Version 0.14.0

This version reworks the signing mechanism for Rockchip FIT images (kernel and U-Boot) to use the U-Boot mkimage tool for the re-signing process, since it produces more reliable results compared with the older method.

Full Changelog: v0.13.1...v0.14.0

Version 0.13.1

Fixes an issue with signing tegra194 binaries with for R32.7.4-based builds, due to an additional script that needs to be symlinked into the workspace to support the tegra194-flash-helper script during signing.

Version 0.13.0

• Adds support for OP-TEE TEE and TA re-signing for Rockchip platforms, for use with the downstream BSP that provides OP-TEE in prebuilt form only.
• Updated the documentation for Rockchip bootloader signing to include client example calls.
• IMX signing updated to support use of the YubiHSM 2 hardware token for holding signing keys (with thanks to the folks at thegoodpenguin.co.uk)
• Docker support updated (with thanks to Chad McQuillen and Phil Boucherat)

Version 0.12.0

Adds support for L4T R35.4.1 signing for Jetson Xavier and Orin platforms, with thanks to @Lexmark-chad:

• tegrasign updated for R35.4.1 and Orin support
• UEFI signing for kernel/DTB/etc.
• UEFI capsule signing

sha256 checksum for whl file: e795cd6d903a552917080d7ef289c5fd4d2351f88d5ae015073fcefcb276259c

Version 0.11.0

This version adds support for signing boot firmware and kernel FIT images for Rockchip RK3566/68/88 SoCs.

Version 0.10.1

Corrects a typo in the tegrasign tools path selection code.

Version 0.10.0

• Update Sanic to 2022.9.0 or later (with thanks to Chad McQuillen)
• Refactored README with per-signer documentation files (plus revisions)
• Minor cleanup of cryptography package use in OPTEE signer, with minimum version set to 3.1

Version 0.9.2

• Fixes a problem where a missing user_key.txt when fetching keys from S3 would cause a signing failure.

Version 0.9.1

• tegrasign: add support for the --user_key option in kernel/DTB/firmware signing, which was missing (with thanks to Linh Nguyen)
• Fix the name of the OP-TEE TA signer function
• Set the Sanic requirement to the current Sanic LTS release (21.12.x), due to some major changes introduced in their latest release.

Version 0.9.0

Adds limited support for signing OP-TEE trusted applications.