wolfBoot/tools/keytools
David Garske 490286be7d Support for sealing/unseal a secret based on an externally signed PCR policy.
* Added new `WOLFBOOT_TPM_SEAL` and `WOLFBOOT_TPM_SEAL_NV_BASE` config options.
* Added new `tools/tpm/policy_create` tool for assisting with creation of a policy digest. The sign keytool `--policy=file` signs the policy.
* Added new `WOLFBOOT_TPM_VERIFY` option to enable offloading of the asymmetric verification to the TPM. By default wolfCrypt will be used.
* Added example seal/unseal to update_flash for ARCH_SIM.
* Renamed `WOLFBOOT_TPM_KEYSTORE_NV_INDEX` to `WOLFBOOT_TPM_KEYSTORE_NV_BASE` to support multiple public keys.
* Refactored most TPM code into tpm.c.
* Refactored the keystore ROT to use new `wolfBoot_check_rot` API.
* Refactored the sign keytool to have a sign_digest function to allow signing firmware and policy for sealing/unsealing.
* Fix for make distclean && make using the wrong key tools.
2023-09-12 12:26:48 +02:00
..
Makefile Support for sealing/unseal a secret based on an externally signed PCR policy. 2023-09-12 12:26:48 +02:00
README.md Improvements to the key tools documentation. 2020-06-24 09:04:24 -07:00
keygen.c LMS wolfBoot support. 2023-09-06 07:57:10 +02:00
keygen.py Adding GitHub Action for testing TPM features. 2023-08-17 13:43:58 +02:00
sign.c Support for sealing/unseal a secret based on an externally signed PCR policy. 2023-09-12 12:26:48 +02:00
sign.py Deprecate python keytools. 2023-08-03 08:05:18 +02:00
user_settings.h Support for sealing/unseal a secret based on an externally signed PCR policy. 2023-09-12 12:26:48 +02:00
wolfBootKeyTools.sln
wolfBootKeygenTool.vcxproj Fixes for IAR. Switch to new `src/keystore.c` for keys. Fixes for building keytools in Visual Studio. 2022-07-26 09:34:53 +02:00
wolfBootSignTool.vcxproj Fixes for IAR. Switch to new `src/keystore.c` for keys. Fixes for building keytools in Visual Studio. 2022-07-26 09:34:53 +02:00

README.md

Key Tools for signing and key generation

See documentation here.