From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stefano Babic Date: Tue, 01 Apr 2014 10:16:04 +0200 Subject: [U-Boot] [PATCH 2/2] arm: mxs: Add support for generating signed BootStream In-Reply-To: <1394046074-6389-2-git-send-email-marex@denx.de> References: <1394046074-6389-1-git-send-email-marex@denx.de> <1394046074-6389-2-git-send-email-marex@denx.de> Message-ID: <533A75C4.9080402@denx.de> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de On 05/03/2014 20:01, Marek Vasut wrote: > This patch adds the groundwork for generating signed BootStream, which > can be used by the HAB library in i.MX28. We are adding a new target, > u-boot-signed.sb , since the process for generating regular non-signed > BootStream is much easier. Moreover, the signed bootstream depends on > external _proprietary_ _binary-only_ tool from Freescale called 'cst', > which is available only under NDA. > > To make things even uglier, the CST or HAB mandates a kind-of circular > dependency. The problem is, unlike the regular IVT, which is generated > by mxsimage, the IVT for signed boot must be generated by hand here due > to special demands of the CST. The U-Boot binary (or SPL binary) and IVT > are then signed by the CST as a one block. But here is the problem. The > size of the entire image (U-Boot, IVT, CST blocks) must be appended at > the end of IVT. But the size of the entire image is not known until the > CST has finished signing the U-Boot and IVT. We solve this by expecting > the CST block to be always 3904B (which it is in case two files, U-Boot > and the hand-made IVT, are signed in the CST block). > > Signed-off-by: Marek Vasut > Cc: Stefano Babic > --- Applied to u-boot-imx, thanks ! Best regards, Stefano Babic -- ===================================================================== DENX Software Engineering GmbH, MD: Wolfgang Denk & Detlev Zundel HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany Phone: +49-8142-66989-53 Fax: +49-8142-66989-80 Email: sbabic at denx.de =====================================================================