[U-Boot] [PATCH v5 03/14] fsl: ls-ch3: Add new header for Secure Boot

2016-03-23 Thread Saksham Jain
default currently always present. Max Key number has increase from 4 to 8. 8th Key is irrevocable. A New Barker Code is being used. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - Cleaned

[U-Boot] [PATCH v5 09/14] armv8: fsl-lsch3: Disable SMMU during Secure Boot

2016-03-23 Thread Saksham Jain
During secure boot, SMMU is enabled on POR by SP bootrom. SMMU needs to be put in Bypass mode in uboot to enable CAAM transcations to pass through. During Nonsecure Boot, SP BootROM doesn't enable SMMU and at reset SMMU is in bypass mode. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham

[U-Boot] [PATCH v5 08/14] ls2080: Add config for endianess of CCSR GUR

2016-03-23 Thread Saksham Jain
The GUR (DCFG) registers in CCSR space are in Little Endian format for ls2080. Defined a config CONFIG_SYS_FSL_CCSR_GUR_LE in arch/arm/include/asm/arch-fsl-layerscape/config.h Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3

[U-Boot] [PATCH v5 11/14] crypto/fsl: Make CAAM transactions cacheable

2016-03-23 Thread Saksham Jain
e and Read Allocate. Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - Cleaned up commit message Changes for v5: - Cleaned up commit message drivers/crypto/fsl/jr.c | 13 + drivers/crypto/fsl

[U-Boot] [PATCH v5 13/14] SECURE BOOT: Halt execution when secure boot fail

2016-03-23 Thread Saksham Jain
in bootscript (Execute esbc_halt command in case of image verification process) or it can be taken care in Uboot Code. In this commit, doing the latter via esbc_halt(). Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No

[U-Boot] [PATCH v5 04/14] ls2080: Add Secure Boot support

2016-03-23 Thread Saksham Jain
-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - Cleaned up commit message Changes for v5: - Cleaned up commit message - Added new configs in defconfigs as per new intermediate patches arch/arm/include/asm

[U-Boot] [PATCH v5 07/14] ls2080: Change env variable "fdt_high"

2016-03-23 Thread Saksham Jain
o same value as it's default value during non-secure boot. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - No changes Changes for v5: - Cleaned up commit messa

[U-Boot] [PATCH v5 10/14] crypto/fsl: Correct 64-bit Write when MMU disabled

2016-03-23 Thread Saksham Jain
Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - No changes Changes for v5: - Cleaned up commit message drivers/crypto/fsl/desc_constr.h | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) diff

[U-Boot] [PATCH v5 01/14] armv8: ls2080: Add SFP Configs for LS2080

2016-03-23 Thread Saksham Jain
In LS2080, SFP is Little Endian and Verion is 3.4 . The base address is 0x01e80200. SFP will be used in Secure Boot to read fuses. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4

[U-Boot] [PATCH v5 02/14] ls2080: Add configs for SEC, SecMon, SRK and DCFG

2016-03-23 Thread Saksham Jain
For ls2080, Added configs for various IPs used during secure boot. Added address and endianness for SEC and Security Monitor. SRK are Fuses in SFP (Fuses for public key's hash). These are stored in Little Endian format. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes f

[U-Boot] [PATCH v5 00/14] Add Support for Secure Boot on LS2080

2016-03-23 Thread Saksham Jain
since these patches were floated for review) Saksham Jain (14): armv8: ls2080: Add SFP Configs for LS2080 ls2080: Add configs for SEC, SecMon, SRK and DCFG fsl: ls-ch3: Add new header for Secure Boot ls2080: Add Secure Boot support ls2080: Add bootscript header addr for

[U-Boot] [PATCH v5 12/14] SECURE_BOOT: Use default bootargs

2016-03-23 Thread Saksham Jain
: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - Cleaned up commit message Changes for v5: - Cleaned up commit message include/config_fsl_chain_trust.h | 14 ++ 1 file changed, 10 insertions(+), 4 deletions(-) diff

[U-Boot] [PATCH v5 14/14] SECURE BOOT: Change fsl_secboot_validate func to ret image addr

2016-03-23 Thread Saksham Jain
is change helps when fsl_secboot_validate function is called from within UBOOT (because now instead of calling function "getenv("img_addr")" we can directly get the image address). Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for

[U-Boot] [PATCH v5 06/14] fsl: ls-ch3: Copy Bootscript and header from NOR to DDR

2016-03-23 Thread Saksham Jain
-xip memories (e.g. NAND, SD) it is neccessary to copy both these images to DDR. For other ARM Platforms (ls1043 and ls1020), header is not copied from NOR to DDR (otherwise customers will need to modify the existing headers). Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes

[U-Boot] [PATCH v5 05/14] Add bootscript header addr for ls2080a secure boot

2016-03-23 Thread Saksham Jain
: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: -Cleaned up commit message Changes for v5: -Cleaned up commit message arch/arm/include/asm/fsl_secure_boot.h | 4 1 file changed, 4 insertions(+) diff --git a/arch/arm

[U-Boot] [PATCH] MAINTAINERS : Add entry for ls2080/5 SECURE BOOT defconfigs

2016-03-20 Thread Saksham Jain
Added myself as maintainers for the following: 1) configs/ls2080aqds_SECURE_BOOT_defconfig 2) configs/ls2085aqds_SECURE_BOOT_defconfig 3) configs/ls2080ardb_SECURE_BOOT_defconfig 4) configs/ls2085ardb_SECURE_BOOT_defconfig Signed-off-by: Saksham Jain --- This patch depends on patch which adds

[U-Boot] [PATCH v4 11/14] crypto/fsl: Make CAAM transactions cacheable

2016-02-08 Thread Saksham Jain
e and Read Allocate. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - Cleaned up commit message drivers/crypto/fsl/jr.c | 13 + drivers/crypto/fsl/jr.h | 3 +++ 2 files c

[U-Boot] [PATCH v4 12/14] SECURE_BOOT: Use default bootargs during Secure Boot

2016-02-08 Thread Saksham Jain
: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - Cleaned up commit message include/config_fsl_chain_trust.h | 14 ++ 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/include/config_fsl_chain_trust.h b/include

[U-Boot] [PATCH v4 13/14] SECURE BOOT: Halt execution when secure boot fail after reset request

2016-02-08 Thread Saksham Jain
care in bootscript (Execute esbc_halt command in case of image verification process) or it can be taken care in Uboot Code. Doing the latter via a esbc_halt. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes

[U-Boot] [PATCH v4 14/14] SECURE BOOT: Change fsl_secboot_validate function to output image addr

2016-02-08 Thread Saksham Jain
is change helps when fsl_secboot_validate function is called from within UBOOT (because now instead of calling function "getenv("img_addr")" we can directly get the image address.) Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for

[U-Boot] [PATCH v4 10/14] crypto/fsl: Correct 64bit Write when MMU disabled

2016-02-08 Thread Saksham Jain
-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - No changes drivers/crypto/fsl/desc_constr.h | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/drivers/crypto/fsl/desc_constr.h b/drivers/crypto

[U-Boot] [PATCH v4 07/14] SECURE BOOT: Change env variable "fdt_high" for LS2080a and LS2085a

2016-02-08 Thread Saksham Jain
Secure Boot to same value as it's default value during non-secure boot. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - No changes arch/arm/include/asm/fsl_secure_boot.h | 7 +

[U-Boot] [PATCH v4 08/14] armv8 : ls2080: Add config for endianess of CCSR GUR

2016-02-08 Thread Saksham Jain
The GUR (DCFG) registers in CCSR space are in LE format for ls2080/ls2085. Defined a config CONFIG_SYS_FSL_CCSR_GUR_LE in arch/arm/include/asm/arch-fsl-layerscape/config.h Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3

[U-Boot] [PATCH v4 06/14] SECURE BOOT: Copy Bootscript and header from NOR to DDR for LS2080/5

2016-02-08 Thread Saksham Jain
case of non-xip memories (e.g. NAND, SD) it is neccessary to copy both these images to DDR. For other ARM Platforms (ls1043 and ls1020), header is not copied from NOR to DDR (otherwise customers will need to modify the existing headers). Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain

[U-Boot] [PATCH v4 09/14] armv8: fsl-lsch3: Disable SMMU during Secure Boot

2016-02-08 Thread Saksham Jain
During secure boot, SMMU is enabled on POR by SP bootrom. SMMU needs to be put in Bypass mode in uboot to enable CAAM transcations to pass through. During Nonsecure Boot, SP BootROM doesn't enable SMMU and at reset SMMU is in bypass mode. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham

[U-Boot] [PATCH v4 04/14] SECURE BOOT: Add Secure Boot support on ls2080aqds/rdb

2016-02-08 Thread Saksham Jain
Boot defconfigs created for boards (NOR Boot). Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - Cleaned up commit message arch/arm/include/asm/fsl_secure_boot.h | 9 +++-- board

[U-Boot] [PATCH v4 03/14] SECURE BOOT: Add new ESBC header for ls-ch3 Secure Boot

2016-02-08 Thread Saksham Jain
. Keys must be in table format. 3) Hence, SRK (Key table) is by default currently always present. 4) Max Key number has increase from 4 to 8. 8th Key is unrevockable. 5) New Barker Code is being used. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes

[U-Boot] [PATCH v4 05/14] armv8: fsl-lsch3: Add bootscript header address for Secure Boot

2016-02-08 Thread Saksham Jain
-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: -Cleaned up commit message arch/arm/include/asm/fsl_secure_boot.h | 4 1 file changed, 4 insertions(+) diff --git a/arch/arm/include/asm/fsl_secure_boot.h b/arch/arm

[U-Boot] [PATCH v4 02/14] armv8: ls2080: Add Secure Boot configs: SEC, Security Monitor, SRK and RCW

2016-02-08 Thread Saksham Jain
For ls2080, Added configs for various IPs used during secure boot Added address and endianness for SEC and Security Monitor. SRK - Fuses in SFP (Fused for public keys hash) These are stored in LE format. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No

[U-Boot] [PATCH v4 00/14] Add Support for Secure Boot on LS208x

2016-02-08 Thread Saksham Jain
: - removed IE Key extenstion support. Methodology not fixed yet. - minor changes in commit messages (clean up) Saksham Jain (14): armv8: ls2080: Add SFP Configs for LS2080/LS2085 armv8: ls2080: Add Secure Boot configs: SEC, Security Monitor, SRK and RCW SECURE BOOT: Add

[U-Boot] [PATCH v4 01/14] armv8: ls2080: Add SFP Configs for LS2080/LS2085

2016-02-08 Thread Saksham Jain
In LS2080/LS2085, SFP is LE and Ver is 3.4 The base address is 0x01e80200 SFP will be used in Secure Boot to read fuses. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes Changes for v4: - Cleaned up

[U-Boot] [PATCH v3 13/15] SECURE BOOT: Halt execution when secure boot fail after reset request

2016-02-01 Thread Saksham Jain
care in bootscript (Execute esbc_halt command in case of image verification process) or it can be taken care in Uboot Code. Doing the latter via a esbc_halt. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes

[U-Boot] [PATCH v3 15/15] SECURE_BOOT: Enable IE (Key extention) Feature in Ls2085a & LS2088a

2016-02-01 Thread Saksham Jain
er of any image, Use keys from IE table, otherwise use keys tied up with SoC's fuses (SRK). The address of IE Table HDR is fixed for NOR. In case of boot from other devices, IE Table and it's Header needs to be copied to an XIP Memory. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham

[U-Boot] [PATCH v3 14/15] SECURE BOOT: Change fsl_secboot_validate function to output image addr

2016-02-01 Thread Saksham Jain
is change helps when fsl_secboot_validate function is called from within UBOOT (because now instead of calling function "getenv("img_addr")" we can directly get the image address.) Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - Not present in v1 patch

[U-Boot] [PATCH v3 12/15] SECURE_BOOT: Use default bootargs during Secure Boot

2016-02-01 Thread Saksham Jain
For secure boot, currently we were using fixed bootargs for all SoCs. This is not needed and we can use the bootargs which are used in non-secure boot. Incase bootargs are not defined for non-secure boot of any platform, we use default bootargs. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham

[U-Boot] [PATCH v3 10/15] crypto/fsl: Correct 64bit Write when MMU disabled

2016-02-01 Thread Saksham Jain
-off-by: Saksham Jain --- Changes for v2: - No changes Changed for v3: - No changes drivers/crypto/fsl/desc_constr.h | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/drivers/crypto/fsl/desc_constr.h b/drivers/crypto/fsl/desc_constr.h index 2559ccd

[U-Boot] [PATCH v3 11/15] crypto/fsl: Make CAAM transactions cacheable

2016-02-01 Thread Saksham Jain
e and Read Allocate. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes drivers/crypto/fsl/jr.c | 13 + drivers/crypto/fsl/jr.h | 3 +++ 2 files changed, 16 insertions(+) diff --git a/drivers/crypt

[U-Boot] [PATCH v3 08/15] armv8 : ls2080: Add config for endianess of CCSR GUR

2016-02-01 Thread Saksham Jain
The GUR (DCFG) registers in CCSR space are in LE format for ls2080/ls2085. Defined a config CONFIG_SYS_FSL_CCSR_GUR_LE in arch/arm/include/asm/arch-fsl-layerscape/config.h Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3

[U-Boot] [PATCH v3 09/15] armv8: fsl-lsch3: Disable SMMU during Secure Boot

2016-02-01 Thread Saksham Jain
During secure boot, SMMU is enabled on POR by SP bootrom. SMMU needs to be put in Bypass mode in uboot to enable CAAM transcations to pass through. During Nonsecure Boot, SP BootROM doesn't enable SMMU and at reset SMMU is in bypass mode. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham

[U-Boot] [PATCH v3 06/15] SECURE BOOT: Copy Bootscript and header from NOR to DDR for LS2080/5

2016-02-01 Thread Saksham Jain
case of non-xip memories (e.g. NAND, SD) it is neccessary to copy both these images to DDR. For other ARM Platforms (ls1043 and ls1020), header is not copied from NOR to DDR (otherwise customers will need to modify the existing headers). Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain

[U-Boot] [PATCH v3 07/15] SECURE BOOT: Change env variable "fdt_high" for LS2080a and LS2085a

2016-02-01 Thread Saksham Jain
Secure Boot to same value as it's default value during non-secure boot. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes arch/arm/include/asm/fsl_secure_boot.h | 7 +++ 1 file changed, 7 insertions(

[U-Boot] [PATCH v3 05/15] armv8: fsl-lsch3: Add bootscript header address for Secure Boot

2016-02-01 Thread Saksham Jain
: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes arch/arm/include/asm/fsl_secure_boot.h | 4 1 file changed, 4 insertions(+) diff --git a/arch/arm/include/asm/fsl_secure_boot.h b/arch/arm/include/asm/fsl_secure_boot.h index e65caed..7c55ea1

[U-Boot] [PATCH v3 04/15] SECURE BOOT: Add Secure Boot support on ls2080aqds/rdb

2016-02-01 Thread Saksham Jain
Boot defconfigs created for boards (NOR Boot). Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes arch/arm/include/asm/fsl_secure_boot.h | 9 +++-- board/freescale/ls2080aqds/ls2080aqds.c | 5 - board

[U-Boot] [PATCH v3 03/15] SECURE BOOT: Add new ESBC header for ls-ch3 Secure Boot

2016-02-01 Thread Saksham Jain
. Keys must be in table format. 3) Hence, SRK (Key table) is by default currently always present. 4) Max Key number has increase from 4 to 8. 8th Key is unrevockable. 5) New Barker Code is being used. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes

[U-Boot] [PATCH v3 02/15] armv8: ls2080: Add Secure Boot configs: SEC, Security Monitor, SRK and RCW

2016-02-01 Thread Saksham Jain
For ls2080, Added configs for various IPs used during secure boot Added address and endianness for SEC and Security Monitor. SRK - Fuses in SFP (Fused for public keys hash) These are stored in LE format. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No

[U-Boot] [PATCH v3 01/15] armv8: ls2080: Add SFP Configs for LS2080/LS2085

2016-02-01 Thread Saksham Jain
In LS2080/LS2085, SFP is LE and Ver is 3.4 The base address is 0x01e80200 SFP will be used in Secure Boot to read fuses. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes Changes for v3: - No changes arch/arm/include/asm/arch-fsl

[U-Boot] [PATCH v3 00/15] Add Support for Secure Boot on LS208x

2016-02-01 Thread Saksham Jain
: - minor changes to remove compilation warnings Saksham Jain (15): armv8: ls2080: Add SFP Configs for LS2080/LS2085 armv8: ls2080: Add Secure Boot configs: SEC, Security Monitor, SRK and RCW SECURE BOOT: Add new ESBC header for ls-ch3 Secure Boot SECURE BOOT: Add Secure Boot

[U-Boot] [PATCH v2 14/15] SECURE BOOT: Change fsl_secboot_validate function to output image addr

2016-01-28 Thread Saksham Jain
is change helps when fsl_secboot_validate function is called from within UBOOT (because now instead of calling function "getenv("img_addr")" we can directly get the image address.) Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - Not present

[U-Boot] [PATCH v2 15/15] SECURE_BOOT: Enable IE (Key extention) Feature in Ls2085a & LS2088a

2016-01-28 Thread Saksham Jain
er of any image, Use keys from IE table, otherwise use keys tied up with SoC's fuses (SRK). The address of IE Table HDR is fixed for NOR. In case of boot from other devices, IE Table and it's Header needs to be copied to an XIP Memory. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham

[U-Boot] [PATCH v2 12/15] SECURE_BOOT: Use default bootargs during Secure Boot

2016-01-28 Thread Saksham Jain
For secure boot, currently we were using fixed bootargs for all SoCs. This is not needed and we can use the bootargs which are used in non-secure boot. Incase bootargs are not defined for non-secure boot of any platform, we use default bootargs. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham

[U-Boot] [PATCH v2 11/15] crypto/fsl: Make CAAM transactions cacheable

2016-01-28 Thread Saksham Jain
e and Read Allocate. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes drivers/crypto/fsl/jr.c | 13 + drivers/crypto/fsl/jr.h | 3 +++ 2 files changed, 16 insertions(+) diff --git a/drivers/crypto/fsl/jr.c b/drivers/crypto/fsl/

[U-Boot] [PATCH v2 09/15] armv8: fsl-lsch3: Disable SMMU during Secure Boot

2016-01-28 Thread Saksham Jain
During secure boot, SMMU is enabled on POR by SP bootrom. SMMU needs to be put in Bypass mode in uboot to enable CAAM transcations to pass through. During Nonsecure Boot, SP BootROM doesn't enable SMMU and at reset SMMU is in bypass mode. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham

[U-Boot] [PATCH v2 10/15] crypto/fsl: Correct 64bit Write when MMU disabled

2016-01-28 Thread Saksham Jain
-off-by: Saksham Jain --- Changes for v2: - No changes drivers/crypto/fsl/desc_constr.h | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/drivers/crypto/fsl/desc_constr.h b/drivers/crypto/fsl/desc_constr.h index 2559ccd..db6ddee 100644 --- a/drivers/crypto/fsl

[U-Boot] [PATCH v2 13/15] SECURE BOOT: Halt execution when secure boot fail after reset request

2016-01-28 Thread Saksham Jain
care in bootscript (Execute esbc_halt command in case of image verification process) or it can be taken care in Uboot Code. Doing the latter via a esbc_halt. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes board/freescale/common

[U-Boot] [PATCH v2 08/15] armv8 : ls2080: Add config for endianess of CCSR GUR

2016-01-28 Thread Saksham Jain
The GUR (DCFG) registers in CCSR space are in LE format for ls2080/ls2085. Defined a config CONFIG_SYS_FSL_CCSR_GUR_LE in arch/arm/include/asm/arch-fsl-layerscape/config.h Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes arch/arm/include/asm

[U-Boot] [PATCH v2 07/15] SECURE BOOT: Change env variable "fdt_high" for LS2080a and LS2085a

2016-01-28 Thread Saksham Jain
Secure Boot to same value as it's default value during non-secure boot. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes arch/arm/include/asm/fsl_secure_boot.h | 7 +++ 1 file changed, 7 insertions(+) diff --git a/arch/arm/include/asm/fsl_

[U-Boot] [PATCH v2 06/15] SECURE BOOT: Copy Bootscript and header from NOR to DDR for LS2080/5

2016-01-28 Thread Saksham Jain
case of non-xip memories (e.g. NAND, SD) it is neccessary to copy both these images to DDR. For other ARM Platforms (ls1043 and ls1020), header is not copied from NOR to DDR (otherwise customers will need to modify the existing headers). Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain

[U-Boot] [PATCH v2 05/15] armv8: fsl-lsch3: Add bootscript header address for Secure Boot

2016-01-28 Thread Saksham Jain
: Saksham Jain --- Changes for v2: - No changes arch/arm/include/asm/fsl_secure_boot.h | 4 1 file changed, 4 insertions(+) diff --git a/arch/arm/include/asm/fsl_secure_boot.h b/arch/arm/include/asm/fsl_secure_boot.h index e65caed..7c55ea1 100644 --- a/arch/arm/include/asm

[U-Boot] [PATCH v2 04/15] SECURE BOOT: Add Secure Boot support on ls2080aqds/rdb

2016-01-28 Thread Saksham Jain
Boot defconfigs created for boards (NOR Boot). Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes arch/arm/include/asm/fsl_secure_boot.h | 9 +++-- board/freescale/ls2080aqds/ls2080aqds.c | 5 - board/freescale/ls2080ardb/ls2080ardb.c

[U-Boot] [PATCH v2 03/15] SECURE BOOT: Add new ESBC header for ls-ch3 Secure Boot

2016-01-28 Thread Saksham Jain
. Keys must be in table format. 3) Hence, SRK (Key table) is by default currently always present. 4) Max Key number has increase from 4 to 8. 8th Key is unrevockable. 5) New Barker Code is being used. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes

[U-Boot] [PATCH v2 02/15] armv8: ls2080: Add Secure Boot configs: SEC, Security Monitor, SRK and RCW

2016-01-28 Thread Saksham Jain
For ls2080, Added configs for various IPs used during secure boot Added address and endianness for SEC and Security Monitor. SRK - Fuses in SFP (Fused for public keys hash) These are stored in LE format. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No

[U-Boot] [PATCH v2 01/15] armv8: ls2080: Add SFP Configs for LS2080/LS2085

2016-01-28 Thread Saksham Jain
In LS2080/LS2085, SFP is LE and Ver is 3.4 The base address is 0x01e80200 SFP will be used in Secure Boot to read fuses. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- Changes for v2: - No changes arch/arm/include/asm/arch-fsl-layerscape/config.h | 4 arch/arm

[U-Boot] [PATCH v2 00/15] Add Support for Secure Boot on LS208x

2016-01-28 Thread Saksham Jain
Secure Boot ESBC has been enabled on FSL LS208x platforms. This patchset is dependent on http://patchwork.ozlabs.org/patch/571612/ Changes for v2: - changed function fsl_secboot_validate to return address of image - corrected Bootscript header for ls1043 and ls1021 Saksham Jain

[U-Boot] [PATCH 09/14] armv8: fsl-lsch3: Disable SMMU during Secure Boot

2016-01-27 Thread Saksham Jain
During secure boot, SMMU is enabled on POR by SP bootrom. SMMU needs to be put in Bypass mode in uboot to enable CAAM transcations to pass through. During Nonsecure Boot, SP BootROM doesn't enable SMMU and at reset SMMU is in bypass mode. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham

[U-Boot] [PATCH 08/14] armv8 : ls2080: Add config for endianess of CCSR GUR

2016-01-27 Thread Saksham Jain
The GUR (DCFG) registers in CCSR space are in LE format for ls2080/ls2085. Defined a config CONFIG_SYS_FSL_CCSR_GUR_LE in arch/arm/include/asm/arch-fsl-layerscape/config.h Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- arch/arm/include/asm/arch-fsl-layerscape/config.h | 3 +++ 1

[U-Boot] [PATCH 06/14] SECURE BOOT: Copy Bootscript and header from NOR to DDR for LS2080/5

2016-01-27 Thread Saksham Jain
case of non-xip memories (e.g. NAND, SD) it is neccessary to copy both these images to DDR. For other ARM Platforms (ls1043 and ls1020), header is not copied from NOR to DDR (otherwise customers will need to modify the existing headers). Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain

[U-Boot] [PATCH 14/14] SECURE_BOOT: Enable IE (Key extention) Feature in Ls2085a & LS2088a

2016-01-27 Thread Saksham Jain
er of any image, Use keys from IE table, otherwise use keys tied up with SoC's fuses (SRK). The address of IE Table HDR is fixed for NOR. In case of boot from other devices, IE Table and it's Header needs to be copied to an XIP Memory. Signed-off-by: Aneesh Bansal Signed-off-by: Sa

[U-Boot] [PATCH 00/14] Add Support for Secure Boot on LS208x

2016-01-27 Thread Saksham Jain
Secure Boot ESBC has been enabled on FSL LS208x platforms. This patchset is dependent on http://patchwork.ozlabs.org/patch/571612/ Saksham Jain (14): armv8: ls2080: Add SFP Configs for LS2080/LS2085 armv8: ls2080: Add Secure Boot configs: SEC, Security Monitor, SRK and RCW SECURE BOOT

[U-Boot] [PATCH 11/14] crypto/fsl: Make CAAM transactions cacheable

2016-01-27 Thread Saksham Jain
e and Read Allocate. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- drivers/crypto/fsl/jr.c | 13 + drivers/crypto/fsl/jr.h | 3 +++ 2 files changed, 16 insertions(+) diff --git a/drivers/crypto/fsl/jr.c b/drivers/crypto/fsl/jr.c index b8c0c0a..01d9967 100644 ---

[U-Boot] [PATCH 12/14] SECURE_BOOT: Use default bootargs during Secure Boot

2016-01-27 Thread Saksham Jain
For secure boot, currently we were using fixed bootargs for all SoCs. This is not needed and we can use the bootargs which are used in non-secure boot. Incase bootargs are not defined for non-secure boot of any platform, we use default bootargs. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham

[U-Boot] [PATCH 02/14] armv8: ls2080: Add Secure Boot configs: SEC, Security Monitor, SRK and RCW

2016-01-27 Thread Saksham Jain
For ls2080, Added configs for various IPs used during secure boot Added address and endianness for SEC and Security Monitor. SRK - Fuses in SFP (Fused for public keys hash) These are stored in LE format. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- arch/arm/include/asm/arch

[U-Boot] [PATCH 01/14] armv8: ls2080: Add SFP Configs for LS2080/LS2085

2016-01-27 Thread Saksham Jain
In LS2080/LS2085, SFP is LE and Ver is 3.4 The base address is 0x01e80200 SFP will be used in Secure Boot to read fuses. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- arch/arm/include/asm/arch-fsl-layerscape/config.h | 4 arch/arm/include/asm/arch-fsl-layerscape

[U-Boot] [PATCH 05/14] armv8: fsl-lsch3: Add bootscript header address for Secure Boot

2016-01-27 Thread Saksham Jain
: Saksham Jain --- arch/arm/include/asm/fsl_secure_boot.h | 4 1 file changed, 4 insertions(+) diff --git a/arch/arm/include/asm/fsl_secure_boot.h b/arch/arm/include/asm/fsl_secure_boot.h index e65caed..7c55ea1 100644 --- a/arch/arm/include/asm/fsl_secure_boot.h +++ b/arch/arm/include/asm

[U-Boot] [PATCH 07/14] SECURE BOOT: Change env variable "fdt_high" for LS2080a and LS2085a

2016-01-27 Thread Saksham Jain
Secure Boot to same value as it's default value during non-secure boot. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- arch/arm/include/asm/fsl_secure_boot.h | 7 +++ 1 file changed, 7 insertions(+) diff --git a/arch/arm/include/asm/fsl_secure_boot.h b/arch/arm/include/as

[U-Boot] [PATCH 13/14] SECURE BOOT: Halt execution when secure boot fail after reset request

2016-01-27 Thread Saksham Jain
care in bootscript (Execute esbc_halt command in case of image verification process) or it can be taken care in Uboot Code. Doing the latter via a esbc_halt. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- board/freescale/common/cmd_esbc_validate.c | 2 +- board/freescale/common

[U-Boot] [PATCH 03/14] SECURE BOOT: Add new ESBC header for ls-ch3 Secure Boot

2016-01-27 Thread Saksham Jain
. Keys must be in table format. 3) Hence, SRK (Key table) is by default currently always present. 4) Max Key number has increase from 4 to 8. 8th Key is unrevockable. 5) New Barker Code is being used. Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- arch/arm/include/asm/arch-fsl

[U-Boot] [PATCH 10/14] crypto/fsl: Correct 64bit Write when MMU disabled

2016-01-27 Thread Saksham Jain
-off-by: Saksham Jain --- drivers/crypto/fsl/desc_constr.h | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/drivers/crypto/fsl/desc_constr.h b/drivers/crypto/fsl/desc_constr.h index 2559ccd..db6ddee 100644 --- a/drivers/crypto/fsl/desc_constr.h +++ b/drivers/crypto/fsl

[U-Boot] [PATCH 04/14] SECURE BOOT: Add Secure Boot support on ls2080aqds/rdb

2016-01-27 Thread Saksham Jain
Boot defconfigs created for boards (NOR Boot). Signed-off-by: Aneesh Bansal Signed-off-by: Saksham Jain --- arch/arm/include/asm/fsl_secure_boot.h | 9 +++-- board/freescale/ls2080aqds/ls2080aqds.c | 5 - board/freescale/ls2080ardb/ls2080ardb.c | 5 - configs