arm: mvebu: Implement secure boot
The patch implements secure booting for the mvebu architecture. This includes: - The addition of secure headers and all needed signatures and keys in mkimage - Commands capable of writing the board's efuses to both write the needed cryptographic data and enable the secure booting mechanism - The creation of convenience text files containing the necessary commands to write the efuses The KAK and CSK keys are expected to reside in the files kwb_kak.key and kwb_csk.key (OpenSSL 2048 bit private keys) in the top-level directory. Signed-off-by:Reinhard Pfau <reinhard.pfau@gdsys.cc> Signed-off-by:
Mario Six <mario.six@gdsys.cc> Reviewed-by:
Stefan Roese <sr@denx.de> Reviewed-by:
Simon Glass <sjg@chromium.org> Signed-off-by:
Stefan Roese <sr@denx.de>
Showing
- Makefile 2 additions, 1 deletionMakefile
- arch/arm/mach-mvebu/Kconfig 35 additions, 0 deletionsarch/arm/mach-mvebu/Kconfig
- arch/arm/mach-mvebu/Makefile 1 addition, 0 deletionsarch/arm/mach-mvebu/Makefile
- arch/arm/mach-mvebu/efuse.c 264 additions, 0 deletionsarch/arm/mach-mvebu/efuse.c
- arch/arm/mach-mvebu/include/mach/cpu.h 2 additions, 0 deletionsarch/arm/mach-mvebu/include/mach/cpu.h
- arch/arm/mach-mvebu/include/mach/efuse.h 69 additions, 0 deletionsarch/arm/mach-mvebu/include/mach/efuse.h
- doc/README.armada-secureboot 373 additions, 0 deletionsdoc/README.armada-secureboot
- tools/Makefile 5 additions, 1 deletiontools/Makefile
- tools/kwbimage.c 738 additions, 6 deletionstools/kwbimage.c
- tools/kwbimage.h 37 additions, 0 deletionstools/kwbimage.h
Loading
Please register or sign in to comment