#UNISOC_Signature and verification of dynamicTA
1.how to sign ta? The TA signature algorithm is rsa2048, and the padding format is pkcs1_PSS. Using prebuilts/scripts/packimage_scripts/dynamicTA/signta.py to sign the TA.
Please reference the command format as below: python signta.py --uuid {UUID} --version --key --in --out
note: a.Take “tademo” for example, the signature command would be: python signta.py --uuid 4304bef636e54d9094b01ea4cd51d40b --version 0 --key .prebuilts/scripts/packimage_scripts/config/dynamic_ta_privatekey.pem --in tademo.elf.org --out tademo.elf b.Version defaults to 0
2.how to verify ta? Using prebuilts/scripts/packimage_scripts/dynamicTA/verifyta.py to verify the TA. Please reference the command format as below: python verifyta.py --key --in
note: Take “tademo” for example, the verification command would be: python verifyta.py --key prebuilts/scripts/packimage_scripts/config/dynamic_ta_privatekey.pem --in tademo.elf
3.how to encrypt ta? Signta.py support ta encryption scheme. encryption algorithm is aes256-cbc. Please reference the command format as below: python signta.py --uuid {UUID} --key --in --aeskey --xml --out
note: i.Take “tademo” for example, the signature command would be: python signta.py --uuid 4304bef636e54d9094b01ea4cd51d40b --key prebuilts/scripts/packimage_scripts/config/dynamic_ta_privatekey.pem --in tademo.elf --aeskey bsp/tools/secureboot_key/config/TA_aeskey.bin --xml bsp/device/sharkl5Pro/androidt/common/teecfg/ta_cipher.xml --out tademo.elf ii.Encryption should be after signature.