| Tom Rini | 10e4779 | 2018-05-06 17:58:06 -0400 | [diff] [blame] | 1 | /* SPDX-License-Identifier: GPL-2.0+ */ |
| gaurav rana | f79323c | 2015-03-10 14:08:50 +0530 | [diff] [blame] | 2 | /* |
| 3 | * Copyright 2015 Freescale Semiconductor, Inc. |
| Sumit Garg | 666bbd0 | 2017-08-16 07:13:28 -0400 | [diff] [blame] | 4 | * Copyright 2017 NXP |
| gaurav rana | f79323c | 2015-03-10 14:08:50 +0530 | [diff] [blame] | 5 | */ |
| 6 | |
| 7 | #ifndef __FSL_SECURE_BOOT_H |
| 8 | #define __FSL_SECURE_BOOT_H |
| 9 | |
| Aneesh Bansal | 4310470 | 2016-01-22 16:37:24 +0530 | [diff] [blame] | 10 | #ifdef CONFIG_CHAIN_OF_TRUST |
| Sumit Garg | bdddd6e | 2016-06-14 13:52:38 -0400 | [diff] [blame] | 11 | #ifndef CONFIG_SPL_BUILD |
| Aneesh Bansal | d31bb3e | 2015-07-31 14:10:03 +0530 | [diff] [blame] | 12 | #ifndef CONFIG_SYS_RAMBOOT |
| 13 | /* The key used for verification of next level images |
| 14 | * is picked up from an Extension Table which has |
| 15 | * been verified by the ISBC (Internal Secure boot Code) |
| 16 | * in boot ROM of the SoC. |
| 17 | * The feature is only applicable in case of NOR boot and is |
| 18 | * not applicable in case of RAMBOOT (NAND, SD, SPI). |
| Udit Agarwal | 990a997 | 2017-02-09 21:36:11 +0530 | [diff] [blame] | 19 | * For LS, this feature is available for all device if IE Table |
| 20 | * is copied to XIP memory |
| 21 | * Also, for LS, ISBC doesn't verify this table. |
| Aneesh Bansal | d31bb3e | 2015-07-31 14:10:03 +0530 | [diff] [blame] | 22 | */ |
| 23 | #define CONFIG_FSL_ISBC_KEY_EXT |
| Aneesh Bansal | d31bb3e | 2015-07-31 14:10:03 +0530 | [diff] [blame] | 24 | |
| Saksham Jain | 6121f08 | 2016-03-23 16:24:34 +0530 | [diff] [blame] | 25 | #endif |
| 26 | |
| Sumit Garg | e0f9e9b | 2016-09-01 12:56:44 -0400 | [diff] [blame] | 27 | #ifdef CONFIG_FSL_LS_PPA |
| Sumit Garg | e0f9e9b | 2016-09-01 12:56:44 -0400 | [diff] [blame] | 28 | /* Define the key hash here if SRK used for signing PPA image is |
| 29 | * different from SRK hash put in SFP used for U-Boot. |
| 30 | * Example |
| Vinitha Pillai-B57223 | a4b3ded | 2017-03-23 13:48:14 +0530 | [diff] [blame] | 31 | * #define PPA_KEY_HASH \ |
| Sumit Garg | e0f9e9b | 2016-09-01 12:56:44 -0400 | [diff] [blame] | 32 | * "41066b564c6ffcef40ccbc1e0a5d0d519604000c785d97bbefd25e4d288d1c8b" |
| 33 | */ |
| Vinitha Pillai-B57223 | a4b3ded | 2017-03-23 13:48:14 +0530 | [diff] [blame] | 34 | #define PPA_KEY_HASH NULL |
| Sumit Garg | e0f9e9b | 2016-09-01 12:56:44 -0400 | [diff] [blame] | 35 | #endif /* ifdef CONFIG_FSL_LS_PPA */ |
| 36 | |
| Sumit Garg | bdddd6e | 2016-06-14 13:52:38 -0400 | [diff] [blame] | 37 | #endif /* #ifndef CONFIG_SPL_BUILD */ |
| Aneesh Bansal | 4310470 | 2016-01-22 16:37:24 +0530 | [diff] [blame] | 38 | #endif /* #ifdef CONFIG_CHAIN_OF_TRUST */ |
| gaurav rana | f79323c | 2015-03-10 14:08:50 +0530 | [diff] [blame] | 39 | #endif |