tree 0d6a633ea8e1748bfaa9ebdda5fefc04f59069b6
parent ba829049eac9fd3be72b526d96c4bf4d75bb691d
author Fabio Utzig <utzig@apache.org> 1535050876 -0300
committer Fabio Utzig <utzig@utzig.org> 1539362173 -0300

Add imgtool support for encrypted image creation

Adds a new flag to imgtool, -E/--encrypt which accepts a public rsa-2048
key file that will be used to encrypt the image.

The encryption method uses AES-128-CTR to encrypt the image data (ignores
the header and TLVs), using a random key that is itself encrypted using
RSA-2048-OAEP and added to the generated image as a new TLV.

Signed-off-by: Fabio Utzig <utzig@apache.org>