]> git.ipfire.org Git - thirdparty/u-boot.git/blame - include/config_fsl_chain_trust.h
cbfs: Don't require the CBFS size with cbfs_init_mem()
[thirdparty/u-boot.git] / include / config_fsl_chain_trust.h
CommitLineData
83d290c5 1/* SPDX-License-Identifier: GPL-2.0+ */
98cb0efd 2/*
3 * Copyright 2015 Freescale Semiconductor, Inc.
98cb0efd 4 */
5
bdc22074
AB
6#ifndef __CONFIG_FSL_CHAIN_TRUST_H
7#define __CONFIG_FSL_CHAIN_TRUST_H
98cb0efd 8
1af3c7f4
SG
9#include <linux/stringify.h>
10
bdc22074
AB
11#ifdef CONFIG_CHAIN_OF_TRUST
12
98cb0efd 13#ifndef CONFIG_EXTRA_ENV
14#define CONFIG_EXTRA_ENV ""
15#endif
16
17/*
18 * Control should not reach back to uboot after validation of images
19 * for secure boot flow and therefore bootscript should have
20 * the bootm command. If control reaches back to uboot anyhow
21 * after validating images, core should just spin.
22 */
23
24/*
25 * Define the key hash for boot script here if public/private key pair used to
26 * sign bootscript are different from the SRK hash put in the fuse
27 * Example of defining KEY_HASH is
28 * #define CONFIG_BOOTSCRIPT_KEY_HASH \
29 * "41066b564c6ffcef40ccbc1e0a5d0d519604000c785d97bbefd25e4d288d1c8b"
30 */
31
5abc1a45 32#ifdef CONFIG_USE_BOOTARGS
2bfe4890
SJ
33#define CONFIG_SET_BOOTARGS "setenv bootargs \'" CONFIG_BOOTARGS" \';"
34#else
35#define CONFIG_SET_BOOTARGS "setenv bootargs \'root=/dev/ram " \
36 "rw console=ttyS0,115200 ramdisk_size=600000\';"
37#endif
38
39
98cb0efd 40#ifdef CONFIG_BOOTSCRIPT_KEY_HASH
41#define CONFIG_SECBOOT \
42 "setenv bs_hdraddr " __stringify(CONFIG_BOOTSCRIPT_HDR_ADDR)";" \
2bfe4890 43 CONFIG_SET_BOOTARGS \
98cb0efd 44 CONFIG_EXTRA_ENV \
45 "esbc_validate $bs_hdraddr " \
46 __stringify(CONFIG_BOOTSCRIPT_KEY_HASH)";" \
47 "source $img_addr;" \
48 "esbc_halt\0"
49#else
50#define CONFIG_SECBOOT \
51 "setenv bs_hdraddr " __stringify(CONFIG_BOOTSCRIPT_HDR_ADDR)";" \
2bfe4890 52 CONFIG_SET_BOOTARGS \
98cb0efd 53 CONFIG_EXTRA_ENV \
54 "esbc_validate $bs_hdraddr;" \
55 "source $img_addr;" \
56 "esbc_halt\0"
57#endif
58
5050f6f0
AB
59#ifdef CONFIG_BOOTSCRIPT_COPY_RAM
60#define CONFIG_BS_COPY_ENV \
61 "setenv bs_hdr_ram " __stringify(CONFIG_BS_HDR_ADDR_RAM)";" \
69d4b48c 62 "setenv bs_hdr_device " __stringify(CONFIG_BS_HDR_ADDR_DEVICE)";" \
5050f6f0
AB
63 "setenv bs_hdr_size " __stringify(CONFIG_BS_HDR_SIZE)";" \
64 "setenv bs_ram " __stringify(CONFIG_BS_ADDR_RAM)";" \
69d4b48c 65 "setenv bs_device " __stringify(CONFIG_BS_ADDR_DEVICE)";" \
5050f6f0
AB
66 "setenv bs_size " __stringify(CONFIG_BS_SIZE)";"
67
3f701cc5 68/* For secure boot flow, default environment used will be used */
762f92a6
RG
69#if defined(CONFIG_SYS_RAMBOOT) || defined(CONFIG_NAND_BOOT) || \
70 defined(CONFIG_SD_BOOT)
71#if defined(CONFIG_RAMBOOT_NAND) || defined(CONFIG_NAND_BOOT)
5050f6f0 72#define CONFIG_BS_COPY_CMD \
69d4b48c
SG
73 "nand read $bs_hdr_ram $bs_hdr_device $bs_hdr_size ;" \
74 "nand read $bs_ram $bs_device $bs_size ;"
69d4b48c
SG
75#elif defined(CONFIG_SD_BOOT)
76#define CONFIG_BS_COPY_CMD \
77 "mmc read $bs_hdr_ram $bs_hdr_device $bs_hdr_size ;" \
78 "mmc read $bs_ram $bs_device $bs_size ;"
762f92a6
RG
79#endif
80#else
3f701cc5 81#define CONFIG_BS_COPY_CMD \
69d4b48c
SG
82 "cp.b $bs_hdr_device $bs_hdr_ram $bs_hdr_size ;" \
83 "cp.b $bs_device $bs_ram $bs_size ;"
98cb0efd 84#endif
3f701cc5 85#endif /* CONFIG_BOOTSCRIPT_COPY_RAM */
98cb0efd 86
5050f6f0
AB
87#ifndef CONFIG_BS_COPY_ENV
88#define CONFIG_BS_COPY_ENV
89#endif
90
91#ifndef CONFIG_BS_COPY_CMD
92#define CONFIG_BS_COPY_CMD
93#endif
94
bdc22074 95#define CONFIG_CHAIN_BOOT_CMD CONFIG_BS_COPY_ENV \
5050f6f0
AB
96 CONFIG_BS_COPY_CMD \
97 CONFIG_SECBOOT
98cb0efd 98
99#endif
100#endif