All of lore.kernel.org
 help / color / mirror / Atom feed
* [U-Boot] [PATCH 00/13] Cleanups to allow secure boot on AM33xx devices
@ 2016-08-18 15:41 Andrew F. Davis
  2016-08-18 15:41 ` [U-Boot] [PATCH 01/13] spl: Kconfig: Add SPL_<media>_SUPPORT as Kconfig option Andrew F. Davis
                   ` (13 more replies)
  0 siblings, 14 replies; 33+ messages in thread
From: Andrew F. Davis @ 2016-08-18 15:41 UTC (permalink / raw)
  To: u-boot

Hello all,

I've recently been tasked with enabling authenticated boot for AM33xx based
devices. This work is similar to what has already been done for the AM43xx
and AM57xx SoCs and leverages much of the infrastructure from them.

The big difference here is the size of SRAM available on AM33xx being much
less than on the other SoCs, when performing a secure boot this limits
the maximum size of the SPL to just ~41k, the SPL currently generated for
AM33xx SoCs is ~70k. To trim down the SPL we move various options from
the config headers to the Kconfig system so we can selectively disable
them in HS specific defconfigs.

To do this we start in patch 1 and 2 by creating Kconfig options for
specifying what for what media the SPL should be able to load U-Boot
from and for what media the SPL should itself be loaded from, respectively.
We do this as the secure signature contains the name of the SPL boot
media, and to reduce size. Also this works to reduce confusion
in build types vs load types, we fix such an issue in patch 8.

In patch 3 and 4 we use the newly added _SUPPORT Kconfigs on a couple
boards.

The rest are hopefully explained well enough in the commit message.

Thanks,
Andrew

Andrew F. Davis (13):
  spl: Kconfig: Add SPL_<media>_SUPPORT as Kconfig option
  spl: Kconfig: Add SPL_<media>_BOOT as Kconfig option
  spl: Kconfig: Add CONFIG_SPL_TEXT_BASE as Kconfig option
  config: am335x_evm: Move CONFIG_SPL_YMODEM_SUPPORT to Kconfig
  config: am43xx_evm: Move CONFIG_SPL_YMODEM_SUPPORT to Kconfig
  Kconfig: Separate AM33XX SOC config from target board config
  am33xx: config.mk: Add support for additional secure boot image types
  am33xx: config.mk: Fix option used to enable SPI SPL image type
  doc: Update info on using AM33xx secure devices from TI
  ti: omap-common: Allow AM33xx devices to be built securely
  omap: Use SD_BOOT in place of EMMC_BOOT
  config: Remove usage of CONFIG_STORAGE_EMMC
  board: am33xx-hs: spl: Allow post-processing of FIT image on AM33xx

 Kconfig                                   |  8 ++++
 arch/arm/Kconfig                          | 20 ++++----
 arch/arm/cpu/armv7/am33xx/Kconfig         | 18 ++++++++
 arch/arm/cpu/armv7/am33xx/config.mk       | 29 ++++++++++--
 arch/arm/cpu/armv7/omap-common/Kconfig    |  2 +-
 board/ti/am335x/board.c                   |  8 ++++
 board/ti/am335x/mux.c                     |  4 +-
 common/Kconfig                            | 76 +++++++++++++++++++++++++++++++
 common/spl/Kconfig                        | 54 ++++++++++++++++++++++
 configs/am335x_boneblack_defconfig        |  4 +-
 configs/am335x_boneblack_vboot_defconfig  |  5 +-
 configs/am335x_evm_defconfig              |  3 ++
 configs/am335x_evm_nor_defconfig          |  2 +
 configs/am335x_evm_norboot_defconfig      |  1 +
 configs/am335x_evm_spiboot_defconfig      |  2 +
 configs/am335x_evm_usbspl_defconfig       |  1 +
 configs/am335x_sl50_defconfig             |  2 +-
 configs/am43xx_evm_defconfig              |  1 +
 configs/am43xx_evm_ethboot_defconfig      |  1 +
 configs/am43xx_evm_qspiboot_defconfig     |  1 +
 configs/am43xx_evm_usbhost_boot_defconfig |  1 +
 configs/am43xx_hs_evm_defconfig           |  1 +
 configs/brppt1_mmc_defconfig              |  3 +-
 configs/brppt1_spi_defconfig              |  3 +-
 doc/README.ti-secure                      | 32 +++++++++++++
 include/configs/am335x_evm.h              |  6 +--
 include/configs/am335x_shc.h              |  2 -
 include/configs/am335x_sl50.h             |  4 +-
 include/configs/am43xx_evm.h              |  1 -
 include/configs/bav335x.h                 |  4 +-
 include/configs/brppt1.h                  |  6 +--
 include/configs/ti_am335x_common.h        |  4 ++
 32 files changed, 272 insertions(+), 37 deletions(-)
 create mode 100644 common/spl/Kconfig

-- 
2.9.2

^ permalink raw reply	[flat|nested] 33+ messages in thread

end of thread, other threads:[~2016-08-23  6:15 UTC | newest]

Thread overview: 33+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-08-18 15:41 [U-Boot] [PATCH 00/13] Cleanups to allow secure boot on AM33xx devices Andrew F. Davis
2016-08-18 15:41 ` [U-Boot] [PATCH 01/13] spl: Kconfig: Add SPL_<media>_SUPPORT as Kconfig option Andrew F. Davis
2016-08-19  6:27   ` Heiko Schocher
2016-08-19 19:30     ` Andrew F. Davis
2016-08-19 19:54       ` Tom Rini
2016-08-21 18:35         ` Andrew F. Davis
2016-08-21 18:50           ` Tom Rini
2016-08-21 19:12             ` Andrew F. Davis
2016-08-21 19:33               ` Tom Rini
2016-08-22 14:06                 ` Andrew F. Davis
2016-08-18 15:41 ` [U-Boot] [PATCH 02/13] spl: Kconfig: Add SPL_<media>_BOOT " Andrew F. Davis
2016-08-19  4:10   ` Lokesh Vutla
2016-08-19 15:29     ` Andrew F. Davis
2016-08-22  4:23       ` Lokesh Vutla
2016-08-22 12:25         ` Tom Rini
2016-08-22 12:55           ` Simon Glass
2016-08-23  6:15       ` Masahiro Yamada
2016-08-18 15:41 ` [U-Boot] [PATCH 03/13] spl: Kconfig: Add CONFIG_SPL_TEXT_BASE " Andrew F. Davis
2016-08-19  4:12   ` Lokesh Vutla
2016-08-19 12:22     ` Simon Glass
2016-08-18 15:41 ` [U-Boot] [PATCH 04/13] config: am335x_evm: Move CONFIG_SPL_YMODEM_SUPPORT to Kconfig Andrew F. Davis
2016-08-18 15:41 ` [U-Boot] [PATCH 05/13] config: am43xx_evm: " Andrew F. Davis
2016-08-18 15:41 ` [U-Boot] [PATCH 06/13] Kconfig: Separate AM33XX SOC config from target board config Andrew F. Davis
2016-08-19  4:15   ` Lokesh Vutla
2016-08-22 15:26     ` Andrew F. Davis
2016-08-18 15:41 ` [U-Boot] [PATCH 07/13] am33xx: config.mk: Add support for additional secure boot image types Andrew F. Davis
2016-08-18 15:41 ` [U-Boot] [PATCH 08/13] am33xx: config.mk: Fix option used to enable SPI SPL image type Andrew F. Davis
2016-08-18 15:41 ` [U-Boot] [PATCH 09/13] doc: Update info on using AM33xx secure devices from TI Andrew F. Davis
2016-08-18 15:41 ` [U-Boot] [PATCH 10/13] ti: omap-common: Allow AM33xx devices to be built securely Andrew F. Davis
2016-08-18 15:41 ` [U-Boot] [PATCH 11/13] omap: Use SD_BOOT in place of EMMC_BOOT Andrew F. Davis
2016-08-18 15:41 ` [U-Boot] [PATCH 12/13] config: Remove usage of CONFIG_STORAGE_EMMC Andrew F. Davis
2016-08-18 15:41 ` [U-Boot] [PATCH 13/13] board: am33xx-hs: spl: Allow post-processing of FIT image on AM33xx Andrew F. Davis
2016-08-19  6:10 ` [U-Boot] [PATCH 00/13] Cleanups to allow secure boot on AM33xx devices Lokesh Vutla

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.