keygeneration: add ability to generate accessory GSC RW signing key pair

GSC RW signing requires a 3070 bit RSA key. The codesigner tool when
invoked expects the public key in .pem format, the same format is used
by the RO codebase when incorporating the public key in the RO image.

This patch introduces a new accessory key generating script, which
invokes the appropriate opensssl command to generated the required key

TEST=ran scripts/keygeneration/accessory/ and
     observed two gsc keys generated:

   ls -l *gsc*
   -rw------- 1 vbendeb vbendeb 2451 Apr 21 20:42 gsc_3070.pem
   -rw-r--r-- 1 vbendeb vbendeb  625 Apr 21 20:42

    in the FPGA setup confirmed that Ti50 RW can be signed and
    verified using the generated key pair.

Signed-off-by: Vadim Bendebury <>
Change-Id: I429c250f60aa1da28aa99f39dff40c3bcda71df6
Reviewed-by: Andrey Pronin <>
Reviewed-by: Mike Frysinger <>
1 file changed