[U-Boot] [PATCH v4] imx: Support i.MX6 High Assurance Boot authentication

[Nitin Garg]

Hi Fabio,

On 09/30/2014 08:44 AM, Fabio Estevam wrote:
> Hi Nitin,
> 
> On Tue, Sep 16, 2014 at 3:33 PM, Nitin Garg <nitin.garg at freescale.com> wrote:
>> When CONFIG_SECURE_BOOT is enabled, the signed images
>> like kernel and dtb can be authenticated using iMX6 CAAM.
>> The added command hab_auth_img can be used for HAB
>> authentication of images. The command takes the image
>> DDR location, IVT (Image Vector Table) offset inside
>> image as parameters. Detailed info about signing images
>> can be found in Freescale AppNote AN4581.
>>
>> Signed-off-by: Nitin Garg <nitin.garg at freescale.com>
> 
> I have just tested the 'hab_status' command and it hangs my mx6sxsabresd board:
> 
> U-Boot 2014.10-rc2-16959-g6eb2f0d-dirty (Sep 30 2014 - 10:28:19)
> 
> CPU:   Freescale i.MX6SX rev1.0 at 792 MHz
> Reset cause: POR
> Board: MX6SX SABRE SDB
> I2C:   ready
> DRAM:  1 GiB
> MMC:   FSL_SDHC: 0
> In:    serial
> Out:   serial
> Err:   serial
> PMIC:  PFUZE100 ID=0x10
> Net:   FEC [PRIME]
> Hit any key to stop autoboot:  0
> => hab_status
> 
> Secure boot disabled
> 
> (hangs the system)
> 
> Could you please take a look at this issue?
> 

I found the reason for the hang. The HAB api table was not
updated for i.MX6SX. Since i.MX6SX ROM implements unified
sections in ROM, the HAP function pointers needs to be
updated. I have sent a patch for the same.

-Nitin