Re: [U-Boot] [PATCH] verified-boot: Minimal support for booting U-Boot proper from SPL

6 2:58 AM > To: Sumit Garg <sumit.g...@nxp.com> > Cc: s...@chromium.org; dannenb...@ti.com; u-boot@lists.denx.de; Ruchika > Gupta <ruchika.gu...@nxp.com>; Aneesh Bansal <aneesh.ban...@nxp.com>; > york sun <york@nxp.com> > Subject: Re: [PATCH] verified-boot: Mini

Re: [U-Boot] [PATCH v4 1/2] powerpc/mpc85xx: SECURE BOOT- Enable chain of trust in SPL

Hi Andreas, Simon, > -Original Message- > From: s...@google.com [mailto:s...@google.com] On Behalf Of Simon Glass > Sent: Friday, June 10, 2016 6:05 AM > To: Andreas Dannenberg <dannenb...@ti.com> > Cc: Sumit Garg <sumit.g...@nxp.com>; U-Boot Mailing List b.

Re: [U-Boot] [PATCH v2] verified-boot: Minimal support for booting U-Boot proper from SPL

Hi Teddy, > -Original Message- > From: Andreas Dannenberg [mailto:dannenb...@ti.com] > Sent: Friday, June 10, 2016 8:15 AM > To: Teddy Reed <teddy.r...@gmail.com> > Cc: u-boot@lists.denx.de; s...@chromium.org; Sumit Garg > <sumit.g...@nxp.com> > Subj

[U-Boot] [PATCH v5 1/2] powerpc/mpc85xx: SECURE BOOT- Enable chain of trust in SPL

access to CPC configured as SRAM, configure PAMU. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Patches rebased Changes in v3: Patches rebased Changes in v

[U-Boot] [PATCH v5 2/2] powerpc/mpc85xx: T104x: Add nand secure boot target

SRAM and not the next level U-Boot loaded on DDR. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Patches rebased Changes in v3: Patches rebased Changes in v

[U-Boot] [PATCH 3/4] SECURE_BOOT: Enable SD as a source for bootscript

Add support for reading bootscript and bootscript header from SD. Also renamed macros *_FLASH to *_DEVICE to represent SD alongwith NAND and NOR flash. Reviewed-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- arch/arm/include/asm/fsl_s

[U-Boot] [PATCH 0/4] Add SECURE BOOT support in SPL framework

The patch-set does the following : 1. Enable chain of trust in SPL framework for ARM based platforms. 3. Add SD secure boot target for ls1021atwr platform. Sumit Garg (4): DM: crypto/fsl: Enable rsa DM driver usage before relocation SECURE_BOOT: Enable chain of trust in SPL framework

[U-Boot] [PATCH 4/4] arm: ls1021atwr: Add SD secure boot target

to u-boot image. So header will also be copied from SD to DDR. Reviewed-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- board/freescale/ls1021atwr/ls1021atwr.c| 7 + .../ls1021atwr_sdcard_ifc_SECURE_BOOT_defco

[U-Boot] [PATCH 2/4] SECURE_BOOT: Enable chain of trust in SPL framework

Override jump_to_image_no_args function to include validation of u-boot image using spl_validate_uboot before jumping to u-boot image. Also define macros in SPL framework to enable crypto operations. Reviewed-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g..

[U-Boot] [PATCH 1/4] DM: crypto/fsl: Enable rsa DM driver usage before relocation

Enable rsa signature verification in SPL framework before relocation for verification of main u-boot. Reviewed-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- drivers/crypto/fsl/fsl_rsa.c | 1 + 1 file changed, 1 insertion(+) diff --g

Re: [U-Boot] [PATCH] verified-boot: Minimal support for booting U-Boot proper from SPL

> -Original Message- > From: Teddy Reed [mailto:teddy.r...@gmail.com] > Sent: Monday, June 06, 2016 2:58 AM > To: Sumit Garg <sumit.g...@nxp.com> > Cc: s...@chromium.org; dannenb...@ti.com; u-boot@lists.denx.de; Ruchika > Gupta <ruchika.gu...@nxp.com>; Aneesh

Re: [U-Boot] [PATCH] verified-boot: Minimal support for booting U-Boot proper from SPL

eddy.r...@gmail.com] > Sent: Sunday, May 29, 2016 7:28 AM > To: u-boot@lists.denx.de > Cc: s...@chromium.org; dannenb...@ti.com; Sumit Garg > <sumit.g...@nxp.com> > Subject: [PATCH] verified-boot: Minimal support for booting U-Boot proper > from SPL > > This allows a boa

[U-Boot] [PATCH v4 2/2] powerpc/mpc85xx: T104x: Add nand secure boot target

SRAM and not the next level U-Boot loaded on DDR. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Patches rebased Changes in v3: Patches rebased Changes in v

[U-Boot] [PATCH v4 1/2] powerpc/mpc85xx: SECURE BOOT- Enable chain of trust in SPL

access to CPC configured as SRAM, configure PAMU. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Patches rebased Changes in v3: Patches rebased Changes in v

Re: [U-Boot] [PATCH v2 1/2] powerpc/mpc85xx: SECURE BOOT- Enable chain of trust in SPL

> -Original Message- > From: Teddy Reed [mailto:teddy.r...@gmail.com] > Sent: Friday, May 27, 2016 3:46 AM > To: Sumit Garg <sumit.g...@nxp.com> > Cc: U-Boot Mailing List <u-boot@lists.denx.de>; Ruchika Gupta > <ruchika.gu...@nxp.com> > Subject: Re:

Re: [U-Boot] [PATCH] verified-boot: Minimal support for booting U-Boot proper from SPL

> -Original Message- > From: Teddy Reed [mailto:teddy.r...@gmail.com] > Sent: Tuesday, May 31, 2016 2:23 AM > To: Sumit Garg <sumit.g...@nxp.com> > Cc: s...@chromium.org; dannenb...@ti.com; u-boot@lists.denx.de; Ruchika > Gupta <ruchika.gu...@nxp.com>; Aneesh

[U-Boot] [PATCH 1/2] powerpc/mpc85xx: SECURE BOOT- Enable chain of trust in SPL

access to CPC configured as SRAM, configure PAMU. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- arch/powerpc/cpu/mpc8xxx/fsl_pamu.c | 8 + arch/powerpc/cpu/mp

[U-Boot] [PATCH 2/2] powerpc/mpc85xx: T104x: Add nand secure boot target

SRAM and not the next level U-Boot loaded on DDR. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- arch/powerpc/cpu/mpc85xx/cpu_init.c| 4 +-- arch/powerpc/c

Re: [U-Boot] [PATCH 2/2] powerpc/mpc85xx: T104x: Add nand secure boot target

> On 04/01/2016 12:09 AM, Sumit Garg wrote: > > For mpc85xx SoCs, the core begins execution from address 0xFFFC. > > In non-secure boot scenario from NAND, this address will map to CPC > > configured as SRAM. But in case of secure boot, this default address > > a

[U-Boot] [PATCH] powerpc/board: SPL: Enable malloc flag in global data.

For malloc to work in SPL framework enable GD_FLG_FULL_MALLOC_INIT flag in global data after allocating memory using mem_malloc_init. Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- board/freescale/b4860qds/spl.c | 1 + board/freescale/c29xpcie/spl.c | 1 + board/freescale/p1

[U-Boot] [PATCH v2 1/2] powerpc/mpc85xx: SECURE BOOT- Enable chain of trust in SPL

access to CPC configured as SRAM, configure PAMU. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Patches rebased arch/powerpc/cpu/mpc8xxx/fsl_pamu.c

[U-Boot] [PATCH v2 2/2] powerpc/mpc85xx: T104x: Add nand secure boot target

SRAM and not the next level U-Boot loaded on DDR. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Patches rebased arch/powerpc/cpu/mpc85xx/cpu_init.c

[U-Boot] [PATCH v3 2/2] powerpc/mpc85xx: T104x: Add nand secure boot target

SRAM and not the next level U-Boot loaded on DDR. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Patches rebased Changes in v3: Patches rebased arch/p

[U-Boot] [PATCH v3 1/2] powerpc/mpc85xx: SECURE BOOT- Enable chain of trust in SPL

access to CPC configured as SRAM, configure PAMU. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Patches rebased Changes in v3: Patches rebased arch/p

[U-Boot] [PATCH] crypto/fsl: Update blob cmd to accept 64bit addresses

Update blob cmd to accept 64bit source, key modifier and destination addresses. Also correct output result print format for fsl specific implementation of blob cmd. Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- cmd/blob.c| 2 +- drivers/crypto/fsl/fsl_blob.

Re: [U-Boot] [PATCH 0/3] Enable SECURE BOOT in SPL framework

> -Original Message- > From: Prabhakar Kushwaha > Sent: Thursday, July 14, 2016 5:00 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: york sun <york@nxp.com>; Ruchika Gupta <ruchika.gu...@nxp.com>; > s...@google.com; teddy.r..

[U-Boot] [PATCH 0/3] Enable SECURE BOOT in SPL framework

. Rebased this patchset on top of patch [1], so this patchset is dependent on patch [1]. Changes PATCH v2->PATCH v3: Patches rebased Changes PATCH->PATCH v2: Patches rebased [1]https://patchwork.ozlabs.org/patch/627664/ Sumit Garg (3): powerpc/mpc85xx: SECURE BOOT- Enable chain of trust i

[U-Boot] [PATCH 1/3] powerpc/mpc85xx: SECURE BOOT- Enable chain of trust in SPL

access to CPC configured as SRAM, configure PAMU. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes PATCH v5->PATCH v6: Incorporated review comments regarding comment

[U-Boot] [PATCH 2/3] powerpc/mpc85xx: T104x: Add nand secure boot target

SRAM and not the next level U-Boot loaded on DDR. Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> Reviewed-by: Simon Glass <s...@chromium.org> Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes PATCH v5->PA

[U-Boot] [PATCH 3/3] doc: SPL: Add README for secure boot support

Adds information regarding SPL handling validation process of main u-boot image on power/mpc85xx and arm/layerscape platforms. Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes PATCH v5->PATCH v6: Added README for SECURE BOOT support in SPL framework. doc/SPL/README.spl-se

Re: [U-Boot] [PATCH 2/4] SECURE_BOOT: Enable chain of trust in SPL framework

> -Original Message- > From: york sun > Sent: Wednesday, July 20, 2016 3:08 AM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; tr...@kon

Re: [U-Boot] [PATCH v5 1/2] powerpc/mpc85xx: SECURE BOOT- Enable chain of trust in SPL

Hi Simon, > -Original Message- > From: s...@google.com [mailto:s...@google.com] On Behalf Of Simon Glass > Sent: Friday, June 17, 2016 9:22 AM > To: Sumit Garg <sumit.g...@nxp.com> > Cc: U-Boot Mailing List <u-boot@lists.denx.de>; york sun > <york@nx

Re: [U-Boot] [PATCH] LS1021ATWR: Modify u-boot size for sd secureboot

> -Original Message- > From: york sun > Sent: Friday, January 27, 2017 10:55 PM > To: Vini Pillai <vinitha.pil...@nxp.com>; Sumit Garg <sumit.g...@nxp.com> > Cc: u-boot@lists.denx.de; Ruchika Gupta <ruchika.gu...@nxp.com>; > Prabhakar Kushwaha <pr

[U-Boot] [PATCH] ls1046ardb: SPL size reduction in case of non-xip boot

ieng compiled in case of SPL NAND build and NAND driver from bieng compiled in case of SPL MMC build. Signed-off-by: Vinitha Pillai-B57223 <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- board/freescale/ls1046ardb/Makefile | 4 +++- board/freescale/ls1046a

[U-Boot] [PATCH] ls1043ardb: SPL size reduction in case of non-xip boot

ieng compiled in case of SPL NAND build and NAND driver from bieng compiled in case of SPL MMC build. 5. Remove I2C driver support from SPL in case of LS1043ARDB. Signed-off-by: Vinitha Pillai-B57223 <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- board/free

Re: [U-Boot] [PATCH v3 1/3] SECURE_BOOT: Enable chain of trust on LS1046A platform

> -Original Message- > From: york sun > Sent: Tuesday, January 17, 2017 3:29 AM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; Vini Pillai &l

Re: [U-Boot] [PATCH v3 1/3] SECURE_BOOT: Enable chain of trust on LS1046A platform

> -Original Message- > From: york sun > Sent: Tuesday, January 17, 2017 10:03 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; Vini Pillai &l

Re: [U-Boot] [PATCH] ls1046ardb: SPL size reduction in case of non-xip boot

> -Original Message- > From: york sun > Sent: Monday, February 27, 2017 10:34 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; Mingkai Hu

Re: [U-Boot] [PATCH] ls1043ardb: SPL size reduction in case of non-xip boot

> -Original Message- > From: york sun > Sent: Monday, February 27, 2017 10:33 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; Mingkai Hu

[U-Boot] [PATCH v2 2/2] ls1043ardb: PPA: add PPA validation in case of secure boot

As part of Secure Boot Chain of trust, PPA image must be validated before the image is started. The code for the same has been added. Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Rebased Aneesh's patchset. No dependency. Link

[U-Boot] [PATCH v2 1/2] board: ls1043ardb: move sec_init to board_init

sec_init() which was earlier called in misc_init_r() is now done in board_init() before PPA init as SEC block will be used during PPA image validation. Signed-off-by: Aneesh Bansal <aneesh.ban...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Rebased Anees

Re: [U-Boot] [u-boot-release] [PATCH] fsl_sfp : Modify macros as per changes in SFP v3.4

> -Original Message- > From: york sun > Sent: Wednesday, August 31, 2016 9:04 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Prabhakar Kushwaha <prabhakar.kushw...@nxp.com>; Ruchika Gupta > <ruchika.gu...@nxp.com> > Subjec

[U-Boot] [PATCH] fsl_sec_mon: Update driver for Security Monitor

Update the API's for transition of Security Monitor states. Instead of providing both initial and final states for transition, just provide final state for transition as Security Monitor driver will take care of it internally. Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- board/fre

[U-Boot] [PATCH] fsl_sfp : Modify macros as per changes in SFP v3.4

In SFP v3.4 support for 8 keys in SRK table has been added which leads to corresponding changes in OSPR key revocation field. So modify OSPR_KEY_REVOC_XXX macros accordingly. Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- include/fsl_sfp.h | 23 +++ 1 file chang

[U-Boot] [PATCH v2] fsl_sfp : Modify macros as per changes in SFP v3.4

SFP v3.4 supports 8 keys in SRK table which leads to corresponding changes in OSPR key revocation field. So modify OSPR_KEY_REVOC_XXX macros accordingly. Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Corrected commit message. Also removed whitspace changes in this

[U-Boot] [PATCH 1/2] LS1046AQDS : Add NOR Secure Boot Target

Add NOR secure boot target. Also enable sec init. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- board/freescale/ls1046aqds/MAINTAINERS | 4 board/freescale/ls1046aqds/ls1046aqds.c | 18 +++

[U-Boot] [PATCH 2/2] LS1046ARDB : Add QSPI Secure Boot target

Add QSPI Secure Boot target to enable chain of trust and enable sec init. Also define bootscript and its header addresses for QSPI target. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- arch/arm/include/asm/arch-fsl-layersc

Re: [U-Boot] [PATCH v2 1/3] SECURE_BOOT: Enable chain of trust on LS1046A platform

> -Original Message- > From: york sun > Sent: Monday, November 14, 2016 11:22 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; Vini Pillai &l

Re: [U-Boot] [PATCH v2 2/3] LS1046AQDS: Add NOR Secure Boot Target

> -Original Message- > From: york sun > Sent: Monday, November 14, 2016 11:23 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; Vini Pillai &l

[U-Boot] [PATCH v2 0/3] LS1046A secure boot target addition

The patch-set does the following: 1. Add NOR secure boot target on ls1046aqds platform. 2. Add QSPI secure boot target on ls1046ardb platform. Changes in v2: Split patches logically from 2 to 3. Sumit Garg (3): SECURE_BOOT: Enable chain of trust on LS1046A platform LS1046AQDS: Add NOR

[U-Boot] [PATCH v2 2/3] LS1046AQDS: Add NOR Secure Boot Target

Add NOR secure boot target. Also enable sec init. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Split patches logically from 2 to 3. board/freescale/ls1046aqds/MAINTAINERS | 4 board/freescal

[U-Boot] [PATCH v2 1/3] SECURE_BOOT: Enable chain of trust on LS1046A platform

Define bootscript and its header addresses for QSPI target. Also define PPA header address to enable PPA validation. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Split patches logically from 2 to 3. arch

[U-Boot] [PATCH v2 3/3] LS1046ARDB: Add QSPI Secure Boot target

Add QSPI Secure Boot target. Also enable sec init. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Split patches logically from 2 to 3. board/freescale/ls1046ardb/MAINTAINERS| 4 board/freescal

[U-Boot] [PATCH v3 0/3] LS1046A secure boot target addition

The patch-set does the following: 1. Add NOR secure boot target on ls1046aqds platform. 2. Add QSPI secure boot target on ls1046ardb platform. Changes in v3: Changes in comment style. Changes in v2: Split patches logically from 2 to 3. Sumit Garg (3): SECURE_BOOT: Enable chain of trust

[U-Boot] [PATCH v3 2/3] LS1046AQDS: Add NOR Secure Boot Target

Add NOR secure boot target. Also enable sec init. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v3: Changes in comment style. Changes in v2: Split patches logically from 2 to 3. board/freescale/ls1046aqds

[U-Boot] [PATCH v3 1/3] SECURE_BOOT: Enable chain of trust on LS1046A platform

Define bootscript and its header addresses for QSPI target. Also define PPA header address to enable PPA validation. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v3: Changes in comment style. Changes in v2: S

[U-Boot] [PATCH v3 3/3] LS1046ARDB: Add QSPI Secure Boot target

Add QSPI Secure Boot target. Also enable sec init. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v3: Changes in comment style. Changes in v2: Split patches logically from 2 to 3. board/freescale/ls1046ardb

[U-Boot] [PATCH 3/7] SECURE_BOOT: Enable chain of trust on LS1046A platform

From: Vinitha Pillai-B57223 <vinitha.pil...@nxp.com> Define bootscript and its header addresses for QSPI target. Also define PPA header address to enable PPA validation. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> ---

[U-Boot] [PATCH 2/7] LS1043ARDB: Enable PPA in Secure boot defconfig

From: Vinitha Pillai-B57223 <vinitha.pil...@nxp.com> Enable PPA in secure boot by defining FSL_LS_PPA macro in its defconfig file. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- configs/ls1043ardb_SECURE_BOOT_defco

[U-Boot] [PATCH 6/7] SECURE_BOOT: Enable chain of trust on LS1012A platform

From: Vinitha Pillai-B57223 <vinitha.pil...@nxp.com> Define bootscript and its header addresses for QSPI target Also add PPA header address in Kconfig Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- arch/arm/cpu/ar

[U-Boot] [PATCH 5/7] LS1046ARDB: Add QSPI Secure Boot target

From: Vinitha Pillai-B57223 <vinitha.pil...@nxp.com> Add QSPI Secure Boot target. Also enable sec init. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- board/freescale/ls1046ardb/Kconfig| 2 +- board/fr

[U-Boot] [PATCH 7/7] LS1012ARDB: Add QSPI Secure Boot target

From: Vinitha Pillai-B57223 <vinitha.pil...@nxp.com> Add QSPI Secure Boot target to enable chain of trust Signed-off-by: Sumit Garg <sumit.g...@nxp.com> Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Reviewed-by: Ruchika Gupta <ruchika.gu...@nxp.com> --- bo

[U-Boot] [PATCH 4/7] LS1046AQDS: Add NOR Secure Boot Target

Add NOR secure boot target. Also enable sec init. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- board/freescale/ls1046aqds/MAINTAINERS | 4 board/freescale/ls1046aqds/ls1046aqds.c | 19 +

[U-Boot] [PATCH 1/7] SECURE BOOT: Add header address of PPA in kconfig

From: Vinitha Pillai-B57223 <vinitha.pil...@nxp.com> The header address of PPA defined in Kconfig. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- arch/arm/cpu/armv8/fsl-layerscape/Kconfig | 11 +++ arch

[U-Boot] [PATCH 0/7] Add LS1046 and LS1012 secure boot targets

Purpose of patchset: 1. This consolidated patchset supersedes earlier patchset for LS1046 and LS1012 secure boot target addition patchsets as they have inter- dependency. 2. Rebased and incorporated review comments. 3. Enabling PPA in secure boot via Kconfig option

Re: [U-Boot] [PATCH v2] ls1043ardb: SPL size reduction in case of non-xip boot

> -Original Message- > From: york sun > Sent: Monday, March 27, 2017 9:41 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; Mingkai Hu

[U-Boot] [PATCH v2] ls1043ardb: SPL size reduction in case of non-xip boot

ieng compiled in case of SPL NAND build and NAND driver from bieng compiled in case of SPL MMC build. 5. Remove I2C driver support from SPL in case of LS1043ARDB. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: R

[U-Boot] [PATCH v2] ls1046ardb: SPL size reduction in case of non-xip boot

ieng compiled in case of SPL NAND build and NAND driver from bieng compiled in case of SPL MMC build. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v2: Rebased and fixed compilation warning on ls1046aqds. board/free

Re: [U-Boot] [PATCH 6/7] SECURE_BOOT: Enable chain of trust on LS1012A platform

> -Original Message- > From: york sun > Sent: Wednesday, March 29, 2017 10:33 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; Vini Pillai &l

[U-Boot] [PATCH v5] ls1046ardb: SPL size reduction

ieng compiled in case of SPL NAND build and NAND driver from bieng compiled in case of SPL MMC build. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v5: Move macros from rdb specfic header file to common header file

Re: [U-Boot] [u-boot-release] [PATCH 3/7] SECURE_BOOT: Enable chain of trust on LS1046A platform

> -Original Message- > From: york sun > Sent: Wednesday, March 29, 2017 10:16 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Prabhakar Kushwaha <prabhakar.kushw...@nxp.com>; Ruchika Gupta > <ruchika.gu...@nxp.com>; Vini Pillai &l

Re: [U-Boot] [PATCH v4] ls1046ardb: SPL size reduction in case of non-xip boot

> -Original Message- > From: york sun > Sent: Wednesday, March 29, 2017 8:57 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; Mingkai Hu

[U-Boot] [PATCH v5] ls1043ardb: SPL size reduction

ieng compiled in case of SPL NAND build and NAND driver from bieng compiled in case of SPL MMC build. 5. Remove I2C driver support from SPL in case of LS1043ARDB. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v5: Move

Re: [U-Boot] [PATCH 6/7] SECURE_BOOT: Enable chain of trust on LS1012A platform

> -Original Message- > From: york sun > Sent: Wednesday, March 29, 2017 10:20 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; Vini Pillai &l

Re: [U-Boot] [PATCH v4] ls1046ardb: SPL size reduction in case of non-xip boot

> -Original Message- > From: york sun > Sent: Wednesday, March 29, 2017 9:15 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@nxp.com>; Mingkai Hu

[U-Boot] [PATCH v3] ls1043ardb: SPL size reduction in case of non-xip boot

ieng compiled in case of SPL NAND build and NAND driver from bieng compiled in case of SPL MMC build. 5. Remove I2C driver support from SPL in case of LS1043ARDB. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v3:

[U-Boot] [PATCH v3] ls1046ardb: SPL size reduction in case of non-xip boot

ieng compiled in case of SPL NAND build and NAND driver from bieng compiled in case of SPL MMC build. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v3: Reorganised way to remove driver macros in ls1046a_common.h &

[U-Boot] [PATCH v4] ls1046ardb: SPL size reduction in case of non-xip boot

ieng compiled in case of SPL NAND build and NAND driver from bieng compiled in case of SPL MMC build. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v4: Rename macros in header files. Changes in v3: Reorganised way

[U-Boot] [PATCH v4] ls1043ardb: SPL size reduction in case of non-xip boot

ieng compiled in case of SPL NAND build and NAND driver from bieng compiled in case of SPL MMC build. 5. Remove I2C driver support from SPL in case of LS1043ARDB. Signed-off-by: Vinitha Pillai <vinitha.pil...@nxp.com> Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- Changes in v

Re: [U-Boot] [PATCH 1/3] fsl: PPA: add support PPA image validation from NAND and SD

> -Original Message- > From: York Sun [mailto:york@nxp.com] > Sent: Tuesday, April 11, 2017 9:09 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@n

Re: [U-Boot] [PATCH 3/3][v3] [RESEND] arm: ls1046ardb: Add SD secure boot target

> -Original Message- > From: york sun > Sent: Friday, March 31, 2017 6:16 AM > To: Ruchika Gupta <ruchika.gu...@nxp.com>; u-boot@lists.denx.de > Cc: Vini Pillai <vinitha.pil...@nxp.com>; Sumit Garg <sumit.g...@nxp.com> > Subject: Re: [PATCH 3/3][v3] [RE

[U-Boot] [PATCH 2/3] fsl-ppa: Kconfig: Support to load PPA hdr from eMMC/SD and NAND Flash

Add support to load PPA hdr from eMMC/SD and NAND Flash in Kconfig Signed-off-by: Sumit Garg <sumit.g...@nxp.com> Signed-off-by: Udit Agarwal <udit.agar...@nxp.com> Tested-by: Vinitha Pillai <vinitha.pil...@nxp.com> --- arch/arm/cpu/armv8/fsl-layerscape/Kconfig | 10

[U-Boot] [PATCH 3/3] ls104xardb: Secure Boot: enable PPA support for eMMC/SD and NAND boot

Signed-off-by: Sumit Garg <sumit.g...@nxp.com> Signed-off-by: Udit Agarwal <udit.agar...@nxp.com> Tested-by: Vinitha Pillai <vinitha.pil...@nxp.com> --- configs/ls1043ardb_nand_SECURE_BOOT_defconfig | 1 + configs/ls1043ardb_sdcard_SECURE_BOOT_defcon

[U-Boot] [PATCH 1/3] fsl: PPA: add support PPA image validation from NAND and SD

Signed-off-by: Sumit Garg <sumit.g...@nxp.com> Signed-off-by: Udit Agarwal <udit.agar...@nxp.com> Tested-by: Vinitha Pillai <vinitha.pil...@nxp.com> --- arch/arm/cpu/armv8/fsl-layerscape/ppa.c | 67 - 1 file changed, 66 insertions(+), 1 delet

Re: [U-Boot] [PATCH 2/3] fsl-ppa: Kconfig: Support to load PPA hdr from eMMC/SD and NAND Flash

> -Original Message- > From: York Sun [mailto:york@nxp.com] > Sent: Friday, April 07, 2017 9:41 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@n

Re: [U-Boot] [PATCH 1/3] fsl: PPA: add support PPA image validation from NAND and SD

> -Original Message- > From: York Sun [mailto:york@nxp.com] > Sent: Monday, April 10, 2017 10:39 PM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@n

Re: [U-Boot] [PATCH 1/3] fsl: PPA: add support PPA image validation from NAND and SD

> -Original Message- > From: York Sun [mailto:york@nxp.com] > Sent: Tuesday, April 11, 2017 11:44 AM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@n

[U-Boot] [PATCH v2 1/3] fsl-ppa: Kconfig: Support to load PPA hdr from eMMC/SD and NAND Flash

Add support to load PPA hdr from eMMC/SD and NAND Flash in Kconfig Signed-off-by: Sumit Garg <sumit.g...@nxp.com> Signed-off-by: Udit Agarwal <udit.agar...@nxp.com> Tested-by: Vinitha Pillai <vinitha.pil...@nxp.com> --- Changes in v2: Changed order of patch 1 & 2.

[U-Boot] [PATCH v2 3/3] ls104xardb: Secure Boot: enable PPA support for eMMC/SD and NAND boot

Signed-off-by: Sumit Garg <sumit.g...@nxp.com> Signed-off-by: Udit Agarwal <udit.agar...@nxp.com> Tested-by: Vinitha Pillai <vinitha.pil...@nxp.com> --- Changes in v2: Changed order of patch 1 & 2. Also moved assignment of ppa_esbc_hdr to CONFIG_SYS_LS_PPA_ESBC_ADD

[U-Boot] [PATCH v2 2/3] fsl: PPA: add support PPA image validation from NAND and SD

Signed-off-by: Sumit Garg <sumit.g...@nxp.com> Signed-off-by: Udit Agarwal <udit.agar...@nxp.com> Tested-by: Vinitha Pillai <vinitha.pil...@nxp.com> --- Changes in v2: Changed order of patch 1 & 2. Also moved assignment of ppa_esbc_hdr to CONFIG_SYS_LS_PPA_ESBC_ADD

[U-Boot] [PATCH v3 1/3] SECURE_BOOT: Unify memory map for Layerscape based platforms

Unify memory map for Layerscape based platforms. This patch includes changes in bootscript, bootscript header and PPA header addresses change as per unified memory map. Signed-off-by: Sumit Garg <sumit.g...@nxp.com> Tested-by: Vinitha Pillai <vinitha.pil...@nxp.com> --- Changes in

[U-Boot] [PATCH v3 3/3] LS2080ARDB: Secure Boot defconfig for QSPI boot.

From: Udit Agarwal Add the secure boot defconfig for QSPI boot on LS2088ARDB platform. Signed-off-by: Udit Agarwal --- Changes in v3: Rebasing of the patch on top commit. This patch supersedes https://patchwork.ozlabs.org/patch/767680/

[U-Boot] [PATCH v3 2/3] LS2080ARDB: QSPI boot: Secure Boot image validation

From: Udit Agarwal Adds header address for PPA to be validated during ESBC phase for ARCH_LS2088 and QSPI_BOOT. Moves sec_init prior to ppa_init as for validation of PPA, sec must be initialised before the PPA is initialised. Signed-off-by: Udit Agarwal

Re: [U-Boot] [PATCH] hash: Compile-off SHA SW lib in case SHA HW lib is present

> -Original Message- > From: Tom Rini [mailto:tr...@konsulko.com] > Sent: Monday, August 14, 2017 8:04 PM > To: Sumit Garg <sumit.g...@nxp.com> > Cc: u-boot@lists.denx.de; York Sun <york@nxp.com>; Ruchika Gupta > <ruchika.gu...@nxp.com>; Prabhakar Ku

Re: [U-Boot] [PATCH v2] hash: Compile only hardware or software versions of SHA algorithms

> -Original Message- > From: Tom Rini [mailto:tr...@konsulko.com] > Sent: Tuesday, August 15, 2017 2:08 AM > To: u-boot@lists.denx.de > Cc: Simon Glass <s...@chromium.org>; Sumit Garg <sumit.g...@nxp.com> > Subject: [PATCH v2] hash: Compile only hardwa

[U-Boot] [PATCH] hash: Compile-off SHA SW lib in case SHA HW lib is present

by default. But in case of platforms with SHA HW library support, SHA SW library becomes redundant and increases size of SPL by approx 18K. So to take care of this SHA SW library is compiled-off in case SHA HW acceleration is present. Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- c

Re: [U-Boot] [PATCH v2 2/3] fsl: PPA: add support PPA image validation from NAND and SD

> -Original Message- > From: York Sun [mailto:york@nxp.com] > Sent: Saturday, April 22, 2017 1:03 AM > To: Sumit Garg <sumit.g...@nxp.com>; u-boot@lists.denx.de > Cc: Ruchika Gupta <ruchika.gu...@nxp.com>; Prabhakar Kushwaha > <prabhakar.kushw...@n

[U-Boot] [PATCH] SECURE_BOOT: Unify memory map for Layerscape based platforms

Unify memory map for Layerscape based platforms as per DASH SDK memory map. This patch includes changes in bootscript, bootscript header and PPA header addresses change as per unified memory map. Signed-off-by: Sumit Garg <sumit.g...@nxp.com> Tested-by: Vinitha Pillai <vinitha.pil..

[U-Boot] [PATCH] configs: SECURE_BOOT: Enable CONFIG_CMD_EXT4_WRITE

As part of chain of trust with confidentiality along with distro boot, linux kernel image needs to be stored in encrypted form on ext4 boot partition. So enable CONFIG_CMD_EXT4_WRITE in all Secure Boot defconfigs. Signed-off-by: Sumit Garg <sumit.g...@nxp.com> --- c

[U-Boot] [PATCH] arm64: ls1043ardb: Add distro secure boot support

Enable validation of boot.scr script prior to its execution dependent on "secureboot" flag in environment. Disable fall back option to nor/qspi boot in case of secure boot. Also enable "secureboot=y" flag in environment for ARM based platforms instead of bootcmd. Signe

  1   2   3   4   5   6   7   8   >