[PATCH v3 02/19] binman: ti-secure: Add support for TI signing

Simon Glass sjg at chromium.org
Mon Apr 24 21:42:19 CEST 2023


On Fri, 21 Apr 2023 at 06:32, Neha Malcom Francis <n-francis at ti.com> wrote:
>
> The ti-secure entry contains certificate for binaries that will be
> loaded or booted by system firmware whereas the ti-secure-rom entry
> contains certificate for binaries that will be booted by ROM. Support
> for both these types of certificates is necessary for booting of K3
> devices.
>
> Signed-off-by: Neha Malcom Francis <n-francis at ti.com>
> ---
>  board/ti/keys/custMpk.pem                     |  51 ++++
>  board/ti/keys/ti-degenerate-key.pem           |  10 +
>  tools/binman/btool/openssl.py                 | 244 +++++++++++++++++
>  tools/binman/entries.rst                      |  65 +++++
>  tools/binman/etype/ti_secure.py               |  82 ++++++
>  tools/binman/etype/ti_secure_rom.py           | 250 ++++++++++++++++++
>  tools/binman/etype/x509_cert.py               |  87 +++++-
>  tools/binman/ftest.py                         |  52 ++++
>  tools/binman/test/279_ti_secure.dts           |  17 ++
>  tools/binman/test/280_ti_secure_rom.dts       |  17 ++
>  .../test/281_ti_secure_rom_combined.dts       |  25 ++
>  .../test/282_ti_secure_rom_combined_a.dts     |  24 ++
>  .../test/283_ti_secure_rom_combined_b.dts     |  24 ++
>  .../test/284_ti_secure_rom_combined_c.dts     |  21 ++
>  tools/binman/test/285_ti_secure_a.dts         |  17 ++
>  tools/binman/test/286_ti_secure_b.dts         |  18 ++
>  tools/binman/test/288_ti_secure_rom_a.dts     |  19 ++
>  tools/binman/test/289_ti_secure_rom_b.dts     |  18 ++
>  18 files changed, 1033 insertions(+), 8 deletions(-)
>  create mode 100644 board/ti/keys/custMpk.pem
>  create mode 100644 board/ti/keys/ti-degenerate-key.pem
>  create mode 100644 tools/binman/etype/ti_secure.py
>  create mode 100644 tools/binman/etype/ti_secure_rom.py
>  create mode 100644 tools/binman/test/279_ti_secure.dts
>  create mode 100644 tools/binman/test/280_ti_secure_rom.dts
>  create mode 100644 tools/binman/test/281_ti_secure_rom_combined.dts
>  create mode 100644 tools/binman/test/282_ti_secure_rom_combined_a.dts
>  create mode 100644 tools/binman/test/283_ti_secure_rom_combined_b.dts
>  create mode 100644 tools/binman/test/284_ti_secure_rom_combined_c.dts
>  create mode 100644 tools/binman/test/285_ti_secure_a.dts
>  create mode 100644 tools/binman/test/286_ti_secure_b.dts
>  create mode 100644 tools/binman/test/288_ti_secure_rom_a.dts
>  create mode 100644 tools/binman/test/289_ti_secure_rom_b.dts

Reviewed-by: Simon Glass <sjg at chromium.org>

Same comment about warnings/errors


More information about the U-Boot mailing list