arm-trusted-firmware/docs/design
Robin van der Gracht 616b3ce27d feat(cert-create): add pkcs11 engine support
Add pkcs11 engine support which allows using keys that are securely
stored on a HSM or TPM. To use this feature the user has to supply
an RFC 7512 compliant PKCS11 URI to a key instead of a file as an
argument to one of the key options. This change is fully backwards
compatible.

This change makes use of the openssl engine API which is deprecated
since openssl 3.0 and will most likely be removed in version 4. So
pkcs11 support will have to be updated to the openssl provider API
in the near future.

Signed-off-by: Robin van der Gracht <robin@protonic.nl>
Change-Id: If96725988ca62c5613ec59123943bf15922f5d1f
2023-09-21 13:27:25 +02:00
..
alt-boot-flows.rst doc: Split the User Guide into multiple files 2019-11-27 10:45:54 +00:00
auth-framework.rst refactor(auth): replace plat_convert_pk 2023-04-21 09:46:01 +01:00
cpu-specific-build-macros.rst Merge changes from topic "sm/errata_X3" into integration 2023-09-08 22:18:32 +02:00
firmware-design.rst chore(docs): update march utility details 2023-07-19 09:43:06 -05:00
index.rst docs: add top level section numbering 2022-11-16 14:06:48 +00:00
interrupt-framework-design.rst Fix broken links to various sections across docs 2020-08-03 09:55:04 -05:00
psci-pd-tree.rst doc: Set correct syntax highlighting style 2019-05-22 11:28:17 +01:00
reset-design.rst docs: update RESET_TO_BL31 documentation 2023-03-09 14:42:49 +00:00
trusted-board-boot-build.rst docs(arm): add ARM_ROTPK_LOCATION variant full key 2022-12-09 14:55:39 -06:00
trusted-board-boot.rst feat(cert-create): add pkcs11 engine support 2023-09-21 13:27:25 +02:00