26 Nov, 2018
2 commits
-
The HABv4 secure boot procedure is now documented in different files:
.
└── habv4
├── csf_examples
│ ├── additional_images
│ │ └── csf_additional_images.txt
│ ├── mx6_mx7
│ │ ├── csf_uboot_fast_authentication.txt
│ │ └── csf_uboot.txt
│ └── mx8m_mx8mm
│ ├── csf_fit.txt
│ └── csf_spl.txt
├── guides
│ ├── mx6_mx7_secure_boot.txt
│ ├── mx8m_mx8mm_secure_boot.pdf
│ └── mx8m_mx8mm_secure_boot.txt
├── introduction_habv4.txt
└── script_examples
└── genIVT.plThe old documentation secure_boot.txt can be removed.
Reviewed-by: Utkarsh Gupta
Signed-off-by: Breno Lima
(cherry picked from commit b0300fcf732ff1e79e771c386bf083e79eacc36a) -
Add HABv4 documentation for i.MX8M and i.MX8MM targets covering the
following topics:- How to sign an securely boot an flash.bin image.
- How to extend the root of trust for additional boot images.
- Add 2 CSF examples.Reviewed-by: Utkarsh Gupta
Signed-off-by: Breno Lima
(cherry picked from commit cc63be298a3e5f44e417f4098c124715917d09e1)
03 Nov, 2018
2 commits
-
Signed-off-by: Clement Le Marquis
-
Add useful documentation for encrypted boot:
- Add 2 CSF examples for encrypt and sign
- How to encrypt and sign a U-Boot binary on closed device
- Why and how increase the PRIBLOB bitfield from CAAM SCFGRSigned-off-by: Clement Le Marquis
23 Oct, 2018
2 commits
-
Add HABv4 documentation for u-boot-dtb.imx targets covering the
following topics:- How to sign an securely boot an u-boot-dtb.imx image.
- How to extend the root of trust for additional boot images.
- Add 3 CSF examples.
- Add IVT generation script example.Reviewed-by: Ye Li
Reviewed-by: Utkarsh Gupta
Signed-off-by: Breno Lima -
The HABv4 is supported in i.MX 50, i.MX 53, i.MX 6, i.MX 7,
series and i.MX 8M, i.MX8MM devices.Add an introductory document containing the following topics:
- HABv4 Introduction
- HABv4 Secure Boot
- HABv4 Encrypted Boot
- HAB PKI tree generation
- HAB Fast Authentication PKI tree generation
- SRK Table and SRK Hash generationReviewed-by: Ye Li
Reviewed-by: Utkarsh Gupta
Signed-off-by: Breno Lima
09 Oct, 2018
7 commits
-
There is no need to have README in all i.MX documents name.
Remove README from i.MX docs name and add .txt file extension.Signed-off-by: Breno Lima
Reviewed-by: Ye Li -
The Serial Download Protocol feature is availible in various
i.MX SoCs.Move README.sdp document to imx/misc directory.
Signed-off-by: Breno Lima
-
The current High Assurance Boot document README.mxc_hab
include details for the following features in a single file:- HAB Secure Boot
- HAB Encrypted BootSplit HAB documentation in a specific directory for a cleaner
documentation structure, subsequent patches will include more
content in HAB documentation.Signed-off-by: Breno Lima
-
The following documents describe device details according to the
i.MX family:- README.imx25
- README.imx27
- README.imx5
- README.imx6
- README.mxsMove all device common related document to doc/imx/common for a better
directory structure.Signed-off-by: Breno Lima
-
The following documents describe the image type used by the mkimage
tool to generate U-Boot images for i.MX devices.- README.imximage
- README.mxsimageMove all mkimage related document to doc/imx/mkimage for a better
directory structure.Signed-off-by: Breno Lima
-
Currently the Serial Download Protocol tools and procedure are
documented in two places:- doc/imx/README.sdp
- doc/imx/README.imx6It is better to consolidate all SDP related information into
README.sdp file, so move the content from README.imx6 to
README.sdp.Signed-off-by: Breno Lima
-
Currently the U-Boot doc/ directory contains the following files
that are only relevant for i.MX devices:- doc/README.imx25
- doc/README.imx27
- doc/README.imx5
- doc/README.imx6
- doc/README.imximage
- doc/README.mxc_hab
- doc/README.mxs
- doc/README.mxsimage
- doc/README.sdpMove all content to a common i.MX folder for a better documentation
structure.Signed-off-by: Breno Lima