in image/verify.go [52:73]
func (img *Image) verifyEncState() ([]byte, error) {
secret, err := img.CollectSecret()
if err != nil {
return nil, err
}
if img.Header.Flags&IMAGE_F_ENCRYPTED == 0 {
if secret != nil {
return nil, errors.Errorf(
"encrypted flag set in image header, but no encryption TLV")
}
return nil, nil
} else {
if secret == nil {
return nil, errors.Errorf(
"encryption TLV, but encrypted flag unset in image header")
}
return secret, nil
}
}