[Bug 2078395] [NEW] [SRU] Add RSA3072 support to jammy

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Ubuntu Foundations Team Bug Bot (crichton):

[Impact]

The mkimage command is used to create images for use with the U-Boot boot loader.
mkimage on jammy doesn't support RSA3072.

The patch for adding RSA3072 support
https://github.com/u-boot/u-boot/commit/2a4b0d5890deb0c973f8db7bb03adad96aff1050

[Test case]

Test Case 1:
1. Install packages required for the sandbox test
$ sudo apt install efitools libguestfs-tools libsdl2-dev python3-pycryptodome
2. Run sandbox test to check if two new test cases for sha384 pass.
$ ./test/py/test.py --bd sandbox --build
test/py/tests/test_vboot.py
@@ -45,6 +45,8 @@ TESTDATA = [
     ['sha256-pss-pad', 'sha256', '-pss', '-E -p 0x10000', False, False],
     ['sha256-pss-required', 'sha256', '-pss', None, True, False],
     ['sha256-pss-pad-required', 'sha256', '-pss', '-E -p 0x10000', True, True],
+    ['sha384-basic', 'sha384', '', None, False, False],
+    ['sha384-pad', 'sha384', '', '-E -p 0x10000', False, False],
 ]

https://u-boot.readthedocs.io/en/latest/develop/testing.html#pytest-
suite

Test Case 2:
Create a test fitimage and sign with rsa3072 algorithm.
$ sudo mkimage -F -k keydir -f fdt.its test.dtb

[Where problems could occur]

The regression risk should be low because this patch just adds RSA3072
support.

[Other Info]

The patch is already in Noble, so we only need to backport to Jammy

** Affects: u-boot (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: oem-priority originate-from-2076399 patch
-- 
[SRU] Add RSA3072 support to jammy
https://bugs.launchpad.net/bugs/2078395
You received this bug notification because you are a member of Ubuntu Sponsors, which is subscribed to the bug report.