Public Key

[Aleks Ozolins]

Hi there!

Downloading a tarball off website and trying to verify 
signature. Can you point me towards the public key or fingerprint?

Thank you!

[Alexander 'lynxis' Couzens]

Hi Aleks,

common problems with flashing SPI chips in-system (in-system = without
desoldering the chip) are power supply and signal integrity.

power supply => either your power supply at all isn't sufficient or the
spi chip draws too quick power that an additional capacitor (of
the correct size) closer to the chip is required.

signal integrity => improve your cables, shielding, reduce EMI or
desolder the chip and put it on a seperate board, etc.. Or reduce the
spi speed, what you already did. Maybe use a different spi clip or
solder cables on top of your spi chip if you want to stay in-system.

in-system flashs are always special and depend on the PCB of your
target board. some boards aren't possible to flash at all. But I think
thinkpads are possible to flash in-system, but it has a low possibility
of bricking it.

For sure we have bugs in flashrom. But usually it's power of signal
integrity ;).
If it's an bug within flashrom, I would also desolder the
chip and solder it to a small debug board. So you could reduce other
failures soures and to test flashrom in a "known" environment.

Best,
lynxis

[Aleks Ozolins]

To whom it may concern,

I do not have any idea what the response below is in reference to. I asked about where to obtain the public key or fingerprint for the download so I can compare hash.

[Alexander 'lynxis' Couzens]

Hi Aleks,

I'm sorry for the noice. I've accidently answered the wrong mail. I'll
fix the subject + receiver and resent it.

Btw. the flashrom release is signed by David Hendricks
58A4 868B 25C7 CFD6 62FB  0132 A3EB 95B8 D978 0F68

you can retrieve the key from the ubuntu keyservers.

Best,
lynxis

`gpg --keyserver hkps://keyserver.ubuntu.com --recv 58A4868B25C7CFD662FB0132A3EB95B8D9780F68`
> To whom it may concern,
>
> I do not have any idea what the response below is in reference to. I
> asked about where to obtain the public key or fingerprint for the
> download so I can compare hash.

[Aleks Ozolins]

Alexander 'lynxis' Couzens  writes:
> I'm sorry for the noice. I've accidently answered the wrong mail. I'll
> fix the subject + receiver and resent it.

Not a problem!
> Btw. the flashrom release is signed by David Hendricks
> 58A4 868B 25C7 CFD6 62FB  0132 A3EB 95B8 D978 0F68

That'll do it! Thanks so much. Have a nice evening.