#######
LINKS
#######
http://linux-sunxi.org/SID_Register_Guide#ROTPK_HASH
http://linux-sunxi.org/TOC0

toc0 generator
https://gist.github.com/jemk/2abcab1359c4bce793679c5854062331



################
Generating keys
#################

openssl genrsa -out rotprivk_rsa.pem 2048
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Generating RSA private key, 2048 bit long modulus
........................................................................................+++
.........................+++
e is 65537 (0x010001)


cat rotprivk_rsa.pem
~~~~~~~~~~~~~~~~~~~~
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----


openssl rsa -in rotprivk_rsa.pem -inform PEM -pubout -outform DER -out rotpk_rsa.der
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


xxd rotpk_rsa.der
~~~~~~~~~~~~~~~~~
00000000: 3082 0122 300d 0609 2a86 4886 f70d 0101  0.."0...*.H.....
00000010: 0105 0003 8201 0f00 3082 010a 0282 0101  ........0.......
00000020: 00bd 3a40 52d8 dc00 0065 757a 97c8 afb7  ..:@R....euz....
00000030: 6769 53c7 a581 a847 a260 6964 b3c5 416d  giS....G.`id..Am
00000040: d8ab 2ef3 2f49 12e9 c356 d0ac 3934 d057  ..../I...V..94.W
00000050: 302f f822 a8d3 5282 5ad6 2d4b 9c45 8dba  0/."..R.Z.-K.E..
00000060: 68a3 70cd 0130 490d 5cc6 bcdd 6d64 1cdf  h.p..0I.\...md..
00000070: cb46 699f 1b7d 50f9 78ac 70bf c616 bbca  .Fi..}P.x.p.....
00000080: 9876 b452 b75e fc7e 4099 a786 67f1 6dd4  .v.R.^.~@...g.m.
00000090: e15b 54a0 0543 93e5 9eb9 aeb2 aa6f 30a1  .[T..C.......o0.
000000a0: d518 3fb2 084e c542 5665 69af 6b5a ca0e  ..?..N.BVei.kZ..
000000b0: 937d f382 cf3c fc3c e2d3 b30f 1b12 f37f  .}...<.<........
000000c0: 4444 1776 173b fcca 318b afc2 bcbe 0cf8  DD.v.;..1.......
000000d0: 1a71 403e 234c 28e4 b94d dccb e95c 0548  .q@>#L(..M...\.H
000000e0: c4fc 8467 45d3 7798 68b2 1d54 4f64 2eb3  ...gE.w.h..TOd..
000000f0: 11fc 749d 0a23 e364 f83f 237d 0617 28e3  ..t..#.d.?#}..(.
00000100: f4db 500f 6294 efe2 8b25 1475 6858 4f11  ..P.b....%.uhXO.
00000110: c5c7 bdba c521 f6b0 f2ba 824c 3a1a a3f2  .....!.....L:...
00000120: 7b02 0301 0001                           {.....


openssl rsa -pubin -inform DER -in rotpk_rsa.der -outform der | openssl dgst -sha256 -binary > rotpk_rsa_sha256.bin
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

xxd rotpk_rsa_sha256.bin
~~~~~~~~~~~~~~~~~~~~~~~~
00000000: d734 6799 4477 6be2 2dfb 675b 8d9a fff5  .4g.Dwk.-.g[....
00000010: 3180 905a 9c34 c3d8 d4ef 47fb c0a7 c684  1..Z.4....G.....

xxd -i rotpk_rsa_sha256.bin
~~~~~~~~~~~~~~~~~~~~~~~~~~~
unsigned char rotpk_rsa_sha256_bin[] = {
  0xd7, 0x34, 0x67, 0x99, 0x44, 0x77, 0x6b, 0xe2, 0x2d, 0xfb, 0x67, 0x5b,
  0x8d, 0x9a, 0xff, 0xf5, 0x31, 0x80, 0x90, 0x5a, 0x9c, 0x34, 0xc3, 0xd8,
  0xd4, 0xef, 0x47, 0xfb, 0xc0, 0xa7, 0xc6, 0x84
};
unsigned int rotpk_rsa_sha256_bin_len = 32;



ruby mktoc0.rb ./sunxi-tools/rotprivk_rsa.pem ./sunxi-tools/uart0-helloworld-sdboot.sunxi_neu sunxi-tools/uart0-helloworld-sdboot.toc0_neu
96272  sudo dd if=./sunxi-tools/uart0-helloworld-sdboot.toc0_neu of=/dev/sdb bs=1024 seek=8

./sunxi-tools/uart0-helloworld-sdboot.sunxi_neu

work when i execute via fel
./sunxi_fel spl ./sunxi-tools/uart0-helloworld-sdboot.sunxi_neu


[19:37:16:874] testing...␍␊
[19:37:16:874] d7:34:67:99:44:77:6b:e2:2d:fb:67:5b:8d:9a:ff:f5:31:80:90:5a:9c:34:c3:d8:d4:ef:47:fb:c0:a7:c6:84:␍␊
[19:37:16:883] ␍␊
[19:37:16:883] rotpk␍␊
[19:37:16:883] d7346799:44776be2:2dfb675b:8d9afff5:3180905a:9c34c3d8:d4ef47fb:c0a7c684:␍␊
[19:37:16:892] ␍␊
[19:37:16:892] d7346799:44776be2:2dfb675b:8d9afff5:3180905a:9c34c3d8:d4ef47fb:c0a7c684:␍␊
[19:37:16:898] ␍␊
[19:37:16:898] chip_id: 02c00081:64004620:78768304:5c3409d0:␍␊
[19:37:16:901] ␍␊
[19:37:16:906] rotpk_hash: d7346799:44776be2:2dfb675b:8d9afff5:3180905a:9c34c3d8:d4ef47fb:c0a7c684:␍␊
[19:37:16:911] ␍␊


it prints also the rotpk key looks like its burned into efuse

source:
https://pastebin.com/Pt0v8DaR