Donald Chan e639ad23c8 fix(cert-create): use a salt length equal to digest length for RSA-PSS ... Currently when RSA-PSS signing is invoked, a salt length of 32 bytes is assumed. This works well when SHA-256 is the digest algorithm, but the standard industry practice is that the salt length should follow the digest length (e.g. 48/64 bytes for SHA-384/SHA-512). Various cloud services' key management services (KMS) offering have such restrictions in place, so if someone wants to integrate cert_create against these services for signing key/content certs, they will have problem with integration. Furthermore, JWS (RFC7518) defined these specific combinations as valid specs and other combinations are not supported: - PS256: RSASSA-PSS using SHA-256 and MGF1 with SHA-256 - PS384: RSASSA-PSS using SHA-384 and MGF1 with SHA-384 - PS512: RSASSA-PSS using SHA-512 and MGF1 with SHA-512 Change-Id: Iafc7c60ccb36f4681053dbeb4147bac01b9d724d Signed-off-by: Donald Chan <donachan@tesla.com>		2024-04-12 18:18:04 +02:00
..
amlogic	build: use new toolchain variables for tools	2024-02-06 11:14:52 +00:00
cert_create	fix(cert-create): use a salt length equal to digest length for RSA-PSS	2024-04-12 18:18:04 +02:00
conventional-changelog-tf-a	docs(changelog): changelog for v2.10 release	2023-11-22 11:52:02 +00:00
encrypt_fw	build: use new toolchain variables for tools	2024-02-06 11:14:52 +00:00
fiptool	build: use new toolchain variables for tools	2024-02-06 11:14:52 +00:00
marvell/doimage	build: use new toolchain variables for tools	2024-02-06 11:14:52 +00:00
memory	feat(memmap): add RELA section display	2024-01-18 14:02:18 +01:00
nxp	build: use new toolchain variables for tools	2024-02-06 11:14:52 +00:00
renesas	build: use GCC to link by default	2024-04-02 09:52:17 +00:00
sptool	build: use new toolchain variables for tools	2024-02-06 11:14:52 +00:00
stm32image	build: use new toolchain variables for tools	2024-02-06 11:14:52 +00:00