在secureboot功能中,使用./gen_keywr_cert.sh -g命令生成密钥,请问能够修改密钥的长度和算法吗? 在./gen_keywr_cert.sh 工具中生成密钥的代码如下:
-g|--gen)
echo "# Generating random keys in keys/folder"
mkdir -p keys
openssl rand 32 > keys/aes256.key
openssl genrsa -out keys/smpk.pem
openssl genrsa -out keys/bmpk.pem
openssl rand 32 > keys/smek.key
openssl rand 32 > keys/bmek.key
exit
能否修改算法为ecc ,比如改成
openssl rand 32 > keys/aes256.key
openssl ecparam -genkey -name secp256k1 -out ec_smpk.pem
openssl ecparam -genkey -name secp256k1 -out ec_bmpk.pem
openssl rand 32 > keys/smek.key
openssl rand 32 > keys/bmek.key