| Sumit Garg | ebfc066 | 2016-07-14 12:27:53 -0400 | [diff] [blame] | 1 | Overview of SPL verified boot on powerpc/mpc85xx & arm/layerscape platforms |
| 2 | =========================================================================== |
| 3 | |
| 4 | Introduction |
| 5 | ------------ |
| 6 | |
| 7 | This document provides an overview of how SPL verified boot works on powerpc/ |
| 8 | mpc85xx & arm/layerscape platforms. |
| 9 | |
| 10 | Methodology |
| 11 | ----------- |
| 12 | |
| 13 | The SPL image is responsible for loading the next stage boot loader, which is |
| 14 | the main u-boot image. For secure boot process on these platforms ROM verifies |
| 15 | SPL image, so to continue chain of trust SPL image verifies U-boot image using |
| 16 | spl_validate_uboot(). This function uses QorIQ Trust Architecture header |
| 17 | (appended to U-boot image) to validate the U-boot binary just before passing |
| 18 | control to it. |