Adds support for creating bootable images for AM43xx HS
and DRA7xx/AM57xx HS devices.
Daniel Allred (10):
doc: Add info on using secure devices from TI
ti: omap-common: Add commands for generating secure SPL images
ti: AM43xx: config.mk: Add support for generating secure boot images
.
Secure devices require a security development package (SECDEV)
package that can be downloaded from:
http://www.ti.com/mysecuresoftware
Login is required and access is granted under appropriate NDA
and export control restrictions.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
-common one.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
---
arch/arm/Kconfig | 8 +---
arch/arm/cpu/armv7/omap-common/Kconfig | 17 +
2 files changed, 18 insertions(+), 7 deletions(-)
create mode 100644 arch/arm/cpu/armv7/omap-common/Kconfig
process.
Currently, these CONFIG options are used only by AM43xx,
but in future other AM33xx class SOCs will also use them.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
---
arch/arm/cpu/armv7/am33xx/Kconfig | 27 +++
1 file changed, 27 insertions(+)
create
CONFIG_AM43XX from the header file.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
---
arch/arm/Kconfig | 19 +--
arch/arm/cpu/armv7/am33xx/Kconfig | 13 +
configs/am43xx_evm_defconfig | 1 +
configs
ices. To handle this, CONFIG_SYS_TEXT_BASE is also setup via
a Kconfig option and the defconfig files.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
---
configs/am43xx_evm_qspiboot_defconfig | 1 +
configs/am43xx_evm_usbhost_boot_defconfig | 1 +
include/configs/am43xx_evm
slightly differently to produce a
different boot image, depending on whether the user wants to
boot off SPI, QSPI or other boot media.
Refer to README.ti-secure for more information.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
---
arch/arm/cpu/armv7/am33xx/config.mk | 20
to README.ti-secure for more information.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
arch/arm/cpu/armv7/omap-common/config_secure.mk | 66 +
1 file changed, 66 insertions(+)
create mode 100644 arch/arm/cpu/armv7/omap-common/config_secure.mk
diff
for
the HS EVMs also, as the boards are similar except for
some security specific changes around power supply and
enclosure protection.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Signed-off-by: Andreas Dannenberg
Signed-off-by: Lokesh Vutla
---
board/ti/am43xx/board.c
From: Madan Srinivas
Adds new defconfig files for AM43xx secure devices.
These are the same as the non-secure parts, except for
CONFIG_TI_SECURE_DEVICE option set to 'y'
CONFIG_ISW_ENTRY_ADDR updated for secure images.
Signed-off-by: Daniel Allred
Signed-off-by: Mada
available on the various device flavors
(Common minimum internal RAM guaranteed for various flavors of
DRA7xx/AM57xx is 512KB).
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
include/configs/ti_omap5_common.h | 32 +++-
1 file changed, 27 insertions(+), 5
as on non-secure devices).
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
arch/arm/cpu/armv7/omap5/config.mk | 6 ++
1 file changed, 6 insertions(+)
diff --git a/arch/arm/cpu/armv7/omap5/config.mk
b/arch/arm/cpu/armv7/omap5/config.mk
index ef2725a..a7e55a5 100644
--- a/arch/ar
Adds CONFIG_OF_BOARD_SETUP to the config header files
for dra7xx_evm and am57xx_evm.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
include/configs/am57xx_evm.h | 3 +++
include/configs/dra7xx_evm.h | 3 +++
2 files changed, 6 insertions(+)
diff --git a/include/configs
can be distiguished. Applies to all OMAP5 variants.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
arch/arm/cpu/armv7/omap-common/hwinit-common.c | 22 --
arch/arm/include/asm/arch-omap4/cpu.h | 7 +++
arch/arm/include/asm/arch-omap5/cpu.h |
include the fdt.c in the build.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
arch/arm/cpu/armv7/omap5/Makefile | 1 +
arch/arm/cpu/armv7/omap5/fdt.c| 183 ++
2 files changed, 184 insertions(+)
create mode 100644 arch/arm/cpu/armv7
Adds the board specific ft_board_setup() functions that
are called when CONFIG_OF_BOARD_SETUP is defined. These functions
will currently just call the ft_cpu_setup() function.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
board/ti/am57xx/board.c | 9 +
board/ti/dra7xx
Adds new defconfig files for DRA7xx and AM57xx secure devices.
These are the same as the non-secure parts, but with the addition
of the CONFIG_TI_SECURE_DEVICE option set to 'y'.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
configs/am57xx_hs_evm_defc
Adds support for creating bootable images for AM43xx HS
and DRA7xx/AM57xx HS devices.
Daniel Allred (9):
doc: Add info on using secure devices from TI
ti: omap-common: Add commands for generating secure SPL images
ti: AM43xx: config.mk: Add support for generating secure boot images
.
Secure devices require a security development package (SECDEV)
package that can be downloaded from:
http://www.ti.com/mysecuresoftware
Login is required and access is granted under appropriate NDA
and export control restrictions.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
process.
Currently, these CONFIG options are used only by AM43xx,
but in future other AM33xx class SOCs will also use them.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
Reviewed-by: Tom Rini
---
V2:
None
arch/arm/cpu
-common one.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
Reviewed-by: Tom Rini
---
V2:
None
arch/arm/Kconfig | 8 +---
arch/arm/cpu/armv7/omap-common/Kconfig | 17 +
2 files
CONFIG_AM43XX from the header file.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Tested-by: Andreas Dannenberg
---
V2:
Update more defconfigs
Replace CREATE_BOARD_SYMLINK with TI_I2C_BOARD_DETECT
Rebase against latest master
arch/arm/Kconfig | 19
slightly differently to produce a
different boot image, depending on whether the user wants to
boot off SPI, QSPI or other boot media.
Refer to README.ti-secure for more information.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
ices. To handle this, CONFIG_SYS_TEXT_BASE is also setup via
a Kconfig option and the defconfig files.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
Reviewed-by: Tom Rini
---
V2:
Rebase against current master
configs/am43xx_ev
to README.ti-secure for more information.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
Reviewed-by: Tom Rini
---
V2:
None
arch/arm/cpu/armv7/omap-common/config_secure.mk | 66 +
1 file changed
From: Madan Srinivas
Adds a new defconfig file for the AM43xx secure device.
This is the same as for the non-secure part, except for:
CONFIG_TI_SECURE_DEVICE option set to 'y'
CONFIG_ISW_ENTRY_ADDR updated for secure images.
Signed-off-by: Daniel Allred
Signed-off
can be distiguished. Applies to all OMAP5 variants.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
V2:
Move device type defines to omap_common.h, remove duplicates
arch/arm/cpu/armv7/omap-common/hwinit-common.c | 22 --
arch/arm/include/asm/arch-omap3
as on non-secure devices).
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
Reviewed-by: Tom Rini
---
V2:
None
arch/arm/cpu/armv7/omap5/config.mk | 6 ++
1 file changed, 6 insertions(+)
diff --git a/arch/arm/cpu/armv7/
for
the HS EVMs also, as the boards are similar except for
some security specific changes around power supply and
enclosure protection.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Signed-off-by: Andreas Dannenberg
Reviewed-by: Lokesh Vutla
---
V2:
Rebase against current
available on the various device flavors
(Common minimum internal RAM guaranteed for various flavors of
DRA7xx/AM57xx is 512KB).
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
V2:
Rename CONFIG_SECURE_BOOT_SRAM to TI_OMAP5_SECURE_BOOT_RESV_SRAM_SZ since
it is not configurable
include the fdt.c in the build.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
V2:
Change CONFIG_SECURE_BOOT_SRAM to TI_OMAP5_SECURE_BOOT_RESV_SRAM_SZ
Change CONFIG_SECURE_RUN_SRAM to CONFIG_SECURE_RUNTIME_RESV_SRAM_SZ
arch/arm/cpu/armv7/omap5/Makefile | 1 +
arch/arm/cpu
Adds new defconfig files for DRA7xx and AM57xx secure devices.
These are the same as the non-secure parts, but with the addition
of the CONFIG_TI_SECURE_DEVICE option set to 'y'.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
V2:
Rebase from current master, create HS
Adds the board specific ft_board_setup() functions that
are called when CONFIG_OF_BOARD_SETUP is defined. These functions
will currently just call the ft_cpu_setup() function.
Adds CONFIG_OF_BOARD_SETUP to the defconfig files
for dra72_evm, dra74_evm, and am57xx_evm.
Signed-off-by: Daniel Allred
Adds support for creating bootable images for AM43xx HS
and DRA7xx/AM57xx HS devices.
Daniel Allred (9):
doc: Add info on using secure devices from TI
ti: omap-common: Add commands for generating secure SPL images
ti: AM43xx: config.mk: Add support for generating secure boot images
-common one.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
Reviewed-by: Tom Rini
---
V3:
None
V2:
None
arch/arm/Kconfig | 8 +---
arch/arm/cpu/armv7/omap-common/Kconfig | 17 +
2
process.
Currently, these CONFIG options are used only by AM43xx,
but in future other AM33xx class SOCs will also use them.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
Reviewed-by: Tom Rini
---
V3:
None
V2:
None
arch
ices. To handle this, CONFIG_SYS_TEXT_BASE is also setup via
a Kconfig option and the defconfig files.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
Reviewed-by: Tom Rini
---
V3:
None
V2:
Rebase against curr
slightly differently to produce a
different boot image, depending on whether the user wants to
boot off SPI, QSPI or other boot media.
Refer to README.ti-secure for more information.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
can be distiguished. Applies to all OMAP5 variants.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
Reviewed-by: Tom Rini
---
V3:
Rebase on current master
V2:
Move device type defines to omap_common.h, remove duplicates
arch/arm/cpu/armv7/omap-common/hwinit-common.c | 22
include the fdt.c in the build.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
Reviewed-by: Tom Rini
---
V3:
None
V2:
Change CONFIG_SECURE_BOOT_SRAM to TI_OMAP5_SECURE_BOOT_RESV_SRAM_SZ
Change CONFIG_SECURE_RUN_SRAM to CONFIG_SECURE_RUNTIME_RESV_SRAM_SZ
arch/arm/cpu/armv7
Adds new defconfig files for DRA7xx and AM57xx secure devices.
These are the same as the non-secure parts, but with the addition
of the CONFIG_TI_SECURE_DEVICE option set to 'y'.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
Reviewed-by: Tom Rini
---
V3:
None
V2:
R
available on the various device flavors
(Common minimum internal RAM guaranteed for various flavors of
DRA7xx/AM57xx is 512KB).
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
---
V3:
Rename CONFIG_SPL_BOOT_END to TI_ROM_BOOT_LOAD_END since it is not a
a configurable option (fixed based
to README.ti-secure for more information.
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
Reviewed-by: Tom Rini
---
V3:
None
V2:
None
arch/arm/cpu/armv7/omap-common/config_secure.mk | 66 +
1 file
as on non-secure devices).
Signed-off-by: Daniel Allred
Signed-off-by: Madan Srinivas
Reviewed-by: Lokesh Vutla
Tested-by: Andreas Dannenberg
Reviewed-by: Tom Rini
---
V3:
None
V2:
None
arch/arm/cpu/armv7/omap5/config.mk | 6 ++
1 file changed, 6 insertions(+)
diff --git a/arch/ar
From: Madan Srinivas
Adds a new defconfig file for the AM43xx secure device.
This is the same as for the non-secure part, except for:
CONFIG_TI_SECURE_DEVICE option set to 'y'
CONFIG_ISW_ENTRY_ADDR updated for secure images.
Signed-off-by: Daniel Allred
Signed-off
for
the HS EVMs also, as the boards are similar except for
some security specific changes around power supply and
enclosure protection.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Signed-off-by: Andreas Dannenberg
Reviewed-by: Lokesh Vutla
Reviewed-by: Tom Rini
---
V3:
None
.
Secure devices require a security development package (SECDEV)
package that can be downloaded from:
http://www.ti.com/mysecuresoftware
Login is required and access is granted under appropriate NDA
and export control restrictions.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Adds the board specific ft_board_setup() functions that
are called when CONFIG_OF_BOARD_SETUP is defined. These functions
will currently just call the ft_cpu_setup() function.
Adds CONFIG_OF_BOARD_SETUP to the defconfig files
for dra72_evm, dra74_evm, and am57xx_evm.
Signed-off-by: Daniel Allred
CONFIG_AM43XX from the header file.
Signed-off-by: Madan Srinivas
Signed-off-by: Daniel Allred
Tested-by: Andreas Dannenberg
Reviewed-by: Tom Rini
---
V3:
None
V2:
Update more defconfigs
Replace CREATE_BOARD_SYMLINK with TI_I2C_BOARD_DETECT
Rebase against latest master
arch/arm/Kconfig
. This is important
in order to prevent a later compromise of public supervisor code from being
able to modify the EMIF firewalls. This API is in the code, so any use of the
secure_emif_firewall_setup() API must be inserted before the lock API is called.
Daniel Allred (5):
ti: omap5: Add Kconfig
contiguous and start at the
start address given. If the start address is zero, the intention
is that the region will be automatically placed at the end of the
available external DRAM space.
Signed-off-by: Daniel Allred
---
arch/arm/cpu/armv7/omap5/Kconfig | 26 ++
1 file
.
Signed-off-by: Daniel Allred
---
arch/arm/cpu/armv7/omap-common/emif-common.c | 15 +++
1 file changed, 15 insertions(+)
diff --git a/arch/arm/cpu/armv7/omap-common/emif-common.c
b/arch/arm/cpu/armv7/omap-common/emif-common.c
index 2b79010..b26984e 100644
--- a/arch/arm/cpu/armv7
-by: Daniel Allred
---
arch/arm/cpu/armv7/omap5/Makefile | 1 +
arch/arm/cpu/armv7/omap5/sec-fxns.c| 126 +
arch/arm/include/asm/omap_sec_common.h | 24 +++
3 files changed, 151 insertions(+)
create mode 100644 arch/arm/cpu/armv7/omap5/sec-fxns.c
If the ending portion of the DRAM is reserved for secure
world use, then u-boot cannot use this memory for its relocation
purposes. To prevent issues, we mark this memory as PRAM and this
prevents it from being used by u-boot at all.
Signed-off-by: Daniel Allred
---
include/configs
Adds a secure dram reservation fixup for secure
devices, when a region in the emif has been set aside
for secure world use. The size is defined by the
CONFIG_TI_SECURE_EMIF_TOTAL_REGION_SIZE config option.
Signed-off-by: Daniel Allred
---
arch/arm/cpu/armv7/omap5/fdt.c | 64
- Move the CONS_INDEX selection out of CONFIG_SYS_EXTRA_OPTIONS and
into Kconfig proper.
- Edit the relevant am57x configs to remove the now unneeded
CONFIG_SYS_EXTRA_OPTIONS.
Signed-off-by: Daniel Allred
---
board/ti/am57xx/Kconfig | 9 +
configs
56 matches
Mail list logo
