libcr51sign: enhance to support key rotation

Support validate cr51 descriptor with trusted hash and key within the
signature structure.

Accept the descriptor if its hash is trusted.
Validate the de

libcr51sign: enhance to support key rotation

Support validate cr51 descriptor with trusted hash and key within the
signature structure.

Accept the descriptor if its hash is trusted.
Validate the descriptor signature with verification key provided along
with the signature if the key is trusted.

To support the above enhancement for key rotation, three new functions
are defined in interface:

* trust_descriptor_hash
* trust_key_in_signature_structure
* verify_rsa_signature_with_modulus_and_exponent

Applications (i.e. flashupdate or bios-validator) will provide these
functions.

And to facilitate verify rsa signature using key in signature structure,
an implementation of verify_rsa_signature_with_modulus_and_exponent
using the openssl has been provided also.

Change-Id: I787f8c661433052f8c8a1d23e9e6140befce2265
Signed-off-by: Dan Zhang <zhdaniel@google.com>

show more ...

update libcr51sign to support MAUV

Add feature support to manage MAUV with cr51 descriptor.

Change-Id: I3795259f81b1dbd3016d1c41c68895be00455061
Signed-off-by: Willy Tu <wltu@google.com>

clang-format: copy latest and re-format

clang-format-17 has some backwards incompatible changes that require
additional settings for best compatibility and re-running the formatter.
Copy the latest

clang-format: copy latest and re-format

clang-format-17 has some backwards incompatible changes that require
additional settings for best compatibility and re-running the formatter.
Copy the latest .clang-format from the docs repository and reformat the
repository.

Change-Id: I4610d1d37873b2019baa2ae22c036f81f4319214
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>

show more ...

iwyu: Cleanup include headers

Triggered iwyu and add/remove used headers.

Change-Id: Iadbdb459563b3c89baf2d56f90a540342d020cd5
Signed-off-by: Willy Tu <wltu@google.com>

libcr51sign: Sync with latest code

Change-Id: Id3de25f3b112aa84d4b2342f606a60bb049487c8
Signed-off-by: William A. Kennington III <wak@google.com>

libcr51sign: Fixes for compiler warnings

Change-Id: I4053720365be81fff02aebbcf8f0e95d34fe87d9
Signed-off-by: William A. Kennington III <wak@google.com>

libcr51sign: build: Refactor for subproject use

This refactors the build to make it more suitable for use as a
subproject in other OpenBMC codebases.

Change-Id: I546c993d3f53c1cbe2161e5d8959373d5b1

libcr51sign: build: Refactor for subproject use

This refactors the build to make it more suitable for use as a
subproject in other OpenBMC codebases.

Change-Id: I546c993d3f53c1cbe2161e5d8959373d5b12e57f
Signed-off-by: William A. Kennington III <wak@google.com>

show more ...