| Index: README
|
| diff --git a/README b/README
|
| index ad88b2256d35addbb4c9445e05c709f83c108ee8..8242fff88d1cef058315191be3dacef5726277a6 100644
|
| --- a/README
|
| +++ b/README
|
| @@ -7,22 +7,19 @@ Directory Structure
|
|
|
| The source is organized into distinct modules -
|
|
|
| -vboot_firmware/ - Contains ONLY the code required by the BIOS to validate
|
| -the secure boot components. There shouldn't be any code in here that signs
|
| -or generates images. BIOS should require ONLY this directory to implement
|
| -secure boot. Refer to vboot_firmware/README for futher details.
|
| +firmware/ - Contains ONLY the code required by the BIOS to validate
|
| +the secure boot components. There shouldn't be any code in here that
|
| +signs or generates images. BIOS should require ONLY this directory to
|
| +implement secure boot. Refer to firmware/README for futher details.
|
|
|
| -cgptlib/ - Work in progress for handling GPT headers. Parts of this will no
|
| -doubt be migrated into vboot_firmware/
|
| +cgpt/ - Utility to read/write/modify GPT partitions. Much like the
|
| +gpt tool, but with support for Chrome OS extensiosn.
|
|
|
| -misclibs/ - Miscellaneous functions used by userland utilities.
|
| +host/ - Miscellaneous functions used by userland utilities.
|
|
|
| utility/ - Utilities for generating and verifying signed
|
| firmware and kernel images, as well as arbitrary blobs.
|
|
|
| -vfirmware/ and vkernel/ - Functions for generating, verifying, and
|
| -manipulating signed firmware and kernel images.
|
| -
|
| tests/ - User-land tests and benchmarks that test the reference
|
| implementation. Please have a look at these if you'd like to
|
| understand how to use the reference implementation.
|
| @@ -61,14 +58,17 @@ BUILD=../build make runtests
|
| Some useful utilities:
|
| ----------
|
|
|
| -firmware_utility.c To generate verified boot firmware images.
|
| -
|
| -kernel_utility.c To generate verified boot kernel images.
|
| +vbutil_key Convert a public key into .vbpubk format
|
| +vbutil_keyblock Wrap a public key inside a signature and checksum
|
| +vbutil_firmware Create a .vblock with signature info for a
|
| + firmware image
|
| +vbutil_kernel Pack a kernel image, bootloader, and config into
|
| + a signed binary
|
|
|
| -dumpRSAPublicKey.c Dump RSA Public key (from a DER-encoded X509
|
| - certificate) in a format suitable for
|
| - use by RSAVerify* functions in
|
| - crypto/.
|
| +dumpRSAPublicKey Dump RSA Public key (from a DER-encoded X509
|
| + certificate) in a format suitable for
|
| + use by RSAVerify* functions in
|
| + crypto/.
|
|
|
| verify_data.c Verify a given signature on a given file.
|
|
|
| @@ -99,6 +99,8 @@ $ openssl req -batch -new -x509 -key signing_key.pem -out signing_key.crt
|
| $ utility/dumpRSAPublicKey root_key.crt > root_key.keyb
|
| $ utility/dumpRSAPublicKey signing_key.crt > signing_key.keyb
|
|
|
| +************** TODO: STUFF PAST HERE IS OUT OF DATE ***************
|
| +
|
| At this point we have all the requisite keys needed to generate a signed
|
| firmware image.
|
|
|
|
|