[U-Boot] [PATCH v4 08/25] arm: imx: hab: Fix authenticate image lockup on MX7

[Bryan O'Donoghue]

On 03/01/18 01:25, Breno Matheus Lima wrote:
> Hi Bryan,
> 
> 2018-01-02 14:43 GMT-02:00 Bryan O'Donoghue <bryan.odonoghue at linaro.org>:
>> The i.MX6 has some pretty explicit code associated with informing the IROM
>> about flushing caches during authenticate_image().
>>
>> Looking at various pieces of documentation its pretty clear the i.MX6 IROM
>> registers are not documented and absent similar documentation on the i.MX7
>> the next-best fix is to disabled the dcache while making an
>> authenticate_image() callback.
>>
>> This patch therefore disables dcache temporarily while doing an IROM
>> authenticate_image() callback, thus resolving a lockup encountered in a
>> complex set of authenticate-image calls observed.
>>
> 
> I'm trying to reproduce the same issue on an i.MX7D board but I'm not
> being able so far, Is it possible to share more details on how to
> reproduce this issue? Looking the thread at the NXP community seems
> that this can be reproduced in a specific situation, I would like to
> test in a similar environment as yours.
> 
> Thanks,
> Breno Lima
> 

OK I'll try to put some images onto gdrive for you.

Do you have an mx7 board which _doesn't_ have the OTP fuses blown ?

You will need to

1. Program SRK efuse index 3 to the same SRK we use
2. Set the part into secure-boot mode

If you don't have a *spare* board - we'll have to figure out how to 
regenerate the signed images in the same format with your SRK hashes.

---
bod