546 int verify_secure_header_signatures(header_t *main_hdr, sec_entry_t *sec_ext)  in verify_secure_header_signatures()  argument
553 	memcpy(signature, sec_ext->header_sign, RSA_SIGN_BYTE_LEN);  in verify_secure_header_signatures()
554 	memset(sec_ext->header_sign, 0, RSA_SIGN_BYTE_LEN);  in verify_secure_header_signatures()
559 	if (verify_rsa_signature(sec_ext->kak_key,  in verify_secure_header_signatures()
561 				 &sec_ext->csk_keys[0][0],  in verify_secure_header_signatures()
562 				 sizeof(sec_ext->csk_keys),  in verify_secure_header_signatures()
564 				 sec_ext->csk_sign) != 0) {  in verify_secure_header_signatures()
572 		if (verify_rsa_signature(sec_ext->csk_keys[opts.key_index],  in verify_secure_header_signatures()
576 					 sec_ext->image_sign) != 0) {  in verify_secure_header_signatures()
583 		if (verify_rsa_signature(sec_ext->csk_keys[opts.key_index],  in verify_secure_header_signatures()
601 	memcpy(sec_ext->header_sign, signature, RSA_SIGN_BYTE_LEN);  in verify_secure_header_signatures()
805 	sec_entry_t	sec_ext;  in format_sec_ext()  local
834 					sec_ext.kak_key :  in format_sec_ext()
835 					sec_ext.csk_keys[index];  in format_sec_ext()
892 				 &sec_ext.csk_keys[0][0],  in format_sec_ext()
893 				 sizeof(sec_ext.csk_keys),  in format_sec_ext()
896 				 sec_ext.csk_sign) != 0) {  in format_sec_ext()
902 	if (verify_rsa_signature(sec_ext.kak_key,  in format_sec_ext()
904 				 &sec_ext.csk_keys[0][0],  in format_sec_ext()
905 				 sizeof(sec_ext.csk_keys),  in format_sec_ext()
907 				 sec_ext.csk_sign) != 0) {  in format_sec_ext()
938 		sec_ext.encrypt_en = 1;  in format_sec_ext()
940 		sec_ext.encrypt_en = 0;  in format_sec_ext()
944 	sec_ext.box_id		= opts.sec_opts->box_id;  in format_sec_ext()
945 	sec_ext.flash_id	= opts.sec_opts->flash_id;  in format_sec_ext()
946 	sec_ext.efuse_dis	= opts.sec_opts->efuse_disable;  in format_sec_ext()
947 	sec_ext.jtag_delay	= opts.sec_opts->jtag_delay;  in format_sec_ext()
948 	sec_ext.jtag_en		= opts.sec_opts->jtag_enable;  in format_sec_ext()
950 	memcpy(sec_ext.cp_ctrl_arr,  in format_sec_ext()
953 	memcpy(sec_ext.cp_efuse_arr,  in format_sec_ext()
969 	written = fwrite(&sec_ext, sizeof(sec_entry_t), 1, out_fd);  in format_sec_ext()
1003 	sec_entry_t	*sec_ext = 0;  in finalize_secure_ext()  local
1011 			sec_ext = (sec_entry_t *)(prolog_buf + offset +  in finalize_secure_ext()
1022 	if (sec_ext == 0) {  in finalize_secure_ext()
1027 	if (sec_ext->encrypt_en) {  in finalize_secure_ext()
1056 				 sec_ext->image_sign) != 0) {  in finalize_secure_ext()
1061 	if (verify_rsa_signature(sec_ext->csk_keys[opts.sec_opts->csk_index],  in finalize_secure_ext()
1066 				 sec_ext->image_sign) != 0) {  in finalize_secure_ext()
1084 	if (verify_rsa_signature(sec_ext->csk_keys[opts.sec_opts->csk_index],  in finalize_secure_ext()
1095 	memcpy(sec_ext->header_sign, hdr_sign, RSA_SIGN_BYTE_LEN);  in finalize_secure_ext()