[U-Boot] [PATCH 0/8] Secure boot improvements and test on Beaglebone Black

Simon Glass sjg at chromium.org
Wed Oct 2 16:44:40 CEST 2013


This series adds a few improvements to the image signing feature to
make it easier to use on the Beaglebone Black.

- Add a DEV_TREE_BIN option to make it easier to include the correct FDT
(with embedded public keys) into the U-Boot image
- Enable cache for more TI boards (to speed things up)
- Increase malloc size
- Enable CONFIG_OF_CONTROL, FIT and secure boot on am33xx/omap
    (RFC only, not sure we want this, although we could create a separate
     config for it)

I also have a change to adjust mkimage to automatically make space in the
FDT when adding hashes and signatures. Included here is the ENOSPC patch,
but the fit_image.c patch will wait until the dumpimage tool is merged,
since I am changing the same code.

With this, secure boot was tested successfully on Beaglebone Black.


Simon Glass (8):
  am33xx/omap: Allow cache enable for all Sitara/OMAP
  hash: Export functions to find and show hash
  fdt: Add DEV_TREE_BIN option to specify a device tree binary file
  fdt: Update functions which write to an FDT to return -ENOSPC
  arm: ti: Increase malloc size to 16MB for armv7 boards
  RFC: am33xx/omap: Enable CONFIG_OF_CONTROL
  RFC: am33xx/omap: Enable FIT support
  RFC: am33xx/omap: Enable secure boot with CONFIG_FIT_SIGNATURE

 Makefile                                       |   8 +-
 arch/arm/cpu/armv7/omap-common/Makefile        |   4 +
 arch/arm/cpu/armv7/omap-common/hwinit-common.c |  41 --
 arch/arm/cpu/armv7/omap-common/omap-cache.c    |  56 +++
 arch/arm/cpu/armv7/omap3/board.c               |   8 -
 arch/arm/dts/am33xx.dtsi                       | 649 +++++++++++++++++++++++++
 arch/arm/dts/dt-bindings/gpio/gpio.h           |  15 +
 arch/arm/dts/dt-bindings/pinctrl/am33xx.h      |  41 ++
 arch/arm/dts/dt-bindings/pinctrl/omap.h        |  54 ++
 board/siemens/common/board.c                   |   9 -
 board/ti/dts/am335x-bone-common.dtsi           | 262 ++++++++++
 board/ti/dts/am335x-boneblack.dts              |  17 +
 board/ti/dts/tps65217.dtsi                     |  56 +++
 common/hash.c                                  |  13 +-
 common/image-fit.c                             |   4 +-
 doc/README.fdt-control                         |  16 +-
 include/configs/am335x_evm.h                   |   9 +
 include/configs/ti_armv7_common.h              |   2 +-
 include/hash.h                                 |  22 +
 include/rsa.h                                  |   3 +-
 lib/rsa/rsa-sign.c                             |  28 +-
 21 files changed, 1236 insertions(+), 81 deletions(-)
 create mode 100644 arch/arm/cpu/armv7/omap-common/omap-cache.c
 create mode 100644 arch/arm/dts/am33xx.dtsi
 create mode 100644 arch/arm/dts/dt-bindings/gpio/gpio.h
 create mode 100644 arch/arm/dts/dt-bindings/pinctrl/am33xx.h
 create mode 100644 arch/arm/dts/dt-bindings/pinctrl/omap.h
 create mode 100644 board/ti/dts/am335x-bone-common.dtsi
 create mode 100644 board/ti/dts/am335x-boneblack.dts
 create mode 100644 board/ti/dts/tps65217.dtsi

-- 
1.8.4



More information about the U-Boot mailing list