This repository was archived by the owner on Aug 26, 2024. It is now read-only.
Intel-BMC/intel-pfr-signing-utility
Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|
Repository files navigation
# DISCONTINUATION OF PROJECT #
This project will no longer be maintained by Intel.
Intel has ceased development and contributions including, but not limited to, maintenance, bug fixes, new releases, or updates, to this project.
Intel no longer accepts patches to this project.
If you have an ongoing need to use this project, are interested in independently developing it, or would like to maintain patches for the open source software community, please create your own fork of this project.
#############################
# ABOUT #
#############################
This is the Intel(R) Platform Firmware Resilience Signing Utility
Version 1.0
#############################
# PREREQUISITES #
#############################
- libxml2-dev
- openssl-dev (built against 1.1.1)
#############################
# INSTALL #
#############################
- make
- make install
#############################
# NOTES #
#############################
External signing
If doing external signing (i.e. <script>),
the tool will generate two files:
data.raw - The raw data
data.hsh - The hash of data
After generating these files, the tool will call
the script, and expect a DER encoded siganture in
the file data.sig.
sig->r and sig->s to be
concatenated into one binary file. Total file length
should be 64 (256 curve) or 96 (384 curve).
#############################
# EXAMPLES #
#############################
To create a Intel(R) PFR signed binary:
intel-pfr-signing-utility -o out.bin -c config.xml in.bin -v
To parse a block signed binary:
intel-pfr-signing-utility -p out.bin -c config.xml