| config CHAIN_OF_TRUST | |
| depends on !FIT_SIGNATURE && SECURE_BOOT | |
| imply CMD_BLOB | |
| select FSL_CAAM | |
| select SPL_BOARD_INIT if (ARM && SPL) | |
| select SHA_HW_ACCEL | |
| select SHA_PROG_HW_ACCEL | |
| bool | |
| default y | |
| config CMD_ESBC_VALIDATE | |
| bool "Enable the 'esbc_validate' and 'esbc_halt' commands" | |
| default y if CHAIN_OF_TRUST | |
| help | |
| This option enables two commands used for secure booting: | |
| esbc_validate - validate signature using RSA verification | |
| esbc_halt - put the core in spin loop (Secure Boot Only) |