verify_sign.c File Reference

CycloneBOOT Image data signature module. More...

#include "security/verify_sign.h"
#include "security/verify_runtime.h"
#include "core/flash.h"

Macros
#define	TRACE_LEVEL   CBOOT_TRACE_LEVEL
#define	VERIFY_RUNTIME_RSA_MAX_SIGNATURE_SIZE   512
#define	VERIFY_RUNTIME_ECDSA_MAX_SIGNATURE_SIZE   132
#define	VERIFY_RUNTIME_SIG_BUF_SIZE   VERIFY_RUNTIME_RSA_MAX_SIGNATURE_SIZE

Functions
cboot_error_t	signVerifyRsa (VerifyContext *context, uint8_t *verifyData, size_t verifyDataLength)
	Verify RSA signature.
cboot_error_t	signVerifyEcdsa (VerifyContext *context, uint8_t *verifyData, size_t verifyDataLength)
	Verify ECDSA signature.
cboot_error_t	signInit (VerifyContext *context)
	Initialize signature material for further signature hash computation and signature verification.
cboot_error_t	signVerify (VerifyContext *context, uint8_t *verifyData, size_t verifyDataLength)
	Verify received image firmware signature.
cboot_error_t	signVerifyRuntimeImage (const Slot *slot, uint32_t entryOffset, const char_t *signKey, size_t signKeyLen, const HashAlgo *hashAlgo, VerifySignAlgo signAlgo)
	Verify the runtime (verify-before-boot) signature of an image.

Detailed Description

CycloneBOOT Image data signature module.

License

SPDX-License-Identifier: GPL-2.0-or-later

Copyright (C) 2021-2026 Oryx Embedded SARL. All rights reserved.

This file is part of CycloneBOOT Open.

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

Author

Oryx Embedded SARL (www.oryx-embedded.com)

Version

2.6.6

Function Documentation

signInit()

cboot_error_t signInit

(

VerifyContext *

context

)

Initialize signature material for further signature hash computation and signature verification.

Parameters

[in,out]

context

Pointer to the IAP context

Returns

Error code

signVerify()

cboot_error_t signVerify	(	VerifyContext *	context,
		uint8_t *	verifyData,
		size_t	verifyDataLength
	)

Verify received image firmware signature.

Parameters

[in,out]

context

Pointer to the IAP context

Returns

Error code

signVerifyEcdsa()

cboot_error_t signVerifyEcdsa	(	VerifyContext *	context,
		uint8_t *	verifyData,
		size_t	verifyDataLength
	)

Verify ECDSA signature.

Parameters

[in,out]

context

Pointer to the IAP context

Returns

Error code

signVerifyRsa()

cboot_error_t signVerifyRsa	(	VerifyContext *	context,
		uint8_t *	verifyData,
		size_t	verifyDataLength
	)

Verify RSA signature.

Parameters

[in,out]

context

Pointer to the IAP context

Returns

Error code

signVerifyRuntimeImage()

cboot_error_t signVerifyRuntimeImage	(	const Slot *	slot,
		uint32_t	entryOffset,
		const char_t *	signKey,
		size_t	signKeyLen,
		const HashAlgo *	hashAlgo,
		VerifySignAlgo	signAlgo
	)

Verify the runtime (verify-before-boot) signature of an image.

Parameters

[in]	slot	Slot containing the resident image to authenticate
[in]	entryOffset	Offset from the slot start where execution begins
[in]	signKey	PEM-encoded public key used to verify the signature
[in]	signKeyLen	Length of the PEM public key
[in]	hashAlgo	Hash algorithm used over the firmware body
[in]	signAlgo	Signature algorithm (VERIFY_SIGN_RSA or VERIFY_SIGN_ECDSA)

Returns

Error code (CBOOT_NO_ERROR on a valid signature)