OrgZephyr/mcuboot
OrgZephyr
/
mcuboot
mirror of https://github.com/zephyrproject-rtos/mcuboot.git
1
0
Fork 0
Code Issues Releases Wiki Activity
mcuboot/sign.sh

49 lines
1.1 KiB
Bash
Raw Normal View History

Add some simple scripts for signing/flashing These are some simple scripts for signing images (with an example with a hardcoded path), a fixed root key that matches the one checked into the code, and a few scripts to use the Segger debugger to flash the images.
2017-01-11 01:40:43 +08:00
#! /bin/sh
zephyr: Support RSA, and ECDSA P-256 signing Make it clear in the top-level Makefile how to configure mcuboot for Zephyr for a particular signing algorithm. Currently supported, are the RSA signatures, and ECDSA with the P-256 curve. These configuration lines will select the code built in the bootloader, as well as which public key gets included with the image. This also adds a demo public key for the P-256 signatures.
2017-02-02 23:10:23 +08:00
# This script can be used as an example of how to sign images.
Add some simple scripts for signing/flashing These are some simple scripts for signing images (with an example with a hardcoded path), a fixed root key that matches the one checked into the code, and a few scripts to use the Segger debugger to flash the images.
2017-01-11 01:40:43 +08:00
source $(dirname $0)/target.sh
zephyr: Support RSA, and ECDSA P-256 signing Make it clear in the top-level Makefile how to configure mcuboot for Zephyr for a particular signing algorithm. Currently supported, are the RSA signatures, and ECDSA with the P-256 curve. These configuration lines will select the code built in the bootloader, as well as which public key gets included with the image. This also adds a demo public key for the P-256 signatures.
2017-02-02 23:10:23 +08:00
# RSA signatures can be made with the signing script in the scripts
# directory.
if true; then
./scripts/zep2newt.py \
--bin ../zephyr/samples/shell/outdir/$BOARD/zephyr.bin \
--key root.pem \
--sig RSA \
--out shell.signed.bin \
--vtoff 0x200 \
--word-size 8 \
--image-version 3 \
--bit --pad 0x20000
./scripts/zep2newt.py \
--bin ../zephyr/samples/hello_world/outdir/$BOARD/zephyr.bin \
--key root.pem \
--sig RSA \
--vtoff 0x200 \
--word-size 8 \
--image-version 2 \
--out hello.signed.bin
fi
# Currently, ECDSA signatures need to be made with the imgtool. See
# 'imgtool' for instructions on building the tool.
if false; then
imgtool sign \
--key root_ec.pem \
--header-size 0x200 \
--version 3.0 \
--align 8 \
--pad 0x20000 \
../zephyr/samples/shell/outdir/$BOARD/zephyr.bin \
shell.signed.bin
Add some simple scripts for signing/flashing These are some simple scripts for signing images (with an example with a hardcoded path), a fixed root key that matches the one checked into the code, and a few scripts to use the Segger debugger to flash the images.
2017-01-11 01:40:43 +08:00
zephyr: Support RSA, and ECDSA P-256 signing Make it clear in the top-level Makefile how to configure mcuboot for Zephyr for a particular signing algorithm. Currently supported, are the RSA signatures, and ECDSA with the P-256 curve. These configuration lines will select the code built in the bootloader, as well as which public key gets included with the image. This also adds a demo public key for the P-256 signatures.
2017-02-02 23:10:23 +08:00
imgtool sign \
--key root_ec.pem \
--header-size 0x200 \
--version 3.0 \
../zephyr/samples/hello_world/outdir/$BOARD/zephyr.bin \
hello.signed.bin
fi