From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id AB66AC6FD1C for ; Mon, 20 Mar 2023 21:50:57 +0000 (UTC) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 35EFC85C42; Mon, 20 Mar 2023 22:50:48 +0100 (CET) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=konsulko.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (1024-bit key; unprotected) header.d=konsulko.com header.i=@konsulko.com header.b="cwszD4xt"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id F22D885C63; Mon, 20 Mar 2023 22:50:40 +0100 (CET) Received: from mail-qt1-x832.google.com (mail-qt1-x832.google.com [IPv6:2607:f8b0:4864:20::832]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 0F16080BAF for ; Mon, 20 Mar 2023 22:50:25 +0100 (CET) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=konsulko.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=trini@konsulko.com Received: by mail-qt1-x832.google.com with SMTP id c18so14998411qte.5 for ; Mon, 20 Mar 2023 14:50:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1679349024; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=zgTX+7Qti10EmXZB4ULaknoWHevgyWm4KZUvt2VxAuk=; b=cwszD4xt40HxwHoJIyQPbHzAtHljGPKvl8QoJh6mTGaEy4cdhq9q5/oG4gJ7vPGN57 c2sVTr0hztlk9X66N3SbRIeYeChY7FeR0uwpEGFgEa2n8MrOxtUl++Mwi5DS7pmUOSKX GhsKKFlQXzd5JvylXtk6CQDazFQaPJpJf3EXo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679349024; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=zgTX+7Qti10EmXZB4ULaknoWHevgyWm4KZUvt2VxAuk=; b=2lOe2zJaEtl6hHilU3XlP74amQ7KNFAzOH0pDJ8yV9nekltIlb35fw4XDl9ksqpwQf icy5RtmpNGzEG5PWgdbqxc6+KnBexPGXN0BEGsSGlRtfAIbfQZnnhqy9t7nfelBwhmxe 9H7sK5XN+TnySZmfPTiJ1BgjrGgy6/m3pCV11Ye0IaCIAnodUqZZl10nmvS8esBq+tcH FZYJMEBx0qGlTaBodjDAkV9D+PmDYqlYXDG49w0jUyfhdsjBZLGvhxXHd2XH3Kd+6WOS 8WleZX0w4LkrEpV2GdP/0dbkmZfMGOZkJ6hzezgCjDdU0MzB5TITRVfWmTVJBMfVdu8n 6YsQ== X-Gm-Message-State: AO0yUKUbWYxZg2hKVI0eOcIxkTs6OLugvOo4UJEZZczTv+6DHOwWX0Cd QamOj1B6qiVUl4yItjPekoFNrOuZ4Yuj9Mpr3ybPmg== X-Google-Smtp-Source: AK7set8ADBvbwgdu27XhJCJSN2a6ysm/ne50YiZ1LiYq0lZMwvb7PzyAWnXago6Lh4t4Yybo1VIgVg== X-Received: by 2002:a05:622a:11d5:b0:3d8:8d4b:c7cc with SMTP id n21-20020a05622a11d500b003d88d4bc7ccmr1226127qtk.46.1679349023852; Mon, 20 Mar 2023 14:50:23 -0700 (PDT) Received: from bill-the-cat (2603-6081-7b00-6400-0c83-dcca-a3a0-54f4.res6.spectrum.com. [2603:6081:7b00:6400:c83:dcca:a3a0:54f4]) by smtp.gmail.com with ESMTPSA id h13-20020ac8744d000000b003e248cc2986sm2015187qtr.43.2023.03.20.14.50.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 20 Mar 2023 14:50:23 -0700 (PDT) Date: Mon, 20 Mar 2023 17:50:21 -0400 From: Tom Rini To: Bryan Brattlof Cc: UBoot Mailing List , Kamlesh Gurudasani , Judith Mendez Subject: Re: [PATCH] configs: am62ax: enable secure device configs by default Message-ID: <20230320215021.GK8135@bill-the-cat> References: <20230317233711.1382795-1-bb@ti.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="3oyK3PmK4IgmVZmT" Content-Disposition: inline In-Reply-To: <20230317233711.1382795-1-bb@ti.com> X-Clacks-Overhead: GNU Terry Pratchett X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean --3oyK3PmK4IgmVZmT Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Mar 17, 2023 at 06:37:11PM -0500, Bryan Brattlof wrote: > TI's security enforcing SoCs will authenticate each binary it loads by > comparing it's signature with keys etched into the SoC during the boot > up process. The am62ax family of SoCs by default will have some level of > security enforcement checking. To keep things as simple as possible, > enable the CONFIG_TI_SECURE_DEVICE options by default so all levels of > secure SoCs will work out of the box >=20 > Enable the CONFIG_TI_SECURE_DEVICE by default >=20 > Signed-off-by: Bryan Brattlof Reviewed-by: Tom Rini --=20 Tom --3oyK3PmK4IgmVZmT Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAABCgAdFiEEGjx/cOCPqxcHgJu/FHw5/5Y0tywFAmQY1R0ACgkQFHw5/5Y0 tywQiQv+OBuAiRHtDcK6jpf2OhbFde0QwXdR3WMxdJdDP0Mw5azRoJKyt1yL/nns mAxR0q9Z4ndhsiiYIUikkPIneAbT2wWKkSIpVvhoTKnxUOhh5vLdG6SDP5DXdd0p iK3Hn8h+zS/pq8HUuPG/lRS1gCFRjQV9YOQOleoJGyAgbbwaUnNjwmN3c/SWjQOS iEXGPuNvCLijo3rhHCh4YCVXg5YGkRG8uIqDkCDYRJ8932gi43wYxlTaLoaoFFnX qAsEFyA2i6+ZINkIrsVWFcTbbayJ5vdzEtXAbpqdkywK8vrtcl2Xt9tTcdDzokiQ byPIS3Bx1vbWsdPEbV8GBoLKlGzKuJfYKr9P7svUXFG75MtwME6d+NSmk+FxCVx0 p8nlRu41QrMfe91885fcEOSrC6YB55n/CGO5Ooa1hmHOiQf0jsTvILyjQXm2lIIT yXKt8/urMjcx5NFK8LEfEom5HWy7ZeZN8U602lQHt8l29ZG66+oU3Ta7FfvWh9ay bUe27MiD =79KC -----END PGP SIGNATURE----- --3oyK3PmK4IgmVZmT--