vendor_parasite_signatures

OTA signing resources for TheParasiteProject.

cd build/soong
git remote add --fetch tpr https://github.com/TheParasiteProject/build_soong.git
# https://github.com/TheParasiteProject/build_soong/commit/0fc0a6c620e031c46882fdd0363c1cda9d0f0b7b
git cherry-pick 0fc0a6c620e031c46882fdd0363c1cda9d0f0b7b

git clone https://github.com/TheParasiteProject/vendor_parasite_signatures vendor/parasite/signatures

cd vendor/parasite/signatures

./generate.sh

• Keys will be generated under ../../private-signatures
• To signing builds, in your device tree's device.mk

TARGET_BUILD_FULLY_SIGN := true

• To signing avb, in your device tree's BoardConfig.mk

TARGET_BUILD_FULLY_SIGN := true
include vendor/parasite/signatures/BoardConfigSign.mk

TARGET_AVB_KEY_PATH := $(PARASITE_AVB_KEY_PATH)
# Differs what bit (e.g. 2048) you selected for key generation
TARGET_AVB_ALGORITHM := SHA256_RSA2048

BOARD_AVB_KEY_PATH := $(TARGET_AVB_KEY_PATH)
BOARD_AVB_ALGORITHM :=  $(TARGET_AVB_ALGORITHM)

(...)

BOARD_AVB_VENDOR_BOOT_KEY_PATH := $(TARGET_AVB_KEY_PATH)
BOARD_AVB_VENDOR_BOOT_ALGORITHM := $(TARGET_AVB_ALGORITHM)

Veryfing OTA

git clone https://github.com/LineageOS/update_verifier
cd update_verifier
pip3 install -r requirements.txt
python3 update_verifier.py /path/to/lineageos_pubkey /path/to/zip

References

• Sign builds for release - from source.android.com
• Generating Keys - from avbroot readme
• make_key script is taken from development/tools/make_key and modified

Credits

• android_vendor_lineage-priv_keys - by ItsVixano
• lineage-priv-template - by LineageOS
• vendor_evolution-priv_keys-template - by Evolution-X

License

All code in this repository is licensed under the Apache 2.0 License.

Copyright (C) 2023-2025 TheParasiteProject