Files
u-boot/arch/arm/dts
Clement Faure 56d2050f40 imx8m: Add DEK blob encapsulation for imx8m
Add DEK blob encapsulation support for IMX8M through "dek_blob" command.
On ARMv8, u-boot runs in non-secure, thus cannot encapsulate a DEK blob
for encrypted boot.
The DEK blob is encapsulated by OP-TEE through a trusted application call.
U-boot sends and receives the DEK and the DEK blob binaries through OP-TEE
dynamic shared memory.

To enable the DEK blob encapsulation, add to the defconfig:
CONFIG_SECURE_BOOT=y
CONFIG_FAT_WRITE=y
CONFIG_CMD_DEKBLOB=y

Signed-off-by: Clement Faure <clement.faure@nxp.com>
Reviewed-by: Ye Li <ye.li@nxp.com>
Signed-off-by: Peng Fan <peng.fan@nxp.com>
2021-04-08 20:29:52 +02:00
..
2020-01-23 07:29:58 -05:00
2021-03-01 10:21:36 +01:00
2021-02-08 14:01:19 +05:30
2021-04-08 09:18:29 +02:00
2020-08-24 14:11:31 -04:00
2021-03-20 16:24:27 -04:00
2020-10-22 09:54:54 -04:00
2020-10-27 08:01:36 +01:00
2021-03-30 12:03:24 +02:00