From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id CA25FC74A5B for ; Thu, 30 Mar 2023 01:57:16 +0000 (UTC) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id B9DD386056; Thu, 30 Mar 2023 03:56:26 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=konsulko.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (1024-bit key; unprotected) header.d=konsulko.com header.i=@konsulko.com header.b="Bfs6eXxK"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id 8458285844; Thu, 30 Mar 2023 03:54:37 +0200 (CEST) Received: from mail-yb1-xb2c.google.com (mail-yb1-xb2c.google.com [IPv6:2607:f8b0:4864:20::b2c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id E7A8F86067 for ; Thu, 30 Mar 2023 03:54:24 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=konsulko.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=trini@konsulko.com Received: by mail-yb1-xb2c.google.com with SMTP id z83so21794278ybb.2 for ; Wed, 29 Mar 2023 18:54:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1680141263; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=CnE7PjhlXuTsFr7V1QTZj3YZ0aqMqY3V+pMw0k0J0U8=; b=Bfs6eXxKVgS9VySp+ikBdoRkV6FKkWJFy5YzgaUldUei4hk8OIwXkCmJ8l/hkWQoDt 99FV1QkyQRg1jbTMZkD0AqHOVJMKEiCs+4J6LG0xu08tyY/VjoiTgPCIM8X8NdXJfP8A 7Pt4SHeCjhho52UUQ1dj+p/J22oq1kKHvKVZk= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1680141263; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=CnE7PjhlXuTsFr7V1QTZj3YZ0aqMqY3V+pMw0k0J0U8=; b=35FhdsDfvKha7UiJEf9cZdG6DkH6KsPcuFHs/xt79K4sIuqE+G+nSDn9gueYnOi2y1 bjWa86w7UTN6vFdoPlgmd+zv4A3AJ+7K8l+es3WIoJ3jRI1GH2vIoAJ/iXWGUTe9PN6W zvLS5B5ma7mUqVnK9Dd0HScF81XR/6tDuePjH2V3l0DszNmWDzYyILLE6M7eQPdO5ksD jhHEIsWRofuvaAHcw6GKZT6JmIp+EeG63u0eRLRts6zYwBqLcx4nNFZF5hsIcdOiBXi5 aexzf/7hjwTFdi+gfG+m7XITX2wT7PN7AV6k2XWbTl9E4doTdvKaTBxDtGxFp31I5ARI g1iA== X-Gm-Message-State: AAQBX9ftdvynGv1ou8j0cQftK5eyMG/PQxdOllcRx06ZPZ3IqDdyv+c8 ckCkKjWarQ6EvBj10yxnSSkSjQ== X-Google-Smtp-Source: AKy350Z8XBLoR/xBV0uy+E66SO2F9mcuRcIrbdrsO39d56utpMyCaIsl0m9OOUZOBpoT7L94Rxba3Q== X-Received: by 2002:a05:6902:154f:b0:b51:df09:c369 with SMTP id r15-20020a056902154f00b00b51df09c369mr5519203ybu.18.1680141263585; Wed, 29 Mar 2023 18:54:23 -0700 (PDT) Received: from bill-the-cat (2603-6081-7b00-6400-3b93-b60b-c6f7-8d57.res6.spectrum.com. [2603:6081:7b00:6400:3b93:b60b:c6f7:8d57]) by smtp.gmail.com with ESMTPSA id v67-20020a25abc9000000b00b7767ca747bsm3819258ybi.24.2023.03.29.18.54.22 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 29 Mar 2023 18:54:23 -0700 (PDT) Date: Wed, 29 Mar 2023 21:54:21 -0400 From: Tom Rini To: Bryan Brattlof Cc: UBoot Mailing List , Kamlesh Gurudasani , Judith Mendez Subject: Re: [PATCH] configs: am62ax: enable secure device configs by default Message-ID: <20230330015421.GO6083@bill-the-cat> References: <20230317233711.1382795-1-bb@ti.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="9C1PysxdmD5KYSNQ" Content-Disposition: inline In-Reply-To: <20230317233711.1382795-1-bb@ti.com> X-Clacks-Overhead: GNU Terry Pratchett X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean --9C1PysxdmD5KYSNQ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Mar 17, 2023 at 06:37:11PM -0500, Bryan Brattlof wrote: > TI's security enforcing SoCs will authenticate each binary it loads by > comparing it's signature with keys etched into the SoC during the boot > up process. The am62ax family of SoCs by default will have some level of > security enforcement checking. To keep things as simple as possible, > enable the CONFIG_TI_SECURE_DEVICE options by default so all levels of > secure SoCs will work out of the box >=20 > Enable the CONFIG_TI_SECURE_DEVICE by default >=20 > Signed-off-by: Bryan Brattlof > Reviewed-by: Tom Rini > Reviewed-by: Kamlesh Gurudasani Applied to u-boot/next, thanks! --=20 Tom --9C1PysxdmD5KYSNQ Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAABCgAdFiEEGjx/cOCPqxcHgJu/FHw5/5Y0tywFAmQk680ACgkQFHw5/5Y0 tyxYoQv/U+Atraz6yGltXc8n9TFosdkFws3mxKYqoZ1tNOSEU0YB/1gv4JoZIPji wg0arz2dkGlNxkN7QAqvTzp5m6l96MT92clEkS6K75j1aesOQHGQptYTKVPLugtY 7071AKbytx4TDbHzomi5foi72NBNTrpnleqYbwvnQdz6Ev3pULt4wOAcWSjY9ukJ xsRZpMd2iZDsc+zDglRr6B9GnIf1M8iWIKqHOaPJI/0adRJHCahwT2hwh2g+bvoS QTNuM6DLXTT9Vp8veO94zCs9iV8Tz5CneR0rG3/FNzJgJ458ZqBRICw+isyf7Tqg d5frt8bCHwfHsfF6UYEm9V/gZKHgVk0zNwBDzyxPIlPUNKYpxbTGWCfXgPyYP8Ld dw7dWxpUEwG/12nsp6XD2unuK86hCGI4Cevxh7y14pz9b0UKwMnwtGMhP5eWYcXi SEk86xmXNDY+1YALGqAKqGweE7XK6NBYXXiqXU7chl2DYyV+sM5bmgzTEjqczTM+ l8CsW6Io =b7j0 -----END PGP SIGNATURE----- --9C1PysxdmD5KYSNQ--