Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ECDSA signature support to PSA Crypto backend #1734

Merged
merged 5 commits into from
Sep 12, 2023

Commits on Jul 28, 2023

  1. bootutil: PSA Crypto ECDSA enablement

    This commit enables ECDSA signature verification using
    PSA Crypto API.
    
    Signed-off-by: Roland Mikhel <[email protected]>
    Change-Id: I51c7aadba03348f335e89d9252e70c09f8787f30
    Roland Mikhel committed Jul 28, 2023
    Configuration menu
    Copy the full SHA
    6dd067c View commit details
    Browse the repository at this point in the history

Commits on Aug 22, 2023

  1. sim: PSA Crypto ECDSA enablement

    This commit enables ECDSA signature verification using
    PSA Crypto API.
    
    Signed-off-by: Roland Mikhel <[email protected]>
    Change-Id: I33f559ecdd59b1ce41c6a2d5f315212300d585e3
    Roland Mikhel committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    9cb0fdd View commit details
    Browse the repository at this point in the history
  2. bootutil: Replace hash with SHA384 when P384 is used

    Currently all the hashing functionality is done with SHA256
    but if we would like to use ECDSA-P384 that requires SHA384
    as the hashing algorithm, but MCUboot is using SHA256
    for image hashing and public key hashing. This commit modifies
    the hashing operations to use SHA384 thus SHA256 can be omitted
    which is beneficial from a code size standpoint.
    
    Signed-off-by: Roland Mikhel <[email protected]>
    Change-Id: I59230f76f88e0b42ad6383b2c9b71b73f33d7dd7
    Roland Mikhel committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    59be10c View commit details
    Browse the repository at this point in the history
  3. sim: Replace hash with SHA384 when P384 is used

    Currently all the hashing functionality is done with SHA256
    but if we would like to use ECDSA-P384 that requires SHA384
    as the hashing algorithm. However, MCUboot is using SHA256
    for image hashing and public key hashing. This commit modifies
    the hashing operations to use SHA384 thus SHA256 can be omitted
    which is beneficial from a code size standpoint.
    
    Signed-off-by: Roland Mikhel <[email protected]>
    Change-Id: I364eefe334e4fe6668b8a3b97991b5dbb0c80104
    Roland Mikhel committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    9cbd7b7 View commit details
    Browse the repository at this point in the history
  4. ci: Add test cases for ECDSA using PSA Crypto

    Add ECDSA verification tests to the CI using the PSA Crypto API
    
    Signed-off-by: Roland Mikhel <[email protected]>
    Change-Id: I904c8929f355ec791ff28ac7c3e0ca3832b2403d
    Roland Mikhel committed Aug 22, 2023
    Configuration menu
    Copy the full SHA
    b885890 View commit details
    Browse the repository at this point in the history