libcr51sign: clean up silent const cast

Remove all `(void*)ctx` silent const remove cast

Change-Id: I89bb6d1ece4e47ba9344f58f66a0736416f6c9c1
Signed-off-by: Dan Zhang <zhdaniel@google.com>

libcr51sign: enhance to support key rotation

Support validate cr51 descriptor with trusted hash and key within the
signature structure.

Accept the descriptor if its hash is trusted.
Validate the de

libcr51sign: enhance to support key rotation

Support validate cr51 descriptor with trusted hash and key within the
signature structure.

Accept the descriptor if its hash is trusted.
Validate the descriptor signature with verification key provided along
with the signature if the key is trusted.

To support the above enhancement for key rotation, three new functions
are defined in interface:

* trust_descriptor_hash
* trust_key_in_signature_structure
* verify_rsa_signature_with_modulus_and_exponent

Applications (i.e. flashupdate or bios-validator) will provide these
functions.

And to facilitate verify rsa signature using key in signature structure,
an implementation of verify_rsa_signature_with_modulus_and_exponent
using the openssl has been provided also.

Change-Id: I787f8c661433052f8c8a1d23e9e6140befce2265
Signed-off-by: Dan Zhang <zhdaniel@google.com>

show more ...

meson: reformat with meson formatter

Apply the `meson format` results.

Change-Id: Id3da51b0ab2cd90f7bb79bd7b613b2226672a802
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>

clang-format: re-format for clang-18

clang-format-18 isn't compatible with the clang-format-17 output, so we
need to reformat the code with the latest version. The way clang-18
handles lambda forma

clang-format: re-format for clang-18

clang-format-18 isn't compatible with the clang-format-17 output, so we
need to reformat the code with the latest version. The way clang-18
handles lambda formatting also changed, so we have made changes to the
organization default style format to better handle lambda formatting.

See I5e08687e696dd240402a2780158664b7113def0e for updated style.
See Iea0776aaa7edd483fa395e23de25ebf5a6288f71 for clang-18 enablement.

Change-Id: I362352dcb341658501899267c2ff3ad044ed5912
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>

show more ...

update libcr51sign to support MAUV

Add feature support to manage MAUV with cr51 descriptor.

Change-Id: I3795259f81b1dbd3016d1c41c68895be00455061
Signed-off-by: Willy Tu <wltu@google.com>

clang-format: copy latest and re-format

clang-format-17 has some backwards incompatible changes that require
additional settings for best compatibility and re-running the formatter.
Copy the latest

clang-format: copy latest and re-format

clang-format-17 has some backwards incompatible changes that require
additional settings for best compatibility and re-running the formatter.
Copy the latest .clang-format from the docs repository and reformat the
repository.

Change-Id: I4610d1d37873b2019baa2ae22c036f81f4319214
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>

show more ...

iwyu: Cleanup include headers

Triggered iwyu and add/remove used headers.

Change-Id: Iadbdb459563b3c89baf2d56f90a540342d020cd5
Signed-off-by: Willy Tu <wltu@google.com>

libcr51sign: Sync with latest code

Change-Id: Id3de25f3b112aa84d4b2342f606a60bb049487c8
Signed-off-by: William A. Kennington III <wak@google.com>

libcr51sign: build: Refactor for subproject use

This refactors the build to make it more suitable for use as a
subproject in other OpenBMC codebases.

Change-Id: I546c993d3f53c1cbe2161e5d8959373d5b1

libcr51sign: build: Refactor for subproject use

This refactors the build to make it more suitable for use as a
subproject in other OpenBMC codebases.

Change-Id: I546c993d3f53c1cbe2161e5d8959373d5b12e57f
Signed-off-by: William A. Kennington III <wak@google.com>

show more ...