Fix KeyBlockVerify() to take an explicit param for whether to use hash only.

utility/vbutil_kernel.c

 /* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  *
  * Verified boot kernel utility
  */
 
 #include <errno.h>
 #include <getopt.h>
 #include <inttypes.h>  /* For PRIu64 */
@@ skipping 623 matching lines @@
 
   /* Read blob */
   bp = OldBlob(infile);
   if (!bp) {
     error("Error reading input file\n");
     return 1;
   }
 
   /* Verify key block */
   key_block = bp->key_block;
-  if (0 != KeyBlockVerify(key_block, bp->blob_size, sign_key)) {
+  if (0 != KeyBlockVerify(key_block, bp->blob_size, sign_key,
+                          (sign_key ? 0 : 1))) {
     error("Error verifying key block.\n");
     goto verify_exit;
   }
   now = key_block->key_block_size;
 
   printf("Key block:\n");
   data_key = &key_block->data_key;
   if (verbose)
     printf("  Signature:           %s\n", sign_key ? "valid" : "ignored");
   printf("  Size:                0x%" PRIx64 "\n", key_block->key_block_size);
@@ skipping 188 matching lines @@
 
     case OPT_MODE_VERIFY:
       return Verify(filename, signpubkey, verbose);
 
     default:
       fprintf(stderr,
               "You must specify a mode: --pack, --repack or --verify\n");
       return PrintHelp(progname);
   }
 }