keywriter: aesenc_smek.enc must be generated

Re-enable gen_sym_key_x509_extension to generate aesenc_smek.enc. Keep
the encrypt smek message if smek is given.

Fixes: PDK-12456
Signed-off-by: Sheng Zhao <shengzhao@ti.com>

diff --git a/packages/ti/boot/keywriter/scripts/gen_keywr_cert.sh b/packages/ti/boot/keywriter/scripts/gen_keywr_cert.sh
index 80d59352c9d1abb9d2c56f03426333cc8191492b..c7c5dbe85223e6f14d2220672b12c38f4d947f2e 100755 (executable)
--- a/packages/ti/boot/keywriter/scripts/gen_keywr_cert.sh
+++ b/packages/ti/boot/keywriter/scripts/gen_keywr_cert.sh
@@ -576,10 +576,10 @@ gen_pub_key_x509_extension "${smpk_info[file]}" tmpdir/smpkpub.der tmpdir/smpkh
 
 if [[  ${smek_info[flag]} == "yes" ]]; then
 echo "# encrypt smek (sym key) using aes256 key"
+fi
 # gen_sym_key_x509_extension <SMEKH/BMEKH> <SYMKEY> <SYMKEY.HASH> <IV> <RS> <FIELD> <OUTPUT>
 gen_sym_key_x509_extension "SMEKH" "${smek_info[file]}" tmpdir/smekh tmpdir/smek.iv \
                tmpdir/smek.rs tmpdir/smekfield tmpdir/aesenc_smek.enc
-fi
 
 if [[ ${extotp_info[flag]} == "yes" ]]; then
 echo "# encrypt ext_otp using aes256 key"