-image', '-i', action='store_true',
|
|
help='mark key required for image')
|
|
ap.add_argument('--spl', '-s', action='store_true',
|
|
help='mark key for usage in SPL')
|
|
ap.add_argument('key_file', metavar='KEY_FILE', type=FileType('r'),
|
|
help='key file (formats: X.509, PKCS#1, OpenSSH)')
|
|
ap.add_argument('dtsi_file', metavar='DTSI_FILE', type=FileType('w'),
|
|
help='dtsi output file')
|
|
|
|
args = ap.parse_args()
|
|
|
|
key_name, _ = splitext(basename(args.key_file.name))
|
|
|
|
key_data = args.key_file.read()
|
|
key = RSA.importKey(key_data)
|
|
|
|
key_bits = key.size_in_bits()
|
|
r_squared = (2**key_bits)**2 % key.n
|
|
n0_inverse = 2**32 - inverse(key.n, 2**32)
|
|
|
|
out = args.dtsi_file
|
|
out.write('/ {\n')
|
|
out.write('\tsignature {\n')
|
|
out.write('\t\tkey-{} {{\n'.format(key_name))
|
|
out.write('\t\t\tkey-name-hint = "{}";\n'.format(key_name))
|
|
out.write('\t\t\talgo = "{},rsa{}";\n'.format(args.hash, key_bits))
|
|
out.write('\t\t\trsa,num-bits = <{}>;\n'.format(key_bits))
|
|
out.write('\t\t\trsa,modulus = [{}];\n'.format(int_to_bytestr(key.n,
|
|
key_bits)))
|
|
out.write('\t\t\trsa,exponent = [{}];\n'.format(int_to_bytestr(key.e, 64)))
|
|
out.write('\t\t\trsa,r-squared = [{}];\n'.format(int_to_bytestr(r_squared,
|
|
key_bits)))
|
|
out.write('\t\t\trsa,n0-inverse = <0x{:x}>;\n'.format(n0_inverse))
|
|
if args.required_conf:
|
|
out.write('\t\t\trequired = "conf";\n')
|
|
elif args.required_image:
|
|
out.write('\t\t\trequired = "image";\n')
|
|
if args.spl:
|
|
out.write('\t\t\tbootph-pre-ram;\n')
|
|
out.write('\t\t};\n')
|
|
out.write('\t};\n')
|
|
out.write('};\n')
|