* [PATCH v1 1/5] configs: verdin-imx8mm: enable RNG support for KASLR
2025-07-01 13:44 Emanuele Ghidoli
@ 2025-07-01 13:44 ` Emanuele Ghidoli
2025-07-01 14:17 ` Francesco Dolcini
2025-07-01 13:44 ` [PATCH v1 2/5] configs: verdin-imx8mp: " Emanuele Ghidoli
` (4 subsequent siblings)
5 siblings, 1 reply; 12+ messages in thread
From: Emanuele Ghidoli @ 2025-07-01 13:44 UTC (permalink / raw)
To: Francesco Dolcini, Tom Rini, Fabio Estevam; +Cc: Emanuele Ghidoli, u-boot
From: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
Enable DM_RNG in U-Boot to automatically populate /chosen/kaslr-seed
and enable CAAM to provide entropy.
Signed-off-by: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
---
configs/verdin-imx8mm_defconfig | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/configs/verdin-imx8mm_defconfig b/configs/verdin-imx8mm_defconfig
index 7db6e81ee6d1..ea085acd28f7 100644
--- a/configs/verdin-imx8mm_defconfig
+++ b/configs/verdin-imx8mm_defconfig
@@ -76,6 +76,7 @@ CONFIG_CMD_TIME=y
CONFIG_CMD_UUID=y
CONFIG_CMD_PMIC=y
CONFIG_CMD_REGULATOR=y
+# CONFIG_CMD_HASH is not set
CONFIG_CMD_EXT4_WRITE=y
# CONFIG_ISO_PARTITION is not set
# CONFIG_SPL_EFI_PARTITION is not set
@@ -99,6 +100,7 @@ CONFIG_SPL_CLK_COMPOSITE_CCF=y
CONFIG_CLK_COMPOSITE_CCF=y
CONFIG_SPL_CLK_IMX8MM=y
CONFIG_CLK_IMX8MM=y
+CONFIG_FSL_CAAM=y
CONFIG_USB_FUNCTION_FASTBOOT=y
CONFIG_FASTBOOT_BUF_ADDR=0x44200000
CONFIG_FASTBOOT_FLASH=y
@@ -108,7 +110,6 @@ CONFIG_GPIO_HOG=y
CONFIG_SPL_GPIO_HOG=y
CONFIG_MXC_GPIO=y
CONFIG_DM_I2C=y
-CONFIG_MISC=y
CONFIG_I2C_EEPROM=y
CONFIG_SUPPORT_EMMC_BOOT=y
CONFIG_MMC_IO_VOLTAGE=y
@@ -139,6 +140,7 @@ CONFIG_SPL_DM_PMIC_PCA9450=y
CONFIG_DM_REGULATOR=y
CONFIG_DM_REGULATOR_FIXED=y
CONFIG_DM_REGULATOR_GPIO=y
+CONFIG_DM_RNG=y
CONFIG_DM_SERIAL=y
CONFIG_MXC_UART=y
CONFIG_SYSRESET=y
@@ -161,4 +163,5 @@ CONFIG_CI_UDC=y
CONFIG_SDP_LOADADDR=0x40400000
CONFIG_SPL_USB_SDP_SUPPORT=y
CONFIG_IMX_WATCHDOG=y
+# CONFIG_SPL_SHA_HW_ACCEL is not set
CONFIG_HEXDUMP=y
--
2.43.0
^ permalink raw reply related [flat|nested] 12+ messages in thread* [PATCH v1 2/5] configs: verdin-imx8mp: enable RNG support for KASLR
2025-07-01 13:44 Emanuele Ghidoli
2025-07-01 13:44 ` [PATCH v1 1/5] configs: verdin-imx8mm: enable RNG support for KASLR Emanuele Ghidoli
@ 2025-07-01 13:44 ` Emanuele Ghidoli
2025-07-01 14:17 ` Francesco Dolcini
2025-07-01 13:44 ` [PATCH v1 3/5] configs: toradex-smarc-imx8mp: " Emanuele Ghidoli
` (3 subsequent siblings)
5 siblings, 1 reply; 12+ messages in thread
From: Emanuele Ghidoli @ 2025-07-01 13:44 UTC (permalink / raw)
To: Francesco Dolcini, Tom Rini, Fabio Estevam; +Cc: Emanuele Ghidoli, u-boot
From: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
Enable DM_RNG in U-Boot to automatically populate /chosen/kaslr-seed.
Signed-off-by: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
---
configs/verdin-imx8mp_defconfig | 1 +
1 file changed, 1 insertion(+)
diff --git a/configs/verdin-imx8mp_defconfig b/configs/verdin-imx8mp_defconfig
index 4cc69de041b4..065520071d15 100644
--- a/configs/verdin-imx8mp_defconfig
+++ b/configs/verdin-imx8mp_defconfig
@@ -162,6 +162,7 @@ CONFIG_POWER_PCA9450=y
CONFIG_DM_REGULATOR_FIXED=y
CONFIG_DM_REGULATOR_GPIO=y
CONFIG_SPL_POWER_I2C=y
+CONFIG_DM_RNG=y
CONFIG_DM_SERIAL=y
CONFIG_MXC_UART=y
CONFIG_SYSRESET=y
--
2.43.0
^ permalink raw reply related [flat|nested] 12+ messages in thread* Re: [PATCH v1 2/5] configs: verdin-imx8mp: enable RNG support for KASLR
2025-07-01 13:44 ` [PATCH v1 2/5] configs: verdin-imx8mp: " Emanuele Ghidoli
@ 2025-07-01 14:17 ` Francesco Dolcini
0 siblings, 0 replies; 12+ messages in thread
From: Francesco Dolcini @ 2025-07-01 14:17 UTC (permalink / raw)
To: Emanuele Ghidoli
Cc: Francesco Dolcini, Tom Rini, Fabio Estevam, Emanuele Ghidoli,
u-boot
On Tue, Jul 01, 2025 at 03:44:57PM +0200, Emanuele Ghidoli wrote:
> From: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
>
> Enable DM_RNG in U-Boot to automatically populate /chosen/kaslr-seed.
>
> Signed-off-by: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
Acked-by: Francesco Dolcini <francesco.dolcini@toradex.com>
^ permalink raw reply [flat|nested] 12+ messages in thread
* [PATCH v1 3/5] configs: toradex-smarc-imx8mp: enable RNG support for KASLR
2025-07-01 13:44 Emanuele Ghidoli
2025-07-01 13:44 ` [PATCH v1 1/5] configs: verdin-imx8mm: enable RNG support for KASLR Emanuele Ghidoli
2025-07-01 13:44 ` [PATCH v1 2/5] configs: verdin-imx8mp: " Emanuele Ghidoli
@ 2025-07-01 13:44 ` Emanuele Ghidoli
2025-07-01 14:18 ` Francesco Dolcini
2025-07-01 13:44 ` [PATCH v1 4/5] configs: apalis-imx8: " Emanuele Ghidoli
` (2 subsequent siblings)
5 siblings, 1 reply; 12+ messages in thread
From: Emanuele Ghidoli @ 2025-07-01 13:44 UTC (permalink / raw)
To: Francesco Dolcini, Tom Rini, Fabio Estevam; +Cc: Emanuele Ghidoli, u-boot
From: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
Enable DM_RNG in U-Boot to automatically populate /chosen/kaslr-seed.
Signed-off-by: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
---
configs/toradex-smarc-imx8mp_defconfig | 1 +
1 file changed, 1 insertion(+)
diff --git a/configs/toradex-smarc-imx8mp_defconfig b/configs/toradex-smarc-imx8mp_defconfig
index 3e7e4264b128..0489f4441152 100644
--- a/configs/toradex-smarc-imx8mp_defconfig
+++ b/configs/toradex-smarc-imx8mp_defconfig
@@ -154,6 +154,7 @@ CONFIG_DM_REGULATOR_PCA9450=y
CONFIG_SPL_DM_REGULATOR_PCA9450=y
CONFIG_DM_REGULATOR_FIXED=y
CONFIG_DM_REGULATOR_GPIO=y
+CONFIG_DM_RNG=y
CONFIG_DM_SERIAL=y
CONFIG_MXC_UART=y
CONFIG_SYSRESET=y
--
2.43.0
^ permalink raw reply related [flat|nested] 12+ messages in thread* [PATCH v1 4/5] configs: apalis-imx8: enable RNG support for KASLR
2025-07-01 13:44 Emanuele Ghidoli
` (2 preceding siblings ...)
2025-07-01 13:44 ` [PATCH v1 3/5] configs: toradex-smarc-imx8mp: " Emanuele Ghidoli
@ 2025-07-01 13:44 ` Emanuele Ghidoli
2025-07-01 14:18 ` Francesco Dolcini
2025-07-01 13:45 ` [PATCH v1 5/5] configs: colibri-imx8x: " Emanuele Ghidoli
2025-07-11 2:21 ` Fabio Estevam
5 siblings, 1 reply; 12+ messages in thread
From: Emanuele Ghidoli @ 2025-07-01 13:44 UTC (permalink / raw)
To: Francesco Dolcini, Tom Rini, Fabio Estevam; +Cc: Emanuele Ghidoli, u-boot
From: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
Enable DM_RNG in U-Boot to automatically populate /chosen/kaslr-seed
and enable CAAM to provide entropy.
Enable ARCH_MISC_INIT to initialize the CAAM job ring.
Signed-off-by: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
---
configs/apalis-imx8_defconfig | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/configs/apalis-imx8_defconfig b/configs/apalis-imx8_defconfig
index dfd586b1c144..da0d51a844b1 100644
--- a/configs/apalis-imx8_defconfig
+++ b/configs/apalis-imx8_defconfig
@@ -32,6 +32,7 @@ CONFIG_SYS_PBSIZE=2068
CONFIG_LOG=y
# CONFIG_DISPLAY_BOARDINFO is not set
CONFIG_DISPLAY_BOARDINFO_LATE=y
+CONFIG_ARCH_MISC_INIT=y
CONFIG_BOARD_EARLY_INIT_F=y
CONFIG_SYS_PROMPT="Apalis iMX8 # "
CONFIG_CMD_CPU=y
@@ -46,6 +47,7 @@ CONFIG_CMD_I2C=y
CONFIG_CMD_MMC=y
CONFIG_CMD_CACHE=y
CONFIG_CMD_UUID=y
+# CONFIG_CMD_HASH is not set
CONFIG_CMD_EXT4_WRITE=y
CONFIG_ENV_OVERWRITE=y
CONFIG_ENV_IS_IN_MMC=y
@@ -66,11 +68,11 @@ CONFIG_TFTP_BLOCKSIZE=4096
CONFIG_BOOTCOUNT_LIMIT=y
CONFIG_BOOTCOUNT_ENV=y
CONFIG_CLK_IMX8=y
+CONFIG_FSL_CAAM=y
CONFIG_GPIO_HOG=y
CONFIG_MXC_GPIO=y
CONFIG_DM_I2C=y
CONFIG_SYS_I2C_IMX_LPI2C=y
-CONFIG_MISC=y
CONFIG_SUPPORT_EMMC_BOOT=y
CONFIG_FSL_USDHC=y
CONFIG_PHYLIB=y
@@ -88,6 +90,7 @@ CONFIG_IMX8_POWER_DOMAIN=y
CONFIG_DM_REGULATOR=y
CONFIG_DM_REGULATOR_FIXED=y
CONFIG_DM_REGULATOR_GPIO=y
+CONFIG_DM_RNG=y
CONFIG_DM_SERIAL=y
CONFIG_FSL_LPUART=y
CONFIG_DM_THERMAL=y
--
2.43.0
^ permalink raw reply related [flat|nested] 12+ messages in thread* Re: [PATCH v1 4/5] configs: apalis-imx8: enable RNG support for KASLR
2025-07-01 13:44 ` [PATCH v1 4/5] configs: apalis-imx8: " Emanuele Ghidoli
@ 2025-07-01 14:18 ` Francesco Dolcini
0 siblings, 0 replies; 12+ messages in thread
From: Francesco Dolcini @ 2025-07-01 14:18 UTC (permalink / raw)
To: Emanuele Ghidoli
Cc: Francesco Dolcini, Tom Rini, Fabio Estevam, Emanuele Ghidoli,
u-boot
On Tue, Jul 01, 2025 at 03:44:59PM +0200, Emanuele Ghidoli wrote:
> From: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
>
> Enable DM_RNG in U-Boot to automatically populate /chosen/kaslr-seed
> and enable CAAM to provide entropy.
> Enable ARCH_MISC_INIT to initialize the CAAM job ring.
>
> Signed-off-by: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
Acked-by: Francesco Dolcini <francesco.dolcini@toradex.com>
^ permalink raw reply [flat|nested] 12+ messages in thread
* [PATCH v1 5/5] configs: colibri-imx8x: enable RNG support for KASLR
2025-07-01 13:44 Emanuele Ghidoli
` (3 preceding siblings ...)
2025-07-01 13:44 ` [PATCH v1 4/5] configs: apalis-imx8: " Emanuele Ghidoli
@ 2025-07-01 13:45 ` Emanuele Ghidoli
2025-07-01 14:18 ` Francesco Dolcini
2025-07-11 2:21 ` Fabio Estevam
5 siblings, 1 reply; 12+ messages in thread
From: Emanuele Ghidoli @ 2025-07-01 13:45 UTC (permalink / raw)
To: Francesco Dolcini, Tom Rini, Fabio Estevam; +Cc: Emanuele Ghidoli, u-boot
From: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
Enable DM_RNG in U-Boot to automatically populate /chosen/kaslr-seed
and enable CAAM to provide entropy.
Enable ARCH_MISC_INIT to initialize the CAAM job ring.
Signed-off-by: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
---
configs/colibri-imx8x_defconfig | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/configs/colibri-imx8x_defconfig b/configs/colibri-imx8x_defconfig
index 431987d3f90b..6880caf9208b 100644
--- a/configs/colibri-imx8x_defconfig
+++ b/configs/colibri-imx8x_defconfig
@@ -33,6 +33,7 @@ CONFIG_SYS_PBSIZE=2068
CONFIG_LOG=y
# CONFIG_DISPLAY_BOARDINFO is not set
CONFIG_DISPLAY_BOARDINFO_LATE=y
+CONFIG_ARCH_MISC_INIT=y
CONFIG_BOARD_EARLY_INIT_F=y
CONFIG_SYS_PROMPT="Colibri iMX8X # "
CONFIG_CMD_CPU=y
@@ -47,6 +48,7 @@ CONFIG_CMD_I2C=y
CONFIG_CMD_MMC=y
CONFIG_CMD_CACHE=y
CONFIG_CMD_UUID=y
+# CONFIG_CMD_HASH is not set
CONFIG_CMD_EXT4_WRITE=y
CONFIG_ENV_OVERWRITE=y
CONFIG_ENV_IS_IN_MMC=y
@@ -67,12 +69,12 @@ CONFIG_TFTP_BLOCKSIZE=4096
CONFIG_BOOTCOUNT_LIMIT=y
CONFIG_BOOTCOUNT_ENV=y
CONFIG_CLK_IMX8=y
+CONFIG_FSL_CAAM=y
CONFIG_GPIO_HOG=y
CONFIG_FXL6408_GPIO=y
CONFIG_MXC_GPIO=y
CONFIG_DM_I2C=y
CONFIG_SYS_I2C_IMX_LPI2C=y
-CONFIG_MISC=y
CONFIG_SUPPORT_EMMC_BOOT=y
CONFIG_FSL_USDHC=y
CONFIG_PHYLIB=y
@@ -89,6 +91,7 @@ CONFIG_IMX8_POWER_DOMAIN=y
CONFIG_DM_REGULATOR=y
CONFIG_DM_REGULATOR_FIXED=y
CONFIG_DM_REGULATOR_GPIO=y
+CONFIG_DM_RNG=y
CONFIG_DM_SERIAL=y
CONFIG_FSL_LPUART=y
CONFIG_DM_THERMAL=y
--
2.43.0
^ permalink raw reply related [flat|nested] 12+ messages in thread* Re: [PATCH v1 5/5] configs: colibri-imx8x: enable RNG support for KASLR
2025-07-01 13:45 ` [PATCH v1 5/5] configs: colibri-imx8x: " Emanuele Ghidoli
@ 2025-07-01 14:18 ` Francesco Dolcini
0 siblings, 0 replies; 12+ messages in thread
From: Francesco Dolcini @ 2025-07-01 14:18 UTC (permalink / raw)
To: Emanuele Ghidoli
Cc: Francesco Dolcini, Tom Rini, Fabio Estevam, Emanuele Ghidoli,
u-boot
On Tue, Jul 01, 2025 at 03:45:00PM +0200, Emanuele Ghidoli wrote:
> From: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
>
> Enable DM_RNG in U-Boot to automatically populate /chosen/kaslr-seed
> and enable CAAM to provide entropy.
> Enable ARCH_MISC_INIT to initialize the CAAM job ring.
>
> Signed-off-by: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
Acked-by: Francesco Dolcini <francesco.dolcini@toradex.com>
^ permalink raw reply [flat|nested] 12+ messages in thread
* Re:
2025-07-01 13:44 Emanuele Ghidoli
` (4 preceding siblings ...)
2025-07-01 13:45 ` [PATCH v1 5/5] configs: colibri-imx8x: " Emanuele Ghidoli
@ 2025-07-11 2:21 ` Fabio Estevam
5 siblings, 0 replies; 12+ messages in thread
From: Fabio Estevam @ 2025-07-11 2:21 UTC (permalink / raw)
To: Emanuele Ghidoli; +Cc: Francesco Dolcini, Tom Rini, Emanuele Ghidoli, u-boot
On Tue, Jul 1, 2025 at 10:45 AM Emanuele Ghidoli
<ghidoliemanuele@gmail.com> wrote:
>
> From: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
>
> Subject: [PATCH v1 0/5] Enable RNG support for KASLR on Toradex arm64 i.MX SoMs
>
> This patch series enables RNG support to automatically populate /chosen/kaslr-seed on the following Toradex arm64 i.MX System on Modules (SoMs):
> - Verdin iMX8MM
> - Verdin iMX8MP
> - Toradex SMARC iMX8MP
> - Apalis iMX8
> - Colibri iMX8X
>
> This improves kernel security by supporting Kernel Address Space Layout Randomization (KASLR) using a runtime-provided seed from the hardware RNG.
>
> Signed-off-by: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>
Applied the series, thanks.
^ permalink raw reply [flat|nested] 12+ messages in thread