| Tom Rini | 51b06fa | 2017-01-22 19:43:10 -0500 | [diff] [blame] | 1 | config CHAIN_OF_TRUST |
| 2 | depends on !FIT_SIGNATURE && SECURE_BOOT |
| Simon Glass | 311ec4f | 2017-04-26 22:27:53 -0600 | [diff] [blame] | 3 | imply CMD_BLOB |
| Tom Rini | a5c4d40 | 2017-03-01 16:51:58 -0500 | [diff] [blame] | 4 | select FSL_CAAM |
| Ley Foon Tan | 48fcc4a | 2017-05-03 17:13:32 +0800 | [diff] [blame] | 5 | select SPL_BOARD_INIT if (ARM && SPL) |
| Tom Rini | 5bdd919 | 2017-05-15 12:17:49 -0400 | [diff] [blame] | 6 | select SHA_HW_ACCEL |
| 7 | select SHA_PROG_HW_ACCEL |
| Tom Rini | 51b06fa | 2017-01-22 19:43:10 -0500 | [diff] [blame] | 8 | bool |
| 9 | default y |
| Simon Glass | a6a9ea4 | 2017-05-17 03:25:16 -0600 | [diff] [blame^] | 10 | |
| 11 | config CMD_ESBC_VALIDATE |
| 12 | bool "Enable the 'esbc_validate' and 'esbc_halt' commands" |
| 13 | default y if CHAIN_OF_TRUST |
| 14 | help |
| 15 | This option enables two commands used for secure booting: |
| 16 | |
| 17 | esbc_validate - validate signature using RSA verification |
| 18 | esbc_halt - put the core in spin loop (Secure Boot Only) |