diff options
| author | Clement Faure <[email protected]> | 2021-03-25 17:30:33 +0800 |
|---|---|---|
| committer | Stefano Babic <[email protected]> | 2021-04-08 20:29:52 +0200 |
| commit | 56d2050f40287fe46757d4cbe69d62a1381c3c64 (patch) | |
| tree | e0306aa0489ba7b4bc923c2c5cc875b03cfabb04 /include/linux/linux_string.h | |
| parent | 613cf239ed490f900b8f822df4a2d5a1a27d7a47 (diff) | |
imx8m: Add DEK blob encapsulation for imx8m
Add DEK blob encapsulation support for IMX8M through "dek_blob" command.
On ARMv8, u-boot runs in non-secure, thus cannot encapsulate a DEK blob
for encrypted boot.
The DEK blob is encapsulated by OP-TEE through a trusted application call.
U-boot sends and receives the DEK and the DEK blob binaries through OP-TEE
dynamic shared memory.
To enable the DEK blob encapsulation, add to the defconfig:
CONFIG_SECURE_BOOT=y
CONFIG_FAT_WRITE=y
CONFIG_CMD_DEKBLOB=y
Signed-off-by: Clement Faure <[email protected]>
Reviewed-by: Ye Li <[email protected]>
Signed-off-by: Peng Fan <[email protected]>
Diffstat (limited to 'include/linux/linux_string.h')
0 files changed, 0 insertions, 0 deletions