* [U-Boot] [PATCH] imx: hab: Increase CSF_SIZE for i.MX6 and i.MX7 devices
@ 2019-04-26 2:56 Breno Matheus Lima
2019-04-26 5:51 ` Lukasz Majewski
2019-04-26 12:35 ` Fabio Estevam
0 siblings, 2 replies; 3+ messages in thread
From: Breno Matheus Lima @ 2019-04-26 2:56 UTC (permalink / raw)
To: u-boot
In certain i.MX devices the encrypted boot image is failing to boot.
According to AN12056 "Encrypted Boot on HABv4 and CAAM Enabled Devices"
it's necessary to pad CSF to 0x2000 and append DEK blob.
In this case the total image size in boot data structure must cover the
entire binary otherwise the dek_blob won't be copied to memory and image
won't be decrypted.
Increase CSF_SIZE to 0x4000 to avoid such issue when booting encrypted
boot images.
Signed-off-by: Breno Lima <breno.lima@nxp.com>
---
include/configs/mx6_common.h | 2 +-
include/configs/mx7_common.h | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/include/configs/mx6_common.h b/include/configs/mx6_common.h
index 6b20c6db58..2b8ce9d71d 100644
--- a/include/configs/mx6_common.h
+++ b/include/configs/mx6_common.h
@@ -59,7 +59,7 @@
/* Secure boot (HAB) support */
#ifdef CONFIG_SECURE_BOOT
-#define CONFIG_CSF_SIZE 0x2000
+#define CONFIG_CSF_SIZE 0x4000
#ifdef CONFIG_SPL_BUILD
#define CONFIG_SPL_DRIVERS_MISC_SUPPORT
#endif
diff --git a/include/configs/mx7_common.h b/include/configs/mx7_common.h
index cc7e87269e..f3167c51d4 100644
--- a/include/configs/mx7_common.h
+++ b/include/configs/mx7_common.h
@@ -48,7 +48,7 @@
/* Secure boot (HAB) support */
#ifdef CONFIG_SECURE_BOOT
-#define CONFIG_CSF_SIZE 0x2000
+#define CONFIG_CSF_SIZE 0x4000
#ifdef CONFIG_SPL_BUILD
#define CONFIG_SPL_DRIVERS_MISC_SUPPORT
#endif
--
2.17.1
^ permalink raw reply related [flat|nested] 3+ messages in thread
* [U-Boot] [PATCH] imx: hab: Increase CSF_SIZE for i.MX6 and i.MX7 devices
2019-04-26 2:56 [U-Boot] [PATCH] imx: hab: Increase CSF_SIZE for i.MX6 and i.MX7 devices Breno Matheus Lima
@ 2019-04-26 5:51 ` Lukasz Majewski
2019-04-26 12:35 ` Fabio Estevam
1 sibling, 0 replies; 3+ messages in thread
From: Lukasz Majewski @ 2019-04-26 5:51 UTC (permalink / raw)
To: u-boot
On Fri, 26 Apr 2019 02:56:48 +0000
Breno Matheus Lima <breno.lima@nxp.com> wrote:
> In certain i.MX devices the encrypted boot image is failing to boot.
>
> According to AN12056 "Encrypted Boot on HABv4 and CAAM Enabled
> Devices" it's necessary to pad CSF to 0x2000 and append DEK blob.
>
> In this case the total image size in boot data structure must cover
> the entire binary otherwise the dek_blob won't be copied to memory
> and image won't be decrypted.
>
> Increase CSF_SIZE to 0x4000 to avoid such issue when booting encrypted
> boot images.
Reviewed-by: Lukasz Majewski <lukma@denx.de>
>
> Signed-off-by: Breno Lima <breno.lima@nxp.com>
> ---
> include/configs/mx6_common.h | 2 +-
> include/configs/mx7_common.h | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/include/configs/mx6_common.h
> b/include/configs/mx6_common.h index 6b20c6db58..2b8ce9d71d 100644
> --- a/include/configs/mx6_common.h
> +++ b/include/configs/mx6_common.h
> @@ -59,7 +59,7 @@
>
> /* Secure boot (HAB) support */
> #ifdef CONFIG_SECURE_BOOT
> -#define CONFIG_CSF_SIZE 0x2000
> +#define CONFIG_CSF_SIZE 0x4000
> #ifdef CONFIG_SPL_BUILD
> #define CONFIG_SPL_DRIVERS_MISC_SUPPORT
> #endif
> diff --git a/include/configs/mx7_common.h
> b/include/configs/mx7_common.h index cc7e87269e..f3167c51d4 100644
> --- a/include/configs/mx7_common.h
> +++ b/include/configs/mx7_common.h
> @@ -48,7 +48,7 @@
>
> /* Secure boot (HAB) support */
> #ifdef CONFIG_SECURE_BOOT
> -#define CONFIG_CSF_SIZE 0x2000
> +#define CONFIG_CSF_SIZE 0x4000
> #ifdef CONFIG_SPL_BUILD
> #define CONFIG_SPL_DRIVERS_MISC_SUPPORT
> #endif
Best regards,
Lukasz Majewski
--
DENX Software Engineering GmbH, Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-59 Fax: (+49)-8142-66989-80 Email: lukma at denx.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.denx.de/pipermail/u-boot/attachments/20190426/bfaa5ccc/attachment.sig>
^ permalink raw reply [flat|nested] 3+ messages in thread
* [U-Boot] [PATCH] imx: hab: Increase CSF_SIZE for i.MX6 and i.MX7 devices
2019-04-26 2:56 [U-Boot] [PATCH] imx: hab: Increase CSF_SIZE for i.MX6 and i.MX7 devices Breno Matheus Lima
2019-04-26 5:51 ` Lukasz Majewski
@ 2019-04-26 12:35 ` Fabio Estevam
1 sibling, 0 replies; 3+ messages in thread
From: Fabio Estevam @ 2019-04-26 12:35 UTC (permalink / raw)
To: u-boot
On Thu, Apr 25, 2019 at 11:56 PM Breno Matheus Lima <breno.lima@nxp.com> wrote:
>
> In certain i.MX devices the encrypted boot image is failing to boot.
>
> According to AN12056 "Encrypted Boot on HABv4 and CAAM Enabled Devices"
> it's necessary to pad CSF to 0x2000 and append DEK blob.
>
> In this case the total image size in boot data structure must cover the
> entire binary otherwise the dek_blob won't be copied to memory and image
> won't be decrypted.
>
> Increase CSF_SIZE to 0x4000 to avoid such issue when booting encrypted
> boot images.
>
> Signed-off-by: Breno Lima <breno.lima@nxp.com>
Reviewed-by: Fabio Estevam <festevam@gmail.com>
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2019-04-26 12:35 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2019-04-26 2:56 [U-Boot] [PATCH] imx: hab: Increase CSF_SIZE for i.MX6 and i.MX7 devices Breno Matheus Lima
2019-04-26 5:51 ` Lukasz Majewski
2019-04-26 12:35 ` Fabio Estevam
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox