151 	sec_options *sec_opts;  member
217 	.sec_opts = 0,
443 	k = strlen(opts.sec_opts->aes_key_file);  in image_encrypt()
446 	memcpy(IV, opts.sec_opts->aes_key_file, k);  in image_encrypt()
458 	mbedtls_aes_setkey_enc(&aes_ctx, opts.sec_opts->aes_key,  in image_encrypt()
466 	opts.sec_opts->enc_image_sz = (blen + 2 * AES_BLOCK_SZ - 1) &  in image_encrypt()
468 	opts.sec_opts->encrypted_image = calloc(opts.sec_opts->enc_image_sz, 1);  in image_encrypt()
469 	if (opts.sec_opts->encrypted_image == 0) {  in image_encrypt()
478 	memcpy(opts.sec_opts->encrypted_image +  in image_encrypt()
479 		   opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
482 			     opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
483 			     IV, buf, opts.sec_opts->encrypted_image);  in image_encrypt()
494 	mbedtls_aes_setkey_dec(&aes_ctx, opts.sec_opts->aes_key,  in image_encrypt()
497 	test_img = calloc(opts.sec_opts->enc_image_sz - AES_BLOCK_SZ, 1);  in image_encrypt()
504 	memcpy(IV, opts.sec_opts->encrypted_image +  in image_encrypt()
505 		   opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
508 			     opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
509 			     IV, opts.sec_opts->encrypted_image, test_img);  in image_encrypt()
792 	opts.sec_opts = sec_opt;  in parse_sec_config_file()
828 					&opts.sec_opts->kak_pk :  in format_sec_ext()
829 					&opts.sec_opts->csk_pk[index];  in format_sec_ext()
831 					opts.sec_opts->kak_key_file :  in format_sec_ext()
832 					opts.sec_opts->csk_key_file[index];  in format_sec_ext()
843 			if (opts.sec_opts->csk_index == index) {  in format_sec_ext()
891 	if (create_rsa_signature(&opts.sec_opts->kak_pk,  in format_sec_ext()
894 				 opts.sec_opts->csk_key_file[  in format_sec_ext()
895 					 opts.sec_opts->csk_index],  in format_sec_ext()
906 				 opts.sec_opts->kak_key_file,  in format_sec_ext()
913 	if (strlen(opts.sec_opts->aes_key_file) != 0) {  in format_sec_ext()
916 		in_fd = fopen(opts.sec_opts->aes_key_file, "rb");  in format_sec_ext()
919 				opts.sec_opts->aes_key_file);  in format_sec_ext()
926 			    opts.sec_opts->aes_key + index) != 1) {  in format_sec_ext()
932 					opts.sec_opts->aes_key_file);  in format_sec_ext()
944 	sec_ext.box_id		= opts.sec_opts->box_id;  in format_sec_ext()
945 	sec_ext.flash_id	= opts.sec_opts->flash_id;  in format_sec_ext()
946 	sec_ext.efuse_dis	= opts.sec_opts->efuse_disable;  in format_sec_ext()
947 	sec_ext.jtag_delay	= opts.sec_opts->jtag_delay;  in format_sec_ext()
948 	sec_ext.jtag_en		= opts.sec_opts->jtag_enable;  in format_sec_ext()
951 	       opts.sec_opts->cp_ctrl_arr,  in format_sec_ext()
954 	       opts.sec_opts->cp_efuse_arr,  in format_sec_ext()
1040 		final_image = opts.sec_opts->encrypted_image;  in finalize_secure_ext()
1041 		final_image_sz = opts.sec_opts->enc_image_sz;  in finalize_secure_ext()
1051 	if (create_rsa_signature(&opts.sec_opts->csk_pk[  in finalize_secure_ext()
1052 					opts.sec_opts->csk_index],  in finalize_secure_ext()
1054 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1055 					opts.sec_opts->csk_index],  in finalize_secure_ext()
1061 	if (verify_rsa_signature(sec_ext->csk_keys[opts.sec_opts->csk_index],  in finalize_secure_ext()
1064 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1065 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1074 	if (create_rsa_signature(&opts.sec_opts->csk_pk[  in finalize_secure_ext()
1075 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1077 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1078 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1084 	if (verify_rsa_signature(sec_ext->csk_keys[opts.sec_opts->csk_index],  in finalize_secure_ext()
1087 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1088 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1529 		if (opts.sec_opts != 0) {  in write_prolog()
1730 	if (opts.sec_opts && (opts.sec_opts->encrypted_image != 0) &&  in main()
1731 	    (opts.sec_opts->enc_image_sz != 0)) {  in main()
1732 		ret = write_boot_image(opts.sec_opts->encrypted_image,  in main()
1733 				       opts.sec_opts->enc_image_sz, out_fd);  in main()
1753 	if (opts.sec_opts) {  in main()
1754 		if (opts.sec_opts->encrypted_image)  in main()
1755 			free(opts.sec_opts->encrypted_image);  in main()
1756 		free(opts.sec_opts);  in main()