]> git.ipfire.org Git - people/ms/u-boot.git/blob - doc/SPL/README.spl-secure-boot
sandbox: Enable more console options
[people/ms/u-boot.git] / doc / SPL / README.spl-secure-boot
1 Overview of SPL verified boot on powerpc/mpc85xx & arm/layerscape platforms
2 ===========================================================================
3
4 Introduction
5 ------------
6
7 This document provides an overview of how SPL verified boot works on powerpc/
8 mpc85xx & arm/layerscape platforms.
9
10 Methodology
11 -----------
12
13 The SPL image is responsible for loading the next stage boot loader, which is
14 the main u-boot image. For secure boot process on these platforms ROM verifies
15 SPL image, so to continue chain of trust SPL image verifies U-boot image using
16 spl_validate_uboot(). This function uses QorIQ Trust Architecture header
17 (appended to U-boot image) to validate the U-boot binary just before passing
18 control to it.