You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@mynewt.apache.org by GitBox <gi...@apache.org> on 2021/10/27 13:00:46 UTC
[GitHub] [mynewt-newt] kasjer opened a new issue #450: Elliptic curves signed images can't be verified by mbedtls library
kasjer opened a new issue #450:
URL: https://github.com/apache/mynewt-newt/issues/450
EC Signature when stored in TLV at the end of image can be padded with zeros.
I believe that it's done in create.go/GenerateSigEc().
mcuboot takes what is stored in TLV and passes it to mbedtls verification function that fails because it sees some extra bytes that do not belong to signature. (TinyCrypt version does not check this).
It seems that when TLV is created true signature size is lost.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@mynewt.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [mynewt-newt] utzig closed issue #450: Elliptic curves signed images can't be verified by mbedtls library
Posted by GitBox <gi...@apache.org>.
utzig closed issue #450:
URL: https://github.com/apache/mynewt-newt/issues/450
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@mynewt.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [mynewt-newt] utzig closed issue #450: Elliptic curves signed images can't be verified by mbedtls library
Posted by GitBox <gi...@apache.org>.
utzig closed issue #450:
URL: https://github.com/apache/mynewt-newt/issues/450
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@mynewt.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [mynewt-newt] utzig commented on issue #450: Elliptic curves signed images can't be verified by mbedtls library
Posted by GitBox <gi...@apache.org>.
utzig commented on issue #450:
URL: https://github.com/apache/mynewt-newt/issues/450#issuecomment-955707232
Should be fixed by apache/mynewt-artifact#33 (after module dependency update here) and https://github.com/mcu-tools/mcuboot/pull/1188
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@mynewt.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [mynewt-newt] utzig closed issue #450: Elliptic curves signed images can't be verified by mbedtls library
Posted by GitBox <gi...@apache.org>.
utzig closed issue #450:
URL: https://github.com/apache/mynewt-newt/issues/450
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@mynewt.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org