leandrof/u-boot
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
12ed6d4911
u-boot/cmd/mvebu
History
Pali Rohár f7b0bbca2b cmd: mvebu/bubt: Check for A38x/A37xx OTP secure bits and secure boot 
For obvious reasons BootROMS rejects unsigned images when secure boot is
enabled in OTP secure bits. So check for OPT secure bits and do not allow
flashing unsigned images when secure boot is enabled. Access to OTP via
U-Boot fuse API is currently implemented only for A38x and A37xx SoCs.

Additionally Armada 3700 BootROM rejects signed trusted image when secure
boot is not enabled in OTP. So add also check for this case. On the other
hand Armada 38x BootROM acceps images with secure boot header when secure
boot is not enabled in OTP.

OTP secure bits may have burned also boot device source. Check it also and
reject flashing images to target storage which does not match OTP.

Signed-off-by: Pali Rohár <pali@kernel.org>
Reviewed-by: Stefan Roese <sr@denx.de>
2022-09-13 06:38:08 +02:00
..
bubt.c cmd: mvebu/bubt: Check for A38x/A37xx OTP secure bits and secure boot 2022-09-13 06:38:08 +02:00
comphy_rx_training.c global: Convert simple_strtoul() with hex to hextoul() 2021-08-02 13:32:14 -04:00
Kconfig cmd: mvebu/bubt: Check for A38x/A37xx OTP secure bits and secure boot 2022-09-13 06:38:08 +02:00
Makefile cmd: mvebu: Rename rx_training to mvebu_comphy_rx_training 2021-05-16 06:48:45 +02:00