u-boot-brain/arch
Clement Faure 56d2050f40 imx8m: Add DEK blob encapsulation for imx8m
Add DEK blob encapsulation support for IMX8M through "dek_blob" command.
On ARMv8, u-boot runs in non-secure, thus cannot encapsulate a DEK blob
for encrypted boot.
The DEK blob is encapsulated by OP-TEE through a trusted application call.
U-boot sends and receives the DEK and the DEK blob binaries through OP-TEE
dynamic shared memory.

To enable the DEK blob encapsulation, add to the defconfig:
CONFIG_SECURE_BOOT=y
CONFIG_FAT_WRITE=y
CONFIG_CMD_DEKBLOB=y

Signed-off-by: Clement Faure <clement.faure@nxp.com>
Reviewed-by: Ye Li <ye.li@nxp.com>
Signed-off-by: Peng Fan <peng.fan@nxp.com>
2021-04-08 20:29:52 +02:00
..
arc reset: Remove addr parameter from reset_cpu() 2021-03-02 14:03:02 -05:00
arm imx8m: Add DEK blob encapsulation for imx8m 2021-04-08 20:29:52 +02:00
m68k Merge branch '2021-02-02-drop-asm_global_data-when-unused' 2021-02-15 10:16:45 -05:00
microblaze common: Drop asm/global_data.h from common header 2021-02-02 15:33:42 -05:00
mips common: Drop asm/global_data.h from common header 2021-02-02 15:33:42 -05:00
nds32 reset: Remove addr parameter from reset_cpu() 2021-03-02 14:03:02 -05:00
nios2 common: Drop asm/global_data.h from common header 2021-02-02 15:33:42 -05:00
powerpc powerpc: t2080rdb: Enable RTC support 2021-03-23 18:06:07 +05:30
riscv cpu: Rename SPL_CPU_SUPPORT to SPL_CPU 2021-03-27 15:04:31 +13:00
sandbox sandbox: define __dyn_sym_start, dyn_sym_end 2021-03-27 16:26:48 +13:00
sh reset: Remove addr parameter from reset_cpu() 2021-03-02 14:03:02 -05:00
x86 x86: coral: Show memory config and SKU ID on startup 2021-03-27 16:26:48 +13:00
xtensa common: Drop asm/global_data.h from common header 2021-02-02 15:33:42 -05:00
.gitignore
Kconfig sandbox: imply SCP03 and CMD_SCP03 2021-03-14 11:50:16 -04:00
u-boot-elf.lds arch: Add explicit linker script for u-boot-elf 2020-04-03 11:52:55 -04:00