Hi Tom Yes the internal ABI and the whole functionality remains identical. What changes is how the user includes the key in the final binary.
It's a Kconfig with the patch applied, while if we move it to the dtb the user must add it and concat the dtb with uboot. So apart from how we build the final binary nothing changes
Regards Ilias
On Sat, 18 Sep 2021, 15:14 Tom Rini, trini@konsulko.com wrote:
On Sat, Sep 18, 2021 at 02:59:42PM +0300, Ilias Apalodimas wrote:
+cc a few people that had some input on that discussion. Apologies from top posting, but I am sending this from a mobile.
I think I've spent enough time trying to explain why I think we don't
need
to revert this and why moving the signature to the dtb once we fix it has minimal effect on the users.
One thing I think you confirmed to me on IRC, but I don't think was on the mailing list is, if we do not revert this set of changes, we also do not lock ourselves in to some implementation that must be supported for forever, correct? In other words, shipping things as is does not preclude making further changes to this area based on Simon's feedback.
-- Tom