Add support for SHA384 and SHA512
authorReuben Dowle <reubendowle0@gmail.com>
Thu, 16 Apr 2020 05:36:52 +0000 (17:36 +1200)
committerTom Rini <trini@konsulko.com>
Fri, 12 Jun 2020 17:14:07 +0000 (13:14 -0400)
commitd16b38f42704fe3cc94fbee1601be96045013151
treeabd95e88387701d92c5319565ed4a6aaf9c02a1b
parentf191f3a1027ede56e2501920e3e8a8acd7033e77
Add support for SHA384 and SHA512

The current recommendation for best security practice from the US government
is to use SHA384 for TOP SECRET [1].

This patch adds support for SHA384 and SHA512 in the hash command, and also
allows FIT images to be hashed with these algorithms, and signed with
sha384,rsaXXXX and sha512,rsaXXXX

The SHA implementation is adapted from the linux kernel implementation.

[1] Commercial National Security Algorithm Suite
http://www.iad.gov/iad/programs/iad-initiatives/cnsa-suite.cfm

Signed-off-by: Reuben Dowle <reuben.dowle@4rf.com>
13 files changed:
Kconfig
common/hash.c
common/image-fit.c
common/image-sig.c
common/spl/Kconfig
include/hash.h
include/image.h
include/u-boot/rsa-checksum.h
include/u-boot/sha512.h [new file with mode: 0644]
lib/Kconfig
lib/Makefile
lib/sha512.c [new file with mode: 0644]
tools/Makefile