From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 2C2DDC77B78 for ; Thu, 4 May 2023 09:37:51 +0000 (UTC) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 6497484757; Thu, 4 May 2023 11:37:49 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=ti.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (1024-bit key; unprotected) header.d=ti.com header.i=@ti.com header.b="l0g+vz9k"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id 18AA484757; Thu, 4 May 2023 11:37:48 +0200 (CEST) Received: from lelv0143.ext.ti.com (lelv0143.ext.ti.com [198.47.23.248]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 94E328474D for ; Thu, 4 May 2023 11:37:43 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=quarantine dis=none) header.from=ti.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=n-francis@ti.com Received: from lelv0266.itg.ti.com ([10.180.67.225]) by lelv0143.ext.ti.com (8.15.2/8.15.2) with ESMTP id 3449bcoa051937; Thu, 4 May 2023 04:37:38 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ti.com; s=ti-com-17Q1; t=1683193058; bh=OwRh/rlqmR+LZ7j/+BOfQniERcHCR6951qcOiCpw+Kg=; h=Date:Subject:To:CC:References:From:In-Reply-To; b=l0g+vz9k+2km73UQKrJYxX/lRVnCq3rTAER8yHA1xnG6Y9k1gqlQuvS2Nj19bvk6Y wi4hRKD72SlbxZazZCk2zq4kqwcaDPH9ZR3jf4qvVvtW94L590NmK6fGkycZgJXb5X aKr/L23d9XWt9h9J+iV4fUy+gkSYJL+F8U3HoVU0= Received: from DLEE101.ent.ti.com (dlee101.ent.ti.com [157.170.170.31]) by lelv0266.itg.ti.com (8.15.2/8.15.2) with ESMTPS id 3449bc6I029565 (version=TLSv1.2 cipher=AES256-GCM-SHA384 bits=256 verify=FAIL); Thu, 4 May 2023 04:37:38 -0500 Received: from DLEE115.ent.ti.com (157.170.170.26) by DLEE101.ent.ti.com (157.170.170.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2507.23; Thu, 4 May 2023 04:37:37 -0500 Received: from lelv0327.itg.ti.com (10.180.67.183) by DLEE115.ent.ti.com (157.170.170.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2507.23 via Frontend Transport; Thu, 4 May 2023 04:37:37 -0500 Received: from [172.24.145.195] (ileaxei01-snat.itg.ti.com [10.180.69.5]) by lelv0327.itg.ti.com (8.15.2/8.15.2) with ESMTP id 3449bXYj042225; Thu, 4 May 2023 04:37:34 -0500 Message-ID: <8b071356-d20a-2882-a1de-1e183bbf62e4@ti.com> Date: Thu, 4 May 2023 15:07:33 +0530 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.10.0 Subject: Re: [PATCH v3 00/19] Migration to using binman for bootloader Content-Language: en-US To: Christian Gmeiner , "Andrew F. Davis" CC: , , , , , , , , References: <20230421123203.1315330-1-n-francis@ti.com> From: Neha Malcom Francis In-Reply-To: Content-Type: text/plain; charset="UTF-8"; format=flowed Content-Transfer-Encoding: 7bit X-EXCLAIMER-MD-CONFIG: e1e8a2fd-e40a-4ac6-ac9b-f7e9cc9ee180 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean Hi Christian On 04/05/23 14:08, Christian Gmeiner wrote: > Hi > >> >> This series aims to eliminate the use of additional custom repositories >> such as k3-image-gen (K3 Image Generation) repo and core-secdev-k3 (K3 >> Security Development Tools) that was plumbed into the U-Boot build flow >> to generate boot images for TI K3 platform devices. And instead, we move >> towards using binman that aligns better with the community standard build >> flow. >> >> This series uses binman for all K3 platforms supported on U-Boot currently; >> both HS (High Security, both SE and FS) and GP (General Purpose) devices. >> >> Background on using k3-image-gen: >> * TI K3 devices require a SYSFW (System Firmware) image consisting >> of a signed system firmware image and board configuration binaries, >> this is needed to bring up system firmware during U-Boot R5 SPL >> startup. >> * Board configuration data contain board-specific information >> such as resource management, power management and security. >> >> Background on using core-secdev-k3: >> * Contains resources to sign x509 certificates for HS devices >> >> Series intends to use binman to take over the packaging and signing for >> the R5 bootloader images tiboot3.bin (and sysfw.itb, for non-combined >> boot flow) instead of k3-image-gen. >> >> Series also packages the A72/A53 bootloader images (tispl.bin and >> u-boot.img) using ATF, OPTEE and DM (Device Manager) > > This simplifies building U-Boot with sysfw alot - thanks for your > work! I have tested this series on > an am642 based design. One thing is missing for my HSM use case. I > want to build an unsigned > Image and need to sign it with binman in the context of the HSM. > Therefore we need repacking > support. Are you working on that too? > So the idea of signing using binman in the HSM flow was discussed earlier [1] and the final call was to leave the boot artifacts that could be re-signed. So repacking support is not part of this series right now, you can use the tools mentioned in the thread [1] to do that for simple enough FIT images. However complex images like tiboot3.bin and tispl.bin might be a future action. I am not completely sure of the HSM flow though, pinging Andrew to comment further on this. [1] https://lore.kernel.org/all/0b2a8709-eb49-b866-5733-21bee021dbfe@ti.com/ -- Thanking You Neha Malcom Francis