diff options
Diffstat (limited to 'Kconfig')
| -rw-r--r-- | Kconfig | 19 |
1 files changed, 19 insertions, 0 deletions
@@ -145,6 +145,7 @@ menu "Boot images" config FIT bool "Support Flattened Image Tree" select MD5 + select SHA1 help This option allows you to boot the new uImage structure, Flattened Image Tree. FIT is formally a FDT, which can include @@ -157,6 +158,20 @@ config FIT if FIT +config FIT_ENABLE_SHA256_SUPPORT + bool "Support SHA256 checksum of FIT image contents" + select SHA256 + default y + help + Enable this to support SHA256 checksum of FIT image contents. A + SHA256 checksum is a 256-bit (32-byte) hash value used to check that + the image contents have not been corrupted. SHA256 is recommended + for use in secure applications since (as at 2016) there is no known + feasible attack that could produce a 'collision' with differing + input data. Use this for the highest security. Note that only the + SHA256 variant is supported: SHA512 and others are not currently + supported in U-Boot. + config FIT_SIGNATURE bool "Enable signature verification of FIT uImages" depends on DM @@ -205,6 +220,8 @@ config FIT_IMAGE_POST_PROCESS injected into the FIT creation (i.e. the blobs would have been pre- processed before being added to the FIT image). +if SPL + config SPL_FIT bool "Support Flattened Image Tree within SPL" depends on SPL @@ -259,6 +276,8 @@ config SPL_FIT_GENERATOR passed a list of supported device tree file stub names to include in the generated image. +endif # SPL + endif # FIT config OF_BOARD_SETUP |