Blame view
include/config_fsl_chain_trust.h
2.82 KB
83d290c56 SPDX: Convert all... |
1 |
/* SPDX-License-Identifier: GPL-2.0+ */ |
98cb0efde Add bootscript su... |
2 3 |
/* * Copyright 2015 Freescale Semiconductor, Inc. |
98cb0efde Add bootscript su... |
4 |
*/ |
bdc22074c secure_boot: spli... |
5 6 |
#ifndef __CONFIG_FSL_CHAIN_TRUST_H #define __CONFIG_FSL_CHAIN_TRUST_H |
98cb0efde Add bootscript su... |
7 |
|
bdc22074c secure_boot: spli... |
8 |
#ifdef CONFIG_CHAIN_OF_TRUST |
98cb0efde Add bootscript su... |
9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 |
#ifndef CONFIG_EXTRA_ENV #define CONFIG_EXTRA_ENV "" #endif /* * Control should not reach back to uboot after validation of images * for secure boot flow and therefore bootscript should have * the bootm command. If control reaches back to uboot anyhow * after validating images, core should just spin. */ /* * Define the key hash for boot script here if public/private key pair used to * sign bootscript are different from the SRK hash put in the fuse * Example of defining KEY_HASH is * #define CONFIG_BOOTSCRIPT_KEY_HASH \ * "41066b564c6ffcef40ccbc1e0a5d0d519604000c785d97bbefd25e4d288d1c8b" */ |
5abc1a452 common: Move CONF... |
27 |
#ifdef CONFIG_USE_BOOTARGS |
2bfe48908 SECURE_BOOT: Use ... |
28 29 30 31 32 |
#define CONFIG_SET_BOOTARGS "setenv bootargs \'" CONFIG_BOOTARGS" \';" #else #define CONFIG_SET_BOOTARGS "setenv bootargs \'root=/dev/ram " \ "rw console=ttyS0,115200 ramdisk_size=600000\';" #endif |
98cb0efde Add bootscript su... |
33 34 35 |
#ifdef CONFIG_BOOTSCRIPT_KEY_HASH #define CONFIG_SECBOOT \ "setenv bs_hdraddr " __stringify(CONFIG_BOOTSCRIPT_HDR_ADDR)";" \ |
2bfe48908 SECURE_BOOT: Use ... |
36 |
CONFIG_SET_BOOTARGS \ |
98cb0efde Add bootscript su... |
37 38 39 40 41 42 43 44 |
CONFIG_EXTRA_ENV \ "esbc_validate $bs_hdraddr " \ __stringify(CONFIG_BOOTSCRIPT_KEY_HASH)";" \ "source $img_addr;" \ "esbc_halt\0" #else #define CONFIG_SECBOOT \ "setenv bs_hdraddr " __stringify(CONFIG_BOOTSCRIPT_HDR_ADDR)";" \ |
2bfe48908 SECURE_BOOT: Use ... |
45 |
CONFIG_SET_BOOTARGS \ |
98cb0efde Add bootscript su... |
46 47 48 49 50 |
CONFIG_EXTRA_ENV \ "esbc_validate $bs_hdraddr;" \ "source $img_addr;" \ "esbc_halt\0" #endif |
5050f6f0e powerpc/mpc85xx: ... |
51 52 53 |
#ifdef CONFIG_BOOTSCRIPT_COPY_RAM #define CONFIG_BS_COPY_ENV \ "setenv bs_hdr_ram " __stringify(CONFIG_BS_HDR_ADDR_RAM)";" \ |
69d4b48c8 SECURE_BOOT: Enab... |
54 |
"setenv bs_hdr_device " __stringify(CONFIG_BS_HDR_ADDR_DEVICE)";" \ |
5050f6f0e powerpc/mpc85xx: ... |
55 56 |
"setenv bs_hdr_size " __stringify(CONFIG_BS_HDR_SIZE)";" \ "setenv bs_ram " __stringify(CONFIG_BS_ADDR_RAM)";" \ |
69d4b48c8 SECURE_BOOT: Enab... |
57 |
"setenv bs_device " __stringify(CONFIG_BS_ADDR_DEVICE)";" \ |
5050f6f0e powerpc/mpc85xx: ... |
58 |
"setenv bs_size " __stringify(CONFIG_BS_SIZE)";" |
3f701cc50 armv8: fsl-lsch3:... |
59 |
/* For secure boot flow, default environment used will be used */ |
762f92a60 arm: ls1043ardb: ... |
60 61 62 |
#if defined(CONFIG_SYS_RAMBOOT) || defined(CONFIG_NAND_BOOT) || \ defined(CONFIG_SD_BOOT) #if defined(CONFIG_RAMBOOT_NAND) || defined(CONFIG_NAND_BOOT) |
5050f6f0e powerpc/mpc85xx: ... |
63 |
#define CONFIG_BS_COPY_CMD \ |
69d4b48c8 SECURE_BOOT: Enab... |
64 65 |
"nand read $bs_hdr_ram $bs_hdr_device $bs_hdr_size ;" \ "nand read $bs_ram $bs_device $bs_size ;" |
69d4b48c8 SECURE_BOOT: Enab... |
66 67 68 69 |
#elif defined(CONFIG_SD_BOOT) #define CONFIG_BS_COPY_CMD \ "mmc read $bs_hdr_ram $bs_hdr_device $bs_hdr_size ;" \ "mmc read $bs_ram $bs_device $bs_size ;" |
762f92a60 arm: ls1043ardb: ... |
70 71 |
#endif #else |
3f701cc50 armv8: fsl-lsch3:... |
72 |
#define CONFIG_BS_COPY_CMD \ |
69d4b48c8 SECURE_BOOT: Enab... |
73 74 |
"cp.b $bs_hdr_device $bs_hdr_ram $bs_hdr_size ;" \ "cp.b $bs_device $bs_ram $bs_size ;" |
98cb0efde Add bootscript su... |
75 |
#endif |
3f701cc50 armv8: fsl-lsch3:... |
76 |
#endif /* CONFIG_BOOTSCRIPT_COPY_RAM */ |
98cb0efde Add bootscript su... |
77 |
|
5050f6f0e powerpc/mpc85xx: ... |
78 79 80 81 82 83 84 |
#ifndef CONFIG_BS_COPY_ENV #define CONFIG_BS_COPY_ENV #endif #ifndef CONFIG_BS_COPY_CMD #define CONFIG_BS_COPY_CMD #endif |
bdc22074c secure_boot: spli... |
85 |
#define CONFIG_CHAIN_BOOT_CMD CONFIG_BS_COPY_ENV \ |
5050f6f0e powerpc/mpc85xx: ... |
86 87 |
CONFIG_BS_COPY_CMD \ CONFIG_SECBOOT |
98cb0efde Add bootscript su... |
88 89 90 |
#endif #endif |