src/platform/vboot_reference/README - Issue 1581005: VBoot Reference: Refactoring Part 3

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: src/platform/vboot_reference/README

Issue 1581005: VBoot Reference: Refactoring Part 3 (Closed)

Patch Set: . Created 10 years, 8 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

« no previous file with comments | « src/platform/vboot_reference/Makefile ('k') | src/platform/vboot_reference/common/Makefile » ('j') | no next file with comments »

OLD	NEW
1 This directory contains a reference implementation for Chrome OS	1 This directory contains a reference implementation for Chrome OS

2 verified boot in firmware.	2 verified boot in firmware.

3	3

4 ----------	4 ----------

5 Directory Structure	5 Directory Structure

6 ----------	6 ----------

7	7

8 include/ - Contains all the code headers. firmware_image.h and	8 include/ - Contains all the code headers. firmware_image.h and

9 kernel_image.h contains the structures that represent a verified boot	9 kernel_image.h contains the structures that represent a verified boot

10 firmware and kernel image. Note that the	10 firmware and kernel image. Note that the

11	11

12 crypto/ - Contains the implementation for the crypto library. This	12 cryptolib/ - Contains the implementation for the crypto library. This

13 includes implementations for SHA1, SHA256, SHA512, and RSA signature	13 includes implementations for SHA1, SHA256, SHA512, and RSA signature

14 verification (for PKCS #1 v1.5 signatures).	14 verification (for PKCS #1 v1.5 signatures).

15	15

16 common/ - Contains some utility functions and stub implementations for	16 common/ - Contains some utility functions and stub implementations for

17 certain wrapper functions used in the verification code. Some of these	17 certain wrapper functions used in the verification code. Some of these

18 (for example Free(), Malloc()) will need to be replaced with	18 (for example Free(), Malloc()) will need to be replaced with

19 appropriate firmware-land equivalent.	19 appropriate firmware-land equivalent.

20	20

21 utils/ - This contains the implementation of kernel and firmware image	21 utils/ - This contains the implementation of kernel and firmware image

22 verification (see firmware_image.c and kernel_image.c) and some	22 verification (see firmware_image.c and kernel_image.c) and some

(...skipping 104 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
127	127

128 ----------	128 ----------

129 Generating a signed kernel image:	129 Generating a signed kernel image:

130 ----------	130 ----------

131	131

132 The steps for generating a signed kernel image are similar to that of	132 The steps for generating a signed kernel image are similar to that of

133 a firmware image. Since verification is chained - RO firmware verifies	133 a firmware image. Since verification is chained - RO firmware verifies

134 RW firmware which verifies the kernel, only the keys change. An additional	134 RW firmware which verifies the kernel, only the keys change. An additional

135 kernel signing key must be generated. The firmware signing generated above	135 kernel signing key must be generated. The firmware signing generated above

136 is the root key equivalent for signed kernel images.	136 is the root key equivalent for signed kernel images.

OLD	NEW