| OLD | NEW |
|---|
| 1 #!/bin/bash | 1 #!/bin/bash |
| 2 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved. | 2 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved. |
| 3 # Use of this source code is governed by a BSD-style license that can be | 3 # Use of this source code is governed by a BSD-style license that can be |
| 4 # found in the LICENSE file. | 4 # found in the LICENSE file. |
| 5 # | 5 # |
| 6 # Generate .vbpubk and .vbprivk pairs for use by developer builds. These should | 6 # Generate .vbpubk and .vbprivk pairs for use by developer builds. These should |
| 7 # be exactly like the real keys except that the private keys aren't secret. | 7 # be exactly like the real keys except that the private keys aren't secret. |
| 8 | 8 |
| 9 | 9 |
| 10 # 0 = (RSA1024 SHA1) | 10 # 0 = (RSA1024 SHA1) |
| (...skipping 89 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 100 # Create the firmware keyblock for use only in Normal mode. This is redundant, | 100 # Create the firmware keyblock for use only in Normal mode. This is redundant, |
| 101 # since it's never even checked during Recovery mode. | 101 # since it's never even checked during Recovery mode. |
| 102 make_keyblock firmware 7 firmware_data_key root_key | 102 make_keyblock firmware 7 firmware_data_key root_key |
| 103 | 103 |
| 104 # Create the recovery kernel keyblock for use only in Recovery mode. | 104 # Create the recovery kernel keyblock for use only in Recovery mode. |
| 105 make_keyblock recovery_kernel 11 recovery_kernel_data_key recovery_key | 105 make_keyblock recovery_kernel 11 recovery_kernel_data_key recovery_key |
| 106 | 106 |
| 107 # Create the normal kernel keyblock for use only in Normal mode. | 107 # Create the normal kernel keyblock for use only in Normal mode. |
| 108 make_keyblock kernel 7 kernel_data_key kernel_subkey | 108 make_keyblock kernel 7 kernel_data_key kernel_subkey |
| 109 | 109 |
| 110 # Create the installer keyblock for use in Developer + Recovery mode |
| 111 # For use in Factory Install and Developer Mode install shims. |
| 112 make_keyblock installer_kernel 10 recovery_kernel_data_key recovery_key |
| 110 | 113 |
| 111 # CAUTION: The public parts of most of these blobs must be compiled into the | 114 # CAUTION: The public parts of most of these blobs must be compiled into the |
| 112 # firmware, which is built separately (and some of which can't be changed after | 115 # firmware, which is built separately (and some of which can't be changed after |
| 113 # manufacturing). If you update these keys, you must coordinate the changes | 116 # manufacturing). If you update these keys, you must coordinate the changes |
| 114 # with the BIOS people or you'll be unable to boot the resulting images. | 117 # with the BIOS people or you'll be unable to boot the resulting images. |
| 115 | 118 |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 3018024:
Modify the key generation script and add an installer keyblock to the dev keys. (Closed)
Base URL: ssh://git@gitrw.chromium.org:9222/vboot_reference.git