Eric Lee / smarc-uboot

14 Dec, 2018

4 commits

  • dac930e73   MLK-20553-4 doc: imx: hab: Remove extra hab directory for a cleaner documentation structure ... Browse Code »

    There is no need to have an extra hab directory under doc/imx/:

    - doc/imx/hab/ahab/
    - doc/imx/hab/habv4/

    Remove extra hab directory for a cleaner documentation structure.

    Signed-off-by: Breno Lima
    Reviewed-by: Ye Li
    (cherry picked from commit 4568f4a4c853ff9d952cfb5ec7c38c479de697d2)

    Breno Lima
     
  • cba7ec79b   MLK-20553-3 doc: imx: ahab: Add Secure Boot documentation for i.MX8 and i.MX8x SPL targets ... Browse Code »

    The current U-Boot implementation includes SPL targets for i.MX8QM and
    i.MXQXP MEK boards:

    - imx8qxp_mek_spl_defconfig
    - imx8qxp_mek_spl_fspi_defconfig
    - imx8qm_mek_spl_defconfig
    - imx8qm_mek_spl_fspi_defconfig

    The U-Boot proper and ATF are included in an additional container being
    necessary a different procedure for signing the flash.bin image.

    Add a step-by-step guide covering the signing procedure.
    Add a CSF example for the 3rd container.

    Signed-off-by: Breno Lima
    Reviewed-by: Frank Zhang
    Reviewed-by: Marius Grigoras
    Reviewed-by: Utkarsh Gupta
    (cherry picked from commit 04505024d38eebbb5f39133b502c8e450ca40215)

    Breno Lima
     
  • a83dc28de   MLK-20553-2 doc: imx: ahab: Add AHAB secure boot documentation for i.MX 8 and 8X families ... Browse Code »

    Add AHAB secure boot step-by-step guide for i.MX8 and i.MX8x families
    devices.

    Add 3 CSF example files:
    - Example to sign flash.bin only using SRK keys.
    - Example to sign flash.bin using a subordinate SGK key.
    - Example to sign Linux image only using SRK keys.

    Signed-off-by: Clement Le Marquis
    Reviewed-by: Frank Zhang
    Reviewed-by: Marius Grigoras
    Reviewed-by: Utkarsh Gupta
    (cherry picked from commit 7c46caba3b528b0399242f99612e5b094b1a4703)

    Clement Le Marquis
     
  • c9a3780ac   MLK-20553-1 doc: imx: ahab: Add AHAB introduction ... Browse Code »

    The AHAB is currently supported in i.MX8QXP and i.MX8QM devices.

    Add an introductory document containing the following topics:

    - AHAB Secure Boot Architecture
    - System Control Unit (SCU) introduction
    - Security Controller (SECO) introduction
    - i.MX8/8x secure boot flow
    - AHAB PKI tree generation
    - SRK Table and SRK Hash generation

    Signed-off-by: Breno Lima
    Reviewed-by: Frank Zhang
    Reviewed-by: Marius Grigoras
    Reviewed-by: Utkarsh Gupta
    (cherry picked from commit 6e9ceb2526bd4a45c6ff669afb086cc3a0627e6b)

    Breno Lima
     

26 Nov, 2018

2 commits

  • e3f6b0778   MLK-20270-2 doc: imx: habv4: Remove old HABv4 secure boot documentation ... Browse Code »

    The HABv4 secure boot procedure is now documented in different files:

    .
    └── habv4
    ├── csf_examples
    │   ├── additional_images
    │   │   └── csf_additional_images.txt
    │   ├── mx6_mx7
    │   │   ├── csf_uboot_fast_authentication.txt
    │   │   └── csf_uboot.txt
    │   └── mx8m_mx8mm
    │   ├── csf_fit.txt
    │   └── csf_spl.txt
    ├── guides
    │   ├── mx6_mx7_secure_boot.txt
    │   ├── mx8m_mx8mm_secure_boot.pdf
    │   └── mx8m_mx8mm_secure_boot.txt
    ├── introduction_habv4.txt
    └── script_examples
    └── genIVT.pl

    The old documentation secure_boot.txt can be removed.

    Reviewed-by: Utkarsh Gupta
    Signed-off-by: Breno Lima
    (cherry picked from commit b0300fcf732ff1e79e771c386bf083e79eacc36a)

    Breno Lima
     
  • 0b7fedc17   MLK-20270-1 doc: imx: habv4: Add Secure Boot documentation for i.MX8M and i.MX8MM devices ... Browse Code »

    Add HABv4 documentation for i.MX8M and i.MX8MM targets covering the
    following topics:

    - How to sign an securely boot an flash.bin image.
    - How to extend the root of trust for additional boot images.
    - Add 2 CSF examples.

    Reviewed-by: Utkarsh Gupta
    Signed-off-by: Breno Lima
    (cherry picked from commit cc63be298a3e5f44e417f4098c124715917d09e1)

    Breno Lima
     

03 Nov, 2018

2 commits

23 Oct, 2018

2 commits

  • 5cf826345   MLK-19970-2 doc: imx: habv4: Add Secure Boot documentation for i.MX6 and i.MX7 family devices ... Browse Code »

    Add HABv4 documentation for u-boot-dtb.imx targets covering the
    following topics:

    - How to sign an securely boot an u-boot-dtb.imx image.
    - How to extend the root of trust for additional boot images.
    - Add 3 CSF examples.
    - Add IVT generation script example.

    Reviewed-by: Ye Li
    Reviewed-by: Utkarsh Gupta
    Signed-off-by: Breno Lima

    Breno Lima
     
  • aedc4dfa0   MLK-19970-1 doc: imx: hab: Add HABv4 introduction ... Browse Code »

    The HABv4 is supported in i.MX 50, i.MX 53, i.MX 6, i.MX 7,
    series and i.MX 8M, i.MX8MM devices.

    Add an introductory document containing the following topics:

    - HABv4 Introduction
    - HABv4 Secure Boot
    - HABv4 Encrypted Boot
    - HAB PKI tree generation
    - HAB Fast Authentication PKI tree generation
    - SRK Table and SRK Hash generation

    Reviewed-by: Ye Li
    Reviewed-by: Utkarsh Gupta
    Signed-off-by: Breno Lima

    Breno Lima
     

09 Oct, 2018

8 commits

11 Mar, 2018

2 commits

  • 6d7403bf7   doc: mxc_hab: Update i.MX HAB documentation ... Browse Code »

    The README.mxc_hab is outdated and need improvements, add the following
    modifications:

    - Reorganize document and remove duplicate content
    - Add CST download link
    - Update CST package name
    - Align command lines with CST v2.3.3
    - Update U-Boot binary name
    - Remove CSF padding since is not documented in AN4581

    Signed-off-by: Breno Lima

    Breno Lima
     
  • b887f0a68   doc: mxc_hab: Move HAB related info to the appropriate doc ... Browse Code »

    Currently the High Assurance Boot procedure is documented in two
    places:

    - doc/README.imx6
    - doc/README.mxc_hab

    It is better to consolidate all HAB related information into
    README.mxc_hab file, so move the content from README.imx6 to
    README.mxc_hab.

    Signed-off-by: Breno Lima
    Reviewed-by: Fabio Estevam

    Breno Lima
     

24 Feb, 2018

1 commit

10 Feb, 2018

1 commit

  • f3b5056c4   efi_loader: split README.efi into two separate documents ... Browse Code »
    14

    README.efi describes two different concepts:
    * U-Boot exposing the UEFI API
    * U-Boot running on top of UEFI.

    This patch splits the document in two.
    Religious references are removed.

    The separation of the concepts makes sense before detailing the internals
    of U-Boot exposing the UEFI API in a future patch.

    Signed-off-by: Heinrich Schuchardt
    Signed-off-by: Alexander Graf

    Heinrich Schuchardt
     

08 Feb, 2018

1 commit

04 Feb, 2018

5 commits

  • 211a3a23b   Merge git://git.denx.de/u-boot-dm Browse Code »
    Tom Rini
     
  • 79d080295   doc: mxc_hab: Improve the config option list ... Browse Code »

    The original text is from the time that the config options were not
    converted to Kconfig.

    After the conversion to Kconfig only CONFIG_SECURE_BOOT and
    CONFIG_CMD_DEKBLOB need to be selected by the user.

    The other config options are automatically selected by the Kconfig
    logic.

    Signed-off-by: Fabio Estevam
    Reviewed-by: Breno Lima

    Fabio Estevam
     
  • 1973b381a   log: add category LOGC_EFI ... Browse Code »
    14

    The EFI implementation does not fit into any of the existing categories.

    Provide LOGC_EFI so that EFI related message can be filtered.

    Signed-off-by: Heinrich Schuchardt
    Reviewed-by: Simon Glass

    Heinrich Schuchardt
     
  • 3707c6ee0   log: Add a way to log error-return values ... Browse Code »

    When functions return an error it propagates up the stack to the point
    where it is reported. Often the error code provides enough information
    about the root cause of the error that this is obvious what went wrong.

    However in some cases the error may be hard to trace. For example if a
    driver uses several devices to perform an operation, it may not be
    obvious which one failed.

    Add a log_ret() macro to help with this. This can be used to wrap any
    error-return value. The logging system will then output a log record when
    the original error is generated, making it easy to trace the call stack
    of the error.

    This macro can significantly impact code size, so its use is controlled
    by a Kconfig option, which is enabled for sandbox.

    Signed-off-by: Simon Glass

    Simon Glass
     
  • 8cb7c0424   log: Add documentation for commands and formatting ... Browse Code »

    Add some notes about recent new features.

    Signed-off-by: Simon Glass

    Simon Glass
     

31 Jan, 2018

1 commit

30 Jan, 2018

1 commit

29 Jan, 2018

1 commit

26 Jan, 2018

1 commit

24 Jan, 2018

2 commits

23 Jan, 2018

1 commit

20 Jan, 2018

2 commits

  • e6e5ecc5e   m68k: Drop unreferenced CONFIG_* defines ... Browse Code »

    The following config symbols are only defined once and never referenced
    anywhere else:

    CONFIG_AMCORE
    CONFIG_ASTRO5373L
    CONFIG_M52277EVB
    CONFIG_M5253DEMO
    CONFIG_M5253EVBE
    CONFIG_M5275EVB
    CONFIG_M54418TWR
    CONFIG_STMARK2

    Most of them are config symbols named after the respective boards which
    seems to have been a standard practice at some point.

    Signed-off-by: Tuomas Tynkkynen

    Tuomas Tynkkynen
     
  • e7ba41c65   ARM: Document AArch64 version of qemu-arm ... Browse Code »

    It's mostly obvious, except that QEMU is annoying and requires an
    explicit '-cpu cortex-a57' (or some other 64-bit core) to actually run
    in 64-bit mode.

    While at it, remove the references to setting the ARCH environment
    variable; that is not used in U-Boot.

    Signed-off-by: Tuomas Tynkkynen
    Reviewed-by: Tom Rini

    Tuomas Tynkkynen
     

16 Jan, 2018

3 commits