commit c8751d743ed4da9de933847d0476fabaf9c10d9d
author David Brown <david.brown@linaro.org> Tue Jan 29 11:04:35 2019 -0700
committer David Brown <david.brown@linaro.org> Thu Feb 28 15:11:03 2019 -0700
tree 170b18a0839792098c15a83d537c00ad5b19188a
parent df80bd7b34f0d0a0565b6f6fc5197f7352a0bacd

imgtool: Add support for SUIT signatures

This adds a `--suit` argument to the sign command that will generate a
signed SUIT manifest instead of the TLV style manifest.  Currently, this
only supports RSA-2048+SHA256 (RS256), with an unencrypted image.

Signed-off-by: David Brown <david.brown@linaro.org>

scripts/imgtool/main.py

diff --git a/scripts/imgtool/main.py b/scripts/imgtool/main.py
index a03a164..92eaab6 100755
--- a/scripts/imgtool/main.py
+++ b/scripts/imgtool/main.py
@@ -18,6 +18,7 @@
 import getpass
 import imgtool.keys as keys
 from imgtool import image
+from imgtool import suit as suitpkg
 from imgtool.version import decode_version
 
 
@@ -122,6 +123,8 @@
 
 @click.argument('outfile')
 @click.argument('infile')
+@click.option('--suit', default=False, is_flag=True,
+              help="Use a SUIT signature instead of TLV")
 @click.option('-E', '--encrypt', metavar='filename',
               help='Encrypt image using the provided public key')
 @click.option('-e', '--endian', type=click.Choice(['little', 'big']),
@@ -146,11 +149,15 @@
                INFILE and OUTFILE are parsed as Intel HEX if the params have
                .hex extension, othewise binary format is used''')
 def sign(key, align, version, header_size, pad_header, slot_size, pad,
-         max_sectors, overwrite_only, endian, encrypt, infile, outfile):
-    img = image.Image(version=decode_version(version), header_size=header_size,
-                      pad_header=pad_header, pad=pad, align=int(align),
-                      slot_size=slot_size, max_sectors=max_sectors,
-                      overwrite_only=overwrite_only, endian=endian)
+         max_sectors, overwrite_only, endian, encrypt, suit, infile, outfile):
+    if suit:
+        gen = suitpkg.Image
+    else:
+        gen = image.Image
+    img = gen(version=decode_version(version), header_size=header_size,
+              pad_header=pad_header, pad=pad, align=int(align),
+              slot_size=slot_size, max_sectors=max_sectors,
+              overwrite_only=overwrite_only, endian=endian)
     img.load(infile)
     key = load_key(key) if key else None
     enckey = load_key(encrypt) if encrypt else None