From: Markus Valentin mv@denx.de
This patch series makes the hardware mechanisms for verified boot on baytrail based platforms usable in/for U-Boot. The series contains a tool which allows to easily create and assemble a secure boot manifest. The manifest gets utilized by the Trusted Execution Engine on the Soc.
Markus Valentin (5): x86: congatec: add secureboot enabled defconfig for conga-qeval20-qa3-e3845 x86: baytrail: Add fsp-header verification for secure boot fsp x86: baytrail: secureboot: Add functions for verification of u-boot tools: add secure_boot_helper.py doc: x86: Add section about secure boot on Baytrail
arch/x86/Kconfig | 13 +- arch/x86/cpu/baytrail/Makefile | 1 + arch/x86/cpu/baytrail/secure_boot.c | 117 ++++++++ .../include/asm/arch-baytrail/fsp/fsp_configs.h | 3 + arch/x86/include/asm/fsp/fsp_support.h | 2 + arch/x86/lib/fsp/fsp_support.c | 31 ++ ...0-qa3-e3845-internal-uart-secure-boot_defconfig | 77 +++++ doc/README.x86 | 41 +++ tools/secure_boot_helper.py | 313 +++++++++++++++++++++ 9 files changed, 597 insertions(+), 1 deletion(-) create mode 100644 arch/x86/cpu/baytrail/secure_boot.c create mode 100644 configs/conga-qeval20-qa3-e3845-internal-uart-secure-boot_defconfig create mode 100644 tools/secure_boot_helper.py