[U-Boot] [PATCH v2] verified-boot: Minimal support for booting U-Boot proper from SPL

Sumit Garg sumit.garg at nxp.com
Fri Jun 10 06:55:13 CEST 2016


Hi Teddy,

> -----Original Message-----
> From: Andreas Dannenberg [mailto:dannenberg at ti.com]
> Sent: Friday, June 10, 2016 8:15 AM
> To: Teddy Reed <teddy.reed at gmail.com>
> Cc: u-boot at lists.denx.de; sjg at chromium.org; Sumit Garg
> <sumit.garg at nxp.com>
> Subject: Re: [PATCH v2] verified-boot: Minimal support for booting U-Boot
> proper from SPL
> 
> On Thu, Jun 09, 2016 at 07:18:44PM -0700, Teddy Reed wrote:
> > This allows a board to configure verified boot within the SPL using a
> > FIT or FIT with external data. It also allows the SPL to perform
> > signature verification without needing relocation.
> >
> > The board configuration will need to add the following feature defines:
> > CONFIG_SPL_CRYPTO_SUPPORT
> > CONFIG_SPL_HASH_SUPPORT
> > CONFIG_SPL_SHA256
> >
> > In this example, SHA256 is the only selected hashing algorithm.
> >
> > And the following booleans:
> > CONFIG_SPL=y
> > CONFIG_SPL_DM=y
> > CONFIG_SPL_LOAD_FIT=y
> > CONFIG_SPL_FIT=y
> > CONFIG_SPL_OF_CONTROL=y
> > CONFIG_SPL_OF_LIBFDT=y
> > CONFIG_SPL_FIT_SIGNATURE=y
> >
> > Signed-off-by: Teddy Reed <teddy.reed at gmail.com>
> > Acked-by: Simon Glass <sjg at chromium.org>
> 
> Applies cleanly now and builds without issues.
> 
> Acked-by: Andreas Dannenberg <dannenberg at ti.com>

Acked-by: Sumit Garg <sumit.garg at nxp.com>


More information about the U-Boot mailing list