[U-Boot] [PATCH v6 00/25] Fix and extend i.MX HAB layer

[Bryan O'Donoghue]

>>
>> I'm observing authentication issue while loading U-Boot proper, U-Boot
>> proper now have features like SPL DM and SPL FIT etc
>>
>> U-Boot SPL 2018.03-rc1-00182-gb81f7c9 (Feb 08 2018 - 17:19:03 +0530)
>> Trying to boot from MMC1
>> Expected Linux image is not found. Trying to start U-boot
>>
>> Authenticate image from DDR location 0x17800000...
>> bad magic magic=0xb8 length=0x841b version=0x17
>> bad length magic=0xb8 length=0x841b version=0x17
>> bad version magic=0xb8 length=0x841b version=0x17
>> spl: ERROR:  image authentication unsuccessful
>> ### ERROR ### Please RESET the board ###
>>
>> Please let me know where I missed, I'm authenticating SPL and
>> u-boot-dtb.img now.
> 
> Can you please check if the generated u-boot-dtb.img contains a IVT
> table appended in the end of the image?
> 
> The mx6slevk_spl_defconfig target also generates SPL + u-boot-dtb.img
> but I have to use the u-boot-ivt.img binary instead. In my case
> u-boot-dtb.img does not includes a IVT table.
> 
> Best Regards,
> Breno Lima
> 

At a guess I'd say it's the fix we did for hab_auth_img - I guess Jagan 
you have an out-of-tree implementation here ?

If you have a command in your environment that looks like this

hab_auth_img 0x17800000 0x10000

that should now be

hab_auth_img 0x17800000 0x10000 0xF400

assuming the CSF footer is aprox 0xC00 bytes padded.

git show c5800b2

arm: imx: hab: Fix authenticate_image input parameters

1: Adding a new parameter to hab_auth_img
        - addr   : image hex address
        - length : total length of the image
        - offset : offset of IVT from addr

---
bod