| Tom Rini | 8807771 | 2017-01-22 19:43:10 -0500 | [diff] [blame] | 1 | config CHAIN_OF_TRUST |
| 2 | depends on !FIT_SIGNATURE && SECURE_BOOT |
| Simon Glass | c04b9b3 | 2017-04-26 22:27:53 -0600 | [diff] [blame] | 3 | imply CMD_BLOB |
| Simon Glass | 551c393 | 2017-05-17 03:25:25 -0600 | [diff] [blame^] | 4 | imply CMD_HASH if ARM |
| Tom Rini | 2852267 | 2017-03-01 16:51:58 -0500 | [diff] [blame] | 5 | select FSL_CAAM |
| Ley Foon Tan | 0680f1b | 2017-05-03 17:13:32 +0800 | [diff] [blame] | 6 | select SPL_BOARD_INIT if (ARM && SPL) |
| Tom Rini | 089df18 | 2017-05-15 12:17:49 -0400 | [diff] [blame] | 7 | select SHA_HW_ACCEL |
| 8 | select SHA_PROG_HW_ACCEL |
| Tom Rini | 8807771 | 2017-01-22 19:43:10 -0500 | [diff] [blame] | 9 | bool |
| 10 | default y |
| Simon Glass | ea7971f | 2017-05-17 03:25:16 -0600 | [diff] [blame] | 11 | |
| 12 | config CMD_ESBC_VALIDATE |
| 13 | bool "Enable the 'esbc_validate' and 'esbc_halt' commands" |
| 14 | default y if CHAIN_OF_TRUST |
| 15 | help |
| 16 | This option enables two commands used for secure booting: |
| 17 | |
| 18 | esbc_validate - validate signature using RSA verification |
| 19 | esbc_halt - put the core in spin loop (Secure Boot Only) |