diff options
Diffstat (limited to 'futility/cmd_sign.c')
| -rw-r--r-- | futility/cmd_sign.c | 13 |
1 files changed, 10 insertions, 3 deletions
diff --git a/futility/cmd_sign.c b/futility/cmd_sign.c index 5b686342..8599c74c 100644 --- a/futility/cmd_sign.c +++ b/futility/cmd_sign.c @@ -479,16 +479,23 @@ static void print_help_rwsig(int argc, char *argv[]) "\n" "This signs a %s.\n" "\n" + "Data only mode\n" + "This mode requires OUTFILE.\n" "The INFILE is a binary blob of arbitrary size. It is signed using the\n" "private key and the vb21_signature blob emitted.\n" "\n" + "Data + Signature mode\n" "If no OUTFILE is specified, the INFILE should contain an existing\n" "vb21_signature blob near its end. The data_size from that signature is\n" "used to re-sign a portion of the INFILE, and the old signature blob is\n" "replaced.\n" - "Alternatively, if INFILE contains an FMAP, RW and signatures offsets\n" - "are read from that table, and, if a public key is provided, the\n" - "public key is replaced in the RO image.\n" + "\n" + "Key + Data + Signature mode\n" + "This mode also takes no output file.\n" + "If INFILE contains an FMAP, RW and signatures offsets are read from\n" + "FMAP. These regions must be named EC_RW and SIG_RW respectively.\n" + "If a public key is found in the region named KEY_RO, it will be replaced\n" + "in the RO image.\n" "\n" "Options:\n" "\n" |