From: Stefano Babic <sbabic@denx.de>
To: u-boot@lists.denx.de
Subject: [U-Boot] [PATCH 2/2] arm: mxs: Add support for generating signed BootStream
Date: Tue, 01 Apr 2014 10:16:04 +0200 [thread overview]
Message-ID: <533A75C4.9080402@denx.de> (raw)
In-Reply-To: <1394046074-6389-2-git-send-email-marex@denx.de>
On 05/03/2014 20:01, Marek Vasut wrote:
> This patch adds the groundwork for generating signed BootStream, which
> can be used by the HAB library in i.MX28. We are adding a new target,
> u-boot-signed.sb , since the process for generating regular non-signed
> BootStream is much easier. Moreover, the signed bootstream depends on
> external _proprietary_ _binary-only_ tool from Freescale called 'cst',
> which is available only under NDA.
>
> To make things even uglier, the CST or HAB mandates a kind-of circular
> dependency. The problem is, unlike the regular IVT, which is generated
> by mxsimage, the IVT for signed boot must be generated by hand here due
> to special demands of the CST. The U-Boot binary (or SPL binary) and IVT
> are then signed by the CST as a one block. But here is the problem. The
> size of the entire image (U-Boot, IVT, CST blocks) must be appended at
> the end of IVT. But the size of the entire image is not known until the
> CST has finished signing the U-Boot and IVT. We solve this by expecting
> the CST block to be always 3904B (which it is in case two files, U-Boot
> and the hand-made IVT, are signed in the CST block).
>
> Signed-off-by: Marek Vasut <marex@denx.de>
> Cc: Stefano Babic <sbabic@denx.de>
> ---
Applied to u-boot-imx, thanks !
Best regards,
Stefano Babic
--
=====================================================================
DENX Software Engineering GmbH, MD: Wolfgang Denk & Detlev Zundel
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: +49-8142-66989-53 Fax: +49-8142-66989-80 Email: sbabic at denx.de
=====================================================================
next prev parent reply other threads:[~2014-04-01 8:16 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-03-05 19:01 [U-Boot] [PATCH 1/2] arm: mxs: Adjust the load address of U-Boot and SPL for HAB Marek Vasut
2014-03-05 19:01 ` [U-Boot] [PATCH 2/2] arm: mxs: Add support for generating signed BootStream Marek Vasut
2014-04-01 8:16 ` Stefano Babic [this message]
2014-04-01 8:15 ` [U-Boot] [PATCH 1/2] arm: mxs: Adjust the load address of U-Boot and SPL for HAB Stefano Babic
-- strict thread matches above, loose matches on Subject: below --
2014-04-03 17:12 Marek Vasut
2014-04-03 17:12 ` [U-Boot] [PATCH 2/2] arm: mxs: Add support for generating signed BootStream Marek Vasut
2014-04-04 9:52 ` Stefano Babic
2014-04-04 11:54 ` Marek Vasut
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=533A75C4.9080402@denx.de \
--to=sbabic@denx.de \
--cc=u-boot@lists.denx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox