Hi Jorge and Oleksandr,

Thank you for sharing all the links. I found there a lot of inspiration to meet my target of using encrypted bitfiles.

I have also shared with the community a patch, on top of your changes, adding encrypted bitfile support in u-boot.

Regards,

Adrian

On 19.01.2022 18:48, Oleksandr Suvorov wrote:
Hi Adrian,

On Wed, Jan 19, 2022 at 7:23 PM Jorge Ramirez-Ortiz, Foundries
<jo...@foundries.io> wrote:
On 19/01/22, Jorge Ramirez-Ortiz, Foundries wrote:
On 19/01/22, Jorge Ramirez-Ortiz, Foundries wrote:
On 19/01/22, Adrian Fiergolski wrote:
Hi Jorge,
hi Adrian,

Have you succeeded to enable secure boot on ZynqMP with SPL (not Xilinx's
FSBL)? Is it documented somewhere? Any configuration files/yocto recipes?
somewhere there:
https://github.com/foundriesio/meta-lmp

Have you managed to resolve problem of the bitstream loaded in such a case
by SPL?

Yes. I wrote the docs here below:
https://docs.foundries.io/latest/reference-manual/security/authentication-xilinx.html

this might help you as well if you use OP-TEE and require RPMB access.

https://github.com/OP-TEE/optee_os/pull/4874


forgot to add, the PR to load the bistream was followed up by Oleksandr (in 
copy).
but not totally sure if it was merged yet as Simon asked for tests and those 
might be pending.
You can try this solution for the Xilinx u-boot 2020.07
https://github.com/foundriesio/u-boot/pull/116
or this one for the mainline u-boot:
https://patchwork.ozlabs.org/project/uboot/list/?series=276743

I need to use an encrypted bitstream. However, it required the use of
DeviceKeys in post-boot state which eventually requires secure boot.

Regards,
hope that helps

Adrian

Reply via email to