214 static options_t opts = {  variable
443 	k = strlen(opts.sec_opts->aes_key_file);  in image_encrypt()
446 	memcpy(IV, opts.sec_opts->aes_key_file, k);  in image_encrypt()
458 	mbedtls_aes_setkey_enc(&aes_ctx, opts.sec_opts->aes_key,  in image_encrypt()
466 	opts.sec_opts->enc_image_sz = (blen + 2 * AES_BLOCK_SZ - 1) &  in image_encrypt()
468 	opts.sec_opts->encrypted_image = calloc(opts.sec_opts->enc_image_sz, 1);  in image_encrypt()
469 	if (opts.sec_opts->encrypted_image == 0) {  in image_encrypt()
478 	memcpy(opts.sec_opts->encrypted_image +  in image_encrypt()
479 		   opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
482 			     opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
483 			     IV, buf, opts.sec_opts->encrypted_image);  in image_encrypt()
494 	mbedtls_aes_setkey_dec(&aes_ctx, opts.sec_opts->aes_key,  in image_encrypt()
497 	test_img = calloc(opts.sec_opts->enc_image_sz - AES_BLOCK_SZ, 1);  in image_encrypt()
504 	memcpy(IV, opts.sec_opts->encrypted_image +  in image_encrypt()
505 		   opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
508 			     opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
509 			     IV, opts.sec_opts->encrypted_image, test_img);  in image_encrypt()
569 	if (opts.key_index != -1) {  in verify_secure_header_signatures()
571 		if (verify_rsa_signature(sec_ext->csk_keys[opts.key_index],  in verify_secure_header_signatures()
582 		if (verify_rsa_signature(sec_ext->csk_keys[opts.key_index],  in verify_secure_header_signatures()
791 	opts.sec_opts = sec_opt;  in parse_sec_config_file()
827 					&opts.sec_opts->kak_pk :  in format_sec_ext()
828 					&opts.sec_opts->csk_pk[index];  in format_sec_ext()
830 					opts.sec_opts->kak_key_file :  in format_sec_ext()
831 					opts.sec_opts->csk_key_file[index];  in format_sec_ext()
842 			if (opts.sec_opts->csk_index == index) {  in format_sec_ext()
890 	if (create_rsa_signature(&opts.sec_opts->kak_pk,  in format_sec_ext()
893 				 opts.sec_opts->csk_key_file[  in format_sec_ext()
894 					 opts.sec_opts->csk_index],  in format_sec_ext()
905 				 opts.sec_opts->kak_key_file,  in format_sec_ext()
912 	if (strlen(opts.sec_opts->aes_key_file) != 0) {  in format_sec_ext()
915 		in_fd = fopen(opts.sec_opts->aes_key_file, "rb");  in format_sec_ext()
918 				opts.sec_opts->aes_key_file);  in format_sec_ext()
925 			    opts.sec_opts->aes_key + index) != 1) {  in format_sec_ext()
931 					opts.sec_opts->aes_key_file);  in format_sec_ext()
943 	sec_ext.box_id		= opts.sec_opts->box_id;  in format_sec_ext()
944 	sec_ext.flash_id	= opts.sec_opts->flash_id;  in format_sec_ext()
945 	sec_ext.efuse_dis	= opts.sec_opts->efuse_disable;  in format_sec_ext()
946 	sec_ext.jtag_delay	= opts.sec_opts->jtag_delay;  in format_sec_ext()
947 	sec_ext.jtag_en		= opts.sec_opts->jtag_enable;  in format_sec_ext()
950 	       opts.sec_opts->cp_ctrl_arr,  in format_sec_ext()
953 	       opts.sec_opts->cp_efuse_arr,  in format_sec_ext()
1039 		final_image = opts.sec_opts->encrypted_image;  in finalize_secure_ext()
1040 		final_image_sz = opts.sec_opts->enc_image_sz;  in finalize_secure_ext()
1050 	if (create_rsa_signature(&opts.sec_opts->csk_pk[  in finalize_secure_ext()
1051 					opts.sec_opts->csk_index],  in finalize_secure_ext()
1053 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1054 					opts.sec_opts->csk_index],  in finalize_secure_ext()
1060 	if (verify_rsa_signature(sec_ext->csk_keys[opts.sec_opts->csk_index],  in finalize_secure_ext()
1063 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1064 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1073 	if (create_rsa_signature(&opts.sec_opts->csk_pk[  in finalize_secure_ext()
1074 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1076 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1077 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1083 	if (verify_rsa_signature(sec_ext->csk_keys[opts.sec_opts->csk_index],  in finalize_secure_ext()
1086 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1087 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1430 	if (strncmp(opts.bin_ext_file, "NA", MAX_FILENAME)) {  in format_extensions()
1431 		if (format_bin_ext(opts.bin_ext_file, out_fd)) {  in format_extensions()
1437 	if (strncmp(opts.sec_cfg_file, "NA", MAX_FILENAME)) {  in format_extensions()
1438 		if (format_sec_ext(opts.sec_cfg_file, out_fd)) {  in format_extensions()
1456 	if (opts.disable_print)  in update_uart()
1459 	if (opts.baudrate)  in update_uart()
1460 		header->baudrate = (opts.baudrate / 1200);  in update_uart()
1498 	header->load_addr   = opts.load_addr;  in write_prolog()
1499 	header->exec_addr   = opts.exec_addr;  in write_prolog()
1500 	header->io_arg_0    = opts.nfc_io_args;  in write_prolog()
1528 		if (opts.sec_opts != 0) {  in write_prolog()
1602 			opts.load_addr = strtoul(optarg, NULL, 0);  in main()
1605 			opts.exec_addr = strtoul(optarg, NULL, 0);  in main()
1608 			opts.disable_print = 1;  in main()
1611 			opts.baudrate = strtoul(optarg, NULL, 0);  in main()
1614 			strncpy(opts.bin_ext_file, optarg, MAX_FILENAME);  in main()
1622 			opts.nfc_io_args |= (nand_block_size_kb / 64);  in main()
1628 			opts.nfc_io_args |= (mlc_nand << 8);  in main()
1632 			strncpy(opts.sec_cfg_file, optarg, MAX_FILENAME);  in main()
1636 			opts.key_index = strtoul(optarg, NULL, 0);  in main()
1646 	if (opts.load_addr % 8)  in main()
1649 	if (opts.baudrate % 1200)  in main()
1700 		if (opts.key_index >= CSK_ARR_SZ) {  in main()
1729 	if (opts.sec_opts && (opts.sec_opts->encrypted_image != 0) &&  in main()
1730 	    (opts.sec_opts->enc_image_sz != 0)) {  in main()
1731 		ret = write_boot_image(opts.sec_opts->encrypted_image,  in main()
1732 				       opts.sec_opts->enc_image_sz, out_fd);  in main()
1752 	if (opts.sec_opts) {  in main()
1753 		if (opts.sec_opts->encrypted_image)  in main()
1754 			free(opts.sec_opts->encrypted_image);  in main()
1755 		free(opts.sec_opts);  in main()