1
0
mirror of https://xff.cz/git/u-boot/ synced 2025-09-01 08:42:12 +02:00
Files
u-boot-megous/include
AKASHI Takahiro 52956e535e efi_loader: signature: correct a behavior against multiple signatures
Under the current implementation, all the signatures, if any, in
a signed image must be verified before loading it.

Meanwhile, UEFI specification v2.8b section 32.5.3.3 says,
    Multiple signatures are allowed to exist in the binary’s certificate
    table (as per PE/COFF Section “Attribute Certificate Table”). Only
    one hash or signature is required to be present in db in order to pass
    validation, so long as neither the SHA-256 hash of the binary nor any
    present signature is reflected in dbx.

This patch makes the semantics of signature verification compliant with
the specification mentioned above.

Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
Reported-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
2020-08-14 12:28:25 +02:00
..
2020-07-17 14:32:24 +08:00
2020-05-11 10:16:49 +05:30
2020-04-17 12:32:36 -04:00
2020-05-18 18:36:55 -04:00
2020-07-09 12:33:24 +08:00
2020-05-18 17:33:33 -04:00
2020-07-28 19:30:39 -06:00
2020-05-25 11:54:53 -04:00
2020-05-07 09:01:42 -04:00
2020-08-03 22:19:54 -04:00
2020-05-18 21:19:23 -04:00
2020-05-18 17:33:33 -04:00
2020-08-07 22:31:32 -04:00
2020-05-18 17:33:33 -04:00
2020-06-12 13:14:07 -04:00
2020-05-18 21:19:18 -04:00
2020-05-18 18:36:55 -04:00
2020-04-17 12:32:36 -04:00
2020-08-04 23:30:02 -04:00
2020-07-09 18:57:22 -06:00
2020-06-12 13:17:23 -04:00
2020-07-17 14:32:24 +08:00
2020-05-18 17:33:33 -04:00
2020-07-17 10:47:19 -04:00
2020-08-03 22:19:54 -04:00
2020-06-14 21:07:20 +02:00
2020-06-14 21:07:20 +02:00
2020-07-09 06:02:44 +02:00
2020-05-18 17:33:31 -04:00
2020-08-03 22:19:54 -04:00
2020-08-03 22:19:54 -04:00
2020-08-11 20:34:46 +05:30
2020-08-07 22:31:32 -04:00
2020-08-03 22:19:54 -04:00
2020-04-24 16:40:09 -04:00
2020-08-03 22:19:54 -04:00
2020-08-03 22:19:54 -04:00