25 Oct, 2019

2 commits


24 Oct, 2019

1 commit


17 Oct, 2019

1 commit


16 Oct, 2019

2 commits

  • imx8mq/imx8mn has very limited ocram/tcm size, oversized spl image
    will cause build break or boot hang, remove more unnecessary configs
    fot imx8mq/imx8mn to reduce the spl size.

    Test: boot.

    Change-Id: Ib27eeedf892227f83eaaa7601ba1706a8010a860
    Signed-off-by: Ji Luo

    Ji Luo
     
  • Add commands to read oem device unlock state from
    trusty avb app. Use the oem device unlock state to
    determine if the device can be unlocked instead of
    the state in persistdata part.

    Test: Read oem device unlock state from avb app.

    Change-Id: Ifccaa788ba0f681c2b3a47151c8474e8da5a2559
    Signed-off-by: Ji Luo

    Ji Luo
     

15 Oct, 2019

2 commits


11 Oct, 2019

2 commits


30 Sep, 2019

1 commit


29 Sep, 2019

2 commits


24 Sep, 2019

1 commit

  • "CONFIG_IMX_TRUSTY_OS=y" is added to the corresponding defconfig files
    to include trusty related code.

    MACROs are added in corresponding header files. standard android uboot
    has more content than android auto uboot, the uboot malloc pool size is
    changed from 76MB to 90MB to make the boot process can be handed over to
    kernel without malloc problem.

    Change-Id: I5072c20aa28fb1da93e889bb920955d2f1cfbefd
    Signed-off-by: faqiang.zhu

    faqiang.zhu
     

19 Sep, 2019

1 commit


20 Aug, 2019

2 commits

  • Decrypt and verify the secure credential in keymaster TA, unlock
    operation can only be allowed after secure credential verify pass.

    Since the mppubk can only be generated on hab closed imx8q, so secure
    unlock feature can only supported when hab is closed.

    Test: secure unlock credential verify on hab closed imx8mm_evk.

    Change-Id: I1ab5e24df28d1e75ff853de3adf29f34da1d0a71
    Signed-off-by: Ji Luo

    Ji Luo
     
  • Add commands to support extract serial number from device.
    Commands:
    $ fastboot oem get-serial-number
    $ fastboot get_staged

    Test: serial number upload on imx8mm.

    Change-Id: I5c905ab797d4fd28d76c8403914f191eaf2ef687
    Signed-off-by: Ji Luo

    Ji Luo
     

09 Aug, 2019

8 commits


01 Aug, 2019

2 commits


31 Jul, 2019

3 commits

  • The iMX8DXL phantom chip is 15x15 iMX8QXP, so we will use 8QXP as SOC,
    add configs and codes for the new board.

    Signed-off-by: Ye Li

    Ye Li
     
  • For imx8mm/8mn, the CONFIG_CI_UDC is defined in
    include/configs/imx8m*.h, which leads to CONFIG_CI_UDC can not been
    enabled in Kconfig, and CONFIG_DM_USB_GADGET which we need selected by
    CONFIG_CI_UDC in Kconfig also can not work. So move CONFIG_CI_UDC to
    defconfig files.

    The CONFIG_USB_GADGET_DUALSPEED is selected by CONFIG_CI_UDC in Kconfig
    files too, so we don't need it to be defined in include/configs/imx8m*.h
    files.

    Signed-off-by: Sherry Sun
    Reviewed-by: Ye Li

    Sherry Sun
     
  • Convert the ci_udc driver to driver model by using the uclass
    UCLASS_USB_GADGET_GENERIC. The clk and power of USB controller and USB
    PHY both are initialized by parsing the device tree nodes.

    If CONFIG_DM_USB_GADGET is defined, we use the ci_udc driver in DM way,
    if it does not defined, we can use ci_udc driver in its original Non-DM
    way.

    Move some USB PHY register definitions from ehci-mx6.c to
    asm/mach-imx/regs-usbphy.h in order to share with DM usb gadget driver.

    Signed-off-by: Sherry Sun
    Reviewed-by: Ye Li

    Sherry Sun
     

30 Jul, 2019

1 commit

  • There is an divider on imx8mn will always divide 2 to flexspi root clock.
    So actual SCLK output to device is 50Mhz on imx8mn not 100Mhz.

    After changing the root clock setting to configure SCLK to 100Mhz, found
    the read data is not correct. Must enable the internal DQS pad loopback
    to fix the problem.

    Signed-off-by: Ye Li
    Reviewed-by: Peng Fan
    (cherry picked from commit 9ff3ae4f9ebbb81bd42d81729cec4525c6e9b33e)

    Ye Li
     

26 Jul, 2019

2 commits


25 Jul, 2019

7 commits

  • MMC device id remap function "board_mmc_get_env_dev()" was
    removed in u-boot v2019 because we add the mmc device aliases
    in dts file. But we still need to remap the mmc device id in
    spl or read/write rpmb keyslot package will fail.

    This patch adds mmc device id remap function in spl to get the
    correct device id.

    Test: boot on imx8mm with trusty enabled.

    Change-Id: I41c46494326d9eb2658d2cda692968fb895d0292
    Signed-off-by: Ji Luo

    Ji Luo
     
  • The A/B slot selection is moved to spl, it may lead to hang
    if no bootable slots found. The only way to recover the board
    is re-flash images with uuu tool, which is quite inconvenient
    for some customers who can't enter serial download mode.

    This patch will set "spl recovery mode" which will give us a
    chance to re-flash images with fastboot commands.

    Test: Enter spl recovery mode and flash images when no bootable
    slots found.

    Change-Id: I31278f5212bde7609fe2f49e77b3849e92c0c516
    Signed-off-by: Ji Luo

    Ji Luo
     
  • It can be dangerous to export some hwcrypto commands to Linux,
    add commands to limit some commands within bootloader.

    Test: hwcrypto commands can't be used after locking boot state.

    Change-Id: Ib0a96a87f661778c133178840d8dccf49f151c22
    Signed-off-by: Ji Luo

    Ji Luo
     
  • Add new command to generate bkek from trusty.

    Test: generate and dump bkek.

    Change-Id: I6b2a30b87c755eecd00ced7c53cfb86e432040de
    Signed-off-by: Ji Luo

    Ji Luo
     
  • Add sha256 hmac support in u-boot.

    Test: hmac calculation.

    Change-Id: I0f1438fed8290620a1bb0663d19c21e20098eb5a
    Signed-off-by: Ji Luo

    Ji Luo
     
  • In host end, need encrypt the attestation keys and certs
    by manufacture protection public key though AES-128-ECB.
    Then use below 4 set of commands to provision encrypted
    RSA attestation and EC attestation:
    * $fastboot stage atte_rsa_key.bin
    * $fastboot oem set-rsa-atte-key-enc
    * $fastboot stage atte_rsa_cert.bin
    * $fastboot oem append-rsa-atte-cert-enc
    * $fastboot stage atte_ec_key.bin
    * $fastboot oem set-ec-atte-key-enc
    * $fastboot stage atte_ec_cert.bin
    * $fastboot oem append-ec-atte-cert-enc

    Change-Id: I8a7c64004a17f7dde89f28c3123a2e2b1a6d3346
    Signed-off-by: Haoran.Wang

    Haoran.Wang
     
  • Add new keymaster commands to get Manufacure Production key (mppubk).
    Since the mppubk can only be generated in OEM CLOSED imx8q board, so
    we can only use this command when the board is HAB/AHAB closed.

    Commands to extract the mppubk:
    * $fastboot oem get-mppubk
    * $fastboot get_staged mppubk.bin

    Test: Generate and dump the mppubk.bin

    Change-Id: Idc59e78ca6345497e744162664b8293f50d1eda4
    Signed-off-by: Ji Luo

    Ji Luo