vendor_nitrogen_signatures

croot && git clone https://github.com/nitrogen-project/android_vendor_signatures vendor/nitrogen/signatures

cd vendor/nitrogen/signatures

./generate.sh

• Keys will be generated under ../../private-signatures
• To signing builds, in your device tree's device.mk

TARGET_BUILD_FULLY_SIGN := true

• To signing avb, in your device tree's BoardConfig.mk

TARGET_BUILD_FULLY_SIGN := true
include vendor/nitrogen/signatures/BoardConfigSign.mk

TARGET_AVB_KEY_PATH := $(NITROGEN_AVB_KEY_PATH)
# Differs what bit (e.g. 2048) you selected for key generation
TARGET_AVB_ALGORITHM := SHA256_RSA2048

BOARD_AVB_KEY_PATH := $(TARGET_AVB_KEY_PATH)
BOARD_AVB_ALGORITHM :=  $(TARGET_AVB_ALGORITHM)

(...)

BOARD_AVB_VENDOR_BOOT_KEY_PATH := $(TARGET_AVB_KEY_PATH)
BOARD_AVB_VENDOR_BOOT_ALGORITHM := $(TARGET_AVB_ALGORITHM)

References

• Sign builds for release - from source.android.com
• Generating Keys - from avbroot readme
• make_key script is taken from development/tools/make_key and modified

Credits

• android_vendor_lineage-priv_keys - by ItsVixano
• vendor_evolution-priv_keys-template - by Evolution-XYZ
• [vendor_parasite_signatures] (https://github.com/TheParasiteProject/vendor_parasite_signatures]