23 Oct, 2018

2 commits

  • The HABv4 is supported in i.MX 50, i.MX 53, i.MX 6, i.MX 7,
    series and i.MX 8M, i.MX8MM devices.

    Add an introductory document containing the following topics:

    - HABv4 Introduction
    - HABv4 Secure Boot
    - HABv4 Encrypted Boot
    - HAB PKI tree generation
    - HAB Fast Authentication PKI tree generation
    - SRK Table and SRK Hash generation

    Reviewed-by: Ye Li
    Reviewed-by: Utkarsh Gupta
    Signed-off-by: Breno Lima

    Breno Lima
     
  • It is highly recommended to set the PRIBLOB bitfield to 0x3 once your
    encrypted boot image has booted up, this prevents the generation of new
    blobs that can be used to decrypt an encrypted boot image. The PRIBLOB is
    a sticky type bit and cannot be changed until the next power on reset.

    Add the set_priblob_bitfield U-Boot command to prevent the generation of
    new blobs.

    Signed-off-by: Clement Le Marquis
    Acked-by: Ye Li

    Clement Le Marquis
     

18 Oct, 2018

3 commits


17 Oct, 2018

2 commits


16 Oct, 2018

4 commits

  • Add support for FIT image loading of ATF and uboot proper for iMX8QXP mek.

    Signed-off-by: Abel Vesa

    Abel Vesa
     
  • Add support for FIT image loading of ATF and uboot proper for iMX8QM mek.

    Signed-off-by: Abel Vesa

    Abel Vesa
     
  • If SPL is built with CONFIG_SPL_LOAD_FIT make the checking for
    FIT image. If there is no FIT image go with the raw default mode.

    Signed-off-by: Abel Vesa

    Abel Vesa
     
  • Since commit 8891410c729b ("MLK-19848 mx6dq: Fix chip version issue for
    rev1.3") it's not possible to call the HAB API functions on i.MX6DQ
    SoC Rev 1.3:

    Authenticate image from DDR location 0x12000000...
    undefined instruction
    pc : [] lr : []
    reloc pc : [] lr : []
    sp : 8ef444a8 ip : 126e8068 fp : 8ff59aa8
    r10: 8ffd51e4 r9 : 8ef50eb0 r8 : 006e8000
    r7 : 00000000 r6 : 126ea01f r5 : 0000002b r4 : 126e8000
    r3 : 412c00dd r2 : 00000001 r1 : 00000001 r0 : 00000063
    Flags: nzCv IRQs off FIQs off Mode SVC_32
    Resetting CPU ...

    resetting ...

    The hab.h code is defining the HAB API base address according to the
    old SoC revision number, thus failing when calling the HAB API
    authenticate_image() function.

    Fix this issue by using mx6dq rev 1.3 instead of mx6dq rev 1.5.

    Signed-off-by: Breno Lima
    Reviewed-by: Ye Li

    Breno Lima
     

12 Oct, 2018

8 commits


11 Oct, 2018

2 commits


10 Oct, 2018

4 commits


09 Oct, 2018

11 commits


08 Oct, 2018

1 commit

  • Serial init in board_init_f will cost much time, skip it here
    because the serial will be initialized again in board_init_r
    and it's more faster (after cache is enabled). We will miss
    some logs before the serial is ready but it's ok for Android Auto.
    This commit will save about 190ms on imx8qm.

    Test: boot ok for both imx8qm and imx8qxp.

    Change-Id: If6efdc19794aecda862f22b6fec7f7aba2005766
    Signed-off-by: Ji Luo
    Reviewed-by: Ye Li

    Ji Luo
     

01 Oct, 2018

3 commits