The goal of this patch series is to fix accumulative hashing support in the
Aspeed HACE module. The issue that stemmed this patch was a failure to boot an
OpenBMC image using the "ast2600-evb" machine. The U-boot
2019.04 loader failed to verify image hashes.
These incorrect image hashes given by the HACE to the U-boot guest are due to
an oversight in the HACE module. Previously when operating in
scatter-gather accumulative mode, the HACE would cache the address provided by
the guest which contained the source data. However, there was no deep copy,
so when HACE generated the digest upon the reception of the final accumulative chunk
the digest was incorrect, as the addresses provided had their regions overwritten
by that time.
This fix consists of two main steps:
* Add an accumulative hashing function to the qcrypto library
* Modify the HACE module to use the accumulative hashing functions
All the crypto library backends (nettle, gnutls, etc.) support accumulative hashing,
so it was trivial to create wrappers for those functions.
Changes in V2:
* Fixed error checking bug in libgcrypt crypto backend of
accumulate_bytesv
Alejandro Zeise (2):
crypto: add support for accumulative hashing
hw/misc/aspeed_hace: Fix SG Accumulative hashing
crypto/hash-gcrypt.c | 105 ++++++++++++++++++++++++++++++++++
crypto/hash-glib.c | 89 ++++++++++++++++++++++++++++
crypto/hash-gnutls.c | 82 ++++++++++++++++++++++++++
crypto/hash-nettle.c | 93 ++++++++++++++++++++++++++++++
crypto/hash.c | 42 ++++++++++++++
crypto/hashpriv.h | 11 ++++
hw/misc/aspeed_hace.c | 91 +++++++++++++++--------------
include/crypto/hash.h | 65 +++++++++++++++++++++
include/hw/misc/aspeed_hace.h | 4 ++
9 files changed, 538 insertions(+), 44 deletions(-)
--
2.34.1