Re: FIT image: load secure FPGA

Adrian Fiergolski
2022-02-09T12:20:23Z

Hi,

On 09.02.2022 08:51, Jorge Ramirez-Ortiz, Foundries wrote:
>
>> I have also shared with the community a patch, on top of your changes,
>> adding encrypted bitfile support in u-boot.
>
> awesome. btw how is the bitstream decrypted? I didnt look into that, I
> suppose there is probably a doc somewhere?
>
It uses ZynqMP's CSU, AES-GCM and device keys (stored either in BBRAM or
eFuses). It's described in UG1085 under the Loading bitstream (in
encrypt only secure boot mode) subchapter.

Regards,

Adrian