<feed xmlns='http://www.w3.org/2005/Atom'>
<title>bcm63xx/atf/tools, branch master</title>
<subtitle>Broadcom-s Trusted Firmware A</subtitle>
<id>https://git.openwrt.org/project/bcm63xx/atf/atom?h=master</id>
<link rel='self' href='https://git.openwrt.org/project/bcm63xx/atf/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/bcm63xx/atf/'/>
<updated>2019-09-12T14:27:41Z</updated>
<entry>
<title>Remove RSA PKCS#1 v1.5 support from cert_tool</title>
<updated>2019-09-12T14:27:41Z</updated>
<author>
<name>Justin Chadwell</name>
</author>
<published>2019-09-09T14:24:31Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/bcm63xx/atf/commit/?id=6a415a508ea6acec321e4609d3f8e5c03ba67664'/>
<id>urn:sha1:6a415a508ea6acec321e4609d3f8e5c03ba67664</id>
<content type='text'>
Support for PKCS#1 v1.5 was deprecated in SHA 1001202 and fully removed
in SHA fe199e3, however, cert_tool is still able to generate
certificates in that form. This patch fully removes the ability for
cert_tool to generate these certificates.

Additionally, this patch also fixes a bug where the issuing certificate
was a RSA and the issued certificate was EcDSA. In this case, the issued
certificate would be signed using PKCS#1 v1.5 instead of RSAPSS per
PKCS#1 v2.1, preventing TF-A from verifying the image signatures. Now
that PKCS#1 v1.5 support is removed, all certificates that are signed
with RSA now use the more modern padding scheme.

Change-Id: Id87d7d915be594a1876a73080528d968e65c4e9a
Signed-off-by: Justin Chadwell &lt;justin.chadwell@arm.com&gt;
</content>
</entry>
<entry>
<title>Add cert_create tool support for RSA key sizes</title>
<updated>2019-09-12T14:27:41Z</updated>
<author>
<name>Justin Chadwell</name>
</author>
<published>2019-07-29T16:13:45Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/bcm63xx/atf/commit/?id=dfe0f4c2999cef10f9c8fb6115e53891f6b2c190'/>
<id>urn:sha1:dfe0f4c2999cef10f9c8fb6115e53891f6b2c190</id>
<content type='text'>
cert_tool is now able to accept a command line option for specifying the
key size. It now supports the following options: 1024, 2048 (default),
3072 and 4096. This is also modifiable by TFA using the build flag
KEY_SIZE.

Change-Id: Ifadecf84ade3763249ee8cc7123a8178f606f0e5
Signed-off-by: Justin Chadwell &lt;justin.chadwell@arm.com&gt;
</content>
</entry>
<entry>
<title>meson: Rename platform directory to amlogic</title>
<updated>2019-09-05T09:39:25Z</updated>
<author>
<name>Carlo Caione</name>
</author>
<published>2019-08-23T17:28:36Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/bcm63xx/atf/commit/?id=4a079c752beef8c2e8072b55a267d4b597b1e05b'/>
<id>urn:sha1:4a079c752beef8c2e8072b55a267d4b597b1e05b</id>
<content type='text'>
Meson is the internal code name for the SoC family. The correct name for
the platform should be Amlogic. Change the name of the platform
directory.

Signed-off-by: Carlo Caione &lt;ccaione@baylibre.com&gt;
Change-Id: Icc140e1ea137f12117acbf64c7dcb1a8b66b345d
</content>
</entry>
<entry>
<title>Reduce the number of memory leaks in cert_create</title>
<updated>2019-08-16T13:11:18Z</updated>
<author>
<name>Justin Chadwell</name>
</author>
<published>2019-08-12T11:19:21Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/bcm63xx/atf/commit/?id=65ec13bce1367795bb0926561caca27de210e534'/>
<id>urn:sha1:65ec13bce1367795bb0926561caca27de210e534</id>
<content type='text'>
The valgrind checks for cert_create have not been run in a long while -
as such there are a few memory leaks present. This patch fixes a few of
the major ones reported by valgrind. However, a few do remain.

Change-Id: Iab002fb2b0090043287d43fb54a4d18928c2ed85
Signed-off-by: Justin Chadwell &lt;justin.chadwell@arm.com&gt;
</content>
</entry>
<entry>
<title>tools/fiptool: Add Makefile.msvc to build on Windows.</title>
<updated>2019-07-02T13:12:01Z</updated>
<author>
<name>Girish Pathak</name>
</author>
<published>2019-03-22T14:30:18Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/bcm63xx/atf/commit/?id=7e771a9bc46ac29c259027c724d0b5d15c716bc3'/>
<id>urn:sha1:7e771a9bc46ac29c259027c724d0b5d15c716bc3</id>
<content type='text'>
This change adds nmake compatible Makefile.msvc file for
building (nmake /FMakefile.msvc) fiptool on the Windows.

Change-Id: Iccd1fe8da072edd09eb04b8622f27b3c4693b281
Signed-off-by: Girish Pathak &lt;girish.pathak@arm.com&gt;
</content>
</entry>
<entry>
<title>meson/gxl: Add tool to create bl31 bootable images</title>
<updated>2019-04-02T14:33:59Z</updated>
<author>
<name>Remi Pommarel</name>
</author>
<published>2019-03-30T14:58:45Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/bcm63xx/atf/commit/?id=9f52e88636fd5b87682e923fb570f7aeaf662bd3'/>
<id>urn:sha1:9f52e88636fd5b87682e923fb570f7aeaf662bd3</id>
<content type='text'>
GXL platforms need to have a specific header at the beginning of bl31
image to be able to boot. This adds a tool to create that and calls it at
build time.

Signed-off-by: Remi Pommarel &lt;repk@triplefau.lt&gt;
</content>
</entry>
<entry>
<title>rcar_gen3: plat: Add initial D3 support</title>
<updated>2019-04-02T01:40:51Z</updated>
<author>
<name>Marek Vasut</name>
</author>
<published>2019-01-05T12:56:03Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/bcm63xx/atf/commit/?id=bfbf5df405d5e99d6df1060ab8da479c8f1524ab'/>
<id>urn:sha1:bfbf5df405d5e99d6df1060ab8da479c8f1524ab</id>
<content type='text'>
Add R-Car D3 SoC platform specifics. Driver, PFC, QoS, DDR init code
will be added separately.

Signed-off-by: Marek Vasut &lt;marek.vasut+renesas@gmail.com&gt;
</content>
</entry>
<entry>
<title>tools: Remove TODO from fiptool</title>
<updated>2019-03-12T13:42:08Z</updated>
<author>
<name>Paul Beesley</name>
</author>
<published>2019-03-06T15:28:11Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/bcm63xx/atf/commit/?id=efb20d8bc316384d1e22ef48edb81482a219ea4e'/>
<id>urn:sha1:efb20d8bc316384d1e22ef48edb81482a219ea4e</id>
<content type='text'>
It is quite unlikely that this number will ever change and, if it
does need to change, we should have a good reason to do so. It
seems that this comment is now redundant.

Change-Id: I409c764080748e338e9bc5606bbdcc475213fb6e
Signed-off-by: Paul Beesley &lt;paul.beesley@arm.com&gt;
</content>
</entry>
<entry>
<title>tools: Remove unused cert_create defines</title>
<updated>2019-03-12T13:42:08Z</updated>
<author>
<name>Paul Beesley</name>
</author>
<published>2019-03-06T15:27:15Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/bcm63xx/atf/commit/?id=d5dc774cf05f16e9cc9a010fe2533f1260c19a36'/>
<id>urn:sha1:d5dc774cf05f16e9cc9a010fe2533f1260c19a36</id>
<content type='text'>
Change-Id: Iea72ef9ba16325cbce07eea1a975d2a96eede274
Signed-off-by: Paul Beesley &lt;paul.beesley@arm.com&gt;
</content>
</entry>
<entry>
<title>tools/fiptool: Fix UUID parsing in blob handling</title>
<updated>2019-01-29T09:25:14Z</updated>
<author>
<name>Andre Przywara</name>
</author>
<published>2019-01-29T09:25:14Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/bcm63xx/atf/commit/?id=e56b8dc82bba526348fc7b1d2f615c8452caf21a'/>
<id>urn:sha1:e56b8dc82bba526348fc7b1d2f615c8452caf21a</id>
<content type='text'>
Commit 033648652f ("Make TF UUID RFC 4122 compliant") changed the scanf
parsing string to handle endianness correctly.
However that changed the number of items sscanf handles, without
adjusting the sanity check just below.

Increase the expected return value from 11 to 16 to let fiptool handle
UUIDs given as blob parameters correctly again.

Signed-off-by: Andre Przywara &lt;andre.przywara@arm.com&gt;
</content>
</entry>
</feed>
