Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 60074168 authored by Bowgo Tsai's avatar Bowgo Tsai
Browse files

Usee sha256 to build the hashtree in GSI image 

The default algorithm is sha1, which shouldn't be used now.
Becaues sha256 is more robust against malicious attacks.

Bug: 187021780
Test: TreeHugger
Change-Id: Ia325f59d09687d6d501d9710cbdd3339d7566c60
parent 610286a8

target/board/BoardConfigGsiCommon.mk

+4 −0
Original line number Original line Diff line number Diff line
@@ -41,6 +41,10 @@ BOARD_AVB_SYSTEM_KEY_PATH := external/avb/test/data/testkey_rsa2048.pem 
BOARD_AVB_SYSTEM_ALGORITHM := SHA256_RSA2048

BOARD_AVB_SYSTEM_ALGORITHM := SHA256_RSA2048

BOARD_AVB_SYSTEM_ROLLBACK_INDEX := $(PLATFORM_SECURITY_PATCH_TIMESTAMP)

BOARD_AVB_SYSTEM_ROLLBACK_INDEX := $(PLATFORM_SECURITY_PATCH_TIMESTAMP)

BOARD_AVB_SYSTEM_ROLLBACK_INDEX_LOCATION := 1

BOARD_AVB_SYSTEM_ROLLBACK_INDEX_LOCATION := 1



# Using sha256 for dm-verity partitions. b/156162446

BOARD_AVB_SYSTEM_ADD_HASHTREE_FOOTER_ARGS += --hash_algorithm sha256



ifdef BUILDING_GSI

ifdef BUILDING_GSI

# super.img spec for GSI targets

# super.img spec for GSI targets

BOARD_SUPER_PARTITION_SIZE := 3229614080

BOARD_SUPER_PARTITION_SIZE := 3229614080