]> git.baikalelectronics.ru Git - arm-tf.git/commit
tbbr/dualroot: Add fw_config image in chain of trust
authorLouis Mayencourt <louis.mayencourt@arm.com>
Thu, 11 Jun 2020 20:15:15 +0000 (21:15 +0100)
committerManish V Badarkhe <Manish.Badarkhe@arm.com>
Wed, 24 Jun 2020 07:44:26 +0000 (08:44 +0100)
commit243875eaf9df591aec14c20075c70cb5af7dd9e9
tree27078b2290a74d0bf1dc91eede38bd5d8f56592e
parent9b3ca9b120b2bd4ea15114872aba06229422770e
tbbr/dualroot: Add fw_config image in chain of trust

fw_config image is authenticated using secure boot framework by
adding it into the single root and dual root chain of trust.

The COT for fw_config image looks as below:

+------------------+       +-------------------+
| ROTPK/ROTPK Hash |------>| Trusted Boot fw   |
+------------------+       | Certificate       |
                           | (Auth Image)      |
                          /+-------------------+
                         /                   |
                        /                    |
                       /                     |
                      /                      |
                     L                       v
+------------------+       +-------------------+
| fw_config hash   |------>| fw_config         |
|                  |       | (Data Image)      |
+------------------+       +-------------------+

Signed-off-by: Louis Mayencourt <louis.mayencourt@arm.com>
Signed-off-by: Manish V Badarkhe <Manish.Badarkhe@arm.com>
Change-Id: I08fc8ee95c29a95bb140c807dd06e772474c7367
drivers/auth/dualroot/cot.c
drivers/auth/tbbr/tbbr_cot_bl1.c
drivers/auth/tbbr/tbbr_cot_common.c
include/drivers/auth/tbbr_cot_common.h
include/export/common/tbbr/tbbr_img_def_exp.h
plat/arm/common/fconf/arm_fconf_io.c