saymrwulf/xous-core
1
0
Fork 0
mirror of https://github.com/saymrwulf/xous-core.git synced 2026-11-14 08:03:34 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

add ability to generate and install testing keys for third party images

Browse source
This commit is contained in:
bunnie 2026-02-04 02:50:08 +08:00
parent 0e345b8a48
commit f0fb76dca1
2 changed files with 13 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
tools/src/bin/xous-app-uf2.rs
View file

@ -19,6 +19,7 @@ use xous_tools::utils::parse_u32;
use xous_tools::xous_arguments::XousArgumentCode;
use xous_tools::xous_arguments::XousArguments;
// this must match exactly what's in devkey/dev.key
const DEV_KEY_PEM: &'static str = "-----BEGIN PRIVATE KEY-----\nMC4CAQAwBQYDK2VwBCIEIKindlyNoteThisIsADevKeyDontUseForProduction\n-----END PRIVATE KEY-----";
fn main() -> Result<(), Box<dyn std::error::Error>> {

19
tools/src/sign_image.rs
View file

@ -13,6 +13,9 @@ use rand::RngCore;
use ring::signature::{Ed25519KeyPair, KeyPair};
use sha2::{Digest, Sha512};
// this must match exactly what's in devkey/testing.key
const TEST_KEY_PEM: &'static str = "-----BEGIN PRIVATE KEY-----\nMC4CAQAwBQYDK2VwBCIEIKindlyNoteThisIsTestKeyDontUseForProduction\n-----END PRIVATE KEY-----";
#[repr(u32)]
#[derive(PartialEq, Eq, Clone, Copy)]
pub enum Version {
@ -201,13 +204,6 @@ pub fn sign_image(
// Now we can use the private key data.
let signing_key = SigningKey::from_bytes(&secbytes);
// This is handy code to remember - a quick way to get the public key from the private key. Just
// in case I need this in the future to sanity check some values.
/*
let sk = Ed25519KeyPair::from_pkcs8_maybe_unchecked(&private_key.contents)
.map_err(|e| format!("{}", e))?;
let pubkey = sk.public_key();
*/
let anti_rollback = if let Some(code) = anti_rollback_manual {
code as u32
} else {
@ -253,6 +249,15 @@ pub fn sign_image(
rand::rngs::OsRng.fill_bytes(&mut fake_pk.tag);
dst.populate_from(&fake_pk);
}
let testing_key = pem::parse(TEST_KEY_PEM)?;
// derive the public key for use in "fake keys" routines
let sk = Ed25519KeyPair::from_pkcs8_maybe_unchecked(&testing_key.contents)
.map_err(|e| format!("{}", e))?;
let derived_public_key = sk.public_key();
// replace first random data with the derived public key of the fake signer
header.sealed_data.pubkeys[0].pk.copy_from_slice(derived_public_key.as_ref());
}
let mut protected = Vec::new();