26 Nov, 2018

2 commits

  • The HABv4 secure boot procedure is now documented in different files:

    .
    └── habv4
    ├── csf_examples
    │   ├── additional_images
    │   │   └── csf_additional_images.txt
    │   ├── mx6_mx7
    │   │   ├── csf_uboot_fast_authentication.txt
    │   │   └── csf_uboot.txt
    │   └── mx8m_mx8mm
    │   ├── csf_fit.txt
    │   └── csf_spl.txt
    ├── guides
    │   ├── mx6_mx7_secure_boot.txt
    │   ├── mx8m_mx8mm_secure_boot.pdf
    │   └── mx8m_mx8mm_secure_boot.txt
    ├── introduction_habv4.txt
    └── script_examples
    └── genIVT.pl

    The old documentation secure_boot.txt can be removed.

    Reviewed-by: Utkarsh Gupta
    Signed-off-by: Breno Lima
    (cherry picked from commit b0300fcf732ff1e79e771c386bf083e79eacc36a)

    Breno Lima
     
  • Add HABv4 documentation for i.MX8M and i.MX8MM targets covering the
    following topics:

    - How to sign an securely boot an flash.bin image.
    - How to extend the root of trust for additional boot images.
    - Add 2 CSF examples.

    Reviewed-by: Utkarsh Gupta
    Signed-off-by: Breno Lima
    (cherry picked from commit cc63be298a3e5f44e417f4098c124715917d09e1)

    Breno Lima
     

03 Nov, 2018

2 commits


23 Oct, 2018

2 commits

  • Add HABv4 documentation for u-boot-dtb.imx targets covering the
    following topics:

    - How to sign an securely boot an u-boot-dtb.imx image.
    - How to extend the root of trust for additional boot images.
    - Add 3 CSF examples.
    - Add IVT generation script example.

    Reviewed-by: Ye Li
    Reviewed-by: Utkarsh Gupta
    Signed-off-by: Breno Lima

    Breno Lima
     
  • The HABv4 is supported in i.MX 50, i.MX 53, i.MX 6, i.MX 7,
    series and i.MX 8M, i.MX8MM devices.

    Add an introductory document containing the following topics:

    - HABv4 Introduction
    - HABv4 Secure Boot
    - HABv4 Encrypted Boot
    - HAB PKI tree generation
    - HAB Fast Authentication PKI tree generation
    - SRK Table and SRK Hash generation

    Reviewed-by: Ye Li
    Reviewed-by: Utkarsh Gupta
    Signed-off-by: Breno Lima

    Breno Lima
     

09 Oct, 2018

8 commits


11 Mar, 2018

2 commits

  • The README.mxc_hab is outdated and need improvements, add the following
    modifications:

    - Reorganize document and remove duplicate content
    - Add CST download link
    - Update CST package name
    - Align command lines with CST v2.3.3
    - Update U-Boot binary name
    - Remove CSF padding since is not documented in AN4581

    Signed-off-by: Breno Lima

    Breno Lima
     
  • Currently the High Assurance Boot procedure is documented in two
    places:

    - doc/README.imx6
    - doc/README.mxc_hab

    It is better to consolidate all HAB related information into
    README.mxc_hab file, so move the content from README.imx6 to
    README.mxc_hab.

    Signed-off-by: Breno Lima
    Reviewed-by: Fabio Estevam

    Breno Lima
     

24 Feb, 2018

1 commit


10 Feb, 2018

1 commit

  • README.efi describes two different concepts:
    * U-Boot exposing the UEFI API
    * U-Boot running on top of UEFI.

    This patch splits the document in two.
    Religious references are removed.

    The separation of the concepts makes sense before detailing the internals
    of U-Boot exposing the UEFI API in a future patch.

    Signed-off-by: Heinrich Schuchardt
    Signed-off-by: Alexander Graf

    Heinrich Schuchardt
     

08 Feb, 2018

1 commit


04 Feb, 2018

5 commits

  • Tom Rini
     
  • The original text is from the time that the config options were not
    converted to Kconfig.

    After the conversion to Kconfig only CONFIG_SECURE_BOOT and
    CONFIG_CMD_DEKBLOB need to be selected by the user.

    The other config options are automatically selected by the Kconfig
    logic.

    Signed-off-by: Fabio Estevam
    Reviewed-by: Breno Lima

    Fabio Estevam
     
  • The EFI implementation does not fit into any of the existing categories.

    Provide LOGC_EFI so that EFI related message can be filtered.

    Signed-off-by: Heinrich Schuchardt
    Reviewed-by: Simon Glass

    Heinrich Schuchardt
     
  • When functions return an error it propagates up the stack to the point
    where it is reported. Often the error code provides enough information
    about the root cause of the error that this is obvious what went wrong.

    However in some cases the error may be hard to trace. For example if a
    driver uses several devices to perform an operation, it may not be
    obvious which one failed.

    Add a log_ret() macro to help with this. This can be used to wrap any
    error-return value. The logging system will then output a log record when
    the original error is generated, making it easy to trace the call stack
    of the error.

    This macro can significantly impact code size, so its use is controlled
    by a Kconfig option, which is enabled for sandbox.

    Signed-off-by: Simon Glass

    Simon Glass
     
  • Add some notes about recent new features.

    Signed-off-by: Simon Glass

    Simon Glass
     

31 Jan, 2018

1 commit


30 Jan, 2018

1 commit


29 Jan, 2018

1 commit


26 Jan, 2018

1 commit


24 Jan, 2018

2 commits


23 Jan, 2018

1 commit


20 Jan, 2018

2 commits

  • The following config symbols are only defined once and never referenced
    anywhere else:

    CONFIG_AMCORE
    CONFIG_ASTRO5373L
    CONFIG_M52277EVB
    CONFIG_M5253DEMO
    CONFIG_M5253EVBE
    CONFIG_M5275EVB
    CONFIG_M54418TWR
    CONFIG_STMARK2

    Most of them are config symbols named after the respective boards which
    seems to have been a standard practice at some point.

    Signed-off-by: Tuomas Tynkkynen

    Tuomas Tynkkynen
     
  • It's mostly obvious, except that QEMU is annoying and requires an
    explicit '-cpu cortex-a57' (or some other 64-bit core) to actually run
    in 64-bit mode.

    While at it, remove the references to setting the ARCH environment
    variable; that is not used in U-Boot.

    Signed-off-by: Tuomas Tynkkynen
    Reviewed-by: Tom Rini

    Tuomas Tynkkynen
     

16 Jan, 2018

3 commits


12 Jan, 2018

1 commit


10 Jan, 2018

2 commits


15 Dec, 2017

1 commit