]> git.baikalelectronics.ru Git - arm-tf.git/commit
Adds option to read ROTPK from registers for FVP
authorMax Shvetsov <maksims.svecovs@arm.com>
Fri, 6 Dec 2019 11:50:12 +0000 (11:50 +0000)
committerMax Shvetsov <maksims.svecovs@arm.com>
Thu, 6 Feb 2020 16:58:53 +0000 (16:58 +0000)
commita6ffddec33be0f10382f0f66eacafb03492c8141
tree58844277fc7eda472f717875f7ced41beb9a8938
parent235c8174ffe55bfc1108c02e0b41ca9916428f21
Adds option to read ROTPK from registers for FVP

Enables usage of ARM_ROTPK_LOCATION=regs for FVP board.
Removes hard-coded developer keys. Instead, setting
ARM_ROTPK_LOCATION=devel_* takes keys from default directory.
In case of ROT_KEY specified - generates a new hash and replaces the
original.

Note: Juno board was tested by original feature author and was not tested
for this patch since we don't have access to the private key. Juno
implementation was moved to board-specific file without changing
functionality. It is not known whether byte-swapping is still needed
for this platform.

Change-Id: I0fdbaca0415cdcd78f3a388551c2e478c01ed986
Signed-off-by: Max Shvetsov <maksims.svecovs@arm.com>
20 files changed:
docs/design/trusted-board-boot-build.rst
docs/getting_started/build-options.rst
docs/plat/arm/arm-build-options.rst
include/plat/arm/common/arm_def.h
include/plat/arm/common/plat_arm.h
plat/arm/board/common/board_arm_trusted_boot.c
plat/arm/board/common/board_common.mk
plat/arm/board/common/rotpk/arm_dev_rotpk.S [new file with mode: 0644]
plat/arm/board/fvp/fvp_trusted_boot.c
plat/arm/board/fvp/platform.mk
plat/arm/board/juno/juno_trusted_boot.c [new file with mode: 0644]
plat/arm/board/juno/platform.mk
plat/arm/board/rde1edge/platform.mk
plat/arm/board/rde1edge/rde1edge_trusted_boot.c [new file with mode: 0644]
plat/arm/board/rdn1edge/platform.mk
plat/arm/board/rdn1edge/rdn1edge_trusted_boot.c [new file with mode: 0644]
plat/arm/board/sgi575/platform.mk
plat/arm/board/sgi575/sgi575_trusted_boot.c [new file with mode: 0644]
plat/arm/board/sgm775/platform.mk
plat/arm/board/sgm775/sgm775_trusted_boot.c [new file with mode: 0644]