]> git.baikalelectronics.ru Git - uboot.git/commit
binman: ti-secure: Add support for TI signing
authorNeha Malcom Francis <n-francis@ti.com>
Fri, 21 Jul 2023 18:44:25 +0000 (00:14 +0530)
committerTom Rini <trini@konsulko.com>
Fri, 21 Jul 2023 23:36:58 +0000 (19:36 -0400)
commit78bb5a447546f84182ca4300ae0576a734be58f3
tree06ffa14eb4423215f11b4e59b2bd426379be98a8
parent22b4ea2d365e4dea99ec5928335dbb91222eb7e4
binman: ti-secure: Add support for TI signing

The ti-secure entry contains certificate for binaries that will be
loaded or booted by system firmware whereas the ti-secure-rom entry
contains certificate for binaries that will be booted by ROM. Support
for both these types of certificates is necessary for booting of K3
devices.

Reviewed-by: Simon Glass <sjg@chromium.org>
[vigneshr@ti.com: fixed inconsist cert generation by multiple packing]
Signed-off-by: Vignesh Raghavendra <vigneshr@ti.com>
Signed-off-by: Neha Malcom Francis <n-francis@ti.com>
13 files changed:
board/ti/keys/custMpk.pem [new file with mode: 0644]
board/ti/keys/ti-degenerate-key.pem [new file with mode: 0644]
tools/binman/btool/openssl.py
tools/binman/entries.rst
tools/binman/etype/ti_secure.py [new file with mode: 0644]
tools/binman/etype/ti_secure_rom.py [new file with mode: 0644]
tools/binman/etype/x509_cert.py
tools/binman/ftest.py
tools/binman/test/279_ti_secure.dts [new file with mode: 0644]
tools/binman/test/280_ti_secure_rom.dts [new file with mode: 0644]
tools/binman/test/281_ti_secure_rom_combined.dts [new file with mode: 0644]
tools/binman/test/288_ti_secure_rom_a.dts [new file with mode: 0644]
tools/binman/test/289_ti_secure_rom_b.dts [new file with mode: 0644]