Repository navigation

Commit ddd77cc

committed

boot: arm-trusted-firmware-microchipsw: make ECDSA signatures reproducible

Use RFC 6979 nonces with the staged LibreSSL host tool when SOURCE_DATE_EPOCH is set. Retry deterministically for full-width LAN969x signature scalars while preserving random signing otherwise. Two clean builds produced identical FIP, FWU FIP and FWU HTML outputs. Signed-off-by: Robert Marko <robert.marko@sartura.hr>

1 parent 9a54bf6 commit ddd77ccCopy full SHA for ddd77cc

3 files changed

package/boot/arm-trusted-firmware-microchipsw
- Makefile
- patches
  - 0007-cert_create-make-ECDSA-signatures-reproducible.patch
- src/keys
  - README

`‎package/boot/arm-trusted-firmware-microchipsw/Makefile‎`

-Original file line number
+Diff line change
@@ @@ -1,7 +1,7 @@ @@
 include $(TOPDIR)/rules.mk
 PKG_NAME:=arm-trusted-firmware-microchipsw
 -PKG_RELEASE:=4
 +PKG_RELEASE:=5
 PKG_SOURCE_PROTO:=git
 PKG_SOURCE_URL=https://github.com/microchip-ung/arm-trusted-firmware.git

Comments

(0)