[U-Boot] [PATCH 0/5] Introduce secure boot for Baytrail

[Anatolij Gustschin]

From: Markus Valentin <mv at denx.de>

This patch series makes the hardware mechanisms for verified boot on
baytrail based platforms usable in/for U-Boot. The series contains
a tool which allows to easily create and assemble a secure boot
manifest. The manifest gets utilized by the Trusted Execution Engine
on the Soc.

Markus Valentin (5):
  x86: congatec: add secureboot enabled defconfig for
    conga-qeval20-qa3-e3845
  x86: baytrail: Add fsp-header verification for secure boot fsp
  x86: baytrail: secureboot: Add functions for verification of u-boot
  tools: add secure_boot_helper.py
  doc: x86: Add section about secure boot on Baytrail

 arch/x86/Kconfig                                   |  13 +-
 arch/x86/cpu/baytrail/Makefile                     |   1 +
 arch/x86/cpu/baytrail/secure_boot.c                | 117 ++++++++
 .../include/asm/arch-baytrail/fsp/fsp_configs.h    |   3 +
 arch/x86/include/asm/fsp/fsp_support.h             |   2 +
 arch/x86/lib/fsp/fsp_support.c                     |  31 ++
 ...0-qa3-e3845-internal-uart-secure-boot_defconfig |  77 +++++
 doc/README.x86                                     |  41 +++
 tools/secure_boot_helper.py                        | 313 +++++++++++++++++++++
 9 files changed, 597 insertions(+), 1 deletion(-)
 create mode 100644 arch/x86/cpu/baytrail/secure_boot.c
 create mode 100644 configs/conga-qeval20-qa3-e3845-internal-uart-secure-boot_defconfig
 create mode 100644 tools/secure_boot_helper.py

-- 
2.7.4