[U-Boot] [PATCH 0/8] Secure boot improvements and test on Beaglebone Black

[Simon Glass]

Hi Tom,

On 2 October 2013 08:44, Simon Glass <sjg at chromium.org> wrote:
> This series adds a few improvements to the image signing feature to
> make it easier to use on the Beaglebone Black.
>
> - Add a DEV_TREE_BIN option to make it easier to include the correct FDT
> (with embedded public keys) into the U-Boot image
> - Enable cache for more TI boards (to speed things up)
> - Increase malloc size
> - Enable CONFIG_OF_CONTROL, FIT and secure boot on am33xx/omap
>     (RFC only, not sure we want this, although we could create a separate
>      config for it)
>
> I also have a change to adjust mkimage to automatically make space in the
> FDT when adding hashes and signatures. Included here is the ENOSPC patch,
> but the fit_image.c patch will wait until the dumpimage tool is merged,
> since I am changing the same code.
>
> With this, secure boot was tested successfully on Beaglebone Black.

Do you think any of these patches should be applied?

Regards,
Simon

>
>
> Simon Glass (8):
>   am33xx/omap: Allow cache enable for all Sitara/OMAP
>   hash: Export functions to find and show hash
>   fdt: Add DEV_TREE_BIN option to specify a device tree binary file
>   fdt: Update functions which write to an FDT to return -ENOSPC
>   arm: ti: Increase malloc size to 16MB for armv7 boards
>   RFC: am33xx/omap: Enable CONFIG_OF_CONTROL
>   RFC: am33xx/omap: Enable FIT support
>   RFC: am33xx/omap: Enable secure boot with CONFIG_FIT_SIGNATURE
>
>  Makefile                                       |   8 +-
>  arch/arm/cpu/armv7/omap-common/Makefile        |   4 +
>  arch/arm/cpu/armv7/omap-common/hwinit-common.c |  41 --
>  arch/arm/cpu/armv7/omap-common/omap-cache.c    |  56 +++
>  arch/arm/cpu/armv7/omap3/board.c               |   8 -
>  arch/arm/dts/am33xx.dtsi                       | 649 +++++++++++++++++++++++++
>  arch/arm/dts/dt-bindings/gpio/gpio.h           |  15 +
>  arch/arm/dts/dt-bindings/pinctrl/am33xx.h      |  41 ++
>  arch/arm/dts/dt-bindings/pinctrl/omap.h        |  54 ++
>  board/siemens/common/board.c                   |   9 -
>  board/ti/dts/am335x-bone-common.dtsi           | 262 ++++++++++
>  board/ti/dts/am335x-boneblack.dts              |  17 +
>  board/ti/dts/tps65217.dtsi                     |  56 +++
>  common/hash.c                                  |  13 +-
>  common/image-fit.c                             |   4 +-
>  doc/README.fdt-control                         |  16 +-
>  include/configs/am335x_evm.h                   |   9 +
>  include/configs/ti_armv7_common.h              |   2 +-
>  include/hash.h                                 |  22 +
>  include/rsa.h                                  |   3 +-
>  lib/rsa/rsa-sign.c                             |  28 +-
>  21 files changed, 1236 insertions(+), 81 deletions(-)
>  create mode 100644 arch/arm/cpu/armv7/omap-common/omap-cache.c
>  create mode 100644 arch/arm/dts/am33xx.dtsi
>  create mode 100644 arch/arm/dts/dt-bindings/gpio/gpio.h
>  create mode 100644 arch/arm/dts/dt-bindings/pinctrl/am33xx.h
>  create mode 100644 arch/arm/dts/dt-bindings/pinctrl/omap.h
>  create mode 100644 board/ti/dts/am335x-bone-common.dtsi
>  create mode 100644 board/ti/dts/am335x-boneblack.dts
>  create mode 100644 board/ti/dts/tps65217.dtsi
>
> --
> 1.8.4
>