7.2.1 at91bootstrap .yaml File Format

The cust_RSA.yaml file must contain a customer key in hexadecimal format as follows:

chip_type: sam9x70
image_type: secure
security:
  signature: 
    type: RSA
    key_data: file:signing-ca.key
    password: pass
    certificates: [ file:root-ca.der, file:signing-ca.der ]
  cipher: 
    type: AES
    key_data: data:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef
    iv_data: data:0123456789abcdef0123456789abcdef
  tag: 
    type: CMAC_AES
    key_data: data:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef

In the above .yaml file, the password: pass field is optional. If the private key (signing-ca.key) is protected with a passphrase, specify the corresponding password in this field. If the private key is not passphrase-protected, this field is not used and may be omitted. This allows the user to choose whether to protect the private key with a passphrase.