summaryrefslogtreecommitdiff
path: root/tests
diff options
context:
space:
mode:
authorVadim Bendebury <vbendeb@google.com>2021-11-22 21:24:56 -0800
committerCommit Bot <commit-bot@chromium.org>2021-12-03 05:16:14 +0000
commit3efb6a6cd8e8679b6f95c1088fa5c20cbb327478 (patch)
tree905cf1bc56b4da92bc4645752cafcfd73ab91af3 /tests
parentdd180f6d8545eace4ccc4569c32dbf7bff0354f5 (diff)
downloadvboot-3efb6a6cd8e8679b6f95c1088fa5c20cbb327478.tar.gz
gscvd: add dedicated test keys
This patch extends create_new_keys.sh to generate two additional key pairs to use for AP RO verification signing. Both new pairs are RSA4096/SHA256. The script was ran to generate a new set of keys and the produced AP RO verification key pairs were copied into tests/devkeys. BRANCH=none BUG=b:141191727 TEST=re-signed guybrush AP firmware image following the process described in cmd_gscvd.c comments, created a Cr50 image incorporating the new root public key hash, updated the DUT AP and Cr50 firmware and observed successful AP RO validation. Change-Id: I03cba1446fc5ffdfef662c5ce1ea3e61950477d4 Signed-off-by: Vadim Bendebury <vbendeb@google.com> Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/3297447 Tested-by: Vadim Bendebury <vbendeb@chromium.org> Reviewed-by: Mike Frysinger <vapier@chromium.org> Commit-Queue: Vadim Bendebury <vbendeb@chromium.org>
Diffstat (limited to 'tests')
-rw-r--r--tests/devkeys/arv_platform.vbprivkbin0 -> 2356 bytes
-rw-r--r--tests/devkeys/arv_platform.vbpubkbin0 -> 1064 bytes
-rw-r--r--tests/devkeys/arv_root.vbprivkbin0 -> 2358 bytes
-rw-r--r--tests/devkeys/arv_root.vbpubkbin0 -> 1064 bytes
4 files changed, 0 insertions, 0 deletions
diff --git a/tests/devkeys/arv_platform.vbprivk b/tests/devkeys/arv_platform.vbprivk
new file mode 100644
index 00000000..e0bc6700
--- /dev/null
+++ b/tests/devkeys/arv_platform.vbprivk
Binary files differ
diff --git a/tests/devkeys/arv_platform.vbpubk b/tests/devkeys/arv_platform.vbpubk
new file mode 100644
index 00000000..2ac3bdeb
--- /dev/null
+++ b/tests/devkeys/arv_platform.vbpubk
Binary files differ
diff --git a/tests/devkeys/arv_root.vbprivk b/tests/devkeys/arv_root.vbprivk
new file mode 100644
index 00000000..7747717a
--- /dev/null
+++ b/tests/devkeys/arv_root.vbprivk
Binary files differ
diff --git a/tests/devkeys/arv_root.vbpubk b/tests/devkeys/arv_root.vbpubk
new file mode 100644
index 00000000..aebe2a48
--- /dev/null
+++ b/tests/devkeys/arv_root.vbpubk
Binary files differ