blob: 4bbcd13158380e84afb14e85e147e72cebe0a9ac [file] [log] [blame]
gaurav rana98cb0ef2015-03-10 14:08:50 +05301/*
2 * Copyright 2015 Freescale Semiconductor, Inc.
3 *
4 * SPDX-License-Identifier: GPL-2.0+
5 */
6
Aneesh Bansalbdc22072016-01-22 16:37:24 +05307#ifndef __CONFIG_FSL_CHAIN_TRUST_H
8#define __CONFIG_FSL_CHAIN_TRUST_H
gaurav rana98cb0ef2015-03-10 14:08:50 +05309
Aneesh Bansalbdc22072016-01-22 16:37:24 +053010#ifdef CONFIG_CHAIN_OF_TRUST
11
gaurav rana98cb0ef2015-03-10 14:08:50 +053012#ifndef CONFIG_EXTRA_ENV
13#define CONFIG_EXTRA_ENV ""
14#endif
15
16/*
17 * Control should not reach back to uboot after validation of images
18 * for secure boot flow and therefore bootscript should have
19 * the bootm command. If control reaches back to uboot anyhow
20 * after validating images, core should just spin.
21 */
22
23/*
24 * Define the key hash for boot script here if public/private key pair used to
25 * sign bootscript are different from the SRK hash put in the fuse
26 * Example of defining KEY_HASH is
27 * #define CONFIG_BOOTSCRIPT_KEY_HASH \
28 * "41066b564c6ffcef40ccbc1e0a5d0d519604000c785d97bbefd25e4d288d1c8b"
29 */
30
Sam Protsenko5abc1a42017-08-14 20:22:17 +030031#ifdef CONFIG_USE_BOOTARGS
Saksham Jain2bfe4892016-03-23 16:24:43 +053032#define CONFIG_SET_BOOTARGS "setenv bootargs \'" CONFIG_BOOTARGS" \';"
33#else
34#define CONFIG_SET_BOOTARGS "setenv bootargs \'root=/dev/ram " \
35 "rw console=ttyS0,115200 ramdisk_size=600000\';"
36#endif
37
38
gaurav rana98cb0ef2015-03-10 14:08:50 +053039#ifdef CONFIG_BOOTSCRIPT_KEY_HASH
40#define CONFIG_SECBOOT \
41 "setenv bs_hdraddr " __stringify(CONFIG_BOOTSCRIPT_HDR_ADDR)";" \
Saksham Jain2bfe4892016-03-23 16:24:43 +053042 CONFIG_SET_BOOTARGS \
gaurav rana98cb0ef2015-03-10 14:08:50 +053043 CONFIG_EXTRA_ENV \
44 "esbc_validate $bs_hdraddr " \
45 __stringify(CONFIG_BOOTSCRIPT_KEY_HASH)";" \
46 "source $img_addr;" \
47 "esbc_halt\0"
48#else
49#define CONFIG_SECBOOT \
50 "setenv bs_hdraddr " __stringify(CONFIG_BOOTSCRIPT_HDR_ADDR)";" \
Saksham Jain2bfe4892016-03-23 16:24:43 +053051 CONFIG_SET_BOOTARGS \
gaurav rana98cb0ef2015-03-10 14:08:50 +053052 CONFIG_EXTRA_ENV \
53 "esbc_validate $bs_hdraddr;" \
54 "source $img_addr;" \
55 "esbc_halt\0"
56#endif
57
Aneesh Bansal5050f6f2015-06-16 10:36:43 +053058#ifdef CONFIG_BOOTSCRIPT_COPY_RAM
59#define CONFIG_BS_COPY_ENV \
60 "setenv bs_hdr_ram " __stringify(CONFIG_BS_HDR_ADDR_RAM)";" \
Sumit Garg69d4b482016-06-14 13:52:39 -040061 "setenv bs_hdr_device " __stringify(CONFIG_BS_HDR_ADDR_DEVICE)";" \
Aneesh Bansal5050f6f2015-06-16 10:36:43 +053062 "setenv bs_hdr_size " __stringify(CONFIG_BS_HDR_SIZE)";" \
63 "setenv bs_ram " __stringify(CONFIG_BS_ADDR_RAM)";" \
Sumit Garg69d4b482016-06-14 13:52:39 -040064 "setenv bs_device " __stringify(CONFIG_BS_ADDR_DEVICE)";" \
Aneesh Bansal5050f6f2015-06-16 10:36:43 +053065 "setenv bs_size " __stringify(CONFIG_BS_SIZE)";"
66
Saksham Jain3f701cc2016-03-23 16:24:37 +053067/* For secure boot flow, default environment used will be used */
Ruchika Gupta762f92a2017-04-17 18:07:18 +053068#if defined(CONFIG_SYS_RAMBOOT) || defined(CONFIG_NAND_BOOT) || \
69 defined(CONFIG_SD_BOOT)
70#if defined(CONFIG_RAMBOOT_NAND) || defined(CONFIG_NAND_BOOT)
Aneesh Bansal5050f6f2015-06-16 10:36:43 +053071#define CONFIG_BS_COPY_CMD \
Sumit Garg69d4b482016-06-14 13:52:39 -040072 "nand read $bs_hdr_ram $bs_hdr_device $bs_hdr_size ;" \
73 "nand read $bs_ram $bs_device $bs_size ;"
Sumit Garg69d4b482016-06-14 13:52:39 -040074#elif defined(CONFIG_SD_BOOT)
Saksham Jain3f701cc2016-03-23 16:24:37 +053075#define CONFIG_BS_COPY_CMD \
Sumit Garg69d4b482016-06-14 13:52:39 -040076 "mmc read $bs_hdr_ram $bs_hdr_device $bs_hdr_size ;" \
77 "mmc read $bs_ram $bs_device $bs_size ;"
Ruchika Gupta762f92a2017-04-17 18:07:18 +053078#endif
79#else
Sumit Garg69d4b482016-06-14 13:52:39 -040080#define CONFIG_BS_COPY_CMD \
81 "cp.b $bs_hdr_device $bs_hdr_ram $bs_hdr_size ;" \
82 "cp.b $bs_device $bs_ram $bs_size ;"
gaurav rana98cb0ef2015-03-10 14:08:50 +053083#endif
Saksham Jain3f701cc2016-03-23 16:24:37 +053084#endif /* CONFIG_BOOTSCRIPT_COPY_RAM */
gaurav rana98cb0ef2015-03-10 14:08:50 +053085
Aneesh Bansal5050f6f2015-06-16 10:36:43 +053086#ifndef CONFIG_BS_COPY_ENV
87#define CONFIG_BS_COPY_ENV
88#endif
89
90#ifndef CONFIG_BS_COPY_CMD
91#define CONFIG_BS_COPY_CMD
92#endif
93
Aneesh Bansalbdc22072016-01-22 16:37:24 +053094#define CONFIG_CHAIN_BOOT_CMD CONFIG_BS_COPY_ENV \
Aneesh Bansal5050f6f2015-06-16 10:36:43 +053095 CONFIG_BS_COPY_CMD \
96 CONFIG_SECBOOT
gaurav rana98cb0ef2015-03-10 14:08:50 +053097
98#endif
99#endif