From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pali =?utf-8?q?Roh=C3=A1r?= Subject: Re: runtime check for omap-aes bus access permission (was: Re: 3.13-rc3 (commit 7ce93f3) breaks Nokia N900 DT boot) Date: Sun, 1 Feb 2015 09:56:28 +0100 Message-ID: <201502010956.28662@pali> References: <20131206213613.GA19648@earth.universe> <201501312009.58483@pali> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart4700414.pSP54dPovU"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Return-path: Received: from mail-wi0-f174.google.com ([209.85.212.174]:48788 "EHLO mail-wi0-f174.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751490AbbBAI4b (ORCPT ); Sun, 1 Feb 2015 03:56:31 -0500 Received: by mail-wi0-f174.google.com with SMTP id n3so10875592wiv.1 for ; Sun, 01 Feb 2015 00:56:30 -0800 (PST) In-Reply-To: Sender: linux-omap-owner@vger.kernel.org List-Id: linux-omap@vger.kernel.org To: Matthijs van Duin Cc: Joel Fernandes , Tony Lindgren , linux-omap@vger.kernel.org, Aaro Koskinen , Nishanth Menon , Pavel Machek , Sebastian Reichel --nextPart4700414.pSP54dPovU Content-Type: Text/Plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable On Sunday 01 February 2015 02:36:06 Matthijs van Duin wrote: > On 31 January 2015 at 20:06, Pali Roh=C3=A1r =20 > wrote: > > I have configured two testing N900 devices. One with signed > > bootloader which enable omap aes support and one device with > > signed bootloader which does not enable omap aes support. >=20 > I'm probably missing some context here, but why not just use > the one with aes support? Alternatively, one may argue that > it's the bootloader's job to provide the kernel with an > accurate device tree. (Though one may equally well argue that > it would be nice to avoid having to customize the device tree > for every feature-flavor of a processor, especially if this > depends on how it's initialized.) >=20 Nokia X-Loader is closed source and signed. So we cannot modify=20 it. And it is responsible for configuring L3/L4 firewall. Year ago it was possible to find on internet signed X-Loader for=20 N900 which enable omap aes support (for testing purpose together=20 with open source linux kernel modules), but it is unofficial and=20 I think there only too few people who flashed it into N900 nand.=20 If somebody needs binaries I have backup all of them. More info about that aes enabled X-Loader: http://maemo.org/community/maemo-developers/n900_aes_and_sha1-md5_hw_accele= ration_drivers/ Majority of users use only official X-Loader which does not=20 enable aes support so we cannot enable kernel modules (cause=20 crashes). And also we cannot force users to flash some unofficial=20 binary into their device... =2D-=20 Pali Roh=C3=A1r pali.rohar@gmail.com --nextPart4700414.pSP54dPovU Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEABECAAYFAlTN6jwACgkQi/DJPQPkQ1KavACfTCUxkOxs6FTANLXnmyWpid+U gvAAn2+v3LOykQ5YebMwyDEy/EPyVsRl =yaSg -----END PGP SIGNATURE----- --nextPart4700414.pSP54dPovU--