Re: [PATCH 2/2] ARM: dts: imx8mm-venice: prepare for dek blob encapsulation

2023-12-20 Thread Tim Harvey
On Fri, Dec 15, 2023 at 11:06 AM Adam Ford wrote: > > On Fri, Dec 15, 2023 at 12:41 PM Fabio Estevam wrote: > > > > Hi Tim, > > > > On Fri, Dec 15, 2023 at 3:34 PM Tim Harvey wrote: > > > > > Fabio, > > > > > > The commit log details are not valid for upstream. I was basing this > > > off of

Re: [PATCH 2/2] ARM: dts: imx8mm-venice: prepare for dek blob encapsulation

2023-12-15 Thread Adam Ford
On Fri, Dec 15, 2023 at 12:41 PM Fabio Estevam wrote: > > Hi Tim, > > On Fri, Dec 15, 2023 at 3:34 PM Tim Harvey wrote: > > > Fabio, > > > > The commit log details are not valid for upstream. I was basing this > > off of 8d060e4a66d6884341fbb3d8ab1d837a3f173d47 which made it upstream > > with

Re: [PATCH 2/2] ARM: dts: imx8mm-venice: prepare for dek blob encapsulation

2023-12-15 Thread Fabio Estevam
Hi Tim, On Fri, Dec 15, 2023 at 3:34 PM Tim Harvey wrote: > Fabio, > > The commit log details are not valid for upstream. I was basing this > off of 8d060e4a66d6884341fbb3d8ab1d837a3f173d47 which made it upstream > with the same message. > > I can submit a v2 if necessary. Yes, please submit a

Re: [PATCH 2/2] ARM: dts: imx8mm-venice: prepare for dek blob encapsulation

2023-12-15 Thread Tim Harvey
On Thu, Dec 14, 2023 at 8:30 AM Fabio Estevam wrote: > > Hi Tim, > > On Thu, Dec 14, 2023 at 1:25 PM Tim Harvey wrote: > > > > Prepare for DEK blob encapsulation support through "dek_blob" command. > > On ARMv8, u-boot runs in non-secure, thus cannot encapsulate a DEK blob > > for encrypted

Re: [PATCH 2/2] ARM: dts: imx8mm-venice: prepare for dek blob encapsulation

2023-12-14 Thread Fabio Estevam
Hi Tim, On Thu, Dec 14, 2023 at 1:25 PM Tim Harvey wrote: > > Prepare for DEK blob encapsulation support through "dek_blob" command. > On ARMv8, u-boot runs in non-secure, thus cannot encapsulate a DEK blob > for encrypted boot. > > The DEK blob is encapsulated by OP-TEE through a trusted

[PATCH 2/2] ARM: dts: imx8mm-venice: prepare for dek blob encapsulation

2023-12-14 Thread Tim Harvey
Prepare for DEK blob encapsulation support through "dek_blob" command. On ARMv8, u-boot runs in non-secure, thus cannot encapsulate a DEK blob for encrypted boot. The DEK blob is encapsulated by OP-TEE through a trusted application call. U-boot sends and receives the DEK and the DEK blob binaries