u-boot.git/arch/arm/include/asm/fsl_secure_boot.h, branch v2023.01

nxp: config_fsl_chain_trust.h: Clean up and remove unused portions

2022-07-05T21:04:01Z

The way that secure boot is implemented today on NXP ARM platforms does not reuse the elements found in include/config_fsl_chain_trust.h to construct CONFIG_SECBOOT but instead board header files have their environment setup as needed and then fsl_setenv_chain_of_trust() will set secureboot in the environment. Remove a large number of unused defines here. Cc: Peng Fan Signed-off-by: Tom Rini

fsl_validate: Migrate SPL_UBOOT_KEY_HASH to Kconfig

2022-07-05T21:04:01Z

Move setting of SPL_UBOOT_KEY_HASH to a non-NULL value to Kconfig. As part of this, change fsl_secboot_validate(...) to check that it is passed a non-empty string, rather than non-NULL. Cc: Peng Fan Cc: Priyanka Jain Cc: Kshitiz Varshney Signed-off-by: Tom Rini

Convert CONFIG_SYS_FSL_SFP_BE et al to Kconfig

2022-07-05T21:04:00Z

This converts the following to Kconfig: CONFIG_KEY_REVOCATION CONFIG_SYS_FSL_SFP_BE CONFIG_SYS_FSL_SFP_LE CONFIG_SYS_FSL_SFP_VER_3_0 CONFIG_SYS_FSL_SFP_VER_3_2 CONFIG_SYS_FSL_SFP_VER_3_4 CONFIG_SYS_FSL_SRK_LE This partly means making sure to enable SYS_FSL_ERRATUM_A007186 only for when CHAIN_OF_TRUST is enabled. Signed-off-by: Tom Rini

Convert CONFIG_SYS_FSL_SEC_MON et al to Kconfig

2022-07-05T21:04:00Z

This converts the following to Kconfig: CONFIG_SYS_FSL_SEC_MON CONFIG_SYS_FSL_SEC_MON_BE CONFIG_SYS_FSL_SEC_MON_LE Signed-off-by: Tom Rini

Convert CONFIG_ESBC_HDR_LS et al to Kconfig

2022-07-05T21:03:02Z

This converts the following to Kconfig: CONFIG_ESBC_HDR_LS CONFIG_ESBC_ADDR_64BIT Signed-off-by: Tom Rini

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07T13:34:12Z

When U-Boot started using SPDX tags we were among the early adopters and there weren't a lot of other examples to borrow from. So we picked the area of the file that usually had a full license text and replaced it with an appropriate SPDX-License-Identifier: entry. Since then, the Linux Kernel has adopted SPDX tags and they place it as the very first line in a file (except where shebangs are used, then it's second line) and with slightly different comment styles than us. In part due to community overlap, in part due to better tag visibility and in part for other minor reasons, switch over to that style. This commit changes all instances where we have a single declared license in the tag as both the before and after are identical in tag contents. There's also a few places where I found we did not have a tag and have introduced one. Signed-off-by: Tom Rini

ls1088ardb: Add SD Secure boot target support

2018-01-10T20:32:45Z

Signed-off-by: Udit Agarwal Signed-off-by: Sumit Garg [YS: run moveconfig.py -s] Reviewed-by: York Sun

LS2080ARDB: QSPI boot: Secure Boot image validation

2017-09-11T14:55:36Z

Adds header address for PPA to be validated during ESBC phase for ARCH_LS2088 and QSPI_BOOT. Moves sec_init prior to ppa_init(). It must be initialized before the PPA. Signed-off-by: Udit Agarwal [YS: revised commit message] Reviewed-by: York Sun

SECURE_BOOT: Unify memory map for Layerscape based platforms

2017-09-11T14:55:36Z

Unify memory map for Layerscape based platforms. This patch includes changes in bootscript, bootscript header and PPA header addresses change as per unified memory map. Signed-off-by: Sumit Garg Tested-by: Vinitha Pillai Reviewed-by: York Sun

Convert CONFIG_CMD_HASH to Kconfig

2017-05-22T16:38:15Z

This converts the following to Kconfig: CONFIG_CMD_HASH Signed-off-by: Simon Glass Reviewed-by: Tom Rini [trini: Rework slightly, enable on some boards again] Signed-off-by: Tom Rini