[PATCH v3 00/10] crypto: allwinner: enable sun8i-ce FIT crypto

James Hilliard james.hilliard1 at gmail.com
Fri Jul 10 00:46:22 CEST 2026


This series enables Allwinner Crypto Engine backed FIT decryption and
FIT signature/hash validation for secure-boot flows on H6/H616-class
boards, covering both SPL and U-Boot proper.

The purpose is to use CE-backed AES for encrypted FIT payloads on H6/H616
and CE-backed ECDSA validation where the CE ECC engine is available,
currently H616, instead of relying only on software crypto paths.

At a high level this adds:

  - SPL driver-model crypto plumbing for AES and hash providers.
  - FIT decrypt-to-buffer support and SPL FIT cipher support, so SPL can
    decrypt an encrypted U-Boot proper FIT without allocating another full
    payload buffer.
  - A shared sun8i-ce parent driver with AES and hash children for H6/H616.
  - An H616 ECDSA child for CE-backed FIT signature validation, plus common
    ECDSA curve-size and key-encoding fixes for secp224r1, prime256v1,
    secp384r1 and secp521r1.

The AES child supports software-provided AES-128/192/256 keys in ECB and
CBC modes. The hash child supports the CE one-shot MD5/SHA1/SHA256/SHA384/
SHA512 methods used by FIT verification. The ECDSA child exposes the H616
CE ECC verifier through UCLASS_ECDSA.

Tested flows include:

  - SPL loading an encrypted and signed U-Boot proper FIT with CE-backed
    AES decryption, hash verification and ECDSA signature verification.
  - U-Boot proper loading an encrypted and signed FIT with CE-backed AES
    decryption, hash verification and ECDSA signature verification.
  - U-Boot proper AES command paths using the DM AES provider.
  - CE ECDSA verification with secp224r1, prime256v1, secp384r1 and
    secp521r1 FIT signatures.

Signed-off-by: James Hilliard <james.hilliard1 at gmail.com>
---
To: Svyatoslav Ryhel <clamor95 at gmail.com>
To: Ion Agorria <ion at agorria.com>
To: u-boot at lists.denx.de
Cc: Chen-Yu Tsai <wens at kernel.org>
Cc: Samuel Holland <samuel at sholland.org>
Cc: Tom Rini <trini at konsulko.com>
Cc: James Hilliard <james.hilliard1 at gmail.com>
Cc: Simon Glass <sjg at chromium.org>
Cc: Quentin Schulz <quentin.schulz at cherry.de>
Cc: Marek Vasut <marek.vasut+renesas at mailbox.org>
Cc: Aristo Chen <aristo.chen at canonical.com>
Cc: Anton Ivanov <anton at binarly.io>
Cc: Daniel Golle <daniel at makrotopia.org>
Cc: Neil Armstrong <neil.armstrong at linaro.org>
Cc: Wolfgang Wallner <wolfgang.wallner at at.abb.com>
Cc: Randolph Sapp <rs at ti.com>
Cc: Heiko Schocher <hs at nabladev.com>
Cc: Alexey Charkov <alchark at gmail.com>
Cc: "Kory Maincent (TI.com)" <kory.maincent at bootlin.com>
Cc: Peng Fan <peng.fan at nxp.com>
Cc: Mattijs Korpershoek <mkorpershoek at kernel.org>
Cc: Anshul Dalal <anshuld at ti.com>
Cc: Rasmus Villemoes <rv at rasmusvillemoes.dk>
Cc: Johan Jonker <jbx6244 at gmail.com>
Cc: Francesco Valla <francesco at valla.it>
Cc: Michael Walle <mwalle at kernel.org>
Cc: Heinrich Schuchardt <xypron.glpk at gmx.de>
Cc: Andre Przywara <andre.przywara at arm.com>
Cc: Lukasz Majewski <lukma at denx.de>
Cc: Michael Trimarchi <michael at amarulasolutions.com>
Cc: Richard Genoud <richard.genoud at bootlin.com>
Cc: Marek Vasut <marek.vasut at mailbox.org>
Cc: E Shattow <e at freeshell.de>
Cc: Enric Balletbo i Serra <eballetbo at kernel.org>
Cc: Lucas Dietrich <ld.adecy at gmail.com>
Cc: David Lechner <dlechner at baylibre.com>
Cc: Julien Stephan <jstephan at baylibre.com>
Cc: Kuan-Wei Chiu <visitorckw at gmail.com>
Cc: Raymond Mao <raymond.mao at riscstar.com>
Cc: Stefan Roese <stefan.roese at mailbox.org>
Cc: Thierry Reding <treding at nvidia.com>
Cc: Francois Berder <fberder at outlook.fr>
Cc: Jonas Karlman <jonas at kwiboo.se>
Cc: Jerome Forissier <jerome.forissier at arm.com>

---
Changes in v3:
- Rebase on U-Boot master.
- Add review tags from Svyatoslav Ryhel and Simon Glass.
- Simplify the AES decrypt helper guard and validation flow.
- Document the AES provider in-place CBC decrypt contract.
- Tighten SPL encrypted-FIT buffer handling and error reporting.
- Clean up the SPL DM hash fallback and Kconfig help text.
- Link to v2: https://patch.msgid.link/20260702-submit-ce-series-v2-v2-0-ffda5bed58af@gmail.com

To: Svyatoslav Ryhel <clamor95 at gmail.com>
To: Ion Agorria <ion at agorria.com>
To: u-boot at lists.denx.de
Cc: Tom Rini <trini at konsulko.com>
Cc: James Hilliard <james.hilliard1 at gmail.com>
Cc: Simon Glass <sjg at chromium.org>
Cc: Thierry Reding <treding at nvidia.com>
Cc: Quentin Schulz <quentin.schulz at cherry.de>
Cc: Marek Vasut <marek.vasut+renesas at mailbox.org>
Cc: Rasmus Villemoes <rv at rasmusvillemoes.dk>
Cc: Aristo Chen <aristo.chen at canonical.com>
Cc: Anton Ivanov <anton at binarly.io>
Cc: Daniel Golle <daniel at makrotopia.org>
Cc: Francois Berder <fberder at outlook.fr>
Cc: Peng Fan <peng.fan at nxp.com>
Cc: Neil Armstrong <neil.armstrong at linaro.org>
Cc: Randolph Sapp <rs at ti.com>
Cc: Jonas Karlman <jonas at kwiboo.se>
Cc: Wolfgang Wallner <wolfgang.wallner at at.abb.com>
Cc: Alexey Charkov <alchark at gmail.com>
Cc: Ilias Apalodimas <ilias.apalodimas at linaro.org>
Cc: Heiko Schocher <hs at nabladev.com>
Cc: "Kory Maincent (TI.com)" <kory.maincent at bootlin.com>
Cc: Anshul Dalal <anshuld at ti.com>
Cc: Johan Jonker <jbx6244 at gmail.com>
Cc: Francesco Valla <francesco at valla.it>
Cc: Heinrich Schuchardt <xypron.glpk at gmx.de>
Cc: Michael Walle <mwalle at kernel.org>
Cc: Andre Przywara <andre.przywara at arm.com>
Cc: Lukasz Majewski <lukma at denx.de>
Cc: Richard Genoud <richard.genoud at bootlin.com>
Cc: Michael Trimarchi <michael at amarulasolutions.com>
Cc: Marek Vasut <marek.vasut at mailbox.org>
Cc: E Shattow <e at freeshell.de>
Cc: Enric Balletbo i Serra <eballetbo at kernel.org>
Cc: Mattijs Korpershoek <mkorpershoek at kernel.org>
Cc: Lucas Dietrich <ld.adecy at gmail.com>
Cc: David Lechner <dlechner at baylibre.com>
Cc: Julien Stephan <jstephan at baylibre.com>
Cc: Kuan-Wei Chiu <visitorckw at gmail.com>
Cc: Bastien Curutchet <bastien.curutchet at bootlin.com>
Cc: Raymond Mao <raymond.mao at riscstar.com>

---
James Hilliard (10):
      cmd: aes: fix DM operation handling
      crypto: aes: allow DM AES in SPL
      boot: image: add FIT decrypt-to-buffer helper
      spl: fit: support encrypted payloads
      clk: sunxi: add H6/H616 CE gates and reset
      lib: ecdsa: support additional curve sizes
      crypto: allwinner: add sun8i-ce AES driver
      crypto: allwinner: add sun8i-ce ECDSA verifier
      crypto: hash: allow DM hash in SPL
      crypto: allwinner: add sun8i-ce hash driver

 MAINTAINERS                                        |   1 +
 boot/Kconfig                                       |   8 +
 boot/image-cipher.c                                |  38 +-
 boot/image-fit.c                                   |  85 ++--
 cmd/aes.c                                          |   8 +-
 common/spl/spl_fit.c                               |  75 +++-
 doc/mkimage.1                                      |   3 +
 doc/usage/fit/signature.rst                        |   9 +-
 drivers/clk/sunxi/clk_h6.c                         |   5 +
 drivers/clk/sunxi/clk_h616.c                       |   5 +
 drivers/crypto/Kconfig                             |   2 +
 drivers/crypto/Makefile                            |   1 +
 drivers/crypto/aes/Kconfig                         |   8 +
 drivers/crypto/aes/aes-sw.c                        |   6 +
 drivers/crypto/aes/aes-uclass.c                    |  15 +
 drivers/crypto/allwinner/Kconfig                   |   3 +
 drivers/crypto/allwinner/Makefile                  |   3 +
 drivers/crypto/allwinner/sun8i-ce/Kconfig          | 158 ++++++++
 drivers/crypto/allwinner/sun8i-ce/Makefile         |   6 +
 drivers/crypto/allwinner/sun8i-ce/sun8i-ce-aes.c   | 413 ++++++++++++++++++++
 drivers/crypto/allwinner/sun8i-ce/sun8i-ce-core.c  | 408 +++++++++++++++++++
 drivers/crypto/allwinner/sun8i-ce/sun8i-ce-ecdsa.c | 434 +++++++++++++++++++++
 drivers/crypto/allwinner/sun8i-ce/sun8i-ce-hash.c  | 298 ++++++++++++++
 drivers/crypto/allwinner/sun8i-ce/sun8i-ce.h       |  72 ++++
 drivers/crypto/hash/Kconfig                        |  13 +
 drivers/crypto/hash/Makefile                       |   2 +-
 drivers/crypto/tegra/tegra_aes.c                   |   7 +
 include/image.h                                    |  39 +-
 include/u-boot/aes.h                               |  10 +
 include/u-boot/ecdsa.h                             |  22 ++
 include/u-boot/fdt-libcrypto.h                     |   6 +-
 include/uboot_aes.h                                |  40 +-
 lib/Makefile                                       |   2 +-
 lib/aes/aes-decrypt.c                              | 104 ++++-
 lib/ecdsa/Kconfig                                  |   2 +-
 lib/ecdsa/ecdsa-libcrypto.c                        | 141 ++++---
 lib/ecdsa/ecdsa-verify.c                           |  39 +-
 lib/fdt-libcrypto.c                                |  60 +--
 tools/image-sig-host.c                             |   7 +
 39 files changed, 2364 insertions(+), 194 deletions(-)
---
base-commit: 913fedc816570c07bfc7f9c4046dc2a3a55e4099
change-id: 20260702-submit-ce-series-v2-4a77b170c68c

Best regards,
--  
James Hilliard <james.hilliard1 at gmail.com>



More information about the U-Boot mailing list