From: Lukasz Majewski <lukma@denx.de>
To: u-boot@lists.denx.de
Subject: [U-Boot] [PATCH] imx: hab: Increase CSF_SIZE for i.MX6 and i.MX7 devices
Date: Fri, 26 Apr 2019 07:51:13 +0200 [thread overview]
Message-ID: <20190426075113.65d0f2b4@jawa> (raw)
In-Reply-To: <1556247347-68-1-git-send-email-breno.lima@nxp.com>
On Fri, 26 Apr 2019 02:56:48 +0000
Breno Matheus Lima <breno.lima@nxp.com> wrote:
> In certain i.MX devices the encrypted boot image is failing to boot.
>
> According to AN12056 "Encrypted Boot on HABv4 and CAAM Enabled
> Devices" it's necessary to pad CSF to 0x2000 and append DEK blob.
>
> In this case the total image size in boot data structure must cover
> the entire binary otherwise the dek_blob won't be copied to memory
> and image won't be decrypted.
>
> Increase CSF_SIZE to 0x4000 to avoid such issue when booting encrypted
> boot images.
Reviewed-by: Lukasz Majewski <lukma@denx.de>
>
> Signed-off-by: Breno Lima <breno.lima@nxp.com>
> ---
> include/configs/mx6_common.h | 2 +-
> include/configs/mx7_common.h | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/include/configs/mx6_common.h
> b/include/configs/mx6_common.h index 6b20c6db58..2b8ce9d71d 100644
> --- a/include/configs/mx6_common.h
> +++ b/include/configs/mx6_common.h
> @@ -59,7 +59,7 @@
>
> /* Secure boot (HAB) support */
> #ifdef CONFIG_SECURE_BOOT
> -#define CONFIG_CSF_SIZE 0x2000
> +#define CONFIG_CSF_SIZE 0x4000
> #ifdef CONFIG_SPL_BUILD
> #define CONFIG_SPL_DRIVERS_MISC_SUPPORT
> #endif
> diff --git a/include/configs/mx7_common.h
> b/include/configs/mx7_common.h index cc7e87269e..f3167c51d4 100644
> --- a/include/configs/mx7_common.h
> +++ b/include/configs/mx7_common.h
> @@ -48,7 +48,7 @@
>
> /* Secure boot (HAB) support */
> #ifdef CONFIG_SECURE_BOOT
> -#define CONFIG_CSF_SIZE 0x2000
> +#define CONFIG_CSF_SIZE 0x4000
> #ifdef CONFIG_SPL_BUILD
> #define CONFIG_SPL_DRIVERS_MISC_SUPPORT
> #endif
Best regards,
Lukasz Majewski
--
DENX Software Engineering GmbH, Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-59 Fax: (+49)-8142-66989-80 Email: lukma at denx.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.denx.de/pipermail/u-boot/attachments/20190426/bfaa5ccc/attachment.sig>
next prev parent reply other threads:[~2019-04-26 5:51 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-04-26 2:56 [U-Boot] [PATCH] imx: hab: Increase CSF_SIZE for i.MX6 and i.MX7 devices Breno Matheus Lima
2019-04-26 5:51 ` Lukasz Majewski [this message]
2019-04-26 12:35 ` Fabio Estevam
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190426075113.65d0f2b4@jawa \
--to=lukma@denx.de \
--cc=u-boot@lists.denx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox