tree 7f4c6058345ba5db15a7958c6fbb52ca4dd33a3c
parent 5c19df0e6ea9ba079280ff06e9d4016b14c081ee
author Vadim Bendebury <vbendeb@chromium.org> 1650598727 -0700
committer Chromeos LUCI <chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com> 1651361877 +0000

keygeneration: add ability to generate accessory GSC RW signing key pair

GSC RW signing requires a 3070 bit RSA key. The codesigner tool when
invoked expects the public key in .pem format, the same format is used
by the RO codebase when incorporating the public key in the RO image.

This patch introduces a new accessory key generating script, which
invokes the appropriate opensssl command to generated the required key
pair.

BUG=b:221423468
BRANCH=none
TEST=ran scripts/keygeneration/accessory/create_new_gsc_key.sh and
     observed two gsc keys generated:

   ls -l *gsc*
   -rw------- 1 vbendeb vbendeb 2451 Apr 21 20:42 gsc_3070.pem
   -rw-r--r-- 1 vbendeb vbendeb  625 Apr 21 20:42 gsc_3070.pem.pub

    in the FPGA setup confirmed that Ti50 RW can be signed and
    verified using the generated key pair.

Signed-off-by: Vadim Bendebury <vbendeb@chromium.org>
Change-Id: I429c250f60aa1da28aa99f39dff40c3bcda71df6
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/3600151
Reviewed-by: Andrey Pronin <apronin@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>