All of lore.kernel.org
 help / color / mirror / Atom feed
From: Stefano Babic <sbabic@denx.de>
To: u-boot@lists.denx.de
Subject: [U-Boot] [PATCH 2/2] arm: mxs: Add support for generating signed BootStream
Date: Tue, 01 Apr 2014 10:16:04 +0200	[thread overview]
Message-ID: <533A75C4.9080402@denx.de> (raw)
In-Reply-To: <1394046074-6389-2-git-send-email-marex@denx.de>

On 05/03/2014 20:01, Marek Vasut wrote:
> This patch adds the groundwork for generating signed BootStream, which
> can be used by the HAB library in i.MX28. We are adding a new target,
> u-boot-signed.sb , since the process for generating regular non-signed
> BootStream is much easier. Moreover, the signed bootstream depends on
> external _proprietary_ _binary-only_ tool from Freescale called 'cst',
> which is available only under NDA.
> 
> To make things even uglier, the CST or HAB mandates a kind-of circular
> dependency. The problem is, unlike the regular IVT, which is generated
> by mxsimage, the IVT for signed boot must be generated by hand here due
> to special demands of the CST. The U-Boot binary (or SPL binary) and IVT
> are then signed by the CST as a one block. But here is the problem. The
> size of the entire image (U-Boot, IVT, CST blocks) must be appended at
> the end of IVT. But the size of the entire image is not known until the
> CST has finished signing the U-Boot and IVT. We solve this by expecting
> the CST block to be always 3904B (which it is in case two files, U-Boot
> and the hand-made IVT, are signed in the CST block).
> 
> Signed-off-by: Marek Vasut <marex@denx.de>
> Cc: Stefano Babic <sbabic@denx.de>
> ---

Applied to u-boot-imx, thanks !

Best regards,
Stefano Babic


-- 
=====================================================================
DENX Software Engineering GmbH,     MD: Wolfgang Denk & Detlev Zundel
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: +49-8142-66989-53 Fax: +49-8142-66989-80 Email: sbabic at denx.de
=====================================================================

  reply	other threads:[~2014-04-01  8:16 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2014-03-05 19:01 [U-Boot] [PATCH 1/2] arm: mxs: Adjust the load address of U-Boot and SPL for HAB Marek Vasut
2014-03-05 19:01 ` [U-Boot] [PATCH 2/2] arm: mxs: Add support for generating signed BootStream Marek Vasut
2014-04-01  8:16   ` Stefano Babic [this message]
2014-04-01  8:15 ` [U-Boot] [PATCH 1/2] arm: mxs: Adjust the load address of U-Boot and SPL for HAB Stefano Babic
  -- strict thread matches above, loose matches on Subject: below --
2014-04-03 17:12 Marek Vasut
2014-04-03 17:12 ` [U-Boot] [PATCH 2/2] arm: mxs: Add support for generating signed BootStream Marek Vasut
2014-04-04  9:52   ` Stefano Babic
2014-04-04 11:54     ` Marek Vasut

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=533A75C4.9080402@denx.de \
    --to=sbabic@denx.de \
    --cc=u-boot@lists.denx.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.