]> git.baikalelectronics.ru Git - uboot.git/commit
rsa: Return immediately if required-key verification fails
authorDaniele Alessandrelli <daniele.alessandrelli@gmail.com>
Wed, 18 Sep 2019 14:04:54 +0000 (16:04 +0200)
committerSimon Glass <sjg@chromium.org>
Tue, 15 Oct 2019 14:40:03 +0000 (08:40 -0600)
commit78297a37f88bf2a0cdf570e48af520c1ea4c4a05
tree46f866b6906b8778833551fadae7a177a1b6bc9e
parent2057d22b2e146724cdb63ff12d94199ee2935a24
rsa: Return immediately if required-key verification fails

Currently, if image verification with a required key fails, rsa_verify()
code tries to find another key to verify the FIT image. This however, is
not the intended behavior as the documentation says that required keys
"must be verified for the image / configuration to be considered valid".

This patch fixes the issue by making rsa_verify() return immediately if
the verification of a required key fails.

Signed-off-by: Daniele Alessandrelli <daniele.alessandrelli@gmail.com>
lib/rsa/rsa-verify.c