From patchwork Wed Apr 8 07:55:39 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Kate Hsuan X-Patchwork-Id: 26500 Return-Path: X-Original-To: parsemail@patchwork.libcamera.org Delivered-To: parsemail@patchwork.libcamera.org Received: from lancelot.ideasonboard.com (lancelot.ideasonboard.com [92.243.16.209]) by patchwork.libcamera.org (Postfix) with ESMTPS id 84826BDCBD for ; Wed, 8 Apr 2026 07:56:36 +0000 (UTC) Received: from lancelot.ideasonboard.com (localhost [IPv6:::1]) by lancelot.ideasonboard.com (Postfix) with ESMTP id 3F10662DCC; Wed, 8 Apr 2026 09:56:36 +0200 (CEST) Authentication-Results: lancelot.ideasonboard.com; dkim=pass (1024-bit key; unprotected) header.d=redhat.com header.i=@redhat.com header.b="duTjDQIZ"; dkim-atps=neutral Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by lancelot.ideasonboard.com (Postfix) with ESMTPS id E0E7762DB7 for ; Wed, 8 Apr 2026 09:56:34 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1775634993; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=W4Qb6cfo+Co9PLrPFp9D+qadOaXt4IHAel3cbQUxS2E=; b=duTjDQIZth2ylRCA01Q/fGTcwLTz6mSLfS/kRt6p/aQF9ahWCqTYnNvkpyFvv+wTdBjc4J fnmVCR/FPuOjz0yu4wuG7+RRnq93JTEJLVNHKolfDANzQBKzgWgGhlpGXXSZRVNa9GcU9/ cnbWT3PoqgkAdcp9oY+AwXftgkEFlwo= Received: from mx-prod-mc-05.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-164-tPLAu4WqMRCZGx0HpOTrnQ-1; Wed, 08 Apr 2026 03:56:32 -0400 X-MC-Unique: tPLAu4WqMRCZGx0HpOTrnQ-1 X-Mimecast-MFC-AGG-ID: tPLAu4WqMRCZGx0HpOTrnQ_1775634991 Received: from mx-prod-int-01.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-01.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-05.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 9B40F19560A1 for ; Wed, 8 Apr 2026 07:56:31 +0000 (UTC) Received: from fedora.redhat.com (unknown [10.67.32.15]) by mx-prod-int-01.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id F0840300019F; Wed, 8 Apr 2026 07:56:29 +0000 (UTC) From: Kate Hsuan To: libcamera-devel@lists.libcamera.org Cc: Kate Hsuan Subject: [PATCH 3/4] ipa: ipa-sign: Sign IPA according to the signature algorithm of the key Date: Wed, 8 Apr 2026 15:55:39 +0800 Message-ID: <20260408075540.53309-4-hpa@redhat.com> In-Reply-To: <20260408075540.53309-1-hpa@redhat.com> References: <20260408075540.53309-1-hpa@redhat.com> MIME-Version: 1.0 X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.4 X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: _cy679BoVOuqj0lamILdkRTcVhwCrW1JbyPYMn3hSNk_1775634991 X-Mimecast-Originator: redhat.com content-type: text/plain; charset="US-ASCII"; x-default=true X-BeenThere: libcamera-devel@lists.libcamera.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: libcamera-devel-bounces@lists.libcamera.org Sender: "libcamera-devel" Sign IPA according to the signature algorithm of the key. Signed-off-by: Kate Hsuan --- src/ipa/ipa-sign.sh | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/ipa/ipa-sign.sh b/src/ipa/ipa-sign.sh index 69024213..aa9c7d31 100755 --- a/src/ipa/ipa-sign.sh +++ b/src/ipa/ipa-sign.sh @@ -10,4 +10,9 @@ key="$1" input="$2" output="$3" -openssl dgst -sha256 -sign "${key}" -out "${output}" "${input}" +if openssl pkey -text -noout -in "${key}" 2>/dev/null | grep -q "ML-DSA"; then + openssl pkeyutl -sign -inkey "${key}" -rawin \ + -in "${input}" -out "${output}" +else + openssl dgst -sha256 -sign "${key}" -out "${output}" "${input}" +fi