Re: [RFC v1.1 3/5] evm: digital signature support

On Thu, 11 Aug 2011, Dmitry Kasatkin wrote:

From: Dmitry Kasatkin <redacted>

When building an image, which has to be flashed to different devices,
an HMAC cannot be used to sign file metadata, as the HMAC key is different
on every device. File metadata can be protected using digital signature.
This patch enables RSA signature based integrity verification.

This description (also the kconfig text) is not very clear.  Perhaps start 
with what the feature does rather than what the lack of it doesn't.



-- 
James Morris
[off-list ref]