U-Boot Verified Boot?

* U-Boot Verified Boot?
@ 2016-10-11 13:05 Mark Farver
  2016-10-11 17:11 ` Otavio Salvador
  0 siblings, 1 reply; 2+ messages in thread
From: Mark Farver @ 2016-10-11 13:05 UTC (permalink / raw)
  To: meta-freescale Mailing List

Has anyone done any work or thinking about bringing the uboot-sign
class into fsl?

I've been playing with it, but the process used for generating the
u-boot image doesn't generate the right artifacts.  The class wants to
concatenate the public key DTB onto the end of a u-boot image with no
DTB.  It seems like the process we're using now doesn't generate
either of those files.

cat ${UBOOT_NODTB_IMAGE} ${UBOOT_DTB_IMAGE} | tee ${B}/${UBOOT_BINARY}
> ${UBOOT_IMAGE}

I haven't spent much time on it, and I am likely missing something
obvious but I wanted to check before looking deeper into it.  At the
moment I have a custom board with a SPI-NOR that can be write
protected.  I'd have a u-boot image in the SPI NOR that searches the
eMMC and SD looking for valid kernels/disk images, I'd like to be able
to verify signatures on those before loading them.  It seems like this
is less complicated than trying to figure out Secure Boot on the iMX6.

Thank you
Mark Farver

^ permalink raw reply	[flat|nested] 2+ messages in thread