u-boot.git/include/fsl_sec.h, branch master

include: Drop from include lists

2023-11-07T19:50:52+00:00

At this point, we don't need to have  be included because of
properties in the header itself, it only includes other common header
files. We've also audited the code enough at this point that we can drop
 from being included in headers and rely on code to have the
correct inclusions themselves, or at least .

Signed-off-by: Tom Rini

imx: fsl_sec: preprocessor casting issue with addresses involving math

2023-07-13T09:29:40+00:00

The sec_in32 preprocessor is defined as follows in include/fsl_sec.h file:
When address "a" is calculated using math for ex: addition of base address and
an offset, then casting is applied only to the first address which in this
example is base address.

caam_ccbvid_reg = sec_in32(CONFIG_SYS_FSL_SEC_ADDR + CAAM_CCBVID_OFFSET)
resolves to:
caam_ccbvid_reg = in_le32((ulong *)(ulong)CONFIG_SYS_FSL_SEC_ADDR +
 CAAM_CCBVID_OFFSET)
instead it should resolve to:
caam_ccbvid_reg = in_le32((ulong *)(ulong)(CONFIG_SYS_FSL_SEC_ADDR +
 CAAM_CCBVID_OFFSET))

Thus add parenthesis around the address "a" so that however the address is
calculated, the casting is applied to the final calculated address.

Reviewed-by: Horia Geanta 
Reviewed-by: Ye Li 
Signed-off-by: Utkarsh Gupta 
Signed-off-by: Peng Fan

global: Migrate CONFIG_SYS_FSL* symbols to the CFG_SYS namespace

2022-11-10T15:08:55+00:00

Migrate all of COFIG_SYS_FSL* to the CFG_SYS namespace.

Signed-off-by: Tom Rini 
Reviewed-by: Simon Glass

i.MX6SX: crypto/fsl: fix entropy delay value

2022-05-19T19:39:36+00:00

RNG Hardware error is reported due to incorrect entropy delay

rng self test are run to determine the correct ent_dly.
test is executed with different voltage and temperature to identify the
worst case value for ent_dly. after adding a margin value(1000),
ent_dly should be at least 12000.

Signed-off-by: Gaurav Jain 
Reviewed-by: Fabio Estevam

crypto/fsl: i.MX8: Enable Job ring driver model.

2022-04-12T09:19:21+00:00

i.MX8(QM/QXP) - added support for JR driver model.
sec is initialized based on job ring information processed
from device tree.

Signed-off-by: Gaurav Jain 
Signed-off-by: Horia Geantă 
Reviewed-by: Ye Li

imx8m: Add DEK blob encapsulation for imx8m

2021-04-08T18:29:52+00:00

Add DEK blob encapsulation support for IMX8M through "dek_blob" command.
On ARMv8, u-boot runs in non-secure, thus cannot encapsulate a DEK blob
for encrypted boot.
The DEK blob is encapsulated by OP-TEE through a trusted application call.
U-boot sends and receives the DEK and the DEK blob binaries through OP-TEE
dynamic shared memory.

To enable the DEK blob encapsulation, add to the defconfig:
CONFIG_SECURE_BOOT=y
CONFIG_FAT_WRITE=y
CONFIG_CMD_DEKBLOB=y

Signed-off-by: Clement Faure 
Reviewed-by: Ye Li 
Signed-off-by: Peng Fan

crypto: caam: Add secure memory vid 3 support

2021-04-08T07:18:29+00:00

In i.MX8M platforms the secure memory block has a newer version
than those used in i.MX6/7 platforms, this patch update the driver
to use the correct registers offsets.

Signed-off-by: Aymen Sghaier 
Signed-off-by: Peng Fan

crypto: caam: Fix build warnings pointer casting

2021-04-08T07:18:29+00:00

  Enabling CAAM driver for i.MX8M platforms, a 64 bits architecture,
 lead to casting warnings: from/to pointer to/from integer with
 different size. This patch fix these warnings

Signed-off-by: Aymen Sghaier 
Signed-off-by: Peng Fan

crypto: caam: Add CAAM support to i.MX8M platforms

2021-04-08T07:18:29+00:00

This patch enable CAAM support for i.MX8M platforms.

Signed-off-by: Aymen Sghaier 
Signed-off-by: Peng Fan

caam: enable support for iMX7ULP

2021-04-08T07:18:29+00:00

Signed-off-by: Franck LENORMAND 
Signed-off-by: Peng Fan