[U-Boot] [PATCH 4/5] imx: hab: Check if CSF contains deprecated commands

Fabio Estevam festevam at gmail.com
Tue Feb 20 10:45:30 UTC 2018


On Mon, Feb 19, 2018 at 10:19 PM, Breno Lima <brenomatheus at gmail.com> wrote:
> From: Utkarsh Gupta <utkarsh.gupta at nxp.com>
>
> Write, Check and Set MID commands have been deprecated from the Code
> Signing Tool (CST) v2.3.3 and will not be implemented in newer versions
> of HAB, hence the following features are no longer available:
>
> - Write Data
> - Clear Mask
> - Set Mask
> - Check All Clear
> - Check All Set
> - Check Any Clear
> - Check Any Set
> - Set MID
>
> The inappropriate use of Write Data command may lead to an incorrect
> authentication boot flow. Since no specific application has been identified
> that requires the use of any of these features, it is highly recommended to
> add this check.
>
> Signed-off-by: Utkarsh Gupta <utkarsh.gupta at nxp.com>
> Signed-off-by: Breno Lima <breno.lima at nxp.com>

Reviewed-by: Fabio Estevam <fabio.estevam at nxp.com>


More information about the U-Boot mailing list