hc
2023-11-06 9df731a176aab8e03b984b681b1bea01ccff6644
u-boot/Kconfig
....@@ -203,6 +203,18 @@
203203 SHA256 variant is supported: SHA512 and others are not currently
204204 supported in U-Boot.
205205
206
+config FIT_ENABLE_RSA4096_SUPPORT
207
+ bool "Support RSA4096 verification of FIT image contents"
208
+ select RSA_SOFTWARE_EXP if !DM_CRYPTO
209
+ default n
210
+ help
211
+ Enable this to support RSA4096 checksum of FIT image contents. A
212
+ RSA4096 is a 4096-bit (512-byte) key used to check that
213
+ check if the content comes from an encryption party. RSA4096 is one
214
+ of algorithms recommended for use in secure applications since (as at 2016)
215
+ there is no known feasible attack that could produce a 'collision' with differing
216
+ input data. Use this for the higher security than RSA2048 in default.
217
+
206218 config FIT_SIGNATURE
207219 bool "Enable signature verification of FIT uImages"
208220 depends on DM
....@@ -278,6 +290,9 @@
278290 Say y here if you want to enable fit image structure and data
279291 print.
280292
293
+config FIT_OMIT_UBOOT
294
+ bool "Omit u-boot-nodtb.bin and u-boot.dtb when output uboot.itb"
295
+
281296 if SPL
282297
283298 config SPL_FIT