]> git.baikalelectronics.ru Git - uboot.git/commit
arm: mvebu: Implement secure boot
authorMario Six <mario.six@gdsys.cc>
Wed, 11 Jan 2017 15:01:00 +0000 (16:01 +0100)
committerStefan Roese <sr@denx.de>
Wed, 1 Feb 2017 08:04:18 +0000 (09:04 +0100)
commit1cd015e4216cd4ae8406357c0dc2ead6291132fe
treee66ce37c0d31f8ce1dac414cb470e1d2037a77f9
parent4a4507ca932e77240ea25039ce388dc231a8f1a6
arm: mvebu: Implement secure boot

The patch implements secure booting for the mvebu architecture.

This includes:
- The addition of secure headers and all needed signatures and keys in
  mkimage
- Commands capable of writing the board's efuses to both write the
  needed cryptographic data and enable the secure booting mechanism
- The creation of convenience text files containing the necessary
  commands to write the efuses

The KAK and CSK keys are expected to reside in the files kwb_kak.key and
kwb_csk.key (OpenSSL 2048 bit private keys) in the top-level directory.

Signed-off-by: Reinhard Pfau <reinhard.pfau@gdsys.cc>
Signed-off-by: Mario Six <mario.six@gdsys.cc>
Reviewed-by: Stefan Roese <sr@denx.de>
Reviewed-by: Simon Glass <sjg@chromium.org>
Signed-off-by: Stefan Roese <sr@denx.de>
Makefile
arch/arm/mach-mvebu/Kconfig
arch/arm/mach-mvebu/Makefile
arch/arm/mach-mvebu/efuse.c [new file with mode: 0644]
arch/arm/mach-mvebu/include/mach/cpu.h
arch/arm/mach-mvebu/include/mach/efuse.h [new file with mode: 0644]
doc/README.armada-secureboot [new file with mode: 0644]
tools/Makefile
tools/kwbimage.c
tools/kwbimage.h