Hello,

I have implemented verified boot in SPL and build my SPL image with "make EXT_DTB=/path/to/dtb/with/embedded/pub-key SPL". In the build process all nodes except chosen and config are stripped off for SPL and TPL builds.

Don´t know if this is a good behavior to remove everything except the mentioned nodes... Probably there is another way to embed a precompiled dtb in the SPL image?

The attached patch adds the needed signature and sub nodes for verified boot to cmd_fdtgrep in scripts/Makefile.lib.

Best regards

Johann Neuhauser DH electronics GmbH