[U-Boot] [PATCH v5 00/14] Add Support for Secure Boot on LS2080

Saksham Jain saksham.jain at nxp.com
Wed Mar 23 11:54:31 CET 2016


Secure Boot ESBC has been enabled on FSL LS208x platforms.

Changes for v2:
	- changed function fsl_secboot_validate to return address of image
	- corrected Bootscript header for ls1043 and ls1021
Changes for v3:
	- minor changes to remove compilation warnings
Changes for v4:
	- removed IE Key extenstion support. Methodology not fixed yet.
	- minor changes in commit messages (clean up)
Changes for v5:
	- Cleaned up commit messages
	- Changed defconfigs to add configs like CONFIG_RSA
		(These were added by intermediate patches since
		these patches were floated for review)

Saksham Jain (14):
  armv8: ls2080: Add SFP Configs for LS2080
  ls2080: Add configs for SEC, SecMon, SRK and DCFG
  fsl: ls-ch3: Add new header for Secure Boot
  ls2080: Add Secure Boot support
  ls2080: Add bootscript header addr for secure boot
  fsl: ls-ch3: Copy Bootscript and header from NOR to DDR
  ls2080: Change env variable "fdt_high"
  ls2080: Add config for endianess of CCSR GUR
  armv8: fsl-lsch3: Disable SMMU during Secure Boot
  crypto/fsl: Correct 64-bit Write when MMU disabled
  crypto/fsl: Make CAAM transactions cacheable
  SECURE_BOOT: Use default bootargs
  SECURE BOOT: Halt execution when secure boot fail
  SECURE BOOT: Change fsl_secboot_validate func to ret image addr

 arch/arm/cpu/armv8/fsl-layerscape/soc.c            | 18 +++++-
 arch/arm/include/asm/arch-fsl-layerscape/config.h  | 18 ++++++
 .../include/asm/arch-fsl-layerscape/immap_lsch3.h  | 28 +++++++++
 arch/arm/include/asm/fsl_secure_boot.h             | 50 ++++++++++++++--
 board/freescale/common/cmd_esbc_validate.c         | 14 ++++-
 board/freescale/common/fsl_validate.c              | 66 +++++++++++++++------
 board/freescale/ls2080aqds/MAINTAINERS             |  6 ++
 board/freescale/ls2080aqds/ls2080aqds.c            |  5 +-
 board/freescale/ls2080ardb/MAINTAINERS             |  6 ++
 board/freescale/ls2080ardb/ls2080ardb.c            |  5 +-
 configs/ls2080aqds_SECURE_BOOT_defconfig           | 20 +++++++
 configs/ls2080ardb_SECURE_BOOT_defconfig           | 20 +++++++
 configs/ls2085aqds_SECURE_BOOT_defconfig           | 20 +++++++
 configs/ls2085ardb_SECURE_BOOT_defconfig           | 20 +++++++
 drivers/crypto/fsl/desc_constr.h                   |  7 +--
 drivers/crypto/fsl/jr.c                            | 13 +++++
 drivers/crypto/fsl/jr.h                            |  3 +
 include/config_fsl_chain_trust.h                   | 25 +++++---
 include/configs/ls2080aqds.h                       |  2 +
 include/configs/ls2080ardb.h                       |  2 +
 include/fsl_secboot_err.h                          |  3 +
 include/fsl_sfp.h                                  |  3 +-
 include/fsl_validate.h                             | 67 ++++++++++++++++++----
 23 files changed, 373 insertions(+), 48 deletions(-)
 create mode 100644 configs/ls2080aqds_SECURE_BOOT_defconfig
 create mode 100644 configs/ls2080ardb_SECURE_BOOT_defconfig
 create mode 100644 configs/ls2085aqds_SECURE_BOOT_defconfig
 create mode 100644 configs/ls2085ardb_SECURE_BOOT_defconfig

-- 
1.8.1.4



More information about the U-Boot mailing list