From 7ca1fa11e078d3fd308f11f219b3d918869981da Mon Sep 17 00:00:00 2001 From: Dominik Ermel Date: Fri, 2 Aug 2024 14:48:15 +0000 Subject: [PATCH] bootutil: Add TLV for correct ED25519 usage The pure ED25519 TLV has stores ED25519 signature over SHA512 of image, rather than signature over SHA512 of SHA256 of image. Signed-off-by: Dominik Ermel --- boot/bootutil/include/bootutil/image.h | 1 + 1 file changed, 1 insertion(+) diff --git a/boot/bootutil/include/bootutil/image.h b/boot/bootutil/include/bootutil/image.h index 1f12d9512..cec4b4f4b 100644 --- a/boot/bootutil/include/bootutil/image.h +++ b/boot/bootutil/include/bootutil/image.h @@ -94,6 +94,7 @@ struct flash_area; #define IMAGE_TLV_ECDSA_SIG 0x22 /* ECDSA of hash output */ #define IMAGE_TLV_RSA3072_PSS 0x23 /* RSA3072 of hash output */ #define IMAGE_TLV_ED25519 0x24 /* ed25519 of hash output */ +#define IMAGE_TLV_ED25519_PURE 0x25 /* ed25519 over SHA512 of the image */ #define IMAGE_TLV_ENC_RSA2048 0x30 /* Key encrypted with RSA-OAEP-2048 */ #define IMAGE_TLV_ENC_KW 0x31 /* Key encrypted with AES-KW 128 or 256*/ #define IMAGE_TLV_ENC_EC256 0x32 /* Key encrypted with ECIES-EC256 */