[Add] First commit
This commit is contained in:
224
scripts/imgtool/imgtool.py
Normal file
224
scripts/imgtool/imgtool.py
Normal file
@ -0,0 +1,224 @@
|
||||
#! /usr/bin/env python3
|
||||
#
|
||||
# Copyright 2017 Linaro Limited
|
||||
# Copyright (c) 2018-2019, Arm Limited.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
from __future__ import print_function
|
||||
import os
|
||||
import re
|
||||
import argparse
|
||||
from imglib import keys
|
||||
from imglib import image
|
||||
from imglib import version
|
||||
import sys
|
||||
import macro_parser
|
||||
|
||||
vtor_align_re = re.compile(r"^.*\s*RE_VTOR_ALIGNMENT\s*(.*)")
|
||||
version_re = re.compile(r"^.*\s*RE_([0-9A-Z_]+)_VERSION\s*(.*)")
|
||||
|
||||
# Image Type.
|
||||
IMG_TYPE_VALUES = {
|
||||
'MBL' : 0x1,
|
||||
'PROT': 0x2,
|
||||
'AROT': 0x4,
|
||||
'NSPE': 0x8,}
|
||||
|
||||
# Returns the last version number if present, or None if not
|
||||
def get_last_version(path):
|
||||
if (os.path.isfile(path) == False): # Version file not present
|
||||
return None
|
||||
else: # Version file is present, check it has a valid number inside it
|
||||
with open(path, "r") as oldFile:
|
||||
fileContents = oldFile.read()
|
||||
if version.version_re.match(fileContents): # number is valid
|
||||
return version.decode_version(fileContents)
|
||||
else:
|
||||
return None
|
||||
|
||||
def next_version_number(args, defaultVersion, path):
|
||||
newVersion = None
|
||||
if (version.compare(args.version, defaultVersion) == 0): # Default version
|
||||
lastVersion = get_last_version(path)
|
||||
if (lastVersion is not None):
|
||||
newVersion = version.increment_build_num(lastVersion)
|
||||
else:
|
||||
newVersion = version.increment_build_num(defaultVersion)
|
||||
else: # Version number has been explicitly provided (not using the default)
|
||||
newVersion = args.version
|
||||
versionString = "{a}.{b}.{c}+{d}".format(
|
||||
a=str(newVersion.major),
|
||||
b=str(newVersion.minor),
|
||||
c=str(newVersion.revision),
|
||||
d=str(newVersion.build)
|
||||
)
|
||||
with open(path, "w") as newFile:
|
||||
newFile.write(versionString)
|
||||
print("**[INFO]** Image version number set to " + versionString)
|
||||
return newVersion
|
||||
|
||||
def gen_rsa2048(args):
|
||||
keys.RSAutil.generate().export_private(args.key)
|
||||
|
||||
def gen_rsa3072(args):
|
||||
keys.RSAutil.generate(key_size=3072).export_private(args.key)
|
||||
|
||||
def gen_ecdsa_p256(args):
|
||||
keys.ECDSA256P1.generate().export_private(args.key)
|
||||
|
||||
def gen_ed25519(keyfile, passwd):
|
||||
keys.Ed25519.generate().export_private(path=keyfile, passwd=passwd)
|
||||
|
||||
keygens = {
|
||||
'rsa-2048': gen_rsa2048,
|
||||
'rsa-3072': gen_rsa3072,
|
||||
'ecdsa-p256': gen_ecdsa_p256,
|
||||
'ed25519': gen_ed25519,}
|
||||
|
||||
def do_keygen(args):
|
||||
if args.type not in keygens:
|
||||
msg = "Unexpected key type: {}".format(args.type)
|
||||
raise argparse.ArgumentTypeError(msg)
|
||||
keygens[args.type](args)
|
||||
|
||||
def do_getpub(args):
|
||||
key = keys.load(args.key, args.password.encode('ascii'))
|
||||
print("key", key)
|
||||
if args.lang == 'c':
|
||||
key.emit_c()
|
||||
else:
|
||||
msg = "Unsupported language, valid are: c"
|
||||
raise argparse.ArgumentTypeError(msg)
|
||||
|
||||
def do_sign(args):
|
||||
#version_num = next_version_number(args,
|
||||
# version.decode_version("0"),
|
||||
# "lastVerNum.txt")
|
||||
#version_int = ((version_num.major << 24)
|
||||
# + (version_num.minor << 16)
|
||||
# + version_num.revision)
|
||||
|
||||
vtor_align = macro_parser.evaluate_macro(args.config, vtor_align_re, 0, 1)
|
||||
|
||||
versions = macro_parser.evaluate_macro(args.config, version_re, 1, 2)
|
||||
version_num = versions[args.type]
|
||||
|
||||
img = image.Image.load(args.infile,
|
||||
type=args.type,
|
||||
version=version_num,
|
||||
header_size=vtor_align)
|
||||
# pad=args.padto or 0)
|
||||
if args.password:
|
||||
pwd = args.password.encode('ascii')
|
||||
key = keys.load(args.key, pwd) if args.key else None
|
||||
img.sign(key, args.cert)
|
||||
#if args.pad:
|
||||
# img.pad_to(padto, 1)
|
||||
|
||||
img.save(args.outfile)
|
||||
|
||||
def do_pad(args):
|
||||
with open(args.infile, 'rb') as f:
|
||||
payload = f.read()
|
||||
size = int(args.size, 16)
|
||||
padding = size - len(payload)
|
||||
if padding < 0:
|
||||
msg = "Image size (0x{:x}) exceeds requested size 0x{:x}".format(
|
||||
len(payload), size)
|
||||
raise Exception(msg)
|
||||
pbytes = b'\xff' * padding
|
||||
payload += pbytes
|
||||
|
||||
with open(args.outfile, 'wb') as f:
|
||||
f.write(payload)
|
||||
|
||||
def do_print_version(args):
|
||||
versions = macro_parser.evaluate_macro(args.config, version_re, 1, 2)
|
||||
version_num = versions[args.type]
|
||||
image_version = (str((version_num >> 24) & 0xff) + '.'
|
||||
+ str((version_num >> 16) & 0xff) + '.'
|
||||
+ str(version_num & 0xffff))
|
||||
print(image_version)
|
||||
|
||||
subcmds = {
|
||||
'keygen': do_keygen,
|
||||
'getpub': do_getpub,
|
||||
'sign': do_sign,
|
||||
'pad': do_pad,
|
||||
'printver': do_print_version,
|
||||
}
|
||||
|
||||
def alignment_value(text):
|
||||
value = int(text)
|
||||
if value not in [1, 2, 4, 8]:
|
||||
msg = "{} must be one of 1, 2, 4 or 8".format(value)
|
||||
raise argparse.ArgumentTypeError(msg)
|
||||
return value
|
||||
|
||||
def intparse(text):
|
||||
"""Parse a command line argument as an integer.
|
||||
|
||||
Accepts 0x and other prefixes to allow other bases to be used."""
|
||||
return int(text, 0)
|
||||
|
||||
def args():
|
||||
parser = argparse.ArgumentParser()
|
||||
subs = parser.add_subparsers(help='subcommand help', dest='subcmd')
|
||||
|
||||
keygenp = subs.add_parser('keygen', help='Generate pub/private keypair')
|
||||
keygenp.add_argument('-k', '--key', metavar='filename', required=True)
|
||||
keygenp.add_argument('-t', '--type', metavar='type',
|
||||
choices=keygens.keys(), required=True)
|
||||
|
||||
getpub = subs.add_parser('getpub', help='Get public key from keypair')
|
||||
getpub.add_argument('-k', '--key', metavar='filename', required=True)
|
||||
getpub.add_argument('-l', '--lang', metavar='lang', default='c')
|
||||
getpub.add_argument('-P', '--password', metavar='password')
|
||||
|
||||
sign = subs.add_parser('sign', help='Sign an image with a private key')
|
||||
sign.add_argument("-t", "--type", metavar='type',
|
||||
choices=IMG_TYPE_VALUES.keys(), required=True)
|
||||
sign.add_argument('--config', metavar='filename', required=True,
|
||||
help='Location of the file that contains macros')
|
||||
sign.add_argument('-k', '--key', metavar='filename')
|
||||
sign.add_argument('-P', '--password', metavar='password')
|
||||
#sign.add_argument('--pad', type=int)
|
||||
#sign.add_argument("--align", type=alignment_value, required=True)
|
||||
#sign.add_argument("-v", "--version", type=version.decode_version,
|
||||
# default="0.0.0+0")
|
||||
#sign.add_argument("-H", "--header-size", type=intparse, default=32)
|
||||
sign.add_argument('-c', "--cert", metavar='certfile')
|
||||
sign.add_argument("infile")
|
||||
sign.add_argument("outfile")
|
||||
|
||||
pad = subs.add_parser('pad', help='padding with 0xFF')
|
||||
pad.add_argument('-s', '--size', metavar='pad', required=True)
|
||||
pad.add_argument("infile")
|
||||
pad.add_argument("outfile")
|
||||
|
||||
printver = subs.add_parser('printver', help='print image version')
|
||||
printver.add_argument('--config', metavar='filename', required=True,
|
||||
help='Location of the file that contains macros')
|
||||
printver.add_argument("-t", "--type", metavar='type',
|
||||
choices=IMG_TYPE_VALUES.keys(), required=True)
|
||||
|
||||
args = parser.parse_args()
|
||||
if args.subcmd is None:
|
||||
print('Must specify a subcommand', file=sys.stderr)
|
||||
sys.exit(1)
|
||||
|
||||
subcmds[args.subcmd](args)
|
||||
|
||||
if __name__ == '__main__':
|
||||
args()
|
||||
Reference in New Issue
Block a user