tree 2df9ae5d35ed20df0879fd4d3492299fb5e1d4f1
parent f8a3eb4364872f28019d0b8d3e66b8240b5e56e7
author Alexander Martinz <amartinz@shiftphones.com> 1653313544 +0200
committer Alexander Martinz <amartinz@shiftphones.com> 1653314532 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEioN3RtFSeUXyJOKbzxW92aMhqbIFAmKLk/gACgkQzxW92aMh
 qbIo+A//fFVDXgxIN1hmC7mW400BvBvucCgHtbmNcMxsoLqNvZ8+en9bMHnXdOlb
 6cJny9eSk2uXhfsUydZ/sT8/DVMiQuvcdMVTjjwkwYRQQTxA+8WOuOKHVt5IUiCh
 O+ALTN3p5KnRb0CFSKf2podBA27ntBc+Qj6PudhvshcsAqlBBcmlM9gQygU/9EKY
 UdREZfhSmk81Xa07YeWkI8OXXUHiqaZRjTp6yDQRQOW1xVADKlcvbae3X6rBoqRc
 nO6qH5jGs0yo7ig7gNzdp3R5mCKKYvG0oqXr8s2Z4/Bn3hYwqFTAv88OPxz3bInG
 XNGwUYoNxkBFn/Uq0giVtFUg7n5u/HJxq7zZpKY8tCpHFHt9lsl1B9BXNqXdYbZB
 9mogxV3mXxoB7D6P14yLBUHDzeRyBtPgfCXnOrSsRX6XLUhcdUDPsCqK0axNgaa+
 gMlIL592EhYIuMmEEj2XPmcE06XCqhM6wrjtiyaHZ8LB2CksxCj7JyPLxE+QzMhJ
 djq6QEYErsf8Sg5aUCb9IUzanwUDL/JngcDsbIqRPN5o1A8w9bSRjMSlGk402Rrb
 U2j40n1dHBFjOfwrnRZ7Ce7hmMGva0O9gzbhPzYpH0UzHKxaV1kdMlqZHzGzrpLh
 eLfBHJym+u7gFUI8bwiS+CbW+Prh1lYMlCKhfwNOcyeOZDGNAo8=
 =KsvN
 -----END PGP SIGNATURE-----

FastbootCmds: oem device-info: check if user public key is set

It is possible to flash to a virtual partition `avb_custom_key` to
set a custom AVB key.

1) generate a custom avb private key

openssl genpkey -algorithm RSA \
  -pkeyopt rsa_keygen_bits:4096 \
  -outform PEM \
  -out key_rsa4096.pem

2) Extract public key usingprivate key
  - avbtool extract_public_key --key key_rsa4096.pem --output key_rsa4096.pub

The resulting `key_rsa4096.pub` can be flashed using fastboot:
  - fastboot flash avb_custom_key key_ras4096.pub

Afterwards verify that the custom AVB key is set using:
  - fastboot oem device-info

You can also use the official AVB repo as reference:
  - https://android.googlesource.com/platform/external/avb/+/master/README.md#pixel-2-and-later

Change-Id: I6f65c58dd7f7cbdacfa02464d94815e5e3e6918f
Signed-off-by: Alexander Martinz <amartinz@shiftphones.com>