Hi all,
This patch is actually a follow-up of the one from Peng Fan: https://patchwork.ozlabs.org/patch/616568/
As he mentioned at the time, the current i.MX source code doesn't allow to build a U-Boot that supports encryption features (dek commands). The reason is that the commit 2bb01482 did some cleanup, removing usec2ticks which is mandatory for the Freescale/NXP job ring code to build.
At the time of the original patch, Tom/Stefano said that a configuration would need to leverage those options and some of the config should be moved to Kconfig. The goal of this series is to enable it with the nitrogen6x platform configuration.
As a first version, this series only adds the CONFIG_SECURE_BOOT to the imx-common Kconfig so it can be enabled using menuconfig.
If this is not sufficient, the nitrogen6*_defconfig could be duplicated into nitrogen6*_hab_defconfig but it sounds like a lot of copy just to enable HAB features. No need to say that we would prefer keeping our default defconfig without the HAB feature enabled.
Then I think the variables could actually be moved from nitrogen6x.h to mx6_common.h and mx7_common.h. Maybe need to split it in 2 since CONFIG_CSF_SIZE is sufficient to achieve binary signature. The other options are only required if you want to encrypt the binary (which requires the use of dek_blob command.
Let me know your thoughts.
Regards, Gary
Gary Bisson (2): arm: imx-common: add SECURE_BOOT option to Kconfig nitrogen6x: add secure boot support
Peng Fan (1): arm: imx-common: introduce back usec2ticks
arch/arm/imx-common/Kconfig | 9 +++++++++ arch/arm/imx-common/timer.c | 16 ++++++++++++++++ board/boundary/nitrogen6x/nitrogen6dl.cfg | 3 +++ board/boundary/nitrogen6x/nitrogen6dl2g.cfg | 3 +++ board/boundary/nitrogen6x/nitrogen6q.cfg | 3 +++ board/boundary/nitrogen6x/nitrogen6q2g.cfg | 3 +++ board/boundary/nitrogen6x/nitrogen6s.cfg | 3 +++ board/boundary/nitrogen6x/nitrogen6s1g.cfg | 3 +++ include/configs/nitrogen6x.h | 9 +++++++++ 9 files changed, 52 insertions(+)