Searched hist:f03a2acaa72afa1b8d32a933f0093390cd1106d8 (Results 1 – 1 of 1) sorted by relevance
| /optee_os/ta/ |
| H A D | link.mk | f03a2acaa72afa1b8d32a933f0093390cd1106d8 Wed Jul 09 09:47:20 UTC 2025 Jerome Forissier <jerome.forissier@linaro.org> ta/link.mk: update the default TA encryption key
When the TA signing key for OP-TEE was changed [1], the TA encryption
key (which is a derived key) was not updated. As a result,
CFG_ENCRYPT_TA=y is broken. Fix that by updating TA_ENC_KEY to reflect
the output of tee_otp_get_ta_enc_key().
The key value is obtained by adding 'DHEXDUMP(buffer, len);' to
tee_otp_get_ta_enc_key() then running any test involving loading an
encrypted TA. For example:
build$ make check CFG_ENCRYPT_TA=y CHECK_TESTS=xtest XTEST_ARGS=4002
build$ vi ../out/bin/serial0.log
Fixes: 5d5d7d0b1c03 ("keys: increase default RSA key size to 4096 bits") [1]
Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
|