Adding new directory with developer signing keys.

Adding new directory with developer signing keys.

The keys in this directory are just like the official release keys, except
that they're not secret.

[Randall Spangler, 2010-07-01 22:38:42]

lgtm

http://codereview.chromium.org/2883018/diff/1/2
File tests/devkeys/create_new_keys.sh (right):

http://codereview.chromium.org/2883018/diff/1/2#newcode99
tests/devkeys/create_new_keys.sh:99: 
Might comment which of these keys need to be stuffed into the firmware, those
being:
* root key (public)
* recovery key (public)
* firmware keyblock
* firmware data key (private)
* kernel key (public)

[gauravsh, 2010-07-01 22:42:08]

http://codereview.chromium.org/2883018/diff/1/2
File tests/devkeys/create_new_keys.sh (right):

http://codereview.chromium.org/2883018/diff/1/2#newcode99
tests/devkeys/create_new_keys.sh:99: 
On 2010/07/01 22:38:43, Randall Spangler wrote:
> Might comment which of these keys need to be stuffed into the firmware, those
> being:
> * root key (public)
> * recovery key (public)
> * firmware keyblock
> * firmware data key (private)

^^^ Do you mean public here?

> * kernel key (public)
>

[Randall Spangler, 2010-07-01 22:47:20]

On Thu, Jul 1, 2010 at 3:42 PM, <gauravsh@chromium.org> wrote:

>
> http://codereview.chromium.org/2883018/diff/1/2
> File tests/devkeys/create_new_keys.sh (right):
>
> http://codereview.chromium.org/2883018/diff/1/2#newcode99
> tests/devkeys/create_new_keys.sh:99:
> On 2010/07/01 22:38:43, Randall Spangler wrote:
>
>> Might comment which of these keys need to be stuffed into the
>>
> firmware, those
>
>> being:
>> * root key (public)
>> * recovery key (public)
>> * firmware keyblock
>> * firmware data key (private)
>>
>
> ^^^ Do you mean public here?


The public key is in the firmware keyblock.

The private key needs to go into the firmware build.  You're correct it
doesn't end up in the resulting firmware binary.


>
>
>  * kernel key (public)
>>
>
>
> http://codereview.chromium.org/2883018/show
>

[gauravsh, 2010-07-01 22:48:34]

On Thu, Jul 1, 2010 at 3:47 PM, Randall Spangler <rspangler@chromium.org> wrote:
> On Thu, Jul 1, 2010 at 3:42 PM, <gauravsh@chromium.org> wrote:
>>
>> http://codereview.chromium.org/2883018/diff/1/2
>> File tests/devkeys/create_new_keys.sh (right):
>>
>> http://codereview.chromium.org/2883018/diff/1/2#newcode99
>> tests/devkeys/create_new_keys.sh:99:
>> On 2010/07/01 22:38:43, Randall Spangler wrote:
>>>
>>> Might comment which of these keys need to be stuffed into the
>>
>> firmware, those
>>>
>>> being:
>>> * root key (public)
>>> * recovery key (public)
>>> * firmware keyblock
>>> * firmware data key (private)
>>
>> ^^^ Do you mean public here?
>
> The public key is in the firmware keyblock.
> The private key needs to go into the firmware build.  You're correct it
> doesn't end up in the resulting firmware binary.

Oh yes, that's what I meant. Thanks!

>
>>
>>> * kernel key (public)
>>
>>
>> http://codereview.chromium.org/2883018/show
>
>



-- 
-g