[U-Boot] [PATCH 0/3] Add i.MX HAB encryption support

[Gary Bisson]

Hi all,

This patch is actually a follow-up of the one from Peng Fan:
https://patchwork.ozlabs.org/patch/616568/

As he mentioned at the time, the current i.MX source code doesn't allow
to build a U-Boot that supports encryption features (dek commands).
The reason is that the commit 2bb01482 did some cleanup, removing usec2ticks
which is mandatory for the Freescale/NXP job ring code to build.

At the time of the original patch, Tom/Stefano said that a configuration
would need to leverage those options and some of the config should be
moved to Kconfig. The goal of this series is to enable it with the
nitrogen6x platform configuration.

As a first version, this series only adds the CONFIG_SECURE_BOOT to the
imx-common Kconfig so it can be enabled using menuconfig.

If this is not sufficient, the nitrogen6*_defconfig could be duplicated
into nitrogen6*_hab_defconfig but it sounds like a lot of copy just to
enable HAB features. No need to say that we would prefer keeping our
default defconfig without the HAB feature enabled.

Then I think the variables could actually be moved from nitrogen6x.h
to mx6_common.h and mx7_common.h. Maybe need to split it in 2 since
CONFIG_CSF_SIZE is sufficient to achieve binary signature. The other
options are only required if you want to encrypt the binary (which
requires the use of dek_blob command.

Let me know your thoughts.

Regards,
Gary


Gary Bisson (2):
  arm: imx-common: add SECURE_BOOT option to Kconfig
  nitrogen6x: add secure boot support

Peng Fan (1):
  arm: imx-common: introduce back usec2ticks

 arch/arm/imx-common/Kconfig                 |  9 +++++++++
 arch/arm/imx-common/timer.c                 | 16 ++++++++++++++++
 board/boundary/nitrogen6x/nitrogen6dl.cfg   |  3 +++
 board/boundary/nitrogen6x/nitrogen6dl2g.cfg |  3 +++
 board/boundary/nitrogen6x/nitrogen6q.cfg    |  3 +++
 board/boundary/nitrogen6x/nitrogen6q2g.cfg  |  3 +++
 board/boundary/nitrogen6x/nitrogen6s.cfg    |  3 +++
 board/boundary/nitrogen6x/nitrogen6s1g.cfg  |  3 +++
 include/configs/nitrogen6x.h                |  9 +++++++++
 9 files changed, 52 insertions(+)

-- 
2.8.1