TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mcuboot / 3cabd927a7a708d376db59c4889d945f7d6593bb
commit3cabd927a7a708d376db59c4889d945f7d6593bb[log] [tgz]
authorDavid Brown <david.brown@linaro.org>Mon Dec 09 14:44:03 2019 -0700
committerDavid Brown <davidb@davidb.org>Tue Dec 10 07:40:47 2019 -0700
treea8f1e462daae14880cd90f9d6ce0e918d26994ff
parentc58842e8becb22dc38fd743b35a2d9d2537ae8a5 [diff]
sim: Fix ecdsa padding

For some reason, the ECDSA signature generation code attempted to adjust
the length of the ASN.1 of the actual signature.  It wasn't doing this
right, and was creating ASN.1 expecting many more entries than were
present.  The half-run parser in the tinycrypt ECDSA signature check
didn't care about this, but mbed TLS's signature check does care.

The intent of the padding was to be able to predict the size of the TLV
before writing it out.  Keep the padding for now, even though there is
no simple way of knowing how many pad bytes to remove (just removing
them will remove extra if there is a zero in the last byte of the
signature.

A future change will eliminate the padding, as it should no longer be
needed.

Signed-off-by: David Brown <david.brown@linaro.org>
1 file changed
tree: a8f1e462daae14880cd90f9d6ce0e918d26994ff
  1. boot/
  2. ci/
  3. docs/
  4. ext/
  5. ptest/
  6. samples/
  7. scripts/
  8. sim/
  9. testplan/
  10. .gitignore
  11. .gitmodules
  12. .travis.yml
  13. enc-aes128kw.b64
  14. enc-ec256-priv.pem
  15. enc-ec256-pub.pem
  16. enc-rsa2048-priv.pem
  17. enc-rsa2048-pub.pem
  18. LICENSE
  19. NOTICE
  20. project.yml
  21. README.md
  22. repository.yml
  23. root-ec-p256-pkcs8.pem
  24. root-ec-p256.pem
  25. root-ed25519.pem
  26. root-rsa-2048.pem
  27. root-rsa-3072.pem
  28. version.yml
README.md

mcuboot

Coverity Scan Build Status Build/Test

This is mcuboot version 1.4.0

MCUboot is a secure bootloader for 32-bit MCUs. The goal of MCUboot is to define a common infrastructure for the bootloader, system flash layout on microcontroller systems, and to provide a secure bootloader that enables simple software upgrades.

MCUboot is operating system and hardware independent and relies on hardware porting layers from the operating. Currently, mcuboot works with both the Apache Mynewt and Zephyr operating systems, but more ports are planned in the future. RIOT is currently supported as a boot target with a complete port planned.

Using MCUboot

Instructions for different operating systems can be found here:

Roadmap

The issues being planned and worked on are tracked using GitHub issues. To participate please visit:

MCUBoot GitHub Issues

Issues were previously tracked on MCUboot JIRA , but it is now deprecated.

Browsing

Information and documentation on the bootloader are stored within the source.

It was previously also documented on confluence: MCUBoot Confluence however, it is now deprecated and not currently maintained

For more information in the source, here are some pointers:

  • boot/bootutil: The core of the bootloader itself.
  • boot/boot_serial: Support for serial upgrade within the bootloader itself.
  • boot/zephyr: Port of the bootloader to Zephyr
  • boot/mynewt: Mynewt bootloader app
  • imgtool: A tool to securely sign firmware images for booting by mcuboot.
  • sim: A bootloader simulator for testing and regression

Joining

Developers welcome!