| .. | .. |
|---|
| 203 | 203 | SHA256 variant is supported: SHA512 and others are not currently |
|---|
| 204 | 204 | supported in U-Boot. |
|---|
| 205 | 205 | |
|---|
| 206 | +config FIT_ENABLE_RSA4096_SUPPORT |
|---|
| 207 | + bool "Support RSA4096 verification of FIT image contents" |
|---|
| 208 | + select RSA_SOFTWARE_EXP if !DM_CRYPTO |
|---|
| 209 | + default n |
|---|
| 210 | + help |
|---|
| 211 | + Enable this to support RSA4096 checksum of FIT image contents. A |
|---|
| 212 | + RSA4096 is a 4096-bit (512-byte) key used to check that |
|---|
| 213 | + check if the content comes from an encryption party. RSA4096 is one |
|---|
| 214 | + of algorithms recommended for use in secure applications since (as at 2016) |
|---|
| 215 | + there is no known feasible attack that could produce a 'collision' with differing |
|---|
| 216 | + input data. Use this for the higher security than RSA2048 in default. |
|---|
| 217 | + |
|---|
| 206 | 218 | config FIT_SIGNATURE |
|---|
| 207 | 219 | bool "Enable signature verification of FIT uImages" |
|---|
| 208 | 220 | depends on DM |
|---|
| .. | .. |
|---|
| 278 | 290 | Say y here if you want to enable fit image structure and data |
|---|
| 279 | 291 | print. |
|---|
| 280 | 292 | |
|---|
| 293 | +config FIT_OMIT_UBOOT |
|---|
| 294 | + bool "Omit u-boot-nodtb.bin and u-boot.dtb when output uboot.itb" |
|---|
| 295 | + |
|---|
| 281 | 296 | if SPL |
|---|
| 282 | 297 | |
|---|
| 283 | 298 | config SPL_FIT |
|---|