[U-Boot] [PATCH] arm: am33xx: security: adds auth support for encrypted images

older Sitara M-Shield releases. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-omap2/sec-common.c | 6 ++ 1 file changed, 6 insertions(+) diff --git a/arch/arm/mach-omap2/sec-common.c b/arch/arm/mach-omap2/sec-common.

[U-Boot] [PATCH v2] defconfigs: Add a config for AM335x High Security EVM with UART Boot support

Add a new defconfig file for the AM335x High Security EVM. This config is specific for the case of UART booting Signed-off-by: Andrew F. Davis <a...@ti.com> --- Note: This only builds with GCC6+ due to size limitations for SPL to fit into SRAM MAINTAINERS

[U-Boot] [PATCH] arm: mach-omap2: Relax checks on OP-TEE location to allow pageable image

From: Harinarayan Bhatta <harinara...@ti.com> When the OP-TEE image is built for secure paging the load address may be in SRAM, remove checks that prevent this. Signed-off-by: Harinarayan Bhatta <harinara...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/

[U-Boot] [PATCH 2/3] ARM: k2g: Add FIT image handler for PMMC firmware

The PMMC firmware should be bundled into a FIT image on HS devices to allow authentication/decryption, add a handler to process this PMMC firmware. Signed-off-by: Andrew F. Davis <a...@ti.com> --- board/ti/ks2_evm/board_k2g.c | 21 + 1 file changed, 21 insertions(+)

[U-Boot] [PATCH 3/3] configs: k2g_evm: Remove PMMC loading environment commands

The PMMC firmware should be bundled with the FIT image for HS devices, remove the steps that load and install this firmware outside of FIT. Signed-off-by: Andrew F. Davis <a...@ti.com> --- include/configs/k2g_evm.h | 1 - 1 file changed, 1 deletion(-) diff --git a/include/configs/k2g_e

[U-Boot] [PATCH 1/3] image: Add TI PMMC image type

Add a new image type representing TI Power Management Micro-Controller (PMMC) Firmware image type. Signed-off-by: Andrew F. Davis <a...@ti.com> --- common/image.c | 1 + include/image.h | 1 + 2 files changed, 2 insertions(+) diff --git a/common/image.c b/common/image.c index 0f88

[U-Boot] [PATCH] arm: mach-omap2: Align image address before cache operations

The image address passed to secure_boot_verify_image() may not be cacheline aligned, round the address down to the nearest cacheline. Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-omap2/sec-common.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git

Re: [U-Boot] [PATCH] configs: ti: armv7: Fixes bug in fit_loadaddr for ramfs boot

On 07/18/2017 07:59 AM, Tom Rini wrote: > On Mon, Jul 17, 2017 at 01:01:36PM -0500, Andrew F. Davis wrote: >> From: Madan Srinivas <mad...@ti.com> >> >> The load address of ramdisk, rdaddr is 0x8808 and fit_loadaddr >> is defined as 0x8800. This leaves on

[U-Boot] [PATCH] arm: mach-keystone: Fixes issue with return values in inline assembly

From: "Srinivas, Madan" The inline assembly functions in mon.c assume that the caller will check for the return value in r0 according to regular ARM calling conventions. However, this assumption breaks down if the compiler inlines the functions. The caller is then under no

[U-Boot] [PATCH] configs: ti: armv7: Fixes bug in fit_loadaddr for ramfs boot

From: Madan Srinivas The load address of ramdisk, rdaddr is 0x8808 and fit_loadaddr is defined as 0x8800. This leaves only 512Kbytes for the fit image. When the FIT images are larger than this, it will overwite the ramdisk and cause the boot to fail. For eg, The K2 HS fit

[U-Boot] [PATCH 2/4] configs: k2x_evm: Adds environment variables for secure devices

From: Madan Srinivas Updates the default u-boot environment variables to support secure boot. On secure devices, a secure boot monitor (sec-bm) needs to be installed by u-boot. Signed-off-by: Madan Srinivas --- include/configs/k2g_evm.h| 7 +++

[U-Boot] [PATCH 0/4] Add default secure boot env for K2x

Hello all, This series adds the default environment variables needed to boot K2x family secure devices. Thanks, Andrew Andrew F. Davis (2): configs: k2x_evm: Adds FIT loading environment variables configs: k2x_evm: Reorder default boot command Madan Srinivas (2): configs: k2x_evm: Adds

[U-Boot] [PATCH 4/4] arm: mach-keystone: Updates mon_install for K2G HS

From: Madan Srinivas On early K2 devices (eg. K2HK) the secure ROM code does not support loading secure code to firewall protected memory, before decrypting, authenticating and executing it. To load the boot monitor on these devices, it is necessary to first authenticate and run

[U-Boot] [PATCH 1/4] configs: k2x_evm: Adds FIT loading environment variables

Updates the default u-boot environment variables to support FIT image loading. Signed-off-by: Andrew F. Davis <a...@ti.com> --- include/configs/k2e_evm.h| 9 + include/configs/k2g_evm.h| 1 + include/configs/k2hk_evm.h | 9 + include/c

[U-Boot] [PATCH 3/4] configs: k2x_evm: Reorder default boot command

before PMMC, do this on both HS and non-HS - Move set_name_pmmc to just before get_pmmc_${boot} Signed-off-by: Andrew F. Davis <a...@ti.com> --- include/configs/k2g_evm.h| 21 +++-- include/configs/ti_armv7_keystone2.h | 14 ++ 2 files changed, 25 inse

Re: [U-Boot] [PATCH 2/3] configs: dra7xx_evm: am57xx_evm: Enable DM_REGULATOR_PBIAS

On 07/12/2017 01:48 PM, Lokesh Vutla wrote: > > > On 7/12/2017 11:01 PM, Tom Rini wrote: >> On Wed, Jul 12, 2017 at 07:16:27PM +0530, Lokesh Vutla wrote: >> >>> + Andrew >>> >>> On 7/12/2017 3:25 PM, Jean-Jacques Hiblot wrote: This regulator is used for voltage switching on MMC1 IO lines.

Re: [U-Boot] [PATCH v2 0/6] AM43xx OP-TEE support

On 07/10/2017 02:45 PM, Andrew F. Davis wrote: > Hello all, > > This series brings our firewall and OP-TEE support from DRA7xx/AM57xx > family devices to the AM43xx class devices. We do this by factoring > out code common code from omap5/ into common mach-omap2/ sources. Then

[U-Boot] [PATCH v2 0/6] AM43xx OP-TEE support

: - Stop format-patch from thinking the first patch is a rename - Rebase on latest master Andrew F. Davis (6): arm: mach-omap2: Move omap5/sec-fxns.c into sec-common.c arm: mach-omap2: Factor out common FDT fixup suport arm: mach-omap2: fdt-common: Add OP-TEE node when firmware node is defined

[U-Boot] [PATCH v2 1/6] arm: mach-omap2: Move omap5/sec-fxns.c into sec-common.c

TEE loading and firewall setup are common to all omap2 devices, move these function out of omap5 and into mach-omap2. This allows us to use these functions from other omap class devices. Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-omap2/Kconfig | 26 ar

Re: [U-Boot] [PATCH 5/6] board: ti: am43xx: Add TEE loading and firewall setup

On 06/17/2017 02:35 AM, Lokesh Vutla wrote: > > > On Saturday 17 June 2017 12:57 AM, Andrew F. Davis wrote: >> Add support for loading a TEE and setting up firewalled regions to >> AM43xx HS boards. >> >> Signed-off-by: Andrew F. Davis <a...@ti.com> >>

[U-Boot] [PATCH v2 6/6] board: ti: am43xx: Add FDT fixup for HS devices

Disable RNG and add TEE to FDT used on HS devices. Signed-off-by: Andrew F. Davis <a...@ti.com> --- board/ti/am43xx/board.c | 9 + configs/am43xx_hs_evm_defconfig | 1 + 2 files changed, 10 insertions(+) diff --git a/board/ti/am43xx/board.c b/board/ti/am43xx/board.c

[U-Boot] [PATCH v2 2/6] arm: mach-omap2: Factor out common FDT fixup suport

Some of the fixups currently done for OMAP5 class boards are common to other OMAP family devices, move these to fdt-common.c. Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/include/asm/omap_common.h | 5 ++ arch/arm/include/asm/omap_sec_common.h | 6 ++ arch/arm/mach

[U-Boot] [PATCH v2 3/6] arm: mach-omap2: fdt-common: Add OP-TEE node when firmware node is defined

If a firmware node is already present in the FDT we will fail to create one and so fail to add our OP-TEE node, make this fixup first check for a firmware node and then only try to add one if it is not found. Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-omap2/fdt-common.

[U-Boot] [PATCH v2 5/6] board: ti: am43xx: Add TEE loading and firewall setup

Add support for loading a TEE and setting up firewalled regions to AM43xx HS boards. Signed-off-by: Andrew F. Davis <a...@ti.com> --- board/ti/am43xx/board.c | 7 +++ configs/am43xx_hs_evm_defconfig | 3 +++ 2 files changed, 10 insertions(+) diff --git a/board/ti/am43xx/boa

[U-Boot] [PATCH v2 4/6] arm: mach-omap2: am33xx: Add FDT fixup suport for AM33xx/AM43xx boards

Similar to what is done with OMAP5 class boards we need to perform fixups common to this SoC class, add support for this here and add HS fixups. Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-omap2/am33xx/Makefile | 1 + arch/arm/mach-omap2/am33xx/fdt.c

[U-Boot] [PATCH] arm: mach-keystone: Modify secure image size before copy

The size of the secure image does not include the size of the header, subtract this out before we move the image or we grab extra data after the image. Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-keystone/mon.c | 10 +- 1 file changed, 5 insertions(+), 5 del

[U-Boot] [PATCH 6/6] board: ti: am43xx: Add FDT fixup for HS devices

Disable RNG and add TEE to FDT used on HS devices. Signed-off-by: Andrew F. Davis <a...@ti.com> --- board/ti/am43xx/board.c | 9 + configs/am43xx_hs_evm_defconfig | 1 + 2 files changed, 10 insertions(+) diff --git a/board/ti/am43xx/board.c b/board/ti/am43xx/board.c

[U-Boot] [PATCH 5/6] board: ti: am43xx: Add TEE loading and firewall setup

Add support for loading a TEE and setting up firewalled regions to AM43xx HS boards. Signed-off-by: Andrew F. Davis <a...@ti.com> --- board/ti/am43xx/board.c | 7 +++ configs/am43xx_hs_evm_defconfig | 3 +++ 2 files changed, 10 insertions(+) diff --git a/board/ti/am43xx/boa

[U-Boot] [PATCH 4/6] arm: mach-omap2: am33xx: Add FDT fixup suport for AM33xx/AM43xx boards

Similar to what is done with OMAP5 class boards we need to perform fixups common to this SoC class, add support for this here and add HS fixups. Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-omap2/am33xx/Makefile | 1 + arch/arm/mach-omap2/am33xx/fdt.c

[U-Boot] [PATCH 3/6] arm: mach-omap2: fdt-common: Add OP-TEE node when firmware node is defined

If a firmware node is already present in the FDT we will fail to create one and so fail to add our OP-TEE node, make this fixup first check for a firmware node and then only try to add one if it is not found. Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-omap2/fdt-common.

[U-Boot] [PATCH 1/6] arm: mach-omap2: Move omap5/sec-fxns.c into sec-common.c

TEE loading and firewall setup are common to all omap2 devices, move these function out of omap5 and into mach-omap2. This allows us to use these functions from other omap class devices. Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-omap2/Kconfig

[U-Boot] [PATCH 2/6] arm: mach-omap2: Factor out common FDT fixup suport

Some of the fixups currently done for OMAP5 class boards are common to other OMAP family devices, move these to fdt-common.c. Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/include/asm/omap_common.h | 5 ++ arch/arm/include/asm/omap_sec_common.h | 6 ++ arch/arm/mach

[U-Boot] [PATCH 0/6] AM43xx OP-TEE support

Hello all, This series brings our firewall and OP-TEE support from DRA7xx/AM57xx family devices to the AM43xx class devices. We do this by factoring out code common code from omap5/ into common mach-omap2/ sources. Then add the hooks for the AM43xx boards. Thanks, Andrew Andrew F. Davis (6

[U-Boot] [PATCH] arm: mach-omap2: Generate MLO file from SD boot capable targets

Secure boot targets that can be loaded from an SD card FAT partition need to be called "MLO" on the filesystem, make a copy with this name to clarify the correct image for SD card booting. Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-omap2/config_secure.mk | 13

Re: [U-Boot] [PATCH v2 1/2] cmd: add Kconfig option for 'date' command

On 04/26/2017 12:19 AM, Chris Packham wrote: > Signed-off-by: Chris Packham > > --- > As requested I've run moveconfig.py to update the defconfigs > > Changes in v2: > - run moveconfig.py > > cmd/Kconfig | 6 ++ >

Re: [U-Boot] [PATCH] MAINTAINERS: Update for Keystone2 secure devices

On 04/26/2017 01:05 AM, Lokesh Vutla wrote: > Update Keystone2 secure device configs under > "TI SYSTEM SECURITY". Without this buildman keeps complaining > about the status of these boards. > > Signed-off-by: Lokesh Vutla <lokeshvu...@ti.com> > --- Acke

Re: [U-Boot] [PATCH 3/6] configs: am335x_evm: Use omap2 generic spl load script

On 04/22/2017 01:50 AM, Lokesh Vutla wrote: > No reason to use a separate load script for am33xx than using > omap-common load script. > > Signed-off-by: Lokesh Vutla > --- > include/configs/am335x_evm.h | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git

[U-Boot] [PATCH v2] Kconfig: Enable FIT support by default for TI platforms

Almost all TI defconfigs enable this already, add this as a default and remove the explicit assignment. Signed-off-by: Andrew F. Davis <a...@ti.com> --- Changes from v1: - Use imply instead of default arch/arm/Kconfig | 2 ++ configs/am335x_baltos_def

Re: [U-Boot] [PATCH] Kconfig: Enable FIT support by default for TI platforms

On 04/20/2017 10:14 AM, Tom Rini wrote: > On Thu, Apr 20, 2017 at 09:52:37AM -0500, Andrew F. Davis wrote: > >> Almost all TI defconfigs enable this already, add this as a default >> and remove the explicit assignment. >> >> Signed-off-by: Andrew F. Davis &l

[U-Boot] [PATCH] Kconfig: Enable FIT support by default for TI platforms

Almost all TI defconfigs enable this already, add this as a default and remove the explicit assignment. Signed-off-by: Andrew F. Davis <a...@ti.com> --- Kconfig| 1 + configs/am335x_baltos_defconfig| 1 - configs/am335x_boneblack_def

Re: [U-Boot] [U-Boot, v2, 8/8] defconfigs: Add a config for AM335x High Security EVM with UART Boot support

On 04/09/2017 05:16 PM, Tom Rini wrote: > On Fri, Apr 07, 2017 at 10:11:26AM -0500, Andrew F. Davis wrote: > >> Add a new defconfig file for the AM335x High Security EVM. This config >> is specific for the case of UART booting >> >> Signed-off-by: Andrew F. Davis

[U-Boot] [PATCH v4] spl: net: Add FIT image support over network boot

load_addr to be set correctly in the image header. Signed-off-by: Andrew F. Davis <a...@ti.com> --- Changes from v3: - Relocate legacy image according to its header Changes from v2: - Rebased on latest upstream/master Changes from v1: - move "spl_net_load_read" into #ifdef bl

Re: [U-Boot] [PATCH v3] spl: net: Add FIT image support over network boot

work in case of non > FIT image(same concern I had wrt v2)? > Same as last time, the global 'load_addr' will need to be set correctly. I guess we could also use the 'load_addr' provided by the legacy image header then relocate the image. I'll add that for v4. >> Signed-off-by: Andrew

[U-Boot] [PATCH 2/2] defconfigs: am57xx_hs_evm: Move OPTEE load address to avoid overlaps

Move the OPTEE load address to 0xbdb0 in order to avoid overlap with the memory regions used in radio and RVC usecases. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/am57xx_hs_evm_defconfig | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/c

[U-Boot] [PATCH 1/2] defconfigs: dra7xx_hs_evm: Move OPTEE load address to avoid overlaps

From: Misael Lopez Cruz <misael.lo...@ti.com> Move the OPTEE load address to 0xbdb0 in order to avoid overlap with the memory regions used in radio and RVC usecases. Signed-off-by: Misael Lopez Cruz <misael.lo...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.co

[U-Boot] [PATCH v2 4/8] defconfigs: dra7xx_hs_evm: Sync HS and non-HS defconfigs

Additions have been made to the non-HS defconfig without the same being made to the HS defconfig, sync them. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/dra7xx_hs_evm_defconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/configs/dra7xx_hs_evm_defconfig b/c

[U-Boot] [PATCH v2 5/8] defconfigs: am43xx_hs_evm: Add Net boot mode support

Enable Eth/Net boot support in the default defconfig to allow network booting. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/am43xx_hs_evm_defconfig | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/configs/am43xx_hs_evm_defconfig b/configs/am43xx_hs_evm_def

[U-Boot] [PATCH v2 2/8] defconfigs: am43xx_hs_evm: Sync HS and non-HS defconfigs

Additions have been made to the non-HS defconfig without the same being made to the HS defconfig, sync them. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/am43xx_hs_evm_defconfig | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/configs/am43xx_hs_evm_defco

[U-Boot] [PATCH v2 6/8] defconfigs: am43xx_hs_evm: Add USB client boot mode support

Enable CONFIG_SPL_USBETH_SUPPORT in the default defconfig to allow booting as a USB RNDIS peripheral. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/am43xx_hs_evm_defconfig | 3 +++ 1 file changed, 3 insertions(+) diff --git a/configs/am43xx_hs_evm_defconfig b/c

[U-Boot] [PATCH v2 8/8] defconfigs: Add a config for AM335x High Security EVM with UART Boot support

Add a new defconfig file for the AM335x High Security EVM. This config is specific for the case of UART booting Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/am335x_hs_evm_uart_defconfig | 69 1 file changed, 69 insertions(+) create mode

[U-Boot] [PATCH v2 7/8] defconfigs: am43xx_hs_evm: Add USB Host boot mode support

Enable SPL_USB_HOST_SUPPORT in the default defconfig to allow booting from USB peripherals. Unlike the non-HS boards, we already load SPL to a 0x4030_+ address, so no other changes are needed. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/am43xx_hs_evm_defconfig | 1 +

[U-Boot] [PATCH v2 0/8] Update and sync HS configs

to SPL size limitations. Thanks, Andrew Andrew F. Davis (8): defconfigs: am335x_hs_evm: Sync HS and non-HS defconfigs defconfigs: am43xx_hs_evm: Sync HS and non-HS defconfigs defconfigs: am57xx_hs_evm: Sync HS and non-HS defconfigs defconfigs: dra7xx_hs_evm: Sync HS and non-HS defconfigs

[U-Boot] [PATCH v2 3/8] defconfigs: am57xx_hs_evm: Sync HS and non-HS defconfigs

Additions have been made to the non-HS defconfig without the same being made to the HS defconfig, sync them. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/am57xx_hs_evm_defconfig | 7 +++ 1 file changed, 7 insertions(+) diff --git a/configs/am57xx_hs_evm_defconfig b/c

[U-Boot] [PATCH v2 1/8] defconfigs: am335x_hs_evm: Sync HS and non-HS defconfigs

Sync new additions to non-HS defconfig with HS defconfig. Also add SPL NAND support, this was disabled before due to size constraints, enable this now at the expense of the less used GPT partition support. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/am335x_hs_evm_defconf

[U-Boot] [PATCH v2 00/10] Add support for secure boot on Keystone2 SoCs

k2g_hs_evm_defconfig - Rebase on upstream/master Andrew F. Davis (2): defconfig: k2hk_hs_evm: Add k2hk_hs_evm_defconfig defconfig: k2g_hs_evm: Add k2g_hs_evm_defconfig Madan Srinivas (5): image: Fixes build warning with CONFIG_FIT_IMAGE_POST_PROCESS arm: mach-omap2: Add secure image name common

[U-Boot] [PATCH v2 08/10] defconfig: k2e_hs_evm: Add k2e_hs_evm_defconfig

ned-off-by: Andrew F. Davis <a...@ti.com> Reviewed-by: Simon Glass <s...@chromium.org> --- configs/k2e_hs_evm_defconfig | 51 1 file changed, 51 insertions(+) create mode 100644 configs/k2e_hs_evm_defconfig diff --git a/configs/

[U-Boot] [PATCH v3] spl: net: Add FIT image support over network boot

"load_addr" pointing to the execution address as they should have before. Signed-off-by: Andrew F. Davis <a...@ti.com> --- Changes from v2: - Rebased on latest upstream/master Changes from v1: - move "spl_net_load_read" into #ifdef block as su

[U-Boot] [PATCH v2 06/10] doc: Updates info on using Keystone2 secure devices

From: Madan Srinivas <mad...@ti.com> Add a section describing the secure boot image used on Keystone2 secure devices. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> Reviewed-by: Tom Rini <tr...@konsulko.com> --- d

[U-Boot] [PATCH v2 10/10] defconfig: k2g_hs_evm: Add k2g_hs_evm_defconfig

TI K2G secure devices have to be built with TI_SECURE_DEVICE, FIT, and FIT_IMAGE_POST_PROCESS enabled. Add a dedicated defconfig for this. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/k2g_hs_evm_defconfig | 55 1 file chang

[U-Boot] [PATCH v2 09/10] defconfig: k2hk_hs_evm: Add k2hk_hs_evm_defconfig

TI K2HK secure devices have to be built with TI_SECURE_DEVICE, FIT, and FIT_IMAGE_POST_PROCESS enabled. Add a dedicated defconfig for this. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/k2hk_hs_evm_defconfig | 51 +++ 1 file chang

[U-Boot] [PATCH v2 04/10] arm: mach-omap2: Add secure image name common to OMAP and keystone

From: Madan Srinivas <mad...@ti.com> As K2 can directly boot U-Boot, add u-boot_HS_MLO as the secure image name for secure K2 devices, for all boot modes other than SPI flash. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> Reviewe

[U-Boot] [PATCH v2 03/10] arm: mach-omap2: Enable Kconfig support for K2 HS devices

: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> Reviewed-by: Tom Rini <tr...@konsulko.com> --- arch/arm/mach-omap2/Kconfig | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/arm/mach-omap2/Kconfig b/arch/arm/mach-omap2/Kconfig i

[U-Boot] [PATCH v2 07/10] Kconfig: Adds SYS_TEXT_BASE config option for Keystone2

From: Madan Srinivas <mad...@ti.com> This patch makes SYS_TEXT_BASE a config option for Keystone2 so that it can be used to load u-boot at different addresses on secure and non-secure Keystone2 devices. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis

[U-Boot] [PATCH v2 05/10] ARM: Keystone2: Build secure images for K2

From: Madan Srinivas <mad...@ti.com> Adds an additional image type needed for supporting secure keystone devices. The build generates u-boot_HS_MLO which can be used to boot from all media on secure keystone devices. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: And

[U-Boot] [PATCH v2 02/10] arm: mach-keystone: Implements FIT post-processing call for keystone SoCs

er doc/README.ti-secure Signed-off-by: Vitaly Andrianov <vita...@ti.com> Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> Reviewed-by: Tom Rini <tr...@konsulko.com> --- arch/arm/mach-keystone/mon.c | 73 ++

[U-Boot] [PATCH v2 01/10] image: Fixes build warning with CONFIG_FIT_IMAGE_POST_PROCESS

which will result in an implicit declaration of function 'board_fit_image_post_process' warning while building u-boot. Fix this warning. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> Reviewed-by: Tom Rini <tr...@konsulko.com> --- include

[U-Boot] [PATCH] ti_armv7_common: env: Change FIT image name to match build name

The most common name for a FIT image containing a bootable kernel is "fitImage", as our builds now use this name also, change this to the default in our U-Boot environment. Signed-off-by: Andrew F. Davis <a...@ti.com> --- include/configs/ti_armv7_common.h | 2 +- 1 file chan

[U-Boot] [PATCH] ti_armv7_common: env: Use args_mmc in FIT loading path

this as when we do have the rootfs in FIT this argument is ignored. As 'loadfit' is only called from the MMC boot path, use 'args_mmc' to correctly populate 'bootargs'. Signed-off-by: Andrew F. Davis <a...@ti.com> Reviewed-by: Lokesh Vutla <lokeshvu...@ti.com> --- include/configs/ti_ar

Re: [U-Boot] [PATCH] defconfig: am43xx_hs_evm: Sync HS defconfig with non-HS defconfig

On 04/07/2017 08:23 AM, Tom Rini wrote: > On Fri, Apr 07, 2017 at 08:21:38AM -0500, Andrew F. Davis wrote: > >> Ping? > > Been waiting for a v2 of this, I'd assume it doesn't apply cleanly > and/or needs further additions. > It applied just fine 2 months ago when po

Re: [U-Boot] [PATCH] defconfig: am43xx_hs_evm: Sync HS defconfig with non-HS defconfig

Ping? On 02/07/2017 05:02 PM, Andrew F. Davis wrote: > The non-HS defconfig has been modified without equivalent changes being > applied to the HS defconfig. Sync these here. > > Signed-off-by: Andrew F. Davis <a...@ti.com> > --- > configs/am43xx_hs_evm_defconfig | 8 ++

Re: [U-Boot] [PATCH 1/2] configs: am43xx_evm: Merge in usbhost defconfig

On 03/12/2017 10:16 PM, Lokesh Vutla wrote: > > > On Saturday 11 March 2017 03:32 AM, Andrew F. Davis wrote: >> I was once again going to try to sync the mode specific defconfigs >> with the main AM43xx defconfig when I decided it may make more >> sense to mer

[U-Boot] [PATCH 2/2] configs: am43xx_hs_evm: Add USB Host boot mode support

Enable SPL_USB_HOST_SUPPORT in the default defconfig to allow booting from USB peripherals. Unlike the non-HS boards, we already load SPL to a 0x4030_+ address, so no other changes are needed. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/am43xx_hs_evm_defconfig | 2 ++

[U-Boot] [PATCH 1/2] configs: am43xx_evm: Merge in usbhost defconfig

(-QSPI). Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/am43xx_evm_defconfig | 3 ++ configs/am43xx_evm_usbhost_boot_defconfig | 74 --- 2 files changed, 3 insertions(+), 74 deletions(-) delete mode 100644 configs/am43xx_evm_usbhost_boot_def

[U-Boot] [PATCH] ti_armv7_common: env: Use args_mmc in FIT loading path

this as when we do have the rootfs in FIT this argument is ignored. As 'loadfit' is only called from the MMC boot path, use 'args_mmc' to correctly populate 'bootargs'. Signed-off-by: Andrew F. Davis <a...@ti.com> --- include/configs/ti_armv7_common.h | 3 +-- 1 file changed, 1 insertion

Re: [U-Boot] [PATCH 12/17] Makefile: add rules to generate SPL FIT images

ose in their defconfig file > to allow an easy building of such an image. > > Signed-off-by: Andre Przywara <andre.przyw...@arm.com> > --- Acked-by: Andrew F. Davis <a...@ti.com> > Kconfig | 17 + > Makefile | 20 > 2 files c

Re: [U-Boot] [PATCH 04/17] SPL: FIT: factor out spl_load_fit_image()

new function, which we just call twice. > > Signed-off-by: Andre Przywara <andre.przyw...@arm.com> > --- Acked-by: Andrew F. Davis <a...@ti.com> +Franklin, This patch, and #12 look like something you would be interested in for your 66AK2G0x work. Andr

Re: [U-Boot] [RESEND PATCH 8/9] defconfig: k2e_hs_evm: Add k2e_hs_evm_defconfig

On 02/27/2017 09:19 AM, Tom Rini wrote: > On Fri, Feb 24, 2017 at 06:59:45AM -0600, Andrew F. Davis wrote: > >> From: Vitaly Andrianov <vita...@ti.com> >> >> TI K2E secure devices have to be built with TI_SECURE_DEVICE, FIT, and >> FIT_IMAGE_POST_PROCES

[U-Boot] [RESEND PATCH 7/9] Kconfig: Adds SYS_TEXT_BASE config option for Keystone2

From: Madan Srinivas <mad...@ti.com> This patch makes SYS_TEXT_BASE a config option for Keystone2 so that it can be used to load u-boot at different addresses on secure and non-secure Keystone2 devices. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis

[U-Boot] [RESEND PATCH 9/9] defconfig: k2hk_hs_evm: Add k2hk_hs_evm_defconfig

TI K2HK secure devices have to be built with TI_SECURE_DEVICE, FIT, and FIT_IMAGE_POST_PROCESS enabled. Add a dedicated defconfig for this. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/k2hk_hs_evm_defconfig | 51 +++ 1 file chang

[U-Boot] [RESEND PATCH 4/9] arm: mach-omap2: Add secure image name common to OMAP and keystone

From: Madan Srinivas <mad...@ti.com> As K2 can directly boot U-Boot, add u-boot_HS_MLO as the secure image name for secure K2 devices, for all boot modes other than SPI flash. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- a

[U-Boot] [RESEND PATCH 1/9] image: Fixes build warning with CONFIG_FIT_IMAGE_POST_PROCESS

which will result in an implicit declaration of function 'board_fit_image_post_process' warning while building u-boot. Fix this warning. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> Reviewed-by: Tom Rini <tr...@konsulko.com> --- include

[U-Boot] [RESEND PATCH 8/9] defconfig: k2e_hs_evm: Add k2e_hs_evm_defconfig

ned-off-by: Andrew F. Davis <a...@ti.com> --- configs/k2e_hs_evm_defconfig | 51 1 file changed, 51 insertions(+) create mode 100644 configs/k2e_hs_evm_defconfig diff --git a/configs/k2e_hs_evm_defconfig b/configs/k2e_hs_evm_defconfig ne

[U-Boot] [RESEND PATCH 2/9] arm: mach-keystone: Implements FIT post-processing call for keystone SoCs

er doc/README.ti-secure Signed-off-by: Vitaly Andrianov <vita...@ti.com> Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-keystone/mon.c | 73 1 file changed, 73 insertions(+

[U-Boot] [RESEND PATCH 6/9] doc: Updates info on using Keystone2 secure devices

From: Madan Srinivas <mad...@ti.com> Add a section describing the secure boot image used on Keystone2 secure devices. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- doc/README.ti-secure | 20 1 file chan

[U-Boot] [RESEND PATCH 3/9] arm: mach-omap2: Enable Kconfig support for K2 HS devices

: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-omap2/Kconfig | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/arm/mach-omap2/Kconfig b/arch/arm/mach-omap2/Kconfig index 24bc485195..d74b068abc 100644 --- a/arch/arm/m

[U-Boot] [RESEND PATCH 5/9] ARM: Keystone2: Build secure images for K2

From: Madan Srinivas <mad...@ti.com> Adds an additional image type needed for supporting secure keystone devices. The build generates u-boot_HS_MLO which can be used to boot from all media on secure keystone devices. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: And

[U-Boot] [RESEND PATCH 0/9] Add support for secure boot on Keystone2 SoCs

Andrew F. Davis (1): defconfig: k2hk_hs_evm: Add k2hk_hs_evm_defconfig Madan Srinivas (5): image: Fixes build warning with CONFIG_FIT_IMAGE_POST_PROCESS arm: mach-omap2: Add secure image name common to OMAP and keystone ARM: Keystone2: Build secure images for K2 doc: Updates info on using

[U-Boot] [PATCH 4/9] arm: mach-omap2: Add secure image name common to OMAP and keystone

As K2 can directly boot U-Boot, add u-boot_HS_MLO as the secure image name for secure K2 devices, for all boot modes other than SPI flash. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-omap2/config_secure.mk | 6 ++

[U-Boot] [PATCH 2/9] arm: mach-keystone: Implements FIT post-processing call for keystone SoCs

Andrianov <vita...@ti.com> Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- arch/arm/mach-keystone/mon.c | 73 1 file changed, 73 insertions(+) diff --git a/arch/arm/mach-keystone/mon

[U-Boot] [PATCH 0/9] Add support for secure boot on Keystone2 SoCs

Hello all, This series adds support for secure Keystone2 K2E and K2HK devices, much of the work is borrowed from the OMAP style devices as the secure workings are very similar, allowing minimal changes for this support addition. Thanks, Andrew Andrew F. Davis (9): image: Fixes build warning

[U-Boot] [PATCH 1/9] image: Fixes build warning with CONFIG_FIT_IMAGE_POST_PROCESS

of function 'board_fit_image_post_process' warning while building u-boot. Fix this warning. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> Reviewed-by: Tom Rini <tr...@konsulko.com> --- include/image.h | 3 ++- 1 file changed, 2 inserti

[U-Boot] [PATCH 5/9] ARM: Keystone2: Build secure images for K2

Adds an additional image type needed for supporting secure keystone devices. The build generates u-boot_HS_MLO which can be used to boot from all media on secure keystone devices. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- a

[U-Boot] [PATCH 7/9] Kconfig: Adds SYS_TEXT_BASE config option for Keystone2

This patch makes SYS_TEXT_BASE a config option for Keystone2 so that it can be used to load u-boot at different addresses on secure and non-secure Keystone2 devices. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- Kconfig

[U-Boot] [PATCH 3/9] arm: mach-omap2: Enable Kconfig support for K2 HS devices

Like the OMAP54xx, AM43xx, & AM33xx family SoCs, the keystone family of SoCs also have high security enabled models. Allow K2E devices to be built with HS Device Type Support. Signed-off-by: Vitaly Andrianov <vita...@ti.com> Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-

[U-Boot] [PATCH 9/9] defconfig: k2hk_hs_evm: Add k2hk_hs_evm_defconfig

TI K2HK secure devices have to be built with TI_SECURE_DEVICE, FIT, and FIT_IMAGE_POST_PROCESS enabled. Add a dedicated defconfig for this. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/k2hk_hs_evm_defconfig | 51 +++ 1 file chang

[U-Boot] [PATCH 6/9] doc: Updates info on using Keystone2 secure devices

Add a section describing the secure boot image used on Keystone2 secure devices. Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- doc/README.ti-secure | 20 1 file changed, 20 insertions(+) diff --git a/doc/README

Re: [U-Boot] mlo and u-boot

On 02/22/2017 12:23 PM, Ryan wrote: > Hello, > > I am using AM43XX based board. The bootloader is divided into spl > u-boot (MLO) and u-boot.bin > > I wanted to check what variables are shared between them. How does MLO > a seperate binary > share the boot mode and mmcdev to u-boot so that it

[U-Boot] [PATCH 8/9] defconfig: k2e_hs_evm: Add k2e_hs_evm_defconfig

TI K2E secure devices have to be built with TI_SECURE_DEVICE, FIT, and FIT_IMAGE_POST_PROCESS enabled. Add a dedicated defconfig for this. Signed-off-by: Vitaly Andrianov <vita...@ti.com> Signed-off-by: Madan Srinivas <mad...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.co

[U-Boot] [PATCH] arm: mach-omap2: Flush cache after FIT post-processing image

After we authenticate/decrypt an image we need to flush the caches as they may still contain bits of the encrypted image. This will cause failures if we attempt to jump to this image. Reported-by: Yogesh Siraswar<yoge...@ti.com> Signed-off-by: Andrew F. Davis <a...@ti.com> --- a

[U-Boot] [PATCH 3/3] defconfigs: dra7xx_hs_evm: Sync HS and non-HS defconfigs

Additions have been made to the non-HS defconfig without the same being made to the HS defconfig, sync them. Signed-off-by: Andrew F. Davis <a...@ti.com> --- configs/dra7xx_hs_evm_defconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/configs/dra7xx_hs_evm_defconfig b/c

<    1   2   3   4   5   6   >