From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 557D1C433EF for ; Sun, 24 Oct 2021 19:55:50 +0000 (UTC) Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id D442660EE3 for ; Sun, 24 Oct 2021 19:55:49 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org D442660EE3 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=chromium.org Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=lists.denx.de Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 80F5D83544; Sun, 24 Oct 2021 21:55:27 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=chromium.org Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (1024-bit key; unprotected) header.d=chromium.org header.i=@chromium.org header.b="LeNMXFfH"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id 1A90783458; Sun, 24 Oct 2021 21:53:58 +0200 (CEST) Received: from mail-ua1-x931.google.com (mail-ua1-x931.google.com [IPv6:2607:f8b0:4864:20::931]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id DFCA5834F4 for ; Sun, 24 Oct 2021 21:53:45 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=chromium.org Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=sjg@google.com Received: by mail-ua1-x931.google.com with SMTP id o12so13897028uap.0 for ; Sun, 24 Oct 2021 12:53:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=Dnz5lxIqwKZkalHXcSOpRQN6452y5m4qwPLMsa1Jz8U=; b=LeNMXFfH8Bpx4exVt52leSPXffEFyo9It0SRt4JHBIFtLhPwdmglmTRZDfCarKlbb5 5Wl87uINUxAy7pV0pDaLDlBO5kZx9u05QVRZAL0db6J18S058ssH/gioJ9Z7f3r708Ms Sia04iLFWPJIFdaxAdglZKUxdiyiUyzqZT3n0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=Dnz5lxIqwKZkalHXcSOpRQN6452y5m4qwPLMsa1Jz8U=; b=QLt9yS7PtDvUUNc1X3SWTjf3YpwJB2PKAGc4277hbCo+8DrBU7oKi8g/xD+nCMlX5P FkS6LexvwJGa3N48zmj8ZOc6e91xsWTGu7duZ7XiVpwT/acWULrwhvXe6hR+HLHBGRsy 0KcvSbW33ej9gt3ZX5HfQ1kvj/YUxDeEulyC7xdAEiHQBOmR4ReMjEU/MZKwoFBpCOZ8 MhvNqXJjXnn1u3dB5jWT6HCLToa2O8epcF84w5ZbBG07FkFvXfVEOOn9ZSFuNNIwxO8E Q5HlMmtqYzTC4JIR1drdXvV/9xSOxRqDK1dvEHXD4WjHYUJy/6Z3nhTYWGBKwEv5bNGH bmXw== X-Gm-Message-State: AOAM531TIWXBK3dRWhCXL4yIwigzUcDTOLMx+X9hVxDhkqQqRkcyL8c/ R3fki1/pNQxaZneNGqUGBusBBVK6SSF2EgeRSN6tTw== X-Google-Smtp-Source: ABdhPJxkggD+Dug2bJXE6HE9dh+VGvrQq8lxB6NeAmIAkn3YEBjmiE78ddZH5SPbPnuMuZHJGOFKRWvinXNvVpxgkVs= X-Received: by 2002:a67:eb8d:: with SMTP id e13mr4422230vso.15.1635105224483; Sun, 24 Oct 2021 12:53:44 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Simon Glass Date: Sun, 24 Oct 2021 13:53:32 -0600 Message-ID: Subject: Re: uboot FIT signature difference To: Frank Wunderlich Cc: Philipp Tomsich , Kever Yang , U-Boot Mailing List Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.34 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.2 at phobos.denx.de X-Virus-Status: Clean Hi Frank, On Sun, 10 Oct 2021 at 11:51, Frank Wunderlich wr= ote: > > Hi, > > i try to create a upstream uboot binary for use with rockchip rk3568 (ban= anapi r2 pro). Currently i'm on preparation phase as i don't have the hardw= are yet (so i cannot test it). > > First thanks to everybody upstreamed support for this SOC in uboot and li= nux. > > i found a compiled uboot.img with this signature: > > FIT Image with ATF/OP-TEE/U-Boot > > my created itb (make u-boot.itb) has this signature: > > FIT image for U-Boot with bl31 (TF-A) > > can anybody give me a hint how to create same signature as above? or wher= e i have to look... As far as I know this is just the description, which you can change by updating the 'description' of your .its file, or binman node if you are using that. > > i guess the uboot.img is created using this source: > https://github.com/rockchip-linux/u-boot > > as far as i see the itb gets generated from the dtb > > OBJCOPY u-boot-nodtb.bin > ./"arch/arm/mach-rockchip/make_fit_atf.py" \ > arch/arm/dts/rk3568-evb.dtb > u-boot.its > RELOC u-boot-nodtb.bin > MKIMAGE u-boot.itb > > op-tee seems to be a lib only in rockchip repo, not upstream > > https://github.com/rockchip-linux/u-boot/tree/next-dev/lib/optee_clientAp= i > > seems to be some kind of secure boot, idk if this is needed to boot the d= evice > > i wonder why uboot differentiate between ATF and BL31...imho BL31 is part= of ATF, do i need all parts of ATF (at least BL2) to get same signature? i= have some rk3568_ddr_xxxxMHz_v1.08.bin which can be BL2 (did not found any= signature and Rockchip ATF source is afaik not yet released, at least not = for rk35xx which is new). > > "my" source is this: > > https://github.com/frank-w/u-boot/tree/2021-10-bpi-r2-pro I'm not sure about all these flows. It is all quite complicated these days.= .. Regards, Simon