Re: [U-Boot] [linux-sunxi] Re: [PATCH v3 1/5] sunxi: a64: Enable FIT Signature

On Wed, Dec 13, 2017 at 9:38 PM, Peter Korsgaard peter@korsgaard.com wrote:

...

...

...

...

...

"Maxime" == Maxime Ripard maxime.ripard@free-electrons.com writes:

Hi,

...

...

+++ b/arch/arm/mach-sunxi/Kconfig @@ -179,6 +179,7 @@ config MACH_SUN50I select SUNXI_DRAM_DW_32BIT select FIT select SPL_LOAD_FIT

• imply FIT_SIGNATURE

...

I'm really not sure we should force it by default. How much code size is it adding?

Not only that, enabling FIT_SIGNATURE support disables support for the legacy images (uImage / boot.scr) for security reasons, so it may very well break existing setups.

Sorry, I didn't get why legacy images will disable with fit? It depends how user can go with it, whether he want legacy or fit both will work.

thanks!