[PATCH v2 0/3] PBL: enable hash functions for Vendor Authorized Boot

Michael Tretter m.tretter at pengutronix.de
Wed Sep 30 01:28:54 PDT 2026


Altera's Vendor Authorized Boot (VAB) uses a sha384 hash for verifying
the second stage boot loader.

As preparation for adding VAB, make the sha384 and sha512 hash functions
available in the PBL.

Loading the second stage loader from flash and verifying the signature
will follow as separate patch series.

Signed-off-by: Michael Tretter <m.tretter at pengutronix.de>
---
Changes in v2:
- Rename sha256.c to sha.c
- Move one-shot helper from header to sha.c
- Link to v1: https://patch.msgid.link/20260928-crypto-pbl-sha384-v1-0-bc7095590123@pengutronix.de

---
Michael Tretter (3):
      crypto: make sha384 and sha512 available in PBL
      PBL: rename sha256.c to generic sha.c
      PBL: add oneshot helper for sha384 and sha512

 crypto/Makefile          |  1 +
 crypto/sha4.c            | 11 ++++-----
 include/crypto/pbl-sha.h | 13 +++++++++++
 pbl/Makefile             |  2 +-
 pbl/sha.c                | 58 ++++++++++++++++++++++++++++++++++++++++++++++++
 pbl/sha256.c             | 28 -----------------------
 6 files changed, 79 insertions(+), 34 deletions(-)
---
base-commit: b3ce2a440f44b0166f9b9e9a3a80bbbfa52a0ef3
change-id: 20260928-crypto-pbl-sha384-e59cd7b4cd1d

Best regards,
-- 
Michael Tretter <m.tretter at pengutronix.de>




More information about the barebox mailing list