Our keys are not meant to be actually secret since they are only for
demonstrational purposes.

The goal is to show how product teams can use their own keys rathet than
providing any kind of protection for the test devices.

Given that once a HAB key is flashed on the i.MX6 boards it can't be changed,
it is desirable to use a widely available key for testing to avoid bricking
the device.

All the keys come from the Apertis HABv4 keys repository:
https://gitlab.apertis.org/infrastructure/apertis-imx-srk/



Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Denis Pynkin authored 5 years ago and Denis Pynkin committed 5 years ago

Added templates for single FIT image generation and signing.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>

Denis Pynkin authored 5 years ago and Denis Pynkin committed 5 years ago

This directory contain the open part of Apertis super root keys used for
signing U-Boot and FIT kernel image for i.MX-based boards (SabreLite).

The private keys and password are set in CI/CD as a secret, however all bits are available
in [open repository](https://gitlab.apertis.org/infrastructure/apertis-imx-srk

).

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>