151 	sec_options *sec_opts;  member
217 	.sec_opts = 0,
443 	k = strlen(opts.sec_opts->aes_key_file);  in image_encrypt()
446 	memcpy(IV, opts.sec_opts->aes_key_file, k);  in image_encrypt()
458 	mbedtls_aes_setkey_enc(&aes_ctx, opts.sec_opts->aes_key,  in image_encrypt()
466 	opts.sec_opts->enc_image_sz = (blen + 2 * AES_BLOCK_SZ - 1) &  in image_encrypt()
468 	opts.sec_opts->encrypted_image = calloc(opts.sec_opts->enc_image_sz, 1);  in image_encrypt()
469 	if (opts.sec_opts->encrypted_image == 0) {  in image_encrypt()
478 	memcpy(opts.sec_opts->encrypted_image +  in image_encrypt()
479 		   opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
482 			     opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
483 			     IV, buf, opts.sec_opts->encrypted_image);  in image_encrypt()
494 	mbedtls_aes_setkey_dec(&aes_ctx, opts.sec_opts->aes_key,  in image_encrypt()
497 	test_img = calloc(opts.sec_opts->enc_image_sz - AES_BLOCK_SZ, 1);  in image_encrypt()
504 	memcpy(IV, opts.sec_opts->encrypted_image +  in image_encrypt()
505 		   opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
508 			     opts.sec_opts->enc_image_sz - AES_BLOCK_SZ,  in image_encrypt()
509 			     IV, opts.sec_opts->encrypted_image, test_img);  in image_encrypt()
791 	opts.sec_opts = sec_opt;  in parse_sec_config_file()
827 					&opts.sec_opts->kak_pk :  in format_sec_ext()
828 					&opts.sec_opts->csk_pk[index];  in format_sec_ext()
830 					opts.sec_opts->kak_key_file :  in format_sec_ext()
831 					opts.sec_opts->csk_key_file[index];  in format_sec_ext()
842 			if (opts.sec_opts->csk_index == index) {  in format_sec_ext()
890 	if (create_rsa_signature(&opts.sec_opts->kak_pk,  in format_sec_ext()
893 				 opts.sec_opts->csk_key_file[  in format_sec_ext()
894 					 opts.sec_opts->csk_index],  in format_sec_ext()
905 				 opts.sec_opts->kak_key_file,  in format_sec_ext()
912 	if (strlen(opts.sec_opts->aes_key_file) != 0) {  in format_sec_ext()
915 		in_fd = fopen(opts.sec_opts->aes_key_file, "rb");  in format_sec_ext()
918 				opts.sec_opts->aes_key_file);  in format_sec_ext()
925 			    opts.sec_opts->aes_key + index) != 1) {  in format_sec_ext()
931 					opts.sec_opts->aes_key_file);  in format_sec_ext()
943 	sec_ext.box_id		= opts.sec_opts->box_id;  in format_sec_ext()
944 	sec_ext.flash_id	= opts.sec_opts->flash_id;  in format_sec_ext()
945 	sec_ext.efuse_dis	= opts.sec_opts->efuse_disable;  in format_sec_ext()
946 	sec_ext.jtag_delay	= opts.sec_opts->jtag_delay;  in format_sec_ext()
947 	sec_ext.jtag_en		= opts.sec_opts->jtag_enable;  in format_sec_ext()
950 	       opts.sec_opts->cp_ctrl_arr,  in format_sec_ext()
953 	       opts.sec_opts->cp_efuse_arr,  in format_sec_ext()
1039 		final_image = opts.sec_opts->encrypted_image;  in finalize_secure_ext()
1040 		final_image_sz = opts.sec_opts->enc_image_sz;  in finalize_secure_ext()
1050 	if (create_rsa_signature(&opts.sec_opts->csk_pk[  in finalize_secure_ext()
1051 					opts.sec_opts->csk_index],  in finalize_secure_ext()
1053 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1054 					opts.sec_opts->csk_index],  in finalize_secure_ext()
1060 	if (verify_rsa_signature(sec_ext->csk_keys[opts.sec_opts->csk_index],  in finalize_secure_ext()
1063 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1064 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1073 	if (create_rsa_signature(&opts.sec_opts->csk_pk[  in finalize_secure_ext()
1074 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1076 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1077 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1083 	if (verify_rsa_signature(sec_ext->csk_keys[opts.sec_opts->csk_index],  in finalize_secure_ext()
1086 				 opts.sec_opts->csk_key_file[  in finalize_secure_ext()
1087 					 opts.sec_opts->csk_index],  in finalize_secure_ext()
1528 		if (opts.sec_opts != 0) {  in write_prolog()
1729 	if (opts.sec_opts && (opts.sec_opts->encrypted_image != 0) &&  in main()
1730 	    (opts.sec_opts->enc_image_sz != 0)) {  in main()
1731 		ret = write_boot_image(opts.sec_opts->encrypted_image,  in main()
1732 				       opts.sec_opts->enc_image_sz, out_fd);  in main()
1752 	if (opts.sec_opts) {  in main()
1753 		if (opts.sec_opts->encrypted_image)  in main()
1754 			free(opts.sec_opts->encrypted_image);  in main()
1755 		free(opts.sec_opts);  in main()