For ARM based SoC's there is no need to add a separate target/defconfig for Secure Boot. Boot Mode can be determined at run time to continue the chain of trust.
The patch set is dependent on following: http://patchwork.ozlabs.org/patch/560391/ http://patchwork.ozlabs.org/patch/553826/
Aneesh Bansal (7): include/configs: make secure boot header file include uniform include/configs: move definition of CONFIG_CMD_BLOB SECURE_BOOT: split the secure boot functionality in two parts create function to determine boot mode enable chain of trust for ARM platforms enable chain of trust for PowerPC platforms SECURE_BOOT: change error handler for esbc_validate
arch/arm/cpu/armv8/fsl-layerscape/soc.c | 4 + .../include/asm/arch-fsl-layerscape/immap_lsch2.h | 3 + arch/arm/include/asm/arch-ls102xa/immap_ls102xa.h | 2 + arch/arm/include/asm/fsl_secure_boot.h | 7 +- arch/powerpc/cpu/mpc85xx/cpu_init.c | 12 +++ arch/powerpc/include/asm/fsl_secure_boot.h | 39 ++++--- arch/powerpc/include/asm/immap_85xx.h | 3 + board/freescale/common/Makefile | 3 +- board/freescale/common/cmd_esbc_validate.c | 7 +- board/freescale/common/fsl_chain_of_trust.c | 70 +++++++++++++ board/freescale/common/fsl_validate.c | 7 ++ board/freescale/ls1021aqds/ls1021aqds.c | 4 + board/freescale/ls1021atwr/ls1021atwr.c | 4 + configs/ls1021aqds_nor_SECURE_BOOT_defconfig | 7 -- configs/ls1021atwr_nor_SECURE_BOOT_defconfig | 7 -- configs/ls1043ardb_SECURE_BOOT_defconfig | 9 -- include/config_fsl_chain_trust.h | 89 ++++++++++++++++ include/config_fsl_secboot.h | 116 --------------------- include/configs/B4860QDS.h | 4 - include/configs/BSC9132QDS.h | 4 - include/configs/P1010RDB.h | 4 - include/configs/P2041RDB.h | 4 - include/configs/T102xQDS.h | 10 +- include/configs/T102xRDB.h | 10 +- include/configs/T1040QDS.h | 3 - include/configs/T104xRDB.h | 3 - include/configs/T208xQDS.h | 4 - include/configs/T208xRDB.h | 4 - include/configs/T4240QDS.h | 4 - include/configs/T4240RDB.h | 9 -- include/configs/corenet_ds.h | 4 - include/configs/ls1021aqds.h | 8 +- include/configs/ls1021atwr.h | 8 +- include/configs/ls1043a_common.h | 8 ++ include/configs/ls1043aqds.h | 10 ++ include/configs/ls1043ardb.h | 12 +-- include/fsl_validate.h | 2 + 37 files changed, 287 insertions(+), 221 deletions(-) create mode 100644 board/freescale/common/fsl_chain_of_trust.c delete mode 100644 configs/ls1021aqds_nor_SECURE_BOOT_defconfig delete mode 100644 configs/ls1021atwr_nor_SECURE_BOOT_defconfig delete mode 100644 configs/ls1043ardb_SECURE_BOOT_defconfig create mode 100644 include/config_fsl_chain_trust.h delete mode 100644 include/config_fsl_secboot.h