Secure Boot ESBC has been enabled on FSL LS208x platforms.
Changes for v2: - changed function fsl_secboot_validate to return address of image - corrected Bootscript header for ls1043 and ls1021 Changes for v3: - minor changes to remove compilation warnings Changes for v4: - removed IE Key extenstion support. Methodology not fixed yet. - minor changes in commit messages (clean up) Changes for v5: - Cleaned up commit messages - Changed defconfigs to add configs like CONFIG_RSA (These were added by intermediate patches since these patches were floated for review)
Saksham Jain (14): armv8: ls2080: Add SFP Configs for LS2080 ls2080: Add configs for SEC, SecMon, SRK and DCFG fsl: ls-ch3: Add new header for Secure Boot ls2080: Add Secure Boot support ls2080: Add bootscript header addr for secure boot fsl: ls-ch3: Copy Bootscript and header from NOR to DDR ls2080: Change env variable "fdt_high" ls2080: Add config for endianess of CCSR GUR armv8: fsl-lsch3: Disable SMMU during Secure Boot crypto/fsl: Correct 64-bit Write when MMU disabled crypto/fsl: Make CAAM transactions cacheable SECURE_BOOT: Use default bootargs SECURE BOOT: Halt execution when secure boot fail SECURE BOOT: Change fsl_secboot_validate func to ret image addr
arch/arm/cpu/armv8/fsl-layerscape/soc.c | 18 +++++- arch/arm/include/asm/arch-fsl-layerscape/config.h | 18 ++++++ .../include/asm/arch-fsl-layerscape/immap_lsch3.h | 28 +++++++++ arch/arm/include/asm/fsl_secure_boot.h | 50 ++++++++++++++-- board/freescale/common/cmd_esbc_validate.c | 14 ++++- board/freescale/common/fsl_validate.c | 66 +++++++++++++++------ board/freescale/ls2080aqds/MAINTAINERS | 6 ++ board/freescale/ls2080aqds/ls2080aqds.c | 5 +- board/freescale/ls2080ardb/MAINTAINERS | 6 ++ board/freescale/ls2080ardb/ls2080ardb.c | 5 +- configs/ls2080aqds_SECURE_BOOT_defconfig | 20 +++++++ configs/ls2080ardb_SECURE_BOOT_defconfig | 20 +++++++ configs/ls2085aqds_SECURE_BOOT_defconfig | 20 +++++++ configs/ls2085ardb_SECURE_BOOT_defconfig | 20 +++++++ drivers/crypto/fsl/desc_constr.h | 7 +-- drivers/crypto/fsl/jr.c | 13 +++++ drivers/crypto/fsl/jr.h | 3 + include/config_fsl_chain_trust.h | 25 +++++--- include/configs/ls2080aqds.h | 2 + include/configs/ls2080ardb.h | 2 + include/fsl_secboot_err.h | 3 + include/fsl_sfp.h | 3 +- include/fsl_validate.h | 67 ++++++++++++++++++---- 23 files changed, 373 insertions(+), 48 deletions(-) create mode 100644 configs/ls2080aqds_SECURE_BOOT_defconfig create mode 100644 configs/ls2080ardb_SECURE_BOOT_defconfig create mode 100644 configs/ls2085aqds_SECURE_BOOT_defconfig create mode 100644 configs/ls2085ardb_SECURE_BOOT_defconfig