commit 72279620dfc39ab4355cde1c1263a2acd098e323
author Stephen McGruer <smcgruer@google.com> Fri Feb 14 12:15:16 2014 -0500
committer Stephen McGruer <smcgruer@google.com> Thu Feb 27 16:25:42 2014 -0500
tree e0340c11d82abc556d1abbd2e938dde8fd4955ac
parent 6345e01ffa26975b4c3c68dc3dd8aada70153419

Enable barebox to authenticate kernel images.

If OTP auth is enabled (or CONFIG_FORCE_KERNEL_AUTH is set),
barebox will attempt to authenticate the kernel image against
the public key stored in include/rsa_public_key.h.

The change is backwards compatible, in that the barebox can
still boot the current kernel image format. Note that it is
not possible to authenticate current kernel images, so if
authentication is expected and the current ('legacy') kernel
format is detected, the boot will fail.

Change-Id: Ica6ece47d0b7bbaf7c047f2fba7bf95da36f0bbe