From: Udit Agarwal
Remove "fdt_high" environment variable to use the bootm_size
to safely contain a kernel, device tree and initrd for
relocation.
Signed-off-by: Udit Agarwal
---
include/configs/ls1012a2g5rdb.h | 2 +-
include/configs/ls1012a_common.h | 2 +-
include/configs/ls1
setexpr command is used while running secure boot
(chain of trust with confidentiality) feature.
Enable CONFIG_CMD_SETEXPR to enable setexpr command.
Signed-off-by: Udit Agarwal
---
Changes in v4:
Corrects commit message.
configs/ls1012afrwy_tfa_SECURE_BOOT_defconfig | 1 +
configs
Maximum size of secure boot header to be read from MMC is
12KB which spans across 0x20 blocks.
Hence increase the mmc read size for secure boot
headers from MMC to 0x20 blocks.
Signed-off-by: Udit Agarwal
---
Changes in v4:
Corrects commit message.
include/configs/ls1088ardb.h | 18
Call sec_init function to initialise the job ring
parameters for secure boot operations.
Signed-off-by: Udit Agarwal
---
Changes in V4:
Corrects commit message.
board/freescale/ls1028a/ls1028a.c | 4
1 file changed, 4 insertions(+)
diff --git a/board/freescale/ls1028a/ls1028a.c
b/board
Enables secure boot related configs in defconfig for
LS1046AFRWY.
Signed-off-by: Udit Agarwal
---
Changes in V4:
Corrects commit message.
configs/ls1046afrwy_tfa_SECURE_BOOT_defconfig | 57 +++
1 file changed, 57 insertions(+)
create mode 100644 configs
Hence increase the mmc read size for secure boot
headers from MMC to 0x20 blocks.
Signed-off-by: Udit Agarwal
---
Changes in V3:
Resends the patch.
include/configs/ls1088ardb.h | 18 +-
include/configs/ls2080ardb.h | 8
include/configs/lx2160a_common.h | 8
So, Enable CONFIG_CMD_SETEXPR to enable setexpr command.
Signed-off-by: Udit Agarwal
---
Changes in V3:
Resends patches.
configs/ls1012afrwy_tfa_SECURE_BOOT_defconfig | 1 +
configs/ls1012aqds_tfa_SECURE_BOOT_defconfig | 2 +-
configs/ls1012ardb_tfa_SECURE_BOOT_defconfig | 2 +-
configs
Signed-off-by: Udit Agarwal
---
Changes in V3:
Corrects commit message and resends patch.
configs/ls1046afrwy_tfa_SECURE_BOOT_defconfig | 57 +++
1 file changed, 57 insertions(+)
create mode 100644 configs/ls1046afrwy_tfa_SECURE_BOOT_defconfig
diff --git a/configs
Renames the CONFIG_SECURE_BOOT name to CONFIG_NXP_ESBC to avoid
conflicts with UEFI secure boot.
Signed-off-by: Udit Agarwal
---
Changes in V2:
Rebase on top of master branch.
arch/powerpc/cpu/mpc85xx/Kconfig | 4 ++--
arch/powerpc/cpu/mpc85xx/cpu_init.c
Renames CONFIG_SECURE_BOOT to CONFIG_NXP_ESBC to avoid conflict
with UEFI secure boot.
Signed-off-by: Udit Agarwal
---
Changes in V2:
Rebase on top of master branch.
arch/arm/cpu/armv7/ls102xa/Kconfig | 4 ++--
arch/arm/cpu/armv8/fsl-layerscape/Kconfig| 4
Renames the CONFIG_SECURE_BOOT name to CONFIG_NXP_ESBC to avoid
conflicts with UEFI secure boot.
Signed-off-by: Udit Agarwal
---
arch/powerpc/cpu/mpc85xx/Kconfig | 4 ++--
arch/powerpc/cpu/mpc85xx/cpu_init.c| 8
arch/powerpc/cpu/mpc85xx
Renames CONFIG_SECURE_BOOT to CONFIG_NXP_ESBC to avoid conflict
with UEFI secure boot.
Signed-off-by: Udit Agarwal
---
arch/arm/cpu/armv7/ls102xa/Kconfig | 4 ++--
arch/arm/cpu/armv8/fsl-layerscape/Kconfig| 4 ++--
arch/arm/cpu/armv8/fsl-layerscape/spl.c
Adds sec_init call to initialise the job ring parameters
for secure boot operations.
Signed-off-by: Udit Agarwal
---
board/freescale/ls1028a/ls1028a.c | 4
1 file changed, 4 insertions(+)
diff --git a/board/freescale/ls1028a/ls1028a.c
b/board/freescale/ls1028a/ls1028a.c
index 6b126bcf44
Maximum size of secure boot header to be read from
MMC is 12KB which spans across 0x20 blocks.
Hence increase the mmc read size for secure boot
headers from MMC to 0x20 blocks.
Signed-off-by: Udit Agarwal
---
Changes in V2:
Modifications in the subject line and commit
message.
include/configs
setexpr command is used while running secure boot (chain of trust with
confidentiality) feature.
So, Enable CONFIG_CMD_SETEXPR to enable setexpr command.
Signed-off-by: Udit Agarwal
---
Changes in V2:
Corrects commit message.
configs/ls1012afrwy_tfa_SECURE_BOOT_defconfig | 1 +
configs
Uboot prompt must not be available while running
secure boot. TO ensure this bootdelay must be set
to -2.
Signed-off-by: Udit Agarwal
---
board/freescale/common/fsl_chain_of_trust.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/board/freescale/common/fsl_chain_of_trust.c
Maximum size of secure boot header to be read from
MMC is 12KB which spans across 0x20 blocks.
Hence increases the mmc read size for secure boot
headers from MMC to 0x20 blocks.
Signed-off-by: Udit Agarwal
---
include/configs/ls1088ardb.h | 18 +-
include/configs
SETEXPR command is used while running secure boot (chain of
trust with confidentiality) feature.
To use the setexpr command from uboot comsole CONFIG_CMD_SETEXPR
config needs to be enabled in defconfig.
Signed-off-by: Udit Agarwal
---
configs/ls1012afrwy_tfa_SECURE_BOOT_defconfig | 1
Add TFA secure boot defconfig and Enables secure boot related
configs in it.
Signed-off-by: Udit Agarwal
---
Changes in V2:
Change in commit message.
configs/ls1046afrwy_tfa_SECURE_BOOT_defconfig | 61 +++
1 file changed, 61 insertions(+)
create mode 100644 configs
Add TFA secure boot defconfig and Enables secure boot related
configs in it.
Signed-off-by: Udit Agarwal
---
configs/ls1046afrwy_tfa_SECURE_BOOT_defconfig | 61 +++
1 file changed, 61 insertions(+)
create mode 100644 configs/ls1046afrwy_tfa_SECURE_BOOT_defconfig
diff --git a
ENVL_NOWHERE is dependent on CONFIG_ENV_IS_NOWHERE and not on
CONFIG_CHAIN_OF_TRUST so return ENVL_NOWHERE when CONFIG_ENV_IS_NOWHERE
is enabled
Signed-off-by: Udit Agarwal
---
Changes in V3:
Correct checkpatch warnings.
arch/arm/cpu/armv8/fsl-layerscape/cpu.c | 11 ++-
1 file changed
.
Signed-off-by: Vinitha V Pillai
Signed-off-by: Udit Agarwal
---
Changes in V2:
Corrects commit message to add more clarity.
include/configs/ls1012afrwy.h| 3 ++-
include/configs/ls1012ardb.h | 3 ++-
include/configs/ls1021atwr.h | 3 ++-
include/configs/ls1043a_common.h | 3
Hi,
arch/arm/cpu/armv8/fsl-layerscape/cpu.c uses ENVL_NOWHERE to initialize the
env_loc enum variable.
Shall the ENVL_NOWHERE be replaced with ENV_NOWHERE in commit message.
Regards
Udit Agarwal
> -Original Message-
> From: Prabhakar Kushwaha
> Sent: Friday, March 22, 201
ENVL_NOWHERE is dependent on CONFIG_ENV_IS_NOWHERE and not on
CONFIG_CHAIN_OF_TRUST so return ENVL_NOWHERE when CONFIG_ENV_IS_NOWHERE
is enabled
Signed-off-by: Udit Agarwal
---
Changes in V2:
Corrects commit message.
Removes goto label.
arch/arm/cpu/armv8/fsl-layerscape/cpu.c | 11
Compiles code to set the environment location to ENVL_NOWHERE
and return when CONFIG_ENV_IS_NOWHERE is set.
Environment location is dependent on CONFIG_ENV_IS_NOWHERE config
and not on CONFIG_CHAIN_OF_TRUST.
Signed-off-by: Udit Agarwal
---
arch/arm/cpu/armv8/fsl-layerscape/cpu.c | 8
Configs added to enable secure boot on LX2160AQDS board.
Signed-off-by: Udit Agarwal
---
configs/lx2160aqds_tfa_SECURE_BOOT_defconfig | 90
1 file changed, 90 insertions(+)
create mode 100644 configs/lx2160aqds_tfa_SECURE_BOOT_defconfig
diff --git a/configs
Configs added to enable secure boot on LX2160AQDS board.
Signed-off-by: Udit Agarwal
---
configs/lx2160aqds_tfa_SECURE_BOOT_defconfig | 90
1 file changed, 90 insertions(+)
create mode 100644 configs/lx2160aqds_tfa_SECURE_BOOT_defconfig
diff --git a/configs
Adds esbc validate command for verification of MC and DPC
firmware.
Adds secure boot defconfig.
Signed-off-by: Udit Agarwal
---
Changes in v2:
Correct flash offset for Kernel header for secure boot.
configs/lx2160ardb_tfa_SECURE_BOOT_defconfig | 86
include/configs
Adds esbc validate command for verification of MC and DPC
firmware.
Adds secure boot defconfig.
Signed-off-by: Udit Agarwal
---
configs/lx2160ardb_tfa_SECURE_BOOT_defconfig | 86
include/configs/lx2160a_common.h | 10 +++
2 files changed, 96 insertions
I found here <https://www.denx.de/wiki/DULG/UBootCmdGroupExec> that if, fdt
pointer is missing, by default bd_info will be passed. Can/How can I
override this, to pass my own default FDT?
On Sun, Mar 4, 2018 at 12:57 PM, Udit agarwal wrote:
> Hi all,
> I need to implement a chec
Hi all,
I need to implement a check on whether user provided a valid FDT or not(on
beagle bone Black).
So,
- First, what is the default value(if any) of FDT pointer passed on via
uboot to kernel?
- Is there a option to set/customize the default FDT pointer value?
Regard,
Udit agarwal
Adds config CONFIG_FSL_LS_PPA and CONFIG_FSL_CAAM in
LS2080AQDS and LS2080ARDB secure boot defconfig.
Removes CONFIG_FIT, as with CONFIG_FSL_LS_PPA enabled,
CONFIG_FIT is selected.
Removes CONFIG_SPL_RSA as in NOR boot SPL boot is not done.
Signed-off-by: Udit Agarwal
---
Changes in v3
Add the secure boot defconfigs for QSPI boot on LS1088ARDB
and LS1088AQDS platforms.
Signed-off-by: Udit Agarwal
Signed-off-by: Vinitha Pillai-B57223
---
Changes in v4:
Adds Distro boot support defconfigs.
Adds config to unset CONFIG_BOOTCOOMAND.
Keeping defconfig options in sorted manner
form based on LAyerscape Chasis 3.
Moves sec_init prior to ppa_init as for validation of PPA sec must
be initialised before the PPA is initialised.
Signed-off-by: Udit Agarwal
Signed-off-by: Vinitha Pillai-B57223
Signed-off-by: Sumit Garg
---
Changes in v4:
Adds Distro boot support.
Removes CONFI
> -Original Message-
> From: York Sun
> Sent: Tuesday, October 24, 2017 3:04 AM
> To: Udit Agarwal ; u-boot@lists.denx.de
> Cc: Ruchika Gupta ; Sumit Garg ;
> Prabhakar Kushwaha
> Subject: Re: [PATCH v3 1/2] LS1088A_QSPI: SECURE_BOOT: Images validation
>
> O
Adds config CONFIG_FSL_LS_PPA and CONFIG_FSL_CAAM in
LS2080AQDS and LS2080ARDB secure boot defconfig.
Removes CONFIG_FIT, as not required when CONFIG_FSL_LS_PPA
is enabled.
Removes CONFIG_SPL_RSA as in QSPI boot SPL boot is not done.
Signed-off-by: Udit Agarwal
---
Changes in V2:
Adds
Chasis 3.
Moves sec_init prior to ppa_init as for validation of PPA sec must
be initialised before the PPA is initialised.
Signed-off-by: Udit Agarwal
---
Changes in v3:
Removes CONFIG_FSL_CAAM. Will be enabled via defconfig.
arch/arm/cpu/armv8/fsl-layerscape/Kconfig | 1 +
board/freescale/ls1088a
Add the secure boot defconfigs for QSPI boot on LS1088ARDB
and LS1088AQDS platforms.
Signed-off-by: Udit Agarwal
---
Changes in v3:
Keeping defconfig options in sorted manner.
board/freescale/ls1088a/MAINTAINERS | 10
configs/ls1088aqds_qspi_SECURE_BOOT_defconfig | 37
Add config CONFIG_FSL_LS_PPA and CONFIG_FSL_CAAM in
LS2080AQDS and LS2080ARDB secure boot defconfig.
Signed-off-by: Udit Agarwal
---
configs/ls2080aqds_SECURE_BOOT_defconfig | 5 +++--
configs/ls2080ardb_SECURE_BOOT_defconfig | 5 +++--
2 files changed, 6 insertions(+), 4 deletions(-)
diff
Changes in V2:
Rebasing the image validation patch.
Dependent patch set:
https://patchwork.ozlabs.org/patch/801852/
https://patchwork.ozlabs.org/patch/803045/
https://patchwork.ozlabs.org/patch/803043/
> -Original Message-
> From: Udit Agarwal [mailto:udi
Changes in V2:
Rebasing the image validation patch.
Dependent patch set:
https://patchwork.ozlabs.org/patch/801852/
https://patchwork.ozlabs.org/patch/803045/
https://patchwork.ozlabs.org/patch/803043/
> -Original Message-
> From: Udit Agarwal [mailto:udi
Add the secure boot defconfigs for QSPI boot on LS1088ARDB
and LS1088AQDS platforms.
Signed-off-by: Udit Agarwal
---
configs/ls1088aqds_qspi_SECURE_BOOT_defconfig | 32 +++
configs/ls1088ardb_qspi_SECURE_BOOT_defconfig | 32 +++
2 files changed
Chasis 3.
Moves sec_init prior to ppa_init as for validation of PPA sec must
be initialised before the PPA is initialised.
Signed-off-by: Udit Agarwal
---
arch/arm/cpu/armv8/fsl-layerscape/Kconfig | 1 +
board/freescale/ls1088a/Kconfig | 2 ++
board/freescale/ls1088a/ls1088a.c
Add the secure boot defconfig for QSPI boot on LS2088ARDB
platform.
Signed-off-by: Udit Agarwal
---
Dependent Patch Set:
https://patchwork.ozlabs.org/patch/756260/
Changes in v2:
Updates the MAINTAINERS file and reverses the order of
secure boot patches for LS2080 QSPI Boot.
configs
ppa_init as for validation of PPA, sec must
be initialised before the PPA is initialised.
Signed-off-by: Udit Agarwal
---
Dependent Patch Set:
https://patchwork.ozlabs.org/patch/756260/
Changes in v2:
Updates the MAINTAINERS file and reverses the order of
secure boot patches for LS2080 QSPI Boot
sec_init prior to ppa_init as for validation of PPA sec must
be initialised before the PPA is initialised.
Signed-off-by: Udit Agarwal
---
https://patchwork.ozlabs.org/patch/756222/
https://patchwork.ozlabs.org/patch/756221/
https://patchwork.ozlabs.org/patch/756250/
arch/arm/cpu/armv8/fsl
This patch adjusts memory map for secure boot headers on LS2080AQDS
and LS2080ARDB platforms.
Secure boot headers are placed on NOR flash at offset 0x0060.
Signed-off-by: Udit Agarwal
---
https://patchwork.ozlabs.org/patch/756222/
https://patchwork.ozlabs.org/patch/756221/
https
Add the secure boot defconfig for QSPI boot on LS2088ARDB
platform.
Signed-off-by: Udit Agarwal
---
https://patchwork.ozlabs.org/patch/756222/
https://patchwork.ozlabs.org/patch/756221/
https://patchwork.ozlabs.org/patch/756250/
configs/ls2088ardb_qspi_SECURE_BOOT_defconfig | 50
Chasis 3.
Defines address for Bootscript image and its header for QSPI and adds
command to copy these images from QSPI to RAM using sf read command.
Signed-off-by: Udit Agarwal
---
Dependent patch set:
https://patchwork.ozlabs.org/patch/756260/
arch/arm/cpu/armv8/fsl-layerscape/Kconfig | 3
Add the secure boot defconfigs for QSPI boot on LS1088ARDB
and LS1088AQDS platforms.
Signed-off-by: Udit Agarwal
---
Dependent patch set:
https://patchwork.ozlabs.org/patch/756260/
configs/ls1088aqds_qspi_SECURE_BOOT_defconfig | 31 +++
configs
when in EL3 state.
Signed-off-by: Udit Agarwal
---
drivers/crypto/fsl/jr.c | 7 +++
1 file changed, 7 insertions(+)
diff --git a/drivers/crypto/fsl/jr.c b/drivers/crypto/fsl/jr.c
index 1b88229..ccd2168 100644
--- a/drivers/crypto/fsl/jr.c
+++ b/drivers/crypto/fsl/jr.c
@@ -8,6 +8,7
structure.)
3) Use keys from IE table, to verify further images.
Signed-off-by: Aneesh Bansal
Signed-off-by: Saksham Jain
Signed-off-by: Udit Agarwal
---
Changes for V2
Adds more clarity in subject and description related to this feature.
---
arch/arm/include/asm/fsl_secure_boot.h | 6 +--
board
ff-by: Aneesh Bansal
Signed-off-by: Saksham Jain
Signed-off-by: Udit Agarwal
---
arch/arm/include/asm/fsl_secure_boot.h | 6 +--
board/freescale/common/fsl_validate.c | 88 +++---
include/fsl_validate.h | 24 +-
3 files changed, 97 inserti
Moves sec_init to board_init rather than in misc_init function beacuse
PPA will be initialised in board_init function and for PPA validation
sec_init has to be done prior to PPA init.
Signed-off-by: Sumit Garg
Signed-off-by: Udit Agarwal
---
board/freescale/ls2080aqds/ls2080aqds.c | 6
Add header address for PPA to be validated during ESBC phase for LS2080A
platform based on Layescape Chasis 3.
Signed-off-by: Sumit Garg
Signed-off-by: Udit Agarwal
---
arch/arm/include/asm/fsl_secure_boot.h | 2 ++
1 file changed, 2 insertions(+)
diff --git a/arch/arm/include/asm
Add secure boot validation of MC, DPC images using
esbc_validate command.
Signed-off-by: Sumit Garg
Signed-off-by: Udit Agarwal
---
Changes for V2:
Use of #ifdef instead of #ifndef with CONFIG_SECURE_BOOT macro
and coresponding changes in mcinitcmd command.
include/configs/ls2080aqds.h | 21
Update bootscript and its hdr addresses for Layerscape Chasis 3
based platforms instead of individual SoCs.
Signed-off-by: Sumit Garg
Signed-off-by: Udit Agarwal
---
Changes for V2:
Modified the subject
arch/arm/include/asm/fsl_secure_boot.h | 12 ++--
1 file changed, 6 insertions
Update bootscript and its addresses for Layerscape Chasis 3
based platforms instead of individual SoCs.
Signed-off-by: Sumit Garg
Signed-off-by: Udit Agarwal
---
arch/arm/include/asm/fsl_secure_boot.h | 12 ++--
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/arch/arm
58 matches
Mail list logo
