From mboxrd@z Thu Jan 1 00:00:00 1970 From: Lukasz Majewski Date: Fri, 26 Apr 2019 07:51:13 +0200 Subject: [U-Boot] [PATCH] imx: hab: Increase CSF_SIZE for i.MX6 and i.MX7 devices In-Reply-To: <1556247347-68-1-git-send-email-breno.lima@nxp.com> References: <1556247347-68-1-git-send-email-breno.lima@nxp.com> Message-ID: <20190426075113.65d0f2b4@jawa> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de On Fri, 26 Apr 2019 02:56:48 +0000 Breno Matheus Lima wrote: > In certain i.MX devices the encrypted boot image is failing to boot. > > According to AN12056 "Encrypted Boot on HABv4 and CAAM Enabled > Devices" it's necessary to pad CSF to 0x2000 and append DEK blob. > > In this case the total image size in boot data structure must cover > the entire binary otherwise the dek_blob won't be copied to memory > and image won't be decrypted. > > Increase CSF_SIZE to 0x4000 to avoid such issue when booting encrypted > boot images. Reviewed-by: Lukasz Majewski > > Signed-off-by: Breno Lima > --- > include/configs/mx6_common.h | 2 +- > include/configs/mx7_common.h | 2 +- > 2 files changed, 2 insertions(+), 2 deletions(-) > > diff --git a/include/configs/mx6_common.h > b/include/configs/mx6_common.h index 6b20c6db58..2b8ce9d71d 100644 > --- a/include/configs/mx6_common.h > +++ b/include/configs/mx6_common.h > @@ -59,7 +59,7 @@ > > /* Secure boot (HAB) support */ > #ifdef CONFIG_SECURE_BOOT > -#define CONFIG_CSF_SIZE 0x2000 > +#define CONFIG_CSF_SIZE 0x4000 > #ifdef CONFIG_SPL_BUILD > #define CONFIG_SPL_DRIVERS_MISC_SUPPORT > #endif > diff --git a/include/configs/mx7_common.h > b/include/configs/mx7_common.h index cc7e87269e..f3167c51d4 100644 > --- a/include/configs/mx7_common.h > +++ b/include/configs/mx7_common.h > @@ -48,7 +48,7 @@ > > /* Secure boot (HAB) support */ > #ifdef CONFIG_SECURE_BOOT > -#define CONFIG_CSF_SIZE 0x2000 > +#define CONFIG_CSF_SIZE 0x4000 > #ifdef CONFIG_SPL_BUILD > #define CONFIG_SPL_DRIVERS_MISC_SUPPORT > #endif Best regards, Lukasz Majewski -- DENX Software Engineering GmbH, Managing Director: Wolfgang Denk HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany Phone: (+49)-8142-66989-59 Fax: (+49)-8142-66989-80 Email: lukma at denx.de -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 488 bytes Desc: OpenPGP digital signature URL: